Function at 0x44fdc2
Capabilities:
Copy file
Get file size
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0xdc
mov ax, word [0x510772]
mov dword [ebp - 0x80], str._amd64_txtsetup.sif
mov dword [ebp - 0x94], str.i386
mov ebx, dword [ebp + 8]
mov edx, eax
mov dword [ebp - 0x90], str.amd64
not edx
mov dword [ebp - 0x8c], str.minint
mov dword [ebp - 0x9c], str.minint_txtsetup.sif
mov dword [ebp - 0x98], str.minint_system32_
mov dword [ebp - 0x88], str.i386_txtsetup.sif
mov dword [ebp - 0x84], str.i386_system32_
mov dword [ebp - 0x7c], str._amd64_system32_
mov dword [ebp - 0xb4], 1
test dl, 0x23
je 0x44fe52
mov eax, edx
test ax, 0x1c0
sete al
movzx eax, al
add eax, eax
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0xb4]
movsx ebx, bl
mov esi, dword [sym.imp.msvcrt.dll_toupper]
lea edi, [ebp - 0x58]
and eax, 0xfffffffe
mov eax, dword [ebp + eax*4 - 0x94]
mov dword [ebp - 0xb0], eax
mov dword [esp], ebx
call esi
mov ecx, dword [ebp - 0xb0]
mov dword [esp + 0xc], str._c:_s_ntdetect.com
mov dword [esp + 0x10], eax
mov eax, dword [sym.imp.msvcrt.dll__snprintf_s]
mov dword [esp + 0x14], ecx
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 0x40
mov dword [esp], edi
mov dword [ebp - 0xac], eax
call eax
mov byte [ebp - 0x19], 0
mov dword [esp], ebx
call esi
mov dword [esp + 0xc], str._c:_ntdetect.com
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x78]
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 0x20
mov dword [esp], eax
mov eax, dword [ebp - 0xac]
call eax
lea eax, [ebp - 0x78]
mov byte [ebp - 0x59], 0
mov dword [esp + 4], eax
mov eax, dword [sym.imp.KERNEL32.DLL_CopyFileA]
mov dword [esp + 8], 1
mov dword [esp], edi
mov dword [ebp - 0xb8], eax
call eax
sub esp, 0xc
cmp byte [0x51078b], 0
jne 0x45001c
mov dword [esp], ebx
call esi
mov ecx, dword [ebp - 0xb4]
mov edx, dword [ebp + ecx*4 - 0x94]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], str._c:_s_txtsetup.sif
mov dword [esp + 0x14], edx
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 0x40
mov dword [esp], edi
mov eax, dword [ebp - 0xac]
call eax
mov byte [ebp - 0x19], 0
mov dword [esp], ebx
call esi
mov dword [esp + 0xc], str._c:_txtsetup.sif
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x78]
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 0x20
mov dword [esp], eax
mov eax, dword [ebp - 0xac]
call eax
lea eax, [ebp - 0x78]
mov byte [ebp - 0x59], 0
mov dword [esp + 8], 1
mov dword [esp + 4], eax
mov dword [esp], edi
mov eax, dword [ebp - 0xb8]
call eax
sub esp, 0xc
test eax, eax
jne 0x44ffca
call fcn.0043df77
mov dword [esp + 4], edi
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x78]
mov dword [esp + 8], eax
mov dword [esp], str.Did_not_copy__s_as__s:__s_n
call fcn.0043d9e0
xor edi, edi
mov dword [esp + 8], str.SetupSourceDevice___deviceharddisk1partition1_
mov dword [esp + 0xc], edi
lea edi, [ebp - 0x78]
mov dword [esp + 4], str._SetupData_
mov dword [esp], edi
call fcn.004278b9
test eax, eax
jne 0x450004
mov dword [esp + 4], edi
mov dword [esp], str.Failed_to_add_SetupSourceDevice_in__s_n
call fcn.0043d9e0
jmp 0x450534
mov dword [esp + 8], edi
mov dword [esp + 4], str.SetupSourceDevice___deviceharddisk1partition1_
mov dword [esp], str.Successfully_added__s_to__s_n
call fcn.0043d9e0
mov dword [esp], ebx
lea edi, [ebp - 0x58]
call esi
mov ecx, dword [ebp - 0xb0]
mov edx, dword [sym.imp.msvcrt.dll__snprintf_s]
mov dword [esp + 0xc], str._c:_s_setupldr.bin
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], ecx
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 0x40
mov dword [esp], edi
mov dword [ebp - 0xac], edx
call edx
mov byte [ebp - 0x19], 0
mov dword [esp], ebx
call esi
lea esi, [ebp - 0x78]
mov dword [esp + 0xc], str._c:BOOTMGR
mov dword [esp + 0x10], eax
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 0x20
mov dword [esp], esi
mov edx, dword [ebp - 0xac]
call edx
mov byte [ebp - 0x59], 0
mov dword [esp + 8], 1
mov dword [esp + 4], esi
mov dword [esp], edi
call dword [sym.imp.KERNEL32.DLL_CopyFileA]
sub esp, 0xc
test eax, eax
jne 0x4500cb
call fcn.0043df77
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 4], edi
mov dword [esp], str.Did_not_copy__s_as__s:__s_n
call fcn.0043d9e0
mov ax, word [0x510772]
test ax, 0x1c0
je 0x450111
cmp byte [0x51078b], 0
je 0x4500f8
mov dword [esp], str.Detected_minint_directory_with__minint_option:_nothing_to_patch_n
xor ebx, ebx
mov esi, 1
call fcn.0043d9e0
jmp 0x450538
test al, 0x27
jne 0x450534
mov dword [esp], str.Detected_minint_directory_only_but_no__minint_option:_not_sure_what_to_do_n
call fcn.0043d9e0
jmp 0x450534
xor ecx, ecx
xor ebx, ebx
mov dword [esp + 0x14], pe_nt_image_headers32
mov dword [esp + 0x18], ecx
mov dword [esp + 0x10], 3
mov dword [esp + 0xc], ebx
mov dword [esp + 8], 1
mov dword [esp + 4], 0xc0000000
mov dword [esp], esi
call dword [sym.imp.KERNEL32.DLL_CreateFileA]
mov dword [ebp - 0xac], eax
sub esp, 0x1c
inc eax
jne 0x450170
call fcn.0043df77
mov dword [esp + 4], esi
mov dword [esp + 8], eax
mov dword [esp], str.Could_not_open__s_for_patching:__s_n
call fcn.0043d9e0
jmp 0x450534
xor eax, eax
mov dword [esp + 4], eax
mov eax, dword [ebp - 0xac]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.DLL_GetFileSize]
push edx
push edx
mov dword [ebp - 0xb0], eax
inc eax
jne 0x4501b0
call fcn.0043df77
mov dword [esp + 4], esi
xor ebx, ebx
mov dword [esp + 8], eax
mov dword [esp], str.Could_not_get_size_for_file__s:__s_n
call fcn.0043d9e0
jmp 0x450544
mov eax, dword [ebp - 0xb0]
mov dword [esp], eax
call sub.msvcrt.dll_malloc
mov ebx, eax
test eax, eax
je 0x450544
lea eax, [ebp - 0xa0]
xor edi, edi
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0xb0]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov eax, dword [ebp - 0xac]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.DLL_ReadFile]
sub esp, 0x14
test eax, eax
je 0x45020a
mov eax, dword [ebp - 0xb0]
cmp dword [ebp - 0xa0], eax
je 0x450223
call fcn.0043df77
mov dword [esp], str.Could_not_read_file__s:__s_n
mov dword [esp + 8], eax
lea eax, [ebp - 0x78]
mov dword [esp + 4], eax
jmp 0x45025f
xor ecx, ecx
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc], ecx
mov dword [esp + 4], ecx
mov dword [esp + 8], ecx
mov eax, dword [ebp - 0xac]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.DLL_SetFilePointerEx]
sub esp, 0x14
test eax, eax
jne 0x450269
call fcn.0043df77
mov dword [esp + 4], esi
mov dword [esp + 8], eax
mov dword [esp], str.Could_not_rewind_file__s:__s_n
call fcn.0043d9e0
jmp 0x450544
mov dword [esp + 4], esi
mov dword [esp], str.Patching_file__s_n
call fcn.0043d9e0
cmp dword [ebp - 0xb0], 0x2061
jbe 0x4502ac
cmp byte [ebx + 0x2060], 0x74
jne 0x4502ac
cmp byte [ebx + 0x2061], 3
jne 0x4502ac
mov word [ebx + 0x2060], 0x1aeb
mov dword [esp], str.__0x00002060:_0x74_0x03____0xEB_0x1A__disable_Win2k3_CRC_check__n
call fcn.0043d9e0
mov eax, dword [ebp - 0xb4]
mov esi, 1
shl eax, 3
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0xb0]
sub eax, 0x20
mov dword [ebp - 0xc0], eax
cmp esi, eax
jae 0x4503ce
xor edx, edx
mov edi, dword [ebp + edx*4 - 0x9c]
mov dword [ebp - 0xc0], edx
mov dword [esp], edi
call sub.msvcrt.dll_strlen
lea ecx, [ebx + esi]
mov dword [esp + 4], edi
dec eax
mov dword [esp], ecx
mov dword [esp + 8], eax
mov dword [ebp - 0xb8], ecx
call dword [sym.imp.msvcrt.dll__strnicmp]
mov edx, dword [ebp - 0xc0]
test eax, eax
jne 0x4503ba
cmp dword [ebp - 0xb4], 2
mov ecx, dword [ebp - 0xb8]
jne 0x450343
mov dword [esp + 8], 0x159
mov dword [esp + 4], str.wue.c
mov dword [esp], str.index___2
call dword [0x491228]
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0xc4], edx
lea eax, [ebp + eax - 0x88]
mov eax, dword [eax + edx*4]
mov dword [ebp - 0xb8], eax
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
mov dword [ebp - 0xc0], ecx
mov dword [esp + 4], esi
mov dword [esp], str.__0x_08X:__s_____s_n
call fcn.0043d9e0
mov eax, dword [ebp - 0xb8]
mov dword [esp + 4], eax
mov ecx, dword [ebp - 0xc0]
mov dword [esp], ecx
call sub.msvcrt.dll_strcpy
mov dword [esp], edi
call sub.msvcrt.dll_strlen
mov edi, eax
mov eax, dword [ebp - 0xb8]
mov dword [esp], eax
call sub.msvcrt.dll_strlen
mov edx, dword [ebp - 0xc4]
cmp edi, eax
cmovb edi, eax
add esi, edi
test edx, edx
jne 0x4503c8
mov edx, 1
jmp 0x4502d9
inc esi
jmp 0x4502c0
cmp byte [0x51078b], 0
jne 0x4504ea
lea edi, [ebx + 0xc]
xor esi, esi
jmp 0x4504de
lea eax, [ebx + esi]
mov dword [ebp - 0xbc], eax
mov dword [esp + 8], 7
mov dword [esp + 4], str.rdisk_0_
mov dword [esp], eax
call dword [sym.imp.msvcrt.dll__strnicmp]
test eax, eax
jne 0x45042f
mov byte [edi - 6], 0x31
mov dword [esp + 0xc], 0x31
mov dword [esp + 8], str.rdisk_0_
mov dword [esp + 4], esi
mov dword [esp], str.__0x_08X:__s____rdisk__c__n
call fcn.0043d9e0
mov dword [esp + 8], 0xb
mov dword [esp + 4], str._win_nt_.bt
mov eax, dword [ebp - 0xbc]
mov dword [esp], eax
call dword [sym.imp.msvcrt.dll__strnicmp]
lea ecx, [esi + 1]
test eax, eax
jne 0x4504db
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0xc4], ecx
mov eax, dword [ebp + eax*4 - 0x94]
mov dword [ebp - 0xb8], eax
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0xbc]
mov dword [esp + 4], esi
mov dword [esp + 8], eax
mov dword [esp], str.__0x_08X:__s_____s_s_n
call fcn.0043d9e0
mov eax, dword [ebp - 0xb8]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0xbc]
mov dword [esp], eax
call sub.msvcrt.dll_strcpy
mov eax, dword [ebp - 0xb8]
mov dword [esp], eax
call sub.msvcrt.dll_strlen
mov cl, byte [edi]
add eax, ebx
mov byte [eax + esi], cl
mov eax, dword [ebp - 0xb8]
mov dword [esp], eax
call sub.msvcrt.dll_strlen
mov ecx, dword [ebp - 0xc4]
add eax, ebx
mov byte [eax + ecx], 0
inc edi
mov esi, ecx
cmp dword [ebp - 0xc0], esi
jne 0x4503e5
xor edx, edx
mov dword [esp + 0x10], 4
mov esi, 1
mov dword [esp + 0xc], edx
mov eax, dword [ebp - 0xb0]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov eax, dword [ebp - 0xac]
mov dword [esp], eax
call fcn.0043ebc0
test eax, eax
jne 0x450546
call fcn.0043df77
mov dword [esp], str.Could_not_write_patched_file:__s_n
mov dword [esp + 4], eax
call fcn.0043d9e0
jmp 0x450544
xor ebx, ebx
xor esi, esi
mov dword [ebp - 0xac], 0xffffffff
jmp 0x450546
xor esi, esi
mov eax, dword [ebp - 0xac]
dec eax
cmp eax, 0xfffffffd
ja 0x450562
mov eax, dword [ebp - 0xac]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push eax
mov dword [esp], ebx
call sub.msvcrt.dll_free
lea esp, [ebp - 0xc]
mov eax, esi
pop ebx
pop esi
pop edi
pop ebp
ret