Function at 0x44fd40
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4dfe24
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0xf8
mov eax, dword [0x533094]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, dword [ebx + 8]
mov eax, closesocket
mov dword [ebp - 0x64], 0
mov dword [ecx + 4], 0xa
add ecx, 0xc
mov dword [ebp - 0x6c], edi
mov esi, dword [edi + 0x10]
mov edx, dword [ecx + 0x10]
sub eax, edx
cmp eax, esi
jb 0x45070f
cmp dword [ecx + 0x14], 0x10
jb 0x44fdb5
mov ecx, dword [ecx]
cmp dword [edi + 0x14], 0x10
mov eax, edi
jb 0x44fdbf
mov eax, dword [edi]
push esi
push eax
push edx
push ecx
push ecx
push dword [ebp - 0x6c]
lea ecx, [ebp - 0xbc]
call fcn.00449890
mov dword [ebp - 4], 0
lea ecx, [ebp - 0xbc]
mov esi, dword [ebp - 0xa8]
mov eax, esi
mov edx, dword [ebp - 0xac]
sub eax, edx
cmp eax, 1
jb 0x44fe1c
cmp esi, 0x10
lea eax, [edx + 1]
mov dword [ebp - 0xac], eax
cmovae ecx, dword [ebp - 0xbc]
mov al, byte [0x529600]
mov byte [edx + ecx], al
lea eax, [ebp - 0xbc]
mov byte [edx + ecx + 1], 0
jmp 0x44fe2d
push 1
push 0x529600
push dword [ebp - 0x6c]
push 1
call fcn.00448c30
mov dword [ebp - 0x40], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x50], xmm0
mov dword [ebp - 0x3c], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x50], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x40], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov eax, 0x60
mov dword [ebp - 0x60], eax
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0xa8]
cmp ecx, 0x10
jb 0x44feaa
mov edx, dword [ebp - 0xbc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44fea0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x450714
push ecx
push edx
call fcn.004b40e2
add esp, 8
push edi
push 8
push 0x5298bc
lea edx, [ebp - 0x50]
mov dword [ebp - 0xac], 0
lea ecx, [ebp - 0xec]
mov dword [ebp - 0xa8], 0xf
mov byte [ebp - 0xbc], 0
mov dword [ebp - 0x34], 0
call fcn.004530b0
add esp, 0xc
cmp dword [eax + 0x14], 0x10
jb 0x44feed
mov eax, dword [eax]
mov esi, dword [sym.imp.KERNEL32.dll_CreateFileA]
push 0
push 0x80
push 3
push 0
push 1
push 1
push eax
call esi
mov ecx, dword [ebp - 0xd8]
mov edi, eax
mov dword [ebp - 0x70], edi
cmp ecx, 0x10
jb 0x44ff44
mov edx, dword [ebp - 0xec]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44ff3a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x450719
push ecx
push edx
call fcn.004b40e2
add esp, 8
push dword [ebp - 0x6c]
lea edx, [ebp - 0x50]
mov dword [ebp - 0xdc], 0
push 8
push 0x5298c8
lea ecx, [ebp - 0x104]
mov dword [ebp - 0xd8], 0xf
mov byte [ebp - 0xec], 0
call fcn.004530b0
add esp, 0xc
cmp dword [eax + 0x14], 0x10
jb 0x44ff82
mov eax, dword [eax]
push 0
push 0x80
push 3
push 0
push 1
push 1
push eax
call esi
mov ecx, dword [ebp - 0xf0]
mov dword [ebp - 0x68], eax
cmp ecx, 0x10
jb 0x44ffd4
mov edx, dword [ebp - 0x104]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44ffc7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x45071e
push ecx
push edx
call fcn.004b40e2
mov eax, dword [ebp - 0x68]
add esp, 8
mov dword [ebp - 0xf4], 0
mov dword [ebp - 0xf0], 0xf
mov byte [ebp - 0x104], 0
cmp edi, 0xffffffff
je 0x4506bf
cmp eax, 0xffffffff
je 0x4506bf
mov esi, dword [sym.imp.KERNEL32.dll_ReadFile]
lea eax, [ebp - 0x18]
push 0
push eax
push 4
lea eax, [ebp - 0x34]
mov dword [ebp - 0x18], 0
push eax
push edi
call esi
cmp eax, 1
jne 0x4505b1
cmp dword [ebp - 0x34], 0
mov dword [ebp - 0x74], 0
jbe 0x4505b1
nop word [eax + eax]
push 0
lea eax, [ebp - 0x18]
mov dword [ebp - 0x58], 0
push eax
push 4
lea eax, [ebp - 0x58]
push eax
push edi
call esi
test eax, eax
je 0x4505b1
mov edi, dword [ebp - 0x58]
xorps xmm0, xmm0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
movups xmmword [ebp - 0x30], xmm0
cmp edi, 0x7fffffff
ja 0x45070f
mov dword [ebp - 0x1c], 0xf
cmp edi, 0x10
jae 0x4500a7
push edi
lea eax, [ebp - 0x30]
mov dword [ebp - 0x20], edi
push 0
push eax
call fcn.004b6240
mov byte [ebp + edi - 0x30], 0
jmp 0x450137
mov esi, edi
or esi, 0xf
cmp esi, 0x7fffffff
jbe 0x4500c3
mov ecx, closesocket
mov esi, closesocket
add ecx, 0x23
jmp 0x4500e3
cmp esi, 0x16
mov eax, 0x16
cmovb esi, eax
lea eax, [esi + 1]
cmp eax, 0x1000
jb 0x450101
lea ecx, [eax + 0x23]
cmp ecx, eax
jbe 0x450723
push ecx
call fcn.004b40ad
mov ecx, eax
add esp, 4
test ecx, ecx
je 0x45072d
lea eax, [ecx + 0x23]
and eax, 0xffffffe0
mov dword [eax - 4], ecx
jmp 0x450112
test eax, eax
je 0x450110
push eax
call fcn.004b40ad
add esp, 4
jmp 0x450112
xor eax, eax
push edi
push 0
push eax
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x1c], esi
call fcn.004b6240
mov eax, dword [ebp - 0x64]
mov esi, dword [sym.imp.KERNEL32.dll_ReadFile]
mov byte [eax + edi], 0
mov edi, dword [ebp - 0x58]
add esp, 0xc
push 0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x18]
cmp dword [ebp - 0x1c], 0x10
lea eax, [ebp - 0x30]
push ecx
cmovae eax, dword [ebp - 0x30]
push edi
mov edi, dword [ebp - 0x70]
push eax
push edi
call esi
test eax, eax
je 0x45061e
push 0
lea eax, [ebp - 0x18]
mov dword [ebp - 0x38], 0
push eax
push 4
lea eax, [ebp - 0x38]
mov dword [ebp - 0x54], 0
push eax
push edi
call esi
test eax, eax
je 0x450579
push 0
lea eax, [ebp - 0x18]
push eax
push 4
lea eax, [ebp - 0x54]
push eax
push edi
call esi
test eax, eax
je 0x450579
cmp dword [ebp - 0x1c], 0x10
lea esi, [ebp - 0x30]
mov eax, dword [ebp - 0x20]
cmovae esi, dword [ebp - 0x30]
cmp eax, 1
jb 0x45031c
lea edi, [esi + eax]
mov eax, edi
sub eax, esi
push eax
push 0x5c
push esi
call fcn.004b6920
add esp, 0xc
test eax, eax
je 0x45031c
nop dword [eax]
movzx ecx, byte [eax]
cmp cl, 0x5c
jne 0x4501dc
xor ecx, ecx
jmp 0x4501e1
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x4501ff
inc eax
mov ecx, edi
sub ecx, eax
push ecx
push 0x5c
push eax
call fcn.004b6920
add esp, 0xc
test eax, eax
jne 0x4501d0
jmp 0x45031c
sub eax, esi
cmp eax, 0xffffffff
je 0x45031c
lea eax, [ebp - 0x30]
push eax
push 4
push 0x5298d4
lea edx, [ebp - 0x50]
lea ecx, [ebp - 0xd4]
call fcn.004530b0
add esp, 0xc
mov edx, eax
mov byte [ebp - 4], 4
mov esi, dword [ebp - 0x60]
or esi, 1
cmp dword [edx + 0x14], 0x10
mov dword [ebp - 0x64], esi
jb 0x45023d
mov edx, dword [edx]
mov ecx, edx
mov dword [ebp - 0x94], 0
xorps xmm0, xmm0
mov dword [ebp - 0x90], 0
movups xmmword [ebp - 0xa4], xmm0
lea edi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x450260
sub ecx, edi
push ecx
push edx
lea ecx, [ebp - 0xa4]
call fcn.00448d90
mov dword [ebp - 4], 5
lea ecx, [ebp - 0xa4]
or esi, 2
cmp dword [ebp - 0x90], 0x10
push 2
cmovae ecx, dword [ebp - 0xa4]
setae byte [ebp - 0x59]
sub esp, 8
mov dword [ebp - 0x60], esi
mov dword [ebp - 0x64], esi
mov esi, dword [ebp - 0x94]
mov edx, esi
call fcn.00448a70
mov ecx, eax
mov dword [ebp - 0x7c], 0
add esp, 0xc
mov dword [ebp - 0x78], 0
cmp esi, ecx
lea eax, [ebp - 0xa4]
xorps xmm0, xmm0
cmovb ecx, esi
cmp byte [ebp - 0x59], 0
push ecx
cmovne eax, dword [ebp - 0xa4]
lea ecx, [ebp - 0x8c]
push eax
movups xmmword [ebp - 0x8c], xmm0
call fcn.00448d90
mov eax, dword [ebp - 0x60]
or eax, 0x1800
or eax, 4
mov dword [ebp - 4], 6
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0x8c]
push eax
call fcn.004516f0
mov byte [ebp - 0x59], 1
test eax, eax
je 0x450320
mov byte [ebp - 0x59], 0
mov dword [ebp - 4], 5
mov eax, dword [ebp - 0x60]
test al, 4
je 0x450383
mov ecx, dword [ebp - 0x78]
and eax, 0xfffffffb
mov dword [ebp - 0x60], eax
cmp ecx, 0x10
jb 0x45036e
mov edx, dword [ebp - 0x8c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x450361
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x450714
push ecx
push edx
call fcn.004b40e2
mov eax, dword [ebp - 0x60]
add esp, 8
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0xf
mov byte [ebp - 0x8c], 0
mov dword [ebp - 4], 4
test al, 2
je 0x4503ec
mov ecx, dword [ebp - 0x90]
and eax, 0xfffffffd
mov dword [ebp - 0x60], eax
cmp ecx, 0x10
jb 0x4503d1
mov edx, dword [ebp - 0xa4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4503c4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x450714
push ecx
push edx
call fcn.004b40e2
mov eax, dword [ebp - 0x60]
add esp, 8
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 0xf
mov byte [ebp - 0xa4], 0
mov dword [ebp - 4], 3
test al, 1
je 0x450437
mov ecx, dword [ebp - 0xc0]
and eax, 0xfffffffe
mov dword [ebp - 0x60], eax
cmp ecx, 0x10
jb 0x450437
mov edx, dword [ebp - 0xd4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x45042d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x450714
push ecx
push edx
call fcn.004b40e2
add esp, 8
cmp byte [ebp - 0x59], 0
jne 0x450527
lea eax, [ebp - 0x30]
push eax
push 4
push 0x5298d4
lea edx, [ebp - 0x50]
lea ecx, [ebp - 0x8c]
call fcn.004530b0
add esp, 0xc
cmp dword [eax + 0x14], 0x10
jb 0x450465
mov eax, dword [eax]
push 0
push 0x80
push 2
push 0
push 1
push 2
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, dword [ebp - 0x78]
mov esi, eax
cmp ecx, 0x10
jb 0x4504b4
mov edx, dword [ebp - 0x8c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4504aa
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x450714
push ecx
push edx
call fcn.004b40e2
add esp, 8
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0xf
mov byte [ebp - 0x8c], 0
cmp esi, 0xffffffff
je 0x450527
push 0
push 0
push dword [ebp - 0x38]
push dword [ebp - 0x68]
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
push dword [ebp - 0x54]
call fcn.004b40f0
add esp, 4
mov edi, eax
lea eax, [ebp - 0x18]
push 0
push eax
push dword [ebp - 0x54]
push edi
push dword [ebp - 0x68]
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x450527
push 0
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x54]
push edi
push esi
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x450527
push edi
call fcn.004b40a8
add esp, 4
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x1c]
cmp ecx, 0x10
jb 0x45055f
mov edx, dword [ebp - 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x450555
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x45072d
push ecx
push edx
call fcn.004b40e2
add esp, 8
mov eax, dword [ebp - 0x74]
mov edi, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x74], eax
cmp eax, dword [ebp - 0x34]
jae 0x4505b1
mov esi, dword [sym.imp.KERNEL32.dll_ReadFile]
jmp 0x450040
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x1c]
cmp ecx, 0x10
jb 0x4505b1
mov edx, dword [ebp - 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4505a7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x45072d
push ecx
push edx
call fcn.004b40e2
add esp, 8
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push edi
call esi
push dword [ebp - 0x68]
call esi
mov esi, dword [ebp - 0x6c]
lea edx, [ebp - 0x50]
push esi
push 8
push 0x5298bc
lea ecx, [ebp - 0xd4]
call fcn.004530b0
add esp, 0xc
cmp dword [eax + 0x14], 0x10
jb 0x4505e3
mov eax, dword [eax]
push eax
call fcn.004bd3e8
mov ecx, dword [ebp - 0xc0]
add esp, 4
cmp ecx, 0x10
jb 0x45065f
mov edx, dword [ebp - 0xd4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x450655
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x450728
jmp 0x450655
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x1c]
cmp ecx, 0x10
jb 0x4505b1
mov edx, dword [ebp - 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4505a7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x45072d
jmp 0x4505a7
push ecx
push edx
call fcn.004b40e2
add esp, 8
push esi
push 8
push 0x5298c8
lea edx, [ebp - 0x50]
lea ecx, [ebp - 0xd4]
call fcn.004530b0
add esp, 0xc
cmp dword [eax + 0x14], 0x10
jb 0x450680
mov eax, dword [eax]
push eax
call fcn.004bd3e8
mov ecx, dword [ebp - 0xc0]
add esp, 4
cmp ecx, 0x10
jb 0x4506bf
mov edx, dword [ebp - 0xd4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4506b5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x450732
push ecx
push edx
call fcn.004b40e2
add esp, 8
mov ecx, dword [ebp - 0x3c]
cmp ecx, 0x10
jb 0x4506ef
mov edx, dword [ebp - 0x50]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4506e5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x450737
push ecx
push edx
call fcn.004b40e2
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004b409a
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 4
call fcn.004424f0
call fcn.004bc460
call fcn.004bc460
call fcn.004bc460
call fcn.00442450
call fcn.004bc460
call fcn.004bc460
call fcn.004bc460
call fcn.004bc460
int3