Function at 0x1004d840
Capabilities:
Get file size

Disassembly:
push 0x54
mov eax, 0x100a7b26
call fcn.10094c2d
mov ebx, ecx
mov ecx, dword [ebx + 0x10]
mov eax, dword [ebx + 4]
mov dword [ebp - 0x54], 0x1001bee8
mov dword [ebp - 0x50], ecx
mov eax, dword [eax]
sub eax, 0x10
call fcn.10084bc8
add eax, 0x10
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x48], 0x1001bec0
and dword [ebp - 4], 0
lea edi, [ebx + 0x14]
push edi
lea eax, [ebp - 0x54]
push eax
call fcn.10062ff1
mov dword [ebp - 0x3c], eax
test eax, eax
js 0x1004d8a8
push 0x1000d4b0
lea eax, [ebp - 0x38]
push eax
call fcn.1005fe35
mov byte [ebp - 4], 1
push dword [eax]
push 2
jmp 0x1004dadf
mov eax, dword [ebx]
mov eax, dword [eax]
cmp dword [eax - 0xc], 0
je 0x1004dac9
push 0x1000d508
lea eax, [ebp - 0x3c]
push eax
call fcn.1005fe35
push 0x1000d4fc
lea ecx, [ebp - 0x38]
push ecx
mov edi, eax
mov byte [ebp - 4], 2
call fcn.1005fdda
mov byte [ebp - 4], 3
mov eax, dword [eax]
mov ecx, dword [ebx + 0x10]
mov edx, dword [ecx]
push eax
push 2
call dword [edx + 4]
mov eax, dword [ebp - 0x38]
add eax, 0xfffffff0
call fcn.10084c29
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x3c]
add eax, 0xfffffff0
call fcn.10084c29
mov eax, dword [ebx + 4]
mov edx, dword [ebx]
mov esi, dword [eax]
call fcn.1004cdf8
xor esi, esi
mov dword [ebp - 0x3c], eax
cmp eax, esi
jl 0x1004da87
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x40], esi
push esi
push 0x80
push 3
mov byte [ebp - 4], 4
mov eax, dword [ebx + 4]
mov eax, dword [eax]
push 1
push SysReAllocStringLen
push eax
lea edi, [ebp - 0x44]
call fcn.1002b057
mov dword [ebp - 0x3c], eax
cmp eax, esi
jl 0x1004da43
push esi
push dword [ebp - 0x44]
call dword [sym.imp.KERNEL32.dll_GetFileSize]
cmp eax, dword [ebx + 8]
jne 0x1004d979
cmp esi, dword [ebx + 0xc]
jne 0x1004d979
push 0x1000d578
lea eax, [ebp - 0x38]
push eax
lea edi, [ebx + 0x14]
call fcn.1005fe35
mov byte [ebp - 4], 5
jmp 0x1004d9f2
lea eax, [ebp - 0x60]
push eax
push dword [ebp - 0x44]
call dword [sym.imp.KERNEL32.dll_GetFileSizeEx]
test eax, eax
je 0x1004d9b0
mov eax, dword [ebp - 0x60]
xor ecx, ecx
cmp eax, dword [ebx + 8]
jne 0x1004d9b0
cmp ecx, dword [ebx + 0xc]
jne 0x1004d9b0
push 0x1000d578
lea eax, [ebp - 0x38]
push eax
lea edi, [ebx + 0x14]
call fcn.1005fe35
mov byte [ebp - 4], 6
jmp 0x1004d9f2
push 8
pop ecx
xor eax, eax
mov dword [ebp - 0x34], esi
lea edi, [ebp - 0x30]
rep stosd dword es:[edi], eax
mov eax, dword [ebx + 4]
mov eax, dword [eax]
lea ecx, [ebp - 0x34]
push ecx
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesExW]
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp eax, dword [ebx + 8]
jne 0x1004da0d
cmp ecx, dword [ebx + 0xc]
jne 0x1004da0d
push 0x1000d578
lea eax, [ebp - 0x38]
push eax
lea edi, [ebx + 0x14]
call fcn.1005fe35
mov byte [ebp - 4], 7
mov ebx, dword [ebx + 0x10]
push dword [eax]
mov edx, dword [ebx]
push 2
mov ecx, ebx
call dword [edx + 4]
mov eax, dword [ebp - 0x38]
add eax, 0xfffffff0
call fcn.10084c29
jmp 0x1004da77
push 0x1000d5c0
lea eax, [ebp - 0x38]
push eax
lea edi, [ebx + 0x14]
call fcn.1005fe35
mov byte [ebp - 4], 8
mov ebx, dword [ebx + 0x10]
push dword [eax]
mov edx, dword [ebx]
push esi
mov ecx, ebx
call dword [edx + 4]
mov eax, dword [ebp - 0x38]
add eax, 0xfffffff0
call fcn.10084c29
mov dword [ebp - 0x3c], 0x80091007
jmp 0x1004da77
push 0x1000d640
lea eax, [ebp - 0x38]
push eax
lea edi, [ebx + 0x14]
call fcn.1005fe35
mov byte [ebp - 4], 9
mov ebx, dword [ebx + 0x10]
push dword [eax]
mov edx, dword [ebx]
push esi
mov ecx, ebx
call dword [edx + 4]
mov eax, dword [ebp - 0x38]
add eax, 0xfffffff0
call fcn.10084c29
mov dword [ebp - 0x3c], 0x80004005
cmp dword [ebp - 0x44], esi
je 0x1004daf4
push dword [ebp - 0x44]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1004daf4
mov eax, dword [0x100bcf90]
mov ecx, 0x100bcf90
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x38], eax
mov byte [ebp - 4], 0xa
push dword [ebp - 0x3c]
lea eax, [ebp - 0x38]
push dword [ebx + 0x14]
push 0x1000d6c8
push eax
call fcn.10084899
mov ebx, dword [ebx + 0x10]
mov edi, dword [ebp - 0x38]
mov eax, dword [ebx]
add esp, 0x10
push edi
push esi
mov ecx, ebx
call dword [eax + 4]
lea eax, [edi - 0x10]
jmp 0x1004daef
push 0x1000d730
lea eax, [ebp - 0x38]
push eax
call fcn.1005fe35
mov byte [ebp - 4], 0xb
push dword [eax]
push 1
mov ebx, dword [ebx + 0x10]
mov edx, dword [ebx]
mov ecx, ebx
call dword [edx + 4]
mov eax, dword [ebp - 0x38]
add eax, 0xfffffff0
call fcn.10084c29
mov eax, dword [ebp - 0x4c]
add eax, 0xfffffff0
mov dword [ebp - 0x54], 0x1001bee8
call fcn.10084c29
mov eax, dword [ebp - 0x3c]
call fcn.10094cbf
ret