Function at 0x4d7aea
Capabilities:
Read file on windows

Disassembly:
push ebx
push edi
mov edx, 7
sub esp, 4
mov dword [esp], 0
dec edx
jne 0x4d7af1
call fcn.0057b2e0
mov edx, dword [esp + 0x28]
lea ecx, [esp]
call fcn.0050d0f0
mov dword [section..data], 0x500a80
mov dword [section..data], 0x500aa2
mov dword [esp + 8], 0xfffffc17
mov dword [section..data], 0x500aa8
mov dword [section..data], 0x500aaa
push edx
call fcn.0057b460
pop edx
push eax
push 2
push edx
call fcn.0057b460
pop edx
push eax
mov edx, str.Check_if_file__
push edx
call fcn.0057b230
mov edx, dword [esp + 0xc]
push edx
call fcn.0057b230
mov edx, str.__is_encrypted__UDF__
push edx
call fcn.0057b230
push edx
call fcn.0057b460
pop edx
push eax
push edx
call fcn.0057b460
pop edx
push eax
mov eax, dword [esp + 0x40]
cdq
push edx
push eax
call fcn.0056a320
pop eax
mov edx, 0x6a40ae
push edx
call fcn.0057b230
call fcn.0057b490
mov eax, str.BRAACS_IsFileEncryptedv2
push eax
mov eax, 0x6ae036
push eax
call fcn.0050d222
add dword [esp + 8], edx
call fcn.004ae98d
call fcn.0050d240
mov dword [section..data], 0x500aac
mov ebx, dword [esp + 0x2c]
and ebx, ebx
jne 0x4d7ff6
mov dword [section..data], 0x500aae
push dword [esp]
call fcn.0056d9eb
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x4d7bfc
jl 0x4d7bf8
cmp ebx, 0
ja 0x4d7bfc
xor eax, eax
jmp 0x4d7c01
mov eax, 1
or eax, eax
jne 0x4d7c4c
mov dword [section..data], 0x500aaf
push 3
mov eax, str.Error___Filesize
push eax
mov eax, str.BRAACS_IsFileEncryptedv2
push eax
mov eax, 0x6ae036
push eax
call fcn.004ae98d
mov dword [section..data], 0x500ab0
mov dword [esp + 8], 0xfffffc15
mov dword [section..data], 0x500ab1
jmp 0x4d8250
mov dword [section..data], 0x500ab2
mov dword [section..data], 0x500ab4
push 0
push 0
push 3
push 0
push 3
push closesocket
push dword [esp + 0x18]
call sub.KERNEL32.dll_CreateFileW
mov dword [esp + 4], eax
mov dword [section..data], 0x500ab8
cmp dword [esp + 4], 0
je 0x4d7ca0
xor eax, eax
jmp 0x4d7ca5
mov eax, 1
and eax, eax
je 0x4d7d6d
mov dword [section..data], 0x500aba
push edx
call fcn.0057b460
pop edx
push eax
push 0
push edx
call fcn.0057b460
pop edx
push eax
mov edx, str.CreateFile__failed__
push edx
call fcn.0057b230
push edx
call fcn.0057b460
pop edx
push eax
push edx
call fcn.0057b460
pop edx
push eax
mov eax, dword [esp + 0x18]
cdq
push edx
push eax
call fcn.0056a320
pop eax
mov edx, str.__GetLastError__
push edx
call fcn.0057b230
push edx
call fcn.0057b460
pop edx
push eax
push edx
call fcn.0057b460
pop edx
push eax
call sub.KERNEL32.dll_GetLastError
cdq
push edx
push eax
call fcn.0056a320
pop eax
mov edx, 0x67df2c
push edx
call fcn.0057b230
call fcn.0057b490
mov eax, str.BRAACS_IsFileEncryptedv2
push eax
mov eax, 0x6ae036
push eax
call fcn.0050d222
add dword [esp + 8], edx
call fcn.004ae98d
call fcn.0050d240
mov dword [section..data], 0x500abc
mov dword [esp + 8], 0xfffffc14
mov dword [section..data], 0x500abd
jmp 0x4d8250
mov dword [section..data], 0x500abe
mov dword [section..data], 0x500ac0
push 0x10
call fcn.0057abd0
mov dword [esp + 0x18], eax
mov dword [section..data], 0x500ac1
cmp dword [esp + 0x18], 0
je 0x4d7da4
xor eax, eax
jmp 0x4d7da9
mov eax, 1
and eax, eax
je 0x4d7df4
mov dword [section..data], 0x500ac2
push 3
mov eax, str.ERROR__AllocateMemory_failed___16_
push eax
mov eax, str.BRAACS_IsFileEncryptedv2
push eax
mov eax, 0x6ae036
push eax
call fcn.004ae98d
mov dword [section..data], 0x500ac3
mov dword [esp + 8], 0xfffffc16
mov dword [section..data], 0x500ac4
jmp 0x4d8250
mov dword [section..data], 0x500ac5
mov dword [section..data], 0x500aca
push 0
lea eax, [esp + 0x10]
push eax
push 0x10
push dword [esp + 0x24]
push dword [esp + 0x14]
call sub.KERNEL32.dll_ReadFile
mov dword [esp + 0x14], eax
mov dword [section..data], 0x500acc
mov ebx, dword [esp + 0x14]
and ebx, ebx
jne 0x4d7f42
mov dword [section..data], 0x500acd
call sub.KERNEL32.dll_GetLastError
mov dword [esp + 0x10], eax
mov dword [section..data], 0x500ace
push edx
call fcn.0057b460
pop edx
push eax
push 0
push edx
call fcn.0057b460
pop edx
push eax
mov edx, str.ReadFile___
push edx
call fcn.0057b230
mov edx, dword [esp + 0xc]
push edx
call fcn.0057b230
mov edx, str.__failed__
push edx
call fcn.0057b230
push edx
call fcn.0057b460
pop edx
push eax
push edx
call fcn.0057b460
pop edx
push eax
mov eax, dword [esp + 0x28]
cdq
push edx
push eax
call fcn.0056a320
pop eax
mov edx, str.____GetLastError__
push edx
call fcn.0057b230
push edx
call fcn.0057b460
pop edx
push eax
push edx
call fcn.0057b460
pop edx
push eax
mov eax, dword [esp + 0x24]
cdq
push edx
push eax
call fcn.0056a320
pop eax
mov edx, 0x69ad3c
push edx
call fcn.0057b230
push edx
call fcn.0057b460
pop edx
push eax
push dword [esp + 0x20]
call fcn.004d6c59
pop eax
mov edx, 0x67ce72
push edx
call fcn.0057b230
call fcn.0057b490
mov eax, str.BRAACS_IsFileEncryptedv2
push eax
mov eax, 0x6ae036
push eax
call fcn.0050d222
add dword [esp + 8], edx
call fcn.004ae98d
call fcn.0050d240
mov dword [section..data], 0x500acf
mov dword [esp + 8], 0xfffffc14
mov dword [section..data], 0x500ad0
jmp 0x4d8250
mov dword [section..data], 0x500ad1
mov dword [section..data], 0x500ad3
push edx
call fcn.0057b460
pop edx
push eax
push 3
push edx
call fcn.0057b460
pop edx
push eax
mov edx, str.Bytes_read__
push edx
call fcn.0057b230
push edx
call fcn.0057b460
pop edx
push eax
push edx
call fcn.0057b460
pop edx
push eax
mov eax, dword [esp + 0x20]
cdq
push edx
push eax
call fcn.0056a320
pop eax
mov edx, 0x67df2c
push edx
call fcn.0057b230
call fcn.0057b490
mov eax, str.BRAACS_IsFileEncryptedv2
push eax
mov eax, 0x6ae036
push eax
call fcn.0050d222
add dword [esp + 8], edx
call fcn.004ae98d
call fcn.0050d240
mov dword [section..data], 0x500ad5
push dword [esp + 4]
call sub.KERNEL32.dll_CloseHandle
mov dword [section..data], 0x500ad6
mov dword [esp + 4], 0
mov dword [section..data], 0x500ad9
jmp 0x4d816d
mov dword [section..data], 0x500ad9
mov dword [section..data], 0x500adc
push dword [esp]
push dword [esp + 0x30]
call fcn.0041abf8
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x4d802a
jl 0x4d8026
cmp ebx, 0
ja 0x4d802a
xor eax, eax
jmp 0x4d802f
mov eax, 1
or eax, eax
jne 0x4d807a
mov dword [section..data], 0x500add
push 3
mov eax, str.Error___Filesize
push eax
mov eax, str.BRAACS_IsFileEncryptedv2
push eax
mov eax, 0x6ae036
push eax
call fcn.004ae98d
mov dword [section..data], 0x500ade
mov dword [esp + 8], 0xfffffc15
mov dword [section..data], 0x500adf
jmp 0x4d8250
mov dword [section..data], 0x500ae0
mov dword [section..data], 0x500ae2
push 0x10
push 0
push 0
push dword [esp + 0xc]
push dword [esp + 0x3c]
call fcn.0041cf82
mov dword [esp + 0x18], eax
mov dword [section..data], 0x500ae3
mov ebx, dword [esp + 0x18]
cmp ebx, 1
jg 0x4d8163
mov dword [section..data], 0x500ae4
push edx
call fcn.0057b460
pop edx
push eax
push 0
push edx
call fcn.0057b460
pop edx
push eax
mov edx, str.ERROR__ReadFile_failed___
push edx
call fcn.0057b230
push edx
call fcn.0057b460
pop edx
push eax
push dword [esp + 0x28]
call fcn.004169d9
pop eax
mov edx, 0x67df2c
push edx
call fcn.0057b230
call fcn.0057b490
mov eax, str.BRAACS_IsFileEncryptedv2
push eax
mov eax, 0x6ae036
push eax
call fcn.0050d222
add dword [esp + 8], edx
call fcn.004ae98d
call fcn.0050d240
mov dword [section..data], 0x500ae5
mov dword [esp + 0x18], 0
mov dword [section..data], 0x500ae6
mov dword [esp + 8], 0xfffffc14
mov dword [section..data], 0x500ae7
jmp 0x4d8250
mov dword [section..data], 0x500ae8
mov dword [section..data], 0x500aeb
mov dword [section..data], 0x500aed
mov ebx, dword [esp + 0x18]
add ebx, 4
push ebx
call fcn.0057adf0
mov ebx, eax
cmp ebx, 0x47
je 0x4d81d9
mov dword [section..data], 0x500aee
push 1
mov eax, str.ERROR__File_is_invalid__No_SYNC_byte_found_
push eax
mov eax, str.BRAACS_IsFileEncryptedv2
push eax
mov eax, 0x6ae036
push eax
call fcn.004ae98d
mov dword [section..data], 0x500aef
mov dword [esp + 8], 0xfffffc08
mov dword [section..data], 0x500af0
jmp 0x4d8250
mov dword [section..data], 0x500af1
mov dword [section..data], 0x500af5
push dword [esp + 0x18]
call fcn.0057adf0
mov ebx, eax
and ebx, 0xc0
and ebx, ebx
je 0x4d8220
mov dword [section..data], 0x500af7
mov dword [esp + 8], 2
mov dword [section..data], 0x500af8
jmp 0x4d823c
mov dword [section..data], 0x500af8
mov dword [section..data], 0x500afa
mov dword [esp + 8], 1
mov dword [section..data], 0x500afb
mov dword [section..data], 0x500afd
mov dword [section..data], 0x500aff
cmp dword [esp + 0x18], 0
je 0x4d8274
mov dword [section..data], 0x500b00
push dword [esp + 0x18]
call fcn.0057ad30
mov dword [section..data], 0x500b01
mov dword [section..data], 0x500b03
cmp dword [esp + 4], 0
je 0x4d82a2
mov dword [section..data], 0x500b04
push dword [esp + 4]
call sub.KERNEL32.dll_CloseHandle
mov dword [section..data], 0x500b05
mov dword [section..data], 0x500b07
mov eax, dword [esp + 8]
jmp 0x4d82c8
push dword [esp]
call fcn.0057b3c0
add esp, 0x1c
pop edi
pop ebx
ret 8