Function at 0x1000aec0
Capabilities:
Encode data using xor
Encrypt data using rc4 ksa
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x3d8
push esi
mov esi, dword [0x10028b7c]
push edi
mov dword [ebp - 0x38], ecx
mov edi, 0x10021200
mov ecx, esi
mov dword [ebp - 0x234], edx
push 0x64
and ecx, 0x69e9b189
mov dword [ebp - 0x48], 9
pop edx
lea eax, [edx - 0x30]
push 9
pop edx
cmp ax, dx
ja 0x1000af0b
add edi, 2
movzx eax, word [edi]
mov edx, eax
test ax, ax
jne 0x1000aef1
jmp 0x1000af17
add esi, 0x8121e80
mov dword [0x10028b7c], esi
imul eax, ecx, 0xe1c8a98f
mov dword [0x10028a28], eax
call fcn.1000aa34
push 0x75
mov ecx, 0xfff
mov eax, str.user_skip_uac
pop edx
add ecx, edx
lea eax, [eax + 2]
cmp ecx, 0x1cd7
ja 0x1000af50
movzx edx, word [eax]
test edx, edx
jne 0x1000af34
mov ecx, dword [0x10028a28]
jmp 0x1000af5c
mov ecx, dword [0x10028b7c]
xor ecx, 0xf0ba9772
imul eax, ecx, 0xa72e0f06
mov dword [0x10028b7c], eax
xor ecx, 0x55dbdedc
mov edx, str.SSL___The_requested_feature_is_not_available
mov dword [0x10028a28], ecx
mov ecx, str._tfunction_setJunkLozengeText_sText_
call fcn.1000a779
mov ecx, dword [0x10028b7c]
xor eax, eax
mov edx, eax
mov dword [ebp - 0x214], 0x14
mov dword [ebp - 0x210], 0x4b
mov dword [ebp - 0x20c], 0x3f
mov dword [ebp - 0x208], 0x2d
mov dword [ebp - 0x204], 0xffffff35
imul ecx, ecx, 0x3b382c21
sub edx, dword [ebp + eax*4 - 0x214]
inc eax
cmp eax, 5
jl 0x1000afbe
mov dword [ebp - 0x3b8], edx
xor eax, eax
mov edx, 0xf54
mov dword [ebp - 0x1b8], 0x39
mov dword [ebp - 0x1b4], 0x35
mov dword [ebp - 0x1b0], 0xd9f
sub edx, dword [ebp + eax*4 - 0x1b8]
inc eax
cmp eax, 3
jl 0x1000affc
mov esi, str.krb5kdf_derive
mov dword [ebp - 0x390], edx
lea edi, [ebp - 0x1b8]
mov word [ebp - 0xc], 0x8da6
mov byte [ebp - 0xa], 0x58
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
imul eax, ecx, 0xbcf2805
xor ecx, ecx
mov edi, ecx
mov dword [0x10028b7c], eax
mov eax, ecx
mov byte [ebp + eax - 0x14c], al
inc eax
cmp eax, 0x100
jb 0x1000b03b
mov esi, ecx
mov dword [ebp - 0x40], 0xe
xor edx, edx
mov cl, byte [ebp + esi - 0x14c]
mov eax, esi
mov byte [ebp - 1], cl
div dword [ebp - 0x40]
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x1b8]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [ebp + edi - 0x14c]
mov byte [ebp + esi - 0x14c], al
inc esi
mov al, byte [ebp - 1]
mov byte [ebp + edi - 0x14c], al
cmp esi, 0x100
jb 0x1000b053
xor ecx, ecx
mov edx, 0x10021200
imul eax, dword [0x10028b7c], 0x4d595788
mov edi, ecx
mov dword [ebp - 0x34], ecx
mov esi, ecx
mov dword [0x10028a28], eax
mov eax, edx
inc esi
lea eax, [eax + 2]
cmp esi, 0x1f98
jl 0x1000b0c9
cmp word [eax], cx
jne 0x1000b0b6
jmp 0x1000b0f4
push edx
mov edx, str.._AV_lambda_a0792fa872a47c3932d9a190ec15c699___
mov ecx, str.._AV_lambda_16f8710d2d97eb895b682ae5d263d924___
call fcn.1000ad95
pop ecx
mov ecx, dword [0x10028b7c]
mov eax, ecx
xor eax, 0xdb799850
mov dword [0x10028a28], eax
cmp esi, 0x165
jle 0x1000b0ff
call fcn.10009fb7
mov ecx, dword [0x10028b7c]
mov eax, ecx
or eax, 0xb1761881
mov dword [0x10028a28], eax
sub ecx, 0x3245e7fa
mov dword [0x10028b7c], ecx
mov ecx, str.setAttr_Token_B0Prime
call fcn.1000ac51
mov ecx, dword [0x10028b7c]
xor eax, eax
mov esi, eax
add ecx, 0x7758cff4
lea eax, [edi + 1]
movzx edi, al
mov eax, ecx
mov dword [ebp - 0x150], eax
xor ecx, 0xac211290
mov dword [0x10028a28], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 8], ecx
mov cl, byte [ebp + edi - 0x14c]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [ebp - 0x34], eax
mov al, byte [ebp + eax - 0x14c]
mov byte [ebp + edi - 0x14c], al
mov eax, dword [ebp - 0x34]
mov byte [ebp + eax - 0x14c], cl
movzx eax, byte [ebp + edi - 0x14c]
mov ecx, dword [ebp - 8]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x14c]
xor al, byte [ebp + esi - 0xc]
mov byte [ebp + esi - 0x230], al
inc esi
cmp esi, 3
jb 0x1000b12b
xor eax, eax
mov dword [ebp - 0x18], 0x92600722
push 0xb
mov byte [ebp - 0x22d], al
lea edi, [ebp - 0x1e8]
pop eax
mov ecx, eax
mov dword [ebp - 0x34], eax
mov esi, str.Sorry__this_service_is_currently_unavailable.
rep movsd dword es:[edi], dword [esi]
push 0x64
pop edx
movsw word es:[edi], word [esi]
mov esi, 0x10021200
mov ecx, esi
lea eax, [edx - 0x30]
push 9
pop edx
cmp ax, dx
ja 0x1000b1f5
add ecx, 2
movzx eax, word [ecx]
mov edx, eax
test ax, ax
jne 0x1000b1d2
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x150]
jmp 0x1000b204
mov eax, dword [ebp - 8]
imul ecx, eax, 0xe7d53a5f
mov dword [0x10028a28], ecx
and eax, 0x7dc333e5
xor edx, edx
mov dword [0x10028b7c], eax
mov edi, edx
mov byte [ebp + edx - 0x14c], dl
inc edx
cmp edx, 0x100
jb 0x1000b212
xor edx, edx
inc edx
lea esi, [esi + 2]
cmp edx, 0x2151
jg 0x1000b247
xor edi, edi
cmp word [esi], di
jne 0x1000b224
cmp edx, 0x137e
jg 0x1000b251
and ecx, 0x1b9bbcc5
jmp 0x1000b267
xor eax, 0x5686bdfe
mov dword [0x10028b7c], eax
mov ecx, str.._AUIRecurseDirEx_Piriform__
call fcn.1000a632
mov ecx, dword [0x10028b7c]
add ecx, 0x512e8dca
xor ecx, 0x7d08a2bf
mov dword [0x10028b7c], ecx
call fcn.10009ca1
mov eax, dword [0x10028b7c]
mov dword [ebp - 0x14], eax
add eax, 0x5fad5f86
mov dword [ebp - 0x2c], eax
mov dword [0x10028a28], eax
xor eax, eax
mov esi, eax
xor edx, edx
mov cl, byte [ebp + esi - 0x14c]
mov eax, esi
mov byte [ebp - 1], cl
div dword [ebp - 0x208]
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x1e8]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [ebp + edi - 0x14c]
mov byte [ebp + esi - 0x14c], al
inc esi
mov al, byte [ebp - 1]
mov byte [ebp + edi - 0x14c], al
cmp esi, 0x100
jb 0x1000b291
xor eax, eax
mov dword [ebp - 8], eax
mov edi, eax
mov esi, eax
lea eax, [edi + 1]
movzx edi, al
mov eax, dword [ebp - 8]
mov cl, byte [ebp + edi - 0x14c]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [ebp - 8], eax
mov al, byte [ebp + eax - 0x14c]
mov byte [ebp + edi - 0x14c], al
mov eax, dword [ebp - 8]
mov byte [ebp + eax - 0x14c], cl
movzx eax, byte [ebp + edi - 0x14c]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x14c]
xor al, byte [ebp + esi - 0x18]
mov byte [ebp + esi - 0x34c], al
inc esi
cmp esi, 4
jb 0x1000b2e1
mov dword [ebp - 0x3d8], 0xa
lea edi, [ebp - 0x1f0]
mov dword [ebp - 0x3d4], 0x50
xor edx, edx
mov dword [ebp - 0x3d0], 0x3c
mov esi, str.FileKey2_LocalAppData_MicrosoftOIS_thumbnails.
mov dword [ebp - 0x3cc], 0xdd
movups xmm1, xmmword [ebp - 0x3d8]
push 0xe
mov byte [ebp - 0x348], dl
movaps xmm0, xmm1
mov word [ebp - 0xc], 0x5989
psrldq xmm0, 8
paddd xmm1, xmm0
mov byte [ebp - 0xa], 0x1e
movups xmm0, xmm1
psrldq xmm0, 4
paddd xmm1, xmm0
movd eax, xmm1
add eax, 5
mov dword [ebp - 0x378], eax
pop eax
mov ecx, eax
mov eax, edx
rep movsd dword es:[edi], dword [esi]
mov edi, edx
mov byte [ebp + eax - 0x14c], al
inc eax
cmp eax, 0x100
jb 0x1000b3b5
mov esi, edx
mov dword [ebp - 0x1f4], 0x37
xor edx, edx
mov cl, byte [ebp + esi - 0x14c]
mov eax, esi
mov byte [ebp - 1], cl
div dword [ebp - 0x1f4]
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x1f0]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [ebp + edi - 0x14c]
mov byte [ebp + esi - 0x14c], al
inc esi
mov al, byte [ebp - 1]
mov byte [ebp + edi - 0x14c], al
cmp esi, 0x100
jb 0x1000b3d0
mov esi, dword [ebp - 0x14]
xor eax, eax
mov ecx, eax
mov dword [ebp - 8], eax
mov dword [ebp - 0x18], ecx
mov edi, eax
push 0x2d
mov edx, str._SecureLineSecuredConnectionTimeLastThirtyDays
pop eax
add eax, 0xffffffd0
cmp ax, word [ebp - 0x48]
ja 0x1000b44d
mov ecx, dword [ebp - 0x18]
add edx, 2
movzx eax, word [edx]
mov dword [ebp - 0x150], eax
test ax, ax
jne 0x1000b42e
jmp 0x1000b453
xor esi, 0xcaee6490
lea eax, [ecx + 1]
sub esi, 0x2927bd1f
movzx eax, al
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], esi
mov esi, dword [ebp - 0x18]
mov cl, byte [ebp + eax - 0x14c]
mov eax, dword [ebp - 8]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [ebp - 8], eax
mov al, byte [ebp + eax - 0x14c]
mov byte [ebp + esi - 0x14c], al
mov eax, dword [ebp - 8]
mov byte [ebp + eax - 0x14c], cl
mov ecx, esi
mov esi, dword [ebp - 0x14]
movzx eax, byte [ebp + ecx - 0x14c]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x14c]
xor al, byte [ebp + edi - 0xc]
mov byte [ebp + edi - 0x298], al
inc edi
cmp edi, 3
jb 0x1000b426
push 0x64
mov ecx, 0x10021200
pop edx
lea eax, [edx - 0x30]
push 9
pop edx
cmp ax, dx
ja 0x1000b4e8
add ecx, 2
movzx eax, word [ecx]
mov edx, eax
test ax, ax
jne 0x1000b4cb
mov eax, dword [ebp - 0x2c]
jmp 0x1000b4f5
mov eax, dword [ebp - 0x2c]
sub eax, 0x70baf0bb
mov dword [0x10028a28], eax
add esi, 0x40280a01
mov dword [ebp - 0x18], 0x7de1f66c
xor ecx, ecx
mov dword [0x10028b7c], esi
mov byte [ebp - 0x295], cl
mov edx, str._SecureLineSecuredConnectionTimeLastThirtyDays
xor edi, edi
inc ecx
lea edx, [edx + 2]
cmp ecx, 0x227d
jl 0x1000b52a
cmp word [edx], di
jne 0x1000b517
jmp 0x1000b53c
sub eax, 0xa56d616
mov dword [0x10028a28], eax
cmp ecx, 0x11db
jle 0x1000b55c
mov edi, str._SecureLineSecuredConnectionTimeLastThirtyDays
mov edx, esi
mov ecx, edi
call fcn.1000a4d7
imul eax, dword [0x10028a28], 0xf8dc0f4c
mov esi, dword [0x10028b7c]
jmp 0x1000b567
add esi, 0x2ca370e6
mov edi, str._SecureLineSecuredConnectionTimeLastThirtyDays
or eax, 0x51bb21a7
mov ecx, edi
push 0x2d
mov dword [0x10028a28], eax
pop eax
mov edx, eax
lea eax, [edx - 0x30]
push 9
pop edx
cmp ax, dx
ja 0x1000b592
add ecx, 2
movzx eax, word [ecx]
mov edx, eax
test ax, ax
jne 0x1000b578
jmp 0x1000b598
add esi, 0x3992d1a8
add esi, 0x506f3ef9
mov dword [0x10028b7c], esi
call fcn.10009ca1
push 0x2d
mov edx, 0x30c
mov eax, edi
pop ecx
add edx, ecx
lea eax, [eax + 2]
cmp edx, 0x1e61
ja 0x1000b5c9
movzx ecx, word [eax]
test ecx, ecx
jne 0x1000b5b3
jmp 0x1000b5e2
add dword [0x10028b7c], 0x23fc9e64
mov edx, str.invalid_certificate
mov ecx, str.user_skip_uac
call fcn.10009e63
mov eax, dword [0x10028b7c]
lea edx, [eax + 0x64c6160]
mov dword [0x10028a28], edx
add eax, 0x4e6a2d12
push eax
mov dword [0x10028b7c], eax
mov eax, str.user_skip_uac
push eax
mov ecx, eax
call fcn.1000a813
mov esi, str.removeColumns
lea edi, [ebp - 0x1b8]
pop ecx
pop ecx
xor ecx, ecx
movsd dword es:[edi], dword [esi]
mov eax, ecx
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 8], eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
imul edi, dword [0x10028b7c], 0x98994fdd
mov esi, edi
mov dword [0x10028b7c], edi
and esi, 0xc1b91de4
mov dword [0x10028a28], esi
jmp 0x1000b649
xor ecx, ecx
mov edx, ecx
mov ecx, 0x10021200
inc edx
lea ecx, [ecx + 2]
cmp edx, 0x31d
jl 0x1000b668
xor eax, eax
cmp word [ecx], ax
mov eax, dword [ebp - 8]
jne 0x1000b650
jmp 0x1000b688
push str.Tools_Startup_Context_Menu
push esi
mov edx, edi
mov ecx, esi
call fcn.10009dac
mov esi, dword [0x10028b7c]
mov eax, dword [ebp - 8]
add esi, 0x869326f5
pop ecx
pop ecx
imul edi, esi, 0x3cf9461e
mov dword [0x10028b7c], edi
mov byte [ebp + eax - 0x14c], al
lea esi, [edi + 0x699f7911]
inc eax
mov dword [0x10028a28], esi
mov dword [ebp - 8], eax
cmp eax, 0x100
jb 0x1000b647
xor eax, eax
mov dword [ebp - 0x20], 0xd
mov edi, eax
xor edx, edx
mov cl, byte [ebp + edi - 0x14c]
mov eax, edi
mov byte [ebp - 1], cl
div dword [ebp - 0x20]
movzx ecx, cl
add esi, 0xdebae8ae
movzx eax, byte [ebp + edx - 0x1b8]
add eax, dword [ebp - 0x2c]
add ecx, eax
movzx ecx, cl
mov dword [ebp - 0x2c], ecx
mov al, byte [ebp + ecx - 0x14c]
mov byte [ebp + edi - 0x14c], al
inc edi
mov al, byte [ebp - 1]
mov byte [ebp + ecx - 0x14c], al
cmp edi, 0x100
jb 0x1000b6bd
xor ecx, ecx
mov dword [ebp - 8], ecx
mov eax, ecx
mov dword [ebp - 0x2c], ecx
inc eax
and esi, 0xfec4b9ae
movzx eax, al
mov dword [ebp - 0x14], eax
mov edi, dword [ebp - 0x14]
push 0x2d
mov cl, byte [ebp + eax - 0x14c]
mov eax, dword [ebp - 8]
movzx edx, cl
add eax, edx
mov dword [0x10028a28], esi
movzx eax, al
mov dword [ebp - 8], eax
mov al, byte [ebp + eax - 0x14c]
mov byte [ebp + edi - 0x14c], al
mov eax, dword [ebp - 8]
mov byte [ebp + eax - 0x14c], cl
mov eax, edi
mov edi, dword [0x10028b7c]
pop ecx
movzx eax, byte [ebp + eax - 0x14c]
add eax, edx
mov edx, 0x398
movzx eax, al
mov al, byte [ebp + eax - 0x14c]
mov byte [ebp - 1], al
mov eax, str._SecureLineSecuredConnectionTimeLastThirtyDays
add edx, ecx
lea eax, [eax + 2]
cmp edx, 0x95a
ja 0x1000b79a
movzx ecx, word [eax]
test ecx, ecx
jne 0x1000b784
jmp 0x1000b7d5
push str.ScrollbarPosition
push edi
mov edx, esi
mov ecx, esi
call fcn.10009dac
and dword [0x10028b7c], 0x72c4448e
mov edx, 0x10021200
push 0x10020014
push str.user_skip_uac
mov ecx, str.DetectHKCUSoftwareCorelPaintShop_ProX4
call fcn.1000a120
mov edi, dword [0x10028b7c]
add esp, 0x10
imul ecx, edi, 0x68225411
mov dword [0x10028b7c], ecx
lea edx, [ecx - 0x17c5485]
push str.Updates_complete
push edx
mov dword [0x10028a28], edx
call fcn.10009dac
pop ecx
pop ecx
mov ecx, dword [ebp - 0x2c]
mov al, byte [ebp + ecx - 0x18]
xor al, byte [ebp - 1]
mov byte [ebp + ecx - 0x354], al
inc ecx
mov dword [ebp - 0x2c], ecx
cmp ecx, 4
jae 0x1000b822
mov esi, dword [0x10028a28]
mov eax, dword [ebp - 0x14]
jmp 0x1000b715
push 9
pop eax
push 0x2d
mov dword [ebp - 0x1c8], eax
xor edx, edx
pop eax
mov dword [ebp - 0x1c4], eax
mov ecx, 0xfa4
push 0xe
pop eax
mov dword [ebp - 0x1c0], eax
mov eax, edx
mov byte [ebp - 0x350], dl
mov dword [ebp - 0x1cc], 0x47
mov dword [ebp - 0x1bc], 0xdad
sub ecx, dword [ebp + eax*4 - 0x1cc]
inc eax
cmp eax, 5
jl 0x1000b860
sub dword [0x10028b7c], 0x677de661
mov esi, edx
push 0x2f
pop eax
mov dword [ebp - 0x30], eax
mov byte [ebp - 0xb], al
mov eax, str._SecureLineSecuredConnectionTimeLastThirtyDays
mov dword [ebp - 0x37c], ecx
mov byte [ebp - 0xc], 0xeb
mov byte [ebp - 0xa], 0xad
inc esi
lea eax, [eax + 2]
cmp esi, 0x1f6d
jl 0x1000b8a8
cmp word [eax], dx
jne 0x1000b895
jmp 0x1000b8c7
call fcn.1000a3d5
mov edx, dword [0x10028b7c]
add edx, 0x2298e749
mov dword [0x10028b7c], edx
cmp esi, 0x15a4
jle 0x1000b8d7
mov ecx, str.namespace_DriverUpdaterCategorySelect
call fcn.1000ac51
mov edx, dword [0x10028b7c]
xor edx, 0xbee6e769
push 0xb
pop ecx
mov esi, str.RegKey3HKCUSoftware7_ZipFMCopyHistory
lea edi, [ebp - 0x1e8]
rep movsd dword es:[edi], dword [esi]
lea eax, [edx - 0x906e528]
mov ecx, str.user_skip_uac
push 0x75
mov dword [0x10028a28], eax
movsw word es:[edi], word [esi]
mov edi, 0xc88
pop esi
add edi, esi
lea ecx, [ecx + 2]
cmp edi, 0x238c
ja 0x1000b91d
movzx esi, word [ecx]
test esi, esi
jne 0x1000b907
jmp 0x1000b929
mov eax, edx
or eax, 0x18996122
mov dword [0x10028a28], eax
xor eax, 0xc26fb951
add eax, 0x108f4fee
mov dword [0x10028b7c], eax
call fcn.10009fb7
xor ecx, ecx
mov edi, ecx
mov eax, ecx
mov byte [ebp + eax - 0x14c], al
inc eax
cmp eax, 0x100
jb 0x1000b943
mov esi, ecx
xor edx, edx
mov cl, byte [ebp + esi - 0x14c]
mov eax, esi
mov byte [ebp - 1], cl
div dword [ebp - 0x208]
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x1e8]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [ebp + edi - 0x14c]
mov byte [ebp + esi - 0x14c], al
inc esi
mov al, byte [ebp - 1]
mov byte [ebp + edi - 0x14c], al
cmp esi, 0x100
jb 0x1000b954
xor eax, eax
mov dword [ebp - 8], eax
mov edi, eax
mov esi, eax
lea eax, [edi + 1]
movzx edi, al
mov eax, dword [ebp - 8]
mov cl, byte [ebp + edi - 0x14c]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [ebp - 8], eax
mov al, byte [ebp + eax - 0x14c]
mov byte [ebp + edi - 0x14c], al
mov eax, dword [ebp - 8]
mov byte [ebp + eax - 0x14c], cl
movzx eax, byte [ebp + edi - 0x14c]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x14c]
xor al, byte [ebp + esi - 0xc]
mov byte [ebp + esi - 0x294], al
inc esi
cmp esi, 3
jb 0x1000b9a4
push 6
pop ecx
mov esi, str.BreachGuardLicenseNumber
mov dword [ebp - 0x18], 0xa386b74b
lea edi, [ebp - 0x1d4]
xor eax, eax
rep movsd dword es:[edi], dword [esi]
push 0x64
mov byte [ebp - 0x291], al
mov edx, 0xfad
mov eax, 0x10021200
movsb byte es:[edi], byte [esi]
pop ecx
add edx, ecx
lea eax, [eax + 2]
cmp edx, 0x1074
ja 0x1000ba44
movzx ecx, word [eax]
test ecx, ecx
jne 0x1000ba29
mov eax, dword [0x10028b7c]
jmp 0x1000ba53
mov eax, dword [0x10028b7c]
sub eax, 0x37f59491
mov dword [0x10028b7c], eax
xor eax, 0x1c2f8847
mov dword [0x10028a28], eax
call fcn.1000aa34
xor ecx, ecx
mov edi, ecx
mov eax, ecx
mov byte [ebp + eax - 0x14c], al
inc eax
cmp eax, 0x100
jb 0x1000ba68
mov esi, ecx
mov dword [ebp - 0x150], 0x18
xor edx, edx
mov cl, byte [ebp + esi - 0x14c]
mov eax, esi
mov byte [ebp - 1], cl
div dword [ebp - 0x150]
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x1d4]
add eax, edi
add ecx, eax
movzx edi, cl
mov edx, dword [0x10028a28]
mov ecx, str._SecureLineSecuredConnectionTimeLastThirtyDays
and edx, 0xff1299
mov dword [0x10028b7c], edx
call fcn.1000a4d7
mov al, byte [ebp + edi - 0x14c]
mov byte [ebp + esi - 0x14c], al
inc esi
mov al, byte [ebp - 1]
mov byte [ebp + edi - 0x14c], al
cmp esi, 0x100
jb 0x1000ba83
mov eax, dword [0x10028a28]
xor ecx, ecx
or eax, 0x619c4fed
mov dword [ebp - 8], ecx
mov dword [ebp - 0x10], eax
mov edi, ecx
add eax, 0x2b683461
mov esi, ecx
mov dword [ebp - 0x3c], eax
lea eax, [edi + 1]
movzx edi, al
mov eax, dword [ebp - 8]
mov cl, byte [ebp + edi - 0x14c]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [ebp - 8], eax
mov al, byte [ebp + eax - 0x14c]
mov byte [ebp + edi - 0x14c], al
mov eax, dword [ebp - 8]
mov byte [ebp + eax - 0x14c], cl
movzx eax, byte [ebp + edi - 0x14c]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x14c]
xor al, byte [ebp + esi - 0x18]
mov byte [ebp + esi - 0x35c], al
inc esi
cmp esi, 4
jb 0x1000bb04
mov eax, dword [ebp - 0x10]
xor ecx, ecx
mov edx, dword [ebp - 0x3c]
or eax, 0x15173cb8
xor edx, 0x757fa800
mov byte [ebp - 0x358], cl
push 0x37
mov dword [0x10028b7c], eax
mov dword [ebp - 0x1fc], 0x38
mov dword [ebp - 0x1f8], 0x116
mov dword [0x10028a28], edx
pop esi
add esi, dword [ebp + ecx*4 - 0x1fc]
inc ecx
cmp ecx, 2
jl 0x1000bb97
mov dword [ebp - 0x1f4], esi
lea edi, [ebp - 0x1d4]
push 6
pop ecx
mov esi, str.function_onmouseleave__
mov word [ebp - 0xc], 0xc826
rep movsd dword es:[edi], dword [esi]
push 0x75
mov byte [ebp - 0xa], 0xf5
mov ecx, str.user_skip_uac
movsb byte es:[edi], byte [esi]
mov edi, 0x2600
pop esi
add edi, esi
lea ecx, [ecx + 2]
cmp edi, 0xfa7
ja 0x1000bbe8
movzx esi, word [ecx]
test esi, esi
jne 0x1000bbd2
jmp 0x1000bbfa
call fcn.10009fb7
mov edx, dword [0x10028a28]
mov eax, edx
or eax, 0xe518bbdf
and edx, 0x48e1cfe9
add eax, 0x2eccd00e
mov ecx, str.user_skip_uac
xor edi, edi
mov esi, edi
inc esi
lea ecx, [ecx + 2]
cmp esi, 0x1a44
je 0x1000bc21
cmp word [ecx], di
jne 0x1000bc0e
jmp 0x1000bc26
or eax, 0x13d5e410
xor eax, 0x93072899
mov dword [0x10028b7c], eax
and edx, 0x215d80ff
mov dword [0x10028a28], edx
call fcn.10009fb7
mov esi, dword [0x10028b7c]
xor ecx, ecx
mov dword [ebp - 8], ecx
mov eax, ecx
and esi, 0x1ee57aab
mov byte [ebp + eax - 0x14c], al
inc eax
cmp eax, 0x100
jb 0x1000bc54
mov dword [ebp - 0x2c], ecx
mov al, byte [ebp + ecx - 0x14c]
xor edx, edx
mov byte [ebp - 1], al
add esi, 0x7893dfd5
mov eax, ecx
mov dword [0x10028a28], esi
push 0x18
pop ecx
div ecx
movzx ecx, byte [ebp - 1]
lea edi, [esi - 0x46db5892]
mov dword [0x10028b7c], edi
movzx eax, byte [ebp + edx - 0x1d4]
add eax, dword [ebp - 8]
add ecx, eax
xor edx, edx
movzx eax, cl
mov ecx, str._SecureLineSecuredConnectionTimeLastThirtyDays
mov dword [ebp - 8], eax
mov eax, edx
inc eax
lea ecx, [ecx + 2]
cmp eax, 0x43d
jl 0x1000bcdb
cmp word [ecx], dx
jne 0x1000bcb1
cmp eax, 0xd11
jle 0x1000bce3
call fcn.1000a27c
mov esi, dword [0x10028a28]
mov edi, dword [0x10028b7c]
jmp 0x1000bce3
mov edi, esi
and edi, 0x799bba21
sub esi, 0x710f0da2
mov dword [0x10028a28], esi
or edi, 0x878ab90a
mov dword [0x10028b7c], edi
call fcn.10009fb7
mov edx, dword [ebp - 8]
mov ecx, dword [ebp - 0x2c]
mov al, byte [ebp + edx - 0x14c]
mov byte [ebp + ecx - 0x14c], al
inc ecx
mov al, byte [ebp - 1]
mov byte [ebp + edx - 0x14c], al
mov dword [ebp - 0x2c], ecx
cmp ecx, 0x100
jae 0x1000bd35
mov esi, dword [0x10028a28]
jmp 0x1000bc66
xor eax, eax
mov dword [ebp - 8], eax
mov edi, eax
mov esi, eax
mov eax, dword [0x10028b7c]
xor eax, 0x8f456c8a
mov dword [ebp - 0x10], eax
lea eax, [edi + 1]
movzx edi, al
mov eax, dword [ebp - 8]
mov cl, byte [ebp + edi - 0x14c]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [ebp - 8], eax
mov al, byte [ebp + eax - 0x14c]
mov byte [ebp + edi - 0x14c], al
mov eax, dword [ebp - 8]
mov byte [ebp + eax - 0x14c], cl
movzx eax, byte [ebp + edi - 0x14c]
add eax, edx
movzx eax, al
mov cl, byte [ebp + eax - 0x14c]
mov al, byte [ebp + esi - 0xc]
xor al, cl
mov byte [ebp + esi - 0x290], al
inc esi
cmp esi, 3
jb 0x1000bd4b
mov eax, dword [ebp - 0x10]
lea edi, [ebp - 0x164]
mov esi, str.img.cameraIcon_
mov dword [ebp - 0x18], 0xd94243ba
xor edx, edx
sub eax, 0x7ea6a27d
mov byte [ebp - 0x28d], dl
mov ecx, edx
mov dword [ebp - 0x14], edx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov byte [ebp + ecx - 0x14c], cl
inc ecx
cmp ecx, 0x100
jb 0x1000bdd1
mov esi, edx
mov dword [ebp - 0x24], 0xf
mov cl, byte [ebp + esi - 0x14c]
mov edx, dword [0x10028b7c]
imul edi, eax, 0x91389b92
mov eax, esi
and eax, 0xf
mov byte [ebp - 1], cl
movzx ecx, cl
push 0x2d
mov dword [ebp - 8], 0x1f49
movzx eax, byte [ebp + eax - 0x164]
add eax, dword [ebp - 0x14]
add ecx, eax
movzx eax, cl
mov dword [ebp - 0x14], eax
pop ecx
mov al, byte [ebp + eax - 0x14c]
mov byte [ebp + esi - 0x14c], al
mov eax, str._SecureLineSecuredConnectionTimeLastThirtyDays
add dword [ebp - 8], ecx
lea eax, [eax + 2]
cmp dword [ebp - 8], 0xbcf
ja 0x1000be50
movzx ecx, word [eax]
test ecx, ecx
jne 0x1000be38
jmp 0x1000be58
mov edx, edi
xor edx, 0x27ca7714
and edi, 0xe7f0df5d
mov dword [0x10028a28], edi
imul eax, edx, 0x1c4c8e0e
mov edi, 0x10021200
push edi
mov edx, str.FileKey4_AppData_RealRealPlayerWatchFolders.log
mov ecx, str.rand_pool_grow
mov dword [0x10028b7c], eax
call fcn.1000ad95
mov eax, dword [ebp - 0x14]
inc esi
pop ecx
mov cl, byte [ebp - 1]
mov byte [ebp + eax - 0x14c], cl
cmp esi, 0x100
jae 0x1000bea5
mov eax, dword [0x10028a28]
jmp 0x1000bdea
push 0x64
mov edx, 0xa35
mov eax, edi
pop ecx
add edx, ecx
lea eax, [eax + 2]
cmp edx, 0x2496
ja 0x1000bec5
movzx ecx, word [eax]
test ecx, ecx
jne 0x1000beaf
jmp 0x1000bede
call fcn.1000a3d5
mov eax, dword [0x10028b7c]
xor eax, 0xaaed4232
mov dword [0x10028a28], eax
call fcn.1000a6ec
mov esi, dword [0x10028b7c]
add esi, 0xad1ad26f
xor esi, 0xaaebce90
xor eax, eax
mov dword [ebp - 0x10], esi
mov edi, eax
mov dword [ebp - 8], eax
mov esi, eax
lea eax, [esi + 1]
movzx esi, al
mov eax, dword [ebp - 8]
push 4
mov cl, byte [ebp + esi - 0x14c]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [ebp - 8], eax
mov al, byte [ebp + eax - 0x14c]
mov byte [ebp + esi - 0x14c], al
mov eax, dword [ebp - 8]
mov byte [ebp + eax - 0x14c], cl
movzx eax, byte [ebp + esi - 0x14c]
add eax, edx
movzx eax, al
pop ecx
mov al, byte [ebp + eax - 0x14c]
xor al, byte [ebp + edi - 0x18]
mov byte [ebp + edi - 0x364], al
inc edi
cmp edi, ecx
jb 0x1000befc
xor eax, eax
mov dword [ebp - 0x1b8], ecx
mov byte [ebp - 0x360], al
mov edi, 0x13ce
mov dword [ebp - 0x1b4], 0x1f
mov dword [ebp - 0x1b0], 0x1225
mov esi, dword [ebp - 0x10]
and esi, 0x22c905ee
mov dword [0x10028a28], esi
imul eax, esi, 0xd9b849f8
mov dword [0x10028b7c], eax
call fcn.1000a3d5
xor ecx, ecx
mov eax, ecx
sub edi, dword [ebp + eax*4 - 0x1b8]
inc eax
cmp eax, 3
jl 0x1000bfa0
push 0x13
pop eax
mov dword [ebp - 0x380], edi
mov esi, str.NumOfIgnoredPrograms
push 5
pop ecx
lea edi, [ebp - 0x1d0]
mov dword [ebp - 0x4c], eax
rep movsd dword es:[edi], dword [esi]
mov byte [ebp - 0xc], al
mov word [ebp - 0xb], 0x32a0
movsb byte es:[edi], byte [esi]
mov ecx, dword [0x10028a28]
and ecx, 0x5985c1a1
mov edx, ecx
and edx, 0x82065146
xor eax, eax
mov dword [ebp - 8], eax
mov byte [ebp + eax - 0x14c], al
inc eax
cmp eax, 0x100
jb 0x1000bfec
push 0x75
and edx, 0xb6af54ee
mov esi, str.user_skip_uac
pop edi
lea eax, [edi - 0x30]
push 9
pop edi
cmp ax, di
ja 0x1000c023
add esi, 2
movzx eax, word [esi]
mov edi, eax
test ax, ax
jne 0x1000c009
jmp 0x1000c02b
mov ecx, edx
xor ecx, 0x40fb3e02
imul eax, ecx, 0x7f3fd6c2
xor ecx, ecx
mov edi, ecx
imul esi, eax, 0x9d496611
mov dword [0x10028b7c], esi
lea eax, [esi - 0x5e6a090b]
mov edx, 0xf50
push 0x64
mov dword [0x10028a28], eax
mov eax, 0x10021200
pop ecx
add edx, ecx
lea eax, [eax + 2]
cmp edx, 0x1c60
ja 0x1000c075
movzx ecx, word [eax]
test ecx, ecx
jne 0x1000c059
sub esi, 0x5fef9053
jmp 0x1000c085
mov ecx, str.SHA3_384
call fcn.1000ac51
mov esi, dword [0x10028b7c]
xor edx, edx
mov cl, byte [ebp + edi - 0x14c]
mov eax, edi
mov byte [ebp - 1], cl
div dword [ebp - 0x214]
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x1d0]
add eax, dword [ebp - 8]
add ecx, eax
movzx eax, cl
mov dword [ebp - 8], eax
mov eax, esi
xor eax, 0x43791142
mov dword [0x10028a28], eax
and esi, 0xf03232ac
mov dword [0x10028b7c], esi
call fcn.1000a6ec
xor ecx, ecx
mov eax, str.user_skip_uac
mov esi, ecx
inc esi
lea eax, [eax + 2]
cmp esi, 0x145f
jl 0x1000c0e8
cmp word [eax], cx
jne 0x1000c0d5
jmp 0x1000c108
mov edx, str.setct_CertInqReqTBS
mov ecx, str._SecureLineSecuredConnectionTimeLastThirtyDays
call fcn.10009e63
and dword [0x10028a28], 0x8d6ef928
push 0xa
pop eax
cmp esi, eax
jle 0x1000c117
mov edx, str.user_skip_uac
mov ecx, str.bn_decode_error
call fcn.10009dd4
mov eax, dword [0x10028b7c]
mov edx, str.user_skip_uac
xor eax, 0x25c97712
mov ecx, str.SpecialKey1N_OPERA_HISTORY
push str.providerbase_fipsyes_outputpem_structuredsa
push str._SecureLineSecuredConnectionTimeLastThirtyDays
mov dword [0x10028a28], eax
call fcn.1000a120
pop ecx
pop ecx
mov ecx, dword [ebp - 8]
mov al, byte [ebp + ecx - 0x14c]
mov byte [ebp + edi - 0x14c], al
inc edi
mov al, byte [ebp - 1]
mov byte [ebp + ecx - 0x14c], al
cmp edi, 0x100
jae 0x1000c16f
mov eax, dword [0x10028a28]
jmp 0x1000c035
xor eax, eax
mov dword [ebp - 8], eax
mov edi, eax
mov esi, eax
lea eax, [edi + 1]
movzx edi, al
mov eax, dword [ebp - 8]
mov cl, byte [ebp + edi - 0x14c]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [ebp - 8], eax
mov al, byte [ebp + eax - 0x14c]
mov byte [ebp + edi - 0x14c], al
mov eax, dword [ebp - 8]
mov byte [ebp + eax - 0x14c], cl
movzx eax, byte [ebp + edi - 0x14c]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x14c]
xor al, byte [ebp + esi - 0xc]
mov byte [ebp + esi - 0x28c], al
inc esi
cmp esi, 3
jb 0x1000c178
mov esi, str.n_tZlDvLx
mov dword [ebp - 0x18], 0xe5c29fa7
lea edi, [ebp - 0x184]
xor eax, eax
push 0x2d
mov byte [ebp - 0x289], al
movsd dword es:[edi], dword [esi]
mov dword [ebp - 8], eax
pop eax
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov edi, str._SecureLineSecuredConnectionTimeLastThirtyDays
mov esi, eax
mov edx, edi
push 9
pop ecx
lea eax, [esi - 0x30]
cmp ax, cx
mov ecx, dword [0x10028a28]
ja 0x1000c21d
add edx, 2
movzx eax, word [edx]
mov esi, eax
test ax, ax
jne 0x1000c1fd
jmp 0x1000c229
mov eax, ecx
xor eax, 0x9cdb9bfc
mov dword [0x10028b7c], eax
sub ecx, 0x3b810394
mov edx, edi
mov dword [0x10028a28], ecx
mov ecx, str._silent:stub_loading_progress
call fcn.10009dd4
xor edx, edx
mov ecx, str.user_skip_uac
mov eax, edx
inc eax
lea ecx, [ecx + 2]
cmp eax, 0x1850
je 0x1000c269
cmp word [ecx], dx
jne 0x1000c24a
cmp eax, 0x15a5
jle 0x1000c28b
mov edx, dword [0x10028b7c]
jmp 0x1000c27b
mov edx, dword [0x10028b7c]
and edx, 0x79926933
mov dword [0x10028b7c], edx
push edx
push edi
mov ecx, 0x10021200
call fcn.1000a813
pop ecx
pop ecx
xor edx, edx
mov esi, dword [0x10028a28]
mov eax, edx
or esi, 0x73b41060
mov byte [ebp + eax - 0x14c], al
inc eax
cmp eax, 0x100
jb 0x1000c299
mov edi, edx
mov dword [ebp - 0x1c], 0x31
xor edx, edx
mov cl, byte [ebp + edi - 0x14c]
mov eax, edi
mov byte [ebp - 1], cl
div dword [ebp - 0x48]
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x184]
add eax, dword [ebp - 8]
add ecx, eax
imul edx, esi, 0x7335e500
movzx eax, cl
mov dword [ebp - 8], eax
xor eax, eax
mov ecx, eax
mov eax, str._SecureLineSecuredConnectionTimeLastThirtyDays
mov dword [ebp - 0x10], edx
inc ecx
lea eax, [eax + 2]
cmp ecx, 0x257
jg 0x1000c302
xor edx, edx
cmp word [eax], dx
mov edx, dword [ebp - 0x10]
jne 0x1000c2ea
jmp 0x1000c30a
mov esi, edx
and esi, 0x5200e137
or esi, 0xbd6211be
mov dword [0x10028a28], esi
mov eax, esi
mov edx, 0x18b7
xor eax, 0xd809a5f1
push 0x2d
mov dword [0x10028b7c], eax
mov eax, str._SecureLineSecuredConnectionTimeLastThirtyDays
pop ecx
add edx, ecx
lea eax, [eax + 2]
push 0x31
pop ecx
cmp edx, ecx
ja 0x1000c344
movzx ecx, word [eax]
test ecx, ecx
jne 0x1000c32f
jmp 0x1000c35f
push str.user_skip_uac
mov edx, str.Token_missing.
mov ecx, str.BillingSubscriptionMode
call fcn.1000ad95
mov esi, dword [0x10028a28]
pop ecx
mov ecx, dword [ebp - 8]
mov al, byte [ebp + ecx - 0x14c]
mov byte [ebp + edi - 0x14c], al
inc edi
mov al, byte [ebp - 1]
mov byte [ebp + ecx - 0x14c], al
cmp edi, 0x100
jb 0x1000c2b1
xor ecx, ecx
mov dword [ebp - 8], ecx
mov eax, ecx
mov dword [ebp - 0x2c], ecx
inc eax
movzx edi, al
mov eax, dword [ebp - 8]
mov dword [ebp - 0x178], edi
push 0x54
mov cl, byte [ebp + edi - 0x14c]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [ebp - 8], eax
mov al, byte [ebp + eax - 0x14c]
mov byte [ebp + edi - 0x14c], al
lea edi, [esi + 0x330ce966]
mov eax, dword [ebp - 8]
sub esi, 0x28196e83
mov dword [0x10028a28], esi
mov dword [0x10028b7c], edi
mov byte [ebp + eax - 0x14c], cl
mov eax, dword [ebp - 0x178]
movzx eax, byte [ebp + eax - 0x14c]
add eax, edx
pop edx
movzx eax, al
push 0x2d
pop ecx
push 2
mov al, byte [ebp + eax - 0x14c]
mov byte [ebp - 1], al
mov eax, str._SecureLineSecuredConnectionTimeLastThirtyDays
pop esi
add edx, ecx
add eax, esi
cmp edx, 0x191a
ja 0x1000c420
movzx ecx, word [eax]
test ecx, ecx
jne 0x1000c40b
jmp 0x1000c448
mov eax, str.user_skip_uac
mov edx, edi
push eax
mov ecx, eax
call fcn.1000acf6
mov edi, dword [0x10028b7c]
pop ecx
add edi, 0x2fd834b0
or edi, 0xaa87448d
mov dword [0x10028b7c], edi
and edi, 0xd288ae7e
mov edx, str.DRIVERUPDATERREVERTDRIVERS
push 0x10021200
mov ecx, str._prototype
mov dword [0x10028a28], edi
call fcn.1000ad95
pop ecx
mov ecx, dword [ebp - 0x2c]
mov al, byte [ebp + ecx - 0x18]
xor al, byte [ebp - 1]
mov byte [ebp + ecx - 0x36c], al
inc ecx
mov dword [ebp - 0x2c], ecx
cmp ecx, 4
jae 0x1000c494
mov esi, dword [0x10028a28]
mov eax, dword [ebp - 0x178]
jmp 0x1000c391
xor eax, eax
mov dword [ebp - 0x188], esi
push 0x5a
mov byte [ebp - 0x368], al
pop ecx
mov dword [ebp - 0x184], 0x39
mov dword [ebp - 0x180], pe_nt_image_headers32
add ecx, dword [ebp + eax*4 - 0x188]
inc eax
cmp eax, 3
jl 0x1000c4b9
push 0xe
pop eax
push 0xc
mov byte [ebp - 0xa], al
lea edi, [ebp - 0x1ec]
pop eax
mov dword [ebp - 0x384], ecx
mov esi, str.._AUimage_filter_contrast_brightness_gamma_gool__
mov ecx, eax
mov dword [ebp - 0x3c], eax
rep movsd dword es:[edi], dword [esi]
push 0x2d
mov word [ebp - 0xc], 0x4b05
mov edx, 0x6d5
mov eax, str._SecureLineSecuredConnectionTimeLastThirtyDays
movsw word es:[edi], word [esi]
pop ecx
add edx, ecx
lea eax, [eax + 2]
cmp edx, 0x964
ja 0x1000c517
movzx ecx, word [eax]
test ecx, ecx
jne 0x1000c4fc
mov eax, dword [0x10028a28]
jmp 0x1000c521
mov eax, dword [0x10028a28]
sub eax, 0x77c92d9d
or eax, 0x5d7d0374
mov dword [ebp - 0x10], eax
xor ecx, ecx
mov edi, ecx
mov eax, ecx
mov byte [ebp + eax - 0x14c], al
inc eax
cmp eax, 0x100
jb 0x1000c52f
mov esi, ecx
xor edx, edx
mov cl, byte [ebp + esi - 0x14c]
mov eax, esi
mov byte [ebp - 1], cl
div dword [ebp - 0x1c]
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x1ec]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [ebp + edi - 0x14c]
mov byte [ebp + esi - 0x14c], al
inc esi
mov al, byte [ebp - 1]
mov byte [ebp + edi - 0x14c], al
cmp esi, 0x100
jb 0x1000c540
xor eax, eax
mov dword [ebp - 8], eax
mov edi, eax
mov esi, eax
lea eax, [edi + 1]
movzx edi, al
mov eax, dword [ebp - 8]
mov cl, byte [ebp + edi - 0x14c]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [ebp - 8], eax
mov al, byte [ebp + eax - 0x14c]
mov byte [ebp + edi - 0x14c], al
mov eax, dword [ebp - 8]
mov byte [ebp + eax - 0x14c], cl
movzx eax, byte [ebp + edi - 0x14c]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x14c]
xor al, byte [ebp + esi - 0xc]
mov byte [ebp + esi - 0x284], al
inc esi
cmp esi, 3
jb 0x1000c58d
push 0x31
pop eax
push 8
pop ecx
mov esi, str._tview.OnAction_oActionContext__
mov byte [ebp - 0x17], al
lea edi, [ebp - 0x1d8]
mov byte [ebp - 0x18], 0x70
rep movsd dword es:[edi], dword [esi]
mov esi, dword [ebp - 0x10]
xor edx, edx
add esi, 0xe4d26b17
mov byte [ebp - 0x281], dl
xor esi, 0x5384f6e7
mov word [ebp - 0x16], 0x2cd4
mov dword [ebp - 8], edx
mov eax, edx
lea ecx, [esi - 0x37781300]
mov byte [ebp + eax - 0x14c], al
inc eax
cmp eax, 0x100
jb 0x1000c627
mov dword [ebp - 0x2c], ecx
mov edi, edx
mov dword [0x10028a28], ecx
xor edx, edx
mov cl, byte [ebp + edi - 0x14c]
mov eax, edi
mov byte [ebp - 1], cl
div dword [ebp - 0x1b4]
movzx ecx, cl
push 0x75
movzx eax, byte [ebp + edx - 0x1d8]
add eax, dword [ebp - 8]
add ecx, eax
movzx eax, cl
mov ecx, str.user_skip_uac
mov dword [ebp - 8], eax
pop edx
lea eax, [edx - 0x30]
push 9
pop edx
cmp ax, dx
ja 0x1000c68d
add ecx, 2
movzx eax, word [ecx]
mov edx, eax
test ax, ax
jne 0x1000c673
jmp 0x1000c696
mov esi, dword [ebp - 0x2c]
and esi, 0x186c0288
and esi, 0x94481a9f
mov ecx, str.cryptoprovider_core.c
mov dword [0x10028b7c], esi
mov esi, str._SecureLineSecuredConnectionTimeLastThirtyDays
push str._s_exceeds_name_buffer_length
push esi
mov edx, esi
call fcn.1000a120
pop ecx
pop ecx
xor edx, edx
mov eax, 0x10021200
mov ecx, edx
inc ecx
lea eax, [eax + 2]
cmp ecx, 0x1bbc
jg 0x1000c6d7
cmp word [eax], dx
jne 0x1000c6c4
jmp 0x1000c6e6
mov edx, str.L__USVWAVAW
mov ecx, str.PreviousVersion
call fcn.1000a779
mov eax, dword [0x10028a28]
and eax, 0xffd7f7ef
or eax, 0x57d4a786
mov dword [0x10028b7c], eax
call fcn.10009ca1
mov ecx, dword [ebp - 8]
mov al, byte [ebp + ecx - 0x14c]
mov byte [ebp + edi - 0x14c], al
inc edi
mov al, byte [ebp - 1]
mov byte [ebp + ecx - 0x14c], al
cmp edi, 0x100
jae 0x1000c736
mov eax, dword [0x10028a28]
mov esi, dword [0x10028b7c]
mov dword [ebp - 0x2c], eax
jmp 0x1000c641
xor eax, eax
mov edi, 0x10021200
push 0x64
mov dword [ebp - 8], eax
mov edx, 0x2602
mov eax, edi
pop ecx
add edx, ecx
lea eax, [eax + 2]
cmp edx, 0x1267
ja 0x1000c771
movzx ecx, word [eax]
test ecx, ecx
jne 0x1000c74a
mov edx, dword [0x10028b7c]
mov eax, dword [0x10028a28]
xor edx, 0xd1ca5b3d
jmp 0x1000c789
call fcn.10009eda
mov edx, dword [0x10028a28]
or edx, 0x1beb950d
mov eax, edx
xor eax, 0x891f333e
mov dword [0x10028b7c], edx
add eax, 0x6dcbf088
mov ecx, edi
push esi
mov dword [0x10028a28], eax
call fcn.1000acf6
mov edi, dword [0x10028b7c]
mov dword [ebp - 0x28], edi
and edi, 0xa1ab2654
xor eax, eax
mov dword [ebp - 0x1c], edi
mov dword [0x10028a28], edi
mov esi, eax
pop ecx
mov edi, eax
lea eax, [esi + 1]
movzx esi, al
mov eax, dword [ebp - 8]
mov cl, byte [ebp + esi - 0x14c]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [ebp - 8], eax
mov al, byte [ebp + eax - 0x14c]
mov byte [ebp + esi - 0x14c], al
mov eax, dword [ebp - 8]
mov byte [ebp + eax - 0x14c], cl
movzx eax, byte [ebp + esi - 0x14c]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x14c]
xor al, byte [ebp + edi - 0x18]
mov byte [ebp + edi - 0x2a4], al
inc edi
cmp edi, 4
jb 0x1000c7c0
mov esi, dword [ebp - 0x1c]
xor eax, eax
mov edi, dword [ebp - 0x28]
mov byte [ebp - 0x2a0], al
mov dword [ebp - 0x178], 0x8b2
mov dword [ebp - 0x1cc], 0x36
mov dword [ebp - 0x1c8], 0x5a
mov dword [ebp - 0x1c4], 0x61
mov dword [ebp - 0x1c0], 0x5e
mov dword [ebp - 0x1bc], 0x625
mov dword [ebp - 0x2c], eax
push 0x64
mov ecx, 0x10021200
pop edx
lea eax, [edx - 0x30]
push 9
pop edx
cmp ax, dx
ja 0x1000c887
add ecx, 2
movzx eax, word [ecx]
mov edx, eax
test ax, ax
jne 0x1000c86d
jmp 0x1000c88d
imul edi, esi, 0x494077bc
and edi, 0xebb50b28
mov dword [0x10028b7c], edi
call fcn.10009fb7
mov eax, dword [ebp - 0x2c]
mov esi, dword [0x10028a28]
mov ecx, dword [ebp - 0x178]
add esi, 0x2f582ef8
mov dword [0x10028a28], esi
sub ecx, dword [ebp + eax*4 - 0x1cc]
inc eax
mov dword [ebp - 0x178], ecx
mov dword [ebp - 0x2c], eax
cmp eax, 5
jge 0x1000c8d7
mov edi, dword [0x10028b7c]
jmp 0x1000c865
push 0x21
pop eax
push 6
pop ecx
mov esi, str.Tiger_At_WorkTigerVPN
mov dword [ebp - 0x44], eax
lea edi, [ebp - 0x1d0]
mov byte [ebp - 0xc], al
rep movsd dword es:[edi], dword [esi]
xor ecx, ecx
mov word [ebp - 0xb], 0xe23a
mov edi, ecx
mov eax, ecx
mov byte [ebp + eax - 0x14c], al
inc eax
cmp eax, 0x100
jb 0x1000c8fc
mov esi, ecx
mov dword [ebp - 0x10], 0x17
xor edx, edx
mov cl, byte [ebp + esi - 0x14c]
mov eax, esi
mov byte [ebp - 1], cl
div dword [ebp - 0x10]
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x1d0]
add eax, edi
add ecx, eax
imul eax, dword [0x10028b7c], 0x59d841de
xor edx, edx
movzx edi, cl
mov dword [ebp - 8], edx
mov edx, str.user_skip_uac
mov dword [0x10028a28], eax
inc dword [ebp - 8]
lea edx, [edx + 2]
cmp dword [ebp - 8], 0x1054
jg 0x1000c96e
xor ecx, ecx
cmp word [edx], cx
mov ecx, dword [0x10028b7c]
jne 0x1000c950
jmp 0x1000c985
mov ecx, str._tvar_scrollPos__view.getDriverTableScroll___
call fcn.1000ac51
mov ecx, dword [0x10028b7c]
mov eax, ecx
or eax, 0x694ce08a
or eax, 0x24f35c9e
mov dword [0x10028a28], eax
imul eax, ecx, 0xbd455836
mov dword [0x10028b7c], eax
call fcn.1000aa34
mov al, byte [ebp + edi - 0x14c]
mov byte [ebp + esi - 0x14c], al
inc esi
mov al, byte [ebp - 1]
mov byte [ebp + edi - 0x14c], al
cmp esi, 0x100
jb 0x1000c914
xor eax, eax
mov dword [ebp - 8], eax
mov edi, eax
mov esi, eax
mov eax, dword [0x10028a28]
and eax, 0xc9f09187
mov dword [ebp - 0x2c], eax
mov dword [0x10028b7c], eax
lea eax, [edi + 1]
movzx edi, al
mov eax, dword [ebp - 8]
mov cl, byte [ebp + edi - 0x14c]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [ebp - 8], eax
mov al, byte [ebp + eax - 0x14c]
mov byte [ebp + edi - 0x14c], al
mov eax, dword [ebp - 8]
mov byte [ebp + eax - 0x14c], cl
movzx eax, byte [ebp + edi - 0x14c]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x14c]
xor al, byte [ebp + esi - 0xc]
mov byte [ebp + esi - 0x280], al
inc esi
cmp esi, 3
jb 0x1000c9df
push 0x14
pop eax
push 6
pop ecx
mov esi, str.._AVCOptionsCookiesCtrl__
mov byte [ebp - 0xc], al
lea edi, [ebp - 0x1d4]
mov word [ebp - 0xb], 0x367d
rep movsd dword es:[edi], dword [esi]
xor edx, edx
mov byte [ebp - 9], 0xe2
mov byte [ebp - 0x27d], dl
mov ecx, edx
mov eax, 0x10021200
movsw word es:[edi], word [esi]
inc ecx
lea eax, [eax + 2]
cmp ecx, 0x1b37
jg 0x1000ca7e
cmp word [eax], dx
jne 0x1000ca68
mov ecx, dword [ebp - 0x2c]
jmp 0x1000ca8b
call fcn.10009eda
mov ecx, dword [0x10028b7c]
xor edx, edx
xor ecx, 0xfff8720c
mov edi, edx
mov dword [ebp - 0x2c], edi
mov eax, ecx
and eax, 0x5edba144
mov esi, 0x10021200
push 0x64
mov dword [0x10028b7c], eax
pop eax
add eax, 0xffffffd0
cmp ax, word [ebp - 0x48]
ja 0x1000cac6
mov edi, dword [ebp - 0x2c]
add esi, 2
movzx eax, word [esi]
mov dword [ebp - 0x1c], eax
test ax, ax
jne 0x1000caaa
jmp 0x1000cacc
add ecx, 0x1c5c123e
sub ecx, 0x6a835c96
mov byte [ebp + edx - 0x14c], dl
inc edx
mov eax, ecx
cmp edx, 0x100
jb 0x1000ca98
push 0x75
mov esi, 0x1d38
mov eax, str.user_skip_uac
pop edx
add esi, edx
lea eax, [eax + 2]
cmp esi, 0x1933
ja 0x1000cb07
movzx edx, word [eax]
test edx, edx
jne 0x1000caf1
jmp 0x1000cb2e
sub ecx, 0x5e17f70c
mov edx, str.File_size
mov dword [0x10028a28], ecx
mov ecx, str._program_files_
push 0x10021200
call fcn.1000ad95
pop ecx
mov ecx, dword [0x10028a28]
sub ecx, 0x3634992f
mov dword [0x10028a28], ecx
imul eax, dword [0x10028b7c], 0x7a14aff4
mov dword [0x10028b7c], eax
call fcn.1000aa34
xor eax, eax
mov dword [ebp - 0x1c], 0x19
mov esi, eax
xor edx, edx
mov cl, byte [ebp + esi - 0x14c]
mov eax, esi
mov byte [ebp - 1], cl
div dword [ebp - 0x1c]
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x1d4]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [ebp + edi - 0x14c]
mov byte [ebp + esi - 0x14c], al
inc esi
mov al, byte [ebp - 1]
mov byte [ebp + edi - 0x14c], al
cmp esi, 0x100
jb 0x1000cb59
mov esi, dword [0x10028b7c]
xor eax, eax
and esi, 0xa8c20514
mov dword [ebp - 8], eax
mov dword [ebp - 0x18], esi
mov edi, eax
mov esi, eax
lea eax, [esi + 1]
movzx esi, al
mov eax, dword [ebp - 8]
mov cl, byte [ebp + esi - 0x14c]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [ebp - 8], eax
mov al, byte [ebp + eax - 0x14c]
mov byte [ebp + esi - 0x14c], al
mov eax, dword [ebp - 8]
mov byte [ebp + eax - 0x14c], cl
movzx eax, byte [ebp + esi - 0x14c]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x14c]
xor al, byte [ebp + edi - 0xc]
mov byte [ebp + edi - 0x2ac], al
inc edi
cmp edi, 4
jb 0x1000cbb5
mov esi, dword [ebp - 0x18]
xor eax, eax
push 0x2d
mov byte [ebp - 0x2a8], al
xor esi, 0x5600152e
mov dword [ebp - 0x164], 0x64
mov edx, 0x824
mov dword [ebp - 0x160], 0x61
mov eax, str._SecureLineSecuredConnectionTimeLastThirtyDays
mov dword [ebp - 0x15c], 0x30
mov dword [ebp - 0x158], 0x74
pop ecx
add edx, ecx
lea eax, [eax + 2]
cmp edx, 0x708
ja 0x1000cc69
movzx ecx, word [eax]
test ecx, ecx
jne 0x1000cc53
jmp 0x1000cc6f
sub esi, 0x173214d5
and esi, 0xc54f844a
mov dword [0x10028b7c], esi
movups xmm1, xmmword [ebp - 0x164]
and esi, 0xb6c84368
mov word [ebp - 0xc], 0x5923
mov dword [ebp - 0x18], esi
lea edi, [ebp - 0x1e4]
movaps xmm0, xmm1
mov dword [0x10028a28], esi
psrldq xmm0, 8
mov esi, str.._AULifDynamicDataBase_lif_framework_asw__
paddd xmm1, xmm0
mov byte [ebp - 0xa], 0xb0
movups xmm0, xmm1
psrldq xmm0, 4
paddd xmm1, xmm0
movd eax, xmm1
push 0xa
pop ecx
add eax, ecx
xor edx, edx
rep movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x388], eax
mov ecx, edx
mov eax, str._SecureLineSecuredConnectionTimeLastThirtyDays
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
inc ecx
lea eax, [eax + 2]
cmp ecx, 0x107a
jg 0x1000ccf1
cmp word [eax], dx
jne 0x1000ccdb
mov esi, dword [ebp - 0x18]
jmp 0x1000cd0d
call fcn.10009fb7
mov esi, dword [0x10028a28]
sub esi, 0x173856a2
xor edx, edx
mov dword [ebp - 0x18], esi
mov dword [0x10028a28], esi
or esi, 0xcab63cf8
mov dword [ebp - 0x2c], edx
mov dword [0x10028b7c], esi
mov eax, edx
mov byte [ebp + eax - 0x14c], al
inc eax
cmp eax, 0x100
jb 0x1000cd1e
mov esi, dword [ebp - 0x2c]
mov edi, edx
xor edx, edx
mov dword [ebp - 0x2c], 0x2a
mov eax, edi
mov cl, byte [ebp + edi - 0x14c]
div dword [ebp - 0x2c]
mov byte [ebp - 1], cl
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x1e4]
add eax, esi
add ecx, eax
movzx esi, cl
mov al, byte [ebp + esi - 0x14c]
mov byte [ebp + edi - 0x14c], al
inc edi
mov al, byte [ebp - 1]
mov byte [ebp + esi - 0x14c], al
cmp edi, 0x100
jb 0x1000cd32
mov esi, dword [ebp - 0x18]
xor eax, eax
mov edx, eax
mov ecx, eax
mov edi, eax
lea eax, [ecx + 1]
mov dword [ebp - 0x2c], 0x1e08
movzx ecx, al
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x28], 0x64
mov al, byte [ebp + ecx - 0x14c]
mov byte [ebp - 1], al
movzx eax, al
mov dword [ebp - 0x18], eax
add eax, edx
movzx edx, al
mov dword [ebp - 8], edx
mov al, byte [ebp + edx - 0x14c]
mov byte [ebp + ecx - 0x14c], al
mov eax, 0x10021200
mov ecx, dword [ebp - 0x2c]
lea eax, [eax + 2]
add ecx, dword [ebp - 0x28]
mov dword [ebp - 0x2c], ecx
cmp ecx, 0x17e3
mov ecx, dword [ebp - 0x14]
ja 0x1000cdf0
movzx edx, word [eax]
mov dword [ebp - 0x28], edx
test edx, edx
mov edx, dword [ebp - 8]
jne 0x1000cdca
jmp 0x1000ce1a
call fcn.1000a27c
or dword [0x10028a28], 0xcb265d82
mov edx, str.Invalid_endpoints_in_OpenID_Discovery_document:__s
mov ecx, str.user_skip_uac
call fcn.10009e63
mov esi, dword [0x10028a28]
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 8]
mov al, byte [ebp - 1]
xor esi, 0xfbd28bac
mov byte [ebp + edx - 0x14c], al
imul eax, esi, 0x19d788da
xor esi, 0xd4582e0e
mov dword [0x10028a28], esi
mov dword [0x10028b7c], eax
movzx eax, byte [ebp + ecx - 0x14c]
add eax, dword [ebp - 0x18]
movzx eax, al
mov al, byte [ebp + eax - 0x14c]
xor al, byte [ebp + edi - 0xc]
mov byte [ebp + edi - 0x26c], al
inc edi
cmp edi, 3
jb 0x1000cd88
push 0xe
pop eax
xor edx, edx
mov byte [ebp - 9], al
mov byte [ebp - 0x269], dl
mov ecx, edx
mov word [ebp - 0xc], 0x74bf
mov eax, 0x10021200
mov byte [ebp - 0xa], 2
inc ecx
lea eax, [eax + 2]
cmp ecx, 0x4a8
jg 0x1000ce9d
cmp word [eax], dx
jne 0x1000ce8a
jmp 0x1000cea9
mov esi, dword [0x10028b7c]
add esi, 0x2e649050
lea eax, [esi + 0x7f839f7a]
mov dword [0x10028b7c], eax
and esi, 0x190ff148
mov edx, str.user_skip_uac
mov ecx, esi
mov dword [0x10028a28], esi
call fcn.1000a253
mov esi, str.threedshadow
lea edi, [ebp - 0x188]
xor ecx, ecx
mov eax, ecx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov byte [ebp + eax - 0x14c], al
inc eax
cmp eax, 0x100
jb 0x1000cedf
mov esi, dword [0x10028b7c]
mov edi, ecx
and esi, 0x18998c4
mov dword [ebp - 0x28], esi
mov dword [0x10028a28], esi
mov esi, ecx
xor edx, edx
mov cl, byte [ebp + edi - 0x14c]
mov eax, edi
mov byte [ebp - 1], cl
div dword [ebp - 0x3c]
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x188]
add eax, esi
add ecx, eax
movzx esi, cl
mov al, byte [ebp + esi - 0x14c]
mov byte [ebp + edi - 0x14c], al
inc edi
mov al, byte [ebp - 1]
mov byte [ebp + esi - 0x14c], al
cmp edi, 0x100
jb 0x1000cf07
mov esi, dword [ebp - 0x28]
xor eax, eax
push 0x2d
mov dword [ebp - 8], eax
mov ecx, str._SecureLineSecuredConnectionTimeLastThirtyDays
mov dword [ebp - 0x18], eax
pop eax
mov edx, eax
lea eax, [edx - 0x30]
push 9
pop edx
cmp ax, dx
ja 0x1000cf7a
add ecx, 2
movzx eax, word [ecx]
mov edx, eax
test ax, ax
jne 0x1000cf60
jmp 0x1000cf8c
mov esi, dword [0x10028b7c]
xor esi, 0x96c0f02a
mov dword [0x10028a28], esi
xor esi, 0x28bb7313
mov ecx, str.MojoMessages
mov dword [0x10028b7c], esi
call fcn.1000ac51
mov esi, dword [0x10028a28]
xor eax, eax
mov edi, eax
mov eax, dword [ebp - 0x18]
mov edx, str._SecureLineSecuredConnectionTimeLastThirtyDays
inc eax
movzx ecx, al
push 0x2d
mov dword [ebp - 0x18], ecx
pop eax
add eax, 0xffffffd0
cmp ax, word [ebp - 0x48]
ja 0x1000cfda
mov ecx, dword [ebp - 0x18]
add edx, 2
movzx eax, word [edx]
mov dword [ebp - 0x2c], eax
test ax, ax
jne 0x1000cfbe
jmp 0x1000cfe0
add esi, 0x777b917e
mov cl, byte [ebp + ecx - 0x14c]
mov eax, dword [ebp - 8]
movzx edx, cl
add eax, edx
mov dword [ebp - 0x2c], edx
movzx eax, al
mov dword [ebp - 8], eax
mov al, byte [ebp + eax - 0x14c]
and esi, 0x1380020
mov edx, dword [ebp - 0x18]
or esi, 0xe005f703
mov byte [ebp + edx - 0x14c], al
mov eax, dword [ebp - 8]
mov byte [ebp + eax - 0x14c], cl
mov eax, edx
movzx eax, byte [ebp + eax - 0x14c]
add eax, dword [ebp - 0x2c]
movzx eax, al
mov al, byte [ebp + eax - 0x14c]
xor al, byte [ebp + edi - 0xc]
mov byte [ebp + edi - 0x2b4], al
inc edi
cmp edi, 4
jb 0x1000cfac
push 0x5f
pop ecx
push 0x17
pop eax
xor edx, edx
mov dword [ebp - 0x158], eax
mov byte [ebp - 0x2b0], dl
mov eax, edx
mov dword [ebp - 0x164], 0x44
mov dword [ebp - 0x160], 0x36
mov dword [ebp - 0x15c], 0x51
add ecx, dword [ebp + eax*4 - 0x164]
inc eax
cmp eax, 4
jl 0x1000d07f
sub esi, 0x25515af2
mov dword [ebp - 0x38c], ecx
mov dword [ebp - 0x2c], esi
lea edi, [ebp - 0x188]
mov dword [0x10028a28], esi
mov esi, str.update_error
push 0xb
pop eax
mov byte [ebp - 0xa], al
mov eax, edx
movsd dword es:[edi], dword [esi]
mov word [ebp - 0xc], 0x26c5
mov dword [ebp - 8], edx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov byte [ebp + eax - 0x14c], al
inc eax
cmp eax, 0x100
jb 0x1000d0c1
mov esi, dword [ebp - 0x2c]
mov edi, edx
xor edx, edx
mov cl, byte [ebp + edi - 0x14c]
mov eax, edi
mov byte [ebp - 1], cl
div dword [ebp - 0x3c]
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x188]
add eax, dword [ebp - 8]
add ecx, eax
imul edx, esi, 0xf35e854a
movzx eax, cl
mov ecx, 0x10021200
mov dword [ebp - 8], eax
xor eax, eax
mov dword [0x10028b7c], edx
inc eax
lea ecx, [ecx + 2]
cmp eax, 0xb87
jl 0x1000d13b
xor edx, edx
cmp word [ecx], dx
mov edx, dword [0x10028b7c]
jne 0x1000d10f
cmp eax, 0xc66
jle 0x1000d15c
call fcn.10009eda
mov esi, dword [0x10028a28]
jmp 0x1000d15c
push str.Thread_was_killed
push edx
mov ecx, esi
call fcn.10009dac
mov esi, dword [0x10028b7c]
pop ecx
add esi, 0xa5f694be
pop ecx
mov dword [0x10028a28], esi
and esi, 0x410744a0
mov dword [0x10028b7c], esi
call fcn.10009fb7
mov ecx, dword [ebp - 8]
mov al, byte [ebp + ecx - 0x14c]
mov byte [ebp + edi - 0x14c], al
inc edi
mov al, byte [ebp - 1]
mov byte [ebp + ecx - 0x14c], al
cmp edi, 0x100
jae 0x1000d19c
mov esi, dword [0x10028a28]
jmp 0x1000d0d5
xor eax, eax
mov dword [ebp - 8], eax
mov edi, eax
mov esi, eax
lea eax, [edi + 1]
movzx edi, al
mov eax, dword [ebp - 8]
mov cl, byte [ebp + edi - 0x14c]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [ebp - 8], eax
mov al, byte [ebp + eax - 0x14c]
mov byte [ebp + edi - 0x14c], al
mov eax, dword [ebp - 8]
mov byte [ebp + eax - 0x14c], cl
movzx eax, byte [ebp + edi - 0x14c]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x14c]
mov byte [ebp - 1], al
mov ecx, dword [0x10028a28]
mov edx, 0x10021200
mov eax, ecx
and eax, 0xfe80dbb0
mov dword [0x10028b7c], eax
call fcn.1000a253
mov al, byte [ebp + esi - 0xc]
xor al, byte [ebp - 1]
mov byte [ebp + esi - 0x288], al
inc esi
cmp esi, 3
jb 0x1000d1a5
push 5
pop ecx
mov esi, str.evp_pkey_get0_DH_int
mov dword [ebp - 0x18], 0xe54befb7
lea edi, [ebp - 0x1d0]
xor eax, eax
rep movsd dword es:[edi], dword [esi]
mov byte [ebp - 0x285], al
movsb byte es:[edi], byte [esi]
mov esi, dword [0x10028a28]
mov ecx, esi
or ecx, 0x340fb6f3
mov dword [ebp - 0x3c], eax
mov dword [0x10028b7c], ecx
mov byte [ebp + eax - 0x14c], al
inc eax
cmp eax, 0x100
jb 0x1000d256
push 0x64
mov edx, 0x10021200
pop edi
lea eax, [edi - 0x30]
push 9
pop edi
cmp ax, di
ja 0x1000d287
add edx, 2
movzx eax, word [edx]
mov edi, eax
test ax, ax
jne 0x1000d26d
jmp 0x1000d28d
lea esi, [ecx + 0x6990ca6f]
xor esi, 0xf76feeff
and esi, 0x3ab21b52
xor eax, eax
mov dword [ebp - 0x2c], esi
mov edi, eax
mov dword [0x10028a28], esi
xor edx, edx
mov cl, byte [ebp + edi - 0x14c]
mov eax, edi
mov byte [ebp - 1], cl
div dword [ebp - 0x214]
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x1d0]
add eax, dword [ebp - 0x3c]
add ecx, eax
movzx ecx, cl
mov dword [ebp - 0x3c], ecx
mov al, byte [ebp + ecx - 0x14c]
mov byte [ebp + edi - 0x14c], al
inc edi
mov al, byte [ebp - 1]
mov byte [ebp + ecx - 0x14c], al
cmp edi, 0x100
jb 0x1000d2a6
xor eax, eax
mov dword [ebp - 8], eax
mov esi, eax
mov edi, eax
lea eax, [esi + 1]
movzx esi, al
mov eax, dword [ebp - 8]
mov cl, byte [ebp + esi - 0x14c]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [ebp - 8], eax
mov al, byte [ebp + eax - 0x14c]
mov byte [ebp + esi - 0x14c], al
mov eax, dword [ebp - 8]
mov byte [ebp + eax - 0x14c], cl
movzx eax, byte [ebp + esi - 0x14c]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x14c]
xor al, byte [ebp + edi - 0x18]
mov byte [ebp + edi - 0x2bc], al
inc edi
cmp edi, 4
jb 0x1000d2fa
mov esi, dword [ebp - 0x2c]
xor eax, eax
push 0x2d
mov byte [ebp - 0x2b8], al
mov edi, 0xc20
mov dword [ebp - 0x1cc], 0x57
mov edx, 0x1e7b
mov dword [ebp - 0x1c8], 0x30
mov eax, str._SecureLineSecuredConnectionTimeLastThirtyDays
mov dword [ebp - 0x1c4], 0x4d
mov dword [ebp - 0x1c0], 0x54
mov dword [ebp - 0x1bc], 0x974
pop ecx
add edx, ecx
lea eax, [eax + 2]
cmp edx, 0xed6
ja 0x1000d3b7
movzx ecx, word [eax]
test ecx, ecx
jne 0x1000d3a1
jmp 0x1000d3cc
mov edx, str.MustBeInt
mov ecx, str.user_skip_uac
call fcn.10009e63
mov esi, dword [0x10028a28]
mov eax, esi
mov edx, esi
xor eax, 0xcf6f78ef
push eax
mov dword [0x10028b7c], eax
mov eax, str._SecureLineSecuredConnectionTimeLastThirtyDays
push eax
mov ecx, eax
call fcn.1000a813
pop ecx
xor edx, edx
pop ecx
mov eax, edx
sub edi, dword [ebp + eax*4 - 0x1cc]
inc eax
cmp eax, 5
jl 0x1000d3ee
mov dword [ebp - 0x394], edi
mov esi, str._mixin_STD_BUTTON_NORMAL
push 6
pop ecx
lea edi, [ebp - 0x1d4]
mov word [ebp - 0xc], 0xdf36
rep movsd dword es:[edi], dword [esi]
mov byte [ebp - 0xa], 0x81
mov eax, edx
mov dword [ebp - 8], edx
movsw word es:[edi], word [esi]
mov byte [ebp + eax - 0x14c], al
inc eax
cmp eax, 0x100
jb 0x1000d422
mov esi, dword [0x10028b7c]
mov edi, edx
xor edx, edx
mov cl, byte [ebp + edi - 0x14c]
mov eax, edi
mov byte [ebp - 1], cl
div dword [ebp - 0x1c]
movzx ecx, cl
push 0x64
movzx eax, byte [ebp + edx - 0x1d4]
add eax, dword [ebp - 8]
add ecx, eax
movzx eax, cl
mov ecx, 0x10021200
mov dword [ebp - 8], eax
pop edx
mov al, byte [ebp + eax - 0x14c]
mov byte [ebp + edi - 0x14c], al
lea eax, [edx - 0x30]
push 9
pop edx
cmp ax, dx
ja 0x1000d490
add ecx, 2
movzx eax, word [ecx]
mov edx, eax
test ax, ax
jne 0x1000d476
jmp 0x1000d49c
add esi, 0x3cc25122
mov dword [0x10028b7c], esi
mov eax, dword [ebp - 8]
mov edx, esi
mov cl, byte [ebp - 1]
and edx, 0x70ef4302
inc edi
mov dword [0x10028a28], edx
mov byte [ebp + eax - 0x14c], cl
cmp edi, 0x100
jb 0x1000d439
xor ecx, ecx
mov dword [ebp - 0x18], esi
mov dword [ebp - 8], ecx
mov eax, ecx
mov edi, ecx
inc eax
movzx eax, al
mov dword [ebp - 0x14], eax
mov cl, byte [ebp + eax - 0x14c]
mov eax, dword [ebp - 8]
movzx esi, cl
add eax, esi
mov dword [ebp - 0x3c], esi
mov esi, dword [ebp - 0x14]
movzx eax, al
mov dword [ebp - 8], eax
mov al, byte [ebp + eax - 0x14c]
mov byte [ebp + esi - 0x14c], al
mov eax, dword [ebp - 8]
mov byte [ebp + eax - 0x14c], cl
xor eax, eax
mov ecx, str._SecureLineSecuredConnectionTimeLastThirtyDays
inc eax
lea ecx, [ecx + 2]
cmp eax, 0xdaf
jg 0x1000d52f
xor esi, esi
cmp word [ecx], si
mov esi, dword [ebp - 0x18]
jne 0x1000d511
cmp eax, 0xa10
jle 0x1000d54b
jmp 0x1000d53a
call fcn.1000a95d
mov edx, dword [0x10028a28]
mov esi, edx
and esi, 0xd7825bf7
mov dword [ebp - 0x18], esi
mov dword [0x10028b7c], esi
mov eax, dword [ebp - 0x14]
imul edx, esi, 0xc1873930
movzx eax, byte [ebp + eax - 0x14c]
add eax, dword [ebp - 0x3c]
movzx eax, al
mov dword [0x10028a28], edx
mov al, byte [ebp + eax - 0x14c]
xor al, byte [ebp + edi - 0xc]
mov byte [ebp + edi - 0x238], al
inc edi
mov eax, dword [ebp - 0x14]
cmp edi, 3
jb 0x1000d4d0
push 0x21
pop ecx
mov byte [ebp - 0xc], cl
lea edi, [ebp - 0x1d0]
push 5
pop ecx
mov esi, str.evp_md_init_internal
mov word [ebp - 0xb], 0xbd1a
rep movsd dword es:[edi], dword [esi]
xor eax, eax
mov byte [ebp - 9], 0x39
mov byte [ebp - 0x235], al
mov ecx, eax
mov dword [ebp - 8], eax
movsb byte es:[edi], byte [esi]
mov edi, 0x10021200
xor esi, esi
mov eax, edi
inc ecx
lea eax, [eax + 2]
cmp ecx, 0x14c9
jg 0x1000d5d1
cmp word [eax], si
jne 0x1000d5be
jmp 0x1000d5ee
push edx
mov edx, dword [ebp - 0x18]
mov ecx, str.user_skip_uac
push edi
call fcn.1000a813
mov edx, dword [0x10028b7c]
pop ecx
pop ecx
add edx, 0x66ae0e9c
sub edx, 0x4e7e41e
mov dword [0x10028a28], edx
lea eax, [edx - 0xf10f736]
mov dword [0x10028b7c], eax
call fcn.10009eda
xor ecx, ecx
mov eax, ecx
mov byte [ebp + eax - 0x14c], al
inc eax
cmp eax, 0x100
jb 0x1000d60e
mov eax, dword [0x10028b7c]
mov edi, ecx
mov esi, dword [0x10028a28]
mov dword [ebp - 0x3c], eax
xor edx, edx
mov cl, byte [ebp + edi - 0x14c]
mov eax, edi
mov byte [ebp - 1], cl
div dword [ebp - 0x214]
movzx ecx, cl
push 0x75
movzx eax, byte [ebp + edx - 0x1d0]
add eax, dword [ebp - 8]
add ecx, eax
movzx edx, cl
mov ecx, str.user_skip_uac
mov dword [ebp - 8], edx
pop eax
add eax, 0xffffffd0
cmp ax, word [ebp - 0x48]
ja 0x1000d67b
mov edx, dword [ebp - 8]
add ecx, 2
movzx eax, word [ecx]
mov dword [ebp - 0x2c], eax
test ax, ax
jne 0x1000d65f
jmp 0x1000d682
imul esi, dword [ebp - 0x3c], 0x471b5454
mov al, byte [ebp + edx - 0x14c]
or esi, 0xb151a72c
mov byte [ebp + edi - 0x14c], al
mov al, byte [ebp - 1]
mov dword [ebp - 0x3c], esi
add esi, 0x5892facd
inc edi
mov byte [ebp + edx - 0x14c], al
cmp edi, 0x100
jb 0x1000d62d
xor eax, eax
mov dword [0x10028a28], esi
xor esi, 0xe75ec013
mov dword [ebp - 8], eax
mov dword [ebp - 0x18], esi
mov edi, eax
mov dword [0x10028b7c], esi
mov esi, eax
lea eax, [esi + 1]
movzx esi, al
mov eax, dword [ebp - 8]
mov cl, byte [ebp + esi - 0x14c]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [ebp - 8], eax
mov al, byte [ebp + eax - 0x14c]
mov byte [ebp + esi - 0x14c], al
mov eax, dword [ebp - 8]
mov byte [ebp + eax - 0x14c], cl
movzx eax, byte [ebp + esi - 0x14c]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x14c]
xor al, byte [ebp + edi - 0xc]
mov byte [ebp + edi - 0x2c4], al
inc edi
cmp edi, 4
jb 0x1000d6d4
mov esi, dword [ebp - 0x18]
xor eax, eax
push 0x18
pop ecx
push 0xc
pop edx
mov byte [ebp - 0x2c0], al
mov dword [ebp - 0x188], 0x63
mov dword [ebp - 0x184], edx
mov dword [ebp - 0x180], 0xef
add ecx, dword [ebp + eax*4 - 0x188]
inc eax
cmp eax, 3
jl 0x1000d757
push 0x2d
mov dword [ebp - 0x398], ecx
mov edx, 0x2455
mov word [ebp - 0xc], 0xb7b2
mov eax, str._SecureLineSecuredConnectionTimeLastThirtyDays
mov byte [ebp - 0xa], 0xc1
pop ecx
add edx, ecx
lea eax, [eax + 2]
cmp edx, 0x1f01
ja 0x1000d797
movzx ecx, word [eax]
test ecx, ecx
jne 0x1000d781
jmp 0x1000d7a9
mov edx, esi
mov ecx, 0x10021200
call fcn.1000a4d7
mov esi, dword [0x10028b7c]
or esi, 0x1291b338
or esi, 0x1dc929dc
mov dword [ebp - 0x18], esi
push 5
pop ecx
mov esi, str.setCext_cCertRequired
lea edi, [ebp - 0x1d0]
rep movsd dword es:[edi], dword [esi]
xor ecx, ecx
mov eax, ecx
movsw word es:[edi], word [esi]
mov edi, ecx
mov byte [ebp + eax - 0x14c], al
inc eax
cmp eax, 0x100
jb 0x1000d7d0
mov esi, ecx
xor edx, edx
mov dword [ebp - 0x3c], 0x15
mov eax, esi
mov cl, byte [ebp + esi - 0x14c]
div dword [ebp - 0x3c]
mov byte [ebp - 1], cl
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x1d0]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [ebp + edi - 0x14c]
mov byte [ebp + esi - 0x14c], al
inc esi
mov al, byte [ebp - 1]
mov byte [ebp + edi - 0x14c], al
cmp esi, 0x100
jb 0x1000d7e1
xor eax, eax
add dword [ebp - 0x18], 0x38134d16
mov dword [ebp - 8], eax
mov edi, eax
mov esi, eax
lea eax, [esi + 1]
movzx esi, al
mov eax, dword [ebp - 8]
mov cl, byte [ebp + esi - 0x14c]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [ebp - 8], eax
mov al, byte [ebp + eax - 0x14c]
mov byte [ebp + esi - 0x14c], al
mov eax, dword [ebp - 8]
mov byte [ebp + eax - 0x14c], cl
movzx eax, byte [ebp + esi - 0x14c]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x14c]
xor al, byte [ebp + edi - 0xc]
mov byte [ebp + edi - 0x23c], al
inc edi
cmp edi, 3
jb 0x1000d83c