Function at 0x46e3f0
Capabilities:
Read file on windows

Disassembly:
mov eax, 0x2102c
call fcn.004af8a0
mov eax, dword [0xb7c764]
push ebx
push ebp
push esi
test eax, eax
push edi
je 0x46e8b8
mov ebp, dword [esp + 0x21040]
test ebp, ebp
jl 0x46e8a6
cmp ebp, 8
jge 0x46e8a6
mov eax, ebp
shl eax, 0xa
add eax, ebp
lea ebp, [ebp + eax*2]
shl ebp, 6
mov eax, dword [ebp + 0xa7b1c0]
test eax, eax
je 0x46e8b8
push 0
push 0
lea edx, [esp + 0x18]
push 0
push edx
mov ecx, dword [eax]
lea edx, [esp + 0x24]
push edx
mov edx, dword [esp + 0x21058]
push edx
mov edx, dword [ebp + 0xa7b1d0]
push edx
push eax
call dword [ecx + 0x2c]
test eax, eax
jne 0x46e8b8
mov eax, dword [ebp + 0xa7b1ec]
test eax, eax
jne 0x46e692
cmp word [ebp + 0xa7b150], 1
lea edx, [ebp + 0xa7b150]
je 0x46e598
mov ax, word [ebp + 0xa7b152]
mov ecx, dword [ebp + 0xa7b154]
mov esi, eax
mov dword [esp + 0x24], ecx
and esi, 0xffff
push edx
imul esi, ecx
mov ecx, dword [esp + 0x14]
mov word [esp + 0x26], ax
lea edx, [esp + 0x24]
add esi, esi
add eax, eax
push ecx
push edx
mov word [esp + 0x2c], 1
mov dword [esp + 0x34], esi
mov word [esp + 0x38], ax
mov word [esp + 0x3a], 0x10
mov word [esp + 0x3c], 0
call fcn.0046cbf0
add esp, 0xc
mov dword [esp + 0x1c], eax
push eax
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov ecx, dword [esp + 0x1c]
mov edx, dword [ebp + 0xa7b188]
mov esi, eax
lea eax, [esp + 0x18]
lea edi, [ebp + 0xa7b18c]
lea ebx, [ebp + 0xa7b188]
push eax
push edi
push ecx
push esi
push edx
call fcn.0046e8d0
add esp, 0x14
test eax, eax
je 0x46e541
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
lea ecx, [esp + 0x20]
push eax
push ecx
push edx
lea eax, [ebp + 0xa7b150]
push esi
push eax
call fcn.0046caf0
add esp, 0x14
test eax, eax
jne 0x46e570
mov ebp, dword [ebp + 0xa7b1c0]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
push 0
mov eax, dword [ebp]
push 0
push ecx
push edx
push ebp
call dword [eax + 0x4c]
push esi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x2102c
ret
push esi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0x20]
push eax
lea eax, [ebp + 0xa7b150]
push ecx
push eax
call fcn.0046cbf0
mov esi, eax
add esp, 0xc
mov dword [esp + 0x18], esi
jmp 0x46e5ef
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
lea edx, [esp + 0x18]
lea edi, [ebp + 0xa7b18c]
lea ebx, [ebp + 0xa7b188]
push edx
push edi
push eax
mov edx, dword [ebx]
push ecx
push edx
call fcn.0046e8d0
add esp, 0x14
test eax, eax
jne 0x46e5eb
mov ebp, dword [ebp + 0xa7b1c0]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
push 0
mov eax, dword [ebp]
push 0
push ecx
push edx
push ebp
call dword [eax + 0x4c]
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x2102c
ret
mov esi, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
cmp esi, ecx
jae 0x46e85a
mov eax, dword [ebp + 0xa7b1d4]
test eax, eax
je 0x46e646
lea eax, [ebp + 0xa7b1a0]
push eax
push edi
push ebx
call fcn.0046e0e0
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
lea eax, [esp + 0x24]
sub ecx, esi
push eax
push edi
push ecx
mov ecx, dword [ebx]
lea eax, [esi + edx]
push eax
push ecx
call fcn.0046e8d0
mov ecx, dword [esp + 0x38]
add esp, 0x20
add esi, ecx
mov ecx, dword [esp + 0x10]
cmp esi, ecx
jb 0x46e605
jmp 0x46e85a
cmp esi, dword [ebp + 0xa7b1cc]
jae 0x46e658
mov dword [ebp + 0xa7b1e0], 1
sub ecx, esi
cmp word [ebp + 0xa7b15e], 8
mov edx, dword [esp + 0x14]
setne al
dec al
lea edi, [esi + edx]
and eax, 0x80
mov edx, ecx
mov bl, al
mov bh, bl
mov eax, ebx
shl eax, 0x10
mov ax, bx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
jmp 0x46e856
mov ebx, dword [ebp + 0xa9b200]
lea esi, [ebp + 0xa7b200]
test esi, esi
je 0x46e6b6
mov edi, dword [esp + 0x14]
mov ecx, ebx
mov eax, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [esp + 0x10]
mov dword [ebp + 0xa9b200], 0
cmp ebx, ecx
jge 0x46e85a
mov eax, dword [ebp + 0xa7b1f8]
mov edx, dword [ebp + 0xa7b1fc]
sub eax, edx
cmp eax, 0x1000
jb 0x46e6e6
mov eax, 0x1000
lea ecx, [esp + 0x34]
push 0
push ecx
push eax
mov eax, dword [ebp + 0xa7b1f0]
lea edx, [esp + 0x48]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov eax, dword [esp + 0x34]
mov esi, dword [ebp + 0xa7b1fc]
lea ecx, [esp + 0x1c]
lea edx, [esp + 0x103c]
push ecx
mov ecx, dword [ebp + 0xa7b1f4]
push 0x20000
push edx
add esi, eax
push eax
lea eax, [esp + 0x4c]
mov dword [ebp + 0xa7b1fc], esi
push eax
call fcn.0049b180
cmp eax, 0xffffffff
mov dword [esp + 0x38], eax
je 0x46e749
test eax, eax
jne 0x46e756
push 0x4c26a0
jmp 0x46e74e
push 0x4c268c
call fcn.00491850
add esp, 4
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x10]
lea esi, [esp + 0x103c]
lea edx, [ecx + ebx]
cmp edx, eax
jg 0x46e775
mov eax, dword [esp + 0x14]
lea edi, [ebx + eax]
jmp 0x46e7b6
mov edx, ecx
sub edx, eax
lea eax, [edx + ebx]
mov dword [ebp + 0xa9b200], eax
sub ecx, eax
mov eax, dword [esp + 0x14]
mov edx, ecx
shr ecx, 2
lea edi, [ebx + eax]
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edi, [ebp + 0xa7b200]
test edi, edi
je 0x46e7c4
mov ecx, dword [ebp + 0xa9b200]
mov eax, dword [esp + 0x1c]
sub eax, ecx
lea esi, [esp + eax + 0x103c]
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x38]
add ebx, ecx
test eax, eax
jne 0x46e80b
mov eax, dword [ebp + 0xa7b1d4]
test eax, eax
je 0x46e819
mov ecx, dword [ebp + 0xa7b1f4]
call fcn.0049af70
mov eax, dword [ebp + 0xa7b1fc]
mov ecx, dword [ebp + 0xa7b1f0]
push 1
push 0
neg eax
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp + 0xa7b1fc], 0
mov ecx, dword [esp + 0x10]
cmp ebx, ecx
jl 0x46e6cc
jmp 0x46e85a
mov ecx, dword [esp + 0x10]
cmp ebx, ecx
jg 0x46e85a
cmp ebx, dword [ebp + 0xa7b1cc]
jge 0x46e833
mov dword [ebp + 0xa7b1e0], 1
mov edx, dword [esp + 0x14]
sub ecx, ebx
xor eax, eax
lea edi, [ebx + edx]
mov edx, ecx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
mov dword [ebp + 0xa9b200], 0
mov ecx, dword [esp + 0x10]
mov eax, dword [ebp + 0xa7b1c0]
push 0
push 0
push ecx
mov ecx, dword [esp + 0x20]
mov edx, dword [eax]
push ecx
push eax
call dword [edx + 0x4c]
mov edx, dword [esp + 0x10]
mov esi, dword [ebp + 0xa7b1d0]
mov ecx, dword [ebp + 0xa7b1c8]
add esi, edx
mov eax, esi
mov dword [ebp + 0xa7b1d0], esi
cmp eax, ecx
jb 0x46e896
sub eax, ecx
mov dword [ebp + 0xa7b1d0], eax
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x2102c
ret
push ebp
push 7
push 0x4c25cc
push 0
call fcn.00491750
add esp, 0x10
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x2102c
ret