Function at 0x650a40
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
mov ebx, dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
push esi
push edi
mov edi, dword [ebp + 8]
mov esi, ecx
push edi
push 1
push 4
lea eax, [esi + 0x15c]
push eax
call ebx
push edi
push 1
lea eax, [esi + 0x17c]
push 4
push eax
call ebx
push edi
push 1
lea eax, [esi + 0x180]
push 4
push eax
call ebx
mov eax, dword [esi + 0x1a4]
lea ecx, [esi + 0x1b0]
push edi
push 1
push 2
push ecx
mov dword [ecx], eax
call ebx
mov eax, dword [esi + 0x1a0]
add esp, 0x40
mov ecx, dword [eax]
mov dword [esi + 0x1a8], ecx
cmp ecx, eax
je 0x650b1a
push edi
push 1
lea eax, [ecx + 0x10]
push 2
push eax
call ebx
mov eax, dword [esi + 0x1a8]
push edi
push 1
add eax, 0x14
push 0x10
push eax
call ebx
mov eax, dword [esi + 0x1a8]
add esp, 0x20
mov ecx, dword [eax + 8]
cmp byte [ecx + 0xd], 0
je 0x650af8
mov ecx, dword [eax + 4]
cmp byte [ecx + 0xd], 0
jne 0x650b0c
nop dword [eax]
cmp eax, dword [ecx + 8]
jne 0x650b0c
mov dword [esi + 0x1a8], ecx
mov eax, ecx
mov ecx, dword [ecx + 4]
cmp byte [ecx + 0xd], 0
je 0x650ae0
jmp 0x650b0c
mov edx, dword [ecx]
cmp byte [edx + 0xd], 0
jne 0x650b0c
mov eax, dword [edx]
mov ecx, edx
mov edx, eax
cmp byte [eax + 0xd], 0
je 0x650b00
mov dword [esi + 0x1a8], ecx
cmp ecx, dword [esi + 0x1a0]
jne 0x650aa6
mov eax, dword [esi + 0x18c]
lea ecx, [esi + 0x198]
push edi
push 1
push 2
push ecx
mov dword [ecx], eax
call ebx
mov ecx, dword [esi + 0x188]
add esp, 0x10
mov eax, dword [ecx]
mov dword [esi + 0x190], eax
cmp eax, ecx
je 0x650bba
push edi
push 1
add eax, 0x10
push 2
push eax
call ebx
mov eax, dword [esi + 0x190]
push edi
push 1
add eax, 0x14
push 0xc
push eax
call ebx
mov ecx, dword [esi + 0x190]
add esp, 0x20
mov eax, dword [ecx + 8]
cmp byte [eax + 0xd], 0
je 0x650b98
mov eax, dword [ecx + 4]
cmp byte [eax + 0xd], 0
jne 0x650bac
nop dword [eax]
cmp ecx, dword [eax + 8]
jne 0x650bac
mov dword [esi + 0x190], eax
mov ecx, eax
mov eax, dword [eax + 4]
cmp byte [eax + 0xd], 0
je 0x650b80
jmp 0x650bac
mov edx, dword [eax]
cmp byte [edx + 0xd], 0
jne 0x650bac
mov ecx, dword [edx]
mov eax, edx
mov edx, ecx
cmp byte [ecx + 0xd], 0
je 0x650ba0
mov dword [esi + 0x190], eax
cmp eax, dword [esi + 0x188]
jne 0x650b45
push edi
push 1
lea eax, [esi + 0x1d4]
push 4
push eax
call ebx
mov eax, dword [esi + 0x1bc]
lea ecx, [esi + 0x1c8]
push edi
push 1
push 2
push ecx
mov dword [ecx], eax
call ebx
mov eax, dword [esi + 0x1b8]
add esp, 0x20
mov ecx, dword [eax]
mov dword [esi + 0x1c0], ecx
cmp ecx, eax
je 0x650c6a
push edi
push 1
lea eax, [ecx + 0x10]
push 2
push eax
call ebx
mov eax, dword [esi + 0x1c0]
push edi
push 1
add eax, 0x14
push 4
push eax
call ebx
mov eax, dword [esi + 0x1c0]
add esp, 0x20
mov ecx, dword [eax + 8]
cmp byte [ecx + 0xd], 0
je 0x650c48
mov ecx, dword [eax + 4]
cmp byte [ecx + 0xd], 0
jne 0x650c5c
nop word [eax + eax]
cmp eax, dword [ecx + 8]
jne 0x650c5c
mov dword [esi + 0x1c0], ecx
mov eax, ecx
mov ecx, dword [ecx + 4]
cmp byte [ecx + 0xd], 0
je 0x650c30
jmp 0x650c5c
mov edx, dword [ecx]
cmp byte [edx + 0xd], 0
jne 0x650c5c
mov eax, dword [edx]
mov ecx, edx
mov edx, eax
cmp byte [eax + 0xd], 0
je 0x650c50
mov dword [esi + 0x1c0], ecx
cmp ecx, dword [esi + 0x1b8]
jne 0x650bf3
push edi
lea ecx, [esi + 0x208]
call fcn.0064ef80
push edi
lea ecx, [esi + 0x238]
call fcn.0064ef80
push edi
lea ecx, [esi + 0x220]
call fcn.0064ef80
push edi
lea ecx, [esi + 0x250]
call fcn.0064ef80
push edi
lea ecx, [esi + 0x298]
call fcn.0064ef80
push edi
lea ecx, [esi + 0x2b0]
call fcn.0064ef80
push edi
lea ecx, [esi + 0x268]
call fcn.0064ef80
push edi
lea ecx, [esi + 0x280]
call fcn.0064ef80
push edi
lea ecx, [esi + 0x2c8]
call fcn.0064ef80
pop edi
pop esi
pop ebx
pop ebp
ret 8