Function at 0x435300
Capabilities:
Check for time delay via queryperformancecounter
Get process image filename

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x2b0
mov dword [esp + 0x10], ecx
mov eax, dword [0x644040]
xor eax, ebp
mov dword [esp + 0x2a8], eax
xor eax, eax
dec eax
mov dword [esp + 0x3c], eax
mov dword [esp + 0x38], eax
mov ecx, dword [fcn.005515a0]
cmp ecx, 0x522100
jne 0x43547b
xor eax, eax
mov ebx, 0x7bd05af7
lea esi, [esp + 0x68]
mov dword [esi + 4], eax
mov dword [esi], eax
push esi
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov edi, dword [esi]
mov esi, dword [esi + 4]
cmp edi, ebx
mov eax, esi
mov ecx, 0x863
sbb eax, ecx
jge 0x435d66
mov ecx, 0xf4240
mov eax, edi
mul ecx
imul ecx, esi, 0xf4240
add ecx, edx
push dword [0x6496bc]
push dword [0x6496b8]
push ecx
push eax
call fcn.00588630
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], edx
mov eax, dword [esp + 0x10]
pcmpeqd xmm0, xmm0
movdqu xmmword [eax], xmm0
movdqu xmmword [eax + 0x10], xmm0
movdqu xmmword [eax + 0x20], xmm0
xor ebx, ebx
mov byte [eax], bl
mov byte [eax + 0x18], bl
pxor xmm0, xmm0
movq qword [eax + 0x20], xmm0
mov dword [eax + 0x28], ebx
xor eax, eax
dec eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], eax
lea edi, [esp + 0x5c]
mov dword [edi], eax
mov dword [edi + 4], eax
mov dword [edi + 8], eax
lea esi, [esp + 0x68]
push 0x23c
push 0xff
push esi
call fcn.00569910
add esp, 0xc
mov ecx, esi
push ebx
mov ebx, esi
call fcn.00436010
mov ecx, esi
push edi
call fcn.00436070
mov dword [esi], 0x62271c
push dword [esi + 4]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esi + 0x238]
mov ecx, eax
shr ecx, 0xe
mov edx, eax
shr edx, 0x13
mov edx, dword [edx*4 + 0x64c804]
bt edx, ecx
jb 0x435cae
cmp dword [esp + 0x64], 0
je 0x435cf2
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov edi, eax
mov dword [esp + 0x68], ebx
mov dword [esp + 0x6c], ebx
mov dword [esp + 0x70], 0
mov ebx, dword [esp + 0x60]
xor eax, eax
lea edx, [esp + 0x5c]
cmp ebx, edx
je 0x435c14
mov ecx, ebx
cmp dword [ecx + 0x10], edi
je 0x435490
mov ecx, dword [ecx + 4]
cmp ecx, edx
jne 0x43546a
jmp 0x435c14
call dword [0x63e64c]
lea eax, [esp + 0x38]
push eax
call ecx
add esp, 4
jmp 0x435397
mov esi, dword [ecx + 0x20]
push 0xc
call fcn.00564ea5
add esp, 4
test eax, eax
je 0x435bed
mov dword [eax + 8], esi
lea ecx, [esp + 0x68]
mov dword [eax + 4], ecx
mov dword [eax], ecx
mov dword [esp + 0x6c], eax
mov dword [esp + 0x68], eax
mov dword [esp + 0x70], 1
test esi, esi
je 0x435c11
pxor xmm0, xmm0
movq qword [esp + 0x50], xmm0
mov dword [esp + 0x58], 0
lea eax, [esp + 0x5c]
jmp 0x4354e8
mov ebx, dword [ebx + 4]
cmp ebx, eax
je 0x435500
cmp dword [ebx + 0x10], esi
jne 0x4354e1
add ebx, 0x2c
je 0x435bdf
lea ecx, [esp + 0x50]
push ebx
call fcn.004137d0
movsx eax, byte [esp + 0x5b]
test eax, eax
jns 0x43550d
mov eax, dword [esp + 0x54]
test eax, eax
je 0x435d3a
lea ebx, [esp + 0x44]
xor eax, eax
dec eax
mov dword [ebx], eax
mov dword [ebx + 4], eax
mov dword [ebx + 8], eax
push ebx
call fcn.00436150
lea edx, [esp + 0x50]
movsx eax, byte [edx + 0xb]
test eax, eax
cmovs eax, dword [edx + 4]
mov ecx, dword [edx]
cmovns ecx, edx
test eax, eax
js 0x435bf4
je 0x43554f
test ecx, ecx
je 0x435be6
push eax
push ecx
push 0xc
push str.explorer.exe
call fcn.00435e80
add esp, 0x10
test eax, eax
je 0x435c9a
movsx eax, byte [esp + 0x4f]
test eax, eax
cmovs eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x44]
cmovns ecx, ebx
test eax, eax
js 0x435bf4
je 0x43558d
test ecx, ecx
je 0x435be6
mov dword [esp + 8], ecx
movsx ebx, byte [esp + 0x5b]
test ebx, ebx
cmovs ebx, dword [esp + 0x54]
mov edx, dword [esp + 0x50]
lea ecx, [esp + 0x50]
cmovns edx, ecx
test ebx, ebx
js 0x435bf4
je 0x4355ba
test edx, edx
je 0x435be6
cmp ebx, eax
setne cl
mov dword [esp + 0xc], ecx
jne 0x4355e8
mov dword [esp + 4], eax
test ebx, ebx
je 0x4355e8
xor ebx, ebx
mov eax, dword [esp + 8]
movzx ecx, word [edx + ebx*2]
cmp cx, word [eax + ebx*2]
setne cl
mov dword [esp + 0xc], ecx
je 0x435cbc
mov ebx, dword [esp + 0x60]
lea eax, [esp + 0x5c]
jmp 0x4355f5
mov ebx, dword [ebx + 4]
cmp ebx, eax
je 0x43570c
cmp dword [ebx + 0x10], edi
je 0x4355f2
cmp dword [ebx + 0x20], esi
jne 0x4355f2
movsx ecx, byte [esp + 0x5b]
test ecx, ecx
cmovs ecx, dword [esp + 0x54]
mov edx, dword [esp + 0x50]
lea eax, [esp + 0x50]
cmovns edx, eax
test ecx, ecx
js 0x435bf4
je 0x435630
test edx, edx
je 0x435be6
mov dword [esp], edx
mov dword [esp + 4], ecx
mov eax, ebx
add eax, 0x2c
je 0x435c0a
push eax
mov dword [esp + 0xc], eax
call fcn.005666c2
add esp, 4
push dword [esp + 4]
push dword [esp + 4]
push eax
push dword [esp + 0x14]
call fcn.00435e80
add esp, 0x10
test eax, eax
lea eax, [esp + 0x5c]
jne 0x4355f2
movsx ecx, byte [esp + 0x4f]
test ecx, ecx
cmovs ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x44]
lea eax, [esp + 0x44]
cmovns edx, eax
test ecx, ecx
js 0x435bf4
mov dword [esp + 4], ecx
mov eax, dword [esp + 8]
je 0x43569d
test edx, edx
je 0x435be6
push eax
mov dword [esp + 4], edx
call fcn.005666c2
add esp, 4
push dword [esp + 4]
push dword [esp + 4]
push eax
push dword [esp + 0x14]
call fcn.00435e80
add esp, 0x10
test eax, eax
lea eax, [esp + 0x5c]
je 0x4355f2
mov eax, dword [ebx + 0x10]
mov dword [esp + 8], eax
push 0xc
call fcn.00564ea5
add esp, 4
test eax, eax
je 0x435bed
mov ecx, dword [esp + 8]
mov dword [eax + 8], ecx
lea ecx, [esp + 0x68]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x68]
mov dword [eax], ecx
mov dword [ecx + 4], eax
mov dword [esp + 0x68], eax
inc dword [esp + 0x70]
lea eax, [esp + 0x5c]
jmp 0x4355f2
lea eax, [esp + 0x2c]
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], 0
cmp dword [esp + 0x70], 0
je 0x435757
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0x6c]
mov esi, dword [ecx + 4]
mov edi, dword [edx]
mov dword [edi + 4], esi
mov edi, dword [edx]
mov dword [esi], edi
mov esi, dword [esp + 0x2c]
mov dword [esi + 4], edx
mov dword [edx], esi
mov dword [esp + 0x2c], ecx
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x70]
add dword [esp + 0x34], eax
mov dword [esp + 0x70], 0
cmp byte [esp + 0x4f], 0
lea ebx, [esp + 0x68]
jns 0x43576e
push dword [esp + 0x44]
call fcn.00564ea0
add esp, 4
cmp byte [esp + 0x5b], 0
jns 0x435781
push dword [esp + 0x50]
call fcn.00564ea0
add esp, 4
mov eax, dword [esp + 0x70]
test eax, eax
je 0x4357c3
mov ecx, dword [esp + 0x68]
mov eax, dword [esp + 0x6c]
mov ecx, dword [ecx + 4]
mov edx, dword [eax]
mov dword [edx + 4], ecx
mov edx, dword [eax]
mov dword [ecx], edx
mov dword [esp + 0x70], 0
cmp eax, ebx
je 0x4357c3
test eax, eax
je 0x435bfb
mov esi, dword [eax + 4]
push eax
call fcn.00564ea0
add esp, 4
mov eax, esi
cmp esi, ebx
jne 0x4357a9
mov dword [esp + 8], 0
cmp dword [esp + 0x64], 0
je 0x435814
mov ecx, dword [esp + 0x5c]
mov eax, dword [esp + 0x60]
mov ecx, dword [ecx + 4]
mov edx, dword [eax]
mov dword [edx + 4], ecx
mov edx, dword [eax]
mov dword [ecx], edx
mov dword [esp + 0x64], 0
lea ecx, [esp + 0x5c]
cmp eax, ecx
je 0x435814
test eax, eax
je 0x435bfb
mov esi, dword [eax + 4]
push eax
call fcn.00564ea0
add esp, 4
mov eax, esi
lea ecx, [esp + 0x5c]
cmp esi, ecx
jne 0x4357f6
cmp dword [esp + 0x34], 0
je 0x435ccc
mov eax, dword [esp + 0x30]
push dword [eax + 8]
push 0
push 0x400
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, 0
test eax, eax
je 0x43585d
mov edi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
cmp edi, 0xffffffff
je 0x435b95
call fcn.004ef4b0
push esi
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov esi, edi
lea eax, [esi + 1]
cmp eax, 2
mov dword [esp + 4], esi
mov dword [esp], eax
jb 0x435cdc
push 0x20a
push 0xff
push ebx
call fcn.00569910
add esp, 0xc
push 0x104
push ebx
push esi
call sub.KERNEL32.dll_K32GetProcessImageFileNameW
test eax, eax
je 0x435ce7
xor eax, eax
dec eax
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], eax
push ebx
call fcn.005666c2
add esp, 4
lea esi, [esp + 0x5c]
mov ecx, esi
push eax
push ebx
call fcn.0054e8c0
pxor xmm0, xmm0
lea edi, [esp + 0x50]
movq qword [edi], xmm0
mov dword [edi + 8], 0
push edi
push esi
call fcn.00436240
add esp, 8
movzx ecx, byte [edi + 0xb]
test al, al
je 0x435c7f
test cl, cl
mov esi, dword [esp + 0x54]
mov eax, ecx
cmovs eax, esi
test eax, eax
je 0x435c7f
mov edi, dword [esp + 0x50]
mov ebx, dword [esp + 0x58]
cmp byte [esp + 0x67], 0
jns 0x435913
push dword [esp + 0x5c]
call fcn.00564ea0
add esp, 4
test ebx, ebx
js 0x435ca7
mov eax, ebx
shr eax, 0x18
test eax, eax
jne 0x43592e
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esp + 8], eax
cmp dword [esp], 2
jb 0x43596e
mov dword [esp + 0x14], edi
mov dword [esp], esi
call fcn.004ef4b0
cmp dword [0x655034], 0
je 0x435b9c
mov esi, dword [0x655034]
mov eax, dword [esi]
mov edi, dword [eax]
mov ecx, edi
call dword [0x63e64c]
mov ecx, esi
push dword [esp + 4]
call edi
mov esi, dword [esp]
mov edi, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
cmp byte [eax + 0x2b], 0
jns 0x435989
add eax, 0x20
push dword [eax]
call fcn.00564ea0
mov eax, dword [esp + 0x14]
add esp, 4
mov dword [eax + 0x20], edi
mov dword [eax + 0x24], esi
mov dword [eax + 0x28], ebx
cmp dword [esp + 0x34], 0
je 0x435c5b
push 0
call dword [sym.imp.USER32.dll_GetTopWindow]
test eax, eax
lea ebx, [esp + 0x68]
je 0x435b81
mov edi, eax
mov dword [esp + 4], 0
mov esi, dword [sym.imp.USER32.dll_GetWindow]
mov dword [esp], 0
jmp 0x4359d9
lea ebx, [esp + 0x68]
push 2
push edi
call esi
mov edi, eax
test eax, eax
je 0x435a29
push edi
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x4359ce
mov dword [esp + 0x68], 0
push ebx
push edi
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov eax, dword [esp + 0x68]
lea ecx, [esp + 0x30]
lea edx, [esp + 0x2c]
mov ebx, dword [ecx]
cmp ebx, edx
je 0x4359ca
lea ecx, [ebx + 4]
cmp dword [ebx + 8], eax
jne 0x435a00
jmp 0x435c35
call dword [0x63e64c]
push ebx
call ecx
add esp, 4
mov edi, dword [esp + 0x68]
mov edx, dword [esp + 0x6c]
jmp 0x435a8c
mov ecx, dword [fcn.005515a0]
cmp ecx, 0x522100
jne 0x435a13
xor eax, eax
mov dword [esp + 0x6c], eax
mov dword [esp + 0x68], eax
push ebx
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov edi, dword [esp + 0x68]
mov esi, dword [esp + 0x6c]
mov eax, 0x7bd05af7
cmp edi, eax
mov eax, esi
mov ecx, 0x863
sbb eax, ecx
jge 0x435de1
mov ecx, 0xf4240
mov eax, edi
mul ecx
imul ecx, esi, 0xf4240
add ecx, edx
push dword [0x6496bc]
push dword [0x6496b8]
push ecx
push eax
call fcn.00588630
mov edi, eax
sub edi, dword [esp + 0x38]
sbb edx, dword [esp + 0x3c]
seto al
mov esi, edx
sar esi, 0x1f
test al, al
cmovne edi, esi
add esi, 0x80000000
test al, al
cmove esi, edx
pxor xmm0, xmm0
movdqu xmmword [esp + 0x9c], xmm0
movdqu xmmword [esp + 0x8c], xmm0
movdqu xmmword [esp + 0x7c], xmm0
movdqu xmmword [esp + 0x6c], xmm0
mov dword [esp + 0x68], 0x44
push ebx
call dword [sym.imp.KERNEL32.dll_GetStartupInfoW]
mov eax, dword [esp + 0x94]
shr eax, 0xb
and al, 1
mov ecx, dword [esp + 0x10]
cmp byte [ecx + 0x18], 0
jne 0x435d19
test ecx, ecx
je 0x435bed
mov edx, dword [esp + 4]
mov dword [ecx], edx
mov edx, dword [esp]
mov dword [ecx + 4], edx
mov dword [ecx + 8], edi
mov dword [ecx + 0xc], esi
mov edx, dword [esp + 0xc]
mov byte [ecx + 0x10], dl
mov byte [ecx + 0x11], al
mov byte [ecx + 0x18], 1
mov eax, dword [esp + 8]
mov dword [ecx + 0x2c], eax
cmp dword [esp + 0x34], 0
je 0x435b67
lea esi, [esp + 0x2c]
mov ecx, dword [esi]
mov eax, dword [esi + 4]
mov ecx, dword [ecx + 4]
mov edx, dword [eax]
mov dword [edx + 4], ecx
mov edx, dword [eax]
mov dword [ecx], edx
mov dword [esi + 8], 0
cmp eax, esi
je 0x435b67
test eax, eax
je 0x435bfb
mov edi, dword [eax + 4]
push eax
call fcn.00564ea0
add esp, 4
mov eax, edi
cmp edi, esi
jne 0x435b4d
mov ecx, dword [esp + 0x2a8]
xor ecx, ebp
call fcn.00568175
mov eax, dword [esp + 0x10]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [esp + 4], 0
mov dword [esp], 0
jmp 0x435a29
xor edi, edi
jmp 0x435854
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push 0x6326b5
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x435e74
mov ecx, eax
cmp eax, sym.browser.exe_GetHandleVerifier
je 0x435bd9
call dword [0x63e64c]
call ecx
push 0
push eax
call fcn.00437740
add esp, 8
jmp 0x43594d
push 1
push 0
jmp 0x435bcc
push str....._third_partylibc_srcinclude_string:2719:_assertion___s___nullptr_failed:_string::assign_received_nullptr_n
jmp 0x435c00
push str....._third_partylibc_srcinclude_string_view:316:_assertion___len__0____s___nullptr_failed:_string_view::string_view__CharT___size_t_:_received_nullptr_n
jmp 0x435c00
push str....._third_partylibc_srcinclude__memoryconstruct_at.h:40:_assertion___location___nullptr_failed:_null_pointer_given_to_construct_at_n
jmp 0x435c00
push str....._third_partylibc_srcinclude_string_view:314:_assertion___len___static_cast_size_type__numeric_limits_difference_type_::max____failed:_string_view::string_view__CharT___size_t_:_length_does_not_fit_in_difference_type_n
jmp 0x435c00
push str....._third_partylibc_srcinclude__memoryconstruct_at.h:66:_assertion___loc___nullptr_failed:_null_pointer_given_to_destroy_at_n
push 0x624173
call fcn.00591ed0
push str....._third_partylibc_srcinclude_string_view:267:_assertion___s___nullptr_failed:_null_pointer_passed_to_non_null_argument_of_char_traits_..._::length_n
jmp 0x435c00
xor eax, eax
inc eax
lea ecx, [esp + 0x2c]
mov dword [ecx], ecx
mov dword [ecx + 4], ecx
mov dword [ecx + 8], 0
mov dword [esp + 0xc], 0
lea ebx, [esp + 0x68]
jmp 0x435785
push 0xfffffffffffffff0
push edi
call dword [sym.imp.USER32.dll_GetWindowLongW]
test eax, eax
jns 0x435c6c
cmp dword [esp], 0
jne 0x4359ca
mov eax, dword [ebx + 8]
mov dword [esp + 4], eax
mov dword [esp], edi
jmp 0x4359ca
mov dword [esp + 4], 0
mov dword [esp], 0
jmp 0x435c76
mov eax, dword [ebx + 8]
mov dword [esp + 4], eax
mov dword [esp], edi
lea ebx, [esp + 0x68]
jmp 0x435a29
test cl, cl
jns 0x435c8f
push dword [esp + 0x50]
call fcn.00564ea0
add esp, 4
xor edi, edi
xor esi, esi
xor ebx, ebx
jmp 0x435900
mov dword [esp + 0xc], 0
jmp 0x4355e8
mov eax, esi
jmp 0x435920
push eax
call fcn.004f0f10
add esp, 4
jmp 0x435433
inc ebx
cmp dword [esp + 4], ebx
jne 0x4355d3
jmp 0x4355e8
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 8]
mov dword [eax + 0x2c], ecx
jmp 0x435b67
xor edi, edi
xor ebx, ebx
xor esi, esi
jmp 0x435924
xor edi, edi
xor esi, esi
xor ebx, ebx
jmp 0x435924
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esp + 8], eax
lea eax, [esp + 0x2c]
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], 0
mov dword [esp + 0xc], 0
jmp 0x4357cb
mov edx, dword [esp + 4]
mov dword [ecx], edx
mov edx, dword [esp]
mov dword [ecx + 4], edx
mov dword [ecx + 8], edi
mov dword [ecx + 0xc], esi
mov edx, dword [esp + 0xc]
mov byte [ecx + 0x10], dl
mov byte [ecx + 0x11], al
jmp 0x435b1f
lea ecx, [esp + 0x2c]
mov dword [ecx], ecx
mov dword [ecx + 4], ecx
mov dword [ecx + 8], 0
mov edx, ecx
lea ebx, [esp + 0x68]
push ebx
call fcn.005be2b0
add esp, 4
mov dword [esp + 0xc], 0
jmp 0x43576e
mov eax, dword [0x6496b8]
mov dword [esp + 8], eax
mov ecx, dword [0x6496bc]
mov dword [esp + 4], ecx
push ecx
push eax
push esi
push edi
call fcn.00588630
mov ebx, edx
mov ecx, eax
mul dword [esp + 8]
mov dword [esp], eax
mov eax, ecx
imul ecx, dword [esp + 4]
add edx, ecx
imul ecx, ebx, 0xf4240
mov dword [esp + 0xc], ecx
imul ebx, dword [esp + 8]
add ebx, edx
sub edi, dword [esp]
sbb esi, ebx
mov ecx, 0xf4240
mul ecx
mov dword [esp], eax
mov ebx, edx
add ebx, dword [esp + 0xc]
mov eax, edi
mul ecx
imul ecx, esi, 0xf4240
add edx, ecx
push dword [esp + 4]
push dword [esp + 0xc]
push edx
push eax
call fcn.00588630
add eax, dword [esp]
adc edx, ebx
jmp 0x43538f
mov ebx, dword [0x6496b8]
mov dword [esp + 0x20], ebx
mov eax, dword [0x6496bc]
mov dword [esp + 0x14], eax
push eax
push ebx
push esi
push edi
call fcn.00588630
mov dword [esp + 0x24], edx
mov ecx, eax
mul ebx
mov dword [esp + 0x1c], eax
mov dword [esp + 0x28], ecx
imul ecx, dword [esp + 0x14]
add edx, ecx
lea ebx, [esp + 0x68]
mov eax, dword [esp + 0x24]
imul ecx, eax, 0xf4240
mov dword [esp + 0x18], ecx
imul eax, dword [esp + 0x20]
add eax, edx
sub edi, dword [esp + 0x1c]
sbb esi, eax
mov ecx, 0xf4240
mov eax, dword [esp + 0x28]
mul ecx
mov dword [esp + 0x1c], eax
add edx, dword [esp + 0x18]
mov dword [esp + 0x18], edx
mov eax, edi
mul ecx
imul ecx, esi, 0xf4240
add edx, ecx
push dword [esp + 0x14]
push dword [esp + 0x24]
push edx
push eax
call fcn.00588630
mov edi, eax
add edi, dword [esp + 0x1c]
adc edx, dword [esp + 0x18]
jmp 0x435a8c
xor eax, eax
push eax
jmp 0x435bcb