Function at 0x48a9d7
Capabilities:
Read file on windows

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x30
mov eax, dword [0x4dd52c]
and dword [ebp - 0x30], 0
and dword [ebp - 0x2c], 0
push ebx
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
push esi
mov esi, dword [ebp + 8]
push edi
mov dword [ebp - 0x10], eax
mov byte [ebp - 0xc], 0
xor eax, eax
lea edi, [ebp - 0xb]
stosd dword es:[edi], eax
stosw word es:[edi], ax
xor ebx, ebx
inc ebx
push esi
stosb byte es:[edi], al
mov dword [ebp - 0x18], ebx
call fcn.0048a183
push 8
push esi
mov dword [ebp - 0x1c], eax
call fcn.004a5917
cmp word [esi + 0x8a44], bx
mov dword [ebp - 0x24], eax
je 0x48aa3a
cmp word [esi + 0x1bf2a], 2
je 0x48aa3a
mov dword [ebp - 0x18], ebx
jmp 0x48aa46
xor eax, eax
mov ax, word [esi + 0x8a36]
mov dword [ebp - 0x18], eax
push 0x2000
push 0
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov ebx, eax
xor eax, eax
cmp ebx, eax
mov dword [ebp - 0x28], ebx
je 0x48ae23
push eax
push eax
push eax
push dword [esi + 0x8148]
call fcn.004809d9
cmp word [esi + 0x1bf2a], 2
jne 0x48aaf4
mov edi, dword [esi + 0x8158]
push edi
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x18]
push eax
push esi
call fcn.00486ef4
cmp word [ebp - 0x2c], 0
jne 0x48aaa5
push edi
push ebx
push dword [ebp - 0x10]
push esi
call fcn.0048b41c
push dword [esi + 0x816c]
lea eax, [ebp - 0xc]
push 0x40bdcc
push 8
push eax
call dword [sym.imp.msvcrt.dll__snprintf]
lea eax, [ebp - 0xc]
add esp, 0x10
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x48aac5
sub eax, edi
lea ecx, [ebp - 0x20]
push ecx
push eax
lea eax, [ebp - 0xc]
push eax
push dword [esi + 4]
lea eax, [esi + 0x1f778]
push eax
call fcn.00480a26
mov eax, dword [esi + 0x3eb8]
sub eax, dword [esi + 0x8158]
jmp 0x48aafa
mov eax, dword [esi + 0x3eb8]
sub eax, 8
push eax
push ebx
push dword [ebp - 0x10]
push esi
call fcn.0048b41c
push 0
lea eax, [ebp - 0x20]
push eax
push 8
push ebx
push dword [esi + 0x8148]
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov eax, dword [ebx]
lea edi, [esi + 0x814c]
mov dword [edi], eax
mov eax, dword [ebx + 4]
push 9
push esi
mov dword [esi + 0x8150], eax
call fcn.004a5597
lea ecx, [ebp - 0x20]
push ecx
push 4
push edi
push dword [ebp - 0x10]
mov dword [ebp - 0x14], eax
lea eax, [esi + 0x1f778]
push eax
call fcn.00480a26
xor eax, eax
cmp dword [ebp - 0x14], 1
setne al
push eax
push ebx
push dword [ebp - 0x10]
push esi
call fcn.00489e42
push 0x8d
push esi
call fcn.004a5917
cmp eax, 1
jne 0x48ab93
cmp dword [esi + 0x816c], eax
jle 0x48ac57
lea eax, [esi + 0x1c95c]
push eax
push esi
call fcn.0048a605
jmp 0x48ac57
cmp dword [ebp - 0x24], 2
jne 0x48ac57
push esi
call fcn.0048a11c
test eax, eax
jne 0x48ac04
push eax
lea edi, [esi + 0x3ea8]
mov eax, dword [edi]
push dword [esi + eax*8 + 0x3ebc]
push dword [esi + eax*8 + 0x3eb8]
push dword [esi + 0x8148]
call fcn.004809d9
mov eax, dword [edi]
mov ecx, dword [esi + 0x3eb0]
sub ecx, dword [esi + eax*8 + 0x3eb8]
mov edi, dword [ebp - 0x10]
push ecx
push ebx
push edi
push esi
call fcn.0048b41c
cmp dword [ebp - 0x1c], 0
jne 0x48abf8
push dword [ebp + 0x10]
push 1
push edi
push esi
call fcn.00489d65
jmp 0x48ac04
push edi
call sub.WINSPOOL.DRV_StartPagePrinter
push edi
call sub.WINSPOOL.DRV_EndPagePrinter
push 8
push esi
call fcn.004a5917
cmp eax, 2
jne 0x48ac17
push esi
call fcn.0048a280
push esi
call fcn.0048a11c
test eax, eax
jne 0x48ac57
xor edi, edi
cmp dword [ebp - 0x1c], edi
jne 0x48ac35
push dword [ebp + 0x10]
push edi
push dword [ebp - 0x10]
push esi
call fcn.00489d65
push edi
push edi
push edi
push dword [esi + 0x8148]
call fcn.004809d9
mov eax, dword [esi + 0x3eb8]
sub eax, 8
push eax
push ebx
push dword [ebp - 0x10]
push esi
call fcn.0048b41c
mov ax, word [esi + 0x8f5a]
xor edi, edi
cmp ax, di
jne 0x48ad23
lea eax, [ebp - 0x20]
push eax
push 4
lea eax, [esi + 0x8150]
push eax
push dword [ebp - 0x10]
lea eax, [esi + 0x1f778]
push eax
call fcn.00480a26
cmp word [ebp - 0x18], di
mov dword [ebp - 0x14], edi
jle 0x48addf
jmp 0x48ac96
xor edi, edi
push edi
push dword [esi + 0x3ebc]
push dword [esi + 0x3eb8]
push dword [esi + 0x8148]
call fcn.004809d9
mov eax, dword [esi + 0x3ec0]
sub eax, dword [esi + 0x3eb8]
push eax
push ebx
push dword [ebp - 0x10]
push esi
call fcn.0048b41c
push 3
pop eax
cmp dword [esi + 0x3ea8], eax
mov dword [ebp - 0x1c], eax
jle 0x48ad0d
lea edi, [esi + 0x3ec8]
push 0
push dword [edi + 4]
push dword [edi]
push dword [esi + 0x8148]
call fcn.004809d9
mov eax, dword [edi + 8]
sub eax, dword [edi]
push eax
push ebx
push dword [ebp - 0x10]
push esi
call fcn.0048b41c
add dword [ebp - 0x1c], 2
mov eax, dword [ebp - 0x1c]
add edi, 0x10
cmp eax, dword [esi + 0x3ea8]
jl 0x48acd9
inc dword [ebp - 0x14]
mov ax, word [ebp - 0x14]
cmp ax, word [ebp - 0x18]
jl 0x48ac94
jmp 0x48addf
cmp ax, 1
jne 0x48addf
lea eax, [ebp - 0x20]
push eax
push 4
lea eax, [esi + 0x8150]
push eax
push dword [ebp - 0x10]
lea eax, [esi + 0x1f778]
push eax
call fcn.00480a26
cmp word [ebp - 0x18], di
mov dword [ebp - 0x14], edi
jle 0x48addf
mov edi, dword [esi + 0x3ea8]
push 0
dec edi
lea eax, [esi + edi*8 + 0x3eb0]
push dword [eax + 4]
mov dword [ebp - 0x24], eax
push dword [eax]
push dword [esi + 0x8148]
call fcn.004809d9
mov eax, dword [esi + edi*8 + 0x3eb8]
mov ecx, dword [ebp - 0x24]
sub eax, dword [ecx]
push eax
push ebx
push dword [ebp - 0x10]
push esi
call fcn.0048b41c
dec edi
dec edi
test edi, edi
jle 0x48adce
lea ebx, [esi + edi*8 + 0x3eb0]
dec edi
shr edi, 1
inc edi
push 0
push dword [ebx + 4]
push dword [ebx]
push dword [esi + 0x8148]
call fcn.004809d9
mov eax, dword [ebx + 8]
sub eax, dword [ebx]
push eax
push dword [ebp - 0x28]
push dword [ebp - 0x10]
push esi
call fcn.0048b41c
sub ebx, 0x10
dec edi
jne 0x48ada1
mov ebx, dword [ebp - 0x28]
inc dword [ebp - 0x14]
mov ax, word [ebp - 0x14]
cmp ax, word [ebp - 0x18]
jl 0x48ad56
push 0
lea edi, [esi + 0x3ea8]
mov eax, dword [edi]
push dword [esi + eax*8 + 0x3ebc]
push dword [esi + eax*8 + 0x3eb8]
push dword [esi + 0x8148]
call fcn.004809d9
mov eax, dword [edi]
mov ecx, dword [esi + 0x3eb0]
sub ecx, dword [esi + eax*8 + 0x3eb8]
push ecx
push ebx
push dword [ebp - 0x10]
push esi
call fcn.0048b41c
push ebx
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov ecx, dword [ebp - 4]
pop edi
pop esi
pop ebx
call fcn.004a9585
leave
ret 0xc