Function at 0x411430
Capabilities:
Get file size

Disassembly:
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
mov eax, 0x1078
call fcn.00425270
sub rsp, rax
mov rax, qword [0x0042d620]
xor rax, rsp
mov qword [rsp + 0x1060], rax
mov qword [0x00430600], 0
mov dword [0x0042eaf0], 0
mov r8d, 0x124
xor edx, edx
mov rcx, qword [rsp + 0x1090]
call fcn.00417730
cmp qword [rsp + 0x1088], 0
je 0x4114cc
mov rax, qword [rsp + 0x1088]
movzx eax, word [rax]
test eax, eax
je 0x4114cc
mov rax, qword [rsp + 0x1088]
mov qword [0x0042eaf8], rax
xor r8d, r8d
mov edx, 0x8020
lea rcx, str.___.cab
call fcn.0040fb70
mov qword [rsp + 0x28], rax
jmp 0x4114e6
xor r8d, r8d
mov edx, 0x8020
mov rcx, qword [rsp + 0x1080]
call fcn.0040fb70
mov qword [rsp + 0x28], rax
cmp qword [rsp + 0x28], 0xffffffffffffffff
jne 0x4114f8
mov eax, 0xffffffff
jmp 0x4117e3
xor edx, edx
mov rcx, qword [rsp + 0x28]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x30], eax
cmp dword [rsp + 0x30], 0
jne 0x411524
mov rcx, qword [rsp + 0x28]
call fcn.0040ff20
mov eax, 0xffffffff
jmp 0x4117e3
mov dword [0x004303d8], 0x1000
mov eax, dword [0x004303d8]
cmp dword [rsp + 0x30], eax
jle 0x41154e
mov eax, dword [0x004303d8]
mov ecx, dword [rsp + 0x30]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x38], eax
jmp 0x411560
mov dword [rsp + 0x38], 0
mov eax, dword [rsp + 0x30]
mov dword [0x004303d8], eax
mov dword [rsp + 0x34], 0xffffffff
xor r8d, r8d
mov edx, dword [rsp + 0x38]
mov rcx, qword [rsp + 0x28]
call fcn.0040ff80
cmp eax, 0xffffffff
jne 0x411592
mov rcx, qword [rsp + 0x28]
call fcn.0040ff20
mov eax, 0xffffffff
jmp 0x4117e3
mov r8d, dword [0x004303d8]
lea rdx, [rsp + 0x50]
mov rcx, qword [rsp + 0x28]
call fcn.0040fdb0
mov dword [rsp + 0x1050], eax
mov eax, dword [0x004303d8]
cmp dword [rsp + 0x1050], eax
je 0x4115d2
mov rcx, qword [rsp + 0x28]
call fcn.0040ff20
mov eax, 0xffffffff
jmp 0x4117e3
cmp dword [rsp + 0x38], 0
jne 0x4115e1
mov dword [rsp + 0x34], 0x7fffffff
mov eax, dword [0x004303d8]
sub eax, 0x16
mov dword [rsp + 0x24], eax
jmp 0x4115fb
mov eax, dword [rsp + 0x24]
sub eax, 1
mov dword [rsp + 0x24], eax
cmp dword [rsp + 0x24], 0
jl 0x41165e
movsxd rax, dword [rsp + 0x24]
movsx eax, byte [rsp + rax + 0x50]
cmp eax, 0x50
jne 0x41165c
mov eax, dword [rsp + 0x24]
add eax, 1
cdqe
movsx eax, byte [rsp + rax + 0x50]
cmp eax, 0x4b
jne 0x41165c
mov eax, dword [rsp + 0x24]
add eax, 2
cdqe
movsx eax, byte [rsp + rax + 0x50]
cmp eax, 5
jne 0x41165c
mov eax, dword [rsp + 0x24]
add eax, 3
cdqe
movsx eax, byte [rsp + rax + 0x50]
cmp eax, 6
jne 0x41165c
mov eax, dword [rsp + 0x24]
mov ecx, dword [rsp + 0x38]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x34], eax
jmp 0x41165e
jmp 0x4115f0
cmp dword [rsp + 0x34], 0xffffffff
jne 0x411689
mov eax, dword [0x004303d8]
sub eax, 0x16
mov ecx, dword [rsp + 0x38]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x38], eax
cmp dword [rsp + 0x38], 0
jge 0x411689
mov dword [rsp + 0x38], 0
cmp dword [rsp + 0x34], 0
jl 0x411568
cmp dword [rsp + 0x34], 0x7fffffff
jne 0x4116b2
mov rcx, qword [rsp + 0x28]
call fcn.0040ff20
mov eax, 0xffffffff
jmp 0x4117e3
mov eax, dword [rsp + 0x38]
mov ecx, dword [rsp + 0x34]
sub ecx, eax
mov eax, ecx
cdqe
lea rax, [rsp + rax + 0x50]
mov qword [rsp + 0x1058], rax
mov rax, qword [rsp + 0x1058]
mov eax, dword [rax + 0x10]
mov dword [rsp + 0x20], eax
mov dword [0x004303c0], 0
mov eax, dword [0x004303c0]
add eax, 0x2e
cmp eax, dword [rsp + 0x34]
jle 0x411709
mov rcx, qword [rsp + 0x28]
call fcn.0040ff20
mov eax, 0xfffffffe
jmp 0x4117e3
mov eax, dword [rsp + 0x20]
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x20]
mov ecx, dword [rsp + 0x34]
sub ecx, eax
mov eax, ecx
add eax, 4
mov dword [0x004303d8], eax
xor r8d, r8d
mov edx, dword [rsp + 0x38]
mov rcx, qword [rsp + 0x28]
call fcn.0040ff80
cmp eax, 0xffffffff
jne 0x411746
mov eax, 0xffffffff
jmp 0x4117e3
mov eax, dword [0x004303d8]
add eax, 1
cdqe
mov rcx, rax
call fcn.00416f30
mov qword [0x00430600], rax
mov r8d, dword [0x004303d8]
mov rdx, qword [0x00430600]
mov rcx, qword [rsp + 0x28]
call fcn.0040fdb0
mov dword [rsp + 0x1050], eax
cmp dword [rsp + 0x1050], 0xffffffff
jne 0x4117a7
mov rcx, qword [0x00430600]
call fcn.00416ef0
mov qword [0x00430600], 0
mov eax, 0xffffffff
jmp 0x4117e3
mov rcx, qword [rsp + 0x28]
call fcn.0040ff20
mov rcx, qword [rsp + 0x1090]
call fcn.004111b0
mov dword [rsp + 0x1050], eax
cmp dword [rsp + 0x1050], 0
je 0x4117dc
mov rcx, qword [rsp + 0x1090]
call fcn.00411400
mov eax, dword [rsp + 0x1050]
mov rcx, qword [rsp + 0x1060]
xor rcx, rsp
call fcn.00416330
add rsp, 0x1078
ret