Function at 0x10038410
Capabilities:
Encode data using xor
Encrypt data using rc4 ksa
Resolve function by parsing pe exports

Disassembly:
push ebx
push esi
sub esp, 0x140
mov eax, dword [esp + 0x150]
mov dword [esp + 0x12c], eax
mov eax, dword [esp + 0x14c]
mov dword [esp + 0x130], eax
mov eax, dword [0x10060cf8]
mov dword [esp + 0x134], eax
mov ecx, dword [0x10060cf4]
mov dword [esp + 0x138], ecx
add eax, 0xe22366da
mov dword [esp + 0x13c], eax
mov eax, dword [esp + 0x138]
mov ecx, dword [esp + 0x134]
mov edx, dword [esp + 0x13c]
sub edx, 1
sub edx, 0xe22366da
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
mov byte [esp + 0x128], cl
cmp eax, 0xa
setl al
mov byte [esp + 0x129], al
xor cl, 0xff
mov byte [esp + 0x12a], cl
xor al, 0xff
mov byte [esp + 0x12b], al
mov al, byte [esp + 0x12a]
mov cl, 1
xor cl, 1
mov byte [esp + 0x126], cl
and al, 0xff
mov byte [esp + 0x127], al
mov al, byte [esp + 0x127]
mov ch, byte [esp + 0x126]
mov dl, byte [esp + 0x129]
mov cl, byte [esp + 0x12b]
mov ah, byte [esp + 0x128]
and ah, ch
and cl, 0xff
and dl, ch
or al, ah
or cl, dl
xor al, cl
mov byte [esp + 0x125], al
mov cl, byte [esp + 0x126]
mov dl, byte [esp + 0x12b]
mov al, byte [esp + 0x12a]
or al, dl
xor al, 0xff
or cl, 1
and al, cl
mov byte [esp + 0x124], al
mov cl, byte [esp + 0x124]
mov al, byte [esp + 0x125]
or al, cl
test al, 1
jne 0x1003853f
jmp 0x10038f77
mov eax, dword [0x10060cf8]
mov dword [esp + 0x118], eax
mov ecx, dword [0x10060cf4]
mov dword [esp + 0x11c], ecx
xor ecx, ecx
sub ecx, 1
add eax, ecx
mov dword [esp + 0x120], eax
mov eax, dword [esp + 0x11c]
mov edx, dword [esp + 0x120]
mov ecx, dword [esp + 0x118]
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
mov byte [esp + 0x116], cl
cmp eax, 0xa
setl al
mov byte [esp + 0x117], al
mov al, byte [esp + 0x116]
xor al, 0xff
mov byte [esp + 0x115], al
mov al, byte [esp + 0x117]
xor al, 0xff
mov byte [esp + 0x113], al
mov al, 1
xor al, 1
mov byte [esp + 0x114], al
mov dl, byte [esp + 0x114]
mov ah, byte [esp + 0x113]
mov cl, byte [esp + 0x115]
mov dh, byte [esp + 0x117]
mov bl, byte [esp + 0x116]
mov al, cl
and al, 0xff
and bl, dl
mov ch, ah
and ch, 0xff
and dh, dl
or al, bl
or ch, dh
xor al, ch
or cl, ah
xor cl, 0xff
or dl, 1
and cl, dl
or al, cl
mov byte [esp + 0x112], al
mov al, byte [esp + 0x112]
test al, 1
jne 0x10038623
jmp 0x10038f77
mov eax, dword [0x10060cf8]
mov dword [esp + 0x104], eax
mov ecx, dword [0x10060cf4]
mov dword [esp + 0x108], ecx
xor ecx, ecx
sub ecx, 1
add eax, ecx
mov dword [esp + 0x10c], eax
mov ecx, dword [esp + 0x10c]
mov eax, dword [esp + 0x104]
imul eax, ecx
mov dword [esp + 0x100], eax
mov eax, dword [esp + 0x100]
and eax, 1
mov dword [esp + 0xfc], eax
mov eax, dword [esp + 0xfc]
cmp eax, 0
sete al
mov byte [esp + 0xfb], al
mov cl, byte [esp + 0xfb]
mov eax, dword [esp + 0x108]
cmp eax, 0xa
setl dl
mov al, cl
and al, dl
xor cl, dl
or al, cl
mov byte [esp + 0xfa], al
mov al, byte [esp + 0xfa]
test al, 1
jne 0x100386be
jmp 0x10038f31
mov eax, dword [0x10060cf8]
mov dword [esp + 0xec], eax
mov ecx, dword [0x10060cf4]
mov dword [esp + 0xf0], ecx
sub eax, 0x45df5222
sub eax, 1
add eax, 0x45df5222
mov dword [esp + 0xf4], eax
mov ecx, dword [esp + 0xf4]
mov eax, dword [esp + 0xec]
imul eax, ecx
and eax, 1
cmp eax, 0
sete al
mov byte [esp + 0xeb], al
mov al, byte [esp + 0xeb]
mov ecx, dword [esp + 0xf0]
cmp ecx, 0xa
setl cl
mov byte [esp + 0xe9], cl
and al, cl
mov byte [esp + 0xea], al
mov cl, byte [esp + 0xe9]
mov al, byte [esp + 0xeb]
xor al, cl
mov byte [esp + 0xe8], al
mov cl, byte [esp + 0xe8]
mov al, byte [esp + 0xea]
or al, cl
test al, 1
jne 0x10038764
jmp 0x10038f7c
mov eax, dword [esp + 0x12c]
add eax, 0x1e
mov dword [esp + 0xe0], eax
mov eax, dword [0x1005f310]
mov dword [esp + 0xe4], eax
mov eax, dword [esp + 0xe4]
cmp dword [eax - 0x26a908dc], 1
sete al
mov byte [esp + 0xdf], al
mov eax, dword [0x10060cf8]
mov ecx, dword [0x10060cf4]
mov dword [esp + 0xd4], ecx
xor edx, edx
sub edx, 1
mov ecx, eax
add ecx, edx
imul eax, ecx
mov dword [esp + 0xd8], eax
mov ecx, dword [esp + 0xd4]
mov eax, dword [esp + 0xd8]
and eax, 1
cmp eax, 0
sete al
mov byte [esp + 0xd1], al
cmp ecx, 0xa
setl cl
mov byte [esp + 0xd2], cl
and al, cl
mov byte [esp + 0xd3], al
mov cl, byte [esp + 0xd2]
mov al, byte [esp + 0xd1]
xor al, cl
mov byte [esp + 0xd0], al
mov cl, byte [esp + 0xd0]
mov al, byte [esp + 0xd3]
or al, cl
test al, 1
jne 0x10038826
jmp 0x10038f7c
mov eax, dword [0x10060cf8]
mov dword [esp + 0xc4], eax
mov ecx, dword [0x10060cf4]
mov dword [esp + 0xc8], ecx
add eax, 0x54d32db2
mov dword [esp + 0xcc], eax
mov eax, dword [esp + 0xcc]
sub eax, 1
sub eax, 0x54d32db2
mov dword [esp + 0xc0], eax
mov ecx, dword [esp + 0xc0]
mov eax, dword [esp + 0xc4]
imul eax, ecx
and eax, 1
cmp eax, 0
sete al
mov byte [esp + 0xbf], al
mov eax, dword [esp + 0xc8]
cmp eax, 0xa
setl al
mov byte [esp + 0xbe], al
mov cl, byte [esp + 0xbe]
mov al, byte [esp + 0xbf]
mov dl, al
and dl, cl
mov byte [esp + 0xbc], dl
xor al, cl
mov byte [esp + 0xbd], al
mov cl, byte [esp + 0xbd]
mov al, byte [esp + 0xbc]
or al, cl
test al, 1
jne 0x100388d5
jmp 0x10038f31
mov cl, byte [esp + 0xdf]
xor eax, eax
test cl, 1
mov dword [esp + 0xb8], eax
jne 0x10038cc3
jmp 0x100388f3
mov eax, dword [esp + 0xb8]
mov ecx, dword [esp + 0x12c]
mov edx, dword [esp + 0xe0]
mov dword [esp + 0xb4], eax
mov bh, byte [edx + eax]
mov esi, 0x1e
xor edx, edx
div esi
mov eax, dword [esp + 0xb4]
mov bl, byte [ecx + edx]
mov dl, bh
xor dl, 0xff
and dl, 0x49
mov cl, 0xff
xor cl, 0x49
and bh, cl
mov dh, bl
xor dh, 0xff
and dh, 0x49
and bl, cl
mov ecx, dword [esp + 0x130]
or dl, bh
or dh, bl
xor dl, dh
mov byte [ecx + eax], dl
xor ecx, ecx
sub ecx, 1
sub eax, ecx
cmp eax, 5
mov dword [esp + 0xb8], eax
jne 0x100388f3
mov eax, dword [0x10060cf8]
mov dword [esp + 0xb0], eax
mov eax, dword [esp + 0xb0]
mov ecx, dword [0x10060cf4]
mov edx, eax
sub edx, 0x50fb9ab
sub edx, 1
add edx, 0x50fb9ab
imul eax, edx
and eax, 1
cmp eax, 0
sete al
mov byte [esp + 0xad], al
cmp ecx, 0xa
setl cl
mov byte [esp + 0xae], cl
xor al, 0xff
mov byte [esp + 0xaf], al
mov al, byte [esp + 0xad]
mov dl, byte [esp + 0xaf]
mov cl, byte [esp + 0xae]
xor cl, 0xff
mov byte [esp + 0xa9], cl
mov cl, 1
xor cl, 0
mov byte [esp + 0xaa], cl
and dl, 0
mov byte [esp + 0xab], dl
and al, cl
mov byte [esp + 0xac], al
mov cl, byte [esp + 0xaa]
mov dl, byte [esp + 0xa9]
mov al, byte [esp + 0xaf]
mov bl, byte [esp + 0xac]
mov ah, byte [esp + 0xab]
mov dh, byte [esp + 0xae]
mov ch, dl
and ch, 0
and dh, cl
or ah, bl
or ch, dh
xor ah, ch
mov byte [esp + 0xa7], ah
or al, dl
xor al, 0xff
or cl, 0
and al, cl
mov byte [esp + 0xa8], al
mov cl, byte [esp + 0xa8]
mov al, byte [esp + 0xa7]
or al, cl
mov byte [esp + 0xa6], al
mov al, byte [esp + 0xa6]
test al, 1
jne 0x10038a6f
jmp 0x10038ccc
mov eax, dword [0x1005f310]
mov dword [eax - 0x26a908dc], 1
mov eax, dword [0x10060cf8]
mov dword [esp + 0x98], eax
mov eax, dword [0x10060cf4]
mov dword [esp + 0x9c], eax
xor eax, eax
sub eax, 1
mov dword [esp + 0xa0], eax
mov ecx, dword [esp + 0x9c]
mov eax, dword [esp + 0x98]
mov esi, dword [esp + 0xa0]
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov byte [esp + 0x92], cl
mov dl, al
xor dl, 0xff
mov byte [esp + 0x93], dl
xor cl, 0xff
mov byte [esp + 0x94], cl
mov cl, 1
xor cl, 0
mov byte [esp + 0x95], cl
and dl, 0
mov byte [esp + 0x96], dl
and al, cl
mov byte [esp + 0x97], al
mov cl, byte [esp + 0x95]
mov al, byte [esp + 0x92]
mov dl, byte [esp + 0x94]
and dl, 0
mov byte [esp + 0x90], dl
and al, cl
mov byte [esp + 0x91], al
mov cl, byte [esp + 0x97]
mov al, byte [esp + 0x96]
or al, cl
mov byte [esp + 0x8f], al
mov al, byte [esp + 0x95]
mov dl, byte [esp + 0x94]
mov cl, byte [esp + 0x93]
mov ah, byte [esp + 0x8f]
mov dh, byte [esp + 0x91]
mov ch, byte [esp + 0x90]
or ch, dh
xor ah, ch
mov byte [esp + 0x8c], ah
or cl, dl
xor cl, 0xff
mov byte [esp + 0x8d], cl
or al, 0
mov byte [esp + 0x8e], al
mov al, byte [esp + 0x8c]
mov dl, byte [esp + 0x8e]
mov cl, byte [esp + 0x8d]
and cl, dl
or al, cl
test al, 1
jne 0x10038bb8
jmp 0x10038ccc
mov eax, dword [0x10060cf8]
mov dword [esp + 0x84], eax
mov eax, dword [0x10060cf4]
mov dword [esp + 0x88], eax
mov eax, dword [esp + 0x84]
sub eax, 0x837c0539
mov dword [esp + 0x80], eax
mov eax, dword [esp + 0x80]
sub eax, 1
mov dword [esp + 0x7c], eax
mov eax, dword [esp + 0x7c]
add eax, 0x837c0539
mov dword [esp + 0x78], eax
mov eax, dword [esp + 0x88]
mov edx, dword [esp + 0x78]
mov ecx, dword [esp + 0x84]
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
cmp eax, 0xa
setl dl
mov al, cl
and al, dl
xor cl, dl
or al, cl
mov byte [esp + 0x77], al
mov al, byte [esp + 0x77]
test al, 1
jne 0x10038c3f
jmp 0x10038f91
mov eax, dword [0x10060cf8]
mov dword [esp + 0x68], eax
mov ecx, dword [0x10060cf4]
mov dword [esp + 0x6c], ecx
sub eax, 0x4d7a4657
sub eax, 1
mov dword [esp + 0x70], eax
mov eax, dword [esp + 0x70]
add eax, 0x4d7a4657
mov dword [esp + 0x64], eax
mov ecx, dword [esp + 0x64]
mov eax, dword [esp + 0x68]
imul eax, ecx
and eax, 1
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x60]
cmp ecx, 0
sete cl
mov byte [esp + 0x5e], cl
cmp eax, 0xa
setl al
mov byte [esp + 0x5f], al
mov dl, byte [esp + 0x5f]
mov cl, byte [esp + 0x5e]
mov al, cl
and al, dl
xor cl, dl
or al, cl
mov byte [esp + 0x5d], al
mov al, byte [esp + 0x5d]
test al, 1
jne 0x10038cbe
jmp 0x10038f91
jmp 0x10038cc3
add esp, 0x140
pop esi
pop ebx
ret
mov eax, dword [0x10060cf8]
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x58]
mov ecx, dword [0x10060cf4]
mov dword [esp + 0x50], ecx
xor edx, edx
sub edx, 1
mov ecx, eax
add ecx, edx
imul eax, ecx
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x54]
and eax, 1
cmp eax, 0
sete al
mov byte [esp + 0x4f], al
mov eax, dword [esp + 0x50]
cmp eax, 0xa
setl al
mov byte [esp + 0x4e], al
mov cl, byte [esp + 0x4e]
mov al, byte [esp + 0x4f]
and al, cl
mov byte [esp + 0x4d], al
mov al, byte [esp + 0x4d]
mov dl, byte [esp + 0x4e]
mov cl, byte [esp + 0x4f]
xor cl, dl
or al, cl
test al, 1
jne 0x10038d3d
jmp 0x10038f52
mov eax, dword [0x1005f310]
mov dword [eax - 0x26a908dc], 1
mov eax, dword [0x10060cf8]
mov dword [esp + 0x40], eax
mov ecx, dword [0x10060cf4]
mov dword [esp + 0x44], ecx
sub eax, 0x586f616a
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x48]
sub ecx, 1
add ecx, 0x586f616a
imul eax, ecx
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x3c]
and eax, 1
cmp eax, 0
sete al
mov byte [esp + 0x3b], al
mov eax, dword [esp + 0x44]
cmp eax, 0xa
setl al
mov byte [esp + 0x3a], al
mov al, byte [esp + 0x3a]
mov cl, byte [esp + 0x3b]
xor cl, 0xff
mov byte [esp + 0x38], cl
xor al, 0xff
mov byte [esp + 0x39], al
mov ah, byte [esp + 0x39]
mov cl, byte [esp + 0x38]
mov dh, byte [esp + 0x3a]
mov bl, byte [esp + 0x3b]
mov dl, 1
xor dl, 1
mov al, cl
and al, 0xff
and bl, dl
mov ch, ah
and ch, 0xff
and dh, dl
or al, bl
or ch, dh
xor al, ch
or cl, ah
xor cl, 0xff
or dl, 1
and cl, dl
or al, cl
test al, 1
jne 0x10038df5
jmp 0x10038f52
mov eax, dword [0x10060cf8]
mov dword [esp + 0x30], eax
mov eax, dword [0x10060cf4]
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x30]
sub eax, 0xde644e19
sub eax, 1
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x2c]
add edx, 0xde644e19
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
mov byte [esp + 0x2a], cl
cmp eax, 0xa
setl al
mov byte [esp + 0x2b], al
mov dl, byte [esp + 0x2b]
mov cl, byte [esp + 0x2a]
mov al, cl
and al, dl
xor cl, dl
or al, cl
mov byte [esp + 0x29], al
mov al, byte [esp + 0x29]
test al, 1
jne 0x10038e68
jmp 0x10038f96
mov eax, dword [0x10060cf8]
mov dword [esp + 0x24], eax
mov eax, dword [0x10060cf4]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
mov edx, ecx
sub edx, 0x96dc18ea
sub edx, 1
add edx, 0x96dc18ea
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
cmp eax, 0xa
setl al
mov byte [esp + 0x19], al
mov ah, cl
xor ah, 0xff
mov byte [esp + 0x1a], ah
xor al, 0xff
mov byte [esp + 0x1b], al
mov dl, 1
xor dl, 1
mov byte [esp + 0x1c], dl
and ah, 0xff
mov byte [esp + 0x1d], ah
and cl, dl
mov byte [esp + 0x1e], cl
and al, 0xff
mov byte [esp + 0x1f], al
mov cl, byte [esp + 0x1b]
mov al, byte [esp + 0x1a]
mov ah, byte [esp + 0x1f]
mov dh, byte [esp + 0x1e]
mov dl, byte [esp + 0x1d]
mov bl, byte [esp + 0x1c]
mov ch, byte [esp + 0x19]
and ch, bl
or dl, dh
or ah, ch
xor dl, ah
mov byte [esp + 0x17], dl
or al, cl
xor al, 0xff
mov byte [esp + 0x18], al
mov al, byte [esp + 0x17]
mov cl, byte [esp + 0x18]
mov dl, byte [esp + 0x1c]
or dl, 1
and cl, dl
or al, cl
mov byte [esp + 0x16], al
mov al, byte [esp + 0x16]
test al, 1
jne 0x10038f2c
jmp 0x10038f96
jmp 0x10038a6f
mov eax, dword [0x1005f310]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x10]
add eax, 0xd956f724
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0xc]
mov eax, dword [eax]
jmp 0x100386be
mov eax, dword [0x1005f310]
mov dword [esp + 8], eax
mov eax, dword [esp + 8]
add eax, 0xd956f724
mov dword [esp + 4], eax
mov eax, dword [esp + 4]
mov dword [eax], 1
jmp 0x10038d3d
jmp 0x1003853f
mov eax, dword [0x1005f310]
mov dword [esp], eax
mov eax, dword [esp]
add eax, 0xd956f724
jmp 0x10038764
jmp 0x10038c3f
jmp 0x10038e68