Function at 0x418e40
Capabilities:
Check if file exists

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0xa0
mov eax, dword [0x644040]
xor eax, ebp
mov dword [esp + 0x98], eax
mov eax, dword [ecx]
inc eax
cmp eax, 1
ja 0x41904b
mov edi, ecx
xor eax, eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateJobObjectW]
mov esi, eax
cmp dword [edi], eax
je 0x418ea7
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov eax, dword [edi]
inc eax
cmp eax, 2
jae 0x418fba
mov eax, esi
inc eax
cmp eax, 2
jb 0x418e9e
mov dword [edi], esi
call fcn.004ef4b0
push ebx
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov esi, dword [edi]
lea eax, [esi + 1]
cmp eax, 1
jbe 0x41906a
mov dword [esp + 0x10], esi
mov eax, dword [ebp + 8]
xorps xmm0, xmm0
movaps xmmword [esp + 0x40], xmm0
movaps xmmword [esp + 0x80], xmm0
movaps xmmword [esp + 0x70], xmm0
movaps xmmword [esp + 0x60], xmm0
movaps xmmword [esp + 0x50], xmm0
movaps xmmword [esp + 0x30], xmm0
movaps xmmword [esp + 0x20], xmm0
mov dword [esp + 0x4c], 0xffffffff
test eax, eax
mov dword [esp + 0x18], edi
jne 0x418f92
mov ebx, 0xff
mov edi, 0x408
mov dword [esp + 0x3c], 1
mov esi, edi
mov edx, ebx
mov ecx, esi
mov dword [esp + 0x1c], edx
mov esi, edx
mov eax, dword [ebp + 0x10]
test eax, eax
jne 0x419058
or ecx, 0x2000
mov dword [esp + 0x30], ecx
lea eax, [esp + 0x20]
push 0x70
push eax
push 9
push dword [esp + 0x1c]
call dword [sym.imp.KERNEL32.dll_SetInformationJobObject]
test eax, eax
je 0x41903c
mov eax, dword [ebp + 0xc]
not eax
and esi, eax
lea eax, [esp + 0x1c]
mov dword [eax], esi
mov ecx, 4
push ecx
push eax
push ecx
mov eax, dword [esp + 0x24]
push dword [eax]
call dword [sym.imp.KERNEL32.dll_SetInformationJobObject]
mov dword [esp + 0xc], 0
test eax, eax
je 0x41903c
mov ecx, dword [esp + 0x98]
xor ecx, ebp
call fcn.00568175
mov eax, dword [esp + 0xc]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret 0xc
xor esi, esi
dec eax
cmp eax, 3
ja case.default.0x418fb3
mov dword [esp + 0xc], 0xa0
mov edx, 0xc8
mov ebx, 0xd8
mov edi, 8
xor ecx, ecx
jmp dword [eax*4 + 0x63b2b4]
mov dword [esp + 0x10], esi
call fcn.004ef4b0
mov esi, dword [edi]
cmp dword [0x655034], 0
je 0x419000
mov dword [esp + 0xc], esi
mov eax, dword [0x655034]
mov dword [esp + 0x14], eax
mov eax, dword [eax]
mov esi, dword [eax]
mov ecx, esi
call dword [0x63e64c]
mov ecx, dword [esp + 0x14]
push dword [esp + 0xc]
call esi
mov dword [edi], 0
mov esi, dword [esp + 0x10]
jmp 0x418e8f
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push 0x6326b5
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x419087
mov ecx, eax
cmp eax, sym.browser.exe_GetHandleVerifier
je 0x419036
call dword [0x63e64c]
call ecx
push 0
push eax
call fcn.00437740
add esp, 8
jmp 0x418fce
push 1
push 0
jmp 0x41902c
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esp + 0xc], eax
jmp case.0x418fb3.4
mov dword [esp + 0xc], 0x4df
jmp case.0x418fb3.4
or ecx, 0x100
mov dword [esp + 0x80], eax
jmp 0x418f20
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov ecx, dword [esp + 0x98]
xor ecx, ebp
call fcn.00568175
mov eax, esi
jmp 0x418f88
xor eax, eax
push eax
jmp 0x41902b