Function at 0x48c9a9
Capabilities:
Read file on windows

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x74
mov eax, dword [0x4dd52c]
push ebx
push esi
mov esi, dword [ebp + 8]
xor ebx, ebx
push edi
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
xor edi, edi
push 0x2000
inc edi
push ebx
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x50], edi
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x40], ebx
mov byte [ebp - 0x25], bl
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x44], ebx
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
cmp eax, ebx
mov dword [ebp - 0x2c], eax
je 0x48ce2e
mov eax, dword [esi + 0x3eb8]
mov ecx, dword [esi + 0x3ebc]
sub eax, edi
push ebx
sbb ecx, ebx
push ecx
push eax
push dword [esi + 0x8148]
call fcn.004809d9
push ebx
lea eax, [ebp - 0x38]
push eax
push edi
push dword [ebp - 0x2c]
mov edi, dword [sym.imp.KERNEL32.dll_ReadFile]
push dword [esi + 0x8148]
call edi
mov eax, dword [ebp - 0x2c]
movzx ax, byte [eax]
mov ecx, dword [esi + 0x3eb8]
movsx eax, ax
mov dword [ebp - 0x34], eax
cdq
sub ecx, eax
mov eax, dword [esi + 0x3ebc]
push ebx
sbb eax, edx
push eax
push ecx
push dword [esi + 0x8148]
call fcn.004809d9
push ebx
lea eax, [ebp - 0x38]
push eax
push 8
push dword [ebp - 0x2c]
push dword [esi + 0x8148]
call edi
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax]
mov dword [esi + 0x814c], ecx
mov eax, dword [eax + 4]
push ebx
mov dword [esi + 0x8150], eax
lea eax, [ebp - 0x38]
push eax
push 1
lea eax, [ebp - 0x25]
push eax
push dword [esi + 0x8148]
call edi
push ebx
lea eax, [ebp - 0x38]
push eax
movzx eax, byte [ebp - 0x25]
push eax
lea eax, [ebp - 0x24]
push eax
push dword [esi + 0x8148]
call edi
mov ax, word [esi + 0x1bf2a]
xor ecx, ecx
inc ecx
cmp ax, cx
jne 0x48cac0
mov dword [ebp - 0x3c], ecx
jmp 0x48cad2
cmp ax, 2
jne 0x48cb05
xor eax, eax
mov ax, word [esi + 0x8a36]
mov dword [ebp - 0x3c], eax
push ebx
push ebx
push ebx
push dword [esi + 0x8148]
call fcn.004809d9
mov edi, dword [esi + 0x3eb8]
sub edi, dword [ebp - 0x34]
lea eax, [ebp - 0x6c]
push edi
push eax
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x3c]
push eax
push esi
call fcn.00486ef4
cmp word [ebp - 0x40], bx
jne 0x48cb35
push edi
jmp 0x48cb29
cmp word [esi + 0x8a44], bx
jne 0x48cb35
push ebx
push ebx
push ebx
push dword [esi + 0x8148]
mov dword [ebp - 0x3c], ecx
call fcn.004809d9
mov eax, dword [esi + 0x3eb8]
sub eax, dword [ebp - 0x34]
push eax
push dword [ebp - 0x2c]
push dword [ebp - 0x30]
push esi
call fcn.0048b41c
cmp byte [esi + 0x9785], 1
mov edi, dword [esi + 0x3ea8]
je 0x48cb4d
cmp byte [esi + 0x978c], 1
jne 0x48cb6a
push 0x16
push esi
call fcn.004a5597
test eax, eax
jne 0x48cb6a
mov eax, dword [esi + 0x3ea8]
mov dword [ebp - 0x4c], 1
mov dword [ebp - 0x44], eax
dec edi
cmp byte [esi + 0x977e], 1
je 0x48cb7c
cmp byte [esi + 0x978c], 1
jne 0x48cb9c
push 0x16
push esi
call fcn.004a5597
test eax, eax
jne 0x48cb9c
mov eax, dword [esi + 0x3ea8]
sub eax, dword [ebp - 0x4c]
mov dword [ebp - 0x54], 1
mov dword [ebp - 0x48], eax
dec edi
mov cx, word [esi + 0x8f60]
xor eax, eax
cmp word [esi + 0x8fb2], bx
setne al
mov dword [ebp - 0x68], eax
xor eax, eax
inc eax
cmp cx, ax
jne 0x48cbdb
mov eax, dword [ebp - 0x54]
mov edx, dword [ebp - 0x4c]
or dword [ebp - 0x64], 0xffffffff
mov dword [ebp - 0x54], edx
mov edx, dword [ebp - 0x44]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x48], edx
mov dword [ebp - 0x44], eax
jmp 0x48cbef
push 2
pop edx
cmp cx, dx
je 0x48cbec
cmp cx, 3
mov dword [ebp - 0x64], eax
jne 0x48cbef
mov dword [ebp - 0x64], edx
cmp word [esi + 0x8b18], 1
je 0x48cbfa
dec edi
cmp cx, 3
mov dword [ebp - 0x5c], edi
mov eax, edi
jne 0x48cc0e
cmp eax, 1
je 0x48ce25
cmp cx, 2
jne 0x48cc1e
cdq
push 2
pop ecx
idiv ecx
add eax, edx
jmp 0x48cc29
cmp cx, 3
jne 0x48cc29
cdq
sub eax, edx
sar eax, 1
add eax, eax
cmp word [ebp - 0x3c], bx
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x34], ebx
jle 0x48cde5
cmp dword [ebp - 0x54], ebx
je 0x48cc74
mov eax, dword [ebp - 0x48]
push ebx
lea edi, [esi + eax*8 + 0x3eb0]
push dword [edi + 4]
push dword [edi]
push dword [esi + 0x8148]
call fcn.004809d9
mov eax, dword [ebp - 0x48]
mov eax, dword [esi + eax*8 + 0x3eb8]
sub eax, dword [edi]
push eax
push dword [ebp - 0x2c]
push dword [ebp - 0x30]
push esi
call fcn.0048b41c
mov ax, word [esi + 0x8f60]
xor ecx, ecx
inc ecx
cmp ax, cx
jne 0x48cc8e
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x60], eax
jmp 0x48cc9f
cmp ax, 3
jne 0x48cc99
push 2
pop eax
jmp 0x48cc86
mov dword [ebp - 0x58], ecx
mov dword [ebp - 0x60], ecx
mov eax, dword [ebp - 0x74]
cmp eax, ebx
jle 0x48cd79
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x68], ebx
jne 0x48ccf3
movsx eax, word [esi + 0x8b18]
cmp eax, 1
je 0x48ccce
jle 0x48ccda
cmp eax, 3
jg 0x48ccda
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x50], eax
jmp 0x48ccda
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x50], eax
add eax, dword [ebp - 0x64]
mov dword [ebp - 0x60], eax
lea eax, [ebp - 0x38]
push eax
push 4
lea eax, [esi + 0x814c]
push eax
push dword [ebp - 0x30]
lea eax, [esi + 0x1f778]
push eax
jmp 0x48cd2c
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x50], eax
add eax, dword [ebp - 0x64]
lea edi, [esi + 0x1f778]
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x38]
push eax
push 4
lea eax, [esi + 0x8150]
push eax
push dword [ebp - 0x30]
push edi
call fcn.00480a26
lea eax, [ebp - 0x38]
push eax
movzx eax, byte [ebp - 0x25]
push eax
lea eax, [ebp - 0x24]
push eax
push dword [ebp - 0x30]
push edi
call fcn.00480a26
mov eax, dword [ebp - 0x50]
push ebx
lea edi, [esi + eax*8 + 0x3eb0]
push dword [edi + 4]
push dword [edi]
push dword [esi + 0x8148]
call fcn.004809d9
mov eax, dword [ebp - 0x50]
mov eax, dword [esi + eax*8 + 0x3eb8]
sub eax, dword [edi]
push eax
push dword [ebp - 0x2c]
push dword [ebp - 0x30]
push esi
call fcn.0048b41c
xor eax, eax
cmp dword [ebp - 0x68], ebx
sete al
dec dword [ebp - 0x70]
mov dword [ebp - 0x68], eax
jne 0x48ccad
cmp dword [ebp - 0x4c], ebx
je 0x48cdb2
mov eax, dword [ebp - 0x44]
push ebx
lea edi, [esi + eax*8 + 0x3eb0]
push dword [edi + 4]
push dword [edi]
push dword [esi + 0x8148]
call fcn.004809d9
mov eax, dword [ebp - 0x44]
mov eax, dword [esi + eax*8 + 0x3eb8]
sub eax, dword [edi]
push eax
push dword [ebp - 0x2c]
push dword [ebp - 0x30]
push esi
call fcn.0048b41c
cmp word [ebp - 0x40], bx
je 0x48cdd5
movsx eax, word [ebp - 0x6c]
dec eax
cmp dword [ebp - 0x34], eax
jne 0x48cdd5
mov eax, dword [esi + 0x3eb8]
sub eax, 8
push eax
push dword [ebp - 0x40]
push esi
call fcn.00486dfa
movsx eax, word [ebp - 0x3c]
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], eax
jl 0x48cc3b
mov eax, dword [esi + 0x3ea8]
push ebx
push dword [esi + eax*8 + 0x3ebc]
push dword [esi + eax*8 + 0x3eb8]
push dword [esi + 0x8148]
call fcn.004809d9
mov eax, dword [esi + 0x3ea8]
mov ecx, dword [esi + 0x3eb0]
sub ecx, dword [esi + eax*8 + 0x3eb8]
push ecx
push dword [ebp - 0x2c]
push dword [ebp - 0x30]
push esi
call fcn.0048b41c
push dword [ebp - 0x2c]
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov ecx, dword [ebp - 4]
pop edi
pop esi
pop ebx
call fcn.004a9585
leave
ret 0xc