Function at 0x434740
Capabilities:
Check if file exists

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x24
mov esi, ecx
mov eax, dword [0x644040]
xor eax, ebp
mov dword [ebp - 0x10], eax
cmp dword [ecx + 8], 0
mov eax, dword [ecx]
je 0x434d6a
lea ecx, [ebp - 0x14]
mov dword [ecx], 0
lea edx, [ebp - 0x18]
mov dword [edx], 0xffffffff
push edx
push 4
push ecx
push str.DNASYXOB
push eax
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov ebx, 0x42
test eax, eax
je 0x434b16
cmp dword [ebp - 0x18], 4
jne 0x434c40
mov eax, dword [ebp - 0x14]
cmp eax, dword [str.DNASYXOB]
jne 0x434c4a
lea eax, [ebp - 0x18]
push eax
push 4
lea eax, [ebp - 0x14]
push eax
push 0x64757c
push dword [esi]
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x434b16
cmp dword [ebp - 0x18], 4
mov ebx, 0x43
jne 0x434b16
mov eax, dword [ebp - 0x14]
mov ebx, 0x44
cmp eax, dword [0x64757c]
jne 0x434b16
mov ebx, dword [ebp + 0x24]
lea ecx, [ebp + 0xc]
xor eax, eax
cmp byte [ecx + 8], 0
mov edx, 0
je 0x434801
mov edx, dword [ecx + 4]
add edx, ebx
lea ecx, [ebp + 0x18]
cmp byte [ecx + 8], 0
je 0x434812
lea eax, [ebp + 0x18]
mov eax, dword [eax + 4]
add edx, eax
sub esp, 0x18
mov dword [ebp - 0x24], edx
mov dword [esp + 0x10], edx
movaps xmm0, xmmword [0x638650]
movups xmmword [esp], xmm0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov edi, eax
mov eax, dword [esi + 0x18]
cmp eax, edi
je 0x434872
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x20], eax
mov eax, dword [esi + 0x18]
inc eax
cmp eax, 2
jae 0x434bc1
lea eax, [edi + 1]
cmp eax, 2
jb 0x434866
mov dword [esi + 0x18], edi
call fcn.005018d0
push dword [ebp - 0x20]
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov eax, dword [esi + 0x18]
lea ecx, [eax + 1]
cmp ecx, 1
jbe 0x434d2b
sub esp, 0x14
movss xmm0, dword [0x638660]
movups xmmword [esp + 4], xmm0
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov dword [ebp - 0x20], eax
test eax, eax
je 0x434d40
lea eax, [ebp + 0xc]
mov al, byte [eax + 8]
mov edx, ebx
mov byte [ebp - 0x30], al
cmp al, 1
mov ecx, dword [ebp - 0x24]
jne 0x434995
lea eax, [ebp + 0xc]
mov edx, dword [eax + 4]
test edx, edx
je 0x434990
mov dword [ebp - 0x28], esi
mov eax, dword [ebp + 0x24]
mov ecx, dword [ebp - 0x20]
lea ebx, [ecx + eax]
lea eax, [ebp + 0xc]
mov edi, dword [eax]
mov esi, edx
push edx
push edi
push ebx
call fcn.00567460
add esp, 0xc
mov eax, dword [ebx]
test eax, eax
jne 0x434bb8
mov eax, dword [ebx + 4]
test eax, eax
jne 0x434bae
mov eax, dword [ebx + 8]
test eax, eax
mov ecx, dword [ebp - 0x24]
mov edx, esi
jne 0x434ba4
mov eax, dword [ebx + 0xc]
test eax, eax
mov esi, dword [ebp - 0x28]
jne 0x434b9a
mov eax, dword [ebx + 0x10]
test eax, eax
jne 0x434b90
mov eax, dword [ebx + 0x14]
test eax, eax
jne 0x434b86
mov eax, dword [ebx + 0x18]
test eax, eax
jne 0x434b7c
mov eax, dword [ebx + 0x1c]
test eax, eax
jne 0x434b72
mov eax, dword [ebx + 0x20]
test eax, eax
jne 0x434b68
mov eax, dword [ebx + 0x24]
test eax, eax
jne 0x434b5e
mov eax, dword [ebx + 0x28]
test eax, eax
jne 0x434b54
mov eax, dword [ebx + 0x2c]
test eax, eax
jne 0x434b4a
mov eax, dword [ebx + 0x30]
test eax, eax
jne 0x434b40
mov eax, dword [ebx + 0x34]
test eax, eax
jne 0x434b36
mov eax, dword [ebx + 0x38]
test eax, eax
jne 0x434b2c
mov ebx, dword [ebp + 0x24]
add edx, ebx
lea eax, [ebp + 0x18]
mov al, byte [eax + 8]
mov byte [ebp - 0x2c], al
cmp al, 1
je 0x434da8
cmp edx, ecx
jne 0x434c54
mov dword [ebp - 0x18], ebx
cmp dword [esi + 8], 0
mov eax, dword [esi]
je 0x434c84
mov dword [ebp - 0x14], 0xffffffff
lea ecx, [ebp - 0x14]
push ecx
push 4
lea ecx, [ebp - 0x18]
push ecx
push 0x657d04
push eax
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
je 0x434ce2
cmp dword [ebp - 0x14], 4
jne 0x434ce9
cmp byte [ebp - 0x30], 0
je 0x434a36
lea eax, [ebp + 0xc]
mov eax, dword [eax + 4]
mov dword [ebp - 0x1c], eax
cmp dword [esi + 8], 0
mov eax, dword [esi]
je 0x434c61
mov dword [ebp - 0x14], 0xffffffff
lea ecx, [ebp - 0x1c]
lea edx, [ebp - 0x14]
push edx
push 4
push ecx
push 0x657d08
push eax
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
je 0x434ce2
cmp dword [ebp - 0x14], 4
jne 0x434ce9
cmp byte [ebp - 0x2c], 0
jne 0x434ca7
mov eax, dword [esi]
mov dword [ebp - 0x24], eax
mov edi, dword [esi + 8]
push 0x20
call fcn.00562f65
add esp, 4
mov ebx, eax
mov ecx, eax
push dword [ebp + 8]
push dword [esi + 0x24]
push edi
push dword [ebp - 0x24]
call fcn.00434de0
mov edi, dword [esi + 0x20]
mov dword [esi + 0x20], ebx
test edi, edi
jne 0x434d90
mov ecx, ebx
push 0x400
push dword [ebp + 0x24]
push dword [ebp - 0x20]
call fcn.00434e80
test al, al
je 0x434c57
lea eax, [ebp - 0x1c]
mov dword [eax], 0xffffffff
mov edi, dword [esi]
mov ebx, dword [esi + 0x18]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
xor ecx, ecx
push ecx
push ecx
push 7
lea ecx, [ebp - 0x1c]
push ecx
push edi
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_DuplicateHandle]
test eax, eax
je 0x434d55
cmp dword [esi + 8], 0
mov eax, dword [esi]
je 0x434d08
mov dword [ebp - 0x14], 0xffffffff
lea ecx, [ebp - 0x14]
push ecx
push 4
lea ecx, [ebp - 0x1c]
push ecx
push 0x6566e8
push eax
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
je 0x434ce2
cmp dword [ebp - 0x14], 4
jne 0x434ce9
xor ebx, ebx
mov dword [esi + 0xc], ebx
mov edi, dword [esi + 4]
mov dword [esi + 4], ebx
lea eax, [edi + 1]
cmp eax, 2
jb 0x434b0f
call fcn.005018d0
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00566245
mov eax, ebx
add esp, 0x24
pop esi
pop edi
pop ebx
pop ebp
ret 0x24
sub eax, edi
mov dword [ebx + 0x38], eax
jmp 0x434990
sub eax, edi
mov dword [ebx + 0x34], eax
jmp 0x434985
sub eax, edi
mov dword [ebx + 0x30], eax
jmp 0x43497a
sub eax, edi
mov dword [ebx + 0x2c], eax
jmp 0x43496f
sub eax, edi
mov dword [ebx + 0x28], eax
jmp 0x434964
sub eax, edi
mov dword [ebx + 0x24], eax
jmp 0x434959
sub eax, edi
mov dword [ebx + 0x20], eax
jmp 0x43494e
sub eax, edi
mov dword [ebx + 0x1c], eax
jmp 0x434943
sub eax, edi
mov dword [ebx + 0x18], eax
jmp 0x434938
sub eax, edi
mov dword [ebx + 0x14], eax
jmp 0x43492d
sub eax, edi
mov dword [ebx + 0x10], eax
jmp 0x434922
sub eax, edi
mov dword [ebx + 0xc], eax
jmp 0x434917
sub eax, edi
mov dword [ebx + 8], eax
jmp 0x434909
sub eax, edi
mov dword [ebx + 4], eax
jmp 0x4348f9
sub eax, edi
mov dword [ebx], eax
jmp 0x4348ee
call fcn.005018d0
mov ebx, dword [esi + 0x18]
cmp dword [0x655038], 0
je 0x434c00
mov dword [ebp - 0x30], ebx
mov eax, dword [0x655038]
mov dword [ebp - 0x2c], eax
mov eax, dword [eax]
mov ebx, dword [eax]
mov ecx, ebx
call dword [0x63e19c]
mov ecx, dword [ebp - 0x2c]
push dword [ebp - 0x30]
call ebx
mov dword [esi + 0x18], 0
mov ebx, dword [ebp + 0x24]
jmp 0x434856
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push 0x631a0d
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x434dd3
mov ecx, eax
cmp eax, sym.browser.exe_GetHandleVerifier
je 0x434c3a
call dword [0x63e19c]
call ecx
push 0
push eax
call fcn.0042a0c0
add esp, 8
jmp 0x434bd2
push 1
push 0
jmp 0x434c30
mov ebx, 0x43
jmp 0x434b16
mov ebx, 0x44
jmp 0x434b16
int3
mov ebx, 4
jmp 0x434b16
test eax, eax
jne 0x434a07
cmp dword [esi + 0xc], 0
jne 0x434a07
mov ebx, 8
cmp dword [esi + 4], 0
jne 0x434a07
jmp 0x434cf8
test eax, eax
jne 0x4349bd
cmp dword [esi + 0xc], 0
jne 0x4349bd
mov ebx, 8
cmp dword [esi + 4], 0
jne 0x4349bd
jmp 0x434cf8
lea eax, [ebp + 0x18]
mov eax, dword [eax + 4]
mov dword [ebp - 0x14], eax
sub esp, 0x10
lea eax, [ebp - 0x14]
mov dword [esp + 4], eax
mov dword [esp + 0xc], 4
mov dword [esp + 8], 0x657d0c
mov edi, esi
mov ecx, esi
call fcn.004f4c50
test eax, eax
je 0x434cdb
mov ebx, eax
jmp 0x434cf8
mov esi, edi
jmp 0x434a40
mov ebx, 0x39
jmp 0x434cee
mov ebx, 0x3a
push 0
call fcn.005e0c10
add esp, 4
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [ebp + 0x28]
mov dword [ecx], eax
jmp 0x434b16
test eax, eax
jne 0x434ac8
cmp dword [esi + 0xc], 0
jne 0x434ac8
mov ebx, 8
cmp dword [esi + 4], 0
jne 0x434ac8
jmp 0x434cf8
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [ebp + 0x28]
mov dword [ecx], eax
mov ebx, 0x19
jmp 0x434b16
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [ebp + 0x28]
mov dword [ecx], eax
mov ebx, 0x1b
jmp 0x434b16
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [ebp + 0x28]
mov dword [ecx], eax
mov ebx, 0x1a
jmp 0x434b16
test eax, eax
jne 0x434761
cmp dword [esi + 0xc], 0
jne 0x434761
mov ebx, 8
cmp dword [esi + 4], 0
jne 0x434761
jmp 0x434b16
mov ecx, edi
call fcn.00446720
push edi
call fcn.00562f60
add esp, 4
mov ebx, dword [esi + 0x20]
jmp 0x434a73
mov eax, dword [ebp - 0x20]
add eax, edx
lea ecx, [ebp + 0x18]
mov edi, dword [ecx + 4]
push edi
push dword [ecx]
push eax
mov dword [ebp - 0x28], esi
mov esi, edx
call fcn.00567460
mov edx, esi
mov esi, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
add esp, 0xc
add edx, edi
jmp 0x4349a6
xor eax, eax
push eax
jmp 0x434c2f