Function at 0x100348f0
Capabilities:
Encode data using xor
Encrypt data using rc4 ksa
Resolve function by parsing pe exports

Disassembly:
push ebx
push esi
sub esp, 0x88
mov eax, dword [esp + 0x98]
mov dword [esp + 0x7c], eax
mov ecx, dword [esp + 0x94]
mov dword [esp + 0x80], ecx
add eax, 0x1d
mov dword [esp + 0x84], eax
mov eax, dword [0x1005e318]
mov dword [esp + 0x78], eax
mov eax, dword [esp + 0x78]
add eax, 0x981f2086
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0x74]
mov eax, dword [eax]
mov dword [esp + 0x70], eax
mov eax, dword [esp + 0x70]
cmp eax, 1
sete al
mov byte [esp + 0x6f], al
mov cl, byte [esp + 0x6f]
xor eax, eax
test cl, 1
mov dword [esp + 0x68], eax
jne 0x10034b20
jmp 0x10034961
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x7c]
mov edx, dword [esp + 0x84]
mov dword [esp + 0x64], eax
mov bh, byte [edx + eax]
mov esi, 0x1d
xor edx, edx
div esi
mov eax, dword [esp + 0x64]
mov bl, byte [ecx + edx]
mov dl, bh
xor dl, 0xff
and dl, 0xa
mov cl, 0xff
xor cl, 0xa
and bh, cl
mov dh, bl
xor dh, 0xff
and dh, 0xa
and bl, cl
mov ecx, dword [esp + 0x80]
or dl, bh
or dh, bl
xor dl, dh
mov byte [ecx + eax], dl
xor ecx, ecx
sub ecx, 1
sub eax, ecx
cmp eax, 7
mov dword [esp + 0x68], eax
jne 0x10034961
mov eax, dword [0x1005fd00]
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x60]
mov ecx, dword [0x1005fcfc]
mov dword [esp + 0x58], ecx
add eax, 0x442b0572
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x5c]
sub eax, 1
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x60]
mov edx, dword [esp + 0x54]
sub edx, 0x442b0572
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
mov byte [esp + 0x52], cl
cmp eax, 0xa
setl al
mov byte [esp + 0x53], al
mov cl, byte [esp + 0x53]
mov al, byte [esp + 0x52]
and al, cl
mov byte [esp + 0x51], al
mov al, byte [esp + 0x51]
mov dl, byte [esp + 0x53]
mov cl, byte [esp + 0x52]
xor cl, dl
or al, cl
test al, 1
jne 0x10034a46
jmp 0x10034c91
mov eax, dword [0x1005e318]
mov dword [eax - 0x67e0df7a], 1
mov eax, dword [0x1005fd00]
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x4c]
mov ecx, dword [0x1005fcfc]
mov dword [esp + 0x44], ecx
xor ecx, ecx
sub ecx, 1
add eax, ecx
mov dword [esp + 0x48], eax
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x48]
mov eax, dword [esp + 0x4c]
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov byte [esp + 0x3e], cl
mov dl, al
xor dl, 0xff
mov byte [esp + 0x3f], dl
xor cl, 0xff
mov byte [esp + 0x40], cl
mov cl, 1
xor cl, 1
mov byte [esp + 0x41], cl
and dl, 0xff
mov byte [esp + 0x42], dl
and al, cl
mov byte [esp + 0x43], al
mov cl, byte [esp + 0x41]
mov al, byte [esp + 0x3e]
mov dl, byte [esp + 0x40]
and dl, 0xff
mov byte [esp + 0x3c], dl
and al, cl
mov byte [esp + 0x3d], al
mov dl, byte [esp + 0x41]
mov ah, byte [esp + 0x40]
mov cl, byte [esp + 0x3f]
mov dh, byte [esp + 0x3d]
mov ch, byte [esp + 0x3c]
mov bl, byte [esp + 0x43]
mov al, byte [esp + 0x42]
or al, bl
or ch, dh
xor al, ch
or cl, ah
xor cl, 0xff
or dl, 1
and cl, dl
or al, cl
mov byte [esp + 0x3b], al
mov al, byte [esp + 0x3b]
test al, 1
jne 0x10034b1b
jmp 0x10034c91
jmp 0x10034b20
mov eax, dword [0x1005fd00]
mov dword [esp + 0x30], eax
mov eax, dword [0x1005fcfc]
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x30]
sub eax, 0x55e95e3
sub eax, 1
add eax, 0x55e95e3
mov dword [esp + 0x2c], eax
mov ecx, dword [esp + 0x2c]
mov eax, dword [esp + 0x30]
imul eax, ecx
and eax, 1
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x28]
cmp ecx, 0
sete cl
cmp eax, 0xa
setl dl
mov al, cl
xor al, 0xff
mov byte [esp + 0x22], al
mov ch, dl
xor ch, 0xff
mov byte [esp + 0x23], ch
mov ah, 1
xor ah, 1
mov byte [esp + 0x24], ah
and al, 0xff
and cl, ah
and ch, 0xff
mov byte [esp + 0x25], ch
and dl, ah
mov byte [esp + 0x26], dl
or al, cl
mov byte [esp + 0x27], al
mov cl, byte [esp + 0x23]
mov al, byte [esp + 0x22]
mov dl, byte [esp + 0x27]
mov ch, byte [esp + 0x26]
mov ah, byte [esp + 0x25]
or ah, ch
xor dl, ah
mov byte [esp + 0x20], dl
or al, cl
mov byte [esp + 0x21], al
mov al, byte [esp + 0x20]
mov dl, byte [esp + 0x24]
mov cl, byte [esp + 0x21]
xor cl, 0xff
or dl, 1
and cl, dl
or al, cl
test al, 1
jne 0x10034be3
jmp 0x10034cb4
mov eax, dword [0x1005fd00]
mov dword [esp + 0x18], eax
mov eax, dword [0x1005fcfc]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x18]
add eax, 0x42a18fb4
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x14]
sub eax, 1
sub eax, 0x42a18fb4
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x18]
imul eax, ecx
mov dword [esp + 0xc], eax
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0xc]
and eax, 1
cmp eax, 0
sete al
mov byte [esp + 9], al
cmp ecx, 0xa
setl cl
mov byte [esp + 0xa], cl
xor al, 0xff
mov byte [esp + 0xb], al
mov cl, byte [esp + 0xb]
mov dh, byte [esp + 0xa]
mov bl, byte [esp + 9]
mov ah, dh
xor ah, 0xff
mov dl, 1
xor dl, 1
mov al, cl
and al, 0xff
and bl, dl
mov ch, ah
and ch, 0xff
and dh, dl
or al, bl
or ch, dh
xor al, ch
or cl, ah
xor cl, 0xff
or dl, 1
and cl, dl
or al, cl
test al, 1
jne 0x10034c88
jmp 0x10034cb4
add esp, 0x88
pop esi
pop ebx
ret
mov eax, dword [0x1005e318]
mov dword [esp + 4], eax
mov eax, dword [esp + 4]
add eax, 0x981f2086
mov dword [esp], eax
mov eax, dword [esp]
mov dword [eax], 1
jmp 0x10034a46
jmp 0x10034be3