Function at 0x449bf0
Capabilities:
Get file size

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x240
mov eax, dword [0x4ad100]
xor eax, ebp
mov dword [ebp - 8], eax
push ebx
mov ebx, dword [ebp + 8]
push esi
mov esi, dword [ebp + 0x10]
push edi
mov edi, ecx
mov ecx, dword [sym.imp.KERNEL32.DLL_CloseHandle]
mov dword [ebp - 0x234], ecx
mov eax, dword [edi]
cmp eax, 0xffffffff
je 0x449c2a
push eax
call ecx
mov dword [edi], 0xffffffff
push 0x214
lea eax, [ebp - 0x22c]
push 0
push eax
call fcn.00468420
add esp, 0xc
lea ecx, [ebp - 0x22c]
push esi
push ebx
call fcn.004499f0
mov eax, dword [esi + 8]
mov ebx, dword [sym.imp.KERNEL32.DLL_GetLastError]
mov dword [ebp - 0x230], ebx
test al, 1
je 0x449caa
cmp eax, 1
jne 0x449c6a
cmp dword [esi], 0
je 0x449caa
mov edx, dword [ebp - 0x24]
test edx, edx
je 0x449d70
mov ecx, dword [ebp - 0x1c]
mov eax, edx
sub ecx, edx
and ecx, 0xfffffffe
cmp ecx, 0x1000
jb 0x449c9b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x449f27
push ecx
push edx
call fcn.0046619b
add esp, 8
jmp 0x449d70
mov eax, dword [ebp - 0x24]
lea ecx, [ebp - 0x22c]
cmp eax, dword [ebp - 0x20]
push 0
push 0x10000000
push 2
push 0
push 0
cmovne ecx, eax
push 0xc0000000
push ecx
call dword [sym.imp.KERNEL32.DLL_CreateFileW]
mov dword [edi], eax
cmp eax, 0xffffffff
jne 0x449db6
call ebx
mov ecx, dword [0x4adc10]
mov ebx, eax
mov eax, dword [0x4adc14]
cmp ecx, 0x257edfd1
jne 0x449cfb
cmp eax, 0xb2ab117a
je 0x449d0a
cmp ecx, 0x257edfd0
jne 0x449d11
cmp eax, 0xb2ab117a
jne 0x449d11
test ebx, ebx
setne al
jmp 0x449d21
mov eax, dword [0x4adc08]
mov ecx, 0x4adc08
push ebx
mov eax, dword [eax + 0x18]
call eax
mov dword [esi], ebx
movzx eax, al
add eax, 2
mov dword [esi + 4], 0x4adc08
mov dword [esi + 8], eax
mov edx, dword [ebp - 0x24]
test edx, edx
je 0x449d6a
mov ecx, dword [ebp - 0x1c]
mov eax, edx
sub ecx, edx
and ecx, 0xfffffffe
cmp ecx, 0x1000
jb 0x449d60
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x449f27
push ecx
push edx
call fcn.0046619b
add esp, 8
mov ebx, dword [ebp - 0x230]
mov eax, dword [esi + 8]
test al, 1
je 0x449d89
cmp eax, 1
jne 0x449f14
cmp dword [esi], 0
jne 0x449f14
mov eax, dword [edi]
cmp eax, 0xffffffff
jne 0x449dfa
lea ecx, [ebp - 0x240]
call fcn.00449980
movq xmm0, qword [eax]
movq qword [esi], xmm0
xorps xmm0, xmm0
mov eax, dword [eax + 8]
mov dword [esi + 8], eax
movlpd qword [ebp - 0x14], xmm0
jmp 0x449e77
mov edx, dword [ebp - 0x24]
xorps xmm0, xmm0
movq qword [esi], xmm0
mov dword [esi + 8], 0
test edx, edx
je 0x449d70
mov ecx, dword [ebp - 0x1c]
mov eax, edx
sub ecx, edx
and ecx, 0xfffffffe
cmp ecx, 0x1000
jb 0x449c9b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x449f27
jmp 0x449c9b
lea ecx, [ebp - 0x14]
push ecx
push eax
call dword [sym.imp.KERNEL32.DLL_GetFileSizeEx]
test eax, eax
jne 0x449e69
call ebx
mov ecx, dword [0x4adc14]
mov ebx, eax
mov eax, dword [0x4adc10]
cmp eax, 0x257edfd1
jne 0x449e27
cmp ecx, 0xb2ab117a
je 0x449e36
cmp eax, 0x257edfd0
jne 0x449e3d
cmp ecx, 0xb2ab117a
jne 0x449e3d
test ebx, ebx
setne al
jmp 0x449e4d
mov eax, dword [0x4adc08]
mov ecx, 0x4adc08
push ebx
mov eax, dword [eax + 0x18]
call eax
mov dword [esi], ebx
xorps xmm0, xmm0
movzx eax, al
mov dword [esi + 4], 0x4adc08
add eax, 2
mov dword [esi + 8], eax
movlpd qword [ebp - 0x14], xmm0
jmp 0x449e77
xorps xmm0, xmm0
movq qword [esi], xmm0
mov dword [esi + 8], 0
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
mov dword [edi + 8], ecx
mov dword [edi + 0xc], eax
mov edx, dword [esi + 8]
test dl, 1
je 0x449f00
cmp edx, 1
jne 0x449e95
cmp dword [esi], 0
je 0x449f00
mov eax, dword [edi]
cmp eax, 0xffffffff
je 0x449f14
push eax
call dword [ebp - 0x234]
test eax, eax
jne 0x449ee7
call dword [ebp - 0x230]
mov esi, dword [0x4adc10]
mov edx, dword [0x4adc14]
cmp esi, 0x257edfd1
jne 0x449ec9
cmp edx, 0xb2ab117a
je 0x449ee7
cmp esi, 0x257edfd0
jne 0x449ed9
cmp edx, 0xb2ab117a
je 0x449ee7
push eax
mov eax, dword [0x4adc08]
mov ecx, 0x4adc08
call dword [eax + 0x18]
mov dword [edi], 0xffffffff
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.00466048
mov esp, ebp
pop ebp
ret 0xc
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0
mov dword [edi + 0x18], ecx
mov dword [edi + 0x1c], eax
mov ecx, dword [ebp - 8]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00466048
mov esp, ebp
pop ebp
ret 0xc
call fcn.0046b31f
int3