Function at 0x4c96e0
Capabilities:
Read file on windows

Disassembly:
sub esp, 0x2c
mov eax, dword [esp + 0x34]
mov eax, dword [eax]
push esi
xor esi, esi
cmp eax, esi
mov dword [esp + 4], eax
jne 0x4c96fd
xor eax, eax
pop esi
add esp, 0x2c
ret 0xc
push ebx
push ebp
mov ebp, dword [esp + 0x3c]
push edi
push 1
lea ecx, [esp + 0x2c]
push ecx
push esi
push ebp
mov dword [esp + 0x34], esi
mov dword [esp + 0x38], esi
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov ebx, dword [esp + 0x48]
cmp dword [ebx + 4], esi
mov dword [esp + 0x24], eax
jl 0x4c98a7
jg 0x4c9737
cmp dword [ebx], 0x18
jb 0x4c98a7
lea edx, [esp + 0x1c]
push edx
lea eax, [esp + 0x30]
push eax
push ebp
call sym.vidcap60.exe__riff64_ReadChunkHeader_12
mov esi, dword [ebx]
mov edx, dword [ebx + 4]
add esi, 0xffffffe8
adc edx, 0xffffffff
test eax, eax
mov dword [ebx], esi
mov dword [ebx + 4], edx
jne 0x4c98fe
mov ecx, 4
lea edi, [esp + 0x2c]
mov esi, 0x5eab4c
xor edx, edx
repe cmpsd dword [esi], dword es:[edi]
jne 0x4c9867
push edx
lea eax, [esp + 0x44]
push eax
push 4
lea ecx, [esp + 0x24]
push ecx
push ebp
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x4c98ce
cmp dword [esp + 0x40], 4
jne 0x4c98ce
mov edx, dword [esp + 0x10]
xor eax, eax
test edx, edx
jle 0x4c97bf
mov ecx, dword [esp + 0x44]
mov ecx, dword [ecx + 4]
mov esi, dword [esp + 0x18]
cmp esi, dword [ecx]
je 0x4c97db
inc eax
add ecx, 0xc
cmp eax, edx
jl 0x4c97b3
push 1
push 0
push 0xfffffffffffffffc
push ebp
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
push ecx
push edx
jmp 0x4c9871
mov edi, dword [esp + 0x1c]
add edi, 0xfffffffc
push edi
lea esi, [eax + eax*2]
push 0x42
shl esi, 2
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov ecx, dword [esp + 0x44]
mov edx, dword [ecx + 4]
mov dword [edx + esi + 8], eax
mov eax, dword [ecx + 4]
mov edx, dword [eax + esi + 8]
test edx, edx
je 0x4c9908
mov edx, eax
mov dword [edx + esi + 4], edi
mov eax, dword [ecx + 4]
mov ecx, dword [eax + esi + 8]
push edi
push ecx
push ebp
call sym.vidcap60.exe__riff_ReadData_12
mov esi, eax
test esi, esi
jne 0x4c98d3
mov ecx, dword [esp + 0x1c]
mov eax, ecx
and eax, 7
jbe 0x4c9853
mov edx, 8
sub edx, eax
mov eax, dword [esp + 0x20]
add ecx, edx
adc eax, esi
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], eax
mov edx, dword [ebx]
mov eax, dword [esp + 0x20]
sub edx, ecx
mov ecx, dword [ebx + 4]
sbb ecx, eax
mov dword [ebx], edx
mov dword [ebx + 4], ecx
jmp 0x4c988d
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
push eax
push ecx
push ebp
call sym.vidcap60.exe__riff64_SkipChunk_12
mov ecx, dword [ebx]
sub ecx, eax
mov dword [esp + 0x1c], eax
mov eax, dword [ebx + 4]
sbb eax, edx
mov dword [esp + 0x20], edx
mov dword [ebx], ecx
mov dword [ebx + 4], eax
mov eax, dword [ebx + 4]
test eax, eax
jg 0x4c9737
jl 0x4c98a3
cmp dword [ebx], 0x18
jae 0x4c9737
mov eax, dword [esp + 0x24]
mov edx, dword [esp + 0x28]
push 0
lea ecx, [esp + 0x18]
push ecx
push eax
push ebp
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], edx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
pop edi
pop ebp
pop ebx
xor eax, eax
pop esi
add esp, 0x2c
ret 0xc
mov esi, 0x8004e008
mov ecx, dword [esp + 0x44]
push ecx
call sym.vidcap60.exe__displist_Free_4
mov eax, dword [esp + 0x24]
mov edx, dword [esp + 0x28]
push 0
lea ecx, [esp + 0x18]
push ecx
push eax
push ebp
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], edx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov eax, esi
pop edi
pop ebp
pop ebx
pop esi
add esp, 0x2c
ret 0xc
mov esi, 0x8007000e
jmp 0x4c98d7