Function at 0x1006f5e0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push esi
sub esp, 0x1c
mov eax, dword [ebp + 8]
mov dword [ebp - 8], ecx
mov eax, dword [ebp - 8]
mov dword [ebp - 0x10], eax
cmp dword [ebp + 8], 0
je 0x1006f972
mov eax, dword [0x100d1310]
add eax, dword [0x100d1314]
and eax, 0xcfd06122
imul eax, eax, 0x452f7a95
add eax, 0xc46f0aa8
sub eax, 0x5a265480
xor eax, 0xd2665611
add eax, 0x692b8893
or eax, 0x8dd080b8
or eax, 0x2142d600
and eax, 0x7c700e0e
xor eax, 0x59405ba7
or eax, 0xed111ce6
and eax, 0x27c8e6b1
and eax, 0x12ab8966
or eax, 0x1b285a81
mov ecx, 0x91717944
xor edx, edx
div ecx
and eax, 0xc0566b6e
sub eax, 0x53c7dd34
or eax, 0xa33f254e
or eax, 0xb22b0b38
and eax, 0xe196253a
and eax, 0x7ae1924f
and eax, 0xc1c9df8e
and eax, 0x33048d0e
and eax, 0xab9a2584
mov ecx, 0x6db1d5a
xor edx, edx
div ecx
and eax, 0xd0d4889
imul eax, eax, 0xc65bb8cc
xor eax, 0xdefbd809
sub eax, 0xdac1da89
sub eax, 0x1c2e5f65
and eax, 0x93200ed4
mov ecx, 0x70a06056
xor edx, edx
div ecx
mov ecx, 0x87a23422
xor edx, edx
div ecx
sub eax, 0x88072c3e
sub eax, 0x39ff5674
and eax, 0x839ba235
imul eax, eax, 0x6697e3aa
xor eax, 0x9d64a12e
or eax, 0x25ac4a81
imul eax, eax, 0xa61f461f
add eax, 0xca0503c
and eax, 0x48aef4a0
or eax, 0x36e7fa9a
or eax, 0xe91a2f24
or eax, 0xb749dd11
add eax, 0x5ce039bf
xor eax, 0x903c7ca8
sub eax, 0x87c4bac
sub eax, 0x17a09fe0
add eax, 0x9790b98
add eax, 0xbca3ea8e
xor eax, 0x557c7a9d
add eax, 0x6bd8f700
imul eax, eax, 0x27b863a2
add eax, 0xb2f80c13
mov ecx, 0x12741eb
xor edx, edx
div ecx
add eax, 0xc5b4ca69
imul eax, eax, 0x607b1e5e
and eax, 0x83fb5442
or eax, 0xfe8b52ff
add eax, 0x97caa3e6
sub eax, 0x824c14d0
sub eax, 0x4ede7dd0
and eax, 0xbd03dae1
or eax, 0xafffc6bf
add eax, 0xb1d28633
sub eax, 0x5f2fed4b
and eax, 0xcf04255c
add eax, 0xd324f411
and eax, 0x94425988
add eax, 0x37258a2f
or eax, 0x7b6791de
cmp eax, 0x78170813
je 0x1006fcd1
mov ecx, dword [ebp - 0x10]
mov eax, dword [0x100d1318]
or eax, dword [0x100d131c]
or eax, 0xe3b6bba3
add eax, 0x91141159
or eax, 0xeaa23543
or eax, 0x8a67570d
add eax, 0x5171c53f
xor eax, 0x67a340dd
and eax, 0xfbbb78be
and eax, 0xe570c822
add eax, 0xfcd58d01
or eax, 0xb221a9eb
xor eax, 0x751d6bf9
sub eax, 0xc5d7270f
and eax, 0x5526b444
or eax, 0x9d0cb8dd
imul eax, eax, 0xd92417fb
imul eax, eax, 0xf6164701
add eax, 0x6d401559
or eax, 0x9c000792
sub eax, 0x71143df6
mov esi, 0x7c516d5f
xor edx, edx
div esi
and eax, 0x2eccd541
sub eax, 0xc66f619e
sub eax, 0x46dce6fd
add eax, 0x24c1d029
add eax, 0x22372722
add eax, 0x4ca63b43
mov esi, 0x227b8288
xor edx, edx
div esi
or eax, 0x9013099e
imul eax, eax, 0x25afe8cf
mov esi, 0xcca990f3
xor edx, edx
div esi
imul eax, eax, 0x10fc3bb4
xor eax, 0xe42f81aa
mov esi, 0xfc02496c
xor edx, edx
div esi
and eax, 0x3184b9dc
xor eax, 0xa7767b5b
or eax, 0xfd3cb845
imul eax, eax, 0x5693097c
and eax, 0xd8487492
add eax, 0xfa03e3e6
add eax, 0xe8181b52
sub eax, 0x80ddd2e8
mov esi, 0x41ca7b9a
xor edx, edx
div esi
or eax, 0x53b3b0c0
imul eax, eax, 0x59871ca0
imul eax, eax, 0x71c10aac
mov esi, 0x55f0870
xor edx, edx
div esi
add eax, 0x4f23c567
sub eax, 0x72cd0fcd
add eax, 0xed558b0e
and eax, 0xf5fd78a4
xor eax, 0xa4d58a24
and eax, 0xba11783d
imul eax, eax, 0x152380e1
or eax, 0x60eb4301
xor eax, 0x27bed230
imul eax, eax, 0x6f08ed3b
add eax, 0x1072affe
sub eax, 0x6b57f13d
imul eax, eax, 0x43161cf6
and eax, 0x4274e32
imul eax, eax, 0x9a352560
mov esi, 0xca10438c
xor edx, edx
div esi
xor eax, 0xead8dbaa
sub eax, 0x9da50d32
sub eax, 0xc1c329a0
imul eax, eax, 0x502623dc
or eax, 0x145261a0
and eax, 0x529481d2
xor eax, 0xcc3104a4
add eax, 0x5e61332d
sub eax, 0x2dff5bcc
mov esi, 0xb4fb7141
xor edx, edx
div esi
mov dword [ebp - 0x14], eax
mov eax, dword [ebp + 8]
mov ecx, dword [ecx + 4]
xor edx, edx
mov dword [esp], ecx
mov dword [esp + 4], 0
mov dword [esp + 8], eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
sub esp, 0xc
mov ecx, eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xc], ecx
cmp eax, 0x38e81b57
je 0x1006fcd1
jmp 0x1006f972
mov eax, dword [0x100d1320]
or eax, dword [0x100d1324]
xor eax, 0x4d1506f8
imul eax, eax, 0xa59c3c02
add eax, 0x1ae1e977
sub eax, 0x790077bc
sub eax, 0xed360491
and eax, 0xbe6dafa2
add eax, 0x1f22cfbf
mov ecx, 0x8572565a
xor edx, edx
div ecx
imul eax, eax, 0x39633cc
or eax, 0x35419405
xor eax, 0xabcc83c5
add eax, 0x78343d2f
and eax, 0xe99c091
sub eax, 0xa14ad443
and eax, 0xc1b9a30b
imul eax, eax, 0xb0f6f6f7
and eax, 0x740dac3d
imul eax, eax, 0xd2c4f18c
sub eax, 0xeda869f3
and eax, 0xfd37494a
mov ecx, 0xd71a6e58
xor edx, edx
div ecx
and eax, 0x49aad46f
imul eax, eax, 0x224d2731
sub eax, 0x39558909
sub eax, 0x3313166c
add eax, 0x81c32310
add eax, 0xcaacdcb9
imul eax, eax, 0x2c26ec82
sub eax, 0xf91ffb95
sub eax, 0x15901228
xor eax, 0x57e970b2
mov ecx, 0xd1ee7e7c
xor edx, edx
div ecx
mov ecx, 0xccdc4e1c
xor edx, edx
div ecx
mov ecx, 0x1d7d8d05
xor edx, edx
div ecx
imul eax, eax, 0x9c4d620d
add eax, 0x10f6d365
xor eax, 0x339a07af
sub eax, 0xba6f2350
add eax, 0x4ccce898
mov ecx, 0x356ce8f6
xor edx, edx
div ecx
imul eax, eax, 0x1d502f92
and eax, 0x2223f25c
add eax, 0xab53d387
xor eax, 0x64aee0b1
imul eax, eax, 0x5d77501c
xor eax, 0xda0964c8
and eax, 0xef7e764f
and eax, 0x7858584a
mov ecx, 0xa694ae72
xor edx, edx
div ecx
mov ecx, 0x2b5777b7
xor edx, edx
div ecx
sub eax, 0xfbdbf224
sub eax, 0x330ce10d
mov ecx, 0x3ad5072c
xor edx, edx
div ecx
mov ecx, 0x86824592
xor edx, edx
div ecx
add eax, 0xafbbf444
imul eax, eax, 0x376b119b
xor eax, 0xa3dd7e1a
xor eax, 0x57a7b1ee
imul eax, eax, 0xefa521fe
sub eax, 0x598f4a56
add eax, 0x5c3db847
add eax, 0x7c5edee5
and eax, 0xf3c3b470
and eax, 0x6381a40d
xor eax, 0xc4fd9442
and eax, 0xe3b89874
or eax, 0x3ad70409
and eax, 0x3a1b07f5
mov ecx, 0x215398ed
xor edx, edx
div ecx
xor eax, 0x428ad5a4
sub eax, 0x149a75a1
add eax, 0x640bd075
cmp eax, 0x29488905
jbe 0x1006fcfc
mov eax, dword [0x100d1328]
and eax, dword [0x100d132c]
and eax, 0x9852684e
add eax, 0x722780f8
add eax, 0xc1d5911
mov ecx, 0xb3ea3cc4
xor edx, edx
div ecx
sub eax, 0xca8572ab
and eax, 0xc3b7da6d
mov ecx, 0x8e4bdece
xor edx, edx
div ecx
or eax, 0xf1cdd5a6
sub eax, 0xd25a5740
sub eax, 0x91cc8df6
or eax, 0x8ae78867
xor eax, 0xde110730
and eax, 0xf87e2c31
xor eax, 0xab379d65
add eax, 0xdbf934c7
imul eax, eax, 0x2e2e1c8d
or eax, 0x80a9730b
sub eax, 0xe90d8807
or eax, 0x25b433c3
add eax, 0x9da3d518
imul eax, eax, 0xa6defea0
or eax, 0x517b26b9
and eax, 0x5bf37639
add eax, 0xdf34986c
sub eax, 0xda253453
sub eax, 0xbe279efa
xor eax, 0x4bf47bd1
or eax, 0x9df36104
xor eax, 0x52728e9d
mov ecx, 0x4da05026
xor edx, edx
div ecx
sub eax, 0xfd960adb
xor eax, 0x828a0db6
imul eax, eax, 0x6ef5bbaa
or eax, 0x1476c8e9
and eax, 0x65308e40
xor eax, 0xf3013c37
and eax, 0x7e4941cd
or eax, 0xab7e434d
and eax, 0x7a2cf729
and eax, 0x2c25461
and eax, 0x4b065de1
xor eax, 0x67444842
and eax, 0xdaaadc73
or eax, 0x42fcc83f
mov ecx, 0x8db893f2
xor edx, edx
div ecx
mov ecx, 0xadc928b9
xor edx, edx
div ecx
add eax, 0x1bd3ccfe
and eax, 0xdbf0d049
mov ecx, 0x89bbc67d
xor edx, edx
div ecx
xor eax, 0xf873e53c
imul eax, eax, 0xf98f008
sub eax, 0x50985504
sub eax, 0xfb3e4aab
mov ecx, 0x4175908
xor edx, edx
div ecx
or eax, 0x4089d3c6
or eax, 0xab6e5d94
mov ecx, 0xd2ebddfb
xor edx, edx
div ecx
and eax, 0x36cae184
xor eax, 0xb981d7d8
and eax, 0xc8f6da0a
add eax, 0x7796818a
or eax, 0xe07479d4
or eax, 0x16535b92
sub eax, 0x681c7507
xor eax, 0xebf3e86f
xor eax, 0x85c3828d
add eax, 0x1fffdcd
sub eax, 0x29a1afb1
add eax, 0x8696dee
sub eax, 0x97a1dfec
and eax, 0xdc580229
sub eax, 0x8b4d8c9b
cmp eax, 0x77d5f61f
jb 0x1006fb27
add esp, 0x1c
pop esi
pop ebp
ret 4
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp + 8]
mov ecx, dword [ecx + 4]
xor edx, edx
mov dword [esp], ecx
mov dword [esp + 4], 0
mov dword [esp + 8], eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
sub esp, 0xc
mov dword [ebp - 0xc], eax
jmp 0x1006f795
jmp 0x1006fb27