Function at 0x456963
Capabilities:
Get file size
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x66d4ae
mov eax, dword fs:[0]
push eax
mov eax, 0x101dc
call fcn.00621490
mov eax, dword [0x704034]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, edx
mov edi, ecx
mov dword [ebp - 0x14], edi
and dword [ebp - 0x101b4], 0
push 0x30
pop eax
push eax
lea eax, [ebp - 0x50]
push 0
push eax
call fcn.00639410
sub esp, 0x1c
mov ecx, esp
push dword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.00447613
push 0
lea ecx, [ebp - 0x50]
call fcn.0044757c
xor ecx, ecx
mov dword [ebp - 4], ecx
cmp dword [ebx + 0x14], 8
jb 0x4569db
mov eax, dword [ebx]
jmp 0x4569dd
mov eax, ebx
push ecx
push 0x80
push 3
push ecx
push 1
push closesocket
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x50], eax
cmp eax, 0xffffffff
jne 0x456a75
push 0x259
push str.GetFileHexMd5
push str.utils.cpp
push str.utils
push 3
lea ecx, [ebp - 0x101e4]
call fcn.00424945
mov esi, eax
push 0x6cfe1c
mov ecx, esi
mov byte [ebp - 4], 1
call fcn.00424868
push 0xffffffffffffffff
push 0
push ebx
mov ecx, esi
call fcn.004253a9
push str._failed._error_code:
mov ecx, esi
call fcn.00424868
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov ecx, esi
call fcn.004458ec
lea ecx, [ebp - 0x101e4]
mov byte [ebp - 4], 0
call fcn.00665f73
push 0x6cded8
mov ecx, edi
call fcn.00428560
jmp 0x456c65
and dword [ebp - 0x20], 0
lea ecx, [ebp - 0x20]
and dword [ebp - 0x1c], 0
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetFileSizeEx]
test eax, eax
jne 0x456ad5
push 0x260
push str.GetFileHexMd5
push str.utils.cpp
push str.utils
push 3
lea ecx, [ebp - 0x101e4]
call fcn.00424945
mov esi, eax
push str.get
mov ecx, esi
mov byte [ebp - 4], 2
call fcn.00424868
push 0xffffffffffffffff
push 0
push ebx
mov ecx, esi
call fcn.004253a9
push str._file_size_failed._error_code:
jmp 0x456a40
lea ecx, [ebp - 0x1a0]
call fcn.0045b12c
and dword [ebp - 0x14], 0
xorps xmm0, xmm0
mov ecx, dword [ebp - 0x1c]
movlpd qword [ebp - 0x101a8], xmm0
test ecx, ecx
jl 0x456b9e
mov eax, dword [ebp - 0x20]
jg 0x456b07
test eax, eax
je 0x456b9e
mov ebx, dword [ebp - 0x101a4]
mov esi, dword [ebp - 0x101a8]
mov edx, eax
sub edx, esi
sbb ecx, ebx
mov dword [ebp - 0x101a4], ecx
js 0x456b32
jg 0x456b2b
cmp edx, 0x10000
jbe 0x456b32
mov eax, 0x10000
jmp 0x456b34
sub eax, esi
push 0
lea ecx, [ebp - 0x14]
push ecx
push eax
lea eax, [ebp - 0x101a0]
push eax
push dword [ebp - 0x50]
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x456c8b
add esi, dword [ebp - 0x14]
lea edx, [ebp - 0x101a0]
push dword [ebp - 0x14]
lea ecx, [ebp - 0x1a0]
adc ebx, 0
call fcn.0045b153
mov dword [esp], 0x10000
lea eax, [ebp - 0x101a0]
push 0
push eax
call fcn.00639410
mov ecx, dword [ebp - 0x1c]
add esp, 0xc
cmp ecx, ebx
jle 0x456b91
mov eax, dword [ebp - 0x20]
jmp 0x456b13
jl 0x456b9e
mov eax, dword [ebp - 0x20]
cmp eax, esi
ja 0x456b13
lea edx, [ebp - 0x64]
lea ecx, [ebp - 0x1a0]
call fcn.0045b226
push 0x98
lea eax, [ebp - 0x100]
push 0
push eax
call fcn.00639410
pop ecx
lea ecx, [ebp - 0x100]
call fcn.0044ffe4
mov byte [ebp - 4], 4
lea esi, [ebp - 0x64]
mov eax, dword [ebp - 0x100]
push 0x30
mov ecx, dword [eax + 4]
mov eax, dword [ebp + ecx - 0xec]
and eax, 0xfffff9ff
or eax, 0x800
mov dword [ebp + ecx - 0xec], eax
mov eax, dword [ebp - 0x100]
pop ecx
mov eax, dword [eax + 4]
mov word [ebp + eax - 0xc0], cx
push 0
lea eax, [ebp - 0x101b0]
push 2
push eax
call fcn.0060c2fb
mov ecx, dword [ebp - 0x100]
lea edx, [ebp - 0x100]
add esp, 0xc
mov ecx, dword [ecx + 4]
push dword [eax + 0xc]
add ecx, edx
push dword [eax + 8]
push ecx
call dword [eax]
movzx eax, byte [esi]
lea ecx, [ebp - 0x100]
add esp, 0xc
push eax
call fcn.00457bb3
inc esi
lea eax, [ebp - 0x54]
cmp esi, eax
jne 0x456c07
push edi
lea ecx, [ebp - 0x100]
call fcn.0044ff85
lea ecx, [ebp - 0x100]
call fcn.0044df8b
lea ecx, [ebp - 0x50]
call fcn.004477ac
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00620676
mov esp, ebp
pop ebp
ret
push 0x273
push str.GetFileHexMd5
push str.utils.cpp
push str.utils
push 3
lea ecx, [ebp - 0x101e4]
call fcn.00424945
mov esi, eax
mov byte [ebp - 4], 3
push str.read_file_buffer_failed._error_code:
jmp 0x456a40