Function at 0x4724c0
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2c
push ebx
push edi
push esi
lea eax, [ebp - 4]
mov dword [eax], 0
jmp 0x472cd4
lea eax, [ebp + 8]
mov edx, eax
mov edx, dword [edx]
mov eax, edx
cmp dword [eax], 0
je 0x472be4
jmp 0x472bb1
xor eax, eax
mov edx, eax
push edx
lea eax, [ebp - 4]
mov edx, eax
push edx
lea eax, [ebp + 0x18]
push dword [eax]
lea eax, [ebp + 0x10]
mov edx, eax
mov edx, dword [edx]
mov eax, edx
mov edx, eax
push edx
lea eax, [ebp + 8]
mov edx, eax
mov edx, dword [edx]
mov eax, edx
push dword [eax]
call dword [sym.imp.KERNEL32.DLL_WriteFile]
xor eax, eax
mov edx, eax
push edx
lea eax, [ebp - 4]
mov edx, eax
push edx
mov eax, 0x4a961c
mov edx, eax
push edx
call fcn.00472da7
mov edx, eax
mov eax, edx
push eax
mov eax, 0x4a961c
mov edx, eax
push edx
lea eax, [ebp + 8]
mov edx, eax
mov edx, dword [edx]
mov eax, edx
push dword [eax]
call dword [sym.imp.KERNEL32.DLL_WriteFile]
lea eax, [ebp - 4]
mov esi, eax
lea eax, [ebp + 0x18]
lea ebx, [ebp - 4]
mov ebx, dword [ebx]
mov eax, dword [eax]
add eax, ebx
mov dword [esi], eax
jmp 0x472be4
jmp 0x47296e
lea eax, [ebp + 0x10]
mov edx, eax
add edx, 4
mov edx, dword [edx]
and edx, 0xffff0000
shr edx, 0x10
mov eax, edx
test eax, eax
je 0x4725b9
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp + 0x10]
mov edx, eax
mov edx, dword [edx]
mov eax, edx
mov edx, dword [eax]
push edx
push edx
fild dword [esp]
fstp qword [esp]
call fcn.0046f0f0
mov edx, eax
pop esi
push edx
push edx
push esi
call fcn.00472d50
call fcn.0045b4f0
jmp 0x4725df
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp + 0x10]
mov edx, dword [eax]
push edx
push edx
fild dword [esp]
fstp qword [esp]
call fcn.0046f0f0
mov edx, eax
pop esi
push edx
push edx
push esi
call fcn.00472d50
call fcn.0045b4f0
jmp 0x472b3f
lea eax, [ebp + 0x10]
mov edx, eax
add edx, 4
mov edx, dword [edx]
and edx, 0xffff0000
shr edx, 0x10
mov eax, edx
test eax, eax
je 0x47262f
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp + 0x10]
mov edx, eax
mov edx, dword [edx]
mov eax, edx
mov edx, dword [eax]
push edx
push edx
fild dword [esp]
fstp qword [esp]
call fcn.0046f0f0
mov edx, eax
pop esi
push edx
push edx
push esi
call fcn.00472d50
call fcn.0045b4f0
jmp 0x472655
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp + 0x10]
mov edx, dword [eax]
push edx
push edx
fild dword [esp]
fstp qword [esp]
call fcn.0046f0f0
mov edx, eax
pop esi
push edx
push edx
push esi
call fcn.00472d50
call fcn.0045b4f0
jmp 0x472b3f
lea eax, [ebp + 0x10]
mov edx, eax
add edx, 4
mov edx, dword [edx]
and edx, 0xffff0000
shr edx, 0x10
mov eax, edx
test eax, eax
je 0x4726a6
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp + 0x10]
mov edx, eax
mov edx, dword [edx]
mov eax, edx
movzx edx, byte [eax]
push edx
push edx
fild dword [esp]
fstp qword [esp]
call fcn.0046f0f0
mov edx, eax
pop esi
push edx
push edx
push esi
call fcn.00472d50
call fcn.0045b4f0
jmp 0x4726cd
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp + 0x10]
movzx edx, byte [eax]
push edx
push edx
fild dword [esp]
fstp qword [esp]
call fcn.0046f0f0
mov edx, eax
pop esi
push edx
push edx
push esi
call fcn.00472d50
call fcn.0045b4f0
jmp 0x472b3f
lea eax, [ebp + 0x10]
mov edx, eax
add edx, 4
mov edx, dword [edx]
and edx, 0xffff0000
shr edx, 0x10
mov eax, edx
test eax, eax
je 0x47271e
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp + 0x10]
mov edx, eax
mov edx, dword [edx]
mov eax, edx
movsx edx, byte [eax]
push edx
push edx
fild dword [esp]
fstp qword [esp]
call fcn.0046f0f0
mov edx, eax
pop esi
push edx
push edx
push esi
call fcn.00472d50
call fcn.0045b4f0
jmp 0x472745
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp + 0x10]
movsx edx, byte [eax]
push edx
push edx
fild dword [esp]
fstp qword [esp]
call fcn.0046f0f0
mov edx, eax
pop esi
push edx
push edx
push esi
call fcn.00472d50
call fcn.0045b4f0
jmp 0x472b3f
lea eax, [ebp + 0x10]
mov edx, eax
add edx, 4
mov edx, dword [edx]
and edx, 0xffff0000
shr edx, 0x10
mov eax, edx
test eax, eax
je 0x472796
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp + 0x10]
mov edx, eax
mov edx, dword [edx]
mov eax, edx
movzx edx, word [eax]
push edx
push edx
fild dword [esp]
fstp qword [esp]
call fcn.0046f0f0
mov edx, eax
pop esi
push edx
push edx
push esi
call fcn.00472d50
call fcn.0045b4f0
jmp 0x4727bd
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp + 0x10]
movzx edx, word [eax]
push edx
push edx
fild dword [esp]
fstp qword [esp]
call fcn.0046f0f0
mov edx, eax
pop esi
push edx
push edx
push esi
call fcn.00472d50
call fcn.0045b4f0
jmp 0x472b3f
lea eax, [ebp + 0x10]
mov edx, eax
add edx, 4
mov edx, dword [edx]
and edx, 0xffff0000
shr edx, 0x10
mov eax, edx
test eax, eax
je 0x47280e
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp + 0x10]
mov edx, eax
mov edx, dword [edx]
mov eax, edx
movsx edx, word [eax]
push edx
push edx
fild dword [esp]
fstp qword [esp]
call fcn.0046f0f0
mov edx, eax
pop esi
push edx
push edx
push esi
call fcn.00472d50
call fcn.0045b4f0
jmp 0x472835
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp + 0x10]
movsx edx, word [eax]
push edx
push edx
fild dword [esp]
fstp qword [esp]
call fcn.0046f0f0
mov edx, eax
pop esi
push edx
push edx
push esi
call fcn.00472d50
call fcn.0045b4f0
jmp 0x472b3f
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp + 0x10]
mov edx, eax
mov edx, dword [edx]
mov eax, edx
fild qword [eax]
sub esp, 8
fstp qword [esp]
call fcn.0046f0f0
mov edx, eax
pop esi
push edx
push edx
push esi
call fcn.00472d50
call fcn.0045b4f0
jmp 0x472b3f
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp + 0x10]
mov edx, eax
mov edx, dword [edx]
mov eax, edx
fild qword [eax]
sub esp, 8
fstp qword [esp]
call fcn.0046f0f0
mov edx, eax
pop esi
push edx
push edx
push esi
call fcn.00472d50
call fcn.0045b4f0
jmp 0x472b3f
lea eax, [ebp + 0x10]
mov edx, eax
add edx, 4
mov edx, dword [edx]
and edx, 0xffff0000
shr edx, 0x10
mov eax, edx
test eax, eax
je 0x4728e3
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp + 0x10]
mov edx, eax
mov edx, dword [edx]
mov eax, edx
mov edx, dword [eax]
push edx
push edx
fld dword [esp]
fstp qword [esp]
call fcn.0046f0f0
mov edx, eax
pop esi
push edx
push edx
push esi
call fcn.00472d50
call fcn.0045b4f0
jmp 0x472909
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp + 0x10]
mov edx, dword [eax]
push edx
push edx
fld dword [esp]
fstp qword [esp]
call fcn.0046f0f0
mov edx, eax
pop esi
push edx
push edx
push esi
call fcn.00472d50
call fcn.0045b4f0
jmp 0x472b3f
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp + 0x10]
mov edx, eax
mov edx, dword [edx]
mov eax, edx
fld qword [eax]
sub esp, 8
fstp qword [esp]
call fcn.0046f0f0
mov edx, eax
pop esi
push edx
push edx
push esi
call fcn.00472d50
call fcn.0045b4f0
jmp 0x472b3f
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp + 0x10]
mov edx, eax
mov edx, dword [edx]
mov eax, edx
mov edx, dword [eax]
push edx
push edx
fild dword [esp]
fstp qword [esp]
call fcn.0046f0f0
mov edx, eax
pop esi
push edx
push edx
push esi
call fcn.00472d50
call fcn.0045b4f0
jmp 0x472b3f
mov eax, 2
lea ebx, [ebp + 0x10]
mov edx, ebx
add edx, 4
mov edx, dword [edx]
and edx, 0xffff
mov ebx, edx
mov esi, ebx
mov edi, eax
cmp esi, edi
sete dl
and edx, 0xff
test dl, dl
jne 0x47256e
mov eax, 0x13
lea ebx, [ebp + 0x10]
mov edx, ebx
add edx, 4
mov edx, dword [edx]
and edx, 0xffff
mov ebx, edx
mov esi, ebx
mov edi, eax
cmp esi, edi
sete dl
and edx, 0xff
test dl, dl
jne 0x4725e4
mov eax, 1
lea ebx, [ebp + 0x10]
mov edx, ebx
add edx, 4
mov edx, dword [edx]
and edx, 0xffff
mov ebx, edx
mov esi, ebx
mov edi, eax
cmp esi, edi
sete dl
and edx, 0xff
test dl, dl
jne 0x47265a
mov eax, 0x1f
lea ebx, [ebp + 0x10]
mov edx, ebx
add edx, 4
mov edx, dword [edx]
and edx, 0xffff
mov ebx, edx
mov esi, ebx
mov edi, eax
cmp esi, edi
sete dl
and edx, 0xff
test dl, dl
jne 0x4726d2
mov eax, 0xd
lea ebx, [ebp + 0x10]
mov edx, ebx
add edx, 4
mov edx, dword [edx]
and edx, 0xffff
mov ebx, edx
mov esi, ebx
mov edi, eax
cmp esi, edi
sete dl
and edx, 0xff
test dl, dl
jne 0x47274a
mov eax, 0x1e
lea ebx, [ebp + 0x10]
mov edx, ebx
add edx, 4
mov edx, dword [edx]
and edx, 0xffff
mov ebx, edx
mov esi, ebx
mov edi, eax
cmp esi, edi
sete dl
and edx, 0xff
test dl, dl
jne 0x4727c2
mov eax, 0x11
lea ebx, [ebp + 0x10]
mov edx, ebx
add edx, 4
mov edx, dword [edx]
and edx, 0xffff
mov ebx, edx
mov esi, ebx
mov edi, eax
cmp esi, edi
sete dl
and edx, 0xff
test dl, dl
jne 0x47283a
mov eax, 0x12
lea ebx, [ebp + 0x10]
mov edx, ebx
add edx, 4
mov edx, dword [edx]
and edx, 0xffff
mov ebx, edx
mov esi, ebx
mov edi, eax
cmp esi, edi
sete dl
and edx, 0xff
test dl, dl
jne 0x472869
mov eax, 3
lea ebx, [ebp + 0x10]
mov edx, ebx
add edx, 4
mov edx, dword [edx]
and edx, 0xffff
mov ebx, edx
mov esi, ebx
mov edi, eax
cmp esi, edi
sete dl
and edx, 0xff
test dl, dl
jne 0x472898
mov eax, 0xe
lea ebx, [ebp + 0x10]
mov edx, ebx
add edx, 4
mov edx, dword [edx]
and edx, 0xffff
mov ebx, edx
mov esi, ebx
mov edi, eax
cmp esi, edi
sete dl
and edx, 0xff
test dl, dl
jne 0x47290e
jmp 0x47293d
lea eax, [ebp - 0x2c]
push eax
mov eax, 0x4a9620
mov esi, eax
push esi
call fcn.004714e0
mov edi, eax
push edi
lea eax, [ebp - 0x2c]
mov esi, eax
pop edi
push edi
push esi
call fcn.0045b180
add esp, 8
push eax
push edi
call fcn.0045b4f0
pop edx
mov eax, edx
mov edx, eax
pop esi
push edx
push edx
push esi
call fcn.00472d50
call fcn.0045b4f0
xor eax, eax
mov edx, eax
push edx
lea eax, [ebp - 4]
mov edx, eax
push edx
lea eax, [ebp - 0x2c]
mov edx, eax
push edx
call fcn.00472da7
mov edx, eax
mov eax, edx
push eax
lea eax, [ebp - 0x2c]
mov edx, eax
push edx
lea eax, [ebp + 8]
mov edx, eax
mov edx, dword [edx]
mov eax, edx
push dword [eax]
call dword [sym.imp.KERNEL32.DLL_WriteFile]
jmp 0x472be4
mov eax, 0
lea ebx, [ebp + 0x10]
mov edx, ebx
add edx, 4
mov edx, dword [edx]
and edx, 0xffff
mov ebx, edx
mov esi, ebx
mov edi, eax
cmp esi, edi
sete dl
and edx, 0xff
test dl, dl
jne 0x4724ee
jmp 0x472569
jmp 0x472d32
lea eax, [ebp + 8]
mov edx, eax
mov edx, dword [edx]
mov eax, edx
cmp dword [eax], 0
je 0x472cd0
lea eax, [ebp + 0x10]
mov edx, eax
add edx, 4
mov edx, dword [edx]
and edx, 0xffff0000
shr edx, 0x10
mov eax, edx
test eax, eax
je 0x472ca9
jmp 0x472c77
xor eax, eax
mov edx, eax
push edx
lea eax, [ebp - 4]
mov edx, eax
push edx
lea eax, [ebp + 0x18]
push dword [eax]
lea eax, [ebp + 0x10]
mov edx, eax
mov edx, dword [edx]
mov eax, edx
push dword [eax]
lea eax, [ebp + 8]
mov edx, eax
mov edx, dword [edx]
mov eax, edx
push dword [eax]
call dword [sym.imp.KERNEL32.DLL_WriteFile]
jmp 0x472ca7
xor eax, eax
mov edx, eax
push edx
lea eax, [ebp - 4]
mov edx, eax
push edx
lea eax, [ebp + 0x18]
push dword [eax]
lea eax, [ebp + 0x10]
mov edx, eax
mov edx, dword [edx]
mov eax, edx
mov edx, eax
push edx
lea eax, [ebp + 8]
mov edx, eax
mov edx, dword [edx]
mov eax, edx
push dword [eax]
call dword [sym.imp.KERNEL32.DLL_WriteFile]
jmp 0x472ca7
mov eax, 5
lea ebx, [ebp + 0x10]
mov edx, ebx
add edx, 4
mov edx, dword [edx]
and edx, 0xffff
mov ebx, edx
mov esi, ebx
mov edi, eax
cmp esi, edi
sete dl
and edx, 0xff
test dl, dl
jne 0x472c1a
jmp 0x472c48
jmp 0x472cd0
xor eax, eax
mov edx, eax
push edx
lea eax, [ebp - 4]
mov edx, eax
push edx
lea eax, [ebp + 0x18]
push dword [eax]
lea eax, [ebp + 0x10]
mov edx, eax
push edx
lea eax, [ebp + 8]
mov edx, eax
mov edx, dword [edx]
mov eax, edx
push dword [eax]
call dword [sym.imp.KERNEL32.DLL_WriteFile]
jmp 0x472d32
jmp 0x472d32
mov eax, 6
lea ebx, [ebp + 8]
mov edx, ebx
add edx, 4
mov edx, dword [edx]
and edx, 0xffff
mov ebx, edx
mov esi, ebx
mov edi, eax
cmp esi, edi
sete dl
and edx, 0xff
test dl, dl
jne 0x4724d7
mov eax, 0xb
lea ebx, [ebp + 8]
mov edx, ebx
add edx, 4
mov edx, dword [edx]
and edx, 0xffff
mov ebx, edx
mov esi, ebx
mov edi, eax
cmp esi, edi
sete dl
and edx, 0xff
test dl, dl
jne 0x472be9
jmp 0x472cd2
lea eax, [ebp - 4]
mov edx, dword [eax]
mov eax, edx
pop esi
pop edi
pop ebx
mov esp, ebp
pop ebp
ret 0x14