Function at 0x43d73c
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x457bf1
mov eax, dword fs:[0]
push eax
sub esp, 0x490
mov eax, dword [0x47c084]
xor eax, esp
mov dword [esp + 0x488], eax
push ebx
push esi
push edi
mov eax, dword [0x47c084]
xor eax, esp
push eax
lea eax, [esp + 0x4a0]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov ebx, ecx
mov dword [esp + 0x3c], eax
mov eax, dword [ebx + 0x14]
cmp eax, 8
jb 0x43d78f
mov ecx, dword [ebx]
test ecx, ecx
je 0x43d7a0
cmp eax, 8
jb 0x43d79c
mov eax, dword [ebx]
jmp 0x43d7a5
mov eax, ebx
jmp 0x43d7a5
mov eax, dword [0x47d8a0]
push eax
lea eax, [esp + 0x60]
call fcn.00405b7c
and dword [esp + 0x4a8], 0
push 0xfde9
lea ecx, [esp + 0x60]
lea edx, [esp + 0x7c]
call fcn.0044c516
pop ecx
mov byte [esp + 0x4a8], 1
cmp dword [eax + 0x14], 0x10
jb 0x43d7da
mov eax, dword [eax]
push eax
push dword [0x47d228]
push dword [0x47d224]
push 0
call fcn.0043ec4f
add esp, 0x10
push 1
xor edi, edi
lea esi, [esp + 0x7c]
call fcn.00405711
or dword [esp + 0x4a8], 0xffffffff
push 1
lea esi, [esp + 0x60]
call fcn.00405a55
mov eax, dword [0x47d8a8]
push eax
mov esi, eax
call fcn.004132a1
pop ecx
push esi
push 6
mov edi, eax
pop eax
mov ecx, ebx
call fcn.004060d8
test eax, eax
jne 0x43d886
push 0xffffffffffffffff
push 6
push ebx
lea esi, [esp + 0x4c]
call fcn.0040933d
mov dword [esp + 0x4a8], 2
cmp dword [esp + 0x50], 0
je 0x43d870
cmp dword [esp + 0x54], 8
mov eax, dword [esp + 0x40]
jae 0x43d85d
mov eax, esi
mov ecx, dword [esp + 0x3c]
push eax
call fcn.0043bf68
pop ecx
test al, al
je 0x43d870
mov bl, 1
jmp 0x43d872
xor bl, bl
push 1
xor edi, edi
lea esi, [esp + 0x44]
call fcn.00405a55
mov al, bl
jmp 0x43ddf8
cmp dword [ebx + 0x14], 8
jb 0x43d88e
mov ebx, dword [ebx]
push 0x80
push 3
pop esi
push esi
push 1
push SysReAllocString
push ebx
call fcn.004407fb
mov dword [esp + 0x30], eax
mov dword [esp + 0x4a8], esi
fld qword [0x476908]
fstp qword [esp + 0x24]
fld qword [esp + 0x24]
fsub qword [0x476900]
fstp qword [esp + 0x24]
fld qword [esp + 0x24]
fsub qword [0x4768f8]
fadd qword [esp + 0x24]
fadd qword [esp + 0x24]
fstp qword [esp + 0x24]
fld qword [esp + 0x24]
fld qword [esp + 0x24]
fdiv qword [0x4768f0]
fsubp st(1)
fld qword [esp + 0x24]
fdiv qword [0x4768e8]
fsubp st(1)
fsub qword [esp + 0x24]
fadd qword [esp + 0x24]
fstp qword [esp + 0x24]
fld qword [esp + 0x24]
fadd qword [0x4768e0]
fadd qword [esp + 0x24]
fadd qword [esp + 0x24]
fsub qword [esp + 0x24]
fld qword [esp + 0x24]
fmul qword [0x4768d8]
fsubp st(1)
fadd qword [0x4768d0]
fsub qword [esp + 0x24]
fsub qword [0x4768c8]
fstp qword [esp + 0x24]
fld qword [esp + 0x24]
fadd qword [esp + 0x24]
fstp qword [esp + 0x24]
fld qword [esp + 0x24]
fsub qword [0x4768c0]
fsub qword [esp + 0x24]
fld qword [esp + 0x24]
fmul qword [0x4768b8]
fmul qword [0x4768b0]
fdiv qword [0x4768a8]
faddp st(1)
fadd qword [esp + 0x24]
fadd qword [esp + 0x24]
fld qword [esp + 0x24]
fmul qword [0x4768a0]
fmul qword [esp + 0x24]
faddp st(1)
fstp qword [esp + 0x24]
fld qword [esp + 0x24]
fmul qword [0x476898]
fld qword [esp + 0x24]
fsub qword [0x476890]
faddp st(1)
fadd qword [esp + 0x24]
fld qword [esp + 0x24]
fmul qword [esp + 0x24]
cmp dword [esp + 0x30], 0xffffffff
faddp st(1)
fadd qword [0x476888]
fstp qword [esp + 0x24]
jne 0x43d9f3
call fcn.004408a1
push eax
push dword [0x47d230]
push dword [reloc.winhttp.dll_WinHttpCrackUrl]
push 1
call fcn.0043ec4f
or dword [esp + 0x4b8], 0xffffffff
add esp, 0x10
call fcn.0043f31e
push 0xffffffffffffffff
call dword [eax + reloc.winhttp.dll_WinHttpCrackUrl]
xor al, al
jmp 0x43ddf8
push dword [esp + 0x30]
call fcn.0043f1a7
fld qword [0x476990]
xor ecx, ecx
mov dword [esp + 0x34], ecx
fstp qword [esp + 0x14]
fld qword [esp + 0x14]
mov dword [esp + 0x24], eax
fadd qword [esp + 0x14]
push 0x77
mov dword [esp + 0x3c], ecx
mov ebx, 0x400
fstp qword [esp + 0x18]
mov dword [esp + 0x24], 0x54
mov dword [esp + 0x18], 0x46
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x18]
imul eax, edx
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x18]
imul eax, edx
mov edx, dword [esp + 0x18]
imul eax, eax, 0x19
mov esi, dword [esp + 0x24]
imul edx, esi
imul edx, edx, 0x13
sub eax, edx
add eax, dword [esp + 0x24]
pop edx
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x20]
sub edx, eax
mov eax, dword [esp + 0x14]
sub edx, eax
add edx, dword [esp + 0x20]
push 0x3a
add edx, dword [esp + 0x24]
pop esi
mov dword [esp + 0x20], edx
mov eax, dword [esp + 0x14]
cdq
idiv esi
mov esi, dword [sym.imp.KERNEL32.dll_ReadFile]
push ecx
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x24]
mov edx, dword [esp + 0x24]
imul eax, edx
jmp 0x43dd73
mov edi, dword [esp + 0x34]
test edi, edi
je 0x43dd93
lea eax, [esp + 0x94]
push eax
mov eax, dword [esp + 0x40]
call fcn.00404adb
fld qword [0x476998]
fst qword [esp + 0x14]
fld qword [esp + 0x14]
fld qword [esp + 0x14]
fmul qword [0x476988]
fsubp st(1)
fsub qword [esp + 0x14]
fadd qword [esp + 0x14]
fstp qword [esp + 0x14]
fld qword [esp + 0x14]
fadd qword [0x476980]
fld qword [esp + 0x14]
fdivrp st(2)
fsubrp st(1)
fstp qword [esp + 0x14]
fld qword [esp + 0x14]
fldz
fsub st(1), st(0)
fld qword [esp + 0x14]
fsubp st(2)
fld qword [esp + 0x14]
faddp st(2)
fxch st(1)
fadd qword [0x476978]
fsub qword [esp + 0x14]
fstp qword [esp + 0x14]
fld qword [esp + 0x14]
fld qword [0x476970]
fadd st(1), st(0)
fxch st(1)
fstp qword [esp + 0x14]
fsubr qword [esp + 0x14]
fadd qword [esp + 0x14]
fld qword [0x4768e0]
fadd st(1), st(0)
fld qword [esp + 0x14]
faddp st(2)
fxch st(1)
fstp qword [esp + 0x14]
fld qword [esp + 0x14]
fsub qword [esp + 0x14]
fstp qword [esp + 0x14]
fld qword [esp + 0x14]
fld qword [0x476888]
fdiv st(1), st(0)
fld qword [esp + 0x14]
faddp st(2)
fld qword [esp + 0x14]
fsubp st(2)
fxch st(1)
fadd qword [0x476968]
fsub qword [esp + 0x14]
fsub qword [0x476960]
fadd qword [esp + 0x14]
fadd qword [0x476958]
fsub qword [esp + 0x14]
fstp qword [esp + 0x14]
fld qword [esp + 0x14]
fsub qword [esp + 0x14]
fstp qword [esp + 0x14]
fld qword [esp + 0x14]
fmul qword [0x476950]
fadd qword [esp + 0x14]
fsub qword [esp + 0x14]
fstp qword [esp + 0x14]
fld qword [esp + 0x14]
fmul qword [esp + 0x14]
fsub st(3)
fld qword [esp + 0x14]
fdiv qword [0x476948]
fsubp st(1)
fld qword [esp + 0x14]
fmul qword [0x476910]
mov eax, dword [esp + 0x34]
add dword [esp + 0x38], eax
fsubp st(1)
fstp qword [esp + 0x14]
fld qword [0x476908]
fstp qword [esp + 0x14]
fld qword [esp + 0x14]
fsub qword [0x476900]
fstp qword [esp + 0x14]
fld qword [esp + 0x14]
fsub qword [0x4768f8]
fadd qword [esp + 0x14]
fadd qword [esp + 0x14]
fstp qword [esp + 0x14]
fld qword [esp + 0x14]
fld qword [esp + 0x14]
fdiv qword [0x4768f0]
fsubp st(1)
fld qword [esp + 0x14]
fdiv qword [0x4768e8]
fsubp st(1)
fsub qword [esp + 0x14]
fadd qword [esp + 0x14]
fstp qword [esp + 0x14]
fld qword [esp + 0x14]
faddp st(2)
fld qword [esp + 0x14]
faddp st(2)
fld qword [esp + 0x14]
faddp st(2)
fld qword [esp + 0x14]
fsubp st(2)
fld qword [esp + 0x14]
fmul qword [0x4768d8]
fsubp st(2)
fxch st(1)
fadd qword [0x4768d0]
fsub qword [esp + 0x14]
fsubrp st(2)
fxch st(1)
fstp qword [esp + 0x14]
fld qword [esp + 0x14]
fadd qword [esp + 0x14]
fstp qword [esp + 0x14]
fld qword [esp + 0x14]
fsub qword [0x4768c0]
fsub qword [esp + 0x14]
fld qword [esp + 0x14]
fmul qword [0x4768b8]
fmul qword [0x4768b0]
fdiv qword [0x4768a8]
faddp st(1)
fadd qword [esp + 0x14]
fadd qword [esp + 0x14]
fld qword [esp + 0x14]
fmul qword [0x4768a0]
fmul qword [esp + 0x14]
faddp st(1)
fstp qword [esp + 0x14]
fld qword [esp + 0x14]
fmul qword [0x476898]
fld qword [esp + 0x14]
fsub qword [0x476890]
faddp st(1)
fadd qword [esp + 0x14]
fld qword [esp + 0x14]
fmul qword [esp + 0x14]
and dword [esp + 0x34], 0
faddp st(1)
faddp st(1)
fstp qword [esp + 0x14]
mov dword [esp + 0x20], 0x54
mov dword [esp + 0x14], 0x46
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x14]
imul eax, ecx
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x14]
imul eax, ecx
mov ecx, dword [esp + 0x14]
imul eax, eax, 0x19
mov edx, dword [esp + 0x20]
imul ecx, edx
imul ecx, ecx, 0x13
sub eax, ecx
add eax, dword [esp + 0x20]
push 0x77
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x24]
pop ecx
sub ecx, eax
mov eax, dword [esp + 0x14]
sub ecx, eax
add ecx, dword [esp + 0x20]
push 0x3a
add ecx, dword [esp + 0x24]
mov dword [esp + 0x24], ecx
mov eax, dword [esp + 0x18]
cdq
pop ecx
idiv ecx
push 0
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x24]
imul eax, ecx
mov dword [esp + 0x24], eax
lea eax, [esp + 0x38]
push eax
push ebx
lea eax, [esp + 0xa0]
push eax
push dword [esp + 0x40]
call esi
test eax, eax
jne 0x43daaa
mov eax, dword [esp + 0x24]
cmp dword [esp + 0x38], eax
je 0x43dddb
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push dword [0x47d234]
push dword [reloc.winhttp.dll_WinHttpCrackUrl]
push 1
call fcn.0043ec4f
or dword [esp + 0x4b8], 0xffffffff
add esp, 0x10
cmp dword [esp + 0x30], 0
je 0x43d9ec
call fcn.0043f31e
push dword [esp + 0x30]
jmp 0x43d9e9
or dword [esp + 0x4a8], 0xffffffff
cmp dword [esp + 0x30], 0
je 0x43ddf6
call fcn.0043f31e
push dword [esp + 0x30]
call dword [eax + reloc.winhttp.dll_WinHttpCrackUrl]
mov al, 1
mov ecx, dword [esp + 0x4a0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x488]
xor ecx, esp
call fcn.00411a01
mov esp, ebp
pop ebp
ret