Function at 0x44dfc4
Capabilities:
Get file size

Disassembly:
push 0x4c
mov eax, 0x5bc97f
call fcn.00580b7e
xor ebx, ebx
mov dword [ebp - 4], ebx
mov byte [ebp - 0x11], 1
mov byte [ebp - 4], 1
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x24], ebx
lea eax, [ebp - 0x28]
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov eax, dword [0x6c03bc]
shl eax, 0x14
cdq
mov ecx, dword [ebp - 0x24]
cmp ecx, edx
jl 0x44e01c
jg 0x44e009
mov ecx, dword [ebp - 0x28]
cmp ecx, eax
jbe 0x44e01c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x10]
call fcn.0040856e
mov al, 1
jmp 0x44e285
lea eax, [ebp + 0x10]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.004084fe
mov byte [ebp - 4], 2
lea eax, [ebp - 0x1c]
call fcn.0040877f
push str.protocolfilters.dll
xor ecx, ecx
lea esi, [ebp - 0x1c]
call fcn.00426092
or edi, 0xffffffff
cmp eax, edi
jne 0x44e28d
push str.nfapi.dll
xor ecx, ecx
call fcn.00426092
cmp eax, edi
jne 0x44e28d
call fcn.00455f7a
mov esi, eax
cmp esi, ebx
je 0x44e0bc
push ecx
mov eax, esp
mov dword [ebp - 0x20], esp
lea ecx, [ebp + 0x10]
push ecx
push eax
call fcn.004084fe
mov byte [ebp - 4], 3
mov byte [ebp - 4], 2
mov ecx, esi
call fcn.00460dbf
cmp al, bl
je 0x44e28d
push ecx
mov eax, esp
mov dword [ebp - 0x20], esp
lea ecx, [ebp + 0x10]
push ecx
push eax
call fcn.004084fe
mov byte [ebp - 4], 4
mov byte [ebp - 4], 2
mov ecx, esi
call fcn.00460f65
cmp al, bl
jne 0x44e28d
push dword [ebp + 8]
mov ebx, dword [0x6d5d08]
call fcn.00472430
test al, al
jne 0x44e28d
lea eax, [ebp - 0x18]
push eax
call fcn.004083c5
mov byte [ebp - 4], 5
xor eax, eax
mov byte [ebp - 0x40], al
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], eax
lea edi, [ebp - 0x58]
mov ebx, dword [ebp + 8]
lea esi, [ebp - 0x38]
call fcn.0046f580
xor ebx, ebx
cmp byte [ebp - 0x2c], bl
je 0x44e176
cmp byte [ebp - 0x40], bl
je 0x44e176
mov edi, dword [ebp - 0x54]
cmp edi, dword [ebp - 0x44]
jb 0x44e121
ja 0x44e11c
mov eax, dword [ebp - 0x58]
cmp eax, dword [ebp - 0x48]
jbe 0x44e121
mov esi, dword [ebp - 0x58]
jmp 0x44e127
mov esi, dword [ebp - 0x48]
mov edi, dword [ebp - 0x44]
lea eax, [ebp - 0x18]
push eax
push edi
push esi
push dword [ebp - 0x34]
push dword [ebp - 0x38]
push dword [ebp - 0x30]
call fcn.00485840
cmp al, bl
jne 0x44e19a
mov byte [ebp - 0x12], bl
push dword [ebp + 0x14]
lea eax, [ebp - 0x12]
push eax
lea eax, [ebp + 0x10]
push eax
push 1
push dword [ebp - 0x24]
push dword [ebp - 0x28]
lea eax, [ebp - 0x18]
push eax
push dword [ebp + 8]
call fcn.0042e135
push edi
push esi
push dword [ebp - 0x34]
push dword [ebp - 0x38]
push dword [ebp - 0x30]
lea ecx, [ebp - 0x18]
call fcn.004856e0
jmp 0x44e19a
cmp dword [0x6bc38c], 1
jl 0x44e19a
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.Realtime_error____i
push 0x67b1a4
push 1
call fcn.00532652
add esp, 0x10
mov eax, dword [ebp - 0x18]
cmp dword [eax - 0xc], ebx
jne 0x44e214
cmp dword [ebp - 0x24], ebx
jl 0x44e214
jg 0x44e1ae
cmp dword [ebp - 0x28], ebx
jbe 0x44e214
cmp dword [0x6c03a0], ebx
je 0x44e214
mov byte [ebp + 0xb], bl
lea eax, [ebp + 0xb]
push eax
push ebx
push dword [ebp - 0x28]
lea eax, [ebp + 0x14]
push eax
mov ecx, dword [ebp + 0x10]
call fcn.0040fb09
mov byte [ebp - 4], 6
lea edi, [ebp - 0x18]
call fcn.00408450
mov byte [ebp - 4], 5
lea ecx, [ebp + 0x14]
call fcn.0040842d
mov eax, dword [ebp - 0x18]
cmp dword [eax - 0xc], ebx
je 0x44e214
push 0x67b1c8
lea eax, [ebp + 8]
push eax
mov esi, edi
call fcn.004135e5
pop ecx
pop ecx
mov byte [ebp - 4], 7
call fcn.00408450
mov byte [ebp - 4], 5
lea ecx, [ebp + 8]
call fcn.0040842d
mov eax, dword [ebp - 0x18]
cmp dword [eax - 0xc], ebx
je 0x44e248
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp + 8]
push eax
call fcn.0041bb62
pop ecx
pop ecx
mov byte [ebp - 4], 8
push dword [eax]
push dword [ebp + 0xc]
call fcn.004099db
mov byte [ebp - 4], 5
lea ecx, [ebp + 8]
call fcn.0040856e
mov byte [ebp - 0x11], bl
mov eax, dword [ebp + 0xc]
cmp dword [eax + 0x14], ebx
setne al
movzx eax, al
push eax
call fcn.0045240b
pop ecx
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x18]
call fcn.0040842d
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1c]
call fcn.0040856e
mov dword [ebp - 4], ebx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x10]
call fcn.0040856e
mov al, byte [ebp - 0x11]
call fcn.00580c23
ret 0x10
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1c]
call fcn.0040856e
mov dword [ebp - 4], edi
jmp 0x44e00d