Function at 0x1001d7e0
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100c9875
mov eax, dword fs:[0]
push eax
sub esp, 0x364
mov eax, dword [0x10101404]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
xor ebx, ebx
mov dword [ebp - 0x334], ebx
mov dword [ebp - 4], ebx
lea eax, [ebx + 0x10]
call fcn.100b0040
mov dword [ebp - 0x10], esp
mov esi, esp
push 0xdead0016
push 0xbfbeef
lea eax, [ebp - 0x30]
push eax
call fcn.100018e0
add esp, 0xc
mov byte [ebp - 4], 1
cmp dword [eax + 0x14], 0x10
jb 0x1001d84b
mov eax, dword [eax]
mov ecx, dword [eax]
mov dword [esi], ecx
mov edx, dword [eax + 4]
mov dword [esi + 4], edx
mov ecx, dword [eax + 8]
mov dword [esi + 8], ecx
mov edx, dword [eax + 0xc]
mov dword [esi + 0xc], edx
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x30]
call fcn.10002d60
mov eax, 4
call fcn.100b0040
mov dword [ebp - 0x10], esp
mov eax, esp
mov dword [ebp - 0x334], eax
cmp eax, ebx
je 0x1001d88b
mov dword [eax], 0xabab00bf
mov dword [ebp - 4], 0xffffffff
jmp 0x1001d8a3
mov eax, dword [ebp - 0x334]
cmp eax, ebx
je 0x1001d8b3
mov dword [eax], 0xcdcd00bf
mov esi, 6
mov dword [ebp - 0x328], esi
test byte [0x10106d78], 1
jne 0x1001d8ee
or dword [0x10106d78], 1
mov dword [ebp - 4], 3
call fcn.10030630
push 0x100ce5d0
call fcn.100af684
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x328]
push eax
mov edi, 0x10106d28
call fcn.10030d50
test al, al
je 0x1001da49
mov dword [ebp - 0x9c], 0xf
mov dword [ebp - 0xa0], ebx
mov byte [ebp - 0xb0], bl
mov dword [ebp - 4], 4
mov dword [ebp - 0x94], ebx
mov dword [ebp - 4], 5
mov dword [ebp - 0x90], ebx
mov dword [ebp - 4], esi
lea edi, [ebp - 0xb0]
call fcn.10031570
mov ecx, dword [eax + 0x1c]
cmp ecx, ebx
jne 0x1001d95c
push 0xd
push str.EnterFunction
mov ecx, eax
call fcn.1000bc70
jmp 0x1001d96a
push str.EnterFunction
push ecx
call fcn.1000d880
add esp, 8
push 0x1ff
push ebx
lea ecx, [ebp - 0x30]
push ecx
mov ecx, dword [ebp - 0x90]
call fcn.10001860
mov esi, eax
mov edi, 7
mov byte [ebp - 4], 7
test byte [0x10106d78], 1
jne 0x1001d9b4
or dword [0x10106d78], 1
mov byte [ebp - 4], 8
call fcn.10030630
push 0x100ce5d0
call fcn.100af684
add esp, 4
mov byte [ebp - 4], 7
mov ecx, 0x10106d2c
mov dword [ebp - 0x31c], ecx
mov edx, dword [0x10106d2c]
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 9
mov ecx, dword [0x10106d74]
cmp ecx, ebx
je 0x1001d9fd
cmp dword [esi + 0x14], 8
jb 0x1001d9e2
mov eax, dword [esi]
jmp 0x1001d9e4
mov eax, esi
mov edx, dword [ecx]
push 0xbf
push str.XPComHandler::SetFFSettings
push str.XPComHandler.cpp
push eax
push 6
mov eax, dword [edx + 8]
call eax
mov byte [ebp - 4], 7
mov edx, dword [0x10106d2c]
mov ecx, 0x10106d2c
mov eax, dword [edx + 8]
call eax
mov byte [ebp - 4], 6
cmp dword [ebp - 0x1c], 8
jb 0x1001da28
mov ecx, dword [ebp - 0x30]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x20], ebx
xor edx, edx
mov word [ebp - 0x30], dx
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0xb0]
push eax
call fcn.10031440
jmp 0x1001da4e
mov edi, 7
mov esi, dword [0x101068d4]
mov dword [ebp - 0x328], esi
mov edx, dword [esi]
mov ecx, esi
mov eax, dword [edx]
call eax
mov byte [ebp - 0x31e], al
mov dword [ebp - 0x240], edi
mov dword [ebp - 0x244], ebx
xor ecx, ecx
mov word [ebp - 0x254], cx
mov dword [ebp - 4], 0xa
mov dword [ebp - 0xb8], edi
mov dword [ebp - 0xbc], ebx
xor edx, edx
mov word [ebp - 0xcc], dx
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x25c], edi
mov dword [ebp - 0x260], ebx
xor eax, eax
mov word [ebp - 0x270], ax
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x1ec], edi
mov dword [ebp - 0x1f0], ebx
mov word [ebp - 0x200], cx
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x1b4], edi
mov dword [ebp - 0x1b8], ebx
mov word [ebp - 0x1c8], dx
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x5c], edi
mov dword [ebp - 0x60], ebx
mov word [ebp - 0x70], ax
push 9
push str.CarrierId
lea ecx, [ebp - 0x70]
call fcn.10003360
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x324], 2
mov edx, dword [esi]
lea eax, [ebp - 0x1c8]
push eax
lea ecx, [ebp - 0x70]
push ecx
lea eax, [ebp - 0x324]
push eax
mov ecx, esi
mov edx, dword [edx + 0x18]
call edx
mov byte [ebp - 4], 0xe
cmp dword [ebp - 0x5c], 8
jb 0x1001db3d
mov eax, dword [ebp - 0x70]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x5c], edi
mov dword [ebp - 0x60], ebx
xor ecx, ecx
mov word [ebp - 0x70], cx
mov dword [ebp - 0x17c], edi
mov dword [ebp - 0x180], ebx
xor edx, edx
mov word [ebp - 0x190], dx
mov byte [ebp - 4], 0x10
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x3c], ebx
xor eax, eax
mov word [ebp - 0x4c], ax
push 0xe
push str.CarrierVersion
lea ecx, [ebp - 0x4c]
call fcn.10003360
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x324], 2
mov edx, dword [esi]
lea eax, [ebp - 0x190]
push eax
lea ecx, [ebp - 0x4c]
push ecx
lea eax, [ebp - 0x324]
push eax
mov ecx, esi
mov edx, dword [edx + 0x18]
call edx
mov byte [ebp - 4], 0x10
cmp dword [ebp - 0x38], 8
jb 0x1001dbbd
mov eax, dword [ebp - 0x4c]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x3c], ebx
xor ecx, ecx
mov word [ebp - 0x4c], cx
mov dword [ebp - 0x160], edi
mov dword [ebp - 0x164], ebx
xor edx, edx
mov word [ebp - 0x174], dx
mov byte [ebp - 4], 0x12
mov dword [ebp - 0x5c], edi
mov dword [ebp - 0x60], ebx
xor eax, eax
mov word [ebp - 0x70], ax
push 4
push str.SPID
lea ecx, [ebp - 0x70]
call fcn.10003360
mov byte [ebp - 4], 0x13
mov edx, dword [esi]
lea eax, [ebp - 0x174]
push eax
lea ecx, [ebp - 0x70]
push ecx
mov ecx, esi
mov edx, dword [edx + 8]
call edx
mov byte [ebp - 4], 0x12
cmp dword [ebp - 0x5c], 8
jb 0x1001dc2c
mov eax, dword [ebp - 0x70]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x5c], edi
mov dword [ebp - 0x60], ebx
xor ecx, ecx
mov word [ebp - 0x70], cx
mov dword [ebp - 0x144], edi
mov dword [ebp - 0x148], ebx
xor edx, edx
mov word [ebp - 0x158], dx
mov byte [ebp - 4], 0x14
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x3c], ebx
xor eax, eax
mov word [ebp - 0x4c], ax
push 0xd
push str.SPInstallDate
lea ecx, [ebp - 0x4c]
call fcn.10003360
mov byte [ebp - 4], 0x15
mov edx, dword [esi]
lea eax, [ebp - 0x158]
push eax
lea ecx, [ebp - 0x4c]
push ecx
mov ecx, esi
mov edx, dword [edx + 8]
call edx
mov byte [ebp - 4], 0x14
cmp dword [ebp - 0x38], 8
jb 0x1001dc9b
mov eax, dword [ebp - 0x4c]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x3c], ebx
xor ecx, ecx
mov word [ebp - 0x4c], cx
mov dword [ebp - 0x278], edi
mov dword [ebp - 0x27c], ebx
xor edx, edx
mov word [ebp - 0x28c], dx
mov byte [ebp - 4], 0x16
mov eax, dword [esi]
lea ecx, [ebp - 0x28c]
push ecx
lea edx, [ebp - 0x1c8]
push edx
mov ecx, esi
mov eax, dword [eax + 8]
call eax
mov dword [ebp - 0xf0], edi
mov dword [ebp - 0xf4], ebx
xor ecx, ecx
mov word [ebp - 0x104], cx
mov byte [ebp - 4], 0x17
mov edx, dword [esi]
lea eax, [ebp - 0x104]
push eax
lea ecx, [ebp - 0x190]
push ecx
mov ecx, esi
mov edx, dword [edx + 8]
call edx
mov dword [ebp - 0x294], edi
mov dword [ebp - 0x298], ebx
xor eax, eax
mov word [ebp - 0x2a8], ax
mov byte [ebp - 4], 0x18
mov dword [ebp - 0x324], 1
mov dword [ebp - 0x31c], 2
sub esp, 0x1c
mov dword [ebp - 0x338], esp
mov ecx, esp
mov dword [ecx + 0x14], edi
mov dword [ecx + 0x10], ebx
xor edx, edx
mov word [ecx], dx
push ebx
push 0x100cfcd0
call fcn.10003360
mov byte [ebp - 4], 0x19
mov eax, dword [esi]
lea ecx, [ebp - 0x2a8]
push ecx
lea edx, [ebp - 0x324]
push edx
lea ecx, [ebp - 0x31c]
push ecx
mov byte [ebp - 4], 0x18
mov ecx, esi
mov edx, dword [eax + 0x14]
call edx
mov dword [ebp - 0x128], edi
mov dword [ebp - 0x12c], ebx
xor eax, eax
mov word [ebp - 0x13c], ax
mov byte [ebp - 4], 0x1a
mov dword [ebp - 0x5c], edi
mov dword [ebp - 0x60], ebx
xor ecx, ecx
mov word [ebp - 0x70], cx
push 0x14
push str.maxProtectionCountHP
lea ecx, [ebp - 0x70]
call fcn.10003360
mov byte [ebp - 4], 0x1b
mov edx, dword [esi]
lea eax, [ebp - 0x13c]
push eax
lea ecx, [ebp - 0x70]
push ecx
mov ecx, esi
mov edx, dword [edx + 0x10]
call edx
mov byte [ebp - 4], 0x1a
cmp dword [ebp - 0x5c], 8
jb 0x1001ddde
mov eax, dword [ebp - 0x70]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x5c], edi
mov dword [ebp - 0x60], ebx
xor ecx, ecx
mov word [ebp - 0x70], cx
mov dword [ebp - 0x10c], edi
mov dword [ebp - 0x110], ebx
xor edx, edx
mov word [ebp - 0x120], dx
mov byte [ebp - 4], 0x1c
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x3c], ebx
xor eax, eax
mov word [ebp - 0x4c], ax
push 0x1b
push str.aggressiveTakeoverWindowSec
lea ecx, [ebp - 0x4c]
call fcn.10003360
mov byte [ebp - 4], 0x1d
mov edx, dword [esi]
lea eax, [ebp - 0x120]
push eax
lea ecx, [ebp - 0x4c]
push ecx
mov ecx, esi
mov edx, dword [edx + 0x10]
call edx
mov byte [ebp - 4], 0x1c
cmp dword [ebp - 0x38], 8
jb 0x1001de4d
mov eax, dword [ebp - 0x4c]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x3c], ebx
xor ecx, ecx
mov word [ebp - 0x4c], cx
mov dword [ebp - 0x208], edi
mov dword [ebp - 0x20c], ebx
xor edx, edx
mov word [ebp - 0x21c], dx
mov byte [ebp - 4], 0x1e
mov dword [ebp - 0x5c], edi
mov dword [ebp - 0x60], ebx
xor eax, eax
mov word [ebp - 0x70], ax
push 0xc
push str.gaTrackingId
lea ecx, [ebp - 0x70]
call fcn.10003360
mov byte [ebp - 4], 0x1f
mov edx, dword [esi]
lea eax, [ebp - 0x21c]
push eax
lea ecx, [ebp - 0x70]
push ecx
mov ecx, esi
mov edx, dword [edx + 0x10]
call edx
mov byte [ebp - 4], 0x1e
cmp dword [ebp - 0x5c], 8
jb 0x1001debc
mov eax, dword [ebp - 0x70]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x5c], edi
mov dword [ebp - 0x60], ebx
xor ecx, ecx
mov word [ebp - 0x70], cx
mov al, byte [ebp - 0x31e]
mov byte [ebp - 0x31d], al
cmp al, bl
je 0x1001df0a
mov dword [ebp - 0x31c], 1
mov dword [ebp - 0x324], 2
mov edx, dword [esi]
lea eax, [ebp - 0x31d]
push eax
lea ecx, [ebp - 0x31c]
push ecx
lea eax, [ebp - 0x324]
push eax
mov ecx, esi
mov edx, dword [edx + 0x24]
call edx
mov dword [ebp - 0xd4], edi
mov dword [ebp - 0xd8], ebx
xor eax, eax
mov word [ebp - 0xe8], ax
mov byte [ebp - 4], 0x20
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x3c], ebx
xor ecx, ecx
mov word [ebp - 0x4c], cx
push 0xb
push str.Environment
lea ecx, [ebp - 0x4c]
call fcn.10003360
mov byte [ebp - 4], 0x21
mov edx, dword [esi]
lea eax, [ebp - 0xe8]
push eax
lea ecx, [ebp - 0x4c]
push ecx
mov ecx, esi
mov edx, dword [edx + 8]
call edx
mov byte [ebp - 4], 0x20
cmp dword [ebp - 0x38], 8
jb 0x1001df6d
mov eax, dword [ebp - 0x4c]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov edi, 7
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x3c], ebx
xor ecx, ecx
mov word [ebp - 0x4c], cx
mov dword [ebp - 0x1d0], edi
mov dword [ebp - 0x1d4], ebx
xor edx, edx
mov word [ebp - 0x1e4], dx
mov byte [ebp - 4], 0x22
mov dword [ebp - 0x31c], 6
mov esi, dword [ebp - 0x328]
mov eax, dword [esi]
lea ecx, [ebp - 0x370]
push ecx
lea edx, [ebp - 0x1e4]
push edx
lea ecx, [ebp - 0x31c]
push ecx
mov ecx, esi
mov edx, dword [eax + 4]
call edx
mov dword [ebp - 0x224], edi
mov dword [ebp - 0x228], ebx
xor eax, eax
mov word [ebp - 0x238], ax
mov byte [ebp - 4], 0x23
mov dword [ebp - 0x31c], 3
mov edx, dword [esi]
lea eax, [ebp - 0x33c]
push eax
lea ecx, [ebp - 0x238]
push ecx
lea eax, [ebp - 0x31c]
push eax
mov ecx, esi
mov edx, dword [edx + 4]
call edx
lea eax, [ebp - 0x33c]
push eax
lea ecx, [ebp - 0x2fc]
push ecx
call fcn.10044510
mov byte [ebp - 4], 0x24
lea esi, [ebp - 0x2e0]
call fcn.10041880
mov byte [ebp - 4], 0x25
lea edx, [ebp - 0x254]
push edx
mov ecx, esi
call fcn.1003d890
add esp, 0xc
lea ecx, [ebp - 0xcc]
call fcn.10055030
test al, al
jne 0x1001e0f3
mov dword [ebp - 0x5c], edi
mov dword [ebp - 0x60], ebx
xor eax, eax
mov word [ebp - 0x70], ax
push 0xb
push 0x100d20cc
lea ecx, [ebp - 0x70]
call fcn.10003360
mov byte [ebp - 4], 0x26
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x3c], ebx
xor ecx, ecx
mov word [ebp - 0x4c], cx
push 0x2c
push str.SOFTWAREMicrosoftWindows_NTCurrentVersion
lea ecx, [ebp - 0x4c]
call fcn.10003360
mov byte [ebp - 4], 0x27
lea edx, [ebp - 0xcc]
push edx
push reloc.OLEAUT32.dll_SysReAllocString
lea edx, [ebp - 0x70]
lea ecx, [ebp - 0x4c]
call fcn.10032570
add esp, 8
mov byte [ebp - 4], 0x26
mov esi, 8
cmp dword [ebp - 0x38], esi
jb 0x1001e0c3
mov eax, dword [ebp - 0x4c]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x3c], ebx
xor ecx, ecx
mov word [ebp - 0x4c], cx
mov byte [ebp - 4], 0x25
cmp dword [ebp - 0x5c], esi
jb 0x1001e0e5
mov edx, dword [ebp - 0x70]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x5c], edi
mov dword [ebp - 0x60], ebx
xor eax, eax
mov word [ebp - 0x70], ax
jmp 0x1001e0f8
mov esi, 8
mov dword [ebp - 0x5c], edi
mov dword [ebp - 0x60], ebx
xor ecx, ecx
mov word [ebp - 0x70], cx
push 0xe
push str.CurrentVersion
lea ecx, [ebp - 0x70]
call fcn.10003360
mov byte [ebp - 4], 0x28
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x3c], ebx
xor edx, edx
mov word [ebp - 0x4c], dx
push 0x2c
push str.SOFTWAREMicrosoftWindows_NTCurrentVersion
lea ecx, [ebp - 0x4c]
call fcn.10003360
mov byte [ebp - 4], 0x29
lea eax, [ebp - 0x270]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
lea edx, [ebp - 0x70]
lea ecx, [ebp - 0x4c]
call fcn.10032570
add esp, 8
mov byte [ebp - 4], 0x28
cmp dword [ebp - 0x38], esi
jb 0x1001e166
mov ecx, dword [ebp - 0x4c]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x3c], ebx
xor edx, edx
mov word [ebp - 0x4c], dx
mov byte [ebp - 4], 0x25
cmp dword [ebp - 0x5c], esi
jb 0x1001e188
mov eax, dword [ebp - 0x70]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x5c], edi
mov dword [ebp - 0x60], ebx
xor ecx, ecx
mov word [ebp - 0x70], cx
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x20], ebx
xor edx, edx
mov word [ebp - 0x30], dx
push 0xe
push str.CurrentVersion
lea ecx, [ebp - 0x30]
call fcn.10003360
mov byte [ebp - 4], 0x2a
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x3c], ebx
xor eax, eax
mov word [ebp - 0x4c], ax
push 0x20
push str.SoftwareMozillaMozilla_Firefox
lea ecx, [ebp - 0x4c]
call fcn.10003360
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x200]
push ecx
push reloc.OLEAUT32.dll_SysReAllocString
lea edx, [ebp - 0x30]
lea ecx, [ebp - 0x4c]
call fcn.10032570
add esp, 8
mov byte [ebp - 4], 0x2a
cmp dword [ebp - 0x38], esi
jb 0x1001e202
mov edx, dword [ebp - 0x4c]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x3c], ebx
xor eax, eax
mov word [ebp - 0x4c], ax
mov byte [ebp - 4], 0x25
cmp dword [ebp - 0x1c], esi
jb 0x1001e224
mov ecx, dword [ebp - 0x30]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x20], ebx
xor edx, edx
mov word [ebp - 0x30], dx
push 0x10
call dword [sym.imp.MSVCR100.dll_void____cdecl_operator_new_unsigned_int_]
add esp, 4
mov dword [ebp - 0x338], eax
mov byte [ebp - 4], 0x2c
cmp eax, ebx
je 0x1001e253
mov dword [eax], ebx
mov dword [eax + 4], ebx
mov dword [eax + 8], ebx
jmp 0x1001e255
xor eax, eax
mov byte [ebp - 4], 0x25
mov dword [ebp - 0x330], eax
mov dword [ebp - 0x32c], ebx
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x330]
push ecx
lea ecx, [ebp - 0x32c]
mov edi, eax
call fcn.1000e4b0
mov byte [ebp - 4], 0x2e
mov dword [ebp - 0x35c], ebx
mov dword [ebp - 0x358], ebx
mov dword [ebp - 0x354], ebx
mov byte [ebp - 4], 0x2f
mov dword [ebp - 0x34c], ebx
mov dword [ebp - 0x348], ebx
mov dword [ebp - 0x344], ebx
mov byte [ebp - 4], 0x30
mov edx, 1
mov word [ebp - 0x36c], dx
mov dword [ebp - 0x368], ebx
mov dword [ebp - 0x364], ebx
mov dword [ebp - 0x360], ebx
mov byte [ebp - 4], 0x31
lea eax, [ebp - 0x330]
push eax
call fcn.1004aff0
add esp, 8
cmp dword [ebp - 0x330], ebx
jne 0x1001e2fe
push 0x28d
push str.D:_builds27Search_ProtectorSP_1.5.0_CISources3rdPartyBoost_boost_1_53_0_boost_smart_ptr_shared_ptr.hpp
push str.px___0
call dword [sym.imp.MSVCR100.dll__wassert]
add esp, 0xc
mov ecx, dword [ebp - 0x330]
mov edi, dword [ecx]
mov esi, 7
mov dword [ebp - 0x198], esi
mov dword [ebp - 0x19c], ebx
xor edx, edx
mov word [ebp - 0x1ac], dx
mov byte [ebp - 4], 0x32
cmp dword [ebp - 0x330], ebx
jne 0x1001e344
push 0x28d
push str.D:_builds27Search_ProtectorSP_1.5.0_CISources3rdPartyBoost_boost_1_53_0_boost_smart_ptr_shared_ptr.hpp
push str.px___0
call dword [sym.imp.MSVCR100.dll__wassert]
add esp, 0xc
mov eax, dword [ebp - 0x330]
cmp edi, dword [eax + 4]
je 0x1001e411
cmp dword [edi], ebx
jne 0x1001e36f
push 0x28d
push str.D:_builds27Search_ProtectorSP_1.5.0_CISources3rdPartyBoost_boost_1_53_0_boost_smart_ptr_shared_ptr.hpp
push str.px___0
call dword [sym.imp.MSVCR100.dll__wassert]
add esp, 0xc
mov ecx, dword [edi]
lea edx, [ebp - 0x30]
push edx
call fcn.100123e0
mov esi, eax
mov byte [ebp - 4], 0x33
cmp dword [edi], ebx
jne 0x1001e39c
push 0x28d
push str.D:_builds27Search_ProtectorSP_1.5.0_CISources3rdPartyBoost_boost_1_53_0_boost_smart_ptr_shared_ptr.hpp
push str.px___0
call dword [sym.imp.MSVCR100.dll__wassert]
add esp, 0xc
mov eax, dword [edi]
mov eax, dword [eax + 0x40]
mov dword [ebp - 0x31c], eax
mov ebx, esi
lea esi, [ebp - 0x36c]
call fcn.10029e90
mov esi, eax
mov ecx, esi
call fcn.100299c0
mov ecx, 3
mov word [esi], cx
mov dword [esi + 4], 2
mov eax, dword [ebp - 0x31c]
cdq
mov dword [esi + 8], eax
mov dword [esi + 0xc], edx
mov byte [ebp - 4], 0x32
cmp dword [ebp - 0x1c], 8
jb 0x1001e3f0
mov edx, dword [ebp - 0x30]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x1c], 7
mov dword [ebp - 0x20], 0
xor eax, eax
mov word [ebp - 0x30], ax
add edi, 8
lea esi, [eax + 7]
xor ebx, ebx
jmp 0x1001e324
push ebx
push ebx
lea ecx, [ebp - 0x1ac]
push ecx
lea ecx, [ebp - 0x36c]
call fcn.10029ff0
mov edi, dword [ebp - 0x328]
mov edx, dword [edi]
mov ecx, edi
mov eax, dword [edx + 0x34]
call eax
mov dword [ebp - 0x31c], eax
lea ecx, [ebp - 0x31c]
push ecx
lea edx, [ebp - 0x2c4]
push edx
call fcn.10044510
add esp, 8
mov byte [ebp - 4], 0x34
mov eax, dword [edi]
mov ecx, edi
mov edx, dword [eax + 0x30]
call edx
mov dword [ebp - 0x31c], eax
lea eax, [ebp - 0x31c]
push eax
lea ecx, [ebp - 0x318]
push ecx
call fcn.10044510
add esp, 8
mov byte [ebp - 4], 0x35
mov dword [ebp - 0x78], esi
mov dword [ebp - 0x7c], ebx
xor edx, edx
mov word [ebp - 0x8c], dx
push 0x307
push str._dialogDelaySec_:_DIALOG_DELAY_SEC____preventDialogDisplayTimeSec_:_PREVENT_DIALOG_DISPLAY_TIME____homepage__:__enabled__:_HOMEPAGE_TAKEOVER_ENABLED___maxProtectionCount_:_MAX_PROTECTION_COUNT__aggressiveTakeoverWindowSec_:_AGGRESSIVE_TAKEOVER_WINDOW_SEC__gaTrackingId_:__GA_TRACKING_ID____usageUrl_:__USAGE_URL___aliveUsageUrl_:__ALIVE_USAGE_URL___aliveUsageIntervalInSec_:_ALIVE_USAGE_INTERVAL_IN_MIN___profiles__:_USER_PROFILES____usageData__:__SP_ID__:__SP_ID_ALIAS___SP_version__:__SP_VERSION_ALIAS___owner_type__:__ctid___owner_ID__:_____owner_version__:_____owner_userid__:_____OS__:__OS_TYPE___OS_version__:__OS_VERSION_ALIAS___browser__:__Firefox___browser_version__:__FIREFOX_VERSION___install_DATE__:__INSTALL_DATE_ALIAS____environment__:__ENVIRONMENT_ALIAS_
lea ecx, [ebp - 0x8c]
call fcn.10003360
mov byte [ebp - 4], 0x36
cmp byte [ebp - 0x31d], bl
mov edx, str.TRUE
jne 0x1001e4b7
mov edx, str.FALSE
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x3c], ebx
xor eax, eax
mov word [ebp - 0x4c], ax
mov eax, edx
lea edi, [eax + 2]
jmp 0x1001e4d0
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x1001e4d0
sub eax, edi
sar eax, 1
push eax
push edx
lea ecx, [ebp - 0x4c]
call fcn.10003360
mov byte [ebp - 4], 0x37
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x20], ebx
xor ecx, ecx
mov word [ebp - 0x30], cx
push 0x19
push str.HOMEPAGE_TAKEOVER_ENABLED
lea ecx, [ebp - 0x30]
call fcn.10003360
mov byte [ebp - 4], 0x38
lea edx, [ebp - 0x70]
push edx
lea ecx, [ebp - 0x4c]
call fcn.10043bf0
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x8c]
push ecx
lea ecx, [ebp - 0x30]
call fcn.10044630
add esp, 8
mov byte [ebp - 4], 0x38
mov edi, 8
cmp dword [ebp - 0x5c], edi
jb 0x1001e549
mov edx, dword [ebp - 0x70]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x5c], esi
mov dword [ebp - 0x60], ebx
xor eax, eax
mov word [ebp - 0x70], ax
mov byte [ebp - 4], 0x37
cmp dword [ebp - 0x1c], edi
jb 0x1001e56b
mov ecx, dword [ebp - 0x30]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x20], ebx
xor edx, edx
mov word [ebp - 0x30], dx
mov byte [ebp - 4], 0x36
cmp dword [ebp - 0x38], edi
jb 0x1001e58d
mov eax, dword [ebp - 0x4c]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x3c], ebx
xor ecx, ecx
mov word [ebp - 0x4c], cx
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x20], ebx
xor edx, edx
mov word [ebp - 0x30], dx
push 0x14
push str.MAX_PROTECTION_COUNT
lea ecx, [ebp - 0x30]
call fcn.10003360
mov byte [ebp - 4], 0x3a
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0x13c]
lea ecx, [ebp - 0x30]
call fcn.10044630
add esp, 4
mov byte [ebp - 4], 0x36
cmp dword [ebp - 0x1c], edi
jb 0x1001e5e6
mov ecx, dword [ebp - 0x30]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x20], ebx
xor edx, edx
mov word [ebp - 0x30], dx
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x3c], ebx
xor eax, eax
mov word [ebp - 0x4c], ax
push 0x1e
push str.AGGRESSIVE_TAKEOVER_WINDOW_SEC
lea ecx, [ebp - 0x4c]
call fcn.10003360
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x8c]
push ecx
lea eax, [ebp - 0x120]
lea ecx, [ebp - 0x4c]
call fcn.10044630
add esp, 4
mov byte [ebp - 4], 0x36
cmp dword [ebp - 0x38], edi
jb 0x1001e63f
mov edx, dword [ebp - 0x4c]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x3c], ebx
xor eax, eax
mov word [ebp - 0x4c], ax
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x20], ebx
xor ecx, ecx
mov word [ebp - 0x30], cx
push 0xf
push str.ALIVE_USAGE_URL
lea ecx, [ebp - 0x30]
call fcn.10003360
mov byte [ebp - 4], 0x3c
lea edx, [ebp - 0x8c]
push edx
lea eax, [ebp - 0x238]
lea ecx, [ebp - 0x30]
call fcn.10044630
add esp, 4
mov byte [ebp - 4], 0x36
cmp dword [ebp - 0x1c], edi
jb 0x1001e698
mov eax, dword [ebp - 0x30]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x20], ebx
xor ecx, ecx
mov word [ebp - 0x30], cx
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x3c], ebx
xor edx, edx
mov word [ebp - 0x4c], dx
push 9
push str.USAGE_URL
lea ecx, [ebp - 0x4c]
call fcn.10003360
mov byte [ebp - 4], 0x3d
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0x1e4]
lea ecx, [ebp - 0x4c]
call fcn.10044630
add esp, 4
mov byte [ebp - 4], 0x36
cmp dword [ebp - 0x38], edi
jb 0x1001e6f1
mov ecx, dword [ebp - 0x4c]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x3c], ebx
xor edx, edx
mov word [ebp - 0x4c], dx
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x20], ebx
xor eax, eax
mov word [ebp - 0x30], ax
push 0x1b
push str.ALIVE_USAGE_INTERVAL_IN_MIN
lea ecx, [ebp - 0x30]
call fcn.10003360
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x8c]
push ecx
lea eax, [ebp - 0x2fc]
lea ecx, [ebp - 0x30]
call fcn.10044630
add esp, 4
mov byte [ebp - 4], 0x36
cmp dword [ebp - 0x1c], edi
jb 0x1001e74a
mov edx, dword [ebp - 0x30]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x20], ebx
xor eax, eax
mov word [ebp - 0x30], ax
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x3c], ebx
xor ecx, ecx
mov word [ebp - 0x4c], cx
push 0xb
push str.SP_ID_ALIAS
lea ecx, [ebp - 0x4c]
call fcn.10003360
mov byte [ebp - 4], 0x3f
lea edx, [ebp - 0x8c]
push edx
lea eax, [ebp - 0x174]
lea ecx, [ebp - 0x4c]
call fcn.10044630
add esp, 4
mov byte [ebp - 4], 0x36
cmp dword [ebp - 0x38], edi
jb 0x1001e7a3
mov eax, dword [ebp - 0x4c]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x3c], ebx
xor ecx, ecx
mov word [ebp - 0x4c], cx
push str.SP_VERSION_ALIAS
lea ecx, [ebp - 0x30]
call fcn.10003460
mov byte [ebp - 4], 0x40
lea edx, [ebp - 0x8c]
push edx
lea eax, [ebp - 0x254]
lea ecx, [ebp - 0x30]
call fcn.10044630
add esp, 4
mov byte [ebp - 4], 0x36
cmp dword [ebp - 0x1c], edi
jb 0x1001e7ee
mov eax, dword [ebp - 0x30]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x20], ebx
xor ecx, ecx
mov word [ebp - 0x30], cx
push str.CARRIER_VERSION_ALIAS
lea ecx, [ebp - 0x30]
call fcn.10003460
mov byte [ebp - 4], 0x41
lea edx, [ebp - 0x8c]
push edx
lea eax, [ebp - 0x104]
lea ecx, [ebp - 0x30]
call fcn.10044630
add esp, 4
mov byte [ebp - 4], 0x36
cmp dword [ebp - 0x1c], edi
jb 0x1001e839
mov eax, dword [ebp - 0x30]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x20], ebx
xor ecx, ecx
mov word [ebp - 0x30], cx
push str.OS_TYPE
lea ecx, [ebp - 0x30]
call fcn.10003460
mov byte [ebp - 4], 0x42
lea edx, [ebp - 0x8c]
push edx
lea eax, [ebp - 0xcc]
lea ecx, [ebp - 0x30]
call fcn.10044630
add esp, 4
mov byte [ebp - 4], 0x36
cmp dword [ebp - 0x1c], edi
jb 0x1001e884
mov eax, dword [ebp - 0x30]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x20], ebx
xor ecx, ecx
mov word [ebp - 0x30], cx
push str.OS_VERSION_ALIAS
lea ecx, [ebp - 0x30]
call fcn.10003460
mov byte [ebp - 4], 0x43
lea edx, [ebp - 0x8c]
push edx
lea eax, [ebp - 0x270]
lea ecx, [ebp - 0x30]
call fcn.10044630
add esp, 4
mov byte [ebp - 4], 0x36
cmp dword [ebp - 0x1c], edi
jb 0x1001e8cf
mov eax, dword [ebp - 0x30]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x20], ebx
xor ecx, ecx
mov word [ebp - 0x30], cx
push str.FIREFOX_VERSION
lea ecx, [ebp - 0x30]
call fcn.10003460
mov byte [ebp - 4], 0x44
lea edx, [ebp - 0x8c]
push edx
lea eax, [ebp - 0x200]
lea ecx, [ebp - 0x30]
call fcn.10044630
add esp, 4
mov byte [ebp - 4], 0x36
cmp dword [ebp - 0x1c], edi
jb 0x1001e91a
mov eax, dword [ebp - 0x30]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x20], ebx
xor ecx, ecx
mov word [ebp - 0x30], cx
push str.INSTALL_DATE_ALIAS
lea ecx, [ebp - 0x30]
call fcn.10003460
mov byte [ebp - 4], 0x45
lea edx, [ebp - 0x8c]
push edx
lea eax, [ebp - 0x158]
lea ecx, [ebp - 0x30]
call fcn.10044630
add esp, 4
mov byte [ebp - 4], 0x36
cmp dword [ebp - 0x1c], edi
jb 0x1001e965
mov eax, dword [ebp - 0x30]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x20], ebx
xor ecx, ecx
mov word [ebp - 0x30], cx
push str.GA_TRACKING_ID
lea ecx, [ebp - 0x30]
call fcn.10003460
mov byte [ebp - 4], 0x46
lea edx, [ebp - 0x8c]
push edx
lea eax, [ebp - 0x21c]
lea ecx, [ebp - 0x30]
call fcn.10044630
add esp, 4
mov byte [ebp - 4], 0x36
cmp dword [ebp - 0x1c], edi
jb 0x1001e9b0
mov eax, dword [ebp - 0x30]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x20], ebx
xor ecx, ecx
mov word [ebp - 0x30], cx
push str.ENVIRONMENT_ALIAS
lea ecx, [ebp - 0x30]
call fcn.10003460
mov byte [ebp - 4], 0x47
lea edx, [ebp - 0x8c]
push edx
lea eax, [ebp - 0xe8]
lea ecx, [ebp - 0x30]
call fcn.10044630
add esp, 4
mov byte [ebp - 4], 0x36
cmp dword [ebp - 0x1c], edi
jb 0x1001e9fb
mov eax, dword [ebp - 0x30]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x20], ebx
xor ecx, ecx
mov word [ebp - 0x30], cx
push str.USER_PROFILES
lea ecx, [ebp - 0x30]
call fcn.10003460
mov byte [ebp - 4], 0x48
lea edx, [ebp - 0x8c]
push edx
lea eax, [ebp - 0x1ac]
lea ecx, [ebp - 0x30]
call fcn.10044630
add esp, 4
mov byte [ebp - 4], 0x36
cmp dword [ebp - 0x1c], edi
jb 0x1001ea46
mov eax, dword [ebp - 0x30]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x20], ebx
xor ecx, ecx
mov word [ebp - 0x30], cx
push str.DIALOG_DELAY_SEC
lea ecx, [ebp - 0x30]
call fcn.10003460
mov byte [ebp - 4], 0x49
lea edx, [ebp - 0x8c]
push edx
lea eax, [ebp - 0x318]
lea ecx, [ebp - 0x30]
call fcn.10044630
add esp, 4
mov byte [ebp - 4], 0x36
cmp dword [ebp - 0x1c], edi
jb 0x1001ea91
mov eax, dword [ebp - 0x30]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x20], ebx
xor ecx, ecx
mov word [ebp - 0x30], cx
push str.PREVENT_DIALOG_DISPLAY_TIME
lea ecx, [ebp - 0x30]
call fcn.10003460
mov byte [ebp - 4], 0x4a
lea edx, [ebp - 0x8c]
push edx
lea eax, [ebp - 0x2c4]
lea ecx, [ebp - 0x30]
call fcn.10044630
add esp, 4
mov byte [ebp - 4], 0x36
cmp dword [ebp - 0x1c], edi
jb 0x1001eadc
mov eax, dword [ebp - 0x30]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x20], ebx
xor ecx, ecx
mov word [ebp - 0x30], cx
push 0x100cfcd0
lea ecx, [ebp - 0x4c]
call fcn.10003460
mov byte [ebp - 4], 0x4b
push 0x100d1a6c
lea ecx, [ebp - 0x30]
call fcn.10003460
mov byte [ebp - 4], 0x4c
lea edx, [ebp - 0x8c]
push edx
lea eax, [ebp - 0x4c]
lea ecx, [ebp - 0x30]
call fcn.10044630
add esp, 4
mov byte [ebp - 4], 0x4b
cmp dword [ebp - 0x1c], edi
jb 0x1001eb35
mov eax, dword [ebp - 0x30]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x20], ebx
xor ecx, ecx
mov word [ebp - 0x30], cx
mov byte [ebp - 4], 0x36
cmp dword [ebp - 0x38], edi
jb 0x1001eb57
mov edx, dword [ebp - 0x4c]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x3c], ebx
xor eax, eax
mov word [ebp - 0x4c], ax
push 0x100cfcd0
lea ecx, [ebp - 0x4c]
call fcn.10003460
mov byte [ebp - 4], 0x4d
push 0x100d1a70
lea ecx, [ebp - 0x30]
call fcn.10003460
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x8c]
push ecx
lea eax, [ebp - 0x4c]
lea ecx, [ebp - 0x30]
call fcn.10044630
add esp, 4
mov byte [ebp - 4], 0x4d
cmp dword [ebp - 0x1c], edi
jb 0x1001ebb0
mov edx, dword [ebp - 0x30]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x20], ebx
xor eax, eax
mov word [ebp - 0x30], ax
mov byte [ebp - 4], 0x36
cmp dword [ebp - 0x38], edi
jb 0x1001ebd2
mov ecx, dword [ebp - 0x4c]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x3c], ebx
xor edx, edx
mov word [ebp - 0x4c], dx
push 0x100cfcd0
lea ecx, [ebp - 0x4c]
call fcn.10003460
mov byte [ebp - 4], 0x4f
push 0x100d1a74
lea ecx, [ebp - 0x30]
call fcn.10003460
mov byte [ebp - 4], 0x50
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0x4c]
lea ecx, [ebp - 0x30]
call fcn.10044630
add esp, 4
mov byte [ebp - 4], 0x4f
cmp dword [ebp - 0x1c], edi
jb 0x1001ec2b
mov ecx, dword [ebp - 0x30]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x20], ebx
xor edx, edx
mov word [ebp - 0x30], dx
mov byte [ebp - 4], 0x36
cmp dword [ebp - 0x38], edi
jb 0x1001ec4d
mov eax, dword [ebp - 0x4c]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x3c], ebx
xor ecx, ecx
mov word [ebp - 0x4c], cx
mov eax, dword [ebp - 0x334]
cmp eax, ebx
je 0x1001ec69
mov dword [eax], 0xcdcd0135
mov dword [ebp - 0x31c], 6
lea edx, [ebp - 0x31c]
push edx
call fcn.10030800
mov edi, eax
call fcn.10030d50
test al, al
je 0x1001ed5d
mov dword [ebp - 0x40], 0xf
mov dword [ebp - 0x44], ebx
mov byte [ebp - 0x54], bl
mov byte [ebp - 4], 0x51
mov dword [ebp - 0x38], ebx
mov byte [ebp - 4], 0x52
mov dword [ebp - 0x34], ebx
mov byte [ebp - 4], 0x53
lea edi, [ebp - 0x54]
call fcn.10031570
mov edx, str.Settings_ffSettings_
mov esi, eax
call fcn.10030f60
mov ecx, dword [eax + 0x1c]
cmp ecx, ebx
jne 0x1001ecdb
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x8c]
push ecx
mov ecx, eax
call fcn.10011090
jmp 0x1001eceb
lea edx, [ebp - 0x8c]
push edx
push ecx
call fcn.100289b0
add esp, 8
push 0x1ff
push ebx
lea eax, [ebp - 0x30]
push eax
mov ecx, dword [ebp - 0x34]
call fcn.10001860
mov ebx, eax
mov byte [ebp - 4], 0x54
push 0x135
push str.XPComHandler::SetFFSettings
push str.XPComHandler.cpp
push 6
call fcn.10030800
mov ecx, eax
call fcn.10030e00
mov byte [ebp - 4], 0x53
cmp dword [ebp - 0x1c], 8
jb 0x1001ed37
mov ecx, dword [ebp - 0x30]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x1c], 7
mov dword [ebp - 0x20], 0
xor edx, edx
mov word [ebp - 0x30], dx
mov byte [ebp - 4], 0x36
lea eax, [ebp - 0x54]
push eax
call fcn.10031440
xor ebx, ebx
lea esi, [ebx + 7]
push str.ffSettings
lea ecx, [ebp - 0x4c]
call fcn.10003460
mov byte [ebp - 4], 0x55
push str.SoftwareSearchProtect_ffprotect
lea ecx, [ebp - 0x30]
call fcn.10003460
mov byte [ebp - 4], 0x56
mov ecx, dword [ebp - 0x328]
mov edx, dword [ecx]
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x30]
push eax
push SysReAllocString
mov edx, dword [edx + 0x20]
call edx
mov byte [ebp - 4], 0x55
mov edi, 8
cmp dword [ebp - 0x1c], edi
jb 0x1001edbb
mov eax, dword [ebp - 0x30]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x20], ebx
xor ecx, ecx
mov word [ebp - 0x30], cx
mov byte [ebp - 4], 0x36
cmp dword [ebp - 0x38], edi
jb 0x1001eddd
mov edx, dword [ebp - 0x4c]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x3c], ebx
xor eax, eax
mov word [ebp - 0x4c], ax
mov eax, dword [ebp - 0x334]
cmp eax, ebx
je 0x1001edf9
mov dword [eax], 0xcdcd0138
mov dword [ebp - 0x31c], 6
lea ecx, [ebp - 0x31c]
push ecx
call fcn.10030800
mov edi, eax
call fcn.10030d50
test al, al
je 0x1001eee7
mov dword [ebp - 0x9c], 0xf
mov dword [ebp - 0xa0], ebx
mov byte [ebp - 0xb0], bl
mov byte [ebp - 4], 0x57
mov dword [ebp - 0x94], ebx
mov byte [ebp - 4], 0x58
mov dword [ebp - 0x90], ebx
mov byte [ebp - 4], 0x59
lea edi, [ebp - 0xb0]
call fcn.10031570
mov edx, str.ExitFunction_Ret:
mov esi, eax
call fcn.10030f60
mov edx, str.True
mov esi, eax
call fcn.10030f60
push 0x1ff
push ebx
lea edx, [ebp - 0x30]
push edx
mov ecx, dword [ebp - 0x90]
call fcn.10001860
mov ebx, eax
mov byte [ebp - 4], 0x5a
push 0x138
push str.XPComHandler::SetFFSettings
push str.XPComHandler.cpp
push 6
call fcn.10030800
mov ecx, eax
call fcn.10030e00
mov byte [ebp - 4], 0x59
cmp dword [ebp - 0x1c], 8
jb 0x1001eebe
mov eax, dword [ebp - 0x30]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x1c], 7
mov dword [ebp - 0x20], 0
xor ecx, ecx
mov word [ebp - 0x30], cx
mov byte [ebp - 4], 0x36
lea edx, [ebp - 0xb0]
push edx
call fcn.10031440
xor ebx, ebx
lea esi, [ebx + 7]
mov edi, 8
mov byte [ebp - 4], 0x35
cmp dword [ebp - 0x78], edi
jb 0x1001ef05
mov eax, dword [ebp - 0x8c]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x78], esi
mov dword [ebp - 0x7c], ebx
xor ecx, ecx
mov word [ebp - 0x8c], cx
mov byte [ebp - 4], 0x34
cmp dword [ebp - 0x304], edi
jb 0x1001ef30
mov edx, dword [ebp - 0x318]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x304], esi
mov dword [ebp - 0x308], ebx
xor eax, eax
mov word [ebp - 0x318], ax
mov byte [ebp - 4], 0x32
cmp dword [ebp - 0x2b0], edi
jb 0x1001ef61
mov ecx, dword [ebp - 0x2c4]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x2b0], esi
mov dword [ebp - 0x2b4], ebx
xor edx, edx
mov word [ebp - 0x2c4], dx
mov byte [ebp - 4], 0x31
cmp dword [ebp - 0x198], edi
jb 0x1001ef92
mov eax, dword [ebp - 0x1ac]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x198], esi
mov dword [ebp - 0x19c], ebx
xor ecx, ecx
mov word [ebp - 0x1ac], cx
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x36c]
call fcn.10029920
mov byte [ebp - 4], 0x25
lea edx, [ebp - 0x330]
push edx
call fcn.100098a0
mov byte [ebp - 4], 0x24
cmp dword [ebp - 0x2cc], edi
jb 0x1001efe2
mov eax, dword [ebp - 0x2e0]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x2cc], esi
mov dword [ebp - 0x2d0], ebx
xor ecx, ecx
mov word [ebp - 0x2e0], cx
mov byte [ebp - 4], 0x23
cmp dword [ebp - 0x2e8], edi
jb 0x1001f013
mov edx, dword [ebp - 0x2fc]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x2e8], esi
mov dword [ebp - 0x2ec], ebx
xor eax, eax
mov word [ebp - 0x2fc], ax
mov byte [ebp - 4], 0x22
cmp dword [ebp - 0x224], edi
jb 0x1001f044
mov ecx, dword [ebp - 0x238]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x224], esi
mov dword [ebp - 0x228], ebx
xor edx, edx
mov word [ebp - 0x238], dx
mov byte [ebp - 4], 0x20
cmp dword [ebp - 0x1d0], edi
jb 0x1001f075
mov eax, dword [ebp - 0x1e4]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x1d0], esi
mov dword [ebp - 0x1d4], ebx
xor ecx, ecx
mov word [ebp - 0x1e4], cx
mov byte [ebp - 4], 0x1e
cmp dword [ebp - 0xd4], edi
jb 0x1001f0a6
mov edx, dword [ebp - 0xe8]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0xd4], esi
mov dword [ebp - 0xd8], ebx
xor eax, eax
mov word [ebp - 0xe8], ax
mov byte [ebp - 4], 0x1c
cmp dword [ebp - 0x208], edi
jb 0x1001f0d7
mov ecx, dword [ebp - 0x21c]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x208], esi
mov dword [ebp - 0x20c], ebx
xor edx, edx
mov word [ebp - 0x21c], dx
mov byte [ebp - 4], 0x1a
cmp dword [ebp - 0x10c], edi
jb 0x1001f108
mov eax, dword [ebp - 0x120]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x10c], esi
mov dword [ebp - 0x110], ebx
xor ecx, ecx
mov word [ebp - 0x120], cx
mov byte [ebp - 4], 0x18
cmp dword [ebp - 0x128], edi
jb 0x1001f139
mov edx, dword [ebp - 0x13c]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x128], esi
mov dword [ebp - 0x12c], ebx
xor eax, eax
mov word [ebp - 0x13c], ax
mov byte [ebp - 4], 0x17
cmp dword [ebp - 0x294], edi
jb 0x1001f16a
mov ecx, dword [ebp - 0x2a8]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x294], esi
mov dword [ebp - 0x298], ebx
xor edx, edx
mov word [ebp - 0x2a8], dx
mov byte [ebp - 4], 0x16
cmp dword [ebp - 0xf0], edi
jb 0x1001f19b
mov eax, dword [ebp - 0x104]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0xf0], esi
mov dword [ebp - 0xf4], ebx
xor ecx, ecx
mov word [ebp - 0x104], cx
mov byte [ebp - 4], 0x14
cmp dword [ebp - 0x278], edi
jb 0x1001f1cc
mov edx, dword [ebp - 0x28c]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x278], esi
mov dword [ebp - 0x27c], ebx
xor eax, eax
mov word [ebp - 0x28c], ax
mov byte [ebp - 4], 0x12
cmp dword [ebp - 0x144], edi
jb 0x1001f1fd
mov ecx, dword [ebp - 0x158]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x144], esi
mov dword [ebp - 0x148], ebx
xor edx, edx
mov word [ebp - 0x158], dx
mov byte [ebp - 4], 0x10
cmp dword [ebp - 0x160], edi
jb 0x1001f22e
mov eax, dword [ebp - 0x174]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x160], esi
mov dword [ebp - 0x164], ebx
xor ecx, ecx
mov word [ebp - 0x174], cx
mov byte [ebp - 4], 0xe
cmp dword [ebp - 0x17c], edi
jb 0x1001f25f
mov edx, dword [ebp - 0x190]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x17c], esi
mov dword [ebp - 0x180], ebx
xor eax, eax
mov word [ebp - 0x190], ax
mov byte [ebp - 4], 0xd
cmp dword [ebp - 0x1b4], edi
jb 0x1001f290
mov ecx, dword [ebp - 0x1c8]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x1b4], esi
mov dword [ebp - 0x1b8], ebx
xor edx, edx
mov word [ebp - 0x1c8], dx
mov byte [ebp - 4], 0xc
cmp dword [ebp - 0x1ec], edi
jb 0x1001f2c1
mov eax, dword [ebp - 0x200]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x1ec], esi
mov dword [ebp - 0x1f0], ebx
xor ecx, ecx
mov word [ebp - 0x200], cx
mov byte [ebp - 4], 0xb
cmp dword [ebp - 0x25c], edi
jb 0x1001f2f2
mov edx, dword [ebp - 0x270]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x25c], esi
mov dword [ebp - 0x260], ebx
xor eax, eax
mov word [ebp - 0x270], ax
mov byte [ebp - 4], 0xa
cmp dword [ebp - 0xb8], edi
jb 0x1001f323
mov ecx, dword [ebp - 0xcc]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0xb8], esi
mov dword [ebp - 0xbc], ebx
xor edx, edx
mov word [ebp - 0xcc], dx
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x240], edi
jb 0x1001f357
mov eax, dword [ebp - 0x254]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x240], esi
mov dword [ebp - 0x244], ebx
xor ecx, ecx
mov word [ebp - 0x254], cx
mov al, 1
lea esp, [ebp - 0x380]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.100af1c6
mov esp, ebp
pop ebp
ret