Function at 0x4e9b1e
Capabilities:
Read file on windows

Disassembly:
push ebp
lea ebp, [esp - 0x1b4]
sub esp, 0x234
mov eax, dword [0x5550ec]
xor eax, ebp
mov dword [ebp + 0x1b0], eax
mov eax, dword [ebp + 0x1bc]
mov ecx, dword [ebp + 0x1cc]
push ebx
xor ebx, ebx
push esi
mov esi, dword [ebp + 0x1c8]
push edi
mov edi, dword [ebp + 0x1c4]
cmp edi, ebx
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp + 0x1c0]
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x6c], edi
mov dword [ebp - 0x80], ecx
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x70], ebx
mov dword [eax], ebx
je 0x4e9f49
call fcn.004e9acc
cmp eax, ebx
mov dword [ebp - 0x74], eax
jne 0x4e9b92
push 0x1b
pop eax
jmp 0x4e9f4b
cmp esi, ebx
jne 0x4e9b9b
mov esi, str.Content_Type:_multipart_form_data
push eax
push esi
push str._s__boundary_s_r_n
xor ebx, ebx
lea esi, [ebp - 0x54]
call fcn.004e9871
add esp, 0xc
test eax, eax
je 0x4e9bc6
mov esi, eax
push dword [ebp - 0x74]
call dword [0x555114]
pop ecx
mov eax, esi
jmp 0x4e9f4b
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x60]
or eax, dword [ebp - 0x5c]
je 0x4e9bef
push 0x519634
lea ebx, [ebp - 0x60]
lea esi, [ebp - 0x54]
call fcn.004e9871
mov esi, eax
test esi, esi
pop ecx
jne 0x4e9efb
push dword [ebp - 0x74]
lea ebx, [ebp - 0x60]
push str.___s_r_n
lea esi, [ebp - 0x54]
call fcn.004e9871
mov esi, eax
test esi, esi
pop ecx
pop ecx
jne 0x4e9efb
push str.Content_Disposition:_form_data__name_
lea esi, [ebp - 0x54]
call fcn.004e9871
mov esi, eax
test esi, esi
pop ecx
jne 0x4e9efb
push dword [edi + 4]
push eax
lea eax, [ebp - 0x54]
push eax
mov eax, dword [edi + 8]
call fcn.004e979c
mov esi, eax
add esp, 0xc
test esi, esi
jne 0x4e9efb
push 0x519130
lea esi, [ebp - 0x54]
call fcn.004e9871
mov esi, eax
test esi, esi
pop ecx
jne 0x4e9efb
cmp dword [edi + 0x24], eax
je 0x4e9c82
call fcn.004e9acc
push eax
push str._r_nContent_Type:_multipart_mixed__boundary_s_r_n
lea esi, [ebp - 0x54]
mov dword [ebp - 0x70], eax
call fcn.004e9871
mov esi, eax
test esi, esi
pop ecx
pop ecx
jne 0x4e9efb
mov ebx, edi
mov dword [ebp - 0x64], ebx
xor eax, eax
cmp dword [edi + 0x24], eax
je 0x4e9cd1
xor edi, edi
cmp dword [ebx + 0x2c], eax
jne 0x4e9ca8
push dword [ebx + 0xc]
call fcn.004e992f
mov edi, eax
test edi, edi
pop ecx
je 0x4e9ee9
mov ebx, dword [ebx + 0x2c]
test ebx, ebx
jne 0x4e9cb1
mov ebx, edi
push ebx
push dword [ebp - 0x70]
lea ebx, [ebp - 0x60]
push str._r_n___s_r_nContent_Disposition:_attachment__filename__s_
lea esi, [ebp - 0x54]
call fcn.004e9871
add esp, 0xc
test edi, edi
mov esi, eax
je 0x4e9d16
push edi
jmp 0x4e9d0f
test byte [edi + 0x28], 0x51
je 0x4e9d21
cmp dword [edi + 0x2c], eax
jne 0x4e9ce5
push dword [edi + 0xc]
call fcn.004e992f
pop ecx
mov edi, dword [edi + 0x2c]
test edi, edi
mov dword [ebp - 0x58], eax
jne 0x4e9cf1
mov edi, eax
push edi
push str.__filename__s_
lea ebx, [ebp - 0x60]
lea esi, [ebp - 0x54]
call fcn.004e9871
cmp dword [ebp - 0x58], 0
pop ecx
pop ecx
mov esi, eax
je 0x4e9d16
push dword [ebp - 0x58]
call dword [0x555114]
pop ecx
test esi, esi
jne 0x4e9efb
mov ebx, dword [ebp - 0x64]
mov eax, dword [ebx + 0x1c]
test eax, eax
je 0x4e9d48
push eax
push str._r_nContent_Type:__s
lea ebx, [ebp - 0x60]
lea esi, [ebp - 0x54]
call fcn.004e9871
mov esi, eax
test esi, esi
pop ecx
pop ecx
jne 0x4e9efb
mov ebx, dword [ebp - 0x64]
mov edi, dword [ebx + 0x20]
jmp 0x4e9d6e
push dword [edi]
lea ebx, [ebp - 0x60]
push str._r_n_s
lea esi, [ebp - 0x54]
call fcn.004e9871
mov esi, eax
test esi, esi
pop ecx
pop ecx
jne 0x4e9efb
mov edi, dword [edi + 4]
test edi, edi
jne 0x4e9d4d
test esi, esi
jne 0x4e9efb
push str._r_n_r_n
lea ebx, [ebp - 0x60]
lea esi, [ebp - 0x54]
call fcn.004e9871
mov esi, eax
test esi, esi
pop ecx
jne 0x4e9efb
mov edi, dword [ebp - 0x6c]
mov eax, dword [edi + 0x28]
test al, 3
jne 0x4e9dd7
test al, 0x10
je 0x4e9db1
push dword [edi + 0x14]
lea eax, [ebp - 0x54]
push 1
push eax
mov eax, dword [edi + 0x18]
jmp 0x4e9dc8
test al, 0x40
lea eax, [ebp - 0x54]
je 0x4e9dbf
push dword [edi + 0x30]
push 2
jmp 0x4e9dc4
push dword [edi + 0xc]
push 1
push eax
mov eax, dword [edi + 0x10]
call fcn.004e979c
add esp, 0xc
mov esi, eax
jmp 0x4e9e92
mov ebx, dword [ebp - 0x64]
push dword [ebx + 0xc]
push 0x507eac
call fcn.004e8266
test eax, eax
pop ecx
pop ecx
je 0x4e9df5
call dword [sym.imp.MSVCR80.dll___iob_func]
jmp 0x4e9e05
push 0x519118
push dword [ebx + 0xc]
call dword [sym.imp.MSVCR80.dll_fopen]
pop ecx
pop ecx
test eax, eax
mov dword [ebp - 0x58], eax
je 0x4e9e70
call dword [sym.imp.MSVCR80.dll___iob_func]
cmp dword [ebp - 0x58], eax
push dword [ebp - 0x58]
je 0x4e9e56
call dword [sym.imp.MSVCR80.dll_fclose]
push dword [ebx + 0xc]
lea eax, [ebp - 0x54]
push 3
push eax
lea ebx, [ebp - 0x60]
xor eax, eax
call fcn.004e979c
add esp, 0x10
jmp 0x4e9dd0
lea ecx, [ebp - 0x50]
push ecx
lea ecx, [ebp - 0x54]
push 1
push ecx
lea ebx, [ebp - 0x60]
call fcn.004e979c
mov esi, eax
add esp, 0xc
test esi, esi
jne 0x4e9e92
push dword [ebp - 0x58]
push 0x200
lea eax, [ebp - 0x50]
push 1
push eax
call dword [sym.imp.MSVCR80.dll_fread]
add esp, 0x10
test eax, eax
jne 0x4e9e38
jmp 0x4e9e92
cmp dword [ebp - 0x7c], 0
je 0x4e9e89
push dword [ebx + 0xc]
push str.couldnt_open_file___s__n
push dword [ebp - 0x7c]
call fcn.004dfb48
add esp, 0xc
mov eax, dword [ebp - 0x78]
and dword [eax], 0
push 0x1a
pop esi
mov eax, dword [ebp - 0x64]
mov eax, dword [eax + 0x24]
test eax, eax
mov dword [ebp - 0x64], eax
je 0x4e9ead
test esi, esi
jne 0x4e9efb
mov edi, dword [ebp - 0x6c]
mov ebx, eax
jmp 0x4e9c87
test esi, esi
jne 0x4e9efb
cmp dword [edi + 0x24], esi
je 0x4e9edb
push dword [ebp - 0x70]
lea ebx, [ebp - 0x60]
push str._r_n___s__
lea esi, [ebp - 0x54]
call fcn.004e9871
push dword [ebp - 0x70]
mov esi, eax
call dword [0x555114]
add esp, 0xc
test esi, esi
jne 0x4e9efb
mov edi, dword [edi]
test edi, edi
mov dword [ebp - 0x6c], edi
je 0x4e9f0a
jmp 0x4e9bcc
lea eax, [ebp - 0x68]
push eax
call fcn.004e98c0
pop ecx
push 0x1b
pop esi
jmp 0x4e9bb5
lea eax, [ebp - 0x68]
push eax
call fcn.004e98c0
pop ecx
jmp 0x4e9bb5
test esi, esi
jne 0x4e9efb
push dword [ebp - 0x74]
lea ebx, [ebp - 0x60]
push str._r_n___s___r_n
lea esi, [ebp - 0x54]
call fcn.004e9871
mov esi, eax
test esi, esi
pop ecx
pop ecx
jne 0x4e9efb
mov eax, dword [ebp - 0x80]
mov ecx, dword [ebp - 0x60]
push dword [ebp - 0x74]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x5c]
mov dword [eax + 4], ecx
call dword [0x555114]
mov eax, dword [ebp - 0x68]
pop ecx
mov ecx, dword [ebp - 0x78]
mov dword [ecx], eax
xor eax, eax
mov ecx, dword [ebp + 0x1b0]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004d6e66
add ebp, 0x1b4
leave
ret