Function at 0x1000a6cc
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1b4
push esi
push edi
call fcn.10004b17
mov cl, byte [str.pj.akoukuf.atakat]
lea edi, [ebp - 0x28]
mov esi, str.moc.hn_morf
xor eax, eax
mov dword [ebp - 8], eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
cmp cl, byte [ebp - 0x28]
jne 0x1000a712
test cl, cl
je 0x1000a70f
cmp byte [ebp + eax - 0x28], 0
je 0x1000a70f
mov cl, byte [eax + 0x1003ecf1]
inc eax
cmp cl, byte [ebp + eax - 0x28]
je 0x1000a6f7
mov dword [ebp - 8], eax
call fcn.100052fe
mov eax, dword [ebp - 8]
mov edi, dword [0x1003ed78]
movzx ecx, byte [eax + str.pj.akoukuf.atakat]
movzx eax, byte [ebp + eax - 0x28]
sub ecx, eax
cmp ecx, 0x1df0
jne 0x1000a747
mov ecx, dword [0x1003ed2c]
sub ecx, 0x2de2aa38
mov dword [ebp - 4], edi
jmp 0x1000a765
sub edi, 0x46aab89e
mov edx, str.Coarmenian
mov ecx, str.login_count
mov dword [ebp - 4], edi
call fcn.10004c6d
mov ecx, dword [0x1003ed2c]
xor esi, esi
push ecx
mov dword [ebp - 0x18], esi
call fcn.10005d78
xor edi, 0x431f5a00
mov dword [ebp - 0xc], edi
mov edi, esi
pop ecx
call fcn.10004b17
inc edi
cmp byte [edi + str.CleanupHardDiskSize], 0
jne 0x1000a77c
mov eax, dword [ebp - 8]
cmp eax, edi
mov dword [ebp - 0x14], edi
mov edi, dword [ebp - 0xc]
jae 0x1000a7dc
cmp eax, 0x24a5
jne 0x1000a7aa
xor edi, 0x5a9213ef
call fcn.100052fe
mov eax, dword [ebp - 4]
mov edx, str.WriteFullDumps
sub eax, 0x2dcaa7bb
push str.moc.revres_spvtsaf
push str.wwwmirando.de
mov ecx, eax
mov dword [ebp - 4], eax
call fcn.10004106
mov eax, dword [ebp - 8]
inc eax
pop ecx
pop ecx
mov dword [ebp - 8], eax
cmp eax, dword [ebp - 0x14]
jb 0x1000a798
mov dword [ebp - 0xc], edi
mov eax, 0xd6
mov dword [ebp - 0x5c], 0x244
mov ecx, edi
mov dword [ebp - 0x58], 0x4d4
mov dword [ebp - 0x54], 0xfa0
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], 0x51c
mov dword [ebp - 0x48], 0x556
mov dword [ebp - 0x44], 0x45a
mov dword [ebp - 0x40], 0x6a8
mov dword [ebp - 0x3c], 0x10ef
mov dword [ebp - 0x38], 0x726
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], 0x2494
call fcn.10003f58
mov eax, esi
mov dword [ebp - 8], esi
mov esi, str.singleness
lea edi, [ebp - 0x24]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
cmp byte [ebp - 0x24], 0x53
jne 0x1000a8ba
mov cl, 0x53
test cl, cl
je 0x1000a874
cmp byte [ebp + eax - 0x24], 0
je 0x1000a874
call fcn.100052fe
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
mov cl, byte [eax + str.SUVWAVAWH]
cmp cl, byte [ebp + eax - 0x24]
je 0x1000a851
mov ecx, dword [ebp - 4]
mov edi, dword [ebp - 4]
cmp ecx, eax
jae 0x1000a8bd
mov esi, dword [ebp - 0xc]
cmp ecx, 0x17dd
jne 0x1000a894
add esi, 0x6d4503c4
call fcn.100056e8
mov edx, str.SNX_WEB_AUTOSNX_SAFARI
imul edi, edi, 0x64840f16
mov ecx, str.merkhahebrew
call fcn.10004924
mov ecx, dword [ebp - 4]
inc ecx
mov dword [ebp - 4], ecx
cmp ecx, dword [ebp - 8]
jb 0x1000a881
mov dword [ebp - 0xc], esi
jmp 0x1000a8bd
mov edi, dword [ebp - 4]
mov eax, dword [ebp - 0x18]
cmp eax, 3
je 0x1000a8cb
inc eax
cmp eax, 0xd
jl 0x1000a8c0
mov eax, dword [ebp + eax*4 - 0x5c]
xor eax, 0xd6
mov dword [ebp - 0xac], eax
mov eax, str.SUVWAVAWH
and edi, 0x2c36baad
inc eax
cmp byte [eax], 0
jne 0x1000a8df
mov edx, str.SEC_E_INTERNAL_ERROR
mov ecx, str.givenName
call fcn.10004c6d
push 0x78
pop ecx
xor eax, eax
mov dword [ebp - 0xa8], 0xb5f
mov dword [ebp - 0xa4], ecx
mov dword [ebp - 0xa0], ecx
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0x98], 0xdab
mov dword [ebp - 0x94], ecx
mov dword [ebp - 0x90], 0x218c
mov dword [ebp - 0x8c], 0xa61
mov dword [ebp - 0x88], ecx
mov dword [ebp - 0x84], 0x2093
cmp eax, 5
je 0x1000a95a
inc eax
cmp eax, 0xa
jl 0x1000a94f
mov eax, dword [ebp + eax*4 - 0xa8]
mov edx, str.lvocalicvowelsigndeva
mov esi, dword [ebp - 0xc]
xor eax, 0x7f
mov edi, esi
mov dword [ebp - 0xb4], eax
xor edi, 0x3ab15c6c
mov ecx, str.data_version
mov dword [ebp - 4], edi
call fcn.10004c6d
xor edx, edx
mov eax, edx
and esi, 0x5a15084
inc eax
cmp byte [eax + str.CleanupHardDiskSize], dl
jne 0x1000a98b
cmp eax, 0xd2c
jne 0x1000a9b6
lea ecx, [esi + 0x150cc06e]
push ecx
push ecx
mov dword [ebp - 4], ecx
call fcn.10004af5
add esp, 8
jmp 0x1000a9c5
add esi, 0x2b30a6bb
push ecx
mov ecx, esi
call fcn.10005d78
pop ecx
mov eax, edx
mov ecx, esi
cmp byte [str.pj.akoukuf.atakat], al
je 0x1000a9fb
imul edi, ecx, 0xa59e730a
mov dword [ebp - 4], edi
inc eax
cmp byte [eax + str.pj.akoukuf.atakat], dl
jne 0x1000a9da
cmp eax, 0xab8
jbe 0x1000a9fb
push ecx
mov ecx, edi
call fcn.10005d78
pop ecx
and esi, 0xbc101737
jmp 0x1000aa01
and esi, 0xf5ecd6d0
push 0x1f
pop ecx
mov dword [ebp - 0xc], esi
mov eax, edx
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x58], 0x699
mov dword [ebp - 0x54], 0xc2d
mov dword [ebp - 0x50], 0x25df
mov dword [ebp - 0x4c], 0x1f4
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x40], 0x2b7
mov dword [ebp - 0x3c], 0x2030
mov dword [ebp - 0x38], 0x1cf7
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x2c], 0x1a40
cmp eax, 5
je 0x1000aa5b
inc eax
cmp eax, 0xd
jl 0x1000aa50
mov eax, dword [ebp + eax*4 - 0x5c]
mov ecx, 0xab
mov dword [ebp - 0x80], eax
mov eax, edx
mov dword [ebp - 0x60], 0x291
mov dword [ebp - 0x5c], 0x9dc
mov dword [ebp - 0x58], 0xf08
mov dword [ebp - 0x54], 0x14cb
mov dword [ebp - 0x50], 0xf19
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x48], 0x1123
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x3c], 0x194d
mov dword [ebp - 0x38], 0xd44
mov dword [ebp - 0x34], 0x201e
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x2c], ecx
cmp eax, 0xc
je 0x1000aac2
inc eax
cmp eax, 0xe
jl 0x1000aab7
mov eax, dword [ebp + eax*4 - 0x60]
lea edi, [ebp - 0x98]
push 5
pop ecx
mov esi, str.Uhungarumlautcyrillic
mov dword [ebp - 0x74], 0x9a4635d5
rep movsd dword es:[edi], dword [esi]
xor eax, 0xaa
mov dword [ebp - 0x70], 0xfce3689e
or dword [ebp - 0xc], 0x266abbd3
mov dword [ebp - 0xb0], eax
mov eax, edx
mov dword [ebp - 0x6c], 0xf2e765ae
mov dword [ebp - 0x68], 0x7085778e
mov byte [ebp - 0x64], 0xf7
movsw word es:[edi], word [esi]
mov dword [ebp - 8], edx
mov byte [ebp + eax - 0x1b4], al
inc eax
cmp eax, 0x100
jb 0x1000ab0f
mov esi, str._tCPURating
mov dword [ebp - 0x14], edx
lea edi, [ebp - 0x24]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, dword [ebp - 0xc]
mov cl, byte [ebp + edx - 0x1b4]
mov eax, edx
push 0x15
xor edx, edx
mov byte [ebp - 0xd], cl
pop edi
div edi
movzx ecx, cl
xor edi, edi
mov dword [ebp - 0x18], edi
movzx eax, byte [ebp + edx - 0x98]
add eax, dword [ebp - 8]
add ecx, eax
movzx eax, cl
mov dword [ebp - 8], eax
mov al, byte [str.pj.akoukuf.atakat]
cmp al, byte [ebp - 0x24]
jne 0x1000ab84
test al, al
je 0x1000ab81
cmp byte [ebp + edi - 0x24], 0
je 0x1000ab81
mov al, byte [edi + 0x1003ecf1]
inc edi
cmp al, byte [ebp + edi - 0x24]
je 0x1000ab69
mov dword [ebp - 0x18], edi
push str.SEC_E_NO_IP_ADDRESSES
mov edx, esi
call fcn.10004563
pop ecx
mov ecx, dword [ebp - 0xc]
cmp ecx, edi
mov edi, dword [ebp - 4]
jae 0x1000abcf
push ecx
push ecx
mov edx, esi
call fcn.10005ab7
add esp, 8
cmp ecx, 0x2285
jne 0x1000abb5
add edi, 0x7a666be3
lea esi, [edi - 0x4ee135de]
call fcn.10003f79
mov ecx, dword [ebp - 0xc]
inc ecx
mov dword [ebp - 0xc], ecx
cmp ecx, dword [ebp - 0x18]
jb 0x1000ab9b
mov dword [ebp - 4], edi
mov edx, dword [ebp - 8]
push ecx
push ecx
mov ecx, esi
mov al, byte [ebp + edx - 0x1b4]
mov edx, dword [ebp - 0x14]
mov byte [ebp + edx - 0x1b4], al
call fcn.10004af5
mov eax, dword [ebp - 8]
add esp, 8
mov cl, byte [ebp - 0xd]
inc edx
mov dword [ebp - 0x14], edx
mov byte [ebp + eax - 0x1b4], cl
cmp edx, 0x100
jb 0x1000ab31
xor eax, eax
mov dword [ebp - 8], eax
mov ecx, eax
mov dword [ebp - 0x18], eax
lea eax, [ecx + 1]
movzx esi, al
mov eax, dword [ebp - 8]
mov dword [ebp - 0x7c], esi
push 0xd
mov cl, byte [ebp + esi - 0x1b4]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [ebp - 8], eax
mov al, byte [ebp + eax - 0x1b4]
mov byte [ebp + esi - 0x1b4], al
lea eax, [edi + 0x694913c1]
mov dword [ebp - 0xc], eax
xor edi, 0xce0b7798
mov eax, dword [ebp - 8]
mov dword [ebp - 4], edi
lea edi, [ebp - 0x60]
mov byte [ebp + eax - 0x1b4], cl
movzx eax, byte [ebp + esi - 0x1b4]
mov esi, str.AswWinNLMEventsBase.Unadvise.Unadvise.fail__code:0x_x_
pop ecx
rep movsd dword es:[edi], dword [esi]
add eax, edx
movzx eax, al
movsw word es:[edi], word [esi]
mov al, byte [ebp + eax - 0x1b4]
mov byte [ebp - 0xd], al
xor eax, eax
movsb byte es:[edi], byte [esi]
cmp byte [ebp - 0x60], 0x53
mov dword [ebp - 0x14], eax
jne 0x1000ace3
mov cl, 0x53
test cl, cl
je 0x1000acb5
cmp byte [ebp + eax - 0x60], 0
je 0x1000acb5
call fcn.10004828
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
mov cl, byte [eax + str.SUVWAVAWH]
cmp cl, byte [ebp + eax - 0x60]
je 0x1000ac92
mov ecx, dword [ebp - 0x78]
mov edi, dword [ebp - 4]
cmp ecx, eax
jae 0x1000ace6
mov edx, dword [ebp - 0xc]
cmp ecx, 0x31c
jne 0x1000acd0
imul edx, edx, 0x7ab2ab84
sub edi, 0x6f2acc6e
inc ecx
cmp ecx, eax
jb 0x1000acc2
mov dword [ebp - 0xc], edx
mov dword [ebp - 0x78], ecx
jmp 0x1000ace6
mov edi, dword [ebp - 4]
mov ecx, dword [ebp - 0x18]
mov al, byte [ebp + ecx - 0x74]
xor al, byte [ebp - 0xd]
mov byte [ebp + ecx - 0x94], al
inc ecx
mov dword [ebp - 0x18], ecx
cmp ecx, 0x11
mov ecx, dword [ebp - 0x7c]
jb 0x1000ac16
mov ecx, dword [ebp - 0xc]
mov edx, 0x96
mov eax, ecx
mov byte [ebp - 0x83], 0
and eax, 0xd5b696cc
mov dword [ebp - 0x74], 0x1bae
mov dword [ebp - 4], eax
add ecx, 0x7cef8431
mov dword [0x1003ed78], eax
xor eax, eax
mov dword [ebp - 0x70], 0x66a
mov dword [ebp - 0x6c], 0xa08
mov dword [ebp - 0x68], edx
mov dword [ebp - 0x64], edx
cmp eax, 4
je 0x1000ad53
inc eax
cmp eax, 5
jl 0x1000ad48
mov eax, dword [ebp + eax*4 - 0x74]
imul esi, ecx, 0xc270bf70
xor eax, edx
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x14], esi
call fcn.10003f79
mov esi, str.cef_initialize
lea edi, [ebp - 0x28]
xor edx, edx
mov dword [ebp - 8], edx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
cmp byte [ebp - 0x28], 0x6d
jne 0x1000adb2
mov al, 0x6d
test al, al
je 0x1000adb2
cmp byte [ebp + edx - 0x28], 0
je 0x1000adb2
mov edx, str.merkhahebrew
mov ecx, str.AvBehav_SettingsLanguages
call fcn.10004ecb
mov edx, dword [ebp - 8]
inc edx
mov dword [ebp - 8], edx
mov al, byte [edx + str.merkhahebrew]
cmp al, byte [ebp + edx - 0x28]
je 0x1000ad85
mov ecx, dword [ebp - 0x14]
call fcn.10003f58
cmp dword [ebp - 4], edx
jae 0x1000ae29
mov esi, dword [ebp - 4]
mov edi, dword [ebp - 8]
push ecx
push ecx
call fcn.10004af5
add esp, 8
cmp dword [ebp - 4], 0x1478
jne 0x1000adeb
mov esi, ecx
or esi, 0x29d84aec
mov dword [0x1003ed78], esi
call fcn.100052fe
lea eax, [esi - 0x719dc14f]
mov ecx, str.pj.ikazayim.onibe
mov dword [0x1003ed2c], eax
call fcn.10005468
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp eax, edi
jae 0x1000ae19
mov ecx, dword [0x1003ed2c]
mov esi, dword [0x1003ed78]
jmp 0x1000adc5
mov eax, dword [0x1003ed78]
mov esi, dword [0x1003ed2c]
mov dword [ebp - 4], eax
jmp 0x1000ae2c
mov esi, dword [ebp - 0x14]
mov edx, str.pj.akoukuf.atakat
mov ecx, str.afii10096
mov dword [ebp - 0x14], edx
call fcn.10004ecb
push str.pj.odiakkoh.awaganus
mov edx, esi
call fcn.10004563
mov esi, str.gcircumflex
lea edi, [ebp - 0x28]
pop ecx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
cmp byte [ebp - 0x28], 0x6d
jne 0x1000ae7e
push 0x6d
xor esi, esi
pop eax
test al, al
je 0x1000ae7e
cmp byte [ebp + esi - 0x28], 0
je 0x1000ae7e
call fcn.10004b17
mov al, byte [esi + 0x100314e9]
inc esi
cmp al, byte [ebp + esi - 0x28]
je 0x1000ae61
xor ecx, ecx
mov dword [ebp - 0x58], 0x7b0
mov dword [ebp - 0x54], 0x21da
xor eax, eax
mov dword [ebp - 0x50], 0xadc
mov dword [ebp - 0x4c], 0x81
mov dword [ebp - 0x48], 0x111e
mov dword [ebp - 0x44], 0x1b8d
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x38], 0x1f2d
mov dword [ebp - 0x34], 0x2351
mov dword [ebp - 0x30], 0x79f
mov dword [ebp - 0x2c], 0x179a
cmp eax, 6
je 0x1000aed9
inc eax
cmp eax, 0xc
jl 0x1000aece
mov edi, dword [ebp + eax*4 - 0x58]
mov edx, 0xcb
imul eax, dword [ebp - 4], 0x592002c6
mov dword [ebp - 0x5c], 0x120d
mov dword [ebp - 0x58], 0x1d30
mov dword [ebp - 0x54], 0xff
mov dword [ebp - 0x50], edx
mov dword [0x1003ed2c], eax
mov dword [ebp - 0x4c], edx
mov dword [ebp - 0x48], 0x62a
mov dword [ebp - 0x44], 0x1fa2
mov dword [ebp - 0x40], edx
mov dword [ebp - 0x3c], 0x1cff
mov dword [ebp - 0x38], 0xa99
mov dword [ebp - 0x34], 0xb25
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x2c], 0x5c1
cmp ecx, 0xb
je 0x1000af44
inc ecx
cmp ecx, 0xd
jl 0x1000af39
mov eax, dword [ebp + ecx*4 - 0x5c]
mov ecx, dword [ebp - 0xb0]
xor eax, edx
mov dword [ebp - 0x78], eax
lea edx, [ebp - 0x94]
mov eax, dword [ebp - 0xac]
mov dword [ebp - 8], eax
call fcn.10019e4c
call eax
push dword [ebp - 0x7c]
mov esi, eax
lea eax, [ebp - 8]
push 4
push eax
push dword [ebp - 0xb4]
push esi
call fcn.1002bc61
add esp, 0x14
test eax, eax
jne 0x1000aff0
cmp dword [ebp - 8], eax
je 0x1000aff0
inc eax
mov dword [ebp - 0xa4], 0x102d
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x84], eax
xor eax, eax
mov dword [ebp - 0xa0], 0x135d
mov dword [ebp - 0x94], 0x4a7
mov dword [ebp - 0x90], 0xf5c
mov dword [ebp - 0x8c], 0x10fd
cmp eax, 2
je 0x1000afe4
inc eax
cmp eax, 9
jl 0x1000afd9
mov eax, dword [ebp + eax*4 - 0xa4]
jmp 0x1000b12f
push edi
push 4
lea eax, [ebp - 8]
push eax
push dword [ebp - 0x80]
push esi
call fcn.1002bc61
add esp, 0x14
test eax, eax
jne 0x1000b08b
cmp dword [ebp - 8], eax
jne 0x1000b08b
mov eax, 0xfb
mov dword [ebp - 0xa8], 0xf36
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x84], eax
xor eax, eax
mov dword [ebp - 0xa4], 0xf87
mov dword [ebp - 0x9c], 0x2018
mov dword [ebp - 0x98], 0x1c4f
mov dword [ebp - 0x94], 0xb4
mov dword [ebp - 0x8c], 0x2705
mov dword [ebp - 0x88], 0xcd9
cmp eax, 2
je 0x1000b07a
inc eax
cmp eax, 0xa
jl 0x1000b06f
mov eax, dword [ebp + eax*4 - 0xa8]
xor eax, 0xfa
jmp 0x1000b12f
call fcn.10004828
mov edi, dword [0x1003ed2c]
or edi, 0x2900b4b7
xor eax, eax
mov dword [0x1003ed78], edi
inc eax
cmp byte [eax + str.CleanupHardDiskSize], 0
jne 0x1000b0a4
mov dword [ebp - 0x80], eax
call fcn.10005880
cmp dword [ebp - 0x80], 0xdda
jae 0x1000b0e2
lea eax, [edi + 0x197770fc]
mov ecx, str.avcfg:__settings_Common_CanInstallMobileSecurityRefreshed
mov dword [0x1003ed2c], eax
call fcn.10005468
mov esi, dword [0x1003ed2c]
mov edi, dword [0x1003ed78]
jmp 0x1000b0f0
mov esi, edi
xor esi, 0xaf017839
mov dword [0x1003ed2c], esi
mov edx, str.merkhahebrew
mov ecx, str.SUVWAVAWH
call fcn.100043c9
cmp byte [str.pj.akoukuf.atakat], 0
je 0x1000b12c
push ecx
push ecx
mov edx, esi
call fcn.10005ab7
mov eax, dword [ebp - 0x14]
lea esi, [edi + 0x3d1e934e]
add esp, 8
inc eax
mov dword [ebp - 0x14], eax
cmp byte [eax], 0
jne 0x1000b108
mov dword [0x1003ed2c], esi
mov eax, dword [ebp - 0x78]
pop edi
pop esi
leave
ret