Function at 0x43b290
Capabilities:
Get file size
Get system information on windows
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x128c
call fcn.004f87d0
mov eax, dword [0x589758]
xor eax, esp
mov dword [esp + 0x1288], eax
push ebx
push esi
xor esi, esi
push edi
mov edi, dword [ebp + 0xc]
push 0x1ff
lea eax, [esp + 0x895]
push esi
push eax
mov dword [esp + 0x5c], ecx
mov dword [esp + 0x6c], edi
mov dword [esp + 0x70], esi
mov dword [esp + 0x74], esi
mov dword [esp + 0x1c], esi
mov dword [esp + 0x20], esi
mov dword [esp + 0x64], esi
mov dword [esp + 0x68], esi
mov byte [esp + 0x89c], 0
call fcn.004f67e0
push 0x7fc
lea ecx, [esp + 0xa4]
push esi
push ecx
mov dword [esp + 0xa8], esi
call fcn.004f67e0
mov eax, dword [0x5bf848]
mov ecx, dword [0x5bf84c]
add esp, 0x18
mov dword [esp + 0x48], eax
or eax, ecx
mov dword [esp + 0x20], esi
mov dword [esp + 0x40], esi
mov dword [esp + 0x44], esi
mov dword [esp + 0x4c], ecx
je 0x43b39f
lea edx, [esp + 0x6c]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [esp + 0x88]
push esi
push 0x80
push 4
push esi
push 3
push 0xc0000000
push edi
mov dword [esp + 0x38], eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov edi, eax
mov dword [esp + 0x54], edi
cmp edi, 0xffffffff
je 0x43b39f
lea ecx, [esp + 0x5c]
push ecx
push edi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov ecx, dword [esp + 0x5c]
push esi
push eax
push ecx
push 4
push esi
push edi
mov dword [esp + 0x70], eax
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], ecx
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov ebx, eax
cmp ebx, esi
jne 0x43b3b8
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x1288]
xor ecx, esp
call fcn.004f6592
mov esp, ebp
pop ebp
ret 0x24
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x30]
push edx
mov edx, dword [esp + 0x20]
push eax
push 0x200
lea ecx, [esp + 0x89c]
push ecx
push edx
push esi
push esi
push ebx
mov dword [esp + 0x30], esi
mov dword [esp + 0x34], esi
call fcn.0043b170
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x6c]
add esp, 0x20
push esi
add eax, 0x1e
push 0x1f
adc ecx, esi
push ecx
push eax
mov dword [esp + 0x1c], esi
call fcn.004f8300
sub eax, 1
mov dword [esp + 0x28], eax
je 0x43b4e5
mov dword [esp + 0x3c], 0x5bf850
jmp 0x43b420
push 0x200
lea edx, [esp + 0xa94]
push 0
push edx
call fcn.004f67e0
mov esi, dword [esp + 0x48]
add esp, 0xc
lea eax, [esp + 0xc84]
push eax
mov ecx, 0x7c
lea edi, [esp + 0xa94]
rep movsd dword es:[edi], dword [esi]
push 0x1f0
lea ecx, [esp + 0xa98]
push ecx
mov ecx, dword [esp + 0x5c]
mov dword [esp + 0xc8c], 0x1f
mov dword [esp + 0xc98], 0x52415453
call fcn.0043a860
mov edx, dword [ebp + 0x1c]
mov esi, dword [esp + 0xc]
mov ecx, 0x200
mov dword [esp + 0xc88], edx
lea eax, [esi + 0x10]
mul ecx
mov ecx, dword [esp + 0x34]
push ecx
mov ecx, dword [esp + 0x34]
push ecx
push 0x200
lea ecx, [esp + 0xa9c]
push ecx
mov ecx, dword [esp + 0x2c]
push ecx
push edx
push eax
push ebx
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], edx
call fcn.0043b200
add esp, 0x20
add dword [esp + 0x40], 1
adc dword [esp + 0x44], 0
add dword [esp + 0x3c], 0x1f0
inc esi
mov dword [esp + 0xc], esi
cmp esi, dword [esp + 0x28]
jb 0x43b420
mov edx, dword [esp + 0x4c]
mov eax, dword [esp + 0x48]
push 0
push 0x1f
push edx
push eax
call fcn.004f83b0
mov dword [esp + 0x48], eax
or eax, edx
je 0x43b5d4
push 0x200
lea ecx, [esp + 0xa94]
push 0
push ecx
call fcn.004f67e0
mov esi, dword [esp + 0x18]
mov edx, dword [esp + 0x54]
imul esi, esi, 0x1f0
add esp, 0xc
lea eax, [esp + 0xc84]
push eax
add esi, 0x5bf850
mov ecx, 0x7c
lea edi, [esp + 0xa94]
rep movsd dword es:[edi], dword [esi]
push 0x1f0
lea ecx, [esp + 0xa98]
push ecx
mov ecx, dword [esp + 0x5c]
mov dword [esp + 0xc8c], edx
mov dword [esp + 0xc98], 0x52415453
call fcn.0043a860
mov esi, dword [esp + 0x40]
mov edi, dword [esp + 0x44]
mov edx, dword [ebp + 0x1c]
push 0
mov eax, esi
add eax, 0x10
mov ecx, edi
push 0x200
adc ecx, 0
push ecx
push eax
mov dword [esp + 0xc98], edx
call fcn.004f81e0
mov ecx, dword [esp + 0x34]
push ecx
mov ecx, dword [esp + 0x34]
push ecx
push 0x200
lea ecx, [esp + 0xa9c]
push ecx
mov ecx, dword [esp + 0x2c]
push ecx
push edx
push eax
push ebx
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], edx
call fcn.0043b200
add esp, 0x20
add esi, 1
adc edi, 0
mov dword [esp + 0x40], esi
mov dword [esp + 0x44], edi
push 0x200
lea edx, [esp + 0xa94]
push 0
push edx
call fcn.004f67e0
mov edx, dword [esp + 0x50]
add esp, 0xc
test edx, edx
jl 0x43b622
jg 0x43b5fe
mov esi, dword [esp + 0x40]
cmp esi, 0x3d
jbe 0x43b626
mov eax, dword [esp + 0x54]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x1288]
xor ecx, esp
call fcn.004f6592
mov esp, ebp
pop ebp
ret 0x24
mov esi, dword [esp + 0x40]
xor eax, eax
test edx, edx
jl 0x43b65b
jg 0x43b632
test esi, esi
jbe 0x43b65b
mov ecx, dword [eax*8 + 0x7c09b0]
mov dword [esp + eax*8 + 0xa90], ecx
mov ecx, dword [eax*8 + 0x7c09b4]
mov dword [esp + eax*8 + 0xa94], ecx
xor ecx, ecx
inc eax
cmp ecx, edx
jl 0x43b632
jg 0x43b65b
cmp eax, esi
jb 0x43b632
mov edx, dword [ebp + 0x1c]
mov eax, dword [ebp + 0x14]
mov ecx, dword [ebp + 0x18]
mov dword [esp + 0xc88], edx
lea edx, [esp + 0xc84]
push edx
mov dword [esp + 0xc7c], eax
push 0x1f0
lea eax, [esp + 0xa98]
mov dword [esp + 0xc84], ecx
mov ecx, dword [esp + 0x58]
push eax
mov dword [esp + 0xc8c], esi
mov dword [esp + 0xc98], 0x4e4f4f4d
call fcn.0043a860
mov edi, dword [esp + 0x34]
mov esi, dword [esp + 0x30]
mov edx, dword [esp + 0x1c]
push edi
push esi
push 0x200
lea ecx, [esp + 0xa9c]
push ecx
push edx
push 0
push 0x1e00
push ebx
mov dword [esp + 0x30], 0x1e00
mov dword [esp + 0x34], 0
call fcn.0043b200
movzx eax, byte [esp + 0x8bd]
imul eax, eax, 0xa00
push eax
mov dword [esp + 0x4c], eax
call fcn.00496dbd
add esp, 0x24
mov dword [esp + 0x3c], eax
test eax, eax
je 0x43b39f
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x3c]
push eax
push 0
push ecx
call fcn.004f67e0
add esp, 0xc
cmp dword [esp + 0x8b4], 0
mov dword [esp + 0xc], 0
jbe 0x43b8bc
movzx eax, word [esp + 0x89e]
mov edx, dword [esp + 0xc]
push edi
mov ecx, 0x200
add eax, edx
mul ecx
push esi
push ecx
lea ecx, [esp + 0xc9c]
push ecx
mov ecx, dword [esp + 0x2c]
push ecx
push edx
push eax
push ebx
mov dword [esp + 0x48], 0
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], edx
call fcn.0043b170
mov eax, dword [esp + 0x2c]
add esp, 0x20
neg eax
sbb eax, eax
and eax, 0xfffffffe
add eax, 2
cmp eax, 0x80
jae 0x43b856
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x28]
jmp 0x43b7a0
cmp dword [esp + eax*4 + 0xc90], 0xffffff7
jne 0x43b7ce
mov edx, dword [esp + 0xc]
shl edx, 7
add edx, eax
mov dword [esp + ecx*4 + 0x90], edx
inc ecx
mov dword [esp + eax*4 + 0xc90], 0
mov edx, 1
inc eax
cmp eax, 0x80
jb 0x43b7a0
mov dword [esp + 0x20], ecx
test edx, edx
je 0x43b85a
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
push edi
push esi
push 0x200
lea eax, [esp + 0xc9c]
push eax
mov eax, dword [esp + 0x20]
push ecx
push edx
push eax
push ebx
call fcn.0043b200
add esp, 0x20
cmp byte [esp + 0x8a0], 2
jne 0x43b856
movzx eax, word [esp + 0x89e]
mov ecx, dword [esp + 0xc]
add eax, ecx
add eax, dword [esp + 0x8b4]
push edi
mov edx, 0x200
mul edx
push esi
push 0x200
lea ecx, [esp + 0xc9c]
push ecx
mov ecx, dword [esp + 0x2c]
push ecx
push edx
push eax
push ebx
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], edx
call fcn.0043b200
add esp, 0x20
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0xc]
inc eax
mov dword [esp + 0xc], eax
cmp eax, dword [esp + 0x8b4]
jb 0x43b733
test ecx, ecx
je 0x43b8bc
mov edx, dword [0x5bf550]
xor ecx, ecx
cmp edx, dword [esp + 0x20]
jne 0x43b88b
mov eax, dword [0x5bf554]
cmp eax, ecx
je 0x43b8c1
mov eax, dword [esp + 0x3c]
push eax
call fcn.00496dc8
mov ecx, dword [esp + 0x58]
add esp, 4
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x1288]
xor ecx, esp
call fcn.004f6592
mov esp, ebp
pop ebp
ret 0x24
mov eax, dword [0x5bf554]
mov dword [esp + 0xc], 0
test eax, eax
jl 0x43b9e7
jg 0x43b8e0
cmp dword [0x5bf550], 0
jbe 0x43b9e7
movzx eax, byte [esp + 0x8a0]
imul eax, dword [esp + 0x8b4]
movzx ecx, byte [esp + 0x89d]
mov dword [esp + 0x28], eax
movzx eax, word [esp + 0x89e]
cdq
mov dword [esp + 0x40], eax
mov eax, ecx
mov dword [esp + 0x44], edx
cdq
mov dword [esp + 0x4c], edx
mov edx, dword [esp + 0x3c]
shl ecx, 9
mov dword [esp + 0x48], eax
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x24], edx
mov dword [esp + 0x20], 0x5bf560
nop
mov eax, dword [esp + 0x20]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
sub edx, dword [esp + 0x40]
mov dword [eax - 4], ecx
mov ecx, dword [eax + 8]
sbb ecx, dword [esp + 0x44]
sub edx, dword [esp + 0x28]
mov eax, 0
sbb ecx, eax
mov eax, dword [esp + 0x4c]
push eax
mov eax, dword [esp + 0x4c]
push eax
push ecx
push edx
call fcn.004f8300
mov ecx, dword [esp + 0x20]
add eax, 2
mov dword [ecx], eax
je 0x43b9b5
movzx ecx, byte [esp + 0x89d]
add eax, 0xfffffffe
imul eax, ecx
add eax, dword [esp + 0x28]
movzx ecx, word [esp + 0x89e]
add eax, ecx
mov ecx, dword [esp + 0x2c]
push edi
push esi
push ecx
mov ecx, dword [esp + 0x30]
mov edx, 0x200
mul edx
push ecx
mov ecx, dword [esp + 0x2c]
push ecx
push edx
push eax
push ebx
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], edx
call fcn.0043b170
add esp, 0x20
mov edx, dword [esp + 0x2c]
mov eax, dword [0x5bf554]
inc dword [esp + 0xc]
add dword [esp + 0x20], 0x2c
add dword [esp + 0x24], edx
xor ecx, ecx
cmp ecx, eax
jl 0x43b930
jg 0x43b9e7
mov ecx, dword [esp + 0xc]
cmp ecx, dword [0x5bf550]
jb 0x43b930
mov dword [esp + 0x20], 0
test eax, eax
jl 0x43bad9
jg 0x43ba06
cmp dword [0x5bf550], 0
jbe 0x43bad9
mov dword [esp + 0x2c], 0x5bf558
cmp dword [esp + 0x8b4], 0
mov edx, dword [esp + 0x2c]
mov dword [edx], 0
mov dword [esp + 0xc], 0
jbe 0x43baaf
movzx eax, word [esp + 0x89e]
mov dword [esp + 0x24], eax
lea ebx, [ebx]
mov eax, dword [esp + 0x24]
push edi
mov ecx, 0x200
mul ecx
push esi
push ecx
lea ecx, [esp + 0xc9c]
push ecx
mov ecx, dword [esp + 0x2c]
push ecx
push edx
push eax
push ebx
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], edx
call fcn.0043b170
mov edx, dword [esp + 0x4c]
mov ecx, dword [edx + 8]
add esp, 0x20
xor eax, eax
cmp ecx, dword [esp + eax*4 + 0xc90]
je 0x43baa0
inc eax
cmp eax, 0x80
jb 0x43ba77
mov eax, dword [esp + 0xc]
inc dword [esp + 0x24]
inc eax
mov dword [esp + 0xc], eax
cmp eax, dword [esp + 0x8b4]
jb 0x43ba40
jmp 0x43baaf
mov ecx, dword [esp + 0xc]
shl ecx, 7
add ecx, eax
mov eax, dword [esp + 0x2c]
mov dword [eax], ecx
mov eax, dword [0x5bf554]
inc dword [esp + 0x20]
add dword [esp + 0x2c], 0x2c
xor ecx, ecx
cmp ecx, eax
jl 0x43ba0e
jg 0x43bad9
mov ecx, dword [esp + 0x20]
cmp ecx, dword [0x5bf550]
jb 0x43ba0e
mov dword [esp + 0x20], 0
test eax, eax
jl 0x43be5a
jg 0x43baf8
cmp dword [0x5bf550], 0
jbe 0x43be5a
movzx ecx, byte [esp + 0x89d]
mov edx, dword [esp + 0x3c]
shl ecx, 9
mov dword [esp + 0x2c], ecx
mov dword [esp + 0xc], 0x5bf558
mov dword [esp + 0x24], edx
jmp 0x43bb20
mov ecx, dword [esp + 0xc]
cmp dword [ecx], 0
je 0x43be2d
mov edx, dword [esp + 0x20]
mov eax, dword [esp + edx*4 + 0x90]
movzx ecx, word [esp + 0x89e]
lea edx, [eax - 2]
movzx eax, byte [esp + 0x89d]
imul edx, eax
movzx eax, byte [esp + 0x8a0]
imul eax, dword [esp + 0x8b4]
add edx, ecx
push edi
add eax, edx
mov ecx, 0x200
mul ecx
mov ecx, dword [esp + 0x30]
push esi
push ecx
mov ecx, dword [esp + 0x30]
push ecx
mov ecx, dword [esp + 0x2c]
push ecx
push edx
push eax
push ebx
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], edx
call fcn.0043b200
mov edx, dword [esp + 0x2c]
mov eax, dword [edx]
movzx ecx, word [esp + 0x8be]
add eax, eax
add eax, eax
shr eax, 9
add eax, ecx
push edi
mov ecx, 0x200
mul ecx
push esi
push ecx
lea ecx, [esp + 0xcbc]
push ecx
mov ecx, dword [esp + 0x4c]
push ecx
push edx
push eax
push ebx
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], edx
call fcn.0043b170
mov edx, dword [esp + 0x4c]
mov eax, dword [edx]
mov edx, dword [esp + 0x60]
add esp, 0x40
add eax, eax
add eax, eax
push edi
mov ecx, eax
mov eax, dword [esp + edx*4 + 0x94]
mov edx, dword [esp + 0x18]
push esi
and ecx, 0x1ff
mov dword [esp + ecx + 0xc98], eax
mov ecx, dword [esp + 0x24]
push 0x200
lea eax, [esp + 0xc9c]
push eax
mov eax, dword [esp + 0x20]
push ecx
push edx
push eax
push ebx
call fcn.0043b200
add esp, 0x20
cmp byte [esp + 0x8a0], 2
jne 0x43bcb8
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx]
movzx ecx, word [esp + 0x89e]
add eax, eax
add eax, eax
shr eax, 9
add eax, ecx
add eax, dword [esp + 0x8b4]
push edi
mov edx, 0x200
mul edx
push esi
push 0x200
lea ecx, [esp + 0xc9c]
push ecx
mov ecx, dword [esp + 0x2c]
push ecx
push edx
push eax
push ebx
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], edx
call fcn.0043b170
mov edx, dword [esp + 0x2c]
mov eax, dword [edx]
mov edx, dword [esp + 0x40]
add eax, eax
add eax, eax
push edi
mov ecx, eax
mov eax, dword [esp + edx*4 + 0xb4]
mov edx, dword [esp + 0x38]
push esi
and ecx, 0x1ff
mov dword [esp + ecx + 0xcb8], eax
mov ecx, dword [esp + 0x44]
push 0x200
lea eax, [esp + 0xcbc]
push eax
mov eax, dword [esp + 0x40]
push ecx
push edx
push eax
push ebx
call fcn.0043b200
add esp, 0x40
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx + 8]
movzx ecx, word [esp + 0x89e]
add eax, eax
add eax, eax
shr eax, 9
add eax, ecx
push edi
mov edx, 0x200
mul edx
push esi
push 0x200
lea ecx, [esp + 0xc9c]
push ecx
mov ecx, dword [esp + 0x2c]
push ecx
push edx
push eax
push ebx
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], edx
call fcn.0043b170
mov edx, dword [esp + 0x2c]
mov eax, dword [edx + 8]
mov edx, dword [esp + 0x40]
add eax, eax
add eax, eax
and eax, 0x1ff
mov ecx, dword [esp + eax + 0xcb0]
mov eax, dword [esp + edx*4 + 0xb0]
add eax, eax
add eax, eax
mov dword [esp + 0x48], ecx
mov ecx, eax
mov dword [esp + 0x68], eax
movzx eax, word [esp + 0x8be]
shr ecx, 9
add eax, ecx
push edi
mov dword [esp + 0x64], eax
mov edx, 0x200
mul edx
push esi
push 0x200
lea ecx, [esp + 0xcbc]
push ecx
mov ecx, dword [esp + 0x4c]
push ecx
push edx
push eax
push ebx
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], edx
call fcn.0043b170
mov eax, dword [esp + 0x88]
mov edx, dword [esp + 0x68]
mov ecx, dword [esp + 0x5c]
add esp, 0x40
push edi
push esi
and eax, 0x1ff
mov dword [esp + eax + 0xc98], edx
mov edx, dword [esp + 0x1c]
push 0x200
lea eax, [esp + 0xc9c]
push eax
mov eax, dword [esp + 0x20]
push ecx
push edx
push eax
push ebx
call fcn.0043b200
add esp, 0x20
cmp byte [esp + 0x8a0], 2
jne 0x43be28
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x8b4]
lea eax, [ecx + edx]
push edi
mov ecx, 0x200
mul ecx
push esi
push ecx
lea ecx, [esp + 0xc9c]
push ecx
mov ecx, dword [esp + 0x2c]
push ecx
push edx
push eax
push ebx
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], edx
call fcn.0043b170
mov edx, dword [esp + 0x2c]
mov eax, dword [edx]
mov ecx, dword [esp + 0x48]
push edi
add eax, eax
push esi
add eax, eax
push 0x200
and eax, 0x1ff
mov dword [esp + eax + 0xcbc], ecx
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x40]
lea edx, [esp + 0xcbc]
push edx
mov edx, dword [esp + 0x40]
push eax
push ecx
push edx
push ebx
call fcn.0043b200
add esp, 0x40
mov eax, dword [0x5bf554]
mov ecx, dword [esp + 0x2c]
add dword [esp + 0x24], ecx
inc dword [esp + 0x20]
add dword [esp + 0xc], 0x2c
xor ecx, ecx
cmp ecx, eax
jl 0x43bb20
jg 0x43be5a
mov edx, dword [esp + 0x20]
cmp edx, dword [0x5bf550]
jb 0x43bb20
mov dword [esp + 0xc], 0
test eax, eax
jl 0x43bf82
jg 0x43be79
cmp dword [0x5bf550], 0
jbe 0x43bf82
mov dword [esp + 0x24], 0x5bf564
mov esi, dword [esp + 0x24]
mov eax, dword [esi + 4]
mov ecx, dword [esi]
push 0
push 0x200
push eax
push ecx
call fcn.004f81e0
mov ecx, dword [esp + 0x34]
mov edi, dword [esp + 0x30]
push ecx
push edi
push 0x200
lea ecx, [esp + 0xc9c]
push ecx
mov ecx, dword [esp + 0x2c]
push ecx
push edx
push eax
push ebx
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], edx
call fcn.0043b170
mov edx, dword [esi + 0x14]
mov eax, dword [esi + 0x10]
add esp, 0x20
push 0
push 0x200
push edx
push eax
call fcn.004f81e0
mov ecx, dword [esp + 0x34]
push ecx
push edi
push 0x200
lea ecx, [esp + 0xc9c]
push ecx
mov ecx, dword [esp + 0x2c]
push ecx
push edx
push eax
push ebx
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], edx
call fcn.0043b200
mov edx, dword [esi + 4]
mov eax, dword [esi]
add esp, 0x20
push 0
push 0x200
push edx
push eax
call fcn.004f81e0
mov ecx, dword [esp + 0x34]
push ecx
push edi
push 0x200
lea ecx, [esp + 0xa9c]
push ecx
mov ecx, dword [esp + 0x2c]
push ecx
push edx
push eax
push ebx
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], edx
call fcn.0043b200
inc dword [esp + 0x2c]
add dword [esp + 0x44], 0x2c
xor eax, eax
add esp, 0x20
cmp eax, dword [0x5bf554]
mov ecx, 0x80
lea esi, [esp + 0xa90]
lea edi, [esp + 0x1090]
rep movsd dword es:[edi], dword [esi]
jl 0x43be81
jg 0x43bf82
mov edx, dword [esp + 0xc]
cmp edx, dword [0x5bf550]
jb 0x43be81
mov eax, dword [ebp + 0x1c]
mov ecx, dword [esp + 0x50]
push 0x5bf72c
push 0x1f0
push 0x5bf538
mov dword [0x5bf730], eax
mov dword [0x5bf734], 0x54495753
call fcn.0043a860
mov ecx, dword [esp + 0x34]
mov edi, dword [esp + 0x30]
mov edx, dword [esp + 0x1c]
push ecx
push edi
push 0x200
push 0x5bf538
push edx
xor esi, esi
push esi
push 0x1c00
push ebx
mov dword [esp + 0x30], 0x1c00
mov dword [esp + 0x34], esi
call fcn.0043b200
add esp, 0x20
cmp dword [0x5bf554], esi
mov dword [esp + 0xc], esi
jl 0x43c151
jg 0x43c000
cmp dword [0x5bf550], esi
jbe 0x43c151
mov esi, 0x5bf560
mov eax, dword [esi]
test eax, eax
je 0x43c12a
movzx ecx, word [esp + 0x89e]
add eax, eax
add eax, eax
shr eax, 9
add eax, ecx
mov ecx, 0x200
mul ecx
mov ecx, dword [esp + 0x34]
push ecx
push edi
push 0x200
lea ecx, [esp + 0xc9c]
push ecx
mov ecx, dword [esp + 0x2c]
push ecx
push edx
push eax
push ebx
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], edx
call fcn.0043b170
mov edx, dword [esi]
mov eax, dword [esp + 0x54]
push eax
mov eax, dword [esp + 0x38]
add edx, edx
push edi
add edx, edx
push 0x200
and edx, 0x1ff
lea ecx, [esp + 0xcbc]
push ecx
mov ecx, dword [esp + 0x40]
mov dword [esp + edx + 0xcc0], 0xffffff7
mov edx, dword [esp + 0x4c]
push edx
push eax
push ecx
push ebx
call fcn.0043b200
add esp, 0x40
cmp byte [esp + 0x8a0], 2
jne 0x43c12a
mov eax, dword [esi]
movzx ecx, word [esp + 0x89e]
add eax, eax
add eax, eax
shr eax, 9
add eax, ecx
add eax, dword [esp + 0x8b4]
mov ecx, dword [esp + 0x34]
push ecx
mov edx, 0x200
mul edx
push edi
push 0x200
lea ecx, [esp + 0xc9c]
push ecx
mov ecx, dword [esp + 0x2c]
push ecx
push edx
push eax
push ebx
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], edx
call fcn.0043b170
mov edx, dword [esi]
mov eax, dword [esp + 0x54]
push eax
mov eax, dword [esp + 0x38]
add edx, edx
push edi
add edx, edx
push 0x200
and edx, 0x1ff
lea ecx, [esp + 0xcbc]
push ecx
mov ecx, dword [esp + 0x40]
mov dword [esp + edx + 0xcc0], 0xffffff7
mov edx, dword [esp + 0x4c]
push edx
push eax
push ecx
push ebx
call fcn.0043b200
add esp, 0x40
inc dword [esp + 0xc]
xor eax, eax
add esi, 0x2c
cmp eax, dword [0x5bf554]
jl 0x43c005
jg 0x43c151
mov edx, dword [0x5bf550]
cmp dword [esp + 0xc], edx
jb 0x43c005
mov eax, dword [esp + 0x3c]
push eax
call fcn.00496dc8
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
add esp, 4
push ebx
call esi
mov ecx, dword [esp + 0x54]
push ecx
call esi
mov edx, dword [esp + 0x60]
push 0
push 0x80
push 4
push 0
push 3
push 0xc0000000
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov esi, eax
cmp esi, 0xffffffff
je 0x43b39f
cmp dword [0x5bf554], 0
mov dword [esp + 0xc], 0
jl 0x43c2a6
jg 0x43c1ba
cmp dword [0x5bf550], 0
jbe 0x43c2a6
mov ebx, 0x5bf564
nop
mov eax, dword [ebx + 4]
mov ecx, dword [ebx]
push 0
push 0x200
push eax
push ecx
call fcn.004f81e0
push 0x200
mov dword [esp + 0x18], edx
lea edx, [esp + 0xe94]
mov edi, eax
push 0
push edx
mov dword [esp + 0x1c], edi
call fcn.004f67e0
add esp, 0xc
push 0
lea eax, [esp + 0x18]
push eax
push edi
push esi
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
push 0
lea ecx, [esp + 0x6c]
push ecx
push 0x200
lea edx, [esp + 0xe9c]
push edx
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov ecx, 0x200
xor edx, edx
jmp 0x43c230
mov edi, dword [esp + edx + 0xe90]
cmp edi, dword [esp + edx + 0x1090]
jne 0x43c24d
sub ecx, 4
add edx, 4
cmp ecx, 4
jae 0x43c230
jmp 0x43c27f
test al, al
je 0x43c27f
mov ecx, dword [esp + 0x10]
push 0
lea eax, [esp + 0x18]
push eax
push ecx
push esi
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
push 0
lea edx, [esp + 0x68]
push edx
push 0x200
lea eax, [esp + 0x109c]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_WriteFile]
inc dword [esp + 0xc]
xor eax, eax
add ebx, 0x2c
cmp eax, dword [0x5bf554]
jl 0x43c1c0
jg 0x43c2a6
mov ecx, dword [esp + 0xc]
cmp ecx, dword [0x5bf550]
jb 0x43c1c0
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0x5bf554], 0
mov dword [esp + 0xc], 0
jl 0x43c372
jg 0x43c2d1
cmp dword [0x5bf550], 0
jbe 0x43c372
mov esi, 0x5bf56c
mov edx, dword [esi + 4]
mov eax, dword [esi]
push 0
push 0x200
push edx
push eax
call fcn.004f81e0
push 0x200
lea ecx, [esp + 0xe94]
mov edi, eax
mov ebx, edx
push 0
push ecx
mov dword [esp + 0x1c], edi
mov dword [esp + 0x20], ebx
call fcn.004f67e0
add esp, 0xc
push 0x200
lea edx, [esp + 0xe94]
push edx
push ebx
push edi
push 0
mov ecx, 0x5bee18
call fcn.00476530
mov eax, 0x200
xor ecx, ecx
mov edi, edi
mov edx, dword [esp + ecx + 0xe90]
cmp edx, dword [esp + ecx + 0x1090]
jne 0x43c34b
sub eax, 4
add ecx, 4
cmp eax, 4
jae 0x43c330
inc dword [esp + 0xc]
xor eax, eax
add esi, 0x2c
cmp eax, dword [0x5bf554]
jl 0x43c2d6
jg 0x43c372
mov eax, dword [esp + 0xc]
cmp eax, dword [0x5bf550]
jb 0x43c2d6
mov ecx, dword [esp + 0x1294]
pop edi
pop esi
pop ebx
xor ecx, esp
mov eax, 1
call fcn.004f6592
mov esp, ebp
pop ebp
ret 0x24