Function at 0x100060d3
Capabilities:
Encode data using xor
Encrypt data using rc4 ksa

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x188
mov eax, dword [0x1003bd70]
xor edx, edx
xor eax, 0x648c90ee
mov dword [ebp - 0x4c], 0x20d5
mov dword [ebp - 0x14], eax
xor eax, eax
inc edx
mov dword [ebp - 0x48], 0x274
mov ecx, eax
mov dword [ebp - 0x44], 0x7c4
mov dword [ebp - 0x40], 0x37a
mov dword [ebp - 0x3c], edx
mov dword [ebp - 0x38], 0x6b3
mov dword [ebp - 0x34], 0x1d68
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x2c], 0x1901
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x24], 0xc7a
mov dword [ebp - 0x20], 0xf8a
mov dword [ebp - 0x1c], 0x2267
mov dword [ebp - 0x18], edx
cmp ecx, 7
je 0x1000614d
inc ecx
cmp ecx, 0xe
jl 0x10006142
mov ecx, dword [ebp + ecx*4 - 0x4c]
push esi
push edi
mov dword [ebp - 0x70], ecx
lea edi, [ebp - 0x88]
push 5
pop ecx
mov esi, str.app.utils.GetNtpTime
mov dword [ebp - 0x5c], 0xa4bd1e7f
rep movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x58], 0x69c862fb
mov ecx, eax
mov dword [ebp - 0x54], 0x9180bcae
movsb byte es:[edi], byte [esi]
mov edi, eax
mov byte [ebp + ecx - 0x188], cl
inc ecx
cmp ecx, 0x100
jb 0x10006180
mov esi, eax
xor edx, edx
mov dword [ebp - 8], 0x14
mov eax, esi
mov cl, byte [ebp + esi - 0x188]
div dword [ebp - 8]
mov byte [ebp - 1], cl
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x88]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [ebp + edi - 0x188]
mov byte [ebp + esi - 0x188], al
inc esi
mov al, byte [ebp - 1]
mov byte [ebp + edi - 0x188], al
cmp esi, 0x100
jb 0x10006192
mov edi, dword [ebp - 0x14]
xor esi, esi
mov eax, edi
mov dword [ebp - 0x64], esi
xor eax, 0xa2a030ff
mov dword [ebp - 0x68], esi
push str.pj.agas.usot
push eax
mov edx, str.cef_v8value_create_array
mov dword [ebp - 0xc], eax
mov ecx, eax
call fcn.1000401b
cmp byte [str.cef_v8value_create_array], 0
pop ecx
pop ecx
mov ecx, str.app.pam.onStatusChanged.pendingBrowserDeletes
je 0x1000623d
mov eax, edi
mov esi, str.cef_v8value_create_array
and eax, 0x8659ef52
mov dword [ebp - 0xc], eax
mov edx, ecx
mov ecx, str.vehinitialarabic
call fcn.10005f15
inc esi
mov ecx, str.app.pam.onStatusChanged.pendingBrowserDeletes
cmp byte [esi], 0
jne 0x10006223
mov esi, dword [ebp - 0x68]
xor edx, edx
mov dword [ebp - 8], edx
lea eax, [esi + 1]
mov dword [ebp - 0x60], edx
movzx ecx, al
lea edi, [ebp - 0x4c]
push 0xd
mov dword [ebp - 0x68], ecx
mov al, byte [ebp + ecx - 0x188]
movzx esi, al
mov byte [ebp - 1], al
mov eax, dword [ebp - 0x64]
add eax, esi
mov dword [ebp - 0x10], esi
movzx eax, al
mov esi, str.CcleanerSubscriptionStatus
mov dword [ebp - 0x64], eax
mov al, byte [ebp + eax - 0x188]
mov byte [ebp + ecx - 0x188], al
pop ecx
rep movsd dword es:[edi], dword [esi]
push 0x2e
pop eax
movsw word es:[edi], word [esi]
cmp ax, word [ebp - 0x4c]
jne 0x100062fa
mov esi, eax
mov ecx, edx
mov eax, edx
test si, si
je 0x100062c1
cmp word [ebp + eax - 0x4c], dx
je 0x100062c1
call fcn.10004a5f
mov ecx, dword [ebp - 0x60]
inc ecx
push 0
mov dword [ebp - 0x60], ecx
pop edx
lea eax, [ecx + ecx]
movzx esi, word [eax + str.._AUFactory_CPamVaultManager_detail_pam_asw__]
cmp si, word [ebp + eax - 0x4c]
je 0x10006295
mov esi, dword [ebp - 0x6c]
cmp esi, ecx
jae 0x100062fa
call fcn.10005742
cmp esi, 0x2036
jne 0x100062e1
imul eax, dword [ebp - 0x14], 0x95d1451a
mov dword [ebp - 0x14], eax
jmp 0x100062e4
mov eax, dword [ebp - 0x14]
mov edi, eax
xor edi, 0xc531025f
inc esi
mov dword [ebp - 0xc], edi
cmp esi, dword [ebp - 0x60]
jb 0x100062c8
mov dword [ebp - 0x6c], esi
jmp 0x100062fd
mov edi, dword [ebp - 0xc]
mov eax, dword [ebp - 0x64]
mov esi, dword [ebp - 0x68]
mov cl, byte [ebp - 1]
push 0
mov byte [ebp + eax - 0x188], cl
movzx eax, byte [ebp + esi - 0x188]
add eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 8]
movzx eax, al
pop edx
mov al, byte [ebp + eax - 0x188]
xor al, byte [ebp + ecx - 0x5c]
mov byte [ebp + ecx - 0x80], al
inc ecx
mov dword [ebp - 8], ecx
cmp ecx, 0xc
jb 0x10006242
mov ecx, 0x3b8
mov dword [ebp - 0x2c], 0x5f0
xor eax, eax
mov dword [ebp - 0x30], ecx
mov byte [ebp - 0x74], al
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x20], 0xfda
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x18], 0x1246
cmp eax, 2
je 0x10006373
inc eax
cmp eax, 7
jl 0x10006368
mov eax, dword [ebp + eax*4 - 0x30]
mov dword [ebp - 0x6c], eax
call fcn.10003b38
xor esi, esi
mov eax, esi
cmp byte [str.cef_v8value_create_array], al
je 0x100063d5
mov edi, dword [ebp - 0x14]
add edi, 0xf10ae94e
mov dword [ebp - 0xc], edi
inc eax
cmp byte [eax + str.cef_v8value_create_array], 0
jne 0x10006397
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], eax
jae 0x100063d5
mov esi, dword [ebp - 0x10]
call fcn.10005342
cmp esi, 0x7b5
jne 0x100063c4
xor edi, 0x11a4de79
call fcn.10003b38
add edi, 0x5790e1d3
inc esi
cmp esi, dword [ebp - 0x10]
jb 0x100063ac
mov dword [ebp - 0xc], edi
xor esi, esi
call fcn.10005342
lea eax, [edi - 0x1f81eeed]
mov edi, esi
mov dword [0x1003bd70], eax
call fcn.100057bb
inc edi
cmp word [edi*2 + str.._AUFactory_CPamVaultManager_detail_pam_asw__], si
jne 0x100063e7
mov dword [ebp - 8], edi
call fcn.100057bb
mov esi, dword [ebp - 0x70]
cmp esi, edi
mov edi, dword [ebp - 0xc]
jae 0x1000643c
mov eax, dword [ebp - 8]
cmp esi, 0x1a33
jne 0x1000642e
xor edi, 0x5dce4e33
mov dword [0x1003bb6c], edi
call fcn.10005148
mov edi, dword [0x1003bb6c]
mov eax, dword [ebp - 8]
or edi, 0x63e15c1
inc esi
cmp esi, eax
jb 0x1000640c
mov dword [ebp - 0xc], edi
mov edx, 0x2d4
mov dword [ebp - 0x38], 0xe1
xor eax, eax
mov dword [ebp - 0x3c], edx
mov ecx, eax
mov dword [ebp - 0x34], 0x8dc
mov dword [ebp - 0x30], 0x1c1d
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x28], 0x1c84
mov dword [ebp - 0x24], 0xa9f
mov dword [ebp - 0x20], 0x131b
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x18], edx
cmp ecx, 9
je 0x10006486
inc ecx
cmp ecx, 0xa
jl 0x1000647b
mov ecx, dword [ebp + ecx*4 - 0x3c]
lea edi, [ebp - 0x5c]
mov esi, str.enolatipac
mov dword [ebp - 0x10], ecx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
cmp byte [ebp - 0x5c], 0x74
jne 0x100064fb
mov cl, 0x74
test cl, cl
je 0x100064ba
cmp byte [ebp + eax - 0x5c], 0
je 0x100064ba
mov cl, byte [eax + 0x1002e4b5]
inc eax
cmp cl, byte [ebp + eax - 0x5c]
je 0x100064a2
mov edi, dword [ebp - 0x70]
mov ecx, dword [0x1003bd70]
mov dword [ebp - 8], eax
cmp edi, eax
jae 0x10006501
mov eax, dword [ebp - 0xc]
mov esi, dword [ebp - 8]
cmp edi, 0x25bb
jne 0x100064ed
xor eax, 0xfb68c27f
mov dword [0x1003bb6c], eax
call fcn.10005148
mov ecx, dword [0x1003bd70]
mov eax, ecx
xor eax, 0x8d9e7552
inc edi
cmp edi, esi
jb 0x100064d0
jmp 0x10006501
mov ecx, dword [0x1003bd70]
lea esi, [ecx - 0x390ecac6]
mov edi, str.pj.agas.usot
mov dword [0x1003bb6c], esi
mov ecx, str.cef_v8value_create_array
call fcn.10003e29
lea edi, [edi + 2]
xor eax, eax
cmp word [edi], ax
jne 0x10006512
and esi, 0x65e7d5b7
mov edi, str.pj.agas.usot
mov dword [0x1003bd70], esi
xor esi, esi
call fcn.10004dbc
lea edi, [edi + 2]
cmp word [edi], si
jne 0x10006539
call fcn.10005a16
cmp byte [str.app.pam.onStatusChanged.pendingBrowserDeletes], 0
mov edi, esi
je 0x10006570
mov eax, dword [0x1003bb6c]
mov ecx, str.app.pam.onStatusChanged.pendingBrowserDeletes
xor eax, 0xf4579bd5
inc ecx
cmp byte [ecx], 0
jne 0x10006560
mov dword [0x1003bb6c], eax
push 0x3b
pop ecx
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x40], 0x26e2
mov dword [ebp - 0x3c], 0xc47
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x34], 0x1286
mov dword [ebp - 0x30], 0x14af
mov dword [ebp - 0x2c], 0x1627
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x24], 0xfb0
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x1c], 0xd70
mov dword [ebp - 0x18], 0x10f
cmp edi, 9
je 0x100065c2
inc edi
cmp edi, 0xc
jl 0x100065b7
mov eax, dword [ebp + edi*4 - 0x44]
lea edx, [ebp - 0x80]
push dword [ebp - 0x6c]
xor eax, ecx
mov ecx, dword [ebp - 0x70]
push 0x7ffe0000
mov dword [ebp - 8], eax
call fcn.1001779c
call eax
test eax, eax
je 0x10006635
and dword [0x1003bb6c], 0xbd77c3e0
xor eax, eax
inc eax
mov dword [ebp - 0x30], 0x2619
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], eax
xor eax, eax
mov dword [ebp - 0x2c], 0x4de
mov dword [ebp - 0x20], 0x1318
mov dword [ebp - 0x1c], 0x1880
mov dword [ebp - 0x18], 0xbfc
test eax, eax
je 0x1000662c
inc eax
cmp eax, 9
jl 0x10006622
mov eax, dword [ebp + eax*4 - 0x38]
jmp 0x10006766
mov eax, dword [ebp - 0x10]
mov al, byte [eax + 0x7ffe0000]
mov byte [ebp - 1], al
test al, al
je 0x10006742
mov edx, 0x96
mov dword [ebp - 0x30], 0x15ef
xor ecx, ecx
mov dword [ebp - 0x38], edx
xor edi, edi
mov dword [ebp - 0x34], edx
mov eax, ecx
mov dword [ebp - 0x2c], 0x538
mov dword [ebp - 0x28], edx
inc edi
mov dword [ebp - 0x24], 0x21e9
mov dword [ebp - 0x20], 0xdd6
mov dword [ebp - 0x1c], 0x171b
mov dword [ebp - 0x18], 0x1acc
cmp eax, edi
je 0x10006692
inc eax
cmp eax, 9
jl 0x10006688
mov edx, dword [ebp + eax*4 - 0x38]
mov eax, ecx
xor edx, 0x95
mov dword [ebp - 0x50], 0x226d
mov dword [ebp - 0x4c], 0x19da
mov dword [ebp - 0x48], edi
mov dword [ebp - 0x44], edi
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x3c], 0xff1
mov dword [ebp - 0x38], 0x266a
mov dword [ebp - 0x34], 0x207
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x2c], 0xac1
mov dword [ebp - 0x28], 0xdb7
mov dword [ebp - 0x24], 0x2427
mov dword [ebp - 0x20], 0x4e7
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x18], 0x16e
cmp eax, 4
je 0x100066fe
inc eax
cmp eax, 0xf
jl 0x100066f3
mov esi, dword [ebp + eax*4 - 0x50]
movzx eax, byte [ebp - 1]
cmp eax, edx
jne 0x1000673e
mov dword [ebp - 0x88], edi
mov dword [ebp - 0x84], 0x8cc
mov dword [ebp - 0x80], edi
mov dword [ebp - 0x7c], 0x23c5
mov dword [ebp - 0x78], 0xbd8
test ecx, ecx
je 0x10006735
inc ecx
cmp ecx, 5
jl 0x1000672b
mov eax, dword [ebp + ecx*4 - 0x88]
jmp 0x10006766
mov eax, esi
jmp 0x10006766
mov eax, dword [0x1003bd70]
mov edi, str.._AUFactory_CPamVaultManager_detail_pam_asw__
add eax, 0xb269f2c
mov dword [0x1003bb6c], eax
call fcn.10005742
lea edi, [edi + 2]
cmp word [edi], si
jne 0x10006756
mov eax, dword [ebp - 8]
pop edi
pop esi
leave
ret