Function at 0x10034ae0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10062a16
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0xaac
mov eax, dword [0x1009c054]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x3fc], ecx
mov eax, dword [ebp + 8]
push eax
call fcn.100365d0
add esp, 4
mov ecx, dword [ebp - 0x3fc]
push ecx
lea ecx, [ebp - 0x48]
call fcn.1001bc70
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x80]
call fcn.10007ae0
mov byte [ebp - 4], 1
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x3fc]
add ecx, 0x28
call fcn.10013bd0
sub esp, 8
mov ecx, esp
mov dword [ebp - 0x4f8], esp
mov edx, dword [ebp + 8]
push edx
call fcn.10024b20
lea eax, [ebp - 0x6a8]
push eax
call fcn.10020710
add esp, 0xc
mov dword [ebp - 0x494], eax
mov ecx, dword [ebp - 0x494]
push ecx
lea ecx, [ebp - 0x80]
call fcn.10007830
lea ecx, [ebp - 0x6a8]
call fcn.100077f0
push 0x74
lea ecx, [ebp - 0x298]
call fcn.10002e30
lea ecx, [ebp - 0x298]
call fcn.10003250
mov dword [ebp - 0x4fc], eax
mov byte [ebp - 4], 3
push 1
mov edx, dword [ebp - 0x3fc]
add edx, 0x28
push edx
lea eax, [ebp - 0x80]
push eax
lea ecx, [ebp - 0x298]
call fcn.10003360
mov byte [ebp - 0x401], al
movzx ecx, byte [ebp - 0x401]
test ecx, ecx
jne 0x10034cdb
lea edx, [ebp - 0x6c0]
push edx
lea ecx, [ebp - 0x298]
call fcn.10005d60
mov dword [ebp - 0x49c], eax
mov eax, dword [ebp - 0x49c]
mov dword [ebp - 0x4a0], eax
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x4a0]
mov dword [ebp - 0x4a4], ecx
lea edx, [ebp - 0x558]
push edx
mov ecx, dword [ebp - 0x4a4]
call fcn.1002ac50
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [eax]
push edx
lea eax, [ebp - 0x194]
push eax
call fcn.10029220
add esp, 0xc
mov dword [ebp - 0x500], eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x6c0]
call fcn.100077f0
mov ecx, dword [ebp - 0x3fc]
cmp dword [ecx + 0x20], 0
je 0x10034c8d
mov edx, dword [ebp - 0x3fc]
mov eax, dword [edx + 0x20]
mov dword [ebp - 0x4a8], eax
lea ecx, [ebp - 0x194]
call fcn.1001c1a0
push eax
push 0xfffffffffffffffe
call dword [ebp - 0x4a8]
mov dword [ebp - 0x4ac], 0xfffffffe
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x194]
call fcn.1001c1e0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x298]
call fcn.10022ec0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x80]
call fcn.100077f0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.1001bca0
mov eax, dword [ebp - 0x4ac]
jmp 0x10035f5e
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x298]
call fcn.10022ec0
jmp 0x10034dba
mov dword [ebp - 4], 1
jmp 0x10034dec
jmp 0x10034e17
mov edx, dword [0x1009dc98]
mov eax, dword fs:[0x2c]
mov ecx, dword [eax + edx*4]
mov edx, dword [0x1009e6e4]
cmp edx, dword [ecx + 4]
jle 0x10035029
push 0x1009e6e4
call fcn.1003b743
add esp, 4
cmp dword [0x1009e6e4], 0xffffffff
jne 0x10035029
mov byte [ebp - 4], 9
push 8
mov ecx, 0x1009e6f4
call fcn.10002e30
mov byte [ebp - 0x410], 0
lea eax, [ebp - 0x410]
push eax
push 0x10093bc0
lea ecx, [ebp - 0xabc]
call fcn.100372d0
mov byte [ebp - 4], 0xa
movsd xmm0, qword [0x10095290]
movsd qword [ebp - 0x508], xmm0
lea ecx, [ebp - 0x508]
push ecx
push 0x10093c08
lea ecx, [ebp - 0xa8c]
call fcn.10037360
mov byte [ebp - 4], 0xb
movsd xmm0, qword [0x100952d0]
movsd qword [ebp - 0x510], xmm0
lea edx, [ebp - 0x510]
push edx
push str.FirstEvaluationTimeSec
lea ecx, [ebp - 0xa5c]
call fcn.10037360
mov byte [ebp - 4], 0xc
movsd xmm0, qword [0x10095280]
movsd qword [ebp - 0x518], xmm0
lea eax, [ebp - 0x518]
push eax
push str.DiscretSec
lea ecx, [ebp - 0xa2c]
call fcn.10037360
mov byte [ebp - 4], 0xd
mov byte [ebp - 0x40f], 1
lea ecx, [ebp - 0x40f]
push ecx
push str.UseIO
lea ecx, [ebp - 0x9fc]
call fcn.100372d0
mov byte [ebp - 4], 0xe
mov byte [ebp - 0x40e], 0
lea edx, [ebp - 0x40e]
push edx
push str.UseCPU
lea ecx, [ebp - 0x9cc]
call fcn.100372d0
mov byte [ebp - 4], 0xf
mov byte [ebp - 0x40d], 1
lea eax, [ebp - 0x40d]
push eax
push str.WriteLog
lea ecx, [ebp - 0x99c]
call fcn.100372d0
mov byte [ebp - 4], 0x10
mov byte [ebp - 0x40c], 0
lea ecx, [ebp - 0x40c]
push ecx
push 0x10093c3c
lea ecx, [ebp - 0x96c]
call fcn.100372d0
mov byte [ebp - 4], 0x11
push 0x1009052f
push 0x10093c64
lea ecx, [ebp - 0x93c]
call fcn.100373f0
mov byte [ebp - 4], 0x12
mov byte [ebp - 0x40a], 0
lea edx, [ebp - 0x40a]
push edx
push 0x10093c4c
lea ecx, [ebp - 0x90c]
call fcn.100372d0
mov byte [ebp - 4], 0x13
lea eax, [ebp - 0x8dc]
push eax
lea ecx, [ebp - 0xabc]
push ecx
lea ecx, [ebp - 0x560]
call fcn.10001920
mov edx, dword [eax + 4]
push edx
mov eax, dword [eax]
push eax
mov ecx, 0x1009e6f4
call fcn.10036dd0
mov byte [ebp - 4], 9
push fcn.10036080
push 0xa
push 0x30
lea ecx, [ebp - 0xabc]
push ecx
call fcn.1003b849
push 0x10062ef0
call fcn.1003bd13
add esp, 4
mov byte [ebp - 4], 1
push 0x1009e6e4
call fcn.1003b6f9
add esp, 4
mov edx, dword [0x1009dc98]
mov eax, dword fs:[0x2c]
mov ecx, dword [eax + edx*4]
mov edx, dword [0x1009e6f0]
cmp edx, dword [ecx + 4]
jle 0x1003517f
push 0x1009e6f0
call fcn.1003b743
add esp, 4
cmp dword [0x1009e6f0], 0xffffffff
jne 0x1003517f
mov byte [ebp - 4], 0x14
push 8
mov ecx, 0x1009e758
call fcn.10002e30
mov byte [ebp - 0x40b], 1
lea eax, [ebp - 0x40b]
push eax
push 0x10093c84
lea ecx, [ebp - 0x7e4]
call fcn.100372d0
mov byte [ebp - 4], 0x15
mov byte [ebp - 0x409], 1
lea ecx, [ebp - 0x409]
push ecx
push 0x10093c78
lea ecx, [ebp - 0x7b4]
call fcn.100372d0
mov byte [ebp - 4], 0x16
mov byte [ebp - 0x408], 1
lea edx, [ebp - 0x408]
push edx
push 0x10093c9c
lea ecx, [ebp - 0x784]
call fcn.100372d0
mov byte [ebp - 4], 0x17
mov byte [ebp - 0x407], 1
lea eax, [ebp - 0x407]
push eax
push 0x10093c90
lea ecx, [ebp - 0x754]
call fcn.100372d0
mov byte [ebp - 4], 0x18
mov byte [ebp - 0x406], 1
lea ecx, [ebp - 0x406]
push ecx
push 0x10093cac
lea ecx, [ebp - 0x724]
call fcn.100372d0
mov byte [ebp - 4], 0x19
lea edx, [ebp - 0x6f4]
push edx
lea eax, [ebp - 0x7e4]
push eax
lea ecx, [ebp - 0x568]
call fcn.10001920
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [eax]
push edx
mov ecx, 0x1009e758
call fcn.10036dd0
mov byte [ebp - 4], 0x14
push fcn.10036080
push 5
push 0x30
lea eax, [ebp - 0x7e4]
push eax
call fcn.1003b849
push 0x10062ee0
call fcn.1003bd13
add esp, 4
mov byte [ebp - 4], 1
push 0x1009e6f0
call fcn.1003b6f9
add esp, 4
mov ecx, dword [0x1009dc98]
mov edx, dword fs:[0x2c]
mov eax, dword [edx + ecx*4]
mov ecx, dword [0x1009e6ec]
cmp ecx, dword [eax + 4]
jle 0x100352d9
push 0x1009e6ec
call fcn.1003b743
add esp, 4
cmp dword [0x1009e6ec], 0xffffffff
jne 0x100352d9
mov byte [ebp - 4], 0x1a
push 8
mov ecx, 0x1009e760
call fcn.10002e30
mov byte [ebp - 0x405], 0
lea edx, [ebp - 0x405]
push edx
push 0x10093ca4
lea ecx, [ebp - 0x8d8]
call fcn.100372d0
mov byte [ebp - 4], 0x1b
mov dword [ebp - 0x4c4], 3
lea eax, [ebp - 0x4c4]
push eax
push 0x10093cc4
lea ecx, [ebp - 0x8a8]
call fcn.10037480
mov byte [ebp - 4], 0x1c
mov byte [ebp - 0x404], 0
lea ecx, [ebp - 0x404]
push ecx
push 0x10093cb8
lea ecx, [ebp - 0x878]
call fcn.100372d0
mov byte [ebp - 4], 0x1d
mov byte [ebp - 0x403], 0
lea edx, [ebp - 0x403]
push edx
push 0x10093ce4
lea ecx, [ebp - 0x848]
call fcn.100372d0
mov byte [ebp - 4], 0x1e
mov byte [ebp - 0x402], 0
lea eax, [ebp - 0x402]
push eax
push 0x10093cd0
lea ecx, [ebp - 0x818]
call fcn.100372d0
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x7e8]
push ecx
lea edx, [ebp - 0x8d8]
push edx
lea ecx, [ebp - 0x570]
call fcn.10001920
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [eax]
push edx
mov ecx, 0x1009e760
call fcn.10036dd0
mov byte [ebp - 4], 0x1a
push fcn.10036080
push 5
push 0x30
lea eax, [ebp - 0x8d8]
push eax
call fcn.1003b849
push 0x10062ed0
call fcn.1003bd13
add esp, 4
mov byte [ebp - 4], 1
push 0x1009e6ec
call fcn.1003b6f9
add esp, 4
push 0x18
lea ecx, [ebp - 0xa4]
call fcn.10002e30
mov ecx, dword [ebp - 0x3fc]
add ecx, 0x28
mov dword [ebp - 0x4d0], ecx
push 0
lea ecx, [ebp - 0x6d8]
call fcn.10011f40
mov dword [ebp - 0x4c8], eax
mov edx, dword [ebp - 0x4c8]
mov dword [ebp - 0x4cc], edx
mov byte [ebp - 4], 0x20
mov eax, dword [ebp - 0x4cc]
push eax
push str.DefaultSettings
lea ecx, [ebp - 0xa4]
push ecx
mov ecx, dword [ebp - 0x4d0]
call fcn.10014e80
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x6d8]
call fcn.100125d0
mov dword [ebp - 0x420], 0x1009e6f4
push 4
lea ecx, [ebp - 0x1c]
call fcn.10002e30
lea edx, [ebp - 0x1c]
push edx
mov ecx, dword [ebp - 0x420]
call fcn.10036e60
lea eax, [ebp - 0x16]
push eax
mov ecx, dword [ebp - 0x420]
call fcn.10036e40
jmp 0x10035381
lea ecx, [ebp - 0x1c]
call fcn.100164c0
movzx ecx, byte [ebp - 0x16]
push ecx
lea ecx, [ebp - 0x1c]
call fcn.10036da0
movzx edx, al
test edx, edx
jne 0x10035472
lea ecx, [ebp - 0x1c]
call fcn.10015df0
push eax
lea ecx, [ebp - 0x224]
call fcn.100360c0
mov byte [ebp - 4], 0x23
lea eax, [ebp - 0x224]
push eax
call fcn.10009910
add esp, 4
push eax
call fcn.10037510
add esp, 4
mov dword [ebp - 0x424], eax
lea ecx, [ebp - 0x224]
push ecx
call fcn.10009910
add esp, 4
push eax
call fcn.10037530
add esp, 4
mov dword [ebp - 0x4d4], eax
mov edx, dword [ebp - 0x4d4]
push edx
mov eax, dword [ebp - 0x424]
push eax
lea ecx, [ebp - 0x6f0]
push ecx
lea ecx, [ebp - 0xa4]
call fcn.10014ef0
mov dword [ebp - 0x4d8], eax
mov edx, dword [ebp - 0x4d8]
mov dword [ebp - 0x4dc], edx
mov byte [ebp - 4], 0x24
mov eax, dword [ebp - 0x4dc]
mov dword [ebp - 0x4e0], eax
mov ecx, dword [ebp - 0x4e0]
push ecx
mov edx, dword [ebp - 0x424]
push edx
lea ecx, [ebp - 0xa4]
call fcn.10014ba0
mov ecx, eax
call fcn.100126b0
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x6f0]
call fcn.100125d0
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x224]
call fcn.10036080
jmp 0x10035379
push 0x18
lea ecx, [ebp - 0x60]
call fcn.10002e30
mov eax, dword [ebp - 0x3fc]
add eax, 0x28
mov dword [ebp - 0x4e8], eax
push 0
lea ecx, [ebp - 0x5e8]
call fcn.10011f40
mov dword [ebp - 0x4e4], eax
mov ecx, dword [ebp - 0x4e4]
mov dword [ebp - 0x468], ecx
mov byte [ebp - 4], 0x25
mov edx, dword [ebp - 0x468]
push edx
push str.InjectSettings
lea eax, [ebp - 0x60]
push eax
mov ecx, dword [ebp - 0x4e8]
call fcn.10014e80
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x5e8]
call fcn.100125d0
mov dword [ebp - 0x428], 0x1009e758
push 4
lea ecx, [ebp - 0x20]
call fcn.10002e30
lea ecx, [ebp - 0x20]
push ecx
mov ecx, dword [ebp - 0x428]
call fcn.10036e60
lea edx, [ebp - 0x17]
push edx
mov ecx, dword [ebp - 0x428]
call fcn.10036e40
jmp 0x10035514
lea ecx, [ebp - 0x20]
call fcn.100164c0
movzx eax, byte [ebp - 0x17]
push eax
lea ecx, [ebp - 0x20]
call fcn.10036da0
movzx ecx, al
test ecx, ecx
jne 0x100355ff
lea ecx, [ebp - 0x20]
call fcn.10015df0
push eax
lea ecx, [ebp - 0x1f4]
call fcn.100360c0
mov byte [ebp - 4], 0x28
lea edx, [ebp - 0x1f4]
push edx
call fcn.10009910
add esp, 4
push eax
call fcn.10037510
add esp, 4
mov dword [ebp - 0x42c], eax
lea eax, [ebp - 0x1f4]
push eax
call fcn.10009910
add esp, 4
push eax
call fcn.10037530
add esp, 4
mov dword [ebp - 0x4ec], eax
mov ecx, dword [ebp - 0x4ec]
push ecx
mov edx, dword [ebp - 0x42c]
push edx
lea eax, [ebp - 0x600]
push eax
lea ecx, [ebp - 0x60]
call fcn.10014ef0
mov dword [ebp - 0x4f0], eax
mov ecx, dword [ebp - 0x4f0]
mov dword [ebp - 0x430], ecx
mov byte [ebp - 4], 0x29
mov edx, dword [ebp - 0x430]
mov dword [ebp - 0x434], edx
mov eax, dword [ebp - 0x434]
push eax
mov ecx, dword [ebp - 0x42c]
push ecx
lea ecx, [ebp - 0x60]
call fcn.10014ba0
mov ecx, eax
call fcn.100126b0
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x600]
call fcn.100125d0
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x1f4]
call fcn.10036080
jmp 0x1003550c
push 0x18
lea ecx, [ebp - 0xbc]
call fcn.10002e30
mov edx, dword [ebp - 0x3fc]
add edx, 0x28
mov dword [ebp - 0x440], edx
push 0
lea ecx, [ebp - 0x618]
call fcn.10011f40
mov dword [ebp - 0x438], eax
mov eax, dword [ebp - 0x438]
mov dword [ebp - 0x43c], eax
mov byte [ebp - 4], 0x2a
mov ecx, dword [ebp - 0x43c]
push ecx
push str.BrowserURLSettings
lea edx, [ebp - 0xbc]
push edx
mov ecx, dword [ebp - 0x440]
call fcn.10014e80
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x618]
call fcn.100125d0
mov dword [ebp - 0x414], 0x1009e760
push 4
lea ecx, [ebp - 0x24]
call fcn.10002e30
lea eax, [ebp - 0x24]
push eax
mov ecx, dword [ebp - 0x414]
call fcn.10036e60
lea ecx, [ebp - 0x15]
push ecx
mov ecx, dword [ebp - 0x414]
call fcn.10036e40
jmp 0x100356a7
lea ecx, [ebp - 0x24]
call fcn.100164c0
movzx edx, byte [ebp - 0x15]
push edx
lea ecx, [ebp - 0x24]
call fcn.10036da0
movzx eax, al
test eax, eax
jne 0x10035798
lea ecx, [ebp - 0x24]
call fcn.10015df0
push eax
lea ecx, [ebp - 0x1c4]
call fcn.100360c0
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x1c4]
push ecx
call fcn.10009910
add esp, 4
push eax
call fcn.10037510
add esp, 4
mov dword [ebp - 0x418], eax
lea edx, [ebp - 0x1c4]
push edx
call fcn.10009910
add esp, 4
push eax
call fcn.10037530
add esp, 4
mov dword [ebp - 0x444], eax
mov eax, dword [ebp - 0x444]
push eax
mov ecx, dword [ebp - 0x418]
push ecx
lea edx, [ebp - 0x630]
push edx
lea ecx, [ebp - 0xbc]
call fcn.10014ef0
mov dword [ebp - 0x448], eax
mov eax, dword [ebp - 0x448]
mov dword [ebp - 0x44c], eax
mov byte [ebp - 4], 0x2e
mov ecx, dword [ebp - 0x44c]
mov dword [ebp - 0x450], ecx
mov edx, dword [ebp - 0x450]
push edx
mov eax, dword [ebp - 0x418]
push eax
lea ecx, [ebp - 0xbc]
call fcn.10014ba0
mov ecx, eax
call fcn.100126b0
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x630]
call fcn.100125d0
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x1c4]
call fcn.10036080
jmp 0x1003569f
push 0x18
lea ecx, [ebp - 0xd4]
call fcn.10002e30
push 7
lea ecx, [ebp - 0xd4]
call fcn.10011f40
mov byte [ebp - 4], 0x2f
push 0x18
lea ecx, [ebp - 0x14c]
call fcn.10002e30
mov ecx, dword [ebp - 0x3fc]
add ecx, 0x28
mov dword [ebp - 0x45c], ecx
push 6
lea ecx, [ebp - 0x648]
call fcn.10011f40
mov dword [ebp - 0x454], eax
mov edx, dword [ebp - 0x454]
mov dword [ebp - 0x458], edx
mov byte [ebp - 4], 0x30
mov eax, dword [ebp - 0x458]
push eax
push str.MonitoredApps
lea ecx, [ebp - 0x14c]
push ecx
mov ecx, dword [ebp - 0x45c]
call fcn.10014e80
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x648]
call fcn.100125d0
lea edx, [ebp - 0x14c]
mov dword [ebp - 0x41c], edx
push 8
lea ecx, [ebp - 0x40]
call fcn.10002e30
lea eax, [ebp - 0x40]
push eax
mov ecx, dword [ebp - 0x41c]
call fcn.100159a0
push 8
lea ecx, [ebp - 0x68]
call fcn.10002e30
lea ecx, [ebp - 0x68]
push ecx
mov ecx, dword [ebp - 0x41c]
call fcn.10015a00
jmp 0x1003586a
lea ecx, [ebp - 0x40]
call fcn.10029380
lea edx, [ebp - 0x68]
push edx
lea ecx, [ebp - 0x40]
call fcn.10003170
movzx eax, al
test eax, eax
je 0x100359a6
push 0x18
lea ecx, [ebp - 0x104]
call fcn.10002e30
lea ecx, [ebp - 0x40]
call fcn.100293a0
push eax
lea ecx, [ebp - 0x104]
call fcn.100124f0
mov byte [ebp - 4], 0x33
push str.Name
lea ecx, [ebp - 0x104]
call fcn.10014b50
mov ecx, eax
call fcn.100127c0
push eax
lea ecx, [ebp - 0x11c]
call fcn.10007990
mov byte [ebp - 4], 0x34
xor ecx, ecx
mov byte [ebp - 0x400], cl
mov dl, byte [ebp - 0x400]
mov byte [ebp - 0x3ff], dl
lea eax, [ebp - 0x520]
push eax
lea ecx, [ebp - 0x11c]
call fcn.1001a960
mov ecx, dword [eax]
mov dword [ebp - 0x460], ecx
movzx edx, byte [ebp - 0x3ff]
push edx
push 0x10046f3c
mov eax, dword [ebp - 0x460]
push eax
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x578]
push edx
mov ecx, 0x10094f58
call fcn.1002b350
push 0x18
lea ecx, [ebp - 0x164]
call fcn.10002e30
push 0x10093d38
lea ecx, [ebp - 0x104]
call fcn.10014b50
push eax
lea ecx, [ebp - 0x164]
call fcn.100124f0
mov byte [ebp - 4], 0x35
lea eax, [ebp - 0x164]
push eax
lea ecx, [ebp - 0x11c]
push ecx
lea ecx, [ebp - 0xd4]
call fcn.10014ba0
mov ecx, eax
call fcn.10012630
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x164]
call fcn.100125d0
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x11c]
call fcn.100077f0
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x104]
call fcn.100125d0
jmp 0x10035862
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x14c]
call fcn.100125d0
mov edx, dword [ebp - 0x3fc]
add edx, 0x28
mov dword [ebp - 0x464], edx
lea eax, [ebp - 0xd4]
push eax
push 0x10093d54
mov ecx, dword [ebp - 0x464]
call fcn.10014b50
mov ecx, eax
call fcn.10012630
mov ecx, dword [ebp - 0x3fc]
add ecx, 0x28
mov dword [ebp - 0x498], ecx
lea edx, [ebp - 0xa4]
push edx
push 0x10093d4c
mov ecx, dword [ebp - 0x498]
call fcn.10014b50
mov ecx, eax
call fcn.10012630
push 0xb0
lea ecx, [ebp - 0x3f8]
call fcn.10002e30
push 1
lea ecx, [ebp - 0x3f8]
call fcn.10036c60
mov byte [ebp - 4], 0x36
push 0xc
lea ecx, [ebp - 0x8c]
call fcn.10002e30
lea eax, [ebp - 0x8c]
push eax
lea ecx, [ebp - 0xd4]
call fcn.10014f50
mov byte [ebp - 4], 0x37
push 0x10093d5c
lea ecx, [ebp - 0x3e8]
push ecx
lea ecx, [ebp - 0x580]
call fcn.10036b90
mov edx, dword [eax + 4]
push edx
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x8c]
push ecx
lea edx, [ebp - 0x684]
push edx
mov ecx, 0x10094f58
call fcn.10037550
lea eax, [ebp - 0x660]
push eax
lea ecx, [ebp - 0x3f8]
call fcn.10036bc0
mov dword [ebp - 0x46c], eax
mov ecx, dword [ebp - 0x46c]
mov dword [ebp - 0x470], ecx
mov byte [ebp - 4], 0x38
mov edx, dword [ebp - 0x470]
mov dword [ebp - 0x474], edx
lea eax, [ebp - 0x5b8]
push eax
mov ecx, dword [ebp - 0x474]
call fcn.1002ac50
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [eax]
push edx
lea eax, [ebp - 0xec]
push eax
call fcn.10029220
add esp, 0xc
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x660]
call fcn.100077f0
xor ecx, ecx
mov byte [ebp - 0x3fe], cl
mov dl, byte [ebp - 0x3fe]
mov byte [ebp - 0x3fd], dl
lea eax, [ebp - 0x4f4]
push eax
lea ecx, [ebp - 0xec]
call fcn.10024890
mov ecx, dword [eax]
mov dword [ebp - 0x478], ecx
movzx edx, byte [ebp - 0x3fd]
push edx
push 0x1004881c
mov eax, dword [ebp - 0x478]
push eax
lea ecx, [ebp - 0xec]
push ecx
lea edx, [ebp - 0x5c0]
push edx
mov ecx, 0x10094f58
call fcn.1002b720
lea eax, [ebp - 0xec]
push eax
push 0x10093d60
push 0x1009d718
call fcn.1001e660
add esp, 8
push eax
call fcn.10037670
add esp, 8
mov dword [ebp - 0x47c], eax
push 0x1001e9f0
mov ecx, dword [ebp - 0x47c]
call fcn.1001c180
push 4
lea ecx, [ebp - 0x2c]
call fcn.10002e30
push 0x10093dd0
lea ecx, [ebp - 0x598]
call fcn.1001e2c0
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x598]
push ecx
push SysFreeString
lea ecx, [ebp - 0x2c]
call fcn.10034490
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x598]
call fcn.1001c1e0
push str.whitelist
lea ecx, [ebp - 0x5b0]
call fcn.1001e2c0
mov byte [ebp - 4], 0x3e
lea edx, [ebp - 0xec]
push edx
lea eax, [ebp - 0x5b0]
push eax
lea ecx, [ebp - 0x2c]
call fcn.100346c0
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x5b0]
call fcn.1001c1e0
lea ecx, [ebp - 0x2c]
call fcn.100344e0
push 0xb0
lea ecx, [ebp - 0x348]
call fcn.10002e30
push 1
lea ecx, [ebp - 0x348]
call fcn.10036c60
mov byte [ebp - 4], 0x3f
push 0xc
lea ecx, [ebp - 0x38]
call fcn.10002e30
lea ecx, [ebp - 0x38]
call fcn.10015ce0
mov byte [ebp - 4], 0x40
push 0x10093e30
lea ecx, [ebp - 0x60]
call fcn.10014b50
mov ecx, eax
call fcn.10013890
movzx ecx, al
test ecx, ecx
jne 0x10035c67
push 0x10093e2c
lea ecx, [ebp - 0x38]
call fcn.10035f80
push 0x10093e40
lea ecx, [ebp - 0x60]
call fcn.10014b50
mov ecx, eax
call fcn.10013890
movzx edx, al
test edx, edx
jne 0x10035c8f
push 0x10093e3c
lea ecx, [ebp - 0x38]
call fcn.10035f80
push 0x10093e50
lea ecx, [ebp - 0x60]
call fcn.10014b50
mov ecx, eax
call fcn.10013890
movzx eax, al
test eax, eax
jne 0x10035cb7
push 0x10093e4c
lea ecx, [ebp - 0x38]
call fcn.10035f80
push 0x10093e5c
lea ecx, [ebp - 0x60]
call fcn.10014b50
mov ecx, eax
call fcn.10013890
movzx ecx, al
test ecx, ecx
jne 0x10035cdf
push 0x10093e58
lea ecx, [ebp - 0x38]
call fcn.10035f80
push 0x10093e6c
lea ecx, [ebp - 0x60]
call fcn.10014b50
mov ecx, eax
call fcn.10013890
movzx edx, al
test edx, edx
jne 0x10035d07
push 0x10093e68
lea ecx, [ebp - 0x38]
call fcn.10035f80
lea eax, [ebp - 0xbc]
push eax
lea ecx, [ebp - 0x60]
push ecx
lea edx, [ebp - 0xa4]
push edx
mov ecx, dword [ebp - 0x3fc]
call fcn.100367d0
lea eax, [ebp - 0x80]
push eax
mov ecx, dword [ebp - 0x3fc]
call fcn.10036650
push 0x10093ef8
lea ecx, [ebp - 0x338]
push ecx
lea ecx, [ebp - 0x5c8]
call fcn.10036b90
mov edx, dword [eax + 4]
push edx
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x38]
push ecx
lea edx, [ebp - 0x690]
push edx
mov ecx, 0x10094f58
call fcn.10037550
lea eax, [ebp - 0x678]
push eax
lea ecx, [ebp - 0x348]
call fcn.10036bc0
mov dword [ebp - 0x480], eax
mov ecx, dword [ebp - 0x480]
mov dword [ebp - 0x484], ecx
mov byte [ebp - 4], 0x41
mov edx, dword [ebp - 0x484]
mov dword [ebp - 0x488], edx
lea eax, [ebp - 0x5d0]
push eax
mov ecx, dword [ebp - 0x488]
call fcn.1002ac50
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [eax]
push edx
lea eax, [ebp - 0x134]
push eax
call fcn.10029220
add esp, 0xc
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x678]
call fcn.100077f0
lea ecx, [ebp - 0x134]
push ecx
push str.APPMOND_:_setting_disabled_injection_controls_registry_value_:
push 0x1009d718
call fcn.1001e660
add esp, 8
push eax
call fcn.10037670
add esp, 8
mov dword [ebp - 0x48c], eax
push 0x1001e9f0
mov ecx, dword [ebp - 0x48c]
call fcn.1001c180
push 4
lea ecx, [ebp - 0x28]
call fcn.10002e30
push str.SOFTWARESmart_XControlUpAgentAppLoadTime
lea ecx, [ebp - 0x538]
call fcn.1001e2c0
mov byte [ebp - 4], 0x44
lea edx, [ebp - 0x538]
push edx
push SysFreeString
lea ecx, [ebp - 0x28]
call fcn.10034490
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x538]
call fcn.1001c1e0
push 0x10093efc
lea ecx, [ebp - 0x550]
call fcn.1001e2c0
mov byte [ebp - 4], 0x47
lea eax, [ebp - 0x134]
push eax
lea ecx, [ebp - 0x550]
push ecx
lea ecx, [ebp - 0x28]
call fcn.100346c0
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x550]
call fcn.1001c1e0
lea ecx, [ebp - 0x28]
call fcn.100344e0
mov dword [ebp - 0x490], 0
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x28]
call fcn.100344c0
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x134]
call fcn.1001c1e0
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x38]
call fcn.10015bf0
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x348]
call fcn.10036140
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x2c]
call fcn.100344c0
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0xec]
call fcn.1001c1e0
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x8c]
call fcn.10015bf0
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x3f8]
call fcn.10036140
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0xd4]
call fcn.100125d0
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0xbc]
call fcn.100125d0
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x60]
call fcn.100125d0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xa4]
call fcn.100125d0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x80]
call fcn.100077f0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.1001bca0
mov eax, dword [ebp - 0x490]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.1003b5fd
mov esp, ebp
pop ebp
ret 4