Function at 0x440750
Capabilities:
Get file size

Disassembly:
push 0xffffffffffffffff
push 0x4a8ef1
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x23c
push ebx
push ebp
push esi
mov ebx, ecx
push edi
mov ecx, 0x80
xor eax, eax
lea edi, [esp + 0x4c]
rep stosd dword es:[edi], eax
mov al, byte [ebx + 0x18d]
xor esi, esi
test al, al
mov dword [esp + 0x14], esi
jbe 0x4407fc
xor ecx, ecx
xor edx, edx
mov cl, byte [ebx + 0x192]
mov dx, word [ebx + 0x190]
mov edi, ecx
lea ecx, [esp + 0x14d]
imul edi, edx
and eax, 0xff
lea ebp, [ebx + 0x31c]
mov dword [esp + 0x1c], eax
mov dx, word [ebp]
cmp word [ebx + 0x18e], dx
jbe 0x4407d2
mov ax, word [ebx + 0x18e]
sub eax, edx
jmp 0x4407d4
xor eax, eax
mov edx, eax
add ebp, 2
and edx, 0xffff
add ecx, 2
imul edx, edi
add esi, edx
xor edx, edx
mov dl, ah
mov byte [ecx - 3], dl
mov byte [ecx - 2], al
mov eax, dword [esp + 0x1c]
dec eax
mov dword [esp + 0x1c], eax
jne 0x4407ba
xor eax, eax
mov byte [esp + 0x60], 1
mov al, byte [ebx + 0xed]
mov dword [esp + 0x10], esi
sub eax, 2
je 0x44083a
sub eax, 2
jne 0x44084e
mov ecx, dword [ebx + 8]
xor eax, eax
mov al, byte [ebx + 0xc4]
mov edx, dword [ecx + eax*4 + 0x268]
test edx, edx
je 0x44084e
mov eax, dword [ebx + eax*4 + 0x3a4]
cmp esi, eax
jbe 0x44084e
jmp 0x44084a
mov edx, dword [ebx + 8]
mov eax, dword [edx + 0x1f4]
shl eax, 0xb
cmp esi, eax
jbe 0x44084e
mov dword [esp + 0x10], eax
mov eax, dword [ebx + 8]
mov dl, byte [eax + 0xfc]
mov cl, dl
and cl, 0x10
je 0x44087e
mov esi, dword [eax + 0x18c]
test esi, esi
jne 0x44087e
mov esi, dword [eax + 0x180]
mov edi, dword [eax + 0x184]
mov dword [esp + 0x2c], esi
mov dword [esp + 0x24], edi
jmp 0x4408a3
test cl, cl
je 0x440895
cmp dword [eax + 0x18c], 1
jne 0x440895
mov esi, dword [eax + 0x180]
shl esi, 1
jmp 0x440897
xor esi, esi
mov dword [esp + 0x2c], esi
mov dword [esp + 0x24], 0
mov edi, dword [eax + 0x170]
shl edi, 0xb
test cl, cl
mov dword [esp + 0x20], edi
je 0x4408b8
mov eax, esi
jmp 0x440909
test dl, 4
je 0x440928
mov ecx, dword [eax + 0x160]
test ecx, ecx
je 0x4408d0
shl ecx, 0xb
mov dword [esp + 0x14], ecx
jmp 0x440905
push ecx
add eax, 0x124
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004a57ee
call fcn.004108b0
add esp, 4
mov ecx, 9
call fcn.004a5d80
mov esi, dword [esp + 0x2c]
mov edi, dword [esp + 0x20]
add eax, 0x1000
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x14]
shr eax, 1
mov ecx, eax
mov edx, eax
mov byte [esp + 0x5b], al
shr ecx, 8
shr edx, 0x10
shr eax, 0x18
mov byte [esp + 0x5c], cl
mov byte [esp + 0x5d], dl
mov byte [esp + 0x5e], al
mov eax, dword [ebx + 8]
mov ecx, dword [eax + 0x100]
test ecx, ecx
je 0x44093e
test byte [eax + 0xfc], 1
jne 0x440959
cmp byte [eax + 0xfc], 0x10
jne 0x440b65
mov ecx, dword [eax + 0x198]
test ecx, ecx
je 0x440b65
lea ecx, [esp + 0x28]
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0x30]
mov dword [esp + 0x254], 0
call sub.MFC42.DLL_CFileFind::CFileFind
lea ecx, [esp + 0x1c]
mov byte [esp + 0x254], 1
call sub.MFC42.DLL_CString::CString_1
mov eax, dword [0x4e60d8]
lea ecx, [esp + 0x28]
push eax
push str._sAP
push ecx
mov byte [esp + 0x260], 2
call sub.MFC42.DLL_CString::Format
add esp, 8
lea edx, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x1c], esp
push edx
call fcn.004a57ee
call fcn.004108b0
add esp, 4
mov ecx, 9
call fcn.004a5d80
mov esi, eax
lea eax, [esp + 0x28]
push str._securelock.exe
lea ecx, [esp + 0x1c]
push eax
push ecx
add esi, 0x1000
call sub.MFC42.DLL_operator_1
mov eax, dword [eax]
mov edi, dword [sym.imp.KERNEL32.dll_CreateFileA]
push 0
push 0x81
push 3
push 0
push 1
push 0x80000000
push eax
call edi
lea ecx, [esp + 0x18]
mov ebp, eax
call sub.MFC42.DLL_CString::CString
lea edx, [esp + 0x28]
push str.iStar.exe
lea eax, [esp + 0x18]
push edx
push eax
call sub.MFC42.DLL_operator_1
mov eax, dword [eax]
push 0
push 0x81
push 3
push 0
push 1
push 0x80000000
push eax
call edi
lea ecx, [esp + 0x14]
mov dword [esp + 0x18], eax
call sub.MFC42.DLL_CString::CString
mov edi, dword [sym.imp.KERNEL32.dll_GetFileSize]
cmp ebp, 0xffffffff
jne 0x440a5a
mov dword [esp + 0x14], 0x135c
jmp 0x440a66
push 0
push ebp
call edi
shr eax, 9
mov dword [esp + 0x14], eax
cmp dword [esp + 0x18], 0xffffffff
jne 0x440a74
mov edi, 0x47a
jmp 0x440a82
mov ecx, dword [esp + 0x18]
push 0
push ecx
call edi
mov edi, eax
shr edi, 9
mov edx, dword [0x4e60d8]
lea eax, [esp + 0x1c]
push edx
push str._sAP_securelock.exe
push eax
call sub.MFC42.DLL_CString::Format
mov ecx, dword [esp + 0x28]
add esp, 0xc
push 0
push ecx
lea ecx, [esp + 0x38]
call sub.MFC42.DLL_CFileFind::FindFile
test eax, eax
je 0x440ab5
mov edx, dword [esp + 0x14]
add edi, edx
mov eax, dword [esp + 0x10]
sub esi, edi
cmp eax, 0x3e8000
jb 0x440ad6
lea ecx, [eax + eax]
mov eax, 0x10624dd3
mul ecx
shr edx, 6
lea esi, [esi + edx + 0x4000]
mov edx, dword [ebx + 8]
shr esi, 1
mov cl, byte [edx + 0xfc]
shl esi, 1
mov eax, esi
cmp cl, 0x10
mov dword [esp + 0x14], eax
je 0x440b0d
shr eax, 1
mov ecx, eax
mov edx, eax
mov byte [esp + 0x5b], al
shr ecx, 8
shr edx, 0x10
shr eax, 0x18
mov byte [esp + 0x5c], cl
mov byte [esp + 0x5d], dl
mov byte [esp + 0x5e], al
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp ebp, 0xffffffff
je 0x440b1b
push ebp
call esi
mov eax, dword [esp + 0x18]
cmp eax, 0xffffffff
je 0x440b27
push eax
call esi
lea ecx, [esp + 0x1c]
mov byte [esp + 0x254], 1
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x30]
mov byte [esp + 0x254], 0
call fcn.004a5a8e
lea ecx, [esp + 0x28]
mov dword [esp + 0x254], 0xffffffff
call sub.MFC42.DLL_CString::CString
mov esi, dword [esp + 0x2c]
mov edi, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebp, dword [ebx + 8]
add ecx, edi
mov edi, eax
sub edi, ecx
mov dword [esp + 0x20], ecx
sub edi, esi
sub edi, edx
cmp dword [ebp + 0x188], 0
jne 0x440b9e
test byte [ebp + 0xfc], 0x10
je 0x440b9e
shr esi, 1
mov edi, eax
sub edi, esi
sub edi, ecx
sub edi, edx
cmp byte [ebp + 0xfd], 1
jne 0x440bcd
xor eax, eax
cmp byte [ebp + 0xfc], 0x10
jne 0x440c69
mov esi, dword [ebp + 0x198]
test esi, esi
je 0x440c69
shr edx, 1
mov eax, edx
jmp 0x440c69
mov eax, dword [ebp + 0x15c]
test eax, eax
je 0x440be2
shl eax, 0xb
mov edx, eax
mov eax, edi
sub eax, edx
jmp 0x440c4b
mov eax, dword [ebp + 0x12c]
test eax, eax
je 0x440c2c
mov eax, dword [ebp + 0x128]
mov esi, 0x4e5a9c
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x440c1b
test cl, cl
je 0x440c17
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x440c1b
add eax, 2
add esi, 2
test cl, cl
jne 0x440bf7
xor eax, eax
jmp 0x440c20
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x440c2c
mov eax, dword [ebp + 0x12c]
jmp 0x440c4b
mov eax, dword [ebp + 0x104]
push 0
cdq
push edi
push edx
push eax
call fcn.004a5da0
push 0
push 0x3e8
push edx
push eax
call fcn.004a5e00
mov cl, byte [ebp + 0x141]
test cl, cl
je 0x440c65
cmp cl, 1
mov eax, 0xb40
je 0x440c65
lea eax, [edi - 0xb40]
mov ecx, dword [esp + 0x20]
mov edx, eax
mov byte [esp + 0x4c], al
shr edx, 8
mov byte [esp + 0x4d], dl
mov edx, eax
shr eax, 0x18
shr edx, 0x10
mov byte [esp + 0x4f], al
mov eax, ecx
mov byte [esp + 0x4e], dl
mov edx, ecx
shr eax, 8
mov byte [esp + 0x52], cl
mov byte [esp + 0x53], al
mov eax, dword [esp + 0x24]
shr edx, 0x10
shr ecx, 0x18
mov byte [esp + 0x54], dl
mov byte [esp + 0x55], cl
mov ecx, eax
mov edx, eax
mov byte [esp + 0x57], al
shr ecx, 8
shr edx, 0x10
shr eax, 0x18
mov byte [esp + 0x58], cl
mov byte [esp + 0x59], dl
mov byte [esp + 0x5a], al
mov al, byte [ebp + 0xfc]
test al, 0x20
je 0x440cd6
mov dword [esp + 0x10], 0
mov al, byte [ebp + 0x141]
test al, al
je 0x440cf1
cmp byte [ebp + 0xfd], 1
jne 0x440cf1
mov dword [esp + 0x10], 0xb40
mov cx, word [ebp + 0x310]
test cx, cx
jbe 0x440d7a
xor eax, eax
xor edx, edx
mov al, byte [ebx + 0x192]
mov dx, word [ebx + 0x190]
imul eax, edx
xor edx, edx
and ecx, 0xffff
mov dx, word [ebx + 0x18e]
imul eax, edx
xor edx, edx
mov dl, byte [ebx + 0x18d]
imul eax, edx
cdq
and edx, 0x3ff
add eax, edx
sar eax, 0xa
shl ecx, 0xb
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
lea esi, [eax + eax*4]
mov eax, dword [esp + 0x10]
shl esi, 3
lea edx, [eax*8]
mov eax, 0x51eb851f
mul edx
mov eax, dword [esp + 0x10]
shr edx, 5
add edx, eax
cmp edx, ecx
jb 0x440d7a
cmp esi, edx
ja 0x440d6e
mov edx, esi
cmp ecx, edx
mov dword [esp + 0x10], edx
ja 0x440d7a
mov dword [esp + 0x10], ecx
mov eax, dword [esp + 0x10]
mov byte [esp + 0x90], 0x51
mov byte [esp + 0x8c], al
mov ecx, eax
mov edx, eax
mov byte [esp + 0x14a], 0x4a
shr eax, 0x18
mov byte [esp + 0x8f], al
lea eax, [esp + 0x4c]
shr ecx, 8
mov byte [esp + 0x8d], cl
mov ecx, dword [ebx + 0x1c]
push eax
push 0x200
shr edx, 0x10
push 0x99
push ecx
mov byte [esp + 0x9e], dl
mov byte [esp + 0x15b], 0x4e
call fcn.0048fba0
add esp, 0x10
test eax, eax
jne 0x440df5
lea edx, [esp + 0x20]
push 0x4d8340
push edx
mov dword [esp + 0x28], 0x90500
call sub.MSVCRT.dll__CxxThrowException
mov al, byte [ebx + 0x24]
cmp al, 0x92
je 0x440e09
cmp al, 0x96
je 0x440e09
test byte [ebx + 0x110], 8
je 0x440e12
push 0
mov ecx, ebx
call fcn.0044a5c0
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
push 0x12c
call esi
mov eax, dword [ebx + 0x10c]
test eax, eax
jne 0x440e4b
mov ecx, ebx
call fcn.0041ba60
test eax, eax
jne 0x440e4b
lea eax, [esp + 0x24]
push 0x4d8340
push eax
mov dword [esp + 0x2c], 0x92100
call sub.MSVCRT.dll__CxxThrowException
mov ecx, dword [ebx + 8]
cmp byte [ecx + 0xfc], 0x40
jne 0x440e6c
cmp word [ebx + 0x26], 0xbc01
jne 0x440e63
push 0xb
jmp 0x440e65
push 0xf
mov ecx, ebx
call fcn.00443d70
push 0x1f4
call esi
mov ecx, dword [esp + 0x24c]
pop edi
pop esi
pop ebp
mov eax, 1
mov dword fs:[0], ecx
pop ebx
add esp, 0x248
ret