Function at 0x1006d840
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push esi
sub esp, 0x10
mov eax, dword [0x100d1280]
sub eax, dword [0x100d1284]
xor eax, 0xba69c458
or eax, 0xd7446845
xor eax, 0x32fd3a85
or eax, 0x68409b3c
xor eax, 0xb3b7f6db
mov ecx, 0x64931bfe
xor edx, edx
div ecx
sub eax, 0x47138c83
imul eax, eax, 0xe9c55367
and eax, 0xc57e9c95
imul eax, eax, 0x679ad14b
imul eax, eax, 0xa1122c11
or eax, 0x1ebb1236
or eax, 0x5fd518b0
imul eax, eax, 0x14ebb7ab
mov ecx, 0xa3a25f35
xor edx, edx
div ecx
sub eax, 0xebe59752
sub eax, 0x648b1deb
mov ecx, 0xc7f7e9af
xor edx, edx
div ecx
mov ecx, 0x17632ae0
xor edx, edx
div ecx
xor eax, 0xec732fad
add eax, 0x88096e2e
or eax, 0x1ee1fd47
and eax, 0x2fd609d5
and eax, 0xbf02ec79
add eax, 0x19d0affd
sub eax, 0x78adc734
or eax, 0x83e1e69e
add eax, 0xb19ce065
imul eax, eax, 0x35f6207f
mov ecx, 0x926e1e53
xor edx, edx
div ecx
and eax, 0x97d308a8
mov ecx, 0xfd8a2a22
xor edx, edx
div ecx
add eax, 0xb9dc3597
or eax, 0x3cdb0a50
and eax, 0x6aa0de72
add eax, 0xe10e3100
xor eax, 0x52dddf00
mov ecx, 0x715166b6
xor edx, edx
div ecx
or eax, 0xfe21a3f4
add eax, 0x44b62326
sub eax, 0x17835f17
mov ecx, 0xc51bed53
xor edx, edx
div ecx
imul eax, eax, 0xc944e195
add eax, 0x23153c45
or eax, 0xebc9bef4
and eax, 0x57a584d3
mov ecx, 0x822f378a
xor edx, edx
div ecx
sub eax, 0xd308f408
add eax, 0xd1b1da7c
mov ecx, 0x9718291f
xor edx, edx
div ecx
mov ecx, 0xe996009c
xor edx, edx
div ecx
or eax, 0x1e651dd
mov ecx, 0x79f7f4ac
xor edx, edx
div ecx
xor eax, 0x74cac160
xor eax, 0xaffc66ce
imul eax, eax, 0xd0371568
sub eax, 0xfdf5ea55
or eax, 0x39a112e3
sub eax, 0x5ec43644
xor eax, 0x4925c782
sub eax, 0xca6ca5dd
imul eax, eax, 0x536ddd6e
or eax, 0x949c52a0
imul eax, eax, 0xb33e7197
and eax, 0xec18063f
mov ecx, 0xbb5c079
xor edx, edx
div ecx
add eax, 0x37fb46cc
add eax, 0xf40ebdd9
xor eax, 0xdadb48fe
sub eax, 0xdf2c6155
or eax, 0xd1263788
imul eax, eax, 0x231b599e
cmp eax, 0xfdc8422d
jae 0x1006e1d9
mov eax, 0x604482
mov ecx, dword [0x100d24a8]
mov esi, dword [0x100d24e0]
mov edx, dword fs:[0x2c]
mov edx, dword [edx + esi*4]
mov edx, dword [edx + 4]
cmp ecx, edx
setg cl
mov byte [ebp - 5], cl
cmp eax, 0xfb660762
ja 0x1006da03
mov al, byte [ebp - 5]
test al, 1
jne 0x1006da47
jmp 0x1006de00
lea eax, [0x100d24a8]
mov dword [esp], eax
call fcn.1007917d
cmp dword [0x100d24a8], 0xffffffff
jne 0x1006de00
mov eax, dword [0x100d1290]
imul eax, dword [0x100d1294]
or eax, 0x5b7b5fa2
and eax, 0x10e2f445
imul eax, eax, 0x1c39d097
or eax, 0x80ed8b7d
sub eax, 0xe7fa000e
add eax, 0xe589e635
mov ecx, 0xd999306e
xor edx, edx
div ecx
xor eax, 0xb406b105
or eax, 0xcac94035
or eax, 0x24e271b8
sub eax, 0xbef67fba
or eax, 0x3eebae03
and eax, 0x41e0fba4
imul eax, eax, 0x8ce3ad57
sub eax, 0x58cd846c
sub eax, 0xa5169a3a
imul eax, eax, 0x5251075
add eax, 0xd94af052
or eax, 0x8b1584
imul eax, eax, 0x7ee2ee0f
imul eax, eax, 0x1a5532da
mov ecx, 0x2247199e
xor edx, edx
div ecx
xor eax, 0x2cb3d5d1
mov ecx, 0xe598ca10
xor edx, edx
div ecx
and eax, 0x59d85a09
mov ecx, 0x6ec774c
xor edx, edx
div ecx
or eax, 0x9684a4e6
imul eax, eax, 0x5a954b3
or eax, 0x7a1651c2
or eax, 0xdfe961cb
xor eax, 0x9657ba34
or eax, 0xa15f0db9
or eax, 0xedfe86ef
and eax, 0xd9b6aa32
and eax, 0xc209ae00
sub eax, 0x1c2e68ef
xor eax, 0x7722be25
add eax, 0x81d6eabe
or eax, 0xea32673e
sub eax, 0xf041f826
imul eax, eax, 0x41feb398
add eax, 0xc73d5b95
mov ecx, 0x5965b8b7
xor edx, edx
div ecx
sub eax, 0x6e0956b2
xor eax, 0xed725d69
imul eax, eax, 0xfd919640
or eax, 0xb101cc98
or eax, 0x8eb4519
add eax, 0x122d96c4
and eax, 0x983d586a
imul eax, eax, 0xf1f6267a
sub eax, 0xf6fbc75b
xor eax, 0xb68d5242
sub eax, 0xb464366a
mov ecx, 0x48be097d
xor edx, edx
div ecx
mov ecx, 0xa7982b03
xor edx, edx
div ecx
xor eax, 0x630276b9
sub eax, 0x31696f08
or eax, 0x32a15684
or eax, 0x98da6879
add eax, 0x63360416
and eax, 0xe6edeaaa
xor eax, 0xa227d887
add eax, 0xe8233a7e
xor eax, 0xa468c740
add eax, 0x67593462
sub eax, 0xb607c341
mov ecx, 0xb8079698
xor edx, edx
div ecx
mov ecx, 0x46d29911
xor edx, edx
div ecx
sub eax, 0xb082f24f
sub eax, 0x52d93339
and eax, 0xf0dff0ed
cmp eax, 0x972231de
jbe 0x1006e1de
mov eax, dword [0x100d1298]
imul eax, dword [0x100d129c]
or eax, 0x9c8a9ca5
xor eax, 0xa651f048
sub eax, 0xbf8e9b78
or eax, 0xe712a9e4
xor eax, 0xd19f5ba8
mov ecx, 0xddbfda64
xor edx, edx
div ecx
imul eax, eax, 0xf3736a7c
sub eax, 0x91862c3
mov ecx, 0xcd2b1325
xor edx, edx
div ecx
mov ecx, 0xf2bda563
xor edx, edx
div ecx
or eax, 0xf377c5c9
add eax, 0xcbc43a57
xor eax, 0xbafdbaa9
or eax, 0x1cceffdf
and eax, 0x4b840320
mov ecx, 0xa598acbe
xor edx, edx
div ecx
add eax, 0xe6389294
imul eax, eax, 0x782e8f09
imul eax, eax, 0x65f37c4f
mov ecx, 0x61d6eb9
xor edx, edx
div ecx
mov ecx, 0x30ad7fc0
xor edx, edx
div ecx
sub eax, 0x1800cc4b
add eax, 0x2d799f9f
mov ecx, 0xb6bd52e6
xor edx, edx
div ecx
sub eax, 0x32defdc1
add eax, 0x626c0eab
imul eax, eax, 0xc379d2f7
and eax, 0x7eedd585
sub eax, 0xf5343d17
add eax, 0x1729506e
mov ecx, 0x6cb37394
xor edx, edx
div ecx
mov ecx, 0x845dedc5
xor edx, edx
div ecx
xor eax, 0x421cc373
imul eax, eax, 0x2379c705
xor eax, 0x26b70bf6
sub eax, 0x98942556
or eax, 0x932ed6f3
add eax, 0xe4162cca
xor eax, 0xa10aea24
and eax, 0x29cf6f68
or eax, 0x8331767c
imul eax, eax, 0xbbc30485
sub eax, 0x134b0522
xor eax, 0xd2f6b1c0
or eax, 0x4a7f93ba
and eax, 0xeab117d1
mov ecx, 0x626bc167
xor edx, edx
div ecx
sub eax, 0x7d37d1a7
imul eax, eax, 0xa5bd0a14
or eax, 0xcfe85cfc
or eax, 0x58961e60
or eax, 0x7e8c0480
imul eax, eax, 0x47770bd7
and eax, 0x58cee945
imul eax, eax, 0x633a63cc
xor eax, 0xe696a9c9
and eax, 0x86655b2d
xor eax, 0x7bdd23f7
mov ecx, 0x33c3b6a8
xor edx, edx
div ecx
or eax, 0xf1badabb
add eax, 0x6f904fa
sub eax, 0x1c24fcbd
and eax, 0x5f188330
add eax, 0x21fd291d
add eax, 0xd186c9cf
or eax, 0x3692e5b2
add eax, 0xa8f077ce
or eax, 0xdacf12e2
xor eax, 0xcb3dba00
xor eax, 0x41b54345
add eax, 0x3d1972bc
sub eax, 0xc1c695bf
mov dword [ebp - 0xc], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
lea ecx, [0x100d249c]
mov dword [esp], eax
call fcn.1006e250
sub esp, 4
lea eax, [0x1006ec00]
mov dword [esp], eax
call fcn.100793f2
lea eax, [0x100d24a8]
mov dword [esp], eax
call fcn.100791f7
mov eax, dword [ebp - 0xc]
cmp eax, 0x27048234
jbe 0x1006e1de
jmp 0x1006de00
mov eax, dword [0x100d24c8]
mov edx, dword [0x100d24e0]
mov ecx, dword fs:[0x2c]
mov ecx, dword [ecx + edx*4]
mov ecx, dword [ecx + 4]
cmp eax, ecx
jle 0x1006e1cd
lea eax, [0x100d24c8]
mov dword [esp], eax
call fcn.1007917d
cmp dword [0x100d24c8], 0xffffffff
jne 0x1006e1cd
mov eax, dword [0x100d12a0]
xor edx, edx
div dword [0x100d12a4]
sub eax, 0xa11bf2bf
and eax, 0xd95f4c3d
sub eax, 0xaa3955b8
or eax, 0x5f041a23
or eax, 0xd9e8b405
and eax, 0x1f82ff22
and eax, 0x7714202a
and eax, 0x7c55ecaa
mov ecx, 0x41ed2104
xor edx, edx
div ecx
xor eax, 0x2113f525
add eax, 0x5b359fac
add eax, 0xbafb08a6
imul eax, eax, 0xad82c7c9
sub eax, 0x7cb7046b
or eax, 0x310d0a6a
add eax, 0xb7ddfc74
xor eax, 0xa6756b2a
and eax, 0xc22e2838
sub eax, 0x330a1449
or eax, 0x63857f67
or eax, 0x55e37dd6
imul eax, eax, 0x747ed04f
and eax, 0x9650dd92
and eax, 0xde0911d5
sub eax, 0x6386e4cc
mov ecx, 0x178fc96b
xor edx, edx
div ecx
xor eax, 0x52e96f2a
and eax, 0x7242eee8
sub eax, 0xab2be44a
sub eax, 0xa30b5bcb
or eax, 0xc26f8c8f
or eax, 0xb62fe79d
add eax, 0xd437aaec
add eax, 0x17ff2d9b
mov ecx, 0xb19ac652
xor edx, edx
div ecx
add eax, 0x8bbf0627
imul eax, eax, 0x4ef3198e
and eax, 0x31d02a63
and eax, 0x1fd720b5
sub eax, 0xf5617a8f
or eax, 0xbf979727
mov ecx, 0xb6f145a1
xor edx, edx
div ecx
imul eax, eax, 0x2f691c8f
xor eax, 0xe1092d42
imul eax, eax, 0x186b1a5a
imul eax, eax, 0xb09c3e6f
add eax, 0x68ec771d
imul eax, eax, 0x59f62e86
xor eax, 0x449102e9
imul eax, eax, 0x877a33d3
or eax, 0x1d5e0747
imul eax, eax, 0x20c5c96f
or eax, 0x4bc68b7a
or eax, 0x2fb8891d
sub eax, 0xed917a22
sub eax, 0x25894b6d
imul eax, eax, 0x72a6a2c1
xor eax, 0xff450fd4
mov ecx, 0x8e2d1492
xor edx, edx
div ecx
add eax, 0x13363f16
imul eax, eax, 0x9a1079a9
xor eax, 0xc3e3a524
add eax, 0x42b93d81
add eax, 0x782b4d1a
and eax, 0x5ac70721
and eax, 0x6ae4b7ef
add eax, 0x83f79f67
sub eax, 0xddc68b20
sub eax, 0x9453fbd1
add eax, 0x5abfdd52
xor eax, 0x9e807fcb
mov ecx, 0xf5f3f021
xor edx, edx
div ecx
cmp eax, 0x94e059a1
je 0x1006e216
mov eax, dword [0x100d12a8]
imul eax, dword [0x100d12ac]
mov ecx, 0xc1dd7d32
xor edx, edx
div ecx
sub eax, 0x6565b202
sub eax, 0x1e863677
imul eax, eax, 0xb70d9078
xor eax, 0x45d5949
add eax, 0xf1b9dbb6
xor eax, 0xe4016549
and eax, 0x3d9251f7
sub eax, 0xed6068da
and eax, 0xcd5cb389
or eax, 0xf7d64924
or eax, 0xd13b7103
sub eax, 0x47589d73
or eax, 0x5f8131f8
xor eax, 0x3f213c13
mov ecx, 0x76000fc5
xor edx, edx
div ecx
or eax, 0xe23186a9
or eax, 0x59fe431a
xor eax, 0x7982c0
add eax, 0x958339ab
mov ecx, 0xa1f23073
xor edx, edx
div ecx
add eax, 0x101ce1bc
imul eax, eax, 0x2bfcc20c
imul eax, eax, 0xdcf0fb3c
xor eax, 0xb97a095b
imul eax, eax, 0x5ab2576f
mov ecx, 0x8526ce85
xor edx, edx
div ecx
xor eax, 0x1c0e2d76
sub eax, 0x44a7c5c
sub eax, 0xf900b63f
xor eax, 0xe5099fcf
and eax, 0xd93e2880
imul eax, eax, 0x4b05a934
or eax, 0x6896c02d
imul eax, eax, 0x86178c72
sub eax, 0x3cb44a3a
mov ecx, 0xc27f2474
xor edx, edx
div ecx
sub eax, 0x2d406c9
xor eax, 0x67577b71
or eax, 0x7366381f
and eax, 0x39bd6f6b
and eax, 0x394e6ecb
imul eax, eax, 0x9564f441
mov ecx, 0x8297cda7
xor edx, edx
div ecx
add eax, 0x1ecae805
or eax, 0x81c07af
add eax, 0xc42dcf3
mov ecx, 0x5f1510d
xor edx, edx
div ecx
mov ecx, 0x2f809c49
xor edx, edx
div ecx
and eax, 0xe4389381
or eax, 0x72a92710
and eax, 0xa8240772
xor eax, 0xa8bd7dee
and eax, 0x528f9b1b
or eax, 0x1e0c9d8b
imul eax, eax, 0x10c66b4b
or eax, 0xd5b8344e
xor eax, 0x80af3e4e
add eax, 0xbf8fbe9b
imul eax, eax, 0x25d10ad5
xor eax, 0x7894aa8c
and eax, 0x50e84049
imul eax, eax, 0xc6dbe727
imul eax, eax, 0x15aab15b
sub eax, 0xcfa521b9
add eax, 0xd9f4a1b0
xor eax, 0xd10358b2
or eax, 0xcbf46696
xor eax, 0xce3b32a8
sub eax, 0x133364da
xor eax, 0x9af7c1c1
mov ecx, 0x62517b53
xor edx, edx
div ecx
mov dword [ebp - 0x10], eax
lea ecx, [0x100d24ac]
lea eax, [0x100d249c]
mov dword [esp], eax
call fcn.1006efc0
sub esp, 4
lea eax, [0x1006f030]
mov dword [esp], eax
call fcn.100793f2
lea eax, [0x100d24c8]
mov dword [esp], eax
call fcn.100791f7
mov eax, dword [ebp - 0x10]
cmp eax, 0x8adb7a22
ja 0x1006dfe1
jmp 0x1006e1cd
lea eax, [0x100d24ac]
add esp, 0x10
pop esi
pop ebp
ret
jmp 0x1006da03
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
lea ecx, [0x100d249c]
mov dword [esp], eax
call fcn.1006e250
sub esp, 4
lea eax, [0x1006ec00]
mov dword [esp], eax
call fcn.100793f2
lea eax, [0x100d24a8]
mov dword [esp], eax
call fcn.100791f7
jmp 0x1006dc0e
lea ecx, [0x100d24ac]
lea eax, [0x100d249c]
mov dword [esp], eax
call fcn.1006efc0
sub esp, 4
lea eax, [0x1006f030]
mov dword [esp], eax
call fcn.100793f2
lea eax, [0x100d24c8]
mov dword [esp], eax
call fcn.100791f7
jmp 0x1006dfe1