Function at 0x1000e490
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100f47d8
mov eax, dword fs:[0]
push eax
sub esp, 0x7c
mov eax, dword [0x10126008]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x88], ecx
mov eax, dword [ebp + 0x10]
xorps xmm0, xmm0
mov esi, dword [ebp + 8]
mov edi, dword [ebp + 0xc]
mov dword [ebp - 0x80], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x84], eax
cmp esi, 0x20
jne 0x1000e61c
lea ecx, [ebp - 0x60]
movups xmmword [ebp - 0x60], xmm0
call fcn.1003f990
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x50]
push 0xd
xor eax, eax
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 0
push str.SettingCenter
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
call fcn.10006990
lea edx, [ebp - 0x50]
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x28]
call fcn.10032990
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 4
call fcn.10006900
push 1
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x60]
call fcn.100404b0
mov byte [ebp - 0x61], al
test al, al
jne 0x1000e561
mov byte [ebp - 0x61], al
jmp 0x1000e608
push 0xe
xor eax, eax
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0
lea ecx, [ebp - 0x7c]
push str.BrowserProtect
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 7
mov word [ebp - 0x7c], ax
call fcn.10006990
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x50]
push 0xd
xor eax, eax
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 0
push str.SafetyProtect
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
call fcn.10006990
push 1
lea eax, [ebp - 0x7c]
mov byte [ebp - 4], 0xd
push eax
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x60]
call fcn.1003ff90
test eax, eax
setne al
mov byte [edi], al
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0xe
call fcn.10006900
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x12
call fcn.10006900
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 3
call fcn.10040b60
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x16
call fcn.10006900
lea ecx, [ebp - 0x60]
jmp 0x1000ee17
cmp esi, 0x40
jne 0x1000e715
lea ecx, [ebp - 0x60]
movups xmmword [ebp - 0x60], xmm0
call fcn.1003f990
mov dword [ebp - 4], 0x1a
lea ecx, [ebp - 0x7c]
push 0xd
xor eax, eax
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0
push str.SettingCenter
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 7
mov word [ebp - 0x7c], ax
call fcn.10006990
lea edx, [ebp - 0x7c]
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x50]
call fcn.10032990
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x1e
call fcn.10006900
push 1
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 0x1d
push eax
lea ecx, [ebp - 0x60]
call fcn.100404b0
mov byte [ebp - 0x61], al
test al, al
jne 0x1000e6a2
mov byte [ebp - 0x61], al
jmp 0x1000e701
push str.IEProtect
lea ecx, [ebp - 0x7c]
call fcn.10006740
push str.SafetyProtect
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x26
call fcn.10006740
push 1
lea eax, [ebp - 0x7c]
mov byte [ebp - 4], 0x27
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x60]
call fcn.1003ff90
test eax, eax
setne al
mov byte [edi], al
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x28
call fcn.10006900
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x2c
call fcn.10006900
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0x1d
call fcn.10040b60
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x30
call fcn.10006900
lea ecx, [ebp - 0x60]
jmp 0x1000ee17
lea ecx, [ebp - 0x38]
movups xmmword [ebp - 0x38], xmm0
call fcn.1003f990
mov eax, dword [ebp - 0x88]
lea ecx, [ebp - 0x38]
push 0
add eax, 4
mov dword [ebp - 4], 0x34
push eax
call fcn.100404b0
test al, al
je 0x1000ee10
cmp esi, 0x400
jg 0x1000ebae
je 0x1000ea9f
sub esi, 1
je 0x1000e990
sub esi, 7
je 0x1000e881
sub esi, 0xf8
jne 0x1000ebc2
push str.InsInpt_Entry_OnOff
lea ecx, [ebp - 0x7c]
call fcn.10006740
push str.InsInpt_Section
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x8f
call fcn.10006740
push 1
lea eax, [ebp - 0x7c]
mov byte [ebp - 4], 0x90
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x38]
call fcn.1003ff90
test eax, eax
setne al
mov byte [edi], al
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x91
call fcn.10006900
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x95
call fcn.10006900
push str.InsInpt_Entry_Warn
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x34
call fcn.10006740
push str.InsInpt_Section
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x99
call fcn.10006740
push esi
lea eax, [ebp - 0x7c]
mov byte [ebp - 4], 0x9a
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x38]
call fcn.1003ff90
mov ecx, dword [ebp - 0x80]
test eax, eax
setne al
mov byte [ecx], al
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x9b
call fcn.10006900
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x9f
call fcn.10006900
push str.InsInpt_Entry_Notify
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x34
call fcn.10006740
push str.InsInpt_Section
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xa3
call fcn.10006740
mov byte [ebp - 4], 0xa4
push esi
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x38]
call fcn.1003ff90
mov ecx, dword [ebp - 0x84]
test eax, eax
setne al
mov byte [ecx], al
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xa5
call fcn.10006900
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0xa9
call fcn.10006900
jmp 0x1000edfe
push str.DriverMon_Entry_OnOff
lea ecx, [ebp - 0x7c]
call fcn.10006740
push str.DriverMon_Section
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x53
call fcn.10006740
push 1
lea eax, [ebp - 0x7c]
mov byte [ebp - 4], 0x54
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x38]
call fcn.1003ff90
test eax, eax
setne al
mov byte [edi], al
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x55
call fcn.10006900
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x59
call fcn.10006900
push str.DriverMon_Entry_Warn
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x34
call fcn.10006740
push str.DriverMon_Section
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x5d
call fcn.10006740
push 0
lea eax, [ebp - 0x7c]
mov byte [ebp - 4], 0x5e
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x38]
call fcn.1003ff90
mov ecx, dword [ebp - 0x80]
test eax, eax
setne al
mov byte [ecx], al
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x5f
call fcn.10006900
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x63
call fcn.10006900
push str.DriverMon_Entry_Notify
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x34
call fcn.10006740
push str.DriverMon_Section
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x67
call fcn.10006740
mov byte [ebp - 4], 0x68
push 0
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x38]
call fcn.1003ff90
mov ecx, dword [ebp - 0x84]
test eax, eax
setne al
mov byte [ecx], al
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x69
call fcn.10006900
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x6d
call fcn.10006900
jmp 0x1000edfe
push str.FileMon_Entry_OnOff
lea ecx, [ebp - 0x7c]
call fcn.10006740
push str.FileMon_Section
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x35
call fcn.10006740
push 1
lea eax, [ebp - 0x7c]
mov byte [ebp - 4], 0x36
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x38]
call fcn.1003ff90
test eax, eax
setne al
mov byte [edi], al
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x37
call fcn.10006900
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x3b
call fcn.10006900
push str.FileMon_Entry_Warn
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x34
call fcn.10006740
push str.FileMon_Section
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x3f
call fcn.10006740
push 1
lea eax, [ebp - 0x7c]
mov byte [ebp - 4], 0x40
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x38]
call fcn.1003ff90
mov ecx, dword [ebp - 0x80]
test eax, eax
setne al
mov byte [ecx], al
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x41
call fcn.10006900
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x45
call fcn.10006900
push str.FileMon_Entry_Notify
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x34
call fcn.10006740
push str.FileMon_Section
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x49
call fcn.10006740
mov byte [ebp - 4], 0x4a
push 0
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x38]
call fcn.1003ff90
mov ecx, dword [ebp - 0x84]
test eax, eax
setne al
mov byte [ecx], al
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x4b
call fcn.10006900
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x4f
call fcn.10006900
jmp 0x1000edfe
push str.ShortCutMon_Entry_OnOff
lea ecx, [ebp - 0x7c]
call fcn.10006740
push str.ShortCutMon_Section
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xad
call fcn.10006740
push 1
lea eax, [ebp - 0x7c]
mov byte [ebp - 4], 0xae
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x38]
call fcn.1003ff90
test eax, eax
setne al
mov byte [edi], al
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xaf
call fcn.10006900
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0xb3
call fcn.10006900
push str.ShortCutMon_Entry_Warn
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x34
call fcn.10006740
push str.ShortCutMon_Section
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xb7
call fcn.10006740
push 0
lea eax, [ebp - 0x7c]
mov byte [ebp - 4], 0xb8
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x38]
call fcn.1003ff90
mov ecx, dword [ebp - 0x80]
test eax, eax
setne al
mov byte [ecx], al
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xb9
call fcn.10006900
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0xbd
call fcn.10006900
push str.ShortCutMon_Entry_Notify
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x34
call fcn.10006740
push str.ShortCutMon_Section
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xc1
call fcn.10006740
mov byte [ebp - 4], 0xc2
push 0
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x38]
call fcn.1003ff90
mov ecx, dword [ebp - 0x84]
test eax, eax
setne al
mov byte [ecx], al
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xc3
call fcn.10006900
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0xc7
call fcn.10006900
jmp 0x1000edfe
cmp esi, 0x4000
je 0x1000ecf4
cmp esi, 0x8000000
je 0x1000ebe5
mov ecx, dword [ebp - 0x80]
mov byte [edi], 1
mov byte [ecx], 0
mov ecx, dword [ebp - 0x84]
mov byte [ecx], 0
lea ecx, [ebp - 0x38]
call fcn.10040b60
mov byte [ebp - 0x61], 1
jmp 0x1000ee14
push str.InjectDefence_Entry_OnOff
lea ecx, [ebp - 0x7c]
call fcn.10006740
push str.InjectDefence_Section
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xcb
call fcn.10006740
push 1
lea eax, [ebp - 0x7c]
mov byte [ebp - 4], 0xcc
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x38]
call fcn.1003ff90
test eax, eax
setne al
mov byte [edi], al
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xcd
call fcn.10006900
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0xd1
call fcn.10006900
push str.InjectDefence_Entry_Warn
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x34
call fcn.10006740
push str.InjectDefence_Section
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xd5
call fcn.10006740
push 1
lea eax, [ebp - 0x7c]
mov byte [ebp - 4], 0xd6
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x38]
call fcn.1003ff90
mov ecx, dword [ebp - 0x80]
test eax, eax
setne al
mov byte [ecx], al
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xd7
call fcn.10006900
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0xdb
call fcn.10006900
push str.InjectDefence_Entry_Notify
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x34
call fcn.10006740
push str.InjectDefence_Section
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xdf
call fcn.10006740
mov byte [ebp - 4], 0xe0
push 0
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x38]
call fcn.1003ff90
mov ecx, dword [ebp - 0x84]
test eax, eax
setne al
mov byte [ecx], al
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xe1
call fcn.10006900
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0xe5
call fcn.10006900
jmp 0x1000edfe
push str.ModLoadMon_Entry_OnOff
lea ecx, [ebp - 0x7c]
call fcn.10006740
push str.ModLoadMon_Section
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x71
call fcn.10006740
push 1
lea eax, [ebp - 0x7c]
mov byte [ebp - 4], 0x72
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x38]
call fcn.1003ff90
test eax, eax
setne al
mov byte [edi], al
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x73
call fcn.10006900
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x77
call fcn.10006900
push str.ModLoadMon_Entry_Warn
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x34
call fcn.10006740
push str.ModLoadMon_Section
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x7b
call fcn.10006740
push 0
lea eax, [ebp - 0x7c]
mov byte [ebp - 4], 0x7c
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x38]
call fcn.1003ff90
mov ecx, dword [ebp - 0x80]
test eax, eax
setne al
mov byte [ecx], al
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x7d
call fcn.10006900
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x81
call fcn.10006900
push str.ModLoadMon_Entry_Notify
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x34
call fcn.10006740
push str.ModLoadMon_Section
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x85
call fcn.10006740
mov byte [ebp - 4], 0x86
push 0
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x38]
call fcn.1003ff90
mov ecx, dword [ebp - 0x84]
test eax, eax
setne al
mov byte [ecx], al
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x87
call fcn.10006900
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x8b
call fcn.10006900
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x34
call fcn.10040b60
mov byte [ebp - 0x61], 1
jmp 0x1000ee14
mov byte [ebp - 0x61], 0
lea ecx, [ebp - 0x38]
mov dword [ebp - 4], 0xffffffff
call fcn.1003fad0
mov al, byte [ebp - 0x61]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100f1763
mov esp, ebp
pop ebp
ret 0x10