Function at 0x4411e0
Capabilities:
Read file on windows

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0x25c
mov ebx, dword [esp + 0x27c]
mov dword [esp + 0x40], 0
mov dword [esp + 0x48], 0
mov dword [esp + 0x4c], 0
mov eax, dword [esp + 0x274]
mov dword [eax], 0
mov eax, dword [esp + 0x278]
test eax, eax
je 0x441660
mov eax, dword [esp + 0x270]
call fcn.004403a4
mov dword [esp + 0x34], eax
test eax, eax
je 0x44166d
test ebx, ebx
je 0x4416b6
mov eax, dword [esp + 0x34]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], ebx
mov dword [esp + 8], str._s__boundary_s_r_n
mov dword [esp + 4], 0
lea ebx, [esp + 0x40]
mov dword [esp], ebx
call fcn.00440544
test eax, eax
jne 0x441485
mov eax, dword [esp + 0x40]
mov dword [esp + 0x44], eax
mov dword [esp + 0x30], 0
lea esi, [esp + 0x48]
mov ecx, dword [sym.imp.msvcrt.dll__iob]
mov dword [esp + 0x3c], ecx
mov eax, dword [esp + 0x4c]
or eax, dword [esp + 0x48]
je 0x4412b9
mov dword [esp + 8], 0x5ae93b
mov dword [esp + 4], esi
mov dword [esp], ebx
call fcn.00440544
test eax, eax
jne 0x441441
mov eax, dword [esp + 0x34]
mov dword [esp + 0xc], eax
mov dword [esp + 8], str.___s_r_n
mov dword [esp + 4], esi
mov dword [esp], ebx
call fcn.00440544
test eax, eax
jne 0x441441
mov dword [esp + 8], str.Content_Disposition:_form_data__name_
mov dword [esp + 4], esi
mov dword [esp], ebx
call fcn.00440544
test eax, eax
jne 0x441441
mov edx, dword [esp + 0x278]
mov ecx, dword [edx + 4]
mov dword [esp + 4], esi
mov eax, dword [edx + 8]
mov dword [esp], eax
xor edx, edx
mov eax, ebx
call fcn.004403d8
test eax, eax
jne 0x441441
mov dword [esp + 8], 0x5ae967
mov dword [esp + 4], esi
mov dword [esp], ebx
call fcn.00440544
test eax, eax
jne 0x441441
mov ecx, dword [esp + 0x278]
mov eax, dword [ecx + 0x24]
test eax, eax
je 0x4416cd
mov eax, dword [esp + 0x30]
test eax, eax
je 0x441361
mov eax, dword [esp + 0x30]
mov dword [esp], eax
call dword [0x59b00c]
mov eax, dword [esp + 0x270]
call fcn.004403a4
mov dword [esp + 0x30], eax
test eax, eax
je 0x4417a8
mov dword [esp + 0xc], eax
mov dword [esp + 8], str._r_nContent_Type:_multipart_mixed__boundary_s_r_n
mov dword [esp + 4], esi
mov dword [esp], ebx
call fcn.00440544
test eax, eax
jne 0x441441
mov edx, dword [esp + 0x278]
mov eax, dword [edx + 0x24]
mov ebp, dword [esp + 0x278]
test eax, eax
je 0x441527
mov eax, dword [esp + 0x30]
mov dword [esp + 0xc], eax
mov dword [esp + 8], str._r_n___s_r_nContent_Disposition:_attachment
mov dword [esp + 4], esi
mov dword [esp], ebx
call fcn.00440544
test eax, eax
jne 0x441441
mov edx, dword [ebp + 0x2c]
mov eax, dword [ebp + 0xc]
mov dword [esp], esi
mov ecx, ebx
call fcn.004405ac
test eax, eax
jne 0x441441
mov eax, dword [ebp + 0x1c]
test eax, eax
je 0x441409
mov dword [esp + 0xc], eax
mov dword [esp + 8], str._r_nContent_Type:__s
mov dword [esp + 4], esi
mov dword [esp], ebx
call fcn.00440544
test eax, eax
jne 0x441441
mov edi, dword [ebp + 0x20]
test edi, edi
jne 0x441423
jmp 0x4414a8
mov edi, dword [edi + 4]
test edi, edi
je 0x4414a8
mov eax, dword [edi]
mov dword [esp + 0xc], eax
mov dword [esp + 8], str._r_n_s
mov dword [esp + 4], esi
mov dword [esp], ebx
call fcn.00440544
test eax, eax
je 0x441418
lea edx, [esp + 0x44]
mov dword [esp], edx
mov dword [esp + 0x2c], eax
call fcn.00441118
mov ecx, dword [esp + 0x30]
test ecx, ecx
mov eax, dword [esp + 0x2c]
je 0x44146e
mov edx, dword [esp + 0x30]
mov dword [esp], edx
call dword [0x59b00c]
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x34]
mov dword [esp], ecx
mov dword [esp + 0x2c], eax
call dword [0x59b00c]
mov eax, dword [esp + 0x2c]
jmp 0x44149a
mov edx, dword [esp + 0x34]
mov dword [esp], edx
mov dword [esp + 0x2c], eax
call dword [0x59b00c]
mov eax, dword [esp + 0x2c]
add esp, 0x25c
pop ebx
pop esi
pop edi
pop ebp
ret
mov dword [esp + 8], 0x5ae9d7
mov dword [esp + 4], esi
mov dword [esp], ebx
call fcn.00440544
test eax, eax
jne 0x441441
mov edx, dword [esp + 0x278]
mov eax, dword [edx + 0x28]
test al, 3
jne 0x441554
test al, 0x10
jne 0x4415e4
test al, 0x40
mov eax, dword [esp + 0x278]
je 0x4415c4
mov ecx, dword [eax + 0x30]
mov dword [esp + 4], esi
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov edx, 2
mov eax, ebx
call fcn.004403d8
mov ebp, dword [ebp + 0x24]
test ebp, ebp
je 0x4416d4
test eax, eax
jne 0x441441
mov ecx, dword [esp + 0x278]
mov eax, dword [ecx + 0x24]
test eax, eax
jne 0x4413b2
mov edx, dword [esp + 0x278]
mov eax, dword [edx + 0x28]
test al, 0x51
je 0x4413e6
mov edx, dword [edx + 0x2c]
test edx, edx
je 0x4416c0
mov ecx, dword [esp + 0x278]
mov eax, dword [ecx + 0xc]
jmp 0x4413d8
mov eax, dword [ebp + 0xc]
mov dword [esp + 4], eax
mov dword [esp], 0x5ae885
call sym.curl.exe_curl_strequal
test eax, eax
je 0x441609
mov ecx, dword [esp + 0x3c]
mov dword [esp + 0x38], ecx
lea edi, [esp + 0x50]
mov ecx, dword [esp + 0x38]
mov dword [esp + 0xc], ecx
mov dword [esp + 8], 0x200
mov dword [esp + 4], 1
mov dword [esp], edi
call sub.msvcrt.dll_fread
test eax, eax
je 0x441502
mov dword [esp + 4], esi
mov dword [esp], eax
mov ecx, edi
mov edx, 1
mov eax, ebx
call fcn.004403d8
test eax, eax
je 0x44157b
jmp 0x441502
mov ecx, dword [eax + 0xc]
mov dword [esp + 4], esi
mov eax, dword [eax + 0x10]
mov dword [esp], eax
mov edx, 1
mov eax, ebx
call fcn.004403d8
jmp 0x441502
mov eax, dword [esp + 0x278]
mov ecx, dword [eax + 0x14]
mov dword [esp + 4], esi
mov eax, dword [eax + 0x18]
mov dword [esp], eax
mov edx, 1
mov eax, ebx
call fcn.004403d8
jmp 0x441502
mov dword [esp + 4], 0x5ae860
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call sub.msvcrt.dll_fopen
test eax, eax
jne 0x44167d
mov eax, dword [esp + 0x270]
test eax, eax
je 0x441649
mov eax, dword [ebp + 0xc]
mov dword [esp + 8], eax
mov dword [esp + 4], str.couldnt_open_file___s_
mov eax, dword [esp + 0x270]
mov dword [esp], eax
call fcn.0040dcf0
mov edx, dword [esp + 0x274]
mov dword [edx], 0
mov eax, 0x1a
jmp 0x441441
xor eax, eax
add esp, 0x25c
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, 0x1b
add esp, 0x25c
pop ebx
pop esi
pop edi
pop ebp
ret
mov edx, dword [sym.imp.msvcrt.dll__iob]
mov dword [esp + 0x38], edx
cmp eax, edx
je 0x4417b2
mov dword [esp], eax
call sub.msvcrt.dll_fclose
mov ecx, dword [ebp + 0xc]
mov dword [esp + 4], esi
mov dword [esp], 0
mov edx, 3
mov eax, ebx
call fcn.004403d8
jmp 0x441502
mov ebx, str.Content_Type:_multipart_form_data
jmp 0x441245
test al, 1
je 0x4413e6
jmp 0x441544
xor eax, eax
jmp 0x4413a3
test eax, eax
jne 0x441441
mov eax, dword [esp + 0x278]
mov edi, dword [eax + 0x24]
test edi, edi
je 0x44170e
mov eax, dword [esp + 0x30]
mov dword [esp + 0xc], eax
mov dword [esp + 8], str._r_n___s__
mov dword [esp + 4], esi
mov dword [esp], ebx
call fcn.00440544
test eax, eax
jne 0x441441
mov edx, dword [esp + 0x278]
mov edx, dword [edx]
mov dword [esp + 0x278], edx
test edx, edx
jne 0x441293
mov eax, dword [esp + 0x34]
mov dword [esp + 0xc], eax
mov dword [esp + 8], str._r_n___s___r_n
mov dword [esp + 4], esi
mov dword [esp], ebx
call fcn.00440544
test eax, eax
jne 0x441441
mov ecx, dword [esp + 0x48]
mov ebx, dword [esp + 0x4c]
mov edx, dword [esp + 0x280]
mov dword [edx], ecx
mov dword [edx + 4], ebx
mov edx, dword [esp + 0x30]
test edx, edx
je 0x44177b
mov edx, dword [esp + 0x30]
mov dword [esp], edx
mov dword [esp + 0x2c], eax
call dword [0x59b00c]
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x34]
mov dword [esp], ecx
mov dword [esp + 0x2c], eax
call dword [0x59b00c]
mov edx, dword [esp + 0x44]
mov ecx, dword [esp + 0x274]
mov dword [ecx], edx
mov eax, dword [esp + 0x2c]
add esp, 0x25c
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, 0x1b
jmp 0x441441
lea edi, [esp + 0x50]
jmp 0x44157b