Function at 0x4444d1
Capabilities:
Get file size

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push esi
push edi
xor edi, edi
mov dword [ebp - 0xc], edi
mov dword [ebp - 8], edi
cmp dword [ebp + 0xc], edi
jne 0x444502
mov eax, 0x80070057
push eax
push 0x347
push str.fileutil.cpp
mov esi, eax
call fcn.00403821
jmp 0x444791
mov eax, dword [ebp + 8]
test eax, eax
jne 0x444516
mov eax, 0x80070057
push eax
push 0x348
jmp 0x4444f1
mov eax, dword [ebp + 0x10]
test eax, eax
jne 0x44452a
mov eax, 0x80070057
push eax
push 0x349
jmp 0x4444f1
xor ecx, ecx
cmp cx, word [eax]
jne 0x44453e
mov eax, 0x80070057
push eax
push 0x34a
jmp 0x4444f1
push ebx
push edi
push 0x8000080
push 3
push edi
push 5
push SysReAllocString
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov dword [ebp - 4], esi
cmp esi, 0xffffffff
jne 0x4445ba
call ebx
test eax, eax
jg 0x444570
mov ecx, eax
jmp 0x444579
movzx ecx, ax
or ecx, 0x80070000
mov esi, 0x80070002
cmp ecx, esi
je 0x444790
test eax, eax
je 0x4445b7
jg 0x444590
mov esi, eax
jmp 0x444599
movzx esi, ax
or esi, 0x80070000
test esi, esi
js 0x4445a2
mov esi, 0x80004005
push esi
push 0x354
push str.fileutil.cpp
call fcn.00403821
jmp 0x444790
mov esi, dword [ebp - 4]
lea eax, [ebp - 0xc]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetFileSizeEx]
test eax, eax
jne 0x4445f8
call ebx
mov esi, eax
test esi, esi
jle 0x4445dc
movzx esi, si
or esi, 0x80070000
test esi, esi
js 0x4445e3
mov esi, 0x80004005
push esi
push 0x359
push str.fileutil.cpp
call fcn.00403821
jmp 0x444781
cmp dword [ebp + 0x14], edi
je 0x444645
mov edi, dword [ebp + 0x18]
xor eax, eax
cmp eax, dword [ebp - 8]
jl 0x444618
jg 0x44460e
cmp edi, dword [ebp - 0xc]
jbe 0x444618
mov esi, 0x80070057
jmp 0x444781
push 1
push eax
push edi
push esi
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
cmp eax, 0xffffffff
jne 0x444645
call ebx
mov esi, eax
test esi, esi
jle 0x44463b
movzx esi, si
or esi, 0x80070000
test esi, esi
jns 0x444645
push esi
push 0x367
jmp 0x4445e9
cmp dword [ebp + 0x20], 0
je 0x444671
mov ebx, dword [ebp + 0x1c]
xor edi, edi
mov esi, dword [ebp + 8]
cmp dword [esi], 0
je 0x4446bf
test ebx, ebx
jne 0x44469d
push dword [esi]
call fcn.00403a16
mov dword [esi], edi
mov eax, dword [ebp + 0xc]
mov esi, edi
mov dword [eax], edi
jmp 0x444781
mov ecx, dword [ebp - 0xc]
mov ebx, ecx
mov eax, dword [ebp - 8]
sub ebx, edi
sub ecx, edi
push 0
pop edi
sbb eax, edi
cmp edi, eax
jg 0x444650
jl 0x44468d
cmp dword [ebp + 0x1c], ecx
jae 0x444650
mov esi, 0x8007007a
push esi
push 0x379
jmp 0x4445e9
push 1
push ebx
push dword [esi]
call fcn.00403af0
mov edi, eax
test edi, edi
jne 0x4446e3
mov eax, 0x8007000e
push eax
mov esi, eax
push 0x387
jmp 0x4445e9
test ebx, ebx
je 0x444665
push 1
push ebx
call fcn.0040394f
mov edi, eax
test edi, edi
jne 0x4446e3
mov eax, 0x8007000e
push eax
mov esi, eax
push 0x394
jmp 0x4445e9
xor ecx, ecx
mov eax, ecx
mov dword [ebp + 0x10], ecx
mov dword [ebp + 0x1c], eax
jmp 0x4446f1
xor ecx, ecx
mov dword [ebp + 0x14], ecx
lea ecx, [ebp + 0x14]
push ecx
push eax
push ebx
call fcn.00443eba
mov esi, eax
test esi, esi
js 0x444777
mov ecx, dword [ebp + 0x1c]
lea eax, [ebp + 0x10]
push 0
push eax
push dword [ebp + 0x14]
add ecx, edi
push ecx
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x444749
mov eax, dword [ebp + 0x1c]
add eax, dword [ebp + 0x10]
cmp dword [ebp + 0x10], 0
mov dword [ebp + 0x1c], eax
jne 0x4446ef
cmp eax, ebx
je 0x44473b
mov esi, 0x8000ffff
jmp 0x444777
mov eax, dword [ebp + 8]
mov dword [eax], edi
xor edi, edi
mov eax, dword [ebp + 0xc]
mov dword [eax], ebx
jmp 0x444777
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
test esi, esi
jle 0x444760
movzx esi, si
or esi, 0x80070000
test esi, esi
js 0x444767
mov esi, 0x80004005
push esi
push 0x3a1
push str.fileutil.cpp
call fcn.00403821
test edi, edi
je 0x444781
push edi
call fcn.00403a16
mov eax, dword [ebp - 4]
cmp eax, 0xffffffff
je 0x444790
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop ebx
pop edi
mov eax, esi
pop esi
mov esp, ebp
pop ebp
ret 0x1c