Function at 0x1000a03d
Capabilities:
Check for time delay via gettickcount
Check mutex on windows
Enumerate processes
Get geographical location
Identify system language via api
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x4614
call fcn.10021220
mov eax, dword [0x100325f0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov edi, ecx
push str.publisherpluginstopwatch_
lea ecx, [ebp - 0x44c0]
mov dword [ebp - 0x4608], edi
call fcn.1000268f
mov esi, str.action
push esi
lea ecx, [ebp - 0x4430]
call fcn.1000268f
lea eax, [ebp - 0x4430]
push eax
lea ecx, [ebp + 8]
call fcn.100029db
mov edx, str.collect
mov ecx, eax
call fcn.1000c77b
push 0
push 1
lea ecx, [ebp - 0x4430]
mov bl, al
call fcn.1000391b
lea ecx, [ebp - 0x4430]
test bl, bl
je 0x1000a165
push str.collectparam
call fcn.1000268f
lea eax, [ebp - 0x4430]
push eax
lea ecx, [ebp + 8]
call fcn.100029db
push eax
mov ecx, edi
call fcn.1000b363
mov ebx, 0x1002cea0
push ebx
mov esi, eax
call fcn.10001084
pop ecx
push eax
push ebx
mov ecx, esi
call fcn.10003e3c
xor ebx, ebx
push ebx
push 1
lea ecx, [ebp - 0x4430]
call fcn.1000391b
push str.collectparam
lea ecx, [ebp - 0x4430]
call fcn.1000268f
sub esp, 0x20
mov ecx, esp
push edi
call fcn.1000b317
lea ecx, [ebp - 0x4460]
call fcn.1000203e
add esp, 0x20
push eax
push ecx
lea eax, [ebp - 0x4430]
push eax
lea ecx, [ebp + 8]
call fcn.100029db
push eax
mov ecx, edi
call fcn.1000b363
pop ecx
mov ecx, eax
call fcn.100026e5
lea ecx, [ebp - 0x4460]
push ebx
push 1
call fcn.1000391b
lea ecx, [ebp - 0x4430]
jmp 0x1000abeb
push esi
call fcn.1000268f
lea eax, [ebp - 0x4430]
push eax
lea ecx, [ebp + 8]
call fcn.100029db
mov edx, str.country
mov ecx, eax
call fcn.1000c77b
xor esi, esi
push esi
push 1
lea ecx, [ebp - 0x4430]
mov bl, al
call fcn.1000391b
lea ecx, [ebp - 0x4430]
test bl, bl
je 0x1000a267
push str.country
call fcn.1000268f
lea eax, [ebp - 0x4430]
push eax
lea ecx, [ebp + 8]
call fcn.100029db
push eax
mov ecx, edi
call fcn.1000b363
mov ebx, str.Unknown
push ebx
mov esi, eax
call fcn.10001084
pop ecx
push eax
push ebx
mov ecx, esi
call fcn.10003e3c
xor ebx, ebx
push ebx
push 1
lea ecx, [ebp - 0x4430]
call fcn.1000391b
push 0x10
call dword [sym.imp.KERNEL32.dll_GetUserGeoID]
cmp eax, 0xffffffff
je 0x1000b018
push ebx
push 0x2000
lea ecx, [ebp - 0x4418]
push ecx
push 5
push eax
call dword [sym.imp.KERNEL32.dll_GetGeoInfoW]
test eax, eax
je 0x1000b018
push str.country
lea ecx, [ebp - 0x4430]
call fcn.1000268f
lea eax, [ebp - 0x4430]
push eax
lea ecx, [ebp + 8]
call fcn.100029db
push eax
mov ecx, edi
call fcn.1000b363
mov esi, eax
lea eax, [ebp - 0x4418]
push eax
call fcn.10001084
pop ecx
push eax
lea eax, [ebp - 0x4418]
push eax
mov ecx, esi
call fcn.10003e3c
jmp 0x1000a15a
push str.action
call fcn.1000268f
lea eax, [ebp - 0x4430]
push eax
lea ecx, [ebp + 8]
call fcn.100029db
mov edx, str.region
mov ecx, eax
call fcn.1000c77b
push esi
push 1
lea ecx, [ebp - 0x4430]
mov bl, al
call fcn.1000391b
lea ecx, [ebp - 0x4430]
test bl, bl
je 0x1000a3cb
push str.region
call fcn.1000268f
lea eax, [ebp - 0x4430]
push eax
lea ecx, [ebp + 8]
call fcn.100029db
push eax
mov ecx, edi
call fcn.1000b363
mov ebx, str.Unknown
push ebx
mov esi, eax
call fcn.10001084
pop ecx
push eax
push ebx
mov ecx, esi
call fcn.10003e3c
push 0
push 1
lea ecx, [ebp - 0x4430]
call fcn.1000391b
mov ebx, dword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
push 9
lea eax, [ebp - 0x4528]
push eax
push 0x59
push 0x400
call ebx
mov esi, eax
test esi, esi
je 0x1000b016
push 0x2d
pop eax
lea ecx, [ebp - 0x4528]
push 9
lea ecx, [ecx + esi*2]
push ecx
push 0x5a
push 0x400
mov word [ecx - 2], ax
call ebx
add esi, eax
je 0x1000b016
push 0x2f
pop ecx
lea eax, [ebp - 0x4528]
push 9
lea eax, [eax + esi*2]
push eax
push 0x59
push 0x800
mov word [eax - 2], cx
call ebx
add esi, eax
je 0x1000b016
push 0x2d
pop ecx
lea eax, [ebp - 0x4528]
push 9
lea eax, [eax + esi*2]
push eax
push 0x5a
push 0x800
mov word [eax - 2], cx
call ebx
add eax, esi
je 0x1000b016
push str.region
lea ecx, [ebp - 0x4430]
call fcn.1000268f
lea eax, [ebp - 0x4430]
push eax
lea ecx, [ebp + 8]
call fcn.100029db
push eax
mov ecx, edi
call fcn.1000b363
mov esi, eax
lea eax, [ebp - 0x4528]
push eax
call fcn.10001084
pop ecx
push eax
lea eax, [ebp - 0x4528]
push eax
mov ecx, esi
call fcn.10003e3c
xor ebx, ebx
jmp 0x1000a15a
push str.action
call fcn.1000268f
lea eax, [ebp - 0x4430]
push eax
lea ecx, [ebp + 8]
call fcn.100029db
mov edx, str.uilanguage
mov ecx, eax
call fcn.1000c77b
push esi
push 1
lea ecx, [ebp - 0x4430]
mov bl, al
call fcn.1000391b
lea ecx, [ebp - 0x4430]
test bl, bl
je 0x1000a4d8
push str.uilanguage
call fcn.1000268f
lea eax, [ebp - 0x4430]
push eax
lea ecx, [ebp + 8]
call fcn.100029db
push eax
mov ecx, edi
call fcn.1000b363
mov ebx, str.Unknown
push ebx
mov esi, eax
call fcn.10001084
pop ecx
push eax
push ebx
mov ecx, esi
call fcn.10003e3c
xor ebx, ebx
push ebx
push 1
lea ecx, [ebp - 0x4430]
call fcn.1000391b
xor eax, eax
push 0x3ffe
mov word [ebp - 0x4418], ax
lea eax, [ebp - 0x4416]
push ebx
push eax
call fcn.100151c0
add esp, 0xc
lea eax, [ebp - 0x4418]
push 0x2000
push eax
push 0x1001
call dword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
mov esi, dword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
movzx eax, ax
push eax
call esi
test eax, eax
je 0x1000b018
push 0x2f
lea ecx, [ebp - 0x4418]
lea eax, [ecx + eax*2]
pop ecx
push 0x2000
push eax
push 0x1001
mov word [eax - 2], cx
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultUILanguage]
movzx eax, ax
push eax
call esi
test eax, eax
je 0x1000b018
push str.uilanguage
jmp 0x1000a222
push str.action
call fcn.1000268f
lea eax, [ebp - 0x4430]
push eax
lea ecx, [ebp + 8]
call fcn.100029db
mov edx, str.pcinfo
mov ecx, eax
call fcn.1000c77b
push esi
push 1
lea ecx, [ebp - 0x4430]
mov bl, al
call fcn.1000391b
lea ecx, [ebp - 0x4448]
test bl, bl
je 0x1000a5ca
push str.pcinfo
call fcn.1000268f
lea eax, [ebp - 0x4448]
push eax
lea ecx, [ebp + 8]
call fcn.100029db
push eax
mov ecx, edi
call fcn.1000b363
mov ebx, 0x1002cea0
push ebx
mov esi, eax
call fcn.10001084
pop ecx
push eax
push ebx
mov ecx, esi
call fcn.10003e3c
xor ebx, ebx
push ebx
push 1
lea ecx, [ebp - 0x4448]
call fcn.1000391b
lea ecx, [ebp - 0x4430]
call fcn.1000ded5
push str.pcinfo
lea ecx, [ebp - 0x4448]
call fcn.1000268f
cmp dword [ebp - 0x441c], 8
lea eax, [ebp - 0x4448]
lea edi, [ebp - 0x4430]
cmovae edi, dword [ebp - 0x4430]
push eax
lea ecx, [ebp + 8]
call fcn.100029db
mov ecx, dword [ebp - 0x4608]
push eax
call fcn.1000b363
push edi
mov esi, eax
call fcn.10001084
pop ecx
push eax
push edi
mov ecx, esi
call fcn.10003e3c
lea ecx, [ebp - 0x4448]
jmp 0x1000a152
push str.action
call fcn.1000268f
lea eax, [ebp - 0x4448]
push eax
lea ecx, [ebp + 8]
call fcn.100029db
mov edx, str.watchstart
mov ecx, eax
call fcn.1000c77b
push esi
push 1
lea ecx, [ebp - 0x4448]
mov bl, al
call fcn.1000391b
lea ecx, [ebp - 0x4448]
test bl, bl
je 0x1000a6d4
push str.watchparam
call fcn.1000268f
lea eax, [ebp - 0x4448]
push eax
lea ecx, [ebp + 8]
call fcn.100029db
push eax
lea edx, [ebp - 0x44c0]
lea ecx, [ebp - 0x4430]
call fcn.1000c79d
pop ecx
xor ebx, ebx
push ebx
push 1
lea ecx, [ebp - 0x4448]
call fcn.1000391b
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push ecx
push ecx
lea ecx, [ebp - 0x4570]
mov esi, eax
call fcn.1000b3f1
push esi
lea ecx, [ebp - 0x4570]
call fcn.1000b24e
lea eax, [ebp - 0x44d8]
push eax
lea ecx, [ebp - 0x4570]
call fcn.1000b4ce
lea eax, [ebp - 0x4430]
push eax
mov ecx, edi
call fcn.1000b363
lea ecx, [ebp - 0x44d8]
cmp eax, ecx
je 0x1000a69f
push 0xffffffffffffffff
push ebx
push ecx
mov ecx, eax
call fcn.100034c5
push ebx
push 1
lea ecx, [ebp - 0x44d8]
call fcn.1000391b
lea ecx, [ebp - 0x4520]
call fcn.1000b48b
lea eax, [ebp - 0x4520]
push eax
mov dword [ebp - method.std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__.virtual_0], vtable.std::ios_base.0
call fcn.1000f5ea
pop ecx
jmp 0x1000a15a
push str.action
call fcn.1000268f
lea eax, [ebp - 0x4448]
push eax
lea ecx, [ebp + 8]
call fcn.100029db
mov edx, str.mutex
mov ecx, eax
call fcn.1000c77b
push esi
push 1
lea ecx, [ebp - 0x4448]
mov bl, al
call fcn.1000391b
test bl, bl
je 0x1000a78a
xor ebx, ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetLastError]
push str.LocalACBF783A_DDB7_496C_B9CA_2F34DAD4933F
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
push str.mutex
lea ecx, [ebp - 0x4448]
setne bl
call fcn.1000268f
mov eax, str.FALSE
mov edi, str.TRUE
test bl, bl
cmove edi, eax
lea eax, [ebp - 0x4448]
push eax
lea ecx, [ebp + 8]
call fcn.100029db
mov ecx, dword [ebp - 0x4608]
push eax
call fcn.1000b363
push edi
mov esi, eax
call fcn.10001084
pop ecx
push eax
push edi
mov ecx, esi
call fcn.10003e3c
xor ebx, ebx
lea ecx, [ebp - 0x4448]
jmp 0x1000abeb
push str.action
lea ecx, [ebp - 0x4448]
call fcn.1000268f
lea eax, [ebp - 0x4448]
push eax
lea ecx, [ebp + 8]
call fcn.100029db
mov edx, str.screensize
mov ecx, eax
call fcn.1000c77b
push esi
push 1
lea ecx, [ebp - 0x4448]
mov bl, al
call fcn.1000391b
test bl, bl
je 0x1000a89a
mov esi, dword [sym.imp.USER32.dll_GetSystemMetrics]
xor ebx, ebx
push ebx
call esi
push 1
mov edi, eax
call esi
push ecx
push ecx
lea ecx, [ebp - 0x4570]
mov esi, eax
call fcn.1000b3f1
push edi
lea ecx, [ebp - 0x4570]
call fcn.1000b185
lea ecx, [ebp - 0x4570]
call fcn.1000c7ff
push esi
lea ecx, [ebp - 0x4570]
call fcn.1000b185
push str.screensize
lea ecx, [ebp - 0x4448]
call fcn.1000268f
lea eax, [ebp - 0x4460]
push eax
lea ecx, [ebp - 0x4570]
call fcn.1000b4ce
push eax
push ecx
lea eax, [ebp - 0x4448]
push eax
lea ecx, [ebp + 8]
call fcn.100029db
mov ecx, dword [ebp - 0x4608]
push eax
call fcn.1000b363
pop ecx
mov ecx, eax
call fcn.100026e5
push ebx
push 1
lea ecx, [ebp - 0x4460]
call fcn.1000391b
push ebx
push 1
lea ecx, [ebp - 0x4448]
call fcn.1000391b
lea ecx, [ebp - 0x4520]
call fcn.1000b48b
lea eax, [ebp - 0x4520]
push eax
mov dword [ebp - method.std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__.virtual_0], vtable.std::ios_base.0
call fcn.1000f5ea
pop ecx
jmp 0x1000b018
push str.action
lea ecx, [ebp - 0x4448]
call fcn.1000268f
lea eax, [ebp - 0x4448]
push eax
lea ecx, [ebp + 8]
call fcn.100029db
mov edx, 0x1002d478
mov ecx, eax
call fcn.1000c77b
push esi
push 1
lea ecx, [ebp - 0x4448]
mov bl, al
call fcn.1000391b
lea ecx, [ebp - 0x4448]
test bl, bl
je 0x1000a9bd
push str.upgradeCode
call fcn.1000268f
lea eax, [ebp - 0x4448]
push eax
lea ecx, [ebp + 8]
call fcn.100029db
push eax
lea ecx, [ebp - 0x4430]
call fcn.10002667
xor ebx, ebx
push ebx
push 1
lea ecx, [ebp - 0x4448]
call fcn.1000391b
cmp dword [ebp - 0x441c], 8
lea ecx, [ebp - 0x4528]
push ecx
push ebx
lea eax, [ebp - 0x4430]
cmovae eax, dword [ebp - 0x4430]
push ebx
push eax
call dword [sym.imp.msi.dll_MsiSourceListClearAllW]
push str.productCode
lea ecx, [ebp - 0x4448]
test eax, eax
jne 0x1000a983
call fcn.1000268f
lea eax, [ebp - 0x4448]
push eax
lea ecx, [ebp + 8]
call fcn.100029db
push eax
mov ecx, edi
call fcn.1000b363
mov esi, eax
lea eax, [ebp - 0x4528]
push eax
call fcn.10001084
pop ecx
push eax
lea eax, [ebp - 0x4528]
push eax
jmp 0x1000a5b8
call fcn.1000268f
lea eax, [ebp - 0x4448]
push eax
lea ecx, [ebp + 8]
call fcn.100029db
push eax
mov ecx, edi
call fcn.1000b363
mov ebx, 0x1002cea0
push ebx
mov esi, eax
call fcn.10001084
pop ecx
push eax
push ebx
mov ecx, esi
call fcn.10003e3c
xor ebx, ebx
jmp 0x1000a5bf
push str.action
call fcn.1000268f
lea eax, [ebp - 0x4448]
push eax
lea ecx, [ebp + 8]
call fcn.100029db
mov edx, str.watchstop
mov ecx, eax
call fcn.1000c77b
push esi
push 1
lea ecx, [ebp - 0x4448]
mov bl, al
call fcn.1000391b
test bl, bl
je 0x1000abf8
push str.watchparam
lea ecx, [ebp - 0x4448]
call fcn.1000268f
lea eax, [ebp - 0x4448]
push eax
lea ecx, [ebp + 8]
call fcn.100029db
push eax
lea edx, [ebp - 0x44c0]
lea ecx, [ebp - 0x4460]
call fcn.1000c79d
pop ecx
xor ebx, ebx
push ebx
push 1
lea ecx, [ebp - 0x4448]
call fcn.1000391b
lea eax, [ebp - 0x4460]
push eax
mov ecx, edi
call fcn.1000b363
push eax
lea ecx, [ebp - 0x4430]
call fcn.10002667
push ecx
lea ecx, [ebp - 0x4430]
call fcn.10009e91
pop ecx
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, esi
movd xmm1, eax
cvtdq2pd xmm1, xmm1
shr eax, 0x1f
movsd xmm0, qword [0x1002d9b8]
addsd xmm1, qword [eax*8 + 0x1002da20]
xor eax, eax
mov dword [ebp - 0x4464], 7
mov dword [ebp - 0x4468], ebx
mov word [ebp - 0x4478], ax
divsd xmm1, qword [0x1002da00]
comisd xmm0, xmm1
jbe 0x1000aaba
mov esi, str._15s
jmp 0x1000ab6b
movsd xmm0, qword [0x1002d9c0]
comisd xmm0, xmm1
jbe 0x1000aad2
mov esi, str.15_35s
jmp 0x1000ab6b
movsd xmm0, qword [0x1002d9c8]
comisd xmm0, xmm1
jbe 0x1000aaea
mov esi, str.35_60s
jmp 0x1000ab6b
movsd xmm0, qword [0x1002d9d0]
comisd xmm0, xmm1
jbe 0x1000aaff
mov esi, str.1_2m
jmp 0x1000ab6b
movsd xmm0, qword [0x1002d9d8]
comisd xmm0, xmm1
jbe 0x1000ab14
mov esi, str.2_3m
jmp 0x1000ab6b
movsd xmm0, qword [0x1002d9e0]
comisd xmm0, xmm1
jbe 0x1000ab29
mov esi, str.3_5m
jmp 0x1000ab6b
movsd xmm0, qword [0x1002d9e8]
comisd xmm0, xmm1
jbe 0x1000ab3e
mov esi, str.5_8m
jmp 0x1000ab6b
movsd xmm0, qword [0x1002d9f0]
comisd xmm0, xmm1
jbe 0x1000ab53
mov esi, str.8_10m
jmp 0x1000ab6b
movsd xmm0, qword [0x1002d9f8]
comisd xmm0, xmm1
mov esi, str.10_15m
ja 0x1000ab6b
mov esi, str._15m
push esi
call fcn.10001084
pop ecx
push eax
push esi
lea ecx, [ebp - 0x4478]
call fcn.10003e3c
push str.watchparam
lea ecx, [ebp - 0x4448]
call fcn.1000268f
lea eax, [ebp - 0x4448]
push eax
lea ecx, [ebp + 8]
call fcn.100029db
push eax
mov ecx, edi
call fcn.1000b363
lea ecx, [ebp - 0x4478]
cmp eax, ecx
je 0x1000abbb
push 0xffffffffffffffff
push ebx
push ecx
mov ecx, eax
call fcn.100034c5
push ebx
push 1
lea ecx, [ebp - 0x4448]
call fcn.1000391b
push ebx
push 1
lea ecx, [ebp - 0x4478]
call fcn.1000391b
push ebx
push 1
lea ecx, [ebp - 0x4430]
call fcn.1000391b
lea ecx, [ebp - 0x4460]
push ebx
push 1
call fcn.1000391b
jmp 0x1000b018
push str.action
lea ecx, [ebp - 0x4460]
call fcn.1000268f
lea eax, [ebp - 0x4460]
push eax
lea ecx, [ebp + 8]
call fcn.100029db
mov edx, str.browser
mov ecx, eax
call fcn.1000c77b
push esi
push 1
lea ecx, [ebp - 0x4460]
mov bl, al
call fcn.1000391b
test bl, bl
je 0x1000b016
push str.browserparam
lea ecx, [ebp - 0x4460]
call fcn.1000268f
lea eax, [ebp - 0x4460]
push eax
lea ecx, [ebp + 8]
call fcn.100029db
push eax
mov ecx, edi
call fcn.1000b363
mov ebx, str.Unknown
push ebx
mov esi, eax
call fcn.10001084
pop ecx
push eax
push ebx
mov ecx, esi
call fcn.10003e3c
xor ebx, ebx
push ebx
push 1
lea ecx, [ebp - 0x4460]
call fcn.1000391b
push ebx
call dword [sym.imp.KERNEL32.dll_SetLastError]
push ebx
push 2
call dword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov ebx, eax
mov dword [ebp - 0x460c], ebx
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0x124
mov dword [ebp - 0x4608], eax
lea eax, [ebp - 0x45fc]
push 0
push eax
call fcn.100151c0
add esp, 0xc
mov dword [ebp - 0x4600], 0x128
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov esi, eax
xor al, al
mov byte [ebp - 0x4601], al
cmp ebx, 0xffffffff
je 0x1000ad39
cmp dword [ebp - 0x4608], 0x18
je 0x1000ad39
test esi, esi
je 0x1000ad39
test al, al
jne 0x1000ad39
lea eax, [ebp - 0x4600]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_Process32First]
test eax, eax
je 0x1000ad39
mov eax, dword [ebp - 0x45f8]
mov dword [ebp - 0x4610], eax
cmp eax, esi
je 0x1000aea5
lea eax, [ebp - 0x4600]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
je 0x1000ad39
mov eax, dword [ebp - 0x45f8]
cmp dword [ebp - 0x4610], eax
jne 0x1000ad11
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov al, byte [ebp - 0x4601]
xor ebx, ebx
test al, al
jne 0x1000b018
lea eax, [ebp - 0x4610]
push eax
push 0x20019
push ebx
push str.http_shellopencommand
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1000b018
lea eax, [ebp - 0x460c]
push eax
lea eax, [ebp - 0x210]
push eax
push ebx
push ebx
push ebx
push dword [ebp - 0x4610]
mov dword [ebp - 0x460c], 0x104
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x1000b018
lea eax, [ebp - 0x210]
push eax
lea ecx, [ebp - 0x4430]
call fcn.1000268f
cmp dword [ebp - 0x441c], 8
mov eax, dword [ebp - 0x4420]
lea ecx, [ebp - 0x4430]
cmovae ecx, dword [ebp - 0x4430]
lea edx, [ebp - 0x4430]
cmovae edx, dword [ebp - 0x4430]
lea eax, [ecx + eax*2]
push edx
lea ecx, [ebp - 0x4430]
cmovae ecx, dword [ebp - 0x4430]
push eax
push ecx
lea ecx, [ebp - 0x4614]
call fcn.1000c9ae
xor eax, eax
sub esp, 0xc
mov word [ebp - 0x4490], ax
lea eax, [ebp - 0x4430]
mov ecx, esp
push eax
mov dword [ebp - 0x447c], 7
mov dword [ebp - 0x4480], ebx
call fcn.10002667
lea ecx, [ebp - 0x4490]
call fcn.10009eea
add esp, 0x18
test al, al
je 0x1000ae9a
mov esi, str.__Default_
push esi
call fcn.10001084
pop ecx
push eax
push esi
lea ecx, [ebp - 0x4490]
call fcn.1000bd26
push str.browserparam
lea ecx, [ebp - 0x4460]
call fcn.1000268f
lea eax, [ebp - 0x4460]
push eax
lea ecx, [ebp + 8]
call fcn.100029db
push eax
mov ecx, edi
call fcn.1000b363
lea ecx, [ebp - 0x4490]
cmp eax, ecx
je 0x1000ae8c
push 0xffffffffffffffff
push ebx
push ecx
mov ecx, eax
call fcn.100034c5
push ebx
push 1
lea ecx, [ebp - 0x4460]
call fcn.1000391b
lea ecx, [ebp - 0x4490]
jmp 0x1000a152
push eax
push 0
push 0x410
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov ebx, eax
test ebx, ebx
je 0x1000afff
push 0x104
lea eax, [ebp - 0x418]
push eax
push 0
push ebx
call dword [sym.imp.PSAPI.DLL_GetModuleFileNameExW]
push ebx
mov esi, eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test esi, esi
je 0x1000afff
lea eax, [ebp - 0x418]
push eax
lea ecx, [ebp - 0x4430]
call fcn.1000268f
cmp dword [ebp - 0x441c], 8
mov eax, dword [ebp - 0x4420]
lea ecx, [ebp - 0x4430]
cmovae ecx, dword [ebp - 0x4430]
lea edx, [ebp - 0x4430]
cmovae edx, dword [ebp - 0x4430]
lea eax, [ecx + eax*2]
push edx
lea ecx, [ebp - 0x4430]
cmovae ecx, dword [ebp - 0x4430]
push eax
push ecx
lea ecx, [ebp - 0x4614]
call fcn.1000c9ae
xor eax, eax
sub esp, 0xc
mov word [ebp - 0x44a8], ax
lea eax, [ebp - 0x4430]
mov ecx, esp
xor ebx, ebx
push eax
mov dword [ebp - 0x4494], 7
mov dword [ebp - 0x4498], ebx
call fcn.10002667
lea ecx, [ebp - 0x44a8]
call fcn.10009eea
add esp, 0x18
test al, al
je 0x1000afe3
mov esi, str.__Launched_
push esi
call fcn.10001084
pop ecx
push eax
push esi
lea ecx, [ebp - 0x44a8]
call fcn.1000bd26
push str.browserparam
lea ecx, [ebp - 0x4460]
call fcn.1000268f
lea eax, [ebp - 0x4460]
push eax
lea ecx, [ebp + 8]
call fcn.100029db
push eax
mov ecx, edi
call fcn.1000b363
lea ecx, [ebp - 0x44a8]
cmp eax, ecx
je 0x1000afcd
push 0xffffffffffffffff
push ebx
push ecx
mov ecx, eax
call fcn.100034c5
push ebx
push 1
lea ecx, [ebp - 0x4460]
call fcn.1000391b
mov al, 1
mov byte [ebp - 0x4601], al
push ebx
push 1
lea ecx, [ebp - 0x44a8]
call fcn.1000391b
push ebx
push 1
lea ecx, [ebp - 0x4430]
call fcn.1000391b
mov esi, dword [ebp - 0x45e8]
mov ebx, dword [ebp - 0x460c]
mov al, byte [ebp - 0x4601]
jmp 0x1000ace2
xor ebx, ebx
push ebx
push 1
lea ecx, [ebp - 0x44c0]
call fcn.1000391b
lea ecx, [ebp + 0x10]
call fcn.10003aec
lea ecx, [ebp + 8]
call fcn.100046f0
push dword [ebp + 8]
call fcn.100106af
pop ecx
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.1000fc16
leave
ret