Function at 0x429760
Capabilities:
Get file size

Disassembly:
push 0xffffffffffffffff
push 0x4b429b
mov eax, dword fs:[0]
push eax
sub esp, 0x374
mov eax, dword [0x4f4930]
xor eax, esp
mov dword [esp + 0x370], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4f4930]
xor eax, esp
push eax
lea eax, [esp + 0x388]
mov dword fs:[0], eax
mov eax, dword [esp + 0x39c]
mov ebp, dword [esp + 0x398]
mov dword [esp + 0x1c], eax
mov eax, dword [ebp]
xor edi, edi
mov ebx, ecx
mov dword [esp + 0x18], ebx
cmp eax, edi
je 0x4297ce
push eax
call fcn.00470027
add esp, 4
mov dword [ebp], edi
mov dword [ebp + 4], edi
mov dword [ebp + 8], edi
lea esi, [esp + 0x24]
call fcn.004243d0
mov esi, 0x4d67fc
mov dword [esp + 0x24], esi
mov dword [esp + 0x378], 0x4d6804
mov dword [esp + 0x37c], edi
mov dword [esp + 0x380], edi
mov eax, dword [esp + 0x1c]
push edi
push ebx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x398], edi
call fcn.00424520
test al, al
je 0x4298de
mov edx, dword [esp + 0x28]
mov ebx, dword [sym.imp.KERNEL32.dll_GetFileSize]
lea ecx, [esp + 0x20]
push ecx
push edx
mov dword [esp + 0x28], edi
call ebx
mov esi, eax
cmp esi, 0xffffffff
jne 0x429840
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, edi
je 0x429840
xor esi, esi
mov ecx, dword [esp + 0x28]
lea eax, [esp + 0x20]
push eax
push ecx
mov dword [esp + 0x384], esi
mov dword [esp + 0x28], edi
call ebx
mov esi, eax
cmp esi, 0xffffffff
jne 0x42986a
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, edi
je 0x42986a
xor esi, esi
lea edx, [esi + 4]
push edx
call fcn.00470104
mov ebx, eax
add esp, 4
cmp ebx, edi
jne 0x42990f
mov eax, dword [esp + 0x1c]
mov dword [ebp + 0x24], 2
cmp byte [eax + 0x11c], 0
lea edi, [eax + 0xc]
jne 0x42989a
mov edi, dword [eax + 8]
mov ecx, dword [esp + 0x18]
call fcn.0041a480
mov esi, eax
push 0x4d6664
push 0x4d4204
mov edx, esi
call fcn.0041f080
add edi, 4
push edi
push 0x4d4204
mov edx, esi
call fcn.0041f080
mov dword [esp + 0x3a0], 0xffffffff
add esp, 0x10
mov dword [esp + 0x24], 0x4d67fc
jmp 0x4298f4
mov dword [esp + 0x390], 0xffffffff
mov dword [ebp + 0x24], 1
mov dword [esp + 0x24], esi
lea ecx, [esp + 0x24]
mov dword [esp + 0x378], 0x4d693c
call fcn.00424450
xor al, al
jmp 0x4299ff
mov edi, dword [esp + 0x18]
push esi
push ebx
push edi
lea ecx, [esp + 0x384]
call fcn.0042a110
test al, al
jne 0x429963
mov eax, dword [esp + 0x1c]
mov dword [ebp + 0x24], 3
cmp byte [eax + 0x11c], 0
lea ebx, [eax + 0xc]
jne 0x429940
mov ebx, dword [eax + 8]
mov ecx, edi
call fcn.0041a480
mov esi, eax
push 0x4d6120
push 0x4d4204
mov edx, esi
call fcn.0041f080
add ebx, 4
push ebx
jmp 0x4298ba
lea edi, [esp + 0x24]
call fcn.00424750
mov edx, dword [esp + 0x18]
push esi
push edx
xor eax, eax
xor ecx, ecx
push ebp
mov word [ebx + esi + 2], ax
mov word [ebx + esi], cx
call fcn.00429b80
test al, al
jne 0x4299d6
mov eax, dword [esp + 0x1c]
mov dword [ebp + 0x24], 4
cmp byte [eax + 0x11c], 0
je 0x4299a2
add eax, 0xc
jmp 0x4299a5
mov eax, dword [eax + 8]
mov ecx, dword [esp + 0x18]
add eax, 4
push eax
push 0x4d6120
call fcn.00403120
mov ecx, eax
call fcn.0041a870
mov dword [esp + 0x390], 0xffffffff
mov dword [esp + 0x24], 0x4d67fc
jmp 0x4298f4
mov dword [esp + 0x390], 0xffffffff
lea ecx, [esp + 0x24]
mov dword [esp + 0x24], 0x4d67fc
mov dword [esp + 0x378], 0x4d693c
call fcn.00424450
mov al, 1
mov ecx, dword [esp + 0x388]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x370]
xor ecx, esp
call fcn.0046fdae
add esp, 0x380
ret 8