Function at 0x42a1d0
Capabilities:
Get file size

Disassembly:
push 0xffffffffffffffff
push 0x4a8721
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x238
push ebx
push ebp
push esi
mov ebp, ecx
push edi
mov ecx, 0x80
xor eax, eax
lea edi, [esp + 0x48]
rep stosd dword es:[edi], eax
mov eax, dword [ebp + 0xac]
mov dword [esp + 0x28], ebp
mov dword [esp + 0x10], eax
mov eax, dword [ebp + 8]
mov dl, byte [eax + 0xfc]
and dl, 0x10
je 0x42a236
mov ecx, dword [eax + 0x18c]
test ecx, ecx
jne 0x42a236
mov ecx, dword [eax + 0x184]
mov ebx, dword [eax + 0x180]
mov dword [esp + 0x18], ecx
jmp 0x42a261
test dl, dl
je 0x42a257
cmp dword [eax + 0x18c], 1
jne 0x42a257
mov ebx, dword [eax + 0x180]
mov ecx, dword [eax + 0x184]
shl ebx, 1
mov dword [esp + 0x18], ecx
jmp 0x42a25d
xor ebx, ebx
mov dword [esp + 0x18], ebx
mov ecx, dword [esp + 0x18]
mov esi, dword [eax + 0x170]
shl esi, 0xb
test dl, dl
mov dword [esp + 0x1c], esi
jne 0x42a2ba
test byte [eax + 0xfc], 4
je 0x42a2db
mov ebx, dword [eax + 0x160]
test ebx, ebx
je 0x42a28a
shl ebx, 0xb
jmp 0x42a2ba
push ecx
add eax, 0x124
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004a57ee
call fcn.004108b0
add esp, 4
mov ecx, 9
call fcn.004a5d80
mov ecx, dword [esp + 0x18]
mov ebx, eax
add ebx, 0x1000
mov eax, ebx
shr eax, 1
mov edx, eax
mov byte [esp + 0x57], al
shr edx, 8
mov byte [esp + 0x58], dl
mov edx, eax
shr edx, 0x10
shr eax, 0x18
mov byte [esp + 0x59], dl
mov byte [esp + 0x5a], al
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x100]
test edx, edx
je 0x42a4e0
test byte [eax + 0xfc], 1
je 0x42a4e0
lea ecx, [esp + 0x20]
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0x2c]
mov dword [esp + 0x250], 0
call sub.MFC42.DLL_CFileFind::CFileFind
lea ecx, [esp + 0x24]
mov byte [esp + 0x250], 1
call sub.MFC42.DLL_CString::CString_1
mov eax, dword [0x4e60d8]
lea ecx, [esp + 0x20]
push eax
push str._sAP
push ecx
mov byte [esp + 0x25c], 2
call sub.MFC42.DLL_CString::Format
add esp, 8
lea edx, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x18], esp
push edx
call fcn.004a57ee
call fcn.004108b0
add esp, 4
mov ecx, 9
call fcn.004a5d80
mov ebx, eax
lea eax, [esp + 0x20]
push str._securelock.exe
lea ecx, [esp + 0x18]
push eax
push ecx
add ebx, 0x1000
call sub.MFC42.DLL_operator_1
mov eax, dword [eax]
mov edi, dword [sym.imp.KERNEL32.dll_CreateFileA]
push 0
push 0x81
push 3
push 0
push 1
push 0x80000000
push eax
call edi
lea ecx, [esp + 0x14]
mov esi, eax
call sub.MFC42.DLL_CString::CString
lea edx, [esp + 0x20]
push str.iStar.exe
lea eax, [esp + 0x18]
push edx
push eax
call sub.MFC42.DLL_operator_1
mov eax, dword [eax]
push 0
push 0x81
push 3
push 0
push 1
push 0x80000000
push eax
call edi
lea ecx, [esp + 0x14]
mov edi, eax
call sub.MFC42.DLL_CString::CString
mov ebp, dword [sym.imp.KERNEL32.dll_GetFileSize]
cmp esi, 0xffffffff
jne 0x42a3f8
mov dword [esp + 0x14], 0x135c
jmp 0x42a404
push 0
push esi
call ebp
shr eax, 9
mov dword [esp + 0x14], eax
cmp edi, 0xffffffff
jne 0x42a410
mov ebp, 0x47a
jmp 0x42a41a
push 0
push edi
call ebp
mov ebp, eax
shr ebp, 9
mov ecx, dword [0x4e60d8]
lea edx, [esp + 0x24]
push ecx
push str._sAP_securelock.exe
push edx
call sub.MFC42.DLL_CString::Format
mov eax, dword [esp + 0x30]
add esp, 0xc
lea ecx, [esp + 0x2c]
push 0
push eax
call sub.MFC42.DLL_CFileFind::FindFile
test eax, eax
je 0x42a44d
mov ecx, dword [esp + 0x14]
add ebp, ecx
mov eax, dword [esp + 0x10]
sub ebx, ebp
cmp eax, 0x3e8000
jb 0x42a469
lea edx, [eax + eax]
mov eax, 0x10624dd3
mul edx
shr edx, 6
add ebx, edx
mov ebp, dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, ebx
mov ecx, ebx
mov edx, ebx
shr eax, 8
shr ecx, 0x10
shr edx, 0x18
cmp esi, 0xffffffff
mov byte [esp + 0x57], bl
mov byte [esp + 0x58], al
mov byte [esp + 0x59], cl
mov byte [esp + 0x5a], dl
je 0x42a496
push esi
call ebp
cmp edi, 0xffffffff
je 0x42a49e
push edi
call ebp
lea ecx, [esp + 0x24]
mov byte [esp + 0x250], 1
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x2c]
mov byte [esp + 0x250], 0
call fcn.004a5a8e
lea ecx, [esp + 0x20]
mov dword [esp + 0x250], 0xffffffff
call sub.MFC42.DLL_CString::CString
mov ecx, dword [esp + 0x18]
mov ebp, dword [esp + 0x28]
mov esi, dword [esp + 0x1c]
mov edi, dword [ebp + 8]
lea edx, [esi + ecx]
mov esi, dword [esp + 0x10]
mov dword [esp + 0x1c], edx
mov al, byte [edi + 0xfd]
sub esi, edx
sub esi, ebx
cmp al, 1
jne 0x42a500
xor eax, eax
jmp 0x42a55b
mov eax, dword [edi + 0x15c]
test eax, eax
je 0x42a513
shl eax, 0xb
mov ebp, esi
sub ebp, eax
jmp 0x42a53c
mov eax, dword [edi + 0x104]
push 0
cdq
push esi
push edx
push eax
call fcn.004a5da0
push 0
push 0x3e8
push edx
push eax
call fcn.004a5e00
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov ebp, eax
mov al, byte [edi + 0x141]
test al, al
je 0x42a555
cmp al, 1
mov ebp, 0xb40
je 0x42a555
lea ebp, [esi - 0xb40]
mov eax, ebp
mov ebp, dword [esp + 0x28]
mov ebx, eax
mov byte [esp + 0x48], al
shr ebx, 8
mov byte [esp + 0x49], bl
mov ebx, eax
shr eax, 0x18
mov byte [esp + 0x4b], al
mov eax, edx
shr eax, 8
mov byte [esp + 0x4f], al
mov eax, edx
mov byte [esp + 0x4e], dl
mov byte [esp + 0x53], cl
shr eax, 0x10
shr edx, 0x18
mov byte [esp + 0x50], al
mov byte [esp + 0x51], dl
mov edx, ecx
mov eax, ecx
shr ebx, 0x10
shr edx, 8
shr eax, 0x10
shr ecx, 0x18
mov byte [esp + 0x4a], bl
mov byte [esp + 0x54], dl
mov byte [esp + 0x55], al
mov byte [esp + 0x56], cl
mov cl, byte [edi + 0xfc]
mov al, 0x20
test al, cl
mov bl, 0x51
je 0x42a5ef
mov dword [esp + 0x10], 0
mov byte [esp + 0x88], 0
mov byte [esp + 0x89], 0
mov byte [esp + 0x8a], 0
mov byte [esp + 0x8b], 0
mov byte [esp + 0x8c], bl
mov cl, byte [edi + 0x141]
test cl, cl
je 0x42a631
cmp byte [edi + 0xfd], 1
jne 0x42a631
mov dword [esp + 0x10], 0xb40
mov byte [esp + 0x88], 0x40
mov byte [esp + 0x89], 0xb
mov byte [esp + 0x8a], 0
mov byte [esp + 0x8b], 0
mov byte [esp + 0x8c], bl
mov si, word [edi + 0x310]
test si, si
jbe 0x42a70a
test byte [edi + 0xfc], al
jne 0x42a70a
xor eax, eax
xor ecx, ecx
mov al, byte [ebp + 0x18d]
mov cl, byte [ebp + 0x18c]
imul eax, ecx
xor edx, edx
xor ecx, ecx
mov dx, word [ebp + 0x18a]
mov cl, byte [ebp + 0x189]
imul eax, edx
imul eax, ecx
xor edx, edx
mov ecx, dword [esp + 0x10]
mov dl, byte [ebp + 0x188]
and esi, 0xffff
imul eax, edx
cdq
and edx, 0x3ff
add eax, edx
lea edx, [ecx*8]
sar eax, 0xa
shl esi, 0xb
lea eax, [eax + eax*4]
lea edi, [eax + eax*4]
mov eax, 0x51eb851f
mul edx
shr edx, 5
lea edi, [edi + edi*4]
add edx, ecx
shl edi, 3
cmp edx, esi
jb 0x42a6d4
cmp edi, edx
ja 0x42a6c4
mov edx, edi
cmp esi, edx
mov dword [esp + 0x10], edx
ja 0x42a6d0
mov dword [esp + 0x10], esi
mov ecx, dword [esp + 0x10]
mov eax, ecx
mov edx, ecx
mov dword [ebp + 0xac], ecx
mov byte [esp + 0x88], cl
shr eax, 8
shr edx, 0x10
shr ecx, 0x18
mov byte [esp + 0x89], al
mov byte [esp + 0x8a], dl
mov byte [esp + 0x8b], cl
mov byte [esp + 0x8c], bl
push 0xc8
mov byte [esp + 0x14a], 0x4a
mov byte [esp + 0x14b], 0x4e
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [ebp + 0x1c]
lea eax, [esp + 0x48]
push eax
push 0x200
push 0x99
push ecx
call fcn.0048fba0
add esp, 0x10
test eax, eax
jne 0x42a75b
lea edx, [esp + 0x1c]
push 0x4d8340
push edx
mov dword [esp + 0x24], 0x90500
call sub.MSVCRT.dll__CxxThrowException
mov ecx, dword [esp + 0x248]
pop edi
pop esi
pop ebp
mov eax, 1
mov dword fs:[0], ecx
pop ebx
add esp, 0x244
ret