Function at 0x10036c0a
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov eax, 0x10058408
call fcn.10052270
sub esp, 0x24
push ebx
push esi
push edi
mov ebx, ecx
push 0xf
push ecx
mov esi, 0x10078b14
mov ecx, esp
mov dword [ebp - 0x14], esp
push esi
mov dword [ebp - 0x10], ebx
call fcn.100034da
and dword [ebp - 4], 0
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
push esi
call fcn.100034da
push ecx
mov byte [ebp - 4], 1
mov ecx, esp
mov dword [ebp - 0x18], esp
push str.871C5380_42A0_1069_A2EA_08002B30309D
call fcn.100034da
or edi, 0xffffffff
push 0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037b13
add ebx, 0x98
push eax
mov ecx, ebx
mov dword [ebp - 4], 3
call fcn.10037c86
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037bbe
push 0xf
push ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
push str._shdoclc.dll__881
call fcn.100034da
push 2
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.InfoTip
mov dword [ebp - 4], 4
call fcn.100034da
push ecx
mov byte [ebp - 4], 5
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.871C5380_42A0_1069_A2EA_08002B30309D
call fcn.100034da
push 0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037b13
push eax
mov ecx, ebx
mov dword [ebp - 4], 7
call fcn.10037c86
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037bbe
push 0xf
push ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
push str._shdoclc.dll__880
call fcn.100034da
push 2
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.LocalizedString
mov dword [ebp - 4], 8
call fcn.100034da
push ecx
mov byte [ebp - 4], 9
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.871C5380_42A0_1069_A2EA_08002B30309D
call fcn.100034da
push 0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037b13
push eax
mov ecx, ebx
mov dword [ebp - 4], 0xb
call fcn.10037c86
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037bbe
push 0xf
push ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
push str._SystemRoot__system32_shdocvw.dll
call fcn.100034da
push 2
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push esi
mov dword [ebp - 4], 0xc
call fcn.100034da
push ecx
mov byte [ebp - 4], 0xd
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.871C5380_42A0_1069_A2EA_08002B30309DInProcServer32
call fcn.100034da
push 0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037b13
push eax
mov ecx, ebx
mov dword [ebp - 4], 0xf
call fcn.10037c86
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037bbe
push 0xf
push ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
push str.Apartment
call fcn.100034da
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.ThreadingModel
mov dword [ebp - 4], 0x10
call fcn.100034da
push ecx
mov byte [ebp - 4], 0x11
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.871C5380_42A0_1069_A2EA_08002B30309DInProcServer32
call fcn.100034da
push 0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037b13
push eax
mov ecx, ebx
mov dword [ebp - 4], 0x13
call fcn.10037c86
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037bbe
push 0xf
push ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
push str.shdoclc.dll__190
call fcn.100034da
push 2
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push esi
mov dword [ebp - 4], 0x14
call fcn.100034da
push ecx
mov byte [ebp - 4], 0x15
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.871C5380_42A0_1069_A2EA_08002B30309DDefaultIcon
call fcn.100034da
push 0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037b13
push eax
mov ecx, ebx
mov dword [ebp - 4], 0x17
call fcn.10037c86
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037bbe
push 0xf
push ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
push str.OpenHomePage
call fcn.100034da
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push esi
mov dword [ebp - 4], 0x18
call fcn.100034da
push ecx
mov byte [ebp - 4], 0x19
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.871C5380_42A0_1069_A2EA_08002B30309D_shell
call fcn.100034da
push 0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037b13
push eax
mov ecx, ebx
mov dword [ebp - 4], 0x1b
call fcn.10037c86
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037bbe
push 0xf
push ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
push 0x1007630c
call fcn.100034da
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push esi
mov dword [ebp - 4], 0x1c
call fcn.100034da
push ecx
mov byte [ebp - 4], 0x1d
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.871C5380_42A0_1069_A2EA_08002B30309D_shellOpenHomePage
call fcn.100034da
push 0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037b13
push eax
mov ecx, ebx
mov dword [ebp - 4], 0x1f
call fcn.10037c86
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037bbe
push 0xf
push ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
push str._shdoclc.dll__10241
call fcn.100034da
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.MUIVerb
mov dword [ebp - 4], 0x20
call fcn.100034da
push ecx
mov byte [ebp - 4], 0x21
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.871C5380_42A0_1069_A2EA_08002B30309D_shellOpenHomePage
call fcn.100034da
push 0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037b13
push eax
mov ecx, ebx
mov dword [ebp - 4], 0x23
call fcn.10037c86
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037bbe
push 0xf
push ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
push str._ProgramFiles_Internet_ExplorerIEXPLORE.EXE
call fcn.100034da
push 2
mov dword [ebp - 4], 0x24
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push esi
call fcn.100034da
push ecx
mov byte [ebp - 4], 0x25
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.871C5380_42A0_1069_A2EA_08002B30309D_shellOpenHomePagecommand
call fcn.100034da
push 0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037b13
push eax
mov ecx, ebx
mov dword [ebp - 4], 0x27
call fcn.10037c86
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037bbe
push 0xf
push ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
push 0x10074e54
call fcn.100034da
push 4
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push esi
mov dword [ebp - 4], 0x28
call fcn.100034da
push ecx
mov byte [ebp - 4], 0x29
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.871C5380_42A0_1069_A2EA_08002B30309DShellFolder
call fcn.100034da
push 0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037b13
push eax
mov ecx, ebx
mov dword [ebp - 4], 0x2b
call fcn.10037c86
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037bbe
push 0xf
push ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
push esi
call fcn.100034da
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.WantsParseDisplayName
mov dword [ebp - 4], 0x2c
call fcn.100034da
push ecx
mov byte [ebp - 4], 0x2d
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.871C5380_42A0_1069_A2EA_08002B30309DShellFolder
call fcn.100034da
mov dword [ebp - 4], edi
push 0
lea ecx, [ebp - 0x30]
call fcn.10037b13
push eax
mov ecx, ebx
mov dword [ebp - 4], 0x2f
call fcn.10037c86
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037bbe
push 0x10
push ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
push esi
call fcn.100034da
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push esi
mov dword [ebp - 4], 0x30
call fcn.100034da
push ecx
mov byte [ebp - 4], 0x31
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.871C5380_42A0_1069_A2EA_08002B30309D
call fcn.100034da
push 0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037b13
push eax
mov ecx, ebx
mov dword [ebp - 4], 0x33
call fcn.10037c86
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037bbe
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
push str._shdoclc.dll__881
call fcn.100034da
push 2
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.InfoTip
mov dword [ebp - 4], 0x34
call fcn.100034da
push ecx
mov byte [ebp - 4], 0x35
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.871C5380_42A0_1069_A2EA_08002B30309D
call fcn.100034da
push 0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037b13
push eax
mov ecx, ebx
mov dword [ebp - 4], 0x37
call fcn.10037c86
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037bbe
push 0x10
push ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
push str._shdoclc.dll__880
call fcn.100034da
push 2
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.LocalizedString
mov dword [ebp - 4], 0x38
call fcn.100034da
push ecx
mov byte [ebp - 4], 0x39
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.871C5380_42A0_1069_A2EA_08002B30309D
call fcn.100034da
push 0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037b13
push eax
mov ecx, ebx
mov dword [ebp - 4], 0x3b
call fcn.10037c86
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037bbe
push 0x10
push ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
push str._SystemRoot_System32ieframe.dll__190
call fcn.100034da
push 2
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push esi
mov dword [ebp - 4], 0x3c
call fcn.100034da
push ecx
mov byte [ebp - 4], 0x3d
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.871C5380_42A0_1069_A2EA_08002B30309DDefaultIcon
call fcn.100034da
push 0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037b13
push eax
mov ecx, ebx
mov dword [ebp - 4], 0x3f
call fcn.10037c86
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037bbe
push 0x10
push ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
push str._SystemRoot__system32ieframe.dll
call fcn.100034da
push 2
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push esi
mov dword [ebp - 4], 0x40
call fcn.100034da
push ecx
mov byte [ebp - 4], 0x41
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.871C5380_42A0_1069_A2EA_08002B30309DInProcServer32
call fcn.100034da
push 0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037b13
push eax
mov ecx, ebx
mov dword [ebp - 4], 0x43
call fcn.10037c86
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037bbe
push 0x10
push ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
push str.Apartment
call fcn.100034da
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.ThreadingModel
mov dword [ebp - 4], 0x44
call fcn.100034da
push ecx
mov byte [ebp - 4], 0x45
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.871C5380_42A0_1069_A2EA_08002B30309DInProcServer32
call fcn.100034da
push 0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037b13
push eax
mov ecx, ebx
mov dword [ebp - 4], 0x47
call fcn.10037c86
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037bbe
push 0x10
push ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
push 0x10074e54
call fcn.100034da
push 4
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.Attributes
mov dword [ebp - 4], 0x48
call fcn.100034da
push ecx
mov byte [ebp - 4], 0x49
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.871C5380_42A0_1069_A2EA_08002B30309DShellFolder
call fcn.100034da
push 0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037b13
mov dword [ebp - 4], 0x4b
push eax
mov ecx, ebx
call fcn.10037c86
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037bbe
push 0x10
push ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
push str.OpenHomePage
call fcn.100034da
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push esi
mov dword [ebp - 4], 0x4c
call fcn.100034da
push ecx
mov byte [ebp - 4], 0x4d
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.871C5380_42A0_1069_A2EA_08002B30309D_shell
call fcn.100034da
push 0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037b13
push eax
mov ecx, ebx
mov dword [ebp - 4], 0x4f
call fcn.10037c86
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037bbe
push 0x10
push ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
push str.Open_Home_Page
call fcn.100034da
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push esi
mov dword [ebp - 4], 0x50
call fcn.100034da
push ecx
mov byte [ebp - 4], 0x51
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.871C5380_42A0_1069_A2EA_08002B30309D_shellOpenHomePage
call fcn.100034da
push 0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037b13
push eax
mov ecx, ebx
mov dword [ebp - 4], 0x53
call fcn.10037c86
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037bbe
push 0x10
push ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
push esi
call fcn.100034da
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.LegacyDisable
mov dword [ebp - 4], 0x54
call fcn.100034da
push ecx
mov byte [ebp - 4], 0x55
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.871C5380_42A0_1069_A2EA_08002B30309D_shellOpenHomePage
call fcn.100034da
push 0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037b13
push eax
mov ecx, ebx
mov dword [ebp - 4], 0x57
call fcn.10037c86
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037bbe
push 0x10
push ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
push str._ProgramFiles_Internet_ExplorerIEXPLORE.EXE
call fcn.100034da
push 2
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push esi
mov dword [ebp - 4], 0x58
call fcn.100034da
push ecx
mov byte [ebp - 4], 0x59
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.871C5380_42A0_1069_A2EA_08002B30309D_shellOpenHomePagecommand
call fcn.100034da
push 0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037b13
push eax
mov ecx, ebx
mov dword [ebp - 4], 0x5b
call fcn.10037c86
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037bbe
push 0x10
push ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
push str.Start_Without_Add_ons
call fcn.100034da
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push esi
mov dword [ebp - 4], 0x5c
call fcn.100034da
push ecx
mov byte [ebp - 4], 0x5d
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.871C5380_42A0_1069_A2EA_08002B30309D_shellNoAddOns
call fcn.100034da
push 0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037b13
push eax
mov ecx, ebx
mov dword [ebp - 4], 0x5f
call fcn.10037c86
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037bbe
push 0x10
push ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
push esi
call fcn.100034da
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.LegacyDisable
mov dword [ebp - 4], 0x60
call fcn.100034da
push ecx
mov byte [ebp - 4], 0x61
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.871C5380_42A0_1069_A2EA_08002B30309D_shellNoAddOns
call fcn.100034da
push 0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037b13
push eax
mov ecx, ebx
mov dword [ebp - 4], 0x63
call fcn.10037c86
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037bbe
push 0x10
push ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
push str.__ProgramFiles_Internet_ExplorerIEXPLORE.EXE____extoff
call fcn.100034da
push 2
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push esi
mov dword [ebp - 4], 0x64
call fcn.100034da
push ecx
mov byte [ebp - 4], 0x65
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.871C5380_42A0_1069_A2EA_08002B30309D_shellNoAddOnscommand
call fcn.100034da
push 0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037b13
push eax
mov ecx, ebx
mov dword [ebp - 4], 0x67
call fcn.10037c86
mov dword [ebp - 4], edi
lea ecx, [ebp - 0x30]
call fcn.10037bbe
push 0x10
push ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
push esi
call fcn.100034da
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push esi
mov dword [ebp - 4], 0x68
call fcn.100034da
push ecx
mov byte [ebp - 4], 0x69
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.871C5380_42A0_1069_A2EA_08002B30309D_shellex
call fcn.100034da
push 0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037b13
push eax
mov ecx, ebx
mov dword [ebp - 4], 0x6b
call fcn.10037c86
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037bbe
push 0x10
push ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
push str.871C5380_42A0_1069_A2EA_08002B30309D
call fcn.100034da
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push esi
mov dword [ebp - 4], 0x6c
call fcn.100034da
push ecx
mov byte [ebp - 4], 0x6d
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.871C5380_42A0_1069_A2EA_08002B30309D_shellexContextMenuHandlersieframe
call fcn.100034da
push 0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037b13
push eax
mov ecx, ebx
mov dword [ebp - 4], 0x6f
call fcn.10037c86
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037bbe
push 0x10
push ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
push esi
call fcn.100034da
push 1
push ecx
mov dword [ebp - 4], 0x70
mov ecx, esp
mov dword [ebp - 0x14], esp
push esi
call fcn.100034da
push ecx
mov byte [ebp - 4], 0x71
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.871C5380_42A0_1069_A2EA_08002B30309D_shellexMayChangeDefaultMenu
call fcn.100034da
push 0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037b13
push eax
mov ecx, ebx
mov dword [ebp - 4], 0x73
call fcn.10037c86
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037bbe
push 0x10
push ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
push esi
call fcn.100034da
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.WantsParseDisplayName
mov dword [ebp - 4], 0x74
call fcn.100034da
push ecx
mov byte [ebp - 4], 0x75
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.871C5380_42A0_1069_A2EA_08002B30309DShellFolder
call fcn.100034da
push 0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037b13
push eax
mov ecx, ebx
mov dword [ebp - 4], 0x77
call fcn.10037c86
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037bbe
call fcn.1001e292
mov ebx, 0x2710
push 0xf
push ecx
cmp eax, ebx
mov ecx, esp
jne 0x1003782d
mov dword [ebp - 0x18], esp
push 0x10075fe8
call fcn.100034da
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push esi
mov dword [ebp - 4], 0x78
call fcn.100034da
push ecx
mov byte [ebp - 4], 0x79
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.1f4de370_d627_11d1_ba4f_00a0c91eedba
call fcn.100034da
push 1
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037b13
mov ecx, dword [ebp - 0x10]
push eax
add ecx, 0xa8
mov dword [ebp - 4], 0x7b
mov dword [ebp - 0x10], ecx
call fcn.10037c86
mov dword [ebp - 4], edi
lea ecx, [ebp - 0x30]
jmp 0x1003788f
mov dword [ebp - 0x18], esp
push str.Computer_Search_Results_Folder
call fcn.100034da
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push esi
mov dword [ebp - 4], 0x7c
call fcn.100034da
push ecx
mov byte [ebp - 4], 0x7d
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.1f4de370_d627_11d1_ba4f_00a0c91eedba
call fcn.100034da
push 1
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037b13
mov ecx, dword [ebp - 0x10]
push eax
add ecx, 0xa8
mov dword [ebp - 4], 0x7f
mov dword [ebp - 0x10], ecx
call fcn.10037c86
mov dword [ebp - 4], edi
lea ecx, [ebp - 0x30]
call fcn.10037bbe
call fcn.1001e292
cmp eax, ebx
je 0x10037904
push 0xf
push ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
push str.__SystemRoot__system32SHELL32.dll__30521
call fcn.100034da
push 2
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.LocalizedString
mov dword [ebp - 4], 0x80
call fcn.100034da
push ecx
mov byte [ebp - 4], 0x81
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.1f4de370_d627_11d1_ba4f_00a0c91eedba
call fcn.100034da
push 1
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037b13
mov ecx, dword [ebp - 0x10]
push eax
mov dword [ebp - 4], 0x83
call fcn.10037c86
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037bbe
push 0xf
push ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
push str._SystemRoot__system32_shell32.dll__135
call fcn.100034da
push 2
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push esi
mov dword [ebp - 4], 0x84
call fcn.100034da
push ecx
mov byte [ebp - 4], 0x85
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.1f4de370_d627_11d1_ba4f_00a0c91eedbaDefaultIcon
call fcn.100034da
push 1
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037b13
mov ecx, dword [ebp - 0x10]
push eax
mov dword [ebp - 4], 0x87
call fcn.10037c86
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037bbe
push 0xf
push ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
push str._SystemRoot__system32_shell32.dll
call fcn.100034da
push 2
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push esi
mov dword [ebp - 4], 0x88
call fcn.100034da
push ecx
mov byte [ebp - 4], 0x89
mov esi, str.1f4de370_d627_11d1_ba4f_00a0c91eedbaInProcServer32
mov ecx, esp
mov dword [ebp - 0x14], esp
push esi
call fcn.100034da
push 1
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037b13
mov ecx, dword [ebp - 0x10]
push eax
mov dword [ebp - 4], 0x8b
call fcn.10037c86
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037bbe
push 0xf
push ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
push str.Apartment
call fcn.100034da
push 1
push ecx
mov dword [ebp - 4], 0x8c
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.ThreadingModel
call fcn.100034da
push ecx
mov byte [ebp - 4], 0x8d
mov ecx, esp
mov dword [ebp - 0x14], esp
push esi
call fcn.100034da
push 1
lea ecx, [ebp - 0x30]
pop esi
mov dword [ebp - 4], edi
push esi
call fcn.10037b13
mov ecx, dword [ebp - 0x10]
push eax
mov dword [ebp - 4], 0x8f
call fcn.10037c86
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037bbe
push 0xf
push ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
push str.538443776
call fcn.100034da
push 4
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.Attributes
mov dword [ebp - 4], 0x90
call fcn.100034da
push ecx
mov byte [ebp - 4], 0x91
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.1f4de370_d627_11d1_ba4f_00a0c91eedbaShellFolder
call fcn.100034da
push esi
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037b13
mov ecx, dword [ebp - 0x10]
push eax
mov dword [ebp - 4], 0x93
call fcn.10037c86
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037bbe
call fcn.1001e292
cmp eax, ebx
jne 0x10037b04
push 0xf
push ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
push str.file:___webdir__fsresult.htt
call fcn.100034da
push esi
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.PersistMoniker
mov dword [ebp - 4], 0x94
call fcn.100034da
push ecx
mov byte [ebp - 4], 0x95
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.1f4de370_d627_11d1_ba4f_00a0c91eedba_shellexExtShellFolderViews5984FFE0_28D4_11CF_AE66_08002B2E1262
call fcn.100034da
push esi
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037b13
mov ecx, dword [ebp - 0x10]
push eax
mov dword [ebp - 4], 0x97
call fcn.10037c86
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.10037bbe
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret