Function at 0x43f350
Capabilities:
Read file on windows
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x484002
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xa48
mov eax, dword [esp + 0xa58]
push ebx
xor ebx, ebx
push ebp
push ebx
push 0x80
push 3
push ebx
push 1
mov ebp, ecx
push 0x80000000
push eax
mov dword [esp + 0x38], ebp
call dword [sym.imp.KERNEL32.dll_CreateFileA]
cmp eax, ebx
mov dword [ebp + 4], eax
je 0x43f793
lea ecx, [esp + 0xc]
push ebx
push ecx
lea edx, [esp + 0x1c]
push 4
push edx
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x43f793
cmp dword [esp + 0xc], 4
jne 0x43f793
mov eax, dword [esp + 0x14]
mov ecx, dword [ebp + 4]
push ebx
push ebx
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
cmp eax, 0xffffffff
je 0x43f793
mov dx, word [0x489570]
push esi
push edi
mov ecx, 0x40
xor eax, eax
lea edi, [esp + 0x182]
mov word [esp + 0x180], dx
mov word [esp + 0x78], dx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 0x40
xor eax, eax
lea edi, [esp + 0x7a]
lea edx, [esp + 0x78]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [esp + 0x14]
push ebx
mov dword [esp + 0x24], edx
mov edx, dword [ebp + 4]
push eax
lea ecx, [esp + 0x290]
push 0x7d0
lea edi, [esp + 0x18c]
push ecx
push edx
mov byte [esp + 0x27], 1
xor esi, esi
mov dword [esp + 0x3c], edi
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov ebp, dword [esp + 0x1c]
test eax, eax
je 0x43f64a
mov eax, dword [esp + 0x14]
cmp eax, ebx
jbe 0x43f64a
xor ecx, ecx
cmp eax, ebx
mov dword [esp + 0x18], ecx
jle 0x43f621
mov al, byte [esp + 0x13]
cmp al, bl
mov al, byte [esp + ecx + 0x288]
je 0x43f4ba
cmp al, bl
jne 0x43f496
mov byte [edi + esi], bl
mov byte [esp + 0x13], bl
xor esi, esi
jmp 0x43f610
mov edx, esi
and edx, 0x80000001
jns 0x43f4a5
dec edx
or edx, 0xfffffffe
inc edx
neg edx
sbb dl, dl
and dl, 0xf6
add dl, 0xd1
xor dl, al
mov byte [edi + esi], dl
inc esi
jmp 0x43f610
mov byte [esp + esi + 0x3c], al
inc esi
cmp esi, 4
jne 0x43f610
mov eax, dword [esp + 0x20]
cmp byte [eax], bl
je 0x43f5f5
push eax
lea ecx, [esp + 0x60]
call fcn.0042ee40
lea ecx, [esp + 0x5c]
mov dword [esp + 0xa60], ebx
call fcn.0042f590
push 8
call fcn.004244ce
add esp, 4
cmp eax, ebx
je 0x43f50b
mov ecx, dword [esp + 0x3c]
mov dword [eax], ebp
sub ecx, ebp
mov ebp, eax
mov dword [eax + 4], ecx
jmp 0x43f50d
xor ebp, ebp
lea ecx, [esp + 0x5c]
call fcn.004303b0
mov cl, byte [esp + 0x13]
mov edx, eax
mov byte [esp + 0x44], cl
mov edi, edx
or ecx, 0xffffffff
xor eax, eax
mov dword [esp + 0x48], ebx
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x50], ebx
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push edx
lea ecx, [esp + 0x4c]
call fcn.004202b0
lea edx, [esp + 0x44]
lea ecx, [esp + 0x64]
push edx
mov byte [esp + 0xa64], 1
call fcn.0043faf0
mov dword [esp + 0x74], ebx
mov edx, dword [esp + 0x24]
lea eax, [esp + 0x64]
lea ecx, [esp + 0x2c]
push eax
push ecx
lea ecx, [edx + 0x30]
mov byte [esp + 0xa68], 2
call fcn.00440ec0
lea eax, [esp + 0x30]
lea ecx, [esp + 0x2c]
push eax
push ecx
lea ecx, [esp + 0x5c]
call fcn.004499c0
mov esi, dword [esp + 0x54]
push 1
lea ecx, [esp + 0x68]
mov byte [esp + 0xa64], 1
call fcn.00420020
mov dword [esi + 0x1c], ebp
mov eax, dword [esp + 0x48]
cmp eax, ebx
je 0x43f5cd
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x43f5c4
cmp al, 0xff
je 0x43f5c4
dec al
mov byte [ecx], al
jmp 0x43f5cd
push ecx
call fcn.004240a0
add esp, 4
lea ecx, [esp + 0x5c]
mov dword [esp + 0x48], ebx
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x50], ebx
mov dword [esp + 0xa60], 0xffffffff
call fcn.0042edb0
mov ecx, dword [esp + 0x18]
mov edi, dword [esp + 0x28]
mov edx, dword [esp + 0x20]
mov ebp, dword [esp + 0x3c]
mov eax, edi
mov byte [esp + 0x13], 1
xor esi, esi
mov dword [esp + 0x28], edx
mov dword [esp + 0x20], eax
mov edi, edx
mov eax, dword [esp + 0x14]
inc ecx
cmp ecx, eax
mov dword [esp + 0x18], ecx
jl 0x43f475
mov edx, dword [esp + 0x24]
lea eax, [esp + 0x14]
push ebx
push eax
mov eax, dword [edx + 4]
lea ecx, [esp + 0x290]
push 0x7d0
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x43f45b
mov eax, dword [esp + 0x20]
cmp byte [eax], bl
je 0x43f78d
push eax
lea ecx, [esp + 0x40]
call fcn.0042ee40
lea ecx, [esp + 0x3c]
mov dword [esp + 0xa60], 3
call fcn.0042f590
push 8
call fcn.004244ce
add esp, 4
cmp eax, ebx
je 0x43f693
mov ecx, dword [esp + 0x1c]
mov dword [eax], ebp
sub ecx, ebp
mov dword [esp + 0x18], eax
mov dword [eax + 4], ecx
jmp 0x43f697
mov dword [esp + 0x18], ebx
lea ecx, [esp + 0x3c]
call fcn.004303b0
mov cl, byte [esp + 0x13]
mov esi, eax
mov byte [esp + 0x2c], cl
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], ebx
push 1
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov ebp, ecx
lea ecx, [esp + 0x30]
push ebp
call fcn.00420370
test al, al
je 0x43f6f2
mov edi, dword [esp + 0x30]
mov ecx, ebp
mov edx, ecx
push ebp
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x30]
call fcn.00420350
lea eax, [esp + 0x2c]
lea ecx, [esp + 0x64]
push eax
mov byte [esp + 0xa64], 4
call fcn.0043faf0
mov dword [esp + 0x74], ebx
mov eax, dword [esp + 0x24]
lea ecx, [esp + 0x64]
lea edx, [esp + 0x54]
push ecx
push edx
lea ecx, [eax + 0x30]
mov byte [esp + 0xa68], 5
call fcn.00440ec0
mov esi, dword [esp + 0x54]
push 1
lea ecx, [esp + 0x68]
mov byte [esp + 0xa64], 4
call fcn.00420020
mov ecx, dword [esp + 0x18]
mov dword [esi + 0x1c], ecx
mov eax, dword [esp + 0x30]
cmp eax, ebx
je 0x43f76d
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x43f764
cmp al, 0xff
je 0x43f764
dec al
mov byte [ecx], al
jmp 0x43f76d
push ecx
call fcn.004240a0
add esp, 4
lea ecx, [esp + 0x3c]
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], ebx
mov dword [esp + 0xa60], 0xffffffff
call fcn.0042edb0
pop edi
mov al, 1
pop esi
jmp 0x43f795
xor al, al
mov ecx, dword [esp + 0xa50]
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0xa54
ret 4