Function at 0x1002e830
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100586c6
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0xaac
mov eax, dword [0x10070054]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x3fc], ecx
mov eax, dword [ebp + 8]
push eax
call fcn.1002fef0
add esp, 4
mov ecx, dword [ebp - 0x3fc]
push ecx
lea ecx, [ebp - 0x48]
call fcn.1001bc70
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x80]
call fcn.10007ae0
mov byte [ebp - 4], 1
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x3fc]
add ecx, 0x28
call fcn.10013bd0
sub esp, 8
mov ecx, esp
mov dword [ebp - 0x4f8], esp
mov edx, dword [ebp + 8]
push edx
call fcn.10023e40
lea eax, [ebp - 0x6a8]
push eax
call fcn.10020710
add esp, 0xc
mov dword [ebp - 0x494], eax
mov ecx, dword [ebp - 0x494]
push ecx
lea ecx, [ebp - 0x80]
call fcn.10007830
lea ecx, [ebp - 0x6a8]
call fcn.100077f0
push 0x74
lea ecx, [ebp - 0x298]
call fcn.10002e30
lea ecx, [ebp - 0x298]
call fcn.10003250
mov dword [ebp - 0x4fc], eax
mov byte [ebp - 4], 3
push 1
mov edx, dword [ebp - 0x3fc]
add edx, 0x28
push edx
lea eax, [ebp - 0x80]
push eax
lea ecx, [ebp - 0x298]
call fcn.10003360
mov byte [ebp - 0x401], al
movzx ecx, byte [ebp - 0x401]
test ecx, ecx
jne 0x1002ea2b
lea edx, [ebp - 0x6c0]
push edx
lea ecx, [ebp - 0x298]
call fcn.10005d60
mov dword [ebp - 0x49c], eax
mov eax, dword [ebp - 0x49c]
mov dword [ebp - 0x4a0], eax
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x4a0]
mov dword [ebp - 0x4a4], ecx
lea edx, [ebp - 0x558]
push edx
mov ecx, dword [ebp - 0x4a4]
call fcn.100288b0
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [eax]
push edx
lea eax, [ebp - 0x194]
push eax
call fcn.10027aa0
add esp, 0xc
mov dword [ebp - 0x500], eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x6c0]
call fcn.100077f0
mov ecx, dword [ebp - 0x3fc]
cmp dword [ecx + 0x20], 0
je 0x1002e9dd
mov edx, dword [ebp - 0x3fc]
mov eax, dword [edx + 0x20]
mov dword [ebp - 0x4a8], eax
lea ecx, [ebp - 0x194]
call fcn.1001c1a0
push eax
push 0xfffffffffffffffe
call dword [ebp - 0x4a8]
mov dword [ebp - 0x4ac], 0xfffffffe
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x194]
call fcn.1001c1e0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x298]
call fcn.10022800
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x80]
call fcn.100077f0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.1001bca0
mov eax, dword [ebp - 0x4ac]
jmp 0x1002fcae
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x298]
call fcn.10022800
jmp 0x1002eb0a
mov dword [ebp - 4], 1
jmp 0x1002eb3c
jmp 0x1002eb67
mov edx, dword [0x10071c88]
mov eax, dword fs:[0x2c]
mov ecx, dword [eax + edx*4]
mov edx, dword [0x100726ac]
cmp edx, dword [ecx + 4]
jle 0x1002ed79
push 0x100726ac
call fcn.100348c3
add esp, 4
cmp dword [0x100726ac], 0xffffffff
jne 0x1002ed79
mov byte [ebp - 4], 9
push 8
mov ecx, 0x100726bc
call fcn.10002e30
mov byte [ebp - 0x410], 0
lea eax, [ebp - 0x410]
push eax
push 0x10068798
lea ecx, [ebp - 0xabc]
call fcn.10030b80
mov byte [ebp - 4], 0xa
movsd xmm0, qword [0x10069d38]
movsd qword [ebp - 0x508], xmm0
lea ecx, [ebp - 0x508]
push ecx
push 0x1006878c
lea ecx, [ebp - 0xa8c]
call fcn.10030c10
mov byte [ebp - 4], 0xb
movsd xmm0, qword [0x10069d78]
movsd qword [ebp - 0x510], xmm0
lea edx, [ebp - 0x510]
push edx
push str.FirstEvaluationTimeSec
lea ecx, [ebp - 0xa5c]
call fcn.10030c10
mov byte [ebp - 4], 0xc
movsd xmm0, qword [0x10069d28]
movsd qword [ebp - 0x518], xmm0
lea eax, [ebp - 0x518]
push eax
push str.DiscretSec
lea ecx, [ebp - 0xa2c]
call fcn.10030c10
mov byte [ebp - 4], 0xd
mov byte [ebp - 0x40f], 1
lea ecx, [ebp - 0x40f]
push ecx
push str.UseIO
lea ecx, [ebp - 0x9fc]
call fcn.10030b80
mov byte [ebp - 4], 0xe
mov byte [ebp - 0x40e], 0
lea edx, [ebp - 0x40e]
push edx
push str.UseCPU
lea ecx, [ebp - 0x9cc]
call fcn.10030b80
mov byte [ebp - 4], 0xf
mov byte [ebp - 0x40d], 1
lea eax, [ebp - 0x40d]
push eax
push str.WriteLog
lea ecx, [ebp - 0x99c]
call fcn.10030b80
mov byte [ebp - 4], 0x10
mov byte [ebp - 0x40c], 0
lea ecx, [ebp - 0x40c]
push ecx
push 0x100687d8
lea ecx, [ebp - 0x96c]
call fcn.10030b80
mov byte [ebp - 4], 0x11
push 0x100652bf
push 0x100687f4
lea ecx, [ebp - 0x93c]
call fcn.10030ca0
mov byte [ebp - 4], 0x12
mov byte [ebp - 0x40a], 0
lea edx, [ebp - 0x40a]
push edx
push 0x10068814
lea ecx, [ebp - 0x90c]
call fcn.10030b80
mov byte [ebp - 4], 0x13
lea eax, [ebp - 0x8dc]
push eax
lea ecx, [ebp - 0xabc]
push ecx
lea ecx, [ebp - 0x560]
call fcn.10001920
mov edx, dword [eax + 4]
push edx
mov eax, dword [eax]
push eax
mov ecx, 0x100726bc
call fcn.10030710
mov byte [ebp - 4], 9
push fcn.1002fe00
push 0xa
push 0x30
lea ecx, [ebp - 0xabc]
push ecx
call fcn.100349c9
push 0x100589e0
call fcn.10034e93
add esp, 4
mov byte [ebp - 4], 1
push 0x100726ac
call fcn.10034879
add esp, 4
mov edx, dword [0x10071c88]
mov eax, dword fs:[0x2c]
mov ecx, dword [eax + edx*4]
mov edx, dword [0x100726b8]
cmp edx, dword [ecx + 4]
jle 0x1002eecf
push 0x100726b8
call fcn.100348c3
add esp, 4
cmp dword [0x100726b8], 0xffffffff
jne 0x1002eecf
mov byte [ebp - 4], 0x14
push 8
mov ecx, 0x10072720
call fcn.10002e30
mov byte [ebp - 0x40b], 1
lea eax, [ebp - 0x40b]
push eax
push 0x10068808
lea ecx, [ebp - 0x7e4]
call fcn.10030b80
mov byte [ebp - 4], 0x15
mov byte [ebp - 0x409], 1
lea ecx, [ebp - 0x409]
push ecx
push 0x10068834
lea ecx, [ebp - 0x7b4]
call fcn.10030b80
mov byte [ebp - 4], 0x16
mov byte [ebp - 0x408], 1
lea edx, [ebp - 0x408]
push edx
push 0x1006882c
lea ecx, [ebp - 0x784]
call fcn.10030b80
mov byte [ebp - 4], 0x17
mov byte [ebp - 0x407], 1
lea eax, [ebp - 0x407]
push eax
push 0x1006884c
lea ecx, [ebp - 0x754]
call fcn.10030b80
mov byte [ebp - 4], 0x18
mov byte [ebp - 0x406], 1
lea ecx, [ebp - 0x406]
push ecx
push 0x10068840
lea ecx, [ebp - 0x724]
call fcn.10030b80
mov byte [ebp - 4], 0x19
lea edx, [ebp - 0x6f4]
push edx
lea eax, [ebp - 0x7e4]
push eax
lea ecx, [ebp - 0x568]
call fcn.10001920
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [eax]
push edx
mov ecx, 0x10072720
call fcn.10030710
mov byte [ebp - 4], 0x14
push fcn.1002fe00
push 5
push 0x30
lea eax, [ebp - 0x7e4]
push eax
call fcn.100349c9
push 0x100589d0
call fcn.10034e93
add esp, 4
mov byte [ebp - 4], 1
push 0x100726b8
call fcn.10034879
add esp, 4
mov ecx, dword [0x10071c88]
mov edx, dword fs:[0x2c]
mov eax, dword [edx + ecx*4]
mov ecx, dword [0x100726b4]
cmp ecx, dword [eax + 4]
jle 0x1002f029
push 0x100726b4
call fcn.100348c3
add esp, 4
cmp dword [0x100726b4], 0xffffffff
jne 0x1002f029
mov byte [ebp - 4], 0x1a
push 8
mov ecx, 0x10072728
call fcn.10002e30
mov byte [ebp - 0x405], 0
lea edx, [ebp - 0x405]
push edx
push 0x10068864
lea ecx, [ebp - 0x8d8]
call fcn.10030b80
mov byte [ebp - 4], 0x1b
mov dword [ebp - 0x4c4], 3
lea eax, [ebp - 0x4c4]
push eax
push 0x10068858
lea ecx, [ebp - 0x8a8]
call fcn.10030d30
mov byte [ebp - 4], 0x1c
mov byte [ebp - 0x404], 0
lea ecx, [ebp - 0x404]
push ecx
push 0x1006887c
lea ecx, [ebp - 0x878]
call fcn.10030b80
mov byte [ebp - 4], 0x1d
mov byte [ebp - 0x403], 0
lea edx, [ebp - 0x403]
push edx
push 0x1006886c
lea ecx, [ebp - 0x848]
call fcn.10030b80
mov byte [ebp - 4], 0x1e
mov byte [ebp - 0x402], 0
lea eax, [ebp - 0x402]
push eax
push 0x10068898
lea ecx, [ebp - 0x818]
call fcn.10030b80
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x7e8]
push ecx
lea edx, [ebp - 0x8d8]
push edx
lea ecx, [ebp - 0x570]
call fcn.10001920
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [eax]
push edx
mov ecx, 0x10072728
call fcn.10030710
mov byte [ebp - 4], 0x1a
push fcn.1002fe00
push 5
push 0x30
lea eax, [ebp - 0x8d8]
push eax
call fcn.100349c9
push 0x100589c0
call fcn.10034e93
add esp, 4
mov byte [ebp - 4], 1
push 0x100726b4
call fcn.10034879
add esp, 4
push 0x18
lea ecx, [ebp - 0xa4]
call fcn.10002e30
mov ecx, dword [ebp - 0x3fc]
add ecx, 0x28
mov dword [ebp - 0x4d0], ecx
push 0
lea ecx, [ebp - 0x6d8]
call fcn.10011f40
mov dword [ebp - 0x4c8], eax
mov edx, dword [ebp - 0x4c8]
mov dword [ebp - 0x4cc], edx
mov byte [ebp - 4], 0x20
mov eax, dword [ebp - 0x4cc]
push eax
push str.DefaultSettings
lea ecx, [ebp - 0xa4]
push ecx
mov ecx, dword [ebp - 0x4d0]
call fcn.10014e80
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x6d8]
call fcn.100125d0
mov dword [ebp - 0x420], 0x100726bc
push 4
lea ecx, [ebp - 0x1c]
call fcn.10002e30
lea edx, [ebp - 0x1c]
push edx
mov ecx, dword [ebp - 0x420]
call fcn.100307a0
lea eax, [ebp - 0x16]
push eax
mov ecx, dword [ebp - 0x420]
call fcn.10030780
jmp 0x1002f0d1
lea ecx, [ebp - 0x1c]
call fcn.100164c0
movzx ecx, byte [ebp - 0x16]
push ecx
lea ecx, [ebp - 0x1c]
call fcn.100306e0
movzx edx, al
test edx, edx
jne 0x1002f1c2
lea ecx, [ebp - 0x1c]
call fcn.10015df0
push eax
lea ecx, [ebp - 0x224]
call fcn.1002fe40
mov byte [ebp - 4], 0x23
lea eax, [ebp - 0x224]
push eax
call fcn.10009910
add esp, 4
push eax
call fcn.10030dc0
add esp, 4
mov dword [ebp - 0x424], eax
lea ecx, [ebp - 0x224]
push ecx
call fcn.10009910
add esp, 4
push eax
call fcn.10030de0
add esp, 4
mov dword [ebp - 0x4d4], eax
mov edx, dword [ebp - 0x4d4]
push edx
mov eax, dword [ebp - 0x424]
push eax
lea ecx, [ebp - 0x6f0]
push ecx
lea ecx, [ebp - 0xa4]
call fcn.10014ef0
mov dword [ebp - 0x4d8], eax
mov edx, dword [ebp - 0x4d8]
mov dword [ebp - 0x4dc], edx
mov byte [ebp - 4], 0x24
mov eax, dword [ebp - 0x4dc]
mov dword [ebp - 0x4e0], eax
mov ecx, dword [ebp - 0x4e0]
push ecx
mov edx, dword [ebp - 0x424]
push edx
lea ecx, [ebp - 0xa4]
call fcn.10014ba0
mov ecx, eax
call fcn.100126b0
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x6f0]
call fcn.100125d0
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x224]
call fcn.1002fe00
jmp 0x1002f0c9
push 0x18
lea ecx, [ebp - 0x60]
call fcn.10002e30
mov eax, dword [ebp - 0x3fc]
add eax, 0x28
mov dword [ebp - 0x4e8], eax
push 0
lea ecx, [ebp - 0x5e8]
call fcn.10011f40
mov dword [ebp - 0x4e4], eax
mov ecx, dword [ebp - 0x4e4]
mov dword [ebp - 0x468], ecx
mov byte [ebp - 4], 0x25
mov edx, dword [ebp - 0x468]
push edx
push str.InjectSettings
lea eax, [ebp - 0x60]
push eax
mov ecx, dword [ebp - 0x4e8]
call fcn.10014e80
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x5e8]
call fcn.100125d0
mov dword [ebp - 0x428], 0x10072720
push 4
lea ecx, [ebp - 0x20]
call fcn.10002e30
lea ecx, [ebp - 0x20]
push ecx
mov ecx, dword [ebp - 0x428]
call fcn.100307a0
lea edx, [ebp - 0x17]
push edx
mov ecx, dword [ebp - 0x428]
call fcn.10030780
jmp 0x1002f264
lea ecx, [ebp - 0x20]
call fcn.100164c0
movzx eax, byte [ebp - 0x17]
push eax
lea ecx, [ebp - 0x20]
call fcn.100306e0
movzx ecx, al
test ecx, ecx
jne 0x1002f34f
lea ecx, [ebp - 0x20]
call fcn.10015df0
push eax
lea ecx, [ebp - 0x1f4]
call fcn.1002fe40
mov byte [ebp - 4], 0x28
lea edx, [ebp - 0x1f4]
push edx
call fcn.10009910
add esp, 4
push eax
call fcn.10030dc0
add esp, 4
mov dword [ebp - 0x42c], eax
lea eax, [ebp - 0x1f4]
push eax
call fcn.10009910
add esp, 4
push eax
call fcn.10030de0
add esp, 4
mov dword [ebp - 0x4ec], eax
mov ecx, dword [ebp - 0x4ec]
push ecx
mov edx, dword [ebp - 0x42c]
push edx
lea eax, [ebp - 0x600]
push eax
lea ecx, [ebp - 0x60]
call fcn.10014ef0
mov dword [ebp - 0x4f0], eax
mov ecx, dword [ebp - 0x4f0]
mov dword [ebp - 0x430], ecx
mov byte [ebp - 4], 0x29
mov edx, dword [ebp - 0x430]
mov dword [ebp - 0x434], edx
mov eax, dword [ebp - 0x434]
push eax
mov ecx, dword [ebp - 0x42c]
push ecx
lea ecx, [ebp - 0x60]
call fcn.10014ba0
mov ecx, eax
call fcn.100126b0
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x600]
call fcn.100125d0
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x1f4]
call fcn.1002fe00
jmp 0x1002f25c
push 0x18
lea ecx, [ebp - 0xbc]
call fcn.10002e30
mov edx, dword [ebp - 0x3fc]
add edx, 0x28
mov dword [ebp - 0x440], edx
push 0
lea ecx, [ebp - 0x618]
call fcn.10011f40
mov dword [ebp - 0x438], eax
mov eax, dword [ebp - 0x438]
mov dword [ebp - 0x43c], eax
mov byte [ebp - 4], 0x2a
mov ecx, dword [ebp - 0x43c]
push ecx
push str.BrowserURLSettings
lea edx, [ebp - 0xbc]
push edx
mov ecx, dword [ebp - 0x440]
call fcn.10014e80
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x618]
call fcn.100125d0
mov dword [ebp - 0x414], 0x10072728
push 4
lea ecx, [ebp - 0x24]
call fcn.10002e30
lea eax, [ebp - 0x24]
push eax
mov ecx, dword [ebp - 0x414]
call fcn.100307a0
lea ecx, [ebp - 0x15]
push ecx
mov ecx, dword [ebp - 0x414]
call fcn.10030780
jmp 0x1002f3f7
lea ecx, [ebp - 0x24]
call fcn.100164c0
movzx edx, byte [ebp - 0x15]
push edx
lea ecx, [ebp - 0x24]
call fcn.100306e0
movzx eax, al
test eax, eax
jne 0x1002f4e8
lea ecx, [ebp - 0x24]
call fcn.10015df0
push eax
lea ecx, [ebp - 0x1c4]
call fcn.1002fe40
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x1c4]
push ecx
call fcn.10009910
add esp, 4
push eax
call fcn.10030dc0
add esp, 4
mov dword [ebp - 0x418], eax
lea edx, [ebp - 0x1c4]
push edx
call fcn.10009910
add esp, 4
push eax
call fcn.10030de0
add esp, 4
mov dword [ebp - 0x444], eax
mov eax, dword [ebp - 0x444]
push eax
mov ecx, dword [ebp - 0x418]
push ecx
lea edx, [ebp - 0x630]
push edx
lea ecx, [ebp - 0xbc]
call fcn.10014ef0
mov dword [ebp - 0x448], eax
mov eax, dword [ebp - 0x448]
mov dword [ebp - 0x44c], eax
mov byte [ebp - 4], 0x2e
mov ecx, dword [ebp - 0x44c]
mov dword [ebp - 0x450], ecx
mov edx, dword [ebp - 0x450]
push edx
mov eax, dword [ebp - 0x418]
push eax
lea ecx, [ebp - 0xbc]
call fcn.10014ba0
mov ecx, eax
call fcn.100126b0
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x630]
call fcn.100125d0
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x1c4]
call fcn.1002fe00
jmp 0x1002f3ef
push 0x18
lea ecx, [ebp - 0xd4]
call fcn.10002e30
push 7
lea ecx, [ebp - 0xd4]
call fcn.10011f40
mov byte [ebp - 4], 0x2f
push 0x18
lea ecx, [ebp - 0x14c]
call fcn.10002e30
mov ecx, dword [ebp - 0x3fc]
add ecx, 0x28
mov dword [ebp - 0x45c], ecx
push 6
lea ecx, [ebp - 0x648]
call fcn.10011f40
mov dword [ebp - 0x454], eax
mov edx, dword [ebp - 0x454]
mov dword [ebp - 0x458], edx
mov byte [ebp - 4], 0x30
mov eax, dword [ebp - 0x458]
push eax
push str.MonitoredApps
lea ecx, [ebp - 0x14c]
push ecx
mov ecx, dword [ebp - 0x45c]
call fcn.10014e80
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x648]
call fcn.100125d0
lea edx, [ebp - 0x14c]
mov dword [ebp - 0x41c], edx
push 8
lea ecx, [ebp - 0x40]
call fcn.10002e30
lea eax, [ebp - 0x40]
push eax
mov ecx, dword [ebp - 0x41c]
call fcn.100159a0
push 8
lea ecx, [ebp - 0x68]
call fcn.10002e30
lea ecx, [ebp - 0x68]
push ecx
mov ecx, dword [ebp - 0x41c]
call fcn.10015a00
jmp 0x1002f5ba
lea ecx, [ebp - 0x40]
call fcn.10027bc0
lea edx, [ebp - 0x68]
push edx
lea ecx, [ebp - 0x40]
call fcn.10003170
movzx eax, al
test eax, eax
je 0x1002f6f6
push 0x18
lea ecx, [ebp - 0x104]
call fcn.10002e30
lea ecx, [ebp - 0x40]
call fcn.10027be0
push eax
lea ecx, [ebp - 0x104]
call fcn.100124f0
mov byte [ebp - 4], 0x33
push str.Name
lea ecx, [ebp - 0x104]
call fcn.10014b50
mov ecx, eax
call fcn.100127c0
push eax
lea ecx, [ebp - 0x11c]
call fcn.10007990
mov byte [ebp - 4], 0x34
xor ecx, ecx
mov byte [ebp - 0x400], cl
mov dl, byte [ebp - 0x400]
mov byte [ebp - 0x3ff], dl
lea eax, [ebp - 0x520]
push eax
lea ecx, [ebp - 0x11c]
call fcn.1001a960
mov ecx, dword [eax]
mov dword [ebp - 0x460], ecx
movzx edx, byte [ebp - 0x3ff]
push edx
push 0x100400bc
mov eax, dword [ebp - 0x460]
push eax
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x578]
push edx
mov ecx, 0x10069a3c
call fcn.10030e00
push 0x18
lea ecx, [ebp - 0x164]
call fcn.10002e30
push 0x100688f0
lea ecx, [ebp - 0x104]
call fcn.10014b50
push eax
lea ecx, [ebp - 0x164]
call fcn.100124f0
mov byte [ebp - 4], 0x35
lea eax, [ebp - 0x164]
push eax
lea ecx, [ebp - 0x11c]
push ecx
lea ecx, [ebp - 0xd4]
call fcn.10014ba0
mov ecx, eax
call fcn.10012630
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x164]
call fcn.100125d0
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x11c]
call fcn.100077f0
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x104]
call fcn.100125d0
jmp 0x1002f5b2
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x14c]
call fcn.100125d0
mov edx, dword [ebp - 0x3fc]
add edx, 0x28
mov dword [ebp - 0x464], edx
lea eax, [ebp - 0xd4]
push eax
push 0x100688e8
mov ecx, dword [ebp - 0x464]
call fcn.10014b50
mov ecx, eax
call fcn.10012630
mov ecx, dword [ebp - 0x3fc]
add ecx, 0x28
mov dword [ebp - 0x498], ecx
lea edx, [ebp - 0xa4]
push edx
push 0x10068900
mov ecx, dword [ebp - 0x498]
call fcn.10014b50
mov ecx, eax
call fcn.10012630
push 0xb0
lea ecx, [ebp - 0x3f8]
call fcn.10002e30
push 1
lea ecx, [ebp - 0x3f8]
call fcn.100305a0
mov byte [ebp - 4], 0x36
push 0xc
lea ecx, [ebp - 0x8c]
call fcn.10002e30
lea eax, [ebp - 0x8c]
push eax
lea ecx, [ebp - 0xd4]
call fcn.10014f50
mov byte [ebp - 4], 0x37
push 0x100688fc
lea ecx, [ebp - 0x3e8]
push ecx
lea ecx, [ebp - 0x580]
call fcn.100304d0
mov edx, dword [eax + 4]
push edx
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x8c]
push ecx
lea edx, [ebp - 0x684]
push edx
mov ecx, 0x10069a3c
call fcn.10030f50
lea eax, [ebp - 0x660]
push eax
lea ecx, [ebp - 0x3f8]
call fcn.10030500
mov dword [ebp - 0x46c], eax
mov ecx, dword [ebp - 0x46c]
mov dword [ebp - 0x470], ecx
mov byte [ebp - 4], 0x38
mov edx, dword [ebp - 0x470]
mov dword [ebp - 0x474], edx
lea eax, [ebp - 0x5b8]
push eax
mov ecx, dword [ebp - 0x474]
call fcn.100288b0
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [eax]
push edx
lea eax, [ebp - 0xec]
push eax
call fcn.10027aa0
add esp, 0xc
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x660]
call fcn.100077f0
xor ecx, ecx
mov byte [ebp - 0x3fe], cl
mov dl, byte [ebp - 0x3fe]
mov byte [ebp - 0x3fd], dl
lea eax, [ebp - 0x4f4]
push eax
lea ecx, [ebp - 0xec]
call fcn.10023bd0
mov ecx, dword [eax]
mov dword [ebp - 0x478], ecx
movzx edx, byte [ebp - 0x3fd]
push edx
push 0x1004026b
mov eax, dword [ebp - 0x478]
push eax
lea ecx, [ebp - 0xec]
push ecx
lea edx, [ebp - 0x5c0]
push edx
mov ecx, 0x10069a3c
call fcn.1002c340
lea eax, [ebp - 0xec]
push eax
push str.APPMOND_:_setting_whitelist_registry_value_:
push 0x10071708
call fcn.1001e660
add esp, 8
push eax
call fcn.10031070
add esp, 8
mov dword [ebp - 0x47c], eax
push 0x1001e9f0
mov ecx, dword [ebp - 0x47c]
call fcn.1001c180
push 4
lea ecx, [ebp - 0x2c]
call fcn.10002e30
push 0x10068908
lea ecx, [ebp - 0x598]
call fcn.1001e2c0
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x598]
push ecx
push 0x80000002
lea ecx, [ebp - 0x2c]
call fcn.1002e1e0
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x598]
call fcn.1001c1e0
push str.whitelist
lea ecx, [ebp - 0x5b0]
call fcn.1001e2c0
mov byte [ebp - 4], 0x3e
lea edx, [ebp - 0xec]
push edx
lea eax, [ebp - 0x5b0]
push eax
lea ecx, [ebp - 0x2c]
call fcn.1002e410
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x5b0]
call fcn.1001c1e0
lea ecx, [ebp - 0x2c]
call fcn.1002e230
push 0xb0
lea ecx, [ebp - 0x348]
call fcn.10002e30
push 1
lea ecx, [ebp - 0x348]
call fcn.100305a0
mov byte [ebp - 4], 0x3f
push 0xc
lea ecx, [ebp - 0x38]
call fcn.10002e30
lea ecx, [ebp - 0x38]
call fcn.10015ce0
mov byte [ebp - 4], 0x40
push 0x10068964
lea ecx, [ebp - 0x60]
call fcn.10014b50
mov ecx, eax
call fcn.10013890
movzx ecx, al
test ecx, ecx
jne 0x1002f9b7
push 0x100689ec
lea ecx, [ebp - 0x38]
call fcn.1002fd00
push 0x100689e0
lea ecx, [ebp - 0x60]
call fcn.10014b50
mov ecx, eax
call fcn.10013890
movzx edx, al
test edx, edx
jne 0x1002f9df
push 0x100689f8
lea ecx, [ebp - 0x38]
call fcn.1002fd00
push 0x100689f0
lea ecx, [ebp - 0x60]
call fcn.10014b50
mov ecx, eax
call fcn.10013890
movzx eax, al
test eax, eax
jne 0x1002fa07
push 0x10068a08
lea ecx, [ebp - 0x38]
call fcn.1002fd00
push 0x100689fc
lea ecx, [ebp - 0x60]
call fcn.10014b50
mov ecx, eax
call fcn.10013890
movzx ecx, al
test ecx, ecx
jne 0x1002fa2f
push 0x10068a18
lea ecx, [ebp - 0x38]
call fcn.1002fd00
push 0x10068a0c
lea ecx, [ebp - 0x60]
call fcn.10014b50
mov ecx, eax
call fcn.10013890
movzx edx, al
test edx, edx
jne 0x1002fa57
push 0x10068a20
lea ecx, [ebp - 0x38]
call fcn.1002fd00
lea eax, [ebp - 0xbc]
push eax
lea ecx, [ebp - 0x60]
push ecx
lea edx, [ebp - 0xa4]
push edx
mov ecx, dword [ebp - 0x3fc]
call fcn.10030110
lea eax, [ebp - 0x80]
push eax
mov ecx, dword [ebp - 0x3fc]
call fcn.1002ff90
push 0x10068a1c
lea ecx, [ebp - 0x338]
push ecx
lea ecx, [ebp - 0x5c8]
call fcn.100304d0
mov edx, dword [eax + 4]
push edx
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x38]
push ecx
lea edx, [ebp - 0x690]
push edx
mov ecx, 0x10069a3c
call fcn.10030f50
lea eax, [ebp - 0x678]
push eax
lea ecx, [ebp - 0x348]
call fcn.10030500
mov dword [ebp - 0x480], eax
mov ecx, dword [ebp - 0x480]
mov dword [ebp - 0x484], ecx
mov byte [ebp - 4], 0x41
mov edx, dword [ebp - 0x484]
mov dword [ebp - 0x488], edx
lea eax, [ebp - 0x5d0]
push eax
mov ecx, dword [ebp - 0x488]
call fcn.100288b0
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [eax]
push edx
lea eax, [ebp - 0x134]
push eax
call fcn.10027aa0
add esp, 0xc
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x678]
call fcn.100077f0
lea ecx, [ebp - 0x134]
push ecx
push str.APPMOND_:_setting_disabled_injection_controls_registry_value_:
push 0x10071708
call fcn.1001e660
add esp, 8
push eax
call fcn.10031070
add esp, 8
mov dword [ebp - 0x48c], eax
push 0x1001e9f0
mov ecx, dword [ebp - 0x48c]
call fcn.1001c180
push 4
lea ecx, [ebp - 0x28]
call fcn.10002e30
push str.SOFTWARESmart_XControlUpAgentAppLoadTime
lea ecx, [ebp - 0x538]
call fcn.1001e2c0
mov byte [ebp - 4], 0x44
lea edx, [ebp - 0x538]
push edx
push 0x80000002
lea ecx, [ebp - 0x28]
call fcn.1002e1e0
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x538]
call fcn.1001c1e0
push str.ictrls_disabled
lea ecx, [ebp - 0x550]
call fcn.1001e2c0
mov byte [ebp - 4], 0x47
lea eax, [ebp - 0x134]
push eax
lea ecx, [ebp - 0x550]
push ecx
lea ecx, [ebp - 0x28]
call fcn.1002e410
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x550]
call fcn.1001c1e0
lea ecx, [ebp - 0x28]
call fcn.1002e230
mov dword [ebp - 0x490], 0
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x28]
call fcn.1002e210
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x134]
call fcn.1001c1e0
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x38]
call fcn.10015bf0
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x348]
call fcn.1002fec0
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x2c]
call fcn.1002e210
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0xec]
call fcn.1001c1e0
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x8c]
call fcn.10015bf0
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x3f8]
call fcn.1002fec0
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0xd4]
call fcn.100125d0
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0xbc]
call fcn.100125d0
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x60]
call fcn.100125d0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xa4]
call fcn.100125d0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x80]
call fcn.100077f0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.1001bca0
mov eax, dword [ebp - 0x490]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.1003477d
mov esp, ebp
pop ebp
ret 4