Function at 0x44ef9c
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffff004
mov edx, dword [0x526189]
mov ecx, 3
push eax
add esp, 0xffffff4c
mov eax, dword [0x526184]
push ebx
push esi
push edi
mov edi, dword [ebp + 0x10]
mov esi, dword [ebp + 0x18]
mov dword [ebp - 0x14], eax
mov al, byte [0x526188]
mov byte [ebp - 0x10], al
mov dword [ebp - 0x18], edx
push esi
push edi
lea edi, [ebp - 0x28]
mov esi, 0x52618d
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
pop edi
pop esi
push esi
push edi
lea edi, [ebp - 0x10b4]
mov esi, 0x52619a
mov ecx, 0x20
rep movsd dword es:[edi], dword [esi]
pop edi
pop esi
push 0x2100
push edi
call fcn.00405c58
add esp, 8
test eax, eax
jne 0x44f016
mov eax, 0xffffff92
jmp 0x44f22f
mov edx, dword [ebp + 8]
push edx
call fcn.0044eecc
pop ecx
mov ebx, eax
test ebx, ebx
jne 0x44f030
mov eax, 0xffffff9c
jmp 0x44f22f
mov edx, dword [ebp + 0xc]
test edx, edx
je 0x44f063
mov ecx, dword [ebp + 0xc]
push esi
push edi
mov edi, ecx
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea esi, [ebp - 0x10b4]
xchg edi, esi
mov edx, ecx
mov eax, edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
lea eax, [ebp - 0x10b4]
xor edx, edx
xor ecx, ecx
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x2c], ecx
test esi, 0x100
je 0x44f084
lea eax, [ebp - 0x14]
mov dword [ebp - 0x2c], eax
test esi, 0x200
je 0x44f092
lea edx, [ebp - 0x18]
mov dword [ebp - 0x2c], edx
test esi, 0x400
je 0x44f0a0
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x2c], ecx
test esi, 0x1000
je 0x44f0af
mov dword [ebp - 0x30], 0x5ecdea
test esi, 0x4000
jne 0x44f0d8
lea eax, [ebp - 0x34]
push eax
push 1
push ebx
call sub.WINSPOOL.DRV_StartDocPrinterA
test eax, eax
jne 0x44f0d8
push ebx
call fcn.0044eee0
pop ecx
mov eax, 0xffffff88
jmp 0x44f22f
test esi, 0x2000
je 0x44f0fb
push ebx
call sub.WINSPOOL.DRV_StartPagePrinter
test eax, eax
jne 0x44f0fb
push ebx
call fcn.0044eee0
pop ecx
mov eax, 0xffffff83
jmp 0x44f22f
push 5
push edi
call fcn.00403dc0
add esp, 8
mov dword [ebp - 4], eax
lea edx, [ebp - 4]
push edx
call fcn.00403e5c
pop ecx
test eax, eax
jne 0x44f125
push 1
push edi
call fcn.00403dc0
add esp, 8
mov dword [ebp - 4], eax
lea ecx, [ebp - 4]
push ecx
call fcn.00403e5c
pop ecx
test eax, eax
jne 0x44f144
push ebx
call fcn.0044eee0
pop ecx
mov eax, 0xffffff7e
jmp 0x44f22f
mov edx, dword [ebp - 4]
push edx
call fcn.00403f30
pop ecx
mov dword [ebp - 8], eax
mov ecx, dword [ebp + 0x14]
mov eax, dword [ebp - 8]
cmp ecx, eax
ja 0x44f1cc
mov edx, dword [ebp + 0x14]
push edx
mov ecx, dword [ebp - 4]
push ecx
call fcn.00403fc0
add esp, 8
lea eax, [ebp - 8]
push 0
push eax
lea edx, [ebp - 0x1034]
push 0x1000
push edx
mov ecx, dword [ebp - 4]
push ecx
call sub.KERNEL32.dll_ReadFile
mov eax, dword [ebp - 8]
test eax, eax
je 0x44f1cc
lea edx, [ebp - 0xc]
lea eax, [ebp - 0x1034]
push edx
mov ecx, dword [ebp - 8]
push ecx
push eax
push ebx
call sub.WINSPOOL.DRV_WritePrinter
test eax, eax
jne 0x44f1c1
lea edx, [ebp - 4]
push edx
call fcn.00403e94
pop ecx
mov dword [ebp - 4], eax
push ebx
call fcn.0044eee0
pop ecx
mov eax, 0xffffff74
jmp 0x44f22f
mov edx, dword [ebp - 8]
cmp edx, 0x1000
je 0x44f16b
lea ecx, [ebp - 4]
push ecx
call fcn.00403e94
pop ecx
mov dword [ebp - 4], eax
test esi, 0x2000
je 0x44f1f9
push ebx
call sub.WINSPOOL.DRV_EndPagePrinter
test eax, eax
jne 0x44f1f9
push ebx
call fcn.0044eee0
pop ecx
mov eax, 0xffffff6f
jmp 0x44f22f
test esi, 0x4000
jne 0x44f226
push ebx
call sub.WINSPOOL.DRV_EndDocPrinter
test eax, eax
jne 0x44f226
lea edx, [ebp - 4]
push edx
call fcn.00403e94
pop ecx
mov dword [ebp - 4], eax
push ebx
call fcn.0044eee0
pop ecx
mov eax, 0xffffff6a
jmp 0x44f22f
push ebx
call fcn.0044eee0
pop ecx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret