Function at 0x1003c081
Capabilities:
Check for time delay via gettickcount
Terminate process

Disassembly:
push ebp
lea ebp, [esp - 0x39a8]
mov eax, 0x3a28
call fcn.10044f70
mov eax, dword [0x10083adc]
xor eax, ebp
mov dword [ebp + 0x39a4], eax
mov eax, ecx
push ebx
mov ebx, dword [ebp + 0x39bc]
mov dword [ebp - 0x6c], eax
add eax, 0x58
push esi
mov esi, dword [ebp + 0x39b8]
push eax
mov dword [ebp - 0x68], esi
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x64], eax
call fcn.10015361
pop ecx
test al, al
je 0x1003c0d1
xor eax, eax
jmp 0x1003cd75
cmp dword [0x1015568c], 0
mov eax, dword [ebp + 0x39b4]
mov dword [ebp - 0x60], eax
je 0x1003c0f4
push ebx
push esi
push str.SendInfoDisplay_Subject__s_To__s_
push 0
call fcn.1004122a
add esp, 0x10
mov eax, esi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x1003c0f9
sub eax, edx
cmp eax, 0x2800
jbe 0x1003c10f
mov byte [esi + 0x2800], cl
push 0x7c
push esi
jmp 0x1003c11b
mov byte [eax], 0x20
push 0x7c
inc eax
push eax
call fcn.10044a60
pop ecx
pop ecx
test eax, eax
jne 0x1003c114
mov eax, dword [ebp + 0x39b0]
push edi
mov edi, 0x10180de0
mov ecx, 0x200
test dword [0x1015687c], eax
je 0x1003c3a0
test dword [0x1016ed68], ecx
je 0x1003c175
cmp byte [0x1016ed70], 0
je 0x1003c175
cmp byte [0x10094eb0], 0
je 0x1003c175
push 0x10094eb0
push 0x1016ed70
call dword [sym.imp.SHLWAPI.dll_StrStrIA]
test eax, eax
jne 0x1003c417
test dword [ebp + 0x39b0], 0x10000000
mov eax, dword [0x1015568c]
je 0x1003c376
cmp eax, 0x11
je 0x1003c194
cmp eax, 0x17
jne 0x1003c1a2
push str.start
push 0
call fcn.1004122a
pop ecx
pop ecx
cmp byte [esi], 0
je 0x1003c9a7
lea eax, [ebp + 0x31a4]
push eax
push esi
call fcn.10037ca1
mov eax, dword [0x1015568c]
pop ecx
pop ecx
push 0x11
pop ebx
cmp eax, ebx
je 0x1003c1cb
cmp eax, 0x17
jne 0x1003c1e7
push 0x1016ef70
lea eax, [ebp + 0x31a4]
push eax
push esi
push str.Subject__s_MyURL__s_g_tc_OKURL__s_
push 0
call fcn.1004122a
add esp, 0x14
cmp byte [0x10180de0], 0
je 0x1003c20b
push edi
push esi
call dword [sym.imp.SHLWAPI.dll_StrStrIA]
test eax, eax
je 0x1003c20b
lea eax, [ebp + 0x31a4]
push edi
push eax
call fcn.1000789a
pop ecx
pop ecx
cmp byte [ebp + 0x31a4], 0
je 0x1003c235
lea eax, [ebp + 0x31a4]
push eax
push edi
call dword [sym.imp.SHLWAPI.dll_StrStrIA]
test eax, eax
je 0x1003c235
mov eax, dword [0x1017fd74]
mov dword [0x10180ddc], eax
jmp 0x1003c9a7
mov eax, dword [0x1016ed68]
xor esi, esi
test eax, 0x10000
je 0x1003c2b9
cmp byte [0x10180de0], 0
je 0x1003c2b9
cmp byte [ebp + 0x31a4], 0
je 0x1003c28c
cmp dword [0x1017a770], esi
je 0x1003c28c
cmp esi, 0x400
jge 0x1003c28c
push dword [esi*4 + 0x1017a770]
lea eax, [ebp + 0x31a4]
push eax
call fcn.10044fa0
pop ecx
pop ecx
test eax, eax
jne 0x1003c417
inc esi
cmp dword [esi*4 + 0x1017a770], eax
jne 0x1003c25d
mov eax, dword [0x1015568c]
mov dword [ebp - 0x60], ebx
cmp eax, ebx
je 0x1003c2a1
cmp eax, 0x17
jne 0x1003c417
push dword [esi*4 + 0x1017a770]
lea eax, [ebp + 0x31a4]
push eax
push str.TC_DT_OKURLISOK__s___s_
jmp 0x1003c342
test eax, 0x20000
je 0x1003c346
cmp byte [0x10180de0], 0
je 0x1003c346
cmp byte [ebp + 0x31a4], 0
je 0x1003c417
cmp dword [0x1017a770], esi
je 0x1003c417
cmp esi, 0x400
jge 0x1003c417
push dword [esi*4 + 0x1017a770]
lea eax, [ebp + 0x31a4]
push eax
call fcn.10044fa0
pop ecx
pop ecx
test eax, eax
jne 0x1003c31a
inc esi
cmp dword [esi*4 + 0x1017a770], eax
jne 0x1003c2e6
jmp 0x1003c417
mov eax, dword [0x1015568c]
mov dword [ebp - 0x60], ebx
cmp eax, ebx
je 0x1003c32f
cmp eax, 0x17
jne 0x1003c417
push dword [esi*4 + 0x1017a770]
lea eax, [ebp + 0x31a4]
push eax
push str.TC_DT_OKURLISBLACK__s___s_
push 0
jmp 0x1003c369
mov eax, dword [0x1015568c]
mov dword [ebp - 0x60], ebx
cmp eax, ebx
je 0x1003c35b
cmp eax, 0x17
jne 0x1003c417
push edi
lea eax, [ebp + 0x31a4]
push eax
push str.MediaType__TYPE_INTERNETURL_ELSE__s___s_
push esi
call fcn.1004122a
add esp, 0x10
jmp 0x1003c417
push 0x11
pop ecx
mov dword [ebp - 0x60], ecx
cmp eax, ecx
je 0x1003c389
cmp eax, 0x17
jne 0x1003c417
push dword [ebp + 0x39b0]
push str.MediaType__d_
push 0
call fcn.1004122a
add esp, 0xc
jmp 0x1003c417
mov eax, dword [0x101570dc]
shl eax, 0xa
cmp eax, dword [ebp + 0x39c0]
ja 0x1003c417
mov eax, dword [0x1016ed68]
test eax, 0x40000
je 0x1003c417
mov esi, 0x10094eb0
test ecx, eax
je 0x1003c3e7
cmp byte [0x1016ed70], 0
je 0x1003c3e7
cmp byte [0x10094eb0], 0
je 0x1003c3e7
push esi
push 0x1016ed70
call dword [sym.imp.SHLWAPI.dll_StrStrIA]
test eax, eax
jne 0x1003c417
cmp dword [0x1015568c], 0x11
mov dword [ebp - 0x60], 0x21
jne 0x1003c417
mov eax, dword [0x101570d4]
push ebx
push esi
push dword [ebp + 0x39c0]
shl eax, 0xa
push eax
push str.SEND_CUTDEVICESIZE12__08x____08x_host:_s_file:_s
push 0
call fcn.1004122a
add esp, 0x18
mov ecx, dword [ebp - 0x6c]
call fcn.1003a4d7
cmp dword [0x1015568c], 0x14
mov edi, 0x400000
jne 0x1003c443
cmp dword [ebp + 0x39b0], edi
jne 0x1003c443
push str.SendInfoDisplay_2
push 0
call fcn.1004122a
pop ecx
pop ecx
cmp dword [0x10156874], 2
push 0x42
pop esi
jne 0x1003c458
test byte [ebp - 0x60], 1
je 0x1003c47e
mov dword [ebp - 0x60], esi
test byte [ebp - 0x60], 1
je 0x1003c47e
cmp byte [0x1015bb48], 0
je 0x1003c47e
push 0x10154a28
push 0x1015bb48
call dword [sym.imp.SHLWAPI.dll_StrStrIA]
test eax, eax
je 0x1003c47e
mov dword [ebp - 0x60], esi
mov ebx, dword [ebp - 0x60]
and ebx, 1
mov dword [ebp - 0x70], ebx
je 0x1003c4a1
mov eax, dword [ebp - 0x6c]
mov byte [eax + 0x50bc], 1
mov byte [eax + 0x1470], 1
mov byte [eax + 0x630c], 1
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp dword [ebp + 0x39b0], edi
jne 0x1003c4f0
cmp dword [0x102b4a4c], 0
jne 0x1003c4c4
call esi
mov dword [0x102b4a4c], eax
jmp 0x1003c9a7
call esi
mov ecx, dword [0x102b4a4c]
add ecx, 0x7d0
cmp ecx, eax
jbe 0x1003c4e9
call esi
mov dword [0x102b4a4c], eax
xor eax, eax
test ebx, ebx
setne al
jmp 0x1003cd74
call esi
mov dword [0x102b4a4c], eax
push dword [ebp - 0x74]
push dword [ebp - 0x68]
call fcn.10010952
pop ecx
pop ecx
test eax, eax
je 0x1003c508
mov eax, ebx
jmp 0x1003cd74
mov esi, 0x1ff
push esi
xor ebx, ebx
lea eax, [ebp + 0x2da5]
push ebx
push eax
mov byte [ebp + 0x2da4], 0
call fcn.10044b80
lea eax, [ebp + 0x2da4]
push 0x200
push eax
call fcn.10007867
mov eax, dword [0x1015085c]
add eax, 0xea60
push eax
mov edi, 0x10061178
lea eax, [ebp + 0x2da4]
push edi
push eax
call fcn.10044ec8
push esi
lea eax, [ebp + 0x2fa5]
push ebx
push eax
mov byte [ebp + 0x2fa4], bl
call fcn.10044b80
push esi
lea eax, [ebp + 0x37a5]
push ebx
push eax
mov byte [ebp + 0x37a4], bl
call fcn.10044b80
push esi
lea eax, [ebp + 0x2ba5]
push ebx
push eax
mov byte [ebp + 0x2ba4], bl
call fcn.10044b80
add esp, 0x44
push 0x2bff
lea eax, [ebp - 0x5b]
push ebx
push eax
mov byte [ebp - 0x5c], bl
call fcn.10044b80
mov eax, dword [0x102b4a40]
cdq
mov ecx, 0xea60
idiv ecx
lea eax, [ebp + 0x2fa4]
push str.SoftWare_trueEP_tc_FileM
push eax
mov ebx, edx
add ebx, 0x64
inc dword [0x102b4a40]
mov dword [ebp - 0x78], ebx
call fcn.10044ec8
push ebx
lea eax, [ebp + 0x2ba4]
push edi
push eax
call fcn.10044ec8
push 0x200
lea eax, [ebp + 0x37a4]
push 0
push eax
call fcn.10044b80
lea eax, [ebp + 0x37a4]
push eax
call fcn.10040e5b
lea eax, [ebp + 0x37a4]
push eax
call fcn.1003839d
add esp, 0x34
cmp dword [0x1015568c], 0
je 0x1003c62a
lea eax, [ebp + 0x37a4]
push eax
push str.SendInfoDisplay_sProcess__s_
push 0
call fcn.1004122a
add esp, 0xc
push esi
lea eax, [ebp + 0x35a5]
push 0
push eax
mov byte [ebp + 0x35a4], 0
call fcn.10044b80
lea eax, [ebp - 0x80]
push eax
call fcn.1004532b
lea eax, [ebp - 0x80]
push eax
call fcn.10045304
add esp, 0x14
test eax, eax
je 0x1003c676
push eax
push str._Y__m__d__H:_M:_S
mov edi, 0x200
lea eax, [ebp + 0x35a4]
push edi
push eax
call fcn.10045fb5
add esp, 0x10
jmp 0x1003c68e
lea eax, [ebp + 0x35a4]
push str.0000
push eax
call fcn.1000789a
pop ecx
pop ecx
mov edi, 0x200
push esi
lea eax, [ebp + 0x33a5]
push 0
push eax
mov byte [ebp + 0x33a4], 0
call fcn.10044b80
mov ebx, dword [ebp + 0x39b0]
add esp, 0xc
test ebx, 0x10000
je 0x1003c7ab
mov esi, 0x10070130
lea edi, [ebp + 0x33a4]
movsd dword es:[edi], dword [esi]
push 0x2a00
movsw word es:[edi], word [esi]
call fcn.10044f63
and dword [ebp - 0x64], 0
mov ebx, eax
mov eax, dword [ebp - 0x68]
pop ecx
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x1003c6de
sub eax, ecx
je 0x1003c716
mov edi, dword [ebp - 0x68]
mov ecx, ebx
sub edi, ebx
mov al, byte [edi + ecx]
cmp al, 0x7c
jne 0x1003c6fc
mov byte [ecx], 0x20
jmp 0x1003c6fe
mov byte [ecx], al
mov eax, dword [ebp - 0x68]
inc dword [ebp - 0x64]
inc ecx
lea esi, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x1003c708
sub eax, esi
cmp dword [ebp - 0x64], eax
jb 0x1003c6f0
mov eax, dword [ebp + 0x39b0]
or eax, 0x800
test byte [0x10150868], 1
je 0x1003c765
push 0x1014d918
push dword [ebp + 0x39c0]
push eax
push dword [ebp - 0x74]
lea eax, [ebp + 0x33a4]
push ebx
push eax
lea eax, [ebp + 0x37a4]
push eax
push dword [ebp - 0x60]
lea eax, [ebp + 0x35a4]
push eax
lea eax, [ebp - 0x5c]
push str._s_d_s__s__s__s_d_d_s
push eax
call fcn.10044ec8
add esp, 0x2c
jmp 0x1003c799
push dword [ebp + 0x39c0]
push eax
push dword [ebp - 0x74]
lea eax, [ebp + 0x33a4]
push ebx
push eax
lea eax, [ebp + 0x37a4]
push eax
push dword [ebp - 0x60]
lea eax, [ebp + 0x35a4]
push eax
lea eax, [ebp - 0x5c]
push str._s_d_s__s__s__s_d_d
push eax
call fcn.10044ec8
add esp, 0x28
push ebx
call fcn.10044ebd
mov ebx, dword [ebp + 0x39b0]
pop ecx
jmp 0x1003cb17
test ebx, 0x2000000
je 0x1003c830
push edi
lea eax, [ebp + 0x33a4]
push eax
push 0x77
push dword [0x102d2d9c]
call dword [sym.imp.USER32.dll_LoadStringA]
mov eax, ebx
or eax, 0x800
test byte [0x10150868], 1
je 0x1003c807
push 0x1014d918
push eax
push dword [ebp - 0x74]
lea eax, [ebp + 0x33a4]
push dword [ebp - 0x68]
push eax
lea eax, [ebp + 0x37a4]
push eax
push dword [ebp - 0x60]
lea eax, [ebp + 0x35a4]
push eax
push str._s_d_s__s__s__s_d_s
jmp 0x1003cadc
push eax
push dword [ebp - 0x74]
lea eax, [ebp + 0x33a4]
push dword [ebp - 0x68]
push eax
lea eax, [ebp + 0x37a4]
push eax
push dword [ebp - 0x60]
lea eax, [ebp + 0x35a4]
push eax
push str._s_d_s__s__s__s_d
jmp 0x1003cb0b
test ebx, 0x10000000
je 0x1003c9bc
test dword [0x1015687c], ebx
je 0x1003c85d
test byte [ebp - 0x60], 2
je 0x1003c85d
test byte [ebp - 0x60], 0x40
jne 0x1003c85d
test byte [0x1015086c], 0x10
je 0x1003c9a7
mov esi, dword [ebp - 0x68]
mov al, byte [esi + 1]
cmp al, 0x3a
jne 0x1003c871
cmp byte [esi + 2], 0x5c
je 0x1003c9a7
cmp byte [esi], 0x5c
jne 0x1003c87e
cmp al, 0x5c
je 0x1003c9a7
push str.about:blank
push esi
call dword [sym.imp.SHLWAPI.dll_StrStrA]
test eax, eax
jne 0x1003c9a7
mov eax, esi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x1003c897
sub eax, edx
cmp eax, 4
jbe 0x1003c8cc
mov eax, esi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x1003c8aa
sub eax, edx
cmp byte [eax + esi - 2], 0x20
jne 0x1003c8cc
mov eax, esi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x1003c8bf
sub eax, edx
mov byte [eax + esi - 2], cl
mov edi, dword [sym.imp.SHLWAPI.dll_StrStrIA]
push str.http:__
push esi
call edi
test eax, eax
je 0x1003c8e3
lea eax, [esi + 7]
jmp 0x1003c8f4
push str.https:__
push esi
call edi
test eax, eax
lea eax, [esi + 8]
jne 0x1003c8f4
mov eax, esi
test byte [0x10150868], 1
je 0x1003c933
push 0x1014d918
mov ecx, ebx
or ecx, 0x800
push ecx
push dword [ebp - 0x74]
push eax
lea eax, [ebp + 0x37a4]
push eax
push dword [ebp - 0x60]
lea eax, [ebp + 0x35a4]
push eax
lea eax, [ebp - 0x5c]
push str._s_d_s_URL__s_s_d_s
push eax
call fcn.10044ec8
add esp, 0x24
jmp 0x1003c98f
mov ecx, dword [ebp - 0x74]
test ecx, ecx
je 0x1003c962
cmp byte [ecx], 0x2d
je 0x1003c962
mov edx, ebx
or edx, 0x800
push edx
push ecx
push eax
lea eax, [ebp + 0x37a4]
push eax
push dword [ebp - 0x60]
lea eax, [ebp + 0x35a4]
push eax
push str._s_d_s_Paste__s_s_d
jmp 0x1003c983
mov edx, ebx
or edx, 0x800
push edx
push ecx
push eax
lea eax, [ebp + 0x37a4]
push eax
push dword [ebp - 0x60]
lea eax, [ebp + 0x35a4]
push eax
push str._s_d_s_URL__s_s_d
lea eax, [ebp - 0x5c]
push eax
call fcn.10044ec8
add esp, 0x20
push esi
mov edi, 0x102b45c8
push edi
call fcn.10007795
pop ecx
pop ecx
test eax, eax
jne 0x1003c9ae
test byte [ebp - 0x60], 0x10
jne 0x1003c9ae
xor eax, eax
jmp 0x1003cd74
push esi
push edi
call fcn.1000789a
pop ecx
pop ecx
jmp 0x1003cb17
mov eax, 0x8000000
test eax, ebx
je 0x1003ca26
cmp dword [ebp - 0x70], 0
je 0x1003c9da
test dword [0x1016df64], eax
je 0x1003c9da
mov dword [ebp - 0x60], 0x42
push edi
lea eax, [ebp + 0x33a4]
push eax
push 0x78
jmp 0x1003ca38
push 0x1014d918
push dword [eax + 0x8b2c]
lea eax, [ebp + 0x33a4]
push ebx
push dword [ebp - 0x64]
push dword [ebp - 0x68]
push eax
lea eax, [ebp + 0x37a4]
push eax
push dword [ebp - 0x60]
lea eax, [ebp + 0x35a4]
push eax
lea eax, [ebp - 0x5c]
push str._s_d_s__s__s_s_d_d_s
push eax
call fcn.10044ec8
add esp, 0x2c
jmp 0x1003cb17
test bl, 2
je 0x1003ca7c
push edi
lea eax, [ebp + 0x33a4]
push eax
push 0x8b
push dword [0x102d2d9c]
call dword [sym.imp.USER32.dll_LoadStringA]
test byte [0x10150868], 1
mov eax, dword [ebp - 0x6c]
jne 0x1003c9e6
push dword [eax + 0x8b2c]
lea eax, [ebp + 0x33a4]
push ebx
push dword [ebp - 0x64]
push dword [ebp - 0x68]
push eax
lea eax, [ebp + 0x37a4]
push eax
push dword [ebp - 0x60]
lea eax, [ebp + 0x35a4]
push eax
push str._s_d_s__s__s_s_d_d
jmp 0x1003cadc
test ebx, 0x400000
je 0x1003cb17
mov esi, dword [ebp - 0x68]
test esi, esi
je 0x1003caaa
cmp byte [esi], 0
je 0x1003caaa
lea edx, [ebp + 0x37a4]
mov eax, esi
sub edx, esi
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
test cl, cl
jne 0x1003ca9e
mov byte [esi], cl
test byte [0x10150868], 1
mov eax, dword [ebp - 0x6c]
je 0x1003caea
push 0x1014d918
push dword [eax + 0x8b2c]
lea eax, [ebp + 0x37a4]
push ebx
push dword [ebp - 0x64]
push esi
push eax
push dword [ebp - 0x60]
lea eax, [ebp + 0x35a4]
push eax
push str._s_d_s_ScreenShot__s_s_d_d_s
lea eax, [ebp - 0x5c]
push eax
call fcn.10044ec8
add esp, 0x28
jmp 0x1003cb17
push dword [eax + 0x8b2c]
lea eax, [ebp + 0x37a4]
push ebx
push dword [ebp - 0x64]
push esi
push eax
push dword [ebp - 0x60]
lea eax, [ebp + 0x35a4]
push eax
push str._s_d_s_ScreenShot__s_s_d_d
lea eax, [ebp - 0x5c]
push eax
call fcn.10044ec8
add esp, 0x24
cmp dword [0x1015568c], 0x14
jne 0x1003cb3b
cmp ebx, 0x400000
jne 0x1003cb44
lea eax, [ebp - 0x5c]
push eax
push str.SendInfoDisplay_3__s_
push 0
call fcn.1004122a
add esp, 0xc
cmp dword [0x1015568c], 0
je 0x1003cb57
lea eax, [ebp - 0x5c]
push eax
push str.SendInfoDisplay_subject:__s
push 0
call fcn.1004122a
add esp, 0xc
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp + 0x2ba4]
push eax
lea eax, [ebp + 0x2fa4]
push eax
mov esi, reloc.WS2_32.dll_bind
push esi
call fcn.10042219
add esp, 0x10
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push str.tc_Last
push str.SOFTWARE_trueEP_tc_Env
push esi
call fcn.10041961
mov edi, dword [sym.imp.USER32.dll_FindWindowA]
add esp, 0x10
mov ebx, 0x100610d8
push ebx
push 0
call edi
mov dword [ebp - 0x64], eax
test eax, eax
jne 0x1003cbce
push ebx
push eax
call edi
mov dword [ebp - 0x64], eax
test eax, eax
jne 0x1003cbce
push eax
push str.tc_hnd
push str.SOFTWARE_trueEPTC_Env_tc_COMMUNICATION
push esi
call fcn.10040c17
add esp, 0x10
mov dword [ebp - 0x64], eax
test eax, eax
je 0x1003cbe2
push dword [ebp - 0x60]
push dword [ebp - 0x78]
push 0xcfd
push dword [ebp - 0x64]
call dword [sym.imp.USER32.dll_PostMessageA]
mov ecx, dword [ebp - 0x60]
mov dword [ebp - 0x70], ecx
and dword [ebp - 0x70], 1
mov byte [0x102b4a44], 0
je 0x1003cd71
mov eax, dword [ebp + 0x39b0]
test eax, 0x400000
je 0x1003cc22
push ecx
push dword [ebp - 0x78]
push 0xcfd
push dword [ebp - 0x64]
call dword [sym.imp.USER32.dll_SendMessageA]
call fcn.1003a46b
jmp 0x1003cd71
test dword [0x1015687c], eax
je 0x1003cd71
test eax, 0x10000000
je 0x1003cd71
push ecx
push dword [ebp - 0x78]
push 0xcfd
push dword [ebp - 0x64]
call dword [sym.imp.USER32.dll_SendMessageA]
cmp dword [0x1015568c], 0
je 0x1003cc68
push 0x10180de0
push str.g_tc_RedirectURL___s_
push 0
call fcn.1004122a
add esp, 0xc
cmp byte [0x10180de0], 0
je 0x1003cd3d
push 0x2e
push 0x10180de0
call fcn.10044a60
pop ecx
pop ecx
test eax, eax
jne 0x1003ccc6
cmp dword [0x1015568c], eax
je 0x1003cc9c
push str.MessageBox_ExitProcess
push eax
call fcn.1004122a
pop ecx
pop ecx
push 0x10154a28
push str.BrowserBlock_Pro
mov edi, str.SOFTWARE_trueEP_tc_Env
push edi
push esi
call fcn.10042219
push dword [ebp - 0x68]
push str.BrowserBlock_URL
push edi
push esi
call fcn.10042219
add esp, 0x20
jmp 0x1003cd3d
cmp byte [0x10180de0], 0
je 0x1003cd3d
cmp dword [0x1015568c], 0
je 0x1003cce6
push str.g_tc_RedirectURL_gogo
push 0
call fcn.1004122a
pop ecx
pop ecx
push 0x10154228
push 0x1006ff44
push str.SoftWare_trueEP_tc_FileNa
push esi
call fcn.10042219
add esp, 0x10
push ebx
push 0
call edi
test eax, eax
jne 0x1003cd27
push ebx
push eax
call edi
test eax, eax
jne 0x1003cd27
push eax
push str.tc_hnd
push str.SOFTWARE_trueEPTC_Env_tc_COMMUNICATION
push esi
call fcn.10040c17
add esp, 0x10
test eax, eax
je 0x1003cd3d
push 0
push dword [0x101570ac]
push 0xcfe
push dword [ebp - 0x64]
call dword [sym.imp.USER32.dll_PostMessageA]
cmp dword [0x101570ac], 2
jne 0x1003cd4e
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
call fcn.1003a46b
cmp dword [0x1015568c], 0x11
jne 0x1003cd6a
push str.g_bRedirectURL_true
push 0
call fcn.1004122a
pop ecx
pop ecx
mov byte [0x102b4a44], 1
mov eax, dword [ebp - 0x70]
pop edi
mov ecx, dword [ebp + 0x39a4]
pop esi
xor ecx, ebp
pop ebx
call fcn.10044b6f
add ebp, 0x39a8
leave
ret 0x14