Function at 0x434410
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4831f0
mov eax, dword fs:[0]
push eax
mov eax, 0x1034
call fcn.0047ce50
mov eax, dword [0x496004]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x1038], eax
mov dword [ebp - 0x102c], 0xffffffff
mov dword [eax + 4], 0
mov eax, dword [eax]
mov byte [eax], 0
push ecx
push 3
push 1
push SysReAllocStringLen
push ecx
lea ecx, [ebp - 0x102c]
mov dword [ebp - 4], 0
call fcn.0040feb0
mov esi, dword [ebp - 0x102c]
test al, al
je 0x43474b
xor eax, eax
mov dword [ebp - 0x1020], eax
cmp byte [str.___Install__UTF_8_], al
je 0x4344b0
nop dword [eax]
inc eax
cmp byte [eax + str.___Install__UTF_8_], 0
jne 0x4344a0
mov dword [ebp - 0x1020], eax
xor eax, eax
mov dword [ebp - 0x101c], eax
cmp byte [str.___InstallEnd__], al
je 0x4344d0
inc eax
cmp byte [eax + str.___InstallEnd__], 0
jne 0x4344c0
mov dword [ebp - 0x101c], eax
xorps xmm0, xmm0
xor eax, eax
movlpd qword [ebp - 0x1040], xmm0
mov ecx, dword [ebp - 0x103c]
mov dword [ebp - 0x1024], ecx
mov ecx, dword [ebp - 0x1040]
mov dword [ebp - 0x1018], eax
mov byte [ebp - 0x1011], al
mov dword [ebp - 0x1028], ecx
mov edi, 0x1000
mov dword [ebp - 0x1034], 0
lea ebx, [ebp - 0x1010]
sub edi, eax
add ebx, eax
nop word [eax + eax]
cmp edi, 0x400000
mov dword [ebp - 0x1030], 0
mov ecx, 0x400000
mov eax, edi
push 0
cmova eax, ecx
lea ecx, [ebp - 0x1030]
push ecx
push eax
push ebx
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov edx, dword [ebp - 0x1034]
mov ecx, dword [ebp - 0x1030]
add edx, ecx
mov dword [ebp - 0x1034], edx
test eax, eax
je 0x43474b
test ecx, ecx
je 0x434572
add ebx, ecx
sub edi, ecx
jne 0x434520
test edx, edx
je 0x434738
mov edi, dword [ebp - 0x1018]
add edi, edx
xor ebx, ebx
mov dword [ebp - 0x1018], edi
nop word [eax + eax]
cmp byte [ebp - 0x1011], 0
mov eax, edi
je 0x434654
sub eax, dword [ebp - 0x101c]
cmp ebx, eax
ja 0x4346e7
mov edi, dword [ebp - 0x101c]
lea ecx, [ebp - 0x1010]
add ecx, ebx
mov edx, str.___InstallEnd__
sub edi, 4
jb 0x4345d6
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x4345df
add ecx, 4
add edx, 4
sub edi, 4
jae 0x4345c5
cmp edi, 0xfffffffc
je 0x434738
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x43461c
cmp edi, 0xfffffffd
je 0x434738
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x43461c
cmp edi, 0xfffffffe
je 0x434738
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x43461c
cmp edi, 0xffffffff
je 0x434738
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
je 0x434738
mov al, byte [ebp + ebx - 0x1010]
mov byte [ebp - 0x103c], al
test al, al
je 0x43474b
push dword [ebp - 0x103c]
mov ecx, dword [ebp - 0x1038]
call fcn.00409470
mov edi, dword [ebp - 0x1018]
mov eax, 1
add ebx, eax
jmp 0x434590
mov ecx, dword [ebp - 0x1020]
sub eax, ecx
cmp ebx, eax
ja 0x4346e7
lea edx, [ebp - 0x1010]
mov edi, ecx
add edx, ebx
mov eax, str.___Install__UTF_8_
sub edi, 4
jb 0x434689
mov ecx, dword [edx]
cmp ecx, dword [eax]
jne 0x43468e
add edx, 4
add eax, 4
sub edi, 4
jae 0x434678
cmp edi, 0xfffffffc
je 0x4346cd
mov cl, byte [edx]
cmp cl, byte [eax]
jne 0x4346bb
cmp edi, 0xfffffffd
je 0x4346cd
mov cl, byte [edx + 1]
cmp cl, byte [eax + 1]
jne 0x4346bb
cmp edi, 0xfffffffe
je 0x4346cd
mov cl, byte [edx + 2]
cmp cl, byte [eax + 2]
jne 0x4346bb
cmp edi, 0xffffffff
je 0x4346cd
mov cl, byte [edx + 3]
cmp cl, byte [eax + 3]
je 0x4346cd
mov edi, dword [ebp - 0x1018]
mov eax, 1
add ebx, eax
jmp 0x434590
mov eax, dword [ebp - 0x1020]
add ebx, eax
mov edi, dword [ebp - 0x1018]
mov byte [ebp - 0x1011], 1
jmp 0x434590
sub edi, ebx
lea eax, [ebp - 0x1010]
add dword [ebp - 0x1028], ebx
push edi
adc dword [ebp - 0x1024], 0
add eax, ebx
push eax
lea eax, [ebp - 0x1010]
mov dword [ebp - 0x1018], edi
push eax
call fcn.00441a50
mov ecx, dword [ebp - 0x1024]
add esp, 0xc
test ecx, ecx
ja 0x43473c
jb 0x43472d
cmp dword [ebp - 0x1028], 0x100000
ja 0x43473c
mov eax, dword [ebp - 0x1018]
jmp 0x434501
mov bl, 1
jmp 0x43474d
mov eax, dword [ebp - 0x1038]
cmp dword [eax + 4], 0
sete bl
jmp 0x43474d
xor bl, bl
mov dword [ebp - 4], 0xffffffff
cmp esi, 0xffffffff
je 0x434760
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov al, bl
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00436a29
mov esp, ebp
pop ebp
ret 8