Function at 0x430f90
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x48
mov eax, dword [0x48f008]
xor eax, ebp
mov dword [ebp - 8], eax
mov eax, dword [ebp + 8]
lea ecx, [ebp - 0x1c]
push ebx
push esi
push edi
sub esp, 8
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x44], 0x7064736a
mov dword [ebp - 0x3c], 4
mov dword [ebp - 0x40], 0x3f
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x30], 0x7064736a
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 4
mov dword [ebp - 0x24], 0
call fcn.00421970
mov ebx, dword [ebp - 0x18]
mov esi, dword [ebp - 0x10]
test ebx, ebx
je 0x431021
test esi, esi
je 0x431012
cmp esi, 0xffffffff
je 0x431012
push esi
call dword [sym.imp.KERNEL32.dll_FlushFileBuffers]
cmp esi, 0xffffffff
je 0x431012
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edi, ebx
test ebx, ebx
je 0x431152
jmp 0x4310c4
xor edi, edi
mov dword [ebp - 0x20], 0
push edi
lea eax, [ebp - 0x20]
push eax
push 0x10
lea eax, [ebp - 0x44]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x431048
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
mov ebx, edi
test edi, edi
jne 0x4310a8
cmp dword [ebp - 0x20], 0x10
je 0x431077
lea edi, [ebx + 0x18]
test esi, esi
je 0x431073
cmp esi, 0xffffffff
je 0x431073
push esi
call dword [sym.imp.KERNEL32.dll_FlushFileBuffers]
cmp esi, 0xffffffff
je 0x431073
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebx, edi
jmp 0x4310c4
xor edi, edi
mov dword [ebp - 0x34], 0
push edi
lea eax, [ebp - 0x34]
push eax
push 0x10
lea eax, [ebp - 0x30]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x43109e
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
mov ebx, edi
test edi, edi
je 0x431136
test esi, esi
je 0x4310c4
cmp esi, 0xffffffff
je 0x4310c4
push esi
call dword [sym.imp.KERNEL32.dll_FlushFileBuffers]
cmp esi, 0xffffffff
je 0x4310c4
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea eax, [ebp - 0x18]
xorps xmm0, xmm0
push eax
movups xmmword [ebp - 0x18], xmm0
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov ecx, edi
call fcn.0040bee0
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
movzx ecx, word [ebp - 0x16]
push eax
movzx eax, word [ebp - 0xa]
push eax
movzx eax, word [ebp - 0xc]
push eax
movzx eax, word [ebp - 0xe]
push eax
movzx eax, word [ebp - 0x10]
push eax
movzx eax, word [ebp - 0x12]
push eax
push ecx
movzx ecx, word [ebp - 0x18]
push ecx
push str.__04d__02d__02d__02d:_02d:_02d._03d____d._d__js::dlp::plcmgr_service_control::policy_reload_request:_pipe_transaction___failed___hs_._n
call fcn.00406de0
push eax
call fcn.0040b320
add esp, 0x30
mov eax, ebx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.0043fc58
mov esp, ebp
pop ebp
ret 4
test esi, esi
je 0x431152
cmp esi, 0xffffffff
je 0x431152
push esi
call dword [sym.imp.KERNEL32.dll_FlushFileBuffers]
cmp esi, 0xffffffff
je 0x431152
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x30], 0x7064736a
jne 0x4311e4
cmp dword [ebp - 0x2c], 0
je 0x4311e4
cmp dword [ebp - 0x28], 4
jne 0x4311e4
mov esi, dword [ebp - 0x24]
test esi, esi
je 0x4311cf
lea eax, [ebp - 0x18]
xorps xmm0, xmm0
push eax
movups xmmword [ebp - 0x18], xmm0
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov ecx, esi
call fcn.0040bee0
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
movzx ecx, word [ebp - 0x18]
push eax
movzx eax, word [ebp - 0xa]
push eax
movzx eax, word [ebp - 0xc]
push eax
movzx eax, word [ebp - 0xe]
push eax
movzx eax, word [ebp - 0x10]
push eax
movzx eax, word [ebp - 0x12]
push eax
movzx eax, word [ebp - 0x16]
push eax
push ecx
push str.__04d__02d__02d__02d:_02d:_02d._03d____d._d__js::dlp::plcmgr_service_control::policy_reload_request:_reply_packet_returns__hs._n
call fcn.00406de0
push eax
call fcn.0040b320
add esp, 0x30
mov eax, esi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.0043fc58
mov esp, ebp
pop ebp
ret 4
lea eax, [ebp - 0x18]
xorps xmm0, xmm0
push eax
movups xmmword [ebp - 0x18], xmm0
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
movzx eax, word [ebp - 0xa]
push eax
movzx eax, word [ebp - 0xc]
push eax
movzx eax, word [ebp - 0xe]
push eax
movzx eax, word [ebp - 0x10]
push eax
movzx eax, word [ebp - 0x12]
push eax
movzx eax, word [ebp - 0x16]
push eax
movzx eax, word [ebp - 0x18]
push eax
push str.__04d__02d__02d__02d:_02d:_02d._03d____d._d__js::dlp::plcmgr_service_control::policy_reload_request:_reply_packet.verify___failed._n
call fcn.00406de0
push eax
call fcn.0040b320
mov ecx, dword [ebp - 8]
add esp, 0x2c
xor ecx, ebp
mov eax, 0xd
pop edi
pop esi
pop ebx
call fcn.0043fc58
mov esp, ebp
pop ebp
ret 4