Function at 0x1001bd6a
Capabilities:
Encrypt data using chaskey
Resolve function by parsing pe exports

Disassembly:
sub esp, 0xb64
push ebx
push ebp
push esi
push edi
mov ebp, ecx
mov dword [esp + 0x24], 0x81038c
xor edx, edx
add dword [esp + 0x24], 0xb440
add dword [esp + 0x24], 0x3007
xor dword [esp + 0x24], 0x6ef177b9
xor dword [esp + 0x24], 0x6e709043
mov dword [esp + 0x110], 0x40aa8a
or dword [esp + 0x110], 0x635f6a95
xor dword [esp + 0x110], 0x634fea9f
mov dword [esp + 0x8c], 0x7a5843
or dword [esp + 0x8c], 0x56153b48
shl dword [esp + 0x8c], 3
xor dword [esp + 0x8c], 0xb3fbc682
mov dword [esp + 0xc8], 0x2dbcaf
shl dword [esp + 0xc8], 2
xor dword [esp + 0xc8], 0xeda8bdea
xor dword [esp + 0xc8], 0xed1563b7
mov dword [esp + 0x88], 0xbe2f2
or dword [esp + 0x88], 0xef0a0ed4
xor dword [esp + 0x88], 0xd3b3c5a7
xor dword [esp + 0x88], 0x3cb97486
mov dword [esp + 0xd4], 0xf672eb
add dword [esp + 0xd4], 0xfffff494
xor dword [esp + 0xd4], 0xf89e9f
mov dword [esp + 0xe0], 0xda672f
add dword [esp + 0xe0], 0xffffc66a
xor dword [esp + 0xe0], 0xd79c4d
mov dword [esp + 0xa4], 0xb56c3c
xor dword [esp + 0xa4], 0xb9ba1f60
mov eax, dword [esp + 0xa4]
push 3
mov esi, 0x1a8292f
pop ecx
div ecx
mov dword [esp + 0xa4], eax
xor dword [esp + 0xa4], 0x3da1555b
mov dword [esp + 0xd8], 0xf712f2
shl dword [esp + 0xd8], 5
xor dword [esp + 0xd8], 0x1ee3b920
mov dword [esp + 0x40], 0xb473e5
xor dword [esp + 0x40], 0x36a51660
add dword [esp + 0x40], 0x792e
imul eax, dword [esp + 0x40], 0x48
mov dword [esp + 0x40], eax
xor dword [esp + 0x40], 0x350ac2de
mov dword [esp + 0x38], 0xc76981
add dword [esp + 0x38], 0xffff0d70
shl dword [esp + 0x38], 8
or dword [esp + 0x38], 0x1e522d06
xor dword [esp + 0x38], 0xde71c164
mov dword [esp + 0x30], 0xd59c46
or dword [esp + 0x30], 0xd62f551d
imul eax, dword [esp + 0x30], 0x72
mov dword [esp + 0x30], eax
add dword [esp + 0x30], 0x7389
xor dword [esp + 0x30], 0xbdf1aa6a
mov dword [esp + 0x28], 0xbdd4fc
xor dword [esp + 0x28], 0x698dfb4c
shl dword [esp + 0x28], 0xa
shl dword [esp + 0x28], 0xe
xor dword [esp + 0x28], 0xb00ad8b3
mov dword [esp + 0xf4], 0x35ac40
add dword [esp + 0xf4], 0xffff9bd0
xor dword [esp + 0xf4], 0x3cf6c8
mov dword [esp + 0xec], 0xdcdeb6
imul eax, dword [esp + 0xec], 0x7b
mov dword [esp + 0xec], eax
xor dword [esp + 0xec], 0x6a1d73be
mov dword [esp + 0xe4], 0x95ef49
add dword [esp + 0xe4], 0xa62
xor dword [esp + 0xe4], 0x9bb5f7
mov dword [esp + 0xdc], 0x4b3843
xor dword [esp + 0xdc], 0xbde4ffb4
xor dword [esp + 0xdc], 0xbda44d2c
mov dword [esp + 0xac], 0xa9ba5d
add dword [esp + 0xac], 0xffff4d9f
shr dword [esp + 0xac], 1
xor edx, edx
xor dword [esp + 0xac], 0x568066
mov dword [esp + 0x48], 0xe8e058
add dword [esp + 0x48], 0x1c9a
add dword [esp + 0x48], 0xffff570f
xor dword [esp + 0x48], 0x94faf6bd
xor dword [esp + 0x48], 0x9416d1f4
mov dword [esp + 0xfc], 0xcbef9a
shl dword [esp + 0xfc], 0xc
xor dword [esp + 0xfc], 0xbef33536
mov dword [esp + 0xbc], 0x71ee60
or dword [esp + 0xbc], 0xd478231f
imul eax, dword [esp + 0xbc], 0x1a
push 0x18
pop ecx
push 0x7d
mov dword [esp + 0xc0], eax
xor dword [esp + 0xc0], 0x94694ba0
mov dword [esp + 0x108], 0xd4e94d
xor dword [esp + 0x108], 0xeb853635
xor dword [esp + 0x108], 0xeb58315d
mov dword [esp + 0x54], 0x945028
imul eax, dword [esp + 0x54], 0x6f
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x54]
div ecx
xor edx, edx
mov dword [esp + 0x54], eax
add dword [esp + 0x54], 0x79b9
xor dword [esp + 0x54], 0x2a66cb0
mov dword [esp + 0xb8], 0x9d5359
or dword [esp + 0xb8], 0xc5bf96aa
shr dword [esp + 0xb8], 8
xor dword [esp + 0xb8], 0xcaaa38
mov dword [esp + 0xd0], 0x5673f0
add dword [esp + 0xd0], 0xfed7
mov eax, dword [esp + 0xd0]
pop ecx
div ecx
push 0x15
mov dword [esp + 0xd0], eax
xor edx, edx
xor dword [esp + 0xd0], 0xb46fc
mov dword [esp + 0x5c], 0xdc6379
mov eax, dword [esp + 0x5c]
pop ecx
div ecx
push 0x71
mov dword [esp + 0x5c], eax
xor edx, edx
shr dword [esp + 0x5c], 0x10
imul eax, dword [esp + 0x5c], 0xe
pop ecx
push 0x55
mov dword [esp + 0x5c], eax
xor dword [esp + 0x5c], 0xa111a
mov dword [esp + 0xc8], 0x62ceb7
xor dword [esp + 0xc8], 0xd31b6bda
xor dword [esp + 0xc8], 0x66779083
xor dword [esp + 0xc8], 0xb5026e5b
mov dword [esp + 0x6c], 0xb9b359
shl dword [esp + 0x6c], 4
imul eax, dword [esp + 0x6c], 0x72
mov dword [esp + 0x6c], eax
shl dword [esp + 0x6c], 0xb
xor dword [esp + 0x6c], 0xeed2fc84
mov dword [esp + 0x110], 0xd0da9b
mov eax, dword [esp + 0x110]
div ecx
xor edx, edx
mov dword [esp + 0x110], eax
xor dword [esp + 0x110], 0xff4d9
mov dword [esp + 0x64], 0xb011e8
xor dword [esp + 0x64], 0x3a5503d4
mov eax, dword [esp + 0x64]
pop ecx
div ecx
mov dword [esp + 0x60], eax
shl dword [esp + 0x60], 9
xor dword [esp + 0x60], 0x62c6cb2a
mov dword [esp + 0x100], 0x5e63fd
xor edx, edx
add dword [esp + 0x100], 0xde10
xor dword [esp + 0x100], 0x5b86f2
mov dword [esp + 0x18], 0x13ba42
mov eax, dword [esp + 0x18]
push 0x7f
pop edi
div edi
push 0x70
mov dword [esp + 0x1c], eax
xor edx, edx
add dword [esp + 0x1c], 0xc94d
shl dword [esp + 0x1c], 6
xor dword [esp + 0x1c], 0x356267
mov dword [esp + 0x10c], 0xeb7dfd
xor dword [esp + 0x10c], 0xafead2
xor dword [esp + 0x10c], 0x419a8a
mov dword [esp + 0x120], 0xb3a4da
or dword [esp + 0x120], 0xd04570bd
xor dword [esp + 0x120], 0xd0f12c8c
mov dword [esp + 0xbc], 0x2b9353
add dword [esp + 0xbc], 0x233e
xor dword [esp + 0xbc], 0xd21029ad
xor dword [esp + 0xbc], 0xd23e08c2
mov dword [esp + 0xa4], 0x26c23f
add dword [esp + 0xa4], 0xa23a
add dword [esp + 0xa4], 0x8571
xor dword [esp + 0xa4], 0x2e2804
mov dword [esp + 0xa0], 0x949fb9
mov eax, dword [esp + 0xa0]
pop ecx
div ecx
push 0xf
mov dword [esp + 0xa0], eax
xor edx, edx
shl dword [esp + 0xa0], 8
xor dword [esp + 0xa0], 0x1505a4c
mov dword [esp + 0x98], 0x4fc8e4
shr dword [esp + 0x98], 0xd
or dword [esp + 0x98], 0xdd80456
xor dword [esp + 0x98], 0xdde9062
mov dword [esp + 0x78], 0xcdda44
add dword [esp + 0x78], 0xffff9a09
add dword [esp + 0x78], 0x790f
xor dword [esp + 0x78], 0xc50f54
mov dword [esp + 0x124], 0x1396fe
add dword [esp + 0x124], 0xffffa472
xor dword [esp + 0x124], 0x1cce9c
mov dword [esp + 0x88], 0xd39548
or dword [esp + 0x88], 0x119672c7
add dword [esp + 0x88], 0xffff0627
xor dword [esp + 0x88], 0x11d267bc
mov dword [esp + 0x7c], 0x7157f7
imul eax, dword [esp + 0x7c], 0x2a
pop ecx
push 0x3a
mov dword [esp + 0x7c], eax
shr dword [esp + 0x7c], 0xb
xor dword [esp + 0x7c], 0x28e0c
mov dword [esp + 0x24], 0xcda5fd
or dword [esp + 0x24], 0xc2c107e1
shl dword [esp + 0x24], 4
or dword [esp + 0x24], 0xb7482d55
xor dword [esp + 0x24], 0xbfd44cb2
mov dword [esp + 0x50], 0x496daa
shl dword [esp + 0x50], 0x10
mov eax, dword [esp + 0x50]
div ecx
mov dword [esp + 0x50], eax
shr dword [esp + 0x50], 5
xor dword [esp + 0x50], 0x348bfd
mov dword [esp + 0x94], 0xcfac83
shl dword [esp + 0x94], 0xd
or dword [esp + 0x94], 0xab2e596c
xor dword [esp + 0x94], 0xffb144b5
mov dword [esp + 0x60], 0x2722a9
imul eax, dword [esp + 0x60], 0x47
xor edx, edx
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x60]
pop ecx
div ecx
push 0x58
mov dword [esp + 0x60], eax
xor edx, edx
or dword [esp + 0x60], 0x13a64ff5
xor dword [esp + 0x60], 0x13a2b928
mov dword [esp + 0x20], 0xe5972
shr dword [esp + 0x20], 8
shr dword [esp + 0x20], 2
shl dword [esp + 0x20], 6
xor dword [esp + 0x20], 0xace30
mov dword [esp + 0x70], 0x772a3f
shl dword [esp + 0x70], 7
add dword [esp + 0x70], 0x8e6b
or dword [esp + 0x70], 0x1f69db28
xor dword [esp + 0x70], 0x3ffec5ce
mov dword [esp + 0xfc], 0x24f4d6
shl dword [esp + 0xfc], 0xe
xor dword [esp + 0xfc], 0x3d3f6b1e
mov dword [esp + 0x130], 0x290041
add dword [esp + 0x130], 0xffff1b33
xor dword [esp + 0x130], 0x213a4c
mov dword [esp + 0x128], 0x165381
xor dword [esp + 0x128], 0x2363b885
xor dword [esp + 0x128], 0x23718599
mov dword [esp + 0x40], 0x652641
add dword [esp + 0x40], 0xffff3a19
or dword [esp + 0x40], 0xea1c386c
add dword [esp + 0x40], 0x4c78
xor dword [esp + 0x40], 0xea799637
mov dword [esp + 0x9c], 0xf71439
add dword [esp + 0x9c], 0x3e61
add dword [esp + 0x9c], 0xffff6faa
xor dword [esp + 0x9c], 0xfa98b7
mov dword [esp + 0x58], 0xb178c2
xor dword [esp + 0x58], 0xd8160533
shl dword [esp + 0x58], 2
or dword [esp + 0x58], 0x29dc2985
xor dword [esp + 0x58], 0x6bd2d22d
mov dword [esp + 0x38], 0x5a1b99
shr dword [esp + 0x38], 7
add dword [esp + 0x38], 0xfdea
add dword [esp + 0x38], 0xffff9ccc
xor dword [esp + 0x38], 0xbbe47
mov dword [esp + 0xb4], 0x2e7765
mov eax, dword [esp + 0xb4]
pop ecx
div ecx
push 0x46
mov dword [esp + 0xb4], eax
xor edx, edx
add dword [esp + 0xb4], 0xffff4330
xor dword [esp + 0xb4], 0xfff8198f
mov dword [esp + 0x14], 0x4aedac
add dword [esp + 0x14], 0xffff6693
add dword [esp + 0x14], 0xffff56d0
shr dword [esp + 0x14], 0xd
xor dword [esp + 0x14], 0xf8949
mov dword [esp + 0x68], 0x8dda2f
xor dword [esp + 0x68], 0xf0443a23
add dword [esp + 0x68], 0xffff5b6f
imul eax, dword [esp + 0x68], 0x73
pop ecx
mov dword [esp + 0x64], eax
xor dword [esp + 0x64], 0x2a6e723c
mov dword [esp + 0xc0], 0x863cc5
shr dword [esp + 0xc0], 0xb
add dword [esp + 0xc0], 0x4f63
xor dword [esp + 0xc0], 0x22fc1
mov dword [esp + 0x114], 0x5aced
or dword [esp + 0x114], 0x82431f38
xor dword [esp + 0x114], 0x8246932d
mov dword [esp + 0x118], 0xd2a62d
mov eax, dword [esp + 0x118]
div ecx
mov dword [esp + 0x118], eax
xor dword [esp + 0x118], 0x8fae1
mov dword [esp + 0x14], 0xfbc6ab
xor dword [esp + 0x14], 0x9e8bb634
imul eax, dword [esp + 0x14], 0x26
mov dword [esp + 0x14], eax
xor edx, edx
xor dword [esp + 0x14], 0x6f5e2a57
xor dword [esp + 0x14], 0xebef92f9
mov dword [esp + 0x80], 0xd1f3de
shr dword [esp + 0x80], 9
add dword [esp + 0x80], 0xffff03df
xor dword [esp + 0x80], 0xfffa85fb
mov dword [esp + 0x128], 0xcb12f0
shr dword [esp + 0x128], 0xc
xor dword [esp + 0x128], 0xe7622
mov dword [esp + 0xa8], 0xb29bec
mov eax, dword [esp + 0xa8]
push 0x44
pop ecx
div ecx
xor edx, edx
mov dword [esp + 0xa8], eax
shr dword [esp + 0xa8], 8
xor dword [esp + 0xa8], 0x85ea2
mov dword [esp + 0x44], 0x7911eb
imul eax, dword [esp + 0x44], 0x3e
push 0x7a
pop ecx
mov dword [esp + 0x44], eax
add dword [esp + 0x44], 0x3ee4
or dword [esp + 0x44], 0x89760aa4
xor dword [esp + 0x44], 0x9d7b17f0
mov dword [esp + 0x7c], 0x4fe4b4
shr dword [esp + 0x7c], 4
mov eax, dword [esp + 0x7c]
div ecx
xor edx, edx
mov dword [esp + 0x7c], eax
xor dword [esp + 0x7c], 0x478f0
mov dword [esp + 0xf0], 0xb5910d
mov eax, dword [esp + 0xf0]
div edi
mov dword [esp + 0xf0], eax
xor dword [esp + 0xf0], 0x55bd4
mov dword [esp + 0x130], 0x7d5737
xor dword [esp + 0x130], 0x6dd0b052
xor dword [esp + 0x130], 0x6daddee0
mov dword [esp + 0xe8], 0x10a521
shr dword [esp + 0xe8], 7
xor dword [esp + 0xe8], 0x6fcb9
mov dword [esp + 0x2c], 0x27d58d
add dword [esp + 0x2c], 0xffffab14
add dword [esp + 0x2c], 0x1a65
add dword [esp + 0x2c], 0xffffaee9
xor dword [esp + 0x2c], 0x293805
mov dword [esp + 0xd0], 0x937a61
imul eax, dword [esp + 0xd0], 0x17
mov dword [esp + 0xd0], eax
xor dword [esp + 0xd0], 0xd3e9852
mov dword [esp + 0x70], 0x40168b
add dword [esp + 0x70], 0xffff5799
shl dword [esp + 0x70], 5
shl dword [esp + 0x70], 0xa
xor dword [esp + 0x70], 0xb7127a17
mov eax, dword [esp + 0x8c]
call fcn.1002385e
mov edi, dword [esp + 0xd0]
mov ebx, eax
mov eax, 0xed1ef1f
cmp esi, 0x7d61ae8
jg 0x1001ca2d
je 0x1001c9fb
cmp esi, 0xd16822
je 0x1001c9c5
cmp esi, 0x1a8292f
je 0x1001c988
cmp esi, 0x2ad4791
je 0x1001c955
cmp esi, 0x4417a50
je 0x1001c92b
cmp esi, 0x70a5bfc
jne 0x1001ccb9
push dword [esp + 0x80]
lea eax, [esp + 0x764]
xor edx, edx
push 0
push eax
push dword [esp + 0x20]
inc edx
push dword [esp + 0x128]
push 0
push ecx
mov ecx, dword [esp + 0x130]
call fcn.10014a72
add esp, 0x1c
mov esi, 0x4417a50
jmp 0x1001c8a5
push dword [esp + 0x7c]
mov ecx, edi
push dword [esp + 0x48]
push dword [esp + 0xb0]
mov edx, dword [esp + 0x134]
call fcn.1000ce30
add esp, 0xc
mov esi, 0x7d61ae8
jmp 0x1001c8a5
push dword [esp + 0x138]
push dword [esp + 0x20]
mov edx, dword [esp + 0x64]
mov ecx, dword [esp + 0x13c]
call fcn.1001ad26
mov edi, eax
mov esi, 0x7d61ae8
test edi, edi
mov eax, 0xed1ef1f
pop ecx
pop ecx
cmovne esi, eax
jmp 0x1001c8aa
push ecx
push ecx
push dword [esp + 0xe8]
lea eax, [esp + 0x564]
push dword [esp + 0x30]
push ecx
push eax
push dword [esp + 0xec]
mov edx, dword [esp + 0xa4]
mov ecx, dword [esp + 0xe4]
call fcn.1001d7ed
add esp, 0x1c
mov esi, 0xc08886b
jmp 0x1001c8a5
push dword [esp + 0x90]
mov edx, dword [esp + 0x50]
lea eax, [esp + 0x138]
push eax
lea ecx, [esp + 0x144]
call fcn.1000dd02
neg eax
pop ecx
sbb esi, esi
and esi, 0xf2f1b5e5
pop ecx
add esi, 0xfbb91ac
jmp 0x1001c8a5
push dword [esp + 0x2c]
push dword [esp + 0xec]
push dword [esp + 0x138]
mov edx, dword [esp + 0xfc]
mov ecx, dword [esp + 0x140]
call fcn.1000ce30
add esp, 0xc
mov esi, 0xfbb91ac
jmp 0x1001c8a5
cmp esi, 0xc08886b
je 0x1001cba6
cmp esi, 0xe33b76b
je 0x1001caff
cmp esi, eax
je 0x1001ca78
cmp esi, 0xfbb91ac
jne 0x1001ccb9
push dword [esp + 0x70]
mov edx, dword [esp + 0xd4]
mov ecx, dword [esp + 0x140]
call fcn.100226db
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xb64
ret
push 0x10001730
push dword [esp + 0x130]
mov edx, dword [esp + 0x100]
mov ecx, dword [esp + 0x74]
call fcn.10017af5
pop ecx
pop ecx
mov esi, eax
lea edx, [esp + 0x760]
push esi
push dword [esp + 0xb4]
lea eax, [esp + 0x560]
push eax
push dword [esp + 0x40]
lea eax, [esp + 0x158]
push dword [esp + 0x64]
push ecx
push dword [esp + 0xb0]
mov ecx, edi
push dword [esp + 0x58]
push eax
push dword [esp + 0x148]
call fcn.10016056
push dword [esp + 0xe8]
mov edx, esi
push dword [esp + 0x90]
mov ecx, dword [esp + 0x40]
call fcn.100063e1
add esp, 0x30
mov esi, 0x70a5bfc
jmp 0x1001c8a5
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x100]
call fcn.100080e1
push dword [esp + 0xa0]
mov dword [esp + 0x144], eax
push dword [esp + 0xbc]
mov edx, dword [esp + 0x124]
mov ecx, dword [esp + 0x110]
push eax
call fcn.100078cc
add esp, 8
mov edx, ebx
lea eax, [eax*2 + 2]
push dword [esp + 0x24]
mov dword [esp + 0x14c], eax
lea eax, [esp + 0x144]
push dword [esp + 0x80]
push dword [esp + 0x90]
push ecx
push dword [esp + 0x134]
mov ecx, ebx
push ebx
push dword [esp + 0x90]
push dword [esp + 0x130]
push dword [esp + 0xb8]
push dword [esp + 0xc4]
push eax
call fcn.10016f95
add esp, 0x30
test eax, eax
je 0x1001ca6d
mov esi, 0xd16822
jmp 0x1001c8a5
push dword [esp + 0xd8]
mov edx, dword [esp + 0xa8]
push ecx
lea ecx, [esp + 0x358]
call fcn.1000f875
push dword [esp + 0x30]
lea eax, [esp + 0x35c]
push dword [esp + 0x3c]
mov edx, dword [esp + 0x48]
mov ecx, dword [esp + 0x50]
push eax
call fcn.10004231
add esp, 0x14
xor ecx, ecx
mov word [eax], cx
lea ecx, [esp + 0x968]
push dword [esp + 0xdc]
push dword [esp + 0xe8]
push dword [esp + 0xf4]
mov edx, dword [esp + 0x100]
call fcn.1001584c
add esp, 0xc
push 0x10001610
push dword [esp + 0x100]
mov edx, dword [esp + 0x50]
mov ecx, dword [esp + 0xb4]
call fcn.10017af5
push dword [esp + 0xbc]
mov esi, eax
lea ecx, [esp + 0x35c]
lea eax, [esp + 0x154]
push eax
push esi
push dword [esp + 0x64]
lea eax, [esp + 0x980]
push dword [esp + 0x11c]
push dword [esp + 0xd8]
push eax
call fcn.1001baff
add esp, 0x24
mov edx, esi
push dword [esp + 0xc4]
push dword [esp + 0x5c]
mov ecx, dword [esp + 0xd4]
call fcn.100063e1
lea eax, [esp + 0x150]
push eax
push ebp
push dword [esp + 0x70]
mov edx, dword [esp + 0x120]
mov ecx, dword [esp + 0x7c]
call fcn.10011bb7
add esp, 0x14
test eax, eax
je 0x1001ccaf
mov esi, 0xe33b76b
jmp 0x1001c8a5
mov esi, 0xd4f659e
mov eax, 0xed1ef1f
cmp esi, 0xd4f659e
jne 0x1001c8aa
jmp 0x1001ca6d