Function at 0x48f390
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x238
mov edi, ecx
mov eax, dword [0x6f4e3c]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x21c], 0
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x224], 0
lea esi, [ebp - 0x218]
push 0x208
push 0
push esi
call fcn.006030b0
add esp, 0xc
push 2
push 0
push 0xffffffffffffff96
push dword [edi + 8]
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea eax, [ebp - 0x21c]
push 0
push eax
push 0x6a
push esi
push dword [edi + 8]
call dword [sym.imp.KERNEL32.dll_ReadFile]
cmp dword [ebp - 0x21c], 0x6a
jne 0x48f649
push str.546865576F726C64_86C36F73_2C25_4a7d_91EA_F5581018A42D
push esi
call fcn.006207b6
add esp, 8
xor ebx, ebx
test eax, eax
jne 0x48f686
mov eax, 0xfffffffc
sub eax, dword [ebp - 0x21c]
push 1
push 0
push eax
push dword [edi + 8]
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea eax, [ebp - 0x220]
mov esi, dword [sym.imp.KERNEL32.dll_ReadFile]
push 0
lea ecx, [ebp - 0x21c]
push ecx
push 4
push eax
push dword [edi + 8]
call esi
mov eax, dword [ebp - 0x220]
add eax, dword [ebp - 0x21c]
neg eax
push 1
push 0
push eax
push dword [edi + 8]
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea eax, [ebp - 0x224]
push 0
lea ecx, [ebp - 0x21c]
push ecx
push 4
push eax
push dword [edi + 8]
call esi
cmp dword [ebp - 0x224], 0
je 0x48f64d
lea eax, [edi + 0x26e4]
mov dword [ebp - 0x22c], eax
lea esi, [edi + 0x5cfb8]
xor eax, eax
mov dword [ebp - 0x228], 0
xor ebx, ebx
mov dword [ebp - 0x234], edi
jmp 0x48f4fb
mov dword [ebx], esi
add ebx, 4
mov dword [eax + 0x26e8], ebx
mov edi, eax
mov eax, dword [ebp - 0x240]
add eax, 1
add esi, 0x20
cmp eax, dword [ebp - 0x224]
mov ebx, dword [ebp - 0x244]
jae 0x48f657
mov dword [ebp - 0x240], eax
push 0
lea eax, [ebp - 0x21c]
push eax
push 0x20
push esi
push dword [edi + 8]
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov word [esi], 0
mov eax, dword [esi + 8]
mov ecx, dword [esi + 0xc]
add eax, dword [esi + 0x18]
adc ecx, dword [esi + 0x1c]
mov dword [esi + 8], eax
mov dword [esi + 0xc], ecx
mov dword [esi + 0x18], 0
mov dword [esi + 0x1c], 0
mov edx, dword [ebp - 0x228]
sub edx, eax
sbb ebx, ecx
add edx, dword [esi + 0x10]
adc ebx, dword [esi + 0x14]
add edx, 1
mov dword [ebp - 0x228], edx
adc ebx, 0
mov dword [ebp - 0x244], ebx
mov ebx, dword [edi + 0x26e8]
mov eax, edi
mov edi, dword [edi + 0x26ec]
cmp ebx, edi
jb 0x48f4d0
mov eax, dword [ebp - 0x22c]
mov edx, dword [eax]
sub ebx, edx
mov eax, ebx
sar eax, 2
mov dword [ebp - 0x23c], eax
add eax, 1
cmp eax, 0x40000000
jae 0x48f69d
sub edi, edx
mov ecx, edi
sar ecx, 2
sar edi, 1
cmp edi, eax
cmovb edi, eax
cmp ecx, 0x1fffffff
mov eax, 0x3fffffff
cmovae edi, eax
test edi, edi
mov dword [ebp - 0x230], edx
je 0x48f5e0
cmp edi, 0x40000000
jae 0x48f6a8
lea eax, [edi*4]
push eax
call fcn.00517b56
add esp, 4
mov edx, dword [ebp - 0x230]
jmp 0x48f5e2
xor eax, eax
lea ecx, [eax + edi*4]
mov dword [ebp - 0x238], ecx
mov ecx, dword [ebp - 0x23c]
mov dword [eax + ecx*4], esi
lea edi, [eax + ecx*4]
add edi, 4
test ebx, ebx
jle 0x48f613
push ebx
push edx
push eax
mov ebx, eax
call fcn.006025b0
mov eax, ebx
mov edx, dword [ebp - 0x230]
add esp, 0xc
mov ecx, dword [ebp - 0x234]
mov dword [ecx + 0x26e4], eax
mov dword [ecx + 0x26e8], edi
mov edi, ecx
mov eax, dword [ebp - 0x238]
mov dword [ecx + 0x26ec], eax
test edx, edx
je 0x48f4dd
push edx
call fcn.00517bd6
add esp, 4
jmp 0x48f4dd
xor ebx, ebx
jmp 0x48f686
mov dword [ebp - 0x228], 0
mov eax, dword [edi + 0x5d100]
mov ecx, dword [edi + 0x5d104]
sub eax, dword [ebp - 0x228]
sbb ecx, ebx
movd xmm0, eax
movd xmm1, ecx
punpckldq xmm0, xmm1
pshufd xmm0, xmm0, 0x44
movdqu xmmword [edi + 0x5d110], xmm0
mov bl, 1
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00517c1a
mov eax, ebx
add esp, 0x238
pop esi
pop edi
pop ebx
pop ebp
ret
mov ecx, dword [ebp - 0x22c]
call fcn.00469ffc
call fcn.0061842c
int3