Function at 0x10023e70
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10071b5a
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0xb04
mov eax, dword [0x100a9080]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x710], ecx
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x710]
call fcn.10025790
mov ecx, dword [ebp - 0x710]
push ecx
lea ecx, [ebp - 0x75c]
call fcn.100030f0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x2c]
call fcn.10003970
mov byte [ebp - 4], 1
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x710]
add ecx, 0x28
call fcn.1002b0f0
lea ecx, [ebp - 0x340]
call fcn.1002e210
mov dword [ebp - 0x884], eax
mov byte [ebp - 4], 3
mov edx, dword [ebp + 8]
push edx
lea ecx, [ebp - 0xbc]
call fcn.10005e30
mov dword [ebp - 0x880], eax
mov byte [ebp - 4], 4
lea eax, [ebp - 0xbc]
push eax
lea ecx, [ebp - 0x224]
push ecx
call fcn.1000c690
add esp, 8
mov dword [ebp - 0x794], eax
mov edx, dword [ebp - 0x794]
push edx
lea ecx, [ebp - 0x2c]
call fcn.100147e0
lea ecx, [ebp - 0x224]
call fcn.10003780
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xbc]
call fcn.10003620
push 1
mov eax, dword [ebp - 0x710]
add eax, 0x28
push eax
lea ecx, [ebp - 0x2c]
push ecx
lea ecx, [ebp - 0x340]
call fcn.1002e300
mov byte [ebp - 0x712], al
movzx edx, byte [ebp - 0x712]
test edx, edx
jne 0x1002405a
lea eax, [ebp - 0x23c]
push eax
lea ecx, [ebp - 0x340]
call fcn.10030960
mov dword [ebp - 0x798], eax
mov ecx, dword [ebp - 0x798]
mov dword [ebp - 0x79c], ecx
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x79c]
push edx
lea eax, [ebp - 0xec]
push eax
call fcn.1000c600
add esp, 8
mov dword [ebp - 0x87c], eax
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x23c]
call fcn.10003780
mov ecx, dword [ebp - 0x710]
cmp dword [ecx + 0x20], 0
je 0x10024009
lea ecx, [ebp - 0xec]
call fcn.100035e0
push eax
push 0xfffffffffffffffe
mov edx, dword [ebp - 0x710]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x7a0], 0xfffffffe
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xec]
call fcn.10003620
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x340]
call fcn.1000d5a0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2c]
call fcn.10003780
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x75c]
call fcn.10003120
mov eax, dword [ebp - 0x7a0]
jmp 0x100252a0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x340]
call fcn.1000d5a0
jmp 0x10024134
mov dword [ebp - 4], 1
jmp 0x10024169
jmp 0x10024197
mov eax, dword [0x100ab760]
mov ecx, dword fs:[0x2c]
mov edx, dword [ecx + eax*4]
mov eax, dword [0x100ac2f8]
cmp eax, dword [edx + 4]
jle 0x1002439c
push 0x100ac2f8
call fcn.1004af9a
add esp, 4
cmp dword [0x100ac2f8], 0xffffffff
jne 0x1002439c
mov byte [ebp - 4], 0xc
mov byte [ebp - 0x713], 0
lea ecx, [ebp - 0x713]
push ecx
push 0x1009da20
lea ecx, [ebp - 0x70c]
call fcn.10026400
mov byte [ebp - 4], 0xd
movsd xmm0, qword [0x1009f8d8]
movsd qword [ebp - 0x870], xmm0
lea edx, [ebp - 0x870]
push edx
push 0x1009da2c
lea ecx, [ebp - 0x6dc]
call fcn.10026480
mov byte [ebp - 4], 0xe
movsd xmm0, qword [0x1009f900]
movsd qword [ebp - 0x820], xmm0
lea eax, [ebp - 0x820]
push eax
push str.FirstEvaluationTimeSec
lea ecx, [ebp - 0x6ac]
call fcn.10026480
mov byte [ebp - 4], 0xf
movsd xmm0, qword [0x1009f8c8]
movsd qword [ebp - 0x828], xmm0
lea ecx, [ebp - 0x828]
push ecx
push str.DiscretSec
lea ecx, [ebp - 0x67c]
call fcn.10026480
mov byte [ebp - 4], 0x10
mov byte [ebp - 0x714], 1
lea edx, [ebp - 0x714]
push edx
push str.UseIO
lea ecx, [ebp - 0x64c]
call fcn.10026400
mov byte [ebp - 4], 0x11
mov byte [ebp - 0x715], 0
lea eax, [ebp - 0x715]
push eax
push str.UseCPU
lea ecx, [ebp - 0x61c]
call fcn.10026400
mov byte [ebp - 4], 0x12
mov byte [ebp - 0x716], 1
lea ecx, [ebp - 0x716]
push ecx
push str.WriteLog
lea ecx, [ebp - 0x5ec]
call fcn.10026400
mov byte [ebp - 4], 0x13
mov byte [ebp - 0x717], 0
lea edx, [ebp - 0x717]
push edx
push 0x1009da78
lea ecx, [ebp - 0x5bc]
call fcn.10026400
mov byte [ebp - 4], 0x14
push 0x1009d015
push 0x1009da88
lea ecx, [ebp - 0x58c]
call fcn.10026500
mov byte [ebp - 4], 0x15
mov byte [ebp - 0x718], 0
lea eax, [ebp - 0x718]
push eax
push 0x1009da9c
lea ecx, [ebp - 0x55c]
call fcn.10026400
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x52c]
push ecx
lea edx, [ebp - 0x70c]
push edx
lea ecx, [ebp - 0x924]
call fcn.100019f0
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [eax]
push edx
mov ecx, 0x100ac2fc
call fcn.10025f40
mov byte [ebp - 4], 0xc
push fcn.100252c0
push 0xa
push 0x30
lea eax, [ebp - 0x70c]
push eax
call fcn.1004ae09
push 0x100741a0
call fcn.1004ad77
add esp, 4
mov byte [ebp - 4], 1
push 0x100ac2f8
call fcn.1004af49
add esp, 4
mov ecx, dword [0x100ab760]
mov edx, dword fs:[0x2c]
mov eax, dword [edx + ecx*4]
mov ecx, dword [0x100ac304]
cmp ecx, dword [eax + 4]
jle 0x100244e7
push 0x100ac304
call fcn.1004af9a
add esp, 4
cmp dword [0x100ac304], 0xffffffff
jne 0x100244e7
mov byte [ebp - 4], 0x17
mov byte [ebp - 0x711], 1
lea edx, [ebp - 0x711]
push edx
push 0x1009dab4
lea ecx, [ebp - 0x434]
call fcn.10026400
mov byte [ebp - 4], 0x18
mov byte [ebp - 0x719], 1
lea eax, [ebp - 0x719]
push eax
push 0x1009dac0
lea ecx, [ebp - 0x404]
call fcn.10026400
mov byte [ebp - 4], 0x19
mov byte [ebp - 0x71a], 1
lea ecx, [ebp - 0x71a]
push ecx
push 0x1009dacc
lea ecx, [ebp - 0x3d4]
call fcn.10026400
mov byte [ebp - 4], 0x1a
mov byte [ebp - 0x71b], 1
lea edx, [ebp - 0x71b]
push edx
push 0x1009dad4
lea ecx, [ebp - 0x3a4]
call fcn.10026400
mov byte [ebp - 4], 0x1b
mov byte [ebp - 0x71c], 1
lea eax, [ebp - 0x71c]
push eax
push 0x1009dae0
lea ecx, [ebp - 0x374]
call fcn.10026400
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x344]
push ecx
lea edx, [ebp - 0x434]
push edx
lea ecx, [ebp - 0x92c]
call fcn.100019f0
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [eax]
push edx
mov ecx, 0x100ac308
call fcn.10025f40
mov byte [ebp - 4], 0x17
push fcn.100252c0
push 5
push 0x30
lea eax, [ebp - 0x434]
push eax
call fcn.1004ae09
push 0x10074190
call fcn.1004ad77
add esp, 4
mov byte [ebp - 4], 1
push 0x100ac304
call fcn.1004af49
add esp, 4
mov ecx, dword [0x100ab760]
mov edx, dword fs:[0x2c]
mov eax, dword [edx + ecx*4]
mov ecx, dword [0x100ac310]
cmp ecx, dword [eax + 4]
jle 0x10024635
push 0x100ac310
call fcn.1004af9a
add esp, 4
cmp dword [0x100ac310], 0xffffffff
jne 0x10024635
mov byte [ebp - 4], 0x1d
mov byte [ebp - 0x71d], 0
lea edx, [ebp - 0x71d]
push edx
push 0x1009daec
lea ecx, [ebp - 0x528]
call fcn.10026400
mov byte [ebp - 4], 0x1e
mov dword [ebp - 0x7b0], 3
lea eax, [ebp - 0x7b0]
push eax
push 0x1009daf4
lea ecx, [ebp - 0x4f8]
call fcn.10026580
mov byte [ebp - 4], 0x1f
mov byte [ebp - 0x71e], 0
lea ecx, [ebp - 0x71e]
push ecx
push 0x1009db00
lea ecx, [ebp - 0x4c8]
call fcn.10026400
mov byte [ebp - 4], 0x20
mov byte [ebp - 0x71f], 0
lea edx, [ebp - 0x71f]
push edx
push 0x1009db0c
lea ecx, [ebp - 0x498]
call fcn.10026400
mov byte [ebp - 4], 0x21
mov byte [ebp - 0x720], 0
lea eax, [ebp - 0x720]
push eax
push 0x1009db1c
lea ecx, [ebp - 0x468]
call fcn.10026400
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x438]
push ecx
lea edx, [ebp - 0x528]
push edx
lea ecx, [ebp - 0x934]
call fcn.100019f0
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [eax]
push edx
mov ecx, 0x100ac314
call fcn.10025f40
mov byte [ebp - 4], 0x1d
push fcn.100252c0
push 5
push 0x30
lea eax, [ebp - 0x528]
push eax
call fcn.1004ae09
push 0x10074180
call fcn.1004ad77
add esp, 4
mov byte [ebp - 4], 1
push 0x100ac310
call fcn.1004af49
add esp, 4
push 0
lea ecx, [ebp - 0x984]
call fcn.100297b0
mov dword [ebp - 0x7b4], eax
mov ecx, dword [ebp - 0x7b4]
mov dword [ebp - 0x7b8], ecx
mov byte [ebp - 4], 0x23
mov edx, dword [ebp - 0x7b8]
push edx
push str.DefaultSettings
lea eax, [ebp - 0x818]
push eax
mov ecx, dword [ebp - 0x710]
add ecx, 0x28
call fcn.1002bd10
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x984]
call fcn.10029dc0
mov dword [ebp - 0x748], 0x100ac2fc
lea ecx, [ebp - 0x738]
push ecx
mov ecx, dword [ebp - 0x748]
call fcn.10025fd0
lea edx, [ebp - 0x721]
push edx
mov ecx, dword [ebp - 0x748]
call fcn.10025fb0
jmp 0x100246c3
lea ecx, [ebp - 0x738]
call fcn.10025eb0
movzx eax, byte [ebp - 0x721]
push eax
lea ecx, [ebp - 0x738]
call fcn.10025e80
movzx ecx, al
test ecx, ecx
je 0x10024758
lea ecx, [ebp - 0x738]
call fcn.10025f20
push eax
lea ecx, [ebp - 0x164]
call fcn.10025300
mov byte [ebp - 4], 0x26
sub esp, 0x18
mov edx, esp
mov dword [ebp - 0x878], esp
lea eax, [ebp - 0x14c]
push eax
lea ecx, [ebp - 0x164]
push ecx
push edx
lea ecx, [ebp - 0x818]
call fcn.1002bd80
mov dword [ebp - 0x874], eax
mov byte [ebp - 4], 0x27
lea edx, [ebp - 0x164]
push edx
lea ecx, [ebp - 0x818]
call fcn.1002bbf0
mov byte [ebp - 4], 0x26
mov ecx, eax
call fcn.10029ef0
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x164]
call fcn.100252c0
jmp 0x100246b8
push 0
lea ecx, [ebp - 0x99c]
call fcn.100297b0
mov dword [ebp - 0x7bc], eax
mov eax, dword [ebp - 0x7bc]
mov dword [ebp - 0x7c0], eax
mov byte [ebp - 4], 0x28
mov ecx, dword [ebp - 0x7c0]
push ecx
push str.InjectSettings
lea edx, [ebp - 0x7f4]
push edx
mov ecx, dword [ebp - 0x710]
add ecx, 0x28
call fcn.1002bd10
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x99c]
call fcn.10029dc0
mov dword [ebp - 0x744], 0x100ac308
lea eax, [ebp - 0x72c]
push eax
mov ecx, dword [ebp - 0x744]
call fcn.10025fd0
lea ecx, [ebp - 0x722]
push ecx
mov ecx, dword [ebp - 0x744]
call fcn.10025fb0
jmp 0x100247e6
lea ecx, [ebp - 0x72c]
call fcn.10025eb0
movzx edx, byte [ebp - 0x722]
push edx
lea ecx, [ebp - 0x72c]
call fcn.10025e80
movzx eax, al
test eax, eax
je 0x1002487b
lea ecx, [ebp - 0x72c]
call fcn.10025f20
push eax
lea ecx, [ebp - 0x194]
call fcn.10025300
mov byte [ebp - 4], 0x2b
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x868], esp
lea edx, [ebp - 0x17c]
push edx
lea eax, [ebp - 0x194]
push eax
push ecx
lea ecx, [ebp - 0x7f4]
call fcn.1002bd80
mov dword [ebp - 0x858], eax
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x194]
push ecx
lea ecx, [ebp - 0x7f4]
call fcn.1002bbf0
mov byte [ebp - 4], 0x2b
mov ecx, eax
call fcn.10029ef0
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x194]
call fcn.100252c0
jmp 0x100247db
push 0
lea ecx, [ebp - 0x9b4]
call fcn.100297b0
mov dword [ebp - 0x7c4], eax
mov edx, dword [ebp - 0x7c4]
mov dword [ebp - 0x7c8], edx
mov byte [ebp - 4], 0x2d
mov eax, dword [ebp - 0x7c8]
push eax
push str.BrowserURLSettings
lea ecx, [ebp - 0x8d4]
push ecx
mov ecx, dword [ebp - 0x710]
add ecx, 0x28
call fcn.1002bd10
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x9b4]
call fcn.10029dc0
mov dword [ebp - 0x740], 0x100ac314
lea edx, [ebp - 0x734]
push edx
mov ecx, dword [ebp - 0x740]
call fcn.10025fd0
lea eax, [ebp - 0x723]
push eax
mov ecx, dword [ebp - 0x740]
call fcn.10025fb0
jmp 0x10024909
lea ecx, [ebp - 0x734]
call fcn.10025eb0
movzx ecx, byte [ebp - 0x723]
push ecx
lea ecx, [ebp - 0x734]
call fcn.10025e80
movzx edx, al
test edx, edx
je 0x1002499e
lea ecx, [ebp - 0x734]
call fcn.10025f20
push eax
lea ecx, [ebp - 0x1c4]
call fcn.10025300
mov byte [ebp - 4], 0x30
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x854], esp
lea ecx, [ebp - 0x1ac]
push ecx
lea edx, [ebp - 0x1c4]
push edx
push eax
lea ecx, [ebp - 0x8d4]
call fcn.1002bd80
mov dword [ebp - 0x850], eax
mov byte [ebp - 4], 0x31
lea eax, [ebp - 0x1c4]
push eax
lea ecx, [ebp - 0x8d4]
call fcn.1002bbf0
mov byte [ebp - 4], 0x30
mov ecx, eax
call fcn.10029ef0
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x1c4]
call fcn.100252c0
jmp 0x100248fe
push 7
lea ecx, [ebp - 0x8bc]
call fcn.100297b0
mov byte [ebp - 4], 0x32
push 6
lea ecx, [ebp - 0x96c]
call fcn.100297b0
mov dword [ebp - 0x7cc], eax
mov ecx, dword [ebp - 0x7cc]
mov dword [ebp - 0x7d0], ecx
mov byte [ebp - 4], 0x33
mov edx, dword [ebp - 0x7d0]
push edx
push str.MonitoredApps
lea eax, [ebp - 0x91c]
push eax
mov ecx, dword [ebp - 0x710]
add ecx, 0x28
call fcn.1002bd10
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x96c]
call fcn.10029dc0
mov dword [ebp - 0x728], 0
lea ecx, [ebp - 0x91c]
call fcn.1002afe0
mov dword [ebp - 0x7d4], eax
jmp 0x10024a2e
mov ecx, dword [ebp - 0x728]
add ecx, 1
mov dword [ebp - 0x728], ecx
mov edx, dword [ebp - 0x728]
cmp edx, dword [ebp - 0x7d4]
jae 0x10024c3a
mov eax, dword [ebp - 0x728]
push eax
lea ecx, [ebp - 0x91c]
call fcn.1002b220
push eax
lea ecx, [ebp - 0x904]
call fcn.10029a40
mov byte [ebp - 4], 0x36
push str.Name
lea ecx, [ebp - 0x904]
call fcn.1002bba0
mov ecx, eax
call fcn.1002a0b0
push eax
lea ecx, [ebp - 0x5c]
call fcn.100037f0
mov byte [ebp - 4], 0x37
push 0x1005371e
lea ecx, [ebp - 0x83c]
push ecx
lea ecx, [ebp - 0x5c]
call fcn.1000e870
mov edx, dword [eax]
push edx
lea eax, [ebp - 0x848]
push eax
lea ecx, [ebp - 0x5c]
call fcn.1000e830
mov ecx, dword [eax]
push ecx
lea edx, [ebp - 0x864]
push edx
lea ecx, [ebp - 0x5c]
call fcn.1000e870
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x888]
push ecx
call fcn.1000fd30
add esp, 0x14
push 0x1009db7c
lea ecx, [ebp - 0x904]
call fcn.1002bba0
push eax
lea ecx, [ebp - 0x8ec]
call fcn.10029a40
mov byte [ebp - 4], 0x38
mov dword [ebp - 0x73c], 0x100ac2fc
lea edx, [ebp - 0x730]
push edx
mov ecx, dword [ebp - 0x73c]
call fcn.10025fd0
lea eax, [ebp - 0x724]
push eax
mov ecx, dword [ebp - 0x73c]
call fcn.10025fb0
jmp 0x10024b2b
lea ecx, [ebp - 0x730]
call fcn.10025eb0
movzx ecx, byte [ebp - 0x724]
push ecx
lea ecx, [ebp - 0x730]
call fcn.10025e80
movzx edx, al
test edx, edx
je 0x10024bd0
lea ecx, [ebp - 0x730]
call fcn.10025f20
push eax
lea ecx, [ebp - 0x1f4]
call fcn.10025300
mov byte [ebp - 4], 0x39
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x88c], esp
lea eax, [ebp - 0x1f4]
push eax
lea ecx, [ebp - 0x818]
call fcn.1002bbf0
push eax
lea ecx, [ebp - 0x1f4]
push ecx
push esi
lea ecx, [ebp - 0x8ec]
call fcn.1002bd80
mov dword [ebp - 0x890], eax
mov byte [ebp - 4], 0x3a
lea edx, [ebp - 0x1f4]
push edx
lea ecx, [ebp - 0x8ec]
call fcn.1002bbf0
mov byte [ebp - 4], 0x39
mov ecx, eax
call fcn.10029ef0
mov byte [ebp - 4], 0x38
lea ecx, [ebp - 0x1f4]
call fcn.100252c0
jmp 0x10024b20
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x894], esp
lea eax, [ebp - 0x8ec]
push eax
call fcn.10029a40
mov dword [ebp - 0x898], eax
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x5c]
push ecx
lea ecx, [ebp - 0x8bc]
call fcn.1002bbf0
mov byte [ebp - 4], 0x38
mov ecx, eax
call fcn.10029ef0
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x8ec]
call fcn.10029dc0
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x5c]
call fcn.10003780
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x904]
call fcn.10029dc0
jmp 0x10024a1f
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x89c], esp
lea edx, [ebp - 0x8bc]
push edx
call fcn.10029a40
mov dword [ebp - 0x8a0], eax
mov byte [ebp - 4], 0x3c
push 0x1009db88
mov ecx, dword [ebp - 0x710]
add ecx, 0x28
call fcn.1002bba0
mov byte [ebp - 4], 0x35
mov ecx, eax
call fcn.10029ef0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x8a4], esp
lea eax, [ebp - 0x818]
push eax
call fcn.10029a40
mov dword [ebp - 0x82c], eax
mov byte [ebp - 4], 0x3d
push 0x1009db90
mov ecx, dword [ebp - 0x710]
add ecx, 0x28
call fcn.1002bba0
mov byte [ebp - 4], 0x35
mov ecx, eax
call fcn.10029ef0
push 1
lea ecx, [ebp - 0xb14]
call fcn.10025da0
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x800]
push ecx
lea ecx, [ebp - 0x8bc]
call fcn.1002bde0
mov byte [ebp - 4], 0x3f
push 0x1009db98
lea edx, [ebp - 0xb04]
push edx
lea ecx, [ebp - 0x93c]
call fcn.10025d30
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [eax]
push edx
lea eax, [ebp - 0x830]
push eax
lea ecx, [ebp - 0x800]
call fcn.1000dd00
mov ecx, dword [eax]
push ecx
lea edx, [ebp - 0x834]
push edx
lea ecx, [ebp - 0x800]
call fcn.1000dd40
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x954]
push ecx
call fcn.10026600
add esp, 0x14
lea edx, [ebp - 0x254]
push edx
lea ecx, [ebp - 0xb14]
call fcn.10025d60
mov dword [ebp - 0x7d8], eax
mov eax, dword [ebp - 0x7d8]
mov dword [ebp - 0x7dc], eax
mov byte [ebp - 4], 0x40
mov ecx, dword [ebp - 0x7dc]
push ecx
lea edx, [ebp - 0x44]
push edx
call fcn.1000c600
add esp, 8
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x254]
call fcn.10003780
push 0x100548d7
lea eax, [ebp - 0x838]
push eax
lea ecx, [ebp - 0x44]
call fcn.1000e6d0
mov ecx, dword [eax]
push ecx
lea edx, [ebp - 0x840]
push edx
lea ecx, [ebp - 0x44]
call fcn.1000e690
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x844]
push ecx
lea ecx, [ebp - 0x44]
call fcn.1000e6d0
mov edx, dword [eax]
push edx
lea eax, [ebp - 0x84c]
push eax
call fcn.1000fe50
add esp, 0x14
push 0x10006450
lea ecx, [ebp - 0x44]
push ecx
push str.APPMOND_:_setting_whitelist_registry_value_:
push 0x100aafa0
call fcn.10006170
add esp, 8
push eax
call fcn.100266c0
add esp, 8
mov ecx, eax
call fcn.10003530
push str.whitelist
lea ecx, [ebp - 0x104]
call fcn.10005e30
mov byte [ebp - 4], 0x43
push 0x1009dc10
lea ecx, [ebp - 0xd4]
call fcn.10005e30
mov byte [ebp - 4], 0x44
lea edx, [ebp - 0x44]
push edx
lea eax, [ebp - 0x104]
push eax
lea ecx, [ebp - 0xd4]
push ecx
push SysFreeString
call fcn.10023a10
add esp, 0x10
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0xd4]
call fcn.10003620
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x104]
call fcn.10003620
push 1
lea ecx, [ebp - 0xa64]
call fcn.10025da0
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x754]
call fcn.10014250
mov byte [ebp - 4], 0x46
push 0x1009dc6c
lea ecx, [ebp - 0x7f4]
call fcn.1002bba0
mov ecx, eax
call fcn.1002ae60
movzx edx, al
test edx, edx
jne 0x10024edf
push 0x1009dc78
lea ecx, [ebp - 0x26c]
call fcn.100037f0
mov dword [ebp - 0x760], eax
mov eax, dword [ebp - 0x760]
mov dword [ebp - 0x764], eax
mov byte [ebp - 4], 0x47
mov ecx, dword [ebp - 0x764]
push ecx
lea ecx, [ebp - 0x754]
call fcn.10026030
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x26c]
call fcn.10003780
push 0x1009dc7c
lea ecx, [ebp - 0x7f4]
call fcn.1002bba0
mov ecx, eax
call fcn.1002ae60
movzx edx, al
test edx, edx
jne 0x10024f44
push 0x1009dc88
lea ecx, [ebp - 0x284]
call fcn.100037f0
mov dword [ebp - 0x768], eax
mov eax, dword [ebp - 0x768]
mov dword [ebp - 0x76c], eax
mov byte [ebp - 4], 0x48
mov ecx, dword [ebp - 0x76c]
push ecx
lea ecx, [ebp - 0x754]
call fcn.10026030
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x284]
call fcn.10003780
push 0x1009dc8c
lea ecx, [ebp - 0x7f4]
call fcn.1002bba0
mov ecx, eax
call fcn.1002ae60
movzx edx, al
test edx, edx
jne 0x10024fa9
push 0x1009dc94
lea ecx, [ebp - 0x29c]
call fcn.100037f0
mov dword [ebp - 0x770], eax
mov eax, dword [ebp - 0x770]
mov dword [ebp - 0x774], eax
mov byte [ebp - 4], 0x49
mov ecx, dword [ebp - 0x774]
push ecx
lea ecx, [ebp - 0x754]
call fcn.10026030
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x29c]
call fcn.10003780
push 0x1009dc98
lea ecx, [ebp - 0x7f4]
call fcn.1002bba0
mov ecx, eax
call fcn.1002ae60
movzx edx, al
test edx, edx
jne 0x1002500e
push 0x1009dca4
lea ecx, [ebp - 0x2b4]
call fcn.100037f0
mov dword [ebp - 0x790], eax
mov eax, dword [ebp - 0x790]
mov dword [ebp - 0x778], eax
mov byte [ebp - 4], 0x4a
mov ecx, dword [ebp - 0x778]
push ecx
lea ecx, [ebp - 0x754]
call fcn.10026030
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x2b4]
call fcn.10003780
push 0x1009dca8
lea ecx, [ebp - 0x7f4]
call fcn.1002bba0
mov ecx, eax
call fcn.1002ae60
movzx edx, al
test edx, edx
jne 0x10025073
push 0x1009dcb4
lea ecx, [ebp - 0x2cc]
call fcn.100037f0
mov dword [ebp - 0x77c], eax
mov eax, dword [ebp - 0x77c]
mov dword [ebp - 0x780], eax
mov byte [ebp - 4], 0x4b
mov ecx, dword [ebp - 0x780]
push ecx
lea ecx, [ebp - 0x754]
call fcn.10026030
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x2cc]
call fcn.10003780
lea edx, [ebp - 0x8d4]
push edx
lea eax, [ebp - 0x7f4]
push eax
lea ecx, [ebp - 0x818]
push ecx
mov ecx, dword [ebp - 0x710]
call fcn.10025970
lea edx, [ebp - 0x2c]
push edx
mov ecx, dword [ebp - 0x710]
call fcn.10025800
push 0x1009dcb8
lea eax, [ebp - 0xa54]
push eax
lea ecx, [ebp - 0x944]
call fcn.10025d30
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [eax]
push edx
lea eax, [ebp - 0x85c]
push eax
lea ecx, [ebp - 0x754]
call fcn.1000dd00
mov ecx, dword [eax]
push ecx
lea edx, [ebp - 0x860]
push edx
lea ecx, [ebp - 0x754]
call fcn.1000dd40
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x94c]
push ecx
call fcn.10026600
add esp, 0x14
lea edx, [ebp - 0x20c]
push edx
lea ecx, [ebp - 0xa64]
call fcn.10025d60
mov dword [ebp - 0x784], eax
mov eax, dword [ebp - 0x784]
mov dword [ebp - 0x788], eax
mov byte [ebp - 4], 0x4c
mov ecx, dword [ebp - 0x788]
push ecx
lea edx, [ebp - 0x74]
push edx
call fcn.1000c600
add esp, 8
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x20c]
call fcn.10003780
push 0x10006450
lea eax, [ebp - 0x74]
push eax
push str.APPMOND_:_setting_disabled_injection_controls_registry_value_:
push 0x100aafa0
call fcn.10006170
add esp, 8
push eax
call fcn.100266c0
add esp, 8
mov ecx, eax
call fcn.10003530
push str.ictrls_disabled
lea ecx, [ebp - 0x134]
call fcn.10005e30
mov byte [ebp - 4], 0x4f
push str.SOFTWARESmart_XControlUpAgentAppLoadTime
lea ecx, [ebp - 0x11c]
call fcn.10005e30
mov byte [ebp - 4], 0x50
lea ecx, [ebp - 0x74]
push ecx
lea edx, [ebp - 0x134]
push edx
lea eax, [ebp - 0x11c]
push eax
push SysFreeString
call fcn.10023a10
add esp, 0x10
mov byte [ebp - 4], 0x4f
lea ecx, [ebp - 0x11c]
call fcn.10003620
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x134]
call fcn.10003620
mov dword [ebp - 0x78c], 0
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x74]
call fcn.10003620
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x754]
call fcn.10014230
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0xa64]
call fcn.10012e30
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x44]
call fcn.10003620
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x800]
call fcn.10014230
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0xb14]
call fcn.10012e30
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x91c]
call fcn.10029dc0
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x8bc]
call fcn.10029dc0
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x8d4]
call fcn.10029dc0
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x7f4]
call fcn.10029dc0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x818]
call fcn.10029dc0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2c]
call fcn.10003780
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x75c]
call fcn.10003120
mov eax, dword [ebp - 0x78c]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.1004a9fe
mov esp, ebp
pop ebp
ret 4