Function at 0x10009f1d
Capabilities:
Encode data using xor
Encrypt data using rc4 ksa

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1cc
mov eax, 0xfb
mov dword [ebp - 0x3c], 0x2088
push ebx
mov dword [ebp - 0x34], eax
xor ebx, ebx
mov dword [ebp - 0x30], eax
mov ecx, ebx
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x14], eax
mov eax, dword [0x1003eb68]
push esi
or eax, 0x6a424d81
mov dword [ebp - 0x38], 0x3b7
push edi
mov dword [ebp - 0x2c], 0xbf7
mov dword [ebp - 0x28], 0x7a2
mov dword [ebp - 0x24], 0x1592
mov dword [ebp - 0x20], 0x2085
mov dword [ebp - 0x18], 0x241e
mov dword [ebp - 4], eax
cmp ecx, 8
je 0x10009f87
inc ecx
cmp ecx, 0xb
jl 0x10009f7c
mov eax, dword [ebp + ecx*4 - 0x3c]
lea edi, [ebp - 0x2c]
push 6
pop ecx
mov esi, str.ChromeExtensionAosStatus
mov dword [ebp - 0x58], 0x6ae2e06f
rep movsd dword es:[edi], dword [esi]
xor eax, 0xfa
mov dword [ebp - 0x54], 0xd41e9dfe
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x50], 0x343d28e4
movsb byte es:[edi], byte [esi]
mov esi, dword [ebp - 4]
mov edi, ebx
mov dword [ebp - 0x4c], 0x35137111
mov dword [ebp - 0x48], 0x8cefa6a6
xor esi, 0xbcec13d
inc edi
cmp byte [edi + str.PAMLastShowExtensionActivationToasterFirefox], bl
jne 0x10009fc9
mov eax, dword [ebp - 0xc]
cmp eax, edi
jae 0x1000a021
mov ecx, esi
mov edx, esi
mov esi, edx
cmp eax, 0x2c1
jne 0x10009ff4
mov esi, ecx
or esi, 0xf15ab065
and esi, 0xc49c2307
mov edx, str.on.laddron
mov ecx, str.on.dnusdim
mov dword [ebp - 4], esi
mov dword [0x1003eb68], esi
call fcn.100043c9
mov eax, dword [ebp - 0xc]
mov ecx, esi
inc eax
mov edx, ecx
mov dword [ebp - 0xc], eax
cmp eax, edi
jb 0x10009fe3
mov dword [ebp - 4], ebx
mov dword [ebp - 8], ebx
imul esi, esi, 0x8862badb
mov al, byte [str.on.dnusdim]
lea edi, [ebp - 0x74]
and esi, 0x443eab0e
mov ecx, ebx
mov dword [ebp - 0xc], esi
mov esi, str.PAMEdgeAlive
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
cmp al, byte [ebp - 0x74]
jne 0x1000a065
test al, al
je 0x1000a065
cmp byte [ebp + ecx - 0x74], bl
je 0x1000a065
mov al, byte [ecx + 0x1003eb8d]
inc ecx
cmp al, byte [ebp + ecx - 0x74]
je 0x1000a04e
movzx eax, byte [ebp + ecx - 0x74]
movzx ecx, byte [ecx + str.on.dnusdim]
sub ecx, eax
cmp ecx, 0x2608
jne 0x1000a08b
mov esi, dword [ebp - 0xc]
sub esi, 0x49d49f1c
call fcn.10004828
jmp 0x1000a0a8
mov eax, dword [ebp - 0xc]
mov ecx, str.handle_licmenubar_expanded
xor eax, 0x8a463427
mov dword [0x1003eb68], eax
call fcn.10005468
mov esi, dword [0x1003eb68]
mov eax, dword [ebp - 8]
add esi, 0xe3155155
mov byte [ebp + eax - 0x1cc], al
inc eax
mov dword [ebp - 8], eax
cmp eax, 0x100
jb 0x1000a02d
mov edi, ebx
xor edx, edx
mov bl, byte [ebp + edi - 0x1cc]
push 0x18
mov eax, edi
xor esi, 0x560e44fb
pop ecx
div ecx
movzx ecx, bl
movzx eax, byte [ebp + edx - 0x2c]
add eax, dword [ebp - 4]
add ecx, eax
movzx ecx, cl
mov dword [ebp - 4], ecx
mov al, byte [ebp + ecx - 0x1cc]
mov byte [ebp + edi - 0x1cc], al
inc edi
mov byte [ebp + ecx - 0x1cc], bl
cmp edi, 0x100
jb 0x1000a0c9
xor ebx, ebx
imul esi, esi, 0x2969ffd8
mov dword [ebp - 8], ebx
mov edi, ebx
lea eax, [ebx + 1]
and esi, 0x45d73488
movzx ebx, al
mov eax, dword [ebp - 8]
mov cl, byte [ebp + ebx - 0x1cc]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [ebp - 8], eax
mov al, byte [ebp + eax - 0x1cc]
mov byte [ebp + ebx - 0x1cc], al
mov eax, dword [ebp - 8]
mov byte [ebp + eax - 0x1cc], cl
movzx eax, byte [ebp + ebx - 0x1cc]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x1cc]
xor al, byte [ebp + edi - 0x58]
mov byte [ebp + edi - 0x8c], al
inc edi
cmp edi, 0x14
jb 0x1000a11d
xor ebx, ebx
mov edx, str.on.dnusdim
mov ecx, str.existential
mov byte [ebp - 0x78], bl
call fcn.10004ecb
mov edi, ebx
call fcn.100052fe
and esi, 0xb07d3903
inc edi
cmp byte [edi + str.PAMLastShowExtensionActivationToasterFirefox], bl
jne 0x1000a191
mov eax, dword [ebp - 0x10]
cmp eax, edi
jae 0x1000a1ca
mov ecx, esi
cmp eax, 0x1059
jne 0x1000a1bd
mov esi, ecx
xor esi, 0x9ac475ab
add esi, 0xcd6a0606
inc eax
mov ecx, esi
cmp eax, edi
jb 0x1000a1ae
mov ecx, 0x400
mov dword [ebp - 0x44], 0x78a
mov eax, ebx
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x38], 0x1fbf
mov dword [ebp - 0x34], 0x198a
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x2c], 0x102f
mov dword [ebp - 0x28], 0x60a
mov dword [ebp - 0x24], 0x1f86
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x1c], 0x1e63
mov dword [ebp - 0x18], 0xc8e
mov dword [ebp - 0x14], 0x21a4
cmp eax, 2
je 0x1000a227
inc eax
cmp eax, 0xd
jl 0x1000a21c
mov eax, dword [ebp + eax*4 - 0x44]
mov dword [ebp - 0x60], eax
mov eax, ebx
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x34], 0x1088
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x28], 0x12ae
mov dword [ebp - 0x24], 0x1285
mov dword [ebp - 0x20], 0x1ccc
mov dword [ebp - 0x1c], 0x1a4
mov dword [ebp - 0x18], 0x3a0
mov dword [ebp - 0x14], 0x91f
cmp eax, 2
je 0x1000a275
inc eax
cmp eax, 0xa
jl 0x1000a26a
mov eax, dword [ebp + eax*4 - 0x38]
mov dword [ebp - 0x64], eax
mov eax, 0x800
mov dword [ebp - 0x3c], 0xc02
mov dword [ebp - 0x38], 0x1682
mov dword [ebp - 0x34], 0xdd0
mov dword [ebp - 0x30], 0x709
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x28], 0x18f3
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], 0x1fd
mov dword [ebp - 0x1c], 0x1bf8
mov dword [ebp - 0x18], 0x1549
mov dword [ebp - 0x14], 0x1608
call fcn.10005880
mov edi, ebx
cmp byte [str.on.dnusdim], bl
je 0x1000a30f
call fcn.10005d87
or esi, 0xe765867c
inc edi
cmp byte [edi + str.on.dnusdim], bl
jne 0x1000a2d5
cmp edi, 0xa20
jne 0x1000a30f
mov eax, str.handle_licmenubar_expanded
and esi, 0xd307859b
push eax
push str.existential
mov edx, eax
mov ecx, esi
call fcn.10004106
pop ecx
pop ecx
jmp 0x1000a323
mov eax, str.on.laddron
add esi, 0x2b19681c
mov edx, eax
mov ecx, eax
call fcn.100043c9
call fcn.10004828
mov edi, ebx
call fcn.10003d14
and esi, 0x4b6759c8
inc edi
cmp byte [edi + str.on.laddron], bl
jne 0x1000a32a
mov eax, esi
lea ecx, [esi + 0x6244bc8c]
or eax, 0xd88b0a
cmp edi, 0x10e2
mov edi, ebx
cmovne ecx, eax
cmp edi, 6
je 0x1000a361
inc edi
cmp edi, 0xb
jl 0x1000a356
mov eax, dword [ebp + edi*4 - 0x3c]
mov edx, ebx
mov dword [ebp - 0x10], eax
imul ecx, ecx, 0x8d6ececf
inc edx
cmp byte [edx + str.Zaarmenian], bl
jne 0x1000a36a
mov esi, dword [ebp - 0x10]
mov dword [0x1003eb68], ecx
cmp esi, edx
jae 0x1000a3b9
mov eax, ecx
mov edi, ecx
mov ecx, eax
cmp esi, 0x12d5
jne 0x1000a3a6
mov ecx, edi
or ecx, 0xf3f98466
push ecx
push ecx
call fcn.10004af5
add esp, 8
or ecx, 0xf083c830
inc esi
mov eax, ecx
cmp esi, edx
jb 0x1000a388
mov dword [0x1003eb68], ecx
mov ecx, str.existential
call fcn.10005468
push 8
pop ecx
mov esi, str.geniussports.com
mov dword [ebp - 4], ebx
lea edi, [ebp - 0x34]
mov eax, ebx
rep movsd dword es:[edi], dword [esi]
push 0x68
pop edx
movsw word es:[edi], word [esi]
cmp dx, word [ebp - 0x34]
jne 0x1000a403
mov ecx, ebx
test dx, dx
je 0x1000a400
cmp word [ebp + ecx - 0x34], bx
je 0x1000a400
inc eax
lea ecx, [eax + eax]
movzx edx, word [ecx + str.handle_licmenubar_expanded]
cmp dx, word [ebp + ecx - 0x34]
je 0x1000a3e2
mov dword [ebp - 4], eax
call fcn.10005880
mov ecx, dword [ebp - 4]
movzx eax, byte [ebp + ecx*2 - 0x34]
movzx ecx, byte [ecx*2 + str.handle_licmenubar_expanded]
sub ecx, eax
cmp ecx, 0xdd1
jne 0x1000a433
call fcn.10004828
imul ecx, dword [0x1003eb68], 0xb4ec7bf5
jmp 0x1000a43f
mov ecx, dword [0x1003eb68]
or ecx, 0xa5b17888
mov dword [ebp - 0xc], ecx
call fcn.10003f58
push 8
pop ecx
mov esi, str.PlaceholderBrandPersistentStorage
lea edi, [ebp - 0x34]
rep movsd dword es:[edi], dword [esi]
mov eax, ebx
mov dword [ebp - 8], eax
movsw word es:[edi], word [esi]
cmp byte [ebp - 0x34], 0x50
jne 0x1000a490
mov cl, 0x50
test cl, cl
je 0x1000a490
cmp byte [ebp + eax - 0x34], bl
je 0x1000a490
push str.handle_licmenubar_expanded
mov ecx, str.existential
call fcn.10005ac3
mov eax, dword [ebp - 8]
inc eax
pop ecx
mov dword [ebp - 8], eax
mov cl, byte [eax + str.PAMLastShowExtensionActivationToasterFirefox]
cmp cl, byte [ebp + eax - 0x34]
je 0x1000a463
mov edx, str.PAMLastShowExtensionActivationToasterFirefox
mov ecx, str.Zaarmenian
call fcn.100043c9
mov ecx, dword [ebp - 8]
movzx eax, byte [ebp + ecx - 0x34]
movzx ecx, byte [ecx + str.PAMLastShowExtensionActivationToasterFirefox]
sub ecx, eax
cmp ecx, 0x1475
jne 0x1000a4c1
imul eax, dword [ebp - 0xc], 0x76ca311c
jmp 0x1000a4ce
call fcn.10005d87
mov eax, dword [ebp - 0xc]
and eax, 0xe8c9aafd
xor eax, 0x76daed35
mov dword [ebp - 0x40], 0x204b
push 0x6b
pop ecx
mov dword [0x1003eb68], eax
mov eax, ebx
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x3c], 0x14f6
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x34], 0x23d0
mov dword [ebp - 0x30], 0x24b0
mov dword [ebp - 0x2c], 0x1fc
mov dword [ebp - 0x28], 0x800
mov dword [ebp - 0x24], 0x9a0
mov dword [ebp - 0x20], 0x2654
mov dword [ebp - 0x1c], 0x2519
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x14], ecx
test eax, eax
je 0x1000a532
inc eax
cmp eax, 0xd
jl 0x1000a528
mov edi, dword [ebp + eax*4 - 0x44]
lea edx, [ebp - 0x8c]
lea eax, [ebp - 0xcc]
mov dword [ebp - 0xcc], 0x40
xor edi, ecx
mov ecx, dword [ebp - 0x5c]
push eax
call fcn.10019e4c
call eax
mov eax, dword [ebp - 0x60]
cdq
push edx
push eax
push dword [ebp - 0xc0]
push dword [ebp - 0xc4]
call fcn.1002bc80
mov esi, eax
mov ecx, edx
mov eax, dword [ebp - 0x64]
cdq
push edx
push eax
push ecx
push esi
call fcn.1002bc80
mov esi, eax
mov ecx, edx
mov eax, dword [ebp - 0x10]
cdq
cmp ecx, edx
ja 0x1000a6c5
jb 0x1000a59b
cmp esi, eax
jae 0x1000a6c5
mov esi, dword [0x1003eb68]
mov eax, 0xf5
mov edi, ebx
mov dword [ebp - 0x44], 0x11bc
mov dword [ebp - 0x40], 0x10c9
mov ebx, str.PAMLastShowExtensionActivationToasterFirefox
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], 0x140d
mov dword [ebp - 0x34], 0x158b
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], 0x365
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], 0x1cc9
mov dword [ebp - 0x20], 0x1bf4
mov dword [ebp - 0x1c], 0x161d
mov dword [ebp - 0x18], 0x1889
mov dword [ebp - 0x14], 0x17fe
mov eax, str.handle_licmenubar_expanded
push eax
mov ecx, eax
call fcn.10005ac3
imul esi, esi, 0xb0ad5903
inc ebx
pop ecx
cmp byte [ebx], 0
jne 0x1000a5fc
xor ebx, ebx
cmp edi, 2
je 0x1000a623
inc edi
cmp edi, 0xd
jl 0x1000a618
mov eax, dword [ebp + edi*4 - 0x44]
or esi, 0xb628380d
xor eax, 0xf4
mov dword [0x1003eb68], esi
mov edx, str.on.dnusdim
mov dword [ebp - 0x10], eax
mov ecx, 0x1003eb78
call fcn.100043c9
cmp byte [str.on.dnusdim], bl
je 0x1000a677
mov edx, str.Zaarmenian
mov ecx, str.existential
call fcn.10004ecb
add esi, 0xfac567b2
inc ebx
cmp byte [ebx + str.on.dnusdim], 0
jne 0x1000a652
mov dword [0x1003eb68], esi
call fcn.10005880
mov edi, dword [ebp - 0x10]
cmp edi, ebx
jae 0x1000a6c0
mov edx, 0x1003eb78
mov ecx, str.existential
call fcn.10004ecb
mov ecx, esi
lea eax, [esi - 0x5c4a12ee]
cmp edi, 0x267f
push ecx
cmovne eax, ecx
imul esi, eax, 0x25ff7c25
push ecx
mov ecx, esi
call fcn.10004af5
add esp, 8
inc edi
cmp edi, ebx
jb 0x1000a683
mov dword [0x1003eb68], esi
mov eax, dword [ebp - 0x10]
jmp 0x1000a6c7
mov eax, edi
pop edi
pop esi
pop ebx
leave
ret