Function at 0x48ec80
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x128
mov eax, dword [0x534014]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
push ebx
mov ebx, dword [ebp + 0x18]
push esi
push edi
mov esi, ecx
mov dword [ebp - 0x124], eax
mov ecx, dword [ebp + 8]
xor edi, edi
mov dword [ebp - 0x120], ecx
cmp ebx, 0xc
jb 0x48ef31
test ecx, ecx
je 0x48ed00
mov eax, dword [ebp - 0x120]
mov edx, dword [ecx + edi]
mov ecx, dword [ecx + edi + 4]
mov dword [ebp - 0x11c], edx
mov eax, dword [eax + edi + 8]
mov dword [ebp - 0x128], eax
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x118], ecx
mov eax, dword [eax + edi + 0xc]
mov dword [ebp - 0x110], eax
mov eax, dword [ebp - 0x128]
jmp 0x48edb0
mov edx, dword [ebp + 0x14]
mov ecx, dword [ebp + 0x10]
add edx, edi
add ecx, edi
test eax, eax
je 0x48ed43
push 0
push ecx
push eax
call fcn.00525413
add esp, 0xc
test eax, eax
jne 0x48ef31
push dword [ebp - 0x124]
lea eax, [ebp - 0x11c]
push 0xc
push 1
push eax
call fcn.0052507e
add esp, 0x10
cmp eax, 0xc
sete al
jmp 0x48ed96
mov eax, dword [esi + 0x82c]
test eax, eax
je 0x48ed66
lea edx, [ebp - 0x11c]
push edx
push 0xc
push 0
push ecx
push dword [esi + 0x804]
call eax
add esp, 0x14
jmp 0x48ed91
mov eax, dword [esi + 0x830]
test eax, eax
je 0x48ef31
test edx, edx
je 0x48ef31
lea ecx, [ebp - 0x11c]
push ecx
push 0xc
push edx
push dword [esi + 0x804]
call eax
add esp, 0x10
test eax, eax
setns al
test al, al
je 0x48ef31
mov eax, dword [ebp - 0x114]
mov ecx, dword [ebp - 0x118]
mov edx, dword [ebp - 0x11c]
cmp ecx, 0xc
jb 0x48ef31
cmp ecx, ebx
ja 0x48ef31
cmp edx, 1
jne 0x48edca
test al, al
je 0x48ede8
sub ebx, ecx
add edi, ecx
cmp ebx, 0xc
jb 0x48ef31
mov eax, dword [ebp - 0x124]
mov ecx, dword [ebp - 0x120]
jmp 0x48ecb8
lea ebx, [ecx - 0xc]
cmp ebx, 0x108
ja 0x48ef31
mov eax, dword [ebp - 0x120]
test eax, eax
je 0x48ee1c
add eax, 0xc
add eax, edi
push ebx
push eax
lea eax, [ebp - 0x10c]
push eax
call fcn.0042fd00
add esp, 0xc
jmp 0x48eeb9
mov ecx, dword [ebp + 0x14]
mov edx, dword [ebp + 0x10]
add ecx, 0xc
add edx, 0xc
add ecx, edi
add edx, edi
mov edi, dword [ebp - 0x124]
test edi, edi
je 0x48ee64
push 0
push edx
push edi
call fcn.00525413
add esp, 0xc
test eax, eax
jne 0x48ef31
push edi
push ebx
lea eax, [ebp - 0x10c]
push 1
push eax
call fcn.0052507e
add esp, 0x10
cmp eax, ebx
sete al
jmp 0x48eeb5
mov eax, dword [esi + 0x82c]
test eax, eax
je 0x48ee86
lea ecx, [ebp - 0x10c]
push ecx
push ebx
push 0
push edx
push dword [esi + 0x804]
call eax
add esp, 0x14
jmp 0x48eeb0
mov eax, dword [esi + 0x830]
test eax, eax
je 0x48ef31
test ecx, ecx
je 0x48ef31
lea edx, [ebp - 0x10c]
push edx
push ebx
push ecx
push dword [esi + 0x804]
call eax
add esp, 0x10
test eax, eax
setns al
test al, al
je 0x48ef31
dec ebx
cmp ebx, 0x108
jae 0x48efaa
push 0
push 0
push 0xffffffffffffffff
lea eax, [ebp - 0x10c]
mov byte [ebp + ebx - 0x10c], 0
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov ebx, eax
test ebx, ebx
jle 0x48ef31
xor ecx, ecx
mov edx, 2
mul edx
push 0x4011f8
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00427398
mov edi, eax
add esp, 8
test edi, edi
je 0x48ef31
push ebx
push edi
push 0xffffffffffffffff
lea eax, [ebp - 0x10c]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test eax, eax
jg 0x48ef44
push edi
call fcn.00426f44
add esp, 4
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00426f36
mov esp, ebp
pop ebp
ret 0x14
cmp byte [esi + 0x814], 0
mov dword [esi + 0xc88], edi
jne 0x48ef81
mov eax, dword [esi + 0x808]
mov byte [esi + 0x814], 1
test eax, eax
jne 0x48ef6c
mov dword [esi + 0x818], eax
jmp 0x48ef87
push 9
push dword [esi + 0x804]
call eax
add esp, 8
mov dword [esi + 0x818], eax
jmp 0x48ef87
mov eax, dword [esi + 0x818]
test eax, eax
je 0x48ef31
push edi
push dword [esi + 0x804]
call eax
mov ecx, dword [ebp - 4]
add esp, 8
xor ecx, ebp
pop edi
pop esi
pop ebx
call fcn.00426f36
mov esp, ebp
pop ebp
ret 0x14
call fcn.0042706c
int3