Function at 0x4238f0
Capabilities:
Get file size

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x24
push ebx
push esi
mov esi, ecx
mov ecx, dword [ebp + 8]
push edi
lea edi, [esi + 0xde8]
mov eax, dword [ecx]
mov dword [esp + 0x14], eax
lea ebx, [eax + 1]
mov dword [ecx], ebx
cmp ebx, dword [edi + 0x18]
jbe 0x423943
lea eax, [ebx*4]
cmp eax, dword [edi + 4]
jbe 0x42393d
cmp eax, dword [edi + 0xc]
ja 0x423943
push dword [edi + 0x14]
mov ecx, edi
call fcn.0045ed40
test eax, eax
je 0x423943
lea eax, [ebx*4]
mov dword [edi + 8], eax
mov dword [edi + 0x18], ebx
mov eax, dword [edi]
mov edx, dword [esp + 0x14]
mov edi, dword [eax + edx*4]
mov ecx, dword [edi + 8]
cmp ecx, 0xffffffff
je 0x423977
lea eax, [edi + 0x20]
push eax
push 0
push 0
push ecx
call dword [sym.imp.KERNEL30.dll_GetFileTime]
lea eax, [edi + 0x2c]
push eax
push dword [edi + 8]
call dword [sym.imp.KERNEL30.dll_GetFileSize]
mov edx, dword [esp + 0x14]
mov dword [edi + 0x28], eax
cmp dword [esi + 0x890], 0
mov ecx, dword [edi + 0x28]
mov eax, dword [edi + 0x2c]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], eax
jne 0x4239a1
cmp dword [esi + 0x894], 0
jne 0x4239a1
mov eax, dword [edi + 0x30]
mov ebx, 3
jmp 0x4239b8
mov eax, dword [edi + 0x30]
mov ebx, 9
test eax, eax
mov dword [esp + 0x2c], 4
cmovne ebx, dword [esp + 0x2c]
test eax, 0x400
je 0x4239d7
mov eax, dword [esi + 0x6a0]
and eax, 0x4000
mov dword [esp + 0x20], 1
or eax, 0
je 0x4239df
mov dword [esp + 0x20], 0
cmp dword [esp + 0x1c], 0
mov eax, dword [esi + 0xdd0]
mov dword [esp + 0x24], eax
mov eax, dword [esi + 0xdd4]
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], 0
jg 0x423a38
jl 0x423a08
test ecx, ecx
jae 0x423a38
push 2
push dword [ebp + 0xc]
mov ecx, esi
push edx
push dword [esi + 0x840]
call fcn.00423d60
mov ecx, dword [esi + 0x858]
lea eax, [eax + ecx*2]
mov ecx, esi
push eax
push str.Too_big_file
call fcn.0041a620
xor eax, eax
jmp 0x423c38
mov eax, dword [esi + 0x6a0]
and eax, 0x40000
or eax, 0
je 0x423ab7
test dword [esi + 0x8d8], 0x800
je 0x423ab7
test dword [esi + 0x8dc], 0x800
je 0x423ab7
cmp ebx, 9
je 0x423ab7
mov ecx, dword [edi + 8]
cmp ecx, 0xffffffff
je 0x423ab3
lea eax, [edi + 0x78]
push eax
push ecx
push 0xffffffffffffffff
push dword [ebp + 0xc]
mov ecx, esi
push edx
push dword [esi + 0x840]
call fcn.00423d60
push eax
mov ecx, esi
call fcn.00420d10
cmp eax, 2
jne 0x423ab3
push 0
push edi
push 0
push 0xd
mov ecx, esi
mov dword [edi + 0x28], 0
mov dword [edi + 0x2c], 0
call fcn.00424a70
jmp 0x423c38
mov ecx, dword [esp + 0x18]
mov eax, ecx
or eax, dword [esp + 0x1c]
jne 0x423ac5
cmp dword [esp + 0x20], eax
je 0x423ad2
cmp dword [esi + 0x874], 0
jne 0x423b54
push 0
push edi
push 0
push ebx
mov ecx, esi
call fcn.00424a70
cmp dword [esi + 0x874], 0
mov dword [esp + 0x10], eax
mov dword [esp + 0x2c], 1
jne 0x423b3e
cmp dword [esp + 0x20], 0
jne 0x423b3e
mov eax, dword [esi + 0xb60]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
add dword [eax + 0x18], ecx
adc dword [eax + 0x1c], edx
test dword [esi + 0x6a8], 0x300
je 0x423b3e
cmp dword [esi + 0x86c], 0
je 0x423b3e
mov eax, dword [esi + 0xb60]
add dword [eax + 0x50], ecx
adc dword [eax + 0x54], edx
mov eax, dword [esi + 0xb60]
add dword [eax + 0x48], 1
adc dword [eax + 0x4c], 0
cmp ebx, 4
jne 0x423c3c
cmp dword [esi + 0x874], 0
je 0x423c3c
cmp dword [edi + 8], 0xffffffff
jne 0x423bee
cmp ebx, 9
je 0x423b9c
push dword [edi + 0x38]
call dword [sym.imp.KERNEL30.dll_SetLastError]
mov eax, dword [esi + 0xb60]
mov ecx, dword [esp + 0x18]
add dword [eax + 0xc8], 1
adc dword [eax + 0xcc], 0
mov eax, dword [esi + 0xb60]
add dword [eax + 0xd0], ecx
mov ecx, dword [esp + 0x1c]
adc dword [eax + 0xd4], ecx
jmp 0x423bac
mov eax, dword [esi + 0x6a0]
and eax, 0x40000000
or eax, 0
je 0x423be4
push 0
push dword [ebp + 0xc]
mov ecx, esi
push dword [esp + 0x1c]
push dword [esi + 0x840]
call fcn.00423d60
mov ecx, dword [esi + 0x858]
cmp ebx, 9
lea eax, [eax + ecx*2]
mov ecx, str.OpenFile
push eax
mov eax, str.OpenFile_st_
cmovne eax, ecx
mov ecx, esi
push eax
call fcn.0041a620
mov dword [esp + 0x10], 0
jmp 0x423c3c
cmp dword [esp + 0x20], 0
mov ecx, esi
push edi
je 0x423c07
push dword [ebp + 0xc]
push dword [esp + 0x1c]
push ebx
call fcn.00423070
jmp 0x423c14
push ebx
push dword [ebp + 0xc]
push dword [esp + 0x20]
call fcn.00423230
mov dword [esp + 0x10], eax
cmp ebx, 4
jne 0x423c3c
test eax, eax
je 0x423c3c
cmp dword [esi + 0x100c], 0
jne 0x423c3c
push edi
push dword [ebp + 0xc]
mov ecx, esi
push dword [ebp + 8]
call fcn.00422e70
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x24]
cmp dword [esi + 0xdd0], eax
jne 0x423c54
mov eax, dword [esp + 0x28]
cmp dword [esi + 0xdd4], eax
je 0x423ca5
cmp ebx, 4
jne 0x423ca5
lea ebx, [esi + 0xf44]
push ebx
call dword [sym.imp.KERNEL30.dll_EnterCriticalSection]
push 0
push 0
push 0
push 0
push 0
push 0x30
mov ecx, esi
call fcn.004245b0
test eax, eax
je 0x423c9c
cmp dword [esi + 0x100c], 0
jne 0x423c90
push eax
push 0xa
mov ecx, esi
call fcn.00424b60
push ecx
lea ecx, [esi + 0xf40]
call fcn.0045eba0
push ebx
call dword [sym.imp.KERNEL30.dll_LeaveCriticalSection]
jmp 0x423caa
cmp ebx, 9
je 0x423d28
cmp dword [esi + 0x694], 5
jne 0x423d28
mov eax, dword [ebp + 8]
mov ecx, esi
push dword [eax]
call fcn.00422ae0
mov ebx, dword [esp + 0x10]
test ebx, ebx
jne 0x423cee
mov eax, dword [esp + 0x24]
cmp dword [esi + 0xdd0], eax
jne 0x423cdf
mov eax, dword [esp + 0x28]
cmp dword [esi + 0xdd4], eax
je 0x423d47
cmp dword [esp + 0x2c], 0
mov dword [esp + 0x2c], 3
je 0x423cf6
mov dword [esp + 0x2c], 1
mov eax, dword [esi + 0x840]
lea edx, [edi + 0xb8]
mov ecx, dword [ebp + 0xc]
lea ecx, [eax + ecx*2]
call fcn.0041c060
push dword [esp + 0x2c]
mov ecx, dword [ebp + 0xc]
inc ecx
add eax, ecx
mov ecx, esi
push edi
push eax
push dword [esi + 0x840]
call fcn.00423ef0
jmp 0x423d2c
mov ebx, dword [esp + 0x10]
test ebx, ebx
je 0x423d47
cmp dword [esi + 0x100c], 0
jne 0x423d47
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret 8