Function at 0x403da4
Capabilities:
Get file size

Disassembly:
sub esp, 0x228
push ebx
push ebp
push esi
xor ebx, ebx
push edi
mov dword [esp + 0x10], ebx
xor ebp, ebp
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 0x2000
mov edi, 0x4e0000
push edi
add eax, 0x3e8
push ebp
mov dword [0x473564], eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 3
push 0x80000000
push edi
call fcn.00407702
mov esi, eax
mov dword [0x40c010], esi
cmp esi, 0xffffffff
jne 0x403dfc
mov eax, 0x40a1c4
jmp 0x404059
push edi
mov edi, 0x4d0000
push edi
call fcn.00407903
push edi
call fcn.00407a9e
push eax
push 0x4e4000
call fcn.00407903
push 0
push esi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov esi, eax
mov dword [0x420158], esi
test esi, esi
je 0x403f26
mov ebx, dword [esp + 0x23c]
cmp dword [0x47356c], 0
mov eax, 0x8000
mov edi, 0x200
cmovne edi, eax
cmp esi, edi
cmovb edi, esi
push edi
push 0x4201f0
call fcn.00403a27
test eax, eax
je 0x403fc6
cmp dword [0x47356c], 0
jne 0x403eec
push 0x1c
push 0x4201f0
lea eax, [esp + 0x1c]
push eax
call fcn.00407436
test dword [esp + 0x14], 0xfffffff0
jne 0x403ef9
cmp dword [esp + 0x18], 0xdeadbeef
jne 0x403ef9
cmp dword [esp + 0x24], 0x74736e49
jne 0x403ef9
cmp dword [esp + 0x20], 0x74666f73
jne 0x403ef9
cmp dword [esp + 0x1c], 0x6c6c754e
jne 0x403ef9
mov eax, dword [0x42015c]
or ebx, dword [esp + 0x14]
mov dword [0x47356c], eax
mov eax, ebx
and eax, 2
or dword [0x473640], eax
mov eax, dword [esp + 0x2c]
cmp eax, esi
ja 0x403df2
test bl, 8
jne 0x403ee0
test bl, 4
jne 0x403f22
lea esi, [eax - 4]
inc ebp
cmp edi, esi
jbe 0x403ef9
mov edi, esi
jmp 0x403ef9
test bl, 2
jne 0x403ef9
push 0
call fcn.00403cfe
pop ecx
cmp esi, dword [0x420158]
jae 0x403f14
push edi
push 0x4201f0
push dword [esp + 0x18]
call fcn.00407bc0
mov dword [esp + 0x10], eax
add dword [0x42015c], edi
sub esi, edi
jne 0x403e39
mov ebx, dword [esp + 0x10]
push 1
call fcn.00403cfe
cmp dword [0x47356c], 0
pop ecx
je 0x403df2
test ebp, ebp
je 0x403f6e
push dword [0x42015c]
call fcn.00403a3d
push 4
lea eax, [esp + 0x14]
push eax
push dword [0x40c010]
call fcn.0040772f
test eax, eax
je 0x403df2
cmp ebx, dword [esp + 0x10]
jne 0x403df2
push dword [esp + 0x28]
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov ecx, 0x420168
mov esi, eax
call fcn.00408a1a
push 0x4d8000
lea eax, [esp + 0x34]
push eax
call fcn.0040783d
push 0
push 0x4000100
push 2
push 0
push 0
push 0xc0000000
lea eax, [esp + 0x48]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x40c014], eax
cmp eax, 0xffffffff
jne 0x403fd3
mov eax, 0x40a1ec
jmp 0x404059
push 1
call fcn.00403cfe
pop ecx
jmp 0x403df2
mov eax, dword [0x47356c]
add eax, 0x1c
push eax
call fcn.00403a3d
mov ecx, dword [esp + 0x14]
push dword [esp + 0x28]
not ecx
and ecx, 4
mov dword [0x420150], eax
sub eax, ecx
mov ecx, dword [esp + 0x30]
push esi
add ecx, 0xffffffe4
push 0
add eax, ecx
push 0xffffffffffffffff
mov dword [0x420154], eax
call fcn.00403bd3
cmp eax, dword [esp + 0x28]
jne 0x403df2
test byte [esp + 0x14], 1
mov dword [0x473574], esi
mov eax, dword [esi]
mov dword [0x473570], eax
je 0x404031
inc dword [0x473568]
push 8
pop ecx
lea eax, [esi + 0x44]
lea eax, [eax - 8]
add dword [eax], esi
dec ecx
jne 0x404037
mov eax, dword [0x42014c]
mov dword [esi + 0x3c], eax
push 0x40
lea eax, [esi + 4]
push eax
push 0x473580
call fcn.00407436
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x228
ret 4