Function at 0x1000f310
Capabilities:
Encode data using xor
Encrypt data using rc4 ksa

Disassembly:
mov eax, dword [esp + 4]
sub esp, 0x17c
mov ecx, dword [esp + 0x190]
push ebx
push esi
push edi
push ebp
push 0
push eax
push ecx
call fcn.10036380
add esp, 0xc
mov eax, dword [0x1004e46c]
add eax, 0xa
push eax
call fcn.100365b0
mov dword [esp + 0x20], eax
add esp, 4
test eax, eax
jne 0x1000f35a
mov eax, 0xffffffff
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x17c
ret
mov byte [esp + 0xbd], 1
mov byte [esp + 0xbe], 2
mov byte [esp + 0xbf], 3
mov byte [esp + 0xc0], 4
mov byte [esp + 0xc1], 5
mov byte [esp + 0xc2], 6
mov byte [esp + 0xc3], 7
mov byte [esp + 0xc4], 8
mov byte [esp + 0xc5], 9
xor eax, eax
mov ecx, 0xb
mov dword [esp + 0x18], eax
mov dword [esp + 0x24], eax
mov edx, 0xc
mov dword [esp + 0x20], eax
mov ebx, 0xd
mov byte [esp + 0xbc], al
mov eax, 0xa
mov byte [esp + 0xce], cl
mov byte [esp + 0xcd], al
mov byte [esp + 0xcf], dl
mov byte [esp + 0xd0], bl
mov byte [esp + 0xed], al
mov byte [esp + 0xee], cl
mov byte [esp + 0xef], dl
mov byte [esp + 0xd1], 0xe
lea eax, [esp + 0x24]
mov byte [esp + 0xf0], bl
lea ecx, [esp + 0x20]
push eax
mov edx, dword [esp + 0x20]
push ecx
mov eax, dword [esp + 0x1a8]
push edx
mov byte [esp + 0xde], 0xf
mov byte [esp + 0xfd], 0xe
mov byte [esp + 0xfe], 0xf
push eax
call fcn.1001e860
add esp, 0x10
push 9
push str.__XPM__
push eax
call fcn.1001e970
add esp, 0xc
test eax, eax
je 0x1000f466
mov eax, 0xfffffffd
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x17c
ret
lea eax, [esp + 0x24]
lea ecx, [esp + 0x20]
mov edx, dword [esp + 0x1c]
push eax
mov eax, dword [esp + 0x1a4]
push ecx
push edx
push eax
call fcn.1001e860
add esp, 0x10
push 0xb
push str.static_char
push eax
call fcn.1001e970
add esp, 0xc
test eax, eax
je 0x1000f4a9
mov eax, 0xfffffffd
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x17c
ret
lea eax, [esp + 0x24]
lea ecx, [esp + 0x20]
mov edx, dword [esp + 0x1c]
push eax
mov eax, dword [esp + 0x1a4]
push ecx
push edx
push eax
call fcn.1001e860
add esp, 0x10
mov esi, eax
push 2
push 0x1004d158
push esi
call fcn.1001e970
add esp, 0xc
test eax, eax
je 0x1000f4a9
cmp byte [esi], 0x22
je 0x1000f4f3
mov eax, 0xfffffffd
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x17c
ret
inc esi
push esi
call fcn.1001ea00
mov dword [esp + 0x38], eax
add esp, 4
cmp byte [esi], 0x20
je 0x1000f511
cmp byte [esi], 9
je 0x1000f511
inc esi
cmp byte [esi], 0x20
jne 0x1000f506
mov al, byte [esi]
cmp al, 0x20
je 0x1000f51b
cmp al, 9
jne 0x1000f51e
inc esi
jmp 0x1000f511
push esi
call fcn.1001ea00
mov dword [esp + 0x48], eax
add esp, 4
cmp byte [esi], 0x20
je 0x1000f53b
cmp byte [esi], 9
je 0x1000f53b
inc esi
cmp byte [esi], 0x20
jne 0x1000f530
mov al, byte [esi]
cmp al, 0x20
je 0x1000f545
cmp al, 9
jne 0x1000f548
inc esi
jmp 0x1000f53b
push esi
call fcn.1001ea00
mov dword [esp + 0x34], eax
add esp, 4
cmp byte [esi], 0x20
je 0x1000f565
cmp byte [esi], 9
je 0x1000f565
inc esi
cmp byte [esi], 0x20
jne 0x1000f55a
mov al, byte [esi]
cmp al, 0x20
je 0x1000f56f
cmp al, 9
jne 0x1000f572
inc esi
jmp 0x1000f565
push esi
call fcn.1001ea00
add esp, 4
mov ebx, eax
mov eax, dword [esp + 0x30]
shl eax, 2
lea esi, [eax + eax*8]
push esi
call fcn.100365b0
mov dword [esp + 0x2c], eax
add esp, 4
test eax, eax
jne 0x1000f5a8
mov eax, 0xffffffff
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x17c
ret
mov edi, dword [esp + 0x28]
xor eax, eax
mov ecx, esi
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, esi
push 0xd2f0
and ecx, 3
rep stosb byte es:[edi], al
call fcn.100365b0
mov dword [esp + 0x30], eax
add esp, 4
test eax, eax
jne 0x1000f5e1
mov eax, 0xffffffff
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x17c
ret
mov edi, dword [esp + 0x2c]
xor eax, eax
mov ecx, 0x34bc
rep stosd dword es:[edi], eax
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x2c]
push eax
push ecx
call fcn.100101d0
mov ebp, dword [esp + 0x30]
mov dword [esp + 0x48], eax
mov dword [esp + 0x1c], 0
add esp, 8
mov eax, dword [esp + 0x30]
cmp dword [esp + 0x14], eax
jge 0x1000f7bc
lea eax, [esp + 0x24]
lea ecx, [esp + 0x20]
mov edx, dword [esp + 0x1c]
push eax
mov eax, dword [esp + 0x1a4]
push ecx
push edx
push eax
call fcn.1001e860
add esp, 0x10
mov esi, eax
push 2
push 0x1004d158
push esi
call fcn.1001e970
add esp, 0xc
test eax, eax
je 0x1000f61e
cmp byte [esi], 0x22
jne 0x1000fc67
inc esi
xor ecx, ecx
mov al, byte [esi]
inc esi
mov byte [ebp + ecx + 4], al
inc ecx
cmp ecx, 0x20
jae 0x1000f676
mov al, byte [esi]
cmp al, 0x20
je 0x1000f676
cmp al, 9
jne 0x1000f65f
xor edi, edi
mov dword [esp + 0x48], edi
mov al, byte [esi]
cmp al, 0x20
je 0x1000f7b6
cmp al, 9
je 0x1000f7b6
and eax, 0xff
sub eax, 0x63
cmp eax, 0x10
ja case.0x1000f6a7.103
xor ecx, ecx
mov cl, byte [eax + 0x1000fcbc]
jmp dword [ecx*4 + 0x1000fca8]
mov al, byte [esi + 1]
inc esi
cmp al, 0x20
je case.0x1000f6a7.99
cmp al, 9
je case.0x1000f6a7.99
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x2c]
lea edx, [esp + 0x8c]
push eax
push ecx
push edx
push esi
push ebp
call fcn.1000fcd0
add esp, 0x14
test eax, eax
jl 0x1000fc87
inc edi
cmp byte [esi], 0
je 0x1000f6f8
mov al, byte [esi]
cmp al, 0x22
je 0x1000f6f8
cmp al, 0x20
je 0x1000f6f8
cmp al, 9
je 0x1000f6f8
inc esi
cmp byte [esi], 0
jne 0x1000f6e4
mov al, byte [esi]
test al, al
je 0x1000f706
cmp al, 0x22
jne 0x1000f67c
add ebp, 0x24
inc dword [esp + 0x14]
jmp 0x1000f610
inc esi
cmp byte [esi], 0x34
jne 0x1000f719
inc esi
mov al, byte [esi]
cmp al, 0x20
je 0x1000f718
cmp al, 9
je 0x1000f718
test edi, edi
jne 0x1000f74b
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x2c]
lea edx, [esp + 0x8c]
push eax
push ecx
push edx
push esi
push ebp
call fcn.1000fcd0
add esp, 0x14
test eax, eax
jl 0x1000fc97
inc dword [esp + 0x48]
jmp 0x1000f6df
mov al, byte [esi + 1]
inc esi
cmp al, 0x20
je case.0x1000f6a7.101
cmp al, 9
je case.0x1000f6a7.101
test edi, edi
jne 0x1000f6df
cmp dword [esp + 0x48], 0
jne 0x1000f6df
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x2c]
lea edx, [esp + 0x8c]
push eax
push ecx
push edx
push esi
push ebp
call fcn.1000fcd0
add esp, 0x14
test eax, eax
jge 0x1000f6df
mov eax, 0xfffffffd
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x17c
ret
mov al, byte [esi + 1]
inc esi
cmp al, 0x20
je case.0x1000f6a7.102
cmp al, 9
jne 0x1000f6df
jmp case.0x1000f6a7.102
inc esi
jmp 0x1000f67c
mov eax, dword [esp + 0x30]
push ebx
dec eax
mov ecx, dword [esp + 0x2c]
push eax
push 0
push ecx
call fcn.1000fe80
mov ecx, dword [esp + 0x44]
add esp, 0x10
push 8
push ecx
call fcn.100382f0
mov dword [esp + 0x50], eax
add esp, 8
push 0x428
call fcn.100365b0
mov dword [esp + 0x44], eax
add esp, 4
test eax, eax
jne 0x1000f80a
mov eax, 0xffffffff
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x17c
ret
cmp dword [esp + 0x30], 0x100
jg 0x1000f8eb
mov edi, dword [esp + 0x40]
xor esi, esi
add edi, 0x28
cmp dword [esp + 0x30], esi
jle 0x1000f850
mov eax, dword [esp + 0x28]
lea edx, [edi + 2]
add eax, 2
mov ebp, dword [esp + 0x30]
mov esi, ebp
mov cl, byte [eax]
add eax, 0x24
mov byte [edx], cl
add edx, 4
mov cl, byte [eax - 0x25]
dec ebp
mov byte [edx - 5], cl
mov cl, byte [eax - 0x26]
mov byte [edx - 6], cl
jne 0x1000f837
cmp dword [esp + 0x30], 2
jne 0x1000f884
xor eax, eax
mov byte [edi + 0x3fa], al
mov byte [edi + 0x3f9], al
mov byte [edi + 0x3f8], al
mov eax, 0xff
mov byte [edi + 0x3fe], al
mov byte [edi + 0x3fd], al
mov byte [edi + 0x3fc], al
jmp 0x1000f8eb
cmp dword [esp + 0x30], 0x10
jne 0x1000f8b7
xor eax, eax
lea ecx, [edi + 0x3e]
mov edx, eax
sub ecx, 4
xor edx, 0xff
inc eax
cmp eax, 0x10
lea esi, [edi + edx*4]
mov dl, byte [ecx + 4]
mov byte [esi + 2], dl
mov dl, byte [ecx + 3]
mov byte [esi + 1], dl
mov dl, byte [ecx + 2]
mov byte [esi], dl
jl 0x1000f890
jmp 0x1000f8eb
cmp esi, 0x100
jge 0x1000f8eb
lea ecx, [edi + esi*4 + 2]
mov eax, esi
add ecx, 4
cdq
idiv dword [esp + 0x30]
inc esi
mov al, byte [edi + edx*4 + 2]
lea edx, [edi + edx*4]
mov byte [ecx - 4], al
cmp esi, 0x100
mov al, byte [edx + 1]
mov byte [ecx - 5], al
mov dl, byte [edx]
mov byte [ecx - 6], dl
jl 0x1000f8c3
mov ecx, dword [esp + 0x40]
mov eax, dword [esp + 0x34]
mov edx, dword [esp + 0x44]
mov dword [ecx], 0x28
mov dword [ecx + 4], eax
cmp dword [esp + 0x30], 0x100
mov ax, 0x18
mov dword [ecx + 8], edx
mov word [ecx + 0xc], 1
jg 0x1000f91b
mov ax, 8
mov ecx, dword [esp + 0x40]
xor esi, esi
mov word [ecx + 0xe], ax
mov eax, dword [esp + 0x48]
imul eax, dword [esp + 0x44]
mov dword [ecx + 0x10], esi
mov dword [ecx + 0x14], eax
mov eax, dword [esp + 0x198]
mov ebp, dword [esp + 0x19c]
push eax
push ecx
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x1c], esi
mov dword [ecx + 0x20], esi
mov dword [ecx + 0x24], esi
call ebp
add esp, 8
test eax, eax
jl 0x1000f799
mov eax, dword [esp + 0x48]
add eax, 0xc8
push eax
call fcn.100365b0
mov dword [esp + 0x14], eax
add esp, 4
test eax, eax
jne 0x1000f987
mov eax, 0xffffffff
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x17c
ret
lea edi, [esp + 0x6c]
xor eax, eax
mov ecx, ebx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, ebx
and ecx, 3
rep stosb byte es:[edi], al
cmp dword [esp + 0x30], 0x100
jg 0x1000fb22
mov dword [esp + 0x38], eax
cmp dword [esp + 0x44], eax
jle 0x1000fad4
lea eax, [esp + 0x24]
lea ecx, [esp + 0x20]
mov edx, dword [esp + 0x1c]
push eax
mov eax, dword [esp + 0x1a4]
push ecx
push edx
push eax
call fcn.1001e860
add esp, 0x10
mov ebp, eax
push 2
push 0x1004d158
push ebp
call fcn.1001e970
add esp, 0xc
test eax, eax
je 0x1000f9b7
mov dword [esp + 0x14], 0
inc ebp
cmp dword [esp + 0x34], 0
jle 0x1000fa99
xor eax, eax
test ebx, ebx
jle 0x1000fa13
mov cl, byte [ebp]
inc ebp
mov byte [esp + eax + 0x4c], cl
inc eax
cmp eax, ebx
jl 0x1000fa06
lea eax, [esp + 0x6c]
push ebx
lea ecx, [esp + 0x50]
push eax
push ecx
call fcn.1001e970
add esp, 0xc
test eax, eax
jne 0x1000fa3b
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
mov cl, byte [esp + 0x18]
mov byte [edx + eax], cl
jmp 0x1000fa87
mov edx, dword [esp + 0x10]
push ebx
add edx, dword [esp + 0x18]
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x2c]
push eax
mov dword [esp + 0x44], edx
push ecx
lea edx, [esp + 0x58]
push edx
call fcn.10010160
mov ecx, dword [esp + 0x4c]
lea esi, [esp + 0x5c]
lea edi, [esp + 0x7c]
add esp, 0x10
mov byte [ecx], al
mov ecx, ebx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, ebx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [esp + 0x3c]
xor eax, eax
mov al, byte [ecx]
mov dword [esp + 0x18], eax
inc dword [esp + 0x14]
mov eax, dword [esp + 0x14]
cmp eax, dword [esp + 0x34]
jl 0x1000fa00
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x198]
push eax
mov eax, dword [esp + 0x14]
push ecx
push edx
push eax
call dword [esp + 0x1a4]
add esp, 0x10
test eax, eax
jl 0x1000f799
inc dword [esp + 0x38]
mov eax, dword [esp + 0x38]
cmp eax, dword [esp + 0x44]
jl 0x1000f9b7
mov edx, dword [esp + 0x10]
push edx
call fcn.10036640
mov ecx, dword [esp + 0x44]
add esp, 4
push ecx
call fcn.10036640
mov eax, dword [esp + 0x20]
add esp, 4
push eax
call fcn.10036640
mov ecx, dword [esp + 0x2c]
add esp, 4
push ecx
call fcn.10036640
mov eax, dword [esp + 0x30]
add esp, 4
push eax
call fcn.10036640
add esp, 4
xor eax, eax
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x17c
ret
mov dword [esp + 0x38], 0
cmp dword [esp + 0x44], 0
jle 0x1000fad4
lea eax, [esp + 0x24]
lea ecx, [esp + 0x20]
mov edx, dword [esp + 0x1c]
push eax
mov eax, dword [esp + 0x1a4]
push ecx
push edx
push eax
call fcn.1001e860
add esp, 0x10
mov ebp, eax
push 2
push 0x1004d158
push ebp
call fcn.1001e970
add esp, 0xc
test eax, eax
je 0x1000fb31
mov dword [esp + 0x14], 0
inc ebp
cmp dword [esp + 0x34], 0
jle 0x1000fc27
mov eax, dword [esp + 0x34]
mov dword [esp + 0x3c], eax
xor eax, eax
test ebx, ebx
jle 0x1000fb95
mov cl, byte [ebp]
inc ebp
mov byte [esp + eax + 0x4c], cl
inc eax
cmp eax, ebx
jl 0x1000fb88
lea eax, [esp + 0x6c]
push ebx
lea ecx, [esp + 0x50]
push eax
push ecx
call fcn.1001e970
add esp, 0xc
test eax, eax
jne 0x1000fbb2
mov eax, dword [esp + 0x18]
jmp 0x1000fbe4
mov eax, dword [esp + 0x30]
push ebx
mov ecx, dword [esp + 0x2c]
push eax
lea edx, [esp + 0x54]
push ecx
push edx
call fcn.10010160
lea esi, [esp + 0x5c]
lea edi, [esp + 0x7c]
add esp, 0x10
mov ecx, ebx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, ebx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov dword [esp + 0x18], eax
shl eax, 2
mov esi, dword [esp + 0x28]
mov ecx, dword [esp + 0x14]
lea edx, [eax + eax*8]
add esi, edx
inc dword [esp + 0x14]
mov edx, dword [esp + 0x10]
mov al, byte [esi + 2]
mov byte [edx + ecx], al
mov al, byte [esi + 1]
mov ecx, dword [esp + 0x14]
inc dword [esp + 0x14]
mov byte [edx + ecx], al
mov al, byte [esi]
mov ecx, dword [esp + 0x14]
inc dword [esp + 0x14]
mov byte [edx + ecx], al
dec dword [esp + 0x3c]
jne 0x1000fb82
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x198]
push eax
mov eax, dword [esp + 0x14]
push ecx
push edx
push eax
call dword [esp + 0x1a4]
add esp, 0x10
test eax, eax
jl 0x1000f799
inc dword [esp + 0x38]
mov eax, dword [esp + 0x38]
cmp eax, dword [esp + 0x44]
jl 0x1000fb31
jmp 0x1000fad4
mov eax, 0xfffffffd
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x17c
ret
mov eax, 0xfffffffd
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x17c
ret
mov eax, 0xfffffffd
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x17c
ret
mov eax, 0xfffffffd
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x17c
ret