Function at 0x53fd00
Capabilities:
Delete file
Get system information on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x60ffbb
mov eax, dword fs:[0]
push eax
sub esp, 0xb0
push ebx
push esi
push edi
mov eax, dword [0x6b000c]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, edx
mov dword [ebp - 0x18], ebx
mov edi, ecx
lea eax, [ebp - 0xbc]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov esi, dword [ebp + 8]
test esi, esi
je 0x53ff9a
cmp dword [esi + 0x18], 0
jl 0x53ff9a
jg 0x53fd60
cmp dword [esi + 0x14], 0
jbe 0x53ff9a
cmp dword [esi + 0x120], 0
je 0x53ff9a
push 0
push 0x80
push 2
push 0
push 3
push 0x40000000
push dword [ebx]
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ebx, eax
mov dword [ebp + 8], ebx
cmp ebx, 0xffffffff
je 0x53ff9a
mov ecx, dword [esi + 0xc]
sub esp, 0xc
add ecx, dword [esi + 4]
mov eax, dword [esi + 0x10]
adc eax, dword [esi + 8]
push dword [esi + 0x18]
push dword [esi + 0x14]
push dword [ebp + 0xc]
push eax
push ecx
push edi
lea ecx, [ebp - 0x98]
call fcn.00413c10
mov dword [ebp - 4], 0
mov ecx, dword [ebp - 0x60]
cmp ecx, 0x3ee
je 0x53ff40
cmp ecx, 6
je 0x53ff40
cmp ecx, 0x15
je 0x53ff40
mov edi, dword [esi + 0x14]
xor edx, edx
mov eax, 0x1900000
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x10], eax
cmp dword [esi + 0x18], edx
jl 0x53ff15
jg 0x53fe06
cmp edi, eax
jbe 0x53ff15
mov ebx, dword [ebp + 0x10]
nop dword [eax]
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x24], eax
cmp ecx, 0x3ee
je 0x53ff43
cmp ecx, 6
je 0x53ff43
cmp ecx, 0x15
je 0x53ff43
mov eax, dword [ebp + 0x14]
test eax, eax
je 0x53fe62
cmp dword [eax], 0
jne 0x53fefc
test ebx, ebx
je 0x53fea9
mov ecx, dword [ebp - 0x10]
call fcn.005de130
mov edx, dword [esi + 0x18]
mov ecx, edi
cvtsd2ss xmm0, xmm0
mulss xmm0, dword [0x664e60]
movss dword [ebp - 0x1c], xmm0
call fcn.005de130
movss xmm1, dword [ebp - 0x1c]
cvtsd2ss xmm0, xmm0
push 0
divss xmm1, xmm0
cvttss2si eax, xmm1
push eax
push 0x40d
push ebx
call dword [sym.imp.USER32.dll_PostMessageW]
push 0
lea eax, [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x6c]
add eax, dword [ebp - 0x50]
push 0x1900000
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_WriteFile]
sub esp, 8
lea ecx, [ebp - 0x98]
call fcn.00413f60
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x14]
add eax, 0x1900000
mov edi, dword [esi + 0x14]
adc edx, 0
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x14], edx
cmp edx, dword [esi + 0x18]
jg 0x53ff12
jl 0x53fef4
cmp eax, edi
jae 0x53ff12
mov ecx, dword [ebp - 0x60]
jmp 0x53fe10
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x18]
push dword [eax]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x53ff72
mov ebx, dword [ebp + 8]
push 0
sub edi, eax
lea ecx, [ebp - 0x20]
mov eax, dword [ebp - 0x50]
add edi, 0x1900000
add eax, dword [ebp - 0x6c]
push ecx
push edi
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_WriteFile]
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, 1
jmp 0x53ff74
mov ebx, dword [ebp + 0x10]
push ecx
mov ecx, ebx
call fcn.004dfbe0
add esp, 4
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x18]
push dword [eax]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push 0
push 0
push 0x410
push ebx
call dword [sym.imp.USER32.dll_PostMessageW]
xor esi, esi
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x98]
call fcn.00413d80
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret