Function at 0x1004cb00
Capabilities:
Get file size

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x100ada15
mov eax, dword fs:[0]
push eax
sub esp, 0x228
mov eax, dword [0x100de040]
xor eax, esp
mov dword [esp + 0x220], eax
push ebx
push esi
push edi
mov eax, dword [0x100de040]
xor eax, esp
push eax
lea eax, [esp + 0x238]
mov dword fs:[0], eax
mov eax, dword [ebp + 0xc]
mov ebx, dword [ebp + 8]
mov edi, ecx
xor esi, esi
mov dword [esp + 0x20], eax
cmp edi, esi
je 0x1004ce54
cmp word [edi], si
je 0x1004ce54
push ebx
call fcn.10051ac0
push 0x324
lea ecx, [ebx + 0x2c]
push esi
push ecx
mov dword [ebx + 0x20], esi
mov dword [ebx + 0x24], esi
call fcn.10064e10
mov dword [ebx + 0x350], esi
add esp, 0xc
mov esi, edi
call fcn.1000fc00
test eax, eax
je 0x1004cc5a
push 0x100e33b4
push 0x110
call fcn.1006304e
add esp, 8
mov dword [esp + 0x20], eax
mov dword [esp + 0x240], 0
test eax, eax
je 0x1004cbbf
push eax
call fcn.1004c690
jmp 0x1004cbc1
xor eax, eax
mov dword [esp + 0x240], 0xffffffff
mov dword [ebx + 0x10], eax
test eax, eax
jne 0x1004cbdd
mov eax, 0x8007000e
jmp 0x1004ce59
push edi
mov esi, eax
call fcn.1000fc50
test eax, eax
jl 0x1004ce59
cmp eax, 1
je 0x1004ce59
mov eax, dword [ebx + 0x10]
mov edx, dword [eax + 0x108]
mov dword [ebx + 0x358], edx
mov eax, dword [eax + 0x10c]
push 0x2e
push edi
mov dword [ebx + 0x35c], eax
call fcn.10063e38
add esp, 8
test eax, eax
je 0x1004cc4c
push str..nrg
push eax
call fcn.10063c24
add esp, 8
test eax, eax
jne 0x1004cc4c
mov ecx, ebx
call fcn.1004f0b0
test eax, eax
jge 0x1004ce59
cmp eax, 0xe003200b
jne 0x1004ce59
push 0
mov ecx, ebx
call fcn.100502b0
jmp 0x1004ce59
xor ecx, ecx
push 0x206
push ecx
lea edx, [esp + 0x2e]
push edx
mov word [esp + 0x30], cx
call fcn.10064e10
add esp, 0xc
lea eax, [esp + 0x24]
push eax
push ebx
call fcn.1004fd10
xor esi, esi
cmp eax, esi
jl 0x1004ce59
cmp eax, 1
je 0x1004ce59
mov eax, dword [ebx + 0x24]
cmp eax, 0xa
jne 0x1004ccae
mov edi, dword [esp + 0x20]
lea ecx, [esp + 0x24]
push ecx
push ebx
call fcn.1004ce80
jmp 0x1004ce59
cmp eax, 5
jne 0x1004cce7
mov eax, 0x930
mov dword [ebx + 0x14], eax
mov dword [ebx + 0x360], eax
mov dword [ebx + 0x20], esi
mov eax, ebx
cmp dword [ebx + 0x354], esi
je 0x1004ccd8
call fcn.10050690
jmp 0x1004ce59
lea edx, [esp + 0x24]
push edx
call fcn.100505a0
jmp 0x1004ce59
cmp eax, 6
jne 0x1004cd20
mov eax, 0x930
mov dword [ebx + 0x20], esi
mov dword [ebx + 0x14], eax
mov dword [ebx + 0x360], eax
cmp dword [ebx + 0x354], esi
je 0x1004cd10
push ebx
call fcn.10050c70
jmp 0x1004ce59
lea ecx, [esp + 0x24]
mov edi, ebx
call fcn.10050a50
jmp 0x1004ce59
cmp eax, 7
jne 0x1004cd58
mov eax, 0x930
mov dword [ebx + 0x20], esi
mov dword [ebx + 0x14], eax
mov dword [ebx + 0x360], eax
mov ecx, ebx
cmp dword [ebx + 0x354], esi
je 0x1004cd4a
call fcn.10051220
jmp 0x1004ce59
lea edx, [esp + 0x24]
call fcn.10051080
jmp 0x1004ce59
cmp dword [ebx + 0x354], esi
je 0x1004cd90
cmp eax, 8
jne 0x1004cd86
mov eax, 0x930
mov dword [ebx + 0x14], eax
mov dword [ebx + 0x360], eax
mov eax, ebx
mov dword [ebx + 0x20], 0x2c
call fcn.10051790
jmp 0x1004ce59
mov eax, 0xe0032004
jmp 0x1004ce59
push esi
push esi
push 3
push esi
push 1
push connect
lea eax, [esp + 0x3c]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebx + 0xc], eax
cmp eax, 0xffffffff
jne 0x1004cdb9
call fcn.10002d30
jmp 0x1004ce59
mov ecx, dword [ebx + 0x24]
cmp ecx, 2
jne 0x1004cdd9
cmp dword [ebx + 0x28], esi
je 0x1004cdcd
xor eax, eax
jmp 0x1004ce59
mov ecx, ebx
call fcn.1004e710
jmp 0x1004ce59
cmp ecx, 1
jne 0x1004cdf0
mov ecx, ebx
call fcn.1004f0b0
cmp eax, esi
jl 0x1004ce59
cmp eax, 1
je 0x1004ce59
jmp 0x1004cdc1
lea ecx, [esp + 0x14]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetFileSizeEx]
test eax, eax
je 0x1004cdaf
cmp dword [ebx + 0x350], esi
je 0x1004ce33
cmp dword [ebx + 0x24], 8
jne 0x1004ce22
add dword [esp + 0x14], 0xffffffd4
mov dword [ebx + 0x360], 0x930
adc dword [esp + 0x18], 0xffffffff
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
push edx
push eax
mov esi, ebx
call fcn.1004f8c0
mov ecx, dword [esp + 0x14]
mov eax, dword [ebx + 0xc]
mov edx, dword [esp + 0x18]
mov dword [ebx + 0x358], ecx
push eax
mov ecx, ebx
mov dword [ebx + 0x35c], edx
call fcn.100502b0
jmp 0x1004ce59
mov eax, 0x80070057
mov ecx, dword [esp + 0x238]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x220]
xor ecx, esp
call fcn.10062448
mov esp, ebp
pop ebp
ret 8