Function at 0x10044720
Capabilities:
Encode data using xor
Encrypt data using rc4 ksa
Resolve function by parsing pe exports

Disassembly:
push ebx
push esi
sub esp, 0xb8
mov eax, dword [esp + 0xc8]
mov dword [esp + 0xac], eax
mov ecx, dword [esp + 0xc4]
mov dword [esp + 0xb0], ecx
add eax, 0x12
mov dword [esp + 0xb4], eax
mov eax, dword [0x10067340]
mov dword [esp + 0xa8], eax
mov eax, dword [esp + 0xa8]
add eax, 0x37a06de5
mov dword [esp + 0xa4], eax
mov eax, dword [esp + 0xa4]
mov eax, dword [eax]
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0xa0]
cmp eax, 1
sete al
mov byte [esp + 0x9f], al
mov cl, byte [esp + 0x9f]
xor eax, eax
test cl, 1
mov dword [esp + 0x98], eax
jne 0x1004485a
jmp 0x100447af
mov eax, dword [esp + 0x98]
mov ecx, dword [esp + 0xac]
mov edx, dword [esp + 0xb4]
mov dword [esp + 0x94], eax
mov bh, byte [edx + eax]
mov esi, 0x12
xor edx, edx
div esi
mov eax, dword [esp + 0x94]
mov bl, byte [ecx + edx]
mov dl, bh
xor dl, 0xff
and dl, 0x2d
mov cl, 0xff
xor cl, 0x2d
and bh, cl
mov dh, bl
xor dh, 0xff
and dh, 0x2d
and bl, cl
mov ecx, dword [esp + 0xb0]
or dl, bh
or dh, bl
xor dl, dh
mov byte [ecx + eax], dl
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, 1
add ecx, eax
xor eax, eax
sub eax, ecx
cmp eax, 7
mov dword [esp + 0x98], eax
jne 0x100447af
mov eax, dword [0x10067340]
mov dword [esp + 0x90], eax
mov eax, dword [esp + 0x90]
add eax, 0x37a06de5
mov dword [esp + 0x8c], eax
mov eax, dword [esp + 0x8c]
mov dword [eax], 1
jmp 0x1004485a
mov eax, dword [0x10068c98]
mov dword [esp + 0x88], eax
mov eax, dword [esp + 0x88]
mov ecx, dword [0x10068c94]
mov dword [esp + 0x80], ecx
xor edx, edx
sub edx, 1
mov ecx, eax
add ecx, edx
imul eax, ecx
and eax, 1
cmp eax, 0
sete al
mov byte [esp + 0x87], al
mov cl, byte [esp + 0x87]
mov eax, dword [esp + 0x80]
cmp eax, 0xa
setl al
mov byte [esp + 0x7d], al
xor cl, 0xff
mov byte [esp + 0x7e], cl
xor al, 0xff
mov byte [esp + 0x7f], al
mov al, byte [esp + 0x87]
mov dl, byte [esp + 0x7e]
mov cl, 1
xor cl, 1
mov byte [esp + 0x7a], cl
and dl, 0xff
mov byte [esp + 0x7b], dl
and al, cl
mov byte [esp + 0x7c], al
mov al, byte [esp + 0x7a]
mov dl, byte [esp + 0x7f]
mov cl, byte [esp + 0x7e]
mov bl, byte [esp + 0x7c]
mov ah, byte [esp + 0x7b]
mov dh, byte [esp + 0x7d]
mov ch, dl
and ch, 0xff
and dh, al
or ah, bl
or ch, dh
xor ah, ch
mov byte [esp + 0x77], ah
or cl, dl
xor cl, 0xff
mov byte [esp + 0x78], cl
or al, 1
mov byte [esp + 0x79], al
mov al, byte [esp + 0x77]
mov dl, byte [esp + 0x79]
mov cl, byte [esp + 0x78]
and cl, dl
or al, cl
test al, 1
jne 0x10044931
jmp 0x10044cf2
mov eax, dword [0x10068c98]
mov dword [esp + 0x68], eax
mov ecx, dword [0x10068c94]
mov dword [esp + 0x6c], ecx
sub eax, 0xeea4a4f3
mov dword [esp + 0x70], eax
mov ecx, dword [esp + 0x6c]
mov eax, dword [esp + 0x68]
mov edx, dword [esp + 0x70]
sub edx, 1
add edx, 0xeea4a4f3
imul eax, edx
and eax, 1
cmp eax, 0
sete al
mov byte [esp + 0x65], al
cmp ecx, 0xa
setl cl
mov byte [esp + 0x66], cl
xor al, 0xff
mov byte [esp + 0x67], al
mov al, byte [esp + 0x67]
mov cl, byte [esp + 0x66]
xor cl, 0xff
mov byte [esp + 0x62], cl
mov cl, 1
xor cl, 1
mov byte [esp + 0x63], cl
and al, 0xff
mov byte [esp + 0x64], al
mov al, byte [esp + 0x64]
mov ah, byte [esp + 0x63]
mov dl, byte [esp + 0x66]
mov ch, byte [esp + 0x62]
mov cl, byte [esp + 0x65]
and cl, ah
and ch, 0xff
mov byte [esp + 0x5f], ch
and dl, ah
mov byte [esp + 0x60], dl
or al, cl
mov byte [esp + 0x61], al
mov cl, byte [esp + 0x62]
mov al, byte [esp + 0x67]
mov dl, byte [esp + 0x61]
mov ch, byte [esp + 0x60]
mov ah, byte [esp + 0x5f]
or ah, ch
xor dl, ah
mov byte [esp + 0x5d], dl
or al, cl
xor al, 0xff
mov byte [esp + 0x5e], al
mov al, byte [esp + 0x5d]
mov cl, byte [esp + 0x5e]
mov dl, byte [esp + 0x63]
or dl, 1
and cl, dl
or al, cl
test al, 1
jne 0x10044a0d
jmp 0x10044cf7
mov eax, dword [0x10068c98]
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x58]
mov ecx, dword [0x10068c94]
mov dword [esp + 0x50], ecx
mov ecx, eax
sub ecx, 0xfebae7c2
sub ecx, 1
add ecx, 0xfebae7c2
imul eax, ecx
and eax, 1
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x54]
cmp eax, 0
sete al
mov byte [esp + 0x4f], al
mov ah, byte [esp + 0x4f]
mov ecx, dword [esp + 0x50]
cmp ecx, 0xa
setl al
mov ch, ah
xor ch, 0xff
mov byte [esp + 0x48], ch
mov dl, al
xor dl, 0xff
mov byte [esp + 0x49], dl
mov cl, 1
xor cl, 1
mov byte [esp + 0x4a], cl
and ch, 0xff
mov byte [esp + 0x4b], ch
and ah, cl
mov byte [esp + 0x4c], ah
and dl, 0xff
mov byte [esp + 0x4d], dl
and al, cl
mov byte [esp + 0x4e], al
mov dl, byte [esp + 0x4a]
mov ah, byte [esp + 0x49]
mov cl, byte [esp + 0x48]
mov dh, byte [esp + 0x4e]
mov ch, byte [esp + 0x4d]
mov bl, byte [esp + 0x4c]
mov al, byte [esp + 0x4b]
or al, bl
or ch, dh
xor al, ch
or cl, ah
xor cl, 0xff
or dl, 1
and cl, dl
or al, cl
mov byte [esp + 0x47], al
mov al, byte [esp + 0x47]
test al, 1
jne 0x10044ad3
jmp 0x10044cf7
mov eax, dword [0x10068c98]
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x40]
mov ecx, dword [0x10068c94]
mov dword [esp + 0x38], ecx
add eax, 0x78472c1c
sub eax, 1
sub eax, 0x78472c1c
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x3c]
mov eax, dword [esp + 0x40]
imul eax, edx
and eax, 1
cmp eax, 0
sete al
mov byte [esp + 0x35], al
cmp ecx, 0xa
setl cl
mov byte [esp + 0x36], cl
xor al, 0xff
mov byte [esp + 0x37], al
mov al, byte [esp + 0x35]
mov dl, byte [esp + 0x37]
mov cl, byte [esp + 0x36]
xor cl, 0xff
mov byte [esp + 0x31], cl
mov cl, 1
xor cl, 1
mov byte [esp + 0x32], cl
and dl, 0xff
mov byte [esp + 0x33], dl
and al, cl
mov byte [esp + 0x34], al
mov dl, byte [esp + 0x32]
mov ah, byte [esp + 0x31]
mov cl, byte [esp + 0x37]
mov bl, byte [esp + 0x34]
mov al, byte [esp + 0x33]
mov dh, byte [esp + 0x36]
mov ch, ah
and ch, 0xff
and dh, dl
or al, bl
or ch, dh
xor al, ch
or cl, ah
xor cl, 0xff
or dl, 1
and cl, dl
or al, cl
mov byte [esp + 0x30], al
mov al, byte [esp + 0x30]
test al, 1
jne 0x10044b96
jmp 0x10044cf2
mov eax, dword [0x10068c98]
mov dword [esp + 0x24], eax
mov ecx, dword [0x10068c94]
mov dword [esp + 0x28], ecx
sub eax, 0xd52af1f6
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x2c]
sub eax, 1
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x20]
add eax, 0xd52af1f6
mov dword [esp + 0x1c], eax
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x24]
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
mov byte [esp + 0x1a], dl
xor al, cl
mov byte [esp + 0x1b], al
mov cl, byte [esp + 0x1b]
mov al, byte [esp + 0x1a]
or al, cl
mov byte [esp + 0x19], al
mov al, byte [esp + 0x19]
test al, 1
jne 0x10044c15
jmp 0x10044cfc
mov eax, dword [0x10068c98]
mov dword [esp + 0x10], eax
mov eax, dword [0x10068c94]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x10]
mov ecx, eax
sub ecx, 0x193a9ed4
sub ecx, 1
add ecx, 0x193a9ed4
imul eax, ecx
and eax, 1
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
cmp ecx, 0
sete cl
mov byte [esp + 0xa], cl
cmp eax, 0xa
setl al
mov byte [esp + 0xb], al
mov cl, byte [esp + 0xa]
mov al, byte [esp + 0xb]
mov ah, cl
xor ah, 0xff
mov byte [esp + 4], ah
xor al, 0xff
mov byte [esp + 5], al
mov dl, 1
xor dl, 1
mov byte [esp + 6], dl
and ah, 0xff
mov byte [esp + 7], ah
and cl, dl
mov byte [esp + 8], cl
and al, 0xff
mov byte [esp + 9], al
mov al, byte [esp + 6]
mov dl, byte [esp + 5]
mov cl, byte [esp + 4]
mov ch, byte [esp + 9]
mov bl, byte [esp + 8]
mov ah, byte [esp + 7]
mov dh, byte [esp + 0xb]
and dh, al
or ah, bl
or ch, dh
xor ah, ch
mov byte [esp + 1], ah
or cl, dl
xor cl, 0xff
mov byte [esp + 2], cl
or al, 1
mov byte [esp + 3], al
mov al, byte [esp + 1]
mov dl, byte [esp + 3]
mov cl, byte [esp + 2]
and cl, dl
or al, cl
test al, 1
jne 0x10044ce9
jmp 0x10044cfc
add esp, 0xb8
pop esi
pop ebx
ret
jmp 0x10044931
jmp 0x10044a0d
jmp 0x10044c15