Function at 0x40d780
Capabilities:
Get file size

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xa4
mov dword [ebp - 0x10], 0xce3d
mov dword [ebp - 0x7c], 0xf92a
mov dword [ebp - 0x30], 0xe50d
mov dword [ebp - 8], 0xc7bd
mov dword [ebp - 0x90], 0x13bb1
mov dword [ebp - 0x84], 0x5416
mov dword [ebp - 0x24], 0xe400
mov dword [ebp - 0x18], 0x14a0d
mov dword [ebp - 4], 0x114cb
mov dword [ebp - 0x28], 0x2a35
mov dword [ebp - 0x14], 0xe58a
mov dword [ebp - 0x98], 0xcfba
mov dword [ebp - 0x6c], 0xdd4c
mov dword [ebp - 0x1c], 0x17089
mov dword [ebp - 0x48], 0x8825
mov dword [ebp - 0xc], 0x12ed6
mov dword [ebp - 0x38], 0xdc69
mov dword [ebp - 0x58], 0x1f17
mov dword [ebp - 0x64], 0x3831
mov dword [ebp - 0x4c], 0x8400
mov dword [ebp - 0x2c], 0x11084
mov dword [ebp - 0x34], 0x1a6d
mov dword [ebp - 0x68], 0xae62
mov dword [ebp - 0x94], 0x15878
mov dword [ebp - 0x20], 0x10c92
mov eax, dword [ebp - 8]
add eax, 1
mov dword [ebp - 8], eax
mov dword [ebp - 0x3c], 0
jmp 0x40d85f
mov ecx, dword [ebp - 0x3c]
add ecx, 1
mov dword [ebp - 0x3c], ecx
mov edx, dword [ebp - 0x68]
sub edx, 0xae61
cmp dword [ebp - 0x3c], edx
jge 0x40d878
mov eax, dword [ebp + 8]
add eax, 1
mov dword [ebp + 8], eax
jmp 0x40d856
mov dword [ebp - 0x40], 0
jmp 0x40d88a
mov ecx, dword [ebp - 0x40]
add ecx, 1
mov dword [ebp - 0x40], ecx
mov edx, dword [ebp + 0x1c]
sub edx, 0xad22
cmp dword [ebp - 0x40], edx
jge 0x40d956
mov eax, dword [ebp + 0x14]
sub eax, 1
mov dword [ebp + 0x14], eax
mov ecx, dword [ebp + 0x14]
imul ecx, dword [ebp - 0xc]
cmp ecx, dword [ebp - 0x34]
jge 0x40d8ba
mov dword [ebp - 0x50], 1
jmp 0x40d8c1
mov dword [ebp - 0x50], 0
mov edx, dword [ebp - 0x18]
cmp edx, dword [ebp - 0x10]
jge 0x40d8d2
mov dword [ebp - 0x54], 1
jmp 0x40d8d9
mov dword [ebp - 0x54], 0
mov eax, dword [ebp - 0x50]
and eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x2c]
and ecx, dword [ebp - 0x54]
or eax, ecx
je 0x40d951
mov edx, dword [ebp - 0x24]
cmp edx, dword [ebp - 0x30]
jne 0x40d951
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x84]
jne 0x40d951
mov ecx, dword [ebp - 0x28]
cmp ecx, dword [ebp - 0x34]
jne 0x40d951
mov edx, dword [ebp + 8]
cmp edx, dword [ebp - 0x38]
jne 0x40d951
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x58]
jne 0x40d951
push 0x1614c
push 0x2870
push 0x7e53
push 0x1336d
push 0x12931
push 0x13ae1
push 0xa07b
call dword [sym.imp.KERNEL32.dll_OpenPrivateNamespaceA]
add esp, 0x1c
mov ecx, dword [ebp - 0x38]
and ecx, dword [ebp - 0x64]
je 0x40d951
mov edx, dword [ebp - 0x20]
sub edx, 1
mov dword [ebp - 0x20], edx
jmp 0x40d881
mov dword [ebp - 0x44], 0
jmp 0x40d968
mov eax, dword [ebp - 0x44]
add eax, 1
mov dword [ebp - 0x44], eax
mov ecx, dword [ebp - 0x18]
sub ecx, 0x14a0c
cmp dword [ebp - 0x44], ecx
jge 0x40db21
mov edx, dword [ebp - 4]
cmp edx, dword [ebp - 0x2c]
jge 0x40db1c
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x14]
jne 0x40db1c
mov ecx, dword [ebp - 0x10]
cmp ecx, dword [ebp - 0x48]
jne 0x40db1c
mov edx, dword [ebp + 0x14]
cmp edx, dword [ebp - 0x14]
jne 0x40db1c
mov eax, dword [ebp + 0x18]
cmp eax, dword [ebp - 0x14]
jne 0x40db1c
mov ecx, dword [ebp - 0x24]
imul ecx, dword [ebp - 4]
test ecx, ecx
je 0x40db1c
mov edx, dword [ebp - 0x4c]
cmp edx, dword [ebp - 0x7c]
jne 0x40db1c
mov eax, dword [ebp - 0x6c]
cmp eax, dword [ebp - 0x1c]
jne 0x40db1c
push 0x7769
call dword [sym.imp.KERNEL32.dll_GetFileSize]
add esp, 4
mov ecx, dword [ebp - 4]
sub ecx, 1
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x4c]
cmp edx, dword [ebp - 4]
jge 0x40da05
mov dword [ebp - 0x5c], 1
jmp 0x40da0c
mov dword [ebp - 0x5c], 0
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x58]
jge 0x40da1d
mov dword [ebp - 0x60], 1
jmp 0x40da24
mov dword [ebp - 0x60], 0
mov ecx, dword [ebp - 0x30]
add ecx, dword [ebp + 0x14]
or ecx, dword [ebp - 0x5c]
or ecx, dword [ebp - 0x60]
je 0x40dafa
mov edx, dword [ebp + 0x1c]
cmp edx, dword [ebp - 0x48]
jne 0x40dafa
mov eax, dword [ebp + 0x20]
cmp eax, dword [ebp - 0x48]
jne 0x40dafa
push 0x5124
push 0x130c8
push 0x6941
push 0x138bc
push 0x953d
call dword [sym.imp.KERNEL32.dll_HeapFree]
add esp, 0x14
mov ecx, dword [ebp - 0x10]
add ecx, 1
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x10]
mov dword [ebp - 0x88], edx
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x8c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x88]
cmp edx, dword [ebp - 0x8c]
jge 0x40dae2
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp + 0x14]
jne 0x40dae2
mov ecx, dword [ebp - 0x20]
cmp ecx, dword [ebp - 0x64]
jne 0x40dae2
mov edx, dword [ebp - 4]
cmp edx, dword [ebp - 0x24]
jne 0x40dae2
mov eax, dword [ebp - 0x68]
cmp eax, dword [ebp - 8]
jne 0x40dae2
mov ecx, dword [ebp - 0x90]
cmp ecx, dword [ebp - 0x24]
jne 0x40dae2
mov edx, dword [ebp - 0x28]
cmp edx, dword [ebp - 0xc]
jge 0x40dae2
mov eax, dword [ebp - 8]
sub eax, 1
mov dword [ebp - 8], eax
push 0x17d89
push 0x130be
push 0x800a
call dword [sym.imp.KERNEL32.dll_UnregisterWait]
add esp, 0xc
push 0x70ec
push 0xc720
push 0x3c70
push 0x4c21
push 0x6f82
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
add esp, 0x14
jmp 0x40d95f
mov ecx, dword [ebp - 0x6c]
cmp ecx, dword [ebp - 0x94]
jge 0x40db35
mov dword [ebp - 0x70], 1
jmp 0x40db3c
mov dword [ebp - 0x70], 0
mov edx, dword [ebp - 0x14]
and edx, dword [ebp - 0x34]
cmp edx, dword [ebp - 0x2c]
jge 0x40db50
mov dword [ebp - 0x74], 1
jmp 0x40db57
mov dword [ebp - 0x74], 0
mov eax, dword [ebp - 0x70]
and eax, dword [ebp - 0x74]
je 0x40dc40
mov ecx, dword [ebp - 0x30]
cmp ecx, dword [ebp - 0x34]
jge 0x40db74
mov dword [ebp - 0x78], 1
jmp 0x40db7b
mov dword [ebp - 0x78], 0
mov edx, dword [ebp - 0x14]
imul edx, dword [ebp + 0x20]
or edx, dword [ebp - 0x78]
je 0x40dc40
mov eax, dword [ebp - 0x7c]
cmp eax, dword [ebp - 0x98]
jne 0x40dc40
mov ecx, dword [ebp - 0x4c]
cmp ecx, dword [ebp - 0x38]
jne 0x40dc40
mov edx, dword [ebp - 4]
cmp edx, dword [ebp + 8]
jne 0x40dc40
mov eax, dword [ebp + 0x10]
cmp eax, dword [ebp + 0x1c]
jne 0x40dc40
mov ecx, dword [ebp + 0x18]
cmp ecx, dword [ebp - 8]
jne 0x40dc40
mov edx, dword [ebp - 0xc]
sub edx, 1
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x9c], eax
mov ecx, dword [ebp - 0xc]
mov dword [ebp - 0xa0], ecx
mov edx, dword [ebp - 0x18]
sub edx, 1
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x9c]
cmp eax, dword [ebp - 0xa0]
jge 0x40dc01
mov dword [ebp - 0x80], 1
jmp 0x40dc08
mov dword [ebp - 0x80], 0
mov ecx, dword [ebp - 0x38]
or ecx, dword [ebp + 0x10]
or ecx, dword [ebp - 0x80]
mov dword [ebp - 0xa4], ecx
mov edx, dword [ebp + 0x10]
add edx, 1
mov dword [ebp + 0x10], edx
cmp dword [ebp - 0xa4], 0
je 0x40dc32
mov eax, dword [ebp - 0xc]
sub eax, 1
mov dword [ebp - 0xc], eax
push 0xcff5
call dword [sym.imp.KERNEL32.dll_SetEvent]
add esp, 4
mov esp, ebp
pop ebp
ret