Function at 0x1e728a10
Capabilities:
Read file on windows
Write file on windows

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1e7dc7ab
mov eax, dword fs:[0]
push eax
sub esp, 0xc0
mov eax, dword [0x1e7e4380]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov ebx, dword [ebp + 8]
mov edi, ecx
cmp byte [edi + 0x38], 0
mov dword [ebp - 0xc0], edi
mov dword [ebp - 0xa4], ebx
je 0x1e728d1d
mov eax, dword [edi]
mov edx, dword [eax + 0xc]
push 1
call edx
xor esi, esi
mov dword [ebp - 4], esi
lea esp, [esp]
mov eax, dword [ebx + 4]
cmp esi, eax
jae 0x1e728ace
mov edx, dword [edi + 4]
push 0
lea ecx, [ebx + esi]
lea ebx, [ebp - 0xa8]
push ebx
sub eax, esi
push eax
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x1e728ac0
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x1e728aa9
and eax, 0xffff
or eax, 0x80070000
mov dword [ebp - 0xb4], eax
push 0x1e7dea9c
lea eax, [ebp - 0xb4]
push eax
call sub.msvcrt.dll__CxxThrowException
add esi, dword [ebp - 0xa8]
mov ebx, dword [ebp - 0xa4]
jmp 0x1e728a70
lea ecx, [ebp - 0x94]
mov dword [ebp - 0xa0], ecx
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x98], 0x80
mov byte [ebp - 4], 1
cmp byte [edi + 0x39], 0
je 0x1e728d06
cmp dword [ebp - 0x98], 8
jae 0x1e728b68
push 8
call fcn.1e71aec0
mov esi, eax
add esp, 4
test esi, esi
jne 0x1e728b30
push 0x1e7dea9c
lea ecx, [ebp - 0xb8]
push ecx
mov dword [ebp - 0xb8], 0x8007000e
call sub.msvcrt.dll__CxxThrowException
mov edx, dword [ebp - 0x9c]
mov eax, dword [ebp - 0xa0]
push edx
push eax
push esi
call sub.msvcrt.dll_memcpy
mov eax, dword [ebp - 0xa0]
lea ecx, [ebp - 0x94]
add esp, 0xc
cmp eax, ecx
je 0x1e728b60
push eax
call fcn.1e71aef0
add esp, 4
mov ecx, esi
mov dword [ebp - 0xa0], ecx
mov eax, 8
mov dword [ebp - 0x9c], eax
xor esi, esi
cmp esi, eax
jae 0x1e728bd5
mov edx, dword [edi + 4]
push 0
lea ebx, [ebp - 0xa4]
push ebx
sub eax, esi
push eax
add ecx, esi
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x1e728bc1
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x1e728baa
and eax, 0xffff
or eax, 0x80070000
push 0x1e7dea9c
lea edx, [ebp - 0xb0]
push edx
mov dword [ebp - 0xb0], eax
call sub.msvcrt.dll__CxxThrowException
add esi, dword [ebp - 0xa4]
mov eax, dword [ebp - 0x9c]
mov ecx, dword [ebp - 0xa0]
jmp 0x1e728b75
mov ebx, dword [ecx + 4]
cmp ebx, dword [ebp - 0x98]
jbe 0x1e728c4a
push ebx
call fcn.1e71aec0
add esp, 4
mov dword [ebp - 0xa8], eax
test eax, eax
jne 0x1e728c0e
push 0x1e7dea9c
lea eax, [ebp - 0xc8]
push eax
mov dword [ebp - 0xc8], 0x8007000e
call sub.msvcrt.dll__CxxThrowException
mov ecx, dword [ebp - 0x9c]
mov edx, dword [ebp - 0xa0]
push ecx
push edx
push eax
call sub.msvcrt.dll_memcpy
mov eax, dword [ebp - 0xa0]
lea ecx, [ebp - 0x94]
add esp, 0xc
cmp eax, ecx
je 0x1e728c3e
push eax
call fcn.1e71aef0
add esp, 4
mov ecx, dword [ebp - 0xa8]
mov dword [ebp - 0xa0], ecx
mov eax, ebx
mov dword [ebp - 0x9c], eax
cmp ebx, 8
jae 0x1e728c72
push 0x1e7dea9c
lea edx, [ebp - 0xc4]
push edx
mov dword [ebp - 0xc4], 0x80004005
call sub.msvcrt.dll__CxxThrowException
cmp esi, eax
jae 0x1e728cd2
mov edx, dword [edi + 4]
push 0
lea ebx, [ebp - 0xbc]
push ebx
sub eax, esi
push eax
add ecx, esi
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x1e728cbe
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x1e728ca7
and eax, 0xffff
or eax, 0x80070000
mov dword [ebp - 0xac], eax
push 0x1e7dea9c
lea eax, [ebp - 0xac]
push eax
call sub.msvcrt.dll__CxxThrowException
add esi, dword [ebp - 0xbc]
mov eax, dword [ebp - 0x9c]
mov ecx, dword [ebp - 0xa0]
jmp 0x1e728c72
mov edx, dword [edi]
mov eax, dword [edx]
push ecx
mov ecx, edi
call eax
mov ecx, dword [ebp - 0xa0]
jmp 0x1e728af2
lea edx, [ebp - 0x94]
mov byte [ebp - 4], 0
cmp ecx, edx
je 0x1e728d1d
push ecx
call fcn.1e71aef0
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.1e72b65d
mov esp, ebp
pop ebp
ret 4