Function at 0x4c9981
Capabilities:
Read file on windows

Disassembly:
mov eax, 0x6c3df3
call fcn.00692bd4
sub esp, 0x44
push ebx
push esi
xor ebx, ebx
push ebx
push 0x80
push 3
push ebx
push ebx
push 0x80000000
push dword [ebp + 8]
mov esi, ecx
call dword [sym.imp.KERNEL32.DLL_CreateFileA]
cmp eax, 0xffffffff
mov dword [ebp + 8], eax
jne 0x4c99bb
xor eax, eax
jmp 0x4c9bf8
push edi
mov edi, dword [sym.imp.KERNEL32.DLL_ReadFile]
push ebx
lea ecx, [ebp - 0x14]
push ecx
push 0xe
lea ecx, [ebp - 0x28]
push ecx
push eax
call edi
test eax, eax
je 0x4c9bec
cmp word [ebp - 0x28], 0x4d42
je 0x4c9a20
push 0x66c
call fcn.006918d6
pop ecx
mov dword [ebp + 0xc], eax
cmp eax, ebx
mov dword [ebp - 4], ebx
je 0x4c99fe
mov ecx, eax
call fcn.004316c5
jmp 0x4c9a00
xor eax, eax
fld dword [0x6d05b4]
push ecx
push ecx
fstp dword [esp + 4]
fld dword [0x6d05b0]
fstp dword [esp]
push ebx
push 0x86f168
jmp 0x4c9be1
push ebx
lea eax, [ebp - 0x14]
push eax
push 0x28
lea eax, [ebp - 0x50]
push eax
push dword [ebp + 8]
call edi
test eax, eax
je 0x4c9bec
cmp word [ebp - 0x42], 0x18
je 0x4c9a83
push 0x66c
call fcn.006918d6
pop ecx
mov dword [ebp + 0xc], eax
cmp eax, ebx
mov dword [ebp - 4], 1
je 0x4c9a61
mov ecx, eax
call fcn.004316c5
jmp 0x4c9a63
xor eax, eax
fld dword [0x6d05b4]
push ecx
push ecx
fstp dword [esp + 4]
fld dword [0x6d05b0]
fstp dword [esp]
push ebx
push 0x86f568
jmp 0x4c9be1
mov ecx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x4c]
mov edx, ecx
imul edx, eax
cmp eax, 0x12
mov dword [esi + 8], eax
mov dword [esi + 0xc], ecx
mov dword [esi + 0x10], edx
jne 0x4c9ba2
cmp ecx, 0xc
jne 0x4c9ba2
push 0x2a0
call fcn.0069197a
pop ecx
push ebx
push ebx
push dword [ebp - 0x1e]
mov dword [ebp - 0x10], eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_SetFilePointer]
push ebx
lea eax, [ebp - 0x14]
push eax
push 0x2a0
push dword [ebp - 0x10]
push dword [ebp + 8]
call edi
test eax, eax
jne 0x4c9ae9
push dword [ebp - 0x10]
call fcn.00693d31
pop ecx
jmp 0x4c9bec
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
mov eax, dword [esi + 8]
imul eax, dword [esi + 0xc]
lea eax, [eax + eax + 1]
push eax
call fcn.0069197a
mov edi, dword [ebp - 0x10]
mov dword [esi + 0x14], eax
mov byte [eax], 0xff
mov eax, dword [esi + 0xc]
pop ecx
mov ecx, dword [esi + 0x14]
inc ecx
cmp eax, ebx
mov dword [esi + 4], ecx
mov dword [ebp + 8], ebx
je 0x4c9b75
mov dword [ebp - 0x18], eax
xor eax, eax
cmp dword [esi + 8], ebx
jle 0x4c9b63
mov bl, byte [edi + 1]
movzx dx, byte [edi + 2]
and bl, 0xfc
movzx bx, bl
and edx, 0xfff8
shl edx, 5
or edx, ebx
mov bl, byte [edi]
shr bl, 3
movzx bx, bl
shl edx, 3
add edi, 3
or edx, ebx
mov ebx, dword [ebp + 8]
inc dword [ebp + 8]
inc eax
mov word [ecx + ebx*2], dx
cmp eax, dword [esi + 8]
jl 0x4c9b28
mov eax, dword [esi + 8]
push 4
cdq
pop ebx
idiv ebx
xor ebx, ebx
add edi, edx
dec dword [ebp - 0x18]
jne 0x4c9b21
push dword [esi + 0xc]
mov eax, dword [esi + 8]
shl eax, 1
push eax
push ecx
call fcn.004c98ef
add esp, 0xc
cmp dword [ebp - 0x10], ebx
je 0x4c9b95
push dword [ebp - 0x10]
call fcn.00693d31
pop ecx
mov eax, dword [esi + 0x14]
mov ecx, dword [ebp + 0xc]
mov dword [ecx], eax
xor eax, eax
inc eax
jmp 0x4c9bf7
push 0x66c
call fcn.006918d6
pop ecx
mov dword [ebp + 0xc], eax
cmp eax, ebx
mov dword [ebp - 4], 2
je 0x4c9bc4
mov ecx, eax
call fcn.004316c5
jmp 0x4c9bc6
xor eax, eax
fld dword [0x6d05b4]
push ecx
push ecx
fstp dword [esp + 4]
fld dword [0x6d05b0]
fstp dword [esp]
push ebx
push 0x86f968
or dword [ebp - 4], 0xffffffff
mov ecx, eax
call fcn.004321e3
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
xor eax, eax
pop edi
mov ecx, dword [ebp - 0xc]
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret 8