Function at 0x1000f140
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xa8
mov eax, dword [0x1007e274]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x64], 0xffffffff
mov eax, dword [ebp - 0x64]
cmp eax, dword [ebp + 8]
jne 0x1000f16e
mov dword [ebp - 0x4c], 1
jmp 0x1000f175
mov dword [ebp - 0x4c], 0
mov cl, byte [ebp - 0x4c]
mov byte [ebp - 0x35], cl
movzx edx, byte [ebp - 0x35]
test edx, edx
je 0x1000f1d1
mov dword [ebp - 0x9c], 0xffffffff
mov eax, dword [ebp + 8]
cmp eax, dword [ebp - 0x9c]
je 0x1000f1a0
mov ecx, dword [ebp + 8]
mov dword [ebp - 0x54], ecx
jmp 0x1000f1c3
mov dword [ebp - 0x68], 0xffffffff
cmp dword [ebp - 0x68], 0
jne 0x1000f1b6
mov dword [ebp - 0x50], 1
jmp 0x1000f1bd
mov dword [ebp - 0x50], 0
mov edx, dword [ebp - 0x50]
mov dword [ebp - 0x54], edx
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x6c]
jmp 0x1000f417
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ecx + 0x20]
mov eax, dword [edx]
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
je 0x1000f249
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ecx + 0x20]
mov eax, dword [edx]
mov dword [ebp - 0x74], eax
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ecx + 0x30]
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax + 0x20]
mov eax, dword [ecx]
add eax, dword [edx]
cmp dword [ebp - 0x74], eax
jae 0x1000f249
mov cl, byte [ebp + 8]
mov byte [ebp - 0x2f], cl
mov edx, dword [ebp - 0x2c]
mov eax, dword [edx + 0x30]
mov ecx, dword [eax]
sub ecx, 1
mov edx, dword [ebp - 0x2c]
mov eax, dword [edx + 0x30]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ecx + 0x20]
mov eax, dword [edx]
mov dword [ebp - 0x78], eax
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ecx + 0x20]
mov eax, dword [edx]
add eax, 1
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ecx + 0x20]
mov dword [edx], eax
mov eax, dword [ebp - 0x78]
mov cl, byte [ebp - 0x2f]
mov byte [eax], cl
mov eax, dword [ebp + 8]
jmp 0x1000f417
mov edx, dword [ebp - 0x2c]
cmp dword [edx + 0x4c], 0
jne 0x1000f261
mov dword [ebp - 0x7c], 0xffffffff
mov eax, dword [ebp - 0x7c]
jmp 0x1000f417
mov ecx, dword [ebp - 0x2c]
call fcn.1000d260
mov eax, dword [ebp - 0x2c]
cmp dword [eax + 0x38], 0
jne 0x1000f2cf
mov cl, byte [ebp + 8]
mov byte [ebp - 0x30], cl
mov edx, dword [ebp - 0x2c]
mov eax, dword [edx + 0x4c]
mov dword [ebp - 0x80], eax
mov ecx, dword [ebp - 0x80]
push ecx
movsx edx, byte [ebp - 0x30]
push edx
call fcn.10049192
add esp, 8
cmp eax, 0xffffffff
je 0x1000f2a0
mov dword [ebp - 0x58], 1
jmp 0x1000f2a7
mov dword [ebp - 0x58], 0
movzx eax, byte [ebp - 0x58]
test eax, eax
je 0x1000f2b7
mov ecx, dword [ebp + 8]
mov dword [ebp - 0x3c], ecx
jmp 0x1000f2c7
mov edx, dword [ebp - 0xa0]
mov dword [ebp - 0x3c], edx
mov dword [ebp - 0x3c], 0xffffffff
mov eax, dword [ebp - 0x3c]
jmp 0x1000f417
mov dword [ebp - 0xa4], 0x20
mov al, byte [ebp + 8]
mov byte [ebp - 0x2e], al
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ecx + 0x38]
mov dword [ebp - 0x5c], edx
lea eax, [ebp - 0x84]
push eax
lea ecx, [ebp - 8]
push ecx
lea edx, [ebp - 0x28]
push edx
lea eax, [ebp - 0x8c]
push eax
lea ecx, [ebp - 0x2d]
push ecx
lea edx, [ebp - 0x2e]
push edx
mov eax, dword [ebp - 0x2c]
add eax, 0x40
push eax
mov ecx, dword [ebp - 0x5c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x5c]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jl 0x1000f407
cmp dword [ebp - 0x40], 1
jle 0x1000f338
cmp dword [ebp - 0x40], 3
je 0x1000f3a7
jmp 0x1000f407
mov ecx, dword [ebp - 0x84]
lea edx, [ebp - 0x28]
sub ecx, edx
mov dword [ebp - 0x44], ecx
je 0x1000f37b
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax + 0x4c]
push ecx
mov edx, dword [ebp - 0x44]
push edx
push 1
lea eax, [ebp - 0x28]
push eax
call fcn.10049ae7
add esp, 0x10
cmp dword [ebp - 0x44], eax
je 0x1000f37b
mov dword [ebp - 0x88], 0xffffffff
mov eax, dword [ebp - 0x88]
jmp 0x1000f417
mov ecx, dword [ebp - 0x2c]
mov byte [ecx + 0x3d], 1
lea edx, [ebp - 0x2e]
cmp dword [ebp - 0x8c], edx
je 0x1000f395
mov eax, dword [ebp + 8]
jmp 0x1000f417
mov dword [ebp - 0x90], 0xffffffff
mov eax, dword [ebp - 0x90]
jmp 0x1000f417
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax + 0x4c]
mov dword [ebp - 0x94], ecx
mov dl, byte [ebp - 0x2e]
mov byte [ebp - 0x34], dl
mov eax, dword [ebp - 0x94]
push eax
movsx ecx, byte [ebp - 0x34]
push ecx
call fcn.10049192
add esp, 8
cmp eax, 0xffffffff
je 0x1000f3db
mov dword [ebp - 0x60], 1
jmp 0x1000f3e2
mov dword [ebp - 0x60], 0
movzx edx, byte [ebp - 0x60]
test edx, edx
je 0x1000f3f2
mov eax, dword [ebp + 8]
mov dword [ebp - 0x48], eax
jmp 0x1000f402
mov ecx, dword [ebp - 0xa8]
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x48], 0xffffffff
mov eax, dword [ebp - 0x48]
jmp 0x1000f417
mov dword [ebp - 0x98], 0xffffffff
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100410a2
mov esp, ebp
pop ebp
ret 4