Function at 0x402ee0
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x48fea7
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push ebx
push esi
push edi
mov eax, dword [0x4e3ec8]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
push str.Select_items_below_to_clear_files_from_your_machine._Please_make_sure_applications_like_Chrome__Excel_are_closed_before_selecting_Delete_button.
push 0x4ac
call sub.mfc100.dll_Ordinal_4785
mov ecx, eax
call sub.mfc100.dll_Ordinal_12868
fldz
lea ecx, [ebp - 0x14]
fstp dword [ebp - 0x18]
call dword [sym.imp.mfc100.dll_Ordinal_316]
lea eax, [ebp - 0x20]
push eax
mov dword [ebp - 4], 0
call fcn.00476b60
lea ecx, [ebp - 0x1c]
push 0x4c99c0
push ecx
mov byte [ebp - 4], 1
call fcn.00476e10
lea edx, [ebp - 0x1c]
mov ebx, 2
push edx
mov byte [ebp - 4], bl
call fcn.00482e60
fstp dword [ebp - 0x10]
fld dword [ebp - 0x10]
add esp, 0x10
push 0
push ebx
push ecx
lea eax, [ebp - 0x24]
fstp dword [esp]
push eax
call fcn.00476ca0
add esp, 0x10
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 3
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
push 0x49f
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
mov ecx, eax
call sub.mfc100.dll_Ordinal_12868
mov ecx, dword [esi + 0x698]
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
push 0
push 0
push 0xf0
push ecx
call edi
dec eax
neg eax
sbb eax, eax
inc eax
je 0x402fe0
fld dword [ebp - 0x10]
fadd qword [0x4af5e8]
fstp dword [ebp - 0x18]
lea edx, [ebp - 0x24]
push 0x4c9910
push edx
call fcn.00476e10
add esp, 8
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 4
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea eax, [ebp - 0x1c]
push eax
call fcn.00482e60
fstp dword [ebp - 0x10]
fld dword [ebp - 0x10]
add esp, 4
push 0
push ebx
push ecx
lea ecx, [ebp - 0x24]
fstp dword [esp]
push ecx
call fcn.00476ca0
add esp, 0x10
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 5
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
push 0x4ae
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
mov ecx, eax
call sub.mfc100.dll_Ordinal_12868
mov edx, dword [esi + 0x868]
push 0
push 0
push 0xf0
push edx
call edi
dec eax
neg eax
sbb eax, eax
inc eax
je 0x40308a
fld dword [ebp - 0x10]
fadd dword [ebp - 0x18]
fstp dword [ebp - 0x18]
lea eax, [ebp - 0x24]
push 0x4c9920
push eax
call fcn.00476e10
add esp, 8
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 6
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1c]
push ecx
call fcn.00482e60
fstp dword [ebp - 0x10]
fld dword [ebp - 0x10]
add esp, 4
push 0
push ebx
push ecx
lea edx, [ebp - 0x24]
fstp dword [esp]
push edx
call fcn.00476ca0
add esp, 0x10
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 7
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
push 0x4a4
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
mov ecx, eax
call sub.mfc100.dll_Ordinal_12868
mov eax, dword [esi + 0x8dc]
push 0
push 0
push 0xf0
push eax
call edi
dec eax
neg eax
sbb eax, eax
inc eax
je 0x403134
fld dword [ebp - 0x10]
fadd dword [ebp - 0x18]
fstp dword [ebp - 0x18]
lea ecx, [ebp - 0x24]
push 0x4c99a0
push ecx
call fcn.00476e10
add esp, 8
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 8
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea edx, [ebp - 0x1c]
push edx
call fcn.00482e60
fstp dword [ebp - 0x10]
fld dword [ebp - 0x10]
add esp, 4
push 0
push ebx
push ecx
lea eax, [ebp - 0x24]
fstp dword [esp]
push eax
call fcn.00476ca0
add esp, 0x10
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 9
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
push 0x4af
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
mov ecx, eax
call sub.mfc100.dll_Ordinal_12868
mov ecx, dword [esi + 0x950]
push 0
push 0
push 0xf0
push ecx
call edi
dec eax
neg eax
sbb eax, eax
inc eax
je 0x4031de
fld dword [ebp - 0x10]
fadd dword [ebp - 0x18]
fstp dword [ebp - 0x18]
lea edx, [ebp - 0x24]
push 0x4c99b0
push edx
call fcn.00476e10
add esp, 8
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0xa
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea eax, [ebp - 0x1c]
push eax
call fcn.00482e60
fstp dword [ebp - 0x10]
fld dword [ebp - 0x10]
add esp, 4
push 0
push ebx
push ecx
lea ecx, [ebp - 0x24]
fstp dword [esp]
push ecx
call fcn.00476ca0
add esp, 0x10
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xb
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
push 0x4b1
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
mov ecx, eax
call sub.mfc100.dll_Ordinal_12868
mov edx, dword [esi + 0xa38]
push 0
push 0
push 0xf0
push edx
call edi
dec eax
neg eax
sbb eax, eax
inc eax
je 0x403288
fld dword [ebp - 0x10]
fadd dword [ebp - 0x18]
fstp dword [ebp - 0x18]
lea eax, [ebp - 0x24]
push 0x4c9990
push eax
call fcn.00476e10
add esp, 8
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0xc
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1c]
push ecx
call fcn.00482e60
fstp dword [ebp - 0x10]
fld dword [ebp - 0x10]
add esp, 4
push 0
push ebx
push ecx
lea edx, [ebp - 0x24]
fstp dword [esp]
push edx
call fcn.00476ca0
add esp, 0x10
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xd
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
push 0x4b0
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
mov ecx, eax
call sub.mfc100.dll_Ordinal_12868
mov eax, dword [esi + 0x9c4]
push 0
push 0
push 0xf0
push eax
call edi
dec eax
neg eax
sbb eax, eax
inc eax
je 0x403332
fld dword [ebp - 0x10]
fadd dword [ebp - 0x18]
fstp dword [ebp - 0x18]
lea ecx, [ebp - 0x20]
push ecx
lea edx, [ebp - 0x10]
push 0x4af5dc
push edx
call fcn.00401a70
push 0x4af5d0
push eax
lea eax, [ebp - 0x24]
push eax
mov byte [ebp - 4], 0xe
call fcn.004019e0
add esp, 0x18
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0xf
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x24]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1c]
push ecx
call fcn.00482e60
fstp dword [ebp - 0x10]
fld dword [ebp - 0x10]
add esp, 4
push 0
push ebx
push ecx
lea edx, [ebp - 0x24]
fstp dword [esp]
push edx
call fcn.00476ca0
add esp, 0x10
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x10
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
push 0x4b4
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
mov ecx, eax
call sub.mfc100.dll_Ordinal_12868
mov eax, dword [esi + 0xaac]
push 0
push 0
push 0xf0
push eax
call edi
dec eax
neg eax
sbb eax, eax
inc eax
je 0x4033fc
fld dword [ebp - 0x10]
fadd dword [ebp - 0x18]
fstp dword [ebp - 0x18]
lea ecx, [ebp - 0x20]
push ecx
lea edx, [ebp - 0x10]
push 0x4af5dc
push edx
call fcn.00401a70
push str.AppDataLocalTemp
push eax
lea eax, [ebp - 0x24]
push eax
mov byte [ebp - 4], 0x11
call fcn.004019e0
add esp, 0x18
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x12
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x24]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1c]
push ecx
call fcn.00482e60
fstp dword [ebp - 0x10]
fld dword [ebp - 0x10]
add esp, 4
push 0
push ebx
push ecx
lea edx, [ebp - 0x24]
fstp dword [esp]
push edx
call fcn.00476ca0
add esp, 0x10
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x13
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
push 0x495
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
mov ecx, eax
call sub.mfc100.dll_Ordinal_12868
mov eax, dword [esi + 0x534]
push 0
push 0
push 0xf0
push eax
call edi
dec eax
neg eax
sbb eax, eax
inc eax
je 0x4034c6
fld dword [ebp - 0x10]
fadd dword [ebp - 0x18]
fstp dword [ebp - 0x18]
push str.C:WindowsTemp
lea ecx, [ebp - 0x1c]
call dword [sym.imp.mfc100.dll_Ordinal_1316]
lea ecx, [ebp - 0x1c]
push ecx
call fcn.00482e60
fstp dword [ebp - 0x10]
fld dword [ebp - 0x10]
add esp, 4
push 0
push ebx
push ecx
lea edx, [ebp - 0x24]
fstp dword [esp]
push edx
call fcn.00476ca0
add esp, 0x10
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x14
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
push 0x49b
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
mov ecx, eax
call sub.mfc100.dll_Ordinal_12868
mov eax, dword [esi + 0x44c]
push 0
push 0
push 0xf0
push eax
call edi
dec eax
neg eax
sbb eax, eax
inc eax
je 0x403553
fld dword [ebp - 0x10]
fadd dword [ebp - 0x18]
fstp dword [ebp - 0x18]
push str.C:WindowsPrefetch
lea ecx, [ebp - 0x1c]
call dword [sym.imp.mfc100.dll_Ordinal_1316]
lea ecx, [ebp - 0x1c]
push ecx
call fcn.00482e60
fstp dword [ebp - 0x10]
fld dword [ebp - 0x10]
add esp, 4
push 0
push ebx
push ecx
lea edx, [ebp - 0x24]
fstp dword [esp]
push edx
call fcn.00476ca0
add esp, 0x10
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x15
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
push 0x49d
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
mov ecx, eax
call sub.mfc100.dll_Ordinal_12868
mov eax, dword [esi + 0x780]
push 0
push 0
push 0xf0
push eax
call edi
dec eax
neg eax
sbb eax, eax
inc eax
je 0x4035e0
fld dword [ebp - 0x10]
fadd dword [ebp - 0x18]
fstp dword [ebp - 0x18]
push 0x4ae26b
lea ecx, [ebp - 0x1c]
call dword [sym.imp.mfc100.dll_Ordinal_1316]
call fcn.004802d0
fstp dword [ebp - 0x24]
fld dword [ebp - 0x24]
push 0
push ebx
push ecx
lea ecx, [ebp - 0x24]
fstp dword [esp]
push ecx
call fcn.00476ca0
add esp, 0x10
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x16
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
push 0x4a5
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
mov ecx, eax
call sub.mfc100.dll_Ordinal_12868
mov edx, dword [esi + 0x120]
push 0
push 0
push 0xf0
push edx
call edi
dec eax
neg eax
sbb eax, eax
inc eax
je 0x403666
fld dword [ebp - 0x10]
fadd dword [ebp - 0x18]
fstp dword [ebp - 0x18]
push str.C:WindowsSystem32winevtLogs
lea ecx, [ebp - 0x1c]
call dword [sym.imp.mfc100.dll_Ordinal_1316]
lea eax, [ebp - 0x1c]
push eax
call fcn.00482e60
fstp dword [ebp - 0x10]
fld dword [ebp - 0x10]
add esp, 4
push 0
push ebx
push ecx
lea ecx, [ebp - 0x24]
fstp dword [esp]
push ecx
call fcn.00476ca0
add esp, 0x10
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x17
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
push 0x49e
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
mov ecx, eax
call sub.mfc100.dll_Ordinal_12868
mov edx, dword [esi + 0x7f4]
push 0
push 0
push 0xf0
push edx
call edi
dec eax
neg eax
sbb eax, eax
inc eax
je 0x4036f3
fld dword [ebp - 0x10]
fadd dword [ebp - 0x18]
fstp dword [ebp - 0x18]
push str.C:WindowsSoftwareDistribution
lea ecx, [ebp - 0x1c]
call dword [sym.imp.mfc100.dll_Ordinal_1316]
lea eax, [ebp - 0x1c]
push eax
call fcn.00482e60
fstp dword [ebp - 0x10]
fld dword [ebp - 0x10]
add esp, 4
push 0
push ebx
push ecx
lea ecx, [ebp - 0x24]
fstp dword [esp]
push ecx
call fcn.00476ca0
add esp, 0x10
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x18
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
push 0x4a2
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
mov ecx, eax
call sub.mfc100.dll_Ordinal_12868
mov edx, dword [esi + 0x70c]
push 0
push 0
push 0xf0
push edx
call edi
dec eax
neg eax
sbb eax, eax
inc eax
je 0x403780
fld dword [ebp - 0x10]
fadd dword [ebp - 0x18]
fstp dword [ebp - 0x18]
push str.C:ProgramDataMicrosoftSearchDataApplicationsWindows
lea ecx, [ebp - 0x1c]
call dword [sym.imp.mfc100.dll_Ordinal_1316]
lea eax, [ebp - 0x1c]
push eax
call fcn.00482e60
fstp dword [ebp - 0x10]
fld dword [ebp - 0x10]
add esp, 4
push 0
push ebx
push ecx
lea ecx, [ebp - 0x24]
fstp dword [esp]
push ecx
call fcn.00476ca0
add esp, 0x10
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x19
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
push 0x4a1
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
mov ecx, eax
call sub.mfc100.dll_Ordinal_12868
mov edx, dword [esi + 0x5a8]
push 0
push 0
push 0xf0
push edx
call edi
cmp eax, 1
jne 0x40380a
fld dword [ebp - 0x10]
fadd dword [ebp - 0x18]
fstp dword [ebp - 0x18]
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x10]
push 0x4af5dc
push ecx
call fcn.00401a70
push str.AppDataLocalMicrosoftWindowsINetCache
push eax
lea edx, [ebp - 0x24]
push edx
mov byte [ebp - 4], 0x1a
call fcn.004019e0
add esp, 0x18
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x1b
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x24]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea eax, [ebp - 0x1c]
push eax
call fcn.00482e60
fstp dword [ebp - 0x10]
fld dword [ebp - 0x10]
add esp, 4
push 0
push ebx
push ecx
lea ecx, [ebp - 0x24]
fstp dword [esp]
push ecx
call fcn.00476ca0
add esp, 0x10
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x1c
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
push 0x4a0
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
mov ecx, eax
call sub.mfc100.dll_Ordinal_12868
mov edx, dword [esi + 0x194]
push 0
push 0
push 0xf0
push edx
call edi
cmp eax, 1
jne 0x4038d1
fld dword [ebp - 0x10]
fadd dword [ebp - 0x18]
fstp dword [ebp - 0x18]
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x10]
push 0x4af5dc
push ecx
call fcn.00401a70
push str.AppDataLocalGoogleChromeUser_DataDefaultNetworkCookies
push eax
lea edx, [ebp - 0x24]
push edx
mov byte [ebp - 4], 0x1d
call fcn.004019e0
add esp, 0x18
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x1e
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x24]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea eax, [ebp - 0x1c]
push eax
call fcn.00482e60
fstp dword [ebp - 0x10]
fld dword [ebp - 0x10]
add esp, 4
push 0
push ebx
push ecx
lea ecx, [ebp - 0x24]
fstp dword [esp]
push ecx
call fcn.00476ca0
add esp, 0x10
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x1f
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
push 0x4aa
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
mov ecx, eax
call sub.mfc100.dll_Ordinal_12868
mov edx, dword [esi + 0x208]
push 0
push 0
push 0xf0
push edx
call edi
cmp eax, 1
jne 0x403998
fld dword [ebp - 0x10]
fadd dword [ebp - 0x18]
fstp dword [ebp - 0x18]
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x10]
push 0x4af5dc
push ecx
call fcn.00401a70
push str.AppDataLocalGoogleChromeUser_DataDefaultHistory
push eax
lea edx, [ebp - 0x24]
push edx
mov byte [ebp - 4], 0x20
call fcn.004019e0
add esp, 0x18
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x21
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x24]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea eax, [ebp - 0x1c]
push eax
call fcn.00482e60
fstp dword [ebp - 0x10]
fld dword [ebp - 0x10]
add esp, 4
push 0
push ebx
push ecx
lea ecx, [ebp - 0x24]
fstp dword [esp]
push ecx
call fcn.00476ca0
add esp, 0x10
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x22
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
push 0x4a6
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
mov ecx, eax
call sub.mfc100.dll_Ordinal_12868
mov edx, dword [esi + 0x27c]
push 0
push 0
push 0xf0
push edx
call edi
cmp eax, 1
jne 0x403a5f
fld dword [ebp - 0x10]
fadd dword [ebp - 0x18]
fstp dword [ebp - 0x18]
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x10]
push 0x4af5dc
push ecx
call fcn.00401a70
push str.AppDataLocalGoogleChromeUser_DataDefaultCache
push eax
lea edx, [ebp - 0x24]
push edx
mov byte [ebp - 4], 0x23
call fcn.004019e0
add esp, 0x18
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x24
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x24]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea eax, [ebp - 0x1c]
push eax
call fcn.00482e60
fstp dword [ebp - 0x10]
fld dword [ebp - 0x10]
add esp, 4
push 0
push ebx
push ecx
lea ecx, [ebp - 0x24]
fstp dword [esp]
push ecx
call fcn.00476ca0
add esp, 0x10
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x25
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
push 0x4a3
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
mov ecx, eax
call sub.mfc100.dll_Ordinal_12868
mov edx, dword [esi + 0x4c0]
push 0
push 0
push 0xf0
push edx
call edi
cmp eax, 1
jne 0x403b26
fld dword [ebp - 0x10]
fadd dword [ebp - 0x18]
fstp dword [ebp - 0x18]
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x10]
push 0x4af5dc
push ecx
call fcn.00401a70
push str.AppDataLocalGoogleChromeUser_DataDefaultNetworkCookies
push eax
lea edx, [ebp - 0x24]
push edx
mov byte [ebp - 4], 0x26
call fcn.004019e0
add esp, 0x18
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x27
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x24]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea eax, [ebp - 0x1c]
push eax
call fcn.00482e60
fstp dword [ebp - 0x10]
fld dword [ebp - 0x10]
add esp, 4
push 0
push ebx
push ecx
lea ecx, [ebp - 0x24]
fstp dword [esp]
push ecx
call fcn.00476ca0
add esp, 0x10
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x28
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
push 0x4a7
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
mov ecx, eax
call sub.mfc100.dll_Ordinal_12868
mov edx, dword [esi + 0x2f0]
push 0
push 0
push 0xf0
push edx
call edi
cmp eax, 1
jne 0x403bed
fld dword [ebp - 0x10]
fadd dword [ebp - 0x18]
fstp dword [ebp - 0x18]
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x10]
push 0x4af5dc
push ecx
call fcn.00401a70
push str.AppDataLocalGoogleChromeUser_DataDefaultBookmarks
push eax
lea edx, [ebp - 0x24]
push edx
mov byte [ebp - 4], 0x29
call fcn.004019e0
add esp, 0x18
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x2a
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x24]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea eax, [ebp - 0x1c]
push eax
call fcn.00482e60
fstp dword [ebp - 0x10]
fld dword [ebp - 0x10]
add esp, 4
push 0
push ebx
push ecx
lea ecx, [ebp - 0x24]
fstp dword [esp]
push ecx
call fcn.00476ca0
add esp, 0x10
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x2b
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
push 0x4a8
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
mov ecx, eax
call sub.mfc100.dll_Ordinal_12868
mov edx, dword [esi + 0x364]
push 0
push 0
push 0xf0
push edx
call edi
cmp eax, 1
jne 0x403cb4
fld dword [ebp - 0x10]
fadd dword [ebp - 0x18]
fstp dword [ebp - 0x18]
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x10]
push 0x4af5dc
push ecx
call fcn.00401a70
push str.AppDataLocalGoogleChromeUser_DataDefaultHistory
push eax
lea edx, [ebp - 0x24]
push edx
mov byte [ebp - 4], 0x2c
call fcn.004019e0
add esp, 0x18
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x2d
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x24]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea eax, [ebp - 0x1c]
push eax
call fcn.00482e60
fstp dword [ebp - 0x10]
fld dword [ebp - 0x10]
add esp, 4
push 0
push ebx
push ecx
lea ecx, [ebp - 0x24]
fstp dword [esp]
push ecx
call fcn.00476ca0
add esp, 0x10
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x2e
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
push 0x4a9
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
mov ecx, eax
call sub.mfc100.dll_Ordinal_12868
mov edx, dword [esi + 0x3d8]
push 0
push 0
push 0xf0
push edx
call edi
cmp eax, 1
jne 0x403d7b
fld dword [ebp - 0x10]
fadd dword [ebp - 0x18]
fstp dword [ebp - 0x18]
lea ecx, [ebp - 0x1c]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x20]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc100.dll_Ordinal_901]
fld dword [ebp - 0x18]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret