Function at 0x443748
Capabilities:
Get file size

Disassembly:
push ebp
mov ebp, esp
push eax
mov eax, 2
add esp, 0xfffff004
push eax
dec eax
jne 0x443751
mov eax, dword [ebp - 4]
add esp, 0xffffffd8
push ebx
push esi
push edi
mov byte [ebp - 6], cl
mov byte [ebp - 5], dl
mov dword [ebp - 4], eax
mov byte [ebp - 7], 0
mov ecx, 0x8000000
mov edx, 0x80000000
mov eax, dword [ebp - 4]
call fcn.004adc9c
mov ebx, eax
cmp ebx, 0xffffffff
jne 0x44379b
mov edx, dword [ebp - 4]
mov ax, 1
call fcn.004acdac
jmp 0x443c00
push 0
push ebx
call sub.kernel32.dll_GetFileSize_1
mov esi, eax
test esi, esi
jne 0x4437b4
push ebx
call sub.kernel32.dll_CloseHandle_1
jmp 0x443c00
push 4
push 0x1000
push esi
push 0
call sub.kernel32.dll_VirtualAlloc_1
mov edi, eax
test edi, edi
jne 0x4437f1
mov dword [ebp - 0x202c], esi
fild dword [ebp - 0x202c]
add esp, 0xfffffff8
fistp qword [esp]
wait
call fcn.004b1e30
mov edx, eax
mov ax, 0xb
call fcn.004acdac
jmp 0x443c00
push esi
push edi
push ebx
call sub.kernel32.dll__lread
mov edx, dword [0x4be6b0]
mov dword [edx], eax
push ebx
call sub.kernel32.dll_CloseHandle_1
mov eax, dword [0x4be6b0]
cmp esi, dword [eax]
jle 0x44382d
mov edx, dword [ebp - 4]
mov ax, 2
call fcn.004acdac
push 0x4000
push esi
push edi
call sub.kernel32.dll_VirtualFree_1
jmp 0x443c00
mov eax, dword [0x4bee68]
cmp byte [eax], 3
jb 0x44383d
cmp dword [ebp + 8], 0
je 0x44384b
mov ecx, esi
mov edx, edi
xor eax, eax
call fcn.0040ee84
mov dword [ebp - 0x14], eax
mov eax, dword [0x4bee68]
cmp byte [eax], 3
jae 0x44389d
mov eax, dword [0x4bdb70]
not eax
cmp eax, dword [ebp - 0x14]
je 0x4438b7
mov eax, dword [0x4bdb74]
not eax
cmp eax, dword [ebp - 0x14]
je 0x4438b7
mov eax, dword [0x4bdb78]
not eax
cmp eax, dword [ebp - 0x14]
je 0x4438b7
mov ax, 0x2ec
call fcn.004aa600
mov edx, 4
call fcn.004b12a8
push 0x4000
push esi
push edi
call sub.kernel32.dll_VirtualFree_1
jmp 0x443c00
call fcn.00416d84
test al, al
jne 0x4438b7
push 0x4000
push esi
push edi
call sub.kernel32.dll_VirtualFree_1
jmp 0x443c00
mov eax, 0x33c
call fcn.00402504
mov dword [ebp - 0x18], eax
mov edx, 0x33c
mov eax, dword [ebp - 0x18]
call fcn.004066e4
mov ebx, dword [ebp - 0x18]
mov dword [ebx], edi
mov al, byte [ebp - 5]
mov byte [ebx + 0xe], al
cmp dword [ebp + 8], 0
setne al
mov byte [ebx + 0xf], al
test al, al
jne 0x4438f2
mov eax, dword [0x4be8f0]
mov byte [eax], 0
mov al, byte [ebp - 6]
xor al, 1
mov byte [ebx + 0xc], al
test al, al
jne 0x443acd
mov dl, 1
cmp dword [ebp + 8], 0
je 0x44392e
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1c], eax
mov eax, 1
mov ecx, dword [ebp - 0x1c]
mov ecx, dword [ecx + eax*4 + 0x310]
cmp ecx, dword [ebp - 0x14]
jne 0x443928
xor edx, edx
jmp 0x44392e
inc eax
cmp eax, 0xb
jne 0x443915
test dl, dl
je 0x443acd
cmp dword [ebp + 8], 0
je 0x443960
mov edx, dword [ebp + 8]
mov eax, 1
cmp dword [edx + eax*4 + 0x310], 0
jne 0x44395a
mov ecx, dword [ebp - 0x14]
mov dword [edx + eax*4 + 0x310], ecx
jmp 0x443960
inc eax
cmp eax, 0xb
jne 0x443944
mov byte [ebx + 0xc], 1
mov eax, dword [0x4be784]
cmp byte [eax + 0x192c], 1
je 0x44398a
mov eax, dword [0x4be784]
cmp byte [eax + 0x192c], 2
jne 0x443986
cmp byte [ebx + 0xe], 0
jne 0x44398a
xor eax, eax
jmp 0x44398c
mov al, 1
mov byte [ebx + 0xd], al
push 4
push 0x1000
push 0x2000
push 0
call sub.kernel32.dll_VirtualAlloc_1
mov dword [ebx + 4], eax
push 4
push 0x1000
push 0x2000
push 0
call sub.kernel32.dll_VirtualAlloc_1
mov edi, eax
mov dword [ebx + 8], edi
mov eax, dword [0x4be744]
cmp dword [eax], 0
jle 0x4439f0
mov eax, edi
call fcn.004ab7d8
mov ax, 0x11e
call fcn.004aa600
push eax
mov eax, dword [ebx + 8]
push eax
call sub.kernel32.dll_lstrcatA
mov eax, dword [0x4be3b4]
push eax
mov eax, dword [ebx + 8]
push eax
call sub.kernel32.dll_lstrcatA
mov eax, dword [ebx]
mov dword [ebp - 0xc], eax
push 0x7f02
push 0
call sub.user32.dll_LoadCursorA
push eax
call sub.user32.dll_SetCursor
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0xc]
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.00444e04
mov edi, eax
push 0x7f00
push 0
call sub.user32.dll_LoadCursorA
push eax
call sub.user32.dll_SetCursor
mov byte [ebx + 0xc], 0
test edi, edi
jge 0x443a5d
mov edx, dword [ebp - 0xc]
mov eax, dword [ebx]
call fcn.00443690
mov ax, 0x1f0
call fcn.004aa600
mov edx, eax
mov eax, dword [0x4beb38]
mov ecx, 3
call fcn.004b12b8
jmp 0x443bb2
xor edi, edi
cmp byte [ebx + 0xd], 0
je 0x443a81
mov byte [ebx + 0xd], 0
lea ecx, [ebp - 0x2025]
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.004434c0
test al, al
je 0x443bb2
cmp dword [ebp + 8], 0
jne 0x443acd
mov eax, dword [0x4be4ec]
movsx eax, word [eax]
test eax, eax
jle 0x443acd
mov dword [ebp - 0x20], eax
mov eax, dword [0x4be754]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
cmp dword [eax], 0
je 0x443ac4
push 0
push 0
push 0x416
mov eax, dword [ebp - 0x24]
mov eax, dword [eax]
mov eax, dword [eax]
push eax
call sub.user32.dll_SendMessageA
test eax, eax
je 0x443bb2
add dword [ebp - 0x24], 4
dec dword [ebp - 0x20]
jne 0x443a9e
mov eax, dword [ebx]
mov dword [ebp - 0xc], eax
cmp byte [ebp - 6], 0
jne 0x443aea
push 0x7f02
push 0
call sub.user32.dll_LoadCursorA
push eax
call sub.user32.dll_SetCursor
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0xc]
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.00444e04
mov edi, eax
push 0x7f00
push 0
call sub.user32.dll_LoadCursorA
push eax
call sub.user32.dll_SetCursor
test edi, edi
jge 0x443b87
mov edx, dword [ebp - 0xc]
mov eax, dword [ebx]
call fcn.00443690
mov eax, dword [0x4beb6c]
cmp byte [eax], 0
jne 0x443b70
cmp byte [ebx + 0xc], 0
je 0x443b44
mov ax, 0x2e5
call fcn.004aa600
mov edx, eax
mov eax, dword [0x4bedb0]
call fcn.004b81b0
jmp 0x443b59
mov ax, 0x2e6
call fcn.004aa600
mov edx, eax
mov eax, dword [0x4bedb0]
call fcn.004b81b0
mov edx, dword [0x4bedb0]
mov eax, dword [0x4beb38]
mov ecx, 3
call fcn.004b12b8
jmp 0x443ba0
mov edx, dword [0x4beb38]
mov eax, dword [0x4be90c]
call fcn.004035b8
call fcn.00403624
jmp 0x443ba0
cmp byte [ebx + 0xc], 0
je 0x443ba0
mov ax, 0x233
call fcn.004aa600
mov edx, 4
call fcn.004b12a8
mov eax, dword [0x4beb6c]
cmp byte [eax], 0
je 0x443bb2
mov eax, dword [ebp - 0x10]
call fcn.00443d0c
push 0x4000
push esi
mov eax, dword [ebx]
push eax
call sub.kernel32.dll_VirtualFree_1
mov eax, dword [ebx + 4]
test eax, eax
je 0x443bd7
push 0x4000
push 0x2000
push eax
call sub.kernel32.dll_VirtualFree_1
mov eax, dword [ebx + 8]
test eax, eax
je 0x443bee
push 0x4000
push 0x2000
push eax
call sub.kernel32.dll_VirtualFree_1
dec edi
sete byte [ebp - 7]
mov edx, 0x33c
mov eax, dword [ebp - 0x18]
call fcn.00402524
mov al, byte [ebp - 7]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4