Function at 0x10011409
Capabilities:
Encode data using xor
Encrypt data using rc4 ksa
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x498
push esi
push edi
mov dword [esp + 0x128], ecx
mov ecx, 0xe0
mov dword [esp + 0x138], 0x1e05
xor edx, edx
mov dword [esp + 0x13c], 0x1838
mov dword [esp + 0x34], edx
mov eax, edx
mov dword [esp + 0x140], 0x11ef
mov dword [esp + 0x144], ecx
mov dword [esp + 0x148], 0xf5
mov dword [esp + 0x14c], ecx
mov dword [esp + 0x150], ecx
mov dword [esp + 0x154], ecx
cmp eax, 5
je 0x1001147e
inc eax
cmp eax, 8
jl 0x10011473
mov eax, dword [esp + eax*4 + 0x138]
xor eax, ecx
mov dword [esp + 0x8c], 0x19f1
mov dword [esp + 0x21c], eax
mov ecx, edx
mov eax, dword [0x1003bfb4]
add eax, 0x2f07f32c
mov dword [esp + 0x90], 0x873
mov dword [esp + 0x94], edx
mov dword [esp + 0x98], 0x25e3
mov dword [esp + 0x9c], edx
mov dword [esp + 0xa0], 0xd7f
mov dword [esp + 0xa4], edx
mov dword [esp + 0xa8], 0x1157
mov dword [esp + 0xac], edx
mov dword [esp + 0xb0], edx
mov dword [esp + 0xb4], 0xc57
mov dword [esp + 0xb8], 0x8dc
mov dword [esp + 0xbc], 0x1511
mov dword [esp + 0xc0], 0x1263
mov dword [esp + 0xc4], 0x1b9d
mov dword [0x1003c0ac], eax
cmp ecx, 6
je 0x1001153b
inc ecx
cmp ecx, 0xf
jl 0x10011530
mov eax, dword [esp + ecx*4 + 0x8c]
push 0xa
mov dword [esp + 0x228], eax
mov eax, edx
mov dword [esp + 0xcc], 0x1f8b
mov dword [esp + 0xd0], 0x2624
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], 0x77a
mov dword [esp + 0xdc], 0x10c4
mov dword [esp + 0xe0], 0x22d9
mov dword [esp + 0xe4], 0x1577
mov dword [esp + 0xe8], 0x23f5
mov dword [esp + 0xec], edx
mov dword [esp + 0xf0], 0x258d
pop ecx
cmp eax, 8
je 0x100115be
inc eax
cmp eax, ecx
jl 0x100115b4
mov eax, dword [esp + eax*4 + 0xc8]
xor ecx, ecx
inc ecx
mov dword [esp + 0x228], eax
push 9
mov dword [esp + 0x94], ecx
mov eax, edx
mov dword [esp + 0x98], ecx
mov dword [esp + 0xa0], ecx
mov dword [esp + 0xb4], ecx
pop ecx
mov dword [esp + 0x8c], 0xbb2
mov dword [esp + 0x98], 0xf0a
mov dword [esp + 0xa0], 0x1544
mov dword [esp + 0xa4], 0x2493
mov dword [esp + 0xa8], 0x1c68
mov dword [esp + 0xac], 0x24b
mov dword [esp + 0xb4], 0x1e2e
mov dword [esp + 0xb8], 0x7ed
mov dword [esp + 0x88], ecx
cmp eax, ecx
je 0x10011659
inc eax
cmp eax, 0xc
jl 0x1001164f
mov eax, dword [esp + eax*4 + 0x8c]
lea edi, [esp + 0x15c]
push 0x30
mov dword [esp + 0x264], eax
mov esi, str.Illegal_entry_in_cidchar_block_in_ToUnicode_CMap
pop eax
push 0xc
pop ecx
rep movsd dword es:[edi], dword [esi]
mov byte [esp + 0x14e], al
mov byte [esp + 0x14f], al
mov eax, edx
mov dword [esp + 0x138], 0xe9fa504f
movsb byte es:[edi], byte [esi]
mov dword [esp + 0x13c], 0xb3cebee4
mov edi, edx
mov dword [esp + 0x140], 0xee07628c
mov dword [esp + 0x144], 0x6ca2a604
mov dword [esp + 0x148], 0x23a59cef
mov word [esp + 0x14c], 0x9626
mov dword [esp + 0x150], 0x3ef6deab
mov dword [esp + 0x154], 0xfe78b1a1
mov byte [esp + 0x158], 0xa2
mov byte [esp + eax + 0x298], al
inc eax
cmp eax, 0x100
jb 0x100116ed
mov eax, dword [0x1003c0ac]
mov ecx, edx
and eax, 0x8a26f6bb
mov dword [esp + 0x34], ecx
mov dword [esp + 0xf4], eax
mov al, byte [str.asw_browser_notification_message]
mov byte [esp + 0x10], al
mov eax, dword [0x1003c0b0]
mov dword [esp + 0x6c], 0xb
mov dword [esp + 0x40], eax
mov al, byte [esp + ecx + 0x298]
xor edx, edx
mov byte [esp + 0xf], al
mov esi, str.com.avast.passwdmgr.proto.LoginMessageResponse
mov eax, ecx
push 0x30
pop ecx
div ecx
movzx ecx, byte [esp + 0xf]
push 0xb
movzx eax, byte [esp + edx + 0x160]
add eax, edi
lea edi, [esp + 0x90]
add ecx, eax
movzx eax, cl
pop ecx
rep movsd dword es:[edi], dword [esi]
mov cl, byte [esp + 0x10]
mov dword [esp + 0x3c], eax
xor eax, eax
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
cmp cl, byte [esp + 0x8c]
jmp 0x100117a6
test cl, cl
je 0x100117ac
cmp byte [esp + eax + 0x8c], 0
je 0x100117ac
mov ecx, str.Bad_escape_sequence_in_string
call fcn.1000f6e3
mov eax, dword [esp + 0x38]
inc eax
mov cl, byte [eax + str.asw_browser_notification_message]
cmp cl, byte [esp + eax + 0x8c]
mov dword [esp + 0x38], eax
je 0x1001177c
call fcn.100102c7
mov ecx, dword [esp + 0x38]
movzx eax, byte [esp + ecx + 0x8c]
movzx ecx, byte [ecx + str.asw_browser_notification_message]
sub ecx, eax
cmp ecx, 0x4ff
jbe 0x100117d9
call fcn.100108a0
mov esi, dword [esp + 0x40]
jmp 0x100117ef
mov esi, dword [0x1003c0ac]
xor esi, 0xcb8eced5
mov dword [esp + 0x40], esi
mov dword [0x1003c0b0], esi
push ecx
push ecx
mov edx, 0x10030230
call fcn.10010353
pop ecx
xor edi, edi
cmp byte [esp + 0x14], 0
pop ecx
je 0x10011810
inc edi
cmp byte [edi + str.asw_browser_notification_message], 0
jne 0x10011806
mov ecx, esi
call fcn.100109ee
cmp edi, 0x1e8a
jne 0x10011839
mov eax, dword [esp + 0xf4]
add eax, 0x68cda344
mov dword [esp + 0x40], eax
mov dword [0x1003c0b0], eax
call fcn.1000fd6b
mov edi, dword [esp + 0x3c]
mov ecx, dword [esp + 0x34]
mov al, byte [esp + edi + 0x298]
mov byte [esp + ecx + 0x298], al
inc ecx
mov al, byte [esp + 0xf]
mov byte [esp + edi + 0x298], al
mov dword [esp + 0x34], ecx
cmp ecx, 0x100
jb 0x1001172d
xor eax, eax
mov dword [esp + 0x38], eax
mov esi, eax
mov edi, eax
lea eax, [esi + 1]
movzx esi, al
mov eax, dword [esp + 0x38]
mov cl, byte [esp + esi + 0x298]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [esp + 0x38], eax
mov al, byte [esp + eax + 0x298]
mov byte [esp + esi + 0x298], al
mov eax, dword [esp + 0x38]
mov byte [esp + eax + 0x298], cl
movzx eax, byte [esp + esi + 0x298]
add eax, edx
movzx eax, al
mov al, byte [esp + eax + 0x298]
xor al, byte [esp + edi + 0x138]
mov byte [esp + edi + 0x40c], al
inc edi
cmp edi, 0x21
jb 0x10011875
mov esi, dword [esp + 0xf4]
mov edx, 0x90
xor eax, eax
mov dword [esp + 0x15c], edx
push 0xb
mov byte [esp + 0x431], al
mov ecx, eax
mov dword [esp + 0x164], edx
mov dword [esp + 0x168], edx
mov dword [esp + 0x16c], 0x1a04
mov dword [esp + 0x170], 0x25ba
mov dword [esp + 0x174], 0xa60
mov dword [esp + 0x178], 0x3e3
mov dword [esp + 0x17c], 0x1fb1
mov dword [esp + 0x180], 0x1a71
mov dword [esp + 0x184], 0x135d
mov dword [esp + 0x188], 0x82a
pop edi
cmp ecx, 1
je 0x10011964
inc ecx
cmp ecx, edi
jl 0x1001195a
mov ecx, dword [esp + ecx*4 + 0x15c]
xor ecx, edx
mov dword [esp + 0x274], 0x1ea2
push 2
pop edx
and esi, 0xf08daabf
mov dword [esp + 0x258], ecx
push 9
mov dword [esp + 0x27c], edx
mov ecx, eax
mov dword [esp + 0x284], edx
mov dword [esp + 0x288], edx
mov dword [esp + 0x290], edx
mov dword [0x1003bfb4], esi
mov dword [esp + 0x280], 0x22bb
mov dword [esp + 0x28c], 0x159d
mov dword [esp + 0x294], 0x2017
mov dword [esp + 0x298], 0xdb6
pop edx
cmp ecx, 1
je 0x100119e5
inc ecx
cmp ecx, edx
jl 0x100119db
mov ecx, dword [esp + ecx*4 + 0x274]
mov edx, str.HistoryItemsPotential
mov eax, dword [0x1003c0ac]
push ecx
add eax, 0x536bb5a0
mov dword [esp + 0x254], ecx
push ecx
mov dword [0x1003bff8], eax
call fcn.10010353
pop ecx
pop ecx
mov ecx, edi
mov al, byte [esp + 0x10]
mov esi, str.Pam_vault_sync:_enterCredentialsForBackup_call
lea edi, [esp + 0x8c]
rep movsd dword es:[edi], dword [esi]
xor edx, edx
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
cmp al, byte [esp + 0x8c]
jmp 0x10011a57
test al, al
je 0x10011a5d
cmp byte [esp + edx + 0x8c], 0
je 0x10011a5d
call fcn.10010f8d
mov edx, dword [esp + 0x34]
inc edx
mov al, byte [edx + str.asw_browser_notification_message]
cmp al, byte [esp + edx + 0x8c]
mov dword [esp + 0x34], edx
je 0x10011a32
movzx eax, byte [esp + edx + 0x8c]
movzx esi, byte [edx + str.asw_browser_notification_message]
sub esi, eax
call fcn.1000f909
cmp esi, 0x18f2
jae 0x10011a8c
mov eax, dword [0x1003c0ac]
and eax, 0xdcdb8416
mov dword [0x1003bfb4], eax
jmp 0x10011aa0
mov eax, dword [0x1003c0b0]
add eax, 0x36f08335
mov dword [0x1003c0ac], eax
call fcn.10010475
mov eax, dword [0x1003bff8]
add eax, 0xdbd5fe29
mov dword [esp + 0x70], 0x25eb
mov dword [0x1003c0b0], eax
xor eax, eax
mov dword [esp + 0x74], 0x268e
mov ecx, eax
mov dword [esp + 0x78], 0x1955
mov dword [esp + 0x7c], 0x1cee
mov dword [esp + 0x80], eax
mov dword [esp + 0x84], eax
cmp ecx, 5
je 0x10011aec
inc ecx
cmp ecx, 6
jl 0x10011ae1
mov ecx, dword [esp + ecx*4 + 0x70]
xor edx, edx
inc edx
mov dword [esp + 0x234], ecx
mov ecx, eax
mov dword [esp + 0x8c], 0x194e
mov dword [esp + 0x90], edx
mov dword [esp + 0x94], edx
mov dword [esp + 0x98], 0x1f38
mov dword [esp + 0x9c], 0x36d
mov dword [esp + 0xa0], 0x3af
mov dword [esp + 0xa4], edx
mov dword [esp + 0xa8], 0x133
mov dword [esp + 0xac], 0x1c97
mov dword [esp + 0xb0], 0x1000
mov dword [esp + 0xb4], 0x1d82
mov dword [esp + 0xb8], 0x1f6a
cmp ecx, edx
je 0x10011b7e
inc ecx
cmp ecx, 0xc
jl 0x10011b74
mov ecx, dword [esp + ecx*4 + 0x8c]
lea edi, [esp + 0x70]
mov esi, str.CIDToGIDMap
mov dword [esp + 0x1c8], ecx
push 0xa
pop ecx
mov byte [esp + 0xfe], cl
mov ecx, eax
movsd dword es:[edi], dword [esi]
mov word [esp + 0xfc], 0xbcb0
mov dword [esp + 0xff], 0x1f43ffeb
mov dword [esp + 0x103], 0x3bad4048
movsd dword es:[edi], dword [esi]
mov dword [esp + 0x107], 0x14c64fa9
mov dword [esp + 0x10b], 0xcee91966
mov dword [esp + 0x10f], 0xdbbface3
movsd dword es:[edi], dword [esi]
mov dword [esp + 0x113], 0x82f5406a
mov edi, eax
mov dword [esp + 0x117], 0xc8d31b3a
mov word [esp + 0x11b], 0x97c3
mov byte [esp + ecx + 0x298], cl
inc ecx
cmp ecx, 0x100
jb 0x10011c07
mov esi, eax
xor edx, edx
mov cl, byte [esp + esi + 0x298]
mov eax, esi
mov byte [esp + 0xf], cl
div dword [esp + 0x6c]
movzx ecx, cl
movzx eax, byte [esp + edx + 0x70]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [esp + edi + 0x298]
mov byte [esp + esi + 0x298], al
inc esi
mov al, byte [esp + 0xf]
mov byte [esp + edi + 0x298], al
cmp esi, 0x100
jb 0x10011c19
push 5
mov dl, byte [str.asw_browser_notification_message]
lea edi, [esp + 0x74]
pop ecx
mov esi, str.ConfigurationVersion
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
cmp dl, byte [esp + 0x70]
jne 0x10011c9d
xor esi, esi
test dl, dl
je 0x10011c97
cmp byte [esp + esi + 0x70], 0
je 0x10011c97
call fcn.1000f909
mov dl, byte [esi + 0x1003c081]
inc esi
cmp dl, byte [esp + esi + 0x70]
je 0x10011c7a
mov dl, byte [str.asw_browser_notification_message]
xor eax, eax
mov dword [esp + 0x40], eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x30], eax
jmp 0x10011cb1
mov dl, byte [esp + 0x10]
push 6
pop ecx
mov esi, str.save_with_quotation_marks
lea edi, [esp + 0x44]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
cmp dl, byte [esp + 0x44]
jmp 0x10011cef
test dl, dl
je 0x10011cf5
cmp byte [esp + eax + 0x44], 0
je 0x10011cf5
push ecx
push ecx
mov edx, str.0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ
call fcn.10010353
mov eax, dword [esp + 0x40]
inc eax
pop ecx
pop ecx
mov dl, byte [eax + str.asw_browser_notification_message]
cmp dl, byte [esp + eax + 0x44]
mov dword [esp + 0x38], eax
je 0x10011cc7
mov ecx, dword [esp + 0x38]
movzx eax, byte [esp + eax + 0x44]
movzx esi, byte [ecx + str.asw_browser_notification_message]
sub esi, eax
call fcn.1000f909
cmp esi, 0x63
jbe 0x10011d16
call fcn.100113b4
mov ecx, dword [0x1003bff8]
mov eax, ecx
xor eax, 0xa391c546
mov dword [esp + 0x28], ecx
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x24]
inc eax
movzx eax, al
mov dword [esp + 0x24], eax
push ecx
push ecx
mov al, byte [esp + eax + 0x2a0]
movzx edx, al
mov byte [esp + 0x17], al
mov eax, dword [esp + 0x48]
add eax, edx
mov dword [esp + 0x74], edx
movzx eax, al
mov dword [esp + 0x48], eax
call fcn.10010e9c
mov al, byte [str.asw_browser_notification_message]
lea edi, [esp + 0x78]
mov esi, str.on.grebsgnok
mov byte [esp + 0x18], al
pop ecx
xor edx, edx
pop ecx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
cmp al, byte [esp + 0x70]
jne 0x10011dc0
test al, al
je 0x10011d9a
cmp byte [esp + edx + 0x70], 0
je 0x10011d9a
call fcn.100113b4
mov al, byte [edx + 0x1003c081]
inc edx
cmp al, byte [esp + edx + 0x70]
je 0x10011d7d
mov al, byte [esp + 0x10]
cmp dword [esp + 0x3c], edx
jae 0x10011dc0
mov esi, dword [0x1003bfb4]
xor esi, 0x2e7ccaf
mov dword [esp + 0x3c], edx
mov dword [esp + 0x28], esi
mov dword [0x1003bff8], esi
jmp 0x10011dc4
mov esi, dword [esp + 0x28]
xor edi, edi
test al, al
je 0x10011e0d
mov esi, dword [esp + 0x34]
add esi, 0x5b110ec
mov dword [esp + 0x28], esi
mov dword [0x1003bff8], esi
mov edx, dword [0x1003c0b0]
call fcn.1000f62a
inc edi
cmp byte [edi + str.asw_browser_notification_message], 0
jne 0x10011dde
cmp edi, 0x5f6
jbe 0x10011e0d
add esi, 0x20478118
mov dword [esp + 0x28], esi
mov dword [0x1003bff8], esi
jmp 0x10011e12
call fcn.100113b4
mov eax, dword [esp + 0x34]
mov edx, dword [esp + 0x40]
xor eax, 0x286930c2
mov ecx, dword [esp + 0x24]
mov dword [0x1003c0b0], eax
mov eax, esi
or eax, 0xa57c9376
imul edi, esi, 0xebbc8087
mov dword [esp + 0x2c], eax
mov dword [0x1003bfb4], eax
mov al, byte [esp + edx + 0x298]
mov byte [esp + ecx + 0x298], al
mov al, byte [esp + 0xf]
mov byte [esp + edx + 0x298], al
movzx eax, byte [esp + ecx + 0x298]
add eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x30]
movzx eax, al
push 0
mov dword [0x1003c0ac], edi
mov al, byte [esp + eax + 0x29c]
xor al, byte [esp + ecx + 0x100]
mov byte [esp + ecx + 0x278], al
inc ecx
mov dword [esp + 0x34], ecx
pop eax
cmp ecx, 0x21
jb 0x10011cad
push 2
pop edx
mov byte [esp + 0x295], al
mov ecx, eax
mov dword [esp + 0x44], 0xd4
mov dword [esp + 0x48], edx
mov dword [esp + 0x4c], edx
mov dword [esp + 0x50], 0x81c
mov dword [esp + 0x54], edx
mov dword [esp + 0x58], edx
mov dword [esp + 0x5c], 0x1ed7
mov dword [esp + 0x60], edx
cmp ecx, 5
je 0x10011ed9
inc ecx
cmp ecx, 8
jl 0x10011ece
mov ecx, dword [esp + ecx*4 + 0x44]
mov edx, 0xea
mov dword [esp + 0x8c], edx
xor edi, 0xae6a1ffc
mov dword [esp + 0x94], edx
mov dword [esp + 0x98], edx
mov dword [esp + 0x9c], edx
mov dword [esp + 0xa4], edx
mov edx, esi
xor edx, 0x330eba22
mov dword [esp + 0x1c4], ecx
mov dword [esp + 0x24], edi
mov ecx, eax
mov dword [esp + 0x90], 0x17e6
mov dword [esp + 0xa0], 0x1842
mov dword [esp + 0xa8], 0x1a52
mov dword [esp + 0xac], 0x5a
mov dword [esp + 0xb0], 0x21cc
mov dword [esp + 0xb4], 0x2b7
mov dword [esp + 0xb8], 0x1f8f
mov dword [esp + 0x40], edx
test ecx, ecx
je 0x10011f7b
inc ecx
cmp ecx, 0xc
jl 0x10011f71
mov ecx, dword [esp + ecx*4 + 0x8c]
push 0x2c
pop edx
xor ecx, 0xea
mov dword [esp + 0x4c], edx
push 9
mov dword [esp + 0x1c4], ecx
mov ecx, eax
mov dword [esp + 0x54], edx
mov dword [esp + 0x68], edx
mov dword [esp + 0x48], 0x140c
mov dword [esp + 0x4c], 0x9fc
mov dword [esp + 0x58], 0x2477
mov dword [esp + 0x5c], 0x255a
mov dword [esp + 0x60], 0x10a
mov dword [esp + 0x64], 0x100f
pop edx
cmp ecx, 8
je 0x10011fdd
inc ecx
cmp ecx, edx
jl 0x10011fd3
mov ecx, dword [esp + ecx*4 + 0x44]
mov esi, eax
xor eax, eax
mov dword [esp + 0x1cc], ecx
inc eax
mov dword [esp + 0x3c], esi
mov dword [esp + 0x44], 0x101
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], 0x1b19
mov dword [esp + 0x50], 0xf2c
mov dword [esp + 0x54], eax
mov dword [esp + 0x58], 0xb93
mov dword [esp + 0x5c], 0x211d
mov dword [esp + 0x60], 0x25f6
mov dword [esp + 0x64], eax
call fcn.10010475
mov al, byte [esp + 0x10]
test al, al
je 0x1001208c
mov edi, dword [esp + 0x40]
or edi, 0x45e104ec
mov dword [esp + 0x24], edi
mov edi, str.asw_browser_notification_message
call fcn.1000fd6b
inc edi
cmp byte [edi], 0
jne 0x1001204d
mov al, byte [esp + 0x10]
mov edi, dword [esp + 0x24]
test al, al
je 0x1001208c
mov esi, dword [esp + 0x2c]
lea eax, [edi + 0x164beb26]
mov dword [esp + 0x40], eax
mov edi, str.asw_browser_notification_message
push ecx
push ecx
mov ecx, esi
call fcn.10010e9c
inc edi
pop ecx
pop ecx
cmp byte [edi], 0
jne 0x10012077
mov esi, dword [esp + 0x3c]
push 9
pop eax
cmp esi, 1
je 0x10012099
inc esi
cmp esi, eax
jl 0x1001208f
mov eax, dword [esp + esi*4 + 0x44]
lea edi, [esp + 0x70]
push 5
pop ecx
mov esi, str.server_disconnected
mov dword [esp + 0x1ec], eax
rep movsd dword es:[edi], dword [esi]
xor eax, eax
mov dword [esp + 0x44], 0xb1c864b4
mov dword [esp + 0x48], 0x6cdffdb3
mov esi, eax
mov dword [esp + 0x4c], 0x1aabffef
mov ecx, eax
mov dword [esp + 0x50], 0x3316ddce
mov dword [esp + 0x54], 0xfa76602b
mov dword [esp + 0x58], 0x347ee8f8
mov byte [esp + 0x5c], 0x3f
mov byte [esp + ecx + 0x298], cl
inc ecx
cmp ecx, 0x100
jb 0x100120ed
mov ecx, eax
mov dword [esp + 0x30], eax
mov al, byte [esp + ecx + 0x298]
xor edx, edx
mov byte [esp + 0xf], al
mov eax, ecx
push 0x13
pop ecx
div ecx
movzx ecx, byte [esp + 0xf]
movzx eax, byte [esp + edx + 0x70]
add eax, esi
add ecx, eax
movzx eax, cl
mov dword [esp + 0x6c], eax
call fcn.1001005b
cmp byte [esp + 0x10], 0
je 0x10012145
mov eax, dword [esp + 0x2c]
or eax, 0xb6057080
mov dword [esp + 0x24], eax
push ecx
mov ecx, dword [esp + 0x44]
call fcn.100101c6
pop ecx
push 5
mov al, byte [esp + 0x14]
lea edi, [esp + 0x100]
pop ecx
mov esi, str.tehjeemisolatedarabic
xor edx, edx
rep movsd dword es:[edi], dword [esi]
mov dword [esp + 0x34], edx
movsw word es:[edi], word [esi]
cmp al, byte [esp + 0xfc]
jne 0x10012198
test al, al
je 0x10012194
cmp byte [esp + edx + 0xfc], 0
je 0x10012194
mov al, byte [edx + 0x1003c081]
inc edx
cmp al, byte [esp + edx + 0xfc]
je 0x10012176
mov dword [esp + 0x34], edx
push dword [esp + 0x28]
mov edx, dword [esp + 0x30]
call fcn.1000febd
mov esi, dword [esp + 0x38]
mov edi, dword [esp + 0x40]
pop ecx
cmp edi, esi
jae 0x100121f2
call fcn.100106f5
mov ecx, dword [esp + 0x24]
cmp edi, 0x2263
jne 0x100121cf
lea eax, [ecx + 0x5452824a]
mov dword [esp + 0x28], eax
jmp 0x100121d3
mov eax, dword [esp + 0x28]
sub ecx, 0x3561eee1
mov edx, str.muesum.namfoelsi
push eax
mov dword [esp + 0x28], ecx
call fcn.100111ea
inc edi
pop ecx
cmp edi, esi
jb 0x100121b2
mov dword [esp + 0x3c], edi
mov esi, dword [esp + 0x6c]
mov ecx, dword [esp + 0x30]
mov al, byte [esp + esi + 0x298]
mov byte [esp + ecx + 0x298], al
inc ecx
mov al, byte [esp + 0xf]
mov byte [esp + esi + 0x298], al
mov dword [esp + 0x30], ecx
cmp ecx, 0x100
jb 0x10012103
mov eax, dword [esp + 0x40]
add eax, 0xaf0392eb
xor ecx, ecx
mov dword [0x1003bff8], eax
mov esi, ecx
mov edx, ecx
mov dword [esp + 0x30], ecx
lea eax, [edx + 1]
movzx edx, al
lea edi, [esp + 0x70]
mov dword [esp + 0x124], edx
push 5
mov al, byte [esp + edx + 0x29c]
mov byte [esp + 0x13], al
movzx eax, al
mov dword [esp + 0xfc], eax
add eax, esi
movzx eax, al
mov esi, str.pj.akouzihs.uziihsagih
mov dword [esp + 0x70], eax
mov al, byte [esp + eax + 0x29c]
mov byte [esp + edx + 0x29c], al
mov edx, ecx
pop ecx
rep movsd dword es:[edi], dword [esi]
mov al, byte [esp + 0x10]
mov dword [esp + 0x34], edx
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
cmp al, byte [esp + 0x70]
jne 0x100122e7
test al, al
je 0x100122bb
cmp byte [esp + edx + 0x70], 0
je 0x100122bb
call fcn.10010f8d
mov edx, dword [esp + 0x34]
inc edx
mov dword [esp + 0x34], edx
mov al, byte [edx + str.asw_browser_notification_message]
cmp al, byte [esp + edx + 0x70]
je 0x10012296
mov ecx, dword [esp + 0x3c]
cmp ecx, edx
jae 0x100122e7
imul eax, dword [esp + 0x2c], 0xc4490d2e
mov esi, edx
mov edi, dword [esp + 0x40]
sub esi, ecx
mov dword [esp + 0x3c], edx
mov dword [esp + 0x24], eax
mov ecx, edi
call fcn.100109ee
sub esi, 1
jne 0x100122db
mov esi, dword [esp + 0x6c]
mov edx, dword [esp + 0x124]
mov al, byte [esp + 0xf]
mov ecx, dword [esp + 0x30]
mov edi, dword [esp + 0x2c]
mov byte [esp + esi + 0x298], al
movzx eax, byte [esp + edx + 0x298]
add eax, dword [esp + 0xf8]
movzx eax, al
push 0
mov al, byte [esp + eax + 0x29c]
xor al, byte [esp + ecx + 0x48]
mov byte [esp + ecx + 0x3f4], al
inc ecx
mov dword [esp + 0x34], ecx
cmp ecx, 0x19
pop ecx
jb 0x1001223c
mov byte [esp + 0x409], cl
add edi, 0x29adab5e
mov ecx, str.part_201_250
mov dword [esp + 0x6c], edi
call fcn.1000f6e3
push 6
mov al, byte [esp + 0x14]
lea edi, [esp + 0x48]
pop ecx
mov esi, str.app.Maintenance.GetStatus
xor edx, edx
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
cmp al, byte [esp + 0x44]
jmp 0x10012390
test al, al
je 0x10012396
cmp byte [esp + edx + 0x44], 0
je 0x10012396
call fcn.10010475
mov edx, dword [esp + 0x38]
inc edx
mov al, byte [edx + str.asw_browser_notification_message]
cmp al, byte [esp + edx + 0x44]
mov dword [esp + 0x38], edx
je 0x10012371
call fcn.10010f8d
mov edi, dword [esp + 0x120]
mov esi, dword [esp + 0x38]
cmp edi, esi
jae 0x100123f7
mov ecx, dword [0x1003bff8]
imul eax, ecx, 0xddafa75a
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x24]
push ecx
mov edx, eax
call fcn.1000febd
pop ecx
cmp edi, 0x243d
jne 0x100123de
mov eax, dword [esp + 0x2c]
and eax, 0xcedf3370
mov dword [esp + 0x24], eax
jmp 0x100123e2
mov eax, dword [esp + 0x24]
mov edx, dword [esp + 0x3c]
inc edi
mov ecx, dword [0x1003bff8]
mov dword [esp + 0x2c], edx
cmp edi, esi
jb 0x100123be
jmp 0x100123fb
mov edx, dword [esp + 0x2c]
xor eax, eax
mov dword [esp + 0x8c], 0x11a1
push 0xa
mov ecx, eax
mov dword [esp + 0x94], 0x2237
mov dword [esp + 0x98], 0x1b1a
mov dword [esp + 0x9c], 0x2427
mov dword [esp + 0xa0], 0x230b
mov dword [esp + 0xa4], 0x942
mov dword [esp + 0xa8], 0x1ef2
mov dword [esp + 0xac], 0x1103
mov dword [esp + 0xb0], eax
mov dword [esp + 0xb4], 0xeb6
mov dword [esp + 0xb8], eax
mov dword [esp + 0xbc], 0x193c
pop esi
cmp ecx, esi
je 0x10012488
inc ecx
cmp ecx, 0xc
jl 0x1001247e
mov ecx, dword [esp + ecx*4 + 0x8c]
mov esi, 0xffff
mov dword [esp + 0x70], esi
mov dword [esp + 0x74], esi
mov esi, dword [esp + 0x6c]
or esi, 0xa0a99b1
mov dword [esp + 0x220], ecx
xor edx, 0x89098e4a
mov dword [esp + 0x78], 0x1039
mov ecx, eax
mov dword [esp + 0x7c], 0xdc0
mov dword [esp + 0x80], 0x13a9
mov dword [esp + 0x84], 0x1c29
mov dword [0x1003c0b0], esi
mov dword [0x1003bfb4], edx
cmp ecx, 1
je 0x100124f2
inc ecx
cmp ecx, 6
jl 0x100124e7
mov ecx, dword [esp + ecx*4 + 0x70]
mov dword [esp + 0x254], ecx
mov ecx, eax
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], 0x1b4a
mov dword [esp + 0x4c], 0x489
mov dword [esp + 0x50], 0xecf
mov dword [esp + 0x54], 0x2064
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], 0x2520
mov dword [esp + 0x60], 0x75a
cmp ecx, 5
je 0x10012542
inc ecx
cmp ecx, 8
jl 0x10012537
mov ecx, dword [esp + ecx*4 + 0x44]
mov esi, 0xef
mov dword [esp + 0x24c], ecx
mov ecx, eax
mov dword [esp + 0x44], 0xc4d
mov dword [esp + 0x48], 0x2258
mov dword [esp + 0x4c], 0x2499
mov dword [esp + 0x50], esi
mov dword [esp + 0x54], esi
mov dword [esp + 0x58], esi
mov dword [esp + 0x5c], esi
cmp ecx, 5
je 0x10012587
inc ecx
cmp ecx, 7
jl 0x1001257c
mov ecx, dword [esp + ecx*4 + 0x44]
xor ecx, esi
mov dword [esp + 0x50], 0x10e0
mov dword [esp + 0x248], ecx
mov ecx, 0x10000
push 9
mov dword [esp + 0x48], ecx
mov dword [esp + 0x4c], ecx
mov dword [esp + 0x50], ecx
mov dword [esp + 0x60], ecx
mov dword [esp + 0x58], 0x252f
mov dword [esp + 0x5c], 0x1eee
mov dword [esp + 0x64], 0x1d29
mov dword [esp + 0x68], 0x1f69
pop ecx
cmp eax, 6
je 0x100125de
inc eax
cmp eax, ecx
jl 0x100125d4
mov eax, dword [esp + eax*4 + 0x44]
and edx, 0xf18dafd7
mov dword [esp + 0x238], eax
mov dword [0x1003c0ac], edx
call fcn.1000f909
mov edx, dword [0x1003c0ac]
xor eax, eax
mov ecx, eax
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], 0xef1
lea esi, [edx + 0x4016af4f]
mov dword [esp + 0x50], 0x9d9
mov dword [esp + 0x54], 0x2153
mov dword [esp + 0x58], 0x11e1
mov dword [esp + 0x5c], 0xc1a
mov dword [esp + 0x30], esi
test ecx, ecx
je 0x10012648
inc ecx
cmp ecx, 7
jl 0x1001263e
mov ecx, dword [esp + ecx*4 + 0x44]
mov edi, 0xf0
push 5
mov dword [esp + 0x240], ecx
mov ecx, eax
mov dword [esp + 0xd8], edi
mov dword [esp + 0xe0], edi
mov dword [esp + 0xcc], 0x1f51
mov dword [esp + 0xd0], 0x16a1
mov dword [esp + 0xd4], 0x22ee
mov dword [esp + 0xdc], 0x329
mov dword [esp + 0xe4], 0x135
mov dword [esp + 0xe8], 0xc60
mov dword [esp + 0xec], 0x2532
mov dword [esp + 0xf0], 0x2659
pop edi
cmp ecx, edi
je 0x100126cd
inc ecx
cmp ecx, 0xa
jl 0x100126c3
mov ecx, dword [esp + ecx*4 + 0xc8]
xor ecx, 0xf1
mov dword [esp + 0x44], 0xa90
mov dword [esp + 0x1d8], ecx
mov ecx, eax
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], 0x138a
mov dword [esp + 0x50], 0x1549
mov dword [esp + 0x54], 0xcf5
mov dword [esp + 0x58], 0x21f2
mov dword [esp + 0x5c], eax
cmp ecx, 6
je 0x1001271e
inc ecx
cmp ecx, 7
jl 0x10012713
mov ecx, dword [esp + ecx*4 + 0x44]
sub edx, 0x30073021
mov dword [esp + 0x3c], edx
mov edx, esi
mov esi, 0x200c9
mov dword [esp + 0x1d4], ecx
or edx, 0xa89d84c4
mov dword [esp + 0x168], esi
push 0xb
mov dword [esp + 0x188], esi
mov ecx, eax
mov dword [esp + 0x2c], edx
mov dword [esp + 0x160], 0x1882
mov dword [esp + 0x164], 0x912
mov dword [esp + 0x168], 0x4e9
mov dword [esp + 0x170], 0x813
mov dword [esp + 0x174], 0x26d9
mov dword [esp + 0x178], 0x1fa
mov dword [esp + 0x17c], 0x2073
mov dword [esp + 0x180], 0xc7f
mov dword [esp + 0x184], 0x1bfe
pop esi
cmp ecx, 3
je 0x100127c4
inc ecx
cmp ecx, esi
jl 0x100127ba
mov ecx, dword [esp + ecx*4 + 0x15c]
xor ecx, 0xc9
mov dword [esp + 0x44], eax
mov dword [esp + 0x1e0], ecx
mov ecx, eax
mov dword [esp + 0x48], 0x597
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], 0x1840
mov dword [esp + 0x54], eax
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], 0x181f
cmp ecx, 4
je 0x10012811
inc ecx
cmp ecx, 8
jl 0x10012806
mov ecx, dword [esp + ecx*4 + 0x44]
mov dword [esp + 0x1dc], ecx
mov ecx, eax
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], 0xf0e
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], 0x4d3
mov dword [esp + 0x54], 0x135c
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], 0x14fe
mov dword [esp + 0x60], 0x2384
cmp ecx, edi
je 0x1001285c
inc ecx
cmp ecx, 8
jl 0x10012852
mov ecx, dword [esp + ecx*4 + 0x44]
mov dword [esp + 0x1e4], ecx
mov ecx, eax
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], 0x1c4a
mov dword [esp + 0x78], 0x1fa9
mov dword [esp + 0x7c], eax
mov dword [esp + 0x80], 0x1038
test ecx, ecx
je 0x10012895
inc ecx
cmp ecx, edi
jl 0x1001288c
mov ecx, dword [esp + ecx*4 + 0x70]
mov esi, 0x40000
mov dword [esp + 0x1e8], ecx
mov ecx, eax
mov dword [esp + 0x8c], esi
mov dword [esp + 0x90], 0x1a66
mov dword [esp + 0x94], esi
mov dword [esp + 0x98], 0x1f5c
mov dword [esp + 0x9c], 0xd01
mov dword [esp + 0xa0], 0x1586
mov dword [esp + 0xa4], 0x1406
mov dword [esp + 0xa8], 0xf9c
mov dword [esp + 0xac], 0x11ca
mov dword [esp + 0xb0], 0x1731
mov dword [esp + 0xb4], 0x11fb
mov dword [esp + 0xb8], 0x1164
cmp ecx, 2
je 0x1001292e
inc ecx
cmp ecx, 0xc
jl 0x10012923
mov ecx, dword [esp + ecx*4 + 0x8c]
mov esi, 0xb4
mov dword [esp + 0x25c], ecx
mov ecx, eax
mov dword [esp + 0x8c], esi
mov dword [esp + 0x90], 0x1839
mov dword [esp + 0x94], esi
mov dword [esp + 0x98], 0x1385
mov dword [esp + 0x9c], esi
mov dword [esp + 0xa0], 0x1809
mov dword [esp + 0xa4], 0x8a2
mov dword [esp + 0xa8], 0x21f5
mov dword [esp + 0xac], 0x1c7c
mov dword [esp + 0xb0], 0x1de9
mov dword [esp + 0xb4], esi
mov dword [esp + 0xb8], 0x18a1
test ecx, ecx
je 0x100129c1
inc ecx
cmp ecx, 0xc
jl 0x100129b7
mov ecx, dword [esp + ecx*4 + 0x8c]
xor ecx, esi
mov dword [esp + 0x264], ecx
mov ecx, edx
call fcn.100109ee
mov ecx, edi
mov esi, str.AVAST_AV_ONE_FREE_URL
lea edi, [esp + 0x70]
xor eax, eax
rep movsd dword es:[edi], dword [esi]
mov cl, byte [str.asw_browser_notification_message]
mov dword [esp + 0x34], eax
movsw word es:[edi], word [esi]
cmp cl, byte [esp + 0x70]
jne 0x10012a15
test cl, cl
je 0x10012a11
cmp byte [esp + eax + 0x70], 0
je 0x10012a11
mov cl, byte [eax + 0x1003c081]
inc eax
cmp cl, byte [esp + eax + 0x70]
je 0x100129f9
mov dword [esp + 0x34], eax
push dword [esp + 0x3c]
mov edx, str.alc_cmp_grimefighter
call fcn.100111ea
pop ecx
mov ecx, dword [esp + 0x34]
movzx eax, byte [esp + ecx + 0x70]
movzx ecx, byte [ecx + str.asw_browser_notification_message]
sub ecx, eax
cmp ecx, 0x171
jbe 0x10012a4a
mov edx, dword [esp + 0x30]
add edx, 0x60402a44
jmp 0x10012a61
mov edx, dword [esp + 0x28]
lea edx, [edx - 0x59ae0b7]
call fcn.1000f62a
imul edx, dword [esp + 0x30], 0x8fb24b22
xor eax, eax
mov dword [esp + 0xc8], 0x1b19
push 0xa
mov dword [esp + 0xd0], eax
mov ecx, eax
mov dword [esp + 0xd4], 0x20df
mov dword [esp + 0xd8], eax
mov dword [esp + 0xdc], 0x2171
mov dword [esp + 0xe0], 0x1a28
mov dword [esp + 0xe4], eax
mov dword [esp + 0xe8], eax
mov dword [esp + 0xec], 0x225e
mov dword [esp + 0xf0], eax
pop esi
cmp ecx, 7
je 0x10012acc
inc ecx
cmp ecx, esi
jl 0x10012ac2
mov ecx, dword [esp + ecx*4 + 0xc8]
add edx, 0x30e6fa4a
xor edi, edi
mov dword [esp + 0x1d0], ecx
mov ecx, eax
mov dword [esp + 0x2c], edx
mov dword [esp + 0x8c], 0x1763
inc edi
mov dword [esp + 0x90], eax
mov dword [esp + 0x94], 0x19c9
mov dword [esp + 0x98], eax
mov dword [esp + 0x9c], eax
mov dword [esp + 0xa0], 0xcc3
mov dword [esp + 0xa4], 0x7aa
mov dword [esp + 0xa8], 0x1eaa
mov dword [esp + 0xac], eax
mov dword [esp + 0xb0], eax
mov dword [esp + 0xb4], 0x1f05
mov dword [esp + 0xb8], 0x23a3
mov dword [esp + 0xbc], 0xb53
mov dword [esp + 0xc0], 0x13b7
cmp ecx, edi
je 0x10012b79
inc ecx
cmp ecx, 0xe
jl 0x10012b6f
mov ecx, dword [esp + ecx*4 + 0x8c]
mov dword [esp + 0x124], ecx
mov ecx, eax
mov dword [esp + 0x44], 0x25a2
mov dword [esp + 0x48], 0x234e
mov dword [esp + 0x4c], 0x25c
mov dword [esp + 0x50], edi
mov dword [esp + 0x54], edi
mov dword [esp + 0x58], 0x5e4
mov dword [esp + 0x5c], edi
cmp ecx, 3
je 0x10012bc0
inc ecx
cmp ecx, 7
jl 0x10012bb5
mov ecx, dword [esp + ecx*4 + 0x44]
mov dword [esp + 0x1f0], ecx
mov ecx, eax
mov dword [esp + 0xc8], eax
mov dword [esp + 0xcc], eax
mov dword [esp + 0xd0], 0x449
mov dword [esp + 0xd4], eax
mov dword [esp + 0xd8], 0x2292
mov dword [esp + 0xdc], eax
mov dword [esp + 0xe0], 0x38c
mov dword [esp + 0xe4], eax
mov dword [esp + 0xe8], 0x700
mov dword [esp + 0xec], 0x175c
cmp ecx, 3
je 0x10012c31
inc ecx
cmp ecx, esi
jl 0x10012c27
mov ecx, dword [esp + ecx*4 + 0xc8]
push 0x4d
pop esi
mov dword [esp + 0x1f4], ecx
mov ecx, eax
mov dword [esp + 0x44], esi
mov dword [esp + 0x48], esi
mov dword [esp + 0x4c], esi
mov dword [esp + 0x50], esi
mov dword [esp + 0x54], 0x1c11
mov dword [esp + 0x58], 0x6a6
mov dword [esp + 0x5c], 0x25ef
mov dword [esp + 0x60], esi
cmp ecx, edi
je 0x10012c7a
inc ecx
cmp ecx, 8
jl 0x10012c70
mov ecx, dword [esp + ecx*4 + 0x44]
lea edi, [esp + 0xfc]
mov esi, str.afii57425
mov dword [esp + 0x70], 0x1a5652d
xor ecx, 0x4c
mov dword [esp + 0x74], 0x9e95c539
mov dword [esp + 0x214], ecx
mov ecx, edx
xor ecx, 0xde4f939c
mov dword [esp + 0x78], 0xf3ed59aa
movsd dword es:[edi], dword [esi]
mov dword [esp + 0x30], ecx
mov ecx, eax
mov word [esp + 0x7c], 0xcc7b
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov edi, eax
mov byte [esp + ecx + 0x298], cl
inc ecx
cmp ecx, 0x100
jb 0x10012cc7
mov esi, eax
xor edx, edx
mov cl, byte [esp + esi + 0x298]
mov eax, esi
mov byte [esp + 0xf], cl
div dword [esp + 0x88]
movzx ecx, cl
movzx eax, byte [esp + edx + 0xfc]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [esp + edi + 0x298]
mov byte [esp + esi + 0x298], al
inc esi
mov al, byte [esp + 0xf]
mov byte [esp + edi + 0x298], al
cmp esi, 0x100
jb 0x10012cd9
mov cl, byte [str.asw_browser_notification_message]
lea edi, [esp + 0xfc]
or dword [esp + 0x28], 0x3c8ca07
mov esi, str.storeMyAddress
xor eax, eax
mov dword [esp + 0x34], eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
cmp cl, byte [esp + 0xfc]
jne 0x10012d74
test cl, cl
je 0x10012d70
cmp byte [esp + eax + 0xfc], 0
je 0x10012d70
mov cl, byte [eax + 0x1003c081]
inc eax
cmp cl, byte [esp + eax + 0xfc]
je 0x10012d52
mov dword [esp + 0x34], eax
mov edx, dword [esp + 0x30]
call fcn.1000f62a
mov eax, dword [esp + 0x34]
movzx ecx, byte [eax + str.asw_browser_notification_message]
movzx eax, byte [esp + eax + 0xfc]
sub ecx, eax
cmp ecx, 0xb28
jne 0x10012dbb
mov eax, dword [esp + 0x2c]
mov ecx, str.ExportVaultDataProcessing__prepare_login_merger_failed
mov edx, dword [esp + 0x2c]
or eax, 0x751c7503
push str.GetExtensions
mov dword [esp + 0x2c], eax
call fcn.10010c22
pop ecx
xor eax, eax
mov dword [esp + 0x38], eax
mov edi, eax
mov esi, eax
lea eax, [edi + 1]
movzx edi, al
mov eax, dword [esp + 0x38]
mov cl, byte [esp + edi + 0x298]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [esp + 0x38], eax
mov al, byte [esp + eax + 0x298]
mov byte [esp + edi + 0x298], al
mov eax, dword [esp + 0x38]
mov byte [esp + eax + 0x298], cl
movzx eax, byte [esp + edi + 0x298]
add eax, edx
movzx eax, al
mov al, byte [esp + eax + 0x298]
xor al, byte [esp + esi + 0x70]
mov byte [esp + esi + 0x398], al
inc esi
cmp esi, 0xe
jb 0x10012dc5
mov eax, dword [esp + 0x30]
lea edi, [esp + 0x70]
mov edx, dword [esp + 0x2c]
mov esi, str.SupportExceptions
add eax, 0x5d755674
mov byte [esp + 0x3a6], 0
mov dword [esp + 0x34], eax
mov ecx, str.0L2cqDt_
and eax, 0x8b274146
mov dword [esp + 0xc8], 0x2391c445
movsd dword es:[edi], dword [esi]
push 0x11
mov dword [esp + 0x28], eax
pop eax
movsd dword es:[edi], dword [esi]
push str.fehfinalarabic
mov dword [esp + 0xd0], 0x56d4bfd8
mov dword [esp + 0xd4], 0x6cc2f52e
movsd dword es:[edi], dword [esi]
mov dword [esp + 0xd8], 0x3cdce68c
mov dword [esp + 0xdc], 0x36c7c867
mov word [esp + 0xe0], 0xd90c
movsd dword es:[edi], dword [esi]
mov dword [esp + 0x40], eax
mov byte [esp + 0xe2], al
mov dword [esp + 0xe3], 0xb5b0eff1
mov dword [esp + 0xe7], 0x9c3f3fd2
mov dword [esp + 0xeb], 0x88d89cc5
mov dword [esp + 0xef], 0x80f9985d
mov word [esp + 0xf3], 0xeca5
mov byte [esp + 0xf5], 0x1a
movsw word es:[edi], word [esi]
call fcn.10010c22
xor eax, eax
pop ecx
mov edi, eax
mov ecx, eax
mov byte [esp + ecx + 0x298], cl
inc ecx
cmp ecx, 0x100
jb 0x10012ef4
mov esi, eax
xor edx, edx
mov cl, byte [esp + esi + 0x298]
mov eax, esi
mov byte [esp + 0xf], cl
div dword [esp + 0x3c]
movzx ecx, cl
movzx eax, byte [esp + edx + 0x70]
add eax, edi
add ecx, eax
movzx edi, cl
call fcn.10010f8d
xor ecx, ecx
mov eax, ecx
cmp byte [str.asw_browser_notification_message], al
je 0x10012f6d
mov edx, dword [esp + 0x24]
imul edx, edx, 0x61e2203f
inc eax
cmp byte [eax + str.asw_browser_notification_message], cl
jne 0x10012f3d
mov dword [esp + 0x24], edx
cmp eax, 0x1a21
jb 0x10012f6d
mov eax, dword [esp + 0x34]
or eax, 0x1eb18f88
mov dword [esp + 0x24], eax
call fcn.100108a0
xor ecx, ecx
jmp 0x10012f7a
mov eax, dword [esp + 0x2c]
add eax, 0xf6442ccd
mov dword [esp + 0x34], eax
mov al, byte [esp + edi + 0x298]
mov byte [esp + esi + 0x298], al
inc esi
mov al, byte [esp + 0xf]
mov byte [esp + edi + 0x298], al
cmp esi, 0x100
jb 0x10012f06
mov esi, str.support_fwk
mov dword [esp + 0x34], ecx
lea edi, [esp + 0x70]
mov edx, ecx
mov eax, ecx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
jmp 0x10012fb8
xor ecx, ecx
inc eax
movzx eax, al
mov dword [esp + 0x30], eax
mov al, byte [esp + eax + 0x298]
mov byte [esp + 0xf], al
movzx eax, al
mov dword [esp + 0x3c], eax
add eax, edx
movzx eax, al
mov dword [esp + 0xf8], eax
mov al, byte [str.asw_browser_notification_message]
cmp al, byte [esp + 0x70]
jne 0x10013001
test al, al
je 0x10013001
cmp byte [esp + ecx + 0x70], 0
je 0x10013001
mov al, byte [ecx + 0x1003c081]
inc ecx
cmp al, byte [esp + ecx + 0x70]
je 0x10012fe9
movzx eax, byte [esp + ecx + 0x70]
movzx ecx, byte [ecx + str.asw_browser_notification_message]
sub ecx, eax
mov eax, dword [esp + 0x28]
cmp ecx, 0x1bd5
jae 0x10013026
add eax, 0x1fa69d4f
mov dword [esp + 0x2c], eax
jmp 0x10013043
mov edx, dword [esp + 0x2c]
add eax, 0x451ceda6
push str.enable_backup_management
mov ecx, str.rb.ednarganipmac
mov dword [esp + 0x28], eax
call fcn.10010c22
pop ecx
call fcn.1000fd6b
push 0xc
mov al, byte [str.asw_browser_notification_message]
lea edi, [esp + 0x90]
pop ecx
mov esi, str.SOCKS4:_Failed_receiving_connect_request_ack:__s
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
cmp al, byte [esp + 0x8c]
jne 0x10013092
xor esi, esi
test al, al
je 0x10013092
cmp byte [esp + esi + 0x8c], 0
je 0x10013092
mov ecx, str.unterminated_string
call fcn.1000f6e3
mov al, byte [esi + 0x1003c081]
inc esi
cmp al, byte [esp + esi + 0x8c]
je 0x1001306a
mov edx, dword [esp + 0xf8]
mov ecx, dword [esp + 0x30]
xor dword [esp + 0x24], 0xf3786997
mov al, byte [esp + edx + 0x298]
mov byte [esp + ecx + 0x298], al
mov al, byte [esp + 0xf]
mov byte [esp + edx + 0x298], al
movzx eax, byte [esp + ecx + 0x298]
add eax, dword [esp + 0x3c]
mov edx, dword [esp + 0x34]
movzx eax, al
mov al, byte [esp + eax + 0x298]
xor al, byte [esp + edx + 0xc8]
movzx eax, al
mov word [esp + edx*2 + 0x448], ax
inc edx
mov dword [esp + 0x34], edx
cmp edx, 0x2a
mov edx, dword [esp + 0xf8]
mov eax, ecx
jb 0x10012fb6
mov ecx, 0xe2
mov dword [esp + 0x15c], 0xc5e
xor eax, eax
mov dword [esp + 0x160], 0x2394
push 0xb
mov word [esp + 0x4a0], ax
mov dword [esp + 0x168], 0x21ce
mov dword [esp + 0x16c], 0x13e0
mov dword [esp + 0x170], 0x2de
mov dword [esp + 0x174], 0x7f
mov dword [esp + 0x178], 0x248e
mov dword [esp + 0x17c], ecx
mov dword [esp + 0x180], 0xab2
mov dword [esp + 0x184], ecx
mov dword [esp + 0x188], 0x22a8
pop edx
cmp eax, 7
je 0x1001318e
inc eax
cmp eax, edx
jl 0x10013184
mov eax, dword [esp + eax*4 + 0x15c]
mov edx, dword [esp + 0x2c]
xor eax, ecx
mov dword [esp + 0x22c], eax
call fcn.1000fb5e
push 6
pop ecx
mov esi, str.exceeds_application_limits
lea edi, [esp + 0x44]
rep movsd dword es:[edi], dword [esi]
mov cl, byte [str.asw_browser_notification_message]
xor eax, eax
mov edx, eax
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
cmp cl, byte [esp + 0x44]
jne 0x100131fb
test cl, cl
je 0x100131df
cmp byte [esp + edx + 0x44], al
je 0x100131df
mov cl, byte [edx + 0x1003c081]
inc edx
cmp cl, byte [esp + edx + 0x44]
je 0x100131c8
cmp dword [esp + 0x3c], edx
jae 0x100131fb
sub edx, dword [esp + 0x3c]
mov dword [esp + 0x3c], edx
mov esi, edx
call fcn.10010475
sub esi, 1
jne 0x100131ef
xor eax, eax
push 0x3d
pop edx
push 0xa
mov ecx, eax
mov dword [esp + 0xcc], 0xbcd
mov dword [esp + 0xd0], 0x19fb
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], edx
mov dword [esp + 0xdc], edx
mov dword [esp + 0xe0], 0x254c
mov dword [esp + 0xe4], 0x874
mov dword [esp + 0xe8], 0x2189
mov dword [esp + 0xec], 0x26de
mov dword [esp + 0xf0], edx
pop esi
cmp ecx, 3
je 0x1001326b
inc ecx
cmp ecx, esi
jl 0x10013261
mov ecx, dword [esp + ecx*4 + 0xc8]
xor ecx, edx
mov dword [esp + 0xc8], 0x12ae
mov edx, 0xec
mov dword [esp + 0x20c], ecx
mov ecx, eax
mov dword [esp + 0xcc], 0xeec
mov dword [esp + 0xd0], edx
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], edx
mov dword [esp + 0xdc], edx
mov dword [esp + 0xe0], 0x43c
mov dword [esp + 0xe4], 0x306
mov dword [esp + 0xe8], 0xba8
mov dword [esp + 0xec], edx
cmp ecx, 4
je 0x100132e6
inc ecx
cmp ecx, esi
jl 0x100132dc
mov ecx, dword [esp + ecx*4 + 0xc8]
xor ecx, edx
mov dword [esp + 0x44], 0x2191
xor edx, edx
mov dword [esp + 0x208], ecx
inc edx
mov dword [esp + 0x50], 0x1b96
mov ecx, eax
mov dword [esp + 0x48], edx
mov dword [esp + 0x4c], edx
mov dword [esp + 0x54], 0x1f6e
mov dword [esp + 0x58], 0xb1b
mov dword [esp + 0x5c], edx
mov dword [esp + 0x60], edx
cmp ecx, edx
je 0x10013335
inc ecx
cmp ecx, 8
jl 0x1001332b
mov ecx, dword [esp + ecx*4 + 0x44]
mov esi, eax
push 0x74
pop eax
mov dword [esp + 0x74], eax
mov dword [esp + 0x80], eax
mov dword [esp + 0x84], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x204], ecx
mov dword [esp + 0x70], 0x551
mov dword [esp + 0x78], 0x24db
lea edi, [eax + 0x2a69df3e]
mov dword [esp + 0x7c], 0x2688
add eax, 0xfda90ade
mov dword [esp + 0x28], edi
mov dword [esp + 0x24], eax
call fcn.10010475
cmp esi, 1
je 0x10013396
inc esi
cmp esi, 6
jl 0x1001338b
mov eax, dword [esp + esi*4 + 0x70]
mov esi, str.OmnitureSiteCatalystDlsource
xor eax, 0x70
mov dword [esp + 0x200], eax
lea eax, [edi - 0x539b0d4d]
push 7
pop ecx
lea edi, [esp + 0x44]
mov dword [0x1003c0b0], eax
rep movsd dword es:[edi], dword [esi]
mov cl, byte [str.asw_browser_notification_message]
xor eax, eax
mov edx, eax
movsb byte es:[edi], byte [esi]
cmp cl, byte [esp + 0x44]
jne 0x10013427
test cl, cl
je 0x100133e5
cmp byte [esp + edx + 0x44], al
je 0x100133e5
mov cl, byte [edx + 0x1003c081]
inc edx
cmp cl, byte [esp + edx + 0x44]
je 0x100133ce
mov edi, dword [esp + 0x120]
mov dword [esp + 0x34], edx
cmp edi, edx
jae 0x10013427
mov esi, edx
push ecx
mov ecx, dword [esp + 0x2c]
call fcn.100101c6
pop ecx
cmp edi, 0x292
jne 0x10013416
mov eax, dword [esp + 0x24]
add eax, 0x54258078
mov dword [esp + 0x2c], eax
and dword [0x1003c0b0], 0x93269573
inc edi
cmp edi, esi
jb 0x100133f6
xor eax, eax
mov edx, 0xc8
mov dword [esp + 0x8c], 0x2316
push 9
mov ecx, eax
mov dword [esp + 0x94], edx
mov dword [esp + 0x98], edx
mov dword [esp + 0x9c], 0xad9
mov dword [esp + 0xa0], edx
mov dword [esp + 0xa4], 0x9c6
mov dword [esp + 0xa8], 0x1cd5
mov dword [esp + 0xac], 0x1b18
mov dword [esp + 0xb0], 0x208e
mov dword [esp + 0xb4], edx
mov dword [esp + 0xb8], 0x1757
mov dword [esp + 0xbc], 0x1bde
mov dword [esp + 0xc0], 0x1dad
pop edi
cmp ecx, edi
je 0x100134ba
inc ecx
cmp ecx, 0xd
jl 0x100134b0
mov ecx, dword [esp + ecx*4 + 0x8c]
xor edx, edx
xor ecx, 0xc0
mov dword [esp + 0x70], eax
mov dword [esp + 0x1fc], ecx
inc edx
mov ecx, eax
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], 0xd5b
mov dword [esp + 0x7c], eax
mov dword [esp + 0x80], 0x15c5
mov dword [esp + 0x84], 0x1d4b
cmp ecx, edx
je 0x10013507
inc ecx
cmp ecx, 6
jl 0x100134fd
mov ecx, dword [esp + ecx*4 + 0x70]
mov esi, 0xa9
mov dword [esp + 0x1f8], ecx
mov ecx, eax
mov dword [esp + 0x44], esi
mov dword [esp + 0x48], 0x16a9
mov dword [esp + 0x4c], esi
mov dword [esp + 0x50], esi
mov dword [esp + 0x54], esi
mov dword [esp + 0x58], 0x2a3
mov dword [esp + 0x5c], 0xffd
mov dword [esp + 0x60], 0x1089
mov dword [esp + 0x64], esi
cmp ecx, 4
je 0x10013557
inc ecx
cmp ecx, edi
jl 0x1001354d
mov ecx, dword [esp + ecx*4 + 0x44]
xor ecx, esi
mov dword [esp + 0x15c], 0x21b5
push 0xb
mov dword [esp + 0x214], ecx
mov dword [esp + 0x164], 0x198a
mov dword [esp + 0x168], 0x1e43
mov dword [esp + 0x16c], edx
mov dword [esp + 0x170], edx
mov dword [esp + 0x174], 0xf57
mov dword [esp + 0x178], 0x7cd
mov dword [esp + 0x17c], 0x4f7
mov dword [esp + 0x180], edx
mov dword [esp + 0x184], 0xae7
mov dword [esp + 0x188], 0x15c1
pop ecx
cmp eax, 4
je 0x100135de
inc eax
cmp eax, ecx
jl 0x100135d4
mov eax, dword [esp + eax*4 + 0x15c]
mov dword [esp + 0x218], eax
call fcn.1000fd6b
xor edi, edi
cmp byte [str.asw_browser_notification_message], 0
je 0x10013612
imul eax, dword [esp + 0x2c], 0x91341c21
mov dword [esp + 0x28], eax
inc edi
cmp byte [edi + str.asw_browser_notification_message], 0
jne 0x10013608
call fcn.100108a0
mov esi, dword [esp + 0x120]
jmp 0x1001364f
cmp esi, 0xbdd
jne 0x10013635
and dword [esp + 0x2c], 0x56d4bdb1
call fcn.1000faa0
mov eax, dword [esp + 0x2c]
mov edx, str.output_buffer_too_small_for_in_memory_compression
xor eax, 0x84d36287
push eax
mov dword [esp + 0x28], eax
call fcn.100111ea
pop ecx
inc esi
cmp esi, edi
jb 0x10013620
mov esi, str.cdproperty
mov dword [esp + 0x44], 0x93f22d2f
lea edi, [esp + 0x70]
mov dword [esp + 0x48], 0xa21063b4
push 0x29
pop eax
movsd dword es:[edi], dword [esi]
mov dword [esp + 0x240], eax
mov byte [esp + 0x55], al
push 0x11
movsd dword es:[edi], dword [esi]
pop eax
mov byte [esp + 0x5f], al
xor eax, eax
mov dword [esp + 0x4c], 0x744eb0ce
movsw word es:[edi], word [esi]
mov dword [esp + 0x50], 0x16f5dc0f
mov byte [esp + 0x54], 0x52
mov dword [esp + 0x56], 0xc35639fe
movsb byte es:[edi], byte [esi]
mov esi, str.Connection_
mov dword [esp + 0x5a], 0x72cb9903
lea edi, [esp + 0xfc]
mov byte [esp + 0x5e], 0xc2
mov byte [esp + 0x60], 0x5a
mov dword [esp + 0xf8], eax
movsd dword es:[edi], dword [esi]
mov dword [esp + 0x30], eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov edi, dword [esp + 0x34]
call fcn.100102c7
cmp byte [str.asw_browser_notification_message], 0
je 0x1001370d
mov eax, dword [esp + 0x24]
mov esi, str.asw_browser_notification_message
mov edi, dword [esp + 0x28]
add eax, 0x18db5086
mov dword [esp + 0x2c], eax
mov edx, edi
call fcn.1000f62a
inc esi
cmp byte [esi], 0
jne 0x100136fc
mov edi, dword [esp + 0x34]
call fcn.100102c7
mov cl, byte [str.asw_browser_notification_message]
xor eax, eax
cmp cl, byte [esp + 0xfc]
jne 0x1001376a
test cl, cl
je 0x10013741
cmp byte [esp + eax + 0xfc], 0
je 0x10013741
mov cl, byte [eax + 0x1003c081]
inc eax
cmp cl, byte [esp + eax + 0xfc]
je 0x10013723
cmp edi, eax
jae 0x1001376a
imul ecx, dword [esp + 0x24], 0x6d669a0d
mov esi, eax
sub esi, edi
mov edi, eax
mov dword [esp + 0x34], edi
mov dword [esp + 0x2c], ecx
call fcn.10010f8d
call fcn.10010475
sub esi, 1
jne 0x1001375b
mov eax, dword [esp + 0x30]
mov byte [esp + eax + 0x298], al
inc eax
mov dword [esp + 0x30], eax
cmp eax, 0x100
jb 0x100136d8
push 0xa
xor esi, esi
pop edi
xor edx, edx
mov cl, byte [esp + esi + 0x298]
mov eax, esi
mov byte [esp + 0xf], cl
div edi
movzx ecx, cl
movzx eax, byte [esp + edx + 0x70]
add eax, dword [esp + 0xf8]
add ecx, eax
movzx ecx, cl
mov dword [esp + 0xf8], ecx
mov al, byte [esp + ecx + 0x298]
mov byte [esp + esi + 0x298], al
inc esi
mov al, byte [esp + 0xf]
mov byte [esp + ecx + 0x298], al
cmp esi, 0x100
jb 0x1001378a
call fcn.100102c7
xor edi, edi
cmp byte [str.asw_browser_notification_message], 0
je 0x10013804
mov eax, dword [esp + 0x24]
xor eax, 0x786bf5ee
mov dword [esp + 0x2c], eax
call fcn.100102c7
inc edi
cmp byte [edi + str.asw_browser_notification_message], 0
jne 0x100137f5
push ecx
push ecx
mov ecx, dword [esp + 0x2c]
call fcn.10010e9c
mov esi, dword [esp + 0x128]
pop ecx
pop ecx
jmp 0x10013850
call fcn.1000fd6b
cmp esi, 0x675
jne 0x10013842
mov eax, dword [0x1003c0b0]
push ecx
and eax, 0xa12e311d
push ecx
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x30], eax
call fcn.10010e9c
pop ecx
pop ecx
imul eax, dword [esp + 0x28], 0x6251aa0e
inc esi
mov dword [0x1003c0b0], eax
cmp esi, edi
jb 0x1001381a
xor ecx, ecx
mov dword [esp + 0x38], ecx
mov esi, ecx
mov dword [esp + 0x40], ecx
lea eax, [esi + 1]
movzx esi, al
mov dword [esp + 0x6c], esi
mov al, byte [esp + esi + 0x298]
mov byte [esp + 0xf], al
movzx eax, al
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x38]
add eax, dword [esp + 0x30]
cmp byte [str.asw_browser_notification_message], 0
movzx eax, al
mov dword [esp + 0x38], eax
mov al, byte [esp + eax + 0x298]
mov byte [esp + esi + 0x298], al
mov esi, ecx
je 0x10013917
mov eax, dword [esp + 0x2c]
add eax, 0xfe32413
mov dword [esp + 0x3c], eax
mov edi, eax
mov eax, dword [0x1003c0b0]
push ecx
push ecx
mov ecx, eax
call fcn.10010e9c
inc esi
mov eax, edi
pop ecx
pop ecx
cmp byte [esi + str.asw_browser_notification_message], 0
jne 0x100138b8
mov edi, dword [esp + 0x34]
mov dword [0x1003c0b0], eax
cmp edi, esi
jae 0x10013915
mov eax, dword [esp + 0x24]
add eax, 0x70cd2603
mov dword [esp + 0x28], eax
mov ecx, dword [esp + 0x2c]
call fcn.100109ee
cmp edi, 0x2505
jne 0x1001390c
add dword [esp + 0x2c], 0x698d9236
mov ecx, str.blacksmilingface
call fcn.1000f6e3
inc edi
cmp edi, esi
jb 0x100138e9
mov dword [esp + 0x34], edi
xor ecx, ecx
mov eax, dword [esp + 0x38]
mov esi, dword [esp + 0x6c]
mov dl, byte [esp + 0xf]
mov byte [esp + eax + 0x298], dl
movzx eax, byte [esp + esi + 0x298]
add eax, dword [esp + 0x30]
mov edx, dword [esp + 0x40]
movzx eax, al
mov al, byte [esp + eax + 0x298]
xor al, byte [esp + edx + 0x44]
mov byte [esp + edx + 0x138], al
inc edx
mov dword [esp + 0x40], edx
cmp edx, 0x1d
jb 0x10013860
push 0x6c
pop edx
mov byte [esp + 0x155], cl
mov eax, ecx
mov dword [esp + 0x8c], 0x343
mov dword [esp + 0x90], edx
mov dword [esp + 0x94], edx
mov dword [esp + 0x98], 0x2071
mov dword [esp + 0x9c], 0x1123
mov dword [esp + 0xa0], 0x173e
mov dword [esp + 0xa4], 0xa96
mov dword [esp + 0xa8], 0x2697
mov dword [esp + 0xac], 0x222a
mov dword [esp + 0xb0], 0x228
mov dword [esp + 0xb4], 0x165
mov dword [esp + 0xb8], 0x25e8
mov dword [esp + 0xbc], edx
cmp eax, 0xc
je 0x100139f7
inc eax
cmp eax, 0xd
jl 0x100139ec
mov eax, dword [esp + eax*4 + 0x8c]
xor eax, edx
mov dword [esp + 0x70], 0x55d
push 0x4b
pop edx
mov dword [esp + 0x6c], eax
mov eax, ecx
mov dword [esp + 0x74], edx
mov dword [esp + 0x78], edx
mov dword [esp + 0x7c], edx
mov dword [esp + 0x80], 0xfc5
mov dword [esp + 0x84], 0x25e9
cmp eax, 2
je 0x10013a3e
inc eax
cmp eax, 6
jl 0x10013a33
mov eax, dword [esp + eax*4 + 0x70]
xor eax, 0x43
mov dword [esp + 0x44], 0xbd4
push 9
mov dword [esp + 0x19c], eax
mov eax, ecx
mov dword [esp + 0x4c], ecx
mov dword [esp + 0x50], 0x1e32
mov dword [esp + 0x54], ecx
mov dword [esp + 0x58], ecx
mov dword [esp + 0x5c], 0x1ff5
mov dword [esp + 0x60], 0x24f1
mov dword [esp + 0x64], ecx
mov dword [esp + 0x68], ecx
pop edx
cmp eax, 7
je 0x10013a8f
inc eax
cmp eax, edx
jl 0x10013a85
cmp byte [str.asw_browser_notification_message], 0
mov edi, ecx
mov eax, dword [esp + eax*4 + 0x44]
mov dword [esp + 0xf8], eax
je 0x10013b0b
mov eax, dword [esp + 0x28]
add eax, 0x8d6b7c90
mov dword [0x1003c0b0], eax
inc edi
cmp byte [edi + str.asw_browser_notification_message], 0
jne 0x10013ab3
mov esi, dword [esp + 0x120]
cmp esi, edi
jae 0x10013b0b
imul eax, dword [esp + 0x2c], 0x5b60bc1d
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 0x28]
call fcn.100109ee
cmp esi, 0x1ab4
jne 0x10013af7
mov eax, dword [esp + 0x28]
add eax, 0x4140cdc7
mov dword [esp + 0x24], eax
call fcn.1001005b
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x28], eax
call fcn.1001005b
inc esi
cmp esi, edi
jb 0x10013ad4
xor ecx, ecx
push 0x5c
pop edx
push 9
mov eax, ecx
mov dword [esp + 0x48], edx
mov dword [esp + 0x4c], 0x903
mov dword [esp + 0x50], 0x1753
mov dword [esp + 0x54], edx
mov dword [esp + 0x58], 0x51c
mov dword [esp + 0x5c], 0x7d6
mov dword [esp + 0x60], 0x22be
mov dword [esp + 0x64], edx
mov dword [esp + 0x68], edx
pop esi
cmp eax, 8
je 0x10013b55
inc eax
cmp eax, esi
jl 0x10013b4b
mov eax, dword [esp + eax*4 + 0x44]
xor eax, edx
mov dword [esp + 0x48], 0x6b6
push 4
mov dword [esp + 0x1bc], eax
pop eax
mov dword [esp + 0x44], eax
mov dword [esp + 0x4c], 0x362
mov dword [esp + 0x50], 0x1dea
mov dword [esp + 0x54], 0x22cf
mov dword [esp + 0x58], 0xa45
mov dword [esp + 0x5c], eax
test ecx, ecx
je 0x10013b9f
inc ecx
cmp ecx, 7
jl 0x10013b95
mov eax, dword [esp + ecx*4 + 0x44]
mov esi, dword [esp + 0x24]
mov ecx, esi
mov dword [esp + 0x130], eax
call fcn.100109ee
cmp byte [str.asw_browser_notification_message], 0
je 0x10013be1
mov esi, str.asw_browser_notification_message
mov ecx, str.com.avast.ipm.ClientParameters.BusinessConsoleSubcriptionType
call fcn.1000f6e3
xor dword [0x1003c0b0], 0x1348ef03
inc esi
cmp byte [esi], 0
jne 0x10013bc3
mov esi, dword [esp + 0x24]
mov edx, 0xa0
mov dword [esp + 0x8c], 0x1435
xor ecx, ecx
mov dword [esp + 0x90], edx
mov eax, ecx
mov dword [esp + 0x94], edx
mov dword [esp + 0x98], 0x68a
mov dword [esp + 0x9c], 0x49a
mov dword [esp + 0xa0], 0x1849
mov dword [esp + 0xa4], 0x1648
mov dword [esp + 0xa8], edx
mov dword [esp + 0xac], 0x1787
mov dword [esp + 0xb0], 0x232c
mov dword [esp + 0xb4], 0x1acc
mov dword [esp + 0xb8], 0xdd7
cmp eax, 7
je 0x10013c6d
inc eax
cmp eax, 0xc
jl 0x10013c62
mov eax, dword [esp + eax*4 + 0x8c]
mov edi, 0x197e
xor eax, edx
mov dword [esp + 0x8c], 0xb78
and esi, 0xb828240c
mov dword [esp + 0x1a0], eax
mov edx, 0x1000
mov dword [esp + 0x24], esi
mov dword [0x1003bff8], esi
mov eax, ecx
mov dword [esp + 0x90], 0x225e
mov dword [esp + 0x94], edi
mov dword [esp + 0x98], edx
mov dword [esp + 0x9c], 0x1fc9
mov dword [esp + 0xa0], 0x437
mov dword [esp + 0xa4], 0x1e5d
mov dword [esp + 0xa8], edx
mov dword [esp + 0xac], 0x8d5
mov dword [esp + 0xb0], 0xdd1
mov dword [esp + 0xb4], 0xc75
mov dword [esp + 0xb8], 0x1e82
cmp eax, 3
je 0x10013d1c
inc eax
cmp eax, 0xc
jl 0x10013d11
mov esi, dword [esp + 0x2c]
mov edx, 0x20bc
mov eax, dword [esp + eax*4 + 0x8c]
or esi, 0xc08e7a2e
push 0xb
mov dword [esp + 0x198], eax
mov eax, ecx
mov dword [esp + 0x164], edx
mov dword [esp + 0x168], edx
mov dword [esp + 0x16c], edx
mov dword [esp + 0x170], edx
mov dword [esp + 0x180], edx
mov dword [esp + 0x2c], esi
mov dword [0x1003c0ac], esi
mov dword [esp + 0x160], 0xcc2
mov dword [esp + 0x174], edi
mov dword [esp + 0x178], 0xd5c
mov dword [esp + 0x17c], 0x841
mov dword [esp + 0x184], 0x106
mov dword [esp + 0x188], 0xa7
pop edx
cmp eax, 2
je 0x10013db3
inc eax
cmp eax, edx
jl 0x10013da9
mov eax, dword [esp + eax*4 + 0x15c]
mov edi, ecx
xor eax, 0xbc
mov edx, ecx
mov dword [esp + 0x19c], eax
cmp byte [str.asw_browser_notification_message], cl
je 0x10013e13
mov esi, dword [esp + 0x24]
lea eax, [esi - 0x1b8e974d]
mov dword [esp + 0x28], eax
mov dword [0x1003c0ac], eax
inc edx
cmp byte [edx + str.asw_browser_notification_message], cl
jne 0x10013de5
cmp edx, 0x626
jne 0x10013e13
mov ecx, dword [esp + 0x2c]
and esi, 0x1d23a36
mov dword [esp + 0x28], esi
mov dword [0x1003c0ac], esi
call fcn.100109ee
xor ecx, ecx
jmp 0x10013e21
mov eax, dword [esp + 0x2c]
xor eax, 0xdc5857fa
mov dword [0x1003bff8], eax
mov eax, 0xc6
mov dword [esp + 0x4c], 0x20a6
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], eax
mov dword [esp + 0x50], 0x1f8e
mov dword [esp + 0x54], 0x1d06
mov dword [esp + 0x58], 0xfd2
mov dword [esp + 0x5c], eax
cmp edi, 1
je 0x10013e5d
inc edi
cmp edi, 7
jl 0x10013e52
mov eax, dword [esp + edi*4 + 0x44]
xor eax, 0x86
mov dword [esp + 0xc8], ecx
push 0xa
mov dword [esp + 0x28], eax
mov eax, ecx
mov dword [esp + 0xd0], ecx
mov dword [esp + 0xd4], ecx
mov dword [esp + 0xd8], 0x163f
mov dword [esp + 0xdc], 0x15d4
mov dword [esp + 0xe0], 0x77b
mov dword [esp + 0xe4], 0x715
mov dword [esp + 0xe8], 0x2085
mov dword [esp + 0xec], 0x1f7
mov dword [esp + 0xf0], ecx
pop edx
cmp eax, 1
je 0x10013ed7
inc eax
cmp eax, edx
jl 0x10013ecd
mov eax, dword [esp + eax*4 + 0xc8]
mov dword [esp + 0x12c], eax
mov eax, ecx
mov dword [esp + 0x70], 0x3ba
mov dword [esp + 0x74], ecx
mov dword [esp + 0x78], 0x9e1
mov dword [esp + 0x7c], ecx
mov dword [esp + 0x80], ecx
mov dword [esp + 0x84], 0x222
cmp eax, 4
je 0x10013f1c
inc eax
cmp eax, 6
jl 0x10013f11
mov eax, dword [esp + eax*4 + 0x70]
mov edx, 0xf8
mov dword [esp + 0x88], eax
mov eax, ecx
mov dword [esp + 0x70], edx
mov dword [esp + 0x74], 0x24cd
mov dword [esp + 0x78], edx
mov dword [esp + 0x7c], 0x336
mov dword [esp + 0x80], 0x1cc8
mov dword [esp + 0x84], 0xa89
test eax, eax
je 0x10013f66
inc eax
cmp eax, 6
jl 0x10013f5c
mov eax, dword [esp + eax*4 + 0x70]
lea edi, [esp + 0x70]
mov esi, str.secureBrowser
mov dword [esp + 0x38], ecx
xor eax, 0xfd
mov dword [esp + 0xfc], eax
mov eax, ecx
mov cl, byte [str.asw_browser_notification_message]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
cmp cl, byte [esp + 0x70]
jne 0x10014024
test cl, cl
je 0x10013fbf
cmp byte [esp + eax + 0x70], 0
je 0x10013fbf
call fcn.1000faa0
mov eax, dword [esp + 0x38]
inc eax
mov dword [esp + 0x38], eax
mov cl, byte [eax + str.asw_browser_notification_message]
cmp cl, byte [esp + eax + 0x70]
je 0x10013f9a
cmp dword [esp + 0x38], eax
jae 0x10014024
mov esi, dword [esp + 0x28]
mov edi, dword [esp + 0x38]
call fcn.100108a0
cmp dword [esp + 0x38], 0x23c5
jne 0x10013fec
lea eax, [esi + 0x3ac4d38c]
mov dword [0x1003bff8], eax
call fcn.100106f5
or esi, 0x56b15841
mov dword [0x1003bfb4], esi
call fcn.1000f909
mov eax, dword [esp + 0x38]
inc eax
mov dword [esp + 0x38], eax
cmp eax, edi
jae 0x10014012
mov edx, dword [0x1003c0b0]
lea edi, [esp + 0x70]
mov esi, str.sosalathai
mov dword [esp + 0x8c], 0x564
mov eax, 0xe8
mov dword [esp + 0x90], 0x248e
mov dword [esp + 0x94], eax
xor ecx, ecx
mov dword [esp + 0x9c], eax
sub edx, 0x68d27e96
movsd dword es:[edi], dword [esi]
mov dword [esp + 0xb0], eax
imul eax, dword [esp + 0x2c], 0x12faf525
mov dword [esp + 0x3c], ecx
movsd dword es:[edi], dword [esi]
mov dword [0x1003c0b0], edx
mov dword [esp + 0x98], 0x93f
mov dword [0x1003bff8], eax
mov eax, ecx
mov cl, byte [str.asw_browser_notification_message]
movsw word es:[edi], word [esi]
mov dword [esp + 0xa0], 0x1ba9
mov dword [esp + 0xa4], 0x1ea5
mov dword [esp + 0xa8], 0x24c3
movsb byte es:[edi], byte [esi]
mov dword [esp + 0xac], 0x11e4
mov dword [esp + 0xb4], 0xc6c
mov dword [esp + 0xb8], 0x28a
mov dword [esp + 0x38], eax
cmp cl, byte [esp + 0x70]
jne 0x10014111
test cl, cl
je 0x1001410b
cmp byte [esp + eax + 0x70], 0
je 0x1001410b
call fcn.100106f5
mov eax, dword [esp + 0x38]
inc eax
mov dword [esp + 0x38], eax
mov cl, byte [eax + str.asw_browser_notification_message]
cmp cl, byte [esp + eax + 0x70]
je 0x100140e6
mov edx, dword [0x1003c0b0]
call fcn.1000fb5e
mov ecx, dword [esp + 0x38]
movzx eax, byte [esp + ecx + 0x70]
movzx ecx, byte [ecx + str.asw_browser_notification_message]
sub ecx, eax
cmp ecx, 0x21f0
jne 0x10014140
mov esi, dword [esp + 0x28]
lea eax, [esi - 0x3f00de6c]
mov dword [esp + 0x2c], eax
jmp 0x10014156
mov esi, dword [0x1003c0b0]
or esi, 0xce9cc29f
mov dword [esp + 0x28], esi
mov dword [0x1003c0ac], esi
mov eax, dword [esp + 0x3c]
push 9
pop ecx
cmp eax, ecx
je 0x10014167
inc eax
cmp eax, 0xc
jl 0x1001415d
mov eax, dword [esp + eax*4 + 0x8c]
xor eax, 0xe8
mov dword [esp + 0x8c], 0x1506
mov dword [esp + 0x34], eax
xor eax, eax
mov ecx, eax
mov dword [esp + 0x90], eax
mov dword [esp + 0x94], 0x13b4
mov dword [esp + 0x98], eax
mov dword [esp + 0x9c], eax
mov dword [esp + 0xa0], 0x1784
mov dword [esp + 0xa4], eax
mov dword [esp + 0xa8], 0x21ba
mov dword [esp + 0xac], 0xbf7
mov dword [esp + 0xb0], 0xdc8
mov dword [esp + 0xb4], eax
mov dword [esp + 0xb8], 0xb37
mov dword [esp + 0xbc], 0x1b35
mov dword [esp + 0xc0], 0x1b0b
cmp ecx, 6
je 0x1001420c