Function at 0x4964e0
Capabilities:
Get file size

Disassembly:
sub esp, 0x40
push ebx
push ebp
push esi
push edi
mov edi, eax
call fcn.00496830
mov eax, dword [esp + 0x54]
xor ebp, ebp
push ebp
push ebp
push 3
push ebp
push 1
push closesocket
push eax
lea esi, [edi + 0x50]
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ebx, eax
mov eax, dword [esi]
cmp ebx, eax
je 0x49651e
cmp eax, 0xffffffff
je 0x49651e
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esi], ebx
cmp ebx, 0xffffffff
je 0x496810
mov eax, ebx
call fcn.004b0900
test al, al
je 0x496810
mov esi, dword [esi]
cmp esi, 0xffffffff
je 0x496567
lea ecx, [esp + 0x2c]
push ecx
push esi
mov dword [esp + 0x30], ebp
mov dword [esp + 0x34], ebp
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov esi, eax
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x20], esi
mov dword [esp + 0x24], eax
jmp 0x496573
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], ebp
mov eax, ebp
mov esi, ebp
mov ebx, dword [edi + 0x58]
xor edx, edx
xor ecx, ecx
mov dword [esp + 0x38], ebx
cmp eax, ebp
jb 0x4965a1
ja 0x496589
cmp esi, 8
jb 0x4965a1
mov edx, dword [ebx]
mov ecx, dword [ebx + 4]
mov ebp, esi
add ebp, 0xfffffff8
mov esi, eax
adc esi, 0xffffffff
add ebx, 8
mov dword [esp + 0x38], ebx
jmp 0x4965a3
xor esi, esi
mov dword [edi + 0x48], edx
xor edx, edx
mov dword [edi + 0x4c], ecx
test esi, esi
jb 0x4965c7
ja 0x4965b6
cmp ebp, 4
jb 0x4965c7
mov edx, dword [ebx]
add ebp, 0xfffffffc
adc esi, 0xffffffff
add ebx, 4
mov dword [esp + 0x38], ebx
jmp 0x4965cb
xor ebp, ebp
xor esi, esi
mov ecx, dword [esp + 0x20]
sub ecx, ebp
sbb eax, esi
add ecx, 0xfffffff4
mov dword [edi + 0x38], edx
mov dword [edi + 0x3c], 0
mov edx, dword [edi + 0x3c]
adc eax, 0xffffffff
cmp edx, eax
jb 0x4966cb
ja 0x496600
mov eax, dword [edi + 0x38]
cmp eax, ecx
jbe 0x4966cb
jmp 0x496600
mov dword [esp + 0x54], 0
test esi, esi
jb 0x496634
ja 0x496613
cmp ebp, 1
jb 0x496634
mov eax, ebx
mov dword [esp + 0x54], ebx
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x496620
sub eax, edx
inc eax
xor ecx, ecx
sub ebp, eax
sbb esi, ecx
add ebx, eax
jmp 0x496638
xor ebp, ebp
xor esi, esi
mov ecx, dword [esp + 0x54]
mov dword [esp + 0x1c], ecx
mov ecx, dword [edi + 0xc]
test ecx, ecx
jne 0x49664d
mov dword [esp + 0x14], ecx
jmp 0x496659
mov eax, dword [edi + 0x14]
sub eax, ecx
sar eax, 2
mov dword [esp + 0x14], eax
mov eax, dword [edi + 0x10]
mov edx, eax
sub edx, ecx
sar edx, 2
mov dword [esp + 0x18], eax
cmp edx, dword [esp + 0x14]
jae 0x49667b
mov ecx, dword [esp + 0x54]
mov dword [eax], ecx
add eax, 4
mov dword [edi + 0x10], eax
jmp 0x49669d
cmp ecx, eax
jbe 0x496688
call fcn.0057451a
mov eax, dword [esp + 0x18]
mov ecx, dword [edi]
push eax
push ecx
lea edx, [esp + 0x24]
push edx
lea eax, [esp + 0x3c]
push eax
mov eax, edi
call fcn.00498820
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x24]
mov edx, dword [edi + 0x3c]
sub ecx, ebp
sbb eax, esi
add ecx, 0xfffffff4
adc eax, 0xffffffff
cmp edx, eax
ja 0x496600
jb 0x4966c7
mov eax, dword [edi + 0x38]
cmp eax, ecx
ja 0x496600
mov dword [esp + 0x38], ebx
xor eax, eax
test esi, esi
jb 0x4966e9
ja 0x4966d8
cmp ebp, 4
jb 0x4966e9
mov eax, dword [ebx]
add ebp, 0xfffffffc
adc esi, 0xffffffff
add ebx, 4
mov dword [esp + 0x38], ebx
jmp 0x4966ed
xor ebp, ebp
xor esi, esi
mov ecx, dword [esp + 0x20]
sub ecx, dword [edi + 0x38]
mov dword [edi + 0x40], eax
mov eax, dword [esp + 0x24]
sbb eax, dword [edi + 0x3c]
sub ecx, ebp
sbb eax, esi
add ecx, 0xfffffff0
mov dword [edi + 0x44], 0
mov edx, dword [edi + 0x44]
adc eax, 0xffffffff
cmp edx, eax
jb 0x4967f7
ja 0x496734
mov eax, dword [edi + 0x40]
cmp eax, ecx
jbe 0x4967f7
jmp 0x496734
mov ebx, dword [esp + 0x38]
mov dword [esp + 0x54], 0
test esi, esi
jb 0x496768
ja 0x496747
cmp ebp, 1
jb 0x496768
mov eax, ebx
mov dword [esp + 0x54], ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x496750
sub eax, edx
inc eax
xor ecx, ecx
sub ebp, eax
sbb esi, ecx
add ebx, eax
mov dword [esp + 0x38], ebx
jmp 0x49676c
xor ebp, ebp
xor esi, esi
mov ecx, dword [esp + 0x54]
mov dword [esp + 0x1c], ecx
mov ecx, dword [edi + 0x24]
test ecx, ecx
jne 0x49677f
xor eax, eax
jmp 0x496787
mov eax, dword [edi + 0x2c]
sub eax, ecx
sar eax, 2
mov ebx, dword [edi + 0x28]
mov edx, ebx
sub edx, ecx
sar edx, 2
cmp edx, eax
jae 0x4967a3
mov eax, dword [esp + 0x54]
mov dword [ebx], eax
add ebx, 4
mov dword [edi + 0x28], ebx
jmp 0x4967c3
cmp ecx, ebx
jbe 0x4967ac
call fcn.0057451a
mov ecx, dword [edi + 0x18]
lea eax, [edi + 0x18]
push ebx
push ecx
lea ecx, [esp + 0x24]
push ecx
lea edx, [esp + 0x3c]
push edx
call fcn.00498820
mov ecx, dword [esp + 0x20]
sub ecx, dword [edi + 0x38]
mov eax, dword [esp + 0x24]
sbb eax, dword [edi + 0x3c]
mov edx, dword [edi + 0x44]
sub ecx, ebp
sbb eax, esi
add ecx, 0xfffffff0
adc eax, 0xffffffff
cmp edx, eax
ja 0x496730
jb 0x4967f3
mov eax, dword [edi + 0x40]
cmp eax, ecx
ja 0x496730
mov ebx, dword [esp + 0x38]
or ebp, esi
jne 0x4967fd
xor ebx, ebx
mov dword [edi + 0x30], ebx
test ebx, ebx
je 0x496810
mov al, 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x40
ret 4
call fcn.00496830
pop edi
pop esi
pop ebp
xor al, al
pop ebx
add esp, 0x40
ret 4