Function at 0x4b8dc4
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x23c
mov eax, dword [0x5df7e4]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov eax, ecx
xorps xmm0, xmm0
mov ecx, dword [ebp + 0xc]
push esi
mov esi, dword [ebp + 8]
push edi
mov edi, edx
mov dword [ebp - 0x234], ecx
xor ecx, ecx
mov dword [ebp - 0x230], eax
mov dword [ebp - 0x20c], ecx
movlpd qword [ebp - 0x218], xmm0
mov dword [ebp - 0x22c], ecx
mov dword [eax], ecx
test edi, edi
jne 0x4b8e16
xor eax, eax
jmp 0x4b9326
call fcn.004b948f
mov ebx, eax
mov dword [ebp - 0x21c], ebx
test ebx, ebx
jne 0x4b8e2f
push 0x1b
pop eax
jmp 0x4b9326
push ebx
test esi, esi
mov eax, str.Content_Type:_multipart_form_data
cmovne eax, esi
push eax
push str._s__boundary_s_r_n
lea eax, [ebp - 0x20c]
push 0
push eax
call fcn.004b8b69
mov esi, eax
add esp, 0x14
test esi, esi
je 0x4b8e5e
mov edi, ebx
jmp 0x4b931c
mov eax, dword [ebp - 0x20c]
mov dword [ebp - 0x238], eax
mov dword [ebp - 0x224], eax
mov eax, dword [ebp - 0x218]
or eax, dword [ebp - 0x214]
je 0x4b8ea3
push 0x5b8444
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x20c]
push eax
call fcn.004b8b69
mov esi, eax
add esp, 0xc
test esi, esi
jne 0x4b930b
push ebx
push str.___s_r_n
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x20c]
push eax
call fcn.004b8b69
mov esi, eax
add esp, 0x10
test esi, esi
jne 0x4b930b
push str.Content_Disposition:_form_data__name_
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x20c]
push eax
call fcn.004b8b69
mov esi, eax
add esp, 0xc
test esi, esi
jne 0x4b930b
lea eax, [ebp - 0x218]
xor edx, edx
push eax
push dword [edi + 8]
lea ecx, [ebp - 0x20c]
push dword [edi + 4]
call fcn.004b8a72
mov esi, eax
add esp, 0xc
test esi, esi
jne 0x4b930b
push 0x5bce20
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x20c]
push eax
call fcn.004b8b69
mov esi, eax
add esp, 0xc
test esi, esi
jne 0x4b930b
cmp dword [edi + 0x24], eax
je 0x4b8f70
call fcn.004b948f
push eax
mov dword [ebp - 0x22c], eax
lea eax, [ebp - 0x218]
push str._r_nContent_Type:_multipart_mixed__boundary_s_r_n
push eax
lea eax, [ebp - 0x20c]
push eax
call fcn.004b8b69
mov esi, eax
add esp, 0x10
test esi, esi
jne 0x4b930b
mov ebx, edi
mov dword [ebp - 0x220], edi
cmp dword [edi + 0x24], 0
je 0x4b8fcf
xor eax, eax
mov dword [ebp - 0x228], eax
cmp dword [ebx + 0x2c], eax
jne 0x4b8fa1
mov ecx, dword [ebx + 0xc]
call fcn.004b8d63
mov dword [ebp - 0x228], eax
test eax, eax
je 0x4b9260
cmp dword [ebx + 0x2c], 0
mov ecx, eax
lea eax, [ebp - 0x218]
cmovne ecx, dword [ebx + 0x2c]
push ecx
push dword [ebp - 0x22c]
push str._r_n___s_r_nContent_Disposition:_attachment__filename__s_
push eax
lea eax, [ebp - 0x20c]
push eax
call fcn.004b8b69
add esp, 0x14
jmp 0x4b901a
test byte [edi + 0x28], 0x51
je 0x4b9036
mov eax, dword [edi + 0x2c]
test eax, eax
jne 0x4b8ff1
mov ecx, dword [edi + 0xc]
call fcn.004b8d63
mov ecx, eax
mov dword [ebp - 0x228], eax
mov eax, dword [edi + 0x2c]
jmp 0x4b8ff9
xor ecx, ecx
mov dword [ebp - 0x228], ecx
test eax, eax
cmove eax, ecx
push eax
push str.__filename__s_
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x20c]
push eax
call fcn.004b8b69
add esp, 0x10
mov esi, eax
mov eax, dword [ebp - 0x228]
test eax, eax
je 0x4b902e
push eax
call dword [0x5e0258]
pop ecx
test esi, esi
jne 0x4b930b
cmp dword [ebx + 0x1c], 0
je 0x4b9064
push dword [ebx + 0x1c]
lea eax, [ebp - 0x218]
push str._r_nContent_Type:__s
push eax
lea eax, [ebp - 0x20c]
push eax
call fcn.004b8b69
mov esi, eax
add esp, 0x10
test esi, esi
jne 0x4b930b
mov ebx, dword [ebx + 0x20]
jmp 0x4b9093
push dword [ebx]
lea eax, [ebp - 0x218]
push str._r_n_s
push eax
lea eax, [ebp - 0x20c]
push eax
call fcn.004b8b69
mov esi, eax
add esp, 0x10
test esi, esi
jne 0x4b930b
mov ebx, dword [ebx + 4]
test ebx, ebx
jne 0x4b9069
test esi, esi
jne 0x4b930b
push str._r_n_r_n
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x20c]
push eax
call fcn.004b8b69
mov esi, eax
add esp, 0xc
test esi, esi
jne 0x4b930b
test byte [edi + 0x28], 3
jne 0x4b9119
test byte [edi + 0x28], 0x10
lea eax, [ebp - 0x218]
lea ecx, [ebp - 0x20c]
push eax
je 0x4b90e8
push dword [edi + 0x18]
push dword [edi + 0x14]
xor edx, edx
inc edx
jmp 0x4b90f7
test byte [edi + 0x28], 0x40
push dword [edi + 0x10]
je 0x4b9114
push dword [edi + 0x30]
push 2
pop edx
call fcn.004b8a72
mov esi, eax
add esp, 0xc
test esi, esi
jne 0x4b930b
mov ebx, dword [ebp - 0x220]
jmp 0x4b91fe
push dword [edi + 0xc]
jmp 0x4b90e3
mov ebx, dword [ebp - 0x220]
push dword [ebx + 0xc]
push 0x5b7368
call sym.wwbizsrv.exe_curl_strequal
pop ecx
pop ecx
test eax, eax
je 0x4b913b
push 0
call fcn.00534dbe
jmp 0x4b9149
push 0x5bcec0
push dword [ebx + 0xc]
call fcn.0053d18d
pop ecx
mov dword [ebp - 0x220], eax
pop ecx
test eax, eax
je 0x4b92e2
push 0
call fcn.00534dbe
pop ecx
mov ecx, dword [ebp - 0x220]
push ecx
cmp ecx, eax
je 0x4b9192
call fcn.00534efe
pop ecx
lea eax, [ebp - 0x218]
push eax
push 0
push dword [ebx + 0xc]
lea ecx, [ebp - 0x20c]
push 3
pop edx
call fcn.004b8a72
add esp, 0xc
mov esi, eax
jmp 0x4b91f6
push 0x200
lea eax, [ebp - 0x208]
push 1
push eax
call fcn.00535602
add esp, 0x10
test eax, eax
je 0x4b91fe
lea ecx, [ebp - 0x218]
xor edx, edx
push ecx
push eax
lea eax, [ebp - 0x208]
inc edx
push eax
lea ecx, [ebp - 0x20c]
call fcn.004b8a72
mov esi, eax
add esp, 0xc
test esi, esi
jne 0x4b930b
push dword [ebp - 0x220]
lea eax, [ebp - 0x208]
push 0x200
push 1
push eax
call fcn.00535602
add esp, 0x10
test eax, eax
jne 0x4b91ac
test esi, esi
jne 0x4b930b
mov ebx, dword [ebx + 0x24]
mov dword [ebp - 0x220], ebx
test ebx, ebx
jne 0x4b8f78
test esi, esi
jne 0x4b930b
cmp dword [edi + 0x24], esi
je 0x4b924f
mov ebx, dword [ebp - 0x22c]
lea eax, [ebp - 0x218]
push ebx
push str._r_n___s__
push eax
lea eax, [ebp - 0x20c]
push eax
call fcn.004b8b69
push ebx
mov esi, eax
call dword [0x5e0258]
add esp, 0x14
test esi, esi
jne 0x4b930b
mov edi, dword [edi]
test edi, edi
je 0x4b9273
mov ebx, dword [ebp - 0x21c]
jmp 0x4b8e70
lea ecx, [ebp - 0x224]
call fcn.004b8bc1
push 0x1b
pop esi
jmp 0x4b9316
test esi, esi
jne 0x4b930b
mov edi, dword [ebp - 0x21c]
lea eax, [ebp - 0x218]
push edi
push str._r_n___s___r_n
push eax
lea eax, [ebp - 0x20c]
push eax
call fcn.004b8b69
mov esi, eax
add esp, 0x10
test esi, esi
je 0x4b92b0
lea ecx, [ebp - 0x224]
call fcn.004b8bc1
jmp 0x4b931c
mov ecx, dword [ebp - 0x234]
mov eax, dword [ebp - 0x218]
push edi
mov dword [ecx], eax
mov eax, dword [ebp - 0x214]
mov dword [ecx + 4], eax
call dword [0x5e0258]
mov eax, dword [ebp - 0x230]
pop ecx
mov ecx, dword [ebp - 0x238]
mov dword [eax], ecx
jmp 0x4b8e0f
lea ecx, [ebp - 0x224]
call fcn.004b8bc1
mov edi, dword [ebp - 0x21c]
push edi
call dword [0x5e0258]
mov eax, dword [ebp - 0x230]
pop ecx
push 0x1a
and dword [eax], 0
jmp 0x4b8e29
lea ecx, [ebp - 0x224]
call fcn.004b8bc1
mov edi, dword [ebp - 0x21c]
push edi
call dword [0x5e0258]
pop ecx
mov eax, esi
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.005121be
leave
ret