Function at 0x79218d40
Capabilities:
Get file size
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x8c
mov ebx, dword [ebp + 8]
test byte [0x7922a138], 8
jne 0x79218fa0
test ebx, ebx
je 0x792192f3
mov edx, dword [ebx + 4]
mov ecx, dword [edx]
cmp ecx, dword [0x7922c13c]
je 0x79219000
mov esi, 1
movzx eax, byte [0x7922a138]
test esi, esi
je 0x79219031
cmp ecx, dword [0x7922c12c]
je 0x79218df2
cmp ecx, dword [0x7922c11c]
je 0x792190d5
test al, 1
jne 0x79219310
and eax, 8
xor edi, edi
test al, al
je 0x79218de6
mov dword [esp + 0x18], edi
mov dword [esp + 0x14], 0x7922bc63
mov dword [esp + 0x10], 0x57d
mov dword [esp + 0xc], str.CryptSIPGetSignedDataMsg
mov dword [esp + 8], 0x7922b851
mov dword [esp + 4], 0x7922a138
mov dword [esp], 3
call sym._ros_dbg_log
lea esp, [ebp - 0xc]
mov eax, edi
pop ebx
pop esi
pop edi
pop ebp
ret 0x14
mov edi, dword [0x7922c130]
cmp dword [edx + 4], edi
jne 0x79218d91
mov edi, dword [0x7922c134]
cmp dword [edx + 8], edi
jne 0x79218d91
mov edi, dword [0x7922c138]
cmp dword [edx + 0xc], edi
jne 0x79218d91
xor edi, edi
test al, 8
je 0x79218e71
mov eax, dword [ebp + 0x18]
mov dword [esp + 0x18], ebx
mov dword [esp + 0x14], str.__p__p__d__p__p__n
mov dword [esp + 0x28], eax
mov eax, dword [ebp + 0x14]
mov dword [esp + 0x10], 0x4ad
mov dword [esp + 0x24], eax
mov eax, dword [ebp + 0x10]
mov dword [esp + 0xc], str.WINTRUST_GetSignedMsgFromCabFile
mov dword [esp + 0x20], eax
mov eax, dword [ebp + 0xc]
mov dword [esp + 8], 0x7922b851
mov dword [esp + 0x1c], eax
mov dword [esp + 4], 0x7922a138
mov dword [esp], 3
call sym._ros_dbg_log
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov eax, dword [ebx + 8]
mov dword [esp], eax
call sym._SetFilePointer_16
sub esp, 0x10
mov esi, eax
mov dword [esp + 0xc], 2
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov eax, dword [ebx + 8]
mov dword [esp], eax
call sym._SetFilePointer_16
sub esp, 0x10
cmp eax, 0xffffffff
je 0x792194c0
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov eax, dword [ebx + 8]
mov dword [esp], eax
call sym._SetFilePointer_16
sub esp, 0x10
cmp eax, 0xffffffff
je 0x79219470
cmp esi, 0xffffffff
je 0x79219470
mov dword [ebp - 0x5c], eax
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov eax, dword [ebx + 8]
mov dword [esp], eax
call sym._SetFilePointer_16
mov edx, dword [ebp - 0x5c]
sub esp, 0x10
cmp eax, 0xffffffff
je 0x79219470
lea eax, [ebp - 0x54]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x50]
mov dword [esp + 8], 0x24
mov dword [esp + 4], eax
mov eax, dword [ebx + 8]
mov dword [ebp - 0x5c], edx
mov dword [esp], eax
call sym._ReadFile_20
sub esp, 0x14
test eax, eax
je 0x79219551
cmp dword [ebp - 0x54], 0x24
mov edx, dword [ebp - 0x5c]
jne 0x79219551
cmp dword [ebp - 0x50], 0x4643534d
je 0x792197a0
movzx eax, byte [0x7922a138]
test al, 4
jne 0x79219848
and eax, 8
jmp 0x79218daa
mov eax, dword [ebp + 0x18]
mov dword [esp + 0x18], ebx
mov dword [esp + 0x14], str.__p__p__d__p__p__n
mov dword [esp + 0x28], eax
mov eax, dword [ebp + 0x14]
mov dword [esp + 0x10], 0x564
mov dword [esp + 0x24], eax
mov eax, dword [ebp + 0x10]
mov dword [esp + 0xc], str.CryptSIPGetSignedDataMsg
mov dword [esp + 0x20], eax
mov eax, dword [ebp + 0xc]
mov dword [esp + 8], 0x7922b851
mov dword [esp + 0x1c], eax
mov dword [esp + 4], 0x7922a138
mov dword [esp], 3
call sym._ros_dbg_log
jmp 0x79218d5c
mov eax, dword [0x7922c140]
cmp dword [edx + 4], eax
jne 0x79218d75
mov eax, dword [0x7922c144]
cmp dword [edx + 8], eax
jne 0x79218d75
mov eax, dword [0x7922c148]
xor esi, esi
cmp dword [edx + 0xc], eax
jne 0x79218d75
jmp 0x79218d7a
test al, 8
jne 0x792191b0
mov esi, dword [ebx + 8]
lea eax, [esi - 1]
cmp eax, 0xfffffffd
ja 0x79219210
mov ecx, dword [ebp + 0x18]
test ecx, ecx
je 0x79219270
lea eax, [ebp - 0x50]
mov dword [ebp - 0x50], 0
mov dword [esp + 0xc], eax
mov eax, dword [ebp + 0x10]
mov dword [esp + 8], 0
mov dword [esp + 4], eax
mov eax, dword [sym.imp.imagehlp.dll_ImageGetCertificateData]
mov dword [esp], esi
mov dword [ebp - 0x5c], eax
call eax
sub esp, 0x10
mov edi, eax
call sym._GetLastError_0
cmp eax, 0x7a
je 0x792193c0
mov dword [ebp + 0x18], 0
cmp esi, dword [ebx + 8]
je 0x792190a7
mov dword [esp], esi
call sym._CloseHandle_4
sub esp, 4
call sym._GetProcessHeap_0
mov ecx, dword [ebp + 0x18]
mov dword [esp + 4], 0
mov dword [esp], eax
mov dword [esp + 8], ecx
call sym._HeapFree_12
movzx eax, byte [0x7922a138]
sub esp, 0xc
and eax, 8
jmp 0x79218daa
mov edi, dword [0x7922c120]
cmp dword [edx + 4], edi
jne 0x79218d9d
mov edi, dword [0x7922c124]
cmp dword [edx + 8], edi
jne 0x79218d9d
mov edi, dword [0x7922c128]
cmp dword [edx + 0xc], edi
jne 0x79218d9d
xor edi, edi
test al, 8
je 0x7921915c
mov eax, dword [ebp + 0x18]
mov dword [esp + 0x18], ebx
mov dword [esp + 0x14], str.__p__p__d__p__p__n
mov dword [esp + 0x28], eax
mov eax, dword [ebp + 0x14]
mov dword [esp + 0x10], 0x537
mov dword [esp + 0x24], eax
mov eax, dword [ebp + 0x10]
mov dword [esp + 0xc], str.WINTRUST_GetSignedMsgFromCatFile
mov dword [esp + 0x20], eax
mov eax, dword [ebp + 0xc]
mov dword [esp + 8], 0x7922b851
mov dword [esp + 0x1c], eax
mov dword [esp + 4], 0x7922a138
mov dword [esp], 3
call sym._ros_dbg_log
mov edx, dword [ebp + 0x18]
mov eax, dword [ebx + 8]
mov dword [esp + 4], 0
test edx, edx
mov dword [esp], eax
je 0x79219530
call sym._GetFileSize_8
mov esi, dword [ebp + 0x14]
sub esp, 8
cmp eax, dword [esi]
jbe 0x792194e0
mov dword [esi], eax
mov dword [esp], 0x7a
call sym._SetLastError_4
movzx eax, byte [0x7922a138]
sub esp, 4
and eax, 8
jmp 0x79218daa
mov eax, dword [ebp + 0x18]
mov dword [esp + 0x18], ebx
mov dword [esp + 0x14], str.__p__p__d__p__p__n
mov dword [esp + 0x28], eax
mov eax, dword [ebp + 0x14]
mov dword [esp + 0x10], 0x40c
mov dword [esp + 0x24], eax
mov eax, dword [ebp + 0x10]
mov dword [esp + 0xc], str.WINTRUST_GetSignedMsgFromPEFile
mov dword [esp + 0x20], eax
mov eax, dword [ebp + 0xc]
mov dword [esp + 8], 0x7922b851
mov dword [esp + 0x1c], eax
mov dword [esp + 4], 0x7922a138
mov dword [esp], 3
call sym._ros_dbg_log
jmp 0x79219039
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0xc], 0
mov dword [esp + 8], 3
mov dword [esp + 4], 0x80000000
mov eax, dword [ebx + 0xc]
mov dword [esp], eax
call sym._CreateFileW_28
sub esp, 0x1c
mov esi, eax
cmp eax, 0xffffffff
jne 0x79219048
lea esi, [esi]
movzx eax, byte [0x7922a138]
jmp 0x79218da5
lea eax, [ebp - 0x50]
mov dword [esp], esi
mov dword [esp + 8], eax
mov eax, dword [ebp + 0x10]
mov dword [esp + 4], eax
call dword [sym.imp.imagehlp.dll_ImageGetCertificateHeader]
sub esp, 0xc
mov edi, eax
test eax, eax
je 0x79219097
movzx eax, word [ebp - 0x4a]
lea ecx, [eax - 1]
cmp ecx, 1
jbe 0x79219740
xor edi, edi
test byte [0x7922a138], 4
je 0x79219097
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], str.unknown_certificate_type__d_n
mov dword [esp + 0x10], 0x428
mov dword [esp + 0xc], str.WINTRUST_GetSignedMsgFromPEFile
mov dword [esp + 8], 0x7922b851
mov dword [esp + 4], 0x7922a138
mov dword [esp], 2
call sym._ros_dbg_log
mov edi, dword [ebp + 0x18]
jmp 0x79219097
mov dword [esp], 0x57
xor edi, edi
call sym._SetLastError_4
sub esp, 4
jmp 0x79218de6
mov eax, edx
shr eax, 0x10
je 0x79219441
movzx eax, byte [edx + 0xf]
mov dword [esp + 0x2c], eax
movzx eax, byte [edx + 0xe]
mov dword [esp + 0x28], eax
movzx eax, byte [edx + 0xd]
mov dword [esp + 0x24], eax
movzx eax, byte [edx + 0xc]
mov dword [esp + 0x20], eax
movzx eax, byte [edx + 0xb]
mov dword [esp + 0x1c], eax
movzx eax, byte [edx + 0xa]
mov dword [esp + 0x18], eax
movzx eax, byte [edx + 9]
mov dword [esp + 0x14], eax
movzx eax, byte [edx + 8]
mov dword [esp + 0x10], eax
movzx eax, word [edx + 6]
mov dword [esp + 0xc], eax
movzx eax, word [edx + 4]
mov dword [esp + 8], eax
mov eax, dword [edx]
mov dword [esp], 0x7922b7d8
mov dword [esp + 4], eax
call sym._wine_dbg_sprintf
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], str.unimplemented_for_subject_type__s_n
mov dword [esp + 0x10], 0x578
mov dword [esp + 0xc], str.CryptSIPGetSignedDataMsg
mov dword [esp + 8], 0x7922b851
mov dword [esp + 4], 0x7922a138
mov dword [esp], 0
call sym._ros_dbg_log
jmp 0x79219260
mov edi, dword [ebp - 0x50]
call sym._GetProcessHeap_0
mov dword [esp + 4], 0
mov dword [esp + 8], edi
mov dword [esp], eax
call sym._HeapAlloc_12
sub esp, 0xc
mov ecx, eax
test eax, eax
je 0x79219460
lea eax, [ebp - 0x50]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x60], ecx
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x5c]
mov dword [esp], esi
call eax
mov ecx, dword [ebp - 0x60]
sub esp, 0x10
test eax, eax
mov edi, eax
je 0x79219439
mov eax, dword [ecx]
mov edx, dword [ebp + 0x14]
sub eax, 8
mov dword [ecx], eax
cmp eax, dword [edx]
jbe 0x79219750
mov dword [edx], eax
xor edi, edi
mov dword [esp], 0x7a
mov dword [ebp - 0x5c], ecx
call sym._SetLastError_4
mov ecx, dword [ebp - 0x5c]
sub esp, 4
mov dword [ebp + 0x18], ecx
jmp 0x79219097
mov dword [esp + 4], edx
mov dword [esp], 0x7922b7c7
call sym._wine_dbg_sprintf
jmp 0x7921937d
mov dword [ebp + 0x18], 0
xor edi, edi
jmp 0x79219097
test byte [0x7922a138], 8
je 0x79218de6
mov dword [esp + 0x14], str.seek_error_n
mov dword [esp + 0x10], 0x4bd
mov dword [esp + 0xc], str.WINTRUST_GetSignedMsgFromCabFile
mov dword [esp + 8], 0x7922b851
mov dword [esp + 4], 0x7922a138
mov dword [esp], 3
call sym._ros_dbg_log
movzx eax, byte [0x7922a138]
and eax, 8
jmp 0x79218daa
test byte [0x7922a138], 8
je 0x79218de6
mov dword [esp + 0x14], str.seek_error_n
mov dword [esp + 0x10], 0x4b5
jmp 0x7921948d
mov edi, dword [ebp + 0x14]
mov dword [esp + 8], eax
mov eax, dword [ebp + 0x18]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], edi
mov dword [esp + 4], eax
mov eax, dword [ebx + 8]
mov dword [esp], eax
call sym._ReadFile_20
sub esp, 0x14
mov edi, eax
test eax, eax
je 0x79219732
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x10001
movzx eax, byte [0x7922a138]
and eax, 8
jmp 0x79218daa
call sym._GetFileSize_8
mov edi, dword [ebp + 0x14]
sub esp, 8
mov dword [edi], eax
movzx eax, byte [0x7922a138]
mov edi, 1
and eax, 8
jmp 0x79218daa
test byte [0x7922a138], 8
je 0x79218de6
mov dword [esp + 0x14], str.reading_header_failed_n
mov dword [esp + 0x10], 0x4c5
jmp 0x7921948d
lea eax, [ebp - 0x54]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x50]
mov dword [esp + 8], 4
mov dword [esp + 4], eax
mov eax, dword [ebx + 8]
mov dword [ebp - 0x5c], edx
mov dword [esp], eax
call sym._ReadFile_20
sub esp, 0x14
test eax, eax
je 0x7921989d
cmp dword [ebp - 0x54], 4
mov edx, dword [ebp - 0x5c]
jne 0x7921989d
movzx eax, word [ebp - 0x50]
test eax, eax
je 0x79219910
cmp eax, 0xb
jle 0x79219920
cmp eax, 0xea60
jle 0x792195e0
test byte [0x7922a138], 4
jne 0x79219abc
lea eax, [ebp - 0x54]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x50]
mov dword [esp + 8], 0xc
mov dword [esp + 4], eax
mov eax, dword [ebx + 8]
mov dword [ebp - 0x5c], edx
mov dword [esp], eax
call sym._ReadFile_20
sub esp, 0x14
test eax, eax
je 0x792198ef
cmp dword [ebp - 0x54], 0xc
mov edx, dword [ebp - 0x5c]
jne 0x792198ef
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x5c], eax
test byte [0x7922a138], 8
jne 0x792199ab
mov ecx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x5c]
cmp edx, eax
jb 0x79219987
cmp ecx, edx
ja 0x79219987
add eax, ecx
cmp edx, eax
jb 0x79219987
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], esi
mov eax, dword [ebx + 8]
mov dword [ebp - 0x60], ecx
mov dword [esp], eax
call sym._SetFilePointer_16
mov eax, dword [ebp + 0x14]
mov ecx, dword [ebp - 0x60]
sub esp, 0x10
cmp dword [ebp + 0x18], 0
je 0x79219a49
cmp ecx, dword [eax]
ja 0x79219a42
mov eax, dword [ebp - 0x5c]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], eax
mov eax, dword [ebx + 8]
mov dword [ebp - 0x60], ecx
mov dword [esp], eax
call sym._SetFilePointer_16
mov ecx, dword [ebp - 0x60]
sub esp, 0x10
add eax, 1
je 0x79219a5f
lea eax, [ebp - 0x54]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], eax
mov eax, dword [ebp + 0x18]
mov dword [esp + 8], ecx
mov dword [esp + 4], eax
mov eax, dword [ebx + 8]
mov dword [ebp - 0x5c], ecx
mov dword [esp], eax
call sym._ReadFile_20
sub esp, 0x14
test eax, eax
je 0x79219703
mov ecx, dword [ebp - 0x5c]
cmp ecx, dword [ebp - 0x54]
je 0x79219afb
test byte [0x7922a138], 2
jne 0x79219a83
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], esi
mov eax, dword [ebx + 8]
mov dword [esp], eax
call sym._SetFilePointer_16
sub esp, 0x10
movzx eax, byte [0x7922a138]
jmp 0x79218f95
mov eax, dword [ebp - 0x50]
mov edx, dword [ebp + 0x14]
mov dword [edx], eax
jmp 0x79219097
mov dword [esp + 8], eax
lea eax, [ecx + 8]
mov dword [esp + 4], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x5c], ecx
mov dword [esp], eax
call sym._memmove
mov ecx, dword [ebp - 0x5c]
mov edx, dword [ebp + 0x14]
mov eax, dword [ecx]
mov dword [edx], eax
movzx eax, word [ecx + 6]
cmp ax, 1
je 0x792197e2
cmp ax, 2
je 0x792197d4
test byte [0x7922a138], 4
jne 0x7921985a
mov eax, dword [ebp + 0xc]
xor edi, edi
mov dword [eax], 0
jmp 0x79219439
cmp byte [ebp - 0x37], 1
ja 0x792197f6
je 0x792197f0
test byte [ebp - 0x32], 4
jne 0x79219573
test byte [0x7922a138], 8
je 0x79218de6
mov dword [esp + 0x14], str.no_header_present__not_signed_n
mov dword [esp + 0x10], 0x4df
jmp 0x7921948d
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x10001
jmp 0x79219439
mov eax, dword [ebp + 0xc]
mov dword [eax], 1
jmp 0x79219439
cmp byte [ebp - 0x38], 3
jbe 0x792197a8
movzx eax, byte [0x7922a138]
test al, 4
je 0x79218f95
mov dword [esp + 0x14], str.cabinet_format_version___1.3_n
mov dword [esp + 0x10], 0x4d6
mov dword [esp + 0xc], str.WINTRUST_GetSignedMsgFromCabFile
mov dword [esp + 8], 0x7922b851
mov dword [esp + 4], 0x7922a138
mov dword [esp], 2
call sym._ros_dbg_log
movzx eax, byte [0x7922a138]
and eax, 8
jmp 0x79218daa
mov dword [esp + 0x14], str.cabinet_signature_not_present_n
mov dword [esp + 0x10], 0x4cc
jmp 0x79219815
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], str.dont_know_what_to_do_for_encoding_type__d_n
mov dword [esp + 0x10], 0x451
mov dword [esp + 0xc], str.WINTRUST_GetSignedMsgFromPEFile
mov dword [esp + 8], 0x7922b851
mov dword [esp + 4], 0x7922a138
mov dword [esp], 2
mov dword [ebp - 0x5c], ecx
call sym._ros_dbg_log
mov ecx, dword [ebp - 0x5c]
jmp 0x79219790
movzx eax, byte [0x7922a138]
test al, 2
je 0x79218f95
mov dword [esp + 0x14], str.bunk_reserve_sizes__n
mov dword [esp + 0x10], 0x4e6
mov dword [esp + 0xc], str.WINTRUST_GetSignedMsgFromCabFile
mov dword [esp + 8], 0x7922b851
mov dword [esp + 4], 0x7922a138
mov dword [esp], 1
call sym._ros_dbg_log
movzx eax, byte [0x7922a138]
and eax, 8
jmp 0x79218daa
movzx eax, byte [0x7922a138]
test al, 2
je 0x79218f95
mov dword [esp + 0x14], str.couldnt_read_reserve_n
mov dword [esp + 0x10], 0x4fe
jmp 0x792198bc
test byte [0x7922a138], 8
jne 0x79219942
xor edi, edi
jmp 0x79218de6
test byte [0x7922a138], 8
je 0x79218de6
mov dword [esp + 0x14], str.header_resv_too_small__not_signed_n
mov dword [esp + 0x10], 0x4f2
jmp 0x7921948d
mov dword [esp + 0x14], str.no_header_resv__not_signed_n
xor edi, edi
mov dword [esp + 0x10], 0x4ed
mov dword [esp + 0xc], str.WINTRUST_GetSignedMsgFromCabFile
mov dword [esp + 8], 0x7922b851
mov dword [esp + 4], 0x7922a138
mov dword [esp], 3
call sym._ros_dbg_log
movzx eax, byte [0x7922a138]
and eax, 8
jmp 0x79218daa
movzx eax, byte [0x7922a138]
test al, 4
je 0x79218f95
mov dword [esp + 0x14], str.offset_beyond_file__not_attempting_to_read_n
mov dword [esp + 0x10], 0x50b
jmp 0x79219815
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], str.cert_offset:__d_n
mov dword [esp + 0x10], 0x503
mov dword [esp + 0xc], str.WINTRUST_GetSignedMsgFromCabFile
mov dword [esp + 8], 0x7922b851
mov dword [esp + 4], 0x7922a138
mov dword [esp], 3
mov dword [ebp - 0x60], edx
call sym._ros_dbg_log
test byte [0x7922a138], 8
mov ecx, dword [ebp - 0x48]
mov edx, dword [ebp - 0x60]
je 0x7921963a
mov dword [esp + 0x18], ecx
mov dword [esp + 0x14], str.cert_size:__d_n
mov dword [esp + 0x10], 0x505
mov dword [esp + 0xc], str.WINTRUST_GetSignedMsgFromCabFile
mov dword [esp + 8], 0x7922b851
mov dword [esp + 4], 0x7922a138
mov dword [esp], 3
mov dword [ebp - 0x64], edx
mov dword [ebp - 0x60], ecx
call sym._ros_dbg_log
mov edx, dword [ebp - 0x64]
mov ecx, dword [ebp - 0x60]
jmp 0x7921963a
mov dword [eax], ecx
jmp 0x7921918a
mov dword [eax], ecx
movzx eax, byte [0x7922a138]
mov edi, 1
and eax, 8
jmp 0x79218daa
movzx eax, byte [0x7922a138]
test al, 2
je 0x79218f95
mov dword [esp + 0x14], str.couldnt_seek_to_cert_location_n
mov dword [esp + 0x10], 0x51d
jmp 0x792198bc
mov dword [esp + 0x14], str.couldnt_read_cert_n
mov dword [esp + 0x10], 0x523
mov dword [esp + 0xc], str.WINTRUST_GetSignedMsgFromCabFile
mov dword [esp + 8], 0x7922b851
mov dword [esp + 4], 0x7922a138
mov dword [esp], 1
call sym._ros_dbg_log
jmp 0x79219710
mov dword [esp + 0x14], str.WARNING__header_reserved_space___60000_n
mov dword [esp + 0x10], 0x4f8
mov dword [esp + 0xc], str.WINTRUST_GetSignedMsgFromCabFile
mov dword [esp + 8], 0x7922b851
mov dword [esp + 4], 0x7922a138
mov dword [esp], 2
mov dword [ebp - 0x5c], edx
call sym._ros_dbg_log
mov edx, dword [ebp - 0x5c]
jmp 0x792195e0
mov eax, dword [ebp + 0xc]
mov edi, 1
mov dword [eax], 0x10001
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], esi
mov eax, dword [ebx + 8]
mov dword [esp], eax
call sym._SetFilePointer_16
movzx eax, byte [0x7922a138]
sub esp, 0x10
and eax, 8
jmp 0x79218daa