Function at 0x10044b77
Capabilities:
Authenticate hmac
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x18c
mov eax, dword [0x1026e004]
xor eax, esp
mov dword [esp + 0x188], eax
push ebx
push esi
push edi
mov edi, ecx
call fcn.100440f0
test eax, eax
js 0x10045666
mov dword [edi + 4], 0x1000
mov dword [esp + 0x10], 0xb1b8
mov eax, dword [esp + 0x10]
push 0x47
pop ecx
xor eax, ecx
mov word [esp + 0x14], ax
mov eax, dword [esp + 0x10]
inc eax
xor eax, 0x6c
mov word [esp + 0x16], ax
mov eax, dword [esp + 0x10]
add eax, 2
push 0x6f
pop ecx
xor eax, ecx
mov word [esp + 0x18], ax
mov eax, dword [esp + 0x10]
add eax, 3
xor eax, 0x62
mov word [esp + 0x1a], ax
mov eax, dword [esp + 0x10]
add eax, 4
xor eax, 0x61
mov word [esp + 0x1c], ax
mov eax, dword [esp + 0x10]
add eax, 5
xor eax, 0x6c
mov word [esp + 0x1e], ax
mov eax, dword [esp + 0x10]
add eax, 6
xor eax, 0x5c
mov word [esp + 0x20], ax
mov eax, dword [esp + 0x10]
add eax, 7
xor eax, 0x7b
mov word [esp + 0x22], ax
mov eax, dword [esp + 0x10]
add eax, 8
xor eax, 0x32
mov word [esp + 0x24], ax
mov eax, dword [esp + 0x10]
add eax, 9
push 0x36
pop ecx
xor eax, ecx
mov word [esp + 0x26], ax
mov eax, dword [esp + 0x10]
add eax, 0xa
xor eax, 0x31
mov word [esp + 0x28], ax
mov eax, dword [esp + 0x10]
add eax, 0xb
xor eax, 0x42
mov word [esp + 0x2a], ax
mov eax, dword [esp + 0x10]
add eax, 0xc
push 0x37
pop edx
xor eax, edx
mov word [esp + 0x2c], ax
mov eax, dword [esp + 0x10]
add eax, 0xd
push 0x33
pop ecx
xor eax, ecx
mov word [esp + 0x2e], ax
mov eax, dword [esp + 0x10]
add eax, 0xe
push 0x34
pop esi
xor eax, esi
mov word [esp + 0x30], ax
mov eax, dword [esp + 0x10]
add eax, 0xf
xor eax, 0x32
mov word [esp + 0x32], ax
mov eax, dword [esp + 0x10]
push 0x2d
add eax, 0x10
pop ebx
xor eax, ebx
mov word [esp + 0x34], ax
mov eax, dword [esp + 0x10]
add eax, 0x11
xor eax, 0x31
mov word [esp + 0x36], ax
mov eax, dword [esp + 0x10]
add eax, 0x12
xor eax, esi
mov word [esp + 0x38], ax
mov eax, dword [esp + 0x10]
add eax, 0x13
push 0x44
pop ecx
xor eax, ecx
mov word [esp + 0x3a], ax
mov eax, dword [esp + 0x10]
add eax, 0x14
xor eax, 0x32
mov word [esp + 0x3c], ax
mov eax, dword [esp + 0x10]
add eax, 0x15
xor eax, ebx
mov word [esp + 0x3e], ax
mov eax, dword [esp + 0x10]
add eax, 0x16
xor eax, esi
mov word [esp + 0x40], ax
mov eax, dword [esp + 0x10]
add eax, 0x17
xor eax, 0x32
mov word [esp + 0x42], ax
mov eax, dword [esp + 0x10]
add eax, 0x18
push 0x30
pop ecx
xor eax, ecx
mov word [esp + 0x44], ax
mov eax, dword [esp + 0x10]
add eax, 0x19
xor eax, 0x32
mov word [esp + 0x46], ax
mov eax, dword [esp + 0x10]
add eax, 0x1a
xor eax, ebx
mov word [esp + 0x48], ax
mov eax, dword [esp + 0x10]
add eax, 0x1b
xor eax, 0x38
mov word [esp + 0x4a], ax
mov eax, dword [esp + 0x10]
add eax, 0x1c
xor eax, esi
mov word [esp + 0x4c], ax
mov eax, dword [esp + 0x10]
add eax, 0x1d
xor eax, 0x35
mov word [esp + 0x4e], ax
mov eax, dword [esp + 0x10]
add eax, 0x1e
xor eax, 0x33
mov word [esp + 0x50], ax
mov eax, dword [esp + 0x10]
add eax, 0x1f
xor eax, ebx
mov word [esp + 0x52], ax
mov eax, dword [esp + 0x10]
add eax, 0x20
xor eax, 0x36
mov word [esp + 0x54], ax
mov eax, dword [esp + 0x10]
add eax, 0x21
xor eax, 0x45
mov word [esp + 0x56], ax
mov eax, dword [esp + 0x10]
add eax, 0x22
xor eax, ecx
mov word [esp + 0x58], ax
mov eax, dword [esp + 0x10]
add eax, 0x23
xor eax, 0x44
mov word [esp + 0x5a], ax
mov eax, dword [esp + 0x10]
add eax, 0x24
xor eax, 0x45
mov word [esp + 0x5c], ax
mov eax, dword [esp + 0x10]
add eax, 0x25
xor eax, ecx
mov word [esp + 0x5e], ax
mov eax, dword [esp + 0x10]
add eax, 0x26
xor eax, 0x32
mov word [esp + 0x60], ax
mov eax, dword [esp + 0x10]
add eax, 0x27
xor eax, edx
mov word [esp + 0x62], ax
mov eax, dword [esp + 0x10]
add eax, 0x28
xor eax, esi
mov word [esp + 0x64], ax
mov eax, dword [esp + 0x10]
add eax, 0x29
xor eax, 0x45
mov word [esp + 0x66], ax
mov eax, dword [esp + 0x10]
add eax, 0x2a
xor eax, 0x41
mov word [esp + 0x68], ax
mov eax, dword [esp + 0x10]
add eax, 0x2b
xor eax, edx
mov word [esp + 0x6a], ax
mov eax, dword [esp + 0x10]
add eax, 0x2c
xor eax, 0x7d
mov word [esp + 0x6c], ax
xor eax, eax
xor esi, esi
mov word [esp + 0x6e], ax
mov ax, word [esp + 0x14]
mov edx, esi
mov ax, word [esp + edx*2 + 0x14]
mov ecx, dword [esp + 0x10]
add ecx, edx
movzx eax, ax
xor ecx, eax
mov word [esp + edx*2 + 0x14], cx
inc edx
cmp edx, ebx
jb 0x10044e67
mov ebx, dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
xor eax, eax
mov word [esp + 0x6e], ax
call ebx
push eax
lea eax, [esp + 0x18]
push eax
push 0x100
push dword [edi + 0x10]
call fcn.10007b06
mov dword [esp + 0x80], 0x5515
add esp, 0x10
mov eax, dword [esp + 0x70]
xor eax, 0x47
mov word [esp + 0x74], ax
mov eax, dword [esp + 0x70]
inc eax
xor eax, 0x6c
mov word [esp + 0x76], ax
mov eax, dword [esp + 0x70]
add eax, 2
xor eax, 0x6f
mov word [esp + 0x78], ax
mov eax, dword [esp + 0x70]
add eax, 3
xor eax, 0x62
mov word [esp + 0x7a], ax
mov eax, dword [esp + 0x70]
add eax, 4
xor eax, 0x61
mov word [esp + 0x7c], ax
mov eax, dword [esp + 0x70]
add eax, 5
xor eax, 0x6c
mov word [esp + 0x7e], ax
mov eax, dword [esp + 0x70]
add eax, 6
xor eax, 0x5c
mov word [esp + 0x80], ax
mov eax, dword [esp + 0x70]
add eax, 7
xor eax, 0x7b
mov word [esp + 0x82], ax
mov eax, dword [esp + 0x70]
add eax, 8
xor eax, 0x33
mov word [esp + 0x84], ax
mov eax, dword [esp + 0x70]
add eax, 9
xor eax, 0x35
mov word [esp + 0x86], ax
mov eax, dword [esp + 0x70]
add eax, 0xa
push 0x44
pop ecx
xor eax, ecx
mov word [esp + 0x88], ax
mov eax, dword [esp + 0x70]
add eax, 0xb
xor eax, 0x30
mov word [esp + 0x8a], ax
mov eax, dword [esp + 0x70]
add eax, 0xc
push 0x39
pop edx
xor eax, edx
mov word [esp + 0x8c], ax
mov eax, dword [esp + 0x70]
add eax, 0xd
xor eax, 0x36
mov word [esp + 0x8e], ax
mov eax, dword [esp + 0x70]
add eax, 0xe
xor eax, ecx
mov word [esp + 0x90], ax
mov eax, dword [esp + 0x70]
push 0x34
add eax, 0xf
pop edx
xor eax, edx
mov word [esp + 0x92], ax
mov eax, dword [esp + 0x70]
add eax, 0x10
push 0x2d
pop ecx
xor eax, ecx
mov word [esp + 0x94], ax
mov eax, dword [esp + 0x70]
add eax, 0x11
xor eax, 0x44
mov word [esp + 0x96], ax
mov eax, dword [esp + 0x70]
add eax, 0x12
xor eax, 0x43
mov word [esp + 0x98], ax
mov eax, dword [esp + 0x70]
add eax, 0x13
xor eax, 0x41
mov word [esp + 0x9a], ax
mov eax, dword [esp + 0x70]
add eax, 0x14
xor eax, 0x35
mov word [esp + 0x9c], ax
mov eax, dword [esp + 0x70]
add eax, 0x15
xor eax, ecx
mov word [esp + 0x9e], ax
mov eax, dword [esp + 0x70]
add eax, 0x16
xor eax, edx
mov word [esp + 0xa0], ax
mov eax, dword [esp + 0x70]
add eax, 0x17
push 0x37
pop edx
xor eax, edx
mov word [esp + 0xa2], ax
mov eax, dword [esp + 0x70]
add eax, 0x18
xor eax, 0x38
mov word [esp + 0xa4], ax
mov eax, dword [esp + 0x70]
add eax, 0x19
xor eax, 0x32
mov word [esp + 0xa6], ax
mov eax, dword [esp + 0x70]
add eax, 0x1a
xor eax, ecx
mov word [esp + 0xa8], ax
mov eax, dword [esp + 0x70]
add eax, 0x1b
xor eax, 0x38
mov word [esp + 0xaa], ax
mov eax, dword [esp + 0x70]
add eax, 0x1c
xor eax, 0x44
mov word [esp + 0xac], ax
mov eax, dword [esp + 0x70]
add eax, 0x1d
xor eax, 0x38
mov word [esp + 0xae], ax
mov eax, dword [esp + 0x70]
add eax, 0x1e
xor eax, 0x38
mov word [esp + 0xb0], ax
mov eax, dword [esp + 0x70]
add eax, 0x1f
xor eax, ecx
mov word [esp + 0xb2], ax
mov eax, dword [esp + 0x70]
add eax, 0x20
push 0x45
pop ecx
xor eax, ecx
mov word [esp + 0xb4], ax
mov eax, dword [esp + 0x70]
add eax, 0x21
xor eax, 0x32
mov word [esp + 0xb6], ax
mov eax, dword [esp + 0x70]
add eax, 0x22
xor eax, 0x41
mov word [esp + 0xb8], ax
mov eax, dword [esp + 0x70]
add eax, 0x23
xor eax, ecx
mov word [esp + 0xba], ax
mov eax, dword [esp + 0x70]
add eax, 0x24
xor eax, 0x44
mov word [esp + 0xbc], ax
mov eax, dword [esp + 0x70]
add eax, 0x25
xor eax, 0x32
mov word [esp + 0xbe], ax
mov eax, dword [esp + 0x70]
add eax, 0x26
xor eax, 0x41
mov word [esp + 0xc0], ax
mov eax, dword [esp + 0x70]
add eax, 0x27
push 0x46
pop ecx
xor eax, ecx
mov word [esp + 0xc2], ax
mov eax, dword [esp + 0x70]
add eax, 0x28
xor eax, 0x41
mov word [esp + 0xc4], ax
mov eax, dword [esp + 0x70]
add eax, 0x29
xor eax, edx
mov edx, esi
mov word [esp + 0xc6], ax
mov eax, dword [esp + 0x70]
add eax, 0x2a
xor eax, 0x36
mov word [esp + 0xc8], ax
mov eax, dword [esp + 0x70]
add eax, 0x2b
xor eax, 0x45
mov word [esp + 0xca], ax
mov eax, dword [esp + 0x70]
add eax, 0x2c
xor eax, 0x7d
mov word [esp + 0xcc], ax
xor eax, eax
mov word [esp + 0xce], ax
mov ax, word [esp + 0x74]
mov ax, word [esp + edx*2 + 0x74]
mov ecx, dword [esp + 0x70]
add ecx, edx
movzx eax, ax
xor ecx, eax
mov word [esp + edx*2 + 0x74], cx
inc edx
cmp edx, 0x2d
jb 0x100451dc
xor eax, eax
mov word [esp + 0xce], ax
call ebx
push eax
lea eax, [esp + 0x78]
push eax
push 0x100
push dword [edi]
call fcn.10007b06
mov dword [esp + 0xe0], 0x7af7
mov eax, 0x7ab0
mov word [esp + 0xe4], ax
add esp, 0x10
lea ecx, [eax - 0x15]
add eax, 0xffffffe8
mov word [esp + 0xd6], cx
lea edx, [ecx + 0x16]
mov word [esp + 0xd8], ax
lea eax, [ecx - 6]
mov word [esp + 0xda], ax
inc eax
mov word [esp + 0xdc], ax
lea eax, [ecx + 0x10]
mov word [esp + 0xde], cx
mov word [esp + 0xe0], ax
add eax, 0xffffffe1
mov word [esp + 0xe2], ax
lea eax, [ecx + 0x34]
mov word [esp + 0xe4], dx
add ecx, 0x18
mov word [esp + 0xe6], ax
mov word [esp + 0xe8], cx
lea ecx, [edx + 0x13]
mov word [esp + 0xea], dx
add edx, 0x29
mov word [esp + 0xec], cx
add ecx, 0xfffffff0
mov word [esp + 0xee], ax
add eax, 0xfffffff1
mov word [esp + 0xf0], ax
mov eax, 0x7ab6
mov word [esp + 0xf2], cx
mov word [esp + 0xf4], dx
mov word [esp + 0xf6], cx
mov word [esp + 0xf8], ax
mov word [esp + 0xfa], cx
lea ecx, [eax + 0xf]
mov word [esp + 0xfc], cx
add eax, 0xd
mov word [esp + 0xfe], dx
mov word [esp + 0x100], ax
mov word [esp + 0x102], ax
lea eax, [ecx - 4]
mov word [esp + 0x104], ax
add eax, 0xfffffff4
mov word [esp + 0x106], cx
mov word [esp + 0x108], dx
lea edx, [ecx + 9]
mov word [esp + 0x10a], dx
add ecx, 0xfffffffd
mov word [esp + 0x10c], ax
lea eax, [edx - 0xa]
mov word [esp + 0x10e], cx
mov word [esp + 0x110], ax
add eax, 0x16
mov word [esp + 0x112], ax
lea eax, [edx - 0xd]
mov word [esp + 0x114], ax
mov word [esp + 0x116], ax
add eax, 6
mov word [esp + 0x118], ax
lea eax, [edx - 0x1b]
mov word [esp + 0x11a], cx
lea ecx, [edx - 0xd]
mov word [esp + 0x11c], ax
add eax, 2
mov word [esp + 0x11e], dx
mov word [esp + 0x120], ax
mov word [esp + 0x122], cx
dec ecx
mov word [esp + 0x124], cx
mov word [esp + 0x126], ax
lea eax, [edx - 8]
mov word [esp + 0x128], ax
add eax, 0xffffffeb
mov word [esp + 0x12a], ax
lea eax, [edx - 0x44]
mov word [esp + 0x12c], ax
mov edx, esi
xor eax, eax
mov word [esp + 0x12e], ax
mov ax, word [esp + 0xd4]
mov ax, word [esp + edx*2 + 0xd4]
movzx ecx, ax
movzx eax, word [esp + 0xd0]
xor ecx, eax
mov word [esp + edx*2 + 0xd4], cx
inc edx
cmp edx, 0x2d
jb 0x100453ff
xor eax, eax
mov word [esp + 0x12e], ax
call ebx
push eax
lea eax, [esp + 0xd8]
push eax
push 0x100
push dword [edi + 0xc]
call fcn.10007b06
add esp, 0x10
push 0x4a
pop eax
push 0x6f
pop ecx
mov word [esp + 0x130], ax
push 0x72
pop eax
push 0x65
mov word [esp + 0x136], cx
mov word [esp + 0x138], ax
pop eax
mov word [esp + 0x136], ax
push 0x64
pop eax
mov word [esp + 0x138], ax
push 0x5f
pop eax
push 0x7e
mov word [esp + 0x13e], cx
mov word [esp + 0x140], ax
pop eax
mov word [esp + 0x13e], ax
push 0x48
pop eax
mov word [esp + 0x140], ax
push 0x47
pop eax
push 0x37
pop edx
mov word [esp + 0x142], ax
push 0x35
pop eax
push 0x46
mov word [esp + 0x148], dx
mov word [esp + 0x14a], ax
pop eax
mov word [esp + 0x148], ax
push 0x36
pop eax
mov word [esp + 0x14a], ax
push 0x3a
pop eax
push 0x34
mov word [esp + 0x150], ax
pop ecx
push 0x30
mov word [esp + 0x152], cx
pop ecx
push 0x49
mov word [esp + 0x154], cx
mov word [esp + 0x156], dx
pop edx
push 0x38
mov word [esp + 0x158], dx
mov word [esp + 0x15a], ax
pop eax
mov word [esp + 0x158], ax
push 0x37
pop eax
mov word [esp + 0x15a], cx
mov word [esp + 0x15c], ax
push 0x33
pop eax
mov word [esp + 0x15e], ax
push 0x47
pop eax
mov word [esp + 0x160], ax
push 0x39
pop eax
mov word [esp + 0x162], ax
mov word [esp + 0x164], cx
push 0x3b
pop ecx
push 0x44
pop eax
push 0x3c
mov word [esp + 0x16a], cx
mov word [esp + 0x16c], ax
pop eax
mov word [esp + 0x16a], ax
push 0x46
pop eax
mov word [esp + 0x16c], ax
push 0x30
pop eax
mov word [esp + 0x16e], ax
push 0x45
pop eax
mov word [esp + 0x170], cx
mov word [esp + 0x172], ax
push 0x33
pop eax
mov word [esp + 0x174], ax
push 0x48
pop eax
mov word [esp + 0x176], ax
push 0x35
pop eax
mov word [esp + 0x178], ax
push 0x46
pop eax
mov word [esp + 0x17a], ax
push 0x36
mov word [esp + 0x180], dx
pop eax
mov word [esp + 0x17e], ax
push 0x47
pop eax
mov word [esp + 0x180], ax
mov word [esp + 0x182], cx
push 0x34
pop eax
mov word [esp + 0x184], ax
add eax, 0x4c
mov word [esp + 0x186], dx
mov word [esp + 0x188], ax
xor eax, eax
mov word [esp + 0x18a], ax
mov ax, word [esp + 0x130]
mov ax, word [esp + esi*2 + 0x130]
movzx eax, ax
add eax, 0xfffffffd
mov word [esp + esi*2 + 0x130], ax
inc esi
cmp esi, 0x2d
jb 0x1004562d
call ebx
push eax
lea eax, [esp + 0x134]
push eax
push 0x100
push dword [edi + 8]
call fcn.10007b06
add esp, 0x10
xor eax, eax
mov ecx, dword [esp + 0x194]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.100e04a9
mov esp, ebp
pop ebp
ret