Function at 0x41e790
Capabilities:
Check if file exists

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x40
mov edi, ecx
mov esi, dword [ebp + 0x10]
mov ecx, dword [ebp + 0xc]
xor eax, eax
cmp ecx, esi
jb 0x41eb68
mov edx, esi
and edx, 0x1f
jne 0x41eb68
add ecx, 0xfffffff8
or esi, 0x14
mov eax, ecx
xor edx, edx
div esi
cmp esi, ecx
ja 0x41ec84
mov edx, dword [ebp + 8]
mov dword [edi], edx
mov dword [edx], 0
lea ecx, [eax + eax*4]
lea ecx, [ecx*4 + 8]
mov dword [ebp - 0x28], ecx
mov ecx, edx
shr ecx, 0xe
xor esi, esi
inc esi
shl esi, cl
mov dword [ebp - 0x4c], esi
mov ecx, edx
shr ecx, 0x13
mov dword [ebp - 0x48], ecx
shr edx, 0x15
mov dword [ebp - 0x44], edx
lea ecx, [edi + 4]
mov dword [ebp - 0x40], ecx
xor ecx, ecx
mov dword [ebp - 0x3c], eax
mov ebx, eax
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x10], ecx
mov eax, dword [edi]
mov dword [ebp - 0x2c], eax
push 0x24
call fcn.00564ea5
add esp, 4
mov esi, eax
xor eax, eax
mov dword [esi], eax
mov dword [esi + 4], eax
xorps xmm0, xmm0
movups xmmword [esi + 0xc], xmm0
push 0xc
call fcn.00564ea5
add esp, 4
test eax, eax
je 0x41ec8e
mov ebx, edi
mov dword [eax + 8], esi
mov ecx, dword [ebp - 0x40]
mov dword [eax + 4], ecx
mov ecx, dword [edi + 4]
mov dword [eax], ecx
mov dword [ecx + 4], eax
mov dword [edi + 4], eax
inc dword [edi + 0xc]
sub esp, 0x10
xorps xmm0, xmm0
movups xmmword [esp], xmm0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
cmp dword [esi], eax
mov dword [ebp - 0x30], esi
je 0x41eb72
mov edi, esi
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x20], eax
mov eax, dword [edi]
inc eax
cmp eax, 2
jae 0x41eb84
mov eax, esi
inc eax
cmp eax, 2
jb 0x41e8a0
mov dword [edi], esi
call fcn.004ef4b0
push dword [ebp - 0x20]
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov edi, dword [edi]
mov eax, dword [ebp - 0x2c]
lea ecx, [eax + 8]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x20], ecx
lea esi, [ecx + eax]
add esi, 8
mov ebx, dword [ebx + 0x14]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
xor ecx, ecx
push ecx
push ecx
push 0x100002
push esi
push ebx
push edi
push eax
call dword [sym.imp.KERNEL32.dll_DuplicateHandle]
test eax, eax
je 0x41ec84
sub esp, 0x10
xorps xmm0, xmm0
movups xmmword [esp], xmm0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov edi, eax
mov esi, dword [ebp - 0x30]
cmp dword [esi + 4], eax
je 0x41eb79
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x14], eax
mov eax, dword [esi + 4]
inc eax
cmp eax, 2
mov ebx, dword [ebp - 0x24]
jae 0x41ebc0
mov eax, edi
inc eax
cmp eax, 2
jb 0x41e928
mov dword [esi + 4], edi
call fcn.004ef4b0
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov eax, dword [esi + 4]
mov dword [ebp - 0x14], eax
mov esi, dword [ebp - 0x10]
mov edi, dword [ebp - 0x20]
lea eax, [edi + esi]
add eax, 0xc
mov dword [ebp - 0x18], eax
mov ebx, dword [ebx + 0x14]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
xor ecx, ecx
push ecx
push ecx
push 0x100002
push dword [ebp - 0x18]
push ebx
push dword [ebp - 0x14]
push eax
call dword [sym.imp.KERNEL32.dll_DuplicateHandle]
test eax, eax
je 0x41ec84
mov eax, dword [ebp - 0x28]
mov dword [edi + esi], eax
mov dword [edi + esi + 4], 1
mov edi, dword [ebp - 0x30]
mov eax, dword [edi + 0x10]
mov ecx, eax
shr ecx, 0xe
mov edx, eax
shr edx, 0x13
mov edx, dword [edx*4 + 0x64c804]
bt edx, ecx
jb 0x41ec9d
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x48]
test dword [ecx*4 + 0x64c804], eax
mov ebx, dword [ebp - 0x24]
jne 0x41ecab
mov eax, dword [ebp - 0x44]
mov byte [eax + 0x654804], 1
mov eax, dword [ebp + 8]
mov dword [edi + 0x10], eax
mov eax, dword [ebp + 0x10]
mov dword [edi + 8], eax
mov eax, dword [edi + 0x14]
mov ecx, eax
shr ecx, 0xe
mov edx, eax
shr edx, 0x13
mov edx, dword [edx*4 + 0x64c804]
bt edx, ecx
jb 0x41ecbb
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x2c]
add eax, ecx
add eax, 8
mov ecx, eax
shr ecx, 0xe
mov edx, eax
shr edx, 0x13
mov edx, dword [edx*4 + 0x64c804]
bt edx, ecx
jb 0x41ecc9
shr eax, 0x15
mov byte [eax + 0x654804], 1
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x2c]
add ecx, eax
add ecx, 8
mov dword [edi + 0x14], ecx
mov eax, dword [edi + 0x10]
mov esi, dword [ecx]
add esi, eax
mov ecx, eax
shr ecx, 0xe
mov edx, eax
shr edx, 0x13
mov edx, dword [edx*4 + 0x64c804]
bt edx, ecx
jb 0x41ed0f
mov eax, esi
shr eax, 0xe
mov ecx, esi
shr ecx, 0x13
mov ecx, dword [ecx*4 + 0x64c804]
bt ecx, eax
jb 0x41ec8b
mov eax, esi
shr eax, 0xe
mov ecx, esi
shr ecx, 0x13
mov ecx, dword [ecx*4 + 0x64c804]
bt ecx, eax
jb 0x41ecd7
mov eax, esi
shr eax, 0x15
mov byte [eax + 0x654804], 1
mov eax, edi
add eax, 0xc
mov eax, dword [eax]
mov ecx, eax
shr ecx, 0xe
mov edx, eax
shr edx, 0x13
mov edx, dword [edx*4 + 0x64c804]
bt edx, ecx
jb 0x41ece5
mov dword [edi + 0xc], esi
mov eax, dword [edi + 0x18]
mov ecx, eax
shr ecx, 0xe
mov edx, eax
shr edx, 0x13
mov edx, dword [edx*4 + 0x64c804]
bt edx, ecx
mov esi, dword [ebx + 0x1c]
jb 0x41ecf3
mov edi, ebx
mov eax, esi
shr eax, 0xe
mov ecx, esi
shr ecx, 0x13
mov ecx, dword [ecx*4 + 0x64c804]
bt ecx, eax
jb 0x41ed01
mov eax, esi
shr eax, 0x15
mov byte [eax + 0x654804], 1
mov ebx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
mov dword [edx + 0x18], esi
mov eax, dword [edi + 0x14]
mov dword [edx + 0x1c], eax
mov eax, dword [edi + 0x18]
mov dword [edx + 0x20], eax
mov eax, dword [ebp - 0x28]
add eax, dword [ebp + 0x10]
mov dword [ebp - 0x28], eax
mov ecx, dword [edi + 0x10]
push edx
push 0x43d8f0
push dword [edx]
push edi
call fcn.0041ed30
mov ecx, dword [ebp - 0x10]
add ecx, 0x14
dec ebx
jne 0x41e80d
mov esi, dword [edi]
mov eax, dword [edi + 0x14]
mov dword [ebp - 0x10], eax
add esi, 4
mov ebx, dword [0x6587fc]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
xor ecx, ecx
push ecx
push ecx
push 0x100002
push esi
push dword [ebp - 0x10]
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_DuplicateHandle]
test eax, eax
je 0x41ec84
mov eax, dword [edi]
mov ecx, dword [ebp - 0x3c]
mov dword [eax], ecx
mov al, 1
add esp, 0x40
pop esi
pop edi
pop ebx
pop ebp
ret 0xc
mov edi, eax
jmp 0x41e8ab
mov ebx, dword [ebp - 0x24]
mov dword [ebp - 0x14], edi
jmp 0x41e937
call fcn.004ef4b0
mov eax, dword [edi]
cmp dword [0x655034], 0
mov dword [ebp - 0x14], eax
je 0x41ebfe
mov eax, dword [0x655034]
mov dword [ebp - 0x18], eax
mov eax, dword [eax]
mov ecx, dword [eax]
mov dword [ebp - 0x1c], ecx
call dword [0x63e64c]
mov ecx, dword [ebp - 0x18]
push dword [ebp - 0x14]
call dword [ebp - 0x1c]
mov dword [edi], 0
jmp 0x41e891
call fcn.004ef4b0
mov eax, dword [esi + 4]
cmp dword [0x655034], 0
mov dword [ebp - 0x18], eax
je 0x41ec41
mov eax, dword [0x655034]
mov dword [ebp - 0x1c], eax
mov eax, dword [eax]
mov ecx, dword [eax]
mov dword [ebp - 0x38], ecx
call dword [0x63e64c]
mov ecx, dword [ebp - 0x1c]
push dword [ebp - 0x18]
call dword [ebp - 0x38]
mov dword [esi + 4], 0
jmp 0x41e918
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push 0x6326b5
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x41ed20
mov ecx, eax
cmp eax, sym.browser.exe_GetHandleVerifier
je 0x41ec3b
call dword [0x63e64c]
call ecx
push 0
push eax
call fcn.00437740
add esp, 8
jmp 0x41eb97
push 1
push 0
jmp 0x41ec2e
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push 0x6326b5
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x41ed28
mov ecx, eax
cmp eax, sym.browser.exe_GetHandleVerifier
je 0x41ec7e
call dword [0x63e64c]
call ecx
push 0
push eax
call fcn.00437740
add esp, 8
jmp 0x41ebd4
push 1
push 0
jmp 0x41ec71
xor eax, eax
jmp 0x41eb68
int3
push str....._third_partylibc_srcinclude__memoryconstruct_at.h:40:_assertion___location___nullptr_failed:_null_pointer_given_to_construct_at_n
push 0x624173
call fcn.00591ed0
push eax
call fcn.004f1260
add esp, 4
jmp 0x41e99c
push dword [ebp + 8]
call fcn.004f0de0
add esp, 4
jmp 0x41e9bc
push eax
call fcn.004f0f10
add esp, 4
jmp 0x41e9e5
push eax
call fcn.004f0de0
add esp, 4
jmp 0x41ea14
push esi
call fcn.004f0de0
add esp, 4
jmp 0x41ea83
push eax
call fcn.004f1260
add esp, 4
jmp 0x41eaa4
push eax
call fcn.004f0f10
add esp, 4
jmp 0x41eac7
push esi
call fcn.004f0de0
add esp, 4
jmp 0x41eaef
push 1
push esi
push eax
call fcn.004ed2d0
add esp, 0xc
jmp 0x41ea5d
xor eax, eax
push eax
jmp 0x41ec2d
xor eax, eax
push eax
jmp 0x41ec70