Function at 0x442770
Capabilities:
Get file size
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x5401eb
mov eax, dword fs:[0]
push eax
sub esp, 0x2c0
mov eax, dword [0x5ac020]
xor eax, esp
mov dword [esp + 0x2b8], eax
push ebx
push esi
push edi
mov eax, dword [0x5ac020]
xor eax, esp
push eax
lea eax, [esp + 0x2d0]
mov dword fs:[0], eax
mov edi, ecx
mov esi, dword [edi + 0x78]
add esi, 0x228
mov dword [edi + 0x2844], 0
mov dword [esp + 0x10], esi
mov dword [esi + 0x4c], 0xffffffff
call fcn.004418e0
test eax, eax
je 0x44289b
mov ecx, edi
call fcn.00441e60
test eax, eax
je 0x44289b
mov ecx, edi
call fcn.00441c20
test eax, eax
je 0x44289b
mov ecx, edi
call fcn.00441ab0
test eax, eax
je 0x44289b
mov eax, dword [edi + 0xa14]
lea ebx, [edi + 0x920]
test eax, eax
je 0x44295b
cmp dword [eax + 0xb0], 0
je 0x44295b
push 0
push 0
push 3
push 0
push 0
push Ordinal_1
mov ecx, ebx
call fcn.004c7080
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [esi + 0x4c], eax
cmp eax, 0xffffffff
jne 0x4428e6
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, dword [edi]
mov ecx, edi
mov esi, eax
call dword [edx + 0x3c]
mov edx, esi
mov ecx, eax
call fcn.004a4000
test byte [ebx + 0x60], 1
je 0x442897
mov eax, dword [ebx + 0x64]
test al, 0x40
jne 0x442897
test al, al
jns 0x442897
mov ecx, dword [ebx + 0x78]
test ecx, ecx
je 0x442897
push 0
push ebx
call fcn.004c78d0
test eax, eax
je 0x442897
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x20]
mov esi, dword [esp + 0x10]
mov eax, dword [esi + 0x4c]
cmp eax, 0xffffffff
je 0x4428b1
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esi + 0x4c], 0xffffffff
mov ecx, edi
mov dword [edi + 0x2844], 1
call fcn.0043d090
mov ecx, dword [esp + 0x2d0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x2b8]
xor ecx, esp
call fcn.004ffcef
mov esp, ebp
pop ebp
ret
lea ecx, [esp + 0x14]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetFileSizeEx]
test eax, eax
je 0x442854
mov eax, dword [esp + 0x14]
or eax, dword [esp + 0x18]
jne 0x44295b
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x3c]
mov edx, 0x26
mov ecx, eax
call fcn.004a4000
test byte [ebx + 0x60], 1
je 0x44289b
mov eax, dword [ebx + 0x64]
test al, 0x40
jne 0x44289b
test al, al
jns 0x44289b
mov ecx, dword [ebx + 0x78]
test ecx, ecx
je 0x44289b
push 0
push ebx
call fcn.004c78d0
test eax, eax
je 0x44289b
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x20]
jmp 0x44289b
mov ecx, edi
call fcn.004403e0
lea eax, [esi + 4]
mov ecx, edi
push eax
call fcn.00442710
cmp dword [esi + 0x14], 0
je 0x44289b
lea ecx, [edi + 0xd18]
call fcn.004c7080
push eax
lea ecx, [esi + 0x1c]
call fcn.00401fc0
mov ecx, edi
call fcn.00441da0
mov dword [esi + 0x58], eax
lea ecx, [edi + 0x11b8]
mov dword [esi + 0x5c], edx
mov eax, dword [edi + 0x1a94]
mov dword [esi + 0x50], eax
call fcn.004c7080
push eax
lea ecx, [esi + 0x34]
call fcn.00401fc0
lea ecx, [edi + 0x1f28]
call fcn.004d8fd0
mov ecx, eax
call fcn.004c5d40
lea ecx, [edi + 0x2098]
mov dword [esi + 0x60], eax
call fcn.004d8fd0
mov ecx, eax
call fcn.004c6160
lea ecx, [edi + 0x2208]
mov dword [esi + 0x64], eax
call fcn.004d8fd0
mov ecx, eax
call fcn.004c6340
mov dword [esi + 0x68], eax
cmp dword [edi + 0x245c], 0
jne 0x442a06
mov dword [esi + 0x6c], 0xffffffff
jmp 0x442a1a
lea ecx, [edi + 0x2378]
call fcn.004d8fd0
movzx eax, word [eax]
sub eax, 0x41
mov dword [esi + 0x6c], eax
mov eax, dword [edi + 0x25cc]
sub eax, 0
je 0x442a31
dec eax
jne 0x442a31
mov dword [esi + 0x70], 1
jmp 0x442a38
mov dword [esi + 0x70], 0
mov eax, dword [edi + 0x1d54]
mov ecx, edi
push 0x8f
push 0
push 0
mov dword [esi + 0x78], eax
mov eax, dword [edi + 0x1bf4]
push 0
mov dword [esi + 0x74], eax
mov eax, dword [edi]
push 0
push 0
call dword [eax + 0x3c]
mov ebx, dword [sym.imp.USER32.dll_SetWindowPos]
push eax
call ebx
lea ecx, [esp + 0x1c]
call fcn.00445bb0
mov dword [esp + 0x2d8], 0
mov ecx, edi
mov eax, dword [edi]
push esi
call dword [eax + 0x3c]
push eax
lea ecx, [esp + 0x24]
call fcn.00445f90
sub eax, 0
je 0x442aac
sub eax, 2
jne 0x442add
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x3c]
mov edx, dword [esi + 0x7c]
mov ecx, eax
call fcn.004a4000
jmp 0x442add
mov eax, dword [edi]
mov ecx, edi
push 0x8f
push 0
push 0
push 0
push 0
push 0
call dword [eax + 0x3c]
push eax
call ebx
mov ecx, dword [edi + 0x78]
mov eax, dword [ecx + 0xd8]
mov dword [eax + 0x28], 1
mov eax, dword [ecx]
call dword [eax + 0xcc]
mov dword [esp + 0x2d8], 0xffffffff
lea ecx, [esp + 0x1c]
call fcn.00445d90
jmp 0x44289b
mov ecx, dword [ecx + 0xbc]
mov edx, dword [ecx + 0x84]
lea eax, [ecx + 0x548]
cmp edx, eax
je 0x443572
lea eax, [ecx + 0xd18]
cmp edx, eax
je 0x443572
lea eax, [ecx + 0x11b8]
cmp edx, eax
je 0x443572
lea eax, [ecx + 0x15a8]
cmp edx, eax
je 0x443572
lea eax, [ecx + 0xf68]
cmp edx, eax
jne 0x442770
ret