Function at 0x4073f0
Capabilities:
Get file size
Read file on windows
Terminate process

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
mov eax, 0x1078
call fcn.00430ce0
mov esi, esp
mov dword [esi + 4], 0x204b3ed8
mov ebx, dword [esi + 0x44]
mov eax, dword [esi + 0x34]
mov dword [esi + 0x1c], eax
mov eax, dword [esi + 0x38]
mov dword [esi + 0x10], eax
mov eax, dword [esi + 0x3c]
mov dword [esi + 0x14], eax
mov eax, dword [esi + 0x40]
mov dword [esi + 0xc], eax
xor edi, edi
inc edi
mov eax, dword [esi + 4]
cmp eax, 0x17dbd9f6
jle 0x4074a3
cmp eax, 0x5577d6d3
jg 0x407526
cmp eax, 0x359a4a83
jg 0x4075c6
cmp eax, 0x1ab0e90d
jle 0x40771f
cmp eax, 0x1ab0e90e
je 0x4078d5
cmp eax, 0x204b3ed8
je 0x4078e9
cmp eax, 0x2154265c
jne 0x40742a
mov eax, dword [esi + 8]
mov ecx, 0xfc
add eax, ecx
shr eax, 0x15
imul eax, eax
imul edx, eax, 0x79d9
dec edx
mov dword [esi + 8], 0
mov ecx, 0x191d7f5e
cmp edx, eax
je 0x40749e
mov ecx, 0xb215b350
mov dword [esi + 4], ecx
jmp 0x40742a
cmp eax, 0xd91beb25
jle 0x407575
cmp eax, 0xf2bf8b36
jg 0x40761d
cmp eax, 0xe3a20263
jle 0x407758
cmp eax, 0xe3a20264
je 0x407907
cmp eax, 0xe88c259a
je 0x407913
cmp eax, 0xe8b92922
jne 0x40742a
mov ecx, dword [esi + 8]
lea eax, [ecx + 0x161]
imul eax, eax
shl ecx, 6
add ecx, 0x4ec0
imul edx, eax, 0x4823
shr ecx, 4
dec edx
imul ecx, ecx, 0xb1
mov dword [esi + 8], ecx
mov ecx, 0x8dbaef5b
cmp eax, edx
je 0x40751b
mov ecx, 0xab26b6ce
mov dword [esi + 4], ecx
mov dword [esi + 0x1c], edi
jmp 0x40742a
cmp eax, 0x66024f5c
jg 0x40765d
cmp eax, 0x5b1bebb3
jle 0x4077a2
cmp eax, 0x5b1bebb4
je 0x40791f
cmp eax, 0x603edea5
je 0x407934
cmp eax, 0x614631bb
jne 0x40742a
push dword [esi + 0x18]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esi + 4], 0x99952f51
mov dword [esi + 0x14], edi
jmp 0x40742a
cmp eax, 0xab26b6cd
jg 0x4076b2
cmp eax, 0x934be26e
jle 0x4077d9
cmp eax, 0x934be26f
je 0x40794d
cmp eax, 0x99952f51
je 0x40797a
cmp eax, 0x9a29c658
jne 0x40742a
mov eax, dword [esi + 0x20]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esi + 0x48], ecx
mov dword [esi + 0x4c], eax
mov dword [esi + 4], 0x5b1bebb4
jmp 0x40742a
cmp eax, 0x435e3da0
jle 0x40781a
cmp eax, 0x435e3da1
je 0x40798f
cmp eax, 0x4616c898
je 0x4079a7
cmp eax, 0x4861e6c3
jne 0x40742a
imul ebx, ebx, 0xa64
call fcn.00407b9d
call fcn.00407b9d
mov eax, 0x435e3da1
cmp ebx, 0xf2
jl 0x4079ff
mov eax, 0xeec6e15
jmp 0x4079ff
cmp eax, 0x64d2d50
jle 0x40784a
cmp eax, 0x64d2d51
je 0x4079bf
cmp eax, 0xda8ad0d
je 0x4079d1
cmp eax, 0xeec6e15
jne 0x40742a
mov eax, dword [0x45f010]
mov dword [esi + 0x54], eax
mov dword [esi + 4], 0xdee81455
jmp 0x40742a
cmp eax, 0x709e7a24
jle 0x40787e
cmp eax, 0x709e7a25
je 0x407a07
cmp eax, 0x71c5912e
je 0x407a24
cmp eax, 0x79499e71
jne 0x40742a
push 0
push dword [esi + 0x24]
push dword [esi + 0x2c]
push dword [esi + 0x30]
push dword [esi + 0x18]
call dword [sym.imp.KERNEL32.dll_ReadFile]
push dword [esi + 0x18]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esi + 4], 0xeec6e15
jmp 0x40742a
cmp eax, 0xc92049e6
jg 0x4076ed
cmp eax, 0xb215b350
je 0x407a33
cmp eax, 0xbe8bd9a0
jne 0x407b3f
mov ecx, dword [esi + 0x50]
add ecx, 0x30
mov eax, 0x614631bb
cmp ecx, dword [esi + 0x2c]
ja 0x4079ff
mov eax, 0x2154265c
jmp 0x4079ff
cmp eax, 0xc92049e7
je 0x407a59
cmp eax, 0xd7df6f29
jne 0x407b4c
cmp dword [0x45f00c], 1
mov eax, 0xe8b92922
je 0x4079ff
mov eax, 0xe3a20264
jmp 0x4079ff
cmp eax, 0x17dbd9f7
je 0x407a76
cmp eax, 0x191d7f5e
jne 0x40742a
shr ebx, 0xf
add ebx, 0xffffff0d
mov eax, 0x5577d6d4
cmp ebx, 0x37c0
jb 0x407750
mov eax, 0x1ab0e90e
shr ebx, 6
jmp 0x4079ff
cmp eax, 0xd91beb26
je 0x407a82
cmp eax, 0xdee81455
jne 0x40742a
mov eax, dword [esi + 0x30]
mov ecx, dword [esi + 0x54]
add eax, ecx
add eax, 8
push 0x14
push 0x45f014
push eax
call fcn.00431d1d
add esp, 0xc
mov ecx, 0x4616c898
test eax, eax
je 0x407797
mov ecx, 0x64d2d51
mov dword [esi + 4], ecx
mov dword [esi + 0xc], edi
jmp 0x40742a
cmp eax, 0x5577d6d4
je 0x407a8e
cmp eax, 0x56fb1c8d
jne 0x40742a
add ebx, 0x98
mov eax, 0xd7df6f29
cmp ebx, 0xaf
je 0x4079ff
mov eax, 0x359a4a84
jmp 0x4079ff
cmp eax, 0x8a7477c9
je 0x407abc
cmp eax, 0x8dbaef5b
jne 0x40742a
add ebx, ebx
and ebx, 0x3ffffffe
imul ebx, ebx, 0xce
call fcn.00407b9d
mov eax, 0xfc8aaaee
cmp ebx, 0x1b
jge 0x4079ff
mov eax, 0x66024f5d
jmp 0x4079ff
cmp eax, 0x359a4a84
je 0x407ac8
cmp eax, 0x374a509b
jne 0x40742a
push dword [esi + 0x30]
call fcn.0043e5b4
add esp, 4
mov eax, dword [esi + 0x24]
mov dword [esi + 4], 0x603edea5
jmp 0x40742a
cmp eax, 0xf2bf8b37
je 0x407b0b
cmp eax, 0xfc8aaaee
jne 0x40742a
lea eax, [ebx*8 - 0x18c0]
and eax, 0xffffffc0
lea ecx, [eax + eax*4]
lea ebx, [ecx + ecx*4]
add ebx, eax
mov dword [esi + 4], 0xd7df6f29
jmp 0x40742a
cmp eax, 0x66024f5d
je 0x407b1d
cmp eax, 0x6fa4c2e4
jne 0x40742a
mov dword [esi + 0x28], ebx
mov ebx, edi
imul eax, dword [esi + 8], 0xf3
add eax, 0xffffff89
shr eax, 6
lea ecx, [eax + eax*4]
mov edx, eax
imul edx, eax
imul edi, edx, 0x53b3
dec edi
lea eax, [ecx*4 - 0x278a]
mov dword [esi + 8], eax
mov eax, 0xc92049e7
cmp edx, edi
je 0x4078cd
mov eax, 0x1ab0e90e
mov dword [esi + 4], eax
jmp 0x407b01
mov eax, dword [0x45f010]
mov dword [esi + 0x50], eax
mov dword [esi + 4], 0xda8ad0d
jmp 0x40742a
push eax
push eax
mov eax, esp
and eax, 0xfffffff8
mov esp, eax
mov dword [esi + 0x20], eax
push eax
mov eax, esp
mov dword [esi + 0x24], eax
mov dword [esi + 4], 0x17dbd9f7
jmp 0x40742a
mov dword [esi + 4], 0x709e7a25
jmp 0x40742a
mov dword [esi + 4], 0x359a4a84
jmp 0x40742a
mov eax, dword [esi + 0x48]
mov ecx, dword [esi + 0x4c]
mov dword [esi + 0x2c], eax
mov dword [esi + 4], 0x6fa4c2e4
jmp 0x40742a
mov dword [esi + 8], 0xffba000
mov dword [esi + 4], 0x99952f51
mov eax, dword [esi + 0x58]
mov dword [esi + 0x14], eax
jmp 0x40742a
mov eax, dword [esi + 8]
lea ecx, [eax - 0x1b]
imul ecx, ecx
imul edx, ecx, 0x77e5
dec edx
add eax, 0x35
mov dword [esi + 8], eax
mov eax, 0x359a4a84
cmp edx, ecx
je 0x4079ff
mov eax, 0xd91beb26
jmp 0x4079ff
mov eax, dword [esi + 0x20]
mov dword [esi + 4], 0xf2bf8b37
mov eax, dword [esi + 0x14]
mov dword [esi + 0x10], eax
jmp 0x40742a
push dword [esi + 0x20]
push dword [esi + 0x18]
call dword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [esi + 4], 0x9a29c658
jmp 0x40742a
call fcn.00407b9d
mov dword [esi + 4], 0x64d2d51
mov dword [esi + 0xc], 0
jmp 0x40742a
mov eax, dword [esi + 0xc]
mov dword [esi + 0x58], eax
mov dword [esi + 4], 0x374a509b
jmp 0x40742a
mov eax, dword [esi + 8]
add eax, 0x3a
shr eax, 9
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x2b33
dec edx
shl eax, 7
add eax, 0xffff9300
mov dword [esi + 8], eax
mov eax, 0x5577d6d4
cmp ecx, edx
je 0x4079ff
mov eax, 0xbe8bd9a0
mov dword [esi + 4], eax
jmp 0x40742a
push 0x800
lea eax, [esi + 0x70]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov dword [esi + 4], 0x5577d6d4
jmp 0x40742a
mov eax, dword [esi + 0x20]
mov dword [esi + 4], 0x8a7477c9
jmp 0x40742a
push dword [esi + 0x2c]
call fcn.0043e964
add esp, 4
mov dword [esi + 0x30], eax
mov eax, dword [esi + 0x24]
mov eax, dword [esi + 0x24]
mov dword [eax], 0
mov dword [esi + 4], 0x934be26f
jmp 0x40742a
mov ecx, dword [esi + 0x18]
mov eax, 0xf2bf8b37
cmp ecx, 0xffffffff
je 0x407a6b
mov eax, 0x71c5912e
mov dword [esi + 4], eax
mov dword [esi + 0x10], edi
jmp 0x40742a
mov dword [esi + 4], 0xe88c259a
jmp 0x40742a
mov dword [esi + 4], 0x79499e71
jmp 0x40742a
xor eax, eax
push eax
push 0x80
mov ecx, 3
push ecx
push eax
push ecx
push 0x80000000
lea eax, [esi + 0x70]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [esi + 0x18], eax
mov dword [esi + 4], 0xc92049e7
jmp 0x40742a
mov dword [esi + 4], 0x435e3da1
jmp 0x40742a
mov dword [esi + 0x28], ebx
mov ebx, edi
lea edi, [esi + 0x5c]
push edi
push 0x1c
push 0x45f00c
call fcn.00408378
add esp, 0xc
push 0x14
push 0x45f028
push edi
call fcn.00431d1d
add esp, 0xc
mov ecx, 0xd7df6f29
test eax, eax
je 0x407afe
mov ecx, 0xca7d9612
mov dword [esi + 4], ecx
mov edi, ebx
mov ebx, dword [esi + 0x28]
jmp 0x40742a
mov dword [esi + 4], 0xab26b6ce
mov eax, dword [esi + 0x10]
mov dword [esi + 0x1c], eax
jmp 0x40742a
imul ebx, ebx, 0xaa
add ebx, 0xffffa25e
call fcn.00407b9d
call fcn.00407b9d
mov dword [esi + 4], 0x204b3ed8
jmp 0x40742a
cmp eax, 0xab26b6ce
jne 0x40742a
jmp 0x407b7a
cmp eax, 0xca7d9612
jne 0x40742a
mov dword [esi + 0x44], ebx
mov eax, dword [esi + 0x1c]
mov dword [esi + 0x34], eax
mov eax, dword [esi + 0x10]
mov dword [esi + 0x38], eax
mov eax, dword [esi + 0x14]
mov dword [esi + 0x3c], eax
mov eax, dword [esi + 0xc]
mov dword [esi + 0x40], eax
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov dword [esi + 0x44], ebx
mov eax, dword [esi + 0x10]
mov dword [esi + 0x38], eax
mov eax, dword [esi + 0x14]
mov dword [esi + 0x3c], eax
mov eax, dword [esi + 0xc]
mov dword [esi + 0x40], eax
mov eax, dword [esi + 0x1c]
mov dword [esi + 0x34], eax
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret