Function at 0x4bd110
Capabilities:
Read file on windows

Disassembly:
sub esp, 8
push ebx
mov ebx, dword [esp + 0x14]
push esi
push edi
mov edi, str.___________________________7d81d4371304a2_r_n
or ecx, 0xffffffff
xor eax, eax
mov dword [ebx], 0
repne scasb al, byte es:[edi]
mov eax, dword [esp + 0x18]
push 0x5011d4
not ecx
dec ecx
push eax
mov dword [esp + 0x24], ecx
xor esi, esi
call dword [sym.imp.MSVCRT.dll__wfopen]
mov edi, eax
add esp, 8
test edi, edi
mov dword [esp + 0xc], edi
je 0x4bd341
push ebp
mov ebp, dword [sym.imp.MSVCRT.dll_fseek]
push 2
push esi
push edi
call ebp
push edi
call dword [sym.imp.MSVCRT.dll_ftell]
push 0
push 0
push edi
mov esi, eax
call ebp
add esi, 0x400
push esi
mov dword [esp + 0x34], esi
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
mov ebp, eax
add esp, 0x20
test ebp, ebp
je 0x4bd32b
mov ecx, esi
xor eax, eax
mov edx, ecx
mov edi, ebp
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
mov esi, 0x50e8c8
and ecx, 3
rep stosb byte es:[edi], al
mov edi, 0x50e8c8
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov edi, dword [ebx]
not ecx
dec ecx
add edi, ebp
mov eax, ecx
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov esi, dword [ebx]
add esi, eax
mov eax, dword [esp + 0x20]
mov edx, esi
mov ecx, eax
mov dword [ebx], esi
mov esi, str.___________________________7d81d4371304a2_r_n
lea edi, [edx + ebp]
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebx]
mov edi, str.Content_Disposition:_form_data__name_tw_sync___filename_
add ecx, eax
xor eax, eax
mov dword [ebx], ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov edi, dword [ebx]
mov esi, str.Content_Disposition:_form_data__name_tw_sync___filename_
not ecx
dec ecx
add edi, ebp
mov eax, ecx
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebx]
mov esi, dword [esp + 0x1c]
add ecx, eax
push esi
mov dword [ebx], ecx
call dword [sym.imp.MSVCRT.dll_wcslen]
mov edi, dword [ebx]
mov ecx, eax
mov edx, ecx
add edi, ebp
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebx]
mov edi, str.__r_nContent_Type:_text_plain_r_n_r_n
add ecx, eax
xor eax, eax
mov dword [ebx], ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
mov edi, dword [ebx]
dec ecx
mov eax, ecx
mov edx, ecx
mov esi, str.__r_nContent_Type:_text_plain_r_n_r_n
add edi, ebp
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov esi, dword [ebx]
mov ecx, dword [esp + 0x14]
add esi, eax
push ecx
mov dword [ebx], esi
mov eax, esi
mov esi, dword [esp + 0x1c]
push 1
add eax, ebp
lea edx, [esi - 0x400]
push edx
push eax
call dword [sym.imp.MSVCRT.dll_fread]
mov eax, dword [ebx]
add esi, 0xfffffc00
add eax, esi
mov edi, str._r_n__
mov dword [ebx], eax
or ecx, 0xffffffff
xor eax, eax
add esp, 0x14
repne scasb al, byte es:[edi]
mov edi, dword [ebx]
mov esi, str._r_n__
not ecx
dec ecx
add edi, ebp
mov eax, ecx
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov esi, dword [ebx]
add esi, eax
mov eax, dword [esp + 0x20]
mov edx, esi
mov dword [ebx], esi
lea ecx, [eax - 2]
mov esi, str.___________________________7d81d4371304a2_r_n
lea edi, [edx + ebp]
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
add eax, 0xfffffffe
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebx]
mov edi, str.___r_n
add ecx, eax
xor eax, eax
mov dword [ebx], ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov edi, dword [ebx]
mov esi, str.___r_n
not ecx
dec ecx
add edi, ebp
mov eax, ecx
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebx]
add ecx, eax
mov edi, dword [esp + 0x10]
mov dword [ebx], ecx
push edi
call dword [sym.imp.MSVCRT.dll_fclose]
add esp, 4
mov eax, ebp
pop ebp
pop edi
pop esi
pop ebx
add esp, 8
ret 8
mov eax, esi
pop edi
pop esi
pop ebx
add esp, 8
ret 8