Function at 0x563ab0
Capabilities:
Get file size

Disassembly:
sub esp, 0x28
mov eax, dword [ecx + 0xc]
push ebx
push ebp
push esi
push edi
push 0
push 0
push 3
mov dword [esp + 0x1c], ecx
mov ecx, dword [eax + 0x30]
push 0
push 3
push connect
push ecx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov edi, eax
cmp edi, 0xffffffff
mov dword [esp + 0x14], edi
jne 0x563aec
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x28
ret
lea edx, [esp + 0x18]
push edx
push edi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov ebp, eax
xor esi, esi
cmp ebp, 0xffffffff
jne 0x563b20
test esi, esi
jne 0x563b20
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x563b20
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x28
ret
mov eax, dword [esp + 0x18]
push 1
push 0
push 0
push eax
call fcn.005c9b80
mov ecx, dword [esp + 0x10]
add ebp, eax
adc esi, edx
xor edi, edi
mov eax, dword [ecx + 0xd0]
mov dword [esp + 0x34], esi
xor esi, esi
xor ebx, ebx
test eax, eax
je 0x563bb4
mov eax, dword [eax + 0x38]
test eax, eax
je 0x563bb4
mov eax, dword [eax + 0x10]
test eax, eax
je 0x563bb4
push ebx
push ebx
push 3
push ebx
push 3
push connect
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ebx, eax
cmp ebx, 0xffffffff
je 0x563bb4
lea edx, [esp + 0x18]
push edx
push ebx
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov esi, eax
cmp esi, 0xffffffff
jne 0x563ba0
test edi, edi
jne 0x563ba0
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x563ba0
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor ebx, ebx
jmp 0x563bb4
mov eax, dword [esp + 0x18]
push 1
push 0
push 0
push eax
call fcn.005c9b80
add esi, eax
adc edi, edx
mov edx, dword [esp + 0x34]
mov eax, esi
add eax, ebp
mov ecx, edi
adc ecx, edx
mov edx, dword [esp + 0x10]
add edx, 0x1d0
cmp eax, dword [edx]
jne 0x563bd3
cmp ecx, dword [edx + 4]
je 0x563bf1
mov eax, dword [esp + 0x14]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push eax
call esi
test ebx, ebx
je 0x563be7
push ebx
call esi
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x28
ret
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x14]
lea ecx, [esp + 0x28]
mov dword [esp + 0x1c], 0
push ecx
mov ecx, dword [esp + 0x14]
push edx
push ebp
push eax
mov dword [esp + 0x38], 0
mov dword [esp + 0x3c], 0
call fcn.00563820
test eax, eax
je 0x563c97
fld qword [0x61b7c8]
fcomp qword [esp + 0x28]
fnstsw ax
test ah, 0x40
jne 0x563c8f
fld qword [esp + 0x28]
fmul qword [0x61ec38]
call fcn.005c7778
mov ecx, esi
mov dword [esp + 0x24], eax
or ecx, edi
mov dword [esp + 0x20], 0
jne 0x563cb7
mov edi, dword [esp + 0x34]
mov eax, dword [esp + 0x14]
mov esi, ebp
mov ecx, dword [esp + 0x10]
lea edx, [esp + 0x20]
push edx
push edi
push esi
push eax
call fcn.00563970
test eax, eax
je 0x563c97
mov ecx, dword [esp + 0x24]
mov eax, 0x51eb851f
mul ecx
mov esi, dword [esp + 0x20]
shr edx, 4
add edx, esi
cmp ecx, edx
ja 0x563c97
mov dword [esp + 0x1c], 1
mov eax, dword [esp + 0x14]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push eax
call esi
test ebx, ebx
je 0x563cab
push ebx
call esi
mov eax, dword [esp + 0x1c]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x28
ret
mov eax, ebx
jmp 0x563c62