Function at 0x42338e
Capabilities:
Get file size

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0xd0
mov edi, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
mov eax, dword [0x674014]
xor eax, ebp
mov dword [esp + 0xc8], eax
push esi
call fcn.00438444
add esp, 4
test al, al
je 0x42360d
mov ebx, dword [ebp + 0x10]
test ebx, 0xc7dfff7f
jne 0x423592
xor eax, eax
dec eax
lea ecx, [esp + 0xc0]
mov dword [ecx + 4], eax
mov dword [ecx], eax
call fcn.0043a6ec
push esi
call fcn.00438685
add esp, 4
test al, al
je 0x423621
cmp byte [esi + 0xb], 0
mov eax, esi
jns 0x423400
mov eax, dword [esi]
sub esp, 0x1c
xor edi, edi
mov dword [esp + 0x18], edi
mov dword [esp + 0x14], ebx
movaps xmm0, xmmword [0x61c2a0]
movups xmmword [esp + 4], xmm0
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
lea ecx, [esp + 0xbc]
mov dword [ecx], edi
push eax
call fcn.0041dc1e
push 2
call fcn.004b68d0
add esp, 4
test al, al
je 0x4234b0
mov eax, dword [esp + 0xbc]
inc eax
cmp eax, 1
ja 0x4234b0
call fcn.004b7210
lea ecx, [esp + 0x14]
push eax
push 2
push 0x1f4
push str.....chromechrome_cleanerengines_broker_scanner_sandbox_interface.cc
call fcn.004b73b0
lea eax, [esp + 0x1c]
push 0xf
push str.Failed_to_open
push eax
call fcn.0041482a
add esp, 0xc
mov edi, eax
lea ebx, [esp + 8]
push esi
push ebx
call fcn.00438050
add esp, 8
push ebx
push edi
call fcn.004b7530
add esp, 8
cmp byte [ebx + 0xb], 0
jns 0x4234a7
push dword [esp + 8]
call fcn.005dc756
add esp, 4
lea ecx, [esp + 0x14]
call fcn.004b7460
call fcn.0043ef9a
mov ecx, eax
call fcn.0043f2f0
mov edi, eax
cmp eax, 1
mov eax, edx
sbb eax, 0
jl 0x423635
mov ebx, edx
mov eax, esp
xor ecx, ecx
dec ecx
mov dword [eax + 4], ecx
mov dword [eax], ecx
push eax
push dword [esp + 0xc0]
call dword [sym.imp.KERNEL32.dll_GetFileSizeEx]
test eax, eax
je 0x42364c
cmp edi, dword [esp]
sbb ebx, dword [esp + 4]
jge 0x423635
push 2
call fcn.004b68d0
add esp, 4
test al, al
mov edi, dword [ebp + 8]
je 0x4236c1
lea ecx, [esp + 0x14]
push 2
push 0x201
push str.....chromechrome_cleanerengines_broker_scanner_sandbox_interface.cc
call fcn.004b6940
lea eax, [esp + 0x1c]
push 5
push 0x61c494
push eax
call fcn.0041482a
add esp, 0xc
mov edi, eax
lea ebx, [esp + 8]
push esi
push ebx
call fcn.00438050
add esp, 8
push ebx
push edi
call fcn.004b7530
add esp, 8
push 0x13
push str._is_too_big__size:
push eax
call fcn.0041482a
add esp, 0xc
mov ecx, eax
push dword [esp + 4]
push dword [esp + 4]
call fcn.00411450
cmp byte [ebx + 0xb], 0
jns 0x423584
push dword [esp + 8]
call fcn.005dc756
add esp, 4
lea ecx, [esp + 0x14]
call fcn.004b6d50
jmp 0x4236be
push 2
call fcn.004b68d0
add esp, 4
test al, al
je 0x42360d
mov esi, edi
lea edi, [esp + 0x14]
mov ecx, edi
push 2
push 0x1e0
push str.....chromechrome_cleanerengines_broker_scanner_sandbox_interface.cc
call fcn.004b6940
lea eax, [esp + 0x1c]
push 0x67
push str.OpenReadOnlyFile_called_with_invalid_dwFlagsAndAttributes._dwFlagsAndAttributes_can_only_contain_0x
push eax
call fcn.0041482a
add esp, 0xc
mov ecx, dword [eax]
mov ecx, dword [ecx + 4]
mov edx, dword [eax + ecx + 4]
and edx, 0xffffffb5
or edx, 8
mov dword [eax + ecx + 4], edx
mov ecx, eax
push 0x38200080
call fcn.00411240
push 0x10
push 0x61c457
push eax
call fcn.0041482a
add esp, 0xc
mov ecx, eax
push ebx
call fcn.00411240
mov ecx, edi
mov edi, esi
call fcn.004b6d50
mov dword [edi], 0
mov ecx, edi
push 0xffffffffffffffff
call fcn.0041dc1e
jmp 0x4236e8
mov dword [edi], 0
mov ecx, edi
push 0xffffffffffffffff
call fcn.0041dc1e
jmp 0x4236dc
mov edi, dword [ebp + 8]
mov ecx, edi
lea eax, [esp + 0xbc]
push eax
call fcn.0041dad8
jmp 0x4236d0
push 2
call fcn.004b68d0
add esp, 4
test al, al
je 0x4236be
call fcn.004b7210
lea ecx, [esp + 0x14]
push eax
push 2
push 0x1fc
push str.....chromechrome_cleanerengines_broker_scanner_sandbox_interface.cc
call fcn.004b73b0
lea eax, [esp + 0x1c]
push 0x1b
push str.Failed_to_get_size_of_file
push eax
call fcn.0041482a
add esp, 0xc
mov edi, eax
lea ebx, [esp + 8]
push esi
push ebx
call fcn.00438050
add esp, 8
push ebx
push edi
call fcn.004b7530
add esp, 8
cmp byte [ebx + 0xb], 0
jns 0x4236b5
push dword [esp + 8]
call fcn.005dc756
add esp, 4
lea ecx, [esp + 0x14]
call fcn.004b7460
mov edi, dword [ebp + 8]
mov dword [edi], 0
mov ecx, edi
push 0xffffffffffffffff
call fcn.0041dc1e
lea ecx, [esp + 0xbc]
call fcn.0041dc60
lea ecx, [esp + 0xc0]
call fcn.0043a954
mov ecx, dword [esp + 0xc8]
xor ecx, ebp
call fcn.005dd6f3
mov eax, edi
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret