Function at 0x48ae37
Capabilities:
Read file on windows

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x130
mov eax, dword [0x4dd52c]
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
push ebx
push esi
push edi
mov dword [ebp - 0x110], eax
mov esi, dword [ebp + 8]
xor eax, eax
xor ebx, ebx
mov byte [ebp - 0xc], bl
lea edi, [ebp - 0xb]
stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
push 0x3f
mov byte [ebp - 0x10c], bl
pop ecx
xor eax, eax
lea edi, [ebp - 0x10b]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
xor edi, edi
inc edi
push esi
mov dword [ebp - 0x128], ebx
mov dword [ebp - 0x124], ebx
mov dword [ebp - 0x118], edi
call fcn.0048a183
push 8
push esi
mov dword [ebp - 0x114], eax
call fcn.004a5917
cmp word [esi + 0x8a44], di
mov dword [ebp - 0x12c], eax
je 0x48aec7
cmp word [esi + 0x1bf2a], 2
je 0x48aec7
mov dword [ebp - 0x118], edi
jmp 0x48aed6
xor eax, eax
mov ax, word [esi + 0x8a36]
mov dword [ebp - 0x118], eax
push 0x2000
push ebx
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov ebx, eax
xor eax, eax
cmp ebx, eax
mov dword [ebp - 0x11c], ebx
je 0x48b408
push eax
push eax
push eax
push dword [esi + 0x8148]
call fcn.004809d9
cmp word [esi + 0x1bf2a], 2
jne 0x48af9a
mov edi, dword [esi + 0x8158]
push edi
lea eax, [ebp - 0x128]
push eax
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x118]
push eax
push esi
call fcn.00486ef4
cmp word [ebp - 0x124], 0
jne 0x48af4a
push edi
push ebx
push dword [ebp - 0x110]
push esi
call fcn.0048b41c
push dword [esi + 0x816c]
lea eax, [ebp - 0xc]
push 0x40bdcc
push eax
call dword [sym.imp.msvcrt.dll_sprintf]
lea eax, [ebp - 0xc]
add esp, 0xc
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x48af68
sub eax, edi
lea ecx, [ebp - 0x120]
push ecx
push eax
lea eax, [ebp - 0xc]
push eax
push dword [esi + 4]
lea eax, [esi + 0x1f778]
push eax
call fcn.00480a26
mov edi, dword [esi + 0x3eb8]
sub edi, dword [esi + 0x8158]
jmp 0x48afa0
mov edi, dword [esi + 0x3eb8]
push 0x8d
push esi
sub edi, 8
call fcn.004a5917
cmp eax, 1
jne 0x48b074
mov ax, word [esi + 0x8f56]
test ax, ax
jle 0x48b074
cmp dword [esi + 0x816c], 1
jle 0x48b001
movsx eax, ax
dec eax
je 0x48affa
dec eax
jne 0x48b01b
push 0x413a54
push 0x413a38
lea eax, [ebp - 0x10c]
push 0x413a30
push eax
call dword [sym.imp.msvcrt.dll_sprintf]
add esp, 0x10
jmp 0x48b01b
push 0x413a14
jmp 0x48afde
push 0x413574
lea eax, [ebp - 0x10c]
push 0x413570
push eax
call dword [sym.imp.msvcrt.dll_sprintf]
add esp, 0xc
mov eax, dword [esi + 0x8160]
sub eax, dword [esi + 0x8158]
push eax
push ebx
push dword [ebp - 0x110]
push esi
call fcn.0048b41c
lea eax, [ebp - 0x10c]
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x48b03e
sub eax, edi
lea ecx, [ebp - 0x120]
push ecx
push eax
lea eax, [ebp - 0x10c]
push eax
push dword [esi + 4]
lea eax, [esi + 0x1f778]
push eax
call fcn.00480a26
mov edi, dword [esi + 0x3eb8]
sub edi, dword [esi + 0x8160]
sub edi, 8
push edi
push ebx
push dword [ebp - 0x110]
push esi
call fcn.0048b41c
push 0
lea eax, [ebp - 0x120]
push eax
push 8
push ebx
push dword [esi + 0x8148]
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov eax, dword [ebx]
lea edi, [esi + 0x814c]
mov dword [edi], eax
mov eax, dword [ebx + 4]
push 9
push esi
mov dword [esi + 0x8150], eax
call fcn.004a5597
lea ecx, [ebp - 0x120]
push ecx
push 4
push edi
push dword [ebp - 0x110]
mov dword [ebp - 0x130], eax
lea eax, [esi + 0x1f778]
push eax
call fcn.00480a26
xor eax, eax
cmp dword [ebp - 0x130], 1
setne al
push eax
push ebx
push dword [ebp - 0x110]
push esi
call fcn.00489e42
push 0x8d
push esi
call fcn.004a5917
cmp eax, 1
jne 0x48b11f
cmp dword [esi + 0x816c], eax
jle 0x48b1f5
lea eax, [esi + 0x1c95c]
push eax
push esi
call fcn.0048a605
jmp 0x48b1f5
cmp dword [ebp - 0x12c], 2
jne 0x48b1f5
push esi
call fcn.0048a11c
test eax, eax
jne 0x48b199
push eax
lea edi, [esi + 0x3ea8]
mov eax, dword [edi]
push dword [esi + eax*8 + 0x3ebc]
push dword [esi + eax*8 + 0x3eb8]
push dword [esi + 0x8148]
call fcn.004809d9
mov eax, dword [edi]
mov ecx, dword [esi + 0x3eb0]
sub ecx, dword [esi + eax*8 + 0x3eb8]
mov edi, dword [ebp - 0x110]
push ecx
push ebx
push edi
push esi
call fcn.0048b41c
cmp dword [ebp - 0x114], 0
jne 0x48b18d
push dword [ebp + 0x10]
push 1
push edi
push esi
call fcn.00489d65
jmp 0x48b199
push edi
call sub.WINSPOOL.DRV_StartPagePrinter
push edi
call sub.WINSPOOL.DRV_EndPagePrinter
push 8
push esi
call fcn.004a5917
cmp eax, 2
jne 0x48b1ac
push esi
call fcn.0048a280
push esi
call fcn.0048a11c
test eax, eax
jne 0x48b1f5
xor edi, edi
cmp dword [ebp - 0x114], edi
jne 0x48b1d0
push dword [ebp + 0x10]
push edi
push dword [ebp - 0x110]
push esi
call fcn.00489d65
push edi
push edi
push edi
push dword [esi + 0x8148]
call fcn.004809d9
mov eax, dword [esi + 0x3eb8]
sub eax, 8
push eax
push ebx
push dword [ebp - 0x110]
push esi
call fcn.0048b41c
mov ax, word [esi + 0x8f5a]
xor edi, edi
cmp ax, di
jne 0x48b2e5
lea eax, [ebp - 0x120]
push eax
push 4
lea eax, [esi + 0x8150]
push eax
push dword [ebp - 0x110]
lea eax, [esi + 0x1f778]
push eax
call fcn.00480a26
cmp word [ebp - 0x118], di
mov dword [ebp - 0x114], edi
jle 0x48b3c1
jmp 0x48b240
xor edi, edi
push edi
push dword [esi + 0x3ebc]
push dword [esi + 0x3eb8]
push dword [esi + 0x8148]
call fcn.004809d9
mov eax, dword [esi + 0x3ec0]
sub eax, dword [esi + 0x3eb8]
push eax
push ebx
push dword [ebp - 0x110]
push esi
call fcn.0048b41c
push 3
pop eax
cmp dword [esi + 0x3ea8], eax
mov dword [ebp - 0x11c], eax
jle 0x48b2c6
lea edi, [esi + 0x3ec8]
push 0
push dword [edi + 4]
push dword [edi]
push dword [esi + 0x8148]
call fcn.004809d9
mov eax, dword [edi + 8]
sub eax, dword [edi]
push eax
push ebx
push dword [ebp - 0x110]
push esi
call fcn.0048b41c
add dword [ebp - 0x11c], 2
mov eax, dword [ebp - 0x11c]
add edi, 0x10
cmp eax, dword [esi + 0x3ea8]
jl 0x48b289
inc dword [ebp - 0x114]
mov ax, word [ebp - 0x114]
cmp ax, word [ebp - 0x118]
jl 0x48b23e
jmp 0x48b3c1
cmp ax, 1
jne 0x48b3c1
lea eax, [ebp - 0x120]
push eax
push 4
lea eax, [esi + 0x8150]
push eax
push dword [ebp - 0x110]
lea eax, [esi + 0x1f778]
push eax
call fcn.00480a26
cmp word [ebp - 0x118], di
mov dword [ebp - 0x114], edi
jle 0x48b3c1
mov edi, dword [esi + 0x3ea8]
push 0
dec edi
lea ebx, [esi + edi*8 + 0x3eb0]
push dword [ebx + 4]
push dword [ebx]
push dword [esi + 0x8148]
call fcn.004809d9
mov eax, dword [esi + edi*8 + 0x3eb8]
sub eax, dword [ebx]
push eax
push dword [ebp - 0x11c]
push dword [ebp - 0x110]
push esi
call fcn.0048b41c
dec edi
dec edi
test edi, edi
jle 0x48b3a1
lea ebx, [esi + edi*8 + 0x3eb0]
dec edi
shr edi, 1
inc edi
push 0
push dword [ebx + 4]
push dword [ebx]
push dword [esi + 0x8148]
call fcn.004809d9
mov eax, dword [ebx + 8]
sub eax, dword [ebx]
push eax
push dword [ebp - 0x11c]
push dword [ebp - 0x110]
push esi
call fcn.0048b41c
sub ebx, 0x10
dec edi
jne 0x48b371
inc dword [ebp - 0x114]
mov ax, word [ebp - 0x114]
cmp ax, word [ebp - 0x118]
jl 0x48b324
mov ebx, dword [ebp - 0x11c]
push 0
lea edi, [esi + 0x3ea8]
mov eax, dword [edi]
push dword [esi + eax*8 + 0x3ebc]
push dword [esi + eax*8 + 0x3eb8]
push dword [esi + 0x8148]
call fcn.004809d9
mov eax, dword [edi]
mov ecx, dword [esi + 0x3eb0]
sub ecx, dword [esi + eax*8 + 0x3eb8]
push ecx
push ebx
push dword [ebp - 0x110]
push esi
call fcn.0048b41c
push ebx
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov ecx, dword [ebp - 4]
pop edi
pop esi
pop ebx
call fcn.004a9585
leave
ret 0xc