Function at 0x10015b7c
Capabilities:
Encrypt data using des
Resolve function by parsing pe exports

Disassembly:
push ebx
push ebp
push esi
push edi
mov edx, dword [esp + 0x18]
movzx eax, byte [edx]
movzx ecx, byte [edx + 1]
shl eax, 8
or eax, ecx
movzx ecx, byte [edx + 2]
shl eax, 8
or eax, ecx
movzx ecx, byte [edx + 3]
shl eax, 8
or eax, ecx
movzx ecx, byte [edx + 4]
movzx esi, byte [edx + 5]
shl ecx, 8
or ecx, esi
movzx esi, byte [edx + 6]
movzx edx, byte [edx + 7]
shl ecx, 8
or ecx, esi
shl ecx, 8
or ecx, edx
mov edx, eax
shr edx, 4
xor edx, ecx
and edx, 0xf0f0f0f
xor ecx, edx
shl edx, 4
xor eax, edx
mov edx, eax
shr edx, 0x10
xor edx, ecx
and edx, 0xffff
xor ecx, edx
shl edx, 0x10
xor eax, edx
mov edx, ecx
shr edx, 2
xor edx, eax
and edx, 0x33333333
xor eax, edx
shl edx, 2
xor ecx, edx
mov edx, ecx
shr edx, 8
xor edx, eax
and edx, 0xff00ff
xor eax, edx
shl edx, 8
xor edx, ecx
rol edx, 1
mov esi, edx
xor esi, eax
and esi, 0xaaaaaaaa
xor edx, esi
xor esi, eax
mov eax, dword [esp + 0x14]
rol esi, 1
mov edi, edx
ror edi, 4
xor edi, dword [eax]
push 0x3f
mov ebx, edi
shr ebx, 0x18
pop ecx
and ebx, ecx
mov ebx, dword [ebx*4 + 0x1004df48]
mov ebp, edi
shr ebp, 0x10
and ebp, ecx
xor ebx, dword [ebp*4 + 0x1004e148]
mov ebp, edi
shr ebp, 8
and ebp, ecx
xor ebx, dword [ebp*4 + 0x1004e348]
and edi, ecx
xor ebx, dword [edi*4 + 0x1004e548]
xor esi, ebx
mov edi, dword [eax + 4]
xor edi, edx
mov ebx, edi
shr ebx, 0x18
and ebx, ecx
mov ebx, dword [ebx*4 + 0x1004e048]
mov ebp, edi
shr ebp, 0x10
and ebp, ecx
xor ebx, dword [ebp*4 + 0x1004e248]
mov ebp, edi
shr ebp, 8
and ebp, ecx
xor ebx, dword [ebp*4 + 0x1004e448]
and edi, ecx
xor ebx, dword [edi*4 + 0x1004e648]
xor esi, ebx
mov edi, esi
ror edi, 4
xor edi, dword [eax + 8]
mov ebx, edi
shr ebx, 0x18
and ebx, ecx
mov ebx, dword [ebx*4 + 0x1004df48]
mov ebp, edi
shr ebp, 0x10
and ebp, ecx
xor ebx, dword [ebp*4 + 0x1004e148]
mov ebp, edi
shr ebp, 8
and ebp, ecx
xor ebx, dword [ebp*4 + 0x1004e348]
and edi, ecx
xor ebx, dword [edi*4 + 0x1004e548]
mov edi, dword [eax + 0xc]
xor edx, ebx
xor edi, esi
mov ebx, edi
shr ebx, 0x18
and ebx, ecx
mov ebx, dword [ebx*4 + 0x1004e048]
mov ebp, edi
shr ebp, 0x10
and ebp, ecx
xor ebx, dword [ebp*4 + 0x1004e248]
mov ebp, edi
shr ebp, 8
and ebp, ecx
xor ebx, dword [ebp*4 + 0x1004e448]
and edi, ecx
xor ebx, dword [edi*4 + 0x1004e648]
xor edx, ebx
mov edi, edx
ror edi, 4
xor edi, dword [eax + 0x10]
mov ebx, edi
shr ebx, 0x18
and ebx, ecx
mov ebx, dword [ebx*4 + 0x1004df48]
mov ebp, edi
shr ebp, 0x10
and ebp, ecx
xor ebx, dword [ebp*4 + 0x1004e148]
mov ebp, edi
shr ebp, 8
and ebp, ecx
xor ebx, dword [ebp*4 + 0x1004e348]
and edi, ecx
xor ebx, dword [edi*4 + 0x1004e548]
mov edi, dword [eax + 0x14]
xor esi, ebx
xor edi, edx
mov ebx, edi
shr ebx, 0x18
mov ebp, edi
shr ebp, 0x10
and ebx, ecx
mov ebx, dword [ebx*4 + 0x1004e048]
and ebp, ecx
xor ebx, dword [ebp*4 + 0x1004e248]
mov ebp, edi
shr ebp, 8
and ebp, ecx
xor ebx, dword [ebp*4 + 0x1004e448]
and edi, ecx
xor ebx, dword [edi*4 + 0x1004e648]
xor esi, ebx
mov edi, esi
ror edi, 4
xor edi, dword [eax + 0x18]
mov ebx, edi
shr ebx, 0x18
and ebx, ecx
mov ebx, dword [ebx*4 + 0x1004df48]
mov ebp, edi
shr ebp, 0x10
and ebp, ecx
xor ebx, dword [ebp*4 + 0x1004e148]
mov ebp, edi
shr ebp, 8
and ebp, ecx
xor ebx, dword [ebp*4 + 0x1004e348]
and edi, ecx
xor ebx, dword [edi*4 + 0x1004e548]
mov edi, dword [eax + 0x1c]
xor edx, ebx
xor edi, esi
mov ebx, edi
shr ebx, 0x18
and ebx, ecx
mov ebx, dword [ebx*4 + 0x1004e048]
mov ebp, edi
shr ebp, 0x10
and ebp, ecx
xor ebx, dword [ebp*4 + 0x1004e248]
mov ebp, edi
shr ebp, 8
and ebp, ecx
xor ebx, dword [ebp*4 + 0x1004e448]
and edi, ecx
xor ebx, dword [edi*4 + 0x1004e648]
xor edx, ebx
mov edi, edx
ror edi, 4
xor edi, dword [eax + 0x20]
mov ebx, edi
shr ebx, 0x18
and ebx, ecx
mov ebx, dword [ebx*4 + 0x1004df48]
mov ebp, edi
shr ebp, 0x10
and ebp, ecx
xor ebx, dword [ebp*4 + 0x1004e148]
mov ebp, edi
shr ebp, 8
and ebp, ecx
xor ebx, dword [ebp*4 + 0x1004e348]
and edi, ecx
xor ebx, dword [edi*4 + 0x1004e548]
mov edi, dword [eax + 0x24]
xor esi, ebx
xor edi, edx
mov ebx, edi
shr ebx, 0x18
and ebx, ecx
mov ebx, dword [ebx*4 + 0x1004e048]
mov ebp, edi
shr ebp, 0x10
and ebp, ecx
xor ebx, dword [ebp*4 + 0x1004e248]
mov ebp, edi
shr ebp, 8
and ebp, ecx
xor ebx, dword [ebp*4 + 0x1004e448]
and edi, ecx
xor ebx, dword [edi*4 + 0x1004e648]
xor esi, ebx
mov edi, esi
ror edi, 4
xor edi, dword [eax + 0x28]
mov ebx, edi
shr ebx, 0x18
and ebx, ecx
mov ebx, dword [ebx*4 + 0x1004df48]
mov ebp, edi
shr ebp, 0x10
and ebp, ecx
xor ebx, dword [ebp*4 + 0x1004e148]
mov ebp, edi
shr ebp, 8
and ebp, ecx
xor ebx, dword [ebp*4 + 0x1004e348]
and edi, ecx
xor ebx, dword [edi*4 + 0x1004e548]
mov edi, dword [eax + 0x2c]
xor edx, ebx
xor edi, esi
mov ebx, edi
shr ebx, 0x18
and ebx, ecx
mov ebx, dword [ebx*4 + 0x1004e048]
mov ebp, edi
shr ebp, 0x10
and ebp, ecx
xor ebx, dword [ebp*4 + 0x1004e248]
mov ebp, edi
shr ebp, 8
and ebp, ecx
xor ebx, dword [ebp*4 + 0x1004e448]
and edi, ecx
xor ebx, dword [edi*4 + 0x1004e648]
xor edx, ebx
mov edi, edx
ror edi, 4
xor edi, dword [eax + 0x30]
mov ebx, edi
shr ebx, 0x18
and ebx, ecx
mov ebx, dword [ebx*4 + 0x1004df48]
mov ebp, edi
shr ebp, 0x10
and ebp, ecx
xor ebx, dword [ebp*4 + 0x1004e148]
mov ebp, edi
shr ebp, 8
and ebp, ecx
xor ebx, dword [ebp*4 + 0x1004e348]
and edi, ecx
xor ebx, dword [edi*4 + 0x1004e548]
mov edi, dword [eax + 0x34]
xor esi, ebx
xor edi, edx
mov ebx, edi
shr ebx, 0x18
and ebx, ecx
mov ebx, dword [ebx*4 + 0x1004e048]
mov ebp, edi
shr ebp, 0x10
and ebp, ecx
xor ebx, dword [ebp*4 + 0x1004e248]
mov ebp, edi
shr ebp, 8
and ebp, ecx
xor ebx, dword [ebp*4 + 0x1004e448]
and edi, ecx
xor ebx, dword [edi*4 + 0x1004e648]
xor esi, ebx
mov edi, esi
ror edi, 4
xor edi, dword [eax + 0x38]
mov ebx, edi
shr ebx, 0x18
and ebx, ecx
mov ebx, dword [ebx*4 + 0x1004df48]
mov ebp, edi
shr ebp, 0x10
and ebp, ecx
xor ebx, dword [ebp*4 + 0x1004e148]
mov ebp, edi
shr ebp, 8
and ebp, ecx
xor ebx, dword [ebp*4 + 0x1004e348]
and edi, ecx
xor ebx, dword [edi*4 + 0x1004e548]
mov edi, dword [eax + 0x3c]
xor edx, ebx
xor edi, esi
mov ebx, edi
shr ebx, 0x18
and ebx, ecx
mov ebx, dword [ebx*4 + 0x1004e048]
mov ebp, edi
shr ebp, 0x10
and ebp, ecx
xor ebx, dword [ebp*4 + 0x1004e248]
mov ebp, edi
shr ebp, 8
and ebp, ecx
xor ebx, dword [ebp*4 + 0x1004e448]
and edi, ecx
xor ebx, dword [edi*4 + 0x1004e648]
xor edx, ebx
mov edi, edx
ror edi, 4
xor edi, dword [eax + 0x40]
mov ebx, edi
shr ebx, 0x18
and ebx, ecx
mov ebx, dword [ebx*4 + 0x1004df48]
mov ebp, edi
shr ebp, 0x10
and ebp, ecx
xor ebx, dword [ebp*4 + 0x1004e148]
mov ebp, edi
shr ebp, 8
and ebp, ecx
xor ebx, dword [ebp*4 + 0x1004e348]
and edi, ecx
xor ebx, dword [edi*4 + 0x1004e548]
mov edi, dword [eax + 0x44]
xor esi, ebx
xor edi, edx
mov ebx, edi
shr ebx, 0x18
and ebx, ecx
mov ebx, dword [ebx*4 + 0x1004e048]
mov ebp, edi
shr ebp, 0x10
and ebp, ecx
xor ebx, dword [ebp*4 + 0x1004e248]
mov ebp, edi
shr ebp, 8
and ebp, ecx
xor ebx, dword [ebp*4 + 0x1004e448]
and edi, ecx
xor ebx, dword [edi*4 + 0x1004e648]
xor esi, ebx
mov edi, esi
ror edi, 4
xor edi, dword [eax + 0x48]
mov ebx, edi
shr ebx, 0x18
and ebx, ecx
mov ebx, dword [ebx*4 + 0x1004df48]
mov ebp, edi
shr ebp, 0x10
and ebp, ecx
xor ebx, dword [ebp*4 + 0x1004e148]
mov ebp, edi
shr ebp, 8
and ebp, ecx
xor ebx, dword [ebp*4 + 0x1004e348]
and edi, ecx
xor ebx, dword [edi*4 + 0x1004e548]
mov edi, dword [eax + 0x4c]
xor edx, ebx
xor edi, esi
mov ebx, edi
shr ebx, 0x18
mov ebp, edi
and ebx, ecx
mov ebx, dword [ebx*4 + 0x1004e048]
shr ebp, 0x10
and ebp, ecx
xor ebx, dword [ebp*4 + 0x1004e248]
mov ebp, edi
shr ebp, 8
and ebp, ecx
xor ebx, dword [ebp*4 + 0x1004e448]
and edi, ecx
xor ebx, dword [edi*4 + 0x1004e648]
xor edx, ebx
mov edi, edx
ror edi, 4
xor edi, dword [eax + 0x50]
mov ebx, edi
shr ebx, 0x18
and ebx, ecx
mov ebx, dword [ebx*4 + 0x1004df48]
mov ebp, edi
shr ebp, 0x10
and ebp, ecx
xor ebx, dword [ebp*4 + 0x1004e148]
mov ebp, edi
shr ebp, 8
and ebp, ecx
xor ebx, dword [ebp*4 + 0x1004e348]
and edi, ecx
xor ebx, dword [edi*4 + 0x1004e548]
mov edi, dword [eax + 0x54]
xor esi, ebx
xor edi, edx
mov ebx, edi
shr ebx, 0x18
and ebx, ecx
mov ebx, dword [ebx*4 + 0x1004e048]
mov ebp, edi
shr ebp, 0x10
and ebp, ecx
xor ebx, dword [ebp*4 + 0x1004e248]
mov ebp, edi
shr ebp, 8
and ebp, ecx
xor ebx, dword [ebp*4 + 0x1004e448]
and edi, ecx
xor ebx, dword [edi*4 + 0x1004e648]
xor esi, ebx
mov edi, esi
ror edi, 4
xor edi, dword [eax + 0x58]
mov ebx, edi
shr ebx, 0x18
and ebx, ecx
mov ebx, dword [ebx*4 + 0x1004df48]
mov ebp, edi
shr ebp, 0x10
and ebp, ecx
xor ebx, dword [ebp*4 + 0x1004e148]
mov ebp, edi
shr ebp, 8
and ebp, ecx
xor ebx, dword [ebp*4 + 0x1004e348]
and edi, ecx
xor ebx, dword [edi*4 + 0x1004e548]
mov edi, dword [eax + 0x5c]
xor edx, ebx
xor edi, esi
mov ebx, edi
shr ebx, 0x18
mov ebp, edi
and ebx, ecx
mov ebx, dword [ebx*4 + 0x1004e048]
shr ebp, 0x10
and ebp, ecx
xor ebx, dword [ebp*4 + 0x1004e248]
mov ebp, edi
shr ebp, 8
and ebp, ecx
xor ebx, dword [ebp*4 + 0x1004e448]
and edi, ecx
xor ebx, dword [edi*4 + 0x1004e648]
xor edx, ebx
mov edi, edx
ror edi, 4
xor edi, dword [eax + 0x60]
mov ebx, edi
shr ebx, 0x18
and ebx, ecx
mov ebx, dword [ebx*4 + 0x1004df48]
mov ebp, edi
shr ebp, 0x10
and ebp, ecx
xor ebx, dword [ebp*4 + 0x1004e148]
mov ebp, edi
shr ebp, 8
and ebp, ecx
xor ebx, dword [ebp*4 + 0x1004e348]
and edi, ecx
xor ebx, dword [edi*4 + 0x1004e548]
mov edi, dword [eax + 0x64]
xor esi, ebx
xor edi, edx
mov ebx, edi
shr ebx, 0x18
and ebx, ecx
mov ebx, dword [ebx*4 + 0x1004e048]
mov ebp, edi
shr ebp, 0x10
and ebp, ecx
xor ebx, dword [ebp*4 + 0x1004e248]
mov ebp, edi
shr ebp, 8
and ebp, ecx
xor ebx, dword [ebp*4 + 0x1004e448]
and edi, ecx
xor ebx, dword [edi*4 + 0x1004e648]
xor esi, ebx
mov edi, esi
ror edi, 4
xor edi, dword [eax + 0x68]
mov ebx, edi
shr ebx, 0x18
and ebx, ecx
mov ebx, dword [ebx*4 + 0x1004df48]
mov ebp, edi
shr ebp, 0x10
and ebp, ecx
xor ebx, dword [ebp*4 + 0x1004e148]
mov ebp, edi
shr ebp, 8
and ebp, ecx
xor ebx, dword [ebp*4 + 0x1004e348]
and edi, ecx
xor ebx, dword [edi*4 + 0x1004e548]
mov edi, dword [eax + 0x6c]
xor edx, ebx
xor edi, esi
mov ebx, edi
shr ebx, 0x18
and ebx, ecx
mov ebx, dword [ebx*4 + 0x1004e048]
mov ebp, edi
shr ebp, 0x10
and ebp, ecx
xor ebx, dword [ebp*4 + 0x1004e248]
mov ebp, edi
shr ebp, 8
and ebp, ecx
xor ebx, dword [ebp*4 + 0x1004e448]
and edi, ecx
xor ebx, dword [edi*4 + 0x1004e648]
xor edx, ebx
mov edi, edx
ror edi, 4
xor edi, dword [eax + 0x70]
mov ebx, edi
shr ebx, 0x18
and ebx, ecx
mov ebx, dword [ebx*4 + 0x1004df48]
mov ebp, edi
shr ebp, 0x10
and ebp, ecx
xor ebx, dword [ebp*4 + 0x1004e148]
mov ebp, edi
shr ebp, 8
and ebp, ecx
xor ebx, dword [ebp*4 + 0x1004e348]
and edi, ecx
xor ebx, dword [edi*4 + 0x1004e548]
mov edi, dword [eax + 0x74]
xor esi, ebx
xor edi, edx
mov ebx, edi
shr ebx, 0x18
and ebx, ecx
mov ebx, dword [ebx*4 + 0x1004e048]
mov ebp, edi
shr ebp, 0x10
and ebp, ecx
xor ebx, dword [ebp*4 + 0x1004e248]
mov ebp, edi
and edi, ecx
shr ebp, 8
and ebp, ecx
xor ebx, dword [ebp*4 + 0x1004e448]
xor ebx, dword [edi*4 + 0x1004e648]
xor esi, ebx
mov edi, esi
ror edi, 4
xor edi, dword [eax + 0x78]
mov eax, dword [eax + 0x7c]
mov ebx, edi
shr ebx, 0x18
and ebx, ecx
mov ebx, dword [ebx*4 + 0x1004df48]
mov ebp, edi
shr ebp, 0x10
and ebp, ecx
xor ebx, dword [ebp*4 + 0x1004e148]
xor eax, esi
mov ebp, edi
and edi, ecx
shr ebp, 8
and ebp, ecx
xor ebx, dword [ebp*4 + 0x1004e348]
mov ebp, eax
xor ebx, dword [edi*4 + 0x1004e548]
mov edi, eax
xor edx, ebx
shr edi, 0x18
and edi, ecx
mov ebx, dword [edi*4 + 0x1004e048]
mov edi, eax
and eax, ecx
shr ebp, 0x10
and ebp, ecx
xor ebx, dword [ebp*4 + 0x1004e248]
shr edi, 8
and edi, ecx
xor ebx, dword [edi*4 + 0x1004e448]
xor ebx, dword [eax*4 + 0x1004e648]
xor ebx, edx
ror ebx, 1
mov ecx, ebx
xor ecx, esi
and ecx, 0xaaaaaaaa
xor ebx, ecx
xor ecx, esi
ror ecx, 1
mov eax, ecx
shr eax, 8
xor eax, ebx
and eax, 0xff00ff
xor ebx, eax
shl eax, 8
xor ecx, eax
mov eax, ecx
shr eax, 2
xor eax, ebx
and eax, 0x33333333
xor ebx, eax
shl eax, 2
xor ecx, eax
mov eax, ebx
shr eax, 0x10
xor eax, ecx
and eax, 0xffff
xor ecx, eax
shl eax, 0x10
xor ebx, eax
mov eax, ebx
shr eax, 4
xor eax, ecx
and eax, 0xf0f0f0f
xor ecx, eax
shl eax, 4
xor ebx, eax
mov eax, dword [esp + 0x1c]
mov edx, ebx
shr edx, 0x18
mov byte [eax], dl
mov edx, ebx
shr edx, 0x10
mov byte [eax + 1], dl
mov edx, ebx
shr edx, 8
mov byte [eax + 2], dl
mov edx, ecx
shr edx, 0x18
mov byte [eax + 4], dl
mov edx, ecx
shr edx, 0x10
pop edi
mov byte [eax + 5], dl
pop esi
mov edx, ecx
shr edx, 8
pop ebp
mov byte [eax + 3], bl
mov byte [eax + 6], dl
mov byte [eax + 7], cl
pop ebx
ret