Function at 0x1000f953
Capabilities:
Encode data using xor
Encrypt data using rc4 ksa

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x170
mov eax, ecx
mov dword [ebp - 0x14], eax
test eax, eax
je 0x1000fbe7
push ebx
call fcn.1000e4b0
mov ebx, dword [0x1003ee70]
mov eax, str.password_modified
add ebx, 0x89868b23
xor ebx, 0x19695998
inc eax
mov dword [0x1003ee70], ebx
cmp byte [eax], 0
jne 0x1000f980
push 0x3d
pop ecx
mov dword [ebp - 4], ebx
xor eax, eax
mov dword [ebp - 0x70], 0x1f1c
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x68], ecx
mov dword [ebp - 0x64], ecx
mov dword [ebp - 0x60], 0x1b2f
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x58], 0x15a8
mov dword [ebp - 0x54], 1
mov dword [ebp - 0x50], ecx
mov dword [ebp - 0x4c], 0x1f4d
mov dword [ebp - 0x48], 0x6b3
cmp eax, 8
je 0x1000f9de
inc eax
cmp eax, 0xb
jl 0x1000f9d3
mov eax, dword [ebp + eax*4 - 0x70]
push esi
push edi
push 9
pop ecx
mov esi, str.._AVSaltedString_passwdmgr_avast_com__
mov dword [ebp - 0x10], 0x5885c025
lea edi, [ebp - 0x6c]
mov dword [ebp - 0xc], 0x4dfbf277
rep movsd dword es:[edi], dword [esi]
xor eax, 0x3c
mov dword [ebp - 0x18], eax
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
call fcn.1000e96d
push 8
pop ecx
mov esi, str.Exception_in_processing_UITask.
lea edi, [ebp - 0x38]
rep movsd dword es:[edi], dword [esi]
xor edi, edi
cmp byte [ebp - 0x38], 0x70
jne 0x1000fa60
mov al, 0x70
mov esi, edi
test al, al
je 0x1000fa60
cmp byte [ebp + esi - 0x38], 0
je 0x1000fa60
push ecx
mov edx, ebx
mov ecx, str.muesum.ydoc
call fcn.1000e450
mov al, byte [esi + 0x100328a1]
inc esi
pop ecx
cmp al, byte [ebp + esi - 0x38]
jne 0x1000fa57
mov ebx, dword [0x1003ee70]
mov dword [ebp - 4], ebx
jmp 0x1000fa26
mov esi, dword [0x1003ee70]
mov dword [ebp - 4], esi
mov dword [ebp - 8], edi
mov eax, edi
mov byte [ebp + eax - 0x170], al
inc eax
cmp eax, 0x100
jb 0x1000fa65
mov esi, dword [ebp - 8]
xor edx, edx
mov bl, byte [ebp + edi - 0x170]
push 0x26
mov eax, edi
pop ecx
div ecx
movzx ecx, bl
movzx eax, byte [ebp + edx - 0x6c]
add eax, esi
add ecx, eax
movzx esi, cl
mov al, byte [ebp + esi - 0x170]
mov byte [ebp + edi - 0x170], al
inc edi
mov byte [ebp + esi - 0x170], bl
cmp edi, 0x100
jb 0x1000fa77
mov esi, dword [ebp - 4]
mov eax, str.dargahebrew
add esi, 0x5c4e30f5
inc eax
cmp byte [eax], 0
jne 0x1000fabc
xor esi, 0xaf9bf9f3
xor ebx, ebx
mov dword [ebp - 4], esi
mov edi, ebx
mov dword [ebp - 8], ebx
mov esi, ebx
lea eax, [esi + 1]
movzx esi, al
mov eax, dword [ebp - 8]
mov cl, byte [ebp + esi - 0x170]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [ebp - 8], eax
mov al, byte [ebp + eax - 0x170]
mov byte [ebp + esi - 0x170], al
mov eax, dword [ebp - 8]
mov byte [ebp + eax - 0x170], cl
movzx eax, byte [ebp + esi - 0x170]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x170]
xor al, byte [ebp + edi - 0x10]
mov byte [ebp + edi - 0x44], al
inc edi
cmp edi, 8
jb 0x1000fada
mov esi, dword [ebp - 4]
add esi, 0x65eb8676
call fcn.1000ecc8
mov edi, ebx
mov dword [ebp - 8], esi
push str.._AUadapter_network_change_handler_anen_asw__
push str.ampersand
mov edx, str.is_virtual
mov ecx, esi
call fcn.1000ee69
mov esi, dword [ebp - 8]
or esi, 0x91bc7317
inc edi
pop ecx
pop ecx
mov dword [ebp - 8], esi
cmp byte [edi + str.incomplete_literal_length_tree], bl
jne 0x1000fb42
mov edx, str.scanBrowsers
mov ecx, str.expected_digits_after__
call fcn.1000f061
mov ecx, esi
mov byte [ebp - 0x3c], bl
or ecx, 0xad3b1038
mov dword [ebp - 0x30], 0x1790
cmp edi, 0x1155
mov dword [ebp - 0x2c], ebx
lea eax, [esi - 0x116c8649]
mov dword [ebp - 0x28], 0x7fc
cmovae eax, ecx
mov dword [ebp - 0x24], 0x21d8
pop edi
mov dword [0x1003ee70], eax
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], 0x1b8c
pop esi
cmp ebx, 1
je 0x1000fbcc
inc ebx
cmp ebx, 6
jl 0x1000fbc1
push dword [ebp - 0x14]
push dword [ebp + ebx*4 - 0x30]
call fcn.1000f5d2
mov ecx, dword [ebp - 0x18]
lea edx, [ebp - 0x44]
push eax
call fcn.10019e4c
call eax
pop ebx
leave
ret