Function at 0x43a4bd
Capabilities:
Get file size
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
push ebx
xor ebx, ebx
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0xc], ebx
cmp dword [ebp + 0x1c], ebx
jne 0x43a4d8
xor eax, eax
jmp 0x43a7de
push edi
mov edi, dword [ebp + 0x14]
test edi, edi
jne 0x43a4e7
xor eax, eax
jmp 0x43a7dd
push esi
mov esi, dword [ebp + 0x18]
test esi, esi
jne 0x43a4f6
xor eax, eax
jmp 0x43a7dc
push ebx
push dword [ebp + 0x1c]
call fcn.0047317b
pop ecx
pop ecx
test eax, eax
jne 0x43a7af
push ebx
push 0x80
push 3
push ebx
push 1
push SysReAllocStringLen
push dword [ebp + 0x1c]
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
mov dword [ebp + 0x1c], esi
cmp esi, 0xffffffff
je 0x43a7ac
push ebx
push esi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [ebp - 4], eax
test eax, eax
je 0x43a7a5
cmp eax, 0xffffffff
je 0x43a7a5
add eax, 2
push 0x50b900
push eax
mov dword [ebp - 8], eax
call fcn.0046f8b0
mov esi, eax
pop ecx
pop ecx
mov dword [ebp - 0x20], esi
test esi, esi
jne 0x43a570
push dword [ebp + 0x1c]
jmp 0x43a7a6
push ebx
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 4]
push esi
push dword [ebp + 0x1c]
call dword [sym.imp.KERNEL32.dll_ReadFile]
push dword [ebp + 0x1c]
test eax, eax
jne 0x43a59b
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push esi
call fcn.0046ec69
pop ecx
jmp 0x43a7ac
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0xc], ebx
je 0x43a58f
mov edx, dword [ebp - 4]
mov dword [ebp + 0x1c], ebx
cmp edx, 3
jb 0x43a5cc
cmp byte [esi], 0xff
jne 0x43a5cc
cmp byte [esi + 1], 0xfe
jne 0x43a5cc
mov eax, edx
shr eax, 1
lea ebx, [esi + 2]
xor ecx, ecx
mov word [ebx + eax*2 - 2], cx
jmp 0x43a635
mov eax, dword [ebp - 8]
push 0x50b900
mov word [esi + edx], bx
xor ecx, ecx
push 2
pop edx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0046f8b0
mov ebx, eax
pop ecx
pop ecx
test ebx, ebx
je 0x43a58f
push dword [ebp - 4]
and dword [ebp - 0x10], 0
push esi
push dword [ebp - 8]
lea eax, [ebp - 0x10]
push ebx
push eax
call fcn.004738a4
add esp, 0x14
test eax, eax
je 0x43a622
push esi
call fcn.0046ec69
push ebx
call fcn.0046ec69
pop ecx
jmp 0x43a595
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 4]
xor ecx, ecx
mov word [ebx + eax*2], cx
mov dword [ebp + 0x1c], 1
xor ecx, ecx
push 0x50b900
push 2
cmp dword [ebp + 0xc], ecx
jne 0x43a71c
mov eax, dword [ebp - 8]
pop edx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0046f8b0
pop ecx
pop ecx
mov dword [ebp - 4], eax
test eax, eax
jne 0x43a67a
push esi
call fcn.0046ec69
cmp dword [ebp + 0x1c], 1
pop ecx
jne 0x43a7ac
push ebx
jmp 0x43a590
push dword [ebp - 8]
xor ecx, ecx
push eax
push dword [ebp + 8]
mov word [eax], cx
push ebx
call fcn.00439eaf
mov ecx, eax
mov eax, dword [ebp + 0x18]
add esp, 0x10
mov dword [ebp - 8], ecx
cmp eax, ecx
jae 0x43a6a4
mov byte [ebp - 0x14], 1
mov ecx, eax
mov dword [ebp - 8], eax
cmp ecx, 1
jbe 0x43a6e1
lea eax, [ecx - 2]
mov dword [ebp - 0x18], eax
test eax, eax
je 0x43a6da
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x18]
sub eax, edi
push 2
mov edx, edi
mov dword [ebp - 0x1c], eax
mov edi, eax
pop esi
mov ax, word [edi + edx]
mov word [edx], ax
add edx, esi
dec ecx
jne 0x43a6c5
mov esi, dword [ebp - 0x20]
mov edi, dword [ebp + 0x14]
mov ecx, dword [ebp - 8]
xor eax, eax
mov word [edi + ecx*2 - 4], ax
push dword [ebp - 4]
xor eax, eax
mov word [edi + ecx*2 - 2], ax
call fcn.0046ec69
push esi
call fcn.0046ec69
cmp dword [ebp + 0x1c], 1
pop ecx
pop ecx
jne 0x43a705
push ebx
call fcn.0046ec69
pop ecx
cmp byte [ebp - 0x14], 0
mov eax, dword [ebp - 8]
je 0x43a716
add eax, 0xfffffffe
jmp 0x43a7dc
dec eax
jmp 0x43a7dc
mov eax, edx
pop edx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0046f8b0
pop ecx
pop ecx
mov dword [ebp - 8], eax
test eax, eax
je 0x43a663
push dword [ebp - 4]
xor ecx, ecx
push eax
push dword [ebp + 0xc]
mov word [eax], cx
push dword [ebp + 8]
push ebx
call fcn.0043a978
add esp, 0x14
push dword [ebp - 8]
test eax, eax
jne 0x43a76b
call fcn.0046ec69
push esi
call fcn.0046ec69
pop ecx
jmp 0x43a669
push 0x4e4344
push 0xffffffffffffffff
push dword [ebp + 0x18]
push edi
call fcn.0046c319
mov eax, dword [ebp + 0x18]
push dword [ebp - 8]
xor ecx, ecx
mov word [edi + eax*2 - 2], cx
call fcn.0046ec69
push esi
call fcn.0046ec69
add esp, 0x1c
cmp dword [ebp + 0x1c], 1
jne 0x43a7d5
push ebx
call fcn.0046ec69
pop ecx
jmp 0x43a7d5
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, dword [ebp + 0x18]
cmp dword [ebp + 0x10], 0
push 0xffffffffffffffff
lea eax, [esi - 1]
jne 0x43a7c1
push 0x4daef0
jmp 0x43a7c4
push dword [ebp + 0x10]
push eax
push edi
call fcn.0046ea36
add esp, 0x10
xor eax, eax
mov word [edi + esi*2 - 2], ax
push edi
call fcn.0046b684
pop ecx
pop esi
pop edi
pop ebx
leave
ret