Function at 0x431110
Capabilities:
Get file size

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x585aaa
mov eax, dword fs:[0]
push eax
sub esp, 0x28
push ebx
push esi
push edi
mov eax, dword [0x6531f0]
xor eax, esp
push eax
lea eax, [esp + 0x38]
mov dword fs:[0], eax
mov ebx, ecx
mov eax, dword [ebp + 8]
cmp eax, 0xffffffff
je 0x43163d
lea ecx, [esp + 0x24]
push ecx
xor edi, edi
push eax
mov dword [esp + 0x2c], edi
mov dword [esp + 0x30], edi
call dword [sym.imp.KERNEL32.dll_GetFileSizeEx]
test eax, eax
je 0x43163d
mov esi, dword [esp + 0x28]
mov ecx, dword [esp + 0x24]
cmp esi, edi
ja 0x43117c
cmp ecx, edi
jbe 0x43163d
cmp esi, 0xffffffff
ja 0x43163d
jb 0x431190
cmp ecx, 0xffffffff
jae 0x43163d
cmp esi, edi
jb 0x4311a9
ja 0x43119e
cmp ecx, 0x10000
jbe 0x4311a9
mov ecx, 0x10000
mov dword [esp + 0x20], edi
jmp 0x4311ad
mov dword [esp + 0x20], esi
mov edx, dword [ebp + 8]
push edi
push edi
push edx
lea eax, [esp + 0x1c]
push eax
call fcn.0046d270
add esp, 0x10
mov dword [esp + 0x40], edi
mov eax, dword [esp + 0x10]
cmp dword [eax], edi
je 0x43160d
cmp dword [eax + 4], edi
je 0x43160d
lea ecx, [esp + 0x18]
push ecx
mov dword [esp + 0x20], edi
call fcn.0040c980
mov byte [esp + 0x40], 1
mov eax, dword [esp + 0x24]
lea edx, [esp + 0x18]
push edx
push esi
push eax
mov eax, dword [ebp + 8]
lea ecx, [esp + 0x28]
push ecx
lea edx, [esp + 0x20]
push edx
push eax
lea ecx, [esp + 0x2c]
push ecx
call fcn.0046f550
add esp, 0x1c
mov byte [esp + 0x40], 2
mov edx, dword [esp + 0x18]
cmp dword [edx - 0xc], edi
je 0x43125c
mov eax, dword [0x66bbd0]
mov ecx, dword [0x66bbb8]
lea edx, [esp + 0x18]
mov dword [esp + 0x28], eax
push edx
lea eax, [esp + 0x30]
push eax
mov esi, 0x66bbb8
mov dword [esp + 0x2c], ecx
call fcn.00431870
lea esi, [esp + 0x24]
mov edi, eax
call fcn.00463e70
xor edi, edi
test al, al
je 0x4315f0
mov eax, dword [esp + 0x14]
cmp dword [eax], edi
je 0x4315f0
cmp dword [eax + 4], edi
je 0x4315f0
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 4]
mov eax, dword [eax]
mov esi, dword [esp + 0x1c]
push ecx
push eax
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x28]
push edx
push 0x66b670
mov ecx, esi
lea edx, [esp + 0x38]
mov dword [esp + 0x38], edi
mov dword [esp + 0x3c], edi
call fcn.0046f8b0
mov byte [esp + 0x40], 3
call fcn.0040e8f0
mov byte [esp + 0x40], 2
lea ecx, [esp + 0x1c]
call fcn.0040ca90
mov eax, dword [ebx]
cmp dword [eax - 0xc], 0
jne 0x4312ff
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 4]
mov eax, dword [eax]
push ecx
push eax
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x28]
push edx
push 0x66b6d8
mov ecx, esi
lea edx, [esp + 0x38]
call fcn.0046f8b0
mov byte [esp + 0x40], 4
call fcn.0040e8f0
mov byte [esp + 0x40], 2
lea ecx, [esp + 0x1c]
call fcn.0040ca90
mov eax, dword [ebx]
cmp dword [eax - 0xc], 0
jne 0x431344
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 4]
mov eax, dword [eax]
push ecx
push eax
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x28]
push edx
push 0x66b740
mov ecx, esi
lea edx, [esp + 0x38]
call fcn.0046f8b0
mov byte [esp + 0x40], 5
call fcn.0040e8f0
mov byte [esp + 0x40], 2
lea ecx, [esp + 0x1c]
call fcn.0040ca90
mov eax, dword [ebx]
cmp dword [eax - 0xc], 0
jne 0x431389
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 4]
mov eax, dword [eax]
push ecx
push eax
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x28]
push edx
push 0x66b7a8
mov ecx, esi
lea edx, [esp + 0x38]
call fcn.0046f8b0
mov byte [esp + 0x40], 6
call fcn.0040e8f0
mov byte [esp + 0x40], 2
lea ecx, [esp + 0x1c]
call fcn.0040ca90
mov eax, dword [ebx]
cmp dword [eax - 0xc], 0
jne 0x4313ce
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 4]
mov eax, dword [eax]
push ecx
push eax
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x28]
push edx
push 0x66b810
mov ecx, esi
lea edx, [esp + 0x38]
call fcn.0046f8b0
mov byte [esp + 0x40], 7
call fcn.0040e8f0
mov byte [esp + 0x40], 2
lea ecx, [esp + 0x1c]
call fcn.0040ca90
mov eax, dword [ebx]
cmp dword [eax - 0xc], 0
jne 0x431413
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 4]
mov eax, dword [eax]
push ecx
push eax
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x28]
push edx
push 0x66b878
mov ecx, esi
lea edx, [esp + 0x38]
call fcn.0046f8b0
mov byte [esp + 0x40], 8
call fcn.0040e8f0
mov byte [esp + 0x40], 2
lea ecx, [esp + 0x1c]
call fcn.0040ca90
mov eax, dword [ebx]
cmp dword [eax - 0xc], 0
jne 0x431458
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 4]
mov eax, dword [eax]
push ecx
push eax
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x28]
push edx
push 0x66b8e0
mov ecx, esi
lea edx, [esp + 0x38]
call fcn.0046f8b0
mov byte [esp + 0x40], 9
call fcn.0040e8f0
mov byte [esp + 0x40], 2
lea ecx, [esp + 0x1c]
call fcn.0040ca90
mov eax, dword [ebx]
cmp dword [eax - 0xc], 0
jne 0x43149d
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 4]
mov eax, dword [eax]
push ecx
push eax
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x28]
push edx
push 0x66b948
mov ecx, esi
lea edx, [esp + 0x38]
call fcn.0046f8b0
mov byte [esp + 0x40], 0xa
call fcn.0040e8f0
mov byte [esp + 0x40], 2
lea ecx, [esp + 0x1c]
call fcn.0040ca90
mov eax, dword [ebx]
cmp dword [eax - 0xc], 0
jne 0x4314e2
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 4]
mov eax, dword [eax]
push ecx
push eax
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x28]
push edx
push 0x66b9b0
mov ecx, esi
lea edx, [esp + 0x38]
call fcn.0046f8b0
mov byte [esp + 0x40], 0xb
call fcn.0040e8f0
mov byte [esp + 0x40], 2
lea ecx, [esp + 0x1c]
call fcn.0040ca90
mov eax, dword [ebx]
cmp dword [eax - 0xc], 0
jne 0x431527
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 4]
mov eax, dword [eax]
push ecx
push eax
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x28]
push edx
push 0x66ba18
mov ecx, esi
lea edx, [esp + 0x38]
call fcn.0046f8b0
mov byte [esp + 0x40], 0xc
call fcn.0040e8f0
mov byte [esp + 0x40], 2
lea ecx, [esp + 0x1c]
call fcn.0040ca90
mov eax, dword [ebx]
cmp dword [eax - 0xc], 0
jne 0x43156c
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 4]
mov eax, dword [eax]
push ecx
push eax
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x28]
push edx
push 0x66ba80
mov ecx, esi
lea edx, [esp + 0x38]
call fcn.0046f8b0
mov byte [esp + 0x40], 0xd
call fcn.0040e8f0
mov byte [esp + 0x40], 2
lea ecx, [esp + 0x1c]
call fcn.0040ca90
mov eax, dword [ebx]
cmp dword [eax - 0xc], 0
jne 0x4315b1
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 4]
mov eax, dword [eax]
push ecx
push eax
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x28]
push edx
push 0x66bae8
mov ecx, esi
lea edx, [esp + 0x38]
call fcn.0046f8b0
mov byte [esp + 0x40], 0xe
call fcn.0040e8f0
mov byte [esp + 0x40], 2
lea ecx, [esp + 0x1c]
call fcn.0040ca90
mov eax, dword [ebx]
cmp dword [eax - 0xc], 0
je 0x4315ee
mov eax, dword [0x66bb88]
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x28]
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], edx
test eax, eax
je 0x4315ee
lea ecx, [esp + 0x1c]
push ecx
call fcn.004733a0
add esp, 4
cmp eax, 0xffffffff
je 0x4315ee
mov edx, 0x630242
call fcn.0040caf0
xor edi, edi
mov byte [esp + 0x40], 1
lea edx, [esp + 0x14]
push edx
call fcn.00431660
mov byte [esp + 0x40], 0
lea ecx, [esp + 0x18]
call fcn.0040ca90
mov dword [esp + 0x40], 0xffffffff
mov eax, dword [esp + 0x10]
dec dword [eax + 8]
mov esi, eax
add eax, 8
cmp dword [eax], edi
jne 0x43163d
xor edi, edi
call fcn.00431b10
mov eax, dword [esp + 0x10]
push eax
call fcn.004fdb3f
add esp, 4
mov dword [esp + 0x10], edi
mov al, 1
mov ecx, dword [esp + 0x38]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4