Function at 0x433c40
Capabilities:
Check if file exists

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x24
mov esi, ecx
mov eax, dword [0x646040]
xor eax, ebp
mov dword [ebp - 0x10], eax
cmp dword [ecx + 8], 0
mov eax, dword [ecx]
je 0x43426a
lea ecx, [ebp - 0x14]
mov dword [ecx], 0
lea edx, [ebp - 0x18]
mov dword [edx], 0xffffffff
push edx
push 4
push ecx
push str.DNASYXOB
push eax
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov ebx, 0x42
test eax, eax
je 0x434016
cmp dword [ebp - 0x18], 4
jne 0x434140
mov eax, dword [ebp - 0x14]
cmp eax, dword [str.DNASYXOB]
jne 0x43414a
lea eax, [ebp - 0x18]
push eax
push 4
lea eax, [ebp - 0x14]
push eax
push 0x64957c
push dword [esi]
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x434016
cmp dword [ebp - 0x18], 4
mov ebx, 0x43
jne 0x434016
mov eax, dword [ebp - 0x14]
mov ebx, 0x44
cmp eax, dword [0x64957c]
jne 0x434016
mov ebx, dword [ebp + 0x24]
lea ecx, [ebp + 0xc]
xor eax, eax
cmp byte [ecx + 8], 0
mov edx, 0
je 0x433d01
mov edx, dword [ecx + 4]
add edx, ebx
lea ecx, [ebp + 0x18]
cmp byte [ecx + 8], 0
je 0x433d12
lea eax, [ebp + 0x18]
mov eax, dword [eax + 4]
add edx, eax
sub esp, 0x18
mov dword [ebp - 0x24], edx
mov dword [esp + 0x10], edx
movaps xmm0, xmmword [0x63a670]
movups xmmword [esp], xmm0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov edi, eax
mov eax, dword [esi + 0x18]
cmp eax, edi
je 0x433d72
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x20], eax
mov eax, dword [esi + 0x18]
inc eax
cmp eax, 2
jae 0x4340c1
lea eax, [edi + 1]
cmp eax, 2
jb 0x433d66
mov dword [esi + 0x18], edi
call fcn.004ffee0
push dword [ebp - 0x20]
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov eax, dword [esi + 0x18]
lea ecx, [eax + 1]
cmp ecx, 1
jbe 0x43422b
sub esp, 0x14
movss xmm0, dword [0x63a680]
movups xmmword [esp + 4], xmm0
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov dword [ebp - 0x20], eax
test eax, eax
je 0x434240
lea eax, [ebp + 0xc]
mov al, byte [eax + 8]
mov edx, ebx
mov byte [ebp - 0x30], al
cmp al, 1
mov ecx, dword [ebp - 0x24]
jne 0x433e95
lea eax, [ebp + 0xc]
mov edx, dword [eax + 4]
test edx, edx
je 0x433e90
mov dword [ebp - 0x28], esi
mov eax, dword [ebp + 0x24]
mov ecx, dword [ebp - 0x20]
lea ebx, [ecx + eax]
lea eax, [ebp + 0xc]
mov edi, dword [eax]
mov esi, edx
push edx
push edi
push ebx
call fcn.00568550
add esp, 0xc
mov eax, dword [ebx]
test eax, eax
jne 0x4340b8
mov eax, dword [ebx + 4]
test eax, eax
jne 0x4340ae
mov eax, dword [ebx + 8]
test eax, eax
mov ecx, dword [ebp - 0x24]
mov edx, esi
jne 0x4340a4
mov eax, dword [ebx + 0xc]
test eax, eax
mov esi, dword [ebp - 0x28]
jne 0x43409a
mov eax, dword [ebx + 0x10]
test eax, eax
jne 0x434090
mov eax, dword [ebx + 0x14]
test eax, eax
jne 0x434086
mov eax, dword [ebx + 0x18]
test eax, eax
jne 0x434072
mov eax, dword [ebx + 0x1c]
test eax, eax
jne 0x434068
mov eax, dword [ebx + 0x20]
test eax, eax
jne 0x43407c
mov eax, dword [ebx + 0x24]
test eax, eax
jne 0x43405e
mov eax, dword [ebx + 0x28]
test eax, eax
jne 0x43402c
mov eax, dword [ebx + 0x2c]
test eax, eax
jne 0x434054
mov eax, dword [ebx + 0x30]
test eax, eax
jne 0x43404a
mov eax, dword [ebx + 0x34]
test eax, eax
jne 0x434040
mov eax, dword [ebx + 0x38]
test eax, eax
jne 0x434036
mov ebx, dword [ebp + 0x24]
add edx, ebx
lea eax, [ebp + 0x18]
mov al, byte [eax + 8]
mov byte [ebp - 0x2c], al
cmp al, 1
je 0x4342a8
cmp edx, ecx
jne 0x434154
mov dword [ebp - 0x18], ebx
cmp dword [esi + 8], 0
mov eax, dword [esi]
je 0x434184
mov dword [ebp - 0x14], 0xffffffff
lea ecx, [ebp - 0x14]
push ecx
push 4
lea ecx, [ebp - 0x18]
push ecx
push 0x659d04
push eax
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
je 0x4341e2
cmp dword [ebp - 0x14], 4
jne 0x4341e9
cmp byte [ebp - 0x30], 0
je 0x433f36
lea eax, [ebp + 0xc]
mov eax, dword [eax + 4]
mov dword [ebp - 0x1c], eax
cmp dword [esi + 8], 0
mov eax, dword [esi]
je 0x434161
mov dword [ebp - 0x14], 0xffffffff
lea ecx, [ebp - 0x1c]
lea edx, [ebp - 0x14]
push edx
push 4
push ecx
push 0x659d08
push eax
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
je 0x4341e2
cmp dword [ebp - 0x14], 4
jne 0x4341e9
cmp byte [ebp - 0x2c], 0
jne 0x4341a7
mov eax, dword [esi]
mov dword [ebp - 0x24], eax
mov edi, dword [esi + 8]
push 0x20
call fcn.00564055
add esp, 4
mov ebx, eax
mov ecx, eax
push dword [ebp + 8]
push dword [esi + 0x24]
push edi
push dword [ebp - 0x24]
call fcn.004342e0
mov edi, dword [esi + 0x20]
mov dword [esi + 0x20], ebx
test edi, edi
jne 0x434290
mov ecx, ebx
push 0x400
push dword [ebp + 0x24]
push dword [ebp - 0x20]
call fcn.00434380
test al, al
je 0x434157
lea eax, [ebp - 0x1c]
mov dword [eax], 0xffffffff
mov edi, dword [esi]
mov ebx, dword [esi + 0x18]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
xor ecx, ecx
push ecx
push ecx
push 7
lea ecx, [ebp - 0x1c]
push ecx
push edi
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_DuplicateHandle]
test eax, eax
je 0x434255
cmp dword [esi + 8], 0
mov eax, dword [esi]
je 0x434208
mov dword [ebp - 0x14], 0xffffffff
lea ecx, [ebp - 0x14]
push ecx
push 4
lea ecx, [ebp - 0x1c]
push ecx
push 0x6586e8
push eax
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
je 0x4341e2
cmp dword [ebp - 0x14], 4
jne 0x4341e9
xor ebx, ebx
mov dword [esi + 0xc], ebx
mov edi, dword [esi + 4]
mov dword [esi + 4], ebx
lea eax, [edi + 1]
cmp eax, 2
jb 0x43400f
call fcn.004ffee0
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00567335
mov eax, ebx
add esp, 0x24
pop esi
pop edi
pop ebx
pop ebp
ret 0x24
sub eax, edi
mov dword [ebx + 0x28], eax
jmp 0x433e64
sub eax, edi
mov dword [ebx + 0x38], eax
jmp 0x433e90
sub eax, edi
mov dword [ebx + 0x34], eax
jmp 0x433e85
sub eax, edi
mov dword [ebx + 0x30], eax
jmp 0x433e7a
sub eax, edi
mov dword [ebx + 0x2c], eax
jmp 0x433e6f
sub eax, edi
mov dword [ebx + 0x24], eax
jmp 0x433e59
sub eax, edi
mov dword [ebx + 0x1c], eax
jmp 0x433e43
sub eax, edi
mov dword [ebx + 0x18], eax
jmp 0x433e38
sub eax, edi
mov dword [ebx + 0x20], eax
jmp 0x433e4e
sub eax, edi
mov dword [ebx + 0x14], eax
jmp 0x433e2d
sub eax, edi
mov dword [ebx + 0x10], eax
jmp 0x433e22
sub eax, edi
mov dword [ebx + 0xc], eax
jmp 0x433e17
sub eax, edi
mov dword [ebx + 8], eax
jmp 0x433e09
sub eax, edi
mov dword [ebx + 4], eax
jmp 0x433df9
sub eax, edi
mov dword [ebx], eax
jmp 0x433dee
call fcn.004ffee0
mov ebx, dword [esi + 0x18]
cmp dword [0x657038], 0
je 0x434100
mov dword [ebp - 0x30], ebx
mov eax, dword [0x657038]
mov dword [ebp - 0x2c], eax
mov eax, dword [eax]
mov ebx, dword [eax]
mov ecx, ebx
call dword [0x6401dc]
mov ecx, dword [ebp - 0x2c]
push dword [ebp - 0x30]
call ebx
mov dword [esi + 0x18], 0
mov ebx, dword [ebp + 0x24]
jmp 0x433d56
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push 0x6338bd
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x4342d3
mov ecx, eax
cmp eax, sym.browser.exe_GetHandleVerifier
je 0x43413a
call dword [0x6401dc]
call ecx
push 0
push eax
call fcn.0043a140
add esp, 8
jmp 0x4340d2
push 1
push 0
jmp 0x434130
mov ebx, 0x43
jmp 0x434016
mov ebx, 0x44
jmp 0x434016
int3
mov ebx, 4
jmp 0x434016
test eax, eax
jne 0x433f07
cmp dword [esi + 0xc], 0
jne 0x433f07
mov ebx, 8
cmp dword [esi + 4], 0
jne 0x433f07
jmp 0x4341f8
test eax, eax
jne 0x433ebd
cmp dword [esi + 0xc], 0
jne 0x433ebd
mov ebx, 8
cmp dword [esi + 4], 0
jne 0x433ebd
jmp 0x4341f8
lea eax, [ebp + 0x18]
mov eax, dword [eax + 4]
mov dword [ebp - 0x14], eax
sub esp, 0x10
lea eax, [ebp - 0x14]
mov dword [esp + 4], eax
mov dword [esp + 0xc], 4
mov dword [esp + 8], 0x659d0c
mov edi, esi
mov ecx, esi
call fcn.004f39b0
test eax, eax
je 0x4341db
mov ebx, eax
jmp 0x4341f8
mov esi, edi
jmp 0x433f40
mov ebx, 0x39
jmp 0x4341ee
mov ebx, 0x3a
push 0
call fcn.005e24a0
add esp, 4
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [ebp + 0x28]
mov dword [ecx], eax
jmp 0x434016
test eax, eax
jne 0x433fc8
cmp dword [esi + 0xc], 0
jne 0x433fc8
mov ebx, 8
cmp dword [esi + 4], 0
jne 0x433fc8
jmp 0x4341f8
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [ebp + 0x28]
mov dword [ecx], eax
mov ebx, 0x19
jmp 0x434016
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [ebp + 0x28]
mov dword [ecx], eax
mov ebx, 0x1b
jmp 0x434016
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [ebp + 0x28]
mov dword [ecx], eax
mov ebx, 0x1a
jmp 0x434016
test eax, eax
jne 0x433c61
cmp dword [esi + 0xc], 0
jne 0x433c61
mov ebx, 8
cmp dword [esi + 4], 0
jne 0x433c61
jmp 0x434016
mov ecx, edi
call fcn.00444da0
push edi
call fcn.00564050
add esp, 4
mov ebx, dword [esi + 0x20]
jmp 0x433f73
mov eax, dword [ebp - 0x20]
add eax, edx
lea ecx, [ebp + 0x18]
mov edi, dword [ecx + 4]
push edi
push dword [ecx]
push eax
mov dword [ebp - 0x28], esi
mov esi, edx
call fcn.00568550
mov edx, esi
mov esi, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
add esp, 0xc
add edx, edi
jmp 0x433ea6
xor eax, eax
push eax
jmp 0x43412f