Function at 0x10006d50
Capabilities:
Encode data using xor
Terminate process

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x1001a24b
mov eax, dword fs:[0]
push eax
sub esp, 0x148
mov eax, dword [0x10025018]
xor eax, esp
mov dword [esp + 0x140], eax
push ebx
push esi
push edi
mov eax, dword [0x10025018]
xor eax, esp
push eax
lea eax, [esp + 0x158]
mov dword fs:[0], eax
xor eax, eax
mov byte [0x111831c8], 0
lea ebx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax + 0x10130538]
sub cl, 0x10
xor cl, 0x77
mov byte [eax + 0x10130538], cl
add eax, ebx
cmp eax, 0x400000
jb 0x10006da0
xor eax, eax
lea ecx, [ecx]
mov dl, byte [eax + 0x10130498]
sub dl, 0x10
xor dl, 0x77
mov byte [eax + 0x10130498], dl
add eax, ebx
cmp eax, 0xa0
jb 0x10006dc0
xor eax, eax
lea ecx, [ecx]
mov cl, byte [eax + 0x10130418]
sub cl, 0x10
xor cl, 0x77
mov byte [eax + 0x10130418], cl
add eax, ebx
cmp eax, 0x7c
jb 0x10006de0
xor eax, eax
jmp 0x10006e00
mov dl, byte [eax + 0x1012fee8]
sub dl, 0x10
xor dl, 0x77
mov byte [eax + 0x1012fee8], dl
add eax, ebx
cmp eax, 0x52f
jb 0x10006e00
xor eax, eax
lea ecx, [ecx]
mov cl, byte [eax + 0x1012fe7c]
sub cl, 0x10
xor cl, 0x77
mov byte [eax + 0x1012fe7c], cl
add eax, ebx
cmp eax, 0x32
jb 0x10006e20
xor eax, eax
jmp 0x10006e40
mov dl, byte [eax + 0x1012feb0]
sub dl, 0x10
xor dl, 0x77
mov byte [eax + 0x1012feb0], dl
add eax, ebx
cmp eax, 0x32
jb 0x10006e40
xor edi, edi
cmp edi, 0x52f
jge 0x10007026
cmp edi, 0xa0
jge 0x10006ec4
mov cl, byte [edi + 0x10130498]
mov eax, edi
add eax, 0x100053f0
cmp cl, byte [eax]
je 0x10006ec4
mov byte [0x111831c8], bl
mov ecx, 0x93
xor eax, eax
lea ecx, [ecx]
mov dl, byte [eax + 0x1001fabc]
xor dl, cl
inc ecx
mov byte [esp + eax + 0x10], dl
add eax, ebx
and ecx, 0xff
cmp eax, 0x1f
jb 0x10006e90
push edi
lea eax, [esp + 0x14]
push eax
push 0
mov ecx, 0x10125568
mov byte [esp + 0x3b], 0
call fcn.1000b500
add esp, 0xc
cmp edi, 0x7c
jge 0x10006f24
mov dl, byte [edi + 0x10130418]
mov ecx, edi
add ecx, fcn.10004e40
cmp dl, byte [ecx]
je 0x10006f24
mov byte [0x111831c8], bl
mov ecx, 0xca
xor eax, eax
jmp 0x10006ef0
mov dl, byte [eax + 0x1001fadc]
xor dl, cl
inc ecx
mov byte [esp + eax + 0x10], dl
add eax, ebx
and ecx, 0xff
cmp eax, 0x1a
jb 0x10006ef0
push edi
lea eax, [esp + 0x14]
push eax
push 0
mov ecx, 0x10125568
mov byte [esp + 0x36], 0
call fcn.1000b500
add esp, 0xc
mov dl, byte [edi + 0x1012fee8]
mov ecx, fcn.10004ec0
cmp dl, byte [ecx + edi]
je 0x10006f75
mov byte [0x111831c8], bl
mov ecx, 0x55
xor eax, eax
mov dl, byte [eax + 0x1001faf8]
xor dl, cl
inc ecx
mov byte [esp + eax + 0x10], dl
add eax, ebx
and ecx, 0xff
cmp eax, 0x1a
jb 0x10006f41
push edi
lea eax, [esp + 0x14]
push eax
push 0
mov ecx, 0x10125568
mov byte [esp + 0x36], 0
call fcn.1000b500
add esp, 0xc
cmp edi, 0x32
jae 0x10007026
mov dl, byte [edi + 0x1012fe7c]
mov ecx, 0x1000e640
cmp dl, byte [ecx + edi]
je 0x10006fd4
mov byte [0x111831c8], bl
mov ecx, 0xa7
xor eax, eax
jmp 0x10006fa0
mov dl, byte [eax + 0x1001fb14]
xor dl, cl
inc ecx
mov byte [esp + eax + 0x10], dl
add eax, ebx
and ecx, 0xff
cmp eax, 0x20
jb 0x10006fa0
push edi
lea eax, [esp + 0x14]
push eax
push 0
mov ecx, 0x10125568
mov byte [esp + 0x3c], 0
call fcn.1000b500
add esp, 0xc
mov cl, byte [edi + 0x1012feb0]
mov edx, dword [0x1012fee4]
cmp cl, byte [edx + edi]
je 0x10007026
mov byte [0x111831c8], bl
mov ecx, 0x7f
xor eax, eax
mov dl, byte [eax + 0x1001fb38]
xor dl, cl
inc ecx
mov byte [esp + eax + 0x10], dl
add eax, ebx
and ecx, 0xff
cmp eax, 0x1d
jb 0x10006ff2
push edi
lea eax, [esp + 0x14]
push eax
push 0
mov ecx, 0x10125568
mov byte [esp + 0x39], 0
call fcn.1000b500
add esp, 0xc
lea eax, [edi + 0x400000]
cmp eax, 0x400000
je 0x10007ac8
cmp eax, 0x4d04cd
je 0x10007ac8
cmp eax, 0x4d2355
je 0x10007ac8
cmp eax, 0x4efeb0
je 0x10007ac8
cmp eax, 0x51ec90
je 0x10007ac8
cmp eax, 0x51ee20
jl 0x10007075
cmp eax, 0x556c38
jle 0x10007ac8
cmp eax, 0x57491b
jl 0x10007087
cmp eax, 0x574922
jle 0x10007ac8
cmp eax, 0x574f2f
jl 0x10007099
cmp eax, 0x574f36
jle 0x10007ac8
cmp eax, 0x574ffd
jl 0x100070ab
cmp eax, 0x575004
jle 0x10007ac8
cmp eax, 0x57655b
jl 0x100070bd
cmp eax, 0x57655f
jle 0x10007ac8
cmp eax, 0x576d93
jl 0x100070cf
cmp eax, 0x576d97
jle 0x10007ac8
cmp eax, 0x576ddb
jl 0x100070e1
cmp eax, 0x576ddf
jle 0x10007ac8
cmp eax, 0x57acbf
jl 0x100070f3
cmp eax, 0x57acc3
jle 0x10007ac8
cmp eax, 0x57ad03
jl 0x10007105
cmp eax, 0x57ad07
jle 0x10007ac8
cmp eax, 0x57ad47
jl 0x10007117
cmp eax, 0x57ad4b
jle 0x10007ac8
cmp eax, 0x57be80
jl 0x10007129
cmp eax, 0x57be84
jle 0x10007ac8
cmp eax, 0x57bf0e
jl 0x1000713b
cmp eax, 0x57bf12
jle 0x10007ac8
cmp eax, 0x57bf78
jl 0x1000714d
cmp eax, 0x57bf7c
jle 0x10007ac8
cmp eax, 0x57c057
jl 0x1000715f
cmp eax, 0x57c05b
jle 0x10007ac8
cmp eax, 0x57c0bb
jl 0x10007171
cmp eax, 0x57c0bf
jle 0x10007ac8
cmp eax, 0x57c125
jl 0x10007183
cmp eax, 0x57c129
jle 0x10007ac8
cmp eax, 0x57d279
jl 0x10007195
cmp eax, 0x57d27a
jle 0x10007ac8
cmp eax, 0x5802f5
jl 0x100071a7
cmp eax, 0x5802f6
jle 0x10007ac8
cmp eax, 0x5883bc
jl 0x100071b9
cmp eax, 0x5883c0
jle 0x10007ac8
cmp eax, 0x5883f4
jl 0x100071cb
cmp eax, 0x5883f8
jle 0x10007ac8
cmp eax, 0x588661
jl 0x100071dd
cmp eax, 0x588665
jle 0x10007ac8
cmp eax, 0x5977e0
je 0x10007ac8
cmp eax, 0x59af55
je 0x10007ac8
cmp eax, 0x59b24a
je 0x10007ac8
cmp eax, 0x5b768f
jl 0x10007210
cmp eax, 0x5b7693
jle 0x10007ac8
cmp eax, 0x5b770c
jl 0x10007222
cmp eax, 0x5b7710
jle 0x10007ac8
cmp eax, 0x5bafac
jl 0x10007234
cmp eax, 0x5bafaf
jle 0x10007ac8
cmp eax, 0x5db541
je 0x10007ac8
cmp eax, 0x5db55f
je 0x10007ac8
cmp eax, 0x5de2b4
je 0x10007ac8
cmp eax, 0x5edfe0
je 0x10007ac8
cmp eax, 0x5f8924
jl 0x10007272
cmp eax, 0x5f8928
jle 0x10007ac8
cmp eax, 0x608cad
jl 0x10007284
cmp eax, 0x608fb0
jle 0x10007ac8
cmp eax, 0x60954e
jl 0x10007296
cmp eax, 0x609550
jle 0x10007ac8
cmp eax, 0x6097b0
je 0x10007ac8
cmp eax, 0x60b36a
jl 0x100072b3
cmp eax, 0x60b373
jle 0x10007ac8
cmp eax, 0x60f04c
jl 0x100072c5
cmp eax, 0x60f052
jle 0x10007ac8
cmp eax, 0x6e899d
jl 0x100072d7
cmp eax, 0x6e89a1
jle 0x10007ac8
cmp eax, 0x7126fa
jl 0x100072e9
cmp eax, 0x7126fe
jle 0x10007ac8
cmp eax, 0x72d1bd
jl 0x100072fb
cmp eax, 0x72d1be
jle 0x10007ac8
cmp eax, 0x72d1cc
jl 0x1000730d
cmp eax, 0x72d1d0
jle 0x10007ac8
cmp eax, 0x74cd50
jl 0x1000731f
cmp eax, 0x74cd54
jle 0x10007ac8
cmp eax, 0x74cd82
je 0x10007ac8
cmp eax, 0x771328
jl 0x1000733c
cmp eax, 0x77132c
jle 0x10007ac8
cmp eax, 0x77135c
je 0x10007ac8
cmp eax, 0x789767
jl 0x10007359
cmp eax, 0x78976b
jle 0x10007ac8
cmp eax, 0x789a63
jl 0x1000736b
cmp eax, 0x789a67
jle 0x10007ac8
cmp eax, 0x789dac
jl 0x1000737d
cmp eax, 0x789db0
jle 0x10007ac8
cmp eax, 0x78b0bd
jl 0x1000738f
cmp eax, 0x78b0c0
jle 0x10007ac8
cmp eax, 0x830d66
je 0x10007ac8
cmp eax, 0x830e57
je 0x10007ac8
cmp eax, 0x830ed5
je 0x10007ac8
cmp eax, 0x830fd8
je 0x10007ac8
cmp eax, 0x83245d
je 0x10007ac8
cmp eax, 0x842859
jl 0x100073d8
cmp eax, 0x84285d
jle 0x10007ac8
cmp eax, 0x85cc37
je 0x10007ac8
cmp eax, 0x886b30
je 0x10007ac8
cmp eax, 0x8875e0
je 0x10007ac8
cmp eax, 0x95e9fa
je 0x10007ac8
cmp eax, 0x608200
je 0x10007ac8
cmp eax, 0x74cd30
je 0x10007ac8
cmp eax, 0x771310
je 0x10007ac8
cmp eax, 0x588621
jl 0x10007437
cmp eax, 0x588625
jle 0x10007ac8
cmp eax, 0x40f2f9
je 0x10007ac8
cmp eax, 0x40f2fa
je 0x10007ac8
cmp eax, 0x40f2fb
je 0x10007ac8
cmp eax, 0x40f2fc
je 0x10007ac8
cmp eax, 0x40f30d
je 0x10007ac8
cmp eax, 0x40f30e
je 0x10007ac8
cmp eax, 0x40f30f
je 0x10007ac8
cmp eax, 0x40f310
je 0x10007ac8
cmp eax, 0x40f7b8
je 0x10007ac8
cmp eax, 0x40f7dd
je 0x10007ac8
cmp eax, 0x41f538
je 0x10007ac8
cmp eax, 0x42622e
je 0x10007ac8
cmp eax, 0x426cfe
je 0x10007ac8
cmp eax, 0x4283cb
je 0x10007ac8
cmp eax, 0x428e88
je 0x10007ac8
cmp eax, 0x42b032
je 0x10007ac8
cmp eax, 0x42b037
je 0x10007ac8
cmp eax, 0x4833da
je 0x10007ac8
cmp eax, 0x4833df
je 0x10007ac8
cmp eax, 0x48bc83
je 0x10007ac8
cmp eax, 0x48bc8d
je 0x10007ac8
cmp eax, 0x48bcee
je 0x10007ac8
cmp eax, 0x48bcf8
je 0x10007ac8
cmp eax, 0x48bdce
je 0x10007ac8
cmp eax, 0x48bdd8
je 0x10007ac8
cmp eax, 0x48be6e
je 0x10007ac8
cmp eax, 0x48be78
je 0x10007ac8
cmp eax, 0x48c091
je 0x10007ac8
cmp eax, 0x4d06fa
je 0x10007ac8
cmp eax, 0x4d0706
je 0x10007ac8
cmp eax, 0x4d0723
je 0x10007ac8
cmp eax, 0x4d072f
je 0x10007ac8
cmp eax, 0x4d7179
je 0x10007ac8
cmp eax, 0x4d717e
je 0x10007ac8
cmp eax, 0x4d7183
je 0x10007ac8
cmp eax, 0x4d7a0e
je 0x10007ac8
cmp eax, 0x4d7a13
je 0x10007ac8
cmp eax, 0x4d7a18
je 0x10007ac8
cmp eax, 0x4d7d71
je 0x10007ac8
cmp eax, 0x4d7d7e
je 0x10007ac8
cmp eax, 0x4d7d8d
je 0x10007ac8
cmp eax, 0x4d7d9a
je 0x10007ac8
cmp eax, 0x4d7e06
je 0x10007ac8
cmp eax, 0x4d7e13
je 0x10007ac8
cmp eax, 0x4d7e1e
je 0x10007ac8
cmp eax, 0x4d7e8c
je 0x10007ac8
cmp eax, 0x4d7e99
je 0x10007ac8
cmp eax, 0x4d9324
je 0x10007ac8
cmp eax, 0x4d9749
je 0x10007ac8
cmp eax, 0x4e77e7
je 0x10007ac8
cmp eax, 0x4e77e8
je 0x10007ac8
cmp eax, 0x4e77e9
je 0x10007ac8
add edi, ebx
cmp edi, 0x400000
jb 0x10006e5b
cmp byte [0x111831c8], 0
mov edi, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
je 0x10007b68
mov ecx, 0x47
xor eax, eax
mov dl, byte [eax + 0x1001fb7c]
xor dl, cl
inc ecx
mov byte [esp + eax + 0x10], dl
add eax, ebx
and ecx, 0xff
cmp eax, 0x1f
jb 0x10007af0
mov byte [esp + 0x2f], 0
lea eax, [esp + 0x10]
push eax
push 2
mov eax, 0x1012f668
mov dword [esp + 0x168], 0
call fcn.10014390
xor eax, eax
add esp, 8
push eax
mov dword [0x11182e48], eax
mov dword [0x11182e4c], eax
mov dword [0x11182e50], eax
mov dword [0x11182e54], eax
mov dword [0x11182e58], eax
mov dword [0x11182e5c], eax
mov dword [0x11182e60], eax
mov dword [0x11182e64], eax
call edi
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
jmp dword [pe_dos_header]
push 0x400000
push 0
push 0x10130538
call sub.MSVCR100.dll_memset
add esp, 0xc
push 0
push 0x400000
push 0x10130538
push 0x400000
call edi
mov esi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
push eax
call esi
xor eax, eax
lea ebx, [ebx]
mov cl, byte [eax + 0x10130538]
sub cl, 0x10
xor cl, 0x77
mov byte [eax + 0x10130538], cl
add eax, ebx
cmp eax, 0x400000
jb 0x10007ba0
push 0xa0
push 0
push 0x10130498
call sub.MSVCR100.dll_memset
add esp, 0xc
push 0
push 0xa0
push 0x10130498
push 0x100053f0
call edi
push eax
call esi
xor eax, eax
jmp 0x10007bf0
mov dl, byte [eax + 0x10130498]
sub dl, 0x10
xor dl, 0x77
mov byte [eax + 0x10130498], dl
add eax, ebx
cmp eax, 0xa0
jb 0x10007bf0
push 0x7c
push 0
push 0x10130418
call sub.MSVCR100.dll_memset
add esp, 0xc
push 0
push 0x7c
push 0x10130418
push fcn.10004e40
call edi
push eax
call esi
xor eax, eax
mov cl, byte [eax + 0x10130418]
sub cl, 0x10
xor cl, 0x77
mov byte [eax + 0x10130418], cl
add eax, ebx
cmp eax, 0x7c
jb 0x10007c31
push 0x52f
push 0
push 0x1012fee8
call sub.MSVCR100.dll_memset
add esp, 0xc
push 0
push 0x52f
push 0x1012fee8
push fcn.10004ec0
call edi
push eax
call esi
xor eax, eax
jmp 0x10007c80
mov dl, byte [eax + 0x1012fee8]
sub dl, 0x10
xor dl, 0x77
mov byte [eax + 0x1012fee8], dl
add eax, ebx
cmp eax, 0x52f
jb 0x10007c80
xor eax, eax
lea ecx, [ecx]
mov cl, byte [eax + 0x1012fe7c]
sub cl, 0x10
xor cl, 0x77
mov byte [eax + 0x1012fe7c], cl
add eax, ebx
cmp eax, 0x32
jb 0x10007ca0
xor eax, eax
jmp 0x10007cc0
mov dl, byte [eax + 0x1012feb0]
sub dl, 0x10
xor dl, 0x77
mov byte [eax + 0x1012feb0], dl
add eax, ebx
cmp eax, 0x32
jb 0x10007cc0
mov ecx, dword [esp + 0x158]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x140]
xor ecx, esp
call fcn.10019286
mov esp, ebp
pop ebp
ret