Function at 0x43e440
Capabilities:
Contain obfuscated stackstrings
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x148
mov eax, dword [0x47f4bc]
xor eax, ebp
mov dword [ebp - 0x108], eax
mov dword [ebp - 0x148], ecx
mov eax, dword [ebp - 0x148]
cmp dword [eax + 0x3d8], 0
je 0x43e47c
mov ecx, dword [ebp - 0x148]
mov eax, dword [ecx + 0x3d8]
jmp 0x43e776
mov dword [ebp - 0x100], 0
mov dword [ebp - 0xfc], 0
mov dword [ebp - 0x12c], 0
mov dword [ebp - 0x130], 0
mov byte [ebp - 0x128], 0x3a
mov byte [ebp - 0x127], 0x48
mov byte [ebp - 0x126], 0x6b
mov byte [ebp - 0x125], 0xa2
mov byte [ebp - 0x124], 0x57
mov byte [ebp - 0x123], 0x27
mov byte [ebp - 0x122], 0xb1
mov byte [ebp - 0x121], 0x80
mov byte [ebp - 0x120], 0xd
mov byte [ebp - 0x11f], 0x50
mov byte [ebp - 0x11e], 0x68
mov byte [ebp - 0x11d], 0x8d
mov byte [ebp - 0x11c], 0x6d
mov byte [ebp - 0x11b], 0x72
mov byte [ebp - 0x11a], 0xb
mov byte [ebp - 0x119], 0xe2
mov byte [ebp - 0x118], 0xc6
mov byte [ebp - 0x117], 0x78
mov byte [ebp - 0x116], 0xff
mov byte [ebp - 0x115], 0x31
mov byte [ebp - 0x114], 0x22
mov byte [ebp - 0x113], 0xcb
mov byte [ebp - 0x112], 0x44
mov byte [ebp - 0x111], 0x63
mov byte [ebp - 0x110], 0xb1
mov byte [ebp - 0x10f], 0x6d
mov byte [ebp - 0x10e], 0x1b
mov byte [ebp - 0x10d], 0x95
mov byte [ebp - 0x10c], 0xf5
mov byte [ebp - 0x10b], 0x68
mov byte [ebp - 0x10a], 0x8d
mov byte [ebp - 0x109], 0x6d
mov edx, dword [ebp - 0x148]
cmp dword [edx], 0xffffffff
je 0x43e59e
mov eax, dword [ebp - 0x148]
cmp dword [eax + 0x3dc], 0
jne 0x43e5a5
xor eax, eax
jmp 0x43e776
push 0
push 0
push 0x1cc
mov ecx, dword [ebp - 0x148]
mov edx, dword [ecx]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0xffffffff
jne 0x43e5d3
xor eax, eax
jmp 0x43e776
mov eax, dword [ebp - 0x148]
mov ecx, dword [eax + 0x68]
push ecx
call fcn.004445d4
add esp, 4
mov dword [ebp - 0x134], eax
mov edx, dword [ebp - 0x134]
mov dword [ebp - 0xfc], edx
mov eax, dword [ebp - 0x148]
mov ecx, dword [eax + 0x68]
add ecx, 0x20
push ecx
call fcn.004445d4
add esp, 4
mov dword [ebp - 0x138], eax
mov edx, dword [ebp - 0x138]
mov dword [ebp - 0x100], edx
cmp dword [ebp - 0xfc], 0
je 0x43e630
cmp dword [ebp - 0x100], 0
jne 0x43e63a
jmp 0x43e6f9
push 0
lea eax, [ebp - 0x130]
push eax
mov ecx, dword [ebp - 0x148]
mov edx, dword [ecx + 0x64]
sub edx, 0x1cc
push edx
mov eax, dword [ebp - 0x100]
push eax
mov ecx, dword [ebp - 0x148]
mov edx, dword [ecx]
push edx
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0
jne 0x43e67c
jmp 0x43e6f9
lea eax, [ebp - 0xf8]
push eax
push 0x80
lea ecx, [ebp - 0x128]
push ecx
call fcn.0043f070
add esp, 0xc
push 0
lea edx, [ebp - 0x118]
push edx
lea eax, [ebp - 0xf8]
push eax
mov ecx, dword [ebp - 0x148]
mov edx, dword [ecx + 0x68]
push edx
mov eax, dword [ebp - 0xfc]
push eax
mov ecx, dword [ebp - 0x100]
push ecx
call fcn.004403d0
add esp, 0x18
mov edx, dword [ebp - 0x148]
mov eax, dword [ebp - 0xfc]
mov dword [edx + 0x3d8], eax
mov ecx, dword [ebp - 0xfc]
mov dword [ebp - 0x12c], ecx
cmp dword [ebp + 8], 0
je 0x43e6f9
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 0x148]
mov ecx, dword [eax + 0x68]
mov dword [edx], ecx
cmp dword [ebp - 0x12c], 0
jne 0x43e74c
cmp dword [ebp - 0x100], 0
je 0x43e726
mov edx, dword [ebp - 0x100]
mov dword [ebp - 0x13c], edx
mov eax, dword [ebp - 0x13c]
push eax
call fcn.0044466e
add esp, 4
cmp dword [ebp - 0xfc], 0
je 0x43e74a
mov ecx, dword [ebp - 0xfc]
mov dword [ebp - 0x140], ecx
mov edx, dword [ebp - 0x140]
push edx
call fcn.0044466e
add esp, 4
jmp 0x43e770
cmp dword [ebp - 0x100], 0
je 0x43e770
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x144], eax
mov ecx, dword [ebp - 0x144]
push ecx
call fcn.0044466e
add esp, 4
mov eax, dword [ebp - 0x12c]
mov ecx, dword [ebp - 0x108]
xor ecx, ebp
call fcn.00444679
mov esp, ebp
pop ebp
ret 4