Function at 0x10034ad0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
lea ebp, [esp - 0x624]
sub esp, 0x624
push 0xffffffffffffffff
push 0x10063ebb
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x484
mov eax, dword [0x100a0054]
xor eax, ebp
mov dword [ebp + 0x620], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x14], ecx
mov eax, dword [ebp + 0x62c]
push eax
call fcn.10036410
add esp, 4
mov ecx, dword [ebp - 0x14]
push ecx
lea ecx, [ebp - 0x70]
call fcn.1001be30
mov dword [ebp - 4], 0
lea ecx, [ebp + 0x608]
call fcn.10008060
mov byte [ebp - 4], 1
mov byte [ebp - 4], 2
wait
mov ecx, dword [ebp - 0x14]
add ecx, 0x28
call fcn.10013f10
sub esp, 8
mov ecx, esp
mov dword [ebp - 0x16c], esp
mov edx, dword [ebp + 0x62c]
push edx
call fcn.10024e20
lea eax, [ebp + 0x440]
push eax
call fcn.10020a30
add esp, 0xc
mov dword [ebp - 0xe0], eax
mov ecx, dword [ebp - 0xe0]
mov dword [ebp - 0xec], ecx
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0xec]
push edx
lea ecx, [ebp + 0x608]
call fcn.10007db0
mov byte [ebp - 4], 2
lea ecx, [ebp + 0x440]
call fcn.10007d00
lea ecx, [ebp + 0x3cc]
call fcn.10003770
mov byte [ebp - 4], 4
push 1
mov eax, dword [ebp - 0x14]
add eax, 0x28
push eax
lea ecx, [ebp + 0x608]
push ecx
lea ecx, [ebp + 0x3cc]
call fcn.100038e0
movzx edx, al
test edx, edx
jne 0x10034cb4
lea eax, [ebp + 0x518]
push eax
lea ecx, [ebp + 0x3cc]
call fcn.100061e0
mov dword [ebp - 0x74], eax
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0x78], ecx
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x78]
mov dword [ebp - 0x7c], edx
lea eax, [ebp - 0x22c]
push eax
mov ecx, dword [ebp - 0x7c]
call fcn.1002ade0
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [eax]
push edx
lea eax, [ebp + 0x548]
push eax
call fcn.100295a0
add esp, 0xc
mov byte [ebp - 4], 7
lea ecx, [ebp + 0x518]
call fcn.10007d00
mov ecx, dword [ebp - 0x14]
cmp dword [ecx + 0x20], 0
je 0x10034c62
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0x20]
mov dword [ebp - 0x80], eax
lea ecx, [ebp + 0x548]
call fcn.1001c3a0
push eax
push 0xfffffffffffffffe
call dword [ebp - 0x80]
mov dword [ebp - 0x84], 0xfffffffe
mov byte [ebp - 4], 4
lea ecx, [ebp + 0x548]
call fcn.1001c3e0
mov byte [ebp - 4], 2
lea ecx, [ebp + 0x3cc]
call fcn.10023100
mov byte [ebp - 4], 0
lea ecx, [ebp + 0x608]
call fcn.10007d00
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x70]
call fcn.1001be60
mov eax, dword [ebp - 0x84]
wait
jmp 0x10035d97
mov byte [ebp - 4], 2
lea ecx, [ebp + 0x3cc]
call fcn.10023100
wait
jmp 0x10034d88
mov dword [ebp - 4], 1
jmp 0x10034dbd
jmp 0x10034deb
mov edx, dword [0x100a1c98]
mov eax, dword fs:[0x2c]
mov ecx, dword [eax + edx*4]
mov edx, dword [0x100a26e4]
cmp edx, dword [ecx + 4]
jle 0x10034fbe
push 0x100a26e4
call fcn.1003b60f
add esp, 4
cmp dword [0x100a26e4], 0xffffffff
jne 0x10034fbe
mov byte [ebp - 4], 0xa
mov byte [ebp - 0x15], 0
lea eax, [ebp - 0x15]
push eax
push 0x10095bf0
lea ecx, [ebp]
call fcn.10037210
mov byte [ebp - 4], 0xb
movsd xmm0, qword [0x10097290]
movsd qword [ebp - 0x190], xmm0
lea ecx, [ebp - 0x190]
push ecx
push 0x10095be4
lea ecx, [ebp + 0x30]
call fcn.100372a0
mov byte [ebp - 4], 0xc
movsd xmm0, qword [0x100972d0]
movsd qword [ebp - 0x198], xmm0
lea edx, [ebp - 0x198]
push edx
push str.FirstEvaluationTimeSec
lea ecx, [ebp + 0x60]
call fcn.100372a0
mov byte [ebp - 4], 0xd
movsd xmm0, qword [0x10097280]
movsd qword [ebp - 0x1a0], xmm0
lea eax, [ebp - 0x1a0]
push eax
push str.DiscretSec
lea ecx, [ebp + 0x90]
call fcn.100372a0
mov byte [ebp - 4], 0xe
mov byte [ebp - 0x16], 1
lea ecx, [ebp - 0x16]
push ecx
push str.UseIO
lea ecx, [ebp + 0xc0]
call fcn.10037210
mov byte [ebp - 4], 0xf
mov byte [ebp - 0x17], 0
lea edx, [ebp - 0x17]
push edx
push str.UseCPU
lea ecx, [ebp + 0xf0]
call fcn.10037210
mov byte [ebp - 4], 0x10
mov byte [ebp - 0x18], 1
lea eax, [ebp - 0x18]
push eax
push str.WriteLog
lea ecx, [ebp + 0x120]
call fcn.10037210
mov byte [ebp - 4], 0x11
mov byte [ebp - 0x19], 0
lea ecx, [ebp - 0x19]
push ecx
push 0x10095c30
lea ecx, [ebp + 0x150]
call fcn.10037210
mov byte [ebp - 4], 0x12
push 0x1009252f
push 0x10095c4c
lea ecx, [ebp + 0x180]
call fcn.10037330
mov byte [ebp - 4], 0x13
mov byte [ebp - 0x1a], 0
lea edx, [ebp - 0x1a]
push edx
push 0x10095c6c
lea ecx, [ebp + 0x1b0]
call fcn.10037210
mov byte [ebp - 4], 0x14
lea eax, [ebp + 0x1e0]
push eax
lea ecx, [ebp]
push ecx
lea ecx, [ebp - 0x234]
call fcn.10001a80
mov edx, dword [eax + 4]
push edx
mov eax, dword [eax]
push eax
mov ecx, 0x100a26f4
call fcn.10036d00
mov byte [ebp - 4], 0xa
push fcn.10035ec0
push 0xa
push 0x30
lea ecx, [ebp]
push ecx
call fcn.1003b715
push 0x10064660
call fcn.1003bbdf
add esp, 4
mov byte [ebp - 4], 1
push 0x100a26e4
call fcn.1003b5c5
add esp, 4
mov edx, dword [0x100a1c98]
mov eax, dword fs:[0x2c]
mov ecx, dword [eax + edx*4]
mov edx, dword [0x100a26f0]
cmp edx, dword [ecx + 4]
jle 0x100350ea
push 0x100a26f0
call fcn.1003b60f
add esp, 4
cmp dword [0x100a26f0], 0xffffffff
jne 0x100350ea
mov byte [ebp - 4], 0x15
mov byte [ebp - 0x1b], 1
lea eax, [ebp - 0x1b]
push eax
push 0x10095c60
lea ecx, [ebp + 0x1e4]
call fcn.10037210
mov byte [ebp - 4], 0x16
mov byte [ebp - 0x1c], 1
lea ecx, [ebp - 0x1c]
push ecx
push 0x10095c8c
lea ecx, [ebp + 0x214]
call fcn.10037210
mov byte [ebp - 4], 0x17
mov byte [ebp - 0x1d], 1
lea edx, [ebp - 0x1d]
push edx
push 0x10095c84
lea ecx, [ebp + 0x244]
call fcn.10037210
mov byte [ebp - 4], 0x18
mov byte [ebp - 0x1e], 1
lea eax, [ebp - 0x1e]
push eax
push 0x10095ca4
lea ecx, [ebp + 0x274]
call fcn.10037210
mov byte [ebp - 4], 0x19
mov byte [ebp - 0x1f], 1
lea ecx, [ebp - 0x1f]
push ecx
push 0x10095c98
lea ecx, [ebp + 0x2a4]
call fcn.10037210
mov byte [ebp - 4], 0x1a
lea edx, [ebp + 0x2d4]
push edx
lea eax, [ebp + 0x1e4]
push eax
lea ecx, [ebp - 0x23c]
call fcn.10001a80
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [eax]
push edx
mov ecx, 0x100a2758
call fcn.10036d00
mov byte [ebp - 4], 0x15
push fcn.10035ec0
push 5
push 0x30
lea eax, [ebp + 0x1e4]
push eax
call fcn.1003b715
push 0x10064650
call fcn.1003bbdf
add esp, 4
mov byte [ebp - 4], 1
push 0x100a26f0
call fcn.1003b5c5
add esp, 4
mov ecx, dword [0x100a1c98]
mov edx, dword fs:[0x2c]
mov eax, dword [edx + ecx*4]
mov ecx, dword [0x100a26ec]
cmp ecx, dword [eax + 4]
jle 0x10035220
push 0x100a26ec
call fcn.1003b60f
add esp, 4
cmp dword [0x100a26ec], 0xffffffff
jne 0x10035220
mov byte [ebp - 4], 0x1b
mov byte [ebp - 0x20], 0
lea edx, [ebp - 0x20]
push edx
push 0x10095cbc
lea ecx, [ebp + 0x2d8]
call fcn.10037210
mov byte [ebp - 4], 0x1c
mov dword [ebp - 0x9c], 3
lea eax, [ebp - 0x9c]
push eax
push 0x10095cb0
lea ecx, [ebp + 0x308]
call fcn.100373c0
mov byte [ebp - 4], 0x1d
mov byte [ebp - 0x21], 0
lea ecx, [ebp - 0x21]
push ecx
push 0x10095cd4
lea ecx, [ebp + 0x338]
call fcn.10037210
mov byte [ebp - 4], 0x1e
mov byte [ebp - 0x22], 0
lea edx, [ebp - 0x22]
push edx
push 0x10095cc4
lea ecx, [ebp + 0x368]
call fcn.10037210
mov byte [ebp - 4], 0x1f
mov byte [ebp - 0x23], 0
lea eax, [ebp - 0x23]
push eax
push 0x10095cf0
lea ecx, [ebp + 0x398]
call fcn.10037210
mov byte [ebp - 4], 0x20
lea ecx, [ebp + 0x3c8]
push ecx
lea edx, [ebp + 0x2d8]
push edx
lea ecx, [ebp - 0x25c]
call fcn.10001a80
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [eax]
push edx
mov ecx, 0x100a2760
call fcn.10036d00
mov byte [ebp - 4], 0x1b
push fcn.10035ec0
push 5
push 0x30
lea eax, [ebp + 0x2d8]
push eax
call fcn.1003b715
push 0x10064640
call fcn.1003bbdf
add esp, 4
mov byte [ebp - 4], 1
push 0x100a26ec
call fcn.1003b5c5
add esp, 4
mov ecx, dword [ebp - 0x14]
add ecx, 0x28
mov dword [ebp - 0xa8], ecx
push 0
lea ecx, [ebp - 0x298]
call fcn.10012650
mov dword [ebp - 0xa0], eax
mov edx, dword [ebp - 0xa0]
mov dword [ebp - 0xa4], edx
mov byte [ebp - 4], 0x21
mov eax, dword [ebp - 0xa4]
push eax
push str.DefaultSettings
lea ecx, [ebp - 0x188]
push ecx
mov ecx, dword [ebp - 0xa8]
call fcn.10014ff0
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x298]
call fcn.10012cd0
mov dword [ebp - 0x44], 0x100a26f4
lea edx, [ebp - 0x30]
push edx
mov ecx, dword [ebp - 0x44]
call fcn.10036d90
lea eax, [ebp - 0x24]
push eax
mov ecx, dword [ebp - 0x44]
call fcn.10036d70
jmp 0x100352a5
lea ecx, [ebp - 0x30]
call fcn.100166b0
movzx ecx, byte [ebp - 0x24]
push ecx
lea ecx, [ebp - 0x30]
call fcn.10036cd0
movzx edx, al
test edx, edx
jne 0x1003538d
lea ecx, [ebp - 0x30]
call fcn.10015f70
push eax
lea ecx, [ebp + 0x488]
call fcn.10035f70
mov byte [ebp - 4], 0x24
lea eax, [ebp + 0x488]
push eax
call fcn.10009ee0
add esp, 4
push eax
call fcn.10037450
add esp, 4
mov dword [ebp - 0x48], eax
lea ecx, [ebp + 0x488]
push ecx
call fcn.10009ee0
add esp, 4
push eax
call fcn.10037470
add esp, 4
mov dword [ebp - 0xac], eax
mov edx, dword [ebp - 0xac]
push edx
mov eax, dword [ebp - 0x48]
push eax
lea ecx, [ebp - 0x2b0]
push ecx
lea ecx, [ebp - 0x188]
call fcn.10015090
mov dword [ebp - 0xb0], eax
mov edx, dword [ebp - 0xb0]
mov dword [ebp - 0x120], edx
mov byte [ebp - 4], 0x25
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x140], eax
mov ecx, dword [ebp - 0x140]
push ecx
mov edx, dword [ebp - 0x48]
push edx
lea ecx, [ebp - 0x188]
call fcn.10014d20
mov ecx, eax
call fcn.10012dc0
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x2b0]
call fcn.10012cd0
mov byte [ebp - 4], 0x23
lea ecx, [ebp + 0x488]
call fcn.10035ec0
jmp 0x1003529d
mov eax, dword [ebp - 0x14]
add eax, 0x28
mov dword [ebp - 0x134], eax
push 0
lea ecx, [ebp - 0x2c8]
call fcn.10012650
mov dword [ebp - 0x13c], eax
mov ecx, dword [ebp - 0x13c]
mov dword [ebp - 0x138], ecx
mov byte [ebp - 4], 0x26
mov edx, dword [ebp - 0x138]
push edx
push str.InjectSettings
lea eax, [ebp - 0x158]
push eax
mov ecx, dword [ebp - 0x134]
call fcn.10014ff0
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x2c8]
call fcn.10012cd0
mov dword [ebp - 0x4c], 0x100a2758
lea ecx, [ebp - 0x34]
push ecx
mov ecx, dword [ebp - 0x4c]
call fcn.10036d90
lea edx, [ebp - 0x25]
push edx
mov ecx, dword [ebp - 0x4c]
call fcn.10036d70
jmp 0x10035412
lea ecx, [ebp - 0x34]
call fcn.100166b0
movzx eax, byte [ebp - 0x25]
push eax
lea ecx, [ebp - 0x34]
call fcn.10036cd0
movzx ecx, al
test ecx, ecx
jne 0x100354fa
lea ecx, [ebp - 0x34]
call fcn.10015f70
push eax
lea ecx, [ebp + 0x4b8]
call fcn.10035f70
mov byte [ebp - 4], 0x29
lea edx, [ebp + 0x4b8]
push edx
call fcn.10009ee0
add esp, 4
push eax
call fcn.10037450
add esp, 4
mov dword [ebp - 0x50], eax
lea eax, [ebp + 0x4b8]
push eax
call fcn.10009ee0
add esp, 4
push eax
call fcn.10037470
add esp, 4
mov dword [ebp - 0x130], eax
mov ecx, dword [ebp - 0x130]
push ecx
mov edx, dword [ebp - 0x50]
push edx
lea eax, [ebp - 0x2e0]
push eax
lea ecx, [ebp - 0x158]
call fcn.10015090
mov dword [ebp - 0x12c], eax
mov ecx, dword [ebp - 0x12c]
mov dword [ebp - 0x128], ecx
mov byte [ebp - 4], 0x2a
mov edx, dword [ebp - 0x128]
mov dword [ebp - 0x100], edx
mov eax, dword [ebp - 0x100]
push eax
mov ecx, dword [ebp - 0x50]
push ecx
lea ecx, [ebp - 0x158]
call fcn.10014d20
mov ecx, eax
call fcn.10012dc0
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x2e0]
call fcn.10012cd0
mov byte [ebp - 4], 0x28
lea ecx, [ebp + 0x4b8]
call fcn.10035ec0
jmp 0x1003540a
mov edx, dword [ebp - 0x14]
add edx, 0x28
mov dword [ebp - 0x114], edx
push 0
lea ecx, [ebp - 0x2f8]
call fcn.10012650
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x118], eax
mov byte [ebp - 4], 0x2b
mov ecx, dword [ebp - 0x118]
push ecx
push str.BrowserURLSettings
lea edx, [ebp - 0x1dc]
push edx
mov ecx, dword [ebp - 0x114]
call fcn.10014ff0
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x2f8]
call fcn.10012cd0
mov dword [ebp - 0x54], 0x100a2760
lea eax, [ebp - 0x38]
push eax
mov ecx, dword [ebp - 0x54]
call fcn.10036d90
lea ecx, [ebp - 0x26]
push ecx
mov ecx, dword [ebp - 0x54]
call fcn.10036d70
jmp 0x1003557f
lea ecx, [ebp - 0x38]
call fcn.100166b0
movzx edx, byte [ebp - 0x26]
push edx
lea ecx, [ebp - 0x38]
call fcn.10036cd0
movzx eax, al
test eax, eax
jne 0x10035667
lea ecx, [ebp - 0x38]
call fcn.10015f70
push eax
lea ecx, [ebp + 0x4e8]
call fcn.10035f70
mov byte [ebp - 4], 0x2e
lea ecx, [ebp + 0x4e8]
push ecx
call fcn.10009ee0
add esp, 4
push eax
call fcn.10037450
add esp, 4
mov dword [ebp - 0x58], eax
lea edx, [ebp + 0x4e8]
push edx
call fcn.10009ee0
add esp, 4
push eax
call fcn.10037470
add esp, 4
mov dword [ebp - 0x110], eax
mov eax, dword [ebp - 0x110]
push eax
mov ecx, dword [ebp - 0x58]
push ecx
lea edx, [ebp - 0x334]
push edx
lea ecx, [ebp - 0x1dc]
call fcn.10015090
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x108], eax
mov byte [ebp - 4], 0x2f
mov ecx, dword [ebp - 0x108]
mov dword [ebp - 0x104], ecx
mov edx, dword [ebp - 0x104]
push edx
mov eax, dword [ebp - 0x58]
push eax
lea ecx, [ebp - 0x1dc]
call fcn.10014d20
mov ecx, eax
call fcn.10012dc0
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x334]
call fcn.10012cd0
mov byte [ebp - 4], 0x2d
lea ecx, [ebp + 0x4e8]
call fcn.10035ec0
jmp 0x10035577
push 7
lea ecx, [ebp - 0x1c4]
call fcn.10012650
mov byte [ebp - 4], 0x30
mov ecx, dword [ebp - 0x14]
add ecx, 0x28
mov dword [ebp - 0xf4], ecx
push 6
lea ecx, [ebp - 0x31c]
call fcn.10012650
mov dword [ebp - 0xfc], eax
mov edx, dword [ebp - 0xfc]
mov dword [ebp - 0xf8], edx
mov byte [ebp - 4], 0x31
mov eax, dword [ebp - 0xf8]
push eax
push str.MonitoredApps
lea ecx, [ebp - 0x224]
push ecx
mov ecx, dword [ebp - 0xf4]
call fcn.10014ff0
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x31c]
call fcn.10012cd0
lea edx, [ebp - 0x224]
mov dword [ebp - 0x5c], edx
lea eax, [ebp - 0xe8]
push eax
mov ecx, dword [ebp - 0x5c]
call fcn.10015b20
lea ecx, [ebp - 0x1a8]
push ecx
mov ecx, dword [ebp - 0x5c]
call fcn.10015b80
jmp 0x10035708
lea ecx, [ebp - 0xe8]
call fcn.10029700
lea edx, [ebp - 0x1a8]
push edx
lea ecx, [ebp - 0xe8]
call fcn.10003690
movzx eax, al
test eax, eax
je 0x10035827
lea ecx, [ebp - 0xe8]
call fcn.10029720
push eax
lea ecx, [ebp - 0x1f4]
call fcn.10012bf0
mov byte [ebp - 4], 0x34
push str.Name
lea ecx, [ebp - 0x1f4]
call fcn.10014cd0
mov ecx, eax
call fcn.10012ed0
push eax
lea ecx, [ebp + 0x5d8]
call fcn.10007f30
mov byte [ebp - 4], 0x35
xor ecx, ecx
mov byte [ebp - 0x2a], cl
mov dl, byte [ebp - 0x2a]
mov byte [ebp - 0x27], dl
lea eax, [ebp - 0x1ac]
push eax
lea ecx, [ebp + 0x5d8]
call fcn.1001abe0
mov ecx, dword [eax]
mov dword [ebp - 0xf0], ecx
movzx edx, byte [ebp - 0x27]
push edx
push 0x10046e1c
mov eax, dword [ebp - 0xf0]
push eax
lea ecx, [ebp + 0x5d8]
push ecx
lea edx, [ebp - 0x264]
push edx
mov ecx, 0x10096f58
call fcn.1002b470
push 0x10095d48
lea ecx, [ebp - 0x1f4]
call fcn.10014cd0
push eax
lea ecx, [ebp - 0x254]
call fcn.10012bf0
mov byte [ebp - 4], 0x36
lea eax, [ebp - 0x254]
push eax
lea ecx, [ebp + 0x5d8]
push ecx
lea ecx, [ebp - 0x1c4]
call fcn.10014d20
mov ecx, eax
call fcn.10012d40
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x254]
call fcn.10012cd0
mov byte [ebp - 4], 0x34
lea ecx, [ebp + 0x5d8]
call fcn.10007d00
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x1f4]
call fcn.10012cd0
jmp 0x100356fd
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x224]
call fcn.10012cd0
mov edx, dword [ebp - 0x14]
add edx, 0x28
mov dword [ebp - 0x124], edx
lea eax, [ebp - 0x1c4]
push eax
push 0x10095d40
mov ecx, dword [ebp - 0x124]
call fcn.10014cd0
mov ecx, eax
call fcn.10012d40
mov ecx, dword [ebp - 0x14]
add ecx, 0x28
mov dword [ebp - 0xb4], ecx
lea edx, [ebp - 0x188]
push edx
push 0x10095d58
mov ecx, dword [ebp - 0xb4]
call fcn.10014cd0
mov ecx, eax
call fcn.10012d40
push 1
lea ecx, [ebp - 0x494]
call fcn.10036b50
mov byte [ebp - 4], 0x37
lea eax, [ebp - 0x164]
push eax
lea ecx, [ebp - 0x1c4]
call fcn.10015120
mov byte [ebp - 4], 0x38
push 0x10095d54
lea ecx, [ebp - 0x484]
push ecx
lea ecx, [ebp - 0x26c]
call fcn.10036a20
mov edx, dword [eax + 4]
push edx
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x164]
push ecx
lea edx, [ebp - 0x280]
push edx
mov ecx, 0x10096f58
call fcn.10037490
lea eax, [ebp + 0x458]
push eax
lea ecx, [ebp - 0x494]
call fcn.10036a50
mov dword [ebp - 0xb8], eax
mov ecx, dword [ebp - 0xb8]
mov dword [ebp - 0xbc], ecx
mov byte [ebp - 4], 0x39
mov edx, dword [ebp - 0xbc]
mov dword [ebp - 0xc0], edx
lea eax, [ebp - 0x274]
push eax
mov ecx, dword [ebp - 0xc0]
call fcn.1002ade0
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [eax]
push edx
lea eax, [ebp + 0x5f0]
push eax
call fcn.100295a0
add esp, 0xc
mov byte [ebp - 4], 0x3b
lea ecx, [ebp + 0x458]
call fcn.10007d00
xor ecx, ecx
mov byte [ebp - 0x28], cl
mov dl, byte [ebp - 0x28]
mov byte [ebp - 0x29], dl
lea eax, [ebp - 0x168]
push eax
lea ecx, [ebp + 0x5f0]
call fcn.10024b70
mov ecx, dword [eax]
mov dword [ebp - 0xc4], ecx
movzx edx, byte [ebp - 0x29]
push edx
push 0x100486fc
mov eax, dword [ebp - 0xc4]
push eax
lea ecx, [ebp + 0x5f0]
push ecx
lea edx, [ebp - 0x1fc]
push edx
mov ecx, 0x10096f58
call fcn.1002b820
push str.APPMOND_:_setting_whitelist_registry_value_:
push 0x100a1718
call fcn.1001ea40
add esp, 8
lea ecx, [ebp + 0x5f0]
push ecx
push eax
call fcn.10037590
add esp, 8
mov dword [ebp - 0xc8], eax
push 0x1001ed60
mov ecx, dword [ebp - 0xc8]
call fcn.1001c380
push 0x10095d60
lea ecx, [ebp + 0x578]
call fcn.1001e6b0
mov byte [ebp - 4], 0x3c
lea edx, [ebp + 0x578]
push edx
push SysFreeString
lea ecx, [ebp - 0x40]
call fcn.10034460
mov byte [ebp - 4], 0x3e
lea ecx, [ebp + 0x578]
call fcn.1001c3e0
push str.whitelist
lea ecx, [ebp + 0x590]
call fcn.1001e6b0
mov byte [ebp - 4], 0x3f
lea eax, [ebp + 0x5f0]
push eax
lea ecx, [ebp + 0x590]
push ecx
lea ecx, [ebp - 0x40]
call fcn.10034680
mov byte [ebp - 4], 0x3e
lea ecx, [ebp + 0x590]
call fcn.1001c3e0
lea ecx, [ebp - 0x40]
call fcn.100344b0
push 1
lea ecx, [ebp - 0x3e4]
call fcn.10036b50
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x68]
call fcn.10015e60
mov byte [ebp - 4], 0x41
push 0x10095dbc
lea ecx, [ebp - 0x158]
call fcn.10014cd0
mov ecx, eax
call fcn.10013c60
movzx edx, al
test edx, edx
jne 0x10035a98
push 0x10095e44
lea ecx, [ebp - 0x68]
call fcn.10035dc0
push 0x10095e38
lea ecx, [ebp - 0x158]
call fcn.10014cd0
mov ecx, eax
call fcn.10013c60
movzx eax, al
test eax, eax
jne 0x10035ac3
push 0x10095e50
lea ecx, [ebp - 0x68]
call fcn.10035dc0
push 0x10095e48
lea ecx, [ebp - 0x158]
call fcn.10014cd0
mov ecx, eax
call fcn.10013c60
movzx ecx, al
test ecx, ecx
jne 0x10035aee
push 0x10095e60
lea ecx, [ebp - 0x68]
call fcn.10035dc0
push 0x10095e54
lea ecx, [ebp - 0x158]
call fcn.10014cd0
mov ecx, eax
call fcn.10013c60
movzx edx, al
test edx, edx
jne 0x10035b19
push 0x10095e70
lea ecx, [ebp - 0x68]
call fcn.10035dc0
push 0x10095e64
lea ecx, [ebp - 0x158]
call fcn.10014cd0
mov ecx, eax
call fcn.10013c60
movzx eax, al
test eax, eax
jne 0x10035b44
push 0x10095e78
lea ecx, [ebp - 0x68]
call fcn.10035dc0
lea ecx, [ebp - 0x1dc]
push ecx
lea edx, [ebp - 0x158]
push edx
lea eax, [ebp - 0x188]
push eax
mov ecx, dword [ebp - 0x14]
call fcn.10036610
lea ecx, [ebp + 0x608]
push ecx
mov ecx, dword [ebp - 0x14]
call fcn.10036490
push 0x10095e74
lea edx, [ebp - 0x3d4]
push edx
lea ecx, [ebp - 0x204]
call fcn.10036a20
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [eax]
push edx
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x304]
push ecx
mov ecx, 0x10096f58
call fcn.10037490
lea edx, [ebp + 0x470]
push edx
lea ecx, [ebp - 0x3e4]
call fcn.10036a50
mov dword [ebp - 0xcc], eax
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0xd0], eax
mov byte [ebp - 4], 0x42
mov ecx, dword [ebp - 0xd0]
mov dword [ebp - 0xd4], ecx
lea edx, [ebp - 0x20c]
push edx
mov ecx, dword [ebp - 0xd4]
call fcn.1002ade0
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [eax]
push edx
lea eax, [ebp + 0x5c0]
push eax
call fcn.100295a0
add esp, 0xc
mov byte [ebp - 4], 0x44
lea ecx, [ebp + 0x470]
call fcn.10007d00
push str.APPMOND_:_setting_disabled_injection_controls_registry_value_:
push 0x100a1718
call fcn.1001ea40
add esp, 8
lea ecx, [ebp + 0x5c0]
push ecx
push eax
call fcn.10037590
add esp, 8
mov dword [ebp - 0xd8], eax
push 0x1001ed60
mov ecx, dword [ebp - 0xd8]
call fcn.1001c380
push str.SOFTWARESmart_XControlUpAgentAppLoadTime
lea ecx, [ebp + 0x5a8]
call fcn.1001e6b0
mov byte [ebp - 4], 0x45
lea edx, [ebp + 0x5a8]
push edx
push SysFreeString
lea ecx, [ebp - 0x3c]
call fcn.10034460
mov byte [ebp - 4], 0x47
lea ecx, [ebp + 0x5a8]
call fcn.1001c3e0
push str.ictrls_disabled
lea ecx, [ebp + 0x530]
call fcn.1001e6b0
mov byte [ebp - 4], 0x48
lea eax, [ebp + 0x5c0]
push eax
lea ecx, [ebp + 0x530]
push ecx
lea ecx, [ebp - 0x3c]
call fcn.10034680
mov byte [ebp - 4], 0x47
lea ecx, [ebp + 0x530]
call fcn.1001c3e0
lea ecx, [ebp - 0x3c]
call fcn.100344b0
mov dword [ebp - 0xdc], 0
mov byte [ebp - 4], 0x44
lea ecx, [ebp - 0x3c]
call fcn.10034490
mov byte [ebp - 4], 0x41
lea ecx, [ebp + 0x5c0]
call fcn.1001c3e0
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x68]
call fcn.10015d70
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x3e4]
call fcn.10035ff0
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x40]
call fcn.10034490
mov byte [ebp - 4], 0x38
lea ecx, [ebp + 0x5f0]
call fcn.1001c3e0
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x164]
call fcn.10015d70
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x494]
call fcn.10035ff0
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x1c4]
call fcn.10012cd0
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x1dc]
call fcn.10012cd0
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x158]
call fcn.10012cd0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x188]
call fcn.10012cd0
mov byte [ebp - 4], 0
lea ecx, [ebp + 0x608]
call fcn.10007d00
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x70]
call fcn.1001be60
mov eax, dword [ebp - 0xdc]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x620]
xor ecx, ebp
call fcn.1003b4c9
add ebp, 0x624
mov esp, ebp
pop ebp
ret 4