Function at 0x496734
Capabilities:
Read file on windows

Disassembly:
cmp eax, dword [ebp - 0x18]
je 0x496f2c
jne 0x496f2c
push 0x104a7538
mov ecx, dword [eax + 0x50c]
mov dword [0xdee64c], ecx
push 0x100d60cc
jmp dword [0x106de548]
push ebx
sub esi, esi
push 0x496520
ret
mov eax, dword [ebp - 0x18]
je 0x496a58
jne 0x496a58
mov eax, 0x49ebf4
cmp esi, dword [0x415cbc]
mov byte [ebp - 0x242], bl
mov eax, 0x10d7df20
imul ebp, dword [esi], 0x39697270
push 0xeed
jmp dword [0x41e134]
push esi
lea ecx, [ebp - 0x1c]
push 0x4972db
ret
push esi
push 3
mov dword [ebp - 0x18], eax
or dword [ebp - 0x18], 0x81
jmp 0x496229
test byte [ecx + 0xa], al
add byte [eax], al
jne 0x49717a
push 0x8a3
mov dword [ebp - 0x90], 0xfffffffc
push 0x49b150
mov dword [ebp - 0x10], 0x2e2d
lea edx, [esi + 0x204]
mov ecx, dword [ecx + 0xcc]
push 0xb33a94
mov edi, dword [0x1024a024]
paddd xmm5, xmmword [0x698091f0]
psrad xmm5, 0xb
push 0xb358ec
push 0x102a4610
lea ecx, [esi - 0x68]
mov dword [edi + 0x228], ecx
in al, dx
mov eax, 0x40d75cd8
cmpsd dword [esi], dword es:[edi]
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
sub esi, esi
xor ebx, ebx
jmp 0x4976af
invalid
push esi
je 0x49649d
jne 0x49649d
mov dword [0xe2b704], eax
push 0x1147ab74
add byte [ebp - 0x21ffbdca], bl
mov eax, 0xf9d300
push 0xb61ce8
push str._CoKy
mov eax, 0x10dcd848
mov edi, 0x10222df0
mov dword [ebp - 0x99c], eax
and eax, 0x102548e0
push 0x100c8358
mov ebx, 0xdc2698a2
test dword [edx - 0x24], ebx
add edi, dword [ecx - 0x79]
adc byte [eax + 0x58], ch
or dword [eax + edx], 0xffffffbb
mov byte [0x85dc2698], al
pop edx
fadd qword [ebx]
jns 0x49689f
jge 0x496907
xchg ebx, eax
out dx, al
push di
je 0x496d6f
jne 0x496d6f
push 0x11540f18
cmp dword [0x425c54], 0
mov dword [eax], 0x102534dc
cmp dword [ebp - 0x220], 0
mov byte [0xdd963a], bl
mov byte [ebp - 0xd], 2
movzx ebx, byte [edi - 1]
mov eax, dword [0x10a2624]
cmp byte [0xd26b41], 0
and byte [edx + eax*2], 5
push 0x1147e910
mov dword [esi], 0xa70e38
cmp bh, byte [eax + eax]
cmp dword [ebp - 0x7c], eax
push 0xb6b938
mov edx, dword [ecx*4 + 0xac377c]
mov dword [0x111ff28c], eax
mov dword [esi], 0x697accc4
out dx, al
push eax
fisttp qword [eax]
inc ebx
rcl byte [ebx], cl
jb 0x4969b3
daa
xchg esp, eax
lodsb al, byte [esi]
jl 0x4969cb
dec edx
inc edi
mov cl, 0xbf
pop ebp
call dword [sym.imp.KERNEL32.dll_ReadFile]
or eax, eax
je 0x496b1d
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x1c], eax
jne 0x496b1d
test dword [ebp + 1], esp
add byte [eax], al
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x10
push 0x497501
ret
adc dword [eax + 0x78], ebp
and al, 0x46
add byte [eax + 0x64], ch
test eax, 0x5c700aa
test al, 0x85
rol byte [eax], cl
and byte [eax + 0x3d89006f], dh
push esp
mov byte [0x47f70106], al
or al, 0
clc
inc dword [edi]
or al, 0xa7
out dx, al
add byte [eax - 0x25b8b497], cl
cmp al, 0xb3
test eax, 0xb5fd4a25
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 1
mov byte [ebp - 0x11], 0
mov dword [ebp - 0x30], esi
call fcn.00451490
mov ebx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x30]
cmp ebx, eax
je 0x497c3c
sub eax, ebx
mov dword [ebp - 0x20], eax
je 0x495eb3
jne 0x495eb3
push 0x10247c20
mov byte [0xcf7e70], 0
push 0x1009e9f0
push 0xab3abc
mov eax, dword [0x630d219c]
sub eax, dword [edx - 0x33333400]
cmc
push cs
invalid
push esi
push 0x4965a0
ret
lea ecx, [ebp - 0x34]
call fcn.0044eb10
sub ebx, ebx
push 4
push edi
push 0x495cb6
ret
jne 0x497c3c
or ebx, ebx
je 0x496b25
jmp 0x49635a
jmp 0x497184
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x4961c9
mov dword [ebp - 4], esi
call fcn.004a6ced
je 0x4968c7
jne 0x4968c7
mov eax, 0xfd6854
mov ecx, 0x43f804
mov eax, dword [0xd041bc]
lea ecx, [ebp - 0x1eb0]
mov eax, 0x456448
mov ecx, 0x103e7880
add ax, word [esi + 0x40]
mov ecx, dword [eax + edi*4 - 4]
mov ecx, dword [0x1153dcb4]
les ebp, [0xa60355f2]
and eax, 0x89cc7589
jne 0x4976d1
add byte [ebp - 0x1eaf73], cl
invalid
push 0x496acc
ret
or ebx, ebx
je 0x496b25
push ebx
call fcn.004a4ef4
push 0x497839
ret