Function at 0x4b89f0
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x24
mov eax, dword [ebp + 0xc]
push ebx
mov ebx, dword [ebp + 8]
push esi
mov esi, dword [ebp + 0x10]
push edi
mov edi, dword [eax]
mov eax, dword [ebx + 0x14]
sub eax, dword [ebx + 0x10]
sar eax, 3
sub eax, esi
mov dword [esp + 0x14], edi
push edi
mov dword [esp + 0x1c], eax
call fcn.00537c22
mov eax, dword [esp + 0x1c]
inc esi
add esp, 4
mov dword [esp + 0x1c], esi
test eax, eax
jne 0x4b8a4b
push 1
push edi
push ebx
call fcn.004b8ce0
mov esi, eax
add esp, 0xc
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x20], eax
jmp 0x4b8c80
push str.too_many_arguments
add eax, 0x14
push eax
push ebx
call fcn.0049e9a0
mov edx, dword [ebp + 0x10]
mov eax, 1
mov ecx, dword [esp + 0x24]
add esp, 0xc
mov dword [esp + 0x10], eax
mov dword [esp + 0x20], edx
dec ecx
mov dword [esp + 0x18], ecx
test eax, eax
je 0x4b8c7c
mov ecx, dword [ebx + 0x10]
mov eax, dword [ecx + edx*8 + 4]
cmp eax, 0xfffffffb
jne 0x4b8bca
mov eax, dword [ecx + edx*8]
mov cl, byte [eax + 0x14]
cmp cl, 0x2a
jne 0x4b8a9c
mov cl, byte [eax + 0x15]
cmp cl, 0x6e
jne 0x4b8ae9
lea eax, [esp + 0x28]
push eax
push 0x591320
push edi
call sym.Uninstaller.exe_fscanf
mov ecx, dword [ebx + 0x14]
add esp, 0xc
cmp eax, 1
jne 0x4b8ad3
movsd xmm0, qword [esp + 0x28]
movsd qword [ecx], xmm0
add dword [ebx + 0x14], 8
mov dword [esp + 0x10], eax
jmp 0x4b8ba8
mov dword [ecx + 4], 0xffffffff
add dword [ebx + 0x14], 8
xor eax, eax
mov dword [esp + 0x10], eax
jmp 0x4b8ba8
mov al, cl
and al, 0xdf
cmp al, 0x4c
jne 0x4b8b0d
xor eax, eax
cmp cl, 0x6c
sete al
push eax
push edi
push ebx
call fcn.004b8ce0
add esp, 0xc
mov dword [esp + 0x10], eax
jmp 0x4b8ba8
cmp cl, 0x61
jne 0x4b8cbd
mov esi, 0x200
mov ecx, ebx
mov edx, esi
call fcn.004c6110
push edi
push esi
push 1
push eax
mov dword [esp + 0x34], eax
call fcn.00535670
mov edi, eax
add esp, 0x10
cmp edi, esi
jne 0x4b8b6e
nop dword [eax + eax]
add esi, esi
mov ecx, ebx
mov edx, esi
call fcn.004c6110
push dword [esp + 0x14]
mov ecx, eax
mov eax, esi
sub eax, edi
mov dword [esp + 0x28], ecx
push eax
push 1
lea eax, [ecx + edi]
push eax
call fcn.00535670
add edi, eax
add esp, 0x10
cmp edi, esi
je 0x4b8b40
mov esi, dword [ebx + 0x14]
push edi
push dword [esp + 0x28]
lea eax, [esi + 8]
push ebx
mov dword [ebx + 0x14], eax
call fcn.004a56c0
mov dword [esi], eax
add esp, 0xc
mov dword [esi + 4], 0xfffffffb
mov ecx, dword [ebx + 8]
mov eax, dword [ecx + 8]
cmp eax, dword [ecx + 0xc]
jb 0x4b8ba0
mov ecx, ebx
call fcn.004a2a50
mov eax, dword [esp + 0x10]
mov edi, dword [esp + 0x14]
mov edx, dword [esp + 0x20]
inc dword [esp + 0x1c]
inc edx
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x20], edx
test ecx, ecx
je 0x4b8c7c
mov esi, dword [esp + 0x1c]
jmp 0x4b8a71
cmp eax, 0xfffffff2
ja 0x4b8ccc
push esi
push ebx
call fcn.004c7fc0
mov esi, eax
add esp, 8
test esi, esi
je 0x4b8c41
mov edx, esi
mov ecx, ebx
call fcn.004c6110
push dword [esp + 0x14]
mov edi, eax
push esi
push 1
push edi
call fcn.00535670
mov esi, dword [ebx + 0x14]
push eax
push edi
push ebx
lea ecx, [esi + 8]
mov dword [esp + 0x40], eax
mov dword [ebx + 0x14], ecx
call fcn.004a56c0
mov dword [esi], eax
add esp, 0x1c
mov dword [esi + 4], 0xfffffffb
mov ecx, dword [ebx + 8]
mov eax, dword [ecx + 8]
cmp eax, dword [ecx + 0xc]
jb 0x4b8c2e
mov ecx, ebx
call fcn.004a2a50
xor eax, eax
cmp eax, dword [esp + 0x24]
sbb eax, eax
neg eax
mov dword [esp + 0x10], eax
jmp 0x4b8ba4
push edi
call fcn.00528ae9
mov esi, eax
push edi
push esi
call fcn.0052900c
mov edx, dword [ebx + 0x14]
xor eax, eax
add esp, 0xc
lea ecx, [edx + 8]
mov dword [ebx + 0x14], ecx
mov ecx, dword [ebx + 8]
add ecx, 0x40
mov dword [edx + 4], 0xfffffffb
cmp esi, 0xffffffff
mov dword [edx], ecx
setne al
mov dword [esp + 0x10], eax
jmp 0x4b8ba8
mov esi, dword [esp + 0x10]
push edi
call fcn.005352dc
add esp, 4
test eax, eax
je 0x4b8ca1
push 0
push 0
push ebx
call fcn.004b34a0
add esp, 0xc
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
test esi, esi
jne 0x4b8caf
mov ecx, dword [ebx + 0x14]
mov dword [ecx - 4], 0xffffffff
mov eax, dword [esp + 0x20]
sub eax, dword [ebp + 0x10]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0x4ff
lea eax, [edx + 1]
push eax
push ebx
call fcn.004a4c90
push 0x4dc
push esi
push ebx
call fcn.004a4c90
int3