Function at 0x1b43c78e
Capabilities:
Read file on windows

Disassembly:
mov eax, 0x1210
call fcn.1b415ab0
mov eax, dword [0x1b44b010]
xor eax, esp
mov dword [esp + 0x120c], eax
mov eax, dword [esp + 0x1214]
push ebx
push esi
mov esi, ecx
lea ecx, [esp + 0x18]
push ecx
xor ebx, ebx
push 0x10
push eax
mov dword [esp + 0x20], esi
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], 0x64
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x28], ebx
mov dword [esi], ebx
call fcn.1b4194c6
cmp eax, ebx
je 0x1b43c810
cmp eax, 0xfffffffc
jne 0x1b43c7ed
mov eax, 0xfffff8f1
jmp 0x1b43cb4a
cmp eax, 0xfffffffe
jne 0x1b43c7fc
mov eax, 0xfffff8ed
jmp 0x1b43cb4a
sub eax, 0xfffffffd
neg eax
sbb eax, eax
and eax, 0xfffffff7
add eax, 0xfffffc01
jmp 0x1b43cb4a
mov ecx, dword [esp + 0x18]
push ebx
lea edx, [esp + 0x14]
push edx
push 0x1000
lea eax, [esp + 0x21c]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x1b43c83f
mov dword [esp + 8], 0xfffffc02
jmp 0x1b43cb2e
mov ecx, dword [esp + 0x10]
cmp ecx, ebx
jne 0x1b43c854
mov dword [esp + 8], 0xffffec69
jmp 0x1b43cb2e
mov al, byte [esp + 0x210]
cmp al, 0xff
jne 0x1b43ca6a
cmp byte [esp + 0x211], 0xfe
je 0x1b43ca8f
lea eax, [esp + 0x210]
sub eax, 1
lea ecx, [ecx]
cmp byte [eax + ecx], bl
jne 0x1b43c887
sub ecx, 1
jne 0x1b43c87d
cmp ecx, 1
mov dword [esp + 0x10], ecx
push edi
jbe 0x1b43c8b8
lea eax, [esp + 0x214]
mov edx, 1
mov edi, eax
sub edx, edi
cmp byte [eax + 1], bl
jne 0x1b43c8ae
cmp byte [eax], bl
jne 0x1b43ca9e
add eax, 2
lea edi, [edx + eax]
cmp edi, ecx
jb 0x1b43c8a1
push ebp
xor ebp, ebp
cmp dword [esp + 0x1228], 3
jne 0x1b43ca46
cmp ecx, ebx
jbe 0x1b43ca46
lea edx, [esp + 0x218]
push 0x1b43cb7c
push edx
call fcn.1b41f090
mov edi, eax
add esp, 8
cmp edi, ebx
jne 0x1b43c90b
lea eax, [esp + 0x218]
push 0x1b43cb74
push eax
call fcn.1b41f090
mov edi, eax
add esp, 8
cmp edi, ebx
je 0x1b43ca46
push 0x1b43cb6c
push edi
call fcn.1b41f090
mov esi, eax
add esp, 8
test esi, esi
jne 0x1b43c937
push 0x1b43cb64
push edi
call fcn.1b41f090
mov esi, eax
add esp, 8
test esi, esi
je 0x1b43ca40
movsx ecx, byte [esi + 7]
add esi, 7
push ecx
call fcn.1b43e453
add esp, 4
test eax, eax
jle 0x1b43c961
mov edi, edi
movsx edx, byte [esi + 1]
add esi, 1
push edx
call fcn.1b43e453
add esp, 4
test eax, eax
jg 0x1b43c94d
cmp byte [esi], 0x3d
jne 0x1b43ca40
movsx eax, byte [esi + 1]
add esi, 1
push eax
call fcn.1b43e453
add esp, 4
test eax, eax
jle 0x1b43c992
movsx ecx, byte [esi + 1]
add esi, 1
push ecx
call fcn.1b43e453
add esp, 4
test eax, eax
jg 0x1b43c97e
mov al, byte [esi]
cmp al, 0x3b
je 0x1b43c9b7
cmp al, 0x3e
je 0x1b43c9b7
cmp al, 0x22
je 0x1b43c9b7
test al, al
je 0x1b43c9b7
add esi, 1
mov byte [esp + ebx + 0x98], al
mov al, byte [esi]
add ebx, 1
cmp al, 0x3b
jne 0x1b43c998
lea eax, [esp + 0x98]
mov byte [esp + ebx + 0x98], 0
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
test cl, cl
jne 0x1b43c9c9
push 0x80
sub eax, edx
lea edx, [esp + 0x11c]
push edx
add eax, 1
push eax
lea eax, [esp + 0xa4]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea ecx, [esp + 0x118]
push ecx
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov esi, eax
test esi, esi
je 0x1b43ca40
mov eax, dword [0x1b44b00c]
mov edx, dword [eax]
mov edx, dword [edx + 0x1c]
lea ecx, [esp + 0x2c]
push ecx
push esi
push eax
call edx
test eax, eax
jne 0x1b43ca31
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x1c]
mov dword [ecx], eax
mov ebp, 1
push esi
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
test ebp, ebp
jne 0x1b43cb16
mov esi, dword [esp + 0x1c]
xor ebx, ebx
mov edx, dword [esp + 0x14]
shl edx, 4
push edx
call fcn.1b4117ae
mov edi, eax
cmp edi, ebx
mov dword [esp + 0x28], edi
jne 0x1b43caad
mov dword [esp + 0x10], 0xfffffc0d
jmp 0x1b43cb2c
cmp al, 0xfe
jne 0x1b43c871
cmp byte [esp + 0x211], 0xff
jne 0x1b43c871
mov dword [esi], 0x4b1
mov dword [esp + 8], ebx
jmp 0x1b43cb2e
mov dword [esi], 0x4b0
mov dword [esp + 8], ebx
jmp 0x1b43cb2e
mov dword [esi], 0x4b0
mov dword [esp + 0xc], ebx
jmp 0x1b43cb2d
mov eax, dword [esp + 0x14]
shl eax, 4
push eax
push ebx
push edi
call fcn.1b411863
mov eax, dword [0x1b44b00c]
mov ecx, dword [eax]
add esp, 0xc
lea edx, [esp + 0x14]
push edx
push edi
lea edx, [esp + 0x20]
push edx
lea edx, [esp + 0x224]
push edx
push ebx
push 4
push eax
mov eax, dword [ecx + 0x58]
call eax
test eax, eax
je 0x1b43caee
xor ecx, ecx
mov dword [esp + 0x14], ecx
jmp 0x1b43caf2
mov ecx, dword [esp + 0x14]
cmp ecx, ebx
jle 0x1b43cb1c
lea eax, [edi + 0xc]
mov edx, dword [esp + 0x24]
cmp dword [eax], edx
jle 0x1b43cb0c
mov edx, dword [eax - 8]
mov dword [esi], edx
mov edx, dword [eax]
mov dword [esp + 0x24], edx
add eax, 0x10
sub ecx, 1
je 0x1b43cb1c
jmp 0x1b43caf9
mov esi, dword [esp + 0x1c]
xor ebx, ebx
cmp dword [esi], 0x4e9f
jne 0x1b43cb2c
call dword [sym.imp.KERNEL32.dll_GetOEMCP]
mov dword [esi], eax
pop ebp
pop edi
mov eax, dword [esp + 0x18]
push eax
call fcn.1b413bd6
mov eax, dword [esp + 0x20]
cmp eax, ebx
je 0x1b43cb46
push eax
call fcn.1b41127c
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x1214]
pop esi
pop ebx
xor ecx, esp
call fcn.1b41133e
add esp, 0x1210
ret 8