Function at 0x478ef0
Capabilities:
Get file size

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x53f236
push eax
mov dword fs:[0], esp
sub esp, 0x830
push ebx
push ebp
push esi
push edi
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
xor ebp, ebp
mov dword [0x5928c0], ebp
call edi
mov esi, dword [esp + 0x850]
mov dword [0x5928c8], eax
cmp esi, ebp
je 0x479cad
cmp word [esi], bp
je 0x479cad
mov eax, dword [esp + 0x854]
cmp eax, ebp
je 0x479cad
cmp word [eax], bp
je 0x479cad
cmp dword [0x5928cc], ebp
jne 0x478f75
mov dword [0x5928c0], 2
mov dword [0x5928c4], 0x925
jmp 0x479cc1
mov eax, dword [0x54a4b4]
mov dword [esp + 0x30], 1
mov dword [esp + 0x44], ebp
mov dword [esp + 0x60], ebp
mov dword [esp + 0x2c], eax
or eax, 0xffffffff
mov ecx, 9
mov dword [esp + 0x20], eax
mov dword [esp + 0x40], eax
xor eax, eax
lea edi, [esp + 0x74]
mov dword [esp + 0x70], ebp
mov dword [esp + 0x848], ebp
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x68]
mov dword [esp + 0x48], ebp
push ecx
push 0x60
push 1
push 5
push 0x80
push 0x120089
push esi
mov dword [esp + 0x70], ebp
mov dword [esp + 0x84], ebp
call fcn.004bb100
mov ebx, eax
add esp, 0x1c
cmp ebx, 0xffffffff
mov dword [esp + 0x10], ebx
jne 0x479020
cmp dword [esp + 0x68], 0xc0000034
je 0x4799d7
push ebp
push 0x60
push 1
push 7
push 0x80
push 0x120089
push esi
call fcn.004bb100
mov ebx, eax
add esp, 0x1c
cmp ebx, 0xffffffff
mov dword [esp + 0x10], ebx
je 0x4799f2
lea edx, [esp + 0x70]
push 0x28
push edx
push ebx
call fcn.004ba310
add esp, 0xc
test eax, eax
je 0x479a16
push ebp
push ebp
push ebp
push ebx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov ecx, 0xf7
xor eax, eax
lea edi, [esp + 0x461]
mov byte [esp + 0x460], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
cmp ebx, 0xffffffff
stosb byte es:[edi], al
je 0x4790ea
lea eax, [esp + 0x460]
test eax, eax
je 0x4790ea
push ebx
call dword [sym.imp.KERNEL32.dll_GetFileType]
cmp eax, 1
jne 0x4790d1
mov ecx, 0xf8
xor eax, eax
lea edi, [esp + 0x460]
push ebp
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x1c]
push ebp
push ecx
lea edx, [esp + 0x46c]
push 0x3e0
push edx
push ebx
mov dword [esp + 0x30], ebp
call fcn.004ba790
add esp, 0x18
test eax, eax
jne 0x479100
mov dword [0x5928c0], 0xd
mov dword [0x5928c4], 0x1490
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x5928c8], eax
mov dword [0x5928c0], 0xf
mov dword [0x5928c4], 0x966
jmp 0x479bf6
mov dword [0x5928c0], 1
mov dword [0x5928c4], 0x1483
jmp 0x4790c6
lea eax, [esp + 0x460]
push eax
call fcn.00488510
mov edx, eax
add esp, 4
cmp edx, ebp
mov dword [esp + 0x18], edx
je 0x479a2f
mov ecx, 0xf
xor eax, eax
lea edi, [esp + 0x99]
mov byte [esp + 0x98], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 0xe1
xor eax, eax
lea edi, [esp + 0xd9]
mov byte [esp + 0xd8], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
cmp edx, 3
mov dword [esp + 0x4c], ebp
stosb byte es:[edi], al
jne 0x479295
lea ecx, [esp + 0xd8]
lea edx, [esp + 0x460]
push ecx
push edx
call fcn.00487bb0
add esp, 8
test eax, eax
je 0x479a48
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x5928c0], ebp
call esi
mov dword [0x5928c8], eax
lea eax, [esp + 0xd8]
test eax, eax
jne 0x4791d5
mov dword [0x5928c0], 1
mov dword [0x5928c4], 0x36f7
call esi
mov dword [0x5928c8], eax
mov dword [0x5928c0], 0x1f
mov dword [0x5928c4], 0x983
call esi
jmp 0x479bfc
cmp dword [0x5928cc], ebp
jne 0x4791f3
mov dword [0x5928c0], 2
mov dword [0x5928c4], 0x36fd
jmp 0x4791b3
cmp dword [0x592e7c], ebp
jne 0x47924a
mov eax, dword [esp + 0x2c4]
mov edx, dword [esp + 0x2cc]
mov ecx, dword [0x5928dc]
cmp eax, 0x2710
ja 0x479228
cmp ecx, 0x2710
ja 0x47924a
cmp ecx, eax
je 0x47924a
cmp eax, ebp
jne 0x479238
jmp 0x47924a
cmp eax, ecx
jne 0x479238
cmp dword [0x5928e4], ebp
ja 0x47924a
cmp edx, ebp
je 0x47924a
push edx
push eax
call fcn.0048e0d0
add esp, 8
cmp eax, ebp
je 0x4791ba
lea ecx, [esp + 0x4c]
lea edx, [esp + 0x98]
push ecx
push 0x40
lea eax, [esp + 0x58]
push edx
lea ecx, [esp + 0xe4]
push eax
push ecx
mov dword [esp + 0x64], ebp
call fcn.0048eac0
add esp, 0x14
test eax, eax
je 0x479a61
mov edx, dword [esp + 0x50]
push edx
call fcn.004bded0
add esp, 4
cmp eax, ebp
mov dword [esp + 0x3c], eax
je 0x479a7c
jmp 0x47930b
cmp edx, 1
jne 0x4792b1
push edx
call fcn.004bded0
add esp, 4
cmp eax, ebp
mov dword [esp + 0x3c], eax
je 0x479a97
jmp 0x47930b
cmp edx, 2
jne 0x479be2
push edx
call fcn.004bded0
add esp, 4
cmp eax, ebp
mov dword [esp + 0x3c], eax
je 0x479ab0
mov edi, 0x575258
or ecx, 0xffffffff
xor eax, eax
mov esi, 0x575258
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea edi, [esp + 0x98]
mov eax, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, 0x575258
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [esp + 0x4c], ecx
mov esi, dword [esp + 0x854]
push ebp
push esi
call fcn.004ba5d0
push ebp
push 0x60
push 3
push 1
push 0x80
push 0x120116
push esi
mov edi, eax
call fcn.004bb100
add esp, 0x24
cmp eax, 0xffffffff
mov dword [esp + 0x20], eax
jne 0x47936e
push 1
push ebp
push esi
call fcn.004ba390
push ebp
push 0x60
push 1
push 7
push 0x80
push 0x120116
push esi
call fcn.004bb100
add esp, 0x28
cmp eax, 0xffffffff
mov dword [esp + 0x20], eax
je 0x479ac9
mov esi, dword [esp + 0x20]
xor ecx, ecx
cmp edi, ebp
mov dword [esp + 0x38], esi
sete cl
cmp edi, ebp
mov dword [esp + 0x44], ecx
je 0x4793df
mov edx, dword [0x592e90]
mov ecx, dword [esp + 0x854]
lea eax, [esp + 0x2c]
push edx
push eax
push 0x5752e4
push ecx
call fcn.004bac20
add esp, 0x10
test eax, eax
je 0x4793df
mov edx, dword [esp + 0x2c]
push ebp
push 0x60
push 2
push 7
push 0x80
push 0x12019f
push edx
call fcn.004b9f10
add esp, 0x1c
cmp eax, 0xffffffff
mov dword [esp + 0x40], eax
je 0x4793df
mov esi, eax
mov dword [esp + 0x60], 1
mov dword [esp + 0x38], esi
mov eax, dword [esp + 0x18]
mov dword [esp + 0x28], ebp
cmp eax, 3
mov dword [esp + 0x14], ebp
jne 0x479662
mov eax, dword [esp + 0xf4]
mov ecx, dword [esp + 0xf0]
push eax
push ecx
push esi
call fcn.004bc080
add esp, 0xc
test eax, eax
je 0x479ae2
cmp esi, dword [esp + 0x20]
jne 0x479423
mov dword [esp + 0x44], 1
mov edx, dword [esp + 0x110]
mov edi, dword [sym.imp.KERNEL32.dll_SetFilePointer]
push ebp
push ebp
push edx
push ebx
call edi
push ebp
push ebp
push ebp
push esi
call edi
mov eax, dword [esp + 0x114]
cmp eax, ebp
jne 0x479458
mov dword [esp + 0x28], 1
mov dword [esp + 0x14], ebp
jmp 0x479851
mov ecx, dword [esp + 0x118]
cmp eax, 1
mov dword [esp + 0x24], ecx
jne 0x479473
mov ecx, dword [esp + 0x11c]
mov dword [esp + 0x24], ecx
push ecx
call fcn.00520a0a
mov ebp, eax
add esp, 4
test ebp, ebp
je 0x479afb
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x24]
push edx
mov eax, dword [ecx]
call dword [eax + 0xc]
push eax
mov dword [esp + 0x38], eax
call fcn.00520a0a
mov ebx, eax
add esp, 4
test ebx, ebx
je 0x479b21
mov eax, dword [esp + 0x110]
mov ecx, dword [esp + 0x10]
push 0
push 0
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [esp + 0x64], 0
mov eax, dword [esp + 0x64]
mov ecx, dword [esp + 0x114]
mov esi, dword [esp + 0x118]
inc eax
cmp eax, ecx
mov dword [esp + 0x64], eax
jne 0x4794f4
mov esi, dword [esp + 0x11c]
mov dword [esp + 0x28], 1
mov ecx, dword [esp + 0x24]
xor eax, eax
mov edx, ecx
mov edi, ebp
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
mov ecx, dword [esp + 0x34]
xor eax, eax
mov edx, ecx
mov edi, ebx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
lea edx, [esp + 0x58]
and ecx, 3
push edx
rep stosb byte es:[edi], al
mov ecx, dword [esp + 0x114]
xor eax, eax
mov dword [esp + 0x70], eax
mov dword [esp + 0x60], eax
push eax
lea eax, [esp + 0x74]
mov dword [esp + 0x60], ecx
mov ecx, dword [esp + 0x18]
push eax
push esi
push ebp
push ecx
call fcn.004ba790
add esp, 0x18
test eax, eax
je 0x4795e5
mov edx, dword [ebp]
add esi, 0xfffffffc
lea edi, [ebp + 4]
push edx
push esi
push edi
call fcn.004bb340
add esp, 0xc
test eax, eax
je 0x4795fe
mov ecx, dword [esp + 0x3c]
lea edx, [esp + 0x1c]
push edx
mov edx, dword [esp + 0x38]
mov eax, dword [ecx]
push edx
mov edx, dword [esp + 0x54]
push ebx
push esi
push edi
push edx
lea edx, [esp + 0xb0]
push edx
mov dword [esp + 0x38], 0
call dword [eax + 0x14]
test eax, eax
je 0x479617
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x38]
lea eax, [esp + 0x18]
push 0
push eax
push ecx
push ebx
push edx
mov dword [esp + 0x2c], 0
call fcn.004ba890
add esp, 0x14
test eax, eax
je 0x479630
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
cmp eax, ecx
jb 0x479649
mov eax, dword [esp + 0x28]
test eax, eax
je 0x4794ca
jmp 0x479838
mov dword [0x5928c0], 0xd
mov dword [0x5928c4], 0xa3f
jmp 0x479825
mov dword [0x5928c0], 0x1c
mov dword [0x5928c4], 0xa47
jmp 0x479825
mov dword [0x5928c0], 0x12
mov dword [0x5928c4], 0xa50
jmp 0x479825
mov dword [0x5928c0], 0xe
mov dword [0x5928c4], 0xa58
jmp 0x479825
mov dword [0x5928c0], 0xe
mov dword [0x5928c4], 0xa5f
jmp 0x479825
cmp eax, 1
je 0x479670
cmp eax, 2
jne 0x479851
lea ecx, [esp + 0x1c]
mov dword [esp + 0x1c], ebp
push ecx
push ebx
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov edx, dword [esp + 0x1c]
mov edi, eax
push edx
push edi
push esi
call fcn.004bc080
add esp, 0xc
test eax, eax
je 0x479b40
push ebp
push ebp
push 0x100
push ebx
mov dword [esp + 0x54], 1
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
push ebp
push ebp
push ebp
push esi
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov eax, dword [esp + 0x1c]
mov esi, 0x10000
cmp eax, ebp
jne 0x4796cc
cmp edi, esi
jae 0x4796cc
mov esi, edi
push esi
call fcn.00520a0a
mov ebp, eax
add esp, 4
test ebp, ebp
je 0x479b59
push esi
call fcn.00520a0a
mov ebx, eax
add esp, 4
test ebx, ebx
je 0x479b7f
mov ecx, esi
xor eax, eax
mov edx, ecx
mov edi, ebp
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
mov dword [esp + 0x58], 0x100
and ecx, 3
rep stosb byte es:[edi], al
mov ecx, esi
xor eax, eax
mov edi, ebx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
lea edx, [esp + 0x18]
and ecx, 3
rep stosb byte es:[edi], al
lea ecx, [esp + 0x58]
xor eax, eax
push ecx
push eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x64], eax
mov eax, dword [esp + 0x18]
push edx
push esi
push ebp
push eax
call fcn.004ba790
add esp, 0x18
test eax, eax
je 0x4797cf
mov eax, dword [esp + 0x18]
cmp eax, esi
jae 0x479764
test eax, eax
mov dword [esp + 0x28], 1
je 0x479838
mov ecx, dword [esp + 0x3c]
lea edi, [esp + 0x24]
push edi
push esi
mov edx, dword [ecx]
push ebx
push eax
mov eax, dword [esp + 0x5c]
push ebp
push eax
lea eax, [esp + 0xb0]
mov dword [esp + 0x3c], 0
push eax
call dword [edx + 0x14]
test eax, eax
je 0x4797e5
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x38]
lea ecx, [esp + 0x34]
push 0
push ecx
push edx
push ebx
push eax
mov dword [esp + 0x48], 0
call fcn.004ba890
add esp, 0x14
test eax, eax
je 0x4797fb
mov ecx, dword [esp + 0x34]
mov eax, dword [esp + 0x24]
cmp ecx, eax
jb 0x479811
mov eax, dword [esp + 0x28]
test eax, eax
je 0x4796f2
jmp 0x479838
mov dword [0x5928c0], 0xd
mov dword [0x5928c4], 0xaa8
jmp 0x479825
mov dword [0x5928c0], 0x12
mov dword [0x5928c4], 0xab8
jmp 0x479825
mov dword [0x5928c0], 0xe
mov dword [0x5928c4], 0xac0
jmp 0x479825
mov dword [0x5928c0], 0xe
mov dword [0x5928c4], 0xac7
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x5928c8], eax
mov dword [esp + 0x14], 1
push ebp
call fcn.00520a33
push ebx
call fcn.00520a33
mov ebx, dword [esp + 0x18]
mov esi, dword [esp + 0x40]
add esp, 8
xor ebp, ebp
push esi
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
cmp dword [esp + 0x28], ebp
je 0x479c01
cmp dword [esp + 0x14], ebp
jne 0x479c01
test byte [esp + 0x85c], 4
je 0x479889
lea edx, [esp + 0x54]
lea eax, [esp + 0x48]
push edx
push eax
push ebx
call fcn.004bb8b0
add esp, 0xc
push ebx
call dword [0x593fb8]
test byte [esp + 0x85c], 2
je 0x4798aa
lea ecx, [esp + 0x70]
push 0x28
push ecx
push esi
call fcn.004ba350
add esp, 0xc
mov edi, dword [esp + 0x40]
cmp esi, edi
jne 0x4799ce
mov eax, dword [esp + 0x20]
or ebx, 0xffffffff
cmp eax, ebx
je 0x4798cc
push eax
call dword [0x593fb8]
mov dword [esp + 0x20], ebx
cmp edi, ebx
je 0x4798db
push edi
call dword [0x593fb8]
mov dword [esp + 0x40], ebx
mov edx, dword [0x54a4b4]
mov dword [esp + 0x10], edx
mov eax, dword [0x592e90]
mov esi, dword [esp + 0x854]
lea ecx, [esp + 0x10]
push eax
push ecx
push 0x5751c4
push esi
mov byte [esp + 0x858], 1
call fcn.004bac20
add esp, 0x10
test eax, eax
je 0x479bb0
mov edx, dword [esp + 0x10]
push edx
push esi
call fcn.004ba950
add esp, 8
test eax, eax
je 0x4799b5
mov eax, dword [esp + 0x2c]
push esi
push eax
call fcn.004ba950
add esp, 8
test eax, eax
je 0x479955
mov ecx, dword [esp + 0x10]
push 1
push ecx
mov dword [esp + 0x38], ebp
call fcn.004ba690
add esp, 8
jmp 0x479bcf
mov dword [0x5928c0], 0x27
mov dword [0x5928c4], 0xb16
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, dword [esp + 0x10]
push esi
push edx
mov dword [0x5928c8], eax
call fcn.004ba950
add esp, 8
test eax, eax
jne 0x479bcf
mov eax, dword [esp + 0x858]
mov dword [esp + 0x30], ebx
cmp eax, ebp
je 0x479bcf
mov ecx, dword [esp + 0x10]
push 0x103
push ecx
push eax
call fcn.00422de4
add esp, 0xc
jmp 0x479bcf
mov dword [0x5928c0], 0x28
mov dword [0x5928c4], 0xb24
jmp 0x479bc4
mov dword [esp + 0x30], ebp
jmp 0x479c0d
lea ecx, [esp + 0x2c]
mov dword [esp + 0x848], 0xffffffff
call fcn.0043bde0
xor eax, eax
jmp 0x479ccd
mov dword [0x5928c0], 3
mov dword [0x5928c4], 0x954
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x5928c8], eax
jmp 0x479c2d
mov dword [0x5928c0], 5
mov dword [0x5928c4], 0x95c
jmp 0x479bf6
mov dword [0x5928c0], 0x22
mov dword [0x5928c4], 0x96d
jmp 0x479bf6
mov dword [0x5928c0], 0x14
mov dword [0x5928c4], 0x97c
jmp 0x479bf6
mov dword [0x5928c0], 0xb
mov dword [0x5928c4], 0x98c
call esi
jmp 0x479bfc
mov dword [0x5928c0], 0xc
mov dword [0x5928c4], 0x995
call esi
jmp 0x479bfc
mov dword [0x5928c0], 0xc
mov dword [0x5928c4], 0x9a0
jmp 0x479bf6
mov dword [0x5928c0], 0xc
mov dword [0x5928c4], 0x9ab
jmp 0x479bf6
mov dword [0x5928c0], 4
mov dword [0x5928c4], 0x9d4
jmp 0x479bf6
mov dword [0x5928c0], 0x25
mov dword [0x5928c4], 0x9f9
jmp 0x479bf6
mov dword [0x5928c0], 0x21
mov dword [0x5928c4], 0xa16
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x5928c8], eax
xor ebp, ebp
jmp 0x479c01
push ebp
call fcn.00520a33
add esp, 4
mov dword [0x5928c0], 0x21
mov dword [0x5928c4], 0xa21
jmp 0x479b9d
mov dword [0x5928c0], 0x25
mov dword [0x5928c4], 0xa7a
jmp 0x479bf6
mov dword [0x5928c0], 0x21
mov dword [0x5928c4], 0xa8e
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x5928c8], eax
xor ebp, ebp
jmp 0x479c01
push 0
call fcn.00520a33
add esp, 4
mov dword [0x5928c0], 0x21
mov dword [0x5928c4], 0xa99
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, dword [esp + 0x10]
mov dword [0x5928c8], eax
xor ebp, ebp
jmp 0x479c01
mov dword [0x5928c0], 0x24
mov dword [0x5928c4], 0xb05
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x5928c8], eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x848], 0
call fcn.0043bde0
jmp 0x479c0d
mov dword [0x5928c0], 0x22
mov dword [0x5928c4], 0x9b5
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x5928c8], eax
cmp ebx, 0xffffffff
je 0x479c0d
push ebx
call dword [0x593fb8]
mov eax, dword [esp + 0x20]
cmp eax, 0xffffffff
je 0x479c1d
push eax
call dword [0x593fb8]
mov eax, dword [esp + 0x40]
cmp eax, 0xffffffff
je 0x479c2d
push eax
call dword [0x593fb8]
mov eax, dword [esp + 0x48]
mov esi, dword [esp + 0x30]
cmp eax, ebp
je 0x479c64
cmp esi, ebp
jne 0x479c57
mov edx, dword [esp + 0x54]
push edx
push eax
mov eax, dword [esp + 0x85c]
push eax
call fcn.004bab90
mov eax, dword [esp + 0x54]
add esp, 0xc
push eax
call fcn.00520a33
add esp, 4
mov dword [esp + 0x48], ebp
cmp esi, ebp
je 0x479c95
cmp dword [esp + 0x60], ebp
je 0x479c7d
mov ecx, dword [esp + 0x2c]
push 1
push ecx
call fcn.004ba690
add esp, 8
cmp dword [esp + 0x44], ebp
je 0x479c95
mov edx, dword [esp + 0x854]
push 1
push edx
call fcn.004ba690
add esp, 8
lea ecx, [esp + 0x2c]
mov dword [esp + 0x848], 0xffffffff
call fcn.0043bde0
mov eax, esi
jmp 0x479ccd
mov dword [0x5928c0], 1
mov dword [0x5928c4], 0x91f
call edi
mov dword [0x5928c8], eax
mov eax, 1
mov ecx, dword [esp + 0x840]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x83c
ret