Function at 0x431e90
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x456d40
push 0x44bffc
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x298
push ebx
push esi
push edi
mov dword [ebp - 0x18], esp
or ebx, 0xffffffff
mov dword [ebp - 0x27c], ebx
xor esi, esi
mov dword [ebp - 4], esi
mov eax, dword [0x47518c]
cmp eax, esi
je 0x431ed9
push eax
call fcn.0044c186
add esp, 4
mov eax, dword [0x475178]
cmp eax, esi
je 0x431eeb
push eax
call fcn.0044c186
add esp, 4
mov dword [0x47518c], esi
mov dword [0x475178], esi
mov dword [0x4751a4], esi
mov dword [0x475190], esi
mov dword [0x475188], esi
mov dword [0x475198], esi
mov ecx, 6
xor eax, eax
lea edi, [ebp - 0x170]
rep stosd dword es:[edi], eax
cmp dword [0x477368], esi
je 0x431f6a
push 0x104
call fcn.0044c0d4
add esp, 4
mov dword [0x4751a8], eax
push 0x104
push eax
call fcn.00441170
test eax, eax
je 0x431f55
mov eax, dword [0x4751a8]
push eax
call dword [sym.imp.USER32.dll_CharLowerA]
jmp 0x431f6a
mov ecx, dword [0x4751a8]
push ecx
call fcn.0044c186
add esp, 4
mov dword [0x4751a8], esi
mov edi, 1
mov dword [0x47519c], edi
lea edx, [ebp - 0x158]
push edx
mov eax, dword [0x477410]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0x27c], eax
cmp eax, ebx
je 0x431fa3
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
mov ebx, 0x18
jmp 0x43205b
mov dword [ebp - 0x2a4], ebx
mov ebx, 0x18
mov dword [ebp - 0x298], ebx
mov dword [ebp - 0x294], esi
mov dword [ebp - 0x290], ebx
mov dword [ebp - 0x28c], edi
mov dword [ebp - 0x29c], 0x20000
push esi
push esi
push edi
push esi
push 2
push 0x40000000
mov ecx, dword [0x477410]
push ecx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov esi, eax
mov dword [ebp - 0x2a4], esi
cmp esi, 0xffffffff
jne 0x431ff9
xor eax, eax
jmp 0x432032
push 0
lea edx, [ebp - 0x2a0]
push edx
push ebx
lea eax, [ebp - 0x29c]
push eax
push esi
mov edi, dword [sym.imp.KERNEL32.dll_WriteFile]
call edi
push 0
lea ecx, [ebp - 0x2a0]
push ecx
push 1
push 0x475174
push esi
call edi
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, 1
mov dword [ebp - 0x2a8], eax
test eax, eax
jne 0x432059
mov dword [0x47519c], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
xor esi, esi
push esi
push esi
push 3
push esi
push 1
push 0x80000000
mov edx, dword [0x477410]
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov esi, eax
mov dword [ebp - 0x27c], esi
or edi, 0xffffffff
cmp esi, edi
jne 0x43208b
mov dword [ebp - 4], edi
jmp 0x43212d
push 0
lea eax, [ebp - 0x274]
push eax
push ebx
lea ecx, [ebp - 0x170]
push ecx
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x4320bb
cmp dword [ebp - 0x274], ebx
jne 0x4320bb
cmp dword [ebp - 0x170], 0x20000
je 0x4320c0
mov dword [ebp - 4], edi
jmp 0x43212d
lea edx, [ebp - 0x170]
push edx
push esi
call fcn.00432550
test eax, eax
je 0x4320bb
lea eax, [ebp - 0x170]
push eax
push esi
call fcn.004326b0
test eax, eax
je 0x4320bb
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 4], edi
mov eax, 1
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp esi, edi
je 0x432138
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x47518c]
test eax, eax
je 0x43214a
push eax
call fcn.0044c186
add esp, 4
mov eax, dword [0x475178]
test eax, eax
je 0x43215c
push eax
call fcn.0044c186
add esp, 4
xor eax, eax
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret