Function at 0x4e13d0
Capabilities:
Read file on windows

Disassembly:
sub esp, 0xf0
mov eax, dword [esp + 0xf4]
push ebx
push esi
push 0
push 0x80
push 3
push 0
push 0
push 0x80000000
mov ebx, ecx
push eax
mov dword [esp + 0x2c], ebx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov esi, eax
cmp esi, 0xffffffff
je 0x4e1a55
push edi
mov edi, dword [sym.imp.KERNEL32.dll_ReadFile]
push 0
lea ecx, [esp + 0x10]
push ecx
push 4
lea edx, [esp + 0x24]
push edx
push esi
call edi
test eax, eax
je 0x4e1450
cmp dword [esp + 0x18], 0x6111101
jne 0x4e1450
push 0
lea eax, [esp + 0x10]
push eax
push 4
lea ecx, [esp + 0x1c]
push ecx
push esi
call edi
test eax, eax
je 0x4e1450
mov edx, dword [esp + 0x10]
cmp edx, dword [0x66b200]
je 0x4e1463
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
pop esi
pop ebx
add esp, 0xf0
ret 4
push 0
lea eax, [esp + 0x10]
push eax
push 0xe0
lea ecx, [esp + 0x28]
push ecx
push esi
call edi
test eax, eax
push esi
je 0x4e1451
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x1e2
mov ecx, 0x62adb0
call fcn.004373d0
cmp dword [ebx + 0x1c], 0
mov esi, eax
je 0x4e14b7
mov eax, dword [esp + 0x24]
xor edx, edx
cmp dword [esi + 0x10], eax
setne dl
test dl, 1
je 0x4e14b7
mov edx, dword [esi]
and eax, 1
push eax
mov eax, dword [edx + 8]
mov ecx, esi
call eax
mov edi, dword [esp + 0x20]
push ebp
mov ebp, dword [esp + 0x20]
push edi
push ebp
lea ecx, [esi + 0x240]
push ecx
mov ecx, ebx
call fcn.004e1370
test eax, eax
je 0x4e14df
mov edx, dword [esi]
mov eax, dword [edx + 0x24]
push edi
push ebp
mov ecx, esi
call eax
push 0x4f9
mov ecx, 0x62adb0
call fcn.004373d0
cmp dword [ebx + 0x1c], 0
je 0x4e150f
mov ecx, dword [esp + 0x48]
mov edx, dword [eax]
mov edx, dword [edx + 8]
and ecx, 1
push ecx
mov ecx, eax
call edx
mov eax, dword [esp + 0x48]
and eax, 1
mov dword [ebx + 0x20], eax
push 0x1da
mov ecx, 0x62adb0
call fcn.004373d0
cmp dword [ebx + 0x1c], 0
mov esi, eax
je 0x4e1565
mov eax, dword [esp + 0x58]
xor ecx, ecx
cmp dword [esi + 0x10], eax
setne cl
test cl, 1
je 0x4e1548
mov edx, dword [esi]
and eax, 1
push eax
mov eax, dword [edx + 8]
mov ecx, esi
call eax
mov eax, dword [esp + 0x58]
test al, 4
je 0x4e1550
push 1
jmp 0x4e155e
test al, 8
je 0x4e1558
push 2
jmp 0x4e155e
test al, 0x10
je 0x4e1565
push 3
mov ecx, esi
call fcn.00458780
push 0xec
mov ecx, 0x62adb0
call fcn.004373d0
cmp dword [ebx + 0x1c], 0
mov esi, eax
mov eax, dword [esp + 0x68]
je 0x4e159e
xor ecx, ecx
cmp dword [esi + 0x10], eax
setne cl
test cl, 1
je 0x4e159e
mov edx, dword [esi]
and eax, 1
push eax
mov eax, dword [edx + 8]
mov ecx, esi
call eax
mov eax, dword [esp + 0x68]
and eax, 2
push eax
mov ecx, esi
call fcn.0043f9c0
push 0x121
mov ecx, 0x62adb0
call fcn.004373d0
cmp dword [ebx + 0x1c], 0
mov esi, eax
je 0x4e1652
mov eax, dword [esp + 0x78]
xor ecx, ecx
cmp dword [esi + 0x10], eax
setne cl
test cl, 1
je 0x4e15e6
mov edx, dword [esi]
and eax, 1
push eax
mov eax, dword [edx + 8]
mov ecx, esi
call eax
mov eax, dword [esp + 0x78]
test al, 4
je 0x4e15ee
push 1
jmp 0x4e15fc
test al, 8
je 0x4e15f6
push 2
jmp 0x4e15fc
test al, 0x10
je 0x4e1603
push 4
mov ecx, esi
call fcn.004bc830
mov ebp, dword [esp + 0x7c]
mov ecx, esi
call fcn.004bc3b0
movzx edi, al
cmp ebp, edi
je 0x4e163f
cmp ebp, edi
push 0x40
mov ecx, esi
push 0
jle 0x4e162e
push 0x12f
call fcn.004bcaa0
add edi, 1
jmp 0x4e163b
push 0x130
call fcn.004bcaa0
sub edi, 1
cmp edi, ebp
jne 0x4e1615
test dword [esp + 0x78], 0x100
jne 0x4e1652
push 0
mov ecx, esi
call fcn.004bc3d0
push 0x64c
mov ecx, 0x62adb0
call fcn.004373d0
test eax, eax
je 0x4e167f
cmp dword [ebx + 0x1c], 0
je 0x4e167f
mov ecx, dword [esp + 0x78]
mov edx, dword [eax]
mov edx, dword [edx + 8]
and ecx, 0x100
push ecx
mov ecx, eax
call edx
push 0xf6
mov ecx, 0x62adb0
call fcn.004373d0
mov edi, dword [esp + 0x84]
mov ebp, dword [esp + 0x80]
push edi
mov esi, eax
push ebp
lea eax, [esi + 0x240]
push eax
mov ecx, ebx
call fcn.004e1370
test eax, eax
je 0x4e16bd
mov edx, dword [esi]
mov eax, dword [edx + 0x24]
push edi
push ebp
mov ecx, esi
call eax
cmp dword [ebx + 0x1c], 0
je 0x4e170a
mov eax, dword [esp + 0x88]
xor ecx, ecx
cmp dword [esi + 0x10], eax
setne cl
test cl, 1
je 0x4e16eb
mov edx, dword [esi]
and eax, 1
push eax
mov eax, dword [edx + 8]
mov ecx, esi
call eax
mov eax, dword [esp + 0x88]
test al, 4
je 0x4e16f3
push 1
jmp 0x4e1701
test al, 8
je 0x4e16fb
push 2
jmp 0x4e1701
test al, 0x10
je 0x4e170a
push 3
mov edx, dword [esi]
mov eax, dword [edx + 0x68]
mov ecx, esi
call eax
push 0x60
mov ecx, 0x62adb0
call fcn.004373d0
cmp dword [ebx + 0x1c], 0
mov esi, eax
je 0x4e173f
mov eax, dword [esp + 0x98]
xor ecx, ecx
cmp dword [esi + 0x10], eax
setne cl
test cl, 1
je 0x4e173f
mov edx, dword [esi]
and eax, 1
push eax
mov eax, dword [edx + 8]
mov ecx, esi
call eax
mov edi, dword [esp + 0x94]
mov ebp, dword [esp + 0x90]
push edi
push ebp
lea ecx, [esi + 0x240]
push ecx
mov ecx, ebx
call fcn.004e1370
test eax, eax
je 0x4e176c
mov edx, dword [esi]
mov eax, dword [edx + 0x24]
push edi
push ebp
mov ecx, esi
call eax
push 0xc6
mov ecx, 0x62adb0
call fcn.004373d0
mov edi, dword [esp + 0xa4]
mov ebp, dword [esp + 0xa0]
push edi
mov esi, eax
push ebp
lea ecx, [esi + 0x240]
push ecx
mov ecx, ebx
call fcn.004e1370
test eax, eax
je 0x4e17aa
mov edx, dword [esi]
mov eax, dword [edx + 0x24]
push edi
push ebp
mov ecx, esi
call eax
cmp dword [ebx + 0x1c], 0
je 0x4e1824
mov ecx, dword [esi + 0x26c]
mov edx, dword [esp + 0xac]
mov dword [ecx + 0x2f0], edx
mov eax, dword [esp + 0xa8]
xor ecx, ecx
cmp dword [esi + 0x10], eax
setne cl
test cl, 1
je 0x4e17eb
mov edx, dword [esi]
and eax, 1
push eax
mov eax, dword [edx + 8]
mov ecx, esi
call eax
mov eax, dword [esp + 0xa8]
test al, 4
je 0x4e1824
mov edx, dword [esi]
mov eax, dword [edx + 0x68]
push 1
mov ecx, esi
call eax
mov al, byte [esp + 0xa8]
test al, 0x20
je 0x4e1809
push 1
jmp 0x4e1817
test al, 0x40
je 0x4e1811
push 2
jmp 0x4e1817
test al, al
jns 0x4e1824
push 3
mov ecx, dword [0x63aec4]
mov edx, dword [ecx]
mov eax, dword [edx + 0x68]
call eax
push 0x355
mov ecx, 0x62adb0
call fcn.004373d0
mov edi, dword [esp + 0xb4]
mov ebp, dword [esp + 0xb0]
push edi
mov esi, eax
push ebp
lea ecx, [esi + 0x240]
push ecx
mov ecx, ebx
call fcn.004e1370
test eax, eax
je 0x4e1862
mov edx, dword [esi]
mov eax, dword [edx + 0x24]
push edi
push ebp
mov ecx, esi
call eax
cmp dword [ebx + 0x1c], 0
je 0x4e18af
mov eax, dword [esp + 0xb8]
xor ecx, ecx
cmp dword [esi + 0x10], eax
setne cl
test cl, 1
je 0x4e1890
mov edx, dword [esi]
and eax, 1
push eax
mov eax, dword [edx + 8]
mov ecx, esi
call eax
mov eax, dword [esp + 0xb8]
test al, 4
je 0x4e1898
push 1
jmp 0x4e18a6
test al, 8
je 0x4e18a0
push 2
jmp 0x4e18a6
test al, 0x10
je 0x4e18af
push 3
mov edx, dword [esi]
mov eax, dword [edx + 0x68]
mov ecx, esi
call eax
push 0x58a
mov ecx, 0x62adb0
call fcn.004373d0
mov edi, dword [esp + 0xc4]
mov ebp, dword [esp + 0xc0]
push edi
mov esi, eax
push ebp
lea ecx, [esi + 0x240]
push ecx
mov ecx, ebx
call fcn.004e1370
test eax, eax
je 0x4e18ed
mov edx, dword [esi]
mov eax, dword [edx + 0x24]
push edi
push ebp
mov ecx, esi
call eax
cmp dword [ebx + 0x1c], 0
je 0x4e1914
mov eax, dword [esp + 0xc8]
xor ecx, ecx
cmp dword [esi + 0x10], eax
setne cl
test cl, 1
je 0x4e1914
mov edx, dword [esi]
and eax, 1
push eax
mov eax, dword [edx + 8]
mov ecx, esi
call eax
push 0x524
mov ecx, 0x62adb0
call fcn.004373d0
mov esi, eax
test esi, esi
je 0x4e197d
mov edi, dword [esp + 0xd4]
mov ebp, dword [esp + 0xd0]
push edi
push ebp
lea ecx, [esi + 0x240]
push ecx
mov ecx, ebx
call fcn.004e1370
test eax, eax
je 0x4e1956
mov edx, dword [esi]
mov eax, dword [edx + 0x24]
push edi
push ebp
mov ecx, esi
call eax
cmp dword [ebx + 0x1c], 0
je 0x4e197d
mov eax, dword [esp + 0xd8]
xor ecx, ecx
cmp dword [esi + 0x10], eax
setne cl
test cl, 1
je 0x4e197d
mov edx, dword [esi]
and eax, 1
push eax
mov eax, dword [edx + 8]
mov ecx, esi
call eax
push 0x213
mov ecx, 0x62adb0
call fcn.004373d0
mov edi, dword [esp + 0xe4]
mov ebp, dword [esp + 0xe0]
push edi
mov esi, eax
push ebp
lea ecx, [esi + 0x240]
push ecx
mov ecx, ebx
call fcn.004e1370
test eax, eax
je 0x4e19bb
mov edx, dword [esi]
mov eax, dword [edx + 0x24]
push edi
push ebp
mov ecx, esi
call eax
cmp dword [ebx + 0x1c], 0
je 0x4e19f5
test byte [esp + 0xe8], 1
mov ecx, 0x63af60
je 0x4e19d4
push 0
jmp 0x4e19d6
push 1
call fcn.00460480
test byte [esp + 0xec], 1
mov ecx, 0x63af60
je 0x4e19ee
push 0
jmp 0x4e19f0
push 1
call fcn.00460490
mov eax, dword [esp + 0xfc]
test eax, eax
mov ebx, eax
mov ecx, 0x62adb0
jne 0x4e1a0e
push 0x710
jmp 0x4e1a13
push 0x723
call fcn.004373d0
mov esi, eax
test esi, esi
je 0x4e1a53
mov edi, dword [esp + 0xf4]
mov ebp, dword [esp + 0xf0]
push edi
push ebp
lea ecx, [esi + 0x240]
push ecx
mov ecx, dword [esp + 0x24]
call fcn.004e1370
test eax, eax
je 0x4e1a4d
mov edx, dword [esi]
mov eax, dword [edx + 0x24]
push edi
push ebp
mov ecx, esi
call eax
mov dword [0x64eb90], ebx
pop ebp
pop edi
pop esi
pop ebx
add esp, 0xf0
ret 4