Function at 0x41e62f
Capabilities:
Get file size

Disassembly:
push 0x14
push 0x423e28
call fcn.00423b68
mov ebx, ecx
xor esi, esi
mov dword [ebp - 0x1c], esi
mov edi, dword [ebx + 0x420]
test edi, edi
jne 0x41e660
mov esi, 0xc00ee060
mov dword [0x42484c], 0x1040
jmp 0x41e964
test byte [ebp + 8], 1
je 0x41e691
lea eax, [ebp - 0x24]
push eax
push dword [ebx + 0x418]
call dword [sym.imp.KERNEL32.dll_GetFileSizeEx]
test eax, eax
jne 0x41e6c3
push 0x104a
call fcn.0040f835
mov edx, eax
lea ecx, [ebp - 0x1c]
call fcn.0041c7a5
mov esi, dword [ebp - 0x1c]
mov ecx, 0x80070570
test esi, esi
js 0x41e964
test byte [ebp + 8], 2
je 0x41e7ad
cmp dword [ebx + 0x438], 0x600000
jbe 0x41e6f9
mov dword [0x424850], 0x105f
jmp 0x41e7ab
cmp dword [ebp - 0x20], esi
jle 0x41e6db
mov ecx, 0x80070570
mov esi, ecx
mov dword [0x424850], 0x104e
jmp 0x41e696
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebx + 0x438]
je 0x41e691
mov ecx, 0x80070570
mov esi, ecx
mov dword [0x424850], 0x1052
jmp 0x41e696
cmp dword [ebx + 0x424], 0x60
je 0x41e711
mov dword [0x424850], 0x1063
jmp 0x41e7ab
mov eax, dword [ebx + 0x428]
cmp eax, 0x60
ja 0x41e72b
mov dword [0x424850], 0x1067
jmp 0x41e7ab
test eax, eax
jne 0x41e73b
mov dword [0x424850], 0x106b
jmp 0x41e7ab
mov edx, dword [ebx + 0x42c]
test edx, edx
jne 0x41e751
mov dword [0x424850], 0x106f
jmp 0x41e7ab
add edx, eax
cmp edx, eax
jb 0x41e7a1
mov eax, dword [ebx + 0x430]
cmp edx, eax
jne 0x41e7a1
test eax, eax
jne 0x41e771
mov dword [0x424850], 0x1077
jmp 0x41e7ab
mov edx, dword [ebx + 0x434]
test edx, edx
jne 0x41e787
mov dword [0x424850], 0x107b
jmp 0x41e7ab
add edx, eax
cmp edx, eax
jb 0x41e795
cmp edx, dword [ebx + 0x438]
je 0x41e7ad
mov dword [0x424850], 0x107f
jmp 0x41e7ab
mov dword [0x424850], 0x1073
mov esi, ecx
test esi, esi
js 0x41e964
and dword [ebp - 4], 0
mov edx, dword [edi + 4]
test edx, edx
jns 0x41e7d4
mov esi, ecx
mov dword [ebp - 0x1c], esi
mov dword [0x424850], 0x108b
jmp 0x41e89c
mov eax, dword [ebx + 0x424]
cmp eax, dword [edi + 0x5c]
je 0x41e7f3
mov esi, ecx
mov dword [ebp - 0x1c], esi
mov dword [0x424850], 0x108f
jmp 0x41e89c
mov eax, dword [ebx + 0x428]
cmp eax, dword [edi + 8]
je 0x41e812
mov esi, ecx
mov dword [ebp - 0x1c], esi
mov dword [0x424850], 0x1093
jmp 0x41e89c
mov eax, dword [ebx + 0x42c]
cmp eax, dword [edi + 0xc]
je 0x41e82e
mov esi, ecx
mov dword [ebp - 0x1c], esi
mov dword [0x424850], 0x1097
jmp 0x41e89c
mov eax, dword [ebx + 0x430]
cmp eax, dword [edi + 0x24]
je 0x41e84a
mov esi, ecx
mov dword [ebp - 0x1c], esi
mov dword [0x424850], 0x109b
jmp 0x41e89c
mov eax, dword [ebx + 0x434]
cmp eax, dword [edi + 0x28]
je 0x41e866
mov esi, ecx
mov dword [ebp - 0x1c], esi
mov dword [0x424850], 0x109f
jmp 0x41e89c
mov eax, dword [ebx + 0x42c]
cmp eax, dword [edi + 0x14]
jae 0x41e882
mov esi, ecx
mov dword [ebp - 0x1c], esi
mov dword [0x424850], 0x10a3
jmp 0x41e89c
mov eax, dword [ebx + 0x434]
cmp eax, dword [edi + 0x30]
jae 0x41e89c
mov esi, ecx
mov dword [ebp - 0x1c], esi
mov dword [0x424850], 0x10a7
test esi, esi
js 0x41e95d
mov eax, dword [edi + 0x40]
add eax, 0xffffff80
cmp eax, 1
ja 0x41e92d
xor esi, esi
test edx, 0xfffffff8
je 0x41e8c5
mov esi, ecx
mov dword [0x424850], 0x10b5
test esi, esi
js 0x41e928
push 0x6727
push dword [edi + 0x20]
push dword [ebx + 0x42c]
push dword [edi + 0x14]
push dword [edi + 0x10]
push dword [edi + 0x1c]
mov ecx, edx
shr ecx, 1
and cl, 1
mov edx, dword [edi + 0x18]
call fcn.0041e51d
mov esi, eax
mov edx, dword [edi + 4]
test esi, esi
js 0x41e928
push 0x1d
push dword [edi + 0x3c]
push dword [ebx + 0x434]
push dword [edi + 0x30]
push dword [edi + 0x2c]
push dword [edi + 0x38]
shr edx, 2
and dl, 1
mov dword [ebp - 0x1c], edx
mov edx, dword [edi + 0x34]
mov cl, byte [ebp - 0x1c]
call fcn.0041e51d
mov esi, eax
test esi, esi
js 0x41e928
xor esi, esi
mov dword [ebp - 0x1c], esi
jmp 0x41e95d
mov esi, ecx
mov dword [ebp - 0x1c], esi
mov dword [0x424850], 0x10dc
jmp 0x41e95d
mov dword [ebp - 4], 0xfffffffe
mov eax, esi
call fcn.00423bad
ret 4