Function at 0x434470
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x483190
mov eax, dword fs:[0]
push eax
mov eax, 0x1034
call fcn.0047cde0
mov eax, dword [0x496004]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x1038], eax
mov dword [ebp - 0x102c], 0xffffffff
mov dword [eax + 4], 0
mov eax, dword [eax]
mov byte [eax], 0
push ecx
push 3
push 1
push SysReAllocStringLen
push ecx
lea ecx, [ebp - 0x102c]
mov dword [ebp - 4], 0
call fcn.0040feb0
mov esi, dword [ebp - 0x102c]
test al, al
je 0x4347ab
xor eax, eax
mov dword [ebp - 0x1020], eax
cmp byte [str.___Install__UTF_8_], al
je 0x434510
nop dword [eax]
inc eax
cmp byte [eax + str.___Install__UTF_8_], 0
jne 0x434500
mov dword [ebp - 0x1020], eax
xor eax, eax
mov dword [ebp - 0x101c], eax
cmp byte [str.___InstallEnd__], al
je 0x434530
inc eax
cmp byte [eax + str.___InstallEnd__], 0
jne 0x434520
mov dword [ebp - 0x101c], eax
xorps xmm0, xmm0
xor eax, eax
movlpd qword [ebp - 0x1040], xmm0
mov ecx, dword [ebp - 0x103c]
mov dword [ebp - 0x1024], ecx
mov ecx, dword [ebp - 0x1040]
mov dword [ebp - 0x1018], eax
mov byte [ebp - 0x1011], al
mov dword [ebp - 0x1028], ecx
mov edi, 0x1000
mov dword [ebp - 0x1034], 0
lea ebx, [ebp - 0x1010]
sub edi, eax
add ebx, eax
nop word [eax + eax]
cmp edi, 0x400000
mov dword [ebp - 0x1030], 0
mov ecx, 0x400000
mov eax, edi
push 0
cmova eax, ecx
lea ecx, [ebp - 0x1030]
push ecx
push eax
push ebx
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov edx, dword [ebp - 0x1034]
mov ecx, dword [ebp - 0x1030]
add edx, ecx
mov dword [ebp - 0x1034], edx
test eax, eax
je 0x4347ab
test ecx, ecx
je 0x4345d2
add ebx, ecx
sub edi, ecx
jne 0x434580
test edx, edx
je 0x434798
mov edi, dword [ebp - 0x1018]
add edi, edx
xor ebx, ebx
mov dword [ebp - 0x1018], edi
nop word [eax + eax]
cmp byte [ebp - 0x1011], 0
mov eax, edi
je 0x4346b4
sub eax, dword [ebp - 0x101c]
cmp ebx, eax
ja 0x434747
mov edi, dword [ebp - 0x101c]
lea ecx, [ebp - 0x1010]
add ecx, ebx
mov edx, str.___InstallEnd__
sub edi, 4
jb 0x434636
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x43463f
add ecx, 4
add edx, 4
sub edi, 4
jae 0x434625
cmp edi, 0xfffffffc
je 0x434798
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x43467c
cmp edi, 0xfffffffd
je 0x434798
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x43467c
cmp edi, 0xfffffffe
je 0x434798
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x43467c
cmp edi, 0xffffffff
je 0x434798
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
je 0x434798
mov al, byte [ebp + ebx - 0x1010]
mov byte [ebp - 0x103c], al
test al, al
je 0x4347ab
push dword [ebp - 0x103c]
mov ecx, dword [ebp - 0x1038]
call fcn.00409470
mov edi, dword [ebp - 0x1018]
mov eax, 1
add ebx, eax
jmp 0x4345f0
mov ecx, dword [ebp - 0x1020]
sub eax, ecx
cmp ebx, eax
ja 0x434747
lea edx, [ebp - 0x1010]
mov edi, ecx
add edx, ebx
mov eax, str.___Install__UTF_8_
sub edi, 4
jb 0x4346e9
mov ecx, dword [edx]
cmp ecx, dword [eax]
jne 0x4346ee
add edx, 4
add eax, 4
sub edi, 4
jae 0x4346d8
cmp edi, 0xfffffffc
je 0x43472d
mov cl, byte [edx]
cmp cl, byte [eax]
jne 0x43471b
cmp edi, 0xfffffffd
je 0x43472d
mov cl, byte [edx + 1]
cmp cl, byte [eax + 1]
jne 0x43471b
cmp edi, 0xfffffffe
je 0x43472d
mov cl, byte [edx + 2]
cmp cl, byte [eax + 2]
jne 0x43471b
cmp edi, 0xffffffff
je 0x43472d
mov cl, byte [edx + 3]
cmp cl, byte [eax + 3]
je 0x43472d
mov edi, dword [ebp - 0x1018]
mov eax, 1
add ebx, eax
jmp 0x4345f0
mov eax, dword [ebp - 0x1020]
add ebx, eax
mov edi, dword [ebp - 0x1018]
mov byte [ebp - 0x1011], 1
jmp 0x4345f0
sub edi, ebx
lea eax, [ebp - 0x1010]
add dword [ebp - 0x1028], ebx
push edi
adc dword [ebp - 0x1024], 0
add eax, ebx
push eax
lea eax, [ebp - 0x1010]
mov dword [ebp - 0x1018], edi
push eax
call fcn.004419e0
mov ecx, dword [ebp - 0x1024]
add esp, 0xc
test ecx, ecx
ja 0x43479c
jb 0x43478d
cmp dword [ebp - 0x1028], 0x100000
ja 0x43479c
mov eax, dword [ebp - 0x1018]
jmp 0x434561
mov bl, 1
jmp 0x4347ad
mov eax, dword [ebp - 0x1038]
cmp dword [eax + 4], 0
sete bl
jmp 0x4347ad
xor bl, bl
mov dword [ebp - 4], 0xffffffff
cmp esi, 0xffffffff
je 0x4347c0
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov al, bl
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00436a89
mov esp, ebp
pop ebp
ret 8