Function at 0x42fd20
Capabilities:
Get file size
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x58a648
mov eax, dword fs:[0]
push eax
sub esp, 0x4a4
mov eax, dword [0x600f80]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
xorps xmm0, xmm0
mov dword [ebp - 0x32c], 0
movq qword [ebp - 0x334], xmm0
mov dword [ebp - 0x380], 0
mov dword [ebp - 0x44c], 0
mov byte [ebp - 0x334], 0
mov dword [ebp - 0x330], 0
mov dword [ebp - 0x32c], 0
mov dword [ebp - 4], 0
call fcn.00425ba2
cmp eax, 7
jge 0x42fdb0
call dword [sym.imp.ADVAPI32.dll_RevertToSelf]
xor eax, eax
jmp 0x42fe21
lea ecx, [ebp - 0x334]
call fcn.00493361
test al, al
je 0x42fe60
push str.Shell32.dll
mov byte [ebp - 4], 1
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
test eax, eax
je 0x42fe4e
push str.SHGetKnownFolderPath
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x42fe4e
lea ecx, [ebp - 0x44c]
push ecx
push 0
push 0
push 0x5d3144
call eax
test eax, eax
jns 0x42fe4e
lea ecx, [ebp - 0x334]
call fcn.004933e6
call dword [sym.imp.ADVAPI32.dll_RevertToSelf]
mov eax, dword [ebp - 0x330]
test eax, eax
je 0x42fe1e
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
or eax, 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0053cd12
mov esp, ebp
pop ebp
ret
lea ecx, [ebp - 0x334]
mov dword [ebp - 4], 0
call fcn.004933e6
push 0x104
push dword [ebp - 0x44c]
lea eax, [ebp - 0x220]
push 0x104
push eax
call fcn.005546b4
add esp, 0x10
push dword [ebp - 0x44c]
call dword [sym.imp.ole32.dll_CoTaskMemFree]
push 0xffffffffffffffff
push 0x5e23c4
lea eax, [ebp - 0x220]
push 0x104
push eax
call fcn.005562af
push 0xffffffffffffffff
push str.GoogleChromeUser_DataDefaultPreferences
lea eax, [ebp - 0x220]
push 0x104
push eax
call fcn.005562af
push 0xffffffffffffffff
lea eax, [ebp - 0x220]
push eax
push 0x104
lea eax, [ebp - 0x328]
push eax
push 0
call fcn.00556034
add esp, 0x34
lea eax, [ebp - 0x328]
push 0
push 0
push 3
push 0
push 1
push bind
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov esi, eax
test esi, esi
je 0x42fe07
cmp esi, 0xffffffff
je 0x42fe07
push 0
push esi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov ebx, dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
push 8
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov edi, eax
test edi, edi
je 0x42ff5b
push 0
lea eax, [ebp - 0x380]
push eax
push 0
push esi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
push eax
push edi
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
push edi
test eax, eax
jne 0x42ff6b
push eax
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x334]
call fcn.0049320a
jmp 0x42fe1e
lea ecx, [ebp - 0x34c]
call fcn.00407be0
push 0
push str.mpafhceaakojgkpikobjkmnecmmjbiam_:
lea ecx, [ebp - 0x34c]
mov byte [ebp - 4], 3
call fcn.00420630
lea ecx, [ebp - 0x34c]
push 0
cmp eax, 0xffffffff
jne 0x43004c
push str.mpafhceaakojgkpikobjkmnecmmjbiam
call fcn.00420630
cmp eax, 0xffffffff
jne 0x42ffdf
push edi
push 0
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x34c]
call fcn.00407cb0
lea ecx, [ebp - 0x334]
call fcn.0049320a
mov eax, 2
jmp 0x42fe21
push str.scpbext.exe
lea ecx, [ebp - 0x37c]
call fcn.00407be0
lea ecx, [ebp - 0x37c]
mov byte [ebp - 4], 4
call fcn.00491c28
cmp eax, 0xffffffff
lea ecx, [ebp - 0x37c]
sete bl
call fcn.00407cb0
mov eax, dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push edi
push 0
call eax
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x34c]
call fcn.00407cb0
lea ecx, [ebp - 0x334]
call fcn.0049320a
test bl, bl
je 0x43034d
xor eax, eax
jmp 0x42fe21
push str.mpafhceaakojgkpikobjkmnecmmjbiam_:
call fcn.00420630
push eax
push str.state
lea ecx, [ebp - 0x34c]
call fcn.00420630
cmp eax, 0xffffffff
jne 0x43008e
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x34c]
call fcn.00407cb0
lea ecx, [ebp - 0x334]
call fcn.0049320a
jmp 0x42fe1e
push 0xf
push eax
lea eax, [ebp - 0x364]
push eax
lea ecx, [ebp - 0x34c]
call fcn.00420670
push 0x48
lea eax, [ebp - 0x3c8]
mov byte [ebp - 4], 5
push 0
push eax
call fcn.00540250
add esp, 0xc
lea eax, [ebp - 0x450]
lea ecx, [ebp - 0x364]
push eax
call fcn.00420600
cmp dword [ebp - 0x350], 0x10
lea ecx, [ebp - 0x364]
cmovae ecx, dword [ebp - 0x364]
push ecx
push 0x61298c
push dword [eax]
push ecx
lea ecx, [ebp - 0x3c8]
call fcn.004331e0
push 0x48
lea eax, [ebp - 0x448]
push 0
push eax
call fcn.00540250
add esp, 0xc
lea ecx, [ebp - 0x448]
call fcn.00433170
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x364]
cmp dword [ebp - 0x350], 0x10
mov edx, dword [ebp - 0x354]
cmovae ecx, dword [ebp - 0x364]
push ecx
push 0x10
sub esp, 8
lea edx, [edx + ecx]
call fcn.00434750
add esp, 0x10
test al, al
jne 0x43017e
push edi
push 0
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x448]
call fcn.004303b0
lea ecx, [ebp - 0x3c8]
call fcn.004303b0
lea ecx, [ebp - 0x364]
call fcn.00407cb0
jmp 0x430073
lea eax, [ebp - 0x448]
push eax
lea ecx, [ebp - 0x3c8]
call fcn.004338f0
test al, al
jne 0x430145
push 0x38
lea eax, [ebp - 0x400]
push 0
push eax
call fcn.00540250
add esp, 0xc
lea eax, [ebp - 0x3b8]
lea ecx, [ebp - 0x400]
push eax
call fcn.00433340
push 0x5dbe89
lea ecx, [ebp - 0x37c]
mov byte [ebp - 4], 8
call fcn.00407be0
push ecx
lea ecx, [ebp - 0x400]
mov byte [ebp - 4], 9
call fcn.004333a0
test eax, eax
jle 0x430213
lea eax, [ebp - 0x468]
push eax
push 1
lea ecx, [ebp - 0x400]
call fcn.004333e0
mov ecx, eax
call fcn.00433420
push eax
lea ecx, [ebp - 0x37c]
call fcn.004205c0
lea ecx, [ebp - 0x468]
call fcn.00407cb0
cmp dword [ebp - 0x36c], 0
je 0x430273
push edi
push 0
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, 0x5e2490
lea ecx, [ebp - 0x37c]
call fcn.00429ae0
lea ecx, [ebp - 0x37c]
test al, al
jne 0x430357
mov edx, 0x5e24a0
call fcn.00429ae0
lea ecx, [ebp - 0x37c]
test al, al
jne 0x430306
mov edx, 0x5e249c
call fcn.00429ae0
test al, al
jne 0x4302ca
push ecx
lea eax, [ebp - 0x4b0]
push eax
lea ecx, [ebp - 0x3c8]
call fcn.004332c0
lea ecx, [ebp - 0x4b0]
call fcn.004303b0
lea ecx, [ebp - 0x37c]
call fcn.00407cb0
lea ecx, [ebp - 0x400]
mov byte [ebp - 4], 7
call fcn.004303e0
lea eax, [ebp - 0x448]
push eax
lea ecx, [ebp - 0x3c8]
call fcn.004338f0
test al, al
je 0x430194
jmp 0x430145
lea ecx, [ebp - 0x37c]
call fcn.00407cb0
lea ecx, [ebp - 0x400]
call fcn.004303e0
lea ecx, [ebp - 0x448]
call fcn.004303b0
lea ecx, [ebp - 0x3c8]
call fcn.004303b0
lea ecx, [ebp - 0x364]
call fcn.00407cb0
jmp 0x42ffbf
call fcn.00407cb0
lea ecx, [ebp - 0x400]
call fcn.004303e0
lea ecx, [ebp - 0x448]
call fcn.004303b0
lea ecx, [ebp - 0x3c8]
call fcn.004303b0
lea ecx, [ebp - 0x364]
call fcn.00407cb0
lea ecx, [ebp - 0x34c]
call fcn.00407cb0
lea ecx, [ebp - 0x334]
call fcn.0049320a
mov eax, 1
jmp 0x42fe21
call fcn.00407cb0
lea ecx, [ebp - 0x400]
call fcn.004303e0
lea ecx, [ebp - 0x448]
call fcn.004303b0
lea ecx, [ebp - 0x3c8]
call fcn.004303b0
lea ecx, [ebp - 0x364]
call fcn.00407cb0
lea ecx, [ebp - 0x34c]
call fcn.00407cb0
lea ecx, [ebp - 0x334]
call fcn.0049320a
xor eax, eax
jmp 0x42fe21