Function at 0x404c70
Capabilities:
Read file on windows

Disassembly:
lea ecx, [esp + 4]
and esp, 0xfffffff0
push dword [ecx - 4]
push ebp
mov ebp, esp
push edi
push esi
push ebx
push ecx
sub esp, 0x58
mov dword [ebp - 0x3c], ecx
mov dword [esp], 0
call dword [sym.imp.kernel32.dll_GetModuleHandleW]
sub esp, 4
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], dbg.details_dlg_proc
mov dword [esp + 8], 0
mov dword [esp + 4], 0x65
mov dword [esp], eax
call dword [0x4b07c0]
mov dword [ebp - 0x40], eax
sub esp, 0x14
test eax, eax
je 0x404d80
lea edi, [ebp - 0x34]
mov eax, dword [ebp - 0x3c]
mov dword [esp + 0x10], 0x1cff
mov dword [esp + 0xc], 0xffffffff
mov dword [esp + 8], 0
mov dword [esp + 4], eax
mov dword [esp], 1
call dword [0x4b0848]
sub esp, 0x14
test eax, eax
je 0x404d93
mov ebx, dword [0x4b084c]
mov esi, dword [0x4b07c8]
jmp 0x404d34
mov dword [esp], edi
call dword [0x4b0868]
sub esp, 4
mov dword [esp], edi
call esi
sub esp, 4
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], edi
call ebx
sub esp, 0x14
test eax, eax
je 0x404cd1
cmp dword [ebp - 0x30], 0x12
jne 0x404d20
lea esp, [ebp - 0x10]
xor eax, eax
pop ecx
pop ebx
pop esi
pop edi
pop ebp
lea esp, [ecx - 4]
ret 4
lea esp, [ebp - 0x10]
mov eax, 1
pop ecx
pop ebx
pop esi
pop edi
pop ebp
lea esp, [ecx - 4]
ret 4
mov ebx, dword [0x4ad310]
mov dword [esp], 0x10000
mov esi, eax
mov dword [ebp - 0x3c], ebx
call dword [sym.imp.ucrtbase.dll_malloc]
mov dword [esp], ebx
mov ebx, 0xffff
mov dword [0x4ac108], eax
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
call dword [sym.imp.kernel32.dll_SetFilePointer]
mov dword [ebp - 0x44], 0x10000
sub esp, 0x10
lea eax, [ebp - 0x38]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], eax
mov eax, ebx
sub eax, esi
mov dword [esp + 8], eax
mov eax, dword [0x4ac108]
add eax, esi
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x3c]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_ReadFile]
sub esp, 0x14
test eax, eax
je 0x404e44
mov eax, dword [ebp - 0x38]
test eax, eax
je 0x404e44
add esi, eax
cmp esi, ebx
jne 0x404de0
mov eax, dword [0x4ac108]
shl dword [ebp - 0x44], 1
mov ebx, dword [ebp - 0x44]
mov dword [esp], eax
mov dword [esp + 4], ebx
sub ebx, 1
call dword [sym.imp.ucrtbase.dll_realloc]
mov dword [0x4ac108], eax
jmp 0x404de0
mov eax, dword [0x4ac108]
mov byte [eax + esi], 0
mov esi, dword [ebp - 0x40]
mov dword [esp + 8], eax
mov dword [esp], esi
mov dword [esp + 4], 0x67
call dword [0x4b0858]
mov dword [ebp - 0x40], esi
sub esp, 0xc
mov dword [esp], esi
mov esi, dword [0x4b07f4]
mov dword [esp + 4], 0x67
call esi
mov ebx, dword [0x4b07cc]
sub esp, 8
mov dword [esp + 4], 1
mov dword [esp], eax
call ebx
mov eax, dword [ebp - 0x40]
sub esp, 8
mov dword [esp + 4], 0xca
mov dword [esp], eax
call esi
sub esp, 8
mov dword [esp + 4], 1
mov dword [esp], eax
call ebx
mov ebx, dword [0x4b0800]
mov esi, dword [0x4b07c8]
sub esp, 8
jmp 0x404ee4
mov dword [esp], edi
call dword [0x4b0868]
sub esp, 4
mov dword [esp], edi
call esi
sub esp, 4
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], edi
call ebx
sub esp, 0x10
test eax, eax
jne 0x404ed0
jmp 0x404d6a