Function at 0x73e808d0
Capabilities:
Get file size

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x58
mov eax, dword [0x73f3e530]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
mov ebx, dword [ebp + 0x10]
push esi
mov esi, dword [ebp + 0xc]
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x50], esi
push edi
mov edi, ecx
test esi, esi
je 0x73e809fb
push 0x48
lea eax, [ebp - 0x4c]
mov dword [edi], 1
push 0
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
mov eax, dword [esi]
add esp, 0xc
mov esi, dword [eax + 0x30]
lea eax, [ebp - 0x4c]
push 0
push eax
push dword [ebp - 0x50]
mov ecx, esi
call dword [0x73f59474]
call esi
test eax, eax
js 0x73e809e0
mov ecx, dword [ebp - 0x4c]
lea eax, [edi + 0x28]
test ecx, ecx
jne 0x73e80952
push 0x73db7bd4
push 0x104
push eax
call dword [sym.imp.api_ms_win_crt_private_l1_1_0.dll__o_wcscpy_s]
add esp, 0xc
jmp 0x73e8096e
push 0
push 0
push 0x104
push eax
push 0
push 0
push 0
push 0
push ecx
call dword [sym.imp.api_ms_win_crt_private_l1_1_0.dll__o__wsplitpath_s]
add esp, 0x24
mov eax, dword [ebp - 0x44]
xor ecx, ecx
mov dword [edi + 0xc], eax
cmp ecx, dword [ebp - 0x40]
jne 0x73e809e0
push 0x73dbf874
push eax
call fcn.73de06fd
add esp, 8
mov dword [edi + 8], eax
test eax, eax
je 0x73e80a8c
mov ecx, dword [ebp - 0x50]
push 0
push 0
push 0
mov eax, dword [ecx]
push 0
push ecx
mov esi, dword [eax + 0x14]
mov ecx, esi
call dword [0x73f59474]
call esi
test eax, eax
jne 0x73e809e0
mov ecx, dword [ebp - 0x50]
mov eax, dword [ecx]
mov esi, dword [eax + 0xc]
lea eax, [ebp - 0x54]
push eax
push dword [edi + 0xc]
push dword [edi + 8]
push ecx
mov ecx, esi
call dword [0x73f59474]
call esi
test eax, eax
jne 0x73e809e0
mov eax, dword [edi + 0xc]
cmp eax, dword [ebp - 0x54]
je 0x73e80af1
pop edi
pop esi
mov dword [ebx], 3
xor eax, eax
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.73ddffa0
mov esp, ebp
pop ebp
ret 0xc
push 0
push 0x80
push 3
push 0
push 1
push 0x80000000
push eax
call dword [sym.imp.api_ms_win_core_file_l1_1_0.dll_CreateFileW]
mov dword [edi + 4], eax
cmp eax, 0xffffffff
jne 0x73e80a37
pop edi
pop esi
mov dword [ebx], 4
xor eax, eax
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.73ddffa0
mov esp, ebp
pop ebp
ret 0xc
push 0
push eax
call dword [sym.imp.api_ms_win_core_file_l1_1_0.dll_GetFileSize]
mov esi, eax
mov eax, dword [edi + 4]
cmp esi, 0xffffffff
jne 0x73e80a6c
push eax
call dword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
pop edi
pop esi
mov dword [ebx], 3
xor eax, eax
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.73ddffa0
mov esp, ebp
pop ebp
ret 0xc
push 0
push esi
push 0
push 2
push 0
push eax
call dword [sym.imp.api_ms_win_core_kernel32_legacy_l1_1_0.dll_CreateFileMappingA]
mov dword [ebp - 0x54], eax
test eax, eax
jne 0x73e80aa7
push dword [edi + 4]
call dword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
pop edi
pop esi
mov dword [ebx], 2
xor eax, eax
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.73ddffa0
mov esp, ebp
pop ebp
ret 0xc
push 0
push esi
push 0
push 0
push 4
push eax
call dword [sym.imp.api_ms_win_core_memory_l1_1_0.dll_MapViewOfFileEx]
push dword [ebp - 0x54]
mov dword [ebp - 0x50], eax
call dword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
mov eax, dword [ebp - 0x50]
test eax, eax
je 0x73e80a83
push 0
push 0
push 0x104
mov dword [edi + 8], eax
lea eax, [edi + 0x28]
push eax
push 0
push 0
push 0
push 0
push dword [ebp - 0x58]
mov dword [edi + 0xc], esi
call dword [sym.imp.api_ms_win_crt_private_l1_1_0.dll__o__wsplitpath_s]
add esp, 0x24
mov ecx, dword [ebp - 4]
mov eax, 1
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.73ddffa0
mov esp, ebp
pop ebp
ret 0xc