Function at 0x1000a08e
Capabilities:
Check for time delay via gettickcount
Check mutex on windows
Enumerate processes
Get geographical location
Identify system language via api
Persist via default file association registry key
Query or enumerate registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x464c
call fcn.10022b30
mov eax, dword [0x100345f0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov edi, ecx
push str.publisherpluginstopwatch_
lea ecx, [ebp - 0x44cc]
mov dword [ebp - 0x4638], edi
call fcn.1000268f
mov esi, str.action
push esi
lea ecx, [ebp - 0x4430]
call fcn.1000268f
lea eax, [ebp - 0x4430]
push eax
lea ecx, [ebp + 8]
call fcn.100029db
mov edx, str.collect
mov ecx, eax
call fcn.1000ca06
push 0
push 1
lea ecx, [ebp - 0x4430]
mov bl, al
call fcn.1000391b
lea ecx, [ebp - 0x4430]
test bl, bl
je 0x1000a1b6
push str.collectparam
call fcn.1000268f
lea eax, [ebp - 0x4430]
push eax
lea ecx, [ebp + 8]
call fcn.100029db
push eax
mov ecx, edi
call fcn.1000b5ee
mov ebx, 0x1002eeb0
push ebx
mov esi, eax
call fcn.10001084
pop ecx
push eax
push ebx
mov ecx, esi
call fcn.10003e3c
xor ebx, ebx
push ebx
push 1
lea ecx, [ebp - 0x4430]
call fcn.1000391b
push str.collectparam
lea ecx, [ebp - 0x4430]
call fcn.1000268f
sub esp, 0x20
mov ecx, esp
push edi
call fcn.1000b5a2
lea ecx, [ebp - 0x4460]
call fcn.1000203e
add esp, 0x20
push eax
push ecx
lea eax, [ebp - 0x4430]
push eax
lea ecx, [ebp + 8]
call fcn.100029db
push eax
mov ecx, edi
call fcn.1000b5ee
pop ecx
mov ecx, eax
call fcn.100026e5
lea ecx, [ebp - 0x4460]
push ebx
push 1
call fcn.1000391b
lea ecx, [ebp - 0x4430]
jmp 0x1000aef1
push esi
call fcn.1000268f
lea eax, [ebp - 0x4430]
push eax
lea ecx, [ebp + 8]
call fcn.100029db
mov edx, str.country
mov ecx, eax
call fcn.1000ca06
xor esi, esi
push esi
push 1
lea ecx, [ebp - 0x4430]
mov bl, al
call fcn.1000391b
lea ecx, [ebp - 0x4430]
test bl, bl
je 0x1000a2b8
push str.country
call fcn.1000268f
lea eax, [ebp - 0x4430]
push eax
lea ecx, [ebp + 8]
call fcn.100029db
push eax
mov ecx, edi
call fcn.1000b5ee
mov ebx, str.Unknown
push ebx
mov esi, eax
call fcn.10001084
pop ecx
push eax
push ebx
mov ecx, esi
call fcn.10003e3c
xor ebx, ebx
push ebx
push 1
lea ecx, [ebp - 0x4430]
call fcn.1000391b
push 0x10
call dword [sym.imp.KERNEL32.dll_GetUserGeoID]
cmp eax, 0xffffffff
je 0x1000b2a3
push ebx
push 0x2000
lea ecx, [ebp - 0x4418]
push ecx
push 5
push eax
call dword [sym.imp.KERNEL32.dll_GetGeoInfoW]
test eax, eax
je 0x1000b2a3
push str.country
lea ecx, [ebp - 0x4430]
call fcn.1000268f
lea eax, [ebp - 0x4430]
push eax
lea ecx, [ebp + 8]
call fcn.100029db
push eax
mov ecx, edi
call fcn.1000b5ee
mov esi, eax
lea eax, [ebp - 0x4418]
push eax
call fcn.10001084
pop ecx
push eax
lea eax, [ebp - 0x4418]
push eax
mov ecx, esi
call fcn.10003e3c
jmp 0x1000a1ab
push str.action
call fcn.1000268f
lea eax, [ebp - 0x4430]
push eax
lea ecx, [ebp + 8]
call fcn.100029db
mov edx, str.region
mov ecx, eax
call fcn.1000ca06
push esi
push 1
lea ecx, [ebp - 0x4430]
mov bl, al
call fcn.1000391b
lea ecx, [ebp - 0x4430]
test bl, bl
je 0x1000a425
push str.region
call fcn.1000268f
lea eax, [ebp - 0x4430]
push eax
lea ecx, [ebp + 8]
call fcn.100029db
push eax
mov ecx, edi
call fcn.1000b5ee
mov ebx, str.Unknown
push ebx
mov esi, eax
call fcn.10001084
pop ecx
push eax
push ebx
mov ecx, esi
call fcn.10003e3c
push 0
push 1
lea ecx, [ebp - 0x4430]
call fcn.1000391b
push 9
pop ebx
push ebx
lea eax, [ebp - 0x4558]
push eax
push 0x59
push 0x400
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
mov esi, eax
test esi, esi
je 0x1000b2a1
push 0x2d
pop eax
lea ecx, [ebp - 0x4558]
push ebx
lea ecx, [ecx + esi*2]
push ecx
push 0x5a
push 0x400
mov word [ecx - 2], ax
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
add esi, eax
je 0x1000b2a1
push 0x2f
pop ecx
lea eax, [ebp - 0x4558]
push ebx
lea eax, [eax + esi*2]
push eax
push 0x59
push 0x800
mov word [eax - 2], cx
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
add esi, eax
je 0x1000b2a1
push 0x2d
pop ecx
lea eax, [ebp - 0x4558]
push ebx
lea eax, [eax + esi*2]
push eax
push 0x5a
push 0x800
mov word [eax - 2], cx
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
add eax, esi
je 0x1000b2a1
push str.region
lea ecx, [ebp - 0x4430]
call fcn.1000268f
lea eax, [ebp - 0x4430]
push eax
lea ecx, [ebp + 8]
call fcn.100029db
push eax
mov ecx, edi
call fcn.1000b5ee
mov esi, eax
lea eax, [ebp - 0x4558]
push eax
call fcn.10001084
pop ecx
push eax
lea eax, [ebp - 0x4558]
push eax
mov ecx, esi
call fcn.10003e3c
xor ebx, ebx
jmp 0x1000a1ab
push str.action
call fcn.1000268f
lea eax, [ebp - 0x4430]
push eax
lea ecx, [ebp + 8]
call fcn.100029db
mov edx, str.uilanguage
mov ecx, eax
call fcn.1000ca06
push esi
push 1
lea ecx, [ebp - 0x4430]
mov bl, al
call fcn.1000391b
lea ecx, [ebp - 0x4430]
test bl, bl
je 0x1000a532
push str.uilanguage
call fcn.1000268f
lea eax, [ebp - 0x4430]
push eax
lea ecx, [ebp + 8]
call fcn.100029db
push eax
mov ecx, edi
call fcn.1000b5ee
mov ebx, str.Unknown
push ebx
mov esi, eax
call fcn.10001084
pop ecx
push eax
push ebx
mov ecx, esi
call fcn.10003e3c
xor ebx, ebx
push ebx
push 1
lea ecx, [ebp - 0x4430]
call fcn.1000391b
xor eax, eax
push 0x3ffe
mov word [ebp - 0x4418], ax
lea eax, [ebp - 0x4416]
push ebx
push eax
call fcn.10015ba0
add esp, 0xc
lea eax, [ebp - 0x4418]
push 0x2000
push eax
push 0x1001
call dword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
mov esi, dword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
movzx eax, ax
push eax
call esi
test eax, eax
je 0x1000b2a3
push 0x2f
lea ecx, [ebp - 0x4418]
lea eax, [ecx + eax*2]
pop ecx
push 0x2000
push eax
push 0x1001
mov word [eax - 2], cx
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultUILanguage]
movzx eax, ax
push eax
call esi
test eax, eax
je 0x1000b2a3
push str.uilanguage
jmp 0x1000a273
push str.action
call fcn.1000268f
lea eax, [ebp - 0x4430]
push eax
lea ecx, [ebp + 8]
call fcn.100029db
mov edx, str.pcinfo
mov ecx, eax
call fcn.1000ca06
push esi
push 1
lea ecx, [ebp - 0x4430]
mov bl, al
call fcn.1000391b
lea ecx, [ebp - 0x4430]
test bl, bl
je 0x1000a624
push str.pcinfo
call fcn.1000268f
lea eax, [ebp - 0x4430]
push eax
lea ecx, [ebp + 8]
call fcn.100029db
push eax
mov ecx, edi
call fcn.1000b5ee
mov ebx, 0x1002eeb0
push ebx
mov esi, eax
call fcn.10001084
pop ecx
push eax
push ebx
mov ecx, esi
call fcn.10003e3c
xor ebx, ebx
push ebx
push 1
lea ecx, [ebp - 0x4430]
call fcn.1000391b
lea ecx, [ebp - 0x4448]
call fcn.1000e312
push str.pcinfo
lea ecx, [ebp - 0x4430]
call fcn.1000268f
cmp dword [ebp - 0x4434], 8
lea eax, [ebp - 0x4430]
lea edi, [ebp - 0x4448]
cmovae edi, dword [ebp - 0x4448]
push eax
lea ecx, [ebp + 8]
call fcn.100029db
mov ecx, dword [ebp - 0x4638]
push eax
call fcn.1000b5ee
push edi
mov esi, eax
call fcn.10001084
pop ecx
push eax
push edi
mov ecx, esi
call fcn.10003e3c
lea ecx, [ebp - 0x4430]
jmp 0x1000aee3
push str.action
call fcn.1000268f
lea eax, [ebp - 0x4430]
push eax
lea ecx, [ebp + 8]
call fcn.100029db
mov edx, str.watchstart
mov ecx, eax
call fcn.1000ca06
push esi
push 1
lea ecx, [ebp - 0x4430]
mov bl, al
call fcn.1000391b
lea ecx, [ebp - 0x4430]
test bl, bl
je 0x1000a72e
push str.watchparam
call fcn.1000268f
lea eax, [ebp - 0x4430]
push eax
lea ecx, [ebp + 8]
call fcn.100029db
push eax
lea edx, [ebp - 0x44cc]
lea ecx, [ebp - 0x4448]
call fcn.1000ca28
pop ecx
xor ebx, ebx
push ebx
push 1
lea ecx, [ebp - 0x4430]
call fcn.1000391b
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push ecx
push ecx
lea ecx, [ebp - 0x45a0]
mov esi, eax
call fcn.1000b67c
push esi
lea ecx, [ebp - 0x45a0]
call fcn.1000b4d9
lea eax, [ebp - 0x44e4]
push eax
lea ecx, [ebp - 0x45a0]
call fcn.1000b759
lea eax, [ebp - 0x4448]
push eax
mov ecx, edi
call fcn.1000b5ee
lea ecx, [ebp - 0x44e4]
cmp eax, ecx
je 0x1000a6f9
push 0xffffffffffffffff
push ebx
push ecx
mov ecx, eax
call fcn.100034c5
push ebx
push 1
lea ecx, [ebp - 0x44e4]
call fcn.1000391b
lea ecx, [ebp - 0x4550]
call fcn.1000b716
lea eax, [ebp - 0x4550]
push eax
mov dword [ebp - method.std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__.virtual_0], vtable.std::ios_base.0
call fcn.1000f94c
pop ecx
jmp 0x1000aeeb
push str.action
call fcn.1000268f
lea eax, [ebp - 0x4430]
push eax
lea ecx, [ebp + 8]
call fcn.100029db
mov edx, str.mutex
mov ecx, eax
call fcn.1000ca06
push esi
push 1
lea ecx, [ebp - 0x4430]
mov bl, al
call fcn.1000391b
test bl, bl
je 0x1000a7d5
xor ebx, ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetLastError]
push str.LocalACBF783A_DDB7_496C_B9CA_2F34DAD4933F
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
push str.mutex
lea ecx, [ebp - 0x4430]
setne bl
call fcn.1000268f
mov eax, str.FALSE
mov edi, str.TRUE
test bl, bl
cmove edi, eax
lea eax, [ebp - 0x4430]
push eax
lea ecx, [ebp + 8]
call fcn.100029db
mov ecx, dword [ebp - 0x4638]
push eax
call fcn.1000b5ee
push edi
mov esi, eax
call fcn.10001084
pop ecx
push eax
push edi
jmp 0x1000a417
push str.action
lea ecx, [ebp - 0x4430]
call fcn.1000268f
lea eax, [ebp - 0x4430]
push eax
lea ecx, [ebp + 8]
call fcn.100029db
mov edx, str.screensize
mov ecx, eax
call fcn.1000ca06
push esi
push 1
lea ecx, [ebp - 0x4430]
mov bl, al
call fcn.1000391b
test bl, bl
je 0x1000a8e5
mov esi, dword [sym.imp.USER32.dll_GetSystemMetrics]
xor ebx, ebx
push ebx
call esi
push 1
mov edi, eax
call esi
push ecx
push ecx
lea ecx, [ebp - 0x45a0]
mov esi, eax
call fcn.1000b67c
push edi
lea ecx, [ebp - 0x45a0]
call fcn.1000b410
lea ecx, [ebp - 0x45a0]
call fcn.1000ca8a
push esi
lea ecx, [ebp - 0x45a0]
call fcn.1000b410
push str.screensize
lea ecx, [ebp - 0x4430]
call fcn.1000268f
lea eax, [ebp - 0x4460]
push eax
lea ecx, [ebp - 0x45a0]
call fcn.1000b759
push eax
push ecx
lea eax, [ebp - 0x4430]
push eax
lea ecx, [ebp + 8]
call fcn.100029db
mov ecx, dword [ebp - 0x4638]
push eax
call fcn.1000b5ee
pop ecx
mov ecx, eax
call fcn.100026e5
push ebx
push 1
lea ecx, [ebp - 0x4460]
call fcn.1000391b
push ebx
push 1
lea ecx, [ebp - 0x4430]
call fcn.1000391b
lea ecx, [ebp - 0x4550]
call fcn.1000b716
lea eax, [ebp - 0x4550]
push eax
mov dword [ebp - method.std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__.virtual_0], vtable.std::ios_base.0
call fcn.1000f94c
pop ecx
jmp 0x1000b2a3
push str.action
lea ecx, [ebp - 0x4430]
call fcn.1000268f
lea eax, [ebp - 0x4430]
push eax
lea ecx, [ebp + 8]
call fcn.100029db
mov edx, 0x1002f490
mov ecx, eax
call fcn.1000ca06
push esi
push 1
lea ecx, [ebp - 0x4430]
mov bl, al
call fcn.1000391b
lea ecx, [ebp - 0x4430]
test bl, bl
je 0x1000aa08
push str.upgradeCode
call fcn.1000268f
lea eax, [ebp - 0x4430]
push eax
lea ecx, [ebp + 8]
call fcn.100029db
push eax
lea ecx, [ebp - 0x4448]
call fcn.10002667
xor ebx, ebx
push ebx
push 1
lea ecx, [ebp - 0x4430]
call fcn.1000391b
cmp dword [ebp - 0x4434], 8
lea ecx, [ebp - 0x4558]
push ecx
push ebx
lea eax, [ebp - 0x4448]
cmovae eax, dword [ebp - 0x4448]
push ebx
push eax
call dword [sym.imp.msi.dll_MsiSourceListClearAllW]
push str.productCode
lea ecx, [ebp - 0x4430]
test eax, eax
jne 0x1000a9ce
call fcn.1000268f
lea eax, [ebp - 0x4430]
push eax
lea ecx, [ebp + 8]
call fcn.100029db
push eax
mov ecx, edi
call fcn.1000b5ee
mov esi, eax
lea eax, [ebp - 0x4558]
push eax
call fcn.10001084
pop ecx
push eax
lea eax, [ebp - 0x4558]
push eax
jmp 0x1000a612
call fcn.1000268f
lea eax, [ebp - 0x4430]
push eax
lea ecx, [ebp + 8]
call fcn.100029db
push eax
mov ecx, edi
call fcn.1000b5ee
mov ebx, 0x1002eeb0
push ebx
mov esi, eax
call fcn.10001084
pop ecx
push eax
push ebx
mov ecx, esi
call fcn.10003e3c
xor ebx, ebx
jmp 0x1000a619
push str.action
call fcn.1000268f
lea eax, [ebp - 0x4430]
push eax
lea ecx, [ebp + 8]
call fcn.100029db
mov edx, str.watchstop
mov ecx, eax
call fcn.1000ca06
push esi
push 1
lea ecx, [ebp - 0x4430]
mov bl, al
call fcn.1000391b
test bl, bl
je 0x1000ac3b
push str.watchparam
lea ecx, [ebp - 0x4430]
call fcn.1000268f
lea eax, [ebp - 0x4430]
push eax
lea ecx, [ebp + 8]
call fcn.100029db
push eax
lea edx, [ebp - 0x44cc]
lea ecx, [ebp - 0x4460]
call fcn.1000ca28
pop ecx
xor ebx, ebx
push ebx
push 1
lea ecx, [ebp - 0x4430]
call fcn.1000391b
lea eax, [ebp - 0x4460]
push eax
mov ecx, edi
call fcn.1000b5ee
push eax
lea ecx, [ebp - 0x4448]
call fcn.10002667
push ecx
lea ecx, [ebp - 0x4448]
call fcn.10009e91
pop ecx
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, esi
movd xmm1, eax
cvtdq2pd xmm1, xmm1
shr eax, 0x1f
movsd xmm0, qword [0x1002fa60]
addsd xmm1, qword [eax*8 + 0x1002fac0]
xor eax, eax
mov dword [ebp - 0x4470], 7
mov dword [ebp - 0x4474], ebx
mov word [ebp - 0x4484], ax
divsd xmm1, qword [0x1002faa8]
comisd xmm0, xmm1
jbe 0x1000ab05
mov esi, str._15s
jmp 0x1000abb6
movsd xmm0, qword [0x1002fa68]
comisd xmm0, xmm1
jbe 0x1000ab1d
mov esi, str.15_35s
jmp 0x1000abb6
movsd xmm0, qword [0x1002fa70]
comisd xmm0, xmm1
jbe 0x1000ab35
mov esi, str.35_60s
jmp 0x1000abb6
movsd xmm0, qword [0x1002fa78]
comisd xmm0, xmm1
jbe 0x1000ab4a
mov esi, str.1_2m
jmp 0x1000abb6
movsd xmm0, qword [0x1002fa80]
comisd xmm0, xmm1
jbe 0x1000ab5f
mov esi, str.2_3m
jmp 0x1000abb6
movsd xmm0, qword [0x1002fa88]
comisd xmm0, xmm1
jbe 0x1000ab74
mov esi, str.3_5m
jmp 0x1000abb6
movsd xmm0, qword [0x1002fa90]
comisd xmm0, xmm1
jbe 0x1000ab89
mov esi, str.5_8m
jmp 0x1000abb6
movsd xmm0, qword [0x1002fa98]
comisd xmm0, xmm1
jbe 0x1000ab9e
mov esi, str.8_10m
jmp 0x1000abb6
movsd xmm0, qword [0x1002faa0]
comisd xmm0, xmm1
mov esi, str.10_15m
ja 0x1000abb6
mov esi, str._15m
push esi
call fcn.10001084
pop ecx
push eax
push esi
lea ecx, [ebp - 0x4484]
call fcn.10003e3c
push str.watchparam
lea ecx, [ebp - 0x4430]
call fcn.1000268f
lea eax, [ebp - 0x4430]
push eax
lea ecx, [ebp + 8]
call fcn.100029db
push eax
mov ecx, edi
call fcn.1000b5ee
lea ecx, [ebp - 0x4484]
cmp eax, ecx
je 0x1000ac06
push 0xffffffffffffffff
push ebx
push ecx
mov ecx, eax
call fcn.100034c5
push ebx
push 1
lea ecx, [ebp - 0x4430]
call fcn.1000391b
push ebx
push 1
lea ecx, [ebp - 0x4484]
call fcn.1000391b
push ebx
push 1
lea ecx, [ebp - 0x4448]
call fcn.1000391b
lea ecx, [ebp - 0x4460]
jmp 0x1000aef1
push str.action
lea ecx, [ebp - 0x4460]
call fcn.1000268f
lea eax, [ebp - 0x4460]
push eax
lea ecx, [ebp + 8]
call fcn.100029db
mov edx, str.browser
mov ecx, eax
call fcn.1000ca06
push esi
push 1
lea ecx, [ebp - 0x4460]
mov bl, al
call fcn.1000391b
lea ecx, [ebp - 0x4460]
test bl, bl
je 0x1000b06f
push str.browserparam
call fcn.1000268f
lea eax, [ebp - 0x4460]
push eax
lea ecx, [ebp + 8]
call fcn.100029db
push eax
mov ecx, edi
call fcn.1000b5ee
mov ebx, str.Unknown
push ebx
mov esi, eax
call fcn.10001084
pop ecx
push eax
push ebx
mov ecx, esi
call fcn.10003e3c
xor ebx, ebx
push ebx
push 1
lea ecx, [ebp - 0x4460]
call fcn.1000391b
push ebx
call dword [sym.imp.KERNEL32.dll_SetLastError]
push ebx
push 2
call dword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov ebx, eax
mov dword [ebp - 0x4644], ebx
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0x124
mov dword [ebp - 0x4638], eax
lea eax, [ebp - 0x462c]
push 0
push eax
call fcn.10015ba0
add esp, 0xc
mov dword [ebp - 0x4630], 0x128
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov esi, eax
xor al, al
mov byte [ebp - 0x4631], al
cmp ebx, 0xffffffff
je 0x1000ad7c
cmp dword [ebp - 0x4638], 0x18
je 0x1000ad7c
test esi, esi
je 0x1000ad7c
test al, al
jne 0x1000ad7c
lea eax, [ebp - 0x4630]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_Process32First]
test eax, eax
je 0x1000ad7c
mov eax, dword [ebp - 0x4628]
mov dword [ebp - 0x463c], eax
cmp eax, esi
je 0x1000aefe
lea eax, [ebp - 0x4630]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
je 0x1000ad7c
mov eax, dword [ebp - 0x4628]
cmp dword [ebp - 0x463c], eax
jne 0x1000ad54
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov al, byte [ebp - 0x4631]
xor ebx, ebx
test al, al
jne 0x1000b2a3
lea eax, [ebp - 0x463c]
push eax
push 0x20019
push ebx
push str.http_shellopencommand
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1000b2a3
lea eax, [ebp - 0x4644]
push eax
lea eax, [ebp - 0x418]
push eax
push ebx
push ebx
push ebx
push dword [ebp - 0x463c]
mov dword [ebp - 0x4644], 0x104
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x1000b2a3
lea eax, [ebp - 0x418]
push eax
lea ecx, [ebp - 0x4448]
call fcn.1000268f
cmp dword [ebp - 0x4434], 8
mov eax, dword [ebp - 0x4438]
lea ecx, [ebp - 0x4448]
cmovae ecx, dword [ebp - 0x4448]
lea edx, [ebp - 0x4448]
cmovae edx, dword [ebp - 0x4448]
lea eax, [ecx + eax*2]
push edx
lea ecx, [ebp - 0x4448]
cmovae ecx, dword [ebp - 0x4448]
push eax
push ecx
lea ecx, [ebp - 0x4640]
call fcn.1000cc39
xor eax, eax
sub esp, 0xc
mov word [ebp - 0x449c], ax
lea eax, [ebp - 0x4448]
mov ecx, esp
push eax
mov dword [ebp - 0x4488], 7
mov dword [ebp - 0x448c], ebx
call fcn.10002667
lea ecx, [ebp - 0x449c]
call fcn.10009f3b
add esp, 0x18
test al, al
je 0x1000aedd
mov esi, str.__Default_
push esi
call fcn.10001084
pop ecx
push eax
push esi
lea ecx, [ebp - 0x449c]
call fcn.1000bfb1
push str.browserparam
lea ecx, [ebp - 0x4460]
call fcn.1000268f
lea eax, [ebp - 0x4460]
push eax
lea ecx, [ebp + 8]
call fcn.100029db
push eax
mov ecx, edi
call fcn.1000b5ee
lea ecx, [ebp - 0x449c]
cmp eax, ecx
je 0x1000aecf
push 0xffffffffffffffff
push ebx
push ecx
mov ecx, eax
call fcn.100034c5
push ebx
push 1
lea ecx, [ebp - 0x4460]
call fcn.1000391b
lea ecx, [ebp - 0x449c]
push ebx
push 1
call fcn.1000391b
lea ecx, [ebp - 0x4448]
push ebx
push 1
call fcn.1000391b
jmp 0x1000b2a3
push eax
push 0
push 0x410
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov ebx, eax
test ebx, ebx
je 0x1000b058
push 0x104
lea eax, [ebp - 0x210]
push eax
push 0
push ebx
call dword [sym.imp.PSAPI.DLL_GetModuleFileNameExW]
push ebx
mov esi, eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test esi, esi
je 0x1000b058
lea eax, [ebp - 0x210]
push eax
lea ecx, [ebp - 0x4448]
call fcn.1000268f
cmp dword [ebp - 0x4434], 8
mov eax, dword [ebp - 0x4438]
lea ecx, [ebp - 0x4448]
cmovae ecx, dword [ebp - 0x4448]
lea edx, [ebp - 0x4448]
cmovae edx, dword [ebp - 0x4448]
lea eax, [ecx + eax*2]
push edx
lea ecx, [ebp - 0x4448]
cmovae ecx, dword [ebp - 0x4448]
push eax
push ecx
lea ecx, [ebp - 0x4640]
call fcn.1000cc39
xor eax, eax
sub esp, 0xc
mov word [ebp - 0x44b4], ax
lea eax, [ebp - 0x4448]
mov ecx, esp
xor ebx, ebx
push eax
mov dword [ebp - 0x44a0], 7
mov dword [ebp - 0x44a4], ebx
call fcn.10002667
lea ecx, [ebp - 0x44b4]
call fcn.10009f3b
add esp, 0x18
test al, al
je 0x1000b03c
mov esi, str.__Launched_
push esi
call fcn.10001084
pop ecx
push eax
push esi
lea ecx, [ebp - 0x44b4]
call fcn.1000bfb1
push str.browserparam
lea ecx, [ebp - 0x4460]
call fcn.1000268f
lea eax, [ebp - 0x4460]
push eax
lea ecx, [ebp + 8]
call fcn.100029db
push eax
mov ecx, edi
call fcn.1000b5ee
lea ecx, [ebp - 0x44b4]
cmp eax, ecx
je 0x1000b026
push 0xffffffffffffffff
push ebx
push ecx
mov ecx, eax
call fcn.100034c5
push ebx
push 1
lea ecx, [ebp - 0x4460]
call fcn.1000391b
mov al, 1
mov byte [ebp - 0x4631], al
push ebx
push 1
lea ecx, [ebp - 0x44b4]
call fcn.1000391b
push ebx
push 1
lea ecx, [ebp - 0x4448]
call fcn.1000391b
mov esi, dword [ebp - 0x4618]
mov ebx, dword [ebp - 0x4644]
mov al, byte [ebp - 0x4631]
jmp 0x1000ad25
push str.action
call fcn.1000268f
lea eax, [ebp - 0x4460]
push eax
lea ecx, [ebp + 8]
call fcn.100029db
mov edx, str.mixpanelUserId
mov ecx, eax
call fcn.1000ca06
push 0
push 1
lea ecx, [ebp - 0x4460]
mov bl, al
call fcn.1000391b
test bl, bl
je 0x1000b2a1
xor ebx, ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetLastError]
or dword [ebp - 0x463c], 0xffffffff
push 0x1002eeb0
lea ecx, [ebp - 0x4430]
call fcn.1000268f
push 0xa
pop ecx
xor eax, eax
lea edi, [ebp - 0x4530]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x4638]
push eax
push 0x20019
push ebx
push str.SoftwareFlippingBookMixpanel
push SysReAllocString
mov dword [ebp - 0x4640], 0x28
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1000b17b
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea eax, [ebp - 0x4644]
push eax
lea eax, [ebp - 0x463c]
push eax
push ebx
push ebx
push str.UserId
push dword [ebp - 0x4638]
mov dword [ebp - 0x4644], 4
call esi
test eax, eax
je 0x1000a1ab
lea eax, [ebp - 0x4640]
push eax
lea eax, [ebp - 0x4530]
push eax
push ebx
push ebx
push str.TrialUserId
push dword [ebp - 0x4638]
call esi
test eax, eax
jne 0x1000b17b
lea eax, [ebp - 0x4530]
push eax
call fcn.10001084
pop ecx
push eax
lea eax, [ebp - 0x4530]
push eax
lea ecx, [ebp - 0x4430]
call fcn.10003e3c
cmp dword [ebp - 0x4420], ebx
jne 0x1000a1ab
push 9
pop ebx
xor eax, eax
mov ecx, ebx
lea edi, [ebp - 0x446c]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x4508]
mov ecx, ebx
lea esi, [ebp - 0x446c]
lea edi, [ebp - 0x4508]
rep movsd dword es:[edi], dword [esi]
push eax
mov dword [ebp - 0x44fc], 1
mov dword [ebp - 0x44f8], ebx
mov dword [ebp - 0x44f4], 0x7b
call fcn.10010e21
pop ecx
xor ebx, ebx
push ebx
mov edi, eax
mov esi, edx
call fcn.1001139d
pop ecx
push esi
push edi
push edx
push eax
call fcn.10011356
fstp qword [ebp - 0x4648]
cvttsd2si edx, qword [ebp - 0x4648]
lea ecx, [ebp - 0x4460]
call fcn.10009ee4
push eax
lea ecx, [ebp - 0x4448]
call fcn.1000cc7f
add esp, 0x14
lea ecx, [ebp - 0x4460]
push ebx
push 1
call fcn.1000391b
mov eax, dword [ebp - 0x4438]
cmp dword [ebp - 0x4434], 8
lea edi, [eax*2 + 2]
lea eax, [ebp - 0x4638]
push eax
push 0x20006
push ebx
push str.SoftwareFlippingBookMixpanel
lea esi, [ebp - 0x4448]
cmovae esi, dword [ebp - 0x4448]
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x1000b280
push ebx
lea eax, [ebp - 0x4638]
push eax
push ebx
push 0x20006
push ebx
push ebx
push ebx
push str.SoftwareFlippingBookMixpanel
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
test eax, eax
jne 0x1000b296
push edi
push esi
push 1
push ebx
push str.TrialUserId
push dword [ebp - 0x4638]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea ecx, [ebp - 0x4448]
jmp 0x1000a1a3
xor ebx, ebx
push ebx
push 1
lea ecx, [ebp - 0x44cc]
call fcn.1000391b
lea ecx, [ebp + 0x10]
call fcn.10003aec
lea ecx, [ebp + 8]
call fcn.100046f0
push dword [ebp + 8]
call fcn.10010a0f
pop ecx
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.1000ff78
leave
ret