Function at 0x1000b5c9
Capabilities:
Authenticate hmac
Encode data using xor
Encrypt data using rc4 ksa

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x3c8
mov dword [ebp - 0x244], edx
xor edx, edx
mov dword [ebp - 0x38], ecx
mov eax, edx
mov ecx, edx
mov dword [ebp - 0x28c], 0x54
mov dword [ebp - 0x288], 0x47
mov dword [ebp - 0x284], 0x28
mov dword [ebp - 0x280], 0x57
mov dword [ebp - 0x27c], 0xfffffee6
sub ecx, dword [ebp + eax*4 - 0x28c]
inc eax
cmp eax, 5
jl 0x1000b613
mov eax, dword [0x100267b8]
add eax, 0xebd3228d
mov dword [ebp - 0x398], ecx
and eax, 0x4358d89f
mov dword [ebp - 0x26c], 0x16
mov dword [ebp - 0x170], eax
push 0x27
pop eax
mov dword [ebp - 0x30], eax
mov ecx, eax
mov dword [ebp - 0x268], 0x145
mov eax, edx
add ecx, dword [ebp + eax*4 - 0x26c]
inc eax
cmp eax, 2
jl 0x1000b659
push esi
push edi
mov dword [ebp - 0x38c], ecx
lea edi, [ebp - 0x28c]
push 5
pop ecx
mov esi, str.CAMELLIA_256_CBC_CTS
mov word [ebp - 0x10], 0x1a6
rep movsd dword es:[edi], dword [esi]
mov byte [ebp - 0xe], 0xa6
mov eax, edx
movsb byte es:[edi], byte [esi]
mov edi, edx
mov byte [ebp + eax - 0x15c], al
inc eax
cmp eax, 0x100
jb 0x1000b68d
mov esi, edx
mov dword [ebp - 0x174], 0x14
xor edx, edx
mov cl, byte [ebp + esi - 0x15c]
mov eax, esi
mov byte [ebp - 1], cl
div dword [ebp - 0x174]
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x28c]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [ebp + edi - 0x15c]
mov byte [ebp + esi - 0x15c], al
inc esi
mov al, byte [ebp - 1]
mov byte [ebp + edi - 0x15c], al
cmp esi, 0x100
jb 0x1000b6a8
xor eax, eax
mov dword [ebp - 0x44], eax
mov edi, eax
mov esi, eax
mov eax, dword [ebp - 0x170]
or eax, 0x90da5c84
mov dword [0x100267cc], eax
imul eax, eax, 0x60fb8a8d
mov ecx, str.business.dat
mov dword [0x100267b8], eax
call fcn.1000a577
lea eax, [edi + 1]
movzx edi, al
mov eax, dword [ebp - 0x44]
mov cl, byte [ebp + edi - 0x15c]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [ebp - 0x44], eax
mov al, byte [ebp + eax - 0x15c]
mov byte [ebp + edi - 0x15c], al
mov eax, dword [ebp - 0x44]
mov byte [ebp + eax - 0x15c], cl
movzx eax, byte [ebp + edi - 0x15c]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x15c]
xor al, byte [ebp + esi - 0x10]
mov byte [ebp + esi - 0x23c], al
inc esi
cmp esi, 3
jae 0x1000b77c
mov eax, dword [0x100267b8]
jmp 0x1000b6fe
mov esi, str.C:WindowsTemp
mov byte [ebp - 0x14], 0x5c
lea edi, [ebp - 0x1d4]
mov byte [ebp - 0x11], 0xf3
xor eax, eax
mov edx, 0x15f8
push 0x41
movsd dword es:[edi], dword [esi]
mov byte [ebp - 0x239], al
pop eax
push 0xf
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x3c], eax
mov byte [ebp - 0x13], al
pop eax
movsd dword es:[edi], dword [esi]
push 0x64
mov dword [ebp - 0x4c], eax
mov byte [ebp - 0x12], al
mov eax, str.div.heading_
movsd dword es:[edi], dword [esi]
pop ecx
movsw word es:[edi], word [esi]
add edx, ecx
lea eax, [eax + 2]
cmp edx, 0x35d
ja 0x1000b7d7
movzx ecx, word [eax]
test ecx, ecx
jne 0x1000b7bc
mov eax, dword [0x100267cc]
jmp 0x1000b7f1
mov edx, dword [0x100267cc]
mov ecx, str.AVAST_AV_ONE_FREE_URL
call fcn.1000ad45
mov eax, dword [0x100267cc]
and eax, 0x75ab4e1
imul edi, eax, 0x51f7d76d
mov esi, edi
mov dword [0x100267cc], edi
xor esi, 0xf3e74ccb
xor ecx, ecx
mov dword [ebp - 0x44], ecx
mov eax, ecx
mov byte [ebp + eax - 0x15c], al
inc eax
cmp eax, 0x100
jb 0x1000b80c
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x18], 0x11
mov dword [ebp - 0x5c], 9
mov al, byte [ebp + ecx - 0x15c]
xor edx, edx
mov byte [ebp - 1], al
mov eax, ecx
push 0x11
pop ecx
div ecx
movzx ecx, byte [ebp - 1]
push 0x52
movzx eax, byte [ebp + edx - 0x1d4]
add eax, dword [ebp - 0x44]
add ecx, eax
movzx eax, cl
mov ecx, str.Registration_Info_Fallback
mov dword [ebp - 0x44], eax
pop edx
lea eax, [edx - 0x30]
push 9
pop edx
cmp ax, dx
ja 0x1000b878
add ecx, 2
movzx eax, word [ecx]
mov edx, eax
test ax, ax
jne 0x1000b85e
jmp 0x1000b884
lea edi, [esi - 0x2c2ca086]
mov dword [0x100267cc], edi
or esi, 0x52825685
mov edx, edi
mov ecx, str.business.dat
mov dword [0x100267b8], esi
call fcn.1000a674
mov edx, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x2c]
mov esi, dword [0x100267b8]
mov al, byte [ebp + edx - 0x15c]
mov byte [ebp + ecx - 0x15c], al
inc ecx
mov al, byte [ebp - 1]
mov byte [ebp + edx - 0x15c], al
mov dword [ebp - 0x2c], ecx
cmp ecx, 0x100
jae 0x1000b8d7
mov edi, dword [0x100267cc]
jmp 0x1000b82c
xor ecx, ecx
mov dword [ebp - 0x44], ecx
mov eax, ecx
mov edi, ecx
inc eax
and esi, 0x6bb05e07
movzx eax, al
mov dword [ebp - 0x24], eax
mov cl, byte [ebp + eax - 0x15c]
mov eax, dword [ebp - 0x44]
movzx edx, cl
add eax, edx
mov dword [ebp - 0x34], edx
mov edx, dword [ebp - 0x24]
movzx eax, al
mov dword [ebp - 0x44], eax
mov al, byte [ebp + eax - 0x15c]
mov byte [ebp + edx - 0x15c], al
mov eax, dword [ebp - 0x44]
mov byte [ebp + eax - 0x15c], cl
mov eax, edx
movzx eax, byte [ebp + eax - 0x15c]
add eax, dword [ebp - 0x34]
movzx eax, al
mov cl, byte [ebp + eax - 0x15c]
mov al, byte [ebp + edi - 0x14]
xor al, cl
imul esi, esi, 0x44b7ffe5
mov byte [ebp + edi - 0x360], al
inc edi
mov eax, edx
cmp edi, 4
jb 0x1000b8e0
xor eax, eax
mov dword [0x100267b8], esi
mov byte [ebp - 0x35c], al
mov edx, 0x1a7a
lea eax, [esi + 0x7248b8b8]
mov dword [ebp - 0x1d4], 0x55
push 0x62
mov dword [0x100267cc], eax
mov eax, str.business.dat
mov dword [ebp - 0x1d0], 0x40
mov dword [ebp - 0x1cc], 0x5d
mov dword [ebp - 0x1c8], 0x7cc
pop ecx
add edx, ecx
lea eax, [eax + 2]
cmp edx, 0x266c
ja 0x1000b9b6
movzx ecx, word [eax]
test ecx, ecx
jne 0x1000b9a0
jmp 0x1000b9c1
call fcn.1000a87e
mov esi, dword [0x100267b8]
imul eax, esi, 0xf0b9cf34
mov dword [0x100267cc], eax
xor esi, 0xf1684c1d
xor ecx, ecx
mov dword [0x100267b8], esi
mov esi, ecx
inc esi
cmp esi, 0x6be
jg 0x1000b9ef
cmp byte [esi + str.discover_wks], cl
jne 0x1000b9dc
jmp 0x1000ba10
call fcn.1000a308
or dword [0x100267b8], 0xfe41040c
cmp esi, 0x183b
jle 0x1000ba0b
call fcn.1000b512
mov eax, dword [0x100267cc]
movups xmm0, xmmword [ebp - 0x1d4]
mov word [ebp - 0x10], 0xfda5
mov esi, str.FileKey1_AppData_FileZillarecentservers.xml_search.xml
xorps xmm1, xmm1
mov byte [ebp - 0xe], 0x80
psubd xmm1, xmm0
lea edi, [ebp - 0x2b0]
movaps xmm0, xmm1
psrldq xmm0, 8
paddd xmm1, xmm0
movups xmm0, xmm1
psrldq xmm0, 4
paddd xmm1, xmm0
movd ecx, xmm1
push 0xe
add ecx, 0xa33
mov dword [ebp - 0x390], ecx
pop ecx
mov dword [ebp - 0x2c], ecx
rep movsd dword es:[edi], dword [esi]
push 0x52
mov ecx, str.Registration_Info_Fallback
pop edx
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
imul esi, eax, 0x3dbf95da
mov edi, 0x10fd
or esi, 0x4e63ecc7
and eax, 0x88e98d32
add edi, edx
lea ecx, [ecx + 2]
cmp edi, 0x21c8
ja 0x1000ba9a
movzx edx, word [ecx]
test edx, edx
jne 0x1000ba84
jmp 0x1000baa2
mov esi, eax
or esi, 0xd8c88968
xor ecx, ecx
add esi, 0xaa8db9a7
mov dword [ebp - 0x1c], esi
mov dword [0x100267cc], esi
lea eax, [esi - 0x3e068c41]
mov dword [0x100267b8], eax
mov eax, ecx
mov byte [ebp + eax - 0x15c], al
inc eax
cmp eax, 0x100
jb 0x1000bac0
mov edi, ecx
mov dword [ebp - 0x44], 0x3a
mov esi, ecx
xor edx, edx
mov cl, byte [ebp + edi - 0x15c]
mov eax, edi
mov byte [ebp - 1], cl
div dword [ebp - 0x44]
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x2b0]
add eax, esi
add ecx, eax
movzx esi, cl
mov al, byte [ebp + esi - 0x15c]
mov byte [ebp + edi - 0x15c], al
inc edi
mov al, byte [ebp - 1]
mov byte [ebp + esi - 0x15c], al
cmp edi, 0x100
jb 0x1000bada
mov esi, dword [ebp - 0x1c]
xor eax, eax
mov dword [ebp - 0x24], eax
mov ecx, eax
mov edi, eax
lea eax, [ecx + 1]
movzx edx, al
mov dword [ebp - 8], edx
mov cl, byte [ebp + edx - 0x15c]
movzx eax, cl
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x1c]
movzx eax, al
mov dword [ebp - 0x24], eax
mov al, byte [ebp + eax - 0x15c]
mov byte [ebp + edx - 0x15c], al
mov edx, 0x1ba5
mov eax, dword [ebp - 0x24]
mov byte [ebp + eax - 0x15c], cl
mov ecx, str.AVAST_AV_ONE_FREE_URL
movzx eax, byte [str.AVAST_AV_ONE_FREE_URL]
jmp 0x1000bb85
add edx, eax
inc ecx
cmp edx, 0x2572
ja 0x1000bb8b
movzx eax, byte [ecx]
test eax, eax
jne 0x1000bb77
jmp 0x1000bbb3
push dword [0x100267b8]
mov edx, str.div.heading_
mov ecx, str.discover_wks
call fcn.1000a468
mov esi, dword [0x100267cc]
add esi, 0x653f3531
pop ecx
mov dword [0x100267cc], esi
lea eax, [esi + 0x8e7b6a6]
mov edx, str.AVAST_AV_ONE_FREE_URL
or eax, 0xdc7b754a
mov dword [0x100267b8], eax
mov eax, str.discover_wks
push eax
mov ecx, eax
call fcn.1000a3b7
pop ecx
mov esi, str.div.heading_
mov edx, 0xc7b
push 0x64
mov eax, esi
pop ecx
add edx, ecx
lea eax, [eax + 2]
cmp edx, 0xd2b
ja 0x1000bc05
movzx ecx, word [eax]
test ecx, ecx
jne 0x1000bbe5
mov eax, dword [0x100267cc]
xor eax, 0x3eed0fec
jmp 0x1000bc23
mov eax, dword [0x100267b8]
and eax, 0x866022d3
mov dword [0x100267cc], eax
call fcn.1000a308
mov eax, dword [0x100267b8]
add eax, 0x585f9035
mov dword [0x100267b8], eax
mov ecx, esi
or eax, 0xa27c69cd
mov dword [0x100267cc], eax
call fcn.1000a5f4
mov ecx, dword [ebp - 8]
mov esi, dword [0x100267b8]
and esi, 0x6cf2597e
mov dword [0x100267cc], esi
movzx eax, byte [ebp + ecx - 0x15c]
add eax, dword [ebp - 0x1c]
movzx eax, al
mov al, byte [ebp + eax - 0x15c]
xor al, byte [ebp + edi - 0x10]
mov byte [ebp + edi - 0x248], al
inc edi
cmp edi, 3
jb 0x1000bb2a
push 0xc
pop eax
mov dword [ebp - 0x1c], esi
lea edi, [ebp - 0x294]
push 7
pop ecx
mov esi, str.N_AVG_SECURE_BROWSER_COOKIES
mov dword [ebp - 0x48], eax
rep movsd dword es:[edi], dword [esi]
xor edx, edx
mov byte [ebp - 0x12], al
mov byte [ebp - 0x245], dl
mov eax, edx
mov word [ebp - 0x14], 0x7676
movsb byte es:[edi], byte [esi]
mov byte [ebp - 0x11], 0xdc
mov edi, edx
mov byte [ebp + eax - 0x15c], al
inc eax
cmp eax, 0x100
jb 0x1000bcab
mov esi, edx
mov dword [ebp - 0x24], 0x1c
xor edx, edx
mov cl, byte [ebp + esi - 0x15c]
mov eax, esi
mov byte [ebp - 1], cl
div dword [ebp - 0x24]
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x294]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [ebp + edi - 0x15c]
mov byte [ebp + esi - 0x15c], al
inc esi
mov al, byte [ebp - 1]
mov byte [ebp + edi - 0x15c], al
cmp esi, 0x100
jb 0x1000bcc3
xor eax, eax
mov dword [ebp - 0xc], eax
mov edi, eax
mov esi, eax
lea eax, [edi + 1]
movzx edi, al
mov eax, dword [ebp - 0xc]
mov cl, byte [ebp + edi - 0x15c]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [ebp - 0xc], eax
mov al, byte [ebp + eax - 0x15c]
mov byte [ebp + edi - 0x15c], al
mov eax, dword [ebp - 0xc]
mov byte [ebp + eax - 0x15c], cl
movzx eax, byte [ebp + edi - 0x15c]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x15c]
xor al, byte [ebp + esi - 0x14]
mov byte [ebp + esi - 0x368], al
inc esi
cmp esi, 4
jb 0x1000bd10
mov eax, dword [ebp - 0x1c]
or eax, 0xc4659d33
mov dword [ebp - 0x54], 0x3e
xor ecx, ecx
mov dword [ebp - 0x50], 0x138
push 0x10
mov byte [ebp - 0x364], cl
pop edx
add edx, dword [ebp + ecx*4 - 0x54]
inc ecx
cmp ecx, 2
jl 0x1000bd89
mov esi, str.key_type_mismatch
mov dword [ebp - 0x394], edx
lea edi, [ebp - 0x1d4]
mov word [ebp - 0x10], 0x84c0
sub eax, 0x5bf4c225
mov byte [ebp - 0xe], 0x96
mov dword [0x100267cc], eax
xor ecx, ecx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
inc ecx
cmp ecx, 0x150e
jl 0x1000bdd4
cmp byte [ecx + str.discover_wks], 0
jne 0x1000bdc0
jmp 0x1000bdea
mov edx, eax
mov ecx, str.Registration_Info_Fallback
call fcn.1000aa04
mov eax, dword [0x100267b8]
add eax, 0x49b097d6
and eax, 0x3a03854c
mov dword [0x100267cc], eax
lea esi, [eax - 0x2e3f50e6]
mov edx, 0x4ea
push 0x52
mov dword [0x100267b8], esi
mov eax, str.Registration_Info_Fallback
pop ecx
add edx, ecx
lea eax, [eax + 2]
cmp edx, 0x2251
ja 0x1000be23
movzx ecx, word [eax]
test ecx, ecx
jne 0x1000be0d
jmp 0x1000be34
call fcn.1000a87e
mov esi, dword [0x100267cc]
add esi, 0x18b5c267
imul ecx, esi, 0x33f1fe1c
xor edx, edx
mov edi, edx
mov eax, edx
xor ecx, 0xc68f7948
mov dword [0x100267b8], ecx
mov byte [ebp + eax - 0x15c], al
inc eax
cmp eax, 0x100
jb 0x1000be4c
add ecx, 0x43fef761
mov eax, str.Registration_Info_Fallback
mov dword [0x100267cc], ecx
xor esi, esi
inc edx
lea eax, [eax + 2]
cmp edx, 0x278
jl 0x1000be81
cmp word [eax], si
jne 0x1000be6e
jmp 0x1000be97
mov ecx, str.discover_wks
call fcn.1000ac1c
mov ecx, dword [0x100267b8]
add ecx, 0x8407b267
mov eax, ecx
xor eax, 0x14b9d8fb
mov dword [0x100267b8], eax
or ecx, 0x188c9e28
mov dword [0x100267cc], ecx
call fcn.1000b22f
xor eax, eax
xor edx, edx
mov cl, byte [ebp + esi - 0x15c]
mov eax, esi
mov byte [ebp - 1], cl
div dword [ebp - 0x18]
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x1d4]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [ebp + edi - 0x15c]
mov byte [ebp + esi - 0x15c], al
inc esi
mov al, byte [ebp - 1]
mov byte [ebp + edi - 0x15c], al
cmp esi, 0x100
jb 0x1000beb6
mov ecx, dword [0x100267b8]
xor edx, edx
mov dword [ebp - 0x1c], edx
mov esi, edx
mov edi, edx
lea eax, [esi + 1]
movzx esi, al
mov eax, str.div.heading_
inc edx
lea eax, [eax + 2]
cmp edx, 0x5e6
je 0x1000bf2f
xor ecx, ecx
cmp word [eax], cx
mov ecx, dword [0x100267b8]
jne 0x1000bf14
jmp 0x1000bf3b
or ecx, 0x3d48adee
mov dword [0x100267b8], ecx
imul eax, ecx, 0xe9deb38f
mov edx, str.div.heading_
push ecx
mov ecx, str.discover_wks
mov dword [0x100267cc], eax
call fcn.1000a468
mov al, byte [ebp + esi - 0x15c]
mov edx, 0x1618
pop ecx
movzx ecx, al
mov byte [ebp - 1], al
mov eax, dword [ebp - 0x1c]
add eax, ecx
mov dword [ebp - 0x34], ecx
movzx eax, al
push 0x62
mov dword [ebp - 0x1c], eax
mov eax, str.business.dat
pop ecx
add edx, ecx
lea eax, [eax + 2]
cmp edx, 0x2176
ja 0x1000bf95
movzx ecx, word [eax]
test ecx, ecx
jne 0x1000bf7f
jmp 0x1000bfc6
mov edx, str.AVAST_AV_ONE_FREE_URL
mov ecx, str.Registration_Info_Fallback
call fcn.1000acb0
mov eax, dword [0x100267b8]
mov edx, str.div.heading_
add eax, 0x41997422
mov dword [0x100267cc], eax
mov eax, str.AVAST_AV_ONE_FREE_URL
push eax
mov ecx, eax
call fcn.1000a95d
pop ecx
mov eax, dword [0x100267b8]
add eax, 0x5df3d9c5
mov dword [0x100267cc], eax
call fcn.1000aa43
mov edx, dword [ebp - 0x1c]
mov ecx, dword [0x100267b8]
sub ecx, 0x20f59db3
push 0
mov al, byte [ebp + edx - 0x15c]
mov byte [ebp + esi - 0x15c], al
mov al, byte [ebp - 1]
mov byte [ebp + edx - 0x15c], al
movzx eax, byte [ebp + esi - 0x15c]
add eax, dword [ebp - 0x34]
movzx eax, al
mov dword [0x100267b8], ecx
pop edx
mov al, byte [ebp + eax - 0x15c]
xor al, byte [ebp + edi - 0x10]
mov byte [ebp + edi - 0x24c], al
inc edi
cmp edi, 3
jb 0x1000bf09
mov esi, str.data_too_small
mov word [ebp - 0x14], 0x858e
lea edi, [ebp - 0x190]
mov byte [ebp - 0x12], 0xc8
xor ecx, ecx
imul eax, dword [0x100267cc], 0xba99168e
push 0x1c
movsd dword es:[edi], dword [esi]
mov byte [ebp - 0x249], cl
mov dword [ebp - 0x34], eax
movsd dword es:[edi], dword [esi]
mov dword [0x100267cc], eax
pop eax
mov byte [ebp - 0x11], al
mov eax, ecx
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov edi, ecx
mov byte [ebp + eax - 0x15c], al
inc eax
cmp eax, 0x100
jb 0x1000c073
mov esi, ecx
xor edx, edx
mov cl, byte [ebp + esi - 0x15c]
mov eax, esi
mov byte [ebp - 1], cl
div dword [ebp - 0x2c]
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x190]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [ebp + edi - 0x15c]
mov byte [ebp + esi - 0x15c], al
inc esi
mov al, byte [ebp - 1]
mov byte [ebp + edi - 0x15c], al
cmp esi, 0x100
jb 0x1000c084
xor eax, eax
mov dword [ebp - 0x1c], eax
mov edi, eax
mov esi, eax
lea eax, [edi + 1]
movzx edi, al
mov eax, dword [ebp - 0x1c]
mov cl, byte [ebp + edi - 0x15c]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [ebp - 0x1c], eax
mov al, byte [ebp + eax - 0x15c]
mov byte [ebp + edi - 0x15c], al
mov eax, dword [ebp - 0x1c]
mov byte [ebp + eax - 0x15c], cl
movzx eax, byte [ebp + edi - 0x15c]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x15c]
xor al, byte [ebp + esi - 0x14]
mov byte [ebp + esi - 0x370], al
inc esi
cmp esi, 4
jb 0x1000c0d1
push 0xe
pop eax
mov dword [ebp - 0x1d0], eax
lea edi, [ebp - 0x180]
mov dword [ebp - 0x1d4], 0x5e
mov esi, str.Eee_VeBdY
mov dword [ebp - 0x1cc], 0x16
xor edx, edx
mov dword [ebp - 0x1c8], 0xd2
movups xmm1, xmmword [ebp - 0x1d4]
push 0x1b
pop ecx
movaps xmm0, xmm1
movsd dword es:[edi], dword [esi]
psrldq xmm0, 8
paddd xmm1, xmm0
mov byte [ebp - 0x36c], dl
movups xmm0, xmm1
mov byte [ebp - 0x10], 0x7d
psrldq xmm0, 4
paddd xmm1, xmm0
movsd dword es:[edi], dword [esi]
movd eax, xmm1
push 0x11
mov byte [ebp - 0xe], 0xf4
add eax, ecx
movsw word es:[edi], word [esi]
mov dword [ebp - 0x39c], eax
mov ecx, edx
pop eax
mov byte [ebp - 0xf], al
mov eax, str.business.dat
inc ecx
lea eax, [eax + 2]
cmp ecx, 0x1f6
jg 0x1000c1c5
cmp word [eax], dx
jne 0x1000c1aa
mov eax, dword [0x100267b8]
mov ecx, dword [ebp - 0x34]
jmp 0x1000c1d7
call fcn.1000a87e
mov eax, dword [0x100267b8]
mov ecx, eax
xor ecx, 0x8e3f5282
add eax, 0x1348bbff
mov dword [0x100267b8], eax
sub ecx, 0x45e04584
mov dword [0x100267cc], ecx
call fcn.1000ad99
xor ecx, ecx
mov eax, str.Registration_Info_Fallback
mov edi, ecx
inc edi
lea eax, [eax + 2]
cmp edi, 0x25ed
jl 0x1000c20e
cmp word [eax], cx
jne 0x1000c1fb
jmp 0x1000c22c
call fcn.1000a7c9
mov esi, dword [0x100267b8]
lea eax, [esi - 0x317e0e6e]
mov dword [0x100267cc], eax
cmp edi, 0x7ae
jle 0x1000c237
call fcn.1000b22f
mov esi, dword [0x100267b8]
and esi, 0x5f08d81c
xor esi, 0xc8edb0fc
xor ecx, ecx
mov dword [ebp - 0x16c], esi
mov dword [0x100267cc], esi
lea eax, [esi - 0x634222d9]
mov dword [0x100267b8], eax
mov eax, ecx
mov byte [ebp + eax - 0x15c], al
inc eax
cmp eax, 0x100
jb 0x1000c25e
mov edi, ecx
mov esi, ecx
xor edx, edx
mov cl, byte [ebp + edi - 0x15c]
mov eax, edi
mov byte [ebp - 1], cl
div dword [ebp - 0x5c]
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x180]
add eax, esi
add ecx, eax
movzx esi, cl
mov al, byte [ebp + esi - 0x15c]
mov byte [ebp + edi - 0x15c], al
inc edi
mov al, byte [ebp - 1]
mov byte [ebp + esi - 0x15c], al
cmp edi, 0x100
jb 0x1000c271
mov esi, dword [ebp - 0x16c]
xor eax, eax
inc eax
cmp eax, 0x2444
jg 0x1000c2d0
cmp byte [eax + str.discover_wks], 0
jne 0x1000c2bd
jmp 0x1000c2e1
call fcn.1000aa43
mov esi, dword [0x100267b8]
and esi, 0xdda8ed2a
mov ecx, esi
and ecx, 0xec8479e7
sub esi, 0x150af340
xor eax, eax
mov dword [0x100267cc], esi
mov edx, eax
mov dword [ebp - 0x14], eax
mov edi, eax
lea eax, [edx + 1]
mov dword [ebp - 8], str.AVAST_AV_ONE_FREE_URL
movzx edx, al
mov dword [ebp - 0xc], edx
mov al, byte [ebp + edx - 0x15c]
mov byte [ebp - 1], al
movzx eax, al
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x1c]
movzx eax, al
mov dword [ebp - 0x14], eax
mov al, byte [str.AVAST_AV_ONE_FREE_URL]
jmp 0x1000c340
sub al, 0x30
cmp al, 9
ja 0x1000c346
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
mov al, byte [eax]
test al, al
jne 0x1000c331
jmp 0x1000c354
mov esi, ecx
or esi, 0xd8c8a5f8
mov dword [0x100267cc], esi
mov eax, esi
and eax, 0x606f12d5
mov dword [0x100267b8], eax
xor eax, eax
mov ecx, eax
mov eax, str.business.dat
inc ecx
lea eax, [eax + 2]
cmp ecx, 0x2f5
jl 0x1000c381
xor edx, edx
cmp word [eax], dx
mov edx, dword [ebp - 0xc]
jne 0x1000c369
jmp 0x1000c39a
mov ecx, str.Registration_Info_Fallback
call fcn.1000a5f4
mov esi, dword [0x100267b8]
mov edx, dword [ebp - 0xc]
add esi, 0xec24553b
mov eax, dword [ebp - 0x14]
or esi, 0x306bd466
mov ecx, esi
mov dword [0x100267cc], esi
and ecx, 0xae207193
mov al, byte [ebp + eax - 0x15c]
mov byte [ebp + edx - 0x15c], al
mov eax, dword [ebp - 0x14]
mov dl, byte [ebp - 1]
mov byte [ebp + eax - 0x15c], dl
mov edx, dword [ebp - 0xc]
movzx eax, byte [ebp + edx - 0x15c]
add eax, dword [ebp - 0x1c]
movzx eax, al
mov al, byte [ebp + eax - 0x15c]
xor al, byte [ebp + edi - 0x10]
mov byte [ebp + edi - 0x250], al
inc edi
cmp edi, 3
jb 0x1000c2fe
mov esi, str.Null_machine_key
mov dword [ebp - 0xc], 0xd09bb210
lea edi, [ebp - 0x1d4]
xor eax, eax
mov byte [ebp - 0x24d], al
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
and ecx, 0xc8fcf2d3
mov dword [0x100267cc], ecx
lea eax, [ecx - 0x57724395]
mov edx, str.div.heading_
push ecx
mov dword [0x100267b8], eax
call fcn.1000b17d
mov esi, dword [0x100267cc]
pop ecx
xor esi, 0x879e5fd2
xor ecx, ecx
mov dword [0x100267cc], esi
mov eax, ecx
mov dword [ebp - 0x1c], ecx
mov byte [ebp + eax - 0x15c], al
inc eax
cmp eax, 0x100
jb 0x1000c454
mov edx, esi
mov dword [ebp - 8], ecx
xor edx, 0xf830e96a
mov edi, ecx
mov dword [0x100267b8], edx
mov cl, byte [ebp + edi - 0x15c]
mov eax, edi
and eax, 0xf
mov byte [ebp - 1], cl
movzx ecx, cl
movzx eax, byte [ebp + eax - 0x1d4]
add eax, dword [ebp - 0x1c]
add ecx, eax
movzx eax, cl
mov ecx, str.business.dat
mov dword [ebp - 0x1c], eax
xor eax, eax
inc eax
lea ecx, [ecx + 2]
cmp eax, 0xa8a
je 0x1000c4c0
xor edi, edi
cmp word [ecx], di
mov edi, dword [ebp - 8]
jne 0x1000c4a2
cmp eax, 0x2b7
jle 0x1000c4de
jmp 0x1000c4cc
lea esi, [edx + 0x418efaa8]
mov dword [0x100267cc], esi
mov edx, esi
mov ecx, str.Registration_Info_Fallback
call fcn.1000a674
mov edx, dword [0x100267b8]
mov esi, dword [ebp - 0x1c]
and edx, 0x498bc588
mov ecx, str.AVAST_AV_ONE_FREE_URL
mov al, byte [ebp + esi - 0x15c]
mov byte [ebp + edi - 0x15c], al
mov al, byte [str.AVAST_AV_ONE_FREE_URL]
jmp 0x1000c50a
sub al, 0x30
cmp al, 9
ja 0x1000c510
inc ecx
mov al, byte [ecx]
test al, al
jne 0x1000c501
jmp 0x1000c51b
lea eax, [edx - 0x7bdf0e6c]
mov dword [0x100267b8], eax
or edx, 0xa0921f80
mov dword [0x100267cc], edx
call fcn.1000aaba
mov al, byte [ebp - 1]
inc edi
mov byte [ebp + esi - 0x15c], al
mov dword [ebp - 8], edi
cmp edi, 0x100
jae 0x1000c553
mov edx, dword [0x100267b8]
mov esi, dword [0x100267cc]
jmp 0x1000c476
mov al, byte [str.AVAST_AV_ONE_FREE_URL]
mov ecx, str.AVAST_AV_ONE_FREE_URL
test al, al
je 0x1000c571
push 9
pop edx
sub al, 0x30
cmp al, dl
ja 0x1000c5e5
inc ecx
mov al, byte [ecx]
test al, al
jne 0x1000c564
mov ecx, dword [0x100267b8]
xor eax, eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x14], eax
or ecx, 0x2b5417a1
mov dword [0x100267b8], ecx
mov eax, ecx
or eax, 0x3024c425
mov dword [0x100267cc], eax
call fcn.1000b114
mov esi, dword [0x100267b8]
xor eax, eax
mov edi, dword [0x100267cc]
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x14]
mov ecx, str.Registration_Info_Fallback
inc eax
sub esi, 0x79d16791
movzx eax, al
push 0x52
mov dword [ebp - 0x14], eax
mov dword [0x100267b8], esi
pop edx
lea eax, [edx - 0x30]
push 9
pop edx
cmp ax, dx
ja 0x1000c5f3
add ecx, 2
movzx eax, word [ecx]
mov edx, eax
test ax, ax
jne 0x1000c5cb
jmp 0x1000c5ff
mov ecx, dword [0x100267cc]
add ecx, 0x6ea24ad5
jmp 0x1000c577
lea esi, [edi + 0xcad0ec2]
mov dword [0x100267b8], esi
imul eax, esi, 0xf7519ca
mov dword [0x100267cc], eax
call fcn.1000b001
mov eax, dword [ebp - 0x14]
mov esi, dword [0x100267b8]
mov edi, esi
xor edi, 0xad550c0b
mov dword [ebp - 0x34], edi
mov cl, byte [ebp + eax - 0x15c]
mov eax, dword [ebp - 0x1c]
mov edi, dword [ebp - 0x14]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [ebp - 0x1c], eax
mov al, byte [ebp + eax - 0x15c]
mov byte [ebp + edi - 0x15c], al
mov eax, dword [ebp - 0x1c]
mov byte [ebp + eax - 0x15c], cl
mov eax, edi
mov ecx, dword [ebp - 8]
mov edi, dword [ebp - 0x34]
movzx eax, byte [ebp + eax - 0x15c]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x15c]
xor al, byte [ebp + ecx - 0xc]
mov byte [ebp + ecx - 0x378], al
inc ecx
mov dword [ebp - 8], ecx
cmp ecx, 4
jb 0x1000c5ad
mov dword [ebp - 0x1d4], 0x32
xor eax, eax
mov dword [ebp - 0x1d0], 0x48
xor esi, 0x5b9a58b7
mov dword [ebp - 0x1cc], 0x37
and edi, 0xd289c014
mov dword [ebp - 0x1c8], 0x58
mov edx, 0x17e
movups xmm1, xmmword [ebp - 0x1d4]
mov byte [ebp - 0x374], al
push 7
movaps xmm0, xmm1
mov dword [ebp - 0x34], esi
psrldq xmm0, 8
mov esi, str.avast_streambacksubmit_023:__
paddd xmm1, xmm0
mov word [ebp - 0x10], 0x21b6
movups xmm0, xmm1
mov byte [ebp - 0xe], 0xf4
psrldq xmm0, 4
paddd xmm1, xmm0
movd eax, xmm1
pop ecx
push 0x52
add eax, 0x63
mov dword [ebp - 0x3a0], eax
imul eax, edi, 0xc0975d2a
lea edi, [ebp - 0x294]
rep movsd dword es:[edi], dword [esi]
mov dword [ebp - 8], eax
mov eax, str.Registration_Info_Fallback
pop ecx
movsw word es:[edi], word [esi]
add edx, ecx
lea eax, [eax + 2]
cmp edx, 0xec2
ja 0x1000c740
movzx ecx, word [eax]
test ecx, ecx
jne 0x1000c724
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 8]
jmp 0x1000c74b
mov eax, dword [ebp - 8]
mov ecx, eax
or ecx, 0x3af010ae
imul eax, eax, 0x82975c53
mov dword [0x100267cc], eax
or ecx, 0x7dc1e13d
mov dword [0x100267b8], ecx
call fcn.1000b001
xor ecx, ecx
mov edi, ecx
mov eax, ecx
mov byte [ebp + eax - 0x15c], al
inc eax
cmp eax, 0x100
jb 0x1000c76d
mov esi, ecx
xor edx, edx
mov dword [ebp - 0x34], 0x1d
mov eax, esi
mov cl, byte [ebp + esi - 0x15c]
div dword [ebp - 0x34]
mov byte [ebp - 1], cl
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x294]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [ebp + edi - 0x15c]
mov byte [ebp + esi - 0x15c], al
inc esi
mov al, byte [ebp - 1]
mov byte [ebp + edi - 0x15c], al
cmp esi, 0x100
jb 0x1000c77e
mov edx, dword [0x100267b8]
xor eax, eax
mov ecx, dword [0x100267cc]
mov edi, eax
mov dword [ebp - 0xc], eax
mov esi, eax
lea eax, [edi + 1]
mov dword [ebp - 0x1c], 0xaeb
movzx edi, al
push 0x64
mov dword [ebp - 0x34], edi
mov al, byte [ebp + edi - 0x15c]
mov byte [ebp - 1], al
movzx eax, al
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 8]
movzx eax, al
mov dword [ebp - 0xc], eax
imul eax, ecx, 0xabf10bcb
pop ecx
mov dword [0x100267cc], eax
mov eax, str.div.heading_
add dword [ebp - 0x1c], ecx
lea eax, [eax + 2]
cmp dword [ebp - 0x1c], 0x2692
ja 0x1000c835
movzx ecx, word [eax]
test ecx, ecx
jne 0x1000c81d
jmp 0x1000c854
call fcn.1000a87e
imul eax, dword [0x100267b8], 0xb3bd45f7
mov dword [0x100267b8], eax
call fcn.1000b317
mov edx, dword [0x100267b8]
mov al, byte [str.AVAST_AV_ONE_FREE_URL]
mov ecx, str.AVAST_AV_ONE_FREE_URL
jmp 0x1000c869
sub al, 0x30
cmp al, 9
ja 0x1000c86f
inc ecx
mov al, byte [ecx]
test al, al
jne 0x1000c860
jmp 0x1000c87b
add edx, 0x40e0d216
mov dword [0x100267b8], edx
mov eax, dword [ebp - 0xc]
imul ecx, edx, 0x8dda44c5
mov al, byte [ebp + eax - 0x15c]
mov byte [ebp + edi - 0x15c], al
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1c], ecx
mov cl, byte [ebp - 1]
mov byte [ebp + eax - 0x15c], cl
movzx eax, byte [ebp + edi - 0x15c]
add eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x1c]
movzx eax, al
mov al, byte [ebp + eax - 0x15c]
xor al, byte [ebp + esi - 0x10]
mov byte [ebp + esi - 0x254], al
inc esi
cmp esi, 3
jb 0x1000c7de
mov esi, str.u.inherit
mov word [ebp - 0xc], 0xea45
lea edi, [ebp - 0x180]
mov byte [ebp - 9], 0x93
xor ecx, 0x2bc30d0a
push 0xd
movsd dword es:[edi], dword [esi]
pop eax
mov dword [ebp - 0x1c], ecx
xor ecx, ecx
mov dword [ebp - 0x20], eax
movsd dword es:[edi], dword [esi]
mov byte [ebp - 0xa], al
mov eax, ecx
mov byte [ebp - 0x251], cl
mov dword [ebp - 8], ecx
movsw word es:[edi], word [esi]
mov byte [ebp + eax - 0x15c], al
inc eax
cmp eax, 0x100
jb 0x1000c907
mov esi, dword [ebp - 0x1c]
mov edi, ecx
xor edx, edx
mov cl, byte [ebp + edi - 0x15c]
mov eax, edi
mov byte [ebp - 1], cl
div dword [ebp - 0x5c]
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x180]
add eax, dword [ebp - 8]
add ecx, eax
movzx ecx, cl
mov dword [ebp - 8], ecx
imul eax, esi, 0x4058a088
mov dword [ebp - 0x34], eax
lea esi, [eax - 0x6d3b9102]
mov al, byte [ebp + ecx - 0x15c]
mov byte [ebp + edi - 0x15c], al
inc edi
mov al, byte [ebp - 1]
mov byte [ebp + ecx - 0x15c], al
cmp edi, 0x100
jb 0x1000c91b
xor ecx, ecx
xor edi, edi
mov dword [ebp - 0x1c], ecx
mov eax, ecx
mov edx, ecx
mov ecx, str.business.dat
inc edx
lea ecx, [ecx + 2]
cmp edx, 0xbc9
je 0x1000c995
cmp word [ecx], di
jne 0x1000c982
jmp 0x1000c99e
mov esi, dword [ebp - 0x34]
add esi, 0xae9cac39
and esi, 0x4921d000
add esi, 0xd4c7fde1
inc eax
xor esi, 0xf30b0467
movzx eax, al
mov dword [ebp - 0x14], eax
mov cl, byte [ebp + eax - 0x15c]
mov eax, dword [ebp - 0x1c]
movzx edx, cl
add eax, edx
mov dword [ebp - 0x34], edx
mov edx, dword [ebp - 0x14]
movzx eax, al
mov dword [ebp - 0x1c], eax
mov al, byte [ebp + eax - 0x15c]
mov byte [ebp + edx - 0x15c], al
lea eax, [esi - 0x3c658e9d]
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x1c]
mov byte [ebp + eax - 0x15c], cl
mov eax, edx
movzx eax, byte [ebp + eax - 0x15c]
add eax, dword [ebp - 0x34]
movzx eax, al
mov al, byte [ebp + eax - 0x15c]
xor al, byte [ebp + edi - 0xc]
mov byte [ebp + edi - 0x2b8], al
inc edi
mov eax, edx
cmp edi, 4
jb 0x1000c9aa
xor edx, edx
mov dword [ebp - 0x14], esi
mov byte [ebp - 0x2b4], dl
mov ecx, 0x12c0
mov dword [ebp - 0x168], 0x21
mov eax, edx
mov dword [ebp - 0x164], 0x1f
mov dword [ebp - 0x160], 0x1140
sub ecx, dword [ebp + eax*4 - 0x168]
inc eax
cmp eax, 3
jl 0x1000ca4d
mov esi, str.getTaskData
mov dword [ebp - 0x3a4], ecx
lea edi, [ebp - 0x180]
mov word [ebp - 0x10], 0x566a
push 0xd
pop eax
movsd dword es:[edi], dword [esi]
mov byte [ebp - 0xe], al
mov eax, edx
mov dword [ebp - 0x1c], edx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov byte [ebp + eax - 0x15c], al
inc eax
cmp eax, 0x100
jb 0x1000ca7f
mov esi, dword [ebp - 0x14]
mov ecx, edx
mov edi, dword [ebp - 8]
mov dword [ebp - 0xc], ecx
mov dword [ebp - 0x16c], 0xb
mov al, byte [ebp + ecx - 0x15c]
xor edx, edx
mov byte [ebp - 1], al
mov eax, ecx
push 0xb
pop ecx
div ecx
movzx ecx, byte [ebp - 1]
push 0x52
movzx eax, byte [ebp + edx - 0x180]
add eax, dword [ebp - 0x1c]
add ecx, eax
movzx eax, cl
mov ecx, str.Registration_Info_Fallback
mov dword [ebp - 0x1c], eax
pop edx
lea eax, [edx - 0x30]
push 9
pop edx
cmp ax, dx
ja 0x1000caef
add ecx, 2
movzx eax, word [ecx]
mov edx, eax
test ax, ax
jne 0x1000cad5
jmp 0x1000caf5
lea esi, [edi - 0x7725878a]
and esi, 0x5ad551a3
mov ecx, str.business.dat
push 0x62
mov dword [0x100267cc], esi
pop edx
lea eax, [edx - 0x30]
push 9
pop edx
cmp ax, dx
ja 0x1000cb23
add ecx, 2
movzx eax, word [ecx]
mov edx, eax
test ax, ax
jne 0x1000cb09
jmp 0x1000cb2e
imul eax, esi, 0x32838d50
mov dword [0x100267cc], eax
and edi, 0x4058d32
mov dword [0x100267b8], edi
call fcn.1000ad99
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0xc]
mov al, byte [ebp + edx - 0x15c]
mov byte [ebp + ecx - 0x15c], al
mov eax, dword [0x100267b8]
add eax, 0x7eedb37b
imul esi, eax, 0x95127759
mov al, byte [ebp - 1]
mov byte [ebp + edx - 0x15c], al
imul edi, esi, 0x8d62ac83
inc ecx
mov dword [0x100267cc], esi
mov dword [ebp - 0xc], ecx
cmp ecx, 0x100
jb 0x1000caa3
xor ecx, ecx
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x1c], ecx
mov eax, ecx
mov esi, ecx
inc eax
add edi, 0xb13d69f9
movzx eax, al
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], edi
mov dword [0x100267b8], edi
mov cl, byte [ebp + eax - 0x15c]
mov eax, dword [ebp - 0x1c]
mov edi, dword [ebp - 0xc]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [ebp - 0x1c], eax
mov al, byte [ebp + eax - 0x15c]
mov byte [ebp + edi - 0x15c], al
mov eax, dword [ebp - 0x1c]
mov byte [ebp + eax - 0x15c], cl
mov eax, edi
mov edi, dword [ebp - 8]
movzx eax, byte [ebp + eax - 0x15c]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x15c]
xor al, byte [ebp + esi - 0x10]
mov byte [ebp + esi - 0x25c], al
inc esi
mov eax, dword [ebp - 0xc]
cmp esi, 3
jb 0x1000cb95
mov esi, dword [ebp - 0x14]
mov edx, 0x1865
push 0x62
mov eax, str.business.dat
pop ecx
add edx, ecx
lea eax, [eax + 2]
cmp edx, 0x987
ja 0x1000cc2e
movzx ecx, word [eax]
test ecx, ecx
jne 0x1000cc18
jmp 0x1000cc3f
call fcn.1000a87e
mov esi, dword [0x100267b8]
xor esi, 0x4318a869
add esi, 0x66136115
mov dword [ebp - 0x34], esi
mov dword [0x100267b8], esi
mov eax, esi
mov dword [ebp - 0xc], 0x7d4fe88b
push 6
pop ecx
mov esi, str.cryptox509_v3_pcons.c
lea edi, [ebp - 0x290]
rep movsd dword es:[edi], dword [esi]
xor eax, 0xcc299d8
xor edx, edx
mov byte [ebp - 0x259], dl
mov dword [ebp - 8], edx
movsb byte es:[edi], byte [esi]
mov esi, dword [ebp - 0x34]
mov edi, str.discover_wks
mov dword [ebp - 0x1c], edx
mov edx, edi
mov cl, 0x64
sub cl, 0x30
cmp cl, 9
ja 0x1000cc98
inc edx
mov cl, byte [edx]
test cl, cl
jne 0x1000cc87
jmp 0x1000cca4
lea esi, [eax + 0xadc2bc9]
mov dword [0x100267b8], esi
add eax, 0x11eb058a
mov edx, edi
push str.Registration_Info_Fallback
push edi
mov ecx, esi
mov dword [0x100267cc], eax
call fcn.1000af49
mov edx, dword [ebp - 0x1c]
mov esi, dword [0x100267b8]
imul eax, esi, 0x9145b817
pop ecx
mov byte [ebp + edx - 0x15c], dl
inc edx
mov dword [ebp - 0x1c], edx
pop ecx
cmp edx, 0x100
jb 0x1000cc83
xor eax, eax
mov edi, eax
xor edx, edx
mov dword [ebp - 0x34], 0x18
mov eax, edi
mov cl, byte [ebp + edi - 0x15c]
div dword [ebp - 0x34]
mov byte [ebp - 1], cl
movzx ecx, cl
push 9
movzx eax, byte [ebp + edx - 0x290]
add eax, dword [ebp - 8]
add ecx, eax
movzx eax, cl
mov ecx, str.discover_wks
mov dword [ebp - 8], eax
mov al, 0x64
pop edx
sub al, 0x30
cmp al, dl
ja 0x1000cd2c
inc ecx
mov al, byte [ecx]
test al, al
jne 0x1000cd1d
jmp 0x1000cd38
add esi, 0x5ce0c815
mov dword [0x100267b8], esi
mov eax, str.discover_wks
and esi, 0xfcf1807c
push eax
mov edx, str.div.heading_
mov dword [0x100267cc], esi
mov ecx, eax
call fcn.1000a95d
pop ecx
mov ecx, dword [ebp - 8]
mov al, byte [ebp + ecx - 0x15c]
mov byte [ebp + edi - 0x15c], al
inc edi
mov al, byte [ebp - 1]
mov byte [ebp + ecx - 0x15c], al
cmp edi, 0x100
jae 0x1000cd86
mov esi, dword [0x100267b8]
jmp 0x1000cce5
imul eax, dword [0x100267cc], 0x199ded77
mov edx, dword [0x100267b8]
and edx, 0xeffdbdff
or edx, 0x6391b9f3
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x10], eax
xor eax, eax
mov dword [ebp - 8], eax
mov edi, eax
mov esi, eax
mov edx, dword [ebp - 0x14]
lea eax, [edi + 1]
movzx edi, al
push 0x52
mov dword [ebp - 0x1c], 0x166a
mov cl, byte [ebp + edi - 0x15c]
movzx eax, cl
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 8]
add eax, dword [ebp - 0x28]
movzx eax, al
mov dword [ebp - 8], eax
mov al, byte [ebp + eax - 0x15c]
mov byte [ebp + edi - 0x15c], al
mov eax, dword [ebp - 8]
mov byte [ebp + eax - 0x15c], cl
mov eax, str.Registration_Info_Fallback
pop ecx
add dword [ebp - 0x1c], ecx
lea eax, [eax + 2]
cmp dword [ebp - 0x1c], 0x260b
ja 0x1000ce15
movzx ecx, word [eax]
test ecx, ecx
jne 0x1000cdfa
mov eax, dword [ebp - 0x10]
jmp 0x1000ce1b
lea eax, [edx + 0x48f3962d]
lea edx, [eax + 0x4457a363]
mov dword [ebp - 0x14], edx
mov dword [0x100267b8], edx
lea eax, [edx + 0x4ea14ac2]
mov dword [ebp - 0x10], eax
movzx eax, byte [ebp + edi - 0x15c]
add eax, dword [ebp - 0x28]
movzx eax, al
mov al, byte [ebp + eax - 0x15c]
xor al, byte [ebp + esi - 0xc]
mov byte [ebp + esi - 0x2c0], al
inc esi
cmp esi, 4
jb 0x1000cdb1
push 0x33
pop ecx
push 0x32
pop eax
xor edx, edx
mov dword [ebp - 0x17c], eax
mov byte [ebp - 0x2bc], dl
mov eax, edx
mov dword [ebp - 0x178], 0x11f
add ecx, dword [ebp + eax*4 - 0x17c]
inc eax
cmp eax, 2
jl 0x1000ce7d
push 0xa
pop eax
mov dword [ebp - 0x3a8], ecx
lea edi, [ebp - 0x2a0]
mov ecx, eax
mov dword [ebp - 0x40], eax
mov esi, str.CCleanerPerformanceOptimizerService.exe
mov word [ebp - 0x10], 0x5d99
mov byte [ebp - 0xe], 0xa7
mov eax, edx
rep movsd dword es:[edi], dword [esi]
mov dword [ebp - 8], edx
mov byte [ebp + eax - 0x15c], al
inc eax
cmp eax, 0x100
jb 0x1000ceb4
mov esi, dword [ebp - 0x14]
mov edi, edx
xor edx, edx
mov cl, byte [ebp + edi - 0x15c]
mov eax, edi
mov byte [ebp - 1], cl
div dword [ebp - 0x30]
movzx ecx, cl
push 0x62
movzx eax, byte [ebp + edx - 0x2a0]
mov edx, 0x2be
add eax, dword [ebp - 8]
add ecx, eax
movzx eax, cl
mov dword [ebp - 8], eax
lea eax, [esi + 0x4b3cad8d]
mov dword [0x100267cc], eax
mov eax, str.business.dat
pop ecx
add edx, ecx
lea eax, [eax + 2]
cmp edx, 0x2570
ja 0x1000cf1d
movzx ecx, word [eax]
test ecx, ecx
jne 0x1000cf07
jmp 0x1000cf3b
mov edx, esi
mov ecx, str.business.dat
call fcn.1000aa04
mov esi, dword [0x100267cc]
or esi, 0x2ddc719b
mov dword [0x100267b8], esi
xor esi, 0xdbfd0447
mov ecx, str.business.dat
mov edx, esi
mov dword [0x100267cc], esi
call fcn.1000a674
mov ecx, dword [ebp - 8]
mov al, byte [ebp + ecx - 0x15c]
mov byte [ebp + edi - 0x15c], al
inc edi
mov al, byte [ebp - 1]
mov byte [ebp + ecx - 0x15c], al
cmp edi, 0x100
jae 0x1000cf82
mov esi, dword [0x100267b8]
jmp 0x1000cec8
xor eax, eax
mov dword [ebp - 8], eax
mov edi, eax
mov esi, eax
mov eax, dword [0x100267b8]
xor eax, 0xa364bc9c
mov dword [ebp - 0x34], eax
mov dword [0x100267cc], eax
lea eax, [edi + 1]
movzx edi, al
mov eax, dword [ebp - 8]
mov cl, byte [ebp + edi - 0x15c]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [ebp - 8], eax
mov al, byte [ebp + eax - 0x15c]
mov byte [ebp + edi - 0x15c], al
mov eax, dword [ebp - 8]
mov byte [ebp + eax - 0x15c], cl
movzx eax, byte [ebp + edi - 0x15c]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x15c]
xor al, byte [ebp + esi - 0x10]
mov byte [ebp + esi - 0x260], al
inc esi
cmp esi, 3
jb 0x1000cf9d
push 7
pop ecx
mov esi, str.ctrl_operation_not_implemented
mov dword [ebp - 0xc], 0xe17450b1
lea edi, [ebp - 0x294]
xor edx, edx
rep movsd dword es:[edi], dword [esi]
mov byte [ebp - 0x25d], dl
mov eax, edx
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov edi, edx
mov byte [ebp + eax - 0x15c], al
inc eax
cmp eax, 0x100
jb 0x1000d01b
mov esi, edx
xor edx, edx
mov dword [ebp - 0x30], 0x1e
mov eax, esi
mov cl, byte [ebp + esi - 0x15c]
div dword [ebp - 0x30]
mov byte [ebp - 1], cl
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x294]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [ebp + edi - 0x15c]
mov byte [ebp + esi - 0x15c], al
inc esi
mov al, byte [ebp - 1]
mov byte [ebp + edi - 0x15c], al
cmp esi, 0x100
jb 0x1000d02c
xor eax, eax
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x34]
mov ecx, str.discover_wks
xor eax, 0x56b7ef2f
mov dword [0x100267b8], eax
call fcn.1000ac1c
mov esi, dword [0x100267b8]
xor eax, eax
sub esi, 0x4a0ce75c
mov edi, eax
mov dword [ebp - 0x14], esi
mov esi, eax
lea eax, [esi + 1]
movzx esi, al
mov eax, dword [ebp - 8]
mov cl, byte [ebp + esi - 0x15c]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [ebp - 8], eax
mov al, byte [ebp + eax - 0x15c]
mov byte [ebp + esi - 0x15c], al
mov eax, dword [ebp - 8]
mov byte [ebp + eax - 0x15c], cl
movzx eax, byte [ebp + esi - 0x15c]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x15c]
xor al, byte [ebp + edi - 0xc]
mov byte [ebp + edi - 0x2c8], al
inc edi
cmp edi, 4
jb 0x1000d0a8
mov esi, dword [ebp - 0x14]
xor edx, edx
or esi, 0xf1040e3a
mov byte [ebp - 0x2c4], dl
push 0x4f
pop ecx
mov dword [ebp - 0x17c], 0x3b
mov eax, edx
mov dword [ebp - 0x178], 0xe7
mov dword [ebp - 0x14], esi
mov dword [0x100267b8], esi
add ecx, dword [ebp + eax*4 - 0x17c]
inc eax
cmp eax, 2
jl 0x1000d133
mov dword [ebp - 0x3ac], ecx
lea edi, [ebp - 0x290]
push 6
pop ecx
mov esi, str.SecureLineActivationAge
mov word [ebp - 0x10], 0xa375
mov byte [ebp - 0xe], 0x43
mov eax, edx
rep movsd dword es:[edi], dword [esi]
mov byte [ebp + eax - 0x15c], al
inc eax
cmp eax, 0x100
jb 0x1000d162
mov eax, edx
mov ecx, str.Registration_Info_Fallback
inc eax
lea ecx, [ecx + 2]
cmp eax, 0x1d5b
je 0x1000d194
cmp word [ecx], dx
jne 0x1000d178
cmp eax, 0x147f
mov eax, dword [ebp - 0x14]
jle 0x1000d1b4
jmp 0x1000d1af
push dword [0x100267cc]
mov edx, str.business.dat
mov ecx, str.discover_wks
call fcn.1000a468
mov eax, dword [0x100267b8]
pop ecx
add eax, 0x79fe8808
imul esi, eax, 0xa363c031
mov edx, 0x162
push 0x64
mov eax, str.div.heading_
pop ecx
mov dword [ebp - 0xc], esi
add edx, ecx
lea eax, [eax + 2]
cmp edx, 0xd16
ja 0x1000d1e0
movzx ecx, word [eax]
test ecx, ecx
jne 0x1000d1ca
jmp 0x1000d1e9
xor esi, 0xb5bb9347
mov dword [ebp - 0xc], esi
xor eax, eax
mov edi, eax
mov esi, eax
xor edx, edx
mov dword [ebp - 0x30], 0x17
mov eax, edi
mov cl, byte [ebp + edi - 0x15c]
div dword [ebp - 0x30]
mov byte [ebp - 1], cl
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x290]
add eax, esi
add ecx, eax
movzx esi, cl
mov al, byte [ebp + esi - 0x15c]
mov byte [ebp + edi - 0x15c], al
inc edi
mov al, byte [ebp - 1]
mov byte [ebp + esi - 0x15c], al
cmp edi, 0x100
jb 0x1000d1ef
mov esi, dword [ebp - 0xc]
xor eax, eax
and esi, 0x6d6953b8
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], esi
mov edi, eax
mov dword [0x100267cc], esi
mov esi, eax
lea eax, [esi + 1]
movzx esi, al
mov eax, dword [ebp - 8]
mov cl, byte [ebp + esi - 0x15c]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [ebp - 8], eax
mov al, byte [ebp + eax - 0x15c]
mov byte [ebp + esi - 0x15c], al
mov eax, dword [ebp - 8]
mov byte [ebp + eax - 0x15c], cl
movzx eax, byte [ebp + esi - 0x15c]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x15c]
xor al, byte [ebp + edi - 0x10]
mov byte [ebp + edi - 0x264], al
inc edi
cmp edi, 3
jb 0x1000d255
mov esi, dword [ebp - 0xc]
xor edx, edx
xor esi, 0x96be8909
mov byte [ebp - 0x261], dl
mov dword [ebp - 0x14], 0xa18a5102
mov ecx, edx
mov dword [0x100267b8], esi
mov eax, str.div.heading_
inc ecx
lea eax, [eax + 2]
cmp ecx, 0x1f49
je 0x1000d2e5
cmp word [eax], dx
jne 0x1000d2d2
jmp 0x1000d2f0
call fcn.1000b3e5
mov esi, dword [0x100267b8]
and esi, 0xfdff7dbb
or esi, 0x75a73dbb
mov dword [0x100267cc], esi
call fcn.1000ab51
mov esi, str.WebCameraInstalled
lea edi, [ebp - 0x194]
xor ecx, ecx
mov eax, str.business.dat
and dword [0x100267b8], 0x8302ed7c
mov dword [ebp - 8], ecx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov edi, ecx
inc edi
lea eax, [eax + 2]
cmp edi, 0x4f
jg 0x1000d38f
cmp word [eax], cx
jne 0x1000d32f
mov esi, dword [0x100267cc]
lea edx, [esi + 0x51ac12a4]
or edx, 0x58d4a17f
xor eax, eax
mov dword [0x100267b8], edx
mov byte [ebp + eax - 0x15c], al
inc eax
cmp eax, 0x100
jb 0x1000d357
push 0x52
mov edi, 0x1049
mov eax, str.Registration_Info_Fallback
pop ecx
add edi, ecx
lea eax, [eax + 2]
cmp edi, 0x18de
ja 0x1000d3ce
movzx ecx, word [eax]
test ecx, ecx
jne 0x1000d373
or esi, 0x6da8c50e
jmp 0x1000d3f8
call fcn.1000a308
mov esi, dword [0x100267cc]
lea eax, [esi - 0x2c2fb4dd]
mov dword [0x100267b8], eax
cmp edi, 0x151
jle 0x1000d343
push eax
mov edx, esi
mov ecx, str.AVAST_AV_ONE_FREE_URL
call fcn.1000b150
pop ecx
mov esi, dword [0x100267cc]
mov edx, esi
xor edx, 0xbb70956b
jmp 0x1000d349
mov ecx, str.div.heading_
call fcn.1000b0f2
xor dword [0x100267cc], 0xcd7f2317
mov ecx, str.discover_wks
call fcn.1000ac1c
mov esi, dword [0x100267b8]
add esi, 0x41b017bf
xor eax, eax
mov dword [0x100267b8], esi
mov edi, eax
mov dword [ebp - 0x34], 0x12
xor edx, edx
mov cl, byte [ebp + edi - 0x15c]
mov eax, edi
mov byte [ebp - 1], cl
div dword [ebp - 0x34]
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x194]
add eax, dword [ebp - 8]
add ecx, eax
movzx eax, cl
mov ecx, str.AVAST_AV_ONE_FREE_URL
mov dword [ebp - 8], eax
mov al, byte [str.AVAST_AV_ONE_FREE_URL]
test al, al
je 0x1000d45c
push 9
pop edx
sub al, 0x30
cmp al, dl
ja 0x1000d450
inc ecx
mov al, byte [ecx]
test al, al
jne 0x1000d441
jmp 0x1000d45c
add esi, 0x54394a4c
mov dword [0x100267b8], esi
xor esi, 0x8a10d568
mov ecx, str.Registration_Info_Fallback
mov edx, esi
mov dword [0x100267cc], esi
call fcn.1000b0f2
mov ecx, dword [ebp - 8]
mov esi, dword [0x100267cc]
or esi, 0xd27da2fd
mov al, byte [ebp + ecx - 0x15c]
mov byte [ebp + edi - 0x15c], al
inc edi
mov al, byte [ebp - 1]
mov byte [ebp + ecx - 0x15c], al
cmp edi, 0x100
jae 0x1000d4af
mov esi, dword [0x100267b8]
jmp 0x1000d409
xor ecx, ecx
mov dword [ebp - 8], ecx
mov eax, ecx
mov edi, ecx
inc eax
and esi, 0x5ecdf37a
movzx eax, al
xor esi, 0xe94234c6
mov dword [ebp - 0x1c], eax
mov cl, byte [ebp + eax - 0x15c]
mov eax, dword [ebp - 8]
movzx edx, cl
add eax, edx
mov dword [ebp - 0x30], edx
mov edx, dword [ebp - 0x1c]
movzx eax, al
mov dword [ebp - 8], eax
mov al, byte [ebp + eax - 0x15c]
mov byte [ebp + edx - 0x15c], al
mov eax, dword [ebp - 8]
mov byte [ebp + eax - 0x15c], cl
mov eax, edx
movzx eax, byte [ebp + eax - 0x15c]
add eax, dword [ebp - 0x30]
movzx eax, al
mov al, byte [ebp + eax - 0x15c]
xor al, byte [ebp + edi - 0x14]
mov byte [ebp + edi - 0x2d0], al
inc edi
mov eax, edx
cmp edi, 4
jb 0x1000d4b8
xor eax, eax
mov dword [0x100267cc], esi
push 0x12
mov byte [ebp - 0x2cc], al
mov esi, 0xe9c
pop eax
push 0xc
mov dword [ebp - 0x28c], eax
mov edx, 0x89d
pop eax
push 0x64
mov dword [ebp - 0x284], eax
mov eax, str.div.heading_
mov dword [ebp - 0x288], 0x5a
mov dword [ebp - 0x280], 0x1a
mov dword [ebp - 0x27c], 0xc94
pop ecx
add edx, ecx
lea eax, [eax + 2]
cmp edx, 0x1495
ja 0x1000d58e
movzx ecx, word [eax]
test ecx, ecx
jne 0x1000d578
jmp 0x1000d5a7
call fcn.1000b001
or dword [0x100267cc], 0x1596c0e2
mov ecx, str.discover_wks
call fcn.1000ac1c
mov ecx, dword [0x100267b8]
mov eax, ecx
xor eax, 0xf8a682f3
mov dword [0x100267cc], eax
xor ecx, 0x6dc3d9ba
mov dword [0x100267b8], ecx
mov ecx, str.discover_wks
call fcn.1000ac1c
xor edx, edx
mov eax, edx
sub esi, dword [ebp + eax*4 - 0x28c]
inc eax
cmp eax, 5
jl 0x1000d5d3
mov dword [ebp - 0x3b0], esi
lea edi, [ebp - 0x1c0]
push 0xf
pop eax
mov ecx, eax
mov word [ebp - 0x10], 0x6984
mov esi, str.C_type_code_converts_to_multiple_certificates_in_license_file.
mov al, byte [str.AVAST_AV_ONE_FREE_URL]
rep movsd dword es:[edi], dword [esi]
mov byte [ebp - 0xe], 0x39
mov ecx, str.AVAST_AV_ONE_FREE_URL
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
jmp 0x1000d61e
sub al, 0x30
cmp al, 9
ja 0x1000d84c
inc ecx
mov al, byte [ecx]
test al, al
jne 0x1000d611
mov eax, dword [0x100267b8]
mov dword [ebp - 0xc], eax
or eax, 0xfc1b7e24
mov edi, edx
mov dword [ebp - 0x28], eax
mov dword [0x100267cc], eax
mov eax, edx
mov byte [ebp + eax - 0x15c], al
inc eax
cmp eax, 0x100
jb 0x1000d63b
mov esi, edx
xor edx, edx
mov cl, byte [ebp + esi - 0x15c]
mov eax, esi
mov byte [ebp - 1], cl
div dword [ebp - 0x54]
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x1c0]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [ebp + edi - 0x15c]
mov byte [ebp + esi - 0x15c], al
inc esi
mov al, byte [ebp - 1]
mov byte [ebp + edi - 0x15c], al
cmp esi, 0x100
jb 0x1000d64c
xor eax, eax
mov dword [ebp - 8], eax
mov edi, eax
mov esi, eax
lea eax, [edi + 1]
movzx edi, al
mov eax, dword [ebp - 8]
mov cl, byte [ebp + edi - 0x15c]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [ebp - 8], eax
mov al, byte [ebp + eax - 0x15c]
mov byte [ebp + edi - 0x15c], al
mov eax, dword [ebp - 8]
mov byte [ebp + eax - 0x15c], cl
movzx eax, byte [ebp + edi - 0x15c]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x15c]
xor al, byte [ebp + esi - 0x10]
mov byte [ebp + esi - 0x270], al
inc esi
cmp esi, 3
jb 0x1000d699
push 8
xor edx, edx
mov dword [ebp - 0x14], 0x62d0ca56
pop ecx
mov esi, str.GetQueuedCompletionStatus_break
mov byte [ebp - 0x26d], dl
lea edi, [ebp - 0x1a4]
mov eax, edx
rep movsd dword es:[edi], dword [esi]
mov edi, edx
mov byte [ebp + eax - 0x15c], al
inc eax
cmp eax, 0x100
jb 0x1000d714
mov esi, edx
xor edx, edx
mov cl, byte [ebp + esi - 0x15c]
mov eax, esi
mov byte [ebp - 1], cl
div dword [ebp - 0x164]
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x1a4]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [ebp + edi - 0x15c]
mov byte [ebp + esi - 0x15c], al
inc esi
mov al, byte [ebp - 1]
mov byte [ebp + edi - 0x15c], al
cmp esi, 0x100
jb 0x1000d725
xor eax, eax
mov dword [ebp - 8], eax
mov edi, eax
mov esi, eax
lea eax, [edi + 1]
movzx edi, al
mov eax, dword [ebp - 8]
mov cl, byte [ebp + edi - 0x15c]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [ebp - 8], eax
mov al, byte [ebp + eax - 0x15c]
mov byte [ebp + edi - 0x15c], al
mov eax, dword [ebp - 8]
mov byte [ebp + eax - 0x15c], cl
movzx eax, byte [ebp + edi - 0x15c]
mov ecx, dword [ebp - 0xc]
add eax, edx
movzx eax, al
xor ecx, 0x4cad2a3a
mov dword [ebp - 0xc], ecx
mov al, byte [ebp + eax - 0x15c]
xor al, byte [ebp + esi - 0x14]
mov byte [ebp + esi - 0x2d8], al
inc esi
cmp esi, 4
jb 0x1000d775
xor eax, eax
mov dword [ebp - 0x190], 0x24
mov byte [ebp - 0x2d4], al
mov edx, str.discover_wks
push 0x14
pop eax
mov dword [ebp - 0x194], eax
push 0x3b
pop eax
mov dword [ebp - 0x18c], eax
mov dword [ebp - 0x188], 0xc8
movups xmm1, xmmword [ebp - 0x194]
movaps xmm0, xmm1
psrldq xmm0, 8
paddd xmm1, xmm0
movups xmm0, xmm1
psrldq xmm0, 4
paddd xmm1, xmm0
movd eax, xmm1
add eax, 0x33
mov dword [ebp - 0x3b4], eax
mov al, 0x64
sub al, 0x30
cmp al, 9
ja 0x1000d85b
inc edx
mov al, byte [edx]
test al, al
jne 0x1000d83a
mov eax, dword [ebp - 0x28]
jmp 0x1000d868
mov eax, dword [0x100267cc]
add eax, 0x79992bcc
jmp 0x1000d627
mov eax, dword [ebp - 0x28]
xor eax, 0xd7e75163
mov dword [0x100267cc], eax
sub ecx, 0x203e3011
mov dword [0x100267b8], ecx
mov edx, ecx
push eax
mov ecx, str.AVAST_AV_ONE_FREE_URL
call fcn.1000b150
pop ecx
push 6
pop ecx
mov esi, str.._AVCStartUpListViewImpl__
mov word [ebp - 0x10], 0x7dcf
lea edi, [ebp - 0x19c]
mov byte [ebp - 0xe], 0xd2
rep movsd dword es:[edi], dword [esi]
xor ecx, ecx
mov dword [ebp - 8], ecx
mov eax, ecx
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, dword [0x100267b8]
imul esi, esi, 0xa7ed342c
mov byte [ebp + eax - 0x15c], al
inc eax
cmp eax, 0x100
jb 0x1000d8ac
mov dword [0x100267b8], esi
mov edi, ecx
xor edx, edx
mov cl, byte [ebp + edi - 0x15c]
mov eax, edi
mov byte [ebp - 1], cl
div dword [ebp - 0x280]
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x19c]
add eax, dword [ebp - 8]
add ecx, eax
movzx eax, cl
mov ecx, str.AVAST_AV_ONE_FREE_URL
mov dword [ebp - 8], eax
mov al, byte [str.AVAST_AV_ONE_FREE_URL]
test al, al
je 0x1000d925
push 9
pop edx
sub al, 0x30
cmp al, dl
ja 0x1000d913
inc ecx
mov al, byte [ecx]
test al, al
jne 0x1000d904
jmp 0x1000d925
mov esi, dword [0x100267cc]
or esi, 0x992f1fe7
mov dword [0x100267b8], esi
and esi, 0xc3c2103d
mov dword [0x100267cc], esi
call fcn.1000a87e
mov ecx, dword [0x100267b8]
mov eax, str.discover_wks
and ecx, 0x9d9eb597
mov edx, eax
push str.div.heading_
push eax
mov dword [0x100267cc], ecx
call fcn.1000af49
pop ecx
pop ecx
mov ecx, dword [ebp - 8]
mov al, byte [ebp + ecx - 0x15c]
mov byte [ebp + edi - 0x15c], al
inc edi
mov al, byte [ebp - 1]
mov byte [ebp + ecx - 0x15c], al
cmp edi, 0x100
jae 0x1000d98b
mov esi, dword [0x100267b8]
jmp 0x1000d8c9
mov edx, dword [0x100267b8]
xor eax, eax
mov dword [ebp - 0xc], eax
mov edi, eax
mov dword [ebp - 0x28], eax
lea ecx, [edx - 0x207b14bd]
mov esi, str.div.heading_
push 0x64
mov dword [0x100267cc], ecx
pop eax
add eax, 0xffffffd0
cmp ax, word [ebp - 0x5c]
ja 0x1000d9ce
mov edx, dword [0x100267b8]
add esi, 2
movzx eax, word [esi]
mov dword [ebp - 0x30], eax
test ax, ax
jne 0x1000d9af
jmp 0x1000d9dc
mov ecx, edx
and ecx, 0xdd9ecfc6
mov dword [0x100267cc], ecx
imul edx, ecx, 0x62e63351
mov ecx, str.AVAST_AV_ONE_FREE_URL
mov dword [0x100267b8], edx
call fcn.1000ad45
mov eax, dword [ebp - 0x28]
mov edx, 0x4d3
inc eax
movzx esi, al
push 0x62
mov dword [ebp - 0x28], esi
mov al, byte [ebp + esi - 0x15c]
movzx ecx, al
mov byte [ebp - 1], al
mov eax, dword [ebp - 0xc]
add eax, ecx
mov dword [ebp - 0x30], ecx
movzx eax, al
mov dword [ebp - 0xc], eax
mov eax, str.business.dat
pop ecx
add edx, ecx
lea eax, [eax + 2]
cmp edx, 0x981
ja 0x1000da46
movzx ecx, word [eax]
test ecx, ecx
jne 0x1000da24
mov edx, dword [0x100267b8]
add edx, 0xeb525d45
jmp 0x1000da73
mov ecx, dword [0x100267b8]
mov edx, str.Registration_Info_Fallback
push ecx
call fcn.1000b17d
xor dword [0x100267cc], 0x65d1afc8
pop ecx
call fcn.1000a4c2
mov edx, dword [0x100267cc]
add edx, 0x4d13c756
mov eax, edx
mov dword [0x100267b8], edx
xor eax, 0x6955bf6c
mov ecx, str.AVAST_AV_ONE_FREE_URL
mov dword [0x100267cc], eax
call fcn.1000ad45
push 0x62
mov edx, 0x10f2
mov eax, str.business.dat
pop ecx
add edx, ecx
lea eax, [eax + 2]
cmp edx, 0x24f9
ja 0x1000dab2
movzx ecx, word [eax]
test ecx, ecx
jne 0x1000da9c
jmp 0x1000dad0
call fcn.1000a308
mov eax, dword [0x100267cc]
mov ecx, str.div.heading_
or eax, 0x201293e9
mov dword [0x100267b8], eax
call fcn.1000a577
mov eax, dword [ebp - 0xc]
mov dl, byte [ebp - 1]
imul ecx, dword [0x100267b8], 0x59aaf94b
mov al, byte [ebp + eax - 0x15c]
mov byte [ebp + esi - 0x15c], al
mov eax, dword [ebp - 0xc]
mov byte [ebp + eax - 0x15c], dl
movzx eax, byte [ebp + esi - 0x15c]
add eax, dword [ebp - 0x30]
mov edx, dword [0x100267b8]
movzx eax, al
mov al, byte [ebp + eax - 0x15c]
xor al, byte [ebp + edi - 0x10]
mov byte [ebp + edi - 0x274], al
inc edi
cmp edi, 3
jb 0x1000d99b
xor eax, eax
mov edx, str.business.dat
push 0x62
mov byte [ebp - 0x271], al
pop esi
lea eax, [esi - 0x30]
cmp ax, word [ebp - 0x5c]
ja 0x1000db50
add edx, 2
movzx eax, word [edx]
mov esi, eax
test ax, ax
jne 0x1000db38
jmp 0x1000db56
sub ecx, 0x57759036
mov esi, str.dhKeyAgreement
mov dword [ebp - 0xc], 0xffa2beda
lea edi, [ebp - 0x190]
mov edx, str.business.dat
lea eax, [ecx - 0x6b750039]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
xor edi, edi
mov esi, edi
inc esi
lea edx, [edx + 2]
cmp esi, 0x1d0
je 0x1000db90
cmp word [edx], di
jne 0x1000db7d
jmp 0x1000db97
mov eax, ecx
xor eax, 0x2797ede3
add eax, 0x1b3e63f2
mov dword [0x100267b8], eax
sub ecx, 0x326393bd
mov dword [0x100267cc], ecx
call fcn.1000ab51
xor ecx, ecx
mov eax, ecx
mov byte [ebp + eax - 0x15c], al
inc eax
cmp eax, 0x100
jb 0x1000dbb6
mov esi, ecx
xor edx, edx
mov cl, byte [ebp + esi - 0x15c]
mov eax, esi
mov byte [ebp - 1], cl
div dword [ebp - 0x2c]
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x190]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [ebp + edi - 0x15c]
mov byte [ebp + esi - 0x15c], al
inc esi
mov al, byte [ebp - 1]
mov byte [ebp + edi - 0x15c], al
cmp esi, 0x100
jb 0x1000dbc7
xor eax, eax
mov ecx, eax
mov edi, eax
mov esi, eax
lea eax, [edi + 1]
mov edx, 0xd20
movzx edi, al
push 0x62
mov al, byte [ebp + edi - 0x15c]
mov byte [ebp - 1], al
movzx eax, al
mov dword [ebp - 8], eax
add eax, ecx
movzx eax, al
mov dword [ebp - 0x28], eax
mov eax, str.business.dat
pop ecx
add edx, ecx
lea eax, [eax + 2]
cmp edx, 0x8e4
ja 0x1000dc5a
movzx ecx, word [eax]
test ecx, ecx
jne 0x1000dc3e
call fcn.1000b22f
mov edx, dword [0x100267b8]
or edx, 0xb193bb3c
and edx, 0xea42f2b1
mov dword [0x100267b8], edx
add dword [0x100267cc], 0x50a28e66
mov ecx, str.AVAST_AV_ONE_FREE_URL
push edx
call fcn.1000b150
imul eax, dword [0x100267b8], 0x2dbf4bc4
pop ecx
push 0x52
mov ecx, str.Registration_Info_Fallback
pop edx
mov dword [ebp - 0x30], eax
lea eax, [edx - 0x30]
push 9
pop edx
cmp ax, dx
ja 0x1000dcbf