Function at 0x10002d54
Capabilities:
Encode data using xor
Encrypt data using rc4 ksa

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2b0
mov ecx, dword [0x10028180]
xor ecx, 0x89515624
mov dword [ebp - 0x14], 0x14
push 8
xor eax, eax
mov dword [ebp - 0x18], ecx
pop edx
mov dword [ebp - 0x10], 0x28
mov ecx, eax
mov dword [ebp - 0xc], 0xffffffcb
sub edx, dword [ebp + ecx*4 - 0x14]
inc ecx
cmp ecx, 3
jl 0x10002d88
push esi
push edi
push 5
pop ecx
mov esi, str.setct_CapRevReqTBEX
mov dword [ebp - 0x19c], edx
lea edi, [ebp - 0x1e4]
mov dword [ebp - 0x14], 0x5ae35708
rep movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x10], 0xe2d588bc
mov ecx, eax
mov dword [ebp - 0xc], 0x492d3a62
mov dword [ebp - 8], eax
mov byte [ebp + ecx - 0x198], cl
inc ecx
cmp ecx, 0x100
jb 0x10002dc4
mov esi, dword [ebp - 0x18]
mov edi, eax
mov dword [ebp - 0x1c], 0x13
mov dword [ebp - 0x48], 9
xor edx, edx
mov cl, byte [ebp + edi - 0x198]
mov eax, edi
mov byte [ebp - 2], cl
div dword [ebp - 0x1c]
movzx ecx, cl
push 0x2e
movzx eax, byte [ebp + edx - 0x1e4]
mov edx, str.._AVCEventPoster_Common_Piriform__
add eax, dword [ebp - 8]
add ecx, eax
xor esi, 0xbf195701
movzx ecx, cl
mov dword [ebp - 8], ecx
mov al, byte [ebp + ecx - 0x198]
mov byte [ebp + edi - 0x198], al
pop eax
add eax, 0xffffffd0
cmp ax, word [ebp - 0x48]
ja 0x10002e46
mov ecx, dword [ebp - 8]
add edx, 2
movzx eax, word [edx]
mov dword [ebp - 0x4c], eax
test ax, ax
jne 0x10002e2a
jmp 0x10002e4c
add esi, 0xb076843
mov al, byte [ebp - 2]
add esi, 0x9c4bf20
inc edi
mov byte [ebp + ecx - 0x198], al
cmp edi, 0x100
jb 0x10002de7
xor eax, eax
mov dword [ebp - 8], eax
mov ecx, eax
mov edi, eax
lea eax, [ecx + 1]
xor esi, 0xb1382fb7
movzx eax, al
mov dword [ebp - 0x1c], eax
mov cl, byte [ebp + eax - 0x198]
mov eax, dword [ebp - 8]
movzx edx, cl
add eax, edx
mov dword [ebp - 0x4c], edx
mov edx, dword [ebp - 0x1c]
movzx eax, al
mov dword [ebp - 8], eax
mov al, byte [ebp + eax - 0x198]
mov byte [ebp + edx - 0x198], al
mov eax, dword [ebp - 8]
mov byte [ebp + eax - 0x198], cl
mov ecx, edx
movzx eax, byte [ebp + ecx - 0x198]
add eax, dword [ebp - 0x4c]
movzx eax, al
mov al, byte [ebp + eax - 0x198]
xor al, byte [ebp + edi - 0x14]
mov byte [ebp + edi - 0x260], al
inc edi
cmp edi, 0xc
jb 0x10002e6e
xor edx, edx
mov ecx, str.MadvFreeDiscardableMemoryAllocator
mov eax, edx
inc eax
lea ecx, [ecx + 2]
cmp eax, 0xf51
jl 0x10002f00
cmp word [ecx], dx
jne 0x10002ee1
cmp eax, 0x1f85
jle 0x10002f06
imul esi, esi, 0x365ebd16
jmp 0x10002f0c
and esi, 0xa1c05fc3
and esi, 0x3064c2a3
or esi, 0x742b4ccc
mov ecx, esi
call fcn.100020c3
push 0x4d
mov edi, 0x2206
mov eax, str.MadvFreeDiscardableMemoryAllocator
pop ecx
add edi, ecx
lea eax, [eax + 2]
cmp edi, 0x638
ja 0x10002f42
movzx ecx, word [eax]
test ecx, ecx
jne 0x10002f26
xor esi, 0x8e1d7bde
jmp 0x10002f55
sub esi, 0x38ebe295
call fcn.10001a30
or esi, 0xb4e9bccd
xor edx, edx
xor esi, 0x5c16d8
mov byte [ebp - 0x254], dl
mov dword [ebp - 0x18], esi
lea edi, [ebp - 0x14]
mov esi, str.SetCookie
mov dword [ebp - 0x78], 0x5b04a75e
mov dword [ebp - 0x74], 0x852cc36c
mov eax, edx
mov dword [ebp - 0x70], 0xc77b71f2
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov edi, edx
mov byte [ebp + eax - 0x198], al
inc eax
cmp eax, 0x100
jb 0x10002f89
mov esi, edx
xor edx, edx
mov cl, byte [ebp + esi - 0x198]
mov eax, esi
mov byte [ebp - 2], cl
div dword [ebp - 0x48]
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x14]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [ebp + edi - 0x198]
mov byte [ebp + esi - 0x198], al
inc esi
mov al, byte [ebp - 2]
mov byte [ebp + edi - 0x198], al
cmp esi, 0x100
jb 0x10002f9a
xor eax, eax
mov dword [ebp - 8], eax
mov edi, eax
mov esi, eax
lea eax, [edi + 1]
movzx edi, al
mov eax, dword [ebp - 8]
mov cl, byte [ebp + edi - 0x198]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [ebp - 8], eax
mov al, byte [ebp + eax - 0x198]
mov byte [ebp + edi - 0x198], al
mov eax, dword [ebp - 8]
mov byte [ebp + eax - 0x198], cl
movzx eax, byte [ebp + edi - 0x198]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x198]
xor al, byte [ebp + esi - 0x78]
mov byte [ebp + esi - 0x250], al
inc esi
cmp esi, 0xc
jb 0x10002fe4
xor eax, eax
mov ecx, str.._AVCEventPoster_Common_Piriform__
mov edx, eax
add ecx, 2
inc edx
cmp edx, 0x2527
je 0x1000305b
cmp word [ecx], ax
jne 0x10003045
mov esi, dword [ebp - 0x18]
jmp 0x10003064
mov esi, dword [ebp - 0x18]
or esi, 0x1409052
or esi, 0xbb3ac625
push ecx
xor esi, 0x48147954
call fcn.10001915
xor edx, edx
pop ecx
cmp byte [str._tconst_CleaningCompleteHeading_t_t_8042_], dl
je 0x100030a9
inc edx
cmp edx, 0x102a
jl 0x10003095
cmp byte [edx + str._tconst_CleaningCompleteHeading_t_t_8042_], 0
jne 0x10003081
jmp 0x100030a9
push ecx
push ecx
mov ecx, str.missing_mandatory_ticket
call fcn.10001c24
pop ecx
pop ecx
add esi, 0x331ad947
sub esi, 0xa5486ca
mov edx, str.DetectFile1_commonappdata_Norton
mov ecx, esi
call fcn.10001134
xor eax, eax
mov dword [ebp - 0x8c], 0x5e
mov byte [ebp - 0x244], al
mov edx, eax
mov dword [ebp - 0x88], 0x3e
mov ecx, eax
mov dword [ebp - 0x84], 0x3d
mov dword [ebp - 0x80], 0x3b
mov dword [ebp - 0x7c], 0xfffffeec
sub edx, dword [ebp + ecx*4 - 0x8c]
inc ecx
cmp ecx, 5
jl 0x100030f3
mov dword [ebp - 0x1a0], edx
mov ecx, eax
mov dword [ebp - 0x4c], 0xe
mov edx, str.trackname
mov dword [ebp - 0x34], 0x49
mov dword [ebp - 0x30], 0xffffffaa
mov edi, eax
inc edi
lea edx, [edx + 2]
cmp edi, 0x5df
je 0x10003137
cmp word [edx], ax
jne 0x10003124
jmp 0x1000313d
sub esi, 0xc120f7
mov edx, dword [ebp - 0x4c]
add esi, 0xd8ccfadd
add edx, dword [ebp + ecx*4 - 0x34]
inc ecx
mov dword [ebp - 0x4c], edx
mov edx, str.trackname
cmp ecx, 2
jl 0x10003122
push 0x1a
pop ecx
mov dword [ebp - 0x18], esi
lea edi, [ebp - 0x1e8]
mov dword [ebp - 0x1c], ecx
mov esi, str.keyblob_header_parse_error
mov byte [ebp - 0xd], cl
mov edx, eax
push 6
pop ecx
rep movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x14], 0xdeebc391
mov word [ebp - 0x10], 0xd99a
mov byte [ebp - 0xe], 0x5b
movsw word es:[edi], word [esi]
mov word [ebp - 0xc], 0x4459
mov byte [ebp - 0xa], 0xb1
movsb byte es:[edi], byte [esi]
mov esi, dword [ebp - 0x18]
mov edi, eax
add esi, 0x5d73586e
imul esi, esi, 0x4ed5772b
mov byte [ebp + edx - 0x198], dl
inc edx
cmp edx, 0x100
jb 0x1000319f
mov dword [ebp - 0x18], esi
mov esi, eax
xor edx, edx
mov cl, byte [ebp + esi - 0x198]
mov eax, esi
mov byte [ebp - 2], cl
div dword [ebp - 0x1c]
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x1e8]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [ebp + edi - 0x198]
mov byte [ebp + esi - 0x198], al
inc esi
mov al, byte [ebp - 2]
mov byte [ebp + edi - 0x198], al
cmp esi, 0x100
jb 0x100031ba
xor eax, eax
mov dword [ebp - 0x24], 0xb
mov dword [ebp - 8], eax
mov edi, eax
mov esi, eax
lea eax, [edi + 1]
movzx edi, al
mov eax, dword [ebp - 8]
push 0xb
mov cl, byte [ebp + edi - 0x198]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [ebp - 8], eax
mov al, byte [ebp + eax - 0x198]
mov byte [ebp + edi - 0x198], al
mov eax, dword [ebp - 8]
mov byte [ebp + eax - 0x198], cl
movzx eax, byte [ebp + edi - 0x198]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x198]
xor al, byte [ebp + esi - 0x14]
mov byte [ebp + esi - 0x1f8], al
inc esi
pop eax
cmp esi, eax
jb 0x1000320e
xor eax, eax
mov dword [ebp - 0x14], 5
push 0x51
mov byte [ebp - 0x1ed], al
mov ecx, eax
pop edx
mov dword [ebp - 0x10], 0x40
mov dword [ebp - 0xc], 0xffffff6b
add edx, dword [ebp + ecx*4 - 0x14]
inc ecx
cmp ecx, 3
jl 0x1000328a
push 0x1e
pop ecx
mov dword [ebp - 0x20], ecx
lea edi, [ebp - 0x1ec]
mov byte [ebp - 0xe], cl
mov esi, str.._AVFileBase_commchannel_asw__
push 0xb
pop ecx
mov byte [ebp - 9], cl
push 7
pop ecx
rep movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x1a4], edx
mov ecx, eax
mov dword [ebp - 0x14], 0x6be5633e
mov word [ebp - 0x10], 0xdead
movsw word es:[edi], word [esi]
mov dword [ebp - 0xd], 0x555dcbe1
mov dword [ebp - 0x1c], eax
movsb byte es:[edi], byte [esi]
mov byte [ebp + ecx - 0x198], cl
inc ecx
cmp ecx, 0x100
jb 0x100032d5
mov edi, dword [ebp - 0x18]
mov esi, eax
xor edx, edx
mov cl, byte [ebp + esi - 0x198]
mov eax, esi
mov byte [ebp - 2], cl
div dword [ebp - 0x20]
movzx ecx, cl
xor edi, 0xc95a2c2
sub edi, 0x321fd3b0
movzx eax, byte [ebp + edx - 0x1ec]
add eax, dword [ebp - 0x1c]
add ecx, eax
movzx ecx, cl
mov dword [ebp - 0x1c], ecx
mov al, byte [ebp + ecx - 0x198]
mov byte [ebp + esi - 0x198], al
inc esi
mov al, byte [ebp - 2]
mov byte [ebp + ecx - 0x198], al
cmp esi, 0x100
jb 0x100032ea
xor eax, eax
mov dword [ebp - 0x18], edi
mov dword [ebp - 8], eax
mov edi, eax
mov esi, eax
lea eax, [edi + 1]
movzx edi, al
mov eax, dword [ebp - 8]
mov cl, byte [ebp + edi - 0x198]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [ebp - 8], eax
mov al, byte [ebp + eax - 0x198]
mov byte [ebp + edi - 0x198], al
mov eax, dword [ebp - 8]
mov byte [ebp + eax - 0x198], cl
movzx eax, byte [ebp + edi - 0x198]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x198]
xor al, byte [ebp + esi - 0x14]
mov byte [ebp + esi - 0x270], al
inc esi
cmp esi, 0xc
jb 0x1000334a
push 9
pop ecx
mov byte [ebp - 0x86], cl
lea edi, [ebp - 0x240]
push 0x38
pop ecx
mov dword [ebp - 0x28], ecx
xor eax, eax
sub dword [ebp - 0x18], 0x65ea925
mov esi, str.com.avast.ipm.ClientParameters.BreachGuardLicenseNumber
mov byte [ebp - 0x7f], cl
push 0xe
pop ecx
rep movsd dword es:[edi], dword [esi]
mov byte [ebp - 0x264], al
mov edi, eax
mov dword [ebp - 0x8c], 0x6562c8f0
mov ecx, eax
mov word [ebp - 0x88], 0x9adc
mov dword [ebp - 0x85], 0x46289968
mov word [ebp - 0x81], 0x5591
mov dword [ebp - 0x7e], 0x9ea27a4b
mov byte [ebp - 0x7a], 0x5e
mov byte [ebp + ecx - 0x198], cl
inc ecx
cmp ecx, 0x100
jb 0x10003408
mov esi, eax
mov dword [ebp - 0x1c], 0x37
xor edx, edx
mov cl, byte [ebp + esi - 0x198]
mov eax, esi
mov byte [ebp - 2], cl
div dword [ebp - 0x1c]
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x240]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [ebp + edi - 0x198]
mov byte [ebp + esi - 0x198], al
inc esi
mov al, byte [ebp - 2]
mov byte [ebp + edi - 0x198], al
cmp esi, 0x100
jb 0x10003421
xor eax, eax
mov dword [ebp - 8], eax
mov edi, eax
mov esi, eax
lea eax, [edi + 1]
movzx edi, al
mov eax, dword [ebp - 8]
push 0x13
mov cl, byte [ebp + edi - 0x198]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [ebp - 8], eax
mov al, byte [ebp + eax - 0x198]
mov byte [ebp + edi - 0x198], al
mov eax, dword [ebp - 8]
mov byte [ebp + eax - 0x198], cl
movzx eax, byte [ebp + edi - 0x198]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x198]
xor al, byte [ebp + esi - 0x8c]
mov byte [ebp + esi - 0x1e4], al
inc esi
pop eax
cmp esi, eax
jb 0x1000346e
mov esi, dword [ebp - 0x18]
mov edi, 0x4a52d1c
or esi, 0x163abc12
mov dword [ebp - 0x58], 0x1f
imul eax, esi, 0x3f30a104
xorps xmm1, xmm1
push 0x49
mov dword [ebp - 0x54], 0x21
xor ecx, ecx
mov dword [ebp - 0x50], 0xffffff77
xorps xmm2, xmm2
mov byte [ebp - 0x1d1], cl
sub edi, eax
mov dword [ebp - 0x10], 0x59
pop eax
mov dword [ebp - 0x5c], eax
and edi, 0x6cc0cdcf
movups xmm0, xmmword [ebp - 0x5c]
push 3
pop esi
psubd xmm1, xmm0
mov dword [ebp - 0x18], edi
movaps xmm0, xmm1
mov dword [ebp - 0x14], esi
psrldq xmm0, 8
mov edx, eax
paddd xmm1, xmm0
mov dword [ebp - 0xc], 0xffffff5c
movups xmm0, xmm1
mov eax, ecx
psrldq xmm0, 4
paddd xmm1, xmm0
movd dword [ebp - 0x1a8], xmm1
add edx, dword [ebp + eax*4 - 0x14]
inc eax
cmp eax, esi
jl 0x10003553
mov esi, str.ais_shl_bhv
mov dword [ebp - 0x1ac], edx
lea edi, [ebp - 0x1cc]
mov dword [ebp - 0x14], 0xd4c3b933
mov dword [ebp - 0x10], 0xd8db7dbd
mov eax, ecx
mov word [ebp - 0xc], 0xee95
movsd dword es:[edi], dword [esi]
mov byte [ebp - 0xa], 0xda
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, ecx
mov byte [ebp + eax - 0x198], al
inc eax
cmp eax, 0x100
jb 0x1000358c
mov esi, ecx
xor edx, edx
mov cl, byte [ebp + esi - 0x198]
mov eax, esi
mov byte [ebp - 2], cl
div dword [ebp - 0x24]
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x1cc]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [ebp + edi - 0x198]
mov byte [ebp + esi - 0x198], al
inc esi
mov al, byte [ebp - 2]
mov byte [ebp + edi - 0x198], al
cmp esi, 0x100
jb 0x1000359d
xor eax, eax
mov edx, 0x99d
push 0x74
mov dword [ebp - 8], eax
mov eax, str.trackname
pop ecx
add edx, ecx
lea eax, [eax + 2]
cmp edx, 0x15cd
ja 0x1000360c
movzx ecx, word [eax]
test ecx, ecx
jne 0x100035f3
mov esi, dword [ebp - 0x18]
jmp 0x10003620
mov esi, dword [ebp - 0x18]
mov edx, esi
push ecx
call fcn.100026a2
add esp, 4
and esi, 0x9201250f
or esi, 0xf2a9bbc2
add esi, 0x3c675f54
call fcn.10001957
xor ecx, ecx
mov edi, ecx
mov edx, ecx
lea eax, [edx + 1]
mov edx, ecx
movzx eax, al
mov dword [ebp - 0x24], eax
mov al, byte [ebp + eax - 0x198]
mov byte [ebp - 2], al
movzx eax, al
mov dword [ebp - 0x1c], eax
add eax, dword [ebp - 8]
movzx eax, al
mov dword [ebp - 8], eax
mov eax, str.missing_mandatory_ticket
inc edx
lea eax, [eax + 2]
cmp edx, 0x1738
jl 0x10003673
cmp word [eax], cx
jne 0x10003660
jmp 0x10003688
mov edx, str._tconst_CleaningCompleteHeading_t_t_8042_
mov ecx, str.Netscape_Server_Gated_Crypto
call fcn.10001667
xor esi, 0x9ede70cf
mov edx, str.missing_mandatory_ticket
mov ecx, str.Netscape_Server_Gated_Crypto
call fcn.10001b43
xor esi, 0x515f084f
mov ecx, str.._AVCEventPoster_Common_Piriform__
push 0x2e
add esi, 0x6ff1fca5
pop edx
lea eax, [edx - 0x30]
push 9
pop edx
cmp ax, dx
ja 0x100036c5
add ecx, 2
movzx eax, word [ecx]
mov edx, eax
test ax, ax
jne 0x100036ab
jmp 0x100036cb
or esi, 0xab03aa00
mov ecx, dword [ebp - 8]
add esi, 0x236e2f27
mov edx, dword [ebp - 0x24]
push 0xb
mov al, byte [ebp + ecx - 0x198]
mov byte [ebp + edx - 0x198], al
mov al, byte [ebp - 2]
mov byte [ebp + ecx - 0x198], al
movzx eax, byte [ebp + edx - 0x198]
add eax, dword [ebp - 0x1c]
movzx eax, al
mov al, byte [ebp + eax - 0x198]
xor al, byte [ebp + edi - 0x14]
mov byte [ebp + edi - 0x204], al
inc edi
pop eax
push 0
pop ecx
cmp edi, eax
jb 0x10003637
push 8
pop edx
push 0x37
pop ecx
xor eax, eax
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x18], esi
mov ecx, eax
mov byte [ebp - 0x1f9], al
mov dword [ebp - 0x14], 0x32
mov dword [ebp - 0xc], 0xffffff9e
sub edx, dword [ebp + ecx*4 - 0x14]
inc ecx
cmp ecx, 3
jl 0x10003742
push 8
pop ecx
mov esi, str.._AVHashInputTooLong_CryptoPP__
mov dword [ebp - 0x1b0], edx
lea edi, [ebp - 0x98]
mov dword [ebp - 0x14], 0x7ac1c43b
rep movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x10], 0x11ecf266
mov ecx, eax
mov dword [ebp - 0xc], 0xb860616d
mov byte [ebp + ecx - 0x198], cl
inc ecx
cmp ecx, 0x100
jb 0x10003779
add dword [ebp - 0x18], 0x190915e5
mov esi, eax
mov edi, eax
xor edx, edx
mov cl, byte [ebp + esi - 0x198]
mov eax, esi
mov byte [ebp - 2], cl
div dword [ebp - 0x58]
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x98]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [ebp + edi - 0x198]
mov byte [ebp + esi - 0x198], al
inc esi
mov al, byte [ebp - 2]
mov byte [ebp + edi - 0x198], al
cmp esi, 0x100
jb 0x10003794
mov edi, dword [ebp - 0x18]
xor eax, eax
mov dword [ebp - 8], eax
mov ecx, eax
mov esi, eax
lea eax, [ecx + 1]
and edi, 0x4429aa20
movzx eax, al
or edi, 0x8d6055b
mov dword [ebp - 0x1c], eax
mov cl, byte [ebp + eax - 0x198]
mov eax, dword [ebp - 8]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [ebp - 8], eax
imul eax, edi, 0x29669947
mov edi, 0x658f3d1a
sub edi, eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x18], edi
mov edi, dword [ebp - 0x1c]
mov al, byte [ebp + eax - 0x198]
mov byte [ebp + edi - 0x198], al
mov eax, dword [ebp - 8]
mov byte [ebp + eax - 0x198], cl
mov ecx, edi
mov edi, dword [ebp - 0x18]
movzx eax, byte [ebp + ecx - 0x198]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x198]
xor al, byte [ebp + esi - 0x14]
mov byte [ebp + esi - 0x280], al
inc esi
cmp esi, 0xc
jb 0x100037e4
mov esi, str.SWATAUAVAW
mov dword [ebp - 0x44], 0x394fd65b
lea edi, [ebp - 0x14]
mov dword [ebp - 0x40], 0x69bc7cab
xor eax, eax
mov dword [ebp - 0x3c], 0xf256ecf
mov byte [ebp - 0x274], al
mov ecx, eax
movsd dword es:[edi], dword [esi]
mov word [ebp - 0x38], 0x4647
mov byte [ebp - 0x36], 0x71
mov dword [ebp - 8], eax
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, dword [ebp - 0x18]
xor esi, 0x7f11532
mov byte [ebp + ecx - 0x198], cl
inc ecx
cmp ecx, 0x100
jb 0x100038ac
mov edi, eax
mov dword [ebp - 0x24], 0xa
mov al, byte [str._tconst_CleaningCompleteHeading_t_t_8042_]
mov byte [ebp - 2], al
xor edx, edx
mov cl, byte [ebp + edi - 0x198]
mov eax, edi
mov byte [ebp - 1], cl
div dword [ebp - 0x24]
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x14]
add eax, dword [ebp - 8]
add ecx, eax
movzx eax, cl
mov ecx, str._tconst_CleaningCompleteHeading_t_t_8042_
mov dword [ebp - 8], eax
mov al, byte [ebp + eax - 0x198]
mov byte [ebp + edi - 0x198], al
mov al, byte [ebp - 2]
test al, al
je 0x10003923
push 9
pop edx
sub al, 0x30
cmp al, dl
ja 0x1000391d
inc ecx
mov al, byte [ecx]
test al, al
jne 0x1000390e
jmp 0x10003923
xor esi, 0xe3e58a94
mov edx, str.DetectFile1_commonappdata_Norton
call fcn.100012eb
mov ecx, dword [ebp - 8]
or esi, 0xb776fecb
mov al, byte [ebp - 1]
inc edi
mov byte [ebp + ecx - 0x198], al
cmp edi, 0x100
jb 0x100038cd
xor eax, eax
mov dword [ebp - 8], eax
mov ecx, eax
mov edi, eax
lea eax, [ecx + 1]
xor esi, 0x74edd97c
movzx eax, al
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], esi
mov dword [0x10028180], esi
mov cl, byte [ebp + eax - 0x198]
mov eax, dword [ebp - 8]
mov esi, dword [ebp - 0x1c]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [ebp - 8], eax
mov al, byte [ebp + eax - 0x198]
mov byte [ebp + esi - 0x198], al
mov eax, dword [ebp - 8]
mov byte [ebp + eax - 0x198], cl
mov ecx, esi
mov esi, dword [ebp - 0x18]
movzx eax, byte [ebp + ecx - 0x198]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x198]
xor al, byte [ebp + edi - 0x44]
mov byte [ebp + edi - 0x88], al
inc edi
cmp edi, 0xf
jb 0x10003952
push 0x37
pop ecx
xor eax, eax
mov dword [ebp - 0x14], ecx
push 9
pop ecx
xor esi, 0x986bf9a9
mov dword [ebp - 0x10], ecx
mov byte [ebp - 0x79], al
mov edx, eax
mov dword [ebp - 0x18], esi
mov ecx, eax
mov dword [ebp - 0xc], 0xffffffc0
sub edx, dword [ebp + ecx*4 - 0x14]
inc ecx
cmp ecx, 3
jl 0x100039e9
mov dword [ebp - 0x44], 6
lea edi, [ebp - 0x6c]
mov dword [ebp - 0x40], 0x48
movaps xmm1, xmm2
mov dword [ebp - 0x3c], 0x4f
mov esi, str.LICENSEE
mov dword [ebp - 0x38], 0xffffff6a
movups xmm0, xmmword [ebp - 0x44]
mov dword [ebp - 0x1b4], edx
movsd dword es:[edi], dword [esi]
psubd xmm1, xmm0
mov dword [ebp - 0x14], 0xcfe9111d
movaps xmm0, xmm1
mov dword [ebp - 0x10], 0xcb1cc884
psrldq xmm0, 8
paddd xmm1, xmm0
movsd dword es:[edi], dword [esi]
movups xmm0, xmm1
mov word [ebp - 0xc], 0xc8b3
psrldq xmm0, 4
paddd xmm1, xmm0
mov byte [ebp - 0xa], 0x3a
movd ecx, xmm1
movsb byte es:[edi], byte [esi]
mov edi, eax
add ecx, 8
mov dword [ebp - 0x1b8], ecx
mov ecx, eax
mov byte [ebp + ecx - 0x198], cl
inc ecx
cmp ecx, 0x100
jb 0x10003a6c
mov esi, eax
mov dl, byte [ebp + esi - 0x198]
mov eax, esi
and eax, 7
movzx ecx, dl
movzx eax, byte [ebp + eax - 0x6c]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [ebp + edi - 0x198]
mov byte [ebp + esi - 0x198], al
inc esi
mov byte [ebp + edi - 0x198], dl
cmp esi, 0x100
jb 0x10003a7e
mov esi, dword [ebp - 0x18]
xor edx, edx
mov ecx, edx
mov dword [ebp - 0x1c], edx
mov edi, edx
lea eax, [edi + 1]
movzx edi, al
push 0x6d
pop edx
mov al, byte [ebp + edi - 0x198]
mov byte [ebp - 1], al
movzx eax, al
mov dword [ebp - 0x24], eax
add eax, ecx
movzx eax, al
add esi, 0xa3bd090
mov dword [ebp - 0x20], eax
mov ecx, str.missing_mandatory_ticket
lea eax, [edx - 0x30]
push 9
pop edx
cmp ax, dx
ja 0x10003b09
add ecx, 2
movzx eax, word [ecx]
mov edx, eax
test ax, ax
jne 0x10003aef
jmp 0x10003b0f
imul esi, esi, 0xe5f71509
add esi, 0x50c8d6c3
call fcn.100024e5
xor edx, edx
mov eax, edx
cmp byte [str.DetectFile1_commonappdata_Norton], al
je 0x10003b3e
inc eax
cmp eax, 0x726
je 0x10003b38
cmp byte [eax + str.DetectFile1_commonappdata_Norton], dl
jne 0x10003b26
jmp 0x10003b3e
sub esi, 0x4641d580
mov ecx, dword [ebp - 0x20]
and esi, 0xee973ea0
add esi, 0xf97e4659
push 0xb
mov al, byte [ebp + ecx - 0x198]
mov byte [ebp + edi - 0x198], al
mov al, byte [ebp - 1]
mov byte [ebp + ecx - 0x198], al
movzx eax, byte [ebp + edi - 0x198]
add eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x1c]
movzx eax, al
mov al, byte [ebp + eax - 0x198]
xor al, byte [ebp + ecx - 0x14]
mov byte [ebp + ecx - 0x1cc], al
inc ecx
pop eax
mov dword [ebp - 0x1c], ecx
cmp ecx, eax
mov ecx, dword [ebp - 0x20]
jb 0x10003ac3
push 0x1f
pop eax
mov dword [ebp - 0x40], eax
lea edi, [ebp - 0x22c]
mov dword [ebp - 0x44], 0x5d
mov dword [ebp - 0x3c], 0x34
mov dword [ebp - 0x38], 0xffffff33
movups xmm1, xmmword [ebp - 0x44]
push 0x1e
pop ecx
paddd xmm1, xmm2
mov dword [ebp - 0x18], esi
movaps xmm0, xmm1
mov byte [ebp - 0x1c1], dl
psrldq xmm0, 8
mov esi, str.app.lif.account.pair_wk_2_account
paddd xmm1, xmm0
mov byte [ebp - 0x14], 0xb0
movups xmm0, xmm1
mov dword [ebp - 0x12], 0xe125e13e
psrldq xmm0, 4
paddd xmm1, xmm0
mov dword [ebp - 0xe], 0xf1e14019
movd eax, xmm1
push 0x21
mov word [ebp - 0xa], 0x4a3c
add eax, ecx
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x1bc], eax
pop eax
push 8
add dword [ebp - 0x18], 0xbc54d8c5
pop ecx
rep movsd dword es:[edi], dword [esi]
mov byte [ebp - 0x13], al
mov eax, edx
movsw word es:[edi], word [esi]
mov byte [ebp + eax - 0x198], al
inc eax
cmp eax, 0x100
jb 0x10003c29
mov edi, edx
xor edx, edx
mov cl, byte [ebp + edi - 0x198]
mov eax, edi
mov byte [ebp - 1], cl
div dword [ebp - 0x54]
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x22c]
add eax, dword [ebp - 0x1c]
add ecx, eax
movzx ecx, cl
mov dword [ebp - 0x1c], ecx
mov al, byte [ebp + ecx - 0x198]
mov byte [ebp + edi - 0x198], al
inc edi
mov al, byte [ebp - 1]
mov byte [ebp + ecx - 0x198], al
cmp edi, 0x100
jb 0x10003c3a
xor eax, eax
mov dword [ebp - 8], eax
mov esi, eax
mov edi, eax
lea eax, [esi + 1]
movzx esi, al
mov eax, dword [ebp - 8]
mov cl, byte [ebp + esi - 0x198]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [ebp - 8], eax
mov al, byte [ebp + eax - 0x198]
mov byte [ebp + esi - 0x198], al
mov eax, dword [ebp - 8]
mov byte [ebp + eax - 0x198], cl
movzx eax, byte [ebp + esi - 0x198]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x198]
xor al, byte [ebp + edi - 0x14]
mov byte [ebp + edi - 0x2a0], al
inc edi
cmp edi, 0xc
jb 0x10003c8b
push 9
xor edx, edx
mov byte [ebp - 0x13], 0x8b
or dword [ebp - 0x18], 0xb02e979a
lea edi, [ebp - 0x234]
mov byte [ebp - 0x294], dl
mov esi, str.Piriform_CCleaner_PreventSecondRegistration
pop edx
push 0x2b
pop eax
push 0x1a
mov dword [ebp - 0x1c], eax
mov byte [ebp - 0x12], al
pop eax
mov byte [ebp - 0x11], al
push 0xb
pop eax
mov ecx, eax
mov byte [ebp - 0x14], dl
rep movsd dword es:[edi], dword [esi]
mov cl, byte [ebp - 2]
mov edi, str._tconst_CleaningCompleteHeading_t_t_8042_
mov dword [ebp - 0x10], 0x82d3f63
mov eax, edi
mov dword [ebp - 0xc], 0xdefbf3bf
jmp 0x10003d41
sub cl, 0x30
cmp cl, dl
ja 0x10003d75
inc eax
mov cl, byte [eax]
test cl, cl
jne 0x10003d37
mov esi, dword [ebp - 0x18]
xor esi, 0x753ac639
call fcn.10001535
push 0x6d
mov ecx, str.missing_mandatory_ticket
pop edx
lea eax, [edx - 0x30]
push 9
pop edx
cmp ax, dx
ja 0x10003d80
add ecx, 2
movzx eax, word [ecx]
mov edx, eax
test ax, ax
jne 0x10003d5b
jmp 0x10003d86
mov esi, dword [ebp - 0x18]
and esi, 0xe1059610
jmp 0x10003d48
add esi, 0x62b44101
mov edx, str.Netscape_Server_Gated_Crypto
mov ecx, edi
or esi, 0x4ce1aa6c
call fcn.10001667
mov cl, byte [str.DetectFile1_commonappdata_Norton]
xor eax, eax
mov edx, eax
mov edi, str.DetectFile1_commonappdata_Norton
test cl, cl
je 0x10003dc8
sub cl, 0x30
cmp cl, 9
ja 0x10003dbc
inc edi
mov cl, byte [edi]
test cl, cl
jne 0x10003dab
jmp 0x10003dc2
xor esi, 0x693c0084
mov cl, byte [str.DetectFile1_commonappdata_Norton]
xor esi, 0x16edbedf
mov byte [ebp + edx - 0x198], dl
imul esi, esi, 0x8e117039
inc edx
cmp edx, 0x100
jb 0x10003da2
mov dword [ebp - 0x18], esi
mov edi, eax
mov esi, eax
xor edx, edx
mov cl, byte [ebp + edi - 0x198]
mov eax, edi
mov byte [ebp - 1], cl
div dword [ebp - 0x1c]
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x234]
add eax, esi
add ecx, eax
movzx esi, cl
mov al, byte [ebp + esi - 0x198]
mov byte [ebp + edi - 0x198], al
inc edi
mov al, byte [ebp - 1]
mov byte [ebp + esi - 0x198], al
cmp edi, 0x100
jb 0x10003deb
mov esi, dword [ebp - 0x18]
xor ecx, ecx
mov edx, ecx
mov dword [ebp - 0x20], ecx
mov edi, ecx
jmp 0x10003e3f
xor ecx, ecx
lea eax, [edi + 1]
movzx edi, al
mov al, byte [ebp + edi - 0x198]
mov byte [ebp - 1], al
movzx eax, al
mov dword [ebp - 0x24], eax
add eax, edx
movzx eax, al
mov edx, str.missing_mandatory_ticket
mov dword [ebp - 0x1c], eax
mov eax, ecx
inc eax
lea edx, [edx + 2]
cmp eax, 0x26de
je 0x10003e83
cmp word [edx], cx
jne 0x10003e64
cmp eax, 0x902
jg 0x10003e89
xor esi, 0x5ce4985f
jmp 0x10003e9a
and esi, 0x524be529
push ecx
mov edx, esi
call fcn.100026a2
add esp, 4
add esi, 0x6741b438
add esi, 0x4fa15737
mov edx, esi
mov ecx, esi
call fcn.10002245
mov eax, dword [ebp - 0x1c]
mov edx, 0x203f
push 0x2e
pop ecx
mov al, byte [ebp + eax - 0x198]
mov byte [ebp + edi - 0x198], al
mov eax, str.._AVCEventPoster_Common_Piriform__
add edx, ecx
lea eax, [eax + 2]
cmp edx, 0x1107
ja 0x10003edd
movzx ecx, word [eax]
test ecx, ecx
jne 0x10003ec7
jmp 0x10003ee3
xor esi, 0x84713511
xor esi, 0xcb2c7da1
mov edx, str.Netscape_Server_Gated_Crypto
mov ecx, str._tconst_CleaningCompleteHeading_t_t_8042_
imul esi, esi, 0x3ee0ee4b
call fcn.10001667
xor eax, eax
mov ecx, str.trackname
mov edx, eax
inc edx
lea ecx, [ecx + 2]
cmp edx, 0x12c1
je 0x10003f1a
cmp word [ecx], ax
jne 0x10003f07
jmp 0x10003f20
xor esi, 0x3b6fe57
or esi, 0xd75efb7f
add esi, 0x942c1dec
mov edx, esi
mov ecx, esi
call fcn.10002245
mov edx, dword [ebp - 0x1c]
mov al, byte [ebp - 1]
mov ecx, dword [ebp - 0x20]
mov byte [ebp + edx - 0x198], al
movzx eax, byte [ebp + edi - 0x198]
add eax, dword [ebp - 0x24]
movzx eax, al
mov al, byte [ebp + eax - 0x198]
xor al, byte [ebp + ecx - 0x14]
mov byte [ebp + ecx - 0x290], al
inc ecx
mov dword [ebp - 0x20], ecx
cmp ecx, 0xc
jb 0x10003e3d
push 0x1a
pop ecx
xor eax, eax
mov dword [ebp - 0x34], ecx
push 0x51
mov byte [ebp - 0x284], al
mov ecx, eax
mov dword [ebp - 0x30], 0xffffff95
pop edx
add edx, dword [ebp + ecx*4 - 0x34]
imul esi, esi, 0xc09260ac
inc ecx
cmp ecx, 2
jl 0x10003f8c
push 0x24
pop ecx
mov dword [0x10028180], esi
mov edi, eax
mov dword [ebp - 0x1c0], edx
or esi, 0xc50a8c07
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x14], 0x5b
mov dword [ebp - 0x10], 0x14
mov dword [ebp - 0xc], 0xffffff6e
push 0x4d
xor esi, 0x55390a37
mov edx, 0x16fb
mov eax, str.MadvFreeDiscardableMemoryAllocator
pop ecx
add edx, ecx
lea eax, [eax + 2]
cmp edx, 0x17ec
ja 0x10003ffa
movzx ecx, word [eax]
test ecx, ecx
jne 0x10003fde
imul esi, esi, 0x8704f786
jmp 0x1000400d
push ecx
sub esi, 0x2104ec2f
call fcn.10001915
pop ecx
imul esi, esi, 0x1854734f
add esi, 0xe424808b
call fcn.100024e5
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp + edi*4 - 0x14]
inc edi
mov dword [ebp - 0x1c], eax
cmp edi, 3
jl 0x10003fcb
push 9
pop eax
mov dword [ebp - 0x18], esi
lea edi, [ebp - 0x234]
mov byte [ebp - 0x11], al
mov esi, str.com.avast.ipm.ClientParameters.BavLicType
push 0xa
pop eax
mov ecx, eax
mov word [ebp - 0x14], 0xec7c
rep movsd dword es:[edi], dword [esi]
xor eax, eax
mov byte [ebp - 0x12], 0x64
mov dword [ebp - 0x10], 0xc5e214c2
mov ecx, eax
mov dword [ebp - 0xc], 0x99851789
movsw word es:[edi], word [esi]
mov esi, dword [ebp - 0x18]
xor esi, 0x410d025
or esi, 0xb90f28d2
mov dword [ebp - 0x18], esi
mov byte [ebp + ecx - 0x198], cl
inc ecx
cmp ecx, 0x100
jb 0x10004073
mov edi, eax
mov dword [ebp - 0x20], 0x29
mov esi, eax
xor edx, edx
mov cl, byte [ebp + edi - 0x198]
mov eax, edi
mov byte [ebp - 1], cl
div dword [ebp - 0x20]
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x234]
add eax, esi
add ecx, eax
movzx esi, cl
mov al, byte [ebp + esi - 0x198]
mov byte [ebp + edi - 0x198], al
inc edi
mov al, byte [ebp - 1]
mov byte [ebp + esi - 0x198], al
cmp edi, 0x100
jb 0x1000408e
mov esi, dword [ebp - 0x18]
xor eax, eax
mov dword [ebp - 0x20], eax
mov edx, eax
add esi, 0x237f4df9
mov ecx, eax
inc ecx
cmp ecx, 0x1f31
jg 0x100040ff
cmp byte [ecx + str.Netscape_Server_Gated_Crypto], al
jne 0x100040e4
cmp ecx, 0xa70
jle 0x1000410e
jmp 0x10004105
or esi, 0x7ee23a1d
call fcn.10001d3b
xor eax, eax
mov edx, eax
and esi, 0x31c61404
mov edi, eax
or esi, 0x86002248
lea eax, [edx + 1]
add esi, 0x54d24ac6
movzx eax, al
mov dword [ebp - 8], eax
mov dword [ebp - 0x18], esi
mov esi, dword [ebp - 8]
mov cl, byte [ebp + eax - 0x198]
mov eax, dword [ebp - 0x20]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [ebp - 0x20], eax
mov al, byte [ebp + eax - 0x198]
mov byte [ebp + esi - 0x198], al
mov eax, dword [ebp - 0x20]
mov byte [ebp + eax - 0x198], cl
mov eax, esi
mov esi, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0x198]
add eax, edx
mov edx, dword [ebp - 8]
movzx eax, al
mov al, byte [ebp + eax - 0x198]
xor al, byte [ebp + edi - 0x14]
mov byte [ebp + edi - 0x2b0], al
inc edi
cmp edi, 0xc
jb 0x1000411c
push 0xe
pop ecx
mov esi, str.00000000000000000000000000000000000000000000000000000005
mov dword [ebp - 0x34], 0xd022b594
lea edi, [ebp - 0x240]
mov dword [ebp - 0x30], 0x43f272ad
rep movsd dword es:[edi], dword [esi]
xor eax, eax
mov byte [ebp - 0x2c], pe_nt_image_headers32
mov byte [ebp - 0x2a4], al
mov ecx, eax
mov dword [ebp - 0x20], eax
movsb byte es:[edi], byte [esi]
imul esi, dword [ebp - 0x18], 0x2ac658ef
add esi, 0x7c37f906
mov dword [ebp - 0x24], esi
mov byte [ebp + ecx - 0x198], cl
inc ecx
cmp ecx, 0x100
jb 0x100041cb
mov edi, eax
xor edx, edx
mov cl, byte [ebp + edi - 0x198]
mov eax, edi
mov byte [ebp - 1], cl
div dword [ebp - 0x28]
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x240]
add eax, dword [ebp - 0x20]
add ecx, eax
movzx ecx, cl
mov dword [ebp - 0x20], ecx
mov al, byte [ebp + ecx - 0x198]
mov byte [ebp + edi - 0x198], al
inc edi
mov al, byte [ebp - 1]
mov byte [ebp + ecx - 0x198], al
cmp edi, 0x100
jb 0x100041dd
xor eax, eax
mov dword [ebp - 0x20], eax
mov esi, eax
mov edi, eax
lea eax, [esi + 1]
movzx esi, al
mov eax, dword [ebp - 0x20]
push 9
mov cl, byte [ebp + esi - 0x198]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [ebp - 0x20], eax
mov al, byte [ebp + eax - 0x198]
mov byte [ebp + esi - 0x198], al
mov eax, dword [ebp - 0x20]
mov byte [ebp + eax - 0x198], cl
movzx eax, byte [ebp + esi - 0x198]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x198]
xor al, byte [ebp + edi - 0x34]
mov byte [ebp + edi - 0x78], al
inc edi
pop eax
cmp edi, eax
jb 0x1000422e
mov esi, dword [ebp - 0x24]
mov eax, str.trackname
xor esi, 0x9fefd23f
and esi, 0xe21d2ddc
xor edx, edx
push 0x74
mov byte [ebp - 0x6f], dl
mov edx, 0x2446
pop ecx
add edx, ecx
lea eax, [eax + 2]
cmp edx, 0x277
ja 0x100042bc
movzx ecx, word [eax]
test ecx, ecx
jne 0x100042a6
jmp 0x100042cc
call fcn.10001a30
xor esi, 0xc72aa51e
call fcn.10001f4f
push 0x13
pop eax
imul esi, esi, 0x88c37e3f
mov edx, 0x3d4
push 0x2e
mov dword [ebp - 0x40], eax
mov eax, str.._AVCEventPoster_Common_Piriform__
mov dword [ebp - 0x44], 5
mov dword [ebp - 0x3c], 0x4a
xor esi, 0x619be34d
mov dword [ebp - 0x38], 0xffffff9e
pop ecx
add edx, ecx
lea eax, [eax + 2]
cmp edx, 0xb0d
ja 0x10004316
movzx ecx, word [eax]
test ecx, ecx
jne 0x10004300
jmp 0x10004321
call fcn.100026ae
sub esi, 0x4db7266a
movups xmm0, xmmword [ebp - 0x44]
push 0xd
movaps xmm1, xmm2
imul eax, esi, 0xb2701535
psubd xmm1, xmm0
mov dword [ebp - 0x14], 1
movaps xmm0, xmm1
mov dword [ebp - 0x10], 0xf
psrldq xmm0, 8
paddd xmm1, xmm0
mov dword [ebp - 0xc], 0xfffffffc
movups xmm0, xmm1
and eax, 0xc12a981d
psrldq xmm0, 4
xor edx, edx
paddd xmm1, xmm0
mov ecx, edx
movd dword [ebp - 0x18], xmm1
pop esi
sub esi, dword [ebp + ecx*4 - 0x14]
inc ecx
cmp ecx, 3
jl 0x10004370
push 0x4e
mov dword [ebp - 0x30], esi
or eax, 0xdf4c1e8
mov edi, 0x2296
mov ecx, str.Netscape_Server_Gated_Crypto
pop esi
add edi, esi
inc ecx
cmp edi, 0x1a91
ja 0x100043a3
movsx esi, byte [ecx]
test esi, esi
jne 0x1000438f
jmp 0x100043a8
sub eax, 0x7cb36d21
imul eax, eax, 0x5186e380
lea edi, [ebp - 0x240]
push 0x37
mov esi, str.Manage_Subscription_Retrieving_License_Information...
mov dword [ebp - 0x14], 0x3e205b85
mov byte [ebp - 0x10], 0xb7
mov dword [ebp - 0xe], 0xf775bbbe
xor eax, 0x2d639e08
mov word [ebp - 0xa], 0x797
imul eax, eax, 0xe8f4f41e
mov dword [ebp - 8], eax
pop eax
push 0xd
pop ecx
rep movsd dword es:[edi], dword [esi]
mov byte [ebp - 0xf], al
mov eax, edx
movsw word es:[edi], word [esi]
mov edi, edx
mov byte [ebp + eax - 0x198], al
inc eax
cmp eax, 0x100
jb 0x100043f0
mov esi, edx
xor edx, edx
mov dword [ebp - 0x28], 0x35
mov eax, esi
mov cl, byte [ebp + esi - 0x198]
div dword [ebp - 0x28]
mov byte [ebp - 1], cl
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x240]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [ebp + edi - 0x198]
mov byte [ebp + esi - 0x198], al
inc esi
mov al, byte [ebp - 1]
mov byte [ebp + edi - 0x198], al
cmp esi, 0x100
jb 0x10004401
mov esi, dword [ebp - 8]
xor eax, eax
mov edx, eax
mov ecx, eax
mov edi, eax
lea eax, [ecx + 1]
mov dword [ebp - 0x20], 0x7d5
movzx ecx, al
push 0x74
mov dword [ebp - 0x28], ecx
mov al, byte [ebp + ecx - 0x198]
mov byte [ebp - 1], al
movzx eax, al
mov dword [ebp - 8], eax
add eax, edx
movzx eax, al
mov dword [ebp - 0x24], eax
mov eax, str.trackname
pop edx
add dword [ebp - 0x20], edx
lea eax, [eax + 2]
cmp dword [ebp - 0x20], 0x1cd6
ja 0x100044a5
movzx edx, word [eax]
test edx, edx
jne 0x10004487
imul esi, esi, 0x780bb29a
jmp 0x100044c3
mov edx, str.MadvFreeDiscardableMemoryAllocator
mov ecx, str.Netscape_Server_Gated_Crypto
call fcn.10001b43
xor esi, 0x38c5e81f
mov ecx, dword [ebp - 0x28]
xor esi, 0x2233e9c5
mov edx, dword [ebp - 0x24]
or esi, 0x7c9c5a11
mov al, byte [ebp + edx - 0x198]
mov byte [ebp + ecx - 0x198], al
mov al, byte [ebp - 1]
mov byte [ebp + edx - 0x198], al
movzx eax, byte [ebp + ecx - 0x198]
add eax, dword [ebp - 8]
movzx eax, al
mov al, byte [ebp + eax - 0x198]
xor al, byte [ebp + edi - 0x14]
mov byte [ebp + edi - 0x44], al
inc edi
cmp edi, 0xc
jb 0x10004457
xor edx, edx
mov dword [ebp - 8], esi
push 0x2e
mov byte [ebp - 0x38], dl
mov ecx, str.._AVCEventPoster_Common_Piriform__
pop edi
lea eax, [edi - 0x30]
cmp ax, word [ebp - 0x48]
ja 0x10004533
add ecx, 2
movzx eax, word [ecx]
mov edi, eax
test ax, ax
jne 0x1000451b
jmp 0x1000453c
or esi, 0x3ee6b857
mov dword [ebp - 8], esi
push 8
pop ecx
mov esi, str.._AVRandomNumberSource_CryptoPP__
mov dword [ebp - 0x6c], 0x8bd9c09b
lea edi, [ebp - 0x22c]
mov dword [ebp - 0x68], 0x52f89e3e
rep movsd dword es:[edi], dword [esi]
mov byte [ebp - 0x64], 0x59
movsw word es:[edi], word [esi]
mov esi, dword [ebp - 8]
sub esi, 0x46ca685b
cmp byte [str._tconst_CleaningCompleteHeading_t_t_8042_], dl
je 0x1000458b
inc edx
cmp edx, 0x7e1
jl 0x10004585
cmp byte [edx + str._tconst_CleaningCompleteHeading_t_t_8042_], 0
jne 0x10004571
jmp 0x1000458b
xor esi, 0x63f560b8
and esi, 0x1d
push ecx
or esi, 0xc5c0ca02
call fcn.10001915
pop ecx
xor ecx, ecx
mov dword [ebp - 0x20], ecx
mov eax, ecx
mov byte [ebp + eax - 0x198], al
inc eax
cmp eax, 0x100
jb 0x100045a2
movzx eax, byte [str._tconst_CleaningCompleteHeading_t_t_8042_]
mov edi, 0xa7f
mov edx, str._tconst_CleaningCompleteHeading_t_t_8042_
jmp 0x100045d2
add edi, eax
inc edx
cmp edi, 0x16d8
ja 0x100045d8
movzx eax, byte [edx]
test eax, eax
jne 0x100045c4
jmp 0x100045e7
push ecx
and esi, 0x5397bc6b
call fcn.10001915
pop ecx
xor ecx, ecx
add esi, 0x82ef0e
mov edx, str.MadvFreeDiscardableMemoryAllocator
push 0x4d
or esi, 0xfb363a06
pop edi
lea eax, [edi - 0x30]
cmp ax, word [ebp - 0x48]
ja 0x10004613
add edx, 2
movzx eax, word [edx]
mov edi, eax
test ax, ax
jne 0x100045fb
jmp 0x10004619
add esi, 0x2a05d7b1
and esi, 0x31c0c40
mov dword [ebp - 0x48], ecx
or esi, 0xb86311b6
mov edi, ecx
mov eax, str.missing_mandatory_ticket
inc edi
lea eax, [eax + 2]
cmp edi, 0x247e
jl 0x10004642
cmp word [eax], cx
jne 0x1000462f
jmp 0x1000465e
push ecx
push ecx
mov ecx, str.trackname
call fcn.10001c24
pop ecx
imul esi, esi, 0xb689bc1c
pop ecx
cmp edi, 0x1716
jle 0x1000466a
mov edx, str.Netscape_Server_Gated_Crypto
mov ecx, esi
call fcn.10001134
mov edi, dword [ebp - 0x48]
xor edx, edx
mov eax, edi
or esi, 0x1febf05e
div dword [ebp - 0x54]
mov cl, byte [ebp + edi - 0x198]
add esi, 0x78b660d9
mov byte [ebp - 1], cl
xor esi, 0x6af9ba50
movzx ecx, cl
add esi, 0x23574081
push 0
movzx eax, byte [ebp + edx - 0x22c]
add eax, dword [ebp - 0x20]
add ecx, eax
movzx ecx, cl
mov dword [ebp - 0x20], ecx
mov al, byte [ebp + ecx - 0x198]
mov byte [ebp + edi - 0x198], al
inc edi
mov al, byte [ebp - 1]
mov byte [ebp + ecx - 0x198], al
mov dword [ebp - 0x48], edi
pop ecx
cmp edi, 0x100
jb 0x10004628
xor eax, eax
mov edx, eax
mov ecx, eax
mov edi, eax
lea eax, [ecx + 1]
mov ecx, str.._AVCEventPoster_Common_Piriform__
movzx eax, al
mov dword [ebp - 0x24], eax
push 0x2e
mov al, byte [ebp + eax - 0x198]
mov byte [ebp - 1], al
movzx eax, al
mov dword [ebp - 0x20], eax
add eax, edx
movzx eax, al
mov dword [ebp - 0x28], eax
pop edx
lea eax, [edx - 0x30]
push 9
pop edx
cmp ax, dx
ja 0x10004722
add ecx, 2
movzx eax, word [ecx]
mov edx, eax
test ax, ax
jne 0x10004708
jmp 0x10004728
xor esi, 0x53dfb0bf
sub esi, 0x197ca9fa
mov dword [0x10028180], esi
call fcn.10001258
xor eax, eax
mov ecx, str.MadvFreeDiscardableMemoryAllocator
mov edx, eax
inc edx
lea ecx, [ecx + 2]
cmp edx, 0xf75
jg 0x10004755
cmp word [ecx], ax
jne 0x10004742
jmp 0x10004760
call fcn.10001f4f
imul esi, esi, 0x4103703d
add esi, 0x1e3ceebd
xor esi, 0xecb4bb61
call fcn.1000158d
push 0x4d
mov ecx, str.MadvFreeDiscardableMemoryAllocator
pop edx
lea eax, [edx - 0x30]
push 9
pop edx
cmp ax, dx
ja 0x10004793
add ecx, 2
movzx eax, word [ecx]
mov edx, eax
test ax, ax
jne 0x10004779
jmp 0x10004799
and esi, 0xfdddcc1b
call fcn.10001957
add esi, 0x8980bfc2
xor edx, edx
xor esi, 0x907ead82
cmp byte [str.DetectFile1_commonappdata_Norton], dl
je 0x100047d3
inc edx
cmp edx, 0x1ca3
jg 0x100047c8
cmp byte [edx + str.DetectFile1_commonappdata_Norton], 0
jne 0x100047b4
jmp 0x100047d3
call fcn.100022ea
or esi, 0x7ee2e9a5
xor esi, 0x8b47ddff
mov ecx, str.Netscape_Server_Gated_Crypto
imul esi, esi, 0x1251fe34
call fcn.10001ff8
mov edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
push 9
mov al, byte [ebp + edx - 0x198]
mov byte [ebp + ecx - 0x198], al
mov al, byte [ebp - 1]
mov byte [ebp + edx - 0x198], al
movzx eax, byte [ebp + ecx - 0x198]
add eax, dword [ebp - 0x20]
movzx eax, al
mov al, byte [ebp + eax - 0x198]
xor al, byte [ebp + edi - 0x6c]
mov byte [ebp + edi - 0x14], al
inc edi
pop eax
cmp edi, eax
jb 0x100046df
push 0x1a
xor eax, eax
mov dword [ebp - 0x6c], 0x63
pop ecx
mov dword [ebp - 0x68], ecx
mov edi, eax
mov byte [ebp - 0xb], al
mov ecx, eax
mov dword [ebp - 0x64], 0xffffff83
sub edi, dword [ebp + ecx*4 - 0x6c]
inc ecx
cmp ecx, 3
jl 0x1000484d
push 0x38
pop ecx
mov dword [ebp - 0x5c], 0x62
movaps xmm1, xmm2
mov dword [ebp - 0x58], 0x27
mov dword [ebp - 0x54], ecx
mov dword [ebp - 0x50], 0xffffff3f
movups xmm0, xmmword [ebp - 0x5c]
psubd xmm1, xmm0
movaps xmm0, xmm1
psrldq xmm0, 8
paddd xmm1, xmm0
movups xmm0, xmm1
psrldq xmm0, 4
paddd xmm1, xmm0
movd dword [ebp - 0x28], xmm1
inc eax
cmp eax, 0x22c9
je 0x100048ba
cmp byte [eax + str.Netscape_Server_Gated_Crypto], 0
jne 0x1000489a
cmp eax, 0x75a
jg 0x100048c0
add esi, 0x29654d36
jmp 0x100048cb
xor esi, 0xc61dedb8
call fcn.10001957
add esi, 0x933ae3ea
mov ecx, dword [ebp - 0x19c]
lea edx, [ebp - 0x260]
imul eax, esi, 0x6764a242
mov dword [0x10028180], eax
lea eax, [ebp - 0x250]
push eax
call fcn.1001bfc3
call eax
cmp eax, dword [ebp - 0x1a0]
jne 0x1000497f
mov esi, dword [0x10028180]
xor edi, edi
mov dword [ebp - 0x1c], 0x42
mov dword [ebp - 0x5c], 0x11
mov dword [ebp - 0x58], 0x40
mov dword [ebp - 0x54], 0x2d
mov dword [ebp - 0x50], 0xffffff41
xor eax, eax
inc eax
cmp eax, 0x1847
jg 0x1000493c
cmp byte [eax + str.Netscape_Server_Gated_Crypto], 0
jne 0x10004929
jmp 0x10004951
mov edx, str._tconst_CleaningCompleteHeading_t_t_8042_
mov ecx, str.DetectFile1_commonappdata_Norton
call fcn.10001667
sub esi, 0x453c8e9a
xor esi, 0x28386108
or esi, 0x93c09a73
call fcn.100017d5
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp + edi*4 - 0x5c]
inc edi
mov dword [ebp - 0x1c], ecx
cmp edi, 4
jl 0x10004927
mov dword [0x10028180], esi
mov eax, ecx
jmp 0x10004c7c
mov ecx, dword [ebp - 0x4c]
lea edx, [ebp - 0x1f8]
push eax
call fcn.1001bfc3
call eax
mov ecx, dword [ebp - 0x1a4]
lea eax, [ebp - 0x1e4]
push eax
lea edx, [ebp - 0x270]
call fcn.1001bfc3
call eax
cmp eax, dword [ebp - 0x1a8]
jne 0x100049d0
push 0x29
pop eax
push 0x5a
mov dword [ebp - 0x34], eax
xor eax, eax
mov dword [ebp - 0x30], 0xffffff7e
pop ecx
add ecx, dword [ebp + eax*4 - 0x34]
inc eax
cmp eax, 2
jl 0x100049c4
jmp 0x10004978
mov ecx, dword [ebp - 0x1ac]
lea edx, [ebp - 0x204]
push eax
call fcn.1001bfc3
call eax
mov ecx, dword [ebp - 0x1b0]
lea eax, [ebp - 0x88]
push eax
lea edx, [ebp - 0x280]
call fcn.1001bfc3
call eax
cmp eax, dword [ebp - 0x1b4]
jne 0x10004a39
and dword [0x10028180], 0x46a8d763
xor eax, eax
push 0x59
mov dword [ebp - 0x14], 0x3e
mov dword [ebp - 0x10], 0x36
mov dword [ebp - 0xc], 0xffffff34
pop ecx
add ecx, dword [ebp + eax*4 - 0x14]
inc eax
cmp eax, 3
jl 0x10004a2a
jmp 0x10004978
mov ecx, dword [ebp - 0x1b8]
lea edx, [ebp - 0x1cc]
push eax
call fcn.1001bfc3
call eax
imul eax, dword [0x10028180], 0xc355d41d
lea edx, [ebp - 0x2a0]
mov ecx, dword [ebp - 0x1bc]
mov dword [0x10028180], eax
lea eax, [ebp - 0x290]
push eax
call fcn.1001bfc3
call eax
cmp eax, dword [ebp - 0x1c0]
je 0x10004b26
push 0xf
pop eax
mov dword [ebp - 0x5c], 0x19
xorps xmm1, xmm1
mov dword [ebp - 0x58], 0x2e
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x50], 0xffffffb8
movups xmm0, xmmword [ebp - 0x5c]
psubd xmm1, xmm0
movaps xmm0, xmm1
psrldq xmm0, 8
paddd xmm1, xmm0
movups xmm0, xmm1
psrldq xmm0, 4
paddd xmm1, xmm0
movd esi, xmm1
add esi, eax
cmp byte [str._tconst_CleaningCompleteHeading_t_t_8042_], 0
je 0x10004b06
xor eax, eax
inc eax
cmp eax, 0xd3c
jl 0x10004afa
cmp byte [eax + str._tconst_CleaningCompleteHeading_t_t_8042_], 0
jne 0x10004ad1
cmp eax, 0x1a3e
jle 0x10004b06
call fcn.1000158d
mov eax, dword [0x10028180]
and eax, 0x62e784d9
jmp 0x10004b10
mov eax, dword [0x10028180]
and eax, 0xa4f89aba
jmp 0x10004b0b
mov eax, dword [0x10028180]
add eax, 0x5bb2aa9c
and eax, 0xc6a441aa
mov dword [0x10028180], eax
call fcn.10001f4f
mov eax, esi
jmp 0x10004c7c
mov ecx, dword [ebp - 0x1c]
lea eax, [ebp - 0x78]
push eax
lea edx, [ebp - 0x2b0]
call fcn.1001bfc3
call eax
cmp eax, dword [ebp - 0x18]
je 0x10004b89
push 0x38
pop eax
mov dword [ebp - 0x54], eax
xorps xmm1, xmm1
mov dword [ebp - 0x5c], 0x41
mov dword [ebp - 0x58], 0x2d
mov dword [ebp - 0x50], 0xffffff68
movups xmm0, xmmword [ebp - 0x5c]
psubd xmm1, xmm0
movaps xmm0, xmm1
psrldq xmm0, 8
paddd xmm1, xmm0
movups xmm0, xmm1
psrldq xmm0, 4
paddd xmm1, xmm0
movd eax, xmm1
add eax, 0xf
jmp 0x10004c7c
push 0x4e
mov ecx, 0xec4
mov eax, str.Netscape_Server_Gated_Crypto
pop edx
add ecx, edx
inc eax
cmp ecx, 0x1d1d
ja 0x10004baf
movsx edx, byte [eax]
test edx, edx
jne 0x10004b96
mov eax, dword [0x10028180]
jmp 0x10004bbe
call fcn.10001535
mov eax, dword [0x10028180]
sub eax, 0x1dd1a861
xor eax, 0xd9133ec4
imul ecx, eax, 0xf6ecb4f7
call fcn.100020c3
imul eax, ecx, 0xaecf5ef2
lea edx, [ebp - 0x44]
mov ecx, dword [ebp - 0x30]
mov dword [0x10028180], eax
lea eax, [ebp - 0x14]
push eax
call fcn.1001bfc3
call eax
cmp eax, edi
je 0x10004c79
push 0x2b
pop eax
push 0xa
mov dword [ebp - 0x60], eax
pop eax
push 0xc
mov dword [ebp - 0x5c], eax
xor eax, eax
mov dword [ebp - 0x58], 0x32
mov dword [ebp - 0x54], 0x49
mov dword [ebp - 0x50], 0xffffff5b
pop edi
sub edi, dword [ebp + eax*4 - 0x60]
inc eax
cmp eax, 5
jl 0x10004c18
push 0x74
mov eax, 0x15dc
mov edx, str.trackname
pop ecx
add eax, ecx
lea edx, [edx + 2]
cmp eax, 0x92f
ja 0x10004c4a
movzx ecx, word [edx]
test ecx, ecx
jne 0x10004c2f
mov esi, dword [0x10028180]
jmp 0x10004c63
imul esi, dword [0x10028180], 0x6a8f0c2a
mov edx, str.DetectFile1_commonappdata_Norton
mov ecx, str.Netscape_Server_Gated_Crypto
call fcn.10001667
and esi, 0xb1917d3f
mov eax, edi
sub esi, 0x6c30447
mov dword [0x10028180], esi
jmp 0x10004c7c
mov eax, dword [ebp - 0x28]
pop edi
pop esi
leave
ret