Function at 0x47b9a1
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x128
mov ecx, 0x4a
dec ecx
mov dword [esp + ecx*4], 0xfffa5a5a
jne 0x47b9af
push ebx
push esi
push edi
mov dword [ebp - 0x120], 0
mov dword [ebp - 8], 0xffffffff
mov dword [ebp - 0x11c], 0
jmp 0x47be42
mov edi, dword [ebp + 8]
mov esi, edi
add esi, 1
mov dword [ebp + 8], esi
mov bl, byte [edi]
mov byte [ebp - 1], bl
movsx ebx, byte [ebp - 1]
cmp ebx, 0x3f
je 0x47ba0d
cmp ebx, 0x24
je 0x47ba0d
cmp ebx, 0x25
je 0x47ba0d
test byte [ebx + str._________h______________________H], 4
je 0x47bbed
lea edi, [ebp - 0x118]
mov dword [ebp - 0xc], edi
cmp byte [ebp - 1], 0x3f
jne 0x47ba32
mov edi, dword [ebp + 8]
mov esi, edi
add esi, 1
mov dword [ebp + 8], esi
movsx ebx, byte [edi]
mov dword [ebp - 0x10], ebx
jmp 0x47bb33
cmp byte [ebp - 1], 0x24
jne 0x47ba87
jmp 0x47ba54
mov edi, dword [ebp - 0xc]
mov esi, edi
add esi, 1
mov dword [ebp - 0xc], esi
mov esi, dword [ebp + 8]
mov ebx, esi
add ebx, 1
mov dword [ebp + 8], ebx
mov bl, byte [esi]
mov byte [edi], bl
mov edi, dword [ebp + 8]
movsx ebx, byte [edi]
test byte [ebx + str._________h______________________H], 0x84
jne 0x47ba3a
mov edi, dword [ebp - 0xc]
mov byte [edi], 0
lea edi, [ebp - 0x10]
push edi
push 0x5437e9
lea edi, [ebp - 0x118]
push edi
call fcn.00491acc
add esp, 0xc
jmp 0x47bb33
cmp byte [ebp - 1], 0x25
jne 0x47bad9
jmp 0x47baa9
mov edi, dword [ebp - 0xc]
mov esi, edi
add esi, 1
mov dword [ebp - 0xc], esi
mov esi, dword [ebp + 8]
mov ebx, esi
add ebx, 1
mov dword [ebp + 8], ebx
mov bl, byte [esi]
mov byte [edi], bl
mov edi, dword [ebp + 8]
movsx ebx, byte [edi]
cmp ebx, 0x30
je 0x47ba8f
cmp ebx, 0x31
je 0x47ba8f
mov edi, dword [ebp - 0xc]
mov byte [edi], 0
lea edi, [ebp - 0x10]
push edi
push 0x5437e6
lea edi, [ebp - 0x118]
push edi
call fcn.00491acc
add esp, 0xc
jmp 0x47bb33
mov edi, dword [ebp - 0xc]
mov esi, edi
add esi, 1
mov dword [ebp - 0xc], esi
mov bl, byte [ebp - 1]
mov byte [edi], bl
jmp 0x47bb05
mov edi, dword [ebp - 0xc]
mov esi, edi
add esi, 1
mov dword [ebp - 0xc], esi
mov esi, dword [ebp + 8]
mov ebx, esi
add ebx, 1
mov dword [ebp + 8], ebx
mov bl, byte [esi]
mov byte [edi], bl
mov edi, dword [ebp + 8]
movsx ebx, byte [edi]
test byte [ebx + str._________h______________________H], 4
jne 0x47baeb
mov edi, dword [ebp - 0xc]
mov byte [edi], 0
lea edi, [ebp - 0x10]
push edi
push 0x5437e3
lea edi, [ebp - 0x118]
push edi
call fcn.00491acc
add esp, 0xc
cmp dword [ebp - 8], 0
jge 0x47bb6c
mov edi, dword [ebp + 8]
cmp byte [edi], 0x7e
jne 0x47bb50
mov edi, dword [ebp - 0x10]
mov dword [ebp - 8], edi
add dword [ebp + 8], 1
jmp 0x47be42
push dword [ebp + 0xc]
mov edi, dword [ebp - 0x10]
mov ebx, edi
and ebx, 0xff
push ebx
call fcn.0047b3ef
add esp, 8
jmp 0x47be42
cmp dword [ebp - 0x11c], 0
je 0x47bb9e
cmp dword [ebp - 0x11c], 1
jne 0x47be42
mov edi, dword [ebp - 0x10]
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x10], 1
mov dword [ebp - 0x11c], 2
jmp 0x47be42
mov edi, dword [ebp - 0x10]
cmp dword [ebp - 8], edi
jge 0x47bbad
mov ebx, 1
jmp 0x47bbb2
mov ebx, 0xffffffff
mov dword [ebp - 0x18], ebx
push dword [ebp + 0xc]
mov edi, dword [ebp - 8]
mov ebx, edi
and ebx, 0xff
push ebx
call fcn.0047b3ef
add esp, 8
mov edi, dword [ebp - 0x10]
cmp dword [ebp - 8], edi
jne 0x47bbd6
jmp 0x47bbe1
mov edi, dword [ebp - 8]
add edi, dword [ebp - 0x18]
mov dword [ebp - 8], edi
jmp 0x47bbb5
mov dword [ebp - 8], 0xffffffff
jmp 0x47be42
movsx ebx, byte [ebp - 1]
cmp ebx, 0x28
je 0x47bbfb
cmp ebx, 0x29
jne 0x47bc74
cmp byte [ebp - 1], 0x28
jne 0x47bc10
mov dword [ebp - 0x11c], 1
jmp 0x47be42
mov dword [ebp - 0x11c], 0
mov edi, dword [ebp - 0x14]
cmp dword [ebp - 8], edi
jle 0x47bc58
lea edi, [ebp - 0x14]
push edi
lea edi, [ebp - 8]
push edi
call fcn.00413e0c
add esp, 8
jmp 0x47bc58
push dword [ebp - 0x14]
push dword [ebp - 8]
call fcn.0046d8f2
add esp, 8
mov edi, eax
push dword [ebp + 0xc]
mov ebx, edi
and ebx, 0xff
push ebx
call fcn.0047b3ef
add esp, 8
mov edi, dword [ebp - 0x10]
mov esi, edi
sub esi, 1
mov dword [ebp - 0x10], esi
cmp edi, 0
jne 0x47bc34
mov dword [ebp - 8], 0xffffffff
jmp 0x47be42
movsx ebx, byte [ebp - 1]
cmp ebx, 0x22
je 0x47bc82
cmp ebx, 0x27
jne 0x47bcc6
jmp 0x47bc9e
push dword [ebp + 0xc]
mov edi, dword [ebp + 8]
mov esi, edi
add esi, 1
mov dword [ebp + 8], esi
movzx ebx, byte [edi]
push ebx
call fcn.0047b3ef
add esp, 8
mov edi, dword [ebp + 8]
movsx ebx, byte [edi]
cmp ebx, 0
je 0x47bcb1
movsx edx, byte [ebp - 1]
cmp ebx, edx
jne 0x47bc84
mov edi, dword [ebp + 8]
cmp byte [edi], 0
je 0x47be42
add dword [ebp + 8], 1
jmp 0x47be42
cmp byte [ebp - 1], 0x3c
jne 0x47be1a
lea edi, [ebp - 0x118]
mov dword [ebp - 0xc], edi
jmp 0x47bcf5
mov edi, dword [ebp - 0xc]
mov esi, edi
add esi, 1
mov dword [ebp - 0xc], esi
mov esi, dword [ebp + 8]
mov ebx, esi
add ebx, 1
mov dword [ebp + 8], ebx
mov bl, byte [esi]
mov byte [edi], bl
mov edi, dword [ebp + 8]
movsx ebx, byte [edi]
cmp ebx, 0
je 0x47bd05
cmp ebx, 0x3e
jne 0x47bcdb
mov edi, dword [ebp + 8]
cmp byte [edi], 0
je 0x47bd11
add dword [ebp + 8], 1
mov edi, dword [ebp - 0xc]
mov byte [edi], 0
push 0x4b47e4
lea edi, [ebp - 0x118]
push edi
lea edi, [ebp - 0x118]
push edi
call fcn.00401c00
add esp, 0xc
push 0x5437e0
lea edi, [ebp - 0x118]
push edi
call sub.CRTDLL.DLL_fopen
add esp, 8
mov dword [ebp - 0x124], eax
cmp eax, 0
je 0x47be42
push 2
push 0
push dword [ebp - 0x124]
call sub.CRTDLL.DLL_fseek
add esp, 0xc
push dword [ebp - 0x124]
call sub.CRTDLL.DLL_ftell
add esp, 4
mov dword [ebp - 0x128], eax
push dword [ebp - 0x124]
call sub.CRTDLL.DLL_rewind
add esp, 4
cmp dword [ebp - 0x128], 0
je 0x47be0a
mov edi, dword [ebp - 0x128]
add edi, 1
push edi
push 0
call sub.KERNEL32.dll_GlobalAlloc
mov dword [ebp - 0x120], eax
cmp eax, 0
je 0x47be0a
push dword [ebp - 0x124]
push dword [ebp - 0x128]
push 1
push dword [ebp - 0x120]
call sub.CRTDLL.DLL_fread
add esp, 0x10
cmp eax, dword [ebp - 0x128]
je 0x47bde9
push dword [ebp - 0x120]
call sub.KERNEL32.dll_GlobalFree
mov dword [ebp - 0x120], 0
jmp 0x47be0a
mov edi, dword [ebp - 0x128]
mov esi, dword [ebp - 0x120]
mov byte [esi + edi], 0
push dword [ebp + 0xc]
push dword [ebp - 0x120]
call fcn.0047b9a1
add esp, 8
push dword [ebp - 0x124]
call sub.CRTDLL.DLL_fclose
add esp, 4
jmp 0x47be42
cmp byte [ebp - 1], 0x2f
jne 0x47be42
jmp 0x47be26
add dword [ebp + 8], 1
mov edi, dword [ebp + 8]
movsx ebx, byte [edi]
cmp ebx, 0
je 0x47be36
cmp ebx, 0xa
jne 0x47be22
mov edi, dword [ebp + 8]
cmp byte [edi], 0
je 0x47be42
add dword [ebp + 8], 1
mov edi, dword [ebp + 8]
cmp byte [edi], 0
jne 0x47b9dc
cmp dword [ebp - 0x120], 0
je 0x47be62
push dword [ebp - 0x120]
call sub.KERNEL32.dll_GlobalFree
pop edi
pop esi
pop ebx
leave
ret