Function at 0x102448c
Capabilities:
Read file on windows
Write file on windows

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x24c
mov eax, dword [0x104e070]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
xor eax, eax
xor ecx, ecx
mov esi, dword [ebp + 8]
mov ebx, dword [ebp + 0xc]
mov dword [ebp - 0x22c], ecx
lea edi, [ebp - 0x228]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov dword [ebp - 0x240], ecx
xor eax, eax
lea edi, [ebp - 0x23c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
push 0x800
push ecx
mov dword [ebp - 0x210], ecx
mov dword [ebp - 0x214], ecx
stosd dword es:[edi], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov dword [ebp - 0x218], eax
test eax, eax
jne 0x1024506
mov esi, 0x8007000e
push esi
push 0x3b
jmp 0x1024724
push esi
push 0x1006824
lea eax, [ebp - 0x20c]
push 0x104
push eax
call fcn.0100dd8e
mov esi, eax
add esp, 0x10
test esi, esi
jge 0x102452e
push esi
push 0x3e
jmp 0x1024724
push ebx
mov ebx, dword [ebp - 0x218]
mov edi, 0x400
push edi
push ebx
call fcn.0100d999
mov esi, eax
test esi, esi
jge 0x102454f
push esi
push 0x41
jmp 0x1024724
lea eax, [ebp - 0x210]
push eax
push edi
push ebx
call fcn.0101420b
mov esi, eax
xor edi, edi
cmp esi, edi
jge 0x102456d
push esi
push 0x44
jmp 0x1024724
push 2
pop eax
cmp dword [ebp - 0x210], eax
jae 0x1024587
xor ecx, ecx
mov word [ebx + 2], cx
mov word [ebx], cx
mov dword [ebp - 0x210], eax
push edi
push 0x40000000
push 3
push edi
push edi
push 0xc0000000
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x214], eax
cmp eax, edi
je 0x102470b
cmp eax, 0xffffffff
je 0x102470b
mov esi, dword [sym.imp.KERNEL32.dll_CreateEventW]
push edi
push edi
push 1
push edi
call esi
mov dword [ebp - 0x230], eax
cmp eax, edi
je 0x10246f0
cmp eax, 0xffffffff
je 0x10246f0
push edi
push edi
push 1
push edi
call esi
mov dword [ebp - 0x21c], eax
cmp eax, edi
je 0x10246d5
cmp eax, 0xffffffff
je 0x10246d5
lea eax, [ebp - 0x240]
push eax
lea eax, [ebp - 0x24c]
push eax
mov eax, dword [ebp - 0x210]
add eax, eax
push eax
push ebx
push dword [ebp - 0x214]
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, 0x80070000
test eax, eax
jne 0x1024653
call edi
cmp eax, 0x3e5
je 0x1024653
call edi
test eax, eax
jle 0x1024645
and eax, 0xffff
or eax, ebx
mov esi, eax
test esi, esi
jge 0x1024653
push esi
push 0x6b
jmp 0x1024724
lea eax, [ebp - 0x22c]
push eax
lea eax, [ebp - 0x244]
push eax
push 4
lea eax, [ebp - 0x248]
push eax
push dword [ebp - 0x214]
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov dword [ebp - 0x210], eax
test eax, eax
jne 0x1024689
call edi
cmp eax, 0x3e5
jne 0x10246bd
xor esi, esi
cmp dword [ebp - 0x210], esi
jne 0x1024738
push 0x1f4
push dword [ebp - 0x21c]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x1024738
mov esi, 0x80004005
push esi
push 0x80
jmp 0x1024724
call edi
test eax, eax
jle 0x10246ca
and eax, 0xffff
or eax, ebx
mov esi, eax
test esi, esi
jge 0x1024697
push esi
push 0x77
jmp 0x1024724
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, edi
jle 0x10246e9
and eax, 0xffff
or eax, 0x80070000
mov esi, eax
push esi
push 0x5f
jmp 0x1024724
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, edi
jle 0x1024704
and eax, 0xffff
or eax, 0x80070000
mov esi, eax
push esi
push 0x5c
jmp 0x1024724
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, edi
jle 0x102471f
and eax, 0xffff
or eax, 0x80070000
mov esi, eax
push esi
push 0x59
push 0x1006814
push 0x100189c
push 1
call fcn.01014247
add esp, 0x14
cmp dword [ebp - 0x230], 0
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
je 0x1024762
cmp dword [ebp - 0x230], 0xffffffff
je 0x1024762
push dword [ebp - 0x230]
call edi
xor ebx, ebx
mov dword [ebp - 0x230], ebx
jmp 0x1024764
xor ebx, ebx
cmp dword [ebp - 0x21c], ebx
je 0x1024783
cmp dword [ebp - 0x21c], 0xffffffff
je 0x1024783
push dword [ebp - 0x21c]
call edi
mov dword [ebp - 0x21c], ebx
cmp dword [ebp - 0x214], ebx
je 0x102479c
cmp dword [ebp - 0x214], 0xffffffff
je 0x102479c
push dword [ebp - 0x214]
call edi
cmp dword [ebp - 0x218], ebx
je 0x10247b8
push dword [ebp - 0x218]
push ebx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov ecx, dword [ebp - 4]
pop edi
mov eax, esi
pop esi
xor ecx, ebp
pop ebx
call fcn.01036539
leave
ret 8