Function at 0x443cf0
Capabilities:
Check for time delay via queryperformancecounter
Get process image filename

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x2b0
mov dword [esp + 0x10], ecx
mov eax, dword [0x64a040]
xor eax, ebp
mov dword [esp + 0x2a8], eax
xor eax, eax
dec eax
mov dword [esp + 0x3c], eax
mov dword [esp + 0x38], eax
mov ecx, dword [fcn.0056d830]
cmp ecx, 0x56aca0
jne 0x443e6b
xor eax, eax
mov ebx, 0x7bd05af7
lea esi, [esp + 0x68]
mov dword [esi + 4], eax
mov dword [esi], eax
push esi
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov edi, dword [esi]
mov esi, dword [esi + 4]
cmp edi, ebx
mov eax, esi
mov ecx, 0x863
sbb eax, ecx
jge 0x444756
mov ecx, 0xf4240
mov eax, edi
mul ecx
imul ecx, esi, 0xf4240
add ecx, edx
push dword [0x64f6a4]
push dword [0x64f6a0]
push ecx
push eax
call fcn.005a13d0
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], edx
mov eax, dword [esp + 0x10]
pcmpeqd xmm0, xmm0
movdqu xmmword [eax], xmm0
movdqu xmmword [eax + 0x10], xmm0
movdqu xmmword [eax + 0x20], xmm0
xor ebx, ebx
mov byte [eax], bl
mov byte [eax + 0x18], bl
pxor xmm0, xmm0
movq qword [eax + 0x20], xmm0
mov dword [eax + 0x28], ebx
xor eax, eax
dec eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], eax
lea edi, [esp + 0x5c]
mov dword [edi], eax
mov dword [edi + 4], eax
mov dword [edi + 8], eax
lea esi, [esp + 0x68]
push 0x23c
push 0xff
push esi
call fcn.00582870
add esp, 0xc
mov ecx, esi
push ebx
mov ebx, esi
call fcn.00444a00
mov ecx, esi
push edi
call fcn.00444a60
mov dword [esi], 0x62871c
push dword [esi + 4]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esi + 0x238]
mov ecx, eax
shr ecx, 0xe
mov edx, eax
shr edx, 0x13
mov edx, dword [edx*4 + 0x6527ec]
bt edx, ecx
jb 0x44469e
cmp dword [esp + 0x64], 0
je 0x4446e2
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov edi, eax
mov dword [esp + 0x68], ebx
mov dword [esp + 0x6c], ebx
mov dword [esp + 0x70], 0
mov ebx, dword [esp + 0x60]
xor eax, eax
lea edx, [esp + 0x5c]
cmp ebx, edx
je 0x444604
mov ecx, ebx
cmp dword [ecx + 0x10], edi
je 0x443e80
mov ecx, dword [ecx + 4]
cmp ecx, edx
jne 0x443e5a
jmp 0x444604
call dword [0x6445dc]
lea eax, [esp + 0x38]
push eax
call ecx
add esp, 4
jmp 0x443d87
mov esi, dword [ecx + 0x20]
push 0xc
call fcn.0057dc30
add esp, 4
test eax, eax
je 0x4445dd
mov dword [eax + 8], esi
lea ecx, [esp + 0x68]
mov dword [eax + 4], ecx
mov dword [eax], ecx
mov dword [esp + 0x6c], eax
mov dword [esp + 0x68], eax
mov dword [esp + 0x70], 1
test esi, esi
je 0x444601
pxor xmm0, xmm0
movq qword [esp + 0x50], xmm0
mov dword [esp + 0x58], 0
lea eax, [esp + 0x5c]
jmp 0x443ed8
mov ebx, dword [ebx + 4]
cmp ebx, eax
je 0x443ef0
cmp dword [ebx + 0x10], esi
jne 0x443ed1
add ebx, 0x2c
je 0x4445cf
lea ecx, [esp + 0x50]
push ebx
call fcn.00422c20
movsx eax, byte [esp + 0x5b]
test eax, eax
jns 0x443efd
mov eax, dword [esp + 0x54]
test eax, eax
je 0x44472a
lea ebx, [esp + 0x44]
xor eax, eax
dec eax
mov dword [ebx], eax
mov dword [ebx + 4], eax
mov dword [ebx + 8], eax
push ebx
call fcn.00444b40
lea edx, [esp + 0x50]
movsx eax, byte [edx + 0xb]
test eax, eax
cmovs eax, dword [edx + 4]
mov ecx, dword [edx]
cmovns ecx, edx
test eax, eax
js 0x4445e4
je 0x443f3f
test ecx, ecx
je 0x4445d6
push eax
push ecx
push 0xc
push str.explorer.exe
call fcn.00444870
add esp, 0x10
test eax, eax
je 0x44468a
movsx eax, byte [esp + 0x4f]
test eax, eax
cmovs eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x44]
cmovns ecx, ebx
test eax, eax
js 0x4445e4
je 0x443f7d
test ecx, ecx
je 0x4445d6
mov dword [esp + 8], ecx
movsx ebx, byte [esp + 0x5b]
test ebx, ebx
cmovs ebx, dword [esp + 0x54]
mov edx, dword [esp + 0x50]
lea ecx, [esp + 0x50]
cmovns edx, ecx
test ebx, ebx
js 0x4445e4
je 0x443faa
test edx, edx
je 0x4445d6
cmp ebx, eax
setne cl
mov dword [esp + 0xc], ecx
jne 0x443fd8
mov dword [esp + 4], eax
test ebx, ebx
je 0x443fd8
xor ebx, ebx
mov eax, dword [esp + 8]
movzx ecx, word [edx + ebx*2]
cmp cx, word [eax + ebx*2]
setne cl
mov dword [esp + 0xc], ecx
je 0x4446ac
mov ebx, dword [esp + 0x60]
lea eax, [esp + 0x5c]
jmp 0x443fe5
mov ebx, dword [ebx + 4]
cmp ebx, eax
je 0x4440fc
cmp dword [ebx + 0x10], edi
je 0x443fe2
cmp dword [ebx + 0x20], esi
jne 0x443fe2
movsx ecx, byte [esp + 0x5b]
test ecx, ecx
cmovs ecx, dword [esp + 0x54]
mov edx, dword [esp + 0x50]
lea eax, [esp + 0x50]
cmovns edx, eax
test ecx, ecx
js 0x4445e4
je 0x444020
test edx, edx
je 0x4445d6
mov dword [esp], edx
mov dword [esp + 4], ecx
mov eax, ebx
add eax, 0x2c
je 0x4445fa
push eax
mov dword [esp + 0xc], eax
call fcn.0057f442
add esp, 4
push dword [esp + 4]
push dword [esp + 4]
push eax
push dword [esp + 0x14]
call fcn.00444870
add esp, 0x10
test eax, eax
lea eax, [esp + 0x5c]
jne 0x443fe2
movsx ecx, byte [esp + 0x4f]
test ecx, ecx
cmovs ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x44]
lea eax, [esp + 0x44]
cmovns edx, eax
test ecx, ecx
js 0x4445e4
mov dword [esp + 4], ecx
mov eax, dword [esp + 8]
je 0x44408d
test edx, edx
je 0x4445d6
push eax
mov dword [esp + 4], edx
call fcn.0057f442
add esp, 4
push dword [esp + 4]
push dword [esp + 4]
push eax
push dword [esp + 0x14]
call fcn.00444870
add esp, 0x10
test eax, eax
lea eax, [esp + 0x5c]
je 0x443fe2
mov eax, dword [ebx + 0x10]
mov dword [esp + 8], eax
push 0xc
call fcn.0057dc30
add esp, 4
test eax, eax
je 0x4445dd
mov ecx, dword [esp + 8]
mov dword [eax + 8], ecx
lea ecx, [esp + 0x68]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x68]
mov dword [eax], ecx
mov dword [ecx + 4], eax
mov dword [esp + 0x68], eax
inc dword [esp + 0x70]
lea eax, [esp + 0x5c]
jmp 0x443fe2
lea eax, [esp + 0x2c]
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], 0
cmp dword [esp + 0x70], 0
je 0x444147
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0x6c]
mov esi, dword [ecx + 4]
mov edi, dword [edx]
mov dword [edi + 4], esi
mov edi, dword [edx]
mov dword [esi], edi
mov esi, dword [esp + 0x2c]
mov dword [esi + 4], edx
mov dword [edx], esi
mov dword [esp + 0x2c], ecx
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x70]
add dword [esp + 0x34], eax
mov dword [esp + 0x70], 0
cmp byte [esp + 0x4f], 0
lea ebx, [esp + 0x68]
jns 0x44415e
push dword [esp + 0x44]
call fcn.0057dc2b
add esp, 4
cmp byte [esp + 0x5b], 0
jns 0x444171
push dword [esp + 0x50]
call fcn.0057dc2b
add esp, 4
mov eax, dword [esp + 0x70]
test eax, eax
je 0x4441b3
mov ecx, dword [esp + 0x68]
mov eax, dword [esp + 0x6c]
mov ecx, dword [ecx + 4]
mov edx, dword [eax]
mov dword [edx + 4], ecx
mov edx, dword [eax]
mov dword [ecx], edx
mov dword [esp + 0x70], 0
cmp eax, ebx
je 0x4441b3
test eax, eax
je 0x4445eb
mov esi, dword [eax + 4]
push eax
call fcn.0057dc2b
add esp, 4
mov eax, esi
cmp esi, ebx
jne 0x444199
mov dword [esp + 8], 0
cmp dword [esp + 0x64], 0
je 0x444204
mov ecx, dword [esp + 0x5c]
mov eax, dword [esp + 0x60]
mov ecx, dword [ecx + 4]
mov edx, dword [eax]
mov dword [edx + 4], ecx
mov edx, dword [eax]
mov dword [ecx], edx
mov dword [esp + 0x64], 0
lea ecx, [esp + 0x5c]
cmp eax, ecx
je 0x444204
test eax, eax
je 0x4445eb
mov esi, dword [eax + 4]
push eax
call fcn.0057dc2b
add esp, 4
mov eax, esi
lea ecx, [esp + 0x5c]
cmp esi, ecx
jne 0x4441e6
cmp dword [esp + 0x34], 0
je 0x4446bc
mov eax, dword [esp + 0x30]
push dword [eax + 8]
push 0
push 0x400
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, 0
test eax, eax
je 0x44424d
mov edi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
cmp edi, 0xffffffff
je 0x444585
call fcn.005050f0
push esi
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov esi, edi
lea eax, [esi + 1]
cmp eax, 2
mov dword [esp + 4], esi
mov dword [esp], eax
jb 0x4446cc
push 0x20a
push 0xff
push ebx
call fcn.00582870
add esp, 0xc
push 0x104
push ebx
push esi
call sub.KERNEL32.dll_K32GetProcessImageFileNameW
test eax, eax
je 0x4446d7
xor eax, eax
dec eax
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], eax
push ebx
call fcn.0057f442
add esp, 4
lea esi, [esp + 0x5c]
mov ecx, esi
push eax
push ebx
call fcn.0056adc0
pxor xmm0, xmm0
lea edi, [esp + 0x50]
movq qword [edi], xmm0
mov dword [edi + 8], 0
push edi
push esi
call fcn.00444c30
add esp, 8
movzx ecx, byte [edi + 0xb]
test al, al
je 0x44466f
test cl, cl
mov esi, dword [esp + 0x54]
mov eax, ecx
cmovs eax, esi
test eax, eax
je 0x44466f
mov edi, dword [esp + 0x50]
mov ebx, dword [esp + 0x58]
cmp byte [esp + 0x67], 0
jns 0x444303
push dword [esp + 0x5c]
call fcn.0057dc2b
add esp, 4
test ebx, ebx
js 0x444697
mov eax, ebx
shr eax, 0x18
test eax, eax
jne 0x44431e
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esp + 8], eax
cmp dword [esp], 2
jb 0x44435e
mov dword [esp + 0x14], edi
mov dword [esp], esi
call fcn.005050f0
cmp dword [0x65b01c], 0
je 0x44458c
mov esi, dword [0x65b01c]
mov eax, dword [esi]
mov edi, dword [eax]
mov ecx, edi
call dword [0x6445dc]
mov ecx, esi
push dword [esp + 4]
call edi
mov esi, dword [esp]
mov edi, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
cmp byte [eax + 0x2b], 0
jns 0x444379
add eax, 0x20
push dword [eax]
call fcn.0057dc2b
mov eax, dword [esp + 0x14]
add esp, 4
mov dword [eax + 0x20], edi
mov dword [eax + 0x24], esi
mov dword [eax + 0x28], ebx
cmp dword [esp + 0x34], 0
je 0x44464b
push 0
call dword [sym.imp.USER32.dll_GetTopWindow]
test eax, eax
lea ebx, [esp + 0x68]
je 0x444571
mov edi, eax
mov dword [esp + 4], 0
mov esi, dword [sym.imp.USER32.dll_GetWindow]
mov dword [esp], 0
jmp 0x4443c9
lea ebx, [esp + 0x68]
push 2
push edi
call esi
mov edi, eax
test eax, eax
je 0x444419
push edi
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x4443be
mov dword [esp + 0x68], 0
push ebx
push edi
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov eax, dword [esp + 0x68]
lea ecx, [esp + 0x30]
lea edx, [esp + 0x2c]
mov ebx, dword [ecx]
cmp ebx, edx
je 0x4443ba
lea ecx, [ebx + 4]
cmp dword [ebx + 8], eax
jne 0x4443f0
jmp 0x444625
call dword [0x6445dc]
push ebx
call ecx
add esp, 4
mov edi, dword [esp + 0x68]
mov edx, dword [esp + 0x6c]
jmp 0x44447c
mov ecx, dword [fcn.0056d830]
cmp ecx, 0x56aca0
jne 0x444403
xor eax, eax
mov dword [esp + 0x6c], eax
mov dword [esp + 0x68], eax
push ebx
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov edi, dword [esp + 0x68]
mov esi, dword [esp + 0x6c]
mov eax, 0x7bd05af7
cmp edi, eax
mov eax, esi
mov ecx, 0x863
sbb eax, ecx
jge 0x4447d1
mov ecx, 0xf4240
mov eax, edi
mul ecx
imul ecx, esi, 0xf4240
add ecx, edx
push dword [0x64f6a4]
push dword [0x64f6a0]
push ecx
push eax
call fcn.005a13d0
mov edi, eax
sub edi, dword [esp + 0x38]
sbb edx, dword [esp + 0x3c]
seto al
mov esi, edx
sar esi, 0x1f
test al, al
cmovne edi, esi
add esi, 0x80000000
test al, al
cmove esi, edx
pxor xmm0, xmm0
movdqu xmmword [esp + 0x9c], xmm0
movdqu xmmword [esp + 0x8c], xmm0
movdqu xmmword [esp + 0x7c], xmm0
movdqu xmmword [esp + 0x6c], xmm0
mov dword [esp + 0x68], 0x44
push ebx
call dword [sym.imp.KERNEL32.dll_GetStartupInfoW]
mov eax, dword [esp + 0x94]
shr eax, 0xb
and al, 1
mov ecx, dword [esp + 0x10]
cmp byte [ecx + 0x18], 0
jne 0x444709
test ecx, ecx
je 0x4445dd
mov edx, dword [esp + 4]
mov dword [ecx], edx
mov edx, dword [esp]
mov dword [ecx + 4], edx
mov dword [ecx + 8], edi
mov dword [ecx + 0xc], esi
mov edx, dword [esp + 0xc]
mov byte [ecx + 0x10], dl
mov byte [ecx + 0x11], al
mov byte [ecx + 0x18], 1
mov eax, dword [esp + 8]
mov dword [ecx + 0x2c], eax
cmp dword [esp + 0x34], 0
je 0x444557
lea esi, [esp + 0x2c]
mov ecx, dword [esi]
mov eax, dword [esi + 4]
mov ecx, dword [ecx + 4]
mov edx, dword [eax]
mov dword [edx + 4], ecx
mov edx, dword [eax]
mov dword [ecx], edx
mov dword [esi + 8], 0
cmp eax, esi
je 0x444557
test eax, eax
je 0x4445eb
mov edi, dword [eax + 4]
push eax
call fcn.0057dc2b
add esp, 4
mov eax, edi
cmp edi, esi
jne 0x44453d
mov ecx, dword [esp + 0x2a8]
xor ecx, ebp
call fcn.005810d5
mov eax, dword [esp + 0x10]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [esp + 4], 0
mov dword [esp], 0
jmp 0x444419
xor edi, edi
jmp 0x444244
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push 0x6384a9
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x444864
mov ecx, eax
cmp eax, sym.browser.exe_GetHandleVerifier
je 0x4445c9
call dword [0x6445dc]
call ecx
push 0
push eax
call fcn.004464e0
add esp, 8
jmp 0x44433d
push 1
push 0
jmp 0x4445bc
push str....._third_partylibc_srcinclude_string:2719:_assertion___s___nullptr_failed:_string::assign_received_nullptr_n
jmp 0x4445f0
push str....._third_partylibc_srcinclude_string_view:316:_assertion___len__0____s___nullptr_failed:_string_view::string_view__CharT___size_t_:_received_nullptr_n
jmp 0x4445f0
push str....._third_partylibc_srcinclude__memoryconstruct_at.h:40:_assertion___location___nullptr_failed:_null_pointer_given_to_construct_at_n
jmp 0x4445f0
push str....._third_partylibc_srcinclude_string_view:314:_assertion___len___static_cast_size_type__numeric_limits_difference_type_::max____failed:_string_view::string_view__CharT___size_t_:_length_does_not_fit_in_difference_type_n
jmp 0x4445f0
push str....._third_partylibc_srcinclude__memoryconstruct_at.h:66:_assertion___loc___nullptr_failed:_null_pointer_given_to_destroy_at_n
push 0x62a183
call fcn.005aacb0
push str....._third_partylibc_srcinclude_string_view:267:_assertion___s___nullptr_failed:_null_pointer_passed_to_non_null_argument_of_char_traits_..._::length_n
jmp 0x4445f0
xor eax, eax
inc eax
lea ecx, [esp + 0x2c]
mov dword [ecx], ecx
mov dword [ecx + 4], ecx
mov dword [ecx + 8], 0
mov dword [esp + 0xc], 0
lea ebx, [esp + 0x68]
jmp 0x444175
push 0xfffffffffffffff0
push edi
call dword [sym.imp.USER32.dll_GetWindowLongW]
test eax, eax
jns 0x44465c
cmp dword [esp], 0
jne 0x4443ba
mov eax, dword [ebx + 8]
mov dword [esp + 4], eax
mov dword [esp], edi
jmp 0x4443ba
mov dword [esp + 4], 0
mov dword [esp], 0
jmp 0x444666
mov eax, dword [ebx + 8]
mov dword [esp + 4], eax
mov dword [esp], edi
lea ebx, [esp + 0x68]
jmp 0x444419
test cl, cl
jns 0x44467f
push dword [esp + 0x50]
call fcn.0057dc2b
add esp, 4
xor edi, edi
xor esi, esi
xor ebx, ebx
jmp 0x4442f0
mov dword [esp + 0xc], 0
jmp 0x443fd8
mov eax, esi
jmp 0x444310
push eax
call fcn.00506f30
add esp, 4
jmp 0x443e23
inc ebx
cmp dword [esp + 4], ebx
jne 0x443fc3
jmp 0x443fd8
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 8]
mov dword [eax + 0x2c], ecx
jmp 0x444557
xor edi, edi
xor ebx, ebx
xor esi, esi
jmp 0x444314
xor edi, edi
xor esi, esi
xor ebx, ebx
jmp 0x444314
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esp + 8], eax
lea eax, [esp + 0x2c]
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], 0
mov dword [esp + 0xc], 0
jmp 0x4441bb
mov edx, dword [esp + 4]
mov dword [ecx], edx
mov edx, dword [esp]
mov dword [ecx + 4], edx
mov dword [ecx + 8], edi
mov dword [ecx + 0xc], esi
mov edx, dword [esp + 0xc]
mov byte [ecx + 0x10], dl
mov byte [ecx + 0x11], al
jmp 0x44450f
lea ecx, [esp + 0x2c]
mov dword [ecx], ecx
mov dword [ecx + 4], ecx
mov dword [ecx + 8], 0
mov edx, ecx
lea ebx, [esp + 0x68]
push ebx
call fcn.005dfa20
add esp, 4
mov dword [esp + 0xc], 0
jmp 0x44415e
mov eax, dword [0x64f6a0]
mov dword [esp + 8], eax
mov ecx, dword [0x64f6a4]
mov dword [esp + 4], ecx
push ecx
push eax
push esi
push edi
call fcn.005a13d0
mov ebx, edx
mov ecx, eax
mul dword [esp + 8]
mov dword [esp], eax
mov eax, ecx
imul ecx, dword [esp + 4]
add edx, ecx
imul ecx, ebx, 0xf4240
mov dword [esp + 0xc], ecx
imul ebx, dword [esp + 8]
add ebx, edx
sub edi, dword [esp]
sbb esi, ebx
mov ecx, 0xf4240
mul ecx
mov dword [esp], eax
mov ebx, edx
add ebx, dword [esp + 0xc]
mov eax, edi
mul ecx
imul ecx, esi, 0xf4240
add edx, ecx
push dword [esp + 4]
push dword [esp + 0xc]
push edx
push eax
call fcn.005a13d0
add eax, dword [esp]
adc edx, ebx
jmp 0x443d7f
mov ebx, dword [0x64f6a0]
mov dword [esp + 0x20], ebx
mov eax, dword [0x64f6a4]
mov dword [esp + 0x14], eax
push eax
push ebx
push esi
push edi
call fcn.005a13d0
mov dword [esp + 0x24], edx
mov ecx, eax
mul ebx
mov dword [esp + 0x1c], eax
mov dword [esp + 0x28], ecx
imul ecx, dword [esp + 0x14]
add edx, ecx
lea ebx, [esp + 0x68]
mov eax, dword [esp + 0x24]
imul ecx, eax, 0xf4240
mov dword [esp + 0x18], ecx
imul eax, dword [esp + 0x20]
add eax, edx
sub edi, dword [esp + 0x1c]
sbb esi, eax
mov ecx, 0xf4240
mov eax, dword [esp + 0x28]
mul ecx
mov dword [esp + 0x1c], eax
add edx, dword [esp + 0x18]
mov dword [esp + 0x18], edx
mov eax, edi
mul ecx
imul ecx, esi, 0xf4240
add edx, ecx
push dword [esp + 0x14]
push dword [esp + 0x24]
push edx
push eax
call fcn.005a13d0
mov edi, eax
add edi, dword [esp + 0x1c]
adc edx, dword [esp + 0x18]
jmp 0x44447c
xor eax, eax
push eax
jmp 0x4445bb