Function at 0x1003e8b0
Capabilities:
Encode data using xor
Encrypt data using rc4 ksa
Resolve function by parsing pe exports

Disassembly:
push ebx
push esi
sub esp, 0xc8
mov eax, dword [esp + 0xd8]
mov dword [esp + 0xbc], eax
mov ecx, dword [esp + 0xd4]
mov dword [esp + 0xc0], ecx
add eax, 0x1f
mov dword [esp + 0xc4], eax
mov eax, dword [0x1005f340]
mov dword [esp + 0xb8], eax
mov eax, dword [esp + 0xb8]
add eax, 0xb891eff8
mov dword [esp + 0xb4], eax
mov eax, dword [esp + 0xb4]
mov eax, dword [eax]
mov dword [esp + 0xb0], eax
mov eax, dword [esp + 0xb0]
cmp eax, 1
sete al
mov byte [esp + 0xaf], al
mov cl, byte [esp + 0xaf]
xor eax, eax
test cl, 1
mov dword [esp + 0xa8], eax
jne 0x1003ef38
jmp 0x1003e93f
mov eax, dword [esp + 0xa8]
mov ecx, dword [esp + 0xbc]
mov edx, dword [esp + 0xc4]
mov dword [esp + 0xa4], eax
mov bh, byte [edx + eax]
mov esi, 0x1f
xor edx, edx
div esi
mov eax, dword [esp + 0xa4]
mov bl, byte [ecx + edx]
mov dl, bh
xor dl, 0xff
and dl, 0x32
mov cl, 0xff
xor cl, 0x32
and bh, cl
mov dh, bl
xor dh, 0xff
and dh, 0x32
and bl, cl
mov ecx, dword [esp + 0xc0]
or dl, bh
or dh, bl
xor dl, dh
mov byte [ecx + eax], dl
xor ecx, ecx
sub ecx, 1
sub eax, ecx
cmp eax, 7
mov dword [esp + 0xa8], eax
jne 0x1003e93f
mov eax, dword [0x10060c98]
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0xa0]
mov ecx, dword [0x10060c94]
mov dword [esp + 0x98], ecx
xor ecx, ecx
sub ecx, 1
add eax, ecx
mov dword [esp + 0x9c], eax
mov ecx, dword [esp + 0x9c]
mov eax, dword [esp + 0xa0]
imul eax, ecx
and eax, 1
cmp eax, 0
sete al
mov byte [esp + 0x97], al
mov al, byte [esp + 0x97]
mov ecx, dword [esp + 0x98]
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
mov byte [esp + 0x95], dl
xor al, cl
mov byte [esp + 0x96], al
mov cl, byte [esp + 0x96]
mov al, byte [esp + 0x95]
or al, cl
mov byte [esp + 0x94], al
mov al, byte [esp + 0x94]
test al, 1
jne 0x1003ea53
jmp 0x1003ef66
mov eax, dword [0x10060c98]
mov ecx, dword [0x10060c94]
mov dword [esp + 0x8c], ecx
mov ecx, eax
sub ecx, 0x6cb245f4
sub ecx, 1
add ecx, 0x6cb245f4
imul eax, ecx
and eax, 1
mov dword [esp + 0x90], eax
mov eax, dword [esp + 0x8c]
mov ecx, dword [esp + 0x90]
cmp ecx, 0
sete cl
mov byte [esp + 0x8a], cl
cmp eax, 0xa
setl al
mov byte [esp + 0x8b], al
mov al, byte [esp + 0x8b]
mov cl, byte [esp + 0x8a]
xor cl, 0xff
mov byte [esp + 0x87], cl
xor al, 0xff
mov byte [esp + 0x88], al
mov al, 1
xor al, 0
mov byte [esp + 0x89], al
mov cl, byte [esp + 0x89]
mov al, byte [esp + 0x8a]
mov dl, byte [esp + 0x87]
and dl, 0
mov byte [esp + 0x85], dl
and al, cl
mov byte [esp + 0x86], al
mov al, byte [esp + 0x88]
and al, 0
mov byte [esp + 0x84], al
mov dl, byte [esp + 0x89]
mov ah, byte [esp + 0x88]
mov cl, byte [esp + 0x87]
mov ch, byte [esp + 0x84]
mov bl, byte [esp + 0x86]
mov al, byte [esp + 0x85]
mov dh, byte [esp + 0x8b]
and dh, dl
or al, bl
or ch, dh
xor al, ch
or cl, ah
xor cl, 0xff
or dl, 0
and cl, dl
or al, cl
test al, 1
jne 0x1003eb61
jmp 0x1003ef66
mov eax, dword [0x10060c98]
mov dword [esp + 0x80], eax
mov eax, dword [0x10060c94]
mov dword [esp + 0x7c], eax
xor eax, eax
sub eax, 1
mov dword [esp + 0x78], eax
mov ecx, dword [esp + 0x78]
mov eax, dword [esp + 0x80]
add eax, ecx
mov dword [esp + 0x74], eax
mov ecx, dword [esp + 0x74]
mov eax, dword [esp + 0x80]
imul eax, ecx
mov dword [esp + 0x70], eax
mov eax, dword [esp + 0x7c]
mov ecx, dword [esp + 0x70]
and ecx, 1
cmp ecx, 0
sete cl
cmp eax, 0xa
setl dl
mov al, cl
and al, dl
xor cl, dl
or al, cl
test al, 1
jne 0x1003ebce
jmp 0x1003ef6b
mov eax, dword [0x10060c98]
mov dword [esp + 0x68], eax
mov eax, dword [0x10060c94]
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0x68]
mov ecx, eax
sub ecx, 0x5322f88a
sub ecx, 1
add ecx, 0x5322f88a
imul eax, ecx
mov dword [esp + 0x64], eax
mov ecx, dword [esp + 0x6c]
mov eax, dword [esp + 0x64]
and eax, 1
cmp eax, 0
sete al
mov byte [esp + 0x61], al
cmp ecx, 0xa
setl cl
mov byte [esp + 0x62], cl
xor al, 0xff
mov byte [esp + 0x63], al
mov al, byte [esp + 0x63]
mov cl, byte [esp + 0x62]
xor cl, 0xff
mov byte [esp + 0x5e], cl
mov cl, 1
xor cl, 0
mov byte [esp + 0x5f], cl
and al, 0
mov byte [esp + 0x60], al
mov cl, byte [esp + 0x5f]
mov al, byte [esp + 0x61]
and al, cl
mov byte [esp + 0x5d], al
mov dl, byte [esp + 0x5f]
mov ah, byte [esp + 0x5e]
mov cl, byte [esp + 0x63]
mov bl, byte [esp + 0x5d]
mov al, byte [esp + 0x60]
mov dh, byte [esp + 0x62]
mov ch, ah
and ch, 0
and dh, dl
or al, bl
or ch, dh
xor al, ch
or cl, ah
xor cl, 0xff
or dl, 0
and cl, dl
or al, cl
test al, 1
jne 0x1003ec8b
jmp 0x1003ef6b
mov eax, dword [0x10060c98]
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x58]
mov ecx, dword [0x10060c94]
mov dword [esp + 0x50], ecx
sub eax, 0x2e361891
sub eax, 1
add eax, 0x2e361891
mov dword [esp + 0x54], eax
mov ecx, dword [esp + 0x54]
mov eax, dword [esp + 0x58]
imul eax, ecx
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x4c]
and ecx, 1
cmp ecx, 0
sete cl
mov byte [esp + 0x4a], cl
cmp eax, 0xa
setl al
mov byte [esp + 0x4b], al
mov cl, byte [esp + 0x4b]
mov al, byte [esp + 0x4a]
and al, cl
mov byte [esp + 0x49], al
mov al, byte [esp + 0x49]
mov dl, byte [esp + 0x4b]
mov cl, byte [esp + 0x4a]
xor cl, dl
or al, cl
test al, 1
jne 0x1003ed0c
jmp 0x1003ef41
mov eax, dword [0x10060c98]
mov dword [esp + 0x3c], eax
mov ecx, dword [0x10060c94]
mov dword [esp + 0x40], ecx
sub eax, 0xcc65369e
sub eax, 1
add eax, 0xcc65369e
mov dword [esp + 0x44], eax
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x44]
mov eax, dword [esp + 0x3c]
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov byte [esp + 0x36], cl
mov dl, al
xor dl, 0xff
mov byte [esp + 0x37], dl
xor cl, 0xff
mov byte [esp + 0x38], cl
mov cl, 1
xor cl, 1
mov byte [esp + 0x39], cl
and dl, 0xff
mov byte [esp + 0x3a], dl
and al, cl
mov byte [esp + 0x3b], al
mov cl, byte [esp + 0x39]
mov al, byte [esp + 0x36]
mov dl, byte [esp + 0x38]
and dl, 0xff
mov byte [esp + 0x34], dl
and al, cl
mov byte [esp + 0x35], al
mov cl, byte [esp + 0x38]
mov al, byte [esp + 0x37]
mov ch, byte [esp + 0x35]
mov ah, byte [esp + 0x34]
mov dh, byte [esp + 0x3b]
mov dl, byte [esp + 0x3a]
or dl, dh
or ah, ch
xor dl, ah
mov byte [esp + 0x32], dl
or al, cl
xor al, 0xff
mov byte [esp + 0x33], al
mov al, byte [esp + 0x32]
mov cl, byte [esp + 0x33]
mov dl, byte [esp + 0x39]
or dl, 1
and cl, dl
or al, cl
mov byte [esp + 0x31], al
mov al, byte [esp + 0x31]
test al, 1
jne 0x1003ede3
jmp 0x1003ef70
mov eax, dword [0x1005f340]
add eax, 0xb891eff8
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x2c]
mov dword [eax], 1
mov eax, dword [0x10060c98]
mov dword [esp + 0x24], eax
mov eax, dword [0x10060c94]
mov dword [esp + 0x28], eax
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x24]
mov edx, eax
add edx, 0x23de7323
sub edx, 1
sub edx, 0x23de7323
imul eax, edx
and eax, 1
cmp eax, 0
sete al
mov byte [esp + 0x21], al
cmp ecx, 0xa
setl cl
mov byte [esp + 0x22], cl
and al, cl
mov byte [esp + 0x23], al
mov al, byte [esp + 0x23]
mov dl, byte [esp + 0x22]
mov cl, byte [esp + 0x21]
xor cl, dl
or al, cl
mov byte [esp + 0x20], al
mov al, byte [esp + 0x20]
test al, 1
jne 0x1003ee6b
jmp 0x1003ef70
mov eax, dword [0x10060c98]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x1c]
mov ecx, dword [0x10060c94]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
mov byte [esp + 0x16], al
cmp ecx, 0xa
setl cl
mov byte [esp + 0x17], cl
xor al, 0xff
mov byte [esp + 0x18], al
xor cl, 0xff
mov byte [esp + 0x19], cl
mov cl, 1
xor cl, 1
mov byte [esp + 0x1a], cl
and al, 0xff
mov byte [esp + 0x1b], al
mov al, byte [esp + 0x1b]
mov ah, byte [esp + 0x1a]
mov dl, byte [esp + 0x17]
mov ch, byte [esp + 0x19]
mov cl, byte [esp + 0x16]
and cl, ah
and ch, 0xff
mov byte [esp + 0x13], ch
and dl, ah
mov byte [esp + 0x14], dl
or al, cl
mov byte [esp + 0x15], al
mov cl, byte [esp + 0x19]
mov al, byte [esp + 0x18]
mov dl, byte [esp + 0x15]
mov ch, byte [esp + 0x14]
mov ah, byte [esp + 0x13]
or ah, ch
xor dl, ah
mov byte [esp + 0x11], dl
or al, cl
mov byte [esp + 0x12], al
mov al, byte [esp + 0x11]
mov dl, byte [esp + 0x1a]
mov cl, byte [esp + 0x12]
xor cl, 0xff
or dl, 1
and cl, dl
or al, cl
mov byte [esp + 0x10], al
mov al, byte [esp + 0x10]
test al, 1
jne 0x1003ef33
jmp 0x1003ef41
jmp 0x1003ef38
add esp, 0xc8
pop esi
pop ebx
ret
mov eax, dword [0x1005f340]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0xc]
add eax, 0xb891eff8
mov dword [esp + 8], eax
mov eax, dword [esp + 8]
mov dword [eax], 1
jmp 0x1003ed0c
jmp 0x1003ea53
jmp 0x1003ebce
mov eax, dword [0x1005f340]
mov dword [esp + 4], eax
mov eax, dword [esp + 4]
add eax, 0xb891eff8
mov dword [esp], eax
mov eax, dword [esp]
mov dword [eax], 1
jmp 0x1003ede3