Function at 0x4bedd1
Capabilities:
Read file on windows

Disassembly:
push ebx
push edi
mov edx, 7
sub esp, 4
mov dword [esp], 0
dec edx
jne 0x4bedd8
call fcn.0055ab90
mov edx, dword [esp + 0x28]
lea ecx, [esp]
call fcn.004f4000
mov dword [section..data], 0x500a1d
mov dword [section..data], 0x500a3f
mov dword [esp + 8], 0xfffffc17
mov dword [section..data], 0x500a45
mov dword [section..data], 0x500a47
push edx
call fcn.0055a9f0
pop edx
push eax
push 2
push edx
call fcn.0055a9f0
pop edx
push eax
mov edx, str.Check_if_file__
push edx
call fcn.0055aac0
mov edx, dword [esp + 0xc]
push edx
call fcn.0055aac0
mov edx, str.__is_encrypted__UDF__
push edx
call fcn.0055aac0
push edx
call fcn.0055a9f0
pop edx
push eax
push edx
call fcn.0055a9f0
pop edx
push eax
mov eax, dword [esp + 0x40]
cdq
push edx
push eax
call fcn.00548d10
pop eax
mov edx, 0x65e4e2
push edx
call fcn.0055aac0
call fcn.0055ab20
mov eax, str.BRAACS_IsFileEncryptedv2
push eax
mov eax, 0x6676aa
push eax
call fcn.004f4332
add dword [esp + 8], edx
call fcn.004967c8
call fcn.004f4350
mov dword [section..data], 0x500a49
mov ebx, dword [esp + 0x2c]
and ebx, ebx
jne 0x4bf2dd
mov dword [section..data], 0x500a4b
push dword [esp]
call fcn.0054cac0
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x4beee3
jl 0x4beedf
cmp ebx, 0
ja 0x4beee3
xor eax, eax
jmp 0x4beee8
mov eax, 1
or eax, eax
jne 0x4bef33
mov dword [section..data], 0x500a4c
push 3
mov eax, str.Error___Filesize
push eax
mov eax, str.BRAACS_IsFileEncryptedv2
push eax
mov eax, 0x6676aa
push eax
call fcn.004967c8
mov dword [section..data], 0x500a4d
mov dword [esp + 8], 0xfffffc15
mov dword [section..data], 0x500a4e
jmp 0x4bf537
mov dword [section..data], 0x500a4f
mov dword [section..data], 0x500a51
push 0
push 0
push 3
push 0
push 3
push closesocket
push dword [esp + 0x18]
call sub.KERNEL32.dll_CreateFileW
mov dword [esp + 4], eax
mov dword [section..data], 0x500a55
cmp dword [esp + 4], 0
je 0x4bef87
xor eax, eax
jmp 0x4bef8c
mov eax, 1
and eax, eax
je 0x4bf054
mov dword [section..data], 0x500a57
push edx
call fcn.0055a9f0
pop edx
push eax
push 0
push edx
call fcn.0055a9f0
pop edx
push eax
mov edx, str.CreateFile__failed__
push edx
call fcn.0055aac0
push edx
call fcn.0055a9f0
pop edx
push eax
push edx
call fcn.0055a9f0
pop edx
push eax
mov eax, dword [esp + 0x18]
cdq
push edx
push eax
call fcn.00548d10
pop eax
mov edx, str.__GetLastError__
push edx
call fcn.0055aac0
push edx
call fcn.0055a9f0
pop edx
push eax
push edx
call fcn.0055a9f0
pop edx
push eax
call sub.KERNEL32.dll_GetLastError
cdq
push edx
push eax
call fcn.00548d10
pop eax
mov edx, 0x638cee
push edx
call fcn.0055aac0
call fcn.0055ab20
mov eax, str.BRAACS_IsFileEncryptedv2
push eax
mov eax, 0x6676aa
push eax
call fcn.004f4332
add dword [esp + 8], edx
call fcn.004967c8
call fcn.004f4350
mov dword [section..data], 0x500a59
mov dword [esp + 8], 0xfffffc14
mov dword [section..data], 0x500a5a
jmp 0x4bf537
mov dword [section..data], 0x500a5b
mov dword [section..data], 0x500a5d
push 0x10
call fcn.0055a360
mov dword [esp + 0x18], eax
mov dword [section..data], 0x500a5e
cmp dword [esp + 0x18], 0
je 0x4bf08b
xor eax, eax
jmp 0x4bf090
mov eax, 1
and eax, eax
je 0x4bf0db
mov dword [section..data], 0x500a5f
push 3
mov eax, str.ERROR__AllocateMemory_failed___16_
push eax
mov eax, str.BRAACS_IsFileEncryptedv2
push eax
mov eax, 0x6676aa
push eax
call fcn.004967c8
mov dword [section..data], 0x500a60
mov dword [esp + 8], 0xfffffc16
mov dword [section..data], 0x500a61
jmp 0x4bf537
mov dword [section..data], 0x500a62
mov dword [section..data], 0x500a67
push 0
lea eax, [esp + 0x10]
push eax
push 0x10
push dword [esp + 0x24]
push dword [esp + 0x14]
call sub.KERNEL32.dll_ReadFile
mov dword [esp + 0x14], eax
mov dword [section..data], 0x500a69
mov ebx, dword [esp + 0x14]
and ebx, ebx
jne 0x4bf229
mov dword [section..data], 0x500a6a
call sub.KERNEL32.dll_GetLastError
mov dword [esp + 0x10], eax
mov dword [section..data], 0x500a6b
push edx
call fcn.0055a9f0
pop edx
push eax
push 0
push edx
call fcn.0055a9f0
pop edx
push eax
mov edx, str.ReadFile___
push edx
call fcn.0055aac0
mov edx, dword [esp + 0xc]
push edx
call fcn.0055aac0
mov edx, str.__failed__
push edx
call fcn.0055aac0
push edx
call fcn.0055a9f0
pop edx
push eax
push edx
call fcn.0055a9f0
pop edx
push eax
mov eax, dword [esp + 0x28]
cdq
push edx
push eax
call fcn.00548d10
pop eax
mov edx, str.____GetLastError__
push edx
call fcn.0055aac0
push edx
call fcn.0055a9f0
pop edx
push eax
push edx
call fcn.0055a9f0
pop edx
push eax
mov eax, dword [esp + 0x24]
cdq
push edx
push eax
call fcn.00548d10
pop eax
mov edx, 0x655306
push edx
call fcn.0055aac0
push edx
call fcn.0055a9f0
pop edx
push eax
push dword [esp + 0x20]
call fcn.004bdf43
pop eax
mov edx, 0x637c34
push edx
call fcn.0055aac0
call fcn.0055ab20
mov eax, str.BRAACS_IsFileEncryptedv2
push eax
mov eax, 0x6676aa
push eax
call fcn.004f4332
add dword [esp + 8], edx
call fcn.004967c8
call fcn.004f4350
mov dword [section..data], 0x500a6c
mov dword [esp + 8], 0xfffffc14
mov dword [section..data], 0x500a6d
jmp 0x4bf537
mov dword [section..data], 0x500a6e
mov dword [section..data], 0x500a70
push edx
call fcn.0055a9f0
pop edx
push eax
push 3
push edx
call fcn.0055a9f0
pop edx
push eax
mov edx, str.Bytes_read__
push edx
call fcn.0055aac0
push edx
call fcn.0055a9f0
pop edx
push eax
push edx
call fcn.0055a9f0
pop edx
push eax
mov eax, dword [esp + 0x20]
cdq
push edx
push eax
call fcn.00548d10
pop eax
mov edx, 0x638cee
push edx
call fcn.0055aac0
call fcn.0055ab20
mov eax, str.BRAACS_IsFileEncryptedv2
push eax
mov eax, 0x6676aa
push eax
call fcn.004f4332
add dword [esp + 8], edx
call fcn.004967c8
call fcn.004f4350
mov dword [section..data], 0x500a72
push dword [esp + 4]
call sub.KERNEL32.dll_CloseHandle
mov dword [section..data], 0x500a73
mov dword [esp + 4], 0
mov dword [section..data], 0x500a76
jmp 0x4bf454
mov dword [section..data], 0x500a76
mov dword [section..data], 0x500a79
push dword [esp]
push dword [esp + 0x30]
call fcn.00414b52
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x4bf311
jl 0x4bf30d
cmp ebx, 0
ja 0x4bf311
xor eax, eax
jmp 0x4bf316
mov eax, 1
or eax, eax
jne 0x4bf361
mov dword [section..data], 0x500a7a
push 3
mov eax, str.Error___Filesize
push eax
mov eax, str.BRAACS_IsFileEncryptedv2
push eax
mov eax, 0x6676aa
push eax
call fcn.004967c8
mov dword [section..data], 0x500a7b
mov dword [esp + 8], 0xfffffc15
mov dword [section..data], 0x500a7c
jmp 0x4bf537
mov dword [section..data], 0x500a7d
mov dword [section..data], 0x500a7f
push 0x10
push 0
push 0
push dword [esp + 0xc]
push dword [esp + 0x3c]
call fcn.00416dbb
mov dword [esp + 0x18], eax
mov dword [section..data], 0x500a80
mov ebx, dword [esp + 0x18]
cmp ebx, 1
jg 0x4bf44a
mov dword [section..data], 0x500a81
push edx
call fcn.0055a9f0
pop edx
push eax
push 0
push edx
call fcn.0055a9f0
pop edx
push eax
mov edx, str.ERROR__ReadFile_failed___
push edx
call fcn.0055aac0
push edx
call fcn.0055a9f0
pop edx
push eax
push dword [esp + 0x28]
call fcn.00410c97
pop eax
mov edx, 0x638cee
push edx
call fcn.0055aac0
call fcn.0055ab20
mov eax, str.BRAACS_IsFileEncryptedv2
push eax
mov eax, 0x6676aa
push eax
call fcn.004f4332
add dword [esp + 8], edx
call fcn.004967c8
call fcn.004f4350
mov dword [section..data], 0x500a82
mov dword [esp + 0x18], 0
mov dword [section..data], 0x500a83
mov dword [esp + 8], 0xfffffc14
mov dword [section..data], 0x500a84
jmp 0x4bf537
mov dword [section..data], 0x500a85
mov dword [section..data], 0x500a88
mov dword [section..data], 0x500a8a
mov ebx, dword [esp + 0x18]
add ebx, 4
push ebx
call fcn.0055a740
mov ebx, eax
cmp ebx, 0x47
je 0x4bf4c0
mov dword [section..data], 0x500a8b
push 1
mov eax, str.ERROR__File_is_invalid__No_SYNC_byte_found_
push eax
mov eax, str.BRAACS_IsFileEncryptedv2
push eax
mov eax, 0x6676aa
push eax
call fcn.004967c8
mov dword [section..data], 0x500a8c
mov dword [esp + 8], 0xfffffc08
mov dword [section..data], 0x500a8d
jmp 0x4bf537
mov dword [section..data], 0x500a8e
mov dword [section..data], 0x500a92
push dword [esp + 0x18]
call fcn.0055a740
mov ebx, eax
and ebx, 0xc0
and ebx, ebx
je 0x4bf507
mov dword [section..data], 0x500a94
mov dword [esp + 8], 2
mov dword [section..data], 0x500a95
jmp 0x4bf523
mov dword [section..data], 0x500a95
mov dword [section..data], 0x500a97
mov dword [esp + 8], 1
mov dword [section..data], 0x500a98
mov dword [section..data], 0x500a9a
mov dword [section..data], 0x500a9c
cmp dword [esp + 0x18], 0
je 0x4bf55b
mov dword [section..data], 0x500a9d
push dword [esp + 0x18]
call fcn.0055a4d0
mov dword [section..data], 0x500a9e
mov dword [section..data], 0x500aa0
cmp dword [esp + 4], 0
je 0x4bf589
mov dword [section..data], 0x500aa1
push dword [esp + 4]
call sub.KERNEL32.dll_CloseHandle
mov dword [section..data], 0x500aa2
mov dword [section..data], 0x500aa4
mov eax, dword [esp + 8]
jmp 0x4bf5af
push dword [esp]
call fcn.0055abf0
add esp, 0x1c
pop edi
pop ebx
ret 8