Function at 0x4477f0
Capabilities:
Read file on windows

Disassembly:
mov eax, dword [esp + 4]
sub esp, 0x10
cmp eax, dword [0x4645f0]
push ebx
push esi
push edi
push ebp
jae 0x447a32
and eax, 0xffffffe7
sar eax, 3
lea ebp, [eax + 0x4644f0]
mov eax, dword [esp + 0x24]
and eax, 0x1f
lea ebx, [eax*8]
mov eax, dword [ebp]
add eax, ebx
test byte [eax + 4], 1
je 0x447a32
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x14], 0
test ecx, ecx
je 0x447a28
test byte [eax + 4], 2
jne 0x447a28
test byte [eax + 4], 0x48
je 0x447873
mov al, byte [eax + 5]
cmp al, 0xa
je 0x447873
mov byte [edx], al
inc edx
dec ecx
mov eax, dword [ebp]
mov dword [esp + 0x14], 1
mov byte [eax + ebx + 5], 0xa
lea eax, [esp + 0x18]
push 0
push eax
push ecx
push edx
mov ecx, dword [ebp]
mov edx, dword [ecx + ebx]
push edx
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x4478d9
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 5
jne 0x4478b4
pop ebp
mov dword [0x45fa94], eax
mov eax, 0xffffffff
pop edi
mov dword [0x45fa90], 9
pop esi
pop ebx
add esp, 0x10
ret
cmp eax, 0x6d
jne 0x4478c3
xor eax, eax
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x10
ret
push eax
call fcn.0044d140
add esp, 4
mov eax, 0xffffffff
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x10
ret
mov eax, dword [esp + 0x18]
mov ecx, dword [ebp]
add dword [esp + 0x14], eax
lea eax, [ecx + ebx + 4]
mov cl, byte [eax]
test cl, 0x80
je 0x447a1c
cmp dword [esp + 0x18], 0
je 0x447908
mov edx, dword [esp + 0x28]
cmp byte [edx], 0xa
jne 0x447908
or cl, 4
jmp 0x44790b
and cl, 0xfb
mov edi, dword [esp + 0x28]
mov byte [eax], cl
mov esi, edi
mov eax, dword [esp + 0x14]
add eax, edi
mov dword [esp + 0x1c], eax
cmp edi, eax
jae 0x447a14
mov al, byte [esi]
cmp al, 0x1a
je 0x447a01
cmp al, 0xd
je 0x44793b
inc esi
mov byte [edi], al
jmp 0x4479f4
mov ecx, dword [esp + 0x1c]
dec ecx
cmp ecx, esi
jbe 0x447960
lea ecx, [esi + 1]
cmp byte [ecx], 0xa
jne 0x447957
add esi, 2
mov byte [edi], 0xa
jmp 0x4479f4
mov esi, ecx
mov byte [edi], al
jmp 0x4479f4
inc esi
push 0
lea eax, [esp + 0x1c]
lea ecx, [esp + 0x17]
push eax
mov edx, dword [ebp]
mov dword [esp + 0x1c], 0
push 1
mov eax, dword [edx + ebx]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x447992
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esp + 0x14], eax
cmp dword [esp + 0x14], 0
jne 0x4479f1
cmp dword [esp + 0x18], 0
je 0x4479f1
mov eax, dword [ebp]
test byte [eax + ebx + 4], 0x48
je 0x4479c7
cmp byte [esp + 0x13], 0xa
jne 0x4479b6
mov byte [edi], 0xa
jmp 0x4479f4
mov byte [edi], 0xd
inc edi
mov al, byte [esp + 0x13]
mov ecx, dword [ebp]
mov byte [ecx + ebx + 5], al
jmp 0x4479f5
cmp dword [esp + 0x28], edi
jne 0x4479d9
cmp byte [esp + 0x13], 0xa
jne 0x4479d9
mov byte [edi], 0xa
jmp 0x4479f4
mov eax, dword [esp + 0x24]
push 1
push 0xffffffffffffffff
push eax
call fcn.00447a60
add esp, 0xc
cmp byte [esp + 0x13], 0xa
je 0x4479f5
mov byte [edi], 0xd
inc edi
cmp dword [esp + 0x1c], esi
ja 0x447925
jmp 0x447a14
mov eax, dword [ebp]
lea eax, [eax + ebx + 4]
mov cl, byte [eax]
test cl, 0x40
jne 0x447a14
or cl, 2
mov byte [eax], cl
sub edi, dword [esp + 0x28]
mov dword [esp + 0x14], edi
mov eax, dword [esp + 0x14]
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x10
ret
xor eax, eax
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x10
ret
mov eax, 0xffffffff
pop ebp
mov dword [0x45fa90], 9
mov dword [0x45fa94], 0
pop edi
pop esi
pop ebx
add esp, 0x10
ret