Function at 0x1002e325
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1005b59f
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0xabc
mov eax, dword [0x10095054]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x404], ecx
push dword [ebp + 8]
call fcn.1002fd13
pop ecx
push dword [ebp - 0x404]
lea ecx, [ebp - 0x44]
call fcn.10018583
and dword [ebp - 4], 0
lea ecx, [ebp - 0x88]
call fcn.10006d0f
mov byte [ebp - 4], 1
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x404]
add ecx, 0x28
call fcn.10011604
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x508], esp
push dword [ebp + 8]
call fcn.1002058e
lea eax, [ebp - 0x6b8]
push eax
call fcn.1001c7fc
add esp, 0xc
mov dword [ebp - 0x4a4], eax
push dword [ebp - 0x4a4]
lea ecx, [ebp - 0x88]
call fcn.10006acf
lea ecx, [ebp - 0x6b8]
call fcn.10006aa5
push 0x74
lea ecx, [ebp - 0x2a0]
call fcn.10002839
lea ecx, [ebp - 0x2a0]
call fcn.10002be2
mov dword [ebp - 0x50c], eax
mov byte [ebp - 4], 3
push 1
mov eax, dword [ebp - 0x404]
add eax, 0x28
push eax
lea eax, [ebp - 0x88]
push eax
lea ecx, [ebp - 0x2a0]
call fcn.10002cb1
mov byte [ebp - 0x409], al
movzx eax, byte [ebp - 0x409]
test eax, eax
jne 0x1002e51d
lea eax, [ebp - 0x6d0]
push eax
lea ecx, [ebp - 0x2a0]
call fcn.100053b7
mov dword [ebp - 0x4ac], eax
mov eax, dword [ebp - 0x4ac]
mov dword [ebp - 0x4b0], eax
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x4b0]
mov dword [ebp - 0x4b4], eax
lea eax, [ebp - 0x568]
push eax
mov ecx, dword [ebp - 0x4b4]
call fcn.10025a87
push dword [eax + 4]
push dword [eax]
lea eax, [ebp - 0x19c]
push eax
call fcn.10024320
add esp, 0xc
mov dword [ebp - 0x510], eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x6d0]
call fcn.10006aa5
mov eax, dword [ebp - 0x404]
cmp dword [eax + 0x20], 0
je 0x1002e4cf
mov eax, dword [ebp - 0x404]
mov eax, dword [eax + 0x20]
mov dword [ebp - 0x4b8], eax
lea ecx, [ebp - 0x19c]
call fcn.10018a53
push eax
push 0xfffffffffffffffe
call dword [ebp - 0x4b8]
mov dword [ebp - 0x4bc], 0xfffffffe
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x19c]
call fcn.10018a7d
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2a0]
call fcn.1001ed1d
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x88]
call fcn.10006aa5
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x44]
call fcn.100185ae
mov eax, dword [ebp - 0x4bc]
jmp 0x1002f73e
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2a0]
call fcn.1001ed1d
jmp 0x1002e5f9
mov dword [ebp - 4], 1
jmp 0x1002e628
jmp 0x1002e650
mov eax, dword [0x10096c98]
mov ecx, dword fs:[0x2c]
mov eax, dword [ecx + eax*4]
mov ecx, dword [0x100976e4]
cmp ecx, dword [eax + 4]
jle 0x1002e85a
push 0x100976e4
call fcn.1003477b
pop ecx
cmp dword [0x100976e4], 0xffffffff
jne 0x1002e85a
mov byte [ebp - 4], 9
push 8
mov ecx, 0x100976f4
call fcn.10002839
mov byte [ebp - 0x405], 0
lea eax, [ebp - 0x405]
push eax
push 0x1008cbc0
lea ecx, [ebp - 0xacc]
call fcn.10030865
mov byte [ebp - 4], 0xa
movsd xmm0, qword [0x1008e290]
movsd qword [ebp - 0x518], xmm0
lea eax, [ebp - 0x518]
push eax
push 0x1008cc08
lea ecx, [ebp - 0xa9c]
call fcn.100308df
mov byte [ebp - 4], 0xb
movsd xmm0, qword [0x1008e2d0]
movsd qword [ebp - 0x520], xmm0
lea eax, [ebp - 0x520]
push eax
push str.FirstEvaluationTimeSec
lea ecx, [ebp - 0xa6c]
call fcn.100308df
mov byte [ebp - 4], 0xc
movsd xmm0, qword [0x1008e280]
movsd qword [ebp - 0x528], xmm0
lea eax, [ebp - 0x528]
push eax
push str.DiscretSec
lea ecx, [ebp - 0xa3c]
call fcn.100308df
mov byte [ebp - 4], 0xd
mov byte [ebp - 0x406], 1
lea eax, [ebp - 0x406]
push eax
push str.UseIO
lea ecx, [ebp - 0xa0c]
call fcn.10030865
mov byte [ebp - 4], 0xe
mov byte [ebp - 0x407], 0
lea eax, [ebp - 0x407]
push eax
push str.UseCPU
lea ecx, [ebp - 0x9dc]
call fcn.10030865
mov byte [ebp - 4], 0xf
mov byte [ebp - 0x408], 1
lea eax, [ebp - 0x408]
push eax
push str.WriteLog
lea ecx, [ebp - 0x9ac]
call fcn.10030865
mov byte [ebp - 4], 0x10
mov byte [ebp - 0x415], 0
lea eax, [ebp - 0x415]
push eax
push 0x1008cc3c
lea ecx, [ebp - 0x97c]
call fcn.10030865
mov byte [ebp - 4], 0x11
push 0x1008952f
push 0x1008cc64
lea ecx, [ebp - 0x94c]
call fcn.1003095e
mov byte [ebp - 4], 0x12
mov byte [ebp - 0x414], 0
lea eax, [ebp - 0x414]
push eax
push 0x1008cc4c
lea ecx, [ebp - 0x91c]
call fcn.10030865
mov byte [ebp - 4], 0x13
lea eax, [ebp - 0x8ec]
push eax
lea eax, [ebp - 0xacc]
push eax
lea ecx, [ebp - 0x570]
call fcn.10001727
push dword [eax + 4]
push dword [eax]
mov ecx, 0x100976f4
call fcn.1003044f
mov byte [ebp - 4], 9
push fcn.1002f83b
push 0xa
push 0x30
lea eax, [ebp - 0xacc]
push eax
call fcn.10034881
push 0x1005ba11
call fcn.10034d4b
pop ecx
mov byte [ebp - 4], 1
push 0x100976e4
call fcn.10034731
pop ecx
mov eax, dword [0x10096c98]
mov ecx, dword fs:[0x2c]
mov eax, dword [ecx + eax*4]
mov ecx, dword [0x100976f0]
cmp ecx, dword [eax + 4]
jle 0x1002e9a8
push 0x100976f0
call fcn.1003477b
pop ecx
cmp dword [0x100976f0], 0xffffffff
jne 0x1002e9a8
mov byte [ebp - 4], 0x14
push 8
mov ecx, 0x10097758
call fcn.10002839
mov byte [ebp - 0x416], 1
lea eax, [ebp - 0x416]
push eax
push 0x1008cc84
lea ecx, [ebp - 0x7f4]
call fcn.10030865
mov byte [ebp - 4], 0x15
mov byte [ebp - 0x413], 1
lea eax, [ebp - 0x413]
push eax
push 0x1008cc78
lea ecx, [ebp - 0x7c4]
call fcn.10030865
mov byte [ebp - 4], 0x16
mov byte [ebp - 0x412], 1
lea eax, [ebp - 0x412]
push eax
push 0x1008cc9c
lea ecx, [ebp - 0x794]
call fcn.10030865
mov byte [ebp - 4], 0x17
mov byte [ebp - 0x411], 1
lea eax, [ebp - 0x411]
push eax
push 0x1008cc90
lea ecx, [ebp - 0x764]
call fcn.10030865
mov byte [ebp - 4], 0x18
mov byte [ebp - 0x410], 1
lea eax, [ebp - 0x410]
push eax
push 0x1008ccac
lea ecx, [ebp - 0x734]
call fcn.10030865
mov byte [ebp - 4], 0x19
lea eax, [ebp - 0x704]
push eax
lea eax, [ebp - 0x7f4]
push eax
lea ecx, [ebp - 0x578]
call fcn.10001727
push dword [eax + 4]
push dword [eax]
mov ecx, 0x10097758
call fcn.1003044f
mov byte [ebp - 4], 0x14
push fcn.1002f83b
push 5
push 0x30
lea eax, [ebp - 0x7f4]
push eax
call fcn.10034881
push 0x1005ba02
call fcn.10034d4b
pop ecx
mov byte [ebp - 4], 1
push 0x100976f0
call fcn.10034731
pop ecx
mov eax, dword [0x10096c98]
mov ecx, dword fs:[0x2c]
mov eax, dword [ecx + eax*4]
mov ecx, dword [0x100976ec]
cmp ecx, dword [eax + 4]
jle 0x1002eaf9
push 0x100976ec
call fcn.1003477b
pop ecx
cmp dword [0x100976ec], 0xffffffff
jne 0x1002eaf9
mov byte [ebp - 4], 0x1a
push 8
mov ecx, 0x10097760
call fcn.10002839
mov byte [ebp - 0x40f], 0
lea eax, [ebp - 0x40f]
push eax
push 0x1008cca4
lea ecx, [ebp - 0x8e8]
call fcn.10030865
mov byte [ebp - 4], 0x1b
mov dword [ebp - 0x4d4], 3
lea eax, [ebp - 0x4d4]
push eax
push 0x1008ccc4
lea ecx, [ebp - 0x8b8]
call fcn.100309d3
mov byte [ebp - 4], 0x1c
mov byte [ebp - 0x40e], 0
lea eax, [ebp - 0x40e]
push eax
push 0x1008ccb8
lea ecx, [ebp - 0x888]
call fcn.10030865
mov byte [ebp - 4], 0x1d
mov byte [ebp - 0x40d], 0
lea eax, [ebp - 0x40d]
push eax
push 0x1008cce4
lea ecx, [ebp - 0x858]
call fcn.10030865
mov byte [ebp - 4], 0x1e
mov byte [ebp - 0x40c], 0
lea eax, [ebp - 0x40c]
push eax
push 0x1008ccd0
lea ecx, [ebp - 0x828]
call fcn.10030865
mov byte [ebp - 4], 0x1f
lea eax, [ebp - 0x7f8]
push eax
lea eax, [ebp - 0x8e8]
push eax
lea ecx, [ebp - 0x580]
call fcn.10001727
push dword [eax + 4]
push dword [eax]
mov ecx, 0x10097760
call fcn.1003044f
mov byte [ebp - 4], 0x1a
push fcn.1002f83b
push 5
push 0x30
lea eax, [ebp - 0x8e8]
push eax
call fcn.10034881
push 0x1005b9f3
call fcn.10034d4b
pop ecx
mov byte [ebp - 4], 1
push 0x100976ec
call fcn.10034731
pop ecx
push 0x18
lea ecx, [ebp - 0xac]
call fcn.10002839
mov eax, dword [ebp - 0x404]
add eax, 0x28
mov dword [ebp - 0x4e0], eax
push 0
lea ecx, [ebp - 0x6e8]
call fcn.1000fb43
mov dword [ebp - 0x4d8], eax
mov eax, dword [ebp - 0x4d8]
mov dword [ebp - 0x4dc], eax
mov byte [ebp - 4], 0x20
push dword [ebp - 0x4dc]
push str.DefaultSettings
lea eax, [ebp - 0xac]
push eax
mov ecx, dword [ebp - 0x4e0]
call fcn.10012754
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x6e8]
call fcn.1001010c
mov dword [ebp - 0x42c], 0x100976f4
push 4
lea ecx, [ebp - 0x18]
call fcn.10002839
lea eax, [ebp - 0x18]
push eax
mov ecx, dword [ebp - 0x42c]
call fcn.100304bf
lea eax, [ebp - 0x48]
push eax
mov ecx, dword [ebp - 0x42c]
call fcn.100304aa
jmp 0x1002eba0
lea ecx, [ebp - 0x18]
call fcn.10013a6e
push dword [ebp - 0x48]
lea ecx, [ebp - 0x18]
call fcn.10030426
movzx eax, al
test eax, eax
jne 0x1002ec83
lea ecx, [ebp - 0x18]
call fcn.100134df
push eax
lea ecx, [ebp - 0x1cc]
call fcn.1002f868
mov byte [ebp - 4], 0x23
lea eax, [ebp - 0x1cc]
push eax
call fcn.100086d0
pop ecx
push eax
call fcn.10030a49
pop ecx
mov dword [ebp - 0x428], eax
lea eax, [ebp - 0x1cc]
push eax
call fcn.100086d0
pop ecx
push eax
call fcn.10030a5e
pop ecx
mov dword [ebp - 0x4e4], eax
push dword [ebp - 0x4e4]
push dword [ebp - 0x428]
lea eax, [ebp - 0x700]
push eax
lea ecx, [ebp - 0xac]
call fcn.100127b0
mov dword [ebp - 0x4e8], eax
mov eax, dword [ebp - 0x4e8]
mov dword [ebp - 0x4ec], eax
mov byte [ebp - 4], 0x24
mov eax, dword [ebp - 0x4ec]
mov dword [ebp - 0x4f0], eax
push dword [ebp - 0x4f0]
push dword [ebp - 0x428]
lea ecx, [ebp - 0xac]
call fcn.100124b6
mov ecx, eax
call fcn.100101d2
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x700]
call fcn.1001010c
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x1cc]
call fcn.1002f83b
jmp 0x1002eb98
push 0x18
lea ecx, [ebp - 0x68]
call fcn.10002839
mov eax, dword [ebp - 0x404]
add eax, 0x28
mov dword [ebp - 0x4fc], eax
push 0
lea ecx, [ebp - 0x5f8]
call fcn.1000fb43
mov dword [ebp - 0x4f4], eax
mov eax, dword [ebp - 0x4f4]
mov dword [ebp - 0x4f8], eax
mov byte [ebp - 4], 0x25
push dword [ebp - 0x4f8]
push str.InjectSettings
lea eax, [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x4fc]
call fcn.10012754
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x5f8]
call fcn.1001010c
mov dword [ebp - 0x424], 0x10097758
push 4
lea ecx, [ebp - 0x1c]
call fcn.10002839
lea eax, [ebp - 0x1c]
push eax
mov ecx, dword [ebp - 0x424]
call fcn.100304bf
lea eax, [ebp - 0x50]
push eax
mov ecx, dword [ebp - 0x424]
call fcn.100304aa
jmp 0x1002ed24
lea ecx, [ebp - 0x1c]
call fcn.10013a6e
push dword [ebp - 0x50]
lea ecx, [ebp - 0x1c]
call fcn.10030426
movzx eax, al
test eax, eax
jne 0x1002ee01
lea ecx, [ebp - 0x1c]
call fcn.100134df
push eax
lea ecx, [ebp - 0x1fc]
call fcn.1002f868
mov byte [ebp - 4], 0x28
lea eax, [ebp - 0x1fc]
push eax
call fcn.100086d0
pop ecx
push eax
call fcn.10030a49
pop ecx
mov dword [ebp - 0x420], eax
lea eax, [ebp - 0x1fc]
push eax
call fcn.100086d0
pop ecx
push eax
call fcn.10030a5e
pop ecx
mov dword [ebp - 0x500], eax
push dword [ebp - 0x500]
push dword [ebp - 0x420]
lea eax, [ebp - 0x610]
push eax
lea ecx, [ebp - 0x68]
call fcn.100127b0
mov dword [ebp - 0x478], eax
mov eax, dword [ebp - 0x478]
mov dword [ebp - 0x438], eax
mov byte [ebp - 4], 0x29
mov eax, dword [ebp - 0x438]
mov dword [ebp - 0x43c], eax
push dword [ebp - 0x43c]
push dword [ebp - 0x420]
lea ecx, [ebp - 0x68]
call fcn.100124b6
mov ecx, eax
call fcn.100101d2
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x610]
call fcn.1001010c
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x1fc]
call fcn.1002f83b
jmp 0x1002ed1c
push 0x18
lea ecx, [ebp - 0xc4]
call fcn.10002839
mov eax, dword [ebp - 0x404]
add eax, 0x28
mov dword [ebp - 0x448], eax
push 0
lea ecx, [ebp - 0x628]
call fcn.1000fb43
mov dword [ebp - 0x440], eax
mov eax, dword [ebp - 0x440]
mov dword [ebp - 0x444], eax
mov byte [ebp - 4], 0x2a
push dword [ebp - 0x444]
push str.BrowserURLSettings
lea eax, [ebp - 0xc4]
push eax
mov ecx, dword [ebp - 0x448]
call fcn.10012754
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x628]
call fcn.1001010c
mov dword [ebp - 0x41c], 0x10097760
push 4
lea ecx, [ebp - 0x20]
call fcn.10002839
lea eax, [ebp - 0x20]
push eax
mov ecx, dword [ebp - 0x41c]
call fcn.100304bf
lea eax, [ebp - 0x4c]
push eax
mov ecx, dword [ebp - 0x41c]
call fcn.100304aa
jmp 0x1002eea8
lea ecx, [ebp - 0x20]
call fcn.10013a6e
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x20]
call fcn.10030426
movzx eax, al
test eax, eax
jne 0x1002ef8b
lea ecx, [ebp - 0x20]
call fcn.100134df
push eax
lea ecx, [ebp - 0x22c]
call fcn.1002f868
mov byte [ebp - 4], 0x2d
lea eax, [ebp - 0x22c]
push eax
call fcn.100086d0
pop ecx
push eax
call fcn.10030a49
pop ecx
mov dword [ebp - 0x430], eax
lea eax, [ebp - 0x22c]
push eax
call fcn.100086d0
pop ecx
push eax
call fcn.10030a5e
pop ecx
mov dword [ebp - 0x44c], eax
push dword [ebp - 0x44c]
push dword [ebp - 0x430]
lea eax, [ebp - 0x640]
push eax
lea ecx, [ebp - 0xc4]
call fcn.100127b0
mov dword [ebp - 0x450], eax
mov eax, dword [ebp - 0x450]
mov dword [ebp - 0x454], eax
mov byte [ebp - 4], 0x2e
mov eax, dword [ebp - 0x454]
mov dword [ebp - 0x458], eax
push dword [ebp - 0x458]
push dword [ebp - 0x430]
lea ecx, [ebp - 0xc4]
call fcn.100124b6
mov ecx, eax
call fcn.100101d2
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x640]
call fcn.1001010c
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x22c]
call fcn.1002f83b
jmp 0x1002eea0
push 0x18
lea ecx, [ebp - 0xdc]
call fcn.10002839
push 7
lea ecx, [ebp - 0xdc]
call fcn.1000fb43
mov byte [ebp - 4], 0x2f
push 0x18
lea ecx, [ebp - 0x154]
call fcn.10002839
mov eax, dword [ebp - 0x404]
add eax, 0x28
mov dword [ebp - 0x464], eax
push 6
lea ecx, [ebp - 0x658]
call fcn.1000fb43
mov dword [ebp - 0x45c], eax
mov eax, dword [ebp - 0x45c]
mov dword [ebp - 0x460], eax
mov byte [ebp - 4], 0x30
push dword [ebp - 0x460]
push str.MonitoredApps
lea eax, [ebp - 0x154]
push eax
mov ecx, dword [ebp - 0x464]
call fcn.10012754
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x658]
call fcn.1001010c
lea eax, [ebp - 0x154]
mov dword [ebp - 0x434], eax
push 8
lea ecx, [ebp - 0x3c]
call fcn.10002839
lea eax, [ebp - 0x3c]
push eax
mov ecx, dword [ebp - 0x434]
call fcn.10013161
push 8
lea ecx, [ebp - 0x70]
call fcn.10002839
lea eax, [ebp - 0x70]
push eax
mov ecx, dword [ebp - 0x434]
call fcn.100131bc
jmp 0x1002f05c
lea ecx, [ebp - 0x3c]
call fcn.10024452
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x3c]
call fcn.10002b38
movzx eax, al
test eax, eax
je 0x1002f195
push 0x18
lea ecx, [ebp - 0x10c]
call fcn.10002839
lea ecx, [ebp - 0x3c]
call fcn.10024466
push eax
lea ecx, [ebp - 0x10c]
call fcn.1001004c
mov byte [ebp - 4], 0x33
push str.Name
lea ecx, [ebp - 0x10c]
call fcn.10012470
mov ecx, eax
call fcn.100102b0
push eax
lea ecx, [ebp - 0x124]
call fcn.10006bec
mov byte [ebp - 4], 0x34
xor eax, eax
mov byte [ebp - 0x40b], al
mov al, byte [ebp - 0x40b]
mov byte [ebp - 0x468], al
lea eax, [ebp - 0x530]
push eax
lea ecx, [ebp - 0x124]
call fcn.10017569
mov eax, dword [eax]
mov dword [ebp - 0x46c], eax
push dword [ebp - 0x468]
push 0x1003ff7c
push dword [ebp - 0x46c]
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x588]
push eax
mov ecx, 0x1008df58
call fcn.10026086
push 0x18
lea ecx, [ebp - 0x16c]
call fcn.10002839
push 0x1008cd38
lea ecx, [ebp - 0x10c]
call fcn.10012470
push eax
lea ecx, [ebp - 0x16c]
call fcn.1001004c
mov byte [ebp - 4], 0x35
lea eax, [ebp - 0x16c]
push eax
lea eax, [ebp - 0x124]
push eax
lea ecx, [ebp - 0xdc]
call fcn.100124b6
mov ecx, eax
call fcn.10010163
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x16c]
call fcn.1001010c
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x124]
call fcn.10006aa5
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x10c]
call fcn.1001010c
jmp 0x1002f054
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x154]
call fcn.1001010c
mov eax, dword [ebp - 0x404]
add eax, 0x28
mov dword [ebp - 0x470], eax
lea eax, [ebp - 0xdc]
push eax
push 0x1008cd54
mov ecx, dword [ebp - 0x470]
call fcn.10012470
mov ecx, eax
call fcn.10010163
mov eax, dword [ebp - 0x404]
add eax, 0x28
mov dword [ebp - 0x474], eax
lea eax, [ebp - 0xac]
push eax
push 0x1008cd4c
mov ecx, dword [ebp - 0x474]
call fcn.10012470
mov ecx, eax
call fcn.10010163
push 0xb0
lea ecx, [ebp - 0x400]
call fcn.10002839
push 1
lea ecx, [ebp - 0x400]
call fcn.10030306
mov byte [ebp - 4], 0x36
push 0xc
lea ecx, [ebp - 0x94]
call fcn.10002839
lea eax, [ebp - 0x94]
push eax
lea ecx, [ebp - 0xdc]
call fcn.10012805
mov byte [ebp - 4], 0x37
push 0x1008cd5c
lea eax, [ebp - 0x3f0]
push eax
lea ecx, [ebp - 0x590]
call fcn.10030261
push dword [eax + 4]
push dword [eax]
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x694]
push eax
mov ecx, 0x1008df58
call fcn.10030a73
lea eax, [ebp - 0x670]
push eax
lea ecx, [ebp - 0x400]
call fcn.10030286
mov dword [ebp - 0x4a8], eax
mov eax, dword [ebp - 0x4a8]
mov dword [ebp - 0x47c], eax
mov byte [ebp - 4], 0x38
mov eax, dword [ebp - 0x47c]
mov dword [ebp - 0x480], eax
lea eax, [ebp - 0x5c8]
push eax
mov ecx, dword [ebp - 0x480]
call fcn.10025a87
push dword [eax + 4]
push dword [eax]
lea eax, [ebp - 0xf4]
push eax
call fcn.10024320
add esp, 0xc
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x670]
call fcn.10006aa5
xor eax, eax
mov byte [ebp - 0x40a], al
mov al, byte [ebp - 0x40a]
mov byte [ebp - 0x484], al
lea eax, [ebp - 0x504]
push eax
lea ecx, [ebp - 0xf4]
call fcn.10020381
mov eax, dword [eax]
mov dword [ebp - 0x488], eax
push dword [ebp - 0x484]
push 0x1004185c
push dword [ebp - 0x488]
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0x5d0]
push eax
mov ecx, 0x1008df58
call fcn.100263c7
lea eax, [ebp - 0xf4]
push eax
push 0x1008cd60
push 0x10096718
call fcn.1001aa71
pop ecx
pop ecx
push eax
call fcn.10030b71
pop ecx
pop ecx
mov dword [ebp - 0x48c], eax
push 0x1001add3
mov ecx, dword [ebp - 0x48c]
call fcn.10018a3a
push 4
lea ecx, [ebp - 0x28]
call fcn.10002839
push 0x1008cdd0
lea ecx, [ebp - 0x5a8]
call fcn.1001a75b
mov byte [ebp - 4], 0x3b
lea eax, [ebp - 0x5a8]
push eax
push SysFreeString
lea ecx, [ebp - 0x28]
call fcn.1002ddaf
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x5a8]
call fcn.10018a7d
push str.whitelist
lea ecx, [ebp - 0x5c0]
call fcn.1001a75b
mov byte [ebp - 4], 0x3e
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0x5c0]
push eax
lea ecx, [ebp - 0x28]
call fcn.1002df8b
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x5c0]
call fcn.10018a7d
lea ecx, [ebp - 0x28]
call fcn.1002dde7
push 0xb0
lea ecx, [ebp - 0x350]
call fcn.10002839
push 1
lea ecx, [ebp - 0x350]
call fcn.10030306
mov byte [ebp - 4], 0x3f
push 0xc
lea ecx, [ebp - 0x34]
call fcn.10002839
lea ecx, [ebp - 0x34]
call fcn.10013420
mov byte [ebp - 4], 0x40
push 0x1008ce30
lea ecx, [ebp - 0x68]
call fcn.10012470
mov ecx, eax
call fcn.100112f0
movzx eax, al
test eax, eax
jne 0x1002f44d
push 0x1008ce2c
lea ecx, [ebp - 0x34]
call fcn.1002f75a
push 0x1008ce40
lea ecx, [ebp - 0x68]
call fcn.10012470
mov ecx, eax
call fcn.100112f0
movzx eax, al
test eax, eax
jne 0x1002f475
push 0x1008ce3c
lea ecx, [ebp - 0x34]
call fcn.1002f75a
push 0x1008ce50
lea ecx, [ebp - 0x68]
call fcn.10012470
mov ecx, eax
call fcn.100112f0
movzx eax, al
test eax, eax
jne 0x1002f49d
push 0x1008ce4c
lea ecx, [ebp - 0x34]
call fcn.1002f75a
push 0x1008ce5c
lea ecx, [ebp - 0x68]
call fcn.10012470
mov ecx, eax
call fcn.100112f0
movzx eax, al
test eax, eax
jne 0x1002f4c5
push 0x1008ce58
lea ecx, [ebp - 0x34]
call fcn.1002f75a
push 0x1008ce6c
lea ecx, [ebp - 0x68]
call fcn.10012470
mov ecx, eax
call fcn.100112f0
movzx eax, al
test eax, eax
jne 0x1002f4ed
push 0x1008ce68
lea ecx, [ebp - 0x34]
call fcn.1002f75a
lea eax, [ebp - 0xc4]
push eax
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0xac]
push eax
mov ecx, dword [ebp - 0x404]
call fcn.1002fed1
lea eax, [ebp - 0x88]
push eax
mov ecx, dword [ebp - 0x404]
call fcn.1002fd80
push 0x1008cef8
lea eax, [ebp - 0x340]
push eax
lea ecx, [ebp - 0x5d8]
call fcn.10030261
push dword [eax + 4]
push dword [eax]
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x6a0]
push eax
mov ecx, 0x1008df58
call fcn.10030a73
lea eax, [ebp - 0x688]
push eax
lea ecx, [ebp - 0x350]
call fcn.10030286
mov dword [ebp - 0x490], eax
mov eax, dword [ebp - 0x490]
mov dword [ebp - 0x494], eax
mov byte [ebp - 4], 0x41
mov eax, dword [ebp - 0x494]
mov dword [ebp - 0x498], eax
lea eax, [ebp - 0x5e0]
push eax
mov ecx, dword [ebp - 0x498]
call fcn.10025a87
push dword [eax + 4]
push dword [eax]
lea eax, [ebp - 0x13c]
push eax
call fcn.10024320
add esp, 0xc
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x688]
call fcn.10006aa5
lea eax, [ebp - 0x13c]
push eax
push str.APPMOND_:_setting_disabled_injection_controls_registry_value_:
push 0x10096718
call fcn.1001aa71
pop ecx
pop ecx
push eax
call fcn.10030b71
pop ecx
pop ecx
mov dword [ebp - 0x49c], eax
push 0x1001add3
mov ecx, dword [ebp - 0x49c]
call fcn.10018a3a
push 4
lea ecx, [ebp - 0x24]
call fcn.10002839
push str.SOFTWARESmart_XControlUpAgentAppLoadTime
lea ecx, [ebp - 0x548]
call fcn.1001a75b
mov byte [ebp - 4], 0x44
lea eax, [ebp - 0x548]
push eax
push SysFreeString
lea ecx, [ebp - 0x24]
call fcn.1002ddaf
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x548]
call fcn.10018a7d
push 0x1008cefc
lea ecx, [ebp - 0x560]
call fcn.1001a75b
mov byte [ebp - 4], 0x47
lea eax, [ebp - 0x13c]
push eax
lea eax, [ebp - 0x560]
push eax
lea ecx, [ebp - 0x24]
call fcn.1002df8b
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x560]
call fcn.10018a7d
lea ecx, [ebp - 0x24]
call fcn.1002dde7
and dword [ebp - 0x4a0], 0
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x24]
call fcn.1002ddd6
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x13c]
call fcn.10018a7d
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x34]
call fcn.1001335c
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x350]
call fcn.1002f8d3
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x28]
call fcn.1002ddd6
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0xf4]
call fcn.10018a7d
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x94]
call fcn.1001335c
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x400]
call fcn.1002f8d3
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0xdc]
call fcn.1001010c
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0xc4]
call fcn.1001010c
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x68]
call fcn.1001010c
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xac]
call fcn.1001010c
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x88]
call fcn.10006aa5
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x44]
call fcn.100185ae
mov eax, dword [ebp - 0x4a0]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.10034635
leave
ret 4