Function at 0x41ffd0
Capabilities:
Get file size

Disassembly:
push ebp
xor eax, eax
mov ecx, 0xd
push edi
push esi
push ebx
sub esp, 0xbc
mov esi, dword [esp + 0xd0]
cld
lea ebx, [esp + 0x70]
mov edi, ebx
cmp esi, 0xffffffff
rep stosd dword es:[edi], eax
mov eax, 0xffffffff
je 0x4202fc
mov edx, dword [esp + 0xd4]
mov dword [edx + 0x18], 1
mov dword [esp], esi
call sub.KERNEL32.dll_GetFileType
sub esp, 4
xor edx, edx
cmp eax, 2
je 0x4203a1
cmp eax, 3
je 0x420397
mov eax, dword [esp + 0xd4]
mov dword [eax], edx
mov dword [esp + 4], ebx
mov dword [esp], esi
call sub.KERNEL32.dll_GetFileInformationByHandle
sub esp, 8
mov ecx, dword [esp + 0x94]
test ecx, ecx
jne 0x420090
mov edx, dword [esp + 0x90]
test edx, edx
jne 0x420090
mov ebp, dword [esp + 0xd4]
mov edi, dword [ebp]
and edi, 0xf000
cmp edi, 0x1000
je 0x420333
test ecx, ecx
jne 0x420090
mov edx, dword [esp + 0x90]
test edx, edx
je 0x420311
lea esi, [esi]
cld
mov esi, ebx
lea edi, [esp + 0x30]
mov ecx, 0xd
xor ebx, ebx
rep movsd dword es:[edi], dword [esi]
xor esi, esi
xor ecx, ecx
mov edx, dword [esp + 0x60]
mov edi, dword [esp + 0x5c]
mov eax, dword [esp + 0x4c]
or edx, ebx
mov ebx, dword [esp + 0x30]
or esi, edi
mov edi, dword [esp + 0xd4]
test bl, 0x10
sete cl
mov dword [edi + 0x10], eax
mov dword [edi + 8], edx
mov dword [edi + 0xc], esi
dec ecx
and ecx, 0xffffc000
mov dword [edi + 0x14], 0
add ecx, 0x8000
or ecx, 0x124
test bl, 1
movzx eax, cx
jne 0x4200f5
or eax, 0x92
mov ebx, dword [esp + 0x54]
xor edx, edx
xor ebp, ebp
mov edi, dword [esp + 0x50]
mov ecx, dword [esp + 0xd4]
mov esi, edi
or dword [ecx], eax
mov edi, ebx
or edi, ebp
mov ebp, edx
mov ebx, dword [esp + 0xd4]
or ebp, esi
mov esi, dword [esp + 0x58]
mov edx, dword [esp + 0x40]
mov dword [ebx + 0x30], edi
mov dword [ebx + 0x18], esi
mov ecx, edx
xor esi, esi
mov dword [ebx + 0x34], ebp
xor edx, edx
or esi, ecx
mov dword [esp + 8], 0x989680
mov ebx, dword [esp + 0x3c]
mov ecx, esi
mov dword [esp + 0xc], 0
or ebx, edx
mov edx, ebx
sub edx, 0xd53e8000
sbb ecx, 0x19db1de
mov dword [esp + 4], ecx
mov dword [esp], edx
call fcn.004258f0
mov edx, eax
mov ecx, dword [esp + 0xd4]
shr eax, 0x1f
dec eax
and edx, eax
mov dword [ecx + 0x38], edx
mov dword [esp], ebx
mov dword [esp + 4], esi
mov dword [esp + 8], 0x989680
mov dword [esp + 0xc], 0
call fcn.00425a10
lea ecx, [eax + eax*4]
lea esi, [ecx + ecx*4]
mov eax, dword [esp + 0xd4]
shl esi, 2
mov ebx, esi
shr ebx, 0x1f
dec ebx
and ebx, esi
xor esi, esi
mov dword [eax + 0x3c], ebx
mov edx, dword [esp + 0x38]
mov dword [esp + 8], 0x989680
mov ebx, dword [esp + 0x34]
mov dword [esp + 0xc], 0
mov ecx, edx
xor edx, edx
or ebx, edx
or esi, ecx
mov edx, ebx
sub edx, 0xd53e8000
mov ecx, esi
sbb ecx, 0x19db1de
mov dword [esp + 4], ecx
mov dword [esp], edx
call fcn.004258f0
mov edx, eax
mov ecx, dword [esp + 0xd4]
shr eax, 0x1f
dec eax
and edx, eax
mov dword [ecx + 0x48], edx
mov dword [esp], ebx
mov dword [esp + 4], esi
mov dword [esp + 8], 0x989680
mov dword [esp + 0xc], 0
call fcn.00425a10
lea edx, [eax + eax*4]
mov ebx, dword [esp + 0xd4]
lea ecx, [edx + edx*4]
shl ecx, 2
mov esi, ecx
shr esi, 0x1f
dec esi
and esi, ecx
mov dword [ebx + 0x4c], esi
mov edx, dword [esp + 0x48]
xor esi, esi
mov dword [esp + 8], 0x989680
mov ebx, dword [esp + 0x44]
mov dword [esp + 0xc], 0
mov ecx, edx
xor edx, edx
or ebx, edx
or esi, ecx
mov edx, ebx
sub edx, 0xd53e8000
mov ecx, esi
sbb ecx, 0x19db1de
mov dword [esp + 4], ecx
mov dword [esp], edx
call fcn.004258f0
mov edx, eax
mov ecx, dword [esp + 0xd4]
shr eax, 0x1f
dec eax
and edx, eax
mov dword [ecx + 0x40], edx
mov dword [esp + 4], esi
mov dword [esp + 8], 0x989680
mov dword [esp + 0xc], 0
mov dword [esp], ebx
call fcn.00425a10
lea edx, [eax + eax*4]
lea esi, [edx + edx*4]
mov eax, dword [esp + 0xd4]
shl esi, 2
mov edx, ebp
mov ecx, esi
mov dword [eax + 0x50], 0x200
shr ecx, 0x1f
dec ecx
and ecx, esi
test ebp, ebp
mov dword [eax + 0x44], ecx
mov eax, edi
js 0x420307
xor esi, esi
mov ebp, edi
mov ecx, eax
shrd ecx, edx, 9
mov ebx, edx
and ebp, 0x1ff
mov eax, esi
sar ebx, 9
or eax, ebp
je 0x4202ed
add ecx, 1
adc ebx, 0
mov edx, dword [esp + 0xd4]
xor eax, eax
mov dword [edx + 0x58], ecx
mov dword [edx + 0x5c], ebx
add esp, 0xbc
pop ebx
pop esi
pop edi
pop ebp
ret
add eax, 0x1ff
adc edx, 0
jmp 0x4202cc
mov dword [esp], esi
lea ebp, [esp + 0x90]
mov dword [esp + 4], ebp
call sub.KERNEL32.dll_GetFileSize
sub esp, 8
mov dword [esp + 0x94], eax
jmp 0x420090
mov dword [esp + 0x2c], 0
lea ecx, [esp + 0x2c]
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], esi
call sub.KERNEL32.dll_PeekNamedPipe
sub esp, 0x18
test eax, eax
je 0x42038b
mov ecx, dword [esp + 0x2c]
xor eax, eax
mov dword [esp + 0x90], eax
mov dword [esp + 0x94], ecx
jmp 0x420076
mov ecx, dword [esp + 0x94]
jmp 0x420076
mov edx, 0x1000
jmp 0x42002c
mov edx, 0x2000
jmp 0x42002c