Function at 0x485777
Capabilities:
Read file on windows

Disassembly:
push 0x168
mov eax, 0x68fea9
call fcn.0056e23b
mov edi, ecx
mov eax, dword [ebp + 0xc]
xor ebx, ebx
mov esi, dword [ebp + 8]
push 0x104
mov dword [ebp - 0x15c], eax
lea eax, [ebp - 0x120]
push ebx
push eax
mov dword [ebp - 0x174], esi
mov dword [ebp - 0x168], ebx
call fcn.00644240
add esp, 0xc
lea ecx, [ebp - 0x13c]
call fcn.004173bc
mov dword [ebp - 4], ebx
push dword [edi + 0x26c]
call fcn.0056e306
push dword [esi + 0x48]
mov dword [ebp - 0x160], eax
call fcn.0056e306
pop ecx
pop ecx
mov ecx, dword [ebp - 0x160]
mov dword [ebp - 0x164], eax
test ecx, ecx
je 0x485a8f
test eax, eax
je 0x485a7d
push dword [edi + 0x26c]
push ebx
push ecx
call fcn.00644240
push dword [esi + 0x48]
push ebx
push dword [ebp - 0x164]
call fcn.00644240
mov eax, dword [esi + 0x34]
add esp, 0x18
add eax, dword [edi + 0x264]
push ebx
push ebx
push eax
push dword [edi + 0x258]
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
push ebx
lea eax, [ebp - 0x168]
push eax
push dword [edi + 0x26c]
push dword [ebp - 0x160]
push dword [edi + 0x258]
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x485a7d
mov eax, dword [esi + 0x3c]
add eax, dword [edi + 0x264]
push ebx
push ebx
push eax
push dword [edi + 0x258]
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
push ebx
lea eax, [ebp - 0x168]
push eax
push 0x104
lea eax, [ebp - 0x120]
push eax
push dword [edi + 0x258]
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x485a7d
mov eax, dword [esi + 0x44]
add eax, dword [edi + 0x264]
push ebx
push ebx
push eax
push dword [edi + 0x258]
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
push ebx
lea eax, [ebp - 0x168]
push eax
push dword [esi + 0x48]
push dword [ebp - 0x164]
push dword [edi + 0x258]
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x485a7d
mov eax, dword [ebp - 0x15c]
mov ecx, edi
add eax, 0x1c
push eax
mov dword [ebp - 0x16c], eax
lea eax, [ebp - 0x120]
push eax
call fcn.00485474
mov eax, dword [ebp - 0x15c]
mov ecx, edi
add eax, 4
push eax
push dword [ebp - 0x160]
call fcn.00485474
mov eax, dword [ebp - 0x15c]
mov ecx, edi
add eax, 0x68
push eax
push dword [ebp - 0x164]
call fcn.00485474
cmp dword [esi + 0x3c], ebx
je 0x485a24
push 1
push 0xffffffffffffffff
lea eax, [ebp - 0x170]
mov dword [ebp - 0x170], 0x5c
lea esi, [edi + 0x278]
push eax
mov ecx, esi
call fcn.0043ccf9
inc eax
lea ecx, [ebp - 0x138]
push 0xffffffffffffffff
push eax
lea eax, [edi + 0x274]
neg eax
sbb eax, eax
and eax, esi
push eax
call fcn.00401e50
mov esi, dword [ebp - 0x174]
cmp byte [esi + 0x38], 0x1f
ja 0x4859fc
lea ecx, [ebp - 0x158]
call fcn.004173bc
mov byte [ebp - 4], 1
movzx eax, byte [esi + 0x38]
imul eax, eax, 0xc
push 8
mov byte [ebp - 0x1c], bl
mov dword [ebp - 0x1b], ebx
mov dword [ebp - 0x17], ebx
add eax, 0x58
add eax, edi
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00643300
add esp, 0xc
lea eax, [ebp - 0x154]
mov ecx, edi
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00485474
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x154]
push eax
lea ecx, [ebp - 0x138]
call fcn.00404690
mov edi, 0x6c751c
push edi
call fcn.00647fd1
pop ecx
push eax
push edi
lea ecx, [ebp - 0x138]
call fcn.0041cad6
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x158]
call fcn.0041786a
mov edi, dword [ebp - 0x16c]
lea ecx, [ebp - 0x138]
push 0xffffffffffffffff
push ebx
push edi
call fcn.00404690
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x138]
mov ecx, edi
push eax
call fcn.00401e50
jmp 0x485a35
mov ecx, dword [ebp - 0x16c]
push ebx
push 0x6c7520
call fcn.004044d0
mov ecx, dword [ebp - 0x15c]
xor ebx, ebx
mov eax, dword [esi + 0x40]
inc ebx
mov dword [ecx + 0x34], eax
mov eax, dword [esi + 0x58]
mov dword [ecx + 0x38], eax
mov eax, dword [esi + 0x54]
mov dword [ecx + 0x3c], eax
mov eax, dword [esi + 0x48]
mov dword [ecx + 0x80], eax
mov eax, dword [esi + 0x54]
mov dword [ecx + 0x3c], eax
mov eax, dword [esi + 0x58]
mov dword [ecx + 0x38], eax
mov eax, dword [esi + 0x10]
mov dword [ecx + 0x58], eax
mov eax, dword [esi + 0x14]
mov dword [ecx + 0x5c], eax
mov eax, dword [esi + 8]
mov dword [ecx + 0x48], eax
mov eax, dword [esi + 0xc]
mov dword [ecx + 0x4c], eax
push dword [ebp - 0x160]
call fcn.0056e30f
mov eax, dword [ebp - 0x164]
pop ecx
test eax, eax
je 0x485a9a
push eax
call fcn.0056e30f
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x13c]
call fcn.0041786a
mov eax, ebx
call fcn.0056e1e5
ret 8