Function at 0x10006d30
Capabilities:
Encode data using xor
Terminate process

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x1001a82b
mov eax, dword fs:[0]
push eax
sub esp, 0x148
mov eax, dword [0x10026018]
xor eax, esp
mov dword [esp + 0x140], eax
push ebx
push esi
push edi
mov eax, dword [0x10026018]
xor eax, esp
push eax
lea eax, [esp + 0x158]
mov dword fs:[0], eax
xor eax, eax
mov byte [0x111841c8], 0
lea ebx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax + 0x10131538]
sub cl, 0x10
xor cl, 0x77
mov byte [eax + 0x10131538], cl
add eax, ebx
cmp eax, 0x400000
jb 0x10006d80
xor eax, eax
lea ecx, [ecx]
mov dl, byte [eax + 0x10131498]
sub dl, 0x10
xor dl, 0x77
mov byte [eax + 0x10131498], dl
add eax, ebx
cmp eax, 0xa0
jb 0x10006da0
xor eax, eax
lea ecx, [ecx]
mov cl, byte [eax + 0x10131418]
sub cl, 0x10
xor cl, 0x77
mov byte [eax + 0x10131418], cl
add eax, ebx
cmp eax, 0x7c
jb 0x10006dc0
xor eax, eax
jmp 0x10006de0
mov dl, byte [eax + 0x10130ee8]
sub dl, 0x10
xor dl, 0x77
mov byte [eax + 0x10130ee8], dl
add eax, ebx
cmp eax, 0x52f
jb 0x10006de0
xor eax, eax
lea ecx, [ecx]
mov cl, byte [eax + 0x10130e7c]
sub cl, 0x10
xor cl, 0x77
mov byte [eax + 0x10130e7c], cl
add eax, ebx
cmp eax, 0x32
jb 0x10006e00
xor eax, eax
jmp 0x10006e20
mov dl, byte [eax + 0x10130eb0]
sub dl, 0x10
xor dl, 0x77
mov byte [eax + 0x10130eb0], dl
add eax, ebx
cmp eax, 0x32
jb 0x10006e20
xor edi, edi
cmp edi, 0x52f
jge 0x10007006
cmp edi, 0xa0
jge 0x10006ea4
mov cl, byte [edi + 0x10131498]
mov eax, edi
add eax, 0x100053d0
cmp cl, byte [eax]
je 0x10006ea4
mov byte [0x111841c8], bl
mov ecx, 0x93
xor eax, eax
lea ecx, [ecx]
mov dl, byte [eax + 0x10020af0]
xor dl, cl
inc ecx
mov byte [esp + eax + 0x10], dl
add eax, ebx
and ecx, 0xff
cmp eax, 0x1f
jb 0x10006e70
push edi
lea eax, [esp + 0x14]
push eax
push 0
mov ecx, 0x10126568
mov byte [esp + 0x3b], 0
call fcn.1000b840
add esp, 0xc
cmp edi, 0x7c
jge 0x10006f04
mov dl, byte [edi + 0x10131418]
mov ecx, edi
add ecx, fcn.10004e20
cmp dl, byte [ecx]
je 0x10006f04
mov byte [0x111841c8], bl
mov ecx, 0xca
xor eax, eax
jmp 0x10006ed0
mov dl, byte [eax + 0x10020b10]
xor dl, cl
inc ecx
mov byte [esp + eax + 0x10], dl
add eax, ebx
and ecx, 0xff
cmp eax, 0x1a
jb 0x10006ed0
push edi
lea eax, [esp + 0x14]
push eax
push 0
mov ecx, 0x10126568
mov byte [esp + 0x36], 0
call fcn.1000b840
add esp, 0xc
mov dl, byte [edi + 0x10130ee8]
mov ecx, fcn.10004ea0
cmp dl, byte [ecx + edi]
je 0x10006f55
mov byte [0x111841c8], bl
mov ecx, 0x55
xor eax, eax
mov dl, byte [eax + 0x10020b2c]
xor dl, cl
inc ecx
mov byte [esp + eax + 0x10], dl
add eax, ebx
and ecx, 0xff
cmp eax, 0x1a
jb 0x10006f21
push edi
lea eax, [esp + 0x14]
push eax
push 0
mov ecx, 0x10126568
mov byte [esp + 0x36], 0
call fcn.1000b840
add esp, 0xc
cmp edi, 0x32
jae 0x10007006
mov dl, byte [edi + 0x10130e7c]
mov ecx, 0x1000ec10
cmp dl, byte [ecx + edi]
je 0x10006fb4
mov byte [0x111841c8], bl
mov ecx, 0xa7
xor eax, eax
jmp 0x10006f80
mov dl, byte [eax + 0x10020b48]
xor dl, cl
inc ecx
mov byte [esp + eax + 0x10], dl
add eax, ebx
and ecx, 0xff
cmp eax, 0x20
jb 0x10006f80
push edi
lea eax, [esp + 0x14]
push eax
push 0
mov ecx, 0x10126568
mov byte [esp + 0x3c], 0
call fcn.1000b840
add esp, 0xc
mov cl, byte [edi + 0x10130eb0]
mov edx, dword [0x10130ee4]
cmp cl, byte [edx + edi]
je 0x10007006
mov byte [0x111841c8], bl
mov ecx, 0x7f
xor eax, eax
mov dl, byte [eax + 0x10020b6c]
xor dl, cl
inc ecx
mov byte [esp + eax + 0x10], dl
add eax, ebx
and ecx, 0xff
cmp eax, 0x1d
jb 0x10006fd2
push edi
lea eax, [esp + 0x14]
push eax
push 0
mov ecx, 0x10126568
mov byte [esp + 0x39], 0
call fcn.1000b840
add esp, 0xc
lea eax, [edi + 0x400000]
cmp eax, 0x400000
je 0x10007aa8
cmp eax, 0x4d04cd
je 0x10007aa8
cmp eax, 0x4d2355
je 0x10007aa8
cmp eax, 0x4efeb0
je 0x10007aa8
cmp eax, 0x51ec90
je 0x10007aa8
cmp eax, 0x51ee20
jl 0x10007055
cmp eax, 0x556c38
jle 0x10007aa8
cmp eax, 0x57491b
jl 0x10007067
cmp eax, 0x574922
jle 0x10007aa8
cmp eax, 0x574f2f
jl 0x10007079
cmp eax, 0x574f36
jle 0x10007aa8
cmp eax, 0x574ffd
jl 0x1000708b
cmp eax, 0x575004
jle 0x10007aa8
cmp eax, 0x57655b
jl 0x1000709d
cmp eax, 0x57655f
jle 0x10007aa8
cmp eax, 0x576d93
jl 0x100070af
cmp eax, 0x576d97
jle 0x10007aa8
cmp eax, 0x576ddb
jl 0x100070c1
cmp eax, 0x576ddf
jle 0x10007aa8
cmp eax, 0x57acbf
jl 0x100070d3
cmp eax, 0x57acc3
jle 0x10007aa8
cmp eax, 0x57ad03
jl 0x100070e5
cmp eax, 0x57ad07
jle 0x10007aa8
cmp eax, 0x57ad47
jl 0x100070f7
cmp eax, 0x57ad4b
jle 0x10007aa8
cmp eax, 0x57be80
jl 0x10007109
cmp eax, 0x57be84
jle 0x10007aa8
cmp eax, 0x57bf0e
jl 0x1000711b
cmp eax, 0x57bf12
jle 0x10007aa8
cmp eax, 0x57bf78
jl 0x1000712d
cmp eax, 0x57bf7c
jle 0x10007aa8
cmp eax, 0x57c057
jl 0x1000713f
cmp eax, 0x57c05b
jle 0x10007aa8
cmp eax, 0x57c0bb
jl 0x10007151
cmp eax, 0x57c0bf
jle 0x10007aa8
cmp eax, 0x57c125
jl 0x10007163
cmp eax, 0x57c129
jle 0x10007aa8
cmp eax, 0x57d279
jl 0x10007175
cmp eax, 0x57d27a
jle 0x10007aa8
cmp eax, 0x5802f5
jl 0x10007187
cmp eax, 0x5802f6
jle 0x10007aa8
cmp eax, 0x5883bc
jl 0x10007199
cmp eax, 0x5883c0
jle 0x10007aa8
cmp eax, 0x5883f4
jl 0x100071ab
cmp eax, 0x5883f8
jle 0x10007aa8
cmp eax, 0x588661
jl 0x100071bd
cmp eax, 0x588665
jle 0x10007aa8
cmp eax, 0x5977e0
je 0x10007aa8
cmp eax, 0x59af55
je 0x10007aa8
cmp eax, 0x59b24a
je 0x10007aa8
cmp eax, 0x5b768f
jl 0x100071f0
cmp eax, 0x5b7693
jle 0x10007aa8
cmp eax, 0x5b770c
jl 0x10007202
cmp eax, 0x5b7710
jle 0x10007aa8
cmp eax, 0x5bafac
jl 0x10007214
cmp eax, 0x5bafaf
jle 0x10007aa8
cmp eax, 0x5db541
je 0x10007aa8
cmp eax, 0x5db55f
je 0x10007aa8
cmp eax, 0x5de2b4
je 0x10007aa8
cmp eax, 0x5edfe0
je 0x10007aa8
cmp eax, 0x5f8924
jl 0x10007252
cmp eax, 0x5f8928
jle 0x10007aa8
cmp eax, 0x608cad
jl 0x10007264
cmp eax, 0x608fb0
jle 0x10007aa8
cmp eax, 0x60954e
jl 0x10007276
cmp eax, 0x609550
jle 0x10007aa8
cmp eax, 0x6097b0
je 0x10007aa8
cmp eax, 0x60b36a
jl 0x10007293
cmp eax, 0x60b373
jle 0x10007aa8
cmp eax, 0x60f04c
jl 0x100072a5
cmp eax, 0x60f052
jle 0x10007aa8
cmp eax, 0x6e899d
jl 0x100072b7
cmp eax, 0x6e89a1
jle 0x10007aa8
cmp eax, 0x7126fa
jl 0x100072c9
cmp eax, 0x7126fe
jle 0x10007aa8
cmp eax, 0x72d1bd
jl 0x100072db
cmp eax, 0x72d1be
jle 0x10007aa8
cmp eax, 0x72d1cc
jl 0x100072ed
cmp eax, 0x72d1d0
jle 0x10007aa8
cmp eax, 0x74cd50
jl 0x100072ff
cmp eax, 0x74cd54
jle 0x10007aa8
cmp eax, 0x74cd82
je 0x10007aa8
cmp eax, 0x771328
jl 0x1000731c
cmp eax, 0x77132c
jle 0x10007aa8
cmp eax, 0x77135c
je 0x10007aa8
cmp eax, 0x789767
jl 0x10007339
cmp eax, 0x78976b
jle 0x10007aa8
cmp eax, 0x789a63
jl 0x1000734b
cmp eax, 0x789a67
jle 0x10007aa8
cmp eax, 0x789dac
jl 0x1000735d
cmp eax, 0x789db0
jle 0x10007aa8
cmp eax, 0x78b0bd
jl 0x1000736f
cmp eax, 0x78b0c0
jle 0x10007aa8
cmp eax, 0x830d66
je 0x10007aa8
cmp eax, 0x830e57
je 0x10007aa8
cmp eax, 0x830ed5
je 0x10007aa8
cmp eax, 0x830fd8
je 0x10007aa8
cmp eax, 0x83245d
je 0x10007aa8
cmp eax, 0x842859
jl 0x100073b8
cmp eax, 0x84285d
jle 0x10007aa8
cmp eax, 0x85cc37
je 0x10007aa8
cmp eax, 0x886b30
je 0x10007aa8
cmp eax, 0x8875e0
je 0x10007aa8
cmp eax, 0x95e9fa
je 0x10007aa8
cmp eax, 0x608200
je 0x10007aa8
cmp eax, 0x74cd30
je 0x10007aa8
cmp eax, 0x771310
je 0x10007aa8
cmp eax, 0x588621
jl 0x10007417
cmp eax, 0x588625
jle 0x10007aa8
cmp eax, 0x40f2f9
je 0x10007aa8
cmp eax, 0x40f2fa
je 0x10007aa8
cmp eax, 0x40f2fb
je 0x10007aa8
cmp eax, 0x40f2fc
je 0x10007aa8
cmp eax, 0x40f30d
je 0x10007aa8
cmp eax, 0x40f30e
je 0x10007aa8
cmp eax, 0x40f30f
je 0x10007aa8
cmp eax, 0x40f310
je 0x10007aa8
cmp eax, 0x40f7b8
je 0x10007aa8
cmp eax, 0x40f7dd
je 0x10007aa8
cmp eax, 0x41f538
je 0x10007aa8
cmp eax, 0x42622e
je 0x10007aa8
cmp eax, 0x426cfe
je 0x10007aa8
cmp eax, 0x4283cb
je 0x10007aa8
cmp eax, 0x428e88
je 0x10007aa8
cmp eax, 0x42b032
je 0x10007aa8
cmp eax, 0x42b037
je 0x10007aa8
cmp eax, 0x4833da
je 0x10007aa8
cmp eax, 0x4833df
je 0x10007aa8
cmp eax, 0x48bc83
je 0x10007aa8
cmp eax, 0x48bc8d
je 0x10007aa8
cmp eax, 0x48bcee
je 0x10007aa8
cmp eax, 0x48bcf8
je 0x10007aa8
cmp eax, 0x48bdce
je 0x10007aa8
cmp eax, 0x48bdd8
je 0x10007aa8
cmp eax, 0x48be6e
je 0x10007aa8
cmp eax, 0x48be78
je 0x10007aa8
cmp eax, 0x48c091
je 0x10007aa8
cmp eax, 0x4d06fa
je 0x10007aa8
cmp eax, 0x4d0706
je 0x10007aa8
cmp eax, 0x4d0723
je 0x10007aa8
cmp eax, 0x4d072f
je 0x10007aa8
cmp eax, 0x4d7179
je 0x10007aa8
cmp eax, 0x4d717e
je 0x10007aa8
cmp eax, 0x4d7183
je 0x10007aa8
cmp eax, 0x4d7a0e
je 0x10007aa8
cmp eax, 0x4d7a13
je 0x10007aa8
cmp eax, 0x4d7a18
je 0x10007aa8
cmp eax, 0x4d7d71
je 0x10007aa8
cmp eax, 0x4d7d7e
je 0x10007aa8
cmp eax, 0x4d7d8d
je 0x10007aa8
cmp eax, 0x4d7d9a
je 0x10007aa8
cmp eax, 0x4d7e06
je 0x10007aa8
cmp eax, 0x4d7e13
je 0x10007aa8
cmp eax, 0x4d7e1e
je 0x10007aa8
cmp eax, 0x4d7e8c
je 0x10007aa8
cmp eax, 0x4d7e99
je 0x10007aa8
cmp eax, 0x4d9324
je 0x10007aa8
cmp eax, 0x4d9749
je 0x10007aa8
cmp eax, 0x4e77e7
je 0x10007aa8
cmp eax, 0x4e77e8
je 0x10007aa8
cmp eax, 0x4e77e9
je 0x10007aa8
add edi, ebx
cmp edi, 0x400000
jb 0x10006e3b
cmp byte [0x111841c8], 0
mov edi, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
je 0x10007b48
mov ecx, 0x47
xor eax, eax
mov dl, byte [eax + 0x10020bb0]
xor dl, cl
inc ecx
mov byte [esp + eax + 0x10], dl
add eax, ebx
and ecx, 0xff
cmp eax, 0x1f
jb 0x10007ad0
mov byte [esp + 0x2f], 0
lea eax, [esp + 0x10]
push eax
push 2
mov eax, 0x10130668
mov dword [esp + 0x168], 0
call fcn.10014920
xor eax, eax
add esp, 8
push eax
mov dword [0x11183e48], eax
mov dword [0x11183e4c], eax
mov dword [0x11183e50], eax
mov dword [0x11183e54], eax
mov dword [0x11183e58], eax
mov dword [0x11183e5c], eax
mov dword [0x11183e60], eax
mov dword [0x11183e64], eax
call edi
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
jmp dword [pe_dos_header]
push 0x400000
push 0
push 0x10131538
call sub.MSVCR100.dll_memset
add esp, 0xc
push 0
push 0x400000
push 0x10131538
push 0x400000
call edi
mov esi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
push eax
call esi
xor eax, eax
lea ebx, [ebx]
mov cl, byte [eax + 0x10131538]
sub cl, 0x10
xor cl, 0x77
mov byte [eax + 0x10131538], cl
add eax, ebx
cmp eax, 0x400000
jb 0x10007b80
push 0xa0
push 0
push 0x10131498
call sub.MSVCR100.dll_memset
add esp, 0xc
push 0
push 0xa0
push 0x10131498
push 0x100053d0
call edi
push eax
call esi
xor eax, eax
jmp 0x10007bd0
mov dl, byte [eax + 0x10131498]
sub dl, 0x10
xor dl, 0x77
mov byte [eax + 0x10131498], dl
add eax, ebx
cmp eax, 0xa0
jb 0x10007bd0
push 0x7c
push 0
push 0x10131418
call sub.MSVCR100.dll_memset
add esp, 0xc
push 0
push 0x7c
push 0x10131418
push fcn.10004e20
call edi
push eax
call esi
xor eax, eax
mov cl, byte [eax + 0x10131418]
sub cl, 0x10
xor cl, 0x77
mov byte [eax + 0x10131418], cl
add eax, ebx
cmp eax, 0x7c
jb 0x10007c11
push 0x52f
push 0
push 0x10130ee8
call sub.MSVCR100.dll_memset
add esp, 0xc
push 0
push 0x52f
push 0x10130ee8
push fcn.10004ea0
call edi
push eax
call esi
xor eax, eax
jmp 0x10007c60
mov dl, byte [eax + 0x10130ee8]
sub dl, 0x10
xor dl, 0x77
mov byte [eax + 0x10130ee8], dl
add eax, ebx
cmp eax, 0x52f
jb 0x10007c60
xor eax, eax
lea ecx, [ecx]
mov cl, byte [eax + 0x10130e7c]
sub cl, 0x10
xor cl, 0x77
mov byte [eax + 0x10130e7c], cl
add eax, ebx
cmp eax, 0x32
jb 0x10007c80
xor eax, eax
jmp 0x10007ca0
mov dl, byte [eax + 0x10130eb0]
sub dl, 0x10
xor dl, 0x77
mov byte [eax + 0x10130eb0], dl
add eax, ebx
cmp eax, 0x32
jb 0x10007ca0
mov ecx, dword [esp + 0x158]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x140]
xor ecx, esp
call fcn.10019876
mov esp, ebp
pop ebp
ret