Function at 0x10005c7e
Capabilities:
Encode data using xor
Encrypt data using rc4 ksa

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x184
push ebx
push esi
mov esi, dword [0x1003e758]
xor ebx, ebx
and esi, 0x6bea473c
mov dword [ebp - 0x80], 0x1d48
xor ecx, ecx
mov dword [ebp - 0xc], esi
inc ecx
mov dword [ebp - 0x78], 0xdb5
push edi
mov eax, ebx
mov dword [ebp - 0x7c], ecx
mov dword [ebp - 0x74], 0x13ce
mov dword [ebp - 0x70], ecx
mov dword [ebp - 0x6c], 0x20a7
cmp eax, ecx
je 0x10005ccc
inc eax
cmp eax, 6
jl 0x10005cc2
mov eax, dword [ebp + eax*4 - 0x80]
lea edi, [ebp - 0x78]
mov esi, str.GdipDrawBezier
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x60], 0xdfe52d7
mov dword [ebp - 0x5c], 0x46270d43
mov dword [ebp - 0x58], 0x1f7d25c8
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, dword [ebp - 0xc]
mov edi, ebx
lea ecx, [esi - 0x5bb4c4e6]
inc edi
cmp word [edi*2 + str.0_0_040_0D0L0T00d0l0t0], bx
jne 0x10005d01
call fcn.10003b8f
cmp edi, 0x1fe
je 0x10005d29
push ecx
mov edx, esi
mov ecx, str._0M0T0b0
call fcn.1000493c
add esp, 4
call fcn.100033db
and esi, 0x60a6000
mov edi, ebx
or esi, 0xe8c59eef
mov dword [ebp - 0xc], esi
inc edi
cmp word [edi*2 + str.InternetCloseHandle_m_connect], bx
jne 0x10005d3f
cmp dword [ebp - 8], edi
jae 0x10005d75
mov ebx, dword [ebp - 8]
push esi
push esi
mov edx, str.InternetCloseHandle_m_connect
call fcn.10005bdc
pop ecx
pop ecx
add esi, 0x15452596
call fcn.10003c14
inc ebx
cmp ebx, edi
jb 0x10005d52
mov dword [ebp - 0xc], esi
xor ebx, ebx
mov eax, esi
and eax, 0x5318883f
add eax, 0x6f5dd9d0
mov dword [ebp - 0x64], eax
mov eax, ebx
mov byte [ebp + eax - 0x184], al
inc eax
cmp eax, 0x100
jb 0x10005d86
mov ecx, ebx
mov edi, ebx
mov dword [ebp - 8], ecx
mov al, byte [ebp + ecx - 0x184]
xor edx, edx
mov byte [ebp - 1], al
mov eax, ecx
push 0xe
pop ecx
div ecx
movzx ecx, byte [ebp - 1]
movzx eax, byte [ebp + edx - 0x78]
add eax, edi
add ecx, eax
push ecx
movzx eax, cl
push ecx
mov ecx, str.0_0_040_0D0L0T00d0l0t0
mov dword [ebp - 0x50], eax
call fcn.10003f9a
pop ecx
pop ecx
push 8
pop ecx
push 0x49
mov esi, str.wxGdiPlusModule
mov dword [ebp - 0x4c], ebx
lea edi, [ebp - 0x2c]
mov edx, ebx
pop eax
rep movsd dword es:[edi], dword [esi]
cmp ax, word [ebp - 0x2c]
jne 0x10005e10
mov ecx, eax
mov eax, ebx
test cx, cx
je 0x10005e0d
cmp word [ebp + eax - 0x2c], bx
je 0x10005e0d
inc edx
lea eax, [edx + edx]
movzx ecx, word [eax + str.InternetCloseHandle_m_connect]
cmp cx, word [ebp + eax - 0x2c]
je 0x10005def
mov dword [ebp - 0x4c], edx
mov esi, dword [ebp - 0xc]
mov edx, str.._AVValueTypeMismatch_NameValuePairs_CryptoPP__
mov ecx, esi
call fcn.1000319e
mov ecx, dword [ebp - 0x4c]
movzx eax, byte [ebp + ecx*2 - 0x2c]
movzx ecx, byte [ecx*2 + str.InternetCloseHandle_m_connect]
sub ecx, eax
cmp ecx, 0x1945
jne 0x10005e49
add dword [ebp - 0x64], 0x289691ae
mov ecx, esi
call fcn.10003acf
jmp 0x10005e55
mov esi, dword [ebp - 0x64]
add esi, 0x600e65d0
mov dword [ebp - 0xc], esi
mov edi, dword [ebp - 0x50]
mov ecx, dword [ebp - 8]
mov al, byte [ebp + edi - 0x184]
mov byte [ebp + ecx - 0x184], al
inc ecx
mov al, byte [ebp - 1]
mov byte [ebp + edi - 0x184], al
mov dword [ebp - 8], ecx
cmp ecx, 0x100
jb 0x10005d9c
mov edi, ebx
inc edi
cmp word [edi*2 + str.InternetCloseHandle_m_connect], bx
jne 0x10005e85
mov edx, str.C414535E_B440_4A15_B8A5_0926A76699A5
mov ecx, esi
call fcn.1000319e
cmp edi, 0x204
jne 0x10005ead
mov eax, esi
or eax, 0x57edf042
jmp 0x10005eb9
call fcn.10003e1f
mov eax, esi
and eax, 0x65e1e39d
mov ch, byte [str.60D0r0x0]
lea edi, [ebp - 0x74]
mov esi, str.invalid_index
mov dword [ebp - 0x4c], eax
mov eax, ebx
mov dword [ebp - 8], ebx
mov byte [ebp - 1], ch
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
cmp ch, byte [ebp - 0x74]
jne 0x10005f1f
mov esi, dword [ebp - 0xc]
test ch, ch
je 0x10005f0e
cmp byte [ebp + eax - 0x74], 0
je 0x10005f0e
push str.InternetCloseHandle_m_connect
push esi
mov edx, esi
mov ecx, esi
call fcn.1000413c
mov eax, dword [ebp - 8]
inc eax
pop ecx
pop ecx
mov dword [ebp - 8], eax
mov ch, byte [eax + str.60D0r0x0]
cmp ch, byte [ebp + eax - 0x74]
je 0x10005edf
mov ch, byte [ebp - 1]
cmp dword [ebp - 0x54], eax
jae 0x10005f1f
imul eax, dword [ebp - 0x4c], 0xd652d1d9
jmp 0x10005f22
mov eax, dword [ebp - 0xc]
xor eax, 0x1f99ffdc
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0xc], eax
mov edi, ebx
mov dword [0x1003e790], eax
mov esi, ebx
or eax, 0x72b004b
mov dword [ebp - 8], eax
mov dword [0x1003e758], eax
lea eax, [edi + 1]
movzx edi, al
mov cl, byte [ebp + edi - 0x184]
movzx edx, cl
lea eax, [edx + ebx]
movzx ebx, al
mov al, byte [ebp + ebx - 0x184]
mov byte [ebp + edi - 0x184], al
mov byte [ebp + ebx - 0x184], cl
movzx eax, byte [ebp + edi - 0x184]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x184]
xor al, byte [ebp + esi - 0x60]
mov byte [ebp + esi - 0x74], al
inc esi
cmp esi, 0xc
jb 0x10005f43
mov esi, str.humana.com
lea edi, [ebp - 0x60]
xor ebx, ebx
mov byte [ebp - 0x68], bl
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
cmp ch, byte [ebp - 0x60]
jne 0x10005fd1
mov esi, dword [ebp - 0xc]
mov edi, ebx
test ch, ch
je 0x10005fd1
cmp byte [ebp + edi - 0x60], bl
je 0x10005fd1
push esi
mov edx, esi
mov ecx, str.C414535E_B440_4A15_B8A5_0926A76699A5
call fcn.100037b7
inc edi
pop ecx
mov ch, byte [edi + str.60D0r0x0]
cmp ch, byte [ebp + edi - 0x60]
je 0x10005fac
mov ecx, 0x3b8
mov dword [ebp - 0x48], 0xafd
mov eax, ebx
mov dword [ebp - 0x44], 0x4ff
mov dword [ebp - 0x40], 0x96f
mov dword [ebp - 0x3c], 0x23ff
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x34], 0x3e1
mov dword [ebp - 0x30], 0x156a
mov dword [ebp - 0x2c], 0x166
mov dword [ebp - 0x28], 0x413
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x20], 0x616
mov dword [ebp - 0x1c], 0x153d
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x10], ecx
cmp eax, 0xd
je 0x10006038
inc eax
cmp eax, 0xf
jl 0x1000602d
mov eax, dword [ebp + eax*4 - 0x48]
mov dword [ebp - 0x50], eax
call fcn.10004f39
push 0xb
pop ecx
mov esi, str.3_3_3_3_3034383_3D3H3L3P3T3X33_3d3h3l3p3t3x3
mov al, byte [ebp - 1]
lea edi, [ebp - 0x3c]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
cmp al, byte [ebp - 0x3c]
jne 0x1000608a
mov edi, dword [ebp - 8]
mov esi, ebx
test al, al
je 0x1000608a
cmp byte [ebp + esi - 0x3c], bl
je 0x1000608a
push str.._AVValueTypeMismatch_NameValuePairs_CryptoPP__
push edi
mov ecx, str._0M0T0b0
call fcn.10004725
mov al, byte [esi + 0x1003e599]
inc esi
pop ecx
pop ecx
cmp al, byte [ebp + esi - 0x3c]
je 0x10006061
push 0xd
pop ecx
mov esi, str.Seeking_in_stream_which_has_data_written_back_to_it.
lea edi, [ebp - 0x44]
rep movsd dword es:[edi], dword [esi]
mov edx, ebx
movsb byte es:[edi], byte [esi]
cmp byte [ebp - 0x44], 0x2e
jne 0x100060eb
mov al, 0x2e
test al, al
je 0x100060b9
cmp byte [ebp + edx - 0x44], bl
je 0x100060b9
mov al, byte [edx + 0x100348c1]
inc edx
cmp al, byte [ebp + edx - 0x44]
je 0x100060a2
mov ecx, dword [ebp - 0x54]
cmp ecx, edx
jae 0x100060eb
mov eax, dword [ebp - 0xc]
mov esi, dword [ebp - 8]
cmp ecx, 0x2070
jne 0x100060da
mov eax, esi
or eax, 0xde41ea46
mov dword [0x1003e790], eax
imul esi, eax, 0xa28165fb
inc ecx
cmp ecx, edx
jb 0x100060c6
mov dword [0x1003e758], esi
mov ecx, 0x2d4
mov dword [ebp - 0x38], 0x1a15
mov eax, ebx
mov dword [ebp - 0x34], 0x19fa
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x2c], 0x70a
mov dword [ebp - 0x28], 0xae2
mov dword [ebp - 0x24], 0x661
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x1c], 0x1f03
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x14], 0x120e
mov dword [ebp - 0x10], ecx
cmp eax, 6
je 0x1000613a
inc eax
cmp eax, 0xb
jl 0x1000612f
mov edi, dword [ebp + eax*4 - 0x38]
mov eax, ebx
push 0x5f
pop ecx
mov dword [ebp - 0x3c], 0x649
mov dword [ebp - 0x38], 0x853
mov dword [ebp - 0x34], 0x923
mov dword [ebp - 0x30], 0xa68
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x28], 0xee
mov dword [ebp - 0x24], 0x94c
mov dword [ebp - 0x20], 0x1b8
mov dword [ebp - 0x1c], 0x258d
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x14], 0x7b0
mov dword [ebp - 0x10], ecx
cmp eax, 0xb
je 0x10006196
inc eax
cmp eax, 0xc
jl 0x1000618b
mov esi, dword [ebp + eax*4 - 0x3c]
lea edx, [ebp - 0x74]
push dword [ebp - 0x50]
xor esi, ecx
mov ecx, dword [ebp - 0x54]
push 0x7ffe0000
call fcn.1001834c
call eax
test eax, eax
je 0x10006214
and dword [0x1003e758], 0xc4512c31
mov eax, 0xeb
mov dword [ebp - 0x30], 0x2c
mov dword [ebp - 0x2c], 0x1191
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], 0xac0
mov dword [ebp - 0x1c], 0x220f
mov dword [ebp - 0x18], 0x2148
mov dword [ebp - 0x14], 0x25b2
mov dword [ebp - 0x10], 0xfe5
cmp ebx, 2
je 0x10006206
inc ebx
cmp ebx, 9
jl 0x100061fb
mov eax, dword [ebp + ebx*4 - 0x30]
xor eax, 0xea
jmp 0x10006418
mov al, byte [edi + 0x7ffe0000]
mov byte [ebp - 1], al
test al, al
je 0x10006416
push 3
pop ecx
mov eax, ebx
mov dword [ebp - 0x40], 0xeca
mov dword [ebp - 0x3c], 0xea4
mov dword [ebp - 0x38], 0x16ea
mov dword [ebp - 0x34], 0x124
mov dword [ebp - 0x30], 0x241a
mov dword [ebp - 0x2c], 0x12cc
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x20], 0x69c
mov dword [ebp - 0x1c], 0x66d
mov dword [ebp - 0x18], 0x1e75
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x10], 0x1127
cmp eax, 6
je 0x10006284
inc eax
cmp eax, 0xd
jl 0x10006279
mov eax, dword [ebp + eax*4 - 0x40]
xor dword [0x1003e790], 0x9bab8b68
mov dword [ebp - 0x54], eax
call fcn.10003524
push 7
pop ecx
mov esi, str.invalid_distance_too_far_back
lea edi, [ebp - 0x84]
rep movsd dword es:[edi], dword [esi]
mov edx, ebx
mov dword [ebp - 8], edx
movsw word es:[edi], word [esi]
cmp byte [ebp - 0x84], 0x2e
jne 0x100062e5
push 0x2e
pop eax
test al, al
je 0x100062e5
cmp byte [ebp + edx - 0x84], bl
je 0x100062e5
call fcn.10005858
mov edx, dword [ebp - 8]
inc edx
mov dword [ebp - 8], edx
mov al, byte [edx + str.._AVValueTypeMismatch_NameValuePairs_CryptoPP__]
cmp al, byte [ebp + edx - 0x84]
je 0x100062bd
movzx eax, byte [ebp + edx - 0x84]
movzx ecx, byte [edx + str.._AVValueTypeMismatch_NameValuePairs_CryptoPP__]
sub ecx, eax
cmp ecx, 0x1833
jae 0x1000630c
mov edx, dword [0x1003e790]
add edx, 0x31e80817
jmp 0x10006318
mov edx, dword [0x1003e758]
or edx, 0x89e3f142
xor esi, esi
mov dword [0x1003e758], edx
inc esi
mov dword [ebp - 0x3c], 0x21c
mov eax, ebx
mov dword [ebp - 0x38], 0x1496
mov dword [ebp - 0x34], 0x203f
mov dword [ebp - 0x30], 0xd7c
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x28], 0xed4
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x18], 0x849
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x10], 0x93c
cmp eax, 6
je 0x1000636e
inc eax
cmp eax, 0xc
jl 0x10006363
mov ecx, dword [ebp + eax*4 - 0x3c]
movzx eax, byte [ebp - 1]
cmp eax, dword [ebp - 0x54]
jne 0x10006412
lea eax, [edx + 0x7eed49ee]
mov dword [ebp - 0x40], esi
mov ecx, ebx
mov dword [0x1003e790], eax
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x30], 0x774
mov dword [ebp - 0x2c], 0x6d5
mov dword [ebp - 0x28], 0x811
mov dword [ebp - 0x24], 0x17f2
mov dword [ebp - 0x20], 0x1092
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x18], 0x14a0
mov dword [ebp - 0x14], 0x21b1
mov dword [ebp - 0x10], 0x6ec
cmp ecx, 2
je 0x100063de
inc ecx
cmp ecx, 0xd
jl 0x100063d3
mov al, byte [str.60D0r0x0]
lea edi, [ebp - 0x78]
mov esi, str.sqlite_sequence
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
cmp al, byte [ebp - 0x78]
jne 0x1000640c
test al, al
je 0x1000640c
cmp byte [ebp + ebx - 0x78], 0
je 0x1000640c
mov al, byte [ebx + 0x1003e599]
inc ebx
cmp al, byte [ebp + ebx - 0x78]
je 0x100063f4
mov eax, dword [ebp + ecx*4 - 0x40]
jmp 0x10006418
mov eax, ecx
jmp 0x10006418
mov eax, esi
pop edi
pop esi
pop ebx
leave
ret