Function at 0x47b35a
Capabilities:
Read file on windows

Disassembly:
push 0x1f0
mov eax, 0x495e1b
call fcn.00427e5d
mov esi, 0x4e8b2c
push esi
push 0x44c
call fcn.0047ced6
push esi
call fcn.0047ae7a
mov eax, dword [0x4e88b8]
shr eax, 0x11
and al, 1
je 0x47b658
xor eax, eax
mov dword [ebp - 0x30], 7
xor ecx, ecx
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x34], eax
mov word [ebp - 0x44], cx
mov dword [ebp - 4], eax
lea edx, [ebp - 0x44]
cmp dword [0x4e87bc], 8
mov ecx, 0x4e87a8
cmovae ecx, dword [0x4e87a8]
call fcn.0040a23b
push 0x2e
lea ecx, [ebp - 0x44]
call fcn.0040ad47
push str.xstg
lea ecx, [ebp - 0x44]
call fcn.00407941
mov edx, dword [0x4e88e4]
lea ecx, [ebp - 0x44]
ror edx, 5
call fcn.0048d810
test al, al
je 0x47b600
cmp dword [ebp - 0x30], 8
lea eax, [ebp - 0x44]
push 0x4aca08
cmovae eax, dword [ebp - 0x44]
push eax
call fcn.004398c1
mov edi, eax
mov dword [ebp - 0x1e8], edi
pop ecx
pop ecx
test edi, edi
je 0x47b600
mov ecx, edi
call fcn.00408a3a
mov esi, eax
push esi
mov dword [ebp - 0x1e0], esi
call fcn.0042756a
push edi
push 1
push esi
push eax
mov dword [ebp - 0x1e4], eax
call fcn.00439fda
add esp, 0x14
test eax, eax
je 0x47b5e8
lea ecx, [ebp - 0xe4]
call fcn.00407730
xor eax, eax
push 0xf
pop esi
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x74], eax
mov dword [ebp - 0xac], eax
mov dword [ebp - 0xa8], esi
mov byte [ebp - 0xbc], al
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x90], esi
mov byte [ebp - 0xa4], al
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x78], esi
mov byte [ebp - 0x8c], al
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x60], esi
mov byte [ebp - 0x74], al
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], esi
mov byte [ebp - 0x2c], al
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x2c]
push dword [ebp - 0x1e0]
push dword [ebp - 0x1e4]
call fcn.00407017
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe4]
call fcn.0048d070
test al, al
je 0x47b569
push dword [ebp - 0x94]
xor ecx, ecx
mov edx, 0x4e8b2c
cmp dword [0x4e8b40], 0x10
mov eax, edx
mov dword [0x4e8b3c], ecx
cmovae eax, dword [0x4e8b2c]
cmp dword [ebp - 0x90], 0x10
mov byte [eax], cl
lea eax, [ebp - 0xa4]
cmovae eax, dword [ebp - 0xa4]
mov ecx, edx
push eax
call fcn.00407017
push 0x4e8b2c
call fcn.0047ae7a
push dword [ebp - 0x7c]
xor ecx, ecx
mov edx, 0x4e8b74
cmp dword [0x4e8b88], 0x10
mov eax, edx
mov dword [0x4e8b84], ecx
cmovae eax, dword [0x4e8b74]
cmp dword [ebp - 0x78], 0x10
mov byte [eax], cl
lea eax, [ebp - 0x8c]
cmovae eax, dword [ebp - 0x8c]
mov ecx, edx
push eax
call fcn.00407017
xor ecx, ecx
lea eax, [ebp - 0x2c]
cmp dword [ebp - 0x18], 0x10
mov dword [ebp - 0x1c], ecx
cmovae eax, dword [ebp - 0x2c]
mov byte [eax], cl
mov eax, dword [ebp - 0x18]
cmp eax, 0x10
jb 0x47b5c6
mov ecx, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x1e8], eax
mov dword [ebp - 0x1e0], ecx
cmp eax, 0x1000
jb 0x47b5bb
lea eax, [ebp - 0x1e8]
push eax
lea eax, [ebp - 0x1e0]
push eax
call fcn.004016dc
mov eax, dword [ebp - 0x1e8]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x1e0]
push eax
push ecx
call fcn.004272b3
pop ecx
pop ecx
xor ecx, ecx
mov dword [ebp - 0x1c], ecx
mov byte [ebp - 0x2c], cl
lea ecx, [ebp - 0xe4]
mov dword [ebp - 0x18], esi
call fcn.0040775f
jmp 0x47b5eb
push 0xf
pop esi
push dword [ebp - 0x1e4]
call fcn.00427565
push edi
call fcn.00438fdb
pop ecx
pop ecx
jmp 0x47b603
push 0xf
pop esi
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x30]
cmp eax, 8
jb 0x47b65b
mov ecx, dword [ebp - 0x44]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x1e4], eax
mov dword [ebp - 0x1e0], ecx
cmp eax, 0x1000
jb 0x47b64d
lea eax, [ebp - 0x1e4]
push eax
lea eax, [ebp - 0x1e0]
push eax
call fcn.004016dc
mov eax, dword [ebp - 0x1e4]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x1e0]
push eax
push ecx
call fcn.004272b3
pop ecx
pop ecx
jmp 0x47b65b
push 0xf
pop esi
mov edi, 0x4e8b44
push edi
push 0x438
call fcn.0047ced6
cmp dword [0x4e8b54], 2
jbe 0x47b67a
push edi
call fcn.0041353d
mov ecx, dword [0x4e8b20]
mov eax, dword [ecx]
call dword [eax]
mov eax, dword [0x4e88b8]
shr eax, 0x12
test al, 1
je 0x47b6c0
lea ecx, [ebp - 0x1a4]
call fcn.0040729c
lea ecx, [ebp - 0x1a4]
mov dword [ebp - 4], 5
call fcn.0040ed4c
test al, al
jne 0x47b7f8
lea ecx, [ebp - 0x1a4]
call fcn.004073e1
xor eax, eax
mov dword [ebp - 0x48], esi
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x4c], eax
mov byte [ebp - 0x5c], al
lea eax, [ebp - 0x5c]
mov dword [ebp - 4], 8
push eax
push 0x40b
call fcn.0047cf94
test al, al
je 0x47b71f
lea eax, [ebp - 0x5c]
push eax
lea ecx, [ebp - 0x1dc]
call fcn.0040c510
mov byte [ebp - 4], 9
mov ecx, dword [0x4e8b8c]
test ecx, ecx
je 0x47b710
lea eax, [ebp - 0x1dc]
push eax
call fcn.0048cd90
lea ecx, [ebp - 0x1dc]
mov byte [ebp - 4], 8
call fcn.0040c57a
call fcn.0047c756
cmp dword [0x4e8a18], 0
jne 0x47b736
cmp dword [0x4e8a1c], 0
je 0x47b73a
mov al, 1
jmp 0x47b73c
xor eax, eax
cmp word [0x4e8c10], 0
jg 0x47b753
cmp dword [0x4e8bc8], 0
jne 0x47b753
test al, al
je 0x47b758
call fcn.0047bd83
lea eax, [ebp - 0x44]
push eax
call fcn.0047aa3a
push 0x4e8bec
push 0x4e8bd4
push 0x4e8a1c
push 0x4e8a18
mov edx, 0x4e8c48
mov byte [ebp - 4], 0xa
mov ecx, eax
call fcn.00488a30
add esp, 0x10
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x44]
call fcn.0040172c
mov ecx, dword [0x4e8b20]
mov eax, dword [ecx]
call dword [eax]
push edi
call fcn.0047c550
call fcn.0047b9e9
mov eax, dword [ebp - 0x48]
cmp eax, 0x10
jb 0x47b7f2
mov ecx, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x1e4], eax
mov dword [ebp - 0x1e0], ecx
cmp eax, 0x1000
jb 0x47b7e9
lea eax, [ebp - 0x1e4]
push eax
lea eax, [ebp - 0x1e0]
push eax
call fcn.004016dc
mov eax, dword [ebp - 0x1e4]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x1e0]
push eax
push ecx
call fcn.004272b3
pop ecx
pop ecx
call fcn.00427daf
ret
lea eax, [ebp - 0x44]
push 0x43
push eax
call fcn.0040175f
mov ecx, eax
call fcn.00408521
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x24]
call fcn.00405c31
lea eax, [ebp - 0x24]
mov byte [ebp - 4], 7
push eax
lea ecx, [ebp - 0x1fc]
call fcn.00405055
push 0x4b9e04
lea eax, [ebp - 0x1fc]
push eax
call fcn.0042a81e
int3