Function at 0x43a940
Capabilities:
Read file on windows

Disassembly:
push rbp
push r13
push rdi
push rsi
push rbx
sub rsp, 0x110
mov rbp, rsp
mov qword [rbp + 0x48], rcx
mov dword [rbp + 0x44], edx
mov qword [rbp + 0x58], r8
mov byte [rbp + 0x77], r9b
xor rax, rax
mov byte [rbp + 0x67], al
mov ax, 0x27
mov word [rbp + 0x54], ax
mov ax, 0x22
mov word [rbp + 0x56], ax
lea rcx, [rbp + 0xc0]
mov edx, 0x20
xor r8, r8
call fcn.004061d0
mov eax, 1
mov dword [rbp + 0x70], eax
mov ax, 0x3b
mov word [rbp + 0x6e], ax
mov word [rbp + 0xc0], 0x20
mov word [rbp + 0xc2], 9
mov word [rbp + 0xc4], 0
xor rax, rax
mov dword [rbp + 0x80], eax
mov eax, 1
mov dword [rbp + 0x68], eax
mov eax, 1
mov dword [rbp + 0x7c], eax
xor rax, rax
mov dword [rbp + 0x78], eax
mov rax, qword [rbp + 0x48]
cmp qword [rax + 0x38], 0
je 0x43aead
mov rax, qword [rbp + 0x48]
mov rax, qword [rax + 0x38]
mov qword [rbp + 0x100], rax
mov rax, qword [rbp + 0x100]
cmp word [rax], 0x22
je 0x43aa0f
mov rax, qword [rbp + 0x100]
cmp word [rax], 0x27
jne 0x43aa27
mov rax, qword [rbp + 0x100]
movzx rsi, word [rax]
add qword [rbp + 0x100], 2
jmp 0x43ade0
xor rsi, rsi
jmp 0x43ade0
add qword [rbp + 0x100], 2
mov rax, qword [rbp + 0x100]
cmp word [rax], 0
je 0x43aa53
mov rax, qword [rbp + 0x100]
cmp word [rax], 0x20
jbe 0x43aa31
mov rax, qword [rbp + 0x100]
cmp word [rax], si
je 0x43adfb
mov rcx, qword [rbp + 0x100]
lea rdx, [0x0043b67c]
mov r8d, 4
call fcn.0041d820
test eax, eax
jne 0x43aa9e
mov rax, qword [rbp + 0x100]
movzx rax, word [rax + 8]
mov word [rbp + 0x6e], ax
add qword [rbp + 0x100], 0xa
jmp 0x43ade0
mov rcx, qword [rbp + 0x100]
lea rdx, [0x0043b686]
mov r8d, 7
call fcn.0041d820
test eax, eax
jne 0x43aba2
add qword [rbp + 0x100], 0xe
mov rbx, qword [rbp + 0x100]
jmp 0x43aaf3
mov rax, qword [rbp + 0x100]
cmp word [rax], 0x20
jne 0x43aaeb
mov rax, qword [rbp + 0x100]
cmp word [rax + 2], si
jne 0x43ab0c
add qword [rbp + 0x100], 2
mov rax, qword [rbp + 0x100]
cmp word [rax], 0
je 0x43ab0c
mov rax, qword [rbp + 0x100]
cmp word [rax], si
jne 0x43aad1
nop
mov rax, qword [rbp + 0x100]
mov rcx, rbx
neg rcx
lea rax, [rax + rcx]
mov ecx, 2
cqo
idiv rcx
cmp rax, 0x20
jge 0x43ab61
lea rcx, [rbp + 0xc0]
mov r8, rbx
mov rax, qword [rbp + 0x100]
mov rdx, rbx
neg rdx
lea rax, [rax + rdx]
mov r9d, 2
cqo
idiv r9
mov rdx, r8
mov r8d, eax
call fcn.00426bc0
mov rax, qword [rbp + 0x100]
neg rbx
lea rax, [rax + rbx]
mov ecx, 2
cqo
idiv rcx
mov word [rbp + rax*2 + 0xc0], 0
mov rax, qword [rbp + 0x100]
cmp word [rax], 0
je 0x43ade0
add qword [rbp + 0x100], 2
jmp 0x43ade0
mov rcx, qword [rbp + 0x100]
lea rdx, [0x0043b696]
mov r8d, 5
call fcn.0041d820
test eax, eax
jne 0x43abf7
add qword [rbp + 0x100], 0xa
mov rcx, qword [rbp + 0x100]
lea rdx, [rbp + 0x100]
xor r8, r8
call sub.msvcrt.dll_wcstol
mov dword [rbp + 0x80], eax
mov eax, dword [rbp + 0x80]
test eax, eax
jle 0x43ada4
jmp 0x43ade0
mov rcx, qword [rbp + 0x100]
lea rdx, [0x0043b6a2]
mov r8d, 8
call fcn.0041d820
test eax, eax
jne 0x43ac37
add qword [rbp + 0x100], 0x10
mov ax, 0x60
mov word [rbp + 0x54], ax
mov ax, 0x27
mov word [rbp + 0x56], ax
mov al, 1
mov byte [rbp + 0x67], al
jmp 0x43ade0
mov rcx, qword [rbp + 0x100]
lea rdx, [0x0043b6b4]
mov r8d, 7
call fcn.0041d820
test eax, eax
jne 0x43ac77
add qword [rbp + 0x100], 0xe
mov ax, 0x60
mov word [rbp + 0x54], ax
mov ax, 0x27
mov word [rbp + 0x56], ax
mov al, 1
mov byte [rbp + 0x67], al
jmp 0x43ade0
mov rcx, qword [rbp + 0x100]
lea rdx, [0x0043b6c4]
mov r8d, 7
call fcn.0041d820
test eax, eax
jne 0x43ada4
add qword [rbp + 0x100], 0xe
xor rax, rax
mov dword [rbp + 0x7c], eax
xor r13, r13
jmp 0x43ad78
mov rax, qword [rbp + 0x100]
cmp word [rax], 0x2a
jne 0x43acd3
add qword [rbp + 0x100], 2
add r13d, 1
mov eax, r13d
mov dword [rbp + 0x78], eax
jmp 0x43ad95
mov rcx, qword [rbp + 0x100]
lea rdx, [rbp + 0x100]
xor r8, r8
call sub.msvcrt.dll_wcstol
mov edi, eax
test edi, edi
jle 0x43ada4
mov rax, qword [rbp + 0x100]
cmp word [rax], 0x2d
jne 0x43ad24
mov rax, qword [rbp + 0x100]
lea rcx, [rax + 2]
lea rdx, [rbp + 0x100]
xor r8, r8
call sub.msvcrt.dll_wcstol
test eax, eax
jle 0x43ada4
jmp 0x43ad26
mov eax, edi
test edi, edi
jle 0x43ad54
cmp eax, 0x20
jge 0x43ad54
cmp edi, eax
jg 0x43ad53
add r13d, 1
mov edx, 1
mov ecx, edi
sub ecx, 1
shl edx, cl
mov ecx, dword [rbp + 0x7c]
or ecx, edx
mov dword [rbp + 0x7c], ecx
add edi, 1
cmp edi, eax
jle 0x43ad33
nop
mov rax, qword [rbp + 0x100]
cmp word [rax], 0x2c
jne 0x43ad6b
add qword [rbp + 0x100], 2
jmp 0x43ad78
mov rax, qword [rbp + 0x100]
cmp word [rax], 0x2a
jne 0x43ad95
mov rax, qword [rbp + 0x100]
cmp word [rax], 0
je 0x43ad95
mov rax, qword [rbp + 0x100]
cmp word [rax], si
jne 0x43acaf
nop
mov eax, dword [rbp + 0x68]
cmp r13d, eax
jle 0x43ade0
mov dword [rbp + 0x68], r13d
jmp 0x43ade0
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0xa0], rax
mov byte [rbp + 0xa8], 0xa
lea rcx, [0x0043b6e0]
mov edx, 1
lea r8, [rbp + 0xa0]
xor r9, r9
call fcn.0043ff40
mov eax, 1
jmp 0x43b66b
cmp qword [rbp + 0x100], 0
je 0x43adfb
mov rax, qword [rbp + 0x100]
cmp word [rax], 0
jne 0x43aa39
nop
mov eax, dword [rbp + 0x68]
cmp eax, 1
jle 0x43aead
mov rcx, qword [0x0044c7f0]
mov edx, dword [rbp + 0x44]
mov eax, dword [rbp + 0x68]
add edx, eax
add edx, edx
call fcn.0043eab0
mov qword [0x0044c7f0], rax
lea rcx, [0x0046adf8]
mov rdx, qword [0x00437fd0]
mov r8d, 1
mov r9d, dword [rbp + 0x44]
mov eax, dword [rbp + 0x68]
add r9d, eax
movsxd r9, r9d
call fcn.0040c920
xor rdi, rdi
mov eax, dword [rbp + 0x68]
cmp edi, eax
jge 0x43ae96
mov rax, qword [0x0044c7f0]
mov ecx, dword [rbp + 0x44]
add ecx, edi
movsxd rcx, ecx
mov rdx, qword [rbp + 0x48]
movzx rdx, word [rdx + 0x30]
add dx, di
mov word [rax + rcx*2], dx
mov rax, qword [0x0046adf8]
mov ecx, dword [rbp + 0x44]
add ecx, edi
movsxd rcx, ecx
mov qword [rax + rcx*8], 0
add edi, 1
mov eax, dword [rbp + 0x68]
cmp edi, eax
jl 0x43ae56
nop
mov rax, qword [0x0044c7f0]
mov ecx, dword [rbp + 0x44]
add ecx, edi
movsxd rcx, ecx
mov word [rax + rcx*2 + 2], 0
mov rax, qword [rbp + 0x58]
test rax, rax
je 0x43aed2
mov rax, qword [rbp + 0x58]
movzx rcx, word [rbp + 0x54]
cmp word [rax], cx
je 0x43aee5
mov rax, qword [rbp + 0x58]
movzx rcx, word [rbp + 0x56]
cmp word [rax], cx
je 0x43aee5
mov rcx, qword [rbp + 0x58]
xor rdx, rdx
xor r8, r8
call fcn.0043ec20
mov qword [rbp + 0x58], rax
mov eax, dword [rbp + 0x80]
mov dword [rbp + 0x84], eax
xor rax, rax
mov dword [rbp + 0x88], eax
jmp 0x43b608
call fcn.0043a300
call fcn.0043e630
xor rax, rax
mov qword [rbp + 0x90], rax
mov qword [rbp + 0x100], rax
xor rax, rax
mov qword [rbp + 0x98], rax
mov eax, dword [rbp + 0x84]
mov dword [rbp + 0x80], eax
mov rcx, qword [rbp + 0x58]
call fcn.00426cd0
mov dword [rbp + 0x8c], eax
mov rax, qword [rbp + 0x58]
movzx rcx, word [rbp + 0x54]
cmp word [rax], cx
jne 0x43b160
mov eax, dword [rbp + 0x8c]
cmp eax, 1
jle 0x43b160
mov eax, dword [rbp + 0x8c]
movsxd rax, eax
mov rcx, qword [rbp + 0x58]
movzx rdx, word [rbp + 0x54]
cmp word [rcx + rax*2 - 2], dx
jne 0x43b160
mov rax, qword [rbp + 0x58]
add rax, 2
mov qword [rbp + 0x58], rax
mov eax, dword [rbp + 0x8c]
sub eax, 2
mov dword [rbp + 0x8c], eax
movsxd rax, eax
mov rcx, qword [rbp + 0x58]
mov word [rcx + rax*2], 0
mov ecx, dword [rbp + 0x8c]
add ecx, 1
call fcn.0043e990
mov qword [rbp + 0xb8], rax
mov rcx, qword [rbp + 0x58]
lea rdx, [0x0043b724]
call sub.msvcrt.dll__wpopen
mov rbx, rax
test rbx, rbx
jne 0x43b00a
mov rax, qword [rbp + 0x58]
mov qword [rbp + 0xa0], rax
mov byte [rbp + 0xa8], 0xa
lea rcx, [0x0043b738]
mov edx, 1
lea r8, [rbp + 0xa0]
xor r9, r9
call fcn.0043ff40
call sub.kernel32.dll_GetLastError_2
jmp 0x43b66b
xor rdi, rdi
mov esi, edi
mov qword [rbp + 0xb8], 0
jmp 0x43b0e6
mov eax, edi
sub eax, esi
cmp eax, 0x200
jge 0x43b0a6
add edi, 0x200
cmp qword [rbp + 0xb8], 0
je 0x43b04c
lea rcx, [rbp + 0xb8]
movsxd rdx, edi
call fcn.004052e0
jmp 0x43b05b
movsxd rcx, edi
call fcn.00405280
mov qword [rbp + 0xb8], rax
cmp qword [rbp + 0xb8], 0
jne 0x43b0a6
mov rax, qword [rbp + 0x58]
mov qword [rbp + 0xa0], rax
mov byte [rbp + 0xa8], 0xa
lea rcx, [0x0043b81c]
mov edx, 1
lea r8, [rbp + 0xa0]
xor r9, r9
call fcn.0043ff40
mov rcx, rbx
call sub.msvcrt.dll__pclose
mov eax, 8
jmp 0x43b66b
mov rax, qword [rbp + 0xb8]
movsxd rcx, esi
mov byte [rax + rcx], 0
mov rax, qword [rbp + 0xb8]
movsxd rcx, esi
lea rcx, [rax + rcx]
mov edx, 0x200
mov r8, rbx
call sub.msvcrt.dll_fgets
test rax, rax
je 0x43b102
mov rax, qword [rbp + 0xb8]
mov rcx, rax
call fcn.0040af00
mov esi, eax
mov rcx, rbx
call sub.msvcrt.dll_feof
test eax, eax
jne 0x43b102
mov rcx, rbx
call sub.msvcrt.dll_ferror
test eax, eax
je 0x43b01f
nop
mov rcx, rbx
call sub.msvcrt.dll__pclose
lea rcx, [rbp + 0xb8]
mov edx, esi
add edx, 2
add edx, edx
movsxd rdx, edx
call fcn.004052e0
mov rax, qword [rbp + 0xb8]
movsxd rcx, esi
lea rax, [rax + rcx]
mov rcx, qword [rbp + 0xb8]
mov rdx, rax
movsxd r8, esi
call fcn.00405650
mov rax, qword [rbp + 0xb8]
mov qword [rbp + 0x98], rax
mov dword [rbp + 0x10c], esi
mov esi, dword [rbp + 0x10c]
jmp 0x43b332
mov rax, qword [rbp + 0x58]
movzx rcx, word [rbp + 0x56]
cmp word [rax], cx
jne 0x43b1e4
mov eax, dword [rbp + 0x8c]
cmp eax, 1
jle 0x43b1e4
mov eax, dword [rbp + 0x8c]
movsxd rax, eax
mov rcx, qword [rbp + 0x58]
movzx rdx, word [rbp + 0x56]
cmp word [rcx + rax*2 - 2], dx
jne 0x43b1e4
mov eax, dword [rbp + 0x8c]
movsxd rax, eax
mov rcx, qword [rbp + 0x58]
mov word [rcx + rax*2 - 2], 0xa
add rcx, 2
mov qword [rbp + 0x58], rcx
mov qword [rbp + 0x100], rcx
mov eax, dword [rbp + 0x8c]
sub eax, 2
mov dword [rbp + 0x8c], eax
mov rax, qword [rbp + 0x100]
mov ecx, dword [rbp + 0x8c]
movsxd rcx, ecx
lea rax, [rax + rcx*2]
mov qword [rbp + 0x90], rax
jmp 0x43b3ed
movzx rax, byte [rbp + 0x67]
test al, al
je 0x43b1f8
mov rcx, qword [rbp + 0x58]
call fcn.00440b00
jmp 0x43b1fc
mov rax, qword [rbp + 0x58]
mov rcx, rax
mov edx, 0x80000000
mov r8d, 5
xor r9, r9
mov dword [rsp + 0x20], 3
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x30], 0
call sub.kernel32.dll_CreateFileW_1
mov rbx, rax
cmp rbx, 0xffffffffffffffff
jne 0x43b26e
mov rax, qword [rbp + 0x58]
mov qword [rbp + 0xa0], rax
mov byte [rbp + 0xa8], 0xa
lea rcx, [0x0043b84c]
mov edx, 1
lea r8, [rbp + 0xa0]
xor r9, r9
call fcn.0043ff40
call sub.kernel32.dll_GetLastError_2
jmp 0x43b66b
mov rcx, rbx
xor rdx, rdx
xor r8, r8
mov r9d, 2
call sub.kernel32.dll_SetFilePointer_1
mov esi, eax
mov rcx, rbx
xor rdx, rdx
xor r8, r8
xor r9, r9
call sub.kernel32.dll_SetFilePointer_1
mov ecx, esi
add ecx, 2
add ecx, ecx
mov ecx, ecx
call fcn.00405280
mov qword [rbp + 0x98], rax
mov rax, qword [rbp + 0x98]
test rax, rax
jne 0x43b2f8
mov rax, qword [rbp + 0x58]
mov qword [rbp + 0xa0], rax
mov byte [rbp + 0xa8], 0xa
lea rcx, [0x0043b81c]
mov edx, 1
lea r8, [rbp + 0xa0]
xor r9, r9
call fcn.0043ff40
mov rcx, rbx
call sub.kernel32.dll_CloseHandle_1
mov eax, 8
jmp 0x43b66b
mov dword [rbp + 0x10c], 0xffffffff
mov rcx, rbx
mov eax, esi
mov rdx, qword [rbp + 0x98]
lea rdx, [rdx + rax]
mov r8d, esi
lea r9, [rbp + 0x10c]
mov qword [rsp + 0x20], 0
call sub.kernel32.dll_ReadFile_1
mov rcx, rbx
call sub.kernel32.dll_CloseHandle_1
cmp dword [rbp + 0x10c], esi
jne 0x43b3ed
mov rax, qword [0x0044d510]
mov ecx, dword [rax]
call fcn.00438010
mov rcx, qword [0x0044d510]
mov ecx, dword [rcx]
test eax, eax
setne dl
movzx rdx, dl
mov eax, esi
mov r8, qword [rbp + 0x98]
lea r8, [r8 + rax]
mov r9d, esi
mov rax, qword [rbp + 0x98]
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x28], esi
call sub.kernel32.dll_MultiByteToWideChar_1
mov rax, qword [rbp + 0x98]
mov qword [rbp + 0x100], rax
mov rax, qword [rbp + 0x100]
mov esi, esi
lea rax, [rax + rsi*2]
mov qword [rbp + 0x90], rax
mov rax, qword [rbp + 0x90]
cmp rax, qword [rbp + 0x100]
mov qword [rbp + 0x90], rax
je 0x43b3ca
mov rax, qword [rbp + 0x90]
cmp word [rax - 2], 0xa
je 0x43b3e1
mov rax, qword [rbp + 0x90]
mov word [rax], 0xa
add rax, 2
mov qword [rbp + 0x90], rax
mov rax, qword [rbp + 0x90]
mov word [rax], 0
mov rax, qword [rbp + 0x90]
cmp qword [rbp + 0x100], rax
jae 0x43b5d9
call fcn.0043e630
mov rbx, qword [rbp + 0x100]
mov rcx, rbx
mov dx, 0xa
call fcn.00426c30
mov qword [rbp + 0x100], rax
cmp qword [rbp + 0x100], 0
je 0x43b5d9
cmp qword [rbp + 0x100], rbx
jbe 0x43b452
mov rax, qword [rbp + 0x100]
cmp word [rax - 2], 0xd
jne 0x43b452
mov rax, qword [rbp + 0x100]
mov word [rax - 2], 0
mov rax, qword [rbp + 0x100]
mov word [rax], 0
add qword [rbp + 0x100], 2
mov eax, dword [rbp + 0x80]
test eax, eax
jne 0x43b5b6
mov edi, 1
mov eax, dword [rbp + 0x68]
sub eax, 1
cmp edi, eax
jg 0x43b4a5
add eax, 1
mov rcx, qword [0x0046adf8]
mov edx, dword [rbp + 0x44]
add edx, edi
movsxd rdx, edx
mov qword [rcx + rdx*8], 0
add edi, 1
cmp edi, eax
jne 0x43b487
nop
xor rdi, rdi
xor r13, r13
jmp 0x43b578
call fcn.0043e630
jmp 0x43b4bc
add rbx, 2
cmp word [rbx], 0
je 0x43b4d7
lea rcx, [rbp + 0xc0]
movzx rdx, word [rbx]
call fcn.00426c30
test rax, rax
jne 0x43b4b8
test edi, edi
jne 0x43b4e9
movzx rax, word [rbp + 0x6e]
cmp word [rbx], ax
je 0x43b582
mov rsi, rbx
mov eax, dword [rbp + 0x78]
test eax, eax
je 0x43b51e
mov eax, r13d
add eax, 1
mov ecx, dword [rbp + 0x78]
cmp eax, ecx
jne 0x43b51e
mov rax, qword [0x0046adf8]
mov ecx, dword [rbp + 0x44]
add ecx, r13d
movsxd rcx, ecx
mov qword [rax + rcx*8], rsi
add r13d, 1
jmp 0x43b582
add rbx, 2
cmp word [rbx], 0
je 0x43b539
lea rcx, [rbp + 0xc0]
movzx rdx, word [rbx]
call fcn.00426c30
test rax, rax
je 0x43b51a
mov word [rbx], 0
cmp rsi, rbx
je 0x43b574
cmp edi, 0x20
jge 0x43b574
mov eax, 1
mov ecx, edi
shl eax, cl
mov ecx, dword [rbp + 0x7c]
test eax, ecx
je 0x43b571
mov rax, qword [0x0046adf8]
mov ecx, dword [rbp + 0x44]
add ecx, r13d
movsxd rcx, ecx
mov qword [rax + rcx*8], rsi
add r13d, 1
add edi, 1
add rbx, 2
cmp word [rbx], 0
jne 0x43b4b1
nop
test r13d, r13d
je 0x43b5c5
mov rax, qword [rbp + 0x48]
mov rcx, qword [rax + 0x28]
movzx rdx, byte [rbp + 0x77]
call fcn.0043bb20
mov dword [rbp + 0x70], eax
mov ecx, dword [rbp + 0x88]
call fcn.0043c090
mov dword [rbp + 0x88], eax
xor rax, rax
mov byte [rbp + 0x77], al
jmp 0x43b5c5
mov eax, dword [rbp + 0x80]
sub eax, 1
mov dword [rbp + 0x80], eax
mov rax, qword [rbp + 0x90]
cmp qword [rbp + 0x100], rax
jb 0x43b401
nop
mov rax, qword [rbp + 0x98]
test rax, rax
je 0x43b5f2
mov rcx, qword [rbp + 0x98]
call fcn.004052b0
mov eax, dword [rbp + 0x8c]
movsxd rax, eax
mov rcx, qword [rbp + 0x58]
lea rax, [rcx + rax*2 + 2]
mov qword [rbp + 0x58], rax
mov rax, qword [rbp + 0x58]
cmp word [rax], 0
je 0x43b61f
cmp byte [0x0044c7ec], 0
je 0x43aeff
mov eax, dword [rbp + 0x68]
cmp eax, 1
jle 0x43b668
cmp qword [0x0044c7f0], 0
je 0x43b668
mov rax, qword [0x0044c7f0]
cmp word [rax], 0
je 0x43b668
mov rax, qword [0x0044c7f0]
mov ecx, dword [rbp + 0x44]
movsxd rcx, ecx
mov word [rax + rcx*2 + 2], 0
mov rax, qword [0x0046adf8]
mov ecx, dword [rbp + 0x44]
movsxd rcx, ecx
mov qword [rax + rcx*8 + 8], 0
mov eax, dword [rbp + 0x70]
lea rsp, [rbp + 0x110]
pop rbx
pop rsi
pop rdi
pop r13
pop rbp
ret