Function at 0x11ef6ec0
Capabilities:
Read file on windows
Write file on windows

Disassembly:
sub esp, 0x76c
push ebx
push ebp
mov ebp, dword [sym.imp.KERNEL32.dll_GetLastError]
push esi
xor ebx, ebx
push edi
mov dword [0x12134fb0], ebx
call ebp
mov dword [0x12134fb8], eax
mov eax, dword [esp + 0x784]
cmp eax, ebx
jne 0x11ef6f12
mov dword [0x12134fb0], 1
mov dword [0x12134fb4], 0x1d1e
call ebp
pop edi
pop esi
mov dword [0x12134fb8], eax
pop ebp
xor eax, eax
pop ebx
add esp, 0x76c
ret
cmp dword [0x12134fbc], ebx
jne 0x11ef6f42
mov dword [0x12134fb0], 2
mov dword [0x12134fb4], 0x1d24
call ebp
pop edi
pop esi
mov dword [0x12134fb8], eax
pop ebp
xor eax, eax
pop ebx
add esp, 0x76c
ret
mov esi, dword [esp + 0x780]
push ebx
push ebx
push ebx
push esi
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov ecx, 0xf7
xor eax, eax
lea edi, [esp + 0x15]
mov byte [esp + 0x14], bl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
cmp esi, 0xffffffff
stosb byte es:[edi], al
je 0x11ef6fc2
lea eax, [esp + 0x14]
test eax, eax
je 0x11ef6fc2
push esi
call dword [sym.imp.KERNEL32.dll_GetFileType]
cmp eax, 1
jne 0x11ef6fdd
mov ecx, 0xf8
xor eax, eax
lea edi, [esp + 0x14]
push ebx
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x14]
lea edx, [esp + 0x18]
push ecx
push 0x3e0
push edx
push esi
mov dword [esp + 0x24], ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x11ef7005
mov dword [0x12134fb0], 0xd
mov dword [0x12134fb4], 0x29f7
jmp 0x11ef6fd6
mov dword [0x12134fb0], 1
mov dword [0x12134fb4], 0x29ea
call ebp
mov dword [0x12134fb8], eax
mov dword [0x12134fb0], 0xf
mov dword [0x12134fb4], 0x1d2f
call ebp
pop edi
pop esi
mov dword [0x12134fb8], eax
pop ebp
xor eax, eax
pop ebx
add esp, 0x76c
ret
mov esi, dword [esp + 0x38]
mov eax, dword [esp + 0x784]
not esi
shr esi, 5
push eax
and esi, 1
call fcn.11f04780
add esp, 4
cmp esi, ebx
mov ebp, eax
je 0x11ef702f
cmp ebp, ebx
jne 0x11ef7414
mov ecx, 0xe1
xor eax, eax
lea edi, [esp + 0x3f5]
mov byte [esp + 0x3f4], bl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea ecx, [esp + 0x3f4]
lea edx, [esp + 0x14]
push ecx
push edx
stosb byte es:[edi], al
call fcn.11efc600
add esp, 8
test eax, eax
jne 0x11ef708e
mov dword [0x12134fb0], 0x14
mov dword [0x12134fb4], 0x1d3f
call dword [sym.imp.KERNEL32.dll_GetLastError]
pop edi
pop esi
mov dword [0x12134fb8], eax
pop ebp
xor eax, eax
pop ebx
add esp, 0x76c
ret
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x12134fb0], ebx
call edi
mov dword [0x12134fb8], eax
lea eax, [esp + 0x3f4]
test eax, eax
jne 0x11ef70cc
mov dword [0x12134fb0], 1
mov dword [0x12134fb4], 0x36f7
call edi
mov dword [0x12134fb8], eax
jmp 0x11ef7212
cmp dword [0x12134fbc], ebx
jne 0x11ef70f4
mov dword [0x12134fb0], 2
mov dword [0x12134fb4], 0x36fd
call edi
mov dword [0x12134fb8], eax
jmp 0x11ef7212
cmp dword [0x1213556c], ebx
jne 0x11ef712f
mov eax, dword [esp + 0x5e0]
mov edx, dword [esp + 0x5e8]
mov ecx, dword [0x12134fcc]
cmp eax, 0x2710
ja 0x11ef71e8
cmp ecx, 0x2710
ja 0x11ef712f
cmp ecx, eax
je 0x11ef712f
cmp eax, ebx
jne 0x11ef7200
cmp esi, ebx
jne 0x11ef724c
cmp ebp, ebx
jne 0x11ef724c
mov ecx, dword [esp + 0x774]
push ecx
call fcn.11e679bc
mov esi, eax
add esp, 4
cmp esi, ebx
je 0x11ef724c
mov eax, dword [esp + 0x774]
mov edi, dword [esp + 0x780]
lea edx, [esp + 0x10]
lea ecx, [esp + 0x14]
push edx
push eax
push esi
lea edx, [esp + 0x400]
push ecx
push edx
push edi
mov dword [esp + 0x28], ebx
call fcn.11ef6a70
add esp, 0x18
test eax, eax
je 0x11ef723a
mov ecx, dword [esp + 0x10]
cmp ecx, 0x78
jb 0x11ef723a
mov eax, dword [esi + 0x70]
mov edx, dword [esi + 0x6c]
add eax, edx
mov edx, dword [esi + 0x74]
lea eax, [eax + eax*4]
lea eax, [edx + eax*2]
lea edx, [eax + eax + 0x7a]
cmp edx, ecx
jne 0x11ef723a
mov ebp, dword [esp + 0x784]
push esi
push ebp
call fcn.11f04800
add esp, 8
test eax, eax
je 0x11ef7241
push esi
call fcn.11e679b1
add esp, 4
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x76c
ret
cmp eax, ecx
jne 0x11ef7200
cmp dword [0x12134fd4], ebx
ja 0x11ef712f
cmp edx, ebx
je 0x11ef712f
push edx
push eax
call fcn.11f02b20
add esp, 8
cmp eax, ebx
jne 0x11ef712f
mov dword [0x12134fb0], 0x1f
mov dword [0x12134fb4], 0x1d46
call edi
pop edi
pop esi
mov dword [0x12134fb8], eax
pop ebp
xor eax, eax
pop ebx
add esp, 0x76c
ret
mov ebp, dword [esp + 0x784]
push esi
call fcn.11e679b1
add esp, 4
jmp 0x11ef725a
mov ebp, dword [esp + 0x784]
mov edi, dword [esp + 0x780]
mov eax, dword [esp + 0x430]
cmp eax, ebx
jne 0x11ef7279
mov dword [esp + 0x76c], 0x3e0
mov dword [esp + 0x770], ebx
jmp 0x11ef72ac
mov ecx, dword [esp + 0x434]
push ebx
dec eax
push ecx
push ebx
push eax
call fcn.11e69450
mov ecx, dword [esp + 0x438]
xor esi, esi
add eax, ecx
adc edx, esi
add eax, 0x3e0
adc edx, ebx
mov dword [esp + 0x76c], eax
mov dword [esp + 0x770], edx
mov eax, dword [esp + 0x34]
lea edx, [esp + 0x3f4]
push ebp
push edx
push eax
push edi
call fcn.11ef7430
add esp, 0x10
test eax, eax
jne 0x11ef72f3
mov dword [0x12134fb0], 0x10
mov dword [0x12134fb4], 0x1d74
call dword [sym.imp.KERNEL32.dll_GetLastError]
pop edi
pop esi
mov dword [0x12134fb8], eax
pop ebp
xor eax, eax
pop ebx
add esp, 0x76c
ret
push ebp
call fcn.11f04780
add esp, 4
test eax, eax
mov eax, dword [esp + 0x38]
je 0x11ef7308
and al, 0xdf
jmp 0x11ef730a
or al, 0x20
mov dword [esp + 0x38], eax
or al, 4
push ebp
mov dword [esp + 0x3c], eax
call fcn.11f2ff60
add esp, 4
test eax, eax
mov eax, dword [esp + 0x38]
jne 0x11ef7329
or al, 1
jmp 0x11ef732b
and al, 0xfe
add ebp, 0x10
mov dword [esp + 0x38], eax
push ebp
call fcn.11f2ff60
add esp, 4
test eax, eax
mov eax, dword [esp + 0x38]
jne 0x11ef7347
or al, 2
jmp 0x11ef7349
and al, 0xfd
lea ecx, [esp + 0x3f4]
lea edx, [esp + 0x14]
push ecx
push edx
mov dword [esp + 0x40], eax
call fcn.11efc870
add esp, 8
test eax, eax
jne 0x11ef7392
mov dword [0x12134fb0], 0x13
mov dword [0x12134fb4], 0x1d8c
call dword [sym.imp.KERNEL32.dll_GetLastError]
pop edi
pop esi
mov dword [0x12134fb8], eax
pop ebp
xor eax, eax
pop ebx
add esp, 0x76c
ret
push ebx
push ebx
push ebx
push edi
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea eax, [esp + 0x10]
push ebx
push eax
lea ecx, [esp + 0x1c]
push 0x3e0
push ecx
push edi
mov dword [esp + 0x24], ebx
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x11ef7404
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x12134fb0], 0xe
mov dword [0x12134fb4], 0x2a09
call esi
mov dword [0x12134fb8], eax
mov dword [0x12134fb0], 0x10
mov dword [0x12134fb4], 0x1d94
call esi
pop edi
pop esi
mov dword [0x12134fb8], eax
pop ebp
xor eax, eax
pop ebx
add esp, 0x76c
ret
cmp dword [esp + 0x788], ebx
je 0x11ef7414
push edi
call dword [sym.imp.KERNEL32.dll_FlushFileBuffers]
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x76c
ret