Function at 0x10051b30
Capabilities:
Encode data using xor
Encrypt data using rc4 ksa
Resolve function by parsing pe exports

Disassembly:
push ebx
push esi
sub esp, 0x104
mov eax, dword [esp + 0x114]
mov dword [esp + 0xf8], eax
mov eax, dword [esp + 0x110]
mov dword [esp + 0xfc], eax
mov eax, dword [0x1006ac00]
mov dword [esp + 0x100], eax
mov eax, dword [0x1006abfc]
mov dword [esp + 0xf4], eax
mov eax, dword [esp + 0x100]
xor ecx, ecx
sub ecx, 1
add eax, ecx
mov dword [esp + 0xf0], eax
mov ecx, dword [esp + 0xf0]
mov eax, dword [esp + 0x100]
imul eax, ecx
mov dword [esp + 0xec], eax
mov eax, dword [esp + 0xf4]
mov ecx, dword [esp + 0xec]
and ecx, 1
cmp ecx, 0
sete cl
cmp eax, 0xa
setl dl
mov al, cl
and al, dl
xor cl, dl
or al, cl
mov byte [esp + 0xeb], al
mov al, byte [esp + 0xeb]
test al, 1
jne 0x10051bd9
jmp 0x10052346
mov eax, dword [0x1006ac00]
mov dword [esp + 0xe4], eax
mov eax, dword [esp + 0xe4]
mov ecx, dword [0x1006abfc]
mov dword [esp + 0xdc], ecx
add eax, 0x240c4894
sub eax, 1
mov dword [esp + 0xe0], eax
mov eax, dword [esp + 0xe0]
sub eax, 0x240c4894
mov dword [esp + 0xd8], eax
mov eax, dword [esp + 0xdc]
mov edx, dword [esp + 0xd8]
mov ecx, dword [esp + 0xe4]
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
cmp eax, 0xa
setl dl
mov al, cl
xor al, 0xff
mov byte [esp + 0xd2], al
mov ch, dl
xor ch, 0xff
mov byte [esp + 0xd3], ch
mov ah, 1
xor ah, 1
mov byte [esp + 0xd4], ah
and al, 0xff
and cl, ah
and ch, 0xff
mov byte [esp + 0xd5], ch
and dl, ah
mov byte [esp + 0xd6], dl
or al, cl
mov byte [esp + 0xd7], al
mov dl, byte [esp + 0xd4]
mov ah, byte [esp + 0xd3]
mov cl, byte [esp + 0xd2]
mov al, byte [esp + 0xd7]
mov dh, byte [esp + 0xd6]
mov ch, byte [esp + 0xd5]
or ch, dh
xor al, ch
or cl, ah
xor cl, 0xff
or dl, 1
and cl, dl
or al, cl
mov byte [esp + 0xd1], al
mov al, byte [esp + 0xd1]
test al, 1
jne 0x10051cda
jmp 0x10052346
mov eax, dword [0x1006ac00]
mov dword [esp + 0xc4], eax
mov ecx, dword [0x1006abfc]
mov dword [esp + 0xc8], ecx
add eax, 0xd8b6b7cf
sub eax, 1
sub eax, 0xd8b6b7cf
mov dword [esp + 0xcc], eax
mov ecx, dword [esp + 0xcc]
mov eax, dword [esp + 0xc4]
imul eax, ecx
mov dword [esp + 0xc0], eax
mov eax, dword [esp + 0xc0]
and eax, 1
mov dword [esp + 0xbc], eax
mov eax, dword [esp + 0xbc]
cmp eax, 0
sete al
mov byte [esp + 0xbb], al
mov cl, byte [esp + 0xbb]
mov eax, dword [esp + 0xc8]
cmp eax, 0xa
setl dl
mov al, cl
and al, dl
xor cl, dl
or al, cl
mov byte [esp + 0xba], al
mov al, byte [esp + 0xba]
test al, 1
jne 0x10051d7b
jmp 0x100522fd
mov eax, dword [esp + 0xf8]
add eax, 0x15
mov dword [esp + 0xb0], eax
mov eax, dword [0x10069398]
add eax, 0x4a5a538e
mov dword [esp + 0xb4], eax
mov eax, dword [esp + 0xb4]
cmp dword [eax], 1
sete al
mov byte [esp + 0xa3], al
mov eax, dword [0x1006ac00]
mov dword [esp + 0xa4], eax
mov ecx, dword [0x1006abfc]
mov dword [esp + 0xa8], ecx
xor ecx, ecx
sub ecx, 1
add eax, ecx
mov dword [esp + 0xac], eax
mov ecx, dword [esp + 0xac]
mov eax, dword [esp + 0xa4]
imul eax, ecx
mov dword [esp + 0x9c], eax
mov ecx, dword [esp + 0xa8]
mov eax, dword [esp + 0x9c]
and eax, 1
cmp eax, 0
sete al
mov byte [esp + 0x99], al
cmp ecx, 0xa
setl cl
mov byte [esp + 0x9a], cl
xor al, 0xff
mov byte [esp + 0x9b], al
mov cl, byte [esp + 0x9b]
mov dh, byte [esp + 0x9a]
mov bl, byte [esp + 0x99]
mov dl, dh
xor dl, 0xff
mov al, 1
xor al, 0
mov ah, cl
and ah, 0
and bl, al
mov ch, dl
and ch, 0
and dh, al
or ah, bl
or ch, dh
xor ah, ch
mov byte [esp + 0x96], ah
or cl, dl
xor cl, 0xff
mov byte [esp + 0x97], cl
or al, 0
mov byte [esp + 0x98], al
mov al, byte [esp + 0x96]
mov dl, byte [esp + 0x98]
mov cl, byte [esp + 0x97]
and cl, dl
or al, cl
test al, 1
jne 0x10051e98
jmp 0x100522fd
mov cl, byte [esp + 0xa3]
xor eax, eax
test cl, 1
mov dword [esp + 0x90], eax
jne 0x100520f2
jmp 0x10051eb6
mov eax, dword [esp + 0x90]
mov ecx, dword [esp + 0xf8]
mov edx, dword [esp + 0xb0]
mov dword [esp + 0x8c], eax
mov bh, byte [edx + eax]
mov esi, 0x15
xor edx, edx
div esi
mov eax, dword [esp + 0x8c]
mov bl, byte [ecx + edx]
mov dl, bh
xor dl, 0xff
and dl, 0xcd
mov cl, 0xff
xor cl, 0xcd
and bh, cl
mov dh, bl
xor dh, 0xff
and dh, 0xcd
and bl, cl
mov ecx, dword [esp + 0xfc]
or dl, bh
or dh, bl
xor dl, dh
mov byte [ecx + eax], dl
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, 1
add ecx, eax
xor eax, eax
sub eax, ecx
cmp eax, 0x8d
mov dword [esp + 0x90], eax
jne 0x10051eb6
mov eax, dword [0x1006ac00]
mov dword [esp + 0x80], eax
mov ecx, dword [0x1006abfc]
mov dword [esp + 0x84], ecx
add eax, 0x56cf1e9e
sub eax, 1
sub eax, 0x56cf1e9e
mov dword [esp + 0x88], eax
mov eax, dword [esp + 0x84]
mov edx, dword [esp + 0x88]
mov ecx, dword [esp + 0x80]
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
cmp eax, 0xa
setl al
mov byte [esp + 0x79], al
mov ah, cl
xor ah, 0xff
mov byte [esp + 0x7a], ah
xor al, 0xff
mov byte [esp + 0x7b], al
mov dl, 1
xor dl, 1
mov byte [esp + 0x7c], dl
and ah, 0xff
mov byte [esp + 0x7d], ah
and cl, dl
mov byte [esp + 0x7e], cl
and al, 0xff
mov byte [esp + 0x7f], al
mov cl, byte [esp + 0x7e]
mov al, byte [esp + 0x7d]
mov ah, byte [esp + 0x7c]
mov dl, byte [esp + 0x79]
and dl, ah
mov byte [esp + 0x77], dl
or al, cl
mov byte [esp + 0x78], al
mov cl, byte [esp + 0x7c]
mov dl, byte [esp + 0x7b]
mov al, byte [esp + 0x7a]
mov ah, byte [esp + 0x78]
mov dh, byte [esp + 0x77]
mov ch, byte [esp + 0x7f]
or ch, dh
xor ah, ch
mov byte [esp + 0x75], ah
or al, dl
xor al, 0xff
or cl, 1
and al, cl
mov byte [esp + 0x76], al
mov cl, byte [esp + 0x76]
mov al, byte [esp + 0x75]
or al, cl
mov byte [esp + 0x74], al
mov al, byte [esp + 0x74]
test al, 1
jne 0x1005201d
jmp 0x10052323
mov eax, dword [0x10069398]
add eax, 0x4a5a538e
mov dword [esp + 0x70], eax
mov eax, dword [esp + 0x70]
mov dword [eax], 1
mov ecx, dword [0x1006ac00]
mov eax, dword [0x1006abfc]
mov edx, ecx
add edx, 0xecb596d2
sub edx, 1
sub edx, 0xecb596d2
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
mov byte [esp + 0x6e], cl
cmp eax, 0xa
setl al
mov byte [esp + 0x6f], al
mov al, byte [esp + 0x6f]
mov cl, byte [esp + 0x6e]
xor cl, 0xff
mov byte [esp + 0x6c], cl
xor al, 0xff
mov byte [esp + 0x6d], al
mov dl, byte [esp + 0x6f]
mov ch, byte [esp + 0x6d]
mov cl, byte [esp + 0x6e]
mov al, byte [esp + 0x6c]
mov ah, 1
xor ah, 0
mov byte [esp + 0x68], ah
and al, 0
and cl, ah
and ch, 0
mov byte [esp + 0x69], ch
and dl, ah
mov byte [esp + 0x6a], dl
or al, cl
mov byte [esp + 0x6b], al
mov dl, byte [esp + 0x68]
mov ah, byte [esp + 0x6d]
mov cl, byte [esp + 0x6c]
mov al, byte [esp + 0x6b]
mov dh, byte [esp + 0x6a]
mov ch, byte [esp + 0x69]
or ch, dh
xor al, ch
or cl, ah
xor cl, 0xff
or dl, 0
and cl, dl
or al, cl
mov byte [esp + 0x67], al
mov al, byte [esp + 0x67]
test al, 1
jne 0x100520ed
jmp 0x10052323
jmp 0x100520f2
mov eax, dword [0x1006ac00]
mov dword [esp + 0x5c], eax
mov eax, dword [0x1006abfc]
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x5c]
add eax, 0x1bf86c60
sub eax, 1
sub eax, 0x1bf86c60
mov dword [esp + 0x58], eax
mov ecx, dword [esp + 0x58]
mov eax, dword [esp + 0x5c]
imul eax, ecx
and eax, 1
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x54]
cmp ecx, 0
sete cl
mov byte [esp + 0x50], cl
cmp eax, 0xa
setl al
mov byte [esp + 0x51], al
xor cl, 0xff
mov byte [esp + 0x52], cl
xor al, 0xff
mov byte [esp + 0x53], al
mov cl, byte [esp + 0x53]
mov al, byte [esp + 0x52]
mov ch, byte [esp + 0x51]
mov dh, byte [esp + 0x50]
mov bl, 1
xor bl, 0
mov byte [esp + 0x4d], bl
mov dl, al
and dl, 0
and dh, bl
mov ah, cl
and ah, 0
and ch, bl
or dl, dh
or ah, ch
xor dl, ah
mov byte [esp + 0x4e], dl
or al, cl
mov byte [esp + 0x4f], al
mov al, byte [esp + 0x4e]
mov dl, byte [esp + 0x4d]
mov cl, byte [esp + 0x4f]
xor cl, 0xff
or dl, 0
and cl, dl
or al, cl
test al, 1
jne 0x100521ae
jmp 0x1005234b
mov eax, dword [0x1006ac00]
mov dword [esp + 0x44], eax
mov eax, dword [0x1006abfc]
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x44]
add eax, 0xc4827c27
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x40]
sub eax, 1
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x3c]
sub eax, 0xc4827c27
mov dword [esp + 0x38], eax
mov ecx, dword [esp + 0x38]
mov eax, dword [esp + 0x44]
imul eax, ecx
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x34]
and ecx, 1
cmp ecx, 0
sete cl
cmp eax, 0xa
setl dl
mov al, cl
and al, dl
xor cl, dl
or al, cl
test al, 1
jne 0x10052220
jmp 0x1005234b
mov eax, dword [0x1006ac00]
mov dword [esp + 0x30], eax
mov eax, dword [0x1006abfc]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x30]
xor edx, edx
sub edx, 1
mov ecx, eax
add ecx, edx
imul eax, ecx
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x28]
and ecx, 1
cmp ecx, 0
sete cl
mov byte [esp + 0x26], cl
cmp eax, 0xa
setl al
mov byte [esp + 0x27], al
mov dl, byte [esp + 0x27]
mov cl, byte [esp + 0x26]
mov al, cl
and al, dl
xor cl, dl
or al, cl
mov byte [esp + 0x25], al
mov al, byte [esp + 0x25]
test al, 1
jne 0x1005228a
jmp 0x1005231e
mov eax, dword [0x1006ac00]
mov dword [esp + 0x1c], eax
mov eax, dword [0x1006abfc]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x1c]
sub eax, 0x77b38b5a
sub eax, 1
add eax, 0x77b38b5a
mov dword [esp + 0x18], eax
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
imul eax, ecx
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x14]
and ecx, 1
cmp ecx, 0
sete cl
cmp eax, 0xa
setl dl
mov al, cl
and al, dl
xor cl, dl
or al, cl
mov byte [esp + 0x13], al
mov al, byte [esp + 0x13]
test al, 1
jne 0x100522f4
jmp 0x1005231e
add esp, 0x104
pop esi
pop ebx
ret
mov eax, dword [0x10069398]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0xc]
add eax, 0x4a5a538e
mov dword [esp + 8], eax
mov eax, dword [esp + 8]
mov eax, dword [eax]
jmp 0x10051d7b
jmp 0x1005228a
mov eax, dword [0x10069398]
mov dword [esp + 4], eax
mov eax, dword [esp + 4]
add eax, 0x4a5a538e
mov dword [esp], eax
mov eax, dword [esp]
mov dword [eax], 1
jmp 0x1005201d
jmp 0x10051bd9
jmp 0x100521ae