Function at 0x41cb11
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x238
mov eax, dword [0x444044]
xor eax, ebp
mov dword [ebp - 8], eax
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
xor edi, edi
mov ebx, edx
cmp ebx, edi
mov dword [ebp - 0x234], eax
mov dword [ebp - 0x238], ecx
mov dword [ebp - 0x210], edi
mov dword [ebp - 0x21c], edi
mov dword [ebp - 0x218], edi
mov dword [ebp - 0x230], edi
mov dword [eax], edi
jne 0x41cb5f
xor eax, eax
jmp 0x41cfdc
call fcn.0041d0e3
cmp eax, edi
mov dword [ebp - 0x220], eax
jne 0x41cb75
push 0x1b
jmp 0x41cfdb
push eax
push str.Content_Type:_multipart_form_data__boundary_s_r_n
push edi
lea esi, [ebp - 0x210]
call fcn.0041ca2c
mov esi, eax
add esp, 0xc
test esi, esi
je 0x41cba4
push dword [ebp - 0x220]
call dword [0x4452a8]
pop ecx
mov eax, esi
jmp 0x41cfdc
mov eax, dword [ebp - 0x210]
mov dword [ebp - 0x228], eax
or edi, dword [ebp - 0x218]
je 0x41cbdb
lea eax, [ebp - 0x21c]
push 0x43c930
push eax
lea esi, [ebp - 0x210]
call fcn.0041ca2c
mov esi, eax
test esi, esi
pop ecx
pop ecx
jne 0x41cf47
push dword [ebp - 0x220]
lea eax, [ebp - 0x21c]
push str.___s_r_n
push eax
lea esi, [ebp - 0x210]
call fcn.0041ca2c
mov esi, eax
add esp, 0xc
test esi, esi
jne 0x41cf47
lea eax, [ebp - 0x21c]
push str.Content_Disposition:_form_data__name_
push eax
lea esi, [ebp - 0x210]
call fcn.0041ca2c
mov esi, eax
test esi, esi
pop ecx
pop ecx
jne 0x41cf47
lea eax, [ebp - 0x21c]
push eax
push dword [ebx + 4]
mov eax, dword [ebx + 8]
push esi
lea ecx, [ebp - 0x210]
call fcn.0041c96a
mov esi, eax
add esp, 0xc
test esi, esi
jne 0x41cf47
lea eax, [ebp - 0x21c]
push 0x4401d4
push eax
lea esi, [ebp - 0x210]
call fcn.0041ca2c
mov esi, eax
test esi, esi
pop ecx
pop ecx
jne 0x41cf47
cmp dword [ebx + 0x24], eax
je 0x41cca6
call fcn.0041d0e3
push eax
mov dword [ebp - 0x230], eax
lea eax, [ebp - 0x21c]
push str._r_nContent_Type:_multipart_mixed__boundary_s_r_n
push eax
lea esi, [ebp - 0x210]
call fcn.0041ca2c
mov esi, eax
add esp, 0xc
test esi, esi
jne 0x41cf47
mov dword [ebp - 0x224], ebx
xor edi, edi
cmp dword [ebx + 0x24], edi
je 0x41ccfb
mov eax, dword [ebp - 0x224]
cmp dword [eax + 0x2c], edi
jne 0x41ccc9
push dword [eax + 0xc]
call fcn.0041cae0
pop ecx
mov edi, eax
mov eax, dword [ebp - 0x224]
mov eax, dword [eax + 0x2c]
test eax, eax
jne 0x41ccd8
mov eax, edi
push eax
push dword [ebp - 0x230]
lea eax, [ebp - 0x21c]
push str._r_n___s_r_nContent_Disposition:_attachment__filename__s_
push eax
lea esi, [ebp - 0x210]
call fcn.0041ca2c
add esp, 0x10
jmp 0x41cd35
test byte [ebx + 0x28], 0x11
je 0x41cd4b
cmp dword [ebx + 0x2c], edi
jne 0x41cd11
push dword [ebx + 0xc]
call fcn.0041cae0
pop ecx
mov edi, eax
mov eax, dword [ebx + 0x2c]
test eax, eax
jne 0x41cd1a
mov eax, edi
push eax
lea eax, [ebp - 0x21c]
push str.__filename__s_
push eax
lea esi, [ebp - 0x210]
call fcn.0041ca2c
add esp, 0xc
test edi, edi
mov esi, eax
je 0x41cd43
push edi
call dword [0x4452a8]
pop ecx
test esi, esi
jne 0x41cf47
mov eax, dword [ebp - 0x224]
mov eax, dword [eax + 0x1c]
test eax, eax
je 0x41cd7d
push eax
lea eax, [ebp - 0x21c]
push str._r_nContent_Type:__s
push eax
lea esi, [ebp - 0x210]
call fcn.0041ca2c
mov esi, eax
add esp, 0xc
test esi, esi
jne 0x41cf47
mov eax, dword [ebp - 0x224]
mov edi, dword [eax + 0x20]
jmp 0x41cdb1
push dword [edi]
lea eax, [ebp - 0x21c]
push str._r_n_s
push eax
lea esi, [ebp - 0x210]
call fcn.0041ca2c
mov esi, eax
add esp, 0xc
test esi, esi
jne 0x41cf47
mov edi, dword [edi + 4]
test edi, edi
jne 0x41cd88
test esi, esi
jne 0x41cf47
lea eax, [ebp - 0x21c]
push str._r_n_r_n
push eax
lea esi, [ebp - 0x210]
call fcn.0041ca2c
mov esi, eax
test esi, esi
pop ecx
pop ecx
jne 0x41cf47
mov eax, dword [ebx + 0x28]
test al, 3
jne 0x41ce0a
test al, 0x10
lea eax, [ebp - 0x21c]
lea ecx, [ebp - 0x210]
push eax
je 0x41ce02
push dword [ebx + 0x14]
mov eax, dword [ebx + 0x18]
push 0
jmp 0x41ce74
push dword [ebx + 0xc]
mov eax, dword [ebx + 0x10]
jmp 0x41cdfe
mov edi, dword [ebp - 0x224]
push dword [edi + 0xc]
push 0x43d050
call fcn.004124dc
test eax, eax
pop ecx
pop ecx
je 0x41ce2a
call fcn.004257a6
jmp 0x41ce39
push 0x440274
push dword [edi + 0xc]
call fcn.0043059a
pop ecx
pop ecx
test eax, eax
mov dword [ebp - 0x22c], eax
je 0x41cfb8
call fcn.004257a6
cmp dword [ebp - 0x22c], eax
push dword [ebp - 0x22c]
je 0x41ce80
call fcn.0041fc3e
pop ecx
lea eax, [ebp - 0x21c]
push eax
push dword [edi + 0xc]
xor eax, eax
push 1
lea ecx, [ebp - 0x210]
call fcn.0041c96a
add esp, 0xc
mov esi, eax
jmp 0x41cedf
mov edi, 0x200
push edi
lea eax, [ebp - 0x20c]
push 1
push eax
call fcn.0042067d
add esp, 0x10
test eax, eax
je 0x41cee3
lea ecx, [ebp - 0x21c]
push ecx
lea ecx, [ebp - 0x20c]
push ecx
push 0
lea ecx, [ebp - 0x210]
call fcn.0041c96a
mov esi, eax
add esp, 0xc
test esi, esi
jne 0x41cf47
push dword [ebp - 0x22c]
lea eax, [ebp - 0x20c]
push edi
push 1
push eax
call fcn.0042067d
add esp, 0x10
test eax, eax
jne 0x41ce9b
test esi, esi
jne 0x41cf47
mov eax, dword [ebp - 0x224]
mov eax, dword [eax + 0x24]
test eax, eax
mov dword [ebp - 0x224], eax
jne 0x41ccac
test esi, esi
jne 0x41cf47
cmp dword [ebx + 0x24], esi
je 0x41cf36
push dword [ebp - 0x230]
lea eax, [ebp - 0x21c]
push str._r_n___s__
push eax
lea esi, [ebp - 0x210]
call fcn.0041ca2c
add esp, 0xc
push dword [ebp - 0x230]
mov esi, eax
call dword [0x4452a8]
test esi, esi
pop ecx
jne 0x41cf47
mov ebx, dword [ebx]
test ebx, ebx
je 0x41cf57
mov edi, dword [ebp - 0x21c]
jmp 0x41cbb0
mov eax, dword [ebp - 0x228]
call fcn.0041ca81
jmp 0x41cb90
test esi, esi
jne 0x41cf47
push dword [ebp - 0x220]
lea eax, [ebp - 0x21c]
push str._r_n___s___r_n
push eax
lea esi, [ebp - 0x210]
call fcn.0041ca2c
mov esi, eax
add esp, 0xc
test esi, esi
jne 0x41cf47
mov eax, dword [ebp - 0x238]
mov ecx, dword [ebp - 0x21c]
push dword [ebp - 0x220]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x218]
mov dword [eax + 4], ecx
call dword [0x4452a8]
mov eax, dword [ebp - 0x228]
pop ecx
mov ecx, dword [ebp - 0x234]
mov dword [ecx], eax
jmp 0x41cb58
mov eax, dword [ebp - 0x228]
call fcn.0041ca81
push dword [ebp - 0x220]
call dword [0x4452a8]
mov eax, dword [ebp - 0x234]
and dword [eax], 0
pop ecx
push 0x1a
pop eax
mov ecx, dword [ebp - 8]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0041e1a0
leave
ret