Function at 0x431da6
Capabilities:
Get file size

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x98
movzx eax, byte [ebp + 0x38]
test eax, eax
je 0x431fe8
lea eax, [ebp + 0x1c]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp + 0x34]
mov dword [ebp - 0x48], eax
lea eax, [ebp + 0xc]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x74]
movzx eax, byte [eax]
test eax, eax
je 0x431fde
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x90]
movzx eax, byte [eax]
test eax, eax
je 0x431e1c
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x64]
movzx eax, byte [eax]
test eax, eax
je 0x431e17
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetFileSize]
jmp 0x431fdc
mov dword [ebp - 8], 0xfffffff6
mov dword [ebp - 0x38], 0x5ec35211
mov dword [ebp - 0x8c], 2
mov dword [ebp - 8], 6
jmp 0x431e44
mov eax, dword [ebp - 8]
dec eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x431fc1
mov dword [ebp - 4], 0xbf2d3f50
mov dword [ebp - 0x6c], 2
cmp dword [ebp - 4], 0
jne 0x431e71
mov eax, 0x93e75cb5
test eax, eax
jne 0x431e71
and dword [ebp - 0x30], 0
jmp 0x431e78
mov dword [ebp - 0x30], 1
mov eax, dword [ebp - 8]
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 4]
cmp dword [ebp - 8], eax
jne 0x431e9b
mov dword [ebp - 0x28], 1
jmp 0x431e9f
and dword [ebp - 0x28], 0
cmp dword [ebp - 0x28], 0
ja 0x431eae
mov dword [ebp - 0x18], 1
jmp 0x431eb2
and dword [ebp - 0x18], 0
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0x18]
test eax, eax
jg 0x431ec5
mov dword [ebp - 0x20], 1
jmp 0x431ec9
and dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x20]
je 0x431eda
mov dword [ebp - 0x40], 1
jmp 0x431ede
and dword [ebp - 0x40], 0
cmp dword [ebp - 0x40], 0x17c7
jge 0x431ef2
or eax, 0xffffffff
jne 0x431ef2
and dword [ebp - 0x10], 0
jmp 0x431ef9
mov dword [ebp - 0x10], 1
mov eax, dword [ebp - 4]
imul eax, dword [ebp - 0x10]
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xfafb
je 0x431f15
mov dword [ebp - 0x14], 1
jmp 0x431f19
and dword [ebp - 0x14], 0
mov eax, dword [ebp - 4]
cmp eax, dword [ebp - 0x14]
jle 0x431f31
push 0xfffffffffffffffd
pop eax
test eax, eax
je 0x431f31
mov dword [ebp - 0x1c], 1
jmp 0x431f35
and dword [ebp - 0x1c], 0
mov eax, dword [ebp - 4]
imul eax, dword [ebp - 0x1c]
test eax, eax
jne 0x431f4c
cmp dword [ebp - 4], 0
jne 0x431f4c
and dword [ebp - 0x24], 0
jmp 0x431f53
mov dword [ebp - 0x24], 1
cmp dword [ebp - 0x24], 0x63372585
jle 0x431f65
mov dword [ebp - 0x2c], 1
jmp 0x431f69
and dword [ebp - 0x2c], 0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 8]
cmp dword [ebp - 4], eax
jle 0x431f80
mov dword [ebp - 0x34], 1
jmp 0x431f84
and dword [ebp - 0x34], 0
cmp dword [ebp - 0x34], 0xda37
jne 0x431f96
mov dword [ebp - 0x3c], 1
jmp 0x431f9a
and dword [ebp - 0x3c], 0
cmp dword [ebp - 0x3c], 0x87b35f19
jb 0x431fac
mov dword [ebp - 0x44], 1
jmp 0x431fb0
and dword [ebp - 0x44], 0
mov eax, dword [ebp - 0x44]
sub eax, dword [ebp - 0x8c]
mov dword [ebp - 0x6c], eax
jmp 0x431e3d
mov byte [ebp - 9], 0
movzx eax, byte [ebp - 9]
test eax, eax
je 0x431fdc
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowInfo]
jmp 0x431fe6
push 0
call fcn.004350b7
pop ecx
jmp 0x432066
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp + 0x3c]
mov dword [ebp - 0x68], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0x88], eax
mov eax, dword [ebp + 0x30]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x80], eax
lea eax, [ebp + 0x18]
mov dword [ebp - 0x70], eax
push dword [ebp - 0x84]
push 0x5693
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x58]
push dword [ebp - 0x60]
push dword [ebp - 0x68]
mov eax, dword [ebp - 0x70]
movzx eax, byte [eax]
push eax
push 0x6ca3
push 0
push dword [ebp - 0x78]
push dword [ebp - 0x80]
push dword [ebp - 0x88]
call fcn.00434775
add esp, 0x34
mov esp, ebp
pop ebp
ret