Function at 0x47aa0e
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x1484
call fcn.004122f0
mov eax, dword [0x5092e4]
xor eax, esp
mov dword [esp + 0x1480], eax
push ebx
push esi
push edi
push 0x103
xor edi, edi
lea eax, [esp + 0x1385]
mov esi, ecx
push edi
push eax
mov dword [esp + 0x1c], esi
mov byte [esp + 0x138c], 0
call fcn.00401f80
add esp, 0xc
push 0x1358
lea eax, [esp + 0x28]
push edi
push eax
mov dword [esp + 0x24], edi
mov dword [esp + 0x2c], edi
call fcn.00401f80
add esp, 0xc
cmp esi, edi
jne 0x47aa7b
xor eax, eax
jmp 0x47ad6d
mov ebx, 0x135c
push ebx
push edi
push esi
call fcn.00401f80
add esp, 0xc
push str.SSRF.sat
lea edi, [esp + 0x1384]
call fcn.0047480c
mov dword [esp], 0xacc
mov edi, str.Network.c
push edi
push 8
call fcn.0047a356
add esp, 0xc
test eax, eax
jne 0x47aad0
push 8
call fcn.00476372
mov dword [esp], 0xacf
push edi
push 8
call fcn.0047a356
add esp, 0xc
push 0x61a8
push 0x20
push 3
push 1
lea eax, [esp + 0x1390]
call fcn.004a1899
add esp, 0x10
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esp + 0x14], eax
cmp esi, 0xffffffff
jne 0x47ab30
push 8
call fcn.00476372
mov eax, dword [esp + 0x18]
pop ecx
cmp eax, 2
je 0x47ad6a
cmp eax, 3
je 0x47ad6a
cmp eax, 0xf
je 0x47ad6a
cmp eax, 0x35
je 0x47ad6a
jmp 0x47aa74
and dword [esp + 0x18], 0
push 0
lea eax, [esp + 0x1c]
push eax
push ebx
push dword [esp + 0x1c]
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x47ac10
cmp dword [esp + 0x18], ebx
jb 0x47ac10
mov eax, dword [esp + 0x10]
mov eax, dword [eax + 0x1318]
test eax, eax
js 0x47ac16
cmp eax, 0x41
jg 0x47ac16
call fcn.0049ff62
push 8
call fcn.00476372
mov esi, dword [esp + 0x14]
pop ecx
push 0x10
lea eax, [esi + 0x134c]
push 0
push eax
mov dword [esp + 0x20], eax
call fcn.00401f80
add esp, 0xc
push 0x10
add esi, 0x132c
push 0
push esi
mov dword [esp + 0x1c], esi
call fcn.00401f80
add esp, 0xc
push str.SSRF.sat
push 0
push 0
call fcn.004623aa
pop ecx
pop ecx
push eax
lea eax, [esp + 0x1388]
push 0x4cda20
push eax
call fcn.00401954
push 0xb50
push edi
mov edx, 0x4cc77c
lea ecx, [esp + 0x1398]
call fcn.004a0001
xor edi, edi
add esp, 0x18
mov dword [esp + 0x1c], eax
cmp eax, edi
jne 0x47ace8
lea edi, [esp + 0x1380]
call fcn.004a142a
jmp 0x47ad6a
inc dword [0x603b1c]
call fcn.0049ff62
push ebx
push 0
push dword [esp + 0x18]
call fcn.00401f80
add esp, 0xc
push 0x61a8
push 0x80000020
push 4
push 7
lea eax, [esp + 0x1390]
call fcn.004a1899
add esp, 0x10
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp esi, 0xffffffff
je 0x47ac81
and dword [esp + 0x14], 0
push 0
lea eax, [esp + 0x18]
push eax
push ebx
push dword [esp + 0x1c]
push esi
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x47ac76
cmp dword [esp + 0x14], ebx
jae 0x47ac7c
inc dword [0x603b20]
call fcn.0049ff62
push str.SSRF.sat
push 0
push 0
call fcn.004623aa
pop ecx
pop ecx
push eax
lea eax, [esp + 0x1388]
push 0x4cda20
push eax
call fcn.00401954
push 0xb30
push edi
mov edx, 0x4cc8b8
lea ecx, [esp + 0x1398]
call fcn.004a0001
mov esi, eax
add esp, 0x18
test esi, esi
je 0x47acdb
push esi
push 1
push ebx
push dword [esp + 0x1c]
call fcn.0040257f
add esp, 0x10
mov ecx, esi
call fcn.004a2aec
push 8
call fcn.00476372
pop ecx
jmp 0x47aa74
push eax
push 1
lea eax, [esp + 0x28]
push ebx
push eax
call fcn.00402244
add esp, 0x10
cmp eax, 1
jae 0x47ad21
inc dword [0x603b24]
push 0x10
push edi
push dword [esp + 0x1c]
call fcn.00401f80
add esp, 0xc
push 0x10
push edi
push esi
call fcn.00401f80
add esp, 0xc
jmp 0x47ad45
mov dword [0x603b24], edi
mov edi, dword [esp + 0x14]
lea esi, [esp + 0x136c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, dword [esp + 0x10]
lea esi, [esp + 0x134c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov ecx, dword [esp + 0x1c]
call fcn.004a2aec
cmp dword [0x603b24], 0xa
jl 0x47ad6a
lea eax, [esp + 0x1380]
call fcn.004a14db
and dword [0x603b24], 0
xor eax, eax
inc eax
mov ecx, dword [esp + 0x148c]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.00401317
mov esp, ebp
pop ebp
ret