Function at 0x4cbce0
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x250
mov eax, dword [0x5bc684]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
mov edi, dword [ebp + 0xc]
mov dword [ebp - 0x248], 0
or esi, 0xffffffff
lea esp, [esp]
cmp dword [ebp - 0x248], edi
ja 0x4cbe6b
push 0
push 0
push 3
push 0
push 0
push SysReAllocString
push ebx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov esi, eax
test edi, edi
je 0x4cbd45
cmp esi, 0xffffffff
jne 0x4cbd45
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
add dword [ebp - 0x248], 0x64
cmp esi, 0xffffffff
je 0x4cbd10
mov ebx, dword [sym.imp.KERNEL32.dll_ReadFile]
push 0
lea eax, [ebp - 0x250]
push eax
push 0x40
lea ecx, [ebp - 0x44]
push ecx
push esi
call ebx
mov edx, dword [ebp - 8]
mov edi, dword [sym.imp.KERNEL32.dll_SetFilePointer]
push 0
push 0
push edx
push esi
call edi
push 0
lea eax, [ebp - 0x250]
push eax
push 0xf8
lea ecx, [ebp - 0x13c]
push ecx
push esi
call ebx
mov edx, 0x8664
cmp word [ebp - 0x138], dx
je 0x4cbe87
mov eax, dword [ebp - 0xec]
push eax
call fcn.00480850
mov ecx, dword [ebp - 0xec]
push ecx
mov edi, eax
push 0
push edi
call fcn.004ff6f0
add esp, 0x10
push 0
push 0
push 0
push esi
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov eax, dword [ebp - 0xe8]
push 0
lea edx, [ebp - 0x250]
push edx
push eax
push edi
push esi
call ebx
mov ebx, dword [edi + 0x3c]
movzx ecx, word [ebx + edi + 0x14]
add ebx, edi
xor edx, edx
lea eax, [ecx + ebx + 0x2c]
mov dword [ebp - 0x248], 0
cmp dx, word [ebx + 6]
jae 0x4cbf67
mov dword [ebp - 0x24c], eax
nop
mov eax, dword [eax]
test eax, eax
je 0x4cbe42
push 0
push 0
push eax
push esi
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
push 0
lea eax, [ebp - 0x250]
push eax
mov eax, dword [ebp - 0x24c]
mov ecx, dword [eax - 4]
mov edx, dword [eax - 8]
push ecx
add edx, edi
push edx
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov ecx, dword [ebp - 0x248]
mov eax, dword [ebp - 0x24c]
movzx edx, word [ebx + 6]
inc ecx
add eax, 0x28
mov dword [ebp - 0x248], ecx
mov dword [ebp - 0x24c], eax
cmp ecx, edx
jb 0x4cbe10
jmp 0x4cbf67
cmp esi, 0xffffffff
jne 0x4cbd51
pop edi
pop esi
xor eax, eax
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004fe1f5
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp - 8]
push 0
push 0
push eax
push esi
call edi
push 0
lea ecx, [ebp - 0x250]
push ecx
push pe_nt_image_headers32
lea edx, [ebp - 0x244]
push edx
push esi
call ebx
mov eax, dword [ebp - 0x1f4]
push eax
call fcn.00480850
mov ecx, dword [ebp - 0x1f4]
push ecx
mov edi, eax
push 0
push edi
call fcn.004ff6f0
add esp, 0x10
push 0
push 0
push 0
push esi
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov eax, dword [ebp - 0x1f0]
push 0
lea edx, [ebp - 0x250]
push edx
push eax
push edi
push esi
call ebx
mov ebx, dword [edi + 0x3c]
movzx ecx, word [ebx + edi + 0x14]
add ebx, edi
xor edx, edx
lea eax, [ecx + ebx + 0x2c]
mov dword [ebp - 0x248], 0
cmp dx, word [ebx + 6]
jae 0x4cbf67
mov dword [ebp - 0x24c], eax
mov eax, dword [eax]
test eax, eax
je 0x4cbf43
push 0
push 0
push eax
push esi
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
push 0
lea eax, [ebp - 0x250]
push eax
mov eax, dword [ebp - 0x24c]
mov ecx, dword [eax - 4]
mov edx, dword [eax - 8]
push ecx
add edx, edi
push edx
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov ecx, dword [ebp - 0x248]
mov eax, dword [ebp - 0x24c]
movzx edx, word [ebx + 6]
inc ecx
add eax, 0x28
mov dword [ebp - 0x248], ecx
mov dword [ebp - 0x24c], eax
cmp ecx, edx
jb 0x4cbf11
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 4]
mov eax, edi
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004fe1f5
mov esp, ebp
pop ebp
ret