Function at 0x4496b9
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x164
mov eax, dword [0x4832e4]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
push 0x103
xor esi, esi
lea eax, [ebp - 0x11f]
push esi
push eax
mov byte [ebp - 0x120], 0
call fcn.00401f80
xor eax, eax
mov byte [ebp - 0x18], 0
lea edi, [ebp - 0x17]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
xor eax, eax
mov word [ebp - 0x130], ax
lea edi, [ebp - 0x12e]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
xor eax, eax
mov word [ebp - 0x140], ax
lea edi, [ebp - 0x13e]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
add esp, 0xc
mov dword [ebp - 0x144], esi
mov dword [ebp - 0x150], esi
mov dword [ebp - 0x14c], esi
mov dword [ebp - 0x148], esi
stosw word es:[edi], ax
cmp dword [0x57d6a4], esi
je 0x449757
xor eax, eax
inc eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00401317
leave
ret
cmp dword [0x57d6a8], esi
je 0x449785
call fcn.004182de
mov edi, eax
jmp 0x44977d
call fcn.004182de
sub eax, edi
cmp eax, 0x2710
jae 0x449785
push esi
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [0x57d6a8], esi
jne 0x449768
push str.GatMem.sat
xor ebx, ebx
push esi
inc ebx
push esi
mov dword [0x57d6a8], ebx
call fcn.0043b3a3
pop ecx
pop ecx
push eax
lea eax, [ebp - 0x120]
push 0x46f748
push eax
call fcn.00401954
add esp, 0x10
lea edi, [ebp - 0x120]
call fcn.004593b9
test eax, eax
jne 0x4497cd
mov dword [0x57d6a8], esi
xor eax, eax
jmp 0x449748
push 0x13b5
push str.Network.c
mov edx, 0x46f5ac
lea ecx, [ebp - 0x120]
mov dword [ebp - 0x158], ebx
call fcn.004580b0
mov edi, eax
pop ecx
pop ecx
mov dword [ebp - 0x154], edi
cmp edi, esi
je 0x4497c0
push edi
push ebx
lea eax, [ebp - 0x144]
push 4
push eax
call fcn.00402244
add esp, 0x10
cmp eax, ebx
jae 0x44981b
mov ecx, edi
call fcn.0045a2fe
jmp 0x4497c0
push 0xa
pop eax
cmp dword [ebp - 0x144], eax
jle 0x44982c
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], esi
jle 0x449812
push edi
call fcn.00401e7e
pop ecx
cmp eax, 0xffffffff
je 0x449878
mov edi, str.Thank_you_Jesus_for_your_help.__I_adore_you_desperately.__I_love_you_so_much__violently.__I_depsperately_want_you_more_than_anything_
mov esi, ebx
mov ebx, edi
movsx ecx, byte [ebx + esi - 1]
cmp eax, ecx
jne 0x44986f
push edi
call fcn.00401a80
pop ecx
cmp esi, eax
jge 0x4498d0
push dword [ebp - 0x154]
inc esi
call fcn.00401e7e
pop ecx
cmp eax, 0xffffffff
jne 0x449849
mov edi, dword [ebp - 0x154]
xor ebx, ebx
inc ebx
mov ecx, edi
call fcn.0045a2fe
push 0x13e8
push str.Network.c
mov edx, 0x46f608
lea ecx, [ebp - 0x120]
call fcn.004580b0
mov esi, eax
xor edi, edi
pop ecx
pop ecx
cmp esi, edi
jne 0x4498ae
mov dword [0x57d6a8], edi
jmp 0x4497c6
push esi
push ebx
lea eax, [ebp - 0x144]
push 4
push eax
mov dword [ebp - 0x144], edi
call fcn.0040257f
add esp, 0x10
mov ecx, esi
call fcn.0045a2fe
jmp 0x4498a3
mov edi, dword [ebp - 0x154]
push edi
xor ebx, ebx
inc ebx
push ebx
lea eax, [ebp - 0x130]
push 0x10
push eax
call fcn.00402244
add esp, 0x10
cmp eax, ebx
jae 0x449903
mov ecx, edi
call fcn.0045a2fe
and dword [0x57d6a8], 0
jmp 0x4497c6
lea eax, [ebp - 0x140]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov cx, word [ebp - 0x12e]
xor eax, eax
cmp cx, word [ebp - 0x13e]
push edi
setne al
push ebx
push 0x10
push 0x57a424
mov dword [ebp - 0x164], eax
call fcn.00402244
add esp, 0x10
cmp eax, ebx
jb 0x4498f0
push edi
push ebx
push 0x10
push 0x57a434
call fcn.00402244
add esp, 0x10
cmp eax, ebx
jae 0x449968
mov ecx, edi
call fcn.0045a2fe
xor eax, eax
and dword [0x57d6a8], 0
jmp 0x449748
xor eax, eax
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x144], eax
jle 0x449b3a
xor eax, eax
push edi
push ebx
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x150], eax
lea eax, [ebp - 0x150]
push 4
push eax
call fcn.00402244
push edi
push ebx
mov esi, eax
lea eax, [ebp - 0x14c]
push 4
push eax
call fcn.00402244
push edi
push ebx
add esi, eax
lea eax, [ebp - 0x148]
push 4
push eax
call fcn.00402244
add eax, esi
add esp, 0x30
cmp eax, 3
jl 0x449b2b
xor esi, esi
cmp dword [ebp - 0x148], esi
je 0x449b34
cmp dword [ebp - 0x14c], esi
jl 0x449b34
cmp dword [ebp - 0x150], esi
jl 0x449b34
cmp dword [ebp - 0x14c], esi
jne 0x449a12
cmp dword [ebp - 0x150], esi
je 0x449b34
sub dword [ebp - 0x148], 0x309
mov ecx, dword [ebp - 0x148]
lea eax, [ebp - 0x18]
call fcn.00446622
lea ecx, [ebp - 0x18]
call fcn.00447442
cmp eax, dword [ebp - 0x148]
jne 0x449a9f
mov esi, dword [0x579efc]
xor edi, edi
test esi, esi
jle 0x449ac2
mov ebx, 0x57a448
mov ecx, ebx
call fcn.00447442
mov esi, dword [0x579efc]
cmp dword [ebp - 0x148], eax
je 0x449a68
inc edi
add ebx, 0x14
cmp edi, esi
jl 0x449a4b
cmp edi, 0xa
jge 0x449a9c
cmp edi, esi
jge 0x449abf
mov edx, dword [ebp - 0x150]
mov eax, edi
cmp edx, dword [eax*4 + 0x57a510]
jle 0x449a89
mov dword [eax*4 + 0x57a510], edx
mov ecx, dword [ebp - 0x14c]
lea eax, [eax*4 + 0x57a538]
cmp ecx, dword [eax]
jle 0x449a9c
mov dword [eax], ecx
xor ebx, ebx
inc ebx
inc dword [ebp - 0x15c]
mov eax, dword [ebp - 0x15c]
mov edi, dword [ebp - 0x154]
cmp eax, dword [ebp - 0x144]
jl 0x449982
jmp 0x449b3a
xor ebx, ebx
inc ebx
cmp dword [ebp - 0x164], 0
je 0x449aee
call fcn.004495f3
test eax, eax
je 0x449ae8
lea esi, [ebp - 0x18]
call fcn.00448496
test eax, eax
jne 0x449ae8
mov dword [ebp - 0x160], ebx
jmp 0x449a9f
mov esi, dword [0x579efc]
lea eax, [ebp - 0x18]
push eax
mov eax, esi
imul eax, eax, 0x14
push 0x14
add eax, 0x57a448
pop ecx
call fcn.00428a08
mov eax, dword [ebp - 0x150]
mov dword [esi*4 + 0x57a510], eax
mov eax, dword [ebp - 0x14c]
mov dword [esi*4 + 0x57a538], eax
inc esi
pop ecx
mov dword [0x579efc], esi
jmp 0x449a9f
and dword [ebp - 0x158], 0
jmp 0x449b3a
mov dword [ebp - 0x158], esi
mov ecx, edi
call fcn.0045a2fe
cmp dword [ebp - 0x160], 0
je 0x449b4f
call fcn.00448a14
mov eax, dword [ebp - 0x158]
test eax, eax
je 0x44995c
mov dword [0x57d6a4], ebx
jmp 0x44995c