Function at 0x438ec0
Capabilities:
Check for time delay via queryperformancecounter
Get process image filename

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x2b0
mov ebx, ecx
mov eax, dword [0x644040]
xor eax, ebp
mov dword [esp + 0x2a8], eax
xor eax, eax
dec eax
mov dword [esp + 0x3c], eax
mov dword [esp + 0x38], eax
mov ecx, dword [fcn.0055fb00]
cmp ecx, 0x5536d0
mov dword [esp + 0x14], ebx
jne 0x43903b
xor eax, eax
lea esi, [esp + 0x68]
mov dword [esi + 4], eax
mov dword [esi], eax
push esi
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov edi, dword [esi]
mov esi, dword [esi + 4]
mov eax, 0x7bd05af7
cmp edi, eax
mov eax, esi
mov ecx, 0x863
sbb eax, ecx
jge 0x43993c
mov ecx, 0xf4240
mov eax, edi
mul ecx
imul ecx, esi, 0xf4240
add ecx, edx
push dword [0x6496cc]
push dword [0x6496c8]
push ecx
push eax
call fcn.005866e0
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], edx
pcmpeqd xmm0, xmm0
movdqu xmmword [ebx], xmm0
movdqu xmmword [ebx + 0x10], xmm0
movdqu xmmword [ebx + 0x20], xmm0
mov eax, ebx
xor ebx, ebx
mov byte [eax], bl
mov byte [eax + 0x18], bl
pxor xmm0, xmm0
movq qword [eax + 0x20], xmm0
mov dword [eax + 0x28], ebx
xor eax, eax
dec eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], eax
lea edi, [esp + 0x5c]
mov dword [edi], eax
mov dword [edi + 4], eax
mov dword [edi + 8], eax
lea esi, [esp + 0x68]
push 0x23c
push 0xff
push esi
call fcn.005679e0
add esp, 0xc
mov ecx, esi
push ebx
mov ebx, esi
call fcn.00439bf0
mov ecx, esi
push edi
call fcn.00439c50
mov dword [esi], 0x6215e4
push dword [esi + 4]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esi + 0x238]
mov ecx, eax
shr ecx, 0xe
mov edx, eax
shr edx, 0x13
mov edx, dword [edx*4 + 0x64c810]
bt edx, ecx
jb 0x43989a
cmp dword [esp + 0x64], 0
je 0x4398c8
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov edi, eax
mov dword [esp + 0x68], ebx
mov dword [esp + 0x6c], ebx
mov dword [esp + 0x70], 0
mov ebx, dword [esp + 0x60]
xor eax, eax
lea edx, [esp + 0x5c]
cmp ebx, edx
je 0x439800
mov ecx, ebx
cmp dword [ecx + 0x10], edi
je 0x439050
mov ecx, dword [ecx + 4]
cmp ecx, edx
jne 0x43902a
jmp 0x439800
call dword [0x63e19c]
lea eax, [esp + 0x38]
push eax
call ecx
add esp, 4
jmp 0x438f59
mov esi, dword [ecx + 0x20]
push 0xc
call fcn.00562f65
add esp, 4
test eax, eax
je 0x4397d2
mov dword [eax + 8], esi
lea ecx, [esp + 0x68]
mov dword [eax + 4], ecx
mov dword [eax], ecx
mov dword [esp + 0x6c], eax
mov dword [esp + 0x68], eax
mov dword [esp + 0x70], 1
test esi, esi
je 0x4397fd
pxor xmm0, xmm0
movq qword [esp + 0x50], xmm0
mov dword [esp + 0x58], 0
lea eax, [esp + 0x5c]
jmp 0x4390a8
mov ebx, dword [ebx + 4]
cmp ebx, eax
je 0x4390c0
cmp dword [ebx + 0x10], esi
jne 0x4390a1
add ebx, 0x2c
je 0x4397cb
lea ecx, [esp + 0x50]
push ebx
call fcn.0040f2b0
movsx eax, byte [esp + 0x5b]
test eax, eax
jns 0x4390cd
mov eax, dword [esp + 0x54]
test eax, eax
je 0x439910
lea ebx, [esp + 0x44]
xor eax, eax
dec eax
mov dword [ebx], eax
mov dword [ebx + 4], eax
mov dword [ebx + 8], eax
push ebx
call fcn.00439d30
lea edx, [esp + 0x50]
movsx eax, byte [edx + 0xb]
test eax, eax
cmovs eax, dword [edx + 4]
mov ecx, dword [edx]
cmovns ecx, edx
test eax, eax
js 0x4397d9
sete dl
test ecx, ecx
setne dh
or dh, dl
je 0x4397e0
push eax
push ecx
push 0xc
push str.explorer.exe
call fcn.00439a60
add esp, 0x10
test eax, eax
je 0x439877
movsx eax, byte [esp + 0x4f]
test eax, eax
cmovs eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x44]
cmovns ecx, ebx
test eax, eax
js 0x4397d9
sete dl
mov dword [esp], ecx
test ecx, ecx
setne dh
or dh, dl
je 0x4397e0
movsx ebx, byte [esp + 0x5b]
test ebx, ebx
cmovs ebx, dword [esp + 0x54]
mov edx, dword [esp + 0x50]
lea ecx, [esp + 0x50]
cmovns edx, ecx
test ebx, ebx
js 0x4397d9
sete cl
test edx, edx
setne ch
or ch, cl
je 0x4397e0
cmp ebx, eax
setne cl
mov dword [esp + 0xc], ecx
jne 0x4391b8
mov dword [esp + 8], eax
test ebx, ebx
je 0x4391b8
xor ebx, ebx
mov eax, dword [esp]
movzx ecx, word [edx + ebx*2]
cmp cx, word [eax + ebx*2]
setne cl
mov dword [esp + 0xc], ecx
je 0x4398a8
mov ebx, dword [esp + 0x60]
lea eax, [esp + 0x5c]
jmp 0x4391c5
mov ebx, dword [ebx + 4]
cmp ebx, eax
je 0x4392e9
cmp dword [ebx + 0x10], edi
je 0x4391c2
cmp dword [ebx + 0x20], esi
jne 0x4391c2
movsx edx, byte [esp + 0x5b]
test edx, edx
cmovs edx, dword [esp + 0x54]
mov ecx, dword [esp + 0x50]
lea eax, [esp + 0x50]
cmovns ecx, eax
test edx, edx
js 0x4397d9
sete al
mov dword [esp + 4], ecx
test ecx, ecx
setne cl
or cl, al
je 0x4397e0
mov dword [esp + 8], edx
mov eax, ebx
add eax, 0x2c
je 0x4397f6
push eax
mov dword [esp + 4], eax
call fcn.00564782
add esp, 4
push dword [esp + 8]
push dword [esp + 8]
push eax
push dword [esp + 0xc]
call fcn.00439a60
add esp, 0x10
test eax, eax
lea eax, [esp + 0x5c]
jne 0x4391c2
movsx ecx, byte [esp + 0x4f]
test ecx, ecx
cmovs ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x44]
lea eax, [esp + 0x44]
cmovns edx, eax
test ecx, ecx
js 0x4397d9
mov dword [esp + 8], ecx
sete al
mov dword [esp + 4], edx
test edx, edx
setne cl
or cl, al
je 0x4397e0
push dword [esp]
call fcn.00564782
add esp, 4
push dword [esp + 8]
push dword [esp + 8]
push eax
push dword [esp + 0xc]
call fcn.00439a60
add esp, 0x10
test eax, eax
lea eax, [esp + 0x5c]
je 0x4391c2
mov eax, dword [ebx + 0x10]
mov dword [esp], eax
push 0xc
call fcn.00562f65
add esp, 4
test eax, eax
je 0x4397d2
mov ecx, dword [esp]
mov dword [eax + 8], ecx
lea ecx, [esp + 0x68]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x68]
mov dword [eax], ecx
mov dword [ecx + 4], eax
mov dword [esp + 0x68], eax
inc dword [esp + 0x70]
lea eax, [esp + 0x5c]
jmp 0x4391c2
lea eax, [esp + 0x2c]
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], 0
cmp dword [esp + 0x70], 0
je 0x439334
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0x6c]
mov esi, dword [ecx + 4]
mov edi, dword [edx]
mov dword [edi + 4], esi
mov edi, dword [edx]
mov dword [esi], edi
mov esi, dword [esp + 0x2c]
mov dword [esi + 4], edx
mov dword [edx], esi
mov dword [esp + 0x2c], ecx
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x70]
add dword [esp + 0x34], eax
mov dword [esp + 0x70], 0
cmp byte [esp + 0x4f], 0
lea ebx, [esp + 0x68]
jns 0x43934b
push dword [esp + 0x44]
call fcn.00562f60
add esp, 4
cmp byte [esp + 0x5b], 0
jns 0x43935e
push dword [esp + 0x50]
call fcn.00562f60
add esp, 4
mov eax, dword [esp + 0x70]
test eax, eax
je 0x4393a0
mov ecx, dword [esp + 0x68]
mov eax, dword [esp + 0x6c]
mov ecx, dword [ecx + 4]
mov edx, dword [eax]
mov dword [edx + 4], ecx
mov edx, dword [eax]
mov dword [ecx], edx
mov dword [esp + 0x70], 0
cmp eax, ebx
je 0x4393a0
test eax, eax
je 0x4397e7
mov esi, dword [eax + 4]
push eax
call fcn.00562f60
add esp, 4
mov eax, esi
cmp esi, ebx
jne 0x439386
mov dword [esp + 8], 0
cmp dword [esp + 0x64], 0
je 0x4393f1
mov ecx, dword [esp + 0x5c]
mov eax, dword [esp + 0x60]
mov ecx, dword [ecx + 4]
mov edx, dword [eax]
mov dword [edx + 4], ecx
mov edx, dword [eax]
mov dword [ecx], edx
mov dword [esp + 0x64], 0
lea ecx, [esp + 0x5c]
cmp eax, ecx
je 0x4393f1
test eax, eax
je 0x4397e7
mov esi, dword [eax + 4]
push eax
call fcn.00562f60
add esp, 4
mov eax, esi
lea ecx, [esp + 0x5c]
cmp esi, ecx
jne 0x4393d3
cmp dword [esp + 0x34], 0
je 0x4398b8
mov eax, dword [esp + 0x30]
push dword [eax + 8]
push 0
push 0x400
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [esp], 0
mov esi, 0
test eax, eax
je 0x439441
mov edi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
cmp edi, 0xffffffff
je 0x439781
call fcn.005018d0
push esi
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov esi, edi
lea eax, [esi + 1]
mov dword [esp + 0x10], eax
cmp eax, 2
mov dword [esp + 4], esi
jb 0x439863
push 0x20a
push 0xff
push ebx
call fcn.005679e0
add esp, 0xc
push 0x104
push ebx
push esi
call sub.KERNEL32.dll_K32GetProcessImageFileNameW
test eax, eax
je 0x439867
xor eax, eax
dec eax
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], eax
push ebx
call fcn.00564782
add esp, 4
lea esi, [esp + 0x5c]
mov ecx, esi
push eax
push ebx
call fcn.00550e10
pxor xmm0, xmm0
lea edi, [esp + 0x50]
movq qword [edi], xmm0
mov dword [edi + 8], 0
push edi
push esi
call fcn.00439e20
add esp, 8
movzx ecx, byte [edi + 0xb]
test al, al
je 0x439848
test cl, cl
mov esi, dword [esp + 0x54]
mov eax, ecx
cmovs eax, esi
test eax, eax
je 0x439848
mov edi, dword [esp + 0x50]
mov ebx, dword [esp + 0x58]
cmp byte [esp + 0x67], 0
jns 0x4394f8
push dword [esp + 0x5c]
call fcn.00562f60
add esp, 4
test ebx, ebx
js 0x439884
mov eax, ebx
shr eax, 0x18
mov dword [esp], esi
test eax, eax
jne 0x439516
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esp + 8], eax
cmp dword [esp + 0x10], 2
jb 0x439551
mov dword [esp + 0x10], edi
call fcn.005018d0
cmp dword [0x655038], 0
je 0x439788
mov esi, dword [0x655038]
mov eax, dword [esi]
mov edi, dword [eax]
mov ecx, edi
call dword [0x63e19c]
mov ecx, esi
push dword [esp + 4]
call edi
mov edi, dword [esp + 0x10]
mov esi, dword [esp + 0x14]
cmp byte [esi + 0x2b], 0
jns 0x439568
lea eax, [esi + 0x20]
push dword [eax]
call fcn.00562f60
add esp, 4
mov dword [esi + 0x20], edi
mov eax, dword [esp]
mov dword [esi + 0x24], eax
mov dword [esi + 0x28], ebx
cmp dword [esp + 0x34], 0
je 0x43976d
push 0
call dword [sym.imp.USER32.dll_GetTopWindow]
test eax, eax
je 0x43976d
mov edi, eax
mov dword [esp], 0
mov esi, dword [sym.imp.USER32.dll_IsWindowVisible]
mov ebx, dword [sym.imp.USER32.dll_GetWindow]
mov dword [esp + 4], 0
jmp 0x4395bf
mov esi, dword [sym.imp.USER32.dll_IsWindowVisible]
push 2
push edi
call ebx
mov edi, eax
test eax, eax
je 0x43960f
push edi
call esi
test eax, eax
je 0x4395b4
mov dword [esp + 0x68], 0
lea eax, [esp + 0x68]
push eax
push edi
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov eax, dword [esp + 0x68]
lea ecx, [esp + 0x2c]
mov esi, ecx
mov esi, dword [esi + 4]
cmp esi, ecx
je 0x4395ae
cmp dword [esi + 8], eax
jne 0x4395e4
jmp 0x439821
call dword [0x63e19c]
lea eax, [esp + 0x68]
push eax
call ecx
add esp, 4
mov edi, dword [esp + 0x68]
mov edx, dword [esp + 0x6c]
jmp 0x43967a
mov ecx, dword [fcn.0055fb00]
cmp ecx, 0x5536d0
mov ebx, dword [esp + 0x14]
jne 0x4395f5
xor eax, eax
mov dword [esp + 0x6c], eax
mov dword [esp + 0x68], eax
lea eax, [esp + 0x68]
push eax
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov edi, dword [esp + 0x68]
mov esi, dword [esp + 0x6c]
mov eax, 0x7bd05af7
cmp edi, eax
mov eax, esi
mov ecx, 0x863
sbb eax, ecx
jge 0x4399bc
mov ecx, 0xf4240
mov eax, edi
mul ecx
imul ecx, esi, 0xf4240
add ecx, edx
push dword [0x6496cc]
push dword [0x6496c8]
push ecx
push eax
call fcn.005866e0
mov edi, eax
sub edi, dword [esp + 0x38]
sbb edx, dword [esp + 0x3c]
seto al
mov esi, edx
sar esi, 0x1f
test al, al
cmovne edi, esi
add esi, 0x80000000
test al, al
cmove esi, edx
pxor xmm0, xmm0
movdqu xmmword [esp + 0x9c], xmm0
movdqu xmmword [esp + 0x8c], xmm0
movdqu xmmword [esp + 0x7c], xmm0
movdqu xmmword [esp + 0x6c], xmm0
mov dword [esp + 0x68], 0x44
lea eax, [esp + 0x68]
push eax
call dword [sym.imp.KERNEL32.dll_GetStartupInfoW]
mov eax, dword [esp + 0x94]
shr eax, 0xb
and al, 1
cmp byte [ebx + 0x18], 1
je 0x4398ef
test ebx, ebx
je 0x4397d2
mov ecx, dword [esp]
mov dword [ebx], ecx
mov ecx, dword [esp + 4]
mov dword [ebx + 4], ecx
mov dword [ebx + 8], edi
mov dword [ebx + 0xc], esi
mov ecx, dword [esp + 0xc]
mov byte [ebx + 0x10], cl
mov byte [ebx + 0x11], al
mov byte [ebx + 0x18], 1
mov eax, dword [esp + 8]
mov dword [ebx + 0x2c], eax
cmp dword [esp + 0x34], 0
je 0x439755
lea esi, [esp + 0x2c]
mov ecx, dword [esi]
mov eax, dword [esi + 4]
mov ecx, dword [ecx + 4]
mov edx, dword [eax]
mov dword [edx + 4], ecx
mov edx, dword [eax]
mov dword [ecx], edx
mov dword [esi + 8], 0
cmp eax, esi
je 0x439755
test eax, eax
je 0x4397e7
mov edi, dword [eax + 4]
push eax
call fcn.00562f60
add esp, 4
mov eax, edi
cmp edi, esi
jne 0x43973b
mov ecx, dword [esp + 0x2a8]
xor ecx, ebp
call fcn.00566245
mov eax, ebx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [esp], 0
mov dword [esp + 4], 0
jmp 0x43960f
xor edi, edi
jmp 0x439438
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push 0x631a0d
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x439a4f
mov ecx, eax
cmp eax, sym.browser.exe_GetHandleVerifier
je 0x4397c5
call dword [0x63e19c]
call ecx
push 0
push eax
call fcn.0042a0c0
add esp, 8
jmp 0x439533
push 1
push 0
jmp 0x4397b8
push str....._third_partylibc_srcinclude_string:2719:_assertion___s___nullptr_failed:_string::assign_received_nullptr_n
jmp 0x4397ec
push str....._third_partylibc_srcinclude__memoryconstruct_at.h:40:_assertion___location___nullptr_failed:_null_pointer_given_to_construct_at_n
jmp 0x4397ec
push str....._third_partylibc_srcinclude_string_view:318:_assertion___len___static_cast_size_type__numeric_limits_difference_type_::max____failed:_string_view::string_view__CharT___size_t_:_length_does_not_fit_in_difference_type_n
jmp 0x4397ec
push str....._third_partylibc_srcinclude_string_view:320:_assertion___len__0____s___nullptr_failed:_string_view::string_view__CharT___size_t_:_received_nullptr_n
jmp 0x4397ec
push str....._third_partylibc_srcinclude__memoryconstruct_at.h:66:_assertion___loc___nullptr_failed:_null_pointer_given_to_destroy_at_n
push 0x622e92
call fcn.00590170
push str....._third_partylibc_srcinclude_string_view:268:_assertion___s___nullptr_failed:_null_pointer_passed_to_non_null_argument_of_char_traits_..._::length_n
jmp 0x4397ec
xor eax, eax
inc eax
lea ecx, [esp + 0x2c]
mov dword [ecx], ecx
mov dword [ecx + 4], ecx
mov dword [ecx + 8], 0
mov dword [esp + 0xc], 0
lea ebx, [esp + 0x68]
jmp 0x439362
push 0xfffffffffffffff0
push edi
call dword [sym.imp.USER32.dll_GetWindowLongW]
test eax, eax
jns 0x43988b
cmp dword [esp + 4], 0
jne 0x4395ae
mov eax, dword [esi + 8]
mov dword [esp], eax
mov dword [esp + 4], edi
jmp 0x4395ae
test cl, cl
jns 0x439858
push dword [esp + 0x50]
call fcn.00562f60
add esp, 4
xor edi, edi
xor esi, esi
xor ebx, ebx
jmp 0x4394e5
xor edi, edi
jmp 0x439870
xor edi, edi
mov dword [esp], 0
xor ebx, ebx
jmp 0x43950c
mov dword [esp + 0xc], 0
jmp 0x4391b8
mov eax, esi
jmp 0x439505
mov eax, dword [esi + 8]
mov dword [esp], eax
mov dword [esp + 4], edi
jmp 0x43960f
push eax
call fcn.004ff910
add esp, 4
jmp 0x438ff3
inc ebx
cmp dword [esp + 8], ebx
jne 0x4391a3
jmp 0x4391b8
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 8]
mov dword [ebx + 0x2c], eax
jmp 0x439755
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esp + 8], eax
lea eax, [esp + 0x2c]
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], 0
mov dword [esp + 0xc], 0
jmp 0x4393a8
mov ecx, dword [esp]
mov dword [ebx], ecx
mov ecx, dword [esp + 4]
mov dword [ebx + 4], ecx
mov dword [ebx + 8], edi
mov dword [ebx + 0xc], esi
mov ecx, dword [esp + 0xc]
mov byte [ebx + 0x10], cl
mov byte [ebx + 0x11], al
jmp 0x43970d
lea ecx, [esp + 0x2c]
mov dword [ecx], ecx
mov dword [ecx + 4], ecx
mov dword [ecx + 8], 0
mov edx, ecx
lea ebx, [esp + 0x68]
push ebx
call fcn.005bb9e0
add esp, 4
mov dword [esp + 0xc], 0
jmp 0x43934b
mov eax, dword [0x6496c8]
mov dword [esp], eax
mov ecx, dword [0x6496cc]
mov dword [esp + 8], ecx
push ecx
push eax
push esi
push edi
call fcn.005866e0
mov ebx, edx
mov ecx, eax
mul dword [esp]
mov dword [esp + 4], eax
mov eax, ecx
imul ecx, dword [esp + 8]
add edx, ecx
imul ecx, ebx, 0xf4240
mov dword [esp + 0xc], ecx
imul ebx, dword [esp]
add ebx, edx
sub edi, dword [esp + 4]
sbb esi, ebx
mov ecx, 0xf4240
mul ecx
mov dword [esp + 4], eax
mov ebx, edx
add ebx, dword [esp + 0xc]
mov eax, edi
mul ecx
imul ecx, esi, 0xf4240
add edx, ecx
push dword [esp + 8]
push dword [esp + 4]
push edx
push eax
call fcn.005866e0
add eax, dword [esp + 4]
adc edx, ebx
mov ebx, dword [esp + 0x14]
jmp 0x438f51
mov ebx, dword [0x6496c8]
mov dword [esp + 0x20], ebx
mov eax, dword [0x6496cc]
mov dword [esp + 0x10], eax
push eax
push ebx
push esi
push edi
call fcn.005866e0
mov dword [esp + 0x24], edx
mov ecx, eax
mul ebx
mov dword [esp + 0x1c], eax
mov dword [esp + 0x28], ecx
imul ecx, dword [esp + 0x10]
add edx, ecx
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x24]
imul ecx, eax, 0xf4240
mov dword [esp + 0x18], ecx
imul eax, dword [esp + 0x20]
add eax, edx
sub edi, dword [esp + 0x1c]
sbb esi, eax
mov ecx, 0xf4240
mov eax, dword [esp + 0x28]
mul ecx
mov dword [esp + 0x1c], eax
add edx, dword [esp + 0x18]
mov dword [esp + 0x18], edx
mov eax, edi
mul ecx
imul ecx, esi, 0xf4240
add edx, ecx
push dword [esp + 0x10]
push dword [esp + 0x24]
push edx
push eax
call fcn.005866e0
mov edi, eax
add edi, dword [esp + 0x1c]
adc edx, dword [esp + 0x18]
jmp 0x43967a
xor eax, eax
push eax
jmp 0x4397b7