Function at 0x67342d54
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x25c
mov ebx, dword [ebp + 0x10]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0
mov eax, dword [ebp + 8]
mov dword [eax], 0
mov esi, dword [ebp + 0xc]
test esi, esi
je 0x673432ba
call fcn.67342cec
mov dword [ebp - 0x234], eax
test eax, eax
je 0x6734332d
test ebx, ebx
je 0x673432f8
mov edx, dword [ebp - 0x234]
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], ebx
mov dword [esp + 8], str._s__boundary_s_r_n
mov dword [esp + 4], 0
lea esi, [ebp - 0x1c]
mov dword [esp], esi
call fcn.67342310
test eax, eax
jne 0x673432c7
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x230], 0
lea ebx, [ebp - 0x28]
mov eax, dword [sym.imp.msvcrt.dll__iob]
mov dword [ebp - 0x238], eax
mov eax, dword [ebp - 0x24]
or eax, dword [ebp - 0x28]
je 0x67342e1a
mov dword [esp + 8], 0x67396344
mov dword [esp + 4], ebx
mov dword [esp], esi
call fcn.67342310
test eax, eax
jne 0x67342f95
mov edx, dword [ebp - 0x234]
mov dword [esp + 0xc], edx
mov dword [esp + 8], str.___s_r_n
mov dword [esp + 4], ebx
mov dword [esp], esi
call fcn.67342310
test eax, eax
jne 0x67342f95
mov dword [esp + 8], str.Content_Disposition:_form_data__name_
mov dword [esp + 4], ebx
mov dword [esp], esi
call fcn.67342310
test eax, eax
jne 0x67342f95
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 4]
mov dword [esp + 4], ebx
mov eax, dword [eax + 8]
mov dword [esp], eax
xor edx, edx
mov eax, esi
call fcn.673421c0
test eax, eax
jne 0x67342f95
mov dword [esp + 8], 0x67396377
mov dword [esp + 4], ebx
mov dword [esp], esi
call fcn.67342310
test eax, eax
jne 0x67342f95
mov ecx, dword [ebp + 0xc]
mov ecx, dword [ecx + 0x24]
test ecx, ecx
je 0x67343263
call fcn.67342cec
mov dword [ebp - 0x230], eax
mov dword [esp + 0xc], eax
mov dword [esp + 8], str._r_nContent_Type:_multipart_mixed__boundary_s_r_n
mov dword [esp + 4], ebx
mov dword [esp], esi
call fcn.67342310
test eax, eax
jne 0x67342f95
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 0x24]
mov edi, dword [ebp + 0xc]
test eax, eax
je 0x67343041
mov eax, dword [edi + 0x2c]
test eax, eax
je 0x6734326a
xor edx, edx
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x230]
mov dword [esp + 0xc], eax
mov dword [esp + 8], str._r_n___s_r_nContent_Disposition:_attachment__filename__s_
mov dword [esp + 4], ebx
mov dword [esp], esi
mov dword [ebp - 0x23c], edx
call fcn.67342310
mov edx, dword [ebp - 0x23c]
test edx, edx
je 0x67342f37
mov dword [esp], edx
mov dword [ebp - 0x23c], eax
call dword [0x67391008]
mov eax, dword [ebp - 0x23c]
test eax, eax
jne 0x67342f95
mov eax, dword [edi + 0x1c]
test eax, eax
je 0x67342f5e
mov dword [esp + 0xc], eax
mov dword [esp + 8], str._r_nContent_Type:__s
mov dword [esp + 4], ebx
mov dword [esp], esi
call fcn.67342310
test eax, eax
jne 0x67342f95
mov edx, dword [edi + 0x20]
test edx, edx
je 0x67342fce
mov dword [ebp - 0x22c], edi
mov edi, edx
jmp 0x67342f77
mov edi, dword [edi + 4]
test edi, edi
je 0x67342fc8
mov eax, dword [edi]
mov dword [esp + 0xc], eax
mov dword [esp + 8], str._r_n_s
mov dword [esp + 4], ebx
mov dword [esp], esi
call fcn.67342310
test eax, eax
je 0x67342f70
lea edx, [ebp - 0x20]
mov dword [esp], edx
mov dword [ebp - 0x23c], eax
call fcn.67342b00
mov edx, dword [ebp - 0x234]
mov dword [esp], edx
call dword [0x67391008]
mov eax, dword [ebp - 0x23c]
add esp, 0x25c
pop ebx
pop esi
pop edi
leave
ret
mov edi, dword [ebp - 0x22c]
mov dword [esp + 8], str._r_n_r_n
mov dword [esp + 4], ebx
mov dword [esp], esi
call fcn.67342310
test eax, eax
jne 0x67342f95
mov ecx, dword [ebp + 0xc]
mov eax, dword [ecx + 0x28]
test al, 3
jne 0x6734308c
test al, 0x10
jne 0x673431d8
test al, 0x40
je 0x673431ac
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 0x30]
mov dword [esp + 4], ebx
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov edx, 2
mov eax, esi
call fcn.673421c0
test eax, eax
jne 0x67342f95
mov edi, dword [edi + 0x24]
test edi, edi
je 0x673430ec
mov ecx, dword [ebp + 0xc]
mov eax, dword [ecx + 0x24]
test eax, eax
jne 0x67342ee3
mov edx, dword [ebp + 0xc]
test byte [edx + 0x28], 0x51
je 0x67342f3b
mov eax, dword [edx + 0x2c]
test eax, eax
je 0x67343337
xor edx, edx
mov dword [esp + 0xc], eax
mov dword [esp + 8], str.__filename__s_
mov dword [esp + 4], ebx
mov dword [esp], esi
mov dword [ebp - 0x23c], edx
call fcn.67342310
mov edx, dword [ebp - 0x23c]
test edx, edx
jne 0x67342f22
jmp 0x67342f37
mov eax, dword [edi + 0xc]
mov dword [esp + 4], eax
mov dword [esp], 0x67396284
call fcn.67343d64
test eax, eax
je 0x6734323c
mov eax, dword [ebp - 0x238]
mov edx, eax
cmp edx, eax
je 0x673431e7
mov dword [esp], edx
call sub.msvcrt.dll_fclose
mov ecx, dword [edi + 0xc]
mov dword [esp + 4], ebx
mov dword [esp], 0
mov edx, 3
mov eax, esi
call fcn.673421c0
test eax, eax
jne 0x67342f95
mov edi, dword [edi + 0x24]
test edi, edi
jne 0x67343033
mov eax, dword [ebp + 0xc]
mov edx, dword [eax + 0x24]
test edx, edx
je 0x67343137
mov ecx, dword [ebp - 0x230]
mov dword [esp + 0xc], ecx
mov dword [esp + 8], str._r_n___s__
mov dword [esp + 4], ebx
mov dword [esp], esi
call fcn.67342310
mov edx, dword [ebp - 0x230]
mov dword [esp], edx
mov dword [ebp - 0x23c], eax
call dword [0x67391008]
mov eax, dword [ebp - 0x23c]
test eax, eax
jne 0x67342f95
mov ecx, dword [ebp + 0xc]
mov ecx, dword [ecx]
mov dword [ebp + 0xc], ecx
test ecx, ecx
jne 0x67342df6
mov edx, dword [ebp - 0x234]
mov dword [esp + 0xc], edx
mov dword [esp + 8], str._r_n___s___r_n
mov dword [esp + 4], ebx
mov dword [esp], esi
call fcn.67342310
test eax, eax
jne 0x67343302
mov ecx, dword [ebp - 0x28]
mov ebx, dword [ebp - 0x24]
mov edx, dword [ebp + 0x14]
mov dword [edx], ecx
mov dword [edx + 4], ebx
mov edx, dword [ebp - 0x234]
mov dword [esp], edx
mov dword [ebp - 0x23c], eax
call dword [0x67391008]
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebp + 8]
mov dword [ecx], edx
mov eax, dword [ebp - 0x23c]
add esp, 0x25c
pop ebx
pop esi
pop edi
leave
ret
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [esp + 4], ebx
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov edx, 1
mov eax, esi
call fcn.673421c0
test eax, eax
je 0x67343028
jmp 0x67342f95
mov edx, dword [ebp + 0xc]
mov ecx, dword [edx + 0x14]
mov dword [esp + 4], ebx
mov eax, dword [edx + 0x18]
jmp 0x673431b9
mov dword [ebp - 0x22c], edi
mov edi, edx
nop
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0x200
mov dword [esp + 4], 1
lea eax, [ebp - 0x228]
mov dword [esp], eax
call sub.msvcrt.dll_fread
test eax, eax
je 0x673432ed
mov dword [esp + 4], ebx
mov dword [esp], eax
lea ecx, [ebp - 0x228]
mov edx, 1
mov eax, esi
call fcn.673421c0
test eax, eax
je 0x673431f0
jmp 0x67342f95
mov dword [esp + 4], 0x67396281
mov eax, dword [edi + 0xc]
mov dword [esp], eax
call sub.msvcrt.dll_fopen
mov edx, eax
test eax, eax
je 0x67343356
mov eax, dword [sym.imp.msvcrt.dll__iob]
jmp 0x673430af
xor eax, eax
jmp 0x67342ed8
mov eax, dword [edi + 0xc]
call fcn.67342174
mov edx, eax
test eax, eax
je 0x67343383
mov eax, dword [edi + 0x2c]
test eax, eax
jne 0x67342ef0
mov dword [esp + 0x10], edx
mov ecx, dword [ebp - 0x230]
mov dword [esp + 0xc], ecx
mov dword [esp + 8], str._r_n___s_r_nContent_Disposition:_attachment__filename__s_
mov dword [esp + 4], ebx
mov dword [esp], esi
mov dword [ebp - 0x23c], edx
call fcn.67342310
mov edx, dword [ebp - 0x23c]
jmp 0x67342f22
xor eax, eax
add esp, 0x25c
pop ebx
pop esi
pop edi
leave
ret
mov ecx, dword [ebp - 0x234]
mov dword [esp], ecx
mov dword [ebp - 0x23c], eax
call dword [0x67391008]
mov eax, dword [ebp - 0x23c]
add esp, 0x25c
pop ebx
pop esi
pop edi
leave
ret
mov edi, dword [ebp - 0x22c]
jmp 0x67343028
mov ebx, str.Content_Type:_multipart_form_data
jmp 0x67342da7
lea edx, [ebp - 0x20]
mov dword [esp], edx
mov dword [ebp - 0x23c], eax
call fcn.67342b00
mov ecx, dword [ebp - 0x234]
mov dword [esp], ecx
call dword [0x67391008]
mov eax, dword [ebp - 0x23c]
jmp 0x67342fbb
mov eax, 0x1b
jmp 0x67342fbb
mov eax, dword [edx + 0xc]
call fcn.67342174
mov edx, eax
mov ecx, dword [ebp + 0xc]
mov eax, dword [ecx + 0x2c]
test eax, eax
jne 0x6734305b
mov eax, edx
jmp 0x6734305b
lea eax, [ebp - 0x20]
mov dword [esp], eax
call fcn.67342b00
mov ecx, dword [ebp - 0x234]
mov dword [esp], ecx
call dword [0x67391008]
mov eax, dword [ebp + 8]
mov dword [eax], 0
mov eax, 0x1a
jmp 0x67342fbb
lea eax, [ebp - 0x20]
mov dword [esp], eax
call fcn.67342b00
mov ecx, dword [ebp - 0x234]
mov dword [esp], ecx
call dword [0x67391008]
mov eax, 0x1b
jmp 0x67342fbb