Function at 0x4a68f8
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x7c
mov ebx, dword [ebp + 8]
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x2c], 0
mov dword [esp + 4], 0x56b09b
mov eax, dword [ebx + 8]
mov dword [esp], eax
call sub.msvcrt.dll_fopen
mov dword [ebx + 0x18], eax
test eax, eax
je 0x4a6e6d
mov dword [esp], eax
call sub.msvcrt.dll_rewind
mov dword [esp + 8], 0
mov dword [esp + 4], 8
mov eax, dword [ebx + 0x18]
mov dword [esp], eax
call sub.msvcrt.dll_fseek
mov eax, dword [ebx + 0x18]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 1
mov dword [esp + 4], 1
lea eax, [ebp - 0x28]
mov dword [esp], eax
call sub.msvcrt.dll_fread
test eax, eax
je 0x4a6e43
mov edi, dword [ebp - 0x28]
lea eax, [ebp - 0x19]
mov dword [esp + 8], eax
mov dword [esp + 4], str._num_OS_Images_:__d
lea esi, [ebp - 0x30]
mov dword [esp], esi
call fcn.00509af0
mov dword [esp + 0xc], edi
mov dword [esp + 8], esi
mov dword [esp + 4], 0x10
mov eax, dword [ebx]
mov dword [esp], eax
call fcn.0042ddbc
mov eax, dword [ebp - 0x30]
lea esi, [eax - 0xc]
cmp esi, 0x55a154
jne 0x4a6e97
mov esi, dword [ebp - 0x28]
test esi, esi
je 0x4a6b53
mov dword [ebp - 0x54], 0x30
mov dword [ebp - 0x50], 0
jmp 0x4a69eb
mov dword [ebp - 0x2c], 0
mov eax, dword [ebx + 0x18]
mov dword [esp], eax
call sub.msvcrt.dll_rewind
mov dword [esp + 8], 0
mov eax, dword [ebp - 0x54]
mov dword [esp + 4], eax
mov eax, dword [ebx + 0x18]
mov dword [esp], eax
call sub.msvcrt.dll_fseek
test eax, eax
jne 0x4a6c2b
mov eax, dword [ebx + 0x18]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 1
mov dword [esp + 4], 4
lea edx, [ebp - 0x2c]
mov dword [esp], edx
call sub.msvcrt.dll_fread
mov edi, eax
mov esi, dword [ebp - 0x2c]
lea ecx, [ebp - 0x1a]
mov dword [esp + 8], ecx
mov dword [esp + 4], str._temp_data_:__x
lea eax, [ebp - 0x34]
mov dword [esp], eax
call fcn.00509af0
mov dword [esp + 0xc], esi
lea edx, [ebp - 0x34]
mov dword [esp + 8], edx
mov dword [esp + 4], 0x10
mov eax, dword [ebx]
mov dword [esp], eax
call fcn.0042ddbc
mov eax, dword [ebp - 0x34]
lea esi, [eax - 0xc]
mov edx, 0x55a154
cmp edx, esi
jne 0x4a6bcf
test edi, edi
je 0x4a6c01
mov esi, dword [ebp - 0x2c]
shl esi, 9
xor edi, edi
add esi, dword [ebx + 0x38]
adc edi, dword [ebx + 0x3c]
mov dword [ebx + 0x38], esi
mov dword [ebx + 0x3c], edi
lea eax, [ebp - 0x1b]
mov dword [esp + 8], eax
mov dword [esp + 4], str.OSII:__d_Data_Size:__d
lea edx, [ebp - 0x38]
mov dword [esp], edx
call fcn.00509af0
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], edi
mov ecx, dword [ebp - 0x50]
mov dword [esp + 0xc], ecx
lea eax, [ebp - 0x38]
mov dword [esp + 8], eax
mov dword [esp + 4], 0x10
mov eax, dword [ebx]
mov dword [esp], eax
call fcn.0042ddbc
mov eax, dword [ebp - 0x38]
lea esi, [eax - 0xc]
mov edx, 0x55a154
cmp edx, esi
jne 0x4a6b9d
mov edi, dword [ebp - 0x2c]
lea eax, [ebp - 0x1c]
mov dword [esp + 8], eax
mov dword [esp + 4], str._Temp_Data_is:__x_h
lea esi, [ebp - 0x3c]
mov dword [esp], esi
call fcn.00509af0
mov dword [esp + 0xc], edi
mov dword [esp + 8], esi
mov dword [esp + 4], 0x10
mov eax, dword [ebx]
mov dword [esp], eax
call fcn.0042ddbc
mov eax, dword [ebp - 0x3c]
lea esi, [eax - 0xc]
mov ecx, 0x55a154
cmp ecx, esi
jne 0x4a6b72
inc dword [ebp - 0x50]
add dword [ebp - 0x54], 0x18
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x28], eax
ja 0x4a69e4
fild qword [ebx + 0x38]
mov ecx, dword [ebx + 0x3c]
test ecx, ecx
js 0x4a6b6a
fstp dword [ebx + 0x4c]
mov al, 1
add esp, 0x7c
pop ebx
pop esi
pop edi
leave
ret
fadd dword [0x56b42c]
jmp 0x4a6b5d
cmp dword [0x554500], 0
jne 0x4a6c55
mov eax, dword [esi + 8]
lea edx, [eax - 1]
mov dword [esi + 8], edx
test eax, eax
jg 0x4a6b40
lea eax, [ebp - 0x23]
mov dword [esp + 4], eax
mov dword [esp], esi
call fcn.005084ec
jmp 0x4a6b40
cmp dword [0x554500], 0
jne 0x4a6c85
mov eax, dword [esi + 8]
lea edx, [eax - 1]
mov dword [esi + 8], edx
test eax, eax
jg 0x4a6afa
lea eax, [ebp - 0x22]
mov dword [esp + 4], eax
mov dword [esp], esi
call fcn.005084ec
jmp 0x4a6afa
cmp dword [0x554500], 0
jne 0x4a6c6d
mov eax, dword [esi + 8]
lea edx, [eax - 1]
mov dword [esi + 8], edx
test eax, eax
jg 0x4a6a89
lea ecx, [ebp - 0x21]
mov dword [esp + 4], ecx
mov dword [esp], esi
call fcn.005084ec
jmp 0x4a6a89
mov dword [esp], 4
call fcn.00538b64
mov dword [eax], 0xc
mov dword [esp + 8], 0
mov dword [esp + 4], 0x57285c
mov dword [esp], eax
call fcn.00539374
mov dword [esp], 4
call fcn.00538b64
mov dword [eax], 0xc
mov dword [esp + 8], 0
mov dword [esp + 4], 0x57285c
mov dword [esp], eax
call fcn.00539374
mov dword [esp + 4], 0xffffffff
sub eax, 4
mov dword [esp], eax
call fcn.004dd8dc
jmp 0x4a6b88
mov dword [esp + 4], 0xffffffff
sub eax, 4
mov dword [esp], eax
call fcn.004dd8dc
jmp 0x4a6be5
mov dword [esp + 4], 0xffffffff
sub eax, 4
mov dword [esp], eax
call fcn.004dd8dc
jmp 0x4a6bb3
mov dword [esp], 4
call fcn.00538b64
mov dword [eax], 8
mov dword [esp + 8], 0
mov dword [esp + 4], 0x57285c
mov dword [esp], eax
call fcn.00539374
mov dword [esp], 4
call fcn.00538b64
mov dword [eax], 8
mov dword [esp + 8], 0
mov dword [esp + 4], 0x57285c
mov dword [esp], eax
call fcn.00539374
cmp dword [0x554500], 0
jne 0x4a6eca
mov eax, dword [esi + 8]
lea edx, [eax - 1]
mov dword [esi + 8], edx
test eax, eax
jg 0x4a69c6
lea eax, [ebp - 0x20]
mov dword [esp + 4], eax
mov dword [esp], esi
call fcn.005084ec
jmp 0x4a69c6
mov dword [esp + 4], 0xffffffff
sub eax, 4
mov dword [esp], eax
call fcn.004dd8dc
jmp 0x4a6ea9