Function at 0x44fea0
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4e04b4
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0xf8
mov eax, dword [0x535100]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, dword [ebx + 8]
mov eax, closesocket
mov dword [ebp - 0x64], 0
mov dword [ecx + 4], 0xa
add ecx, 0xc
mov dword [ebp - 0x70], edi
mov esi, dword [edi + 0x10]
mov edx, dword [ecx + 0x10]
sub eax, edx
cmp eax, esi
jb 0x45086e
cmp dword [ecx + 0x14], 0xf
jbe 0x44ff15
mov ecx, dword [ecx]
cmp dword [edi + 0x14], 0xf
mov eax, edi
jbe 0x44ff1f
mov eax, dword [edi]
push esi
push eax
push edx
push ecx
push ecx
push dword [ebp - 0x70]
lea ecx, [ebp - 0xbc]
call fcn.00449620
mov dword [ebp - 4], 0
lea ecx, [ebp - 0xbc]
mov esi, dword [ebp - 0xa8]
mov eax, esi
mov edx, dword [ebp - 0xac]
sub eax, edx
cmp eax, 1
jb 0x44ff7c
cmp esi, 0xf
lea eax, [edx + 1]
mov dword [ebp - 0xac], eax
cmova ecx, dword [ebp - 0xbc]
mov al, byte [0x529ca8]
mov byte [edx + ecx], al
lea eax, [ebp - 0xbc]
mov byte [edx + ecx + 1], 0
jmp 0x44ff8d
push 1
push 0x529ca8
push dword [ebp - 0x70]
push 1
call fcn.00448980
mov dword [ebp - 0x40], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x50], xmm0
mov dword [ebp - 0x3c], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x50], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x40], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov eax, 0x60
mov dword [ebp - 0x60], eax
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0xa8]
cmp ecx, 0xf
jbe 0x45000a
mov edx, dword [ebp - 0xbc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x450000
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x450873
push ecx
push edx
call fcn.004b4ed8
add esp, 8
push edi
push 8
push 0x529f64
lea edx, [ebp - 0x50]
mov dword [ebp - 0xac], 0
lea ecx, [ebp - 0xec]
mov dword [ebp - 0xa8], 0xf
mov byte [ebp - 0xbc], 0
mov dword [ebp - 0x34], 0
call fcn.00453100
add esp, 0xc
cmp dword [eax + 0x14], 0xf
jbe 0x45004d
mov eax, dword [eax]
push 0
push 0x80
push 3
push 0
push 1
push 1
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, dword [ebp - 0xd8]
mov esi, eax
mov dword [ebp - 0x6c], esi
cmp ecx, 0xf
jbe 0x4500a2
mov edx, dword [ebp - 0xec]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x450098
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x450878
push ecx
push edx
call fcn.004b4ed8
add esp, 8
push edi
push 8
push 0x529f70
lea edx, [ebp - 0x50]
mov dword [ebp - 0xdc], 0
lea ecx, [ebp - 0x104]
mov dword [ebp - 0xd8], 0xf
mov byte [ebp - 0xec], 0
call fcn.00453100
add esp, 0xc
cmp dword [eax + 0x14], 0xf
jbe 0x4500de
mov eax, dword [eax]
push 0
push 0x80
push 3
push 0
push 1
push 1
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, dword [ebp - 0xf0]
mov dword [ebp - 0x68], eax
cmp ecx, 0xf
jbe 0x450134
mov edx, dword [ebp - 0x104]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x450127
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x45087d
push ecx
push edx
call fcn.004b4ed8
mov eax, dword [ebp - 0x68]
add esp, 8
mov dword [ebp - 0xf4], 0
mov dword [ebp - 0xf0], 0xf
mov byte [ebp - 0x104], 0
cmp esi, 0xffffffff
je 0x45081e
cmp eax, 0xffffffff
je 0x45081e
mov edi, dword [sym.imp.KERNEL32.dll_ReadFile]
lea eax, [ebp - 0x18]
push 0
push eax
push 4
lea eax, [ebp - 0x34]
mov dword [ebp - 0x18], 0
push eax
push esi
call edi
cmp eax, 1
jne 0x450710
cmp dword [ebp - 0x34], 0
mov dword [ebp - 0x74], 0
jbe 0x450710
nop word [eax + eax]
push 0
lea eax, [ebp - 0x18]
mov dword [ebp - 0x58], 0
push eax
push 4
lea eax, [ebp - 0x58]
push eax
push esi
call edi
test eax, eax
je 0x450710
mov esi, dword [ebp - 0x58]
xorps xmm0, xmm0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
movups xmmword [ebp - 0x30], xmm0
cmp esi, 0x7fffffff
ja 0x45086e
cmp esi, 0xf
ja 0x450207
push esi
lea eax, [ebp - 0x30]
mov dword [ebp - 0x20], esi
push 0
push eax
mov dword [ebp - 0x1c], 0xf
call fcn.004b6a30
mov byte [ebp + esi - 0x30], 0
jmp 0x450293
mov edi, esi
or edi, 0xf
cmp edi, 0x7fffffff
jbe 0x450223
mov ecx, closesocket
mov edi, closesocket
add ecx, 0x23
jmp 0x450247
cmp edi, 0x16
mov eax, 0x16
cmovb edi, eax
lea eax, [edi + 1]
test eax, eax
je 0x45026e
cmp eax, 0x1000
jb 0x450265
lea ecx, [eax + 0x23]
cmp ecx, eax
jbe 0x450882
push ecx
call fcn.004b4ea3
mov ecx, eax
add esp, 4
test ecx, ecx
je 0x45088c
lea eax, [ecx + 0x23]
and eax, 0xffffffe0
mov dword [eax - 4], ecx
jmp 0x45026e
push eax
call fcn.004b4ea3
add esp, 4
push esi
push 0
push eax
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x1c], edi
call fcn.004b6a30
mov eax, dword [ebp - 0x64]
mov edi, dword [sym.imp.KERNEL32.dll_ReadFile]
mov byte [eax + esi], 0
mov esi, dword [ebp - 0x58]
add esp, 0xc
push 0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x18]
cmp dword [ebp - 0x1c], 0xf
lea eax, [ebp - 0x30]
push ecx
cmova eax, dword [ebp - 0x30]
push esi
mov esi, dword [ebp - 0x6c]
push eax
push esi
call edi
test eax, eax
je 0x45077d
push 0
lea eax, [ebp - 0x18]
mov dword [ebp - 0x38], 0
push eax
push 4
lea eax, [ebp - 0x38]
mov dword [ebp - 0x54], 0
push eax
push esi
call edi
test eax, eax
je 0x4506d8
push 0
lea eax, [ebp - 0x18]
push eax
push 4
lea eax, [ebp - 0x54]
push eax
push esi
call edi
test eax, eax
je 0x4506d8
cmp dword [ebp - 0x1c], 0xf
lea esi, [ebp - 0x30]
mov eax, dword [ebp - 0x20]
cmova esi, dword [ebp - 0x30]
cmp eax, 1
jb 0x45047b
lea edi, [esi + eax]
mov eax, edi
sub eax, esi
push eax
push 0x5c
push esi
call fcn.004b75f0
add esp, 0xc
test eax, eax
je 0x45047b
nop dword [eax]
movzx ecx, byte [eax]
cmp cl, 0x5c
jne 0x45033c
xor ecx, ecx
jmp 0x450341
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x45035f
inc eax
mov ecx, edi
sub ecx, eax
push ecx
push 0x5c
push eax
call fcn.004b75f0
add esp, 0xc
test eax, eax
jne 0x450330
jmp 0x45047b
sub eax, esi
cmp eax, 0xffffffff
je 0x45047b
lea eax, [ebp - 0x30]
push eax
push 4
push 0x529f7c
lea edx, [ebp - 0x50]
lea ecx, [ebp - 0xd4]
call fcn.00453100
add esp, 0xc
mov edx, eax
mov byte [ebp - 4], 4
mov esi, dword [ebp - 0x60]
or esi, 1
cmp dword [edx + 0x14], 0xf
mov dword [ebp - 0x64], esi
jbe 0x45039d
mov edx, dword [edx]
mov ecx, edx
mov dword [ebp - 0x94], 0
xorps xmm0, xmm0
mov dword [ebp - 0x90], 0
movups xmmword [ebp - 0xa4], xmm0
lea edi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4503c0
sub ecx, edi
push ecx
push edx
lea ecx, [ebp - 0xa4]
call fcn.00448ae0
mov dword [ebp - 4], 5
lea ecx, [ebp - 0xa4]
or esi, 2
cmp dword [ebp - 0x90], 0xf
push 2
cmova ecx, dword [ebp - 0xa4]
sub esp, 8
mov dword [ebp - 0x60], esi
mov dword [ebp - 0x64], esi
mov esi, dword [ebp - 0x94]
mov edx, esi
call fcn.00448680
mov ecx, eax
mov dword [ebp - 0x7c], 0
add esp, 0xc
mov dword [ebp - 0x78], 0
cmp esi, ecx
lea eax, [ebp - 0xa4]
xorps xmm0, xmm0
cmovb ecx, esi
cmp dword [ebp - 0x90], 0xf
push ecx
cmova eax, dword [ebp - 0xa4]
lea ecx, [ebp - 0x8c]
push eax
movups xmmword [ebp - 0x8c], xmm0
call fcn.00448ae0
mov eax, dword [ebp - 0x60]
or eax, 0x1800
or eax, 4
mov dword [ebp - 4], 6
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0x8c]
push eax
call fcn.00451820
mov byte [ebp - 0x59], 1
test eax, eax
je 0x45047f
mov byte [ebp - 0x59], 0
mov dword [ebp - 4], 5
mov eax, dword [ebp - 0x60]
test al, 4
je 0x4504e2
mov ecx, dword [ebp - 0x78]
and eax, 0xfffffffb
mov dword [ebp - 0x60], eax
cmp ecx, 0xf
jbe 0x4504cd
mov edx, dword [ebp - 0x8c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4504c0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x450873
push ecx
push edx
call fcn.004b4ed8
mov eax, dword [ebp - 0x60]
add esp, 8
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0xf
mov byte [ebp - 0x8c], 0
mov dword [ebp - 4], 4
test al, 2
je 0x45054b
mov ecx, dword [ebp - 0x90]
and eax, 0xfffffffd
mov dword [ebp - 0x60], eax
cmp ecx, 0xf
jbe 0x450530
mov edx, dword [ebp - 0xa4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x450523
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x450873
push ecx
push edx
call fcn.004b4ed8
mov eax, dword [ebp - 0x60]
add esp, 8
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 0xf
mov byte [ebp - 0xa4], 0
mov dword [ebp - 4], 3
test al, 1
je 0x450596
mov ecx, dword [ebp - 0xc0]
and eax, 0xfffffffe
mov dword [ebp - 0x60], eax
cmp ecx, 0xf
jbe 0x450596
mov edx, dword [ebp - 0xd4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x45058c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x450873
push ecx
push edx
call fcn.004b4ed8
add esp, 8
cmp byte [ebp - 0x59], 0
jne 0x450686
lea eax, [ebp - 0x30]
push eax
push 4
push 0x529f7c
lea edx, [ebp - 0x50]
lea ecx, [ebp - 0x8c]
call fcn.00453100
add esp, 0xc
cmp dword [eax + 0x14], 0xf
jbe 0x4505c4
mov eax, dword [eax]
push 0
push 0x80
push 2
push 0
push 1
push 2
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, dword [ebp - 0x78]
mov esi, eax
cmp ecx, 0xf
jbe 0x450613
mov edx, dword [ebp - 0x8c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x450609
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x450873
push ecx
push edx
call fcn.004b4ed8
add esp, 8
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0xf
mov byte [ebp - 0x8c], 0
cmp esi, 0xffffffff
je 0x450686
push 0
push 0
push dword [ebp - 0x38]
push dword [ebp - 0x68]
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
push dword [ebp - 0x54]
call fcn.004b4ee6
add esp, 4
mov edi, eax
lea eax, [ebp - 0x18]
push 0
push eax
push dword [ebp - 0x54]
push edi
push dword [ebp - 0x68]
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x450686
push 0
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x54]
push edi
push esi
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x450686
push edi
call fcn.004b4e9e
add esp, 4
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x1c]
cmp ecx, 0xf
jbe 0x4506be
mov edx, dword [ebp - 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4506b4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x45088c
push ecx
push edx
call fcn.004b4ed8
add esp, 8
mov eax, dword [ebp - 0x74]
mov esi, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x74], eax
cmp eax, dword [ebp - 0x34]
jae 0x450710
mov edi, dword [sym.imp.KERNEL32.dll_ReadFile]
jmp 0x4501a0
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x1c]
cmp ecx, 0xf
jbe 0x450710
mov edx, dword [ebp - 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x450706
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x45088c
push ecx
push edx
call fcn.004b4ed8
add esp, 8
push esi
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
push dword [ebp - 0x68]
call esi
mov esi, dword [ebp - 0x70]
lea edx, [ebp - 0x50]
push esi
push 8
push 0x529f64
lea ecx, [ebp - 0xd4]
call fcn.00453100
add esp, 0xc
cmp dword [eax + 0x14], 0xf
jbe 0x450742
mov eax, dword [eax]
push eax
call fcn.004be11c
mov ecx, dword [ebp - 0xc0]
add esp, 4
cmp ecx, 0xf
jbe 0x4507be
mov edx, dword [ebp - 0xd4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4507b4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x450887
jmp 0x4507b4
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x1c]
cmp ecx, 0xf
jbe 0x450710
mov edx, dword [ebp - 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x450706
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x45088c
jmp 0x450706
push ecx
push edx
call fcn.004b4ed8
add esp, 8
push esi
push 8
push 0x529f70
lea edx, [ebp - 0x50]
lea ecx, [ebp - 0xd4]
call fcn.00453100
add esp, 0xc
cmp dword [eax + 0x14], 0xf
jbe 0x4507df
mov eax, dword [eax]
push eax
call fcn.004be11c
mov ecx, dword [ebp - 0xc0]
add esp, 4
cmp ecx, 0xf
jbe 0x45081e
mov edx, dword [ebp - 0xd4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x450814
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x450891
push ecx
push edx
call fcn.004b4ed8
add esp, 8
mov ecx, dword [ebp - 0x3c]
cmp ecx, 0xf
jbe 0x45084e
mov edx, dword [ebp - 0x50]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x450844
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x450896
push ecx
push edx
call fcn.004b4ed8
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004b4e90
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 4
call fcn.00441ef0
call fcn.004bd1a0
call fcn.004bd1a0
call fcn.004bd1a0
call fcn.00441e50
call fcn.004bd1a0
call fcn.004bd1a0
call fcn.004bd1a0
call fcn.004bd1a0
int3