Function at 0x49b180
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
mov eax, dword [0x5153d4]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [0x7ccd70]
push ebx
add eax, 4
mov dword [0x7ccd70], eax
push esi
mov esi, ecx
push edi
cmp eax, 0x4000
jbe 0x49b1b8
mov dword [0x7ccd70], 0
call fcn.00489cf0
mov edi, dword [sym.imp.KERNEL32.dll_ReadFile]
lea eax, [ebp - 8]
push 0
push eax
push 4
lea eax, [ebp - 0xc]
push eax
push esi
call edi
mov eax, dword [ebp - 0xc]
mov ecx, dword [0x7cc7e8]
lea edx, [eax + eax]
lea eax, [edx + 3]
mov dword [ebp - 0x1c], edx
and eax, 0xfffffffc
cmp eax, ecx
jg 0x49bae2
add dword [0x7cc7f0], eax
sub ecx, eax
mov ebx, dword [0x748da0]
add eax, ebx
mov dword [0x748da0], eax
mov eax, dword [0x7ccd70]
add eax, edx
mov dword [0x7cc7e8], ecx
mov dword [0x7475ec], ebx
mov dword [0x7ccd70], eax
cmp eax, 0x4000
jbe 0x49b230
mov dword [0x7ccd70], 0
call fcn.00489cf0
mov edx, dword [ebp - 0x1c]
push 0
lea eax, [ebp - 8]
push eax
push edx
push ebx
push esi
call edi
mov eax, dword [0x7ccd70]
add eax, 4
mov dword [0x7ccd70], eax
cmp eax, 0x4000
jbe 0x49b25e
mov dword [0x7ccd70], 0
call fcn.00489cf0
push 0
lea eax, [ebp - 8]
push eax
push 4
lea eax, [ebp - 0xc]
push eax
push esi
call edi
mov eax, dword [ebp - 0xc]
lea ebx, [eax*4]
mov eax, dword [0x7cc7e8]
cmp ebx, eax
jle 0x49b287
push eax
push ebx
jmp 0x49bae4
mov ecx, dword [0x748da0]
sub eax, ebx
add dword [0x7cc7f0], ebx
mov dword [0x7cc7e8], eax
mov dword [ebp - 0x1c], ecx
lea eax, [ecx + ebx]
mov dword [0x6e0d94], ecx
mov dword [0x748da0], eax
mov eax, dword [0x7ccd70]
add eax, ebx
mov dword [0x7ccd70], eax
cmp eax, 0x4000
jbe 0x49b2d0
mov dword [0x7ccd70], 0
call fcn.00489cf0
mov ecx, dword [ebp - 0x1c]
push 0
lea eax, [ebp - 8]
push eax
push ebx
push ecx
push esi
call edi
xor ecx, ecx
cmp dword [ebp - 0xc], ecx
jle 0x49b308
mov edx, dword [0x7475ec]
mov ebx, dword [0x6e0d94]
nop
mov eax, dword [ebx + ecx*4]
test eax, eax
jns 0x49b2fa
add eax, 1
sar eax, 1
lea eax, [edx + eax*2]
mov dword [ebx + ecx*4], eax
inc ecx
cmp ecx, dword [ebp - 0xc]
jl 0x49b2f0
mov eax, dword [0x7ccd70]
add eax, 4
mov dword [0x7ccd70], eax
cmp eax, 0x4000
jbe 0x49b32b
mov dword [0x7ccd70], 0
call fcn.00489cf0
push 0
lea eax, [ebp - 8]
push eax
push 4
lea eax, [ebp - 0x10]
push eax
push esi
call edi
mov ebx, dword [ebp - 0x10]
mov eax, dword [0x7cc7e8]
shl ebx, 5
cmp ebx, eax
jle 0x49b350
push eax
push ebx
jmp 0x49bae4
mov ecx, dword [0x748da0]
sub eax, ebx
add dword [0x7cc7f0], ebx
mov dword [0x7cc7e8], eax
mov dword [ebp - 0x1c], ecx
lea eax, [ecx + ebx]
mov dword [0x6e0d84], ecx
mov dword [0x748da0], eax
mov eax, dword [0x7ccd70]
add eax, ebx
mov dword [0x7ccd70], eax
cmp eax, 0x4000
jbe 0x49b399
mov dword [0x7ccd70], 0
call fcn.00489cf0
mov ecx, dword [ebp - 0x1c]
push 0
lea eax, [ebp - 8]
push eax
push ebx
push ecx
push esi
call edi
mov eax, dword [0x7ccd70]
add eax, 4
mov dword [0x7ccd70], eax
cmp eax, 0x4000
jbe 0x49b3c7
mov dword [0x7ccd70], 0
call fcn.00489cf0
push 0
lea eax, [ebp - 8]
push eax
push 4
lea eax, [ebp - 0xc]
push eax
push esi
call edi
mov eax, dword [ebp - 0xc]
mov ecx, dword [0x7cc7e8]
lea ebx, [eax + eax*2]
add ebx, ebx
lea eax, [ebx + 3]
and eax, 0xfffffffc
cmp eax, ecx
jg 0x49bae2
mov edx, dword [0x748da0]
sub ecx, eax
add dword [0x7cc7f0], eax
add eax, edx
mov dword [0x748da0], eax
mov eax, dword [0x7ccd70]
add eax, ebx
mov dword [ebp - 0x1c], edx
mov dword [0x7cc7e8], ecx
mov dword [0x7475e0], edx
mov dword [0x7ccd70], eax
cmp eax, 0x4000
jbe 0x49b43b
mov dword [0x7ccd70], 0
call fcn.00489cf0
mov edx, dword [ebp - 0x1c]
push 0
lea eax, [ebp - 8]
push eax
push ebx
push edx
push esi
call edi
mov eax, dword [0x7ccd70]
add eax, 4
mov dword [0x7ccd70], eax
cmp eax, 0x4000
jbe 0x49b469
mov dword [0x7ccd70], 0
call fcn.00489cf0
push 0
lea eax, [ebp - 8]
push eax
push 4
lea eax, [ebp - 0xc]
push eax
push esi
call edi
mov eax, dword [ebp - 0xc]
lea ebx, [eax*8]
mov eax, dword [0x7cc7e8]
cmp ebx, eax
jle 0x49b492
push eax
push ebx
jmp 0x49bae4
mov ecx, dword [0x748da0]
sub eax, ebx
add dword [0x7cc7f0], ebx
mov dword [0x7cc7e8], eax
mov dword [ebp - 0x1c], ecx
lea eax, [ecx + ebx]
mov dword [0x7475dc], ecx
mov dword [0x748da0], eax
mov eax, dword [0x7ccd70]
add eax, ebx
mov dword [0x7ccd70], eax
cmp eax, 0x4000
jbe 0x49b4db
mov dword [0x7ccd70], 0
call fcn.00489cf0
mov ecx, dword [ebp - 0x1c]
push 0
lea eax, [ebp - 8]
push eax
push ebx
push ecx
push esi
call edi
mov eax, dword [0x7ccd70]
add eax, 4
mov dword [0x7ccd70], eax
cmp eax, 0x4000
jbe 0x49b509
mov dword [0x7ccd70], 0
call fcn.00489cf0
push 0
lea eax, [ebp - 8]
push eax
push 4
lea eax, [ebp - 0xc]
push eax
push esi
call edi
mov eax, dword [ebp - 0xc]
mov ecx, dword [0x7cc7e8]
lea edx, [eax + eax]
lea eax, [edx + 3]
mov dword [ebp - 0x1c], edx
and eax, 0xfffffffc
cmp eax, ecx
jg 0x49bae2
add dword [0x7cc7f0], eax
sub ecx, eax
mov ebx, dword [0x748da0]
add eax, ebx
mov dword [0x748da0], eax
mov eax, dword [0x7ccd70]
add eax, edx
mov dword [0x7cc7e8], ecx
mov dword [0x7475e4], ebx
mov dword [0x7ccd70], eax
cmp eax, 0x4000
jbe 0x49b57b
mov dword [0x7ccd70], 0
call fcn.00489cf0
mov edx, dword [ebp - 0x1c]
push 0
lea eax, [ebp - 8]
push eax
push edx
push ebx
push esi
call edi
mov eax, dword [0x7ccd70]
add eax, 4
mov dword [0x7ccd70], eax
cmp eax, 0x4000
jbe 0x49b5a9
mov dword [0x7ccd70], 0
call fcn.00489cf0
push 0
lea eax, [ebp - 8]
push eax
push 4
lea eax, [ebp - 0xc]
push eax
push esi
call edi
mov eax, dword [ebp - 0xc]
lea ebx, [eax*4]
mov eax, dword [0x7cc7e8]
cmp ebx, eax
jle 0x49b5d2
push eax
push ebx
jmp 0x49bae4
mov ecx, dword [0x748da0]
sub eax, ebx
add dword [0x7cc7f0], ebx
mov dword [0x7cc7e8], eax
mov dword [ebp - 0x1c], ecx
lea eax, [ecx + ebx]
mov dword [0x6e0d90], ecx
mov dword [0x748da0], eax
mov eax, dword [0x7ccd70]
add eax, ebx
mov dword [0x7ccd70], eax
cmp eax, 0x4000
jbe 0x49b61b
mov dword [0x7ccd70], 0
call fcn.00489cf0
mov ecx, dword [ebp - 0x1c]
push 0
lea eax, [ebp - 8]
push eax
push ebx
push ecx
push esi
call edi
mov eax, dword [0x7ccd70]
add eax, 4
mov dword [0x7ccd70], eax
cmp eax, 0x4000
jbe 0x49b649
mov dword [0x7ccd70], 0
call fcn.00489cf0
push 0
lea eax, [ebp - 8]
push eax
push 4
lea eax, [ebp - 0xc]
push eax
push esi
call edi
mov eax, dword [ebp - 0xc]
mov ecx, dword [0x7cc7e8]
lea edx, [eax + eax]
lea eax, [edx + 3]
mov dword [ebp - 0x1c], edx
and eax, 0xfffffffc
cmp eax, ecx
jg 0x49bae2
add dword [0x7cc7f0], eax
sub ecx, eax
mov ebx, dword [0x748da0]
add eax, ebx
mov dword [0x748da0], eax
mov eax, dword [0x7ccd70]
add eax, edx
mov dword [0x7cc7e8], ecx
mov dword [0x7475e8], ebx
mov dword [0x7ccd70], eax
cmp eax, 0x4000
jbe 0x49b6bb
mov dword [0x7ccd70], 0
call fcn.00489cf0
mov edx, dword [ebp - 0x1c]
push 0
lea eax, [ebp - 8]
push eax
push edx
push ebx
push esi
call edi
xor ecx, ecx
cmp dword [ebp - 0x10], ecx
jle 0x49b6e3
mov eax, dword [0x6e0d84]
mov edx, dword [0x7475e8]
add dword [eax], edx
lea eax, [eax + 0x20]
inc ecx
cmp ecx, dword [ebp - 0x10]
jl 0x49b6d8
mov eax, dword [0x7ccd70]
add eax, 4
mov dword [0x7ccd70], eax
cmp eax, 0x4000
jbe 0x49b706
mov dword [0x7ccd70], 0
call fcn.00489cf0
push 0
lea eax, [ebp - 8]
push eax
push 4
lea eax, [ebp - 0xc]
push eax
push esi
call edi
cmp dword [ebp - 0xc], 0
mov dword [ebp - 0x1c], 0
jle 0x49b883
nop word [eax + eax]
mov eax, dword [0x7ccd70]
add eax, 4
mov dword [0x7ccd70], eax
cmp eax, 0x4000
jbe 0x49b753
mov dword [0x7ccd70], 0
call fcn.00489cf0
push 0
lea eax, [ebp - 8]
push eax
push 4
lea eax, [ebp - 0x14]
push eax
push esi
call edi
imul ebx, dword [ebp - 0x14], 0x32
mov eax, dword [0x7ccd70]
add eax, 2
mov dword [0x7ccd70], eax
add ebx, 0x6e8c28
cmp eax, 0x4000
jbe 0x49b78f
mov dword [0x7ccd70], 0
call fcn.00489cf0
push 0
lea eax, [ebp - 8]
push eax
push 2
push ebx
push esi
call edi
mov eax, dword [0x7ccd70]
add eax, 2
mov dword [0x7ccd70], eax
cmp eax, 0x4000
jbe 0x49b7be
mov dword [0x7ccd70], 0
call fcn.00489cf0
push 0
lea eax, [ebp - 8]
push eax
push 2
lea eax, [ebx + 2]
push eax
push esi
call edi
mov eax, dword [0x7ccd70]
add eax, 4
mov dword [0x7ccd70], eax
cmp eax, 0x4000
jbe 0x49b7f0
mov dword [0x7ccd70], 0
call fcn.00489cf0
push 0
lea eax, [ebp - 8]
push eax
push 4
lea eax, [ebx + 4]
push eax
push esi
call edi
mov eax, dword [0x7ccd70]
add eax, 4
mov dword [0x7ccd70], eax
cmp eax, 0x4000
jbe 0x49b822
mov dword [0x7ccd70], 0
call fcn.00489cf0
push 0
lea eax, [ebp - 8]
push eax
push 4
lea eax, [ebp - 0x18]
push eax
push esi
call edi
mov eax, dword [0x7475e8]
add eax, dword [ebp - 0x18]
mov dword [ebx + 8], eax
mov eax, dword [0x7ccd70]
add eax, 2
mov dword [0x7ccd70], eax
cmp eax, 0x4000
jbe 0x49b85f
mov dword [0x7ccd70], 0
call fcn.00489cf0
push 0
lea eax, [ebp - 8]
push eax
push 2
lea eax, [ebx + 0x24]
push eax
push esi
call edi
mov ecx, dword [ebp - 0x1c]
or word [ebx + 0x30], 1
inc ecx
mov dword [ebp - 0x1c], ecx
cmp ecx, dword [ebp - 0xc]
jl 0x49b730
xor eax, eax
mov ebx, 0xffffc000
mov edi, 0xfe85
nop
and word [eax + 0x6e8c58], di
xor ecx, ecx
mov dword [eax + 0x6e8c34], 0
mov dword [eax + 0x6e8c38], 0
mov dword [eax + 0x6e8c48], 0
mov dword [eax + 0x6e8c44], 0x424d90
mov dword [eax + 0x6e8c3c], 0
mov dword [eax + 0x6e8c40], 0
mov dword [eax + 0x6e8c50], 0xa0000
mov word [eax + 0x6e8c54], cx
mov word [eax + 0x6e8c4e], bx
add eax, 0x32
cmp eax, 0x4970
jl 0x49b890
call fcn.0046dd70
call fcn.0046f010
call fcn.0046f5c0
call fcn.00433e10
mov edi, dword [sym.imp.KERNEL32.dll_ReadFile]
mov eax, 0x6e1beb
mov byte [eax - 0x10], 0
mov byte [eax], 0xff
add eax, 0x38
cmp eax, 0x6e45eb
jl 0x49b916
mov byte [0x6e4b9c], 0
mov eax, 0x6e4a9c
mov byte [0x6e4f6c], 0
mov byte [0x6e533c], 0
mov byte [0x6e570c], 0
nop dword [eax + eax]
mov byte [eax], 0
add eax, 0x10
cmp eax, 0x6e4b9c
jl 0x49b950
mov eax, 0x6e5ae1
mov byte [eax], 0
add eax, 0x14
cmp eax, 0x6e5d61
jl 0x49b962
mov eax, dword [0x7ccd70]
add eax, 4
mov dword [0x7ccd70], eax
cmp eax, 0x4000
jbe 0x49b992
mov dword [0x7ccd70], 0
call fcn.00489cf0
push 0
lea eax, [ebp - 8]
push eax
push 4
lea eax, [ebp - 0xc]
push eax
push esi
call edi
cmp dword [ebp - 0xc], 0
mov dword [ebp - 0x1c], 0
jle 0x49bacc
mov eax, dword [0x7ccd70]
add eax, 4
mov dword [0x7ccd70], eax
cmp eax, 0x4000
jbe 0x49b9d5
mov dword [0x7ccd70], 0
call fcn.00489cf0
push 0
lea eax, [ebp - 8]
push eax
push 4
lea eax, [ebp - 0x14]
push eax
push esi
call edi
mov eax, dword [ebp - 0x14]
lea ecx, [eax*8]
sub ecx, eax
mov eax, dword [0x7ccd70]
add eax, 2
mov dword [0x7ccd70], eax
lea ebx, [ecx*4 + 0x6ed598]
cmp eax, 0x4000
jbe 0x49ba1a
mov dword [0x7ccd70], 0
call fcn.00489cf0
push 0
lea eax, [ebp - 8]
push eax
push 2
push ebx
push esi
call edi
mov eax, dword [0x7ccd70]
add eax, 0xc
mov dword [0x7ccd70], eax
cmp eax, 0x4000
jbe 0x49ba49
mov dword [0x7ccd70], 0
call fcn.00489cf0
push 0
lea eax, [ebp - 8]
push eax
push 0xc
lea eax, [ebx + 4]
push eax
push esi
call edi
mov eax, dword [0x7ccd70]
add eax, 0xc
mov dword [0x7ccd70], eax
cmp eax, 0x4000
jbe 0x49ba7b
mov dword [0x7ccd70], 0
call fcn.00489cf0
push 0
lea eax, [ebp - 8]
push eax
push 0xc
lea eax, [ebx + 0x10]
push eax
push esi
call edi
mov eax, dword [0x7ccd70]
add eax, 2
mov dword [0x7ccd70], eax
cmp eax, 0x4000
jbe 0x49baad
mov dword [0x7ccd70], 0
call fcn.00489cf0
push 0
lea eax, [ebp - 8]
push eax
push 2
lea eax, [ebx + 2]
push eax
push esi
call edi
mov ecx, dword [ebp - 0x1c]
inc ecx
mov dword [ebp - 0x1c], ecx
cmp ecx, dword [ebp - 0xc]
jl 0x49b9b2
mov ecx, dword [ebp - 4]
mov eax, 1
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004b557b
mov esp, ebp
pop ebp
ret
push ecx
push eax
push str.game_malloc__:_OUT_OF_MEMORY._Needed:__d__Free:__d
push 0x748fb8
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
mov ecx, 0x748fb8
call fcn.004ad960
int3