Function at 0xf005c8
Capabilities:
Write file on windows

Disassembly:
add esp, 0x10
push edi
jmp 0xf00877
jmp 0xf039d0
lea esi, [esi + 0x4f6b7c]
jmp 0xf00ab6
pop ecx
pop ecx
lea edi, [ebp - 0x80]
jmp 0xf016c0
push dword [esi + 0x4f6b7c]
push ebx
call fcn.00498bd0
jmp 0xf00961
push ebp
lea ebp, [esp - 0x8c]
jmp 0xf005d4
sub esp, 0x10c
jmp 0xf01a2e
push 0xfffffffffffffff4
jmp 0xf00bef
push edi
push ebx
call fcn.00498bd0
jmp 0xf0069e
push ecx
pushf
push eax
mov eax, 0x40ed52
xor eax, dword [esp + 0x28]
or eax, 0x5d
xor eax, dword [esp + 8]
jmp 0xf006b7
sbb eax, 0x256d9a28
lea eax, [esp + ebp + 1]
sub eax, ebp
bnd jmp 0xf006c7
lea eax, [eax - 1]
jmp 0xf006ce
lea eax, [eax + 6]
jmp 0xf006d6
push edx
lea edx, [ebx + ecx + 6]
lea edx, [edi + 0x4dbdb8]
sub edx, edi
jmp 0xf006e9
push edx
pop dword [eax]
pop edx
pop eax
popf
jmp 0xf00a24
push 0x4853ea
pushf
push ecx
sbb ecx, ebp
bnd jmp 0xf00703
lea ecx, [ebp + esi + 0x27]
sub ecx, 0x27
jmp 0xf0070e
lea ecx, [esp + 5]
lea ecx, [ecx - 5]
jmp 0xf00719
lea ecx, [ecx + edx + 6]
sub ecx, edx
jmp 0xf00723
jmp 0xf00727
push dword fs:[0]
push eax
rcr eax, 0xf1
mov eax, 0x4a2cda
mov eax, 0x49544a
or eax, 0x61
jmp 0xf00743
jmp 0xf00748
xor eax, edi
lea eax, [esp + ebp + 0x17]
sub eax, ebp
jmp 0xf00753
jmp 0xf00758
lea eax, [eax + ebp - 0x17]
sub eax, ebp
add eax, 4
bnd jmp 0xf00765
jmp 0xf0076a
push ecx
push edx
sbb edx, 0xffffff8b
add edx, dword [esp + 0x38]
mov edx, esp
jmp 0xf00779
lea edx, [edx + ecx + 4]
sub edx, ecx
push esi
push ebx
and ebx, edi
mov ebx, esp
add ebx, 4
jmp 0xf0078c
push 0x4dbdbc
jmp 0xf00794
pop dword [ebx]
pop ebx
pop dword [edx]
pop edx
jmp 0xf0079d
pop dword [eax]
pop eax
pop dword [ecx]
pop ecx
jmp 0xf007a7
popf
push ebx
call fcn.00498bc0
jmp 0xf005e6
call fcn.00498cc0
jmp 0xf00e36
add esp, 0x2c
jmp 0xf00bfc
jmp 0xf00964
push dword [esp + 0x20]
jmp 0xf0096d
pushf
push eax
xor eax, dword [esp + 8]
ror eax, 0x45
jmp 0xf0097b
jmp 0xf00980
add eax, ebx
lea eax, [esp + 0x1c]
lea eax, [eax - 0x1c]
lea eax, [eax + 6]
jmp 0xf0098f
push ecx
jmp 0xf00993
mov ecx, 0x426cc2
rol ecx, 0xdd
notrack jmp 0xf009a0
xor ecx, 0xdc03011a
lea ecx, [edx + edi + 0x12010]
sub ecx, edi
sub ecx, edx
push ecx
pop dword [eax]
pop ecx
pop eax
popf
jmp 0xf00eea
xor eax, eax
cmp ecx, dword [eax*8 + 0x4f6b78]
je 0xf019a9
inc eax
jmp 0xf019a0
push ebx
call fcn.00498bd0
jmp 0xf005b6
add edi, 0xf1639c50
push eax
add edi, dword [esp + 0x38]
add edi, dword [esp + 0x18]
pop edi
lea eax, [ebp - 0x80]
jmp 0xf00a4f
lea eax, [eax - 0x3b]
push 3
add edi, eax
jmp 0xf0125f
inc eax
jmp 0xf01b65
lea eax, [ebx + eax + 0x1c]
jmp 0xf01ad5
push dword [esi]
call fcn.00498cc0
jmp 0xf01c12
pop edi
pop esi
jmp 0xf01a74
push edx
lea eax, [ebp + 0x94]
push eax
jmp 0xf0054d
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
lea esp, [ebp - 0x8c]
mov ecx, dword [ebp + 0x88]
call fcn.00498784
jmp 0xf00bc8
test eax, eax
jne 0xf00582
jmp 0xf0110d
push dword [esi + 0x4f6b7c]
adc ebx, edi
push eax
add ebx, dword [esp + 0x38]
rcl ebx, 0x33
pop ebx
call fcn.00498cc0
jmp 0xf00a90
cmp ecx, dword [esi + 0x4f6b78]
jmp 0xf03a40
push 0x58
pushf
push ebx
or ebx, 0xa96901b0
mov ebx, esp
lea ebx, [ebx + 6]
notrack jmp 0xf00eff
jmp 0xf00f03
push dword fs:[0]
push ebx
adc ebx, edi
mov ebx, esp
bnd jmp 0xf00f13
jmp 0xf00f18
lea ebx, [ebx + edi + 4]
sub ebx, edi
mov dword [ebx], 0x4dbd90
pop ebx
pop dword [ebx]
pop ebx
popf
push ebx
call fcn.004a7715
jmp 0xf008f9
push dword [esi]
jmp 0xf005df
mov dword [ebp + 0x88], eax
xor edx, edx
push edi
jmp 0xf009e9
call fcn.0049a270
jmp 0xf01c19
mov byte [ebp + 0x84], dl
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
jmp 0xf00c12
jmp 0xf03a85
lea eax, [ebp - 0x80]
jmp 0xf0163f
push 0xffffffffffffffe4
jmp 0xf01264
pushf
push ebp
adc ebp, ecx
mov ebp, esp
lea ebp, [ebp + ebx + 0x32]
push eax
push ecx
jmp 0xf01275
push ebx
adc eax, 0x61aff3bc
push 0x5d
sub eax, 0xffffffe9
xor eax, dword [esp + 0x28]
pop eax
lea ebx, [ecx + edx + 5]
push ecx
mov ecx, 0xbe0009ff
rol ecx, 0xd9
add ecx, 0xffffffec
ror ecx, 0x51
not ecx
add ebx, ecx
pop ecx
sub ebx, edx
or ebx, ecx
add ebx, ecx
lea ebx, [eax + ebp + 0x2e]
sub ebx, ebp
lea ebx, [ebx + ecx - 0x44]
jmp 0xf012b5
push esi
push eax
push edi
xor eax, edi
mov eax, 0xc46358a9
lea edi, [ebp + esi - 0x3cda8bd6]
push eax
push ecx
push 0xb70ce2a8
pop eax
or ecx, edi
or ecx, edi
lea ecx, [eax + 0x37]
jmp 0xf012d9
lea ecx, [ecx + edx - 0x11]
jmp 0xf012e1
push edx
jmp 0xf012e7
lea edx, [ecx + edx + 0x79]
jmp 0xf012f0
add edx, 0x756a074a
jmp 0xf012f9
rcl edx, 0x75
mov edx, 0x467362
lea edx, [ebp + esi + 0x819ac87]
sub edx, esi
jmp 0xf0130f
sub edx, ebp
rol edx, 0x6d
not edx
add edx, 0x1f
not edx
xor edx, 0x3590e0c3
dec edx
sub ecx, edx
ror edx, 0x7b
jmp 0xf0132b
mov edx, dword [esp + 0x30]
pop edx
sub ecx, edx
add ecx, 3
add ecx, 0xbd5beeb
dec ecx
xchg ecx, eax
sub eax, 0xffffff93
sub edi, eax
pop ecx
pop eax
sub edi, esi
jmp 0xf0134b
jmp 0xf01350
sbb edi, 0xcf18539
lea edi, [eax + 0x4a]
push esi
push eax
push edx
mov edx, 0x44a356
add edx, dword [esp + 0x38]
add edx, dword [esp + 0x38]
sub edx, 0xffffff9b
jmp 0xf01371
lea edx, [esi - 0x3775881c]
sub edx, esi
sub edx, 0x3dc2e53b
push edx
rol eax, 0x5d
xor eax, dword [esp + 8]
pop eax
sub eax, 0x890f92a9
rcl esi, 0x2b
mov esi, 0x477c0e
jmp 0xf0139b
jmp 0xf0139f
sbb esi, eax
lea esi, [eax + 0x71]
push edx
push ecx
push ebx
sub edx, 0xffffffd7
jmp 0xf013ae
mov edx, dword [esp + 0x10]
bnd jmp 0xf013b6
push 0x32ea4a34
mov edx, 0x4a191a
xor edx, dword [esp + 8]
pop edx
xchg edx, ebx
sub ebx, 0x2c9b3fad
dec ebx
xchg ebx, ecx
xor ecx, 0xffffff9b
xchg ecx, edx
sub edx, 0xf9b0f513
dec edx
sub esi, edx
lea ebx, [ebx + ecx*2 + 0x17]
jmp 0xf013e6
sub ebx, 0x17
pop ebx
sbb ecx, 0xffffffa7
add ecx, dword [esp + 0x18]
pop ecx
jmp 0xf013f7
xor edx, esi
pop edx
sub esi, 0x68
rol esi, 0x6d
xchg esi, edx
sub edi, edx
add edx, dword [esp + 0x38]
add edx, dword [esp + 0x18]
pop edx
sub eax, ebp
pop eax
xor esi, dword [esp + 0x28]
xor esi, dword [esp + 8]
pop esi
jmp 0xf0141e
lea edi, [edi - 0x13]
sub edi, 0xffffffc8
xchg edi, eax
rol eax, 0x87
not eax
push eax
and esi, 0xd9216b1c
pop esi
xor esi, 0x31ac70f7
neg esi
jmp 0xf01440
lea eax, [esi + ebx + 0x10434ede]
push ecx
push ebx
push ebp
mov ecx, 0x2e6f1f4
or ebp, ebx
mov ebp, ecx
sub ebp, 4
push ebp
sub ebx, 0xca02d52c
pop ebx
rol ebx, 0x98
push ebx
xor ecx, 0xee015ad6
pop ecx
sub ecx, 0x3e
not ecx
sub eax, ecx
pop ebp
pop ebx
pop ecx
jmp 0xf01477
mov eax, 0x42447a
mov eax, 0x46a3f2
lea eax, [esi + 0x16]
push esi
push edi
push edx
adc edx, 0xaba82f64
jmp 0xf01491
mov edx, 0xc9b7d8db
add edx, 0xffffffbc
not edx
push edx
and edi, 0xa4486b96
pop edi
xor edi, 0x364f2769
dec edi
lea esi, [edi + eax*2 + 0x4e]
lea esi, [esi - 0x4e]
sbb esi, 0x5e1a108a
jmp 0xf014bc
lea esi, [edx + edi*2 + 0x3f]
push ecx
push ebx
lea ecx, [edx - 0x53912cfe]
sub ecx, edx
sbb ebx, 0x6d30e81a
push ecx
mov ebx, 0x49a812
jmp 0xf014db
mov ebx, 0x47d018
pop ebx
xor ebx, 0xffffffce
sub ebx, 0x6a1740dd
dec ebx
xchg ebx, ecx
add ecx, 0x16861425
sub esi, ecx
pop ebx
jmp 0xf014fb
pop ecx
lea esi, [esi + eax - 0x2c]
sub esi, eax
lea esi, [edi + ebp + 0x13]
sub esi, ebp
lea esi, [esi + ecx - 0x23]
push ebx
jmp 0xf01511
push ebp
push edi
mov ebx, 0x4a4496
jmp 0xf0151c
and ebx, 0xffffffa6
mov ebx, 0x270000
xchg ebx, edi
ror edi, 0xd0
xchg edi, ebp
xor ebp, 0x44
xchg ebp, ebx
add ebx, 0xffffffac
inc ebx
add esi, ebx
jmp 0xf0153a
mov edi, dword [esp + 0x10]
and edi, ebp
pop edi
mov ebp, 0x45a42a
rcr ebp, 0x51
pop ebp
xor ebx, 0x76d170b4
pop ebx
sub esi, ecx
ror esi, 0x90
xchg esi, edx
add eax, edx
jmp 0xf0155e
jmp 0xf01562
jmp 0xf01565
lea edx, [eax + ebp*2 + 0x1e]
jmp 0xf0156c
sub edx, 0x1e
pop edx
xor edi, dword [esp + 0x28]
xor edi, dword [esp + 8]
pop edi
jmp 0xf0157d
and esi, ecx
pop esi
sub eax, 0x1d
add ebx, eax
bnd jmp 0xf01589
add edi, dword [esp + 0x18]
add edi, dword [esp + 0x38]
pop edi
xor eax, ecx
pop eax
xor esi, dword [esp + 8]
or esi, 0xffffff95
pop esi
notrack jmp 0xf015a2
sub ebx, ecx
xor ebx, 0x5d
xchg ebx, ecx
xor ecx, 0xffffff94
jmp 0xf015b1
add eax, 0x32cc9fff
push ecx
xor eax, ecx
pop eax
xor eax, 0xffffffb8
jmp 0xf015c2
sub ebp, eax
xor ebx, dword [esp + 0x28]
xor ebx, dword [esp + 8]
pop ebx
or ecx, 0x70e0c11c
jmp 0xf015d7
pop ecx
xor eax, ecx
pop eax
jmp 0xf015df
sub ebp, ebx
bnd jmp 0xf015e5
push 0x4dbdd8
jmp 0xf015ee
pop dword [ebp]
pop ebp
popf
push edi
call fcn.00499f60
jmp 0xf0050d
push 0x95425730
pushf
push ebx
add ebx, 0xe289488
or ebx, 0xf9e0b6e0
jmp 0xf01656
jmp 0xf0165b
sbb ebx, esi
lea ebx, [esp + ecx + 8]
sub ebx, ecx
sub ebx, 8
jmp 0xf0166b
lea ebx, [ebx + ecx + 6]
sub ebx, ecx
jmp 0xf01675
push dword [esp + 8]
push edx
jmp 0xf0167e
mov edx, 0x483544
jmp 0xf01687
xor edx, esi
mov edx, esp
lea edx, [edx + eax + 4]
sub edx, eax
mov dword [edx], 0x4dbddc
pop edx
pop dword [ebx]
pop ebx
popf
push eax
call fcn.00498bc0
jmp 0xf00580
mov eax, 0x47aa1e
mov eax, 0x440956
jmp 0xf016ce
lea eax, [ebx + 0x27]
push edx
push ebx
push esi
mov esi, 0x2b1cdb1c
xor esi, 0x68
not esi
xchg esi, ebx
add ebx, 0x7b1cdb75
neg ebx
xchg ebx, edx
ror edx, 0x7c
push edx
sub esi, 0x79568460
pop esi
add eax, esi
pop esi
pop ebx
bnd jmp 0xf016fd
pop edx
bnd jmp 0xf01702
lea eax, [edi + 0xd]
jmp 0xf0170a
lea eax, [eax + ecx - 0x55]
push ecx
push esi
jmp 0xf01714
push ebp
sub esi, edi
push 0x98025b3c
mov esi, 0x488dea
bnd jmp 0xf01725
mov esi, 0x406fce
pop esi
push esi
or ebp, ebx
pop ebp
add ebp, 0x57
xchg ebp, esi
xor esi, 0xffffffa9
not esi
xchg esi, ecx
sub ecx, 0x98025b7d
push ecx
jmp 0xf01745
lea esi, [ebx + ecx*2 + 0x20]
bnd jmp 0xf0174d
sub esi, 0x20
sub esi, ecx
pop esi
jmp 0xf01758
add eax, esi
add ebp, dword [esp + 0x38]
bnd jmp 0xf01762
xor ebp, dword [esp + 8]
pop ebp
lea esi, [ebx + ecx*2 + 0x42]
pop esi
add ecx, 0x8da1c8c6
pop ecx
sub eax, ecx
push eax
call fcn.00498cc0
jmp 0xf00a73
jmp 0xf01853
lea eax, [eax + ecx + 3]
sub eax, ecx
pop ecx
and eax, 0xfffffffc
jmp 0xf01000
jmp 0xf03ac2
push 0x50d67a02
pushf
push ebp
bnd jmp 0xf018af
lea ebp, [ecx + edx*2 + 0x6a]
jmp 0xf018b7
lea ebp, [ebp + ecx - 0x6a]
jmp 0xf018bf
sub ebp, ecx
xor ebp, dword [esp + 8]
jmp 0xf018c9
mov ebp, 0x47db28
lea ebp, [esp + 0x1c]
lea ebp, [ebp + esi - 0x1c]
sub ebp, esi
lea ebp, [ebp + 6]
jmp 0xf018de
notrack jmp 0xf018e3
push 0xffffffffffffffda
push edi
sub edi, ebx
and edi, 0xc8c563cc
lea edi, [esp + 0x40]
jmp 0xf018f7
lea edi, [edi + ebp - 0x40]
sub edi, ebp
lea edi, [edi + ecx + 4]
sub edi, ecx
jmp 0xf01908
push 0x3e
push ebx
or ebx, edi
mov ebx, esp
jmp 0xf01912
lea ebx, [ebx + edi + 4]
sub ebx, edi
mov dword [ebx], 0x104
pop ebx
jmp 0xf01923
jmp 0xf01928
pop dword [edi]
pop edi
pop dword [ebp]
pop ebp
popf
lea eax, [ebp - 0x80]
push eax
push edx
jmp 0xf010b0
cmp eax, 0x13
jb 0xf009eb
mov esi, 0x483bb2
xor esi, dword [esp + 0x28]
push eax
xor esi, 0x1029c0e8
pop esi
shl esi, 3
jmp 0xf00e61
or eax, 0x38e4ac36
bnd jmp 0xf01a38
or eax, 0xa85adc3c
jmp 0xf01a42
lea eax, [edi + 0x4f66e0]
sub eax, edi
mov eax, dword [eax]
mov ecx, dword [ebp + 0x94]
push ebx
push esi
jmp 0xf00f72
pop ebx
lea ebp, [ebp + edi + 0x8c]
sub ebp, edi
leave
ret
add eax, 0xf35c9740
jmp 0xf01a8f
add eax, dword [esp + 0x18]
rol eax, 0x2f
lea eax, [edx + 0x4fb868]
jmp 0xf01aa2
sub eax, edx
jmp 0xf01aa9
jmp 0xf01aac
push dword [eax]
rol eax, 0x25
bnd jmp 0xf01ab5
add eax, dword [esp + 0x38]
pop eax
cmp eax, 1
jmp 0xf03af8
pop ecx
jmp 0xf0184f
cmp eax, 0x3c
pop ecx
jbe 0xf00510
jmp 0xf01b73
mov eax, dword [esp + 0x30]
jmp 0xf01b7b
sbb eax, 0xff16c82f
jmp 0xf01b85
mov eax, dword [esp + 0x30]
jmp 0xf01b8d
or eax, 0xc98b381f
lea eax, [edi + 0xa]
lea eax, [eax + ecx - 0xa]
sub eax, ecx
push eax
call fcn.00498cc0
jmp 0xf00a37
pop ecx
push eax
jmp 0xf00f6b
jmp 0xf01c1c
mov ebx, 0x443036
jmp 0xf01c24
sub ebx, 0x3d
mov ebx, esp
jmp 0xf006f5
cmp eax, edx
jne 0xf010c1
jmp 0xf01862
jne 0xf00bfc
jmp 0xf01a85
cmp ecx, 0xfc
je 0xf00bfc
jmp 0xf018a3
cmp dword [0x4f66a8], 1
je 0xf00bcf
jmp 0xf010c1
je 0xf00bcf
jmp 0xf00526