Function at 0x48bfe0
Capabilities:
Get file size

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x614714
mov eax, dword fs:[0]
push eax
sub esp, 0x7c
push ebx
push esi
push edi
mov eax, dword [0x711ab8]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
xor esi, esi
mov dword [ebp - 4], esi
mov byte [ebp - 0x11], 1
mov byte [ebp - 4], 1
mov eax, dword [ebp + 0xc]
call fcn.004c0da0
mov ebx, eax
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x30], ebx
mov byte [ebp - 4], 2
or edi, 0xffffffff
cmp ebx, edi
jne 0x48c058
mov byte [ebp - 4], 1
mov dword [ebp - 4], edi
lea ecx, [ebp + 0xc]
call fcn.0040ba40
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x3c], esi
lea eax, [ebp - 0x40]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov eax, dword [0x713dbc]
shl eax, 0x14
cdq
mov ecx, dword [ebp - 0x3c]
cmp ecx, edx
jl 0x48c08a
jg 0x48c506
mov edx, dword [ebp - 0x40]
cmp edx, eax
ja 0x48c506
lea eax, [ebp + 0xc]
push eax
lea ecx, [ebp - 0x1c]
push ecx
call fcn.0040b930
mov byte [ebp - 4], 3
lea edi, [ebp - 0x1c]
call fcn.0040bd70
xor ecx, ecx
mov edx, 0x6d563c
mov esi, edi
call fcn.004301b0
or edi, 0xffffffff
cmp eax, edi
jne 0x48c4fa
xor ecx, ecx
mov edx, 0x6d5664
call fcn.004301b0
cmp eax, edi
jne 0x48c4fa
xor ecx, ecx
mov edx, str.vibraniumupdater
call fcn.004301b0
cmp eax, edi
jne 0x48c4fa
xor ecx, ecx
mov edx, str.vibranium_as
call fcn.004301b0
cmp eax, edi
jne 0x48c4fa
xor ecx, ecx
mov edx, str.vibranium_ts
call fcn.004301b0
cmp eax, edi
jne 0x48c4fa
xor ecx, ecx
mov edx, str._scandeep
call fcn.004301b0
cmp eax, edi
jne 0x48c4fa
call fcn.00497e50
mov esi, eax
test esi, esi
je 0x48c178
push ecx
mov edx, esp
mov dword [ebp - 0x2c], esp
lea eax, [ebp + 0xc]
push eax
push edx
call fcn.0040b930
mov byte [ebp - 4], 4
mov byte [ebp - 4], 3
mov ecx, esi
call fcn.004a7f60
test al, al
je 0x48c4fa
push ecx
mov ecx, esp
mov dword [ebp - 0x2c], esp
lea edx, [ebp + 0xc]
push edx
push ecx
call fcn.0040b930
mov byte [ebp - 4], 5
push esi
mov byte [ebp - 4], 3
call fcn.004a8300
test al, al
jne 0x48c4fa
push ebx
mov ebx, dword [0x729b74]
call fcn.004c2c10
test al, al
je 0x48c1c7
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1c]
call fcn.0040ba40
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x24]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call fcn.0040ba40
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
lea ecx, [ebp - 0x18]
push ecx
call fcn.0040b700
mov byte [ebp - 4], 6
xor eax, eax
mov byte [ebp - 0x70], al
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x74], eax
lea edi, [ebp - 0x88]
mov ebx, dword [ebp - 0x24]
lea esi, [ebp - 0x50]
call fcn.004c1320
cmp byte [ebp - 0x44], 0
je 0x48c459
cmp byte [ebp - 0x70], 0
je 0x48c459
mov edi, dword [ebp - 0x84]
mov eax, dword [ebp - 0x74]
cmp edi, eax
jb 0x48c238
ja 0x48c22a
mov edx, dword [ebp - 0x88]
cmp edx, dword [ebp - 0x78]
jbe 0x48c238
mov esi, dword [ebp - 0x88]
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x34], edi
jmp 0x48c245
mov ecx, dword [ebp - 0x78]
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x34], eax
mov esi, ecx
mov edi, eax
lea edx, [ebp - 0x18]
push edx
push edi
push esi
mov ebx, dword [ebp - 0x4c]
push ebx
mov eax, dword [ebp - 0x50]
push eax
mov ecx, dword [ebp - 0x48]
push ecx
mov ecx, dword [0x72a504]
call fcn.004d0520
mov edx, dword [ebp - 0x18]
cmp dword [edx - 0xc], 0
jne 0x48c2a8
lea eax, [ebp - 0x18]
push eax
push edi
push esi
push ebx
mov ecx, dword [ebp - 0x50]
push ecx
mov edx, dword [ebp - 0x48]
push edx
mov ecx, dword [0x72a508]
call fcn.004d0520
mov eax, dword [ebp - 0x18]
cmp dword [eax - 0xc], 0
jne 0x48c2a8
lea ecx, [ebp - 0x18]
push ecx
push edi
push esi
push ebx
mov edx, dword [ebp - 0x50]
push edx
mov eax, dword [ebp - 0x48]
push eax
mov ecx, dword [0x72a50c]
call fcn.004d0520
mov ecx, dword [ebp - 0x18]
cmp dword [ecx - 0xc], 0
jne 0x48c459
lea edx, [ebp - 0x2c]
push edx
mov ecx, dword [ebp - 0x24]
call fcn.004c0dc0
add esp, 4
mov byte [ebp - 4], 7
lea eax, [ebp - 0x2c]
call fcn.00443930
test al, al
jne 0x48c44d
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x20]
push ecx
call fcn.004e3c80
add esp, 8
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x20]
cmp dword [edx - 0xc], 0
je 0x48c441
lea eax, [ebp - 0x80]
push eax
call fcn.00443eb0
mov byte [ebp - 4], 9
lea ebx, [ebp - 0x20]
lea edi, [ebp - 0x80]
call fcn.004441a0
mov byte [ebp - 0x12], 0
lea ecx, [ebp - 0x12]
push ecx
mov edx, edi
push edx
lea ecx, [ebp - 0x68]
call fcn.004415e0
add esp, 8
mov byte [ebp - 4], 0xa
mov eax, dword [ebp - 0x58]
sub eax, dword [ebp - 0x5c]
test eax, 0xfffffffc
je 0x48c427
xor edi, edi
lea esi, [ebp - 0x68]
call fcn.00424a10
mov ecx, dword [eax]
cmp dword [ecx - 0xc], 1
jle 0x48c427
call fcn.00424a10
lea ebx, [ebp - 0x18]
call fcn.0040dcb0
lea edx, [ebp - 0x28]
push edx
mov ecx, 0x6d5734
call fcn.0040b760
mov byte [ebp - 4], 0xb
mov eax, ebx
push eax
lea eax, [ebp - 0x28]
call fcn.004c1900
add esp, 4
test al, al
sete bl
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x28]
call fcn.0040b810
test bl, bl
je 0x48c3c0
push 0x6d5734
lea ecx, [ebp - 0x28]
push ecx
lea ecx, [ebp - 0x18]
call fcn.00424670
add esp, 8
mov byte [ebp - 4], 0xc
lea ebx, [ebp - 0x18]
call fcn.0040dcb0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x28]
call fcn.0040b810
xor ecx, ecx
mov edx, str.Heur.
lea esi, [ebp - 0x18]
call fcn.0041c8a0
test eax, eax
jne 0x48c405
lea edx, [ebp - 0x28]
push edx
lea ecx, [ebp - 0x20]
call fcn.0049f290
add esp, 4
mov byte [ebp - 4], 0xd
mov eax, dword [ebp - 0x28]
cmp dword [eax - 0xc], 0
je 0x48c3f9
lea eax, [ebp - 0x28]
mov ebx, esi
call fcn.0040dcb0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x28]
call fcn.0040b810
mov ecx, dword [ebp - 0x34]
push ecx
mov edx, dword [ebp - 0x38]
push edx
mov eax, dword [ebp - 0x4c]
push eax
mov ecx, dword [ebp - 0x50]
push ecx
mov edx, dword [ebp - 0x48]
push edx
lea edx, [ebp - 0x18]
mov ecx, dword [0x72a50c]
call fcn.004d03e0
mov byte [ebp - 4], 9
lea eax, [ebp - 0x68]
push eax
call fcn.0041cb00
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x80]
push ecx
call fcn.0041cb00
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x20]
call fcn.0040b810
mov byte [ebp - 4], 6
lea ebx, [ebp - 0x2c]
call fcn.004c2420
mov edx, dword [ebp - 0x18]
cmp dword [edx - 0xc], 0
je 0x48c491
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x2c]
push ecx
call fcn.00433a20
add esp, 8
mov byte [ebp - 4], 0xe
mov eax, dword [eax]
mov edx, dword [ebp + 8]
push edx
call fcn.0040b430
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x2c]
call fcn.0040ba40
mov byte [ebp - 0x11], 0
mov eax, dword [ebp + 8]
cmp dword [eax + 0x14], 0
setne cl
movzx edx, cl
push edx
call fcn.00492d80
add esp, 4
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x18]
call fcn.0040b810
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1c]
call fcn.0040ba40
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x24]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 4], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call fcn.0040ba40
mov al, byte [ebp - 0x11]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1c]
call fcn.0040ba40
mov byte [ebp - 4], 1
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 4], edi
lea ecx, [ebp + 0xc]
call fcn.0040ba40
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8