Function at 0x1001503c
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x538
mov eax, 0x1003fb0a
call fcn.10019db8
mov ebx, ecx
mov esi, dword [ebp + 8]
mov ecx, esi
mov dword [ebp - 0x1c], ebx
call fcn.10016334
lea eax, [ebx + 4]
mov dword [ebp - method.AutoLock.virtual_0], vtable.AutoLock.0
push eax
mov dword [ebp - 0x360], ebx
mov dword [ebp - 0x24], eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
xor eax, eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x80], 0xf
mov byte [ebp - 0x94], al
lea ecx, [ebx + 0x28]
mov byte [ebp - 4], 3
call fcn.10008af1
push ecx
push ecx
mov ecx, esp
lea edx, [esi + 2]
xor edi, edi
mov dword [ecx], esi
mov ax, word [esi]
add esi, 2
cmp ax, di
jne 0x100150ac
sub esi, edx
sar esi, 1
mov dword [ecx + 4], esi
lea ecx, [ebp - 0x7c]
call fcn.1000d812
pop ecx
pop ecx
lea ecx, [ebp - 0x94]
cmp ecx, eax
je 0x100150ec
xor ecx, ecx
mov byte [ebp - 0x348], cl
lea ecx, [ebp - 0x94]
push dword [ebp - 0x348]
push eax
call fcn.100049cd
lea ecx, [ebp - 0x7c]
call fcn.100047b3
xor eax, eax
push 0x74
push eax
lea eax, [ebp - 0x1e4]
push eax
call fcn.1001b300
add esp, 0xc
lea ecx, [ebp - 0x1e4]
call fcn.10001d3e
push ecx
lea esi, [ebx + 0x28]
mov byte [ebp - 4], 4
push esi
lea eax, [ebp - 0x94]
push eax
lea ecx, [ebp - 0x1e4]
call fcn.10001dd2
lea ecx, [ebp - 0x1e4]
test al, al
jne 0x100151ae
lea eax, [ebp - 0x7c]
push eax
call fcn.10003358
mov byte [ebp - 4], 5
cmp dword [eax + 0x14], 0x10
mov ecx, dword [eax + 0x10]
jb 0x10015150
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0x4c]
call fcn.10011576
pop ecx
pop ecx
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 7
call fcn.100047b3
mov ecx, dword [ebx + 0x20]
test ecx, ecx
je 0x1001517f
cmp dword [ebp - 0x38], 8
lea eax, [ebp - 0x4c]
cmovae eax, dword [ebp - 0x4c]
push eax
push 0xfffffffffffffffe
call ecx
lea ecx, [ebp - 0x4c]
call fcn.1000be69
lea ecx, [ebp - 0x1e4]
call fcn.1000ef75
lea ecx, [ebp - 0x94]
call fcn.100047b3
lea ecx, [ebx + 4]
push ecx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0xfffffffffffffffe
jmp 0x10015f4b
call fcn.1000ef75
mov dword [ebp - 4], 2
mov eax, dword fs:[0x2c]
mov ecx, dword [0x10077c88]
mov edi, dword [eax + ecx*4]
mov eax, dword [0x100786cc]
cmp eax, dword [edi + 4]
jle 0x100153b4
push 0x100786cc
call fcn.10019322
cmp dword [0x100786cc], 0xffffffff
pop ecx
jne 0x100153b4
xorps xmm0, xmm0
mov byte [ebp - 4], 0xa
push str.EnableALT
lea ecx, [ebp - 0x544]
movlpd qword [0x100786dc], xmm0
call fcn.100041f0
xor eax, eax
lea ecx, [ebp - 0x52c]
push eax
call fcn.10008149
push str.Threshold
lea ecx, [ebp - 0x514]
mov byte [ebp - 4], 0xb
call fcn.100041f0
movsd xmm1, qword [0x1006f0c0]
lea ecx, [ebp - 0x4fc]
call fcn.10008040
push str.FirstEvaluationTimeSec
lea ecx, [ebp - 0x4e4]
mov byte [ebp - 4], 0xc
call fcn.100041f0
movsd xmm1, qword [0x1006f108]
lea ecx, [ebp - 0x4cc]
call fcn.10008040
push str.DiscretSec
lea ecx, [ebp - 0x4b4]
mov byte [ebp - 4], 0xd
call fcn.100041f0
movsd xmm1, qword [0x1006f0b0]
lea ecx, [ebp - 0x49c]
call fcn.10008040
push str.UseIO
lea ecx, [ebp - 0x484]
mov byte [ebp - 4], 0xe
call fcn.100041f0
push 1
lea ecx, [ebp - 0x46c]
call fcn.10008149
push str.UseCPU
lea ecx, [ebp - 0x454]
mov byte [ebp - 4], 0xf
call fcn.100041f0
xor eax, eax
lea ecx, [ebp - 0x43c]
push eax
call fcn.10008149
push str.WriteLog
lea ecx, [ebp - 0x424]
mov byte [ebp - 4], 0x10
call fcn.100041f0
push 1
lea ecx, [ebp - 0x40c]
call fcn.10008149
push str.WriteProcessLog
lea ecx, [ebp - 0x3f4]
mov byte [ebp - 4], 0x11
call fcn.100041f0
xor eax, eax
lea ecx, [ebp - 0x3dc]
push eax
call fcn.10008149
push str.ProcessLogFolder
lea ecx, [ebp - 0x3c4]
mov byte [ebp - 4], 0x12
call fcn.100041f0
push 0x1006d36b
lea ecx, [ebp - 0x3ac]
mov byte [ebp - 4], 0x13
call fcn.10008068
mov byte [ebp - 4], 0x14
push str.IEReportChildProcess
lea ecx, [ebp - 0x394]
call fcn.100041f0
xor eax, eax
lea ecx, [ebp - 0x37c]
push eax
call fcn.10008149
lea eax, [ebp - 0x364]
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x544]
push eax
push ecx
mov ecx, 0x100786dc
call fcn.10016983
push 0x10015f9b
push 0xa
push 0x30
lea eax, [ebp - 0x544]
mov byte [ebp - 4], 0xa
push eax
call fcn.10019428
push 0x1003fe95
call fcn.100198f2
mov byte [ebp - 4], 2
mov dword [esp], 0x100786cc
call fcn.100192d8
pop ecx
mov eax, dword [0x100786d8]
cmp eax, dword [edi + 4]
jle 0x100154dd
push 0x100786d8
call fcn.10019322
cmp dword [0x100786d8], 0xffffffff
pop ecx
jne 0x100154dd
xorps xmm0, xmm0
mov byte [ebp - 4], 0x16
push str.HookLibs
lea ecx, [ebp - 0x454]
movlpd qword [0x10078740], xmm0
call fcn.100041f0
push 1
lea ecx, [ebp - 0x43c]
call fcn.10008149
push str.HookUser
lea ecx, [ebp - 0x424]
mov byte [ebp - 4], 0x17
call fcn.100041f0
push 1
lea ecx, [ebp - 0x40c]
call fcn.10008149
push str.HookWnd
lea ecx, [ebp - 0x3f4]
mov byte [ebp - 4], 0x18
call fcn.100041f0
push 1
lea ecx, [ebp - 0x3dc]
call fcn.10008149
push str.ReportPipe
lea ecx, [ebp - 0x3c4]
mov byte [ebp - 4], 0x19
call fcn.100041f0
push 1
lea ecx, [ebp - 0x3ac]
call fcn.10008149
push str.CheckParent
lea ecx, [ebp - 0x394]
mov byte [ebp - 4], 0x1a
call fcn.100041f0
push 1
lea ecx, [ebp - 0x37c]
call fcn.10008149
lea eax, [ebp - 0x364]
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x454]
push eax
push ecx
mov ecx, 0x10078740
call fcn.10016983
push 0x10015f9b
push 5
push 0x30
lea eax, [ebp - 0x454]
mov byte [ebp - 4], 0x16
push eax
call fcn.10019428
push 0x1003fe8b
call fcn.100198f2
mov byte [ebp - 4], 2
mov dword [esp], 0x100786d8
call fcn.100192d8
pop ecx
mov eax, dword [0x100786d4]
cmp eax, dword [edi + 4]
jle 0x10015606
mov edi, 0x100786d4
push edi
call fcn.10019322
cmp dword [0x100786d4], 0xffffffff
pop ecx
jne 0x10015606
xorps xmm0, xmm0
mov byte [ebp - 4], 0x1c
push str.Enable
lea ecx, [ebp - 0x454]
movlpd qword [0x10078748], xmm0
call fcn.100041f0
xor eax, eax
lea ecx, [ebp - 0x43c]
push eax
call fcn.10008149
push str.Threshold
lea ecx, [ebp - 0x424]
mov byte [ebp - 4], 0x1d
call fcn.100041f0
push 3
lea ecx, [ebp - 0x40c]
call fcn.10007ff8
push str.IESupported
lea ecx, [ebp - 0x3f4]
mov byte [ebp - 4], 0x1e
call fcn.100041f0
xor eax, eax
lea ecx, [ebp - 0x3dc]
push eax
call fcn.10008149
push str.ChromeSupported
lea ecx, [ebp - 0x3c4]
mov byte [ebp - 4], 0x1f
call fcn.100041f0
xor eax, eax
lea ecx, [ebp - 0x3ac]
push eax
call fcn.10008149
push str.FireFoxSupported
lea ecx, [ebp - 0x394]
mov byte [ebp - 4], 0x20
call fcn.100041f0
xor eax, eax
lea ecx, [ebp - 0x37c]
push eax
call fcn.10008149
lea eax, [ebp - 0x364]
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x454]
push eax
push ecx
mov ecx, 0x10078748
call fcn.10016983
push 0x10015f9b
push 5
push 0x30
lea eax, [ebp - 0x454]
mov byte [ebp - 4], 0x1c
push eax
call fcn.10019428
push 0x1003fe81
call fcn.100198f2
pop ecx
push edi
mov byte [ebp - 4], 2
call fcn.100192d8
pop ecx
push 6
pop ecx
xor eax, eax
lea edi, [ebp - 0x13c]
rep stosd dword es:[edi], eax
push eax
lea ecx, [ebp - 0x7c]
call fcn.10007f4c
push eax
push str.DefaultSettings
lea eax, [ebp - 0x13c]
mov byte [ebp - 4], 0x22
push eax
mov ecx, esi
call fcn.100092ec
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x24
call fcn.1000819d
mov eax, dword [0x100786dc]
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
cmp byte [eax + 0xd], 0
jne 0x100156de
add eax, 0x10
lea ecx, [ebp - 0x10c]
push eax
call fcn.10015fae
lea eax, [ebp - 0xf4]
mov byte [ebp - 4], 0x25
push eax
lea eax, [ebp - 0x10c]
push eax
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x13c]
call fcn.10009326
mov esi, eax
lea eax, [ebp - 0x10c]
mov byte [ebp - 4], 0x26
push eax
lea ecx, [ebp - 0x13c]
call fcn.100091fb
push eax
mov ecx, esi
call fcn.10008220
lea ecx, [ebp - 0x64]
call fcn.1000819d
lea ecx, [ebp - 0xf4]
mov byte [ebp - 4], 0x24
call fcn.1000819d
lea ecx, [ebp - 0x10c]
call fcn.100047b3
lea ecx, [ebp - 0x1c]
call fcn.100098aa
mov eax, dword [ebp - 0x1c]
cmp byte [eax + 0xd], 0
je 0x10015654
lea esi, [ebx + 0x28]
push 6
pop ecx
xor eax, eax
lea edi, [ebp - 0xdc]
rep stosd dword es:[edi], eax
push eax
lea ecx, [ebp - 0x64]
call fcn.10007f4c
push eax
push str.InjectSettings
lea eax, [ebp - 0xdc]
mov byte [ebp - 4], 0x27
push eax
mov ecx, esi
call fcn.100092ec
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x29
call fcn.1000819d
mov eax, dword [0x10078740]
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
cmp byte [eax + 0xd], 0
jne 0x100157b6
add eax, 0x10
lea ecx, [ebp - 0x10c]
push eax
call fcn.10015fae
lea eax, [ebp - 0xf4]
mov byte [ebp - 4], 0x2a
push eax
lea eax, [ebp - 0x10c]
push eax
lea eax, [ebp - 0x7c]
push eax
lea ecx, [ebp - 0xdc]
call fcn.10009326
mov esi, eax
lea eax, [ebp - 0x10c]
mov byte [ebp - 4], 0x2b
push eax
lea ecx, [ebp - 0xdc]
call fcn.100091fb
push eax
mov ecx, esi
call fcn.10008220
lea ecx, [ebp - 0x7c]
call fcn.1000819d
lea ecx, [ebp - 0xf4]
mov byte [ebp - 4], 0x29
call fcn.1000819d
lea ecx, [ebp - 0x10c]
call fcn.100047b3
lea ecx, [ebp - 0x1c]
call fcn.100098aa
mov eax, dword [ebp - 0x1c]
cmp byte [eax + 0xd], 0
je 0x1001572c
lea esi, [ebx + 0x28]
push 6
pop ecx
xor eax, eax
lea edi, [ebp - 0x16c]
rep stosd dword es:[edi], eax
push eax
lea ecx, [ebp - 0x7c]
call fcn.10007f4c
push eax
push str.BrowserURLSettings
lea eax, [ebp - 0x16c]
mov byte [ebp - 4], 0x2c
push eax
mov ecx, esi
call fcn.100092ec
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x2e
call fcn.1000819d
mov eax, dword [0x10078748]
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
cmp byte [eax + 0xd], 0
jne 0x1001588e
add eax, 0x10
lea ecx, [ebp - 0x10c]
push eax
call fcn.10015fae
lea eax, [ebp - 0xf4]
mov byte [ebp - 4], 0x2f
push eax
lea eax, [ebp - 0x10c]
push eax
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x16c]
call fcn.10009326
mov esi, eax
lea eax, [ebp - 0x10c]
mov byte [ebp - 4], 0x30
push eax
lea ecx, [ebp - 0x16c]
call fcn.100091fb
push eax
mov ecx, esi
call fcn.10008220
lea ecx, [ebp - 0x64]
call fcn.1000819d
lea ecx, [ebp - 0xf4]
mov byte [ebp - 4], 0x2e
call fcn.1000819d
lea ecx, [ebp - 0x10c]
call fcn.100047b3
lea ecx, [ebp - 0x1c]
call fcn.100098aa
mov eax, dword [ebp - 0x1c]
cmp byte [eax + 0xd], 0
je 0x10015804
lea esi, [ebx + 0x28]
push 6
pop ecx
xor eax, eax
lea edi, [ebp - 0x154]
rep stosd dword es:[edi], eax
push 7
lea ecx, [ebp - 0x154]
call fcn.10007f4c
push 6
pop ecx
xor eax, eax
mov byte [ebp - 4], 0x31
lea edi, [ebp - 0x64]
rep stosd dword es:[edi], eax
push 6
lea ecx, [ebp - 0xf4]
call fcn.10007f4c
push eax
push str.MonitoredApps
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 0x32
push eax
mov ecx, esi
call fcn.100092ec
lea ecx, [ebp - 0xf4]
mov byte [ebp - 4], 0x34
call fcn.1000819d
lea eax, [ebp - 0x20]
xorps xmm0, xmm0
push eax
lea ecx, [ebp - 0x64]
movlpd qword [ebp - 0x20], xmm0
call fcn.100096fa
lea eax, [ebp - 0x28]
movlpd qword [ebp - 0x28], xmm0
push eax
lea ecx, [ebp - 0x64]
call fcn.1000972e
cmp byte [ebp - 0x1c], 0
mov edx, dword [ebp - 0x20]
je 0x1001591a
mov al, byte [ebp - 0x24]
jmp 0x10015920
cmp edx, dword [ebp - 0x28]
sete al
test al, al
jne 0x10015a1a
push 6
pop ecx
xor eax, eax
lea edi, [ebp - 0x4c]
rep stosd dword es:[edi], eax
lea eax, [edx + 0x18]
push eax
lea ecx, [ebp - 0x4c]
call fcn.10008168
push 0x1006e6f4
push str.Name
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x35
call fcn.10008faf
mov ecx, eax
call fcn.10008293
push eax
lea ecx, [ebp - 0xac]
call fcn.100041f0
xor eax, eax
mov byte [ebp - 4], 0x36
cmp dword [ebp - 0x98], 0x10
mov byte [ebp - 0x348], al
lea eax, [ebp - 0xac]
push dword [ebp - 0x348]
cmovae eax, dword [ebp - 0xac]
push 0x10024b5c
push eax
lea eax, [ebp - 0xac]
push eax
lea eax, [ebp - 0x354]
push eax
call fcn.100122f4
push 6
pop ecx
xor eax, eax
lea edi, [ebp - 0x7c]
rep stosd dword es:[edi], eax
push 0x1006eacc
push 0x1006eac4
lea ecx, [ebp - 0x4c]
call fcn.10008faf
push eax
lea ecx, [ebp - 0x7c]
call fcn.10008168
lea eax, [ebp - 0x7c]
mov byte [ebp - 4], 0x37
push eax
push ecx
lea eax, [ebp - 0xac]
push eax
lea ecx, [ebp - 0x154]
call fcn.100091fb
pop ecx
mov ecx, eax
call fcn.100081bc
lea ecx, [ebp - 0x7c]
call fcn.1000819d
lea ecx, [ebp - 0xac]
call fcn.100047b3
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x34
call fcn.1000819d
lea ecx, [ebp - 0x20]
call fcn.100098aa
jmp 0x1001590c
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x31
call fcn.1000819d
lea eax, [ebp - 0x154]
push eax
push ecx
push 0x1006ead4
push str.apps
mov ecx, esi
call fcn.10008faf
pop ecx
mov ecx, eax
call fcn.100081bc
lea eax, [ebp - 0x13c]
push eax
push ecx
push 0x1006eadc
push str.defs
mov ecx, esi
call fcn.10008faf
pop ecx
mov ecx, eax
call fcn.100081bc
mov esi, 0xb0
xor eax, eax
push esi
push eax
lea eax, [ebp - 0x344]
push eax
call fcn.1001b300
pop ecx
pop ecx
lea ecx, [ebp - 0x344]
call fcn.10016862
xor eax, eax
mov byte [ebp - 4], 0x38
lea edi, [ebp - 0xa0]
stosd dword es:[edi], eax
lea ecx, [ebp - 0x154]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0xa0]
push eax
call fcn.10009366
lea eax, [ebp - 0x334]
mov byte [ebp - 4], 0x39
push eax
push 0x1006de1c
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x358]
push eax
call fcn.10016a8d
lea eax, [ebp - 0x4c]
push eax
lea ecx, [ebp - 0x32c]
call fcn.100045a1
mov byte [ebp - 4], 0x3a
lea eax, [ebp - 0x4c]
cmp dword [ebp - 0x38], 0x10
lea ecx, [ebp - 0xc4]
push dword [ebp - 0x3c]
cmovae eax, dword [ebp - 0x4c]
push eax
call fcn.10011576
pop ecx
pop ecx
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x3c
call fcn.100047b3
xor eax, eax
cmp dword [ebp - 0xb0], 8
mov byte [ebp - 0x348], al
lea eax, [ebp - 0xc4]
cmovae eax, dword [ebp - 0xc4]
push dword [ebp - 0x348]
push ecx
push eax
lea eax, [ebp - 0xc4]
push eax
lea eax, [ebp - 0x354]
push eax
call fcn.1001471e
mov edx, str.APPMOND_:_setting_whitelist_registry_value_:
mov ecx, 0x10077708
call fcn.1000c9e9
cmp dword [ebp - 0xb0], 8
lea edx, [ebp - 0xc4]
push dword [ebp - 0xb4]
cmovae edx, dword [ebp - 0xc4]
mov ecx, eax
call fcn.10016be5
pop ecx
push eax
call fcn.1000cb78
xor eax, eax
mov dword [esp], str.SOFTWARESmart_XControlUpAgentAppLoadTime
lea ecx, [ebp - 0x7c]
mov dword [ebp - 0x1c], eax
call fcn.1000c8be
lea eax, [ebp - 0x7c]
mov byte [ebp - 4], 0x3d
push eax
push ecx
lea ecx, [ebp - 0x1c]
call fcn.10014d27
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x3f
call fcn.1000be69
push str.whitelist
lea ecx, [ebp - 0x64]
call fcn.1000c8be
lea eax, [ebp - 0xc4]
mov byte [ebp - 4], 0x40
push eax
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x1c]
call fcn.10014e15
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x3f
call fcn.1000be69
lea ecx, [ebp - 0x1c]
call fcn.10014da9
xor eax, eax
push esi
push eax
lea eax, [ebp - 0x294]
push eax
call fcn.1001b300
pop ecx
pop ecx
lea ecx, [ebp - 0x294]
call fcn.10016862
xor eax, eax
lea edi, [ebp - 0x34]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], eax
push 0x1006ea70
push str.HookLibs
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x42
call fcn.10008faf
mov ecx, eax
call fcn.100089b2
test al, al
jne 0x10015c41
push 0x1006ebb0
lea ecx, [ebp - 0x34]
call fcn.10015f6d
push 0x1006ea7c
push str.HookUser
lea ecx, [ebp - 0xdc]
call fcn.10008faf
mov ecx, eax
call fcn.100089b2
test al, al
jne 0x10015c6e
push 0x1006ebb4
lea ecx, [ebp - 0x34]
call fcn.10015f6d
push 0x1006ea87
push str.HookWnd
lea ecx, [ebp - 0xdc]
call fcn.10008faf
mov ecx, eax
call fcn.100089b2
test al, al
jne 0x10015c9b
push 0x1006ebb8
lea ecx, [ebp - 0x34]
call fcn.10015f6d
push 0x1006ea92
push str.ReportPipe
lea ecx, [ebp - 0xdc]
call fcn.10008faf
mov ecx, eax
call fcn.100089b2
test al, al
jne 0x10015cc8
push 0x1006ebbc
lea ecx, [ebp - 0x34]
call fcn.10015f6d
push 0x1006ea9f
push str.CheckParent
lea ecx, [ebp - 0xdc]
call fcn.10008faf
mov ecx, eax
call fcn.100089b2
test al, al
jne 0x10015cf5
push 0x1006ebc0
lea ecx, [ebp - 0x34]
call fcn.10015f6d
lea eax, [ebp - 0x16c]
mov ecx, ebx
push eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0x13c]
push eax
call fcn.10016496
lea eax, [ebp - 0x94]
mov ecx, ebx
push eax
call fcn.10016379
lea eax, [ebp - 0x284]
push eax
push 0x1006de1c
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x358]
push eax
call fcn.10016a8d
lea eax, [ebp - 0x4c]
push eax
lea ecx, [ebp - 0x27c]
call fcn.100045a1
mov byte [ebp - 4], 0x43
lea eax, [ebp - 0x4c]
cmp dword [ebp - 0x38], 0x10
lea ecx, [ebp - 0x124]
push dword [ebp - 0x3c]
cmovae eax, dword [ebp - 0x4c]
push eax
call fcn.10011576
pop ecx
pop ecx
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x45
call fcn.100047b3
mov edx, str.APPMOND_:_setting_disabled_injection_controls_registry_value_:
mov ecx, 0x10077708
call fcn.1000c9e9
cmp dword [ebp - 0x110], 8
lea edx, [ebp - 0x124]
push dword [ebp - 0x114]
cmovae edx, dword [ebp - 0x124]
mov ecx, eax
call fcn.10016be5
pop ecx
push eax
call fcn.1000cb78
xor eax, eax
mov dword [esp], str.SOFTWARESmart_XControlUpAgentAppLoadTime
lea ecx, [ebp - 0x7c]
mov dword [ebp - 0x24], eax
call fcn.1000c8be
lea eax, [ebp - 0x7c]
mov byte [ebp - 4], 0x46
push eax
push ecx
lea ecx, [ebp - 0x24]
call fcn.10014d27
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x48
call fcn.1000be69
push str.ictrls_disabled
lea ecx, [ebp - 0x64]
call fcn.1000c8be
lea eax, [ebp - 0x124]
mov byte [ebp - 4], 0x49
push eax
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x24]
call fcn.10014e15
lea ecx, [ebp - 0x64]
call fcn.1000be69
lea ecx, [ebp - 0x24]
call fcn.10014da9
lea ecx, [ebp - 0x24]
call fcn.10014da9
lea ecx, [ebp - 0x124]
call fcn.1000be69
lea ecx, [ebp - 0x34]
call fcn.1000978e
lea ecx, [ebp - 0x22c]
call fcn.10016833
lea eax, [ebp - 0x22c]
mov byte [ebp - 4], 0x4a
mov esi, vtable.std::ios_base.0
push eax
mov dword [ebp - 0x22c], esi
call fcn.100181c2
pop ecx
lea ecx, [ebp - 0x1c]
call fcn.10014da9
lea ecx, [ebp - 0xc4]
call fcn.1000be69
lea ecx, [ebp - 0xa0]
call fcn.1000978e
lea ecx, [ebp - 0x2dc]
call fcn.10016833
lea eax, [ebp - 0x2dc]
mov byte [ebp - 4], 0x4b
push eax
mov dword [ebp - 0x2dc], esi
call fcn.100181c2
pop ecx
lea ecx, [ebp - 0x154]
call fcn.1000819d
lea ecx, [ebp - 0x16c]
call fcn.1000819d
lea ecx, [ebp - 0xdc]
call fcn.1000819d
lea ecx, [ebp - 0x13c]
call fcn.1000819d
lea ecx, [ebp - 0x94]
call fcn.100047b3
lea eax, [ebx + 4]
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
xor eax, eax
jmp 0x10015f4c
pop eax
call fcn.10019d0a
ret 4