Function at 0x1000baaf
Capabilities:
Encode data using xor
Encrypt data using rc4 ksa

Disassembly:
push ebx
mov ebx, esp
push ecx
push ecx
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 0xfb8
push esi
push edi
mov cl, byte [0x1003ec78]
lea edi, [ebp - 0x1c8]
mov esi, str.moc.agoy_sehcaet
xor eax, eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
cmp cl, byte [ebp - 0x1c8]
jmp 0x1000bb1a
test cl, cl
je 0x1000bb1f
cmp byte [ebp + eax - 0x1c8], 0
je 0x1000bb1f
mov edx, 0x1003ed90
mov ecx, str.shell_exec
call fcn.10004ecb
mov eax, dword [ebp - 0x3c]
inc eax
mov cl, byte [eax + 0x1003ec78]
cmp cl, byte [ebp + eax - 0x1c8]
mov dword [ebp - 0x3c], eax
je 0x1000baec
movzx ecx, byte [eax + 0x1003ec78]
movzx eax, byte [ebp + eax - 0x1c8]
sub ecx, eax
cmp ecx, 0x9d1
jae 0x1000bb58
imul eax, dword [0x1003ed8c], 0x5f753110
mov ecx, str.PowerOffDisabled
push str.muesum.hsitirb
mov dword [0x1003ed8c], eax
call fcn.10005ac3
jmp 0x1000bb74
mov edx, dword [0x1003ebb8]
xor edx, 0x1a6cabd5
push str.avcfg:__settings_semo_LastForcedUpdate
mov dword [0x1003ed8c], edx
call fcn.10004563
xor edx, edx
mov dword [ebp - 0x70], 0x17a5
pop ecx
mov eax, edx
mov dword [ebp - 0x6c], 0x12bb
mov dword [ebp - 0x68], 0x1333
mov dword [ebp - 0x64], 0x2008
mov dword [ebp - 0x60], edx
mov dword [ebp - 0x5c], edx
mov dword [ebp - 0x58], edx
mov dword [ebp - 0x54], 0x16d9
mov dword [ebp - 0x50], edx
mov dword [ebp - 0x4c], edx
mov dword [ebp - 0x48], 0x15b4
mov dword [ebp - 0x44], 0x1ad7
cmp eax, 6
je 0x1000bbc4
inc eax
cmp eax, 0xc
jl 0x1000bbb9
mov eax, dword [ebp + eax*4 - 0x70]
mov dword [ebp - 0x1e4], eax
call fcn.1000baa8
mov eax, dword [eax + 0xc]
add eax, 0x14
mov dword [ebp - 0x40], eax
mov ecx, dword [eax]
mov dword [ebp - 0x3c], ecx
cmp ecx, eax
je 0x1000dc45
push 0x16
pop ecx
push 0xb
pop eax
mov dword [ebp - 0x1e0], eax
mov byte [ebp - 0xdf], al
push 0x13
pop eax
mov dword [ebp - 0x1d4], ecx
mov byte [ebp - 0xe6], cl
mov byte [ebp - 0xae], cl
mov ecx, dword [0x1003ebb8]
mov dword [ebp - 0x1cc], eax
mov byte [ebp - 0xf7], al
mov eax, dword [0x1003ed8c]
mov dword [ebp - 0xd0], 0xb7a9f044
mov dword [ebp - 0xcc], 0xded87a31
mov dword [ebp - 0xc8], 0x6ab4e2ea
mov dword [ebp - 0xdc], 0x1bf069db
mov dword [ebp - 0xd8], 0x4ed295c6
mov dword [ebp - 0xd4], 0x96ffe6e9
mov dword [ebp - 0xa0], 0x72f1b2df
mov dword [ebp - 0x9c], 0x4849b60e
mov word [ebp - 0x98], 0xa3b5
mov byte [ebp - 0x96], 0x43
mov dword [ebp - 0x108], 0x84b57622
mov dword [ebp - 0x104], 0xaa70ed89
mov dword [ebp - 0x100], 0x991f349b
mov byte [ebp - 0xfc], 0x67
mov dword [ebp - 0xac], 0xe364618b
mov dword [ebp - 0xa8], 0x6425441b
mov word [ebp - 0xa4], 0x59ff
mov byte [ebp - 0xa2], 0xbf
mov dword [ebp - 0xc4], 0x6d10545e
mov dword [ebp - 0xc0], 0x63a2fc9d
mov dword [ebp - 0xbc], 0x5c426164
mov word [ebp - 0xe8], 0xc90
mov dword [ebp - 0xe5], 0x78604d4
mov word [ebp - 0xe1], 0xc0fc
mov word [ebp - 0xde], 0xdb12
mov dword [ebp - 0x88], 0x5dc6acbf
mov dword [ebp - 0x84], 0xc080ce72
mov byte [ebp - 0x80], 6
mov dword [ebp - 0xb8], 0xe2545389
mov dword [ebp - 0xb4], 0xf0fd8879
mov word [ebp - 0xb0], 0x463a
mov byte [ebp - 0xf8], 0x9d
mov dword [ebp - 0xf6], 0xc6a3347a
mov dword [ebp - 0xf2], 0x8ceb126b
mov word [ebp - 0xee], 0x9430
mov byte [ebp - 0xec], 0x8f
mov dword [ebp - 0x94], 0x5b852877
mov dword [ebp - 0x90], 0x89ad517
mov word [ebp - 0x8c], 0x8157
mov dword [ebp - 0x118], 0xa
mov dword [ebp - 8], eax
mov dword [ebp - 0x10], ecx
push 6
pop ecx
mov esi, str.._AVGfxPatchMeshShading__
lea edi, [ebp - 0x48c]
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
movsw word es:[edi], word [esi]
call fcn.10003f58
mov esi, edx
call fcn.100056e8
mov ecx, dword [ebp - 0x10]
xor ecx, 0xd29ce5f9
inc esi
mov dword [ebp - 0x10], ecx
cmp byte [esi + str.Ereversed], 0
jne 0x1000bdbb
mov edx, dword [ebp - 0x130]
cmp edx, esi
jae 0x1000be1e
mov edi, dword [ebp - 8]
mov eax, ecx
cmp edx, 0xeba
jne 0x1000be0b
and eax, 0x2665b30c
mov edx, ecx
push str.identity_corrupted
mov dword [ebp - 8], eax
call fcn.10004563
mov edi, dword [ebp - 8]
mov edx, dword [ebp - 0x130]
pop ecx
inc edx
lea ecx, [edi + 0x3f56dafa]
mov dword [ebp - 0x130], edx
mov eax, ecx
cmp edx, esi
jb 0x1000bde5
xor esi, esi
mov dword [ebp - 0xc], esi
mov eax, esi
mov byte [ebp + eax - 0x5b0], al
inc eax
cmp eax, 0x100
jb 0x1000be25
or ecx, 0x770084c2
mov edi, esi
mov dword [ebp - 0x10], ecx
xor edx, edx
mov dword [ebp - 0x34], 0x19
mov eax, edi
mov cl, byte [ebp + edi - 0x5b0]
div dword [ebp - 0x34]
mov byte [ebp - 1], cl
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x48c]
add eax, dword [ebp - 0xc]
add ecx, eax
movzx ecx, cl
mov dword [ebp - 0xc], ecx
mov al, byte [ebp + ecx - 0x5b0]
mov byte [ebp + edi - 0x5b0], al
inc edi
mov al, byte [ebp - 1]
mov byte [ebp + ecx - 0x5b0], al
cmp edi, 0x100
jb 0x1000be3f
mov dl, byte [0x1003ed90]
lea edi, [ebp - 0x254]
mov ecx, esi
mov dword [ebp - 0xc], esi
mov eax, esi
mov byte [ebp - 0x30], dl
mov edx, dword [ebp - 0x10]
mov esi, str.Thornsmall
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
xor esi, esi
inc eax
add edx, 0xbf1ecc9
movzx eax, al
mov dword [ebp - 0x14], eax
push str.DnsCancelQuery
mov dword [ebp - 0x18], edx
mov al, byte [ebp + eax - 0x5b0]
mov byte [ebp - 1], al
movzx eax, al
mov dword [ebp - 0x34], eax
add eax, ecx
movzx eax, al
mov ecx, str.ssabengali
mov dword [ebp - 8], eax
call fcn.10005ac3
mov al, byte [ebp - 0x30]
mov edi, esi
pop ecx
mov ecx, dword [ebp - 0x18]
test al, al
je 0x1000bf4e
lea edx, [ecx - 0x5d5c6092]
mov dword [ebp - 0x10], edx
inc edi
cmp byte [edi + 0x1003ed90], 0
jne 0x1000bf00
cmp dword [ebp - 0x134], edi
jae 0x1000bf51
imul ecx, ecx, 0xaf3f9c03
mov dword [ebp - 0x10], ecx
mov edx, 0x1003ed90
mov ecx, str.pj.awaniko.imigo
call fcn.10004ecb
mov edx, dword [ebp - 0x134]
mov ecx, dword [ebp - 0x18]
cmp edx, 0xd44
jne 0x1000bf40
call fcn.10003f58
inc edx
mov dword [ebp - 0x134], edx
cmp edx, edi
jb 0x1000bf1b
mov al, byte [ebp - 0x30]
mov edx, dword [ebp - 0x10]
mov edi, esi
cmp al, byte [ebp - 0x254]
jne 0x1000bfc9
test al, al
je 0x1000bf79
cmp byte [ebp + edi - 0x254], 0
je 0x1000bf79
mov al, byte [edi + 0x1003ed91]
inc edi
cmp al, byte [ebp + edi - 0x254]
je 0x1000bf5b
cmp dword [ebp - 0x10c], edi
jae 0x1000bfc9
push ecx
call fcn.10005d78
mov eax, dword [ebp - 0x10c]
pop ecx
cmp eax, 0x1a69
jne 0x1000bfb0
mov edx, dword [ebp - 0x18]
push ecx
add edx, 0x1a91b88d
push ecx
mov ecx, edx
call fcn.10004af5
mov eax, dword [ebp - 0x10c]
add esp, 8
mov ecx, edx
and ecx, 0x1896756c
inc eax
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x10c], eax
cmp eax, edi
jb 0x1000bf81
mov dword [ebp - 0x10], edx
mov edi, dword [ebp - 8]
mov ecx, dword [ebp - 0x14]
mov al, byte [ebp + edi - 0x5b0]
mov byte [ebp + ecx - 0x5b0], al
mov al, byte [ebp - 1]
mov byte [ebp + edi - 0x5b0], al
movzx eax, byte [ebp + ecx - 0x5b0]
add eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0xc]
movzx eax, al
mov al, byte [ebp + eax - 0x5b0]
xor al, byte [ebp + ecx - 0xd0]
movzx eax, al
mov word [ebp + ecx*2 - 0x3d0], ax
inc ecx
mov eax, dword [ebp - 0x14]
cmp ecx, 0xc
mov dword [ebp - 0xc], ecx
mov ecx, edi
jb 0x1000beb3
push 5
pop ecx
mov esi, str.trackingCookieCount
lea edi, [ebp - 0x470]
rep movsd dword es:[edi], dword [esi]
add edx, 0x3e9e991d
xor eax, eax
xor esi, esi
mov word [ebp - 0x3b8], ax
imul ecx, edx, 0x6323a5db
mov dword [ebp - 0x10], edx
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x34], ecx
mov byte [ebp + eax - 0x6b0], al
inc eax
cmp eax, 0x100
jb 0x1000c053
call fcn.100056e8
mov edi, dword [ebp - 0x10]
mov ecx, esi
mov dword [ebp - 0xc], ecx
cmp byte [0x1003ec78], cl
je 0x1000c097
mov edx, dword [ebp - 0x34]
push ecx
push ecx
call fcn.10005ab7
add esp, 8
imul edi, edi, 0xfb98cbf1
inc ecx
cmp byte [ecx + 0x1003ec78], 0
jne 0x1000c07a
mov dword [ebp - 0xc], ecx
push str.Ignoring_rendering_intent_setting_in_cached_Type_3_character
push str.avdef:__config_common_NCItemIPMInterval
mov edx, str.gro.dnuof_si
mov ecx, edi
call fcn.10004106
cmp dword [ebp - 0xc], 0x2586
pop ecx
pop ecx
jbe 0x1000c0c5
call fcn.100052fe
imul eax, edi, 0x4512e54f
jmp 0x1000c0cb
imul eax, edi, 0x739147e4
imul ecx, eax, 0x5cc809c7
mov edi, esi
mov dword [ebp - 0x10], eax
mov dword [ebp - 8], ecx
xor edx, edx
mov cl, byte [ebp + edi - 0x6b0]
mov eax, edi
mov byte [ebp - 1], cl
div dword [ebp - 0x1cc]
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x470]
add eax, dword [ebp - 0x14]
add ecx, eax
movzx ecx, cl
mov dword [ebp - 0x14], ecx
mov al, byte [ebp + ecx - 0x6b0]
mov byte [ebp + edi - 0x6b0], al
inc edi
mov al, byte [ebp - 1]
mov byte [ebp + ecx - 0x6b0], al
cmp edi, 0x100
jb 0x1000c0d9
mov ecx, esi
mov dword [ebp - 0x18], esi
mov eax, esi
lea edi, [ebp - 0x12c]
mov esi, str.on.ybsebel
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov edi, dword [ebp - 8]
xor esi, esi
inc eax
movzx eax, al
mov dword [ebp - 0x14], eax
mov al, byte [ebp + eax - 0x6b0]
mov byte [ebp - 1], al
movzx eax, al
mov dword [ebp - 0x34], eax
add eax, ecx
movzx eax, al
mov dword [ebp - 8], eax
call fcn.10004b17
mov al, byte [ebp - 0x30]
mov ecx, esi
mov dword [ebp - 0xc], esi
cmp al, byte [ebp - 0x12c]
jne 0x1000c19d
test al, al
je 0x1000c19d
cmp byte [ebp + ecx - 0x12c], 0
je 0x1000c19d
call fcn.100056e8
mov ecx, dword [ebp - 0xc]
inc ecx
mov dword [ebp - 0xc], ecx
mov al, byte [ecx + 0x1003ed90]
cmp al, byte [ebp + ecx - 0x12c]
je 0x1000c174
movzx eax, byte [ebp + ecx - 0x12c]
movzx ecx, byte [ecx + 0x1003ed90]
sub ecx, eax
cmp ecx, 0x6c7
jbe 0x1000c1c2
mov eax, edi
xor eax, 0x7741e6e4
mov dword [ebp - 0x10], eax
jmp 0x1000c1da
mov edi, dword [ebp - 0x10]
mov edx, str.moc.la_morf
mov ecx, 0x1003ec10
or edi, 0x1f92e7f8
call fcn.10004924
mov edx, dword [ebp - 8]
or edi, 0x113cd822
mov ecx, dword [ebp - 0x14]
mov al, byte [ebp + edx - 0x6b0]
mov byte [ebp + ecx - 0x6b0], al
mov al, byte [ebp - 1]
mov byte [ebp + edx - 0x6b0], al
call fcn.10004b17
mov ecx, esi
mov eax, edi
cmp byte [ebp - 0x30], cl
je 0x1000c21f
imul edi, dword [ebp - 0x10], 0x4e388a49
inc ecx
cmp byte [ecx + 0x1003ed90], 0
jne 0x1000c213
mov eax, edi
cmp ecx, 0x4b1
jne 0x1000c231
mov edi, eax
xor edi, 0x7b6ac05
jmp 0x1000c23a
imul eax, eax, 0x1c19e81
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0x6b0]
add eax, dword [ebp - 0x34]
movzx eax, al
mov al, byte [ebp + eax - 0x6b0]
xor al, byte [ebp + ecx - 0xdc]
movzx eax, al
mov word [ebp + ecx*2 - 0x424], ax
inc ecx
mov eax, dword [ebp - 0x14]
cmp ecx, 0xc
mov dword [ebp - 0x18], ecx
mov ecx, dword [ebp - 8]
jb 0x1000c140
mov dword [ebp - 8], edi
mov esi, str.ten.elibom_eruza
lea edi, [ebp - 0x3b4]
xor eax, eax
mov word [ebp - 0x40c], ax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
call fcn.10003f79
mov cl, byte [0x1003ec10]
lea edi, [ebp - 0x280]
mov esi, str.kiromeetorusquare
xor eax, eax
mov dword [ebp - 0xc], eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
cmp cl, byte [ebp - 0x280]
jne 0x1000c2e0
test cl, cl
je 0x1000c2dd
cmp byte [ebp + eax - 0x280], 0
je 0x1000c2dd
mov cl, byte [eax + 0x1003ec11]
inc eax
cmp cl, byte [ebp + eax - 0x280]
je 0x1000c2bf
mov dword [ebp - 0xc], eax
call fcn.10003d14
mov ecx, dword [ebp - 0xc]
movzx eax, byte [ebp + ecx - 0x280]
movzx ecx, byte [ecx + 0x1003ec10]
sub ecx, eax
cmp ecx, 0x15e9
jne 0x1000c326
imul ecx, dword [ebp - 8], 0x56bdcfb2
mov edx, str.on.grebself
push str.qamatsqatannarrowhebrew
push str.Antispywares:
mov dword [ebp - 0x10], ecx
mov ecx, dword [ebp - 8]
call fcn.10004106
pop ecx
pop ecx
jmp 0x1000c331
mov eax, dword [ebp - 0x10]
add eax, 0x634b6801
mov dword [ebp - 8], eax
call fcn.10003d14
mov esi, 0x10030798
lea edi, [ebp - 0x248]
xor edx, edx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
cmp byte [ebp - 0x248], 0x45
jne 0x1000c37e
mov ecx, dword [ebp - 8]
mov al, 0x45
test al, al
je 0x1000c37e
cmp byte [ebp + edx - 0x248], 0
je 0x1000c37e
push ecx
push ecx
call fcn.10004af5
mov al, byte [edx + 0x100316a1]
add esp, 8
inc edx
cmp al, byte [ebp + edx - 0x248]
je 0x1000c356
mov ecx, dword [ebp - 0x10]
call fcn.10003f58
mov esi, dword [ebp - 0x1e8]
mov edi, dword [ebp - 8]
cmp esi, edx
jae 0x1000c3bf
push ecx
push ecx
call fcn.10004af5
add esp, 8
cmp esi, 0x1e91
jne 0x1000c3ab
or edi, 0xd4876314
inc esi
lea ecx, [edi - 0x57998738]
cmp esi, edx
jb 0x1000c393
mov dword [ebp - 0x1e8], esi
mov dword [ebp - 0x10], ecx
mov edx, str.zc.inum.duolc.tlf
mov ecx, str.alefmaksuraarabic
call fcn.10004c6d
xor esi, esi
cmp byte [0x1003ec10], 0
mov dword [ebp - 0x14], esi
je 0x1000c3ff
mov edi, dword [ebp - 0x10]
add edi, 0x915d874e
mov dword [ebp - 8], edi
mov edi, esi
call fcn.10003d14
inc edi
cmp byte [edi + 0x1003ec10], 0
jne 0x1000c3ea
mov dword [ebp - 0x14], edi
mov edi, dword [ebp - 8]
call fcn.10005d87
cmp dword [ebp - 0x14], 0x50c
jae 0x1000c42b
mov edi, dword [ebp - 0x10]
mov ecx, str.netprofm
push 0x10030810
or edi, 0x3f63576b
call fcn.10005ac3
pop ecx
mov ecx, dword [ebp - 0x10]
jmp 0x1000c43b
mov ecx, edi
xor ecx, 0x125bbfcb
mov dword [ebp - 0x10], ecx
call fcn.10003f58
and edi, 0x87718f89
mov dword [ebp - 0xc], esi
cmp byte [0x1003ec78], 0
mov dword [ebp - 8], edi
je 0x1000c4ba
mov dword [ebp - 0x14], edi
or edi, 0x39d034ad
mov dword [ebp - 0x14], edi
push ecx
push ecx
mov edx, ecx
call fcn.10005ab7
mov edx, dword [ebp - 0xc]
add esp, 8
inc edx
mov ecx, edi
mov dword [ebp - 0xc], edx
cmp byte [edx + 0x1003ec78], 0
jne 0x1000c45c
mov edi, dword [ebp - 8]
mov dword [ebp - 0x10], ecx
cmp dword [ebp - 0x138], edx
jae 0x1000c4ba
mov eax, dword [ebp - 0x14]
mov ecx, eax
mov edi, dword [ebp - 0x138]
cmp edi, 0x995
jne 0x1000c4a1
lea ecx, [eax - 0x53ff493c]
and ecx, 0xedc394dc
inc edi
mov dword [ebp - 0x10], ecx
mov eax, ecx
cmp edi, edx
jb 0x1000c493
mov dword [ebp - 0x138], edi
mov edi, dword [ebp - 8]
mov dword [ebp - 0x14], esi
mov eax, esi
mov byte [ebp + eax - 0x7b0], al
inc eax
cmp eax, 0x100
jb 0x1000c4bf
mov ecx, esi
mov dword [ebp - 0xc], esi
mov dl, byte [ebp + ecx - 0x7b0]
and edi, 0x7b41904f
and ecx, 0xf
movzx eax, byte [ebp + ecx - 0x3b4]
add eax, dword [ebp - 0x14]
movzx ecx, dl
add ecx, eax
movzx eax, cl
mov ecx, dword [ebp - 0xc]
mov dword [ebp - 0x14], eax
mov al, byte [ebp + eax - 0x7b0]
mov byte [ebp + ecx - 0x7b0], al
inc ecx
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xc], ecx
mov byte [ebp + eax - 0x7b0], dl
cmp ecx, 0x100
jb 0x1000c4d3
mov dword [ebp - 0x14], esi
mov edi, esi
lea eax, [edi + 1]
movzx edi, al
mov eax, dword [ebp - 0x14]
push 0xb
mov cl, byte [ebp + edi - 0x7b0]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [ebp - 0x14], eax
mov al, byte [ebp + eax - 0x7b0]
mov byte [ebp + edi - 0x7b0], al
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x18], eax
sub eax, 0x7893df56
or dword [ebp - 0x18], 0xc93e783e
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x14]
mov byte [ebp + eax - 0x7b0], cl
movzx eax, byte [ebp + edi - 0x7b0]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x7b0]
xor al, byte [ebp + esi - 0xa0]
movzx eax, al
mov word [ebp + esi*2 - 0x370], ax
inc esi
pop eax
cmp esi, eax
jb 0x1000c525
mov eax, dword [ebp - 0x18]
lea edi, [ebp - 0x198]
add eax, 0x24adeed1
mov esi, str.ASW_NOTIF_SECURE_LINE_STATE_CHANGED
push 9
mov dword [ebp - 8], eax
xor eax, eax
pop ecx
rep movsd dword es:[edi], dword [esi]
mov word [ebp - 0x35a], ax
call fcn.10003f79
push 6
pop ecx
mov esi, str.._AVAv5_SubmitFileDialog__
mov al, byte [0x1003ec10]
lea edi, [ebp - 0x340]
xor edx, edx
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
cmp al, byte [ebp - 0x340]
jne 0x1000c641
test al, al
je 0x1000c604
cmp byte [ebp + edx - 0x340], 0
je 0x1000c604
mov al, byte [edx + 0x1003ec11]
inc edx
cmp al, byte [ebp + edx - 0x340]
je 0x1000c5e6
mov ecx, dword [ebp - 0x1d0]
cmp ecx, edx
jae 0x1000c641
mov eax, dword [ebp - 0x10]
mov esi, edx
add eax, 0xb2568f3f
mov dword [ebp - 0x1d0], edx
mov dword [ebp - 8], eax
sub esi, ecx
mov edx, 0x1003ec78
mov ecx, str.event_routing.request_handler.registered
call fcn.10004ecb
mov ecx, 0x10030930
call fcn.10004630
sub esi, 1
jne 0x1000c623
add dword [ebp - 8], 0x54a6a345
and dword [ebp - 0xc], 0
call fcn.10004828
push 5
pop ecx
mov esi, str.._AVIdentityFunction__
mov al, byte [0x1003ec78]
lea edi, [ebp - 0x26c]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
xor esi, esi
cmp al, byte [ebp - 0x26c]
jne 0x1000c6a3
mov edi, esi
test al, al
je 0x1000c6a3
cmp byte [ebp + edi - 0x26c], 0
je 0x1000c6a3
push str.moc.deifitrec_si
mov ecx, str.braceleftmid
call fcn.10005ac3
mov al, byte [edi + 0x1003ec79]
inc edi
pop ecx
cmp al, byte [ebp + edi - 0x26c]
je 0x1000c675
mov eax, esi
mov byte [ebp + eax - 0x8b0], al
inc eax
cmp eax, 0x100
jb 0x1000c6a5
mov edi, esi
xor edx, edx
mov dword [ebp - 0x34], 0x23
mov eax, edi
mov cl, byte [ebp + edi - 0x8b0]
div dword [ebp - 0x34]
mov byte [ebp - 1], cl
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x198]
add eax, dword [ebp - 0xc]
add ecx, eax
movzx ecx, cl
mov dword [ebp - 0xc], ecx
mov al, byte [ebp + ecx - 0x8b0]
mov byte [ebp + edi - 0x8b0], al
inc edi
mov al, byte [ebp - 1]
mov byte [ebp + ecx - 0x8b0], al
cmp edi, 0x100
jb 0x1000c6b6
mov edi, esi
mov dword [ebp - 0xc], esi
mov ecx, esi
jmp 0x1000c711
mov edi, dword [ebp - 0x34]
lea eax, [ecx + 1]
movzx edx, al
push 6
mov dword [ebp - 0x38], edx
mov cl, byte [ebp + edx - 0x8b0]
movzx eax, cl
mov dword [ebp - 0x18], eax
add eax, edi
movzx edi, al
mov dword [ebp - 0x34], edi
mov al, byte [ebp + edi - 0x8b0]
mov byte [ebp + edx - 0x8b0], al
mov eax, esi
mov byte [ebp + edi - 0x8b0], cl
mov esi, str.language_windows_lang:
pop ecx
lea edi, [ebp - 0x26c]
rep movsd dword es:[edi], dword [esi]
mov cl, byte [0x1003ec78]
cmp cl, byte [ebp - 0x26c]
jmp 0x1000c788
test cl, cl
je 0x1000c78d
cmp byte [ebp + eax - 0x26c], 0
je 0x1000c78d
call fcn.10003f79
mov eax, dword [ebp - 0x14]
inc eax
mov cl, byte [eax + 0x1003ec78]
cmp cl, byte [ebp + eax - 0x26c]
mov dword [ebp - 0x14], eax
je 0x1000c764
mov ecx, 0x100309d0
call fcn.10004630
mov esi, dword [ebp - 0x14]
mov eax, dword [ebp - 0x13c]
mov edi, dword [ebp - 8]
cmp eax, esi
jae 0x1000c7eb
cmp eax, 0x24b6
jne 0x1000c7cc
add edi, 0x1a48b877
mov edx, str.._AVCAsyncVaultUnlockHandler_detail_pam_asw__
push str.uninstalling
push str.idp_list_exclude
mov ecx, edi
call fcn.10004106
pop ecx
pop ecx
and edi, 0x13d8dc10
call fcn.10003f79
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp eax, esi
jb 0x1000c7a7
mov dword [ebp - 8], edi
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0xc]
push 0
pop esi
movzx eax, byte [ebp + ecx - 0x8b0]
add eax, dword [ebp - 0x18]
movzx eax, al
mov al, byte [ebp + eax - 0x8b0]
xor al, byte [ebp + edx - 0x108]
movzx eax, al
mov word [ebp + edx*2 - 0x440], ax
inc edx
mov dword [ebp - 0xc], edx
cmp edx, 0xd
jb 0x1000c70e
xor eax, eax
xor edi, 0xeef32c64
mov dword [ebp - 8], edi
mov edi, str.Ereversed
mov word [ebp - 0x426], ax
mov esi, edi
mov edx, edi
mov ecx, 0x10030aa0
call fcn.10004ecb
inc esi
cmp byte [esi], 0
jne 0x1000c841
mov edi, dword [ebp - 8]
mov esi, str.app:account_disconnect
and edi, 0x2b888837
mov al, byte [0x1003ec78]
mov dword [ebp - 8], edi
add edi, 0xce0161db
mov dword [ebp - 0x14], edi
lea edi, [ebp - 0x230]
push 5
pop ecx
rep movsd dword es:[edi], dword [esi]
push 6
pop ecx
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, str.ignored_in_grayscale_PNG
lea edi, [ebp - 0x2f4]
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
xor esi, esi
cmp al, byte [ebp - 0x2f4]
jne 0x1000c8c5
mov edi, esi
test al, al
je 0x1000c8c5
cmp byte [ebp + edi - 0x2f4], 0
je 0x1000c8c5
mov ecx, str.AvBehav_RemoteContent
call fcn.10004630
mov al, byte [edi + 0x1003ec79]
inc edi
cmp al, byte [ebp + edi - 0x2f4]
je 0x1000c89d
mov edx, dword [ebp - 8]
mov ecx, str.SOFTWAREALWIL_SoftwareAvastTEST
call fcn.100050f8
cmp byte [0x1003ec10], 0
je 0x1000c8ff
mov eax, dword [ebp - 0x14]
mov edi, 0x1003ec10
mov edx, eax
mov ecx, str.cpmstar.com
call fcn.100050f8
imul eax, dword [ebp - 0x14], 0x2467c340
inc edi
cmp byte [edi], 0
mov dword [ebp - 0x14], eax
jne 0x1000c8e3
mov edi, dword [ebp - 8]
mov ecx, esi
xor edi, 0x149eac8b
mov dword [ebp - 0xc], esi
cmp byte [ebp - 0x30], 0
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x14], ecx
je 0x1000c937
call fcn.100056e8
mov ecx, dword [ebp - 0x14]
imul edi, edi, 0x608a96e6
inc ecx
mov dword [ebp - 0x14], ecx
cmp byte [ecx + 0x1003ed90], 0
jne 0x1000c919
mov dword [ebp - 0x18], edi
push ecx
push ecx
mov edx, edi
call fcn.10005ab7
add esp, 8
cmp dword [ebp - 0x110], ecx
jae 0x1000c985
call fcn.100052fe
mov eax, dword [ebp - 0x110]
cmp eax, 0x10e3
jne 0x1000c96f
imul edi, dword [ebp - 8], 0xefd3e5b2
call fcn.100056e8
mov eax, dword [ebp - 0x110]
or dword [ebp - 8], 0x71f0d0a5
inc eax
mov dword [ebp - 0x110], eax
cmp eax, dword [ebp - 0x14]
jb 0x1000c94b
mov dword [ebp - 0x18], edi
cmp byte [ebp - 0x30], 0
je 0x1000c996
mov ecx, edi
or ecx, 0x8cee63a3
mov dword [ebp - 8], ecx
mov eax, esi
mov byte [ebp + eax - 0x9b0], al
inc eax
cmp eax, 0x100
jb 0x1000c998
mov edi, esi
xor edx, edx
mov cl, byte [ebp + edi - 0x9b0]
mov eax, edi
mov byte [ebp - 1], cl
div dword [ebp - 0x1d4]
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x230]
add eax, dword [ebp - 0xc]
add ecx, eax
movzx ecx, cl
mov dword [ebp - 0xc], ecx
mov al, byte [ebp + ecx - 0x9b0]
mov byte [ebp + edi - 0x9b0], al
inc edi
mov al, byte [ebp - 1]
mov byte [ebp + ecx - 0x9b0], al
cmp edi, 0x100
jb 0x1000c9a9
mov ecx, esi
mov dword [ebp - 0xc], esi
mov eax, esi
mov dword [ebp - 0x10], ecx
mov esi, str.WlanOpenHandle
lea edi, [ebp - 0x1c8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
cmp byte [ebp - 0x1c8], 0x45
jne 0x1000cd01
mov cl, 0x45
test cl, cl
je 0x1000ca3c
cmp byte [ebp + eax - 0x1c8], 0
je 0x1000ca3c
mov cl, byte [eax + 0x100316a1]
inc eax
cmp cl, byte [ebp + eax - 0x1c8]
je 0x1000ca1e
mov edi, dword [ebp - 0x18]
cmp dword [ebp - 0x1d8], eax
jae 0x1000ca58
mov ecx, edi
mov dword [ebp - 0x1d8], eax
or ecx, 0x6a8f8658
mov dword [ebp - 8], ecx
mov ecx, dword [ebp - 0x10]
xor esi, esi
mov dword [ebp - 0x38], esi
lea eax, [ecx + 1]
mov dword [ebp - 0x14], esi
movzx eax, al
mov dword [ebp - 0x10], eax
mov cl, byte [ebp + eax - 0x9b0]
mov eax, dword [ebp - 0xc]
movzx edx, cl
add eax, edx
mov dword [ebp - 0x34], edx
mov edx, dword [ebp - 0x10]
movzx eax, al
mov dword [ebp - 0xc], eax
mov al, byte [ebp + eax - 0x9b0]
mov byte [ebp + edx - 0x9b0], al
mov eax, dword [ebp - 0xc]
mov byte [ebp + eax - 0x9b0], cl
mov eax, edx
movzx eax, byte [ebp + eax - 0x9b0]
add eax, dword [ebp - 0x34]
cmp byte [0x1003ec10], 0
movzx eax, al
mov al, byte [ebp + eax - 0x9b0]
mov byte [ebp - 1], al
je 0x1000caf0
mov eax, dword [ebp - 8]
mov edx, edi
xor edx, 0x885367db
mov edi, esi
push ecx
push ecx
mov ecx, eax
call fcn.10004af5
add esp, 8
mov eax, edx
inc edi
cmp byte [edi + 0x1003ec10], 0
jne 0x1000cacf
mov dword [ebp - 0x14], edi
mov edi, dword [ebp - 0x18]
mov dword [ebp - 8], eax
call fcn.10003f79
mov eax, dword [ebp - 0x114]
cmp eax, dword [ebp - 0x14]
jae 0x1000cb4e
push str.launch_chrome
mov ecx, str.Invalid_argument_of_event_app.fwserv.networks_changed_event
call fcn.10005ac3
cmp dword [ebp - 0x114], 0xbf9
pop ecx
jne 0x1000cb27
and edi, 0xf8bd9af6
call fcn.10004b17
or edi, 0xf2b4512b
mov ecx, str.feicoptic
mov edx, edi
call fcn.100050f8
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp eax, dword [ebp - 0x14]
jb 0x1000cb00
mov dword [ebp - 0x18], edi
mov ecx, dword [ebp - 0x38]
push 0xb
mov al, byte [ebp + ecx - 0xac]
xor al, byte [ebp - 1]
movzx eax, al
mov word [ebp + ecx*2 - 0x388], ax
inc ecx
pop eax
mov dword [ebp - 0x38], ecx
cmp ecx, eax
mov ecx, dword [ebp - 0x10]
jb 0x1000ca60
mov esi, str.on.goksner
lea edi, [ebp - 0x2c0]
xor eax, eax
mov word [ebp - 0x372], ax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
xor esi, esi
mov dword [ebp - 0xc], esi
mov byte [ebp + eax - 0xab0], al
inc eax
cmp eax, 0x100
jb 0x1000cb96
mov ecx, dword [ebp - 8]
push ecx
push ecx
lea edi, [ecx + 0x1b1084b9]
mov dword [ebp - 0x14], edi
call fcn.10004af5
add esp, 8
cmp byte [0x1003ec78], 0
je 0x1000cbf4
mov edi, 0x1003ec78
push str.installedlanguages
push str._SoftwareHealth_QueryProperty_failed__
mov edx, str._SUVWAVAWH
call fcn.10004106
pop ecx
pop ecx
mov ecx, dword [ebp - 8]
sub ecx, 0x4930e359
inc edi
mov dword [ebp - 8], ecx
cmp byte [edi], 0
jne 0x1000cbc9
mov edi, dword [ebp - 0x14]
mov dword [ebp - 0x38], esi
xor edx, edx
mov cl, byte [ebp + esi - 0xab0]
mov eax, esi
mov byte [ebp - 1], cl
div dword [ebp - 0x118]
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x2c0]
xor edx, edx
add eax, dword [ebp - 0xc]
add ecx, eax
movzx eax, cl
mov dword [ebp - 0xc], eax
cmp byte [0x1003ec10], dl
je 0x1000cc4a
mov esi, edx
push ecx
mov ecx, edi
call fcn.10005d78
inc esi
pop ecx
cmp byte [esi + 0x1003ec10], dl
jne 0x1000cc2d
cmp esi, 0x1578
mov esi, dword [ebp - 0x38]
ja 0x1000cc58
push ecx
push ecx
mov edx, edi
call fcn.10005ab7
add esp, 8
xor edx, edx
mov ecx, dword [ebp - 0xc]
mov al, byte [ebp + ecx - 0xab0]
mov byte [ebp + esi - 0xab0], al
inc esi
mov al, byte [ebp - 1]
mov byte [ebp + ecx - 0xab0], al
mov dword [ebp - 0x38], esi
cmp esi, 0x100
jb 0x1000cbf7
push 0xa
pop ecx
mov esi, str.app.antiransomware.GetDefaultExtensions
mov dword [ebp - 0x38], edx
lea edi, [ebp - 0x170]
mov eax, edx
rep movsd dword es:[edi], dword [esi]
mov cl, byte [ebp - 0x30]
cmp cl, byte [ebp - 0x170]
jne 0x1000ccc4
test cl, cl
je 0x1000ccc1
cmp byte [ebp + eax - 0x170], 0
je 0x1000ccc1
mov cl, byte [eax + 0x1003ed91]
inc eax
cmp cl, byte [ebp + eax - 0x170]
je 0x1000cca3
mov dword [ebp - 0x38], eax
mov esi, dword [ebp - 0x14]
push ecx
mov ecx, esi
call fcn.10005d78
pop ecx
mov ecx, dword [ebp - 0x38]
movzx eax, byte [ebp + ecx - 0x170]
movzx ecx, byte [ecx + 0x1003ed90]
sub ecx, eax
cmp ecx, 0x2c2
jae 0x1000cd09
xor esi, 0xdd5f67b9
mov ecx, esi
mov dword [0x1003ebb8], esi
call fcn.10003f58
jmp 0x1000cd15
mov edi, dword [ebp - 0x18]
jmp 0x1000ca5b
add esi, 0xdf4c3554
mov dword [0x1003ebb8], esi
imul eax, esi, 0xa1a05d4f
mov edi, edx
mov dword [ebp - 0xc], edx
mov esi, edx
mov dword [ebp - 0x34], edx
mov dword [0x1003ed8c], eax
lea eax, [esi + 1]
movzx esi, al
mov eax, dword [ebp - 0xc]
mov cl, byte [ebp + esi - 0xab0]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [ebp - 0xc], eax
mov al, byte [ebp + eax - 0xab0]
mov byte [ebp + esi - 0xab0], al
mov eax, dword [ebp - 0xc]
mov byte [ebp + eax - 0xab0], cl
movzx eax, byte [ebp + esi - 0xab0]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0xab0]
xor al, byte [ebp + edi - 0xc4]
movzx eax, al
mov word [ebp + edi*2 - 0x3ec], ax
inc edi
cmp edi, 0xc
jb 0x1000cd2a
push dword [0x1003ed8c]
call dword [sym.imp.USER32.dll_GetTopWindow]
call fcn.100056e8
mov al, byte [0x1003ec10]
lea edi, [ebp - 0x294]
mov esi, str.app:start_service
mov byte [ebp - 0x30], al
xor edx, edx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
cmp al, byte [ebp - 0x294]
jmp 0x1000cdec
test al, al
je 0x1000cdf1
cmp byte [ebp + edx - 0x294], 0
je 0x1000cdf1
push str.vaar_envelope
mov ecx, str.moc.swanozama.1_tsaehtron_pa_3s
call fcn.10005ac3
mov edx, dword [ebp - 0x38]
inc edx
pop ecx
mov al, byte [edx + 0x1003ec10]
cmp al, byte [ebp + edx - 0x294]
mov dword [ebp - 0x38], edx
je 0x1000cdbd
mov esi, dword [0x1003ebb8]
push ecx
mov ecx, esi
mov dword [ebp - 0x18], esi
call fcn.10005d78
movzx eax, byte [ebp + edx - 0x294]
pop ecx
movzx ecx, byte [edx + 0x1003ec10]
sub ecx, eax
cmp ecx, 0x1c99
jne 0x1000ce34
imul esi, esi, 0x5164f627
push 0x10030da0
mov edx, esi
mov dword [ebp - 8], esi
call fcn.10004563
pop ecx
jmp 0x1000ce43
mov esi, dword [0x1003ed8c]
sub esi, 0x75fec87a
mov dword [ebp - 8], esi
push ecx
push ecx
mov ecx, esi
call fcn.10004af5
xor esi, esi
add esp, 8
cmp byte [0x1003ec78], 0
mov edi, esi
je 0x1000ce72
call fcn.10005059
add dword [ebp - 0x18], 0xf6bef07
inc edi
cmp byte [edi + 0x1003ec78], 0
jne 0x1000ce5c
call fcn.10005880
mov ecx, dword [ebp - 0x140]
cmp ecx, edi
jae 0x1000ceb5
mov eax, dword [ebp - 0x18]
add eax, 0x579ef25b
mov dword [ebp - 8], eax
cmp ecx, 0x20f3
jne 0x1000ceaa
push str.ue.snduolc
mov ecx, str._moduleSystemviewwrongTimeToaster
call fcn.10005ac3
pop ecx
mov ecx, dword [ebp - 0x140]
inc ecx
mov dword [ebp - 0x140], ecx
cmp ecx, edi
jb 0x1000ce8c
mov cl, byte [0x1003ed90]
lea edi, [ebp - 0x1f4]
mov dword [ebp - 0x38], esi
xor eax, eax
mov esi, str.ais_shl_fil
mov word [ebp - 0x3d4], ax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
cmp cl, byte [ebp - 0x1f4]
jne 0x1000cefe
test cl, cl
je 0x1000cefb
cmp byte [ebp + eax - 0x1f4], 0
je 0x1000cefb
mov cl, byte [eax + 0x1003ed91]
inc eax
cmp cl, byte [ebp + eax - 0x1f4]
je 0x1000cedd
mov dword [ebp - 0x38], eax
mov edx, dword [ebp - 8]
push str.SubmitTime
call fcn.10004563
pop ecx
mov ecx, dword [ebp - 0x38]
movzx eax, byte [ebp + ecx - 0x1f4]
movzx ecx, byte [ecx + 0x1003ed90]
sub ecx, eax
cmp ecx, 0x18a
jae 0x1000cf36
sub dword [ebp - 0x18], 0x2c992b73
call fcn.10003d14
jmp 0x1000cf40
imul eax, dword [ebp - 0x18], 0x61efc074
mov dword [ebp - 8], eax
push 0xb
pop eax
mov ecx, eax
lea edi, [ebp - 0x70]
mov esi, str._moduleSensitiveDataviewdetectionfilename
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
xor esi, esi
mov dword [ebp - 0x38], esi
mov eax, esi
mov byte [ebp + eax - 0xbb0], al
inc eax
cmp eax, 0x100
jb 0x1000cf59
mov edi, esi
xor edx, edx
mov dword [ebp - 0x34], 0x2e
mov eax, edi
mov cl, byte [ebp + edi - 0xbb0]
div dword [ebp - 0x34]
mov byte [ebp - 1], cl
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x70]
add eax, dword [ebp - 0x38]
add ecx, eax
movzx ecx, cl
mov dword [ebp - 0x38], ecx
mov al, byte [ebp + ecx - 0xbb0]
mov byte [ebp + edi - 0xbb0], al
inc edi
mov al, byte [ebp - 1]
mov byte [ebp + ecx - 0xbb0], al
cmp edi, 0x100
jb 0x1000cf6a
mov dword [ebp - 0xc], esi
mov edi, esi
lea eax, [edi + 1]
movzx edi, al
mov eax, dword [ebp - 0xc]
mov cl, byte [ebp + edi - 0xbb0]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [ebp - 0xc], eax
mov al, byte [ebp + eax - 0xbb0]
mov byte [ebp + edi - 0xbb0], al
mov eax, dword [ebp - 0xc]
mov byte [ebp + eax - 0xbb0], cl
movzx eax, byte [ebp + edi - 0xbb0]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0xbb0]
xor al, byte [ebp + esi - 0xe8]
movzx eax, al
mov word [ebp + esi*2 - 0x408], ax
inc esi
cmp esi, 0xc
jb 0x1000cfbb
mov esi, str.muesum.dna
lea edi, [ebp - 0x2cc]
xor eax, eax
mov word [ebp - 0x3f0], ax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
xor esi, esi
mov dword [ebp - 0x38], esi
mov byte [ebp + eax - 0xcb0], al
inc eax
cmp eax, 0x100
jb 0x1000d038
mov edi, esi
xor edx, edx
mov cl, byte [ebp + edi - 0xcb0]
mov eax, edi
mov byte [ebp - 1], cl
div dword [ebp - 0x118]
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x2cc]
add eax, dword [ebp - 0x38]
add ecx, eax
movzx ecx, cl
mov dword [ebp - 0x38], ecx
mov al, byte [ebp + ecx - 0xcb0]
mov byte [ebp + edi - 0xcb0], al
inc edi
mov al, byte [ebp - 1]
mov byte [ebp + ecx - 0xcb0], al
cmp edi, 0x100
jb 0x1000d049
mov dword [ebp - 0xc], esi
mov edi, esi
lea eax, [edi + 1]
movzx edi, al
mov eax, dword [ebp - 0xc]
mov cl, byte [ebp + edi - 0xcb0]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [ebp - 0xc], eax
mov al, byte [ebp + eax - 0xcb0]
mov byte [ebp + edi - 0xcb0], al
mov eax, dword [ebp - 0xc]
mov byte [ebp + eax - 0xcb0], cl
movzx eax, byte [ebp + edi - 0xcb0]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0xcb0]
xor al, byte [ebp + esi - 0x88]
movzx eax, al
mov word [ebp + esi*2 - 0x324], ax
inc esi
cmp esi, 9
jb 0x1000d099
mov esi, str.lp.vog.zouw
lea edi, [ebp - 0x2d8]
xor eax, eax
mov word [ebp - 0x312], ax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, dword [ebp - 8]
xor esi, esi
mov dword [ebp - 0x10], esi
cmp byte [0x1003ed90], al
je 0x1000d16f
or edi, 0xe448b4ca
mov dword [ebp - 0x34], edi
mov edi, eax
mov eax, dword [ebp - 0x18]
push str.PAMChromeAlive
push str.expected_end_time
mov edx, str.leaked_file_empty
mov ecx, eax
call fcn.10004106
mov eax, dword [ebp - 0x34]
inc edi
pop ecx
pop ecx
cmp byte [edi + 0x1003ed90], 0
jne 0x1000d12d
mov dword [ebp - 0xc], edi
cmp dword [ebp - 0xc], 0x1dd9
mov edi, dword [ebp - 8]
jbe 0x1000d16f
mov edx, edi
mov ecx, str.sobrenome
call fcn.100050f8
jmp 0x1000d178
xor edi, 0x174aa918
mov dword [ebp - 8], edi
mov dword [ebp - 0xc], esi
lea edi, [ebp - 0x1b4]
mov esi, str.ed.emohsnd
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov edi, dword [ebp - 8]
xor esi, esi
mov cl, byte [ebp - 0x1b4]
imul eax, edi, 0x6c45ea1c
mov edx, edi
push ecx
push ecx
mov dword [ebp - 0x18], eax
call fcn.10005ab7
mov dl, byte [0x1003ed90]
add esp, 8
mov dword [ebp - 0x38], esi
mov eax, esi
cmp dl, cl
jne 0x1000d20e
mov cl, dl
test cl, cl
je 0x1000d1ef
cmp byte [ebp + eax - 0x1b4], 0
je 0x1000d1ef
mov edx, str.popup_type
mov ecx, str._Support_Tool
call fcn.10004c6d
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
mov cl, byte [eax + 0x1003ed90]
cmp cl, byte [ebp + eax - 0x1b4]
je 0x1000d1bc
cmp dword [ebp - 0x1dc], eax
jae 0x1000d208
mov ecx, dword [ebp - 0x18]
mov edi, ecx
and edi, 0x5c488896
mov dword [ebp - 0x1dc], eax
mov cl, byte [ebp - 0x1b4]
mov eax, dword [ebp - 0xc]
mov byte [ebp + eax - 0xdb0], al
inc eax
mov dword [ebp - 0xc], eax
cmp eax, 0x100
jb 0x1000d196
mov eax, esi
mov dword [ebp - 8], esi
mov cl, byte [ebp + eax - 0xdb0]
xor edx, edx
div dword [ebp - 0x1e0]
mov byte [ebp - 1], cl
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x2d8]
add eax, dword [ebp - 0x10]
add ecx, eax
movzx eax, cl
mov ecx, dword [ebp - 8]
mov dword [ebp - 0x10], eax
mov al, byte [ebp + eax - 0xdb0]
mov byte [ebp + ecx - 0xdb0], al
mov eax, esi
cmp byte [0x1003ec78], al
je 0x1000d28f
xor edi, 0x311b0f71
inc eax
cmp byte [eax + 0x1003ec78], 0
jne 0x1000d26f
cmp eax, 0x1ef5
jb 0x1000d28f
xor dword [ebp - 0x18], 0x5f8ca8e0
jmp 0x1000d2a5
mov edi, dword [ebp - 0x18]
mov edx, dword [ebp - 0x18]
or edi, 0xb43478fd
push ecx
push ecx
call fcn.10005ab7
add esp, 8
mov ecx, edi
mov dword [ebp - 0xc], edi
call fcn.10003f58
mov dword [ebp - 0x14], esi
push str.on.kivriel
mov ecx, str.ais_cmp_secureline
call fcn.10005ac3
mov edi, dword [ebp - 0xc]
mov eax, dword [ebp - 0x14]
xor edi, 0x52e45f9a
inc eax
mov dword [ebp - 0xc], edi
pop ecx
mov dword [ebp - 0x14], eax
cmp byte [eax + str.Ereversed], 0
jne 0x1000d2b2
push str.The_showing_of_this_message_is_not_limited.
mov edx, edi
call fcn.10004563
mov eax, dword [ebp - 0x144]
pop ecx
cmp eax, dword [ebp - 0x14]
jae 0x1000d322
mov edi, dword [ebp - 0x18]
xor edi, 0x8069b169
cmp eax, 0x42a
jne 0x1000d30b
call fcn.10003f79
call fcn.10003d14
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp eax, dword [ebp - 0x14]
jb 0x1000d2ff
mov edx, 0x10031040
mov ecx, 0x1003ed90
call fcn.10004924
mov edx, str.Ereversed
mov eax, edx
add edi, 0xd9a63db5
inc eax
cmp byte [eax], 0
jne 0x1000d338
mov ecx, dword [ebp - 0x10]
mov al, byte [ebp - 1]
mov byte [ebp + ecx - 0xdb0], al
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp eax, 0x100
jb 0x1000d22c
or dword [ebp - 0x18], 0x292baea0
mov dword [ebp - 0x38], edx
push 0x10031060
mov ecx, str.muesum.retsehcor
call fcn.10005ac3
mov eax, dword [ebp - 0x38]
xor edi, 0x61a1703
inc eax
pop ecx
mov dword [ebp - 0x38], eax
cmp byte [eax], 0
jne 0x1000d36d
imul ecx, dword [ebp - 0x18], 0x6aecdc62
mov edx, esi
mov dword [0x1003ed8c], edi
mov dword [ebp - 0xc], esi
mov dword [ebp - 0x10], esi
mov dword [ebp - 8], edi
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x34], edi
jmp 0x1000d3b2
mov ecx, dword [ebp - 0x18]
lea eax, [edx + 1]
mov edx, esi
movzx eax, al
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x38], edx
cmp byte [0x1003ed90], dl
je 0x1000d3f2
push ecx
push ecx
call fcn.10004af5
mov eax, edi
add esp, 8
xor eax, 0xbbfbce79
inc edx
mov dword [ebp - 8], eax
mov edi, eax
mov dword [0x1003ed8c], eax
cmp byte [edx + 0x1003ed90], 0
jne 0x1000d3c8
mov dword [ebp - 0x38], edx
jmp 0x1000d3f5
mov edi, dword [ebp - 0x34]
call fcn.10004828
cmp dword [ebp - 0x38], 0x221b
jae 0x1000d415
mov eax, dword [ebp - 8]
xor eax, 0x51be9cbc
mov dword [ebp - 0x18], eax
call fcn.10003f79
jmp 0x1000d428
mov ecx, str.pj.ihcugamay.uba
call fcn.10004630
mov edi, dword [ebp - 0x18]
or edi, 0x9bd80cba
mov eax, dword [ebp - 0x14]
imul edi, edi, 0xa0bd997e
push 0xb
mov cl, byte [ebp + eax - 0xdb0]
mov eax, dword [ebp - 0xc]
movzx edx, cl
add eax, edx
mov dword [ebp - 8], edi
mov edi, dword [ebp - 0x14]
movzx eax, al
mov dword [ebp - 0xc], eax
mov al, byte [ebp + eax - 0xdb0]
mov byte [ebp + edi - 0xdb0], al
mov eax, dword [ebp - 0xc]
mov byte [ebp + eax - 0xdb0], cl
mov eax, edi
mov ecx, dword [ebp - 0x10]
mov edi, dword [ebp - 8]
mov dword [ebp - 8], edi
movzx eax, byte [ebp + eax - 0xdb0]
add eax, edx
mov dword [ebp - 0x34], edi
mov edx, dword [ebp - 0x14]
movzx eax, al
mov al, byte [ebp + eax - 0xdb0]
xor al, byte [ebp + ecx - 0xb8]
movzx eax, al
mov word [ebp + ecx*2 - 0x3a0], ax
inc ecx
pop eax
mov dword [ebp - 0x10], ecx
cmp ecx, eax
jb 0x1000d3af
push ecx
push ecx
mov edx, edi
call fcn.10005ab7
mov ecx, dword [ebp - 0x18]
add esp, 8
mov eax, ecx
mov edx, str.Ereversed
or eax, 0x29a790b3
mov dword [ebp - 0x38], eax
push ecx
push ecx
call fcn.10004af5
add esp, 8
inc edx
cmp byte [edx], 0
jne 0x1000d4c8
xor eax, eax
mov word [ebp - 0x38a], ax
call fcn.100056e8
mov cl, byte [0x1003ed90]
lea edi, [ebp - 0x2a8]
mov eax, esi
mov esi, str.URLAssociations
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
cmp cl, byte [ebp - 0x2a8]
jne 0x1000d56b
test cl, cl
je 0x1000d525
cmp byte [ebp + eax - 0x2a8], 0
je 0x1000d525
mov cl, byte [eax + 0x1003ed91]
inc eax
cmp cl, byte [ebp + eax - 0x2a8]
je 0x1000d507
mov ecx, dword [ebp - 0x148]
mov dword [ebp - 0x34], eax
cmp ecx, eax
jae 0x1000d56b
mov edi, dword [ebp - 0x38]
mov esi, eax
cmp ecx, 0x308
jne 0x1000d545
and edi, 0x370c99ea
mov edx, str.titlocyrilliccmb
mov ecx, str.slessurb
xor edi, 0x8ad323ac
call fcn.10004c6d
mov ecx, dword [ebp - 0x148]
inc ecx
mov dword [ebp - 0x148], ecx
cmp ecx, esi
jb 0x1000d537
mov eax, dword [ebp - 0x18]
lea edi, [ebp - 0x2b4]
mov esi, 0x10031144
add eax, 0x650d7880
mov dword [ebp - 8], eax
movsd dword es:[edi], dword [esi]
lea ecx, [eax - 0x3948d1d6]
mov dword [ebp - 0x10], ecx
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
xor esi, esi
mov dword [ebp - 0x34], esi
mov eax, esi
mov byte [ebp + eax - 0xeb0], al
inc eax
cmp eax, 0x100
jb 0x1000d596
mov edi, esi
xor edx, edx
mov cl, byte [ebp + edi - 0xeb0]
mov eax, edi
mov byte [ebp - 1], cl
div dword [ebp - 0x118]
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x2b4]
add eax, dword [ebp - 0x34]
add ecx, eax
movzx ecx, cl
mov dword [ebp - 0x34], ecx
mov al, byte [ebp + ecx - 0xeb0]
mov byte [ebp + edi - 0xeb0], al
inc edi
mov al, byte [ebp - 1]
mov byte [ebp + ecx - 0xeb0], al
cmp edi, 0x100
jb 0x1000d5a7
mov edi, esi
mov dword [ebp - 0x34], esi
mov edx, esi
lea eax, [edx + 1]
movzx edx, al
mov dword [ebp - 0x38], edx
mov cl, byte [ebp + edx - 0xeb0]
movzx eax, cl
mov dword [ebp - 0xc], eax
add eax, edi
movzx esi, al
mov dword [ebp - 0x14], esi
mov al, byte [ebp + esi - 0xeb0]
mov byte [ebp + edx - 0xeb0], al
mov byte [ebp + esi - 0xeb0], cl
call fcn.100056e8
push 0xa
pop eax
mov ecx, eax
lea edi, [ebp - 0x174]
mov esi, str.._AUImplementsBase_Details_WRL_Microsoft__
mov al, byte [ebp - 0x30]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
cmp al, byte [ebp - 0x174]
jne 0x1000d67f
xor esi, esi
test al, al
je 0x1000d67f
cmp byte [ebp + esi - 0x174], 0
je 0x1000d67f
mov eax, 0x1003ed90
mov edx, eax
mov ecx, eax
call fcn.100043c9
mov al, byte [esi + 0x1003ec11]
inc esi
cmp al, byte [ebp + esi - 0x174]
je 0x1000d653
mov edx, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x34]
mov esi, dword [ebp - 0x10]
mov edi, dword [ebp - 0x14]
xor esi, 0xa0a404ae
movzx eax, byte [ebp + edx - 0xeb0]
add eax, dword [ebp - 0xc]
movzx eax, al
mov dword [ebp - 0x10], esi
mov dword [0x1003ebb8], esi
mov al, byte [ebp + eax - 0xeb0]
xor al, byte [ebp + ecx - 0xf8]
movzx eax, al
mov word [ebp + ecx*2 - 0x45c], ax
inc ecx
mov dword [ebp - 0x34], ecx
cmp ecx, 0xd
jb 0x1000d5f9
xor eax, eax
mov ecx, str.on.negnid
mov word [ebp - 0x442], ax
call fcn.10004630
mov edx, dword [ebp - 8]
xor eax, eax
mov edi, eax
cmp byte [0x1003ed90], al
je 0x1000d75e
and edx, 0x23fbf5a4
inc edi
cmp byte [edi + 0x1003ed90], al
jne 0x1000d6f0
cmp dword [ebp - 0x120], edi
jae 0x1000d75e
mov dword [ebp - 0x34], edx
mov ecx, edx
cmp dword [ebp - 0x120], 0x134d
mov eax, ecx
jne 0x1000d730
mov edx, str.pj.odiakkoh.ustebme
mov ecx, 0x1003ed90
call fcn.10004924
imul eax, dword [ebp - 0x34], 0xdb985c23
or eax, 0x45ae5a51
mov edx, esi
mov ecx, eax
mov dword [ebp - 8], eax
push ecx
push ecx
mov dword [ebp - 0x34], ecx
call fcn.10005ab7
mov eax, dword [ebp - 0x120]
add esp, 8
inc eax
mov dword [ebp - 0x120], eax
cmp eax, edi
jb 0x1000d70c
xor eax, eax
mov edx, ecx
push 8
pop ecx
mov esi, str.avcfg:__settings_DataScan_Enabled
mov dword [ebp - 0xc], eax
lea edi, [ebp - 0x4b0]
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
movsw word es:[edi], word [esi]
mov byte [ebp + ecx - 0xfb0], cl
inc ecx
cmp ecx, 0x100
jb 0x1000d775
mov esi, str.ddalarabic
lea edi, [ebp - 0x23c]
and edx, 0xc7621552
mov ecx, eax
mov dword [ebp - 8], edx
mov dword [0x1003ed8c], edx
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x34], ecx
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, dword [ebp - 0xc]
mov edi, edx
mov al, byte [ebp + ecx - 0xfb0]
xor edx, edx
mov byte [ebp - 1], al
mov eax, ecx
push 0x21
pop ecx
div ecx
movzx ecx, byte [ebp - 1]
movzx eax, byte [ebp + edx - 0x4b0]
add eax, esi
add ecx, eax
movzx eax, cl
mov dword [ebp - 0xc], eax
call fcn.10004828
mov al, byte [0x1003ed90]
xor esi, esi
cmp al, byte [ebp - 0x23c]
jne 0x1000d87c
test al, al
je 0x1000d81d
cmp byte [ebp + esi - 0x23c], 0
je 0x1000d81d
push str.kiyeoksioskorean
mov ecx, str.vbxVvbttrh
call fcn.10005ac3
mov al, byte [esi + 0x1003ed91]
inc esi
pop ecx
cmp al, byte [ebp + esi - 0x23c]
je 0x1000d7ef
cmp dword [ebp - 0x11c], esi
jae 0x1000d87c
mov edx, 0x1003ec10
mov ecx, 0x10031240
call fcn.10004ecb
cmp dword [ebp - 0x11c], 0x1761
jne 0x1000d858
mov eax, dword [ebp - 8]
xor eax, 0x518b520a
mov dword [ebp - 8], eax
mov dword [0x1003ed8c], eax
call fcn.10005d87
mov edi, dword [ebp - 8]
imul eax, edi, 0x31130464
mov dword [ebp - 0x10], eax
mov dword [0x1003ebb8], eax
call fcn.100052fe
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp eax, esi
jb 0x1000d825
mov esi, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x34]
mov al, byte [ebp + esi - 0xfb0]
mov byte [ebp + ecx - 0xfb0], al
inc ecx
mov al, byte [ebp - 1]
mov byte [ebp + esi - 0xfb0], al
mov dword [ebp - 0x34], ecx
cmp ecx, 0x100
jb 0x1000d7ae
push 6
pop ecx
mov esi, str.pj.awaniko.ukusugakanatik
lea edi, [ebp - 0x310]
rep movsd dword es:[edi], dword [esi]
mov cl, byte [ebp - 0x30]
movsw word es:[edi], word [esi]
xor esi, esi
cmp cl, byte [ebp - 0x310]
jne 0x1000d90c
mov edi, esi
test cl, cl
je 0x1000d8f3
cmp byte [ebp + edi - 0x310], 0
je 0x1000d8f3
mov ecx, str.Unable_to_set_security_info_to_the_default_desktop_
call fcn.10005468
mov cl, byte [edi + 0x1003ec11]
inc edi
cmp cl, byte [ebp + edi - 0x310]
je 0x1000d8cb
mov eax, dword [0x1003ebb8]
mov edi, dword [0x1003ed8c]
mov dword [ebp - 0x10], eax
mov al, byte [0x1003ec10]
mov dword [ebp - 8], edi
mov byte [ebp - 0x30], al
mov dword [ebp - 0xc], esi
mov eax, esi
mov edi, esi
inc eax
movzx eax, al
mov dword [ebp - 0x14], eax
push 0xa
mov cl, byte [ebp + eax - 0xfb0]
mov eax, dword [ebp - 0xc]
movzx edx, cl
add eax, edx
mov dword [ebp - 0x34], edx
mov edx, dword [ebp - 0x14]
movzx eax, al
mov dword [ebp - 0xc], eax
mov al, byte [ebp + eax - 0xfb0]
mov byte [ebp + edx - 0xfb0], al
mov eax, dword [ebp - 0xc]
mov byte [ebp + eax - 0xfb0], cl
mov eax, edx
movzx eax, byte [ebp + eax - 0xfb0]
add eax, dword [ebp - 0x34]
movzx eax, al
mov al, byte [ebp + eax - 0xfb0]
xor al, byte [ebp + edi - 0x94]
movzx eax, al
mov word [ebp + edi*2 - 0x358], ax
inc edi
pop eax
cmp edi, eax
mov eax, edx
jb 0x1000d913
xor eax, eax
mov edx, 0x1003ed90
mov word [ebp - 0x344], ax
mov ecx, str.bizographics.com
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x20]
mov dword [ebp - 0x18], eax
call fcn.10004ecb
mov al, byte [ebp - 0x30]
lea edi, [ebp - 0x1a8]
mov ecx, esi
mov esi, str.lp.tsezc
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
cmp al, byte [ebp - 0x1a8]
jne 0x1000d9da
test al, al
je 0x1000d9da
cmp byte [ebp + ecx - 0x1a8], 0
je 0x1000d9da
mov al, byte [ecx + 0x1003ec11]
inc ecx
cmp al, byte [ebp + ecx - 0x1a8]
je 0x1000d9bc
movzx eax, byte [ebp + ecx - 0x1a8]
movzx ecx, byte [ecx + 0x1003ec10]
sub ecx, eax
cmp ecx, 0x2364
jbe 0x1000da05
mov eax, dword [ebp - 0x10]
and eax, 0xbd0dd7d
mov dword [ebp - 8], eax
mov dword [0x1003ed8c], eax
jmp 0x1000da11
mov eax, dword [ebp - 8]
imul ecx, eax, 0x443e4412
mov dword [ebp - 0x10], ecx
mov edx, eax
mov ecx, str.RW_SNX_WEB_AUTOSNX_CHROME
call fcn.100050f8
push 8
pop ecx
mov esi, str.avcfg:__settings_Passwords_Enabled
lea edi, [ebp - 0x218]
rep movsd dword es:[edi], dword [esi]
xor edx, edx
mov dword [ebp - 0x34], edx
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
cmp byte [ebp - 0x218], 0x45
jne 0x1000da7f
mov edi, dword [ebp - 8]
mov al, 0x45
test al, al
je 0x1000da7f
cmp byte [ebp + edx - 0x218], 0
je 0x1000da7f
push str.._AUFactory_PwdGuardianManager_detail_pam_asw__
push str.tp_pmpbn_query_interval
mov edx, str.AntiSpywareProduct
mov ecx, edi
call fcn.10004106
mov edx, dword [ebp - 0x34]
inc edx
pop ecx
pop ecx
mov dword [ebp - 0x34], edx
mov al, byte [edx + str.Ereversed]
cmp al, byte [ebp + edx - 0x218]
je 0x1000da43
movzx eax, byte [ebp + edx - 0x218]
movzx ecx, byte [edx + str.Ereversed]
sub ecx, eax
cmp ecx, 0x3a8
jbe 0x1000dab0
mov edi, dword [ebp - 8]
push ecx
push ecx
mov ecx, edi
call fcn.10004af5
mov eax, edi
add esp, 8
and eax, 0x2c5f8d04
jmp 0x1000dac0
call fcn.10005d87
mov eax, dword [ebp - 0x10]
mov edi, dword [ebp - 8]
and eax, 0xf3963cb3
mov edx, str.Ereversed
mov dword [ebp - 0x10], eax
mov ecx, str.pj.atika.otasim
mov dword [0x1003ebb8], eax
call fcn.10004ecb
mov eax, dword [ebp - 0x10]
xor esi, esi
mov edx, esi
mov dword [ebp - 0x34], eax
cmp byte [0x1003ec78], dl
je 0x1000db04
imul eax, eax, 0x6bf79e18
inc edx
cmp byte [edx + 0x1003ec78], 0
mov dword [0x1003ebb8], eax
jne 0x1000dae9
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x34], eax
push ecx
mov ecx, eax
call fcn.10005d78
pop ecx
cmp edx, 0x3c3
jbe 0x1000db29
mov edi, dword [ebp - 0x34]
add edi, 0x4cc45b30
mov dword [ebp - 8], edi
mov dword [0x1003ed8c], edi
jmp 0x1000db37
lea eax, [edi + 0x25717cc9]
mov dword [ebp - 0x10], eax
mov dword [0x1003ebb8], eax
mov ecx, dword [ebp - 0x18]
call fcn.1000b83d
mov ecx, dword [ebp - 0x18]
lea edx, [ebp - 0x3d0]
call fcn.10010055
test eax, eax
je 0x1000e25f
mov ecx, dword [ebp - 0x18]
lea edx, [ebp - 0x424]
call fcn.10010055
test eax, eax
je 0x1000e124
mov ecx, dword [ebp - 0x18]
lea edx, [ebp - 0x370]
call fcn.10010055
test eax, eax
je 0x1000e099
mov ecx, dword [ebp - 0x18]
lea edx, [ebp - 0x440]
call fcn.10010055
test eax, eax
je 0x1000e011
mov ecx, dword [ebp - 0x18]
lea edx, [ebp - 0x388]
call fcn.10010055
test eax, eax
je 0x1000dfa0
mov ecx, dword [ebp - 0x18]
lea edx, [ebp - 0x3ec]
call fcn.10010055
test eax, eax
je 0x1000df28
mov ecx, dword [ebp - 0x18]
lea edx, [ebp - 0x408]
call fcn.10010055
test eax, eax
je 0x1000dea6
mov ecx, dword [ebp - 0x18]
lea edx, [ebp - 0x324]
call fcn.10010055
test eax, eax
je 0x1000dde6
mov ecx, dword [ebp - 0x18]
lea edx, [ebp - 0x3a0]
call fcn.10010055
test eax, eax
je 0x1000dd0a
mov edi, dword [ebp - 0x18]
lea edx, [ebp - 0x45c]
mov ecx, edi
call fcn.10010055
test eax, eax
je 0x1000dcb3
lea edx, [ebp - 0x358]
mov ecx, edi
call fcn.10010055
test eax, eax
je 0x1000dc54
mov eax, dword [ebp - 0x3c]
push 0
pop edx
mov eax, dword [eax]
cmp eax, dword [ebp - 0x40]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 8]
jne 0x1000bda0
mov eax, dword [ebp - 0x1e4]
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
mov eax, 0xba
mov dword [ebp - 0x70], 0x1e99
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x68], 0xf28
mov dword [ebp - 0x64], 0xee7
mov dword [ebp - 0x60], 0x1be3
mov dword [ebp - 0x5c], 0x1f79
mov dword [ebp - 0x58], 0x1e81
mov dword [ebp - 0x54], 0x1919
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], 0x25f3
cmp esi, 8
je 0x1000dca8
inc esi
cmp esi, 0xc
jl 0x1000dc9d
mov eax, dword [ebp + esi*4 - 0x70]
xor eax, 0xbb
jmp 0x1000dc4b
xor eax, eax
mov dword [ebp - 0x70], 0x10ae
inc eax
mov dword [ebp - 0x6c], 0x1550
mov dword [ebp - 0x68], 0x1e2d
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x60], 0x194d
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x54], 0xc2c
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], 0x1f34
mov dword [ebp - 0x48], 0x127b
mov dword [ebp - 0x44], eax
cmp esi, 6
je 0x1000dd01
inc esi
cmp esi, 0xc
jl 0x1000dcf6
mov eax, dword [ebp + esi*4 - 0x70]
jmp 0x1000dc4b
mov ecx, esi
mov dword [ebp - 0x3c], esi
cmp byte [0x1003ed90], cl
je 0x1000dd32
imul eax, edi, 0x2581e215
mov dword [ebp - 0x10], eax
mov dword [0x1003ebb8], eax
inc ecx
cmp byte [ecx + 0x1003ed90], 0
jne 0x1000dd25
mov dword [ebp - 0x3c], ecx
call fcn.100056e8
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x40], eax
jae 0x1000dd82
mov edi, dword [ebp - 0x10]
add edi, 0x696a78c9
mov dword [ebp - 8], edi
mov edi, dword [ebp - 0x40]
call fcn.100052fe
cmp edi, 0x2062
jne 0x1000dd6a
mov edx, str.Ereversed
mov ecx, str.ideographicselfparen
call fcn.10004ecb
mov edx, 0x100314d0
mov ecx, 0x1003ec10
call fcn.10004924
inc edi
cmp edi, dword [ebp - 0x3c]
jb 0x1000dd4e
mov edi, dword [ebp - 8]
mov eax, str.Ereversed
imul edi, edi, 0x4a378a10
inc eax
cmp byte [eax], 0
jne 0x1000dd87
push 0x54
pop eax
mov dword [0x1003ed8c], edi
mov dword [ebp - 0x230], 0xabc
mov dword [ebp - 0x22c], eax
mov dword [ebp - 0x228], eax
mov dword [ebp - 0x224], 0x13a7
mov dword [ebp - 0x220], eax
mov dword [ebp - 0x21c], 0x223e
cmp esi, 2
je 0x1000ddd7
inc esi
cmp esi, 6
jl 0x1000ddcc
mov eax, dword [ebp + esi*4 - 0x230]
xor eax, 0x55
jmp 0x1000dc4b
lea eax, [edi - 0xc61107a]
mov dword [ebp - 0x214], 0x116a
mov dword [0x1003ebb8], eax
mov ecx, esi
xor eax, eax
mov dword [ebp - 0x210], 0x15db
inc eax
mov dword [ebp - 0x20c], 0x59b
mov dword [ebp - 0x218], eax
mov dword [ebp - 0x208], 0x522
mov dword [ebp - 0x204], eax
mov dword [ebp - 0x200], 0x144e
mov dword [ebp - 0x1fc], 0xfbf
mov dword [ebp - 0x1f8], eax
cmp ecx, 8
je 0x1000de4f
inc ecx
cmp ecx, 9
jl 0x1000de44
mov eax, dword [ebp + ecx*4 - 0x218]
mov dword [ebp - 0x40], eax
call fcn.10005059
cmp byte [0x1003ec78], 0
je 0x1000de77
imul edi, edi, 0xc06d045d
inc esi
cmp byte [esi + 0x1003ec78], 0
jne 0x1000de67
call fcn.10003d14
cmp esi, 0x25b3
jae 0x1000de8c
or edi, 0xb4d4228e
jmp 0x1000de98
mov edi, dword [0x1003ebb8]
xor edi, 0x48defba6
mov eax, dword [ebp - 0x40]
mov dword [0x1003ed8c], edi
jmp 0x1000dc4b
xor eax, eax
mov dword [ebp - 0x174], 0x126
inc eax
mov dword [ebp - 0x170], 0x1c1e
push 0xb
mov dword [ebp - 0x16c], eax
mov dword [ebp - 0x164], eax
mov dword [ebp - 0x168], 0x1570
mov dword [ebp - 0x160], 0x1a78
mov dword [ebp - 0x15c], 0x1756
mov dword [ebp - 0x158], 0x13f6
mov dword [ebp - 0x154], 0x2479
mov dword [ebp - 0x150], 0x12b6
mov dword [ebp - 0x14c], 0xc73
pop eax
cmp esi, 4
je 0x1000df1c
inc esi
cmp esi, eax
jl 0x1000df12
mov eax, dword [ebp + esi*4 - 0x174]
jmp 0x1000dc4b
xor eax, eax
mov dword [ebp - 0x19c], 0x289
inc eax
mov dword [ebp - 0x198], 0x223c
push 0xa
mov dword [ebp - 0x184], eax
mov dword [ebp - 0x178], eax
mov dword [ebp - 0x194], 0xe2
mov dword [ebp - 0x190], 0x173e
mov dword [ebp - 0x18c], 0x185f
mov dword [ebp - 0x188], 0x15eb
mov dword [ebp - 0x180], 0x25a2
mov dword [ebp - 0x17c], 0x12ec
pop eax
cmp esi, 9
je 0x1000df94
inc esi
cmp esi, eax
jl 0x1000df8a
mov eax, dword [ebp + esi*4 - 0x19c]
jmp 0x1000dc4b
and edi, 0xa3c094d7
mov dword [ebp - 0x6c], 0x10d2
xor eax, eax
mov dword [0x1003ed8c], edi
inc eax
mov dword [ebp - 0x68], 0xd06
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x64], 0x13fa
mov dword [ebp - 0x60], 0x1001
mov dword [ebp - 0x5c], 0x2131
mov dword [ebp - 0x58], 0x191f
mov dword [ebp - 0x54], 0x2065
mov dword [ebp - 0x50], 0x52
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x48], 0x795
mov dword [ebp - 0x44], 0x6f9
test esi, esi
je 0x1000e008
inc esi
cmp esi, 0xd
jl 0x1000dffe
mov eax, dword [ebp + esi*4 - 0x74]
jmp 0x1000dc4b
mov eax, dword [ebp - 0x10]
add eax, 0xfdbcc606
mov dword [ebp - 0x19c], 0x385
mov dword [0x1003ed8c], eax
mov eax, 0xb6
push 0xa
mov dword [ebp - 0x198], eax
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x184], eax
mov dword [ebp - 0x194], 0x201d
mov dword [ebp - 0x18c], 0x144e
mov dword [ebp - 0x188], 0x1300
mov dword [ebp - 0x180], 0xaf1
mov dword [ebp - 0x17c], 0x852
mov dword [ebp - 0x178], 0xba6
pop eax
cmp esi, 3
je 0x1000e088
inc esi
cmp esi, eax
jl 0x1000e07e
mov eax, dword [ebp + esi*4 - 0x19c]
xor eax, 0xb7
jmp 0x1000dc4b
add edi, 0x724b6e19
mov dword [ebp - 0x7c], 0x18cb
mov eax, 0xa3
mov dword [0x1003ed8c], edi
or edi, 0x42ddf254
mov dword [ebp - 0x78], 0x13bb
mov dword [0x1003ebb8], edi
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x70], 0x2203
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x68], 0x5db
mov dword [ebp - 0x64], 0x15ff
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x5c], 0x2694
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x54], 0x24f8
mov dword [ebp - 0x50], 0x1992
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x48], 0x1556
mov dword [ebp - 0x44], 0x1768
cmp esi, 2
je 0x1000e116
inc esi
cmp esi, 0xf
jl 0x1000e10b
mov eax, dword [ebp + esi*4 - 0x7c]
xor eax, 0xa2
jmp 0x1000dc4b
xor edi, 0x57feaf74
mov cl, byte [0x1003ed90]
mov dword [ebp - 8], edi
mov eax, esi
mov dword [0x1003ed8c], edi
mov esi, str.bc_expired
or edi, 0xe55cbfd7
mov dword [ebp - 0x40], edi
lea edi, [ebp - 0x12c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov edi, dword [ebp - 8]
cmp cl, byte [ebp - 0x12c]
mov dword [ebp - 0x3c], eax
jne 0x1000e190
test cl, cl
je 0x1000e190
cmp byte [ebp + eax - 0x12c], 0
je 0x1000e190
push str.includesubdomains
mov edx, edi
call fcn.10004563
mov eax, dword [ebp - 0x3c]
inc eax
pop ecx
mov cl, byte [eax + 0x1003ed90]
cmp cl, byte [ebp + eax - 0x12c]
jmp 0x1000e15d
call fcn.10005059
mov edx, dword [ebp - 0x3c]
movzx eax, byte [ebp + edx - 0x12c]
movzx edx, byte [edx + 0x1003ed90]
sub edx, eax
cmp edx, 0x1215
jae 0x1000e1c7
mov eax, str.Ereversed
mov edx, eax
mov ecx, eax
call fcn.100043c9
imul eax, edi, 0xd5f2650d
jmp 0x1000e1cf
mov eax, dword [ebp - 0x40]
add eax, 0xf995d2e2
mov dword [0x1003ebb8], eax
mov eax, 0xa6
push 0xb
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x150], eax
xor eax, eax
mov dword [ebp - 0x170], 0x20db
mov dword [ebp - 0x16c], 0x63c
mov dword [ebp - 0x168], 0x150d
mov dword [ebp - 0x164], 0x2349
mov dword [ebp - 0x160], 0x13d6
mov dword [ebp - 0x15c], 0x158
mov dword [ebp - 0x158], 0x7cc
mov dword [ebp - 0x154], 0x2d4
mov dword [ebp - 0x14c], 0x11ec
pop ecx
cmp eax, 9
je 0x1000e24e
inc eax
cmp eax, ecx
jl 0x1000e244
mov eax, dword [ebp + eax*4 - 0x174]
xor eax, 0xa7
jmp 0x1000dc4b
push 0x6d
pop eax
mov dword [ebp - 0x70], 0x1994
mov dword [ebp - 0x6c], 0x19fc
mov dword [ebp - 0x68], 0x722
mov dword [ebp - 0x64], 0x13b3
mov dword [ebp - 0x60], 0x5cd
mov dword [ebp - 0x5c], 0x174b
mov dword [ebp - 0x58], 0xf10
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x48], 0x179f
mov dword [ebp - 0x44], 0x138f
cmp esi, 7
je 0x1000e2b5
inc esi
cmp esi, 0xc
jl 0x1000e2aa
mov eax, dword [ebp + esi*4 - 0x70]
or edi, 0x79c21157
mov dword [0x1003ed8c], edi
xor eax, 0x6c
jmp 0x1000dc4b