Function at 0x43b38c
Capabilities:
Read file on windows

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x60
mov qword [rbp + 0x10], rcx
mov rax, qword [rbp + 0x10]
mov rdx, qword [rax + 8]
mov rax, qword [rbp + 0x10]
add rax, 0x18
mov r9, rdx
mov r8d, 1
mov edx, 0x10
mov rcx, rax
call sub.msvcrt.dll_fread
cmp rax, 1
je 0x43b3ce
mov eax, 0
jmp 0x43b878
mov rax, qword [rbp + 0x10]
movzx eax, byte [rax + 0x1d]
movzx eax, al
cmp eax, 2
je 0x43b402
mov rax, qword [0x004a2e00]
mov rdx, qword [fcn.0045da84]
mov qword [rax], rdx
mov rax, qword [0x004a2e30]
mov rdx, qword [0x004a2e50]
mov qword [rax], rdx
jmp 0x43b425
mov rax, qword [0x004a2e00]
mov rdx, qword [fcn.0045dd98]
mov qword [rax], rdx
mov rax, qword [0x004a2e30]
mov rdx, qword [0x004a2e40]
mov qword [rax], rdx
nop
mov rax, qword [rbp + 0x10]
movzx eax, byte [rax + 0x1c]
cmp al, 2
setne al
movzx eax, al
mov dword [0x004a83bc], eax
mov eax, dword [0x004a83bc]
test eax, eax
je 0x43b646
mov rax, qword [rbp + 0x10]
mov rdx, qword [rax + 8]
lea rax, [rbp - 0x40]
add rax, 0x10
mov r9, rdx
mov r8d, 1
mov edx, 0x24
mov rcx, rax
call sub.msvcrt.dll_fread
cmp rax, 1
je 0x43b47f
mov eax, 0
jmp 0x43b878
mov rax, qword [0x004a2e00]
mov rax, qword [rax]
lea rdx, [rbp - 0x40]
lea rcx, [rdx + 0x10]
mov edx, 2
call rax
mov edx, eax
mov rax, qword [rbp + 0x10]
mov word [rax + 0x48], dx
mov rax, qword [0x004a2e00]
mov rax, qword [rax]
lea rdx, [rbp - 0x40]
lea rcx, [rdx + 0x12]
mov edx, 2
call rax
mov edx, eax
mov rax, qword [rbp + 0x10]
mov word [rax + 0x4a], dx
mov rax, qword [0x004a2e00]
mov rax, qword [rax]
lea rdx, [rbp - 0x40]
lea rcx, [rdx + 0x14]
mov edx, 4
call rax
mov edx, eax
mov rax, qword [rbp + 0x10]
mov dword [rax + 0x40], edx
mov rax, qword [0x004a2e00]
mov rax, qword [rax]
lea rdx, [rbp - 0x40]
lea rcx, [rdx + 0x18]
mov edx, 4
call rax
mov rdx, rax
mov rax, qword [rbp + 0x10]
mov qword [rax + 0x28], rdx
mov rax, qword [0x004a2e00]
mov rax, qword [rax]
lea rdx, [rbp - 0x40]
lea rcx, [rdx + 0x1c]
mov edx, 4
call rax
mov rdx, rax
mov rax, qword [rbp + 0x10]
mov qword [rax + 0x30], rdx
mov rax, qword [0x004a2e00]
mov rax, qword [rax]
lea rdx, [rbp - 0x40]
lea rcx, [rdx + 0x20]
mov edx, 4
call rax
mov rdx, rax
mov rax, qword [rbp + 0x10]
mov qword [rax + 0x38], rdx
mov rax, qword [0x004a2e00]
mov rax, qword [rax]
lea rdx, [rbp - 0x40]
lea rcx, [rdx + 0x24]
mov edx, 4
call rax
mov edx, eax
mov rax, qword [rbp + 0x10]
mov dword [rax + 0x44], edx
mov rax, qword [0x004a2e00]
mov rax, qword [rax]
lea rdx, [rbp - 0x40]
lea rcx, [rdx + 0x28]
mov edx, 2
call rax
mov edx, eax
mov rax, qword [rbp + 0x10]
mov dword [rax + 0x4c], edx
mov rax, qword [0x004a2e00]
mov rax, qword [rax]
lea rdx, [rbp - 0x40]
lea rcx, [rdx + 0x2a]
mov edx, 2
call rax
mov edx, eax
mov rax, qword [rbp + 0x10]
mov dword [rax + 0x50], edx
mov rax, qword [0x004a2e00]
mov rax, qword [rax]
lea rdx, [rbp - 0x40]
lea rcx, [rdx + 0x2c]
mov edx, 2
call rax
mov edx, eax
mov rax, qword [rbp + 0x10]
mov dword [rax + 0x54], edx
mov rax, qword [0x004a2e00]
mov rax, qword [rax]
lea rdx, [rbp - 0x40]
lea rcx, [rdx + 0x2e]
mov edx, 2
call rax
mov edx, eax
mov rax, qword [rbp + 0x10]
mov dword [rax + 0x58], edx
mov rax, qword [0x004a2e00]
mov rax, qword [rax]
lea rdx, [rbp - 0x40]
lea rcx, [rdx + 0x30]
mov edx, 2
call rax
mov edx, eax
mov rax, qword [rbp + 0x10]
mov dword [rax + 0x5c], edx
mov rax, qword [0x004a2e00]
mov rax, qword [rax]
lea rdx, [rbp - 0x40]
lea rcx, [rdx + 0x32]
mov edx, 2
call rax
mov edx, eax
mov rax, qword [rbp + 0x10]
mov dword [rax + 0x60], edx
jmp 0x43b83e
mov rax, qword [rbp + 0x10]
mov rdx, qword [rax + 8]
lea rax, [rbp - 0x40]
add rax, 0x10
mov r9, rdx
mov r8d, 1
mov edx, 0x30
mov rcx, rax
call sub.msvcrt.dll_fread
cmp rax, 1
je 0x43b67c
mov eax, 0
jmp 0x43b878
mov rax, qword [0x004a2e00]
mov rax, qword [rax]
lea rdx, [rbp - 0x40]
lea rcx, [rdx + 0x10]
mov edx, 2
call rax
mov edx, eax
mov rax, qword [rbp + 0x10]
mov word [rax + 0x48], dx
mov rax, qword [0x004a2e00]
mov rax, qword [rax]
lea rdx, [rbp - 0x40]
lea rcx, [rdx + 0x12]
mov edx, 2
call rax
mov edx, eax
mov rax, qword [rbp + 0x10]
mov word [rax + 0x4a], dx
mov rax, qword [0x004a2e00]
mov rax, qword [rax]
lea rdx, [rbp - 0x40]
lea rcx, [rdx + 0x14]
mov edx, 4
call rax
mov edx, eax
mov rax, qword [rbp + 0x10]
mov dword [rax + 0x40], edx
mov rax, qword [0x004a2e00]
mov rax, qword [rax]
lea rdx, [rbp - 0x40]
lea rcx, [rdx + 0x18]
mov edx, 8
call rax
mov rdx, rax
mov rax, qword [rbp + 0x10]
mov qword [rax + 0x28], rdx
mov rax, qword [0x004a2e00]
mov rax, qword [rax]
lea rdx, [rbp - 0x40]
lea rcx, [rdx + 0x20]
mov edx, 8
call rax
mov rdx, rax
mov rax, qword [rbp + 0x10]
mov qword [rax + 0x30], rdx
mov rax, qword [0x004a2e00]
mov rax, qword [rax]
lea rdx, [rbp - 0x40]
lea rcx, [rdx + 0x28]
mov edx, 8
call rax
mov rdx, rax
mov rax, qword [rbp + 0x10]
mov qword [rax + 0x38], rdx
mov rax, qword [0x004a2e00]
mov rax, qword [rax]
lea rdx, [rbp - 0x40]
lea rcx, [rdx + 0x30]
mov edx, 4
call rax
mov edx, eax
mov rax, qword [rbp + 0x10]
mov dword [rax + 0x44], edx
mov rax, qword [0x004a2e00]
mov rax, qword [rax]
lea rdx, [rbp - 0x40]
lea rcx, [rdx + 0x34]
mov edx, 2
call rax
mov edx, eax
mov rax, qword [rbp + 0x10]
mov dword [rax + 0x4c], edx
mov rax, qword [0x004a2e00]
mov rax, qword [rax]
lea rdx, [rbp - 0x40]
lea rcx, [rdx + 0x36]
mov edx, 2
call rax
mov edx, eax
mov rax, qword [rbp + 0x10]
mov dword [rax + 0x50], edx
mov rax, qword [0x004a2e00]
mov rax, qword [rax]
lea rdx, [rbp - 0x40]
lea rcx, [rdx + 0x38]
mov edx, 2
call rax
mov edx, eax
mov rax, qword [rbp + 0x10]
mov dword [rax + 0x54], edx
mov rax, qword [0x004a2e00]
mov rax, qword [rax]
lea rdx, [rbp - 0x40]
lea rcx, [rdx + 0x3a]
mov edx, 2
call rax
mov edx, eax
mov rax, qword [rbp + 0x10]
mov dword [rax + 0x58], edx
mov rax, qword [0x004a2e00]
mov rax, qword [rax]
lea rdx, [rbp - 0x40]
lea rcx, [rdx + 0x3c]
mov edx, 2
call rax
mov edx, eax
mov rax, qword [rbp + 0x10]
mov dword [rax + 0x5c], edx
mov rax, qword [0x004a2e00]
mov rax, qword [rax]
lea rdx, [rbp - 0x40]
lea rcx, [rdx + 0x3e]
mov edx, 2
call rax
mov edx, eax
mov rax, qword [rbp + 0x10]
mov dword [rax + 0x60], edx
mov rax, qword [rbp + 0x10]
mov rax, qword [rax + 0x38]
test rax, rax
je 0x43b873
mov eax, dword [0x004a83bc]
test eax, eax
je 0x43b865
mov edx, 1
mov rcx, qword [rbp + 0x10]
call fcn.0041b1ca
jmp 0x43b873
mov edx, 1
mov rcx, qword [rbp + 0x10]
call fcn.0041b61c
mov eax, 1
add rsp, 0x60
pop rbp
ret