Function at 0x401e3a
Capabilities:
Get file size

Disassembly:
mov eax, 0x422fac
call fcn.00415c8c
sub esp, 0x54
push ebx
push ebp
mov ebp, ecx
push esi
test dword [ebp], 0x1000000
push edi
mov edi, dword [esp + 0x78]
je 0x40222c
mov eax, dword [0x430004]
mov ebx, dword [sym.imp.USER32.dll_MessageBoxA]
xor esi, esi
push 0x3a
pop ecx
cmp eax, ecx
cmove eax, ecx
inc eax
mov ecx, 0xb2
cmove eax, ecx
or eax, 0x2b9
mov dword [esp + 0x14], esi
mov dword [0x430004], eax
jne 0x401ea0
push 0x2bc
mov eax, 0x425334
push eax
push eax
push esi
call ebx
mov eax, dword [0x430004]
mov ecx, 0x1ac
cmp eax, ecx
cmove eax, ecx
mov dword [0x430004], eax
test eax, eax
jne 0x401ec7
push 0x2c0
mov eax, 0x425338
push eax
push eax
push esi
call ebx
mov eax, dword [0x430004]
mov ecx, dword [section..data]
shl eax, 0xd
or eax, 1
mov dword [0x430004], eax
mov eax, ecx
not eax
and eax, 0x3b9
neg eax
sbb eax, eax
mov edx, 0x80000000
and eax, edx
add eax, edx
shr ecx, 1
or ecx, eax
xor eax, eax
mov dword [esp + 0x2c], esi
mov dword [esp + 0x30], esi
mov dword [section..data], ecx
mov dword [esp + 0x30], 7
mov dword [esp + 0x2c], esi
mov word [esp + 0x1c], ax
mov dword [esp + 0x6c], esi
lea eax, [esp + 0x4c]
push edi
push eax
call fcn.004044b5
mov byte [esp + 0x74], 1
lea ecx, [esp + 0x24]
push ecx
push eax
lea eax, [esp + 0x44]
push eax
call fcn.00407d0f
add esp, 0x14
mov byte [esp + 0x6c], 3
push esi
push 1
lea ecx, [esp + 0x54]
call fcn.00401a93
mov byte [esp + 0x6c], 4
push esi
push 1
lea ecx, [esp + 0x24]
call fcn.00401a93
lea eax, [esp + 0x34]
push esi
push eax
call fcn.0040836c
pop ecx
pop ecx
test al, al
je 0x40221b
cmp dword [esp + 0x48], 8
lea eax, [ebp + 0x408]
push eax
lea esi, [esp + 0x38]
cmovae esi, dword [esp + 0x38]
push 1
mov ecx, ebp
call fcn.0040fb3c
push 0
push 0x80
push 3
push 0
push 1
push 0x80000000
push esi
call dword [eax]
mov esi, eax
xor eax, eax
mov dword [esp + 0x78], esi
cmp esi, 0xffffffff
je 0x4021e8
lea eax, [ebp + 0x478]
push eax
push 1
mov ecx, ebp
call fcn.0040fb3c
xor ecx, ecx
push ecx
push ecx
push ecx
push 2
push ecx
push esi
call dword [eax]
mov dword [esp + 0x10], eax
cmp eax, 0xffffffff
je 0x4021ef
mov ecx, dword [section..data]
mov edx, ecx
not edx
and edx, 0x3b9
neg edx
sbb edx, edx
neg edx
lea esi, [ecx + ecx]
mov ecx, dword [0x430004]
or esi, edx
mov dword [section..data], esi
test ecx, ecx
jne 0x402023
push 0x2bd
mov eax, 0x42533c
push eax
push eax
push ecx
call ebx
mov ecx, dword [0x430004]
mov esi, dword [section..data]
mov eax, esi
not eax
and eax, 0x3b9
shl ecx, 9
or ecx, 0x64001
neg eax
sbb eax, eax
mov edx, 0x80000000
and eax, edx
shr esi, 1
add eax, edx
or esi, eax
mov dword [section..data], esi
xor esi, esi
mov dword [0x430004], ecx
test ecx, ecx
jne 0x40206d
push 0x15b
mov eax, 0x425340
push eax
push eax
push esi
call ebx
mov ecx, dword [0x430004]
or ecx, 0x21
lea eax, [ebp + 0x2a4]
push eax
mov dword [0x430004], ecx
push 1
mov ecx, ebp
call fcn.0040fb3c
push esi
push esi
push esi
push 4
push dword [esp + 0x20]
call dword [eax]
push esi
push dword [esp + 0x7c]
mov ebp, eax
call dword [sym.imp.KERNEL32.dll_GetFileSize]
push 0x164
mov esi, eax
call fcn.00414b8a
pop ecx
mov dword [esp + 0x18], eax
mov byte [esp + 0x6c], 5
test eax, eax
je 0x4020c7
push 0
push esi
push ebp
mov ecx, eax
call fcn.00404c17
mov esi, eax
jmp 0x4020c9
xor esi, esi
mov byte [esp + 0x6c], 4
mov edx, dword [0x430004]
mov ecx, dword [section..data]
inc edx
mov eax, 0x2a0
cmove edx, eax
mov eax, ecx
not eax
and eax, 0x3b9
shl edx, 0xb
or edx, 1
neg eax
sbb eax, eax
and eax, 0x80000000
add eax, 0x80000000
shr ecx, 1
or ecx, eax
mov dword [0x430004], edx
mov dword [section..data], ecx
test edx, edx
jne 0x402121
push edx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov edx, dword [0x430004]
or edx, 0x3de
mov dword [0x430004], edx
jne 0x40215e
push 0x148
mov eax, 0x425344
push eax
push eax
push 0
call ebx
mov edx, dword [0x430004]
test edx, edx
jne 0x40215e
push 0x2b6
mov eax, 0x425348
push eax
push eax
push edx
call ebx
mov edx, dword [0x430004]
mov ecx, dword [section..data]
mov eax, ecx
not eax
and eax, 0x3b9
neg eax
sbb eax, eax
mov ebx, 0x80000000
and eax, ebx
add eax, ebx
shr ecx, 1
or ecx, eax
push 0x51
pop eax
cmp edx, eax
cmove edx, eax
inc edx
mov eax, 0xa0
cmove edx, eax
or edx, 0x3b
test byte [esi], 0x80
mov dword [section..data], ecx
mov dword [0x430004], edx
jne 0x4021b9
cmp dword [esi + 4], 0
je 0x4021b9
mov ecx, esi
call fcn.00404f5a
push esi
call fcn.00414bd9
pop ecx
jmp 0x4021d5
mov eax, dword [esi + 0xc]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], eax
lea eax, [esp + 0x18]
push eax
mov ecx, 0x432acc
call fcn.004015ef
mov dword [eax], esi
test ebp, ebp
je 0x4021e0
push ebp
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov eax, dword [esp + 0x10]
mov esi, dword [esp + 0x78]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp esi, 0xffffffff
je 0x4021fb
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, dword [esp + 0x14]
test esi, esi
je 0x402219
or dword [esp + 0x6c], 0xffffffff
push 0
push 1
lea ecx, [esp + 0x3c]
call fcn.00401a93
mov eax, esi
jmp 0x40223b
xor esi, esi
or dword [esp + 0x6c], 0xffffffff
push esi
push 1
lea ecx, [esp + 0x3c]
call fcn.00401a93
cmp dword [edi + 0x14], 0x10
jb 0x402234
mov edi, dword [edi]
push edi
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ecx, dword [esp + 0x64]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
leave
ret 4