Function at 0xb1bd00
Capabilities:
Contain obfuscated stackstrings
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x98
mov dword [esp + 8], 0x8b1185fa
mov dword [esp + 0xc], 0x8f19891e
mov dword [esp + 0x10], 0xb3eb8d18
mov dword [esp + 0x14], 0xb7dbb1db
mov dword [esp + 0x18], 0xbbd0b5ca
mov dword [esp + 0x1c], 0xbfd2b9d1
mov dword [esp + 0x20], 0xa327bdd9
mov dword [esp + 0x24], 0xa734a1ce
lea eax, [esp + 0x28]
mov word [esp + 0x28], 0xa5a6
mov dword [esp + 0x2a], 0
mov dword [esp + 0x2e], 0
mov dword [esp + 0x32], 0
mov byte [esp + 0x36], 0
mov ecx, 0xdd294c95
nop
nop
nop
nop
movzx edx, byte [esp + ecx + 0x22d6b373]
mov esi, ecx
and esi, edx
add esi, esi
sub edx, esi
add edx, ecx
mov dword [esp + 0x70], edx
mov edx, dword [esp + 0x70]
add dl, 0xed
mov byte [esp + ecx + 0x22d6b373], dl
cmp ecx, 0xdd294cc3
je 0xb1bdd7
movzx edx, byte [esp + ecx + 0x22d6b374]
lea esi, [ecx + 1]
and esi, edx
add esi, esi
sub edx, esi
add edx, ecx
inc edx
mov dword [esp + 0x70], edx
mov edx, dword [esp + 0x70]
add dl, 0xed
mov byte [esp + ecx + 0x22d6b374], dl
add ecx, 2
jmp 0xb1bd80
lea edi, [esp + 0x70]
lea ebx, [esp + 8]
mov edx, ebx
mov ecx, 8
xchg esi, edx
rep movsd dword es:[edi], dword [esi]
xchg esi, edx
lea edi, [esp + 0x90]
mov ecx, 1
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
mov eax, dword [ebp + 0x10]
mov edi, dword [eax + 4]
mov ecx, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
nop
cmp word [edi + ecx + 2], 0
lea ecx, [ecx + 2]
jne 0xb1be10
mov eax, ecx
sar eax, 1
and ecx, 0x22
xor eax, 0x11
add eax, ecx
jns 0xb1be30
mov eax, 0xffffffff
jmp 0xb1be32
add eax, eax
push eax
call fcn.00b092b0
add esp, 4
mov esi, eax
movzx ecx, word [edi]
test cx, cx
je 0xb1be61
add edi, 2
mov eax, esi
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edi]
add edi, 2
test cx, cx
jne 0xb1be50
mov word [eax], 0
movzx ecx, word [esp + 0x70]
test cx, cx
je 0xb1be91
lea edx, [esp + 0x72]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0xb1be80
mov word [eax], 0
mov eax, dword [ebp + 8]
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], esi
mov eax, dword [ebp + 0xc]
mov dword [esp + 0x64], eax
mov eax, dword [ebp + 0x10]
mov dword [esp + 0x68], eax
mov eax, dword [ebp + 0x14]
mov dword [esp + 0x6c], eax
mov dword [esp + 8], 0x36d016d
mov dword [esp + 0xc], 0x72b057e
mov dword [esp + 0x10], 0xb72096d
mov dword [esp + 0x14], 0xf6b0d78
mov dword [esp + 0x18], 0x1361117e
mov dword [esp + 0x1c], 0x1779157d
mov dword [esp + 0x20], 0x1b311976
mov dword [esp + 0x24], 0x1f351d37
mov dword [esp + 0x28], 0x237c210a
mov dword [esp + 0x2c], 0x27552551
mov dword [esp + 0x30], 0x2b58294d
mov dword [esp + 0x34], 0x2f412d6f
mov dword [esp + 0x38], 0x3346315e
mov dword [esp + 0x3c], 0x374e3551
mov dword [esp + 0x40], 0x3b73394c
mov dword [esp + 0x44], 0x3f033d58
mov dword [esp + 0x48], 0x4342416a
mov dword [esp + 0x54], 0
mov dword [esp + 0x50], 0
mov dword [esp + 0x4c], 0
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
movzx ecx, byte [esp + eax + 8]
mov edx, eax
and edx, ecx
add edx, edx
sub ecx, edx
add ecx, eax
add ecx, 0xeeb85e00
mov dword [esp + 4], ecx
mov ecx, dword [esp + 4]
mov byte [esp + eax + 8], cl
movzx ecx, byte [esp + eax + 9]
lea edx, [eax + 1]
and edx, ecx
add edx, edx
sub ecx, edx
add ecx, eax
add ecx, 0xeeb85e01
mov dword [esp + 4], ecx
mov ecx, dword [esp + 4]
mov byte [esp + eax + 9], cl
add eax, 2
cmp eax, 0x50
jne 0xb1bf60
lea eax, [esp + 0x5c]
push eax
push 0xb1c290
push ebx
push esi
call fcn.00b1cca0
add esp, 0x10
mov ebx, eax
jmp dword [0xb460e8]