Function at 0x40dd00
Capabilities:
Get file size

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0xd8
mov eax, dword [0x63a1e8]
mov edi, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
xor eax, ebp
mov dword [esp + 0xd0], eax
push esi
call fcn.00421813
add esp, 4
test al, al
je 0x40df78
mov ebx, dword [ebp + 0x10]
mov eax, ebx
and eax, 0x38200080
cmp eax, ebx
jne 0x40defd
lea ecx, [esp + 0xc8]
call fcn.00423a58
push esi
call fcn.00421a65
add esp, 4
test al, al
je 0x40df8c
cmp byte [esi + 0xb], 0
mov eax, esi
jns 0x40dd6d
mov eax, dword [esi]
xor edi, edi
push edi
push ebx
push 3
push edi
push 7
push SysReAllocString
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
lea ecx, [esp + 0xc4]
mov dword [ecx], edi
push eax
call fcn.00408a4a
push 2
call fcn.004824f0
add esp, 4
test al, al
je 0x40de1b
mov eax, dword [esp + 0xc4]
inc eax
cmp eax, 1
ja 0x40de1b
call fcn.00482ea0
lea ecx, [esp + 0x18]
push eax
push 2
push 0x1f5
push str..._.._chrome_chrome_cleaner_engines_broker_scanner_sandbox_interface.cc
call fcn.00482fd0
lea eax, [esp + 0x20]
push 0xf
push str.Failed_to_open
push eax
call fcn.00401baa
add esp, 0xc
mov edi, eax
lea ebx, [esp + 0xc]
push esi
push ebx
call fcn.004214b7
add esp, 8
cmp byte [ebx + 0xb], 0
jns 0x40ddf5
mov ebx, dword [esp + 0xc]
push ebx
push edi
call fcn.00483130
add esp, 8
cmp byte [esp + 0x17], 0
jns 0x40de12
push dword [esp + 0xc]
call fcn.005909b6
add esp, 4
lea ecx, [esp + 0x18]
call fcn.00483090
call fcn.004280ce
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x70]
cmp eax, 1
mov ecx, edx
mov ebx, eax
sbb ecx, 0
jl 0x40dfa0
mov edi, edx
mov eax, esp
push eax
push dword [esp + 0xc8]
call dword [sym.imp.KERNEL32.dll_GetFileSizeEx]
test eax, eax
je 0x40dfbd
cmp ebx, dword [esp]
sbb edi, dword [esp + 4]
jge 0x40dfa0
push 2
call fcn.004824f0
add esp, 4
test al, al
je 0x40e03a
lea ecx, [esp + 0x18]
push 2
push 0x202
push str..._.._chrome_chrome_cleaner_engines_broker_scanner_sandbox_interface.cc
call fcn.00482590
lea eax, [esp + 0x20]
push 5
push 0x5be265
push eax
call fcn.00401baa
add esp, 0xc
mov edi, eax
lea ebx, [esp + 0xc]
push esi
push ebx
call fcn.004214b7
add esp, 8
cmp byte [ebx + 0xb], 0
jns 0x40deb3
mov ebx, dword [esp + 0xc]
push ebx
push edi
call fcn.00483130
add esp, 8
push 0x13
push str._is_too_big__size:
push eax
call fcn.00401baa
add esp, 0xc
mov ecx, eax
push dword [esp + 4]
push dword [esp + 4]
call fcn.00462a30
cmp byte [esp + 0x17], 0
jns 0x40deef
push dword [esp + 0xc]
call fcn.005909b6
add esp, 4
lea ecx, [esp + 0x18]
call fcn.00482940
jmp 0x40e03a
push 2
call fcn.004824f0
add esp, 4
test al, al
je 0x40df78
mov esi, edi
lea edi, [esp + 0x18]
mov ecx, edi
push 2
push 0x1e1
push str..._.._chrome_chrome_cleaner_engines_broker_scanner_sandbox_interface.cc
call fcn.00482590
lea eax, [esp + 0x20]
push 0x67
push str.OpenReadOnlyFile_called_with_invalid_dwFlagsAndAttributes._dwFlagsAndAttributes_can_only_contain_0x
push eax
call fcn.00401baa
add esp, 0xc
mov ecx, dword [eax]
mov ecx, dword [ecx + 4]
mov edx, dword [eax + ecx + 4]
and edx, 0xffffffb5
or edx, 8
mov dword [eax + ecx + 4], edx
mov ecx, eax
push 0x38200080
call fcn.00462850
push 0x10
push 0x5be228
push eax
call fcn.00401baa
add esp, 0xc
mov ecx, eax
push ebx
call fcn.00462850
mov ecx, edi
mov edi, esi
call fcn.00482940
mov dword [edi], 0
mov ecx, edi
push 0xffffffffffffffff
call fcn.00408a4a
jmp 0x40e064
mov dword [edi], 0
mov ecx, edi
push 0xffffffffffffffff
call fcn.00408a4a
jmp 0x40e058
mov edi, dword [ebp + 8]
lea ecx, [esp + 0xc4]
mov dword [edi], 0
call fcn.00408aa0
mov ecx, edi
push eax
jmp 0x40e047
push 2
call fcn.004824f0
add esp, 4
test al, al
je 0x40e03a
call fcn.00482ea0
lea ecx, [esp + 0x18]
push eax
push 2
push 0x1fd
push str..._.._chrome_chrome_cleaner_engines_broker_scanner_sandbox_interface.cc
call fcn.00482fd0
lea eax, [esp + 0x20]
push 0x1b
push str.Failed_to_get_size_of_file
push eax
call fcn.00401baa
add esp, 0xc
mov edi, eax
lea ebx, [esp + 0xc]
push esi
push ebx
call fcn.004214b7
add esp, 8
cmp byte [ebx + 0xb], 0
jns 0x40e014
mov ebx, dword [esp + 0xc]
push ebx
push edi
call fcn.00483130
add esp, 8
cmp byte [esp + 0x17], 0
jns 0x40e031
push dword [esp + 0xc]
call fcn.005909b6
add esp, 4
lea ecx, [esp + 0x18]
call fcn.00483090
mov edi, dword [ebp + 8]
mov ecx, edi
mov dword [edi], 0
push 0xffffffffffffffff
call fcn.00408a4a
lea ecx, [esp + 0xc4]
call fcn.00408ad0
lea ecx, [esp + 0xc8]
call fcn.00423ca6
mov ecx, dword [esp + 0xd0]
xor ecx, ebp
call fcn.005909f1
mov eax, edi
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret