Function at 0x10002d30
Capabilities:
Encode data using xor
Encrypt data using rc4 ksa

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2bc
push 0xf
pop eax
mov dword [ebp - 0x64], eax
mov edx, eax
xor eax, eax
mov dword [ebp - 0x1c], 0x49
mov dword [ebp - 0x18], 0x22
mov ecx, eax
mov dword [ebp - 0x14], 0xffffffa3
sub edx, dword [ebp + ecx*4 - 0x1c]
inc ecx
cmp ecx, 3
jl 0x10002d5a
push esi
push edi
mov esi, str.kdf_tls1_3_derive
mov dword [ebp - 0x1b4], edx
lea edi, [ebp - 0x9c]
mov dword [ebp - 0x1c], 0xc882d951
push 0x2c
pop ecx
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x34], ecx
mov byte [ebp - 0x14], cl
push 0x11
movsd dword es:[edi], dword [esi]
pop ecx
mov dword [ebp - 0x30], ecx
mov byte [ebp - 0x12], cl
mov ecx, eax
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x18], 0xb50624e3
mov byte [ebp - 0x13], 0x49
mov byte [ebp - 0x11], 0x71
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov edi, eax
mov byte [ebp + ecx - 0x19c], cl
inc ecx
cmp ecx, 0x100
jb 0x10002da9
mov esi, eax
xor edx, edx
mov cl, byte [ebp + esi - 0x19c]
mov eax, esi
mov byte [ebp - 0x25], cl
div dword [ebp - 0x30]
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x9c]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [ebp + edi - 0x19c]
mov byte [ebp + esi - 0x19c], al
inc esi
mov al, byte [ebp - 0x25]
mov byte [ebp + edi - 0x19c], al
cmp esi, 0x100
jb 0x10002dbb
mov esi, dword [0x1002a41c]
xor eax, eax
mov dword [ebp - 0xc], eax
mov ecx, eax
mov edi, eax
mov dword [ebp - 0x74], str.LangRef3141
movzx eax, byte [str.LangRef3141]
mov dword [ebp - 0x38], eax
mov eax, dword [0x1002a400]
mov dword [ebp - 0x88], 0xc
mov dword [ebp - 8], eax
lea eax, [ecx + 1]
mov dword [ebp - 0x2c], 0x1a37
movzx eax, al
mov dword [ebp - 0x6c], eax
mov cl, byte [ebp + eax - 0x19c]
mov eax, dword [ebp - 0xc]
movzx edx, cl
add eax, edx
mov dword [ebp - 0x70], edx
mov edx, dword [ebp - 0x6c]
movzx eax, al
mov dword [ebp - 0xc], eax
mov al, byte [ebp + eax - 0x19c]
mov byte [ebp + edx - 0x19c], al
mov eax, esi
xor eax, 0xb98c8ab7
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0xc]
mov byte [ebp + eax - 0x19c], cl
mov ecx, edx
mov edx, dword [ebp - 0x38]
movzx eax, byte [ebp + ecx - 0x19c]
add eax, dword [ebp - 0x70]
movzx eax, al
mov al, byte [ebp + eax - 0x19c]
mov byte [ebp - 0x25], al
mov eax, dword [ebp - 0x74]
jmp 0x10002eb0
add dword [ebp - 0x2c], edx
inc eax
cmp dword [ebp - 0x2c], 0x1b22
ja 0x10002eb6
movzx edx, byte [eax]
test edx, edx
jne 0x10002ea0
jmp 0x10002ecb
push ecx
push ecx
mov edx, esi
call fcn.100024c3
mov esi, dword [ebp - 8]
add esp, 8
xor esi, 0xea568169
xor esi, 0x1eb484bb
mov eax, esi
or eax, 0x4cc5c4d6
mov dword [ebp - 8], eax
mov al, byte [ebp + edi - 0x1c]
xor al, byte [ebp - 0x25]
mov byte [ebp + edi - 0x278], al
inc edi
cmp edi, 0xc
jb 0x10002e31
push 0x2c
pop ecx
mov byte [ebp - 0x1c], cl
lea edi, [ebp - 0x1e4]
push 5
pop ecx
mov esi, str.FAQ_HC_Block_Disabled
mov dword [ebp - 0x1b], 0xad64e1ff
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0x24]
xor eax, eax
mov byte [ebp - 0x26c], al
mov edx, eax
mov al, byte [str.ess_signing_certid_mismatch_error]
movsw word es:[edi], word [esi]
mov esi, ecx
mov byte [ebp - 0x25], al
and esi, 0x120a8142
movzx eax, al
xor ecx, 0x7008f09a
mov dword [ebp - 0x17], 0xfde661d3
mov dword [ebp - 8], ecx
mov edi, eax
mov word [ebp - 0x13], 0xcedd
mov ecx, str.ess_signing_certid_mismatch_error
mov byte [ebp - 0x11], 0xe7
mov eax, esi
mov dword [ebp - 0xc], 0xb3a
xor eax, 0xe2f93cee
mov dword [ebp - 0x70], eax
mov eax, edi
test edi, edi
je 0x10002f89
add dword [ebp - 0xc], eax
inc ecx
cmp dword [ebp - 0xc], 0x1533
ja 0x10002f80
movzx eax, byte [ecx]
test eax, eax
jne 0x10002f6a
jmp 0x10002f89
mov esi, dword [ebp - 0x70]
and esi, 0xc21beef8
mov byte [ebp + edx - 0x19c], dl
mov ecx, str.ess_signing_certid_mismatch_error
inc edx
cmp edx, 0x100
jb 0x10002f53
mov dl, byte [ebp - 0x25]
push 0
mov dword [ebp - 0x6c], ecx
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x70], str.TraceEvent
mov dword [ebp - 0x68], 9
pop eax
jmp 0x10002fcb
sub dl, 0x30
cmp dl, 9
ja 0x10002fd1
mov edx, dword [ebp - 0x6c]
inc edx
mov dword [ebp - 0x6c], edx
mov dl, byte [edx]
test dl, dl
jne 0x10002fba
jmp 0x10003007
mov ecx, eax
mov edx, str.TraceEvent
inc ecx
lea edx, [edx + 2]
cmp ecx, 0xf51
jl 0x10002fe9
cmp word [edx], ax
jne 0x10002fd8
cmp ecx, 0x1d0e
jle 0x10002ff6
call fcn.100015c4
mov ecx, esi
or ecx, 0x79f4310f
lea edi, [esi - 0x19a9f417]
mov dword [ebp - 8], edi
add ecx, 0xbf936a31
mov dword [ebp - 0x38], ecx
call section..text
xor eax, eax
mov dword [ebp - 0x24], 0x15
mov esi, eax
mov edi, eax
xor edx, edx
mov cl, byte [ebp + esi - 0x19c]
mov eax, esi
mov byte [ebp - 1], cl
div dword [ebp - 0x24]
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x1e4]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [ebp + edi - 0x19c]
mov byte [ebp + esi - 0x19c], al
inc esi
mov al, byte [ebp - 1]
mov byte [ebp + edi - 0x19c], al
cmp esi, 0x100
jb 0x10003022
mov edi, dword [ebp - 8]
xor eax, eax
mov dword [ebp - 0xc], eax
mov ecx, eax
mov esi, eax
lea eax, [ecx + 1]
xor edi, 0x971e1ec7
movzx eax, al
mov dword [ebp - 0x24], eax
mov dword [ebp - 8], edi
mov edi, dword [ebp - 0x24]
mov cl, byte [ebp + eax - 0x19c]
mov eax, dword [ebp - 0xc]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [ebp - 0xc], eax
mov al, byte [ebp + eax - 0x19c]
mov byte [ebp + edi - 0x19c], al
mov eax, dword [ebp - 0xc]
mov byte [ebp + eax - 0x19c], cl
mov ecx, edi
mov edi, dword [ebp - 8]
movzx eax, byte [ebp + ecx - 0x19c]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x19c]
xor al, byte [ebp + esi - 0x1c]
mov byte [ebp + esi - 0x228], al
inc esi
cmp esi, 0xc
jb 0x10003072
mov dword [ebp - 0x48], 0x22
xorps xmm1, xmm1
mov dword [ebp - 0x44], 0x26
xor eax, eax
mov dword [ebp - 0x40], 5
add edi, 0x11da9595
mov dword [ebp - 0x3c], 0xffffffb3
mov esi, eax
movups xmm0, xmmword [ebp - 0x48]
push 0xa
mov byte [ebp - 0x21c], al
xorps xmm2, xmm2
psubd xmm1, xmm0
mov dword [ebp - 0xc], edi
movzx edi, byte [str.._AUclickable_factory_behavior_html__]
movaps xmm0, xmm1
psrldq xmm0, 8
mov eax, str.._AUclickable_factory_behavior_html__
paddd xmm1, xmm0
mov dword [ebp - 0x1c], 0x4d
movups xmm0, xmm1
mov dword [ebp - 0x18], 0x12
psrldq xmm0, 4
paddd xmm1, xmm0
mov dword [ebp - 0x14], 0xffffffaa
pop ecx
movd dword [ebp - 0x1bc], xmm1
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x20], eax
mov edx, 0x1a5d
mov ecx, edi
test edi, edi
je 0x10003189
add edx, ecx
inc eax
cmp edx, 0x88b
ja 0x10003184
movzx ecx, byte [eax]
test ecx, ecx
jne 0x10003170
jmp 0x10003189
call fcn.1000128b
mov eax, dword [ebp - 0x38]
xor eax, 0xf6ec07e
mov dword [ebp - 8], eax
and eax, 0x777df2d1
mov dword [ebp - 0x38], eax
call section..text
mov eax, dword [ebp - 0x6c]
sub eax, dword [ebp + esi*4 - 0x1c]
inc esi
mov dword [ebp - 0x6c], eax
mov eax, str.._AUclickable_factory_behavior_html__
cmp esi, 3
jl 0x10003165
push 0x2c
pop eax
push 7
pop ecx
mov esi, str.SpecialKey1N_TEMP_CLIPBOARD
mov byte [ebp - 0x19], al
lea edi, [ebp - 0x1e8]
mov word [ebp - 0x1c], 0x2317
rep movsd dword es:[edi], dword [esi]
xor eax, eax
mov byte [ebp - 0x1a], 0xad
mov dword [ebp - 0x18], 0x5ef9743b
mov ecx, eax
mov word [ebp - 0x14], 0xac94
movsb byte es:[edi], byte [esi]
mov byte [ebp - 0x12], 0xd9
mov edi, eax
mov byte [ebp + ecx - 0x19c], cl
inc ecx
cmp ecx, 0x100
jb 0x100031ee
mov esi, eax
mov dword [ebp - 0x24], 0x1c
xor edx, edx
mov cl, byte [ebp + esi - 0x19c]
mov eax, esi
mov byte [ebp - 1], cl
div dword [ebp - 0x24]
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x1e8]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [ebp + edi - 0x19c]
mov byte [ebp + esi - 0x19c], al
inc esi
mov al, byte [ebp - 1]
mov byte [ebp + edi - 0x19c], al
cmp esi, 0x100
jb 0x10003207
mov edi, dword [ebp - 8]
xor edx, edx
mov dword [ebp - 0x2c], edx
mov eax, edx
mov esi, edx
inc eax
movzx eax, al
mov dword [ebp - 8], eax
mov al, byte [ebp + eax - 0x19c]
movzx ecx, al
mov byte [ebp - 1], al
mov eax, dword [ebp - 0x2c]
add eax, ecx
mov dword [ebp - 0x24], ecx
movzx eax, al
mov ecx, str.TraceEvent
mov dword [ebp - 0x2c], eax
mov eax, edx
inc eax
lea ecx, [ecx + 2]
cmp eax, 0xbb3
je 0x10003324
cmp word [ecx], dx
jne 0x10003280
cmp eax, 0x1115
jle 0x100032a0
call fcn.10002440
mov eax, dword [ebp - 0xc]
mov ecx, eax
or ecx, 0x2206392b
mov eax, dword [ebp - 0x2c]
mov edi, dword [ebp - 8]
mov dl, byte [ebp - 1]
push 0
mov al, byte [ebp + eax - 0x19c]
mov byte [ebp + edi - 0x19c], al
mov eax, dword [ebp - 0x2c]
imul edi, ecx, 0xa5f90ea
mov byte [ebp + eax - 0x19c], dl
mov eax, dword [ebp - 8]
add edi, 0x8313162e
pop edx
movzx eax, byte [ebp + eax - 0x19c]
add eax, dword [ebp - 0x24]
movzx eax, al
mov al, byte [ebp + eax - 0x19c]
xor al, byte [ebp + esi - 0x1c]
mov byte [ebp + esi - 0x20c], al
inc esi
mov eax, dword [ebp - 8]
cmp esi, 0xb
jb 0x10003257
lea eax, [edi - 0x553f3993]
mov byte [ebp - 0x201], dl
mov dword [ebp - 0x24], eax
mov esi, str.ess_signing_certid_mismatch_error
mov al, byte [ebp - 0x25]
jmp 0x10003341
call fcn.10001a1a
mov eax, edi
and eax, 0xab4435f5
mov dword [ebp - 0xc], eax
jmp 0x100032a3
sub al, 0x30
cmp al, 9
ja 0x10003347
inc esi
mov al, byte [esi]
test al, al
jne 0x10003338
jmp 0x10003386
mov al, byte [0x1002a138]
mov ecx, 0x1002a138
test al, al
je 0x10003370
push 9
pop edx
sub al, 0x30
cmp al, dl
ja 0x10003367
inc ecx
mov al, byte [ecx]
test al, al
jne 0x10003358
jmp 0x10003370
lea eax, [edi - 0x14c083e1]
mov dword [ebp - 0x24], eax
push str.TraceEvent
call fcn.10001941
pop ecx
mov ecx, dword [ebp - 0x24]
xor ecx, 0x76091fad
xor edx, edx
push ecx
push ecx
sub edi, 0x1c37739a
call fcn.1000222c
pop ecx
pop ecx
mov al, byte [str.._AUclickable_factory_behavior_html__]
mov esi, edi
and esi, 0x6dff91c1
mov dword [ebp - 8], esi
test al, al
je 0x100033ca
push 9
pop ecx
sub al, 0x30
cmp al, cl
ja 0x100033c1
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
mov al, byte [eax]
test al, al
jne 0x100033ac
jmp 0x100033ca
imul esi, edi, 0xd3b2ecc4
mov dword [ebp - 8], esi
or esi, 0x977668f5
mov dword [ebp - 0x48], 0xe
mov dword [ebp - 0x20], esi
lea edi, [ebp - 0x1e8]
push 6
pop ecx
mov dword [ebp - 0x40], ecx
mov esi, 0x1001fe3c
rep movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x44], 0x46
mov dword [ebp - 0x3c], 0xffffff99
movups xmm1, xmmword [ebp - 0x48]
mov dword [ebp - 0x1c], 0xbff8353b
mov dword [ebp - 0x18], 0x1e6c177d
paddd xmm1, xmm2
mov dword [ebp - 0x14], 0x74f99e55
movaps xmm0, xmm1
movsw word es:[edi], word [esi]
psrldq xmm0, 8
paddd xmm1, xmm0
mov dword [ebp - 0x24], edx
movups xmm0, xmm1
psrldq xmm0, 4
paddd xmm1, xmm0
movd eax, xmm1
add eax, 0xe
mov dword [ebp - 0x1a4], eax
mov eax, edx
mov byte [ebp + eax - 0x19c], al
inc eax
cmp eax, 0x100
jb 0x10003444
push 0x54
mov ecx, str.TraceEvent
pop esi
lea eax, [esi - 0x30]
cmp ax, word [ebp - 0x68]
ja 0x10003473
add ecx, 2
movzx eax, word [ecx]
mov esi, eax
test ax, ax
jne 0x1000345b
jmp 0x1000347f
mov esi, dword [ebp - 0x20]
add esi, 0xcae819e6
mov dword [ebp - 8], esi
mov esi, dword [ebp - 0x24]
mov edi, edx
mov dword [ebp - 0x20], 0x19
xor edx, edx
mov cl, byte [ebp + edi - 0x19c]
mov eax, edi
mov byte [ebp - 1], cl
div dword [ebp - 0x20]
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x1e8]
add eax, esi
add ecx, eax
movzx esi, cl
mov al, byte [ebp + esi - 0x19c]
mov byte [ebp + edi - 0x19c], al
inc edi
mov al, byte [ebp - 1]
mov byte [ebp + esi - 0x19c], al
cmp edi, 0x100
jb 0x1000348b
mov esi, dword [ebp - 8]
xor edx, edx
or esi, 0x868ae29f
mov ecx, edx
add esi, 0x1e159356
mov edi, edx
mov dword [ebp - 8], esi
mov esi, ecx
lea eax, [ecx + 1]
movzx ecx, al
mov dword [ebp - 0x20], ecx
mov al, byte [ebp + ecx - 0x19c]
mov byte [ebp - 1], al
movzx eax, al
mov dword [ebp - 0x24], eax
add eax, esi
cmp byte [str.LangRef3141], 0
movzx esi, al
mov al, byte [ebp + esi - 0x19c]
mov byte [ebp + ecx - 0x19c], al
mov eax, edx
je 0x10003542
inc eax
cmp eax, 0x2079
jl 0x10003533
cmp byte [eax + str.LangRef3141], 0
jne 0x10003520
jmp 0x10003542
mov ecx, 0x1002a138
call fcn.10001ce6
mov ecx, dword [ebp - 0x20]
xor edx, edx
mov al, byte [ebp - 1]
mov byte [ebp + esi - 0x19c], al
movzx eax, byte [ebp + ecx - 0x19c]
add eax, dword [ebp - 0x24]
movzx eax, al
push 0xc
mov al, byte [ebp + eax - 0x19c]
xor al, byte [ebp + edi - 0x1c]
mov byte [ebp + edi - 0x238], al
inc edi
pop eax
cmp edi, eax
jb 0x100034e9
push 9
pop ecx
mov byte [ebp - 0x53], cl
lea edi, [ebp - 0x2bc]
mov byte [ebp - 0x50], cl
mov esi, str._tforeground_image:_image_map_progressBarLockIcon__
mov ecx, eax
xor dword [ebp - 8], 0x95a0bc95
rep movsd dword es:[edi], dword [esi]
mov byte [ebp - 0x22c], dl
mov dword [ebp - 0x60], 0x7b5e4f84
mov dword [ebp - 0x5c], 0xfc9c45d0
movsw word es:[edi], word [esi]
mov dword [ebp - 0x58], 0x6b96d708
mov byte [ebp - 0x54], 0xc3
mov word [ebp - 0x52], 0xe7dc
mov word [ebp - 0x4f], 0xc481
movsb byte es:[edi], byte [esi]
mov dword [ebp - 0x20], edx
xor dword [ebp - 8], 0x109457f2
mov ecx, str.ess_signing_certid_mismatch_error
call fcn.10001b02
xor eax, eax
mov ecx, eax
mov byte [ebp + ecx - 0x19c], cl
inc ecx
cmp ecx, 0x100
jb 0x100035dd
mov esi, dword [ebp - 0x20]
mov edi, eax
xor edx, edx
mov dword [ebp - 0x20], 0x32
mov eax, edi
mov cl, byte [ebp + edi - 0x19c]
div dword [ebp - 0x20]
mov byte [ebp - 1], cl
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x2bc]
add eax, esi
add ecx, eax
movzx esi, cl
mov al, byte [ebp + esi - 0x19c]
mov byte [ebp + edi - 0x19c], al
inc edi
mov al, byte [ebp - 1]
mov byte [ebp + esi - 0x19c], al
cmp edi, 0x100
jb 0x100035f2
xor eax, eax
mov dword [ebp - 0x38], 0x13
add dword [ebp - 8], 0xea9c2dec
mov edx, eax
mov edi, eax
mov esi, eax
lea eax, [esi + 1]
movzx esi, al
mov cl, byte [ebp + esi - 0x19c]
movzx eax, cl
mov dword [ebp - 0x20], eax
add eax, edx
movzx edx, al
mov dword [ebp - 0x24], edx
mov al, byte [ebp + edx - 0x19c]
mov byte [ebp + esi - 0x19c], al
mov byte [ebp + edx - 0x19c], cl
call fcn.10001ee4
push 0x54
mov edx, 0x1249
mov eax, str.TraceEvent
pop ecx
add edx, ecx
lea eax, [eax + 2]
cmp edx, 0x1ed9
ja 0x100036ab
movzx ecx, word [eax]
test ecx, ecx
jne 0x10003695
jmp 0x100036b5
mov edx, str.TraceEvent
call fcn.100024ee
call fcn.10002250
movzx eax, byte [ebp + esi - 0x19c]
add eax, dword [ebp - 0x20]
mov edx, dword [ebp - 0x24]
movzx eax, al
push 0x13
mov al, byte [ebp + eax - 0x19c]
xor al, byte [ebp + edi - 0x60]
mov byte [ebp + edi - 0x1e0], al
inc edi
pop eax
cmp edi, eax
jb 0x10003653
mov dword [ebp - 0x48], 0xa
movaps xmm1, xmm2
mov dword [ebp - 0x44], 0x63
xor eax, eax
mov dword [ebp - 0x40], 6
mov ecx, eax
mov dword [ebp - 0x3c], 0xffffff8d
movups xmm0, xmmword [ebp - 0x48]
push 0x14
mov byte [ebp - 0x1cd], al
psubd xmm1, xmm0
mov dword [ebp - 0x1c], 0x53
movaps xmm0, xmm1
mov dword [ebp - 0x18], 0x3e
psrldq xmm0, 8
paddd xmm1, xmm0
mov dword [ebp - 0x14], 0xffffff5c
movups xmm0, xmm1
psrldq xmm0, 4
paddd xmm1, xmm0
movd dword [ebp - 0x1c0], xmm1
pop edx
add edx, dword [ebp + ecx*4 - 0x1c]
inc ecx
cmp ecx, 3
jl 0x10003752
mov esi, 0x1001fe8c
mov dword [ebp - 0x1c4], edx
lea edi, [ebp - 0x84]
mov dword [ebp - 0x58], 0x8f7dfc63
mov dword [ebp - 0x54], 0xc5865455
mov word [ebp - 0x50], 0x6918
movsd dword es:[edi], dword [esi]
mov byte [ebp - 0x4e], 0x34
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov edi, eax
sub dword [ebp - 8], 0x427c2765
call fcn.10002019
xor eax, eax
mov ecx, eax
mov byte [ebp + ecx - 0x19c], cl
inc ecx
cmp ecx, 0x100
jb 0x1000379c
mov esi, eax
xor edx, edx
mov dword [ebp - 0x20], 0xd
mov eax, esi
mov cl, byte [ebp + esi - 0x19c]
div dword [ebp - 0x20]
mov byte [ebp - 1], cl
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x84]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [ebp + edi - 0x19c]
mov byte [ebp + esi - 0x19c], al
mov al, byte [ebp - 1]
inc esi
mov byte [ebp + edi - 0x19c], al
cmp esi, 0x100
jb 0x100037ae
xor eax, eax
cmp byte [str.._AUclickable_factory_behavior_html__], al
je 0x10003820
inc eax
cmp eax, 0x1ff9
jl 0x10003816
cmp byte [eax + str.._AUclickable_factory_behavior_html__], 0
jne 0x10003803
jmp 0x10003820
mov ecx, str.TraceEvent
call fcn.10002669
imul eax, dword [ebp - 8], 0x4d5c5ced
sub eax, 0xd0dc92a
mov dword [ebp - 0x24], eax
call fcn.10001c01
xor eax, eax
mov dword [ebp - 0xc], eax
mov edi, eax
mov esi, eax
lea eax, [edi + 1]
movzx edi, al
mov eax, dword [ebp - 0xc]
mov cl, byte [ebp + edi - 0x19c]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [ebp - 0xc], eax
mov al, byte [ebp + eax - 0x19c]
mov byte [ebp + edi - 0x19c], al
mov eax, dword [ebp - 0xc]
mov byte [ebp + eax - 0x19c], cl
movzx eax, byte [ebp + edi - 0x19c]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x19c]
xor al, byte [ebp + esi - 0x58]
mov byte [ebp + esi - 0x218], al
inc esi
cmp esi, 0xb
jb 0x1000383d
mov dword [ebp - 0x48], 0xf
lea edi, [ebp - 0x2b8]
mov dword [ebp - 0x44], 0x40
movaps xmm1, xmm2
mov dword [ebp - 0x40], 0x42
xor eax, eax
mov dword [ebp - 0x3c], 0xffffff76
mov esi, str.Windows_Services___Items_Enumeration_stopped
movups xmm0, xmmword [ebp - 0x48]
push 0xb
mov byte [ebp - 0x20d], al
psubd xmm1, xmm0
mov dword [ebp - 0x1c], 0xc2b5a402
movaps xmm0, xmm1
mov dword [ebp - 0x18], 0xb7062a45
psrldq xmm0, 8
paddd xmm1, xmm0
mov dword [ebp - 0x14], 0xea5b4923
movups xmm0, xmm1
psrldq xmm0, 4
paddd xmm1, xmm0
movd ecx, xmm1
add ecx, 8
mov dword [ebp - 0x1c8], ecx
pop ecx
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov dword [ebp - 0x20], eax
mov ecx, eax
mov byte [ebp + ecx - 0x19c], cl
inc ecx
cmp ecx, 0x100
jb 0x10003914
mov edi, dword [ebp - 0x24]
mov esi, eax
xor edx, edx
mov cl, byte [ebp + esi - 0x19c]
mov eax, esi
mov byte [ebp - 1], cl
div dword [ebp - 0x34]
movzx ecx, cl
and edi, 0x966c9225
movzx eax, byte [ebp + edx - 0x2b8]
add eax, dword [ebp - 0x20]
add ecx, eax
movzx ecx, cl
mov dword [ebp - 0x20], ecx
mov al, byte [ebp + ecx - 0x19c]
mov byte [ebp + esi - 0x19c], al
inc esi
mov al, byte [ebp - 1]
mov byte [ebp + ecx - 0x19c], al
cmp esi, 0x100
jb 0x10003929
xor eax, eax
mov ecx, eax
cmp byte [str.identifier_removed], al
je 0x10003a50
inc ecx
cmp ecx, 0x197a
je 0x10003a49
cmp byte [ecx + str.identifier_removed], al
jne 0x10003987
cmp ecx, 0x1d7b
jle 0x10003a50
mov ecx, dword [ebp - 8]
xor ecx, 0xd43b4e5b
mov dword [ebp - 0xc], eax
mov edi, eax
mov dword [ebp - 8], ecx
mov esi, eax
mov eax, ecx
or eax, 0xf7e7bc09
mov dword [ebp - 0x34], eax
lea eax, [edi + 1]
movzx edi, al
mov eax, dword [ebp - 0xc]
mov cl, byte [ebp + edi - 0x19c]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [ebp - 0xc], eax
mov al, byte [ebp + eax - 0x19c]
mov byte [ebp + edi - 0x19c], al
mov eax, dword [ebp - 0xc]
mov byte [ebp + eax - 0x19c], cl
movzx eax, byte [ebp + edi - 0x19c]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x19c]
xor al, byte [ebp + esi - 0x1c]
mov byte [ebp + esi - 0x248], al
inc esi
cmp esi, 0xc
jb 0x100039c5
xor eax, eax
cmp byte [str.ess_signing_certid_mismatch_error], al
je 0x10003a5c
inc eax
cmp eax, 0x80c
jl 0x10003a38
cmp byte [eax + str.ess_signing_certid_mismatch_error], 0
jne 0x10003a27
cmp eax, 0x44a
jle 0x10003a5c
mov eax, dword [ebp - 8]
xor eax, 0x98962520
jmp 0x10003a63
call fcn.10001a1a
xor eax, eax
imul ecx, dword [ebp - 8], 0xbd21bd98
jmp 0x100039ab
imul eax, dword [ebp - 0x34], 0xde699ae9
add eax, 0xb7f4860f
mov dword [ebp - 8], eax
call fcn.1000128b
mov edx, dword [ebp - 8]
lea edi, [ebp - 0x9c]
mov esi, str._Type_Descriptor
mov dword [ebp - 0x48], 0xc9cd74d8
xor eax, eax
mov dword [ebp - 0x44], 0x6303e2e6
mov byte [ebp - 0x23c], al
mov dword [ebp - 0x40], 0xc24f3464
movsd dword es:[edi], dword [esi]
mov word [ebp - 0x3c], 0xd789
mov byte [ebp - 0x3a], 0x28
mov dword [ebp - 0x24], eax
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x20], eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov esi, edx
mov edx, str.TraceEvent
or esi, 0x33e48411
call fcn.100024ee
mov eax, dword [ebp - 0x20]
mov edx, dword [ebp - 8]
and edx, 0xc238c2cd
mov dword [ebp - 8], edx
mov byte [ebp + eax - 0x19c], al
inc eax
mov dword [ebp - 0x20], eax
cmp eax, 0x100
jb 0x10003ab1
xor eax, eax
mov edi, eax
mov al, byte [str.ess_signing_certid_mismatch_error]
mov ecx, str.ess_signing_certid_mismatch_error
jmp 0x10003afd
sub al, 0x30
cmp al, 9
ja 0x10003b03
inc ecx
mov al, byte [ecx]
test al, al
jne 0x10003af4
jmp 0x10003b09
lea esi, [edx - 0x6fd0a7e5]
imul eax, esi, 0x6a18aa47
mov dword [ebp - 8], eax
mov dword [0x1002a400], eax
call fcn.100024cf
xor edx, edx
mov cl, byte [ebp + edi - 0x19c]
mov eax, edi
mov byte [ebp - 1], cl
div dword [ebp - 0x30]
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x9c]
add eax, dword [ebp - 0x24]
mov edx, dword [ebp - 8]
add ecx, eax
movzx ecx, cl
mov dword [ebp - 0x24], ecx
mov al, byte [ebp + ecx - 0x19c]
mov byte [ebp + edi - 0x19c], al
inc edi
mov al, byte [ebp - 1]
mov byte [ebp + ecx - 0x19c], al
cmp edi, 0x100
jb 0x10003ae8
mov eax, edx
and eax, 0x3621583d
xor edx, edx
mov dword [ebp - 0x30], eax
mov ecx, edx
mov edi, edx
mov esi, edx
lea eax, [edi + 1]
movzx edi, al
mov al, byte [ebp + edi - 0x19c]
mov byte [ebp - 1], al
movzx eax, al
mov dword [ebp - 0x20], eax
add eax, ecx
cmp byte [str.._AUclickable_factory_behavior_html__], 0
movzx eax, al
mov dword [ebp - 0x34], eax
mov eax, edx
je 0x10003bd2
inc eax
cmp eax, 0x2525
je 0x10003bbc
cmp byte [eax + str.._AUclickable_factory_behavior_html__], 0
jne 0x10003ba2
cmp eax, 0x7ec
jle 0x10003bd2
jmp 0x10003bc6
mov ecx, 0x1002a138
call fcn.10001b02
mov ecx, str.TraceEvent
call fcn.10002669
xor edx, edx
push dword [ebp - 8]
push dword [ebp - 0x30]
call fcn.100019d7
pop ecx
pop ecx
mov ecx, dword [ebp - 0x34]
mov al, byte [ebp + ecx - 0x19c]
mov byte [ebp + edi - 0x19c], al
mov al, byte [ebp - 1]
mov byte [ebp + ecx - 0x19c], al
movzx eax, byte [ebp + edi - 0x19c]
add eax, dword [ebp - 0x20]
movzx eax, al
mov al, byte [ebp + eax - 0x19c]
xor al, byte [ebp + esi - 0x48]
mov byte [ebp + esi - 0x98], al
inc esi
cmp esi, 0xf
jb 0x10003b79
push 0x46
mov byte [ebp - 0x89], dl
mov eax, edx
mov dword [ebp - 0x80], 0x63
mov dword [ebp - 0x7c], 0xffffff57
pop ecx
add ecx, dword [ebp + eax*4 - 0x80]
inc eax
cmp eax, 2
jl 0x10003c3d
push 0x13
pop eax
mov dword [ebp - 0x1a0], ecx
mov ecx, eax
mov dword [ebp - 0x80], 5
mov eax, edx
mov dword [ebp - 0x7c], 0xffffffe9
add ecx, dword [ebp + eax*4 - 0x80]
inc eax
cmp eax, 2
jl 0x10003c62
mov esi, str.SlvpnIsConnected
mov dword [ebp - 0x1b8], ecx
lea edi, [ebp - 0x4c]
mov dword [ebp - 0x1c], 0x8adc17c1
mov dword [ebp - 0x18], 0x6475c569
mov eax, edx
mov word [ebp - 0x14], 0xe2f
movsd dword es:[edi], dword [esi]
mov byte [ebp - 0x12], 0xd4
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov edi, edx
mov byte [ebp + eax - 0x19c], al
inc eax
cmp eax, 0x100
jb 0x10003c9b
mov esi, edx
mov dl, byte [ebp + esi - 0x19c]
mov eax, esi
and eax, 0xf
movzx ecx, dl
movzx eax, byte [ebp + eax - 0x4c]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [ebp + edi - 0x19c]
mov byte [ebp + esi - 0x19c], al
inc esi
mov byte [ebp + edi - 0x19c], dl
cmp esi, 0x100
jb 0x10003cac
xor eax, eax
mov dword [ebp - 0xc], eax
mov edi, eax
mov esi, eax
lea eax, [edi + 1]
movzx edi, al
mov eax, dword [ebp - 0xc]
mov cl, byte [ebp + edi - 0x19c]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [ebp - 0xc], eax
mov al, byte [ebp + eax - 0x19c]
mov byte [ebp + edi - 0x19c], al
mov eax, dword [ebp - 0xc]
mov byte [ebp + eax - 0x19c], cl
movzx eax, byte [ebp + edi - 0x19c]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x19c]
xor al, byte [ebp + esi - 0x1c]
mov byte [ebp + esi - 0x200], al
inc esi
cmp esi, 0xb
jb 0x10003cee
mov dword [ebp - 0x48], 0x4f
movaps xmm1, xmm2
mov dword [ebp - 0x44], 0x38
xor eax, eax
mov dword [ebp - 0x40], 0x10
mov dword [ebp - 0x3c], 0xffffff6f
movups xmm0, xmmword [ebp - 0x48]
mov byte [ebp - 0x1f5], al
mov dword [ebp - 0x1c], 0x305aec24
psubd xmm1, xmm0
mov dword [ebp - 0x18], 0x80d9d055
movaps xmm0, xmm1
mov dword [ebp - 0x14], 0x222ee843
psrldq xmm0, 8
paddd xmm1, xmm0
movups xmm0, xmm1
psrldq xmm0, 4
paddd xmm1, xmm0
movd ecx, xmm1
add ecx, 7
imul edx, dword [ebp - 0x30], 0x171a0646
mov dword [ebp - 0x1a8], ecx
mov esi, str.text_align:left
lea edi, [ebp - 0x48]
mov ecx, eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, eax
mov byte [ebp + ecx - 0x19c], cl
inc ecx
cmp ecx, 0x100
jb 0x10003dc6
mov esi, eax
cmp byte [str.._AUclickable_factory_behavior_html__], 0
lea ecx, [edx - 0x7cacdb21]
je 0x10003e02
inc eax
cmp eax, 0xe61
jg 0x10003dfa
cmp byte [eax + str.._AUclickable_factory_behavior_html__], 0
jne 0x10003de7
jmp 0x10003e02
mov ecx, edx
xor ecx, 0xecc14a03
lea eax, [ecx + 0x362fab29]
mov dword [ebp - 0x30], eax
and edx, 0x5059baed
mov cl, byte [ebp + esi - 0x19c]
mov dword [ebp - 0x34], edx
mov eax, esi
xor edx, edx
mov byte [ebp - 1], cl
div dword [ebp - 0x64]
movzx ecx, cl
push 0
movzx eax, byte [ebp + edx - 0x48]
mov edx, dword [ebp - 0x34]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [ebp + edi - 0x19c]
mov byte [ebp + esi - 0x19c], al
inc esi
mov al, byte [ebp - 1]
mov byte [ebp + edi - 0x19c], al
pop eax
cmp esi, 0x100
jb 0x10003dd8
mov dword [ebp - 0xc], eax
mov edi, eax
mov esi, eax
lea eax, [edi + 1]
movzx edi, al
mov eax, dword [ebp - 0xc]
mov cl, byte [ebp + edi - 0x19c]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [ebp - 0xc], eax
mov al, byte [ebp + eax - 0x19c]
mov byte [ebp + edi - 0x19c], al
mov eax, dword [ebp - 0xc]
mov byte [ebp + eax - 0x19c], cl
movzx eax, byte [ebp + edi - 0x19c]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x19c]
xor al, byte [ebp + esi - 0x1c]
mov byte [ebp + esi - 0x268], al
inc esi
cmp esi, 0xc
jb 0x10003e66
call fcn.10001f7e
xor eax, eax
mov ecx, eax
cmp byte [str.LangRef3141], al
je 0x10003ee9
inc ecx
cmp ecx, 0x568
jg 0x10003ee2
cmp byte [ecx + str.LangRef3141], al
jne 0x10003ecf
jmp 0x10003ee9
call section..text
xor eax, eax
push 5
pop ecx
mov esi, str.Phase_Create_Object
mov byte [ebp - 0x25c], al
lea edi, [ebp - 0x4c]
mov dword [ebp - 0x1c], 0xdd508c62
rep movsd dword es:[edi], dword [esi]
mov esi, dword [ebp - 0x30]
add esi, 0x5f0c2873
mov dword [ebp - 0x18], 0x2d94e11b
mov dword [ebp - 0x14], 0xd4a49e
mov dword [ebp - 0x30], eax
lea ecx, [esi + 0x5bfc9ea2]
mov dword [ebp - 8], ecx
mov ecx, eax
mov byte [ebp + ecx - 0x19c], cl
inc ecx
cmp ecx, 0x100
jb 0x10003f28
mov edi, eax
xor edx, edx
mov cl, byte [ebp + edi - 0x19c]
mov eax, edi
mov byte [ebp - 1], cl
div dword [ebp - 0x38]
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x4c]
add eax, dword [ebp - 0x30]
add ecx, eax
movzx ecx, cl
mov dword [ebp - 0x30], ecx
mov al, byte [ebp + ecx - 0x19c]
mov byte [ebp + edi - 0x19c], al
inc edi
mov al, byte [ebp - 1]
mov byte [ebp + ecx - 0x19c], al
cmp edi, 0x100
jb 0x10003f3a
xor eax, eax
xor dword [ebp - 8], 0x9c173a3f
mov dword [ebp - 0xc], eax
mov ecx, eax
mov edi, eax
lea eax, [ecx + 1]
movzx eax, al
mov dword [ebp - 0x30], eax
mov cl, byte [ebp + eax - 0x19c]
mov eax, dword [ebp - 0xc]
movzx edx, cl
add eax, edx
mov dword [ebp - 0x34], edx
mov edx, dword [ebp - 0x30]
movzx eax, al
mov dword [ebp - 0xc], eax
mov al, byte [ebp + eax - 0x19c]
mov byte [ebp + edx - 0x19c], al
mov eax, dword [ebp - 0xc]
mov byte [ebp + eax - 0x19c], cl
mov ecx, edx
movzx eax, byte [ebp + ecx - 0x19c]
add eax, dword [ebp - 0x34]
movzx eax, al
mov al, byte [ebp + eax - 0x19c]
xor al, byte [ebp + edi - 0x1c]
mov byte [ebp + edi - 0x258], al
inc edi
cmp edi, 0xc
jb 0x10003f8f
xor edx, edx
mov dword [ebp - 0x4c], 0x1b
mov eax, edx
mov byte [ebp - 0x24c], dl
mov dword [ebp - 0x48], 0x44
mov dword [ebp - 0x44], 0x5a
mov dword [ebp - 0x40], 0x29
mov dword [ebp - 0x3c], 0xffffff1e
cmp byte [0x1002a138], al
je 0x10004040
inc eax
cmp eax, 0x64e
je 0x1000403a
cmp byte [eax + 0x1002a138], dl
jne 0x10004028
jmp 0x10004040
xor esi, 0xd2f9bee6
imul eax, esi, 0xaa02f26a
push ecx
push eax
mov dword [ebp - 0x2c], eax
call fcn.1000222c
pop ecx
pop ecx
mov edi, edx
mov eax, str.TraceEvent
add eax, 2
inc edi
mov dword [ebp - 0x34], eax
cmp edi, 0xa38
je 0x1000413a
push 0x54
mov ecx, str.TraceEvent
pop edx
lea eax, [edx - 0x30]
push 9
pop edx
cmp ax, dx
ja 0x1000408e
add ecx, 2
movzx eax, word [ecx]
mov edx, eax
test ax, ax
jne 0x10004074
jmp 0x10004094
sub esi, 0xc2b8d44
imul eax, dword [ebp - 0x2c], 0x568942f4
mov dword [ebp - 0x2c], eax
call fcn.10001ee4
mov eax, dword [ebp - 0x34]
xor edx, edx
cmp word [eax], dx
jne 0x10004059
cmp edi, 0x146d
jle 0x1000413a
cmp byte [str.identifier_removed], dl
je 0x100040d3
inc edx
cmp edx, 0x1c2f
jg 0x100040fe
cmp byte [edx + str.identifier_removed], 0
jne 0x100040c1
mov esi, dword [ebp - 0x2c]
or esi, 0xfc7301ad
call fcn.10002250
xor eax, eax
cmp byte [str.identifier_removed], al
je 0x10004128
inc eax
cmp eax, 0x15d9
jl 0x10004123
cmp byte [eax + str.identifier_removed], 0
jne 0x100040eb
jmp 0x10004128
mov edi, dword [ebp - 8]
lea esi, [edi - 0x6c52e410]
cmp edx, 0x2311
jle 0x100040d6
mov edx, edi
mov ecx, str.TraceEvent
call fcn.10001569
imul esi, edi, 0x841066f3
jmp 0x100040dc
call fcn.100026e6
xor esi, 0x878007d
or esi, 0xa505ff02
add esi, 0x563c1963
imul esi, esi, 0x81137d51
call fcn.100015c4
movzx eax, byte [str.identifier_removed]
mov edx, 0x24fa
mov ecx, str.identifier_removed
jmp 0x10004166
add edx, eax
inc ecx
cmp edx, 0x9c6
ja 0x1000416c
movzx eax, byte [ecx]
test eax, eax
jne 0x10004158
jmp 0x10004172
add esi, 0x71ef9a6c
mov ecx, esi
or ecx, 0x1dcc834a
lea eax, [esi + 0x36c67a7c]
xor edx, edx
mov dword [ebp - 0x24], eax
mov edi, edx
mov eax, edx
sub edi, dword [ebp + eax*4 - 0x4c]
inc eax
cmp eax, 5
jl 0x10004189
push 0x1c
pop eax
mov dword [ebp - 0x40], eax
mov eax, edx
mov dword [ebp - 0x1ac], edi
mov dword [ebp - 0x48], 0x62
mov dword [ebp - 0x44], 0x5e
mov dword [ebp - 0x3c], 0xffffff2c
cmp byte [str.LangRef3141], al
je 0x100041e6
inc eax
cmp eax, 0x1fd5
jg 0x100041d0
cmp byte [eax + str.LangRef3141], dl
jne 0x100041be
jmp 0x100041e6
mov esi, ecx
xor esi, 0x4fc8020
cmp eax, 0x2338
jle 0x100041e6
call fcn.10001347
xor edx, edx
movups xmm0, xmmword [ebp - 0x48]
and esi, 0xaf59694a
mov byte [ebp - 0x1c], 0x7c
mov dword [ebp - 0x34], esi
lea edi, [ebp - 0x48]
movaps xmm1, xmm2
mov dword [ebp - 0x1a], 0x75c2df74
psubd xmm1, xmm0
mov dword [ebp - 0x16], 0xf1ad7d6b
movaps xmm0, xmm1
mov word [ebp - 0x12], 0x3e8d
mov esi, str._theight:116dip_
psrldq xmm0, 8
paddd xmm1, xmm0
mov dword [ebp - 0x30], edx
movups xmm0, xmm1
psrldq xmm0, 4
movsd dword es:[edi], dword [esi]
paddd xmm1, xmm0
push 9
movd eax, xmm1
pop ecx
movsd dword es:[edi], dword [esi]
add eax, ecx
cmp byte [0x1002a138], 0
push 0x15
mov dword [ebp - 0x1b0], eax
movsd dword es:[edi], dword [esi]
pop eax
mov byte [ebp - 0x1b], al
movsd dword es:[edi], dword [esi]
mov esi, edx
je 0x10004285
inc esi
cmp esi, 0x18bd
jl 0x1000426d
cmp byte [esi + 0x1002a138], 0
jne 0x10004259
jmp 0x1000427e
push dword [ebp - 0x24]
call fcn.10001dc8
pop ecx
cmp esi, 0xc82
jle 0x10004285
call fcn.1000174b
xor edx, edx
mov eax, edx
mov byte [ebp + eax - 0x19c], al
inc eax
cmp eax, 0x100
jb 0x10004287
movzx ecx, byte [str.ess_signing_certid_mismatch_error]
mov esi, edx
mov edi, dword [ebp - 0x34]
mov dword [ebp - 0x20], ecx
cmp dword [ebp - 0x20], 0
mov edx, 0x6f1
mov eax, str.ess_signing_certid_mismatch_error
je 0x100042ce
add edx, ecx
inc eax
cmp edx, 0x2075
ja 0x100042c9
movzx ecx, byte [eax]
test ecx, ecx
jne 0x100042b5
jmp 0x100042ce
call fcn.1000128b
xor edx, edx
mov cl, byte [ebp + esi - 0x19c]
mov eax, esi
mov byte [ebp - 1], cl
div dword [ebp - 0x64]
movzx ecx, cl
imul edi, edi, 0x65440661
movzx eax, byte [ebp + edx - 0x48]
add eax, dword [ebp - 0x30]
add ecx, eax
sub edi, 0x6538472
movzx ecx, cl
mov dword [ebp - 0x30], ecx
mov al, byte [ebp + ecx - 0x19c]
mov byte [ebp + esi - 0x19c], al
inc esi
mov al, byte [ebp - 1]
mov byte [ebp + ecx - 0x19c], al
mov ecx, dword [ebp - 0x20]
cmp esi, 0x100
jb 0x100042a5
xor eax, eax
mov dword [ebp - 0xc], eax
mov edi, eax
mov esi, eax
lea eax, [edi + 1]
movzx edi, al
mov eax, dword [ebp - 0xc]
mov cl, byte [ebp + edi - 0x19c]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [ebp - 0xc], eax
mov al, byte [ebp + eax - 0x19c]
mov byte [ebp + edi - 0x19c], al
mov eax, dword [ebp - 0xc]
mov byte [ebp + eax - 0x19c], cl
movzx eax, byte [ebp + edi - 0x19c]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x19c]
xor al, byte [ebp + esi - 0x1c]
mov byte [ebp + esi - 0x288], al
inc esi
cmp esi, 0xc
jb 0x1000432b
mov ecx, dword [ebp - 0x24]
lea edi, [ebp - 0x1c]
mov esi, str.shut_down
mov dword [ebp - 0x80], 0x76c93c20
xor eax, eax
mov dword [ebp - 0x7c], 0x7676c0db
mov byte [ebp - 0x27c], al
mov byte [ebp - 0x78], 0x8a
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x30], eax
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
imul edi, ecx, 0xe0c1650
cmp byte [str.identifier_removed], al
je 0x100043ed
inc eax
cmp eax, 0x1dcd
je 0x100043d7
cmp byte [eax + str.identifier_removed], 0
jne 0x100043bd
cmp eax, 0x1dcc
jle 0x100043ed
jmp 0x100043e4
push edi
call fcn.10001dc8
pop ecx
or edi, 0x1923c8bd
push ecx
call fcn.10001ed9
add esp, 4
or edi, 0x22fbf7bc
mov dword [ebp - 8], edi
call fcn.10001347
xor eax, eax
mov ecx, eax
mov byte [ebp + ecx - 0x19c], cl
inc ecx
cmp ecx, 0x100
jb 0x100043ff
mov esi, eax
xor edx, edx
mov cl, byte [ebp + esi - 0x19c]
mov eax, esi
mov byte [ebp - 1], cl
div dword [ebp - 0x68]
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x1c]
add eax, dword [ebp - 0x30]
add ecx, eax
movzx ecx, cl
mov dword [ebp - 0x30], ecx
mov al, byte [ebp + ecx - 0x19c]
mov byte [ebp + esi - 0x19c], al
inc esi
mov al, byte [ebp - 1]
mov byte [ebp + ecx - 0x19c], al
cmp esi, 0x100
jb 0x10004411
xor eax, eax
mov dword [ebp - 0xc], eax
mov edi, eax
mov esi, eax
lea eax, [edi + 1]
movzx edi, al
mov eax, dword [ebp - 0xc]
push 9
mov cl, byte [ebp + edi - 0x19c]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [ebp - 0xc], eax
mov al, byte [ebp + eax - 0x19c]
mov byte [ebp + edi - 0x19c], al
mov eax, dword [ebp - 0xc]
mov byte [ebp + eax - 0x19c], cl
movzx eax, byte [ebp + edi - 0x19c]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x19c]
xor al, byte [ebp + esi - 0x80]
mov byte [ebp + esi - 0x1f4], al
inc esi
pop eax
cmp esi, eax
jb 0x1000445f
mov edi, dword [ebp - 8]
xor eax, eax
mov dword [ebp - 0x48], 5
mov dword [ebp - 0x44], 0x59
mov dword [ebp - 0x40], 0x40
mov dword [ebp - 0x3c], 0xffffff08
movups xmm1, xmmword [ebp - 0x48]
push 0x2a
mov byte [ebp - 0x1eb], al
paddd xmm1, xmm2
mov dword [ebp - 0x1c], 0x14
movaps xmm0, xmm1
mov dword [ebp - 0x18], 0x4d
psrldq xmm0, 8
paddd xmm1, xmm0
mov dword [ebp - 0x14], 0xffffff76
movups xmm0, xmm1
psrldq xmm0, 4
paddd xmm1, xmm0
movd ecx, xmm1
add ecx, 0x5a
mov dword [ebp - 0x24], ecx
pop ecx
add ecx, dword [ebp + eax*4 - 0x1c]
inc eax
cmp eax, 3
jl 0x10004522
mov dword [ebp - 0x7c], ecx
xor edi, 0xf246ce47
mov dword [ebp - 0x2c], edi
call fcn.10001ee4
mov esi, str.arrow_ne_hollow
mov dword [ebp - 0x1c], 0x175f5ae4
lea edi, [ebp - 0x48]
mov dword [ebp - 0x18], 0x5d002b6f
xor eax, eax
mov dword [ebp - 0x14], 0x3dc21ada
and dword [ebp - 8], 0xf63cd531
mov ecx, eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov byte [ebp + ecx - 0x19c], cl
inc ecx
cmp ecx, 0x100
jb 0x10004569
and dword [ebp - 0x2c], 0xd9a373af
mov edi, eax
mov esi, eax
xor edx, edx
mov cl, byte [ebp + edi - 0x19c]
mov eax, edi
mov byte [ebp - 1], cl
div dword [ebp - 0x64]
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x48]
add eax, esi
add ecx, eax
movzx esi, cl
mov al, byte [ebp + esi - 0x19c]
mov byte [ebp + edi - 0x19c], al
inc edi
mov al, byte [ebp - 1]
mov byte [ebp + esi - 0x19c], al
cmp edi, 0x100
jb 0x10004584
mov edi, dword [ebp - 8]
mov ecx, 0x140f
movzx eax, byte [0x1002a138]
add edi, 0x46fa37cf
mov esi, dword [ebp - 0x2c]
test eax, eax
je 0x10004609
mov edx, 0x1002a138
add ecx, eax
inc edx
cmp ecx, 0x102f
ja 0x100045fa
movzx eax, byte [edx]
test eax, eax
jne 0x100045e6
jmp 0x10004609
push edi
push esi
call fcn.100019d7
pop ecx
pop ecx
xor edi, 0x871a1d3d
and esi, 0x9b60ce71
push str.TraceEvent
sub esi, 0xdce9dc3
call fcn.10001941
movzx edx, byte [str.LangRef3141]
pop ecx
xor ecx, ecx
mov dword [ebp - 0xc], edx
mov dword [ebp - 0x2c], ecx
mov eax, ecx
inc eax
movzx eax, al
mov dword [ebp - 0x38], eax
mov al, byte [ebp + eax - 0x19c]
mov byte [ebp - 1], al
movzx eax, al
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x20]
movzx eax, al
mov dword [ebp - 0x2c], eax
mov edx, dword [ebp - 0xc]
lea eax, [edi - 0x63e5f003]
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x68], 0x1084
jmp 0x1000468e
mov eax, dword [ebp - 0x68]
add eax, dword [ebp - 0x30]
inc dword [ebp - 0x64]
cmp eax, 0x23f5
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 8]
ja 0x10004697
mov edx, dword [ebp - 0x64]
movzx edx, byte [edx]
mov dword [ebp - 0x30], edx
test edx, edx
jne 0x10004672
jmp 0x1000469f
mov esi, edi
and esi, 0x19d44d54
lea edi, [esi - 0x3f3efdff]
mov edx, dword [ebp - 0x38]
mov esi, eax
mov eax, dword [ebp - 0x2c]
and esi, 0x34a6bc7b
mov al, byte [ebp + eax - 0x19c]
mov byte [ebp + edx - 0x19c], al
mov eax, dword [ebp - 0x2c]
mov dl, byte [ebp - 1]
mov byte [ebp + eax - 0x19c], dl
mov eax, dword [ebp - 0x38]
movzx eax, byte [ebp + eax - 0x19c]
add eax, dword [ebp - 0x20]
movzx eax, al
mov al, byte [ebp + eax - 0x19c]
xor al, byte [ebp + ecx - 0x1c]
mov byte [ebp + ecx - 0x48], al
inc ecx
mov eax, dword [ebp - 0x38]
cmp ecx, 0xc
jb 0x10004631
movzx eax, byte [str.ess_signing_certid_mismatch_error]
xor ecx, ecx
mov dword [ebp - 0x2c], esi
mov edx, 0x2a0
mov dword [ebp - 0x68], edi
mov esi, str.LangRef9248
lea edi, [ebp - 0x1c]
mov byte [ebp - 0x3c], cl
mov dword [ebp - 0x58], 0xa2165d9c
mov ecx, str.ess_signing_certid_mismatch_error
mov dword [ebp - 0x54], 0x789388a8
movsd dword es:[edi], dword [esi]
mov byte [ebp - 0x50], 0xbf
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
jmp 0x10004745
add edx, eax
inc ecx
cmp edx, 0x1178
ja 0x10004787
movzx eax, byte [ecx]
test eax, eax
jne 0x10004737
mov esi, dword [ebp - 8]
mov edi, dword [ebp - 0x2c]
or edi, 0x85ba9373
xor esi, 0xc942b7ef
mov dword [ebp - 8], esi
mov dword [0x1002a400], esi
call fcn.10001ee4
xor eax, eax
mov ecx, eax
mov byte [ebp + ecx - 0x19c], cl
inc ecx
cmp ecx, 0x100
jb 0x1000476d
mov edx, dword [ebp - 0xc]
mov ecx, 0x13d
jmp 0x100047a5
mov esi, dword [ebp - 0x68]
xor esi, 0xbdabd72
jmp 0x1000474c
inc dword [ebp - 0x74]
add ecx, edx
cmp ecx, 0x5c0
ja 0x100047ab
mov edx, dword [ebp - 0x74]
movzx edx, byte [edx]
test edx, edx
jne 0x10004792
jmp 0x100047bd
mov esi, dword [ebp - 0x68]
or esi, 0xc632e4c0
mov dword [ebp - 8], esi
mov dword [0x1002a400], esi
imul edi, edi, 0x3355a0d2
mov esi, eax
xor edi, 0xd93dc1f8
mov dword [ebp - 0x68], edi
mov edi, eax
xor edx, edx
mov cl, byte [ebp + edi - 0x19c]
mov eax, edi
mov byte [ebp - 1], cl
div dword [ebp - 0x88]
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x1c]
add eax, esi
add ecx, eax
movzx esi, cl
mov al, byte [ebp + esi - 0x19c]
mov byte [ebp + edi - 0x19c], al
inc edi
mov al, byte [ebp - 1]
mov byte [ebp + esi - 0x19c], al
cmp edi, 0x100
jb 0x100047d0
mov esi, dword [ebp - 8]
xor eax, eax
mov edi, dword [ebp - 0x68]
cmp byte [0x1002a138], al
je 0x10004849
inc eax
cmp eax, 0xacf
je 0x10004844
cmp byte [eax + 0x1002a138], 0
jne 0x10004824
cmp eax, 0xeb1
jle 0x10004849
lea edi, [esi + 0x1e4875b9]
jmp 0x10004855
call fcn.100026e6
lea esi, [edi + 0x313cdf52]
mov dword [0x1002a400], esi
xor esi, 0x910c1a05
mov dword [0x1002a47c], esi
call fcn.10001877
xor ecx, ecx
mov edx, ecx
mov esi, ecx
lea eax, [ecx + 1]
mov dword [ebp - 0x38], 0x1553
movzx ecx, al
push 0x54
mov al, byte [ebp + ecx - 0x19c]
mov byte [ebp - 1], al
movzx eax, al
mov dword [ebp - 0x34], eax
add eax, esi
movzx eax, al
mov dword [ebp - 0x64], eax
mov eax, str.TraceEvent
pop esi
add dword [ebp - 0x38], esi
lea eax, [eax + 2]
cmp dword [ebp - 0x38], 0x1655
ja 0x100048b1
movzx esi, word [eax]
test esi, esi
jne 0x10004899
jmp 0x100048bd
mov eax, edi
or eax, 0xb0c220f2
mov dword [0x1002a47c], eax
mov esi, dword [ebp - 0x64]
xor edi, 0xffffddfc
and edi, 0x2189fe6b
push 9
mov al, byte [ebp + esi - 0x19c]
mov byte [ebp + ecx - 0x19c], al
mov al, byte [ebp - 1]
mov byte [ebp + esi - 0x19c], al
movzx eax, byte [ebp + ecx - 0x19c]
add eax, dword [ebp - 0x34]
movzx eax, al
mov al, byte [ebp + eax - 0x19c]
xor al, byte [ebp + edx - 0x58]
mov byte [ebp + edx - 0x1c], al
inc edx
pop eax
cmp edx, eax
jb 0x1000486c
xor ecx, ecx
mov dword [0x1002a41c], edi
mov byte [ebp - 0x13], cl
mov esi, ecx
mov dword [ebp - 0x58], 0x23
mov eax, ecx
mov dword [ebp - 0x54], 0x61
mov dword [ebp - 0x50], 0xffffff7c
sub esi, dword [ebp + eax*4 - 0x58]
inc eax
cmp eax, 3
jl 0x10004931
push 0x2c
pop eax
push 0x50
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x54], 0x2d
mov dword [ebp - 0x50], 0xffffff57
pop edi
add edi, dword [ebp + ecx*4 - 0x58]
inc ecx
cmp ecx, 3
jl 0x10004952
mov ecx, dword [ebp - 0x1b4]
lea eax, [ebp - 0x228]
push eax
lea edx, [ebp - 0x278]
call fcn.1001d36b
call eax
cmp eax, dword [ebp - 0x1bc]
jne 0x100049df
push 0xa
mov dword [ebp - 0x60], 0x5d
xor eax, eax
mov dword [ebp - 0x5c], 0x4e
mov dword [ebp - 0x58], 0x55
mov dword [ebp - 0x54], 0x3a
mov dword [ebp - 0x50], 0xfffffecf
pop edi
sub edi, dword [ebp + eax*4 - 0x60]
inc eax
cmp eax, 5
jl 0x100049a6
mov esi, dword [0x1002a400]
lea ecx, [esi + 0x1da1787a]
mov dword [0x1002a47c], ecx
call fcn.10001347
and esi, 0x3588a358
add esi, 0x3ff2ef74
mov dword [0x1002a41c], esi
mov eax, edi
pop edi
pop esi
leave
ret
mov ecx, dword [ebp - 0x6c]
lea edx, [ebp - 0x20c]
push eax
call fcn.1001d36b
call eax
mov ecx, dword [ebp - 0x1a4]
lea eax, [ebp - 0x1e0]
push eax
lea edx, [ebp - 0x238]
call fcn.1001d36b
call eax
cmp eax, dword [ebp - 0x1c0]
jne 0x10004a58
push 9
pop eax
mov dword [ebp - 0x48], eax
xorps xmm1, xmm1
push 0x19
pop eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x44], 0x23
mov dword [ebp - 0x3c], 0xffffffc4
movups xmm0, xmmword [ebp - 0x48]
psubd xmm1, xmm0
movaps xmm0, xmm1
psrldq xmm0, 8
paddd xmm1, xmm0
movups xmm0, xmm1
psrldq xmm0, 4
paddd xmm1, xmm0
movd eax, xmm1
add eax, 0xa
jmp 0x100049db
mov ecx, dword [ebp - 0x1c4]
lea edx, [ebp - 0x218]
push eax
call fcn.1001d36b
call eax
mov ecx, dword [ebp - 0x1c8]
lea eax, [ebp - 0x98]
push eax
lea edx, [ebp - 0x248]
call fcn.1001d36b
call eax
cmp eax, dword [ebp - 0x1a0]
jne 0x10004b3e
mov esi, dword [0x1002a47c]
mov ecx, str.TraceEvent
push 0x54
pop edx
lea eax, [esi + 0x7b500b7d]
mov dword [0x1002a400], eax
mov eax, 0x1a55
add eax, edx
lea ecx, [ecx + 2]
cmp eax, 0x25e9
ja 0x10004ad1
movzx edx, word [ecx]
test edx, edx
jne 0x10004ab0
mov esi, dword [0x1002a41c]
or esi, 0xb882e724
jmp 0x10004ad7
xor esi, 0x3f0d8b45
add esi, 0x44d9950d
mov dword [0x1002a47c], esi
call fcn.10001465
imul eax, esi, 0xbcc041bf
push 7
mov dword [ebp - 0x9c], 0x53
mov dword [ebp - 0x98], 0x27
mov dword [ebp - 0x94], 0x25
mov dword [0x1002a41c], eax
xor eax, eax
mov dword [ebp - 0x90], 0x60
mov dword [ebp - 0x8c], 0xffffff07
pop ecx
sub ecx, dword [ebp + eax*4 - 0x9c]
inc eax
cmp eax, 5
jl 0x10004b2a
mov eax, ecx
jmp 0x100049db
mov ecx, dword [ebp - 0x1b8]
lea edx, [ebp - 0x200]
add dword [0x1002a400], 0x5ff291c4
push eax
call fcn.1001d36b
call eax
mov ecx, dword [ebp - 0x1a8]
lea eax, [ebp - 0x258]
push eax
lea edx, [ebp - 0x268]
call fcn.1001d36b
call eax
cmp eax, dword [ebp - 0x1ac]
je 0x10004c96
movzx eax, byte [str.ess_signing_certid_mismatch_error]
test eax, eax
je 0x10004bb0
mov ecx, 0xbf
mov edx, str.ess_signing_certid_mismatch_error
add ecx, eax
inc edx
cmp ecx, 0x10fc
ja 0x10004bab
movzx eax, byte [edx]
test eax, eax
jne 0x10004b97
jmp 0x10004bb0
call fcn.10001465
mov esi, dword [0x1002a47c]
add esi, 0xe5affd4c
mov dword [0x1002a41c], esi
mov edi, dword [0x1002a400]
push str.TraceEvent
or edi, 0xe7323ac9
call fcn.10001941
pop ecx
push 0xc
mov dword [ebp - 0x58], 0x62
xor eax, eax
mov dword [ebp - 0x54], 0xb
mov dword [ebp - 0x50], 0xffffff9e
pop ecx
sub ecx, dword [ebp + eax*4 - 0x58]
inc eax
cmp eax, 3
jl 0x10004bf3
push 0x54
mov dword [ebp - 0x88], ecx
mov eax, str.TraceEvent
mov ecx, 0x1404
pop edx
add ecx, edx
lea eax, [eax + 2]
cmp ecx, 0x1ba4
ja 0x10004c26
movzx edx, word [eax]
test edx, edx
jne 0x10004c10
jmp 0x10004c45
push ecx
call fcn.10001ed9
add esp, 4
or esi, 0x616cb383
mov edx, str.TraceEvent
mov dword [0x1002a41c], esi
call fcn.100024ee
lea eax, [edi + 0x73f3ce8e]
push 0x54
mov dword [0x1002a47c], eax
pop ecx
lea eax, [ecx - 0x30]
push 9
pop ecx
cmp ax, cx
ja 0x10004c73
mov eax, dword [ebp - 0x70]
add eax, 2
mov dword [ebp - 0x70], eax
movzx eax, word [eax]
mov ecx, eax
test ax, ax
jne 0x10004c53
jmp 0x10004c7f
and esi, 0xfef1cc09
mov dword [0x1002a47c], esi
mov eax, dword [ebp - 0x88]
xor edi, 0x91c4d346
mov dword [0x1002a400], edi
jmp 0x100049db
mov ecx, dword [ebp - 0x1b0]
lea eax, [ebp - 0x1f4]
push eax
lea edx, [ebp - 0x288]
call fcn.1001d36b
call eax
cmp eax, dword [ebp - 0x24]
je 0x10004d08
mov eax, dword [0x1002a41c]
mov dword [ebp - 0x48], 0x2f
add eax, 0xeb3d9301
mov dword [ebp - 0x44], 0x1a
mov dword [ebp - 0x40], 0x24
mov dword [ebp - 0x3c], 0xffffff4c
movups xmm1, xmmword [ebp - 0x48]
mov dword [0x1002a47c], eax
movaps xmm0, xmm1
psrldq xmm0, 8
paddd xmm1, xmm0
movups xmm0, xmm1
psrldq xmm0, 4
paddd xmm1, xmm0
movd eax, xmm1
add eax, 0x48
jmp 0x100049db
mov edx, dword [0x1002a47c]
xor eax, eax
cmp byte [str.LangRef3141], al
je 0x10004d37
inc eax
cmp eax, 0x12f0
jl 0x10004d2b
cmp byte [eax + str.LangRef3141], 0
jne 0x10004d18
jmp 0x10004d37
mov eax, edx
and eax, 0xf07cdd5d
mov dword [0x1002a41c], eax
mov eax, edx
xor eax, 0xd6890599
push ecx
push ecx
mov dword [0x1002a400], eax
call fcn.100024c3
mov ecx, dword [ebp - 0x7c]
lea eax, [ebp - 0x1c]
add esp, 8
lea edx, [ebp - 0x48]
push eax
call fcn.1001d36b
call eax
cmp eax, esi
je 0x100049d9
push 5
pop esi
push 0x54
mov dword [ebp - 0x60], 0x42
mov eax, 0x1c4a
mov dword [ebp - 0x5c], 0x24
mov ecx, str.TraceEvent
mov dword [ebp - 0x58], 0x2d
mov dword [ebp - 0x54], esi
mov dword [ebp - 0x50], 0xffffff76
pop edx
add eax, edx
lea ecx, [ecx + 2]
cmp eax, 0x12d5
ja 0x10004dbe
movzx edx, word [ecx]
test edx, edx
jne 0x10004d95
mov eax, dword [0x1002a41c]
or eax, 0xb550a437
mov dword [0x1002a47c], eax
mov eax, dword [0x1002a400]
jmp 0x10004dcd
mov eax, dword [0x1002a47c]
xor eax, 0xf540c764
mov dword [0x1002a400], eax
add eax, 0x6dd22708
push 0xf
mov dword [0x1002a41c], eax
xor eax, eax
pop ecx
sub ecx, dword [ebp + eax*4 - 0x60]
inc eax
cmp eax, esi
jl 0x10004ddc
jmp 0x10004b37