Function at 0x1000b133
Capabilities:
Encode data using xor
Encrypt data using rc4 ksa

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x368
push ebx
push esi
push edi
call fcn.10004828
mov edi, dword [0x1003ed18]
xor ebx, ebx
and edi, 0xde88f7a4
mov esi, ebx
mov dword [ebp - 4], edi
call fcn.10005059
inc esi
cmp byte [esi + str.ofni.siht_skorg], bl
jne 0x1000b157
mov edx, str.Invalid_bit_depth_for_paletted_image
mov ecx, str..expandable
call fcn.10004c6d
cmp dword [ebp - 4], esi
jae 0x1000b193
imul eax, dword [0x1003ed18], 0x3c8e4702
mov dword [ebp - 4], eax
sub esi, dword [ebp - 4]
call fcn.10005880
sub esi, 1
jne 0x1000b189
push 0x24
pop ecx
mov eax, ebx
mov dword [ebp - 0x34], 0x25c5
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x2c], 0x9e6
mov dword [ebp - 0x28], 0x26f5
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x1c], 0x1a4e
mov dword [ebp - 0x18], 0x25ea
cmp eax, 5
je 0x1000b1cf
inc eax
cmp eax, 8
jl 0x1000b1c4
mov eax, dword [ebp + eax*4 - 0x34]
lea edi, [ebp - 0x30]
push 6
pop ecx
mov esi, str.SSL_versions_not_supported
mov dword [ebp - 0x14], 0x77857aa4
rep movsd dword es:[edi], dword [esi]
xor eax, 0x25
mov dword [ebp - 0x10], 0xdf4ab9c7
mov dword [ebp - 0x48], eax
mov eax, ebx
mov dword [ebp - 0xc], 0xe70e476b
movsw word es:[edi], word [esi]
mov dword [ebp - 8], 0x7e57360f
movsb byte es:[edi], byte [esi]
mov edi, ebx
mov byte [ebp + eax - 0x19c], al
inc eax
cmp eax, 0x100
jb 0x1000b209
mov esi, ebx
xor edx, edx
mov bl, byte [ebp + esi - 0x19c]
push 0x1a
mov eax, esi
pop ecx
div ecx
movzx ecx, bl
movzx eax, byte [ebp + edx - 0x30]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [ebp + edi - 0x19c]
mov byte [ebp + esi - 0x19c], al
inc esi
mov byte [ebp + edi - 0x19c], bl
cmp esi, 0x100
jb 0x1000b21a
xor ebx, ebx
mov edi, ebx
mov esi, ebx
lea eax, [edi + 1]
movzx edi, al
mov cl, byte [ebp + edi - 0x19c]
movzx edx, cl
lea eax, [edx + ebx]
movzx ebx, al
mov al, byte [ebp + ebx - 0x19c]
mov byte [ebp + edi - 0x19c], al
mov byte [ebp + ebx - 0x19c], cl
movzx eax, byte [ebp + edi - 0x19c]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x19c]
xor al, byte [ebp + esi - 0x14]
mov byte [ebp + esi - 0x9c], al
inc esi
cmp esi, 0x10
jb 0x1000b25d
mov esi, dword [ebp - 4]
xor ecx, ecx
xor ebx, ebx
mov dword [ebp - 0x24], 0x9aa
inc ecx
mov byte [ebp - 0x8c], bl
xor esi, 0x6acfdd0f
mov dword [ebp - 0x2c], ecx
mov eax, ebx
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x20], 0xc43
mov dword [ebp - 0x1c], 0x69
mov dword [ebp - 0x18], 0x1336
mov dword [0x1003ed18], esi
cmp eax, ecx
je 0x1000b2f5
inc eax
cmp eax, 6
jl 0x1000b2eb
mov eax, dword [ebp + eax*4 - 0x2c]
mov ecx, str.com.avast.ipm.ClientParameters.AntiTrackLicenseNumber
mov dword [ebp - 4], eax
mov dword [ebp - 0x14], 0xe398d0b7
mov dword [ebp - 0x10], 0xbd7ebbef
mov dword [ebp - 0xc], 0x641f48e9
mov dword [ebp - 8], 0x66335582
call fcn.10004630
lea eax, [esi - 0x38d2deed]
mov esi, str.ofni.siht_skorg
mov dword [str.t_v], eax
call fcn.100056e8
inc esi
cmp byte [esi], bl
jne 0x1000b332
push 8
pop ecx
mov esi, str.cef_v8context_get_current_context
lea edi, [ebp - 0x38]
rep movsd dword es:[edi], dword [esi]
mov eax, ebx
movsw word es:[edi], word [esi]
mov edi, ebx
mov byte [ebp + eax - 0x19c], al
inc eax
cmp eax, 0x100
jb 0x1000b34f
mov esi, ebx
xor edx, edx
mov bl, byte [ebp + esi - 0x19c]
push 0x21
mov eax, esi
pop ecx
div ecx
movzx ecx, bl
movzx eax, byte [ebp + edx - 0x38]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [ebp + edi - 0x19c]
mov byte [ebp + esi - 0x19c], al
inc esi
mov byte [ebp + edi - 0x19c], bl
cmp esi, 0x100
jb 0x1000b360
xor ebx, ebx
mov edi, ebx
mov esi, ebx
lea eax, [edi + 1]
movzx edi, al
mov cl, byte [ebp + edi - 0x19c]
movzx edx, cl
lea eax, [edx + ebx]
movzx ebx, al
mov al, byte [ebp + ebx - 0x19c]
mov byte [ebp + edi - 0x19c], al
mov byte [ebp + ebx - 0x19c], cl
movzx eax, byte [ebp + edi - 0x19c]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x19c]
xor al, byte [ebp + esi - 0x14]
mov byte [ebp + esi - 0x28], al
inc esi
cmp esi, 0x10
jb 0x1000b3a3
xor ebx, ebx
mov dword [ebp - 0x80], 0xfd3
mov byte [ebp - 0x18], bl
mov eax, ebx
mov dword [ebp - 0x7c], 0x1a1b
mov dword [ebp - 0x78], 0x2bb
mov dword [ebp - 0x74], 0x1ded
mov dword [ebp - 0x70], 0x2e0
mov dword [ebp - 0x6c], 0x2703
mov dword [ebp - 0x68], 0xc17
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x60], 0x1da7
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x54], 0x1a88
mov dword [ebp - 0x50], ebx
cmp eax, 0xa
je 0x1000b44d
inc eax
cmp eax, 0xd
jl 0x1000b442
mov ecx, dword [ebp - 0x48]
lea edx, [ebp - 0x9c]
mov esi, dword [ebp + eax*4 - 0x80]
call fcn.10019e4c
call eax
lea ecx, [ebp - 0x368]
mov dword [ebp - 0x368], 0x10010
push ecx
mov ecx, dword [ebp - 4]
lea edx, [ebp - 0x28]
push eax
call fcn.10019e4c
call eax
test eax, eax
je 0x1000b81c
mov eax, ebx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x38], 0x1c54
mov dword [ebp - 0x34], 0x1810
mov dword [ebp - 0x30], 0x198b
mov dword [ebp - 0x2c], 0x1f2e
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x24], 0xde2
mov dword [ebp - 0x20], 0x25a9
mov dword [ebp - 0x1c], 0x1037
mov dword [ebp - 0x18], 0xa00
cmp eax, 5
je 0x1000b4d3
inc eax
cmp eax, 0xa
jl 0x1000b4c8
mov eax, dword [ebp + eax*4 - 0x3c]
lea edi, [ebp - 0x10]
mov esi, str.on.engos
mov dword [ebp - 0x44], eax
mov ecx, ebx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
cmp byte [ebp - 0x10], 0x6f
jne 0x1000b506
mov al, 0x6f
test al, al
je 0x1000b506
cmp byte [ebp + ecx - 0x10], bl
je 0x1000b506
mov al, byte [ecx + 0x10031a21]
inc ecx
cmp al, byte [ebp + ecx - 0x10]
je 0x1000b4ef
movzx eax, byte [ebp + ecx - 0x10]
movzx ecx, byte [ecx + str.ofni.siht_skorg]
mov edi, dword [0x1003ed18]
sub ecx, eax
cmp ecx, 0x192c
ja 0x1000b52a
imul esi, edi, 0x9b7f2843
jmp 0x1000b530
mov esi, dword [str.t_v]
mov ecx, ebx
or esi, 0xe87fafe1
inc ecx
cmp byte [ecx + str.pj.ikarabi.orihsijuf], bl
jne 0x1000b532
mov eax, dword [ebp - 4]
mov dword [ebp - 0x48], ecx
cmp eax, ecx
jae 0x1000b594
mov edi, esi
and edi, 0x451cf6b2
mov dword [0x1003ed18], edi
cmp eax, 0xd69
jne 0x1000b578
push str.No_authentication_method_was_acceptable.
push str.__firewall_reboot_needed
mov edx, str.HPsquare
mov ecx, esi
call fcn.10004106
pop ecx
pop ecx
push str.pj.abihc.ihasa
mov ecx, str.O365BusinessRetail.EmailAddress
call fcn.10005ac3
mov eax, dword [ebp - 4]
inc eax
pop ecx
mov dword [ebp - 4], eax
cmp eax, dword [ebp - 0x48]
jb 0x1000b559
push 0x7f
pop ecx
mov eax, ebx
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x3c], 0x1052
mov dword [ebp - 0x38], 0x2e8
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x2c], 0x1753
mov dword [ebp - 0x28], 0xab0
mov dword [ebp - 0x24], 0x1971
mov dword [ebp - 0x20], 0x89
mov dword [ebp - 0x1c], 0x50d
mov dword [ebp - 0x18], 0x19db
cmp eax, 4
je 0x1000b5e5
inc eax
cmp eax, 0xb
jl 0x1000b5da
mov eax, dword [ebp + eax*4 - 0x40]
xor eax, ecx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x48], eax
mov ecx, ebx
lea eax, [esi - 0x7b313cd6]
mov dword [ebp - 0x30], 0xbf1
mov dword [0x1003ed68], eax
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x28], 0x14d4
mov dword [ebp - 0x24], 0x8c0
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], 0x55e
mov dword [ebp - 0x18], 0x20b2
cmp ecx, 5
je 0x1000b632
inc ecx
cmp ecx, 8
jl 0x1000b627
mov eax, dword [ebp + ecx*4 - 0x34]
push 0x15
pop ecx
mov dword [ebp - 4], eax
mov eax, ebx
mov dword [ebp - 0x3c], 0x2467
mov dword [ebp - 0x38], 0x1518
mov dword [ebp - 0x34], 0x8d4
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x28], 0x1ec
mov dword [ebp - 0x24], 0x20d5
mov dword [ebp - 0x20], 0x1399
mov dword [ebp - 0x1c], 0x2021
mov dword [ebp - 0x18], 0x65b
cmp eax, 3
je 0x1000b687
inc eax
cmp eax, 0xa
jl 0x1000b67c
mov edx, dword [ebp + eax*4 - 0x3c]
mov eax, ebx
xor edx, ecx
mov dword [ebp - 0x3c], 0xec0
mov dword [ebp - 0x38], 0xe5b
mov dword [ebp - 0x34], 0x24c3
mov dword [ebp - 0x30], 0x534
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x28], 0x135f
mov dword [ebp - 0x24], 0x1f39
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], 0x17dc
mov dword [ebp - 0x18], 0x131
cmp eax, 7
je 0x1000b6d8
inc eax
cmp eax, 0xa
jl 0x1000b6cd
mov eax, dword [ebp + eax*4 - 0x3c]
mov esi, 0xa9
mov dword [ebp - 0x4c], eax
mov eax, ebx
mov dword [ebp - 0x40], 0x18ea
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x38], 0x1e60
mov dword [ebp - 0x34], 0x234a
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x2c], 0x16a9
mov dword [ebp - 0x28], 0x2606
mov dword [ebp - 0x24], 0x657
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x1c], 0x1a3f
mov dword [ebp - 0x18], esi
cmp eax, 8
je 0x1000b72e
inc eax
cmp eax, 0xb
jl 0x1000b723
mov ecx, dword [ebp + eax*4 - 0x40]
mov eax, ebx
xor ecx, esi
mov dword [ebp - 0x84], 0x324
xor esi, esi
mov dword [ebp - 0x80], 0xe96
inc esi
mov dword [ebp - 0x7c], 0x2074
mov dword [ebp - 0x88], esi
mov dword [ebp - 0x78], 0x116f
mov dword [ebp - 0x74], 0xa2d
mov dword [ebp - 0x70], 0xc30
mov dword [ebp - 0x6c], esi
mov dword [ebp - 0x68], 0x22a1
mov dword [ebp - 0x64], 0x10d5
mov dword [ebp - 0x60], esi
mov dword [ebp - 0x5c], esi
mov dword [ebp - 0x58], 0x7d2
mov dword [ebp - 0x54], esi
mov dword [ebp - 0x50], 0x198a
cmp eax, 0xd
je 0x1000b79f
inc eax
cmp eax, 0xf
jl 0x1000b794
mov eax, dword [ebp + eax*4 - 0x88]
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x28], 0x382
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], 0x11c3
mov dword [ebp - 0x18], 0x262
test ebx, ebx
je 0x1000b7ce
inc ebx
cmp ebx, 6
jl 0x1000b7c4
mov esi, dword [ebp - 0x44]
or edi, 0xf0a8f6ba
mov dword [str.t_v], edi
cmp dword [ebp - 0x364], esi
jne 0x1000b838
mov esi, dword [ebp - 0x48]
cmp dword [ebp - 0x360], esi
jne 0x1000b838
mov esi, dword [ebp - 4]
cmp dword [ebp - 0x35c], esi
jne 0x1000b838
cmp dword [ebp - 0x358], edx
jne 0x1000b838
mov edx, dword [ebp - 0x4c]
cmp dword [ebp - 0x354], edx
jne 0x1000b838
cmp dword [ebp - 0x350], ecx
jne 0x1000b838
mov eax, dword [ebp + ebx*4 - 0x2c]
jmp 0x1000b838
imul ecx, dword [0x1003ed68], 0xbe86b7cb
mov eax, esi
or dword [0x1003ed18], 0xde7e86ab
mov dword [str.t_v], ecx
pop edi
pop esi
pop ebx
leave
ret