Function at 0x44ffe0
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4e0104
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0xf8
mov eax, dword [0x534094]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, dword [ebx + 8]
mov eax, closesocket
mov dword [ebp - 0x64], 0
mov dword [ecx + 4], 0xa
add ecx, 0xc
mov dword [ebp - 0x6c], edi
mov esi, dword [edi + 0x10]
mov edx, dword [ecx + 0x10]
sub eax, edx
cmp eax, esi
jb 0x4509af
cmp dword [ecx + 0x14], 0x10
jb 0x450055
mov ecx, dword [ecx]
cmp dword [edi + 0x14], 0x10
mov eax, edi
jb 0x45005f
mov eax, dword [edi]
push esi
push eax
push edx
push ecx
push ecx
push dword [ebp - 0x6c]
lea ecx, [ebp - 0xbc]
call fcn.00449b30
mov dword [ebp - 4], 0
lea ecx, [ebp - 0xbc]
mov esi, dword [ebp - 0xa8]
mov eax, esi
mov edx, dword [ebp - 0xac]
sub eax, edx
cmp eax, 1
jb 0x4500bc
cmp esi, 0x10
lea eax, [edx + 1]
mov dword [ebp - 0xac], eax
cmovae ecx, dword [ebp - 0xbc]
mov al, byte [0x52a5f8]
mov byte [edx + ecx], al
lea eax, [ebp - 0xbc]
mov byte [edx + ecx + 1], 0
jmp 0x4500cd
push 1
push 0x52a5f8
push dword [ebp - 0x6c]
push 1
call fcn.00448ed0
mov dword [ebp - 0x40], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x50], xmm0
mov dword [ebp - 0x3c], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x50], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x40], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov eax, 0x60
mov dword [ebp - 0x60], eax
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0xa8]
cmp ecx, 0x10
jb 0x45014a
mov edx, dword [ebp - 0xbc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x450140
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4509b4
push ecx
push edx
call fcn.004b43c2
add esp, 8
push edi
push 8
push 0x52a8b4
lea edx, [ebp - 0x50]
mov dword [ebp - 0xac], 0
lea ecx, [ebp - 0xec]
mov dword [ebp - 0xa8], 0xf
mov byte [ebp - 0xbc], 0
mov dword [ebp - 0x34], 0
call fcn.00453350
add esp, 0xc
cmp dword [eax + 0x14], 0x10
jb 0x45018d
mov eax, dword [eax]
mov esi, dword [sym.imp.KERNEL32.dll_CreateFileA]
push 0
push 0x80
push 3
push 0
push 1
push 1
push eax
call esi
mov ecx, dword [ebp - 0xd8]
mov edi, eax
mov dword [ebp - 0x70], edi
cmp ecx, 0x10
jb 0x4501e4
mov edx, dword [ebp - 0xec]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4501da
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4509b9
push ecx
push edx
call fcn.004b43c2
add esp, 8
push dword [ebp - 0x6c]
lea edx, [ebp - 0x50]
mov dword [ebp - 0xdc], 0
push 8
push 0x52a8c0
lea ecx, [ebp - 0x104]
mov dword [ebp - 0xd8], 0xf
mov byte [ebp - 0xec], 0
call fcn.00453350
add esp, 0xc
cmp dword [eax + 0x14], 0x10
jb 0x450222
mov eax, dword [eax]
push 0
push 0x80
push 3
push 0
push 1
push 1
push eax
call esi
mov ecx, dword [ebp - 0xf0]
mov dword [ebp - 0x68], eax
cmp ecx, 0x10
jb 0x450274
mov edx, dword [ebp - 0x104]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x450267
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4509be
push ecx
push edx
call fcn.004b43c2
mov eax, dword [ebp - 0x68]
add esp, 8
mov dword [ebp - 0xf4], 0
mov dword [ebp - 0xf0], 0xf
mov byte [ebp - 0x104], 0
cmp edi, 0xffffffff
je 0x45095f
cmp eax, 0xffffffff
je 0x45095f
mov esi, dword [sym.imp.KERNEL32.dll_ReadFile]
lea eax, [ebp - 0x18]
push 0
push eax
push 4
lea eax, [ebp - 0x34]
mov dword [ebp - 0x18], 0
push eax
push edi
call esi
cmp eax, 1
jne 0x450851
cmp dword [ebp - 0x34], 0
mov dword [ebp - 0x74], 0
jbe 0x450851
nop word [eax + eax]
push 0
lea eax, [ebp - 0x18]
mov dword [ebp - 0x58], 0
push eax
push 4
lea eax, [ebp - 0x58]
push eax
push edi
call esi
test eax, eax
je 0x450851
mov edi, dword [ebp - 0x58]
xorps xmm0, xmm0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
movups xmmword [ebp - 0x30], xmm0
cmp edi, 0x7fffffff
ja 0x4509af
mov dword [ebp - 0x1c], 0xf
cmp edi, 0x10
jae 0x450347
push edi
lea eax, [ebp - 0x30]
mov dword [ebp - 0x20], edi
push 0
push eax
call fcn.004b6520
mov byte [ebp + edi - 0x30], 0
jmp 0x4503d7
mov esi, edi
or esi, 0xf
cmp esi, 0x7fffffff
jbe 0x450363
mov ecx, closesocket
mov esi, closesocket
add ecx, 0x23
jmp 0x450383
cmp esi, 0x16
mov eax, 0x16
cmovb esi, eax
lea eax, [esi + 1]
cmp eax, 0x1000
jb 0x4503a1
lea ecx, [eax + 0x23]
cmp ecx, eax
jbe 0x4509c3
push ecx
call fcn.004b438d
mov ecx, eax
add esp, 4
test ecx, ecx
je 0x4509cd
lea eax, [ecx + 0x23]
and eax, 0xffffffe0
mov dword [eax - 4], ecx
jmp 0x4503b2
test eax, eax
je 0x4503b0
push eax
call fcn.004b438d
add esp, 4
jmp 0x4503b2
xor eax, eax
push edi
push 0
push eax
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x1c], esi
call fcn.004b6520
mov eax, dword [ebp - 0x64]
mov esi, dword [sym.imp.KERNEL32.dll_ReadFile]
mov byte [eax + edi], 0
mov edi, dword [ebp - 0x58]
add esp, 0xc
push 0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x18]
cmp dword [ebp - 0x1c], 0x10
lea eax, [ebp - 0x30]
push ecx
cmovae eax, dword [ebp - 0x30]
push edi
mov edi, dword [ebp - 0x70]
push eax
push edi
call esi
test eax, eax
je 0x4508be
push 0
lea eax, [ebp - 0x18]
mov dword [ebp - 0x38], 0
push eax
push 4
lea eax, [ebp - 0x38]
mov dword [ebp - 0x54], 0
push eax
push edi
call esi
test eax, eax
je 0x450819
push 0
lea eax, [ebp - 0x18]
push eax
push 4
lea eax, [ebp - 0x54]
push eax
push edi
call esi
test eax, eax
je 0x450819
cmp dword [ebp - 0x1c], 0x10
lea esi, [ebp - 0x30]
mov eax, dword [ebp - 0x20]
cmovae esi, dword [ebp - 0x30]
cmp eax, 1
jb 0x4505bc
lea edi, [esi + eax]
mov eax, edi
sub eax, esi
push eax
push 0x5c
push esi
call fcn.004b6c00
add esp, 0xc
test eax, eax
je 0x4505bc
nop dword [eax]
movzx ecx, byte [eax]
cmp cl, 0x5c
jne 0x45047c
xor ecx, ecx
jmp 0x450481
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x45049f
inc eax
mov ecx, edi
sub ecx, eax
push ecx
push 0x5c
push eax
call fcn.004b6c00
add esp, 0xc
test eax, eax
jne 0x450470
jmp 0x4505bc
sub eax, esi
cmp eax, 0xffffffff
je 0x4505bc
lea eax, [ebp - 0x30]
push eax
push 4
push 0x52a8cc
lea edx, [ebp - 0x50]
lea ecx, [ebp - 0xd4]
call fcn.00453350
add esp, 0xc
mov edx, eax
mov byte [ebp - 4], 4
mov esi, dword [ebp - 0x60]
or esi, 1
cmp dword [edx + 0x14], 0x10
mov dword [ebp - 0x64], esi
jb 0x4504dd
mov edx, dword [edx]
mov ecx, edx
mov dword [ebp - 0x94], 0
xorps xmm0, xmm0
mov dword [ebp - 0x90], 0
movups xmmword [ebp - 0xa4], xmm0
lea edi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x450500
sub ecx, edi
push ecx
push edx
lea ecx, [ebp - 0xa4]
call fcn.00449030
mov dword [ebp - 4], 5
lea ecx, [ebp - 0xa4]
or esi, 2
cmp dword [ebp - 0x90], 0x10
push 2
cmovae ecx, dword [ebp - 0xa4]
setae byte [ebp - 0x59]
sub esp, 8
mov dword [ebp - 0x60], esi
mov dword [ebp - 0x64], esi
mov esi, dword [ebp - 0x94]
mov edx, esi
call fcn.00448d10
mov ecx, eax
mov dword [ebp - 0x7c], 0
add esp, 0xc
mov dword [ebp - 0x78], 0
cmp esi, ecx
lea eax, [ebp - 0xa4]
xorps xmm0, xmm0
cmovb ecx, esi
cmp byte [ebp - 0x59], 0
push ecx
cmovne eax, dword [ebp - 0xa4]
lea ecx, [ebp - 0x8c]
push eax
movups xmmword [ebp - 0x8c], xmm0
call fcn.00449030
mov eax, dword [ebp - 0x60]
or eax, 0x1800
or eax, 4
mov dword [ebp - 4], 6
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0x8c]
push eax
call fcn.00451990
mov byte [ebp - 0x59], 1
test eax, eax
je 0x4505c0
mov byte [ebp - 0x59], 0
mov dword [ebp - 4], 5
mov eax, dword [ebp - 0x60]
test al, 4
je 0x450623
mov ecx, dword [ebp - 0x78]
and eax, 0xfffffffb
mov dword [ebp - 0x60], eax
cmp ecx, 0x10
jb 0x45060e
mov edx, dword [ebp - 0x8c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x450601
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4509b4
push ecx
push edx
call fcn.004b43c2
mov eax, dword [ebp - 0x60]
add esp, 8
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0xf
mov byte [ebp - 0x8c], 0
mov dword [ebp - 4], 4
test al, 2
je 0x45068c
mov ecx, dword [ebp - 0x90]
and eax, 0xfffffffd
mov dword [ebp - 0x60], eax
cmp ecx, 0x10
jb 0x450671
mov edx, dword [ebp - 0xa4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x450664
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4509b4
push ecx
push edx
call fcn.004b43c2
mov eax, dword [ebp - 0x60]
add esp, 8
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 0xf
mov byte [ebp - 0xa4], 0
mov dword [ebp - 4], 3
test al, 1
je 0x4506d7
mov ecx, dword [ebp - 0xc0]
and eax, 0xfffffffe
mov dword [ebp - 0x60], eax
cmp ecx, 0x10
jb 0x4506d7
mov edx, dword [ebp - 0xd4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4506cd
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4509b4
push ecx
push edx
call fcn.004b43c2
add esp, 8
cmp byte [ebp - 0x59], 0
jne 0x4507c7
lea eax, [ebp - 0x30]
push eax
push 4
push 0x52a8cc
lea edx, [ebp - 0x50]
lea ecx, [ebp - 0x8c]
call fcn.00453350
add esp, 0xc
cmp dword [eax + 0x14], 0x10
jb 0x450705
mov eax, dword [eax]
push 0
push 0x80
push 2
push 0
push 1
push 2
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, dword [ebp - 0x78]
mov esi, eax
cmp ecx, 0x10
jb 0x450754
mov edx, dword [ebp - 0x8c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x45074a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4509b4
push ecx
push edx
call fcn.004b43c2
add esp, 8
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0xf
mov byte [ebp - 0x8c], 0
cmp esi, 0xffffffff
je 0x4507c7
push 0
push 0
push dword [ebp - 0x38]
push dword [ebp - 0x68]
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
push dword [ebp - 0x54]
call fcn.004b43d0
add esp, 4
mov edi, eax
lea eax, [ebp - 0x18]
push 0
push eax
push dword [ebp - 0x54]
push edi
push dword [ebp - 0x68]
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x4507c7
push 0
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x54]
push edi
push esi
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x4507c7
push edi
call fcn.004b4388
add esp, 4
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x1c]
cmp ecx, 0x10
jb 0x4507ff
mov edx, dword [ebp - 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4507f5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4509cd
push ecx
push edx
call fcn.004b43c2
add esp, 8
mov eax, dword [ebp - 0x74]
mov edi, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x74], eax
cmp eax, dword [ebp - 0x34]
jae 0x450851
mov esi, dword [sym.imp.KERNEL32.dll_ReadFile]
jmp 0x4502e0
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x1c]
cmp ecx, 0x10
jb 0x450851
mov edx, dword [ebp - 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x450847
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4509cd
push ecx
push edx
call fcn.004b43c2
add esp, 8
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push edi
call esi
push dword [ebp - 0x68]
call esi
mov esi, dword [ebp - 0x6c]
lea edx, [ebp - 0x50]
push esi
push 8
push 0x52a8b4
lea ecx, [ebp - 0xd4]
call fcn.00453350
add esp, 0xc
cmp dword [eax + 0x14], 0x10
jb 0x450883
mov eax, dword [eax]
push eax
call fcn.004bd6c8
mov ecx, dword [ebp - 0xc0]
add esp, 4
cmp ecx, 0x10
jb 0x4508ff
mov edx, dword [ebp - 0xd4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4508f5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4509c8
jmp 0x4508f5
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x1c]
cmp ecx, 0x10
jb 0x450851
mov edx, dword [ebp - 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x450847
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4509cd
jmp 0x450847
push ecx
push edx
call fcn.004b43c2
add esp, 8
push esi
push 8
push 0x52a8c0
lea edx, [ebp - 0x50]
lea ecx, [ebp - 0xd4]
call fcn.00453350
add esp, 0xc
cmp dword [eax + 0x14], 0x10
jb 0x450920
mov eax, dword [eax]
push eax
call fcn.004bd6c8
mov ecx, dword [ebp - 0xc0]
add esp, 4
cmp ecx, 0x10
jb 0x45095f
mov edx, dword [ebp - 0xd4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x450955
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4509d2
push ecx
push edx
call fcn.004b43c2
add esp, 8
mov ecx, dword [ebp - 0x3c]
cmp ecx, 0x10
jb 0x45098f
mov edx, dword [ebp - 0x50]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x450985
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4509d7
push ecx
push edx
call fcn.004b43c2
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004b437a
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 4
call fcn.00442790
call fcn.004bc740
call fcn.004bc740
call fcn.004bc740
call fcn.004426f0
call fcn.004bc740
call fcn.004bc740
call fcn.004bc740
call fcn.004bc740
int3