Function at 0x100fe58f
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x50
mov eax, 0x10320d1b
call fcn.1027911b
xor edi, edi
lea ecx, [ebp - 0x40]
push 0x10372e24
mov dword [ebp - 0x5c], edi
call fcn.10006939
mov esi, eax
mov ebx, 0x10373014
mov dword [ebp - 4], edi
push ebx
lea ecx, [ebp - 0x28]
call fcn.10006939
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 1
push ecx
push edi
push esi
push eax
call fcn.100fe4bd
push edi
push 1
lea ecx, [ebp - 0x28]
call fcn.10007cb3
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x40]
push edi
push 1
call fcn.10007cb3
push 0x1037301c
lea ecx, [ebp - 0x28]
call fcn.10006939
mov esi, eax
push 2
pop edi
push ebx
lea ecx, [ebp - 0x40]
mov dword [ebp - 4], edi
call fcn.10006939
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 3
push ecx
push 1
push esi
push eax
call fcn.100fe4bd
push 0
push 1
lea ecx, [ebp - 0x40]
call fcn.10007cb3
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
push 0
push 1
call fcn.10007cb3
push str.FrontPage
lea ecx, [ebp - 0x28]
call fcn.10006939
mov esi, eax
push 4
pop ebx
push 0x10373014
lea ecx, [ebp - 0x40]
mov dword [ebp - 4], ebx
call fcn.10006939
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 5
push ecx
push edi
push esi
push eax
call fcn.100fe4bd
push 0
push 1
lea ecx, [ebp - 0x40]
call fcn.10007cb3
or dword [ebp - 4], 0xffffffff
push 0
push 1
lea ecx, [ebp - 0x28]
call fcn.10007cb3
push 0x1037303c
lea ecx, [ebp - 0x28]
call fcn.10006939
mov esi, eax
push 6
pop edi
push 0x10373014
lea ecx, [ebp - 0x40]
mov dword [ebp - 4], edi
call fcn.10006939
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 7
push ecx
push 3
push esi
push eax
call fcn.100fe4bd
push 0
push 1
lea ecx, [ebp - 0x40]
call fcn.10007cb3
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
push 0
push 1
call fcn.10007cb3
push str.Photodraw
lea ecx, [ebp - 0x28]
call fcn.10006939
mov esi, eax
push 0x10373014
lea ecx, [ebp - 0x40]
mov dword [ebp - 4], 8
call fcn.10006939
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 9
push ecx
push ebx
push esi
push eax
call fcn.100fe4bd
push 0
push 1
lea ecx, [ebp - 0x40]
call fcn.10007cb3
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
push 0
push 1
call fcn.10007cb3
push 0x10373060
lea ecx, [ebp - 0x28]
call fcn.10006939
mov esi, eax
push 0xa
pop ebx
push 0x10373014
lea ecx, [ebp - 0x40]
mov dword [ebp - 4], ebx
call fcn.10006939
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0xb
push ecx
push 5
push esi
push eax
call fcn.100fe4bd
push 0
push 1
lea ecx, [ebp - 0x40]
call fcn.10007cb3
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
push 0
push 1
call fcn.10007cb3
push 0x10333130
lea ecx, [ebp - 0x28]
call fcn.10006939
mov esi, eax
push 0x10373014
lea ecx, [ebp - 0x40]
mov dword [ebp - 4], 0xc
call fcn.10006939
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0xd
push ecx
push edi
push esi
push eax
call fcn.100fe4bd
xor edi, edi
lea ecx, [ebp - 0x40]
push 0
inc edi
push edi
call fcn.10007cb3
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
push 0
push edi
call fcn.10007cb3
push 0x10373078
lea ecx, [ebp - 0x28]
call fcn.10006939
mov esi, eax
push 0x10373014
lea ecx, [ebp - 0x40]
mov dword [ebp - 4], 0xe
call fcn.10006939
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0xf
push ecx
push 7
push esi
push eax
call fcn.100fe4bd
push 0
push edi
lea ecx, [ebp - 0x40]
call fcn.10007cb3
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
push 0
push edi
call fcn.10007cb3
push 0x10372e24
lea ecx, [ebp - 0x28]
call fcn.10006939
mov esi, eax
mov edi, str.10.0
mov dword [ebp - 4], 0x10
push edi
lea ecx, [ebp - 0x40]
call fcn.10006939
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x11
push ecx
push 8
push esi
push eax
call fcn.100fe4bd
push 0
push 1
lea ecx, [ebp - 0x40]
call fcn.10007cb3
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
push 0
push 1
call fcn.10007cb3
push 0x1037301c
lea ecx, [ebp - 0x28]
call fcn.10006939
mov esi, eax
push edi
lea ecx, [ebp - 0x40]
mov dword [ebp - 4], 0x12
call fcn.10006939
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x13
push ecx
push 9
push esi
push eax
call fcn.100fe4bd
push 0
push 1
lea ecx, [ebp - 0x40]
call fcn.10007cb3
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
push 0
push 1
call fcn.10007cb3
push str.FrontPage
lea ecx, [ebp - 0x28]
call fcn.10006939
mov esi, eax
push edi
lea ecx, [ebp - 0x40]
mov dword [ebp - 4], 0x14
call fcn.10006939
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x15
push ecx
push ebx
push esi
push eax
call fcn.100fe4bd
push 0
push 1
lea ecx, [ebp - 0x40]
call fcn.10007cb3
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
push 0
push 1
call fcn.10007cb3
push 0x1037303c
lea ecx, [ebp - 0x28]
call fcn.10006939
mov esi, eax
push 0x16
pop ebx
push edi
lea ecx, [ebp - 0x40]
mov dword [ebp - 4], ebx
call fcn.10006939
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x17
push ecx
push 0xb
push esi
push eax
call fcn.100fe4bd
push 0
push 1
lea ecx, [ebp - 0x40]
call fcn.10007cb3
or dword [ebp - 4], 0xffffffff
push 0
push 1
lea ecx, [ebp - 0x28]
call fcn.10007cb3
push str.Photodraw
lea ecx, [ebp - 0x28]
call fcn.10006939
mov esi, eax
push edi
lea ecx, [ebp - 0x40]
mov dword [ebp - 4], 0x18
call fcn.10006939
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x19
push ecx
push 0xc
push esi
push eax
call fcn.100fe4bd
push 0
push 1
lea ecx, [ebp - 0x40]
call fcn.10007cb3
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
push 0
push 1
call fcn.10007cb3
push 0x10373060
lea ecx, [ebp - 0x28]
call fcn.10006939
mov esi, eax
push edi
lea ecx, [ebp - 0x40]
mov dword [ebp - 4], 0x1a
call fcn.10006939
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x1b
push ecx
push 0xd
push esi
push eax
call fcn.100fe4bd
push 0
push 1
lea ecx, [ebp - 0x40]
call fcn.10007cb3
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
push 0
push 1
call fcn.10007cb3
push 0x10333130
lea ecx, [ebp - 0x28]
call fcn.10006939
mov esi, eax
push edi
lea ecx, [ebp - 0x40]
mov dword [ebp - 4], 0x1c
call fcn.10006939
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x1d
push ecx
push 0xe
push esi
push eax
call fcn.100fe4bd
push 0
push 1
lea ecx, [ebp - 0x40]
call fcn.10007cb3
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
push 0
push 1
call fcn.10007cb3
push 0x10373078
lea ecx, [ebp - 0x28]
call fcn.10006939
mov esi, eax
push edi
lea ecx, [ebp - 0x40]
mov dword [ebp - 4], 0x1e
call fcn.10006939
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x1f
push ecx
push 0xf
push esi
push eax
call fcn.100fe4bd
push 0
push 1
lea ecx, [ebp - 0x40]
call fcn.10007cb3
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
push 0
push 1
call fcn.10007cb3
push 0x10372e24
lea ecx, [ebp - 0x28]
call fcn.10006939
mov esi, eax
mov edi, str.11.0
mov dword [ebp - 4], 0x20
push edi
lea ecx, [ebp - 0x40]
call fcn.10006939
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x21
push ecx
push 0x10
push esi
push eax
call fcn.100fe4bd
push 0
push 1
lea ecx, [ebp - 0x40]
call fcn.10007cb3
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
push 0
push 1
call fcn.10007cb3
push 0x1037301c
lea ecx, [ebp - 0x28]
call fcn.10006939
mov esi, eax
push edi
lea ecx, [ebp - 0x40]
mov dword [ebp - 4], 0x22
call fcn.10006939
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x23
push ecx
push 0x11
push esi
push eax
call fcn.100fe4bd
push 0
push 1
lea ecx, [ebp - 0x40]
call fcn.10007cb3
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
push 0
push 1
call fcn.10007cb3
push str.FrontPage
lea ecx, [ebp - 0x28]
call fcn.10006939
mov esi, eax
push edi
lea ecx, [ebp - 0x40]
mov dword [ebp - 4], 0x24
call fcn.10006939
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x25
push ecx
push 0x12
push esi
push eax
call fcn.100fe4bd
push 0
push 1
lea ecx, [ebp - 0x40]
call fcn.10007cb3
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
push 0
push 1
call fcn.10007cb3
push str.InfoPath
lea ecx, [ebp - 0x28]
call fcn.10006939
mov esi, eax
push edi
lea ecx, [ebp - 0x40]
mov dword [ebp - 4], 0x26
call fcn.10006939
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x27
push ecx
push 0x13
push esi
push eax
call fcn.100fe4bd
push 0
push 1
lea ecx, [ebp - 0x40]
call fcn.10007cb3
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
push 0
push 1
call fcn.10007cb3
push 0x10373098
lea ecx, [ebp - 0x28]
call fcn.10006939
mov esi, eax
push edi
lea ecx, [ebp - 0x40]
mov dword [ebp - 4], 0x28
call fcn.10006939
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x29
push ecx
push 0x14
push esi
push eax
call fcn.100fe4bd
push 0
push 1
lea ecx, [ebp - 0x40]
call fcn.10007cb3
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
push 0
push 1
call fcn.10007cb3
push 0x1037303c
lea ecx, [ebp - 0x28]
call fcn.10006939
mov esi, eax
push edi
lea ecx, [ebp - 0x40]
mov dword [ebp - 4], 0x2a
call fcn.10006939
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x2b
push ecx
push 0x15
push esi
push eax
call fcn.100fe4bd
push 0
push 1
lea ecx, [ebp - 0x40]
call fcn.10007cb3
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
push 0
push 1
call fcn.10007cb3
push str.Photodraw
lea ecx, [ebp - 0x28]
call fcn.10006939
mov esi, eax
push edi
lea ecx, [ebp - 0x40]
mov dword [ebp - 4], 0x2c
call fcn.10006939
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x2d
push ecx
push ebx
push esi
push eax
call fcn.100fe4bd
push 0
push 1
lea ecx, [ebp - 0x40]
call fcn.10007cb3
push 0
or ebx, 0xffffffff
lea ecx, [ebp - 0x28]
push 1
mov dword [ebp - 4], ebx
call fcn.10007cb3
push 0x10373060
lea ecx, [ebp - 0x28]
call fcn.10006939
mov esi, eax
push edi
lea ecx, [ebp - 0x40]
mov dword [ebp - 4], 0x2e
call fcn.10006939
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x2f
push ecx
push 0x17
push esi
push eax
call fcn.100fe4bd
push 0
push 1
lea ecx, [ebp - 0x40]
call fcn.10007cb3
push 0
push 1
lea ecx, [ebp - 0x28]
mov dword [ebp - 4], ebx
call fcn.10007cb3
push 0x10333130
lea ecx, [ebp - 0x28]
call fcn.10006939
mov esi, eax
mov dword [ebp - 4], 0x30
push edi
lea ecx, [ebp - 0x40]
call fcn.10006939
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x31
push ecx
push 0x18
push esi
push eax
call fcn.100fe4bd
push 0
push 1
lea ecx, [ebp - 0x40]
call fcn.10007cb3
push 0
push 1
lea ecx, [ebp - 0x28]
mov dword [ebp - 4], ebx
call fcn.10007cb3
push 0x10373078
lea ecx, [ebp - 0x28]
call fcn.10006939
mov esi, eax
push edi
lea ecx, [ebp - 0x40]
mov dword [ebp - 4], 0x32
call fcn.10006939
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x33
push ecx
push 0x19
push esi
push eax
call fcn.100fe4bd
xor esi, esi
lea ecx, [ebp - 0x40]
push esi
push 1
call fcn.10007cb3
push esi
push 1
lea ecx, [ebp - 0x28]
mov dword [ebp - 4], ebx
call fcn.10007cb3
push str.PreviousOfficeApps
lea ecx, [ebp - 0x58]
call fcn.10006939
push esi
push dword [ebp - 0x5c]
mov dword [ebp - 4], 0x34
push eax
call fcn.100ff204
push esi
push 1
lea ecx, [ebp - 0x58]
call fcn.10007cb3
call fcn.102790cd
ret