Function at 0x652484d2
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc8
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x14], 1
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x28]
and eax, 0x1000c10
test eax, eax
sete al
movzx eax, al
mov dword [ebp - 0x1c], eax
cmp dword [ebp + 0x38], 0
jne 0x65248520
lea eax, [ebp - 0x2c]
mov dword [ebp + 0x38], eax
cmp dword [ebp + 0x3c], 0
jne 0x6524852c
lea eax, [ebp - 0x28]
mov dword [ebp + 0x3c], eax
mov eax, dword [ebp - 0x10]
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call sym.libmagic_1.dll_file_check_mem
cmp eax, 0xffffffff
jne 0x6524854d
mov eax, 0xffffffff
jmp 0x65248d89
mov dword [ebp - 0xc], 0
jmp 0x65248d78
mov dword [ebp - 0x18], 0
mov eax, dword [ebp - 0xc]
imul edx, eax, 0x178
mov eax, dword [ebp + 0xc]
add eax, edx
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
movzx eax, byte [eax + 6]
cmp al, 0x2d
je 0x65248660
mov eax, dword [ebp - 0x20]
movzx eax, byte [eax + 6]
cmp al, 5
je 0x652485e3
mov eax, dword [ebp - 0x20]
movzx eax, byte [eax + 6]
cmp al, 0xd
je 0x652485e3
mov eax, dword [ebp - 0x20]
movzx eax, byte [eax + 6]
cmp al, 0x12
je 0x652485e3
mov eax, dword [ebp - 0x20]
movzx eax, byte [eax + 6]
cmp al, 0x13
je 0x652485e3
mov eax, dword [ebp - 0x20]
movzx eax, byte [eax + 6]
cmp al, 0x11
je 0x652485e3
mov eax, dword [ebp - 0x20]
movzx eax, byte [eax + 6]
cmp al, 0x14
je 0x652485e3
mov eax, dword [ebp - 0x20]
movzx eax, byte [eax + 6]
cmp al, 0x29
je 0x652485e3
mov eax, dword [ebp - 0x20]
movzx eax, byte [eax + 6]
cmp al, 0x2d
je 0x652485e3
mov eax, dword [ebp - 0x20]
movzx eax, byte [eax + 6]
cmp al, 0x2e
jne 0x6524860b
cmp dword [ebp + 0x20], 0
je 0x652485f7
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x1c]
and eax, 0x60
cmp eax, 0x40
je 0x6524861d
cmp dword [ebp + 0x20], 0
jne 0x6524860b
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x1c]
and eax, 0x60
cmp eax, 0x20
je 0x6524861d
mov eax, dword [ebp - 0x20]
movzx eax, byte [eax + 2]
movzx eax, al
and eax, dword [ebp + 0x1c]
cmp dword [ebp + 0x1c], eax
je 0x65248660
nop
jmp 0x65248630
nop
jmp 0x65248630
nop
jmp 0x65248630
nop
jmp 0x65248630
nop
jmp 0x65248630
add dword [ebp - 0xc], 1
mov eax, dword [ebp + 0x10]
sub eax, 1
cmp dword [ebp - 0xc], eax
jae 0x65248654
mov eax, dword [ebp - 0xc]
add eax, 1
imul edx, eax, 0x178
mov eax, dword [ebp + 0xc]
add eax, edx
movzx eax, word [eax]
test ax, ax
jne 0x6524862c
mov dword [ebp - 0x10], 0
jmp 0x65248d74
mov eax, dword [ebp - 0x10]
mov dword [esp + 0x14], eax
mov eax, dword [ebp + 0x18]
mov dword [esp + 0x10], eax
mov eax, dword [ebp + 0x14]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x80]
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x20]
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call sym._msetoffset
cmp eax, 0xffffffff
je 0x65248620
mov eax, dword [ebp - 0x20]
mov edx, dword [eax + 0x14]
mov eax, dword [ebp + 8]
mov dword [eax + 0x34], edx
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp + 0x3c]
mov dword [esp + 0x3c], ecx
mov ecx, dword [ebp + 0x38]
mov dword [esp + 0x38], ecx
mov ecx, dword [ebp + 0x34]
mov dword [esp + 0x34], ecx
mov ecx, dword [ebp + 0x30]
mov dword [esp + 0x30], ecx
mov ecx, dword [ebp + 0x2c]
mov dword [esp + 0x2c], ecx
mov ecx, dword [ebp + 0x28]
mov dword [esp + 0x28], ecx
mov ecx, dword [ebp + 0x24]
mov dword [esp + 0x24], ecx
mov ecx, dword [ebp + 0x20]
mov dword [esp + 0x20], ecx
mov ecx, dword [ebp + 0x1c]
mov dword [esp + 0x1c], ecx
mov ecx, dword [ebp - 0x10]
mov dword [esp + 0x18], ecx
mov ecx, dword [ebp + 0x18]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], eax
mov eax, dword [ebp + 0x14]
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x20]
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call sym._mget
cmp eax, 0xffffffff
je 0x6524871e
test eax, eax
je 0x65248728
jmp 0x6524873c
mov eax, 0xffffffff
jmp 0x65248d89
mov eax, dword [ebp - 0x20]
movzx eax, byte [eax + 4]
cmp al, 0x21
setne al
movzx eax, al
mov dword [ebp - 0x18], eax
jmp 0x6524878f
mov eax, dword [ebp - 0x20]
movzx eax, byte [eax + 6]
cmp al, 0x29
jne 0x65248759
mov eax, dword [ebp + 0x3c]
mov dword [eax], 1
mov eax, dword [ebp + 0x38]
mov dword [eax], 1
mov eax, dword [ebp - 0x20]
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call sym._magiccheck
cmp eax, 0xffffffff
je 0x65248776
test eax, eax
je 0x65248780
jmp 0x65248786
mov eax, 0xffffffff
jmp 0x65248d89
add dword [ebp - 0x18], 1
jmp 0x6524878e
mov dword [ebp - 0x18], 0
nop
nop
cmp dword [ebp - 0x18], 0
jne 0x65248623
mov eax, dword [ebp - 0x14]
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x20]
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call sym._handle_annotation
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
je 0x652487e7
mov eax, dword [ebp + 0x3c]
mov dword [eax], 1
mov eax, dword [ebp + 0x34]
mov dword [eax], 1
mov eax, dword [ebp + 0x30]
mov dword [eax], 1
mov eax, dword [ebp + 0x38]
mov dword [eax], 1
mov eax, dword [ebp - 0x24]
jmp 0x65248d89
mov eax, dword [ebp - 0x20]
movzx eax, byte [eax + 0xa0]
test al, al
je 0x65248861
mov eax, dword [ebp + 0x3c]
mov dword [eax], 1
cmp dword [ebp - 0x1c], 0
je 0x65248861
mov eax, dword [ebp + 0x38]
mov dword [eax], 1
mov eax, dword [ebp + 0x34]
mov dword [eax], 1
mov eax, dword [ebp + 0x30]
mov dword [eax], 1
mov eax, dword [ebp - 0x14]
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call sym._print_sep
cmp eax, 0xffffffff
jne 0x65248840
mov eax, 0xffffffff
jmp 0x65248d89
mov eax, dword [ebp - 0x20]
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call sym._mprint
cmp eax, 0xffffffff
jne 0x65248861
mov eax, 0xffffffff
jmp 0x65248d89
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 0x10]
shl edx, 4
add eax, edx
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x80]
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x20]
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call sym._moffset
add eax, 1
cmp eax, 1
jbe 0x65248626
nop
add dword [ebp - 0x10], 1
mov eax, dword [ebp - 0x10]
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call sym.libmagic_1.dll_file_check_mem
cmp eax, 0xffffffff
jne 0x65248d08
mov eax, 0xffffffff
jmp 0x65248d89
add dword [ebp - 0xc], 1
mov eax, dword [ebp - 0xc]
imul edx, eax, 0x178
mov eax, dword [ebp + 0xc]
add eax, edx
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov edx, dword [eax + 0x14]
mov eax, dword [ebp + 8]
mov dword [eax + 0x34], edx
mov eax, dword [ebp - 0x20]
movzx eax, word [eax]
movzx eax, ax
cmp dword [ebp - 0x10], eax
jae 0x652488f6
jmp 0x65248d08
mov eax, dword [ebp - 0x20]
movzx eax, word [eax]
movzx eax, ax
cmp dword [ebp - 0x10], eax
jbe 0x65248910
mov eax, dword [ebp - 0x20]
movzx eax, word [eax]
movzx eax, ax
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
mov dword [esp + 0x14], eax
mov eax, dword [ebp + 0x18]
mov dword [esp + 0x10], eax
mov eax, dword [ebp + 0x14]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x80]
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x20]
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call sym._msetoffset
cmp eax, 0xffffffff
je 0x65248629
mov eax, dword [ebp - 0x20]
movzx eax, byte [eax + 2]
movzx eax, al
and eax, 2
test eax, eax
je 0x652489c7
cmp dword [ebp - 0x10], 0
jne 0x652489a3
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x28]
and eax, 1
test eax, eax
je 0x65248999
mov dword [esp], 2
mov eax, dword [dbg.__acrt_iob_func]
call eax
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x19
mov dword [esp + 4], 1
mov dword [esp], str.direct_zero_cont_level_n
call sym._fwrite
mov eax, 0
jmp 0x65248d89
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x1c]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0xc]
mov ecx, dword [ebp - 0x10]
add ecx, 0xfffffff
shl ecx, 4
add eax, ecx
mov eax, dword [eax]
add edx, eax
mov eax, dword [ebp + 8]
mov dword [eax + 0x1c], edx
mov eax, dword [ebp - 0x20]
movzx eax, byte [eax + 0xa]
cmp al, 3
je 0x652489dd
mov eax, dword [ebp - 0x20]
movzx eax, byte [eax + 0xa]
cmp al, 2
jne 0x652489f8
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 0x10]
shl edx, 4
add eax, edx
mov eax, dword [eax + 8]
cmp eax, 1
jne 0x652489f8
jmp 0x65248d08
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp + 0x3c]
mov dword [esp + 0x3c], ecx
mov ecx, dword [ebp + 0x38]
mov dword [esp + 0x38], ecx
mov ecx, dword [ebp + 0x34]
mov dword [esp + 0x34], ecx
mov ecx, dword [ebp + 0x30]
mov dword [esp + 0x30], ecx
mov ecx, dword [ebp + 0x2c]
mov dword [esp + 0x2c], ecx
mov ecx, dword [ebp + 0x28]
mov dword [esp + 0x28], ecx
mov ecx, dword [ebp + 0x24]
mov dword [esp + 0x24], ecx
mov ecx, dword [ebp + 0x20]
mov dword [esp + 0x20], ecx
mov ecx, dword [ebp + 0x1c]
mov dword [esp + 0x1c], ecx
mov ecx, dword [ebp - 0x10]
mov dword [esp + 0x18], ecx
mov ecx, dword [ebp + 0x18]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], eax
mov eax, dword [ebp + 0x14]
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x20]
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call sym._mget
cmp eax, 0xffffffff
je 0x65248a77
test eax, eax
je 0x65248a81
jmp 0x65248a9a
mov eax, 0xffffffff
jmp 0x65248d89
mov eax, dword [ebp - 0x20]
movzx eax, byte [eax + 4]
cmp al, 0x21
je 0x65248a91
jmp 0x65248d08
mov dword [ebp - 0x18], 1
jmp 0x65248abf
mov eax, dword [ebp - 0x20]
movzx eax, byte [eax + 6]
cmp al, 0x29
jne 0x65248ab7
mov eax, dword [ebp + 0x3c]
mov dword [eax], 1
mov eax, dword [ebp + 0x38]
mov dword [eax], 1
mov dword [ebp - 0x18], 0
nop
cmp dword [ebp - 0x18], 0
jne 0x65248ad9
mov eax, dword [ebp - 0x20]
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call sym._magiccheck
jmp 0x65248ade
mov eax, 1
cmp eax, 0xffffffff
je 0x65248ae9
test eax, eax
je 0x65248af3
jmp 0x65248b0d
mov eax, 0xffffffff
jmp 0x65248d89
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 0x10]
shl edx, 4
add eax, edx
mov dword [eax + 8], 0
jmp 0x65248d08
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 0x10]
shl edx, 4
add eax, edx
mov dword [eax + 8], 1
mov eax, dword [ebp - 0x20]
movzx eax, byte [eax + 6]
cmp al, 0x2f
jne 0x65248b44
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 0x10]
shl edx, 4
add eax, edx
mov dword [eax + 4], 0
jmp 0x65248b7e
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 0x10]
shl edx, 4
add eax, edx
mov eax, dword [eax + 4]
test eax, eax
je 0x65248b69
mov eax, dword [ebp - 0x20]
movzx eax, byte [eax + 6]
cmp al, 3
jne 0x65248b7e
jmp 0x65248d08
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 0x10]
shl edx, 4
add eax, edx
mov dword [eax + 4], 1
mov eax, dword [ebp - 0x14]
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x20]
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call sym._handle_annotation
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
je 0x65248bcc
mov eax, dword [ebp + 0x3c]
mov dword [eax], 1
mov eax, dword [ebp + 0x34]
mov dword [eax], 1
mov eax, dword [ebp + 0x30]
mov dword [eax], 1
mov eax, dword [ebp + 0x38]
mov dword [eax], 1
mov eax, dword [ebp - 0x24]
jmp 0x65248d89
mov eax, dword [ebp - 0x20]
movzx eax, byte [eax + 0xa0]
test al, al
je 0x65248be3
mov eax, dword [ebp + 0x3c]
mov dword [eax], 1
cmp dword [ebp - 0x1c], 0
je 0x65248ca1
mov eax, dword [ebp - 0x20]
movzx eax, byte [eax + 0xa0]
test al, al
je 0x65248ca1
mov eax, dword [ebp + 0x38]
mov dword [eax], 1
mov eax, dword [ebp + 0x30]
mov eax, dword [eax]
test eax, eax
jne 0x65248c3b
mov eax, dword [ebp + 0x30]
mov dword [eax], 1
mov eax, dword [ebp - 0x14]
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call sym._print_sep
cmp eax, 0xffffffff
jne 0x65248c3b
mov eax, 0xffffffff
jmp 0x65248d89
mov eax, dword [ebp + 0x34]
mov eax, dword [eax]
test eax, eax
je 0x65248c77
mov eax, dword [ebp - 0x20]
movzx eax, byte [eax + 2]
movzx eax, al
and eax, 0x10
test eax, eax
jne 0x65248c77
mov dword [esp + 4], 0x6526910c
mov eax, dword [ebp + 8]
mov dword [esp], eax
call sym.libmagic_1.dll_file_printf
cmp eax, 0xffffffff
jne 0x65248c77
mov eax, 0xffffffff
jmp 0x65248d89
mov eax, dword [ebp - 0x20]
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call sym._mprint
cmp eax, 0xffffffff
jne 0x65248c98
mov eax, 0xffffffff
jmp 0x65248d89
mov eax, dword [ebp + 0x34]
mov dword [eax], 1
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 0x10]
shl edx, 4
add eax, edx
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x80]
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x20]
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call sym._moffset
add eax, 1
cmp eax, 1
ja 0x65248ce1
mov dword [ebp - 0x18], 1
sub dword [ebp - 0x10], 1
jmp 0x65248ce2
nop
add dword [ebp - 0x10], 1
mov eax, dword [ebp - 0x10]
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call sym.libmagic_1.dll_file_check_mem
cmp eax, 0xffffffff
jne 0x65248d07
mov eax, 0xffffffff
jmp 0x65248d89
nop
mov eax, dword [ebp - 0xc]
add eax, 1
cmp dword [ebp + 0x10], eax
jbe 0x65248d30
mov eax, dword [ebp - 0xc]
add eax, 1
imul edx, eax, 0x178
mov eax, dword [ebp + 0xc]
add eax, edx
movzx eax, word [eax]
test ax, ax
jne 0x652488c2
mov eax, dword [ebp + 0x30]
mov eax, dword [eax]
test eax, eax
je 0x65248d40
mov dword [ebp - 0x14], 0
mov eax, dword [ebp + 0x3c]
mov eax, dword [eax]
test eax, eax
je 0x65248d6d
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x28]
and eax, 0x20
test eax, eax
jne 0x65248d5d
mov eax, dword [ebp + 0x38]
mov eax, dword [eax]
jmp 0x65248d89
mov eax, dword [ebp + 0x30]
mov dword [eax], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x10], 0
add dword [ebp - 0xc], 1
mov eax, dword [ebp - 0xc]
cmp eax, dword [ebp + 0x10]
jb 0x65248559
mov eax, dword [ebp + 0x38]
mov eax, dword [eax]
leave
ret