Function at 0x43f670
Capabilities:
Read file on windows
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x484332
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xa48
mov eax, dword [esp + 0xa58]
push ebx
xor ebx, ebx
push ebp
push ebx
push 0x80
push 3
push ebx
push 1
mov ebp, ecx
push 0x80000000
push eax
mov dword [esp + 0x38], ebp
call dword [sym.imp.kernel32.dll_CreateFileA]
cmp eax, ebx
mov dword [ebp + 4], eax
je 0x43fab3
lea ecx, [esp + 0xc]
push ebx
push ecx
lea edx, [esp + 0x1c]
push 4
push edx
push eax
call dword [sym.imp.kernel32.dll_ReadFile]
test eax, eax
je 0x43fab3
cmp dword [esp + 0xc], 4
jne 0x43fab3
mov eax, dword [esp + 0x14]
mov ecx, dword [ebp + 4]
push ebx
push ebx
push eax
push ecx
call dword [sym.imp.kernel32.dll_SetFilePointer]
cmp eax, 0xffffffff
je 0x43fab3
mov dx, word [0x489570]
push esi
push edi
mov ecx, 0x40
xor eax, eax
lea edi, [esp + 0x182]
mov word [esp + 0x180], dx
mov word [esp + 0x78], dx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 0x40
xor eax, eax
lea edi, [esp + 0x7a]
lea edx, [esp + 0x78]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [esp + 0x14]
push ebx
mov dword [esp + 0x24], edx
mov edx, dword [ebp + 4]
push eax
lea ecx, [esp + 0x290]
push 0x7d0
lea edi, [esp + 0x18c]
push ecx
push edx
mov byte [esp + 0x27], 1
xor esi, esi
mov dword [esp + 0x3c], edi
call dword [sym.imp.kernel32.dll_ReadFile]
mov ebp, dword [esp + 0x1c]
test eax, eax
je 0x43f96a
mov eax, dword [esp + 0x14]
cmp eax, ebx
jbe 0x43f96a
xor ecx, ecx
cmp eax, ebx
mov dword [esp + 0x18], ecx
jle 0x43f941
mov al, byte [esp + 0x13]
cmp al, bl
mov al, byte [esp + ecx + 0x288]
je 0x43f7da
cmp al, bl
jne 0x43f7b6
mov byte [edi + esi], bl
mov byte [esp + 0x13], bl
xor esi, esi
jmp 0x43f930
mov edx, esi
and edx, 0x80000001
jns 0x43f7c5
dec edx
or edx, 0xfffffffe
inc edx
neg edx
sbb dl, dl
and dl, 0xf6
add dl, 0xd1
xor dl, al
mov byte [edi + esi], dl
inc esi
jmp 0x43f930
mov byte [esp + esi + 0x3c], al
inc esi
cmp esi, 4
jne 0x43f930
mov eax, dword [esp + 0x20]
cmp byte [eax], bl
je 0x43f915
push eax
lea ecx, [esp + 0x60]
call fcn.0042f030
lea ecx, [esp + 0x5c]
mov dword [esp + 0xa60], ebx
call fcn.0042f780
push 8
call fcn.004246fe
add esp, 4
cmp eax, ebx
je 0x43f82b
mov ecx, dword [esp + 0x3c]
mov dword [eax], ebp
sub ecx, ebp
mov ebp, eax
mov dword [eax + 4], ecx
jmp 0x43f82d
xor ebp, ebp
lea ecx, [esp + 0x5c]
call fcn.004305a0
mov cl, byte [esp + 0x13]
mov edx, eax
mov byte [esp + 0x44], cl
mov edi, edx
or ecx, 0xffffffff
xor eax, eax
mov dword [esp + 0x48], ebx
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x50], ebx
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push edx
lea ecx, [esp + 0x4c]
call fcn.004204e0
lea edx, [esp + 0x44]
lea ecx, [esp + 0x64]
push edx
mov byte [esp + 0xa64], 1
call fcn.0043fe10
mov dword [esp + 0x74], ebx
mov edx, dword [esp + 0x24]
lea eax, [esp + 0x64]
lea ecx, [esp + 0x2c]
push eax
push ecx
lea ecx, [edx + 0x30]
mov byte [esp + 0xa68], 2
call fcn.004411e0
lea eax, [esp + 0x30]
lea ecx, [esp + 0x2c]
push eax
push ecx
lea ecx, [esp + 0x5c]
call fcn.0045c610
mov esi, dword [esp + 0x54]
push 1
lea ecx, [esp + 0x68]
mov byte [esp + 0xa64], 1
call fcn.00420250
mov dword [esi + 0x1c], ebp
mov eax, dword [esp + 0x48]
cmp eax, ebx
je 0x43f8ed
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x43f8e4
cmp al, 0xff
je 0x43f8e4
dec al
mov byte [ecx], al
jmp 0x43f8ed
push ecx
call fcn.004242d0
add esp, 4
lea ecx, [esp + 0x5c]
mov dword [esp + 0x48], ebx
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x50], ebx
mov dword [esp + 0xa60], 0xffffffff
call fcn.0042efa0
mov ecx, dword [esp + 0x18]
mov edi, dword [esp + 0x28]
mov edx, dword [esp + 0x20]
mov ebp, dword [esp + 0x3c]
mov eax, edi
mov byte [esp + 0x13], 1
xor esi, esi
mov dword [esp + 0x28], edx
mov dword [esp + 0x20], eax
mov edi, edx
mov eax, dword [esp + 0x14]
inc ecx
cmp ecx, eax
mov dword [esp + 0x18], ecx
jl 0x43f795
mov edx, dword [esp + 0x24]
lea eax, [esp + 0x14]
push ebx
push eax
mov eax, dword [edx + 4]
lea ecx, [esp + 0x290]
push 0x7d0
push ecx
push eax
call dword [sym.imp.kernel32.dll_ReadFile]
test eax, eax
jne 0x43f77b
mov eax, dword [esp + 0x20]
cmp byte [eax], bl
je 0x43faad
push eax
lea ecx, [esp + 0x40]
call fcn.0042f030
lea ecx, [esp + 0x3c]
mov dword [esp + 0xa60], 3
call fcn.0042f780
push 8
call fcn.004246fe
add esp, 4
cmp eax, ebx
je 0x43f9b3
mov ecx, dword [esp + 0x1c]
mov dword [eax], ebp
sub ecx, ebp
mov dword [esp + 0x18], eax
mov dword [eax + 4], ecx
jmp 0x43f9b7
mov dword [esp + 0x18], ebx
lea ecx, [esp + 0x3c]
call fcn.004305a0
mov cl, byte [esp + 0x13]
mov esi, eax
mov byte [esp + 0x2c], cl
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], ebx
push 1
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov ebp, ecx
lea ecx, [esp + 0x30]
push ebp
call fcn.004205a0
test al, al
je 0x43fa12
mov edi, dword [esp + 0x30]
mov ecx, ebp
mov edx, ecx
push ebp
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x30]
call fcn.00420580
lea eax, [esp + 0x2c]
lea ecx, [esp + 0x64]
push eax
mov byte [esp + 0xa64], 4
call fcn.0043fe10
mov dword [esp + 0x74], ebx
mov eax, dword [esp + 0x24]
lea ecx, [esp + 0x64]
lea edx, [esp + 0x54]
push ecx
push edx
lea ecx, [eax + 0x30]
mov byte [esp + 0xa68], 5
call fcn.004411e0
mov esi, dword [esp + 0x54]
push 1
lea ecx, [esp + 0x68]
mov byte [esp + 0xa64], 4
call fcn.00420250
mov ecx, dword [esp + 0x18]
mov dword [esi + 0x1c], ecx
mov eax, dword [esp + 0x30]
cmp eax, ebx
je 0x43fa8d
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x43fa84
cmp al, 0xff
je 0x43fa84
dec al
mov byte [ecx], al
jmp 0x43fa8d
push ecx
call fcn.004242d0
add esp, 4
lea ecx, [esp + 0x3c]
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], ebx
mov dword [esp + 0xa60], 0xffffffff
call fcn.0042efa0
pop edi
mov al, 1
pop esi
jmp 0x43fab5
xor al, al
mov ecx, dword [esp + 0xa50]
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0xa54
ret 4