Function at 0x10047140
Capabilities:
Encode data using xor
Encrypt data using rc4 ksa
Resolve function by parsing pe exports

Disassembly:
push ebx
push esi
sub esp, 0x15c
mov eax, dword [esp + 0x16c]
mov dword [esp + 0x150], eax
mov ecx, dword [esp + 0x168]
mov dword [esp + 0x154], ecx
add eax, 0x1d
mov dword [esp + 0x158], eax
mov eax, dword [0x1006337c]
mov dword [esp + 0x14c], eax
mov eax, dword [esp + 0x14c]
add eax, 0xb9a9f477
mov dword [esp + 0x148], eax
mov eax, dword [esp + 0x148]
mov eax, dword [eax]
mov dword [esp + 0x144], eax
mov eax, dword [esp + 0x144]
cmp eax, 1
sete al
mov byte [esp + 0x143], al
mov cl, byte [esp + 0x143]
xor eax, eax
test cl, 1
mov dword [esp + 0x13c], eax
jne 0x100479f8
jmp 0x100471cf
mov eax, dword [esp + 0x13c]
mov ecx, dword [esp + 0x150]
mov edx, dword [esp + 0x158]
mov dword [esp + 0x138], eax
mov bh, byte [edx + eax]
mov esi, 0x1d
xor edx, edx
div esi
mov eax, dword [esp + 0x138]
mov bl, byte [ecx + edx]
mov dl, bh
xor dl, 0xff
and dl, 0xef
mov cl, 0xff
xor cl, 0xef
and bh, cl
mov dh, bl
xor dh, 0xff
and dh, 0xef
and bl, cl
mov ecx, dword [esp + 0x154]
or dl, bh
or dh, bl
xor dl, dh
mov byte [ecx + eax], dl
xor ecx, ecx
sub ecx, 1
sub eax, ecx
cmp eax, 2
mov dword [esp + 0x13c], eax
jne 0x100471cf
mov eax, dword [0x10064c30]
mov dword [esp + 0x12c], eax
mov ecx, dword [0x10064c2c]
mov dword [esp + 0x130], ecx
sub eax, 0xe3cfcc43
sub eax, 1
mov dword [esp + 0x134], eax
mov eax, dword [esp + 0x12c]
mov ecx, dword [esp + 0x134]
add ecx, 0xe3cfcc43
imul eax, ecx
and eax, 1
mov dword [esp + 0x128], eax
mov ecx, dword [esp + 0x130]
mov eax, dword [esp + 0x128]
cmp eax, 0
sete al
mov byte [esp + 0x122], al
cmp ecx, 0xa
setl cl
mov byte [esp + 0x123], cl
xor al, 0xff
mov byte [esp + 0x124], al
xor cl, 0xff
mov byte [esp + 0x125], cl
mov cl, 1
xor cl, 0
mov byte [esp + 0x126], cl
and al, 0
mov byte [esp + 0x127], al
mov al, byte [esp + 0x125]
mov dl, byte [esp + 0x126]
mov cl, byte [esp + 0x122]
and cl, dl
mov byte [esp + 0x120], cl
and al, 0
mov byte [esp + 0x121], al
mov cl, byte [esp + 0x126]
mov al, byte [esp + 0x123]
and al, cl
mov byte [esp + 0x11f], al
mov dl, byte [esp + 0x126]
mov ah, byte [esp + 0x125]
mov cl, byte [esp + 0x124]
mov dh, byte [esp + 0x11f]
mov ch, byte [esp + 0x121]
mov bl, byte [esp + 0x120]
mov al, byte [esp + 0x127]
or al, bl
or ch, dh
xor al, ch
or cl, ah
xor cl, 0xff
or dl, 0
and cl, dl
or al, cl
test al, 1
jne 0x10047368
jmp 0x10047d9c
mov eax, dword [0x10064c30]
mov dword [esp + 0x118], eax
mov eax, dword [0x10064c2c]
mov dword [esp + 0x114], eax
mov eax, dword [esp + 0x118]
add eax, 0x7dc77cee
sub eax, 1
mov dword [esp + 0x110], eax
mov eax, dword [esp + 0x114]
mov ecx, dword [esp + 0x118]
mov edx, dword [esp + 0x110]
sub edx, 0x7dc77cee
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
cmp eax, 0xa
setl dl
mov al, cl
and al, dl
xor cl, dl
or al, cl
mov byte [esp + 0x10f], al
mov al, byte [esp + 0x10f]
test al, 1
jne 0x100473e6
jmp 0x10047d9c
mov eax, dword [0x10064c30]
mov dword [esp + 0x100], eax
mov eax, dword [0x10064c2c]
mov dword [esp + 0x104], eax
xor eax, eax
sub eax, 1
mov dword [esp + 0x108], eax
mov eax, dword [esp + 0x104]
mov ecx, dword [esp + 0x100]
mov esi, dword [esp + 0x108]
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
mov byte [esp + 0xfc], cl
cmp eax, 0xa
setl al
mov byte [esp + 0xfd], al
xor cl, 0xff
mov byte [esp + 0xfe], cl
xor al, 0xff
mov byte [esp + 0xff], al
mov cl, byte [esp + 0xfd]
mov al, byte [esp + 0xff]
mov ah, byte [esp + 0xfc]
mov dl, byte [esp + 0xfe]
mov ch, 1
xor ch, 1
mov byte [esp + 0xf9], ch
and dl, 0xff
and ah, ch
and al, 0xff
and cl, ch
or dl, ah
mov byte [esp + 0xfa], dl
or al, cl
mov byte [esp + 0xfb], al
mov cl, byte [esp + 0xff]
mov al, byte [esp + 0xfe]
mov ah, byte [esp + 0xfb]
mov dl, byte [esp + 0xfa]
xor dl, ah
mov byte [esp + 0xf7], dl
or al, cl
xor al, 0xff
mov byte [esp + 0xf8], al
mov al, byte [esp + 0xf9]
or al, 1
mov byte [esp + 0xf6], al
mov al, byte [esp + 0xf7]
mov dl, byte [esp + 0xf6]
mov cl, byte [esp + 0xf8]
and cl, dl
or al, cl
test al, 1
jne 0x100474ff
jmp 0x10047c79
mov eax, dword [0x1006337c]
mov dword [eax - 0x46560b89], 1
mov eax, dword [0x10064c30]
mov dword [esp + 0xf0], eax
mov eax, dword [0x10064c2c]
mov dword [esp + 0xec], eax
mov eax, dword [esp + 0xf0]
add eax, 0x5638d100
sub eax, 1
sub eax, 0x5638d100
mov dword [esp + 0xe8], eax
mov eax, dword [esp + 0xec]
mov edx, dword [esp + 0xe8]
mov ecx, dword [esp + 0xf0]
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
mov byte [esp + 0xe6], cl
cmp eax, 0xa
setl al
mov byte [esp + 0xe7], al
mov dl, byte [esp + 0xe7]
mov cl, byte [esp + 0xe6]
mov al, cl
and al, dl
xor cl, dl
or al, cl
mov byte [esp + 0xe5], al
mov al, byte [esp + 0xe5]
test al, 1
jne 0x100475a7
jmp 0x10047c79
mov eax, dword [0x10064c30]
mov dword [esp + 0xdc], eax
mov eax, dword [0x10064c2c]
mov dword [esp + 0xe0], eax
mov eax, dword [esp + 0xdc]
add eax, 0xbebdd0cd
mov dword [esp + 0xd8], eax
mov eax, dword [esp + 0xd8]
sub eax, 1
sub eax, 0xbebdd0cd
mov dword [esp + 0xd4], eax
mov eax, dword [esp + 0xe0]
mov edx, dword [esp + 0xd4]
mov ecx, dword [esp + 0xdc]
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
mov byte [esp + 0xcf], cl
cmp eax, 0xa
setl al
mov byte [esp + 0xd0], al
xor cl, 0xff
mov byte [esp + 0xd1], cl
xor al, 0xff
mov byte [esp + 0xd2], al
mov al, 1
xor al, 1
mov byte [esp + 0xd3], al
mov cl, byte [esp + 0xd2]
mov al, byte [esp + 0xd1]
mov bl, byte [esp + 0xd3]
mov ch, byte [esp + 0xd0]
mov dh, byte [esp + 0xcf]
mov dl, al
and dl, 0xff
and dh, bl
mov ah, cl
and ah, 0xff
and ch, bl
or dl, dh
or ah, ch
xor dl, ah
mov byte [esp + 0xcd], dl
or al, cl
xor al, 0xff
mov byte [esp + 0xce], al
mov al, byte [esp + 0xcd]
mov cl, byte [esp + 0xce]
mov dl, byte [esp + 0xd3]
or dl, 1
and cl, dl
or al, cl
test al, 1
jne 0x100476ad
jmp 0x10047d92
mov eax, dword [0x10064c30]
mov dword [esp + 0xc0], eax
mov ecx, dword [0x10064c2c]
mov dword [esp + 0xc4], ecx
add eax, 0x33a02d63
sub eax, 1
sub eax, 0x33a02d63
mov dword [esp + 0xc8], eax
mov eax, dword [esp + 0xc4]
mov edx, dword [esp + 0xc8]
mov ecx, dword [esp + 0xc0]
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
mov byte [esp + 0xbb], cl
cmp eax, 0xa
setl al
mov byte [esp + 0xbc], al
xor cl, 0xff
mov byte [esp + 0xbd], cl
xor al, 0xff
mov byte [esp + 0xbe], al
mov al, 1
xor al, 0
mov byte [esp + 0xbf], al
mov ah, byte [esp + 0xbf]
mov dl, byte [esp + 0xbc]
mov ch, byte [esp + 0xbe]
mov cl, byte [esp + 0xbb]
mov al, byte [esp + 0xbd]
and al, 0
and cl, ah
and ch, 0
mov byte [esp + 0xb8], ch
and dl, ah
mov byte [esp + 0xb9], dl
or al, cl
mov byte [esp + 0xba], al
mov al, byte [esp + 0xba]
mov dl, byte [esp + 0xb9]
mov cl, byte [esp + 0xb8]
or cl, dl
xor al, cl
mov byte [esp + 0xb7], al
mov cl, byte [esp + 0xbf]
mov dl, byte [esp + 0xbe]
mov al, byte [esp + 0xbd]
or al, dl
xor al, 0xff
or cl, 0
and al, cl
mov byte [esp + 0xb6], al
mov cl, byte [esp + 0xb6]
mov al, byte [esp + 0xb7]
or al, cl
test al, 1
jne 0x100477d2
jmp 0x10047da1
mov eax, dword [0x10064c30]
mov dword [esp + 0xa8], eax
mov ecx, dword [0x10064c2c]
mov dword [esp + 0xac], ecx
sub eax, 0xace94482
sub eax, 1
mov dword [esp + 0xb0], eax
mov eax, dword [esp + 0xa8]
mov ecx, dword [esp + 0xb0]
add ecx, 0xace94482
imul eax, ecx
and eax, 1
mov dword [esp + 0xa4], eax
mov eax, dword [esp + 0xac]
mov ecx, dword [esp + 0xa4]
cmp ecx, 0
sete cl
mov byte [esp + 0xa2], cl
cmp eax, 0xa
setl al
mov byte [esp + 0xa3], al
mov al, byte [esp + 0xa2]
xor al, 0xff
mov byte [esp + 0xa1], al
mov cl, byte [esp + 0xa1]
mov dh, byte [esp + 0xa3]
mov bl, byte [esp + 0xa2]
mov dl, dh
xor dl, 0xff
mov al, 1
xor al, 1
mov ah, cl
and ah, 0xff
and bl, al
mov ch, dl
and ch, 0xff
and dh, al
or ah, bl
or ch, dh
xor ah, ch
mov byte [esp + 0x9e], ah
or cl, dl
xor cl, 0xff
mov byte [esp + 0x9f], cl
or al, 1
mov byte [esp + 0xa0], al
mov al, byte [esp + 0x9e]
mov dl, byte [esp + 0xa0]
mov cl, byte [esp + 0x9f]
and cl, dl
or al, cl
test al, 1
jne 0x100478c7
jmp 0x10047da1
mov eax, dword [0x10064c30]
mov dword [esp + 0x98], eax
mov eax, dword [esp + 0x98]
mov ecx, dword [0x10064c2c]
mov dword [esp + 0x90], ecx
sub eax, 0x3f95e231
mov dword [esp + 0x94], eax
mov eax, dword [esp + 0x98]
mov ecx, dword [esp + 0x94]
sub ecx, 1
add ecx, 0x3f95e231
imul eax, ecx
mov dword [esp + 0x8c], eax
mov ecx, dword [esp + 0x90]
mov eax, dword [esp + 0x8c]
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov byte [esp + 0x86], cl
mov dl, al
xor dl, 0xff
mov byte [esp + 0x87], dl
xor cl, 0xff
mov byte [esp + 0x88], cl
mov cl, 1
xor cl, 0
mov byte [esp + 0x89], cl
and dl, 0
mov byte [esp + 0x8a], dl
and al, cl
mov byte [esp + 0x8b], al
mov cl, byte [esp + 0x8b]
mov al, byte [esp + 0x8a]
mov ah, byte [esp + 0x89]
mov dl, byte [esp + 0x86]
mov ch, byte [esp + 0x88]
and ch, 0
mov byte [esp + 0x83], ch
and dl, ah
mov byte [esp + 0x84], dl
or al, cl
mov byte [esp + 0x85], al
mov dl, byte [esp + 0x89]
mov ah, byte [esp + 0x88]
mov cl, byte [esp + 0x87]
mov al, byte [esp + 0x85]
mov dh, byte [esp + 0x84]
mov ch, byte [esp + 0x83]
or ch, dh
xor al, ch
or cl, ah
xor cl, 0xff
or dl, 0
and cl, dl
or al, cl
test al, 1
jne 0x100479f3
jmp 0x10047d92
jmp 0x100479f8
mov eax, dword [0x10064c30]
mov dword [esp + 0x74], eax
mov ecx, dword [0x10064c2c]
mov dword [esp + 0x78], ecx
xor ecx, ecx
sub ecx, 1
add eax, ecx
mov dword [esp + 0x7c], eax
mov ecx, dword [esp + 0x7c]
mov eax, dword [esp + 0x74]
imul eax, ecx
and eax, 1
cmp eax, 0
sete al
mov byte [esp + 0x73], al
mov eax, dword [esp + 0x78]
cmp eax, 0xa
setl al
mov byte [esp + 0x72], al
mov al, byte [esp + 0x73]
xor al, 0xff
mov byte [esp + 0x71], al
mov cl, byte [esp + 0x71]
mov dh, byte [esp + 0x72]
mov bl, byte [esp + 0x73]
mov ah, dh
xor ah, 0xff
mov dl, 1
xor dl, 1
mov al, cl
and al, 0xff
and bl, dl
mov ch, ah
and ch, 0xff
and dh, dl
or al, bl
or ch, dh
xor al, ch
or cl, ah
xor cl, 0xff
or dl, 1
and cl, dl
or al, cl
mov byte [esp + 0x70], al
mov al, byte [esp + 0x70]
test al, 1
jne 0x10047a90
jmp 0x10047d97
mov eax, dword [0x10064c30]
mov dword [esp + 0x64], eax
mov ecx, dword [0x10064c2c]
mov dword [esp + 0x68], ecx
add eax, 0x2bfec8ac
sub eax, 1
sub eax, 0x2bfec8ac
mov dword [esp + 0x6c], eax
mov ecx, dword [esp + 0x6c]
mov eax, dword [esp + 0x64]
imul eax, ecx
and eax, 1
cmp eax, 0
sete al
mov byte [esp + 0x63], al
mov eax, dword [esp + 0x68]
cmp eax, 0xa
setl al
mov byte [esp + 0x62], al
mov dh, byte [esp + 0x62]
mov bl, byte [esp + 0x63]
mov cl, bl
xor cl, 0xff
mov ah, dh
xor ah, 0xff
mov dl, 1
xor dl, 0
mov al, cl
and al, 0
and bl, dl
mov ch, ah
and ch, 0
and dh, dl
or al, bl
or ch, dh
xor al, ch
or cl, ah
xor cl, 0xff
or dl, 0
and cl, dl
or al, cl
mov byte [esp + 0x61], al
mov al, byte [esp + 0x61]
test al, 1
jne 0x10047b25
jmp 0x10047d97
mov eax, dword [0x10064c30]
mov dword [esp + 0x54], eax
mov ecx, dword [0x10064c2c]
mov dword [esp + 0x58], ecx
add eax, 0xf57ac6eb
sub eax, 1
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x5c]
sub ecx, 0xf57ac6eb
imul eax, ecx
and eax, 1
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x50]
cmp ecx, 0
sete cl
mov byte [esp + 0x4e], cl
cmp eax, 0xa
setl al
mov byte [esp + 0x4f], al
mov cl, byte [esp + 0x4f]
mov al, byte [esp + 0x4e]
and al, cl
mov byte [esp + 0x4d], al
mov cl, byte [esp + 0x4f]
mov al, byte [esp + 0x4e]
xor al, cl
mov byte [esp + 0x4c], al
mov cl, byte [esp + 0x4c]
mov al, byte [esp + 0x4d]
or al, cl
test al, 1
jne 0x10047bab
jmp 0x10047da6
mov eax, dword [0x10064c30]
mov dword [esp + 0x48], eax
mov eax, dword [0x10064c2c]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x48]
sub eax, 0xfdfd3360
sub eax, 1
add eax, 0xfdfd3360
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x44]
mov edx, dword [esp + 0x40]
mov ecx, dword [esp + 0x48]
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
cmp eax, 0xa
setl al
mov byte [esp + 0x39], al
mov ah, cl
xor ah, 0xff
mov byte [esp + 0x3a], ah
xor al, 0xff
mov byte [esp + 0x3b], al
mov dl, 1
xor dl, 0
mov byte [esp + 0x3c], dl
and ah, 0
mov byte [esp + 0x3d], ah
and cl, dl
mov byte [esp + 0x3e], cl
and al, 0
mov byte [esp + 0x3f], al
mov al, byte [esp + 0x3f]
mov ah, byte [esp + 0x3e]
mov dl, byte [esp + 0x3d]
mov ch, byte [esp + 0x3c]
mov cl, byte [esp + 0x39]
and cl, ch
or dl, ah
mov byte [esp + 0x37], dl
or al, cl
mov byte [esp + 0x38], al
mov dl, byte [esp + 0x3c]
mov ah, byte [esp + 0x3b]
mov cl, byte [esp + 0x3a]
mov ch, byte [esp + 0x38]
mov al, byte [esp + 0x37]
xor al, ch
or cl, ah
xor cl, 0xff
or dl, 0
and cl, dl
or al, cl
test al, 1
jne 0x10047c70
jmp 0x10047da6
add esp, 0x15c
pop esi
pop ebx
ret
mov eax, dword [0x10064c30]
mov dword [esp + 0x28], eax
mov ecx, dword [0x10064c2c]
mov dword [esp + 0x2c], ecx
add eax, 0xc967a360
sub eax, 1
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x30]
sub eax, 0xc967a360
mov dword [esp + 0x24], eax
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 0x28]
imul eax, ecx
and eax, 1
mov dword [esp + 0x20], eax
mov ecx, dword [esp + 0x2c]
mov eax, dword [esp + 0x20]
cmp eax, 0
sete al
mov byte [esp + 0x1d], al
cmp ecx, 0xa
setl cl
mov byte [esp + 0x1e], cl
and al, cl
mov byte [esp + 0x1f], al
mov al, byte [esp + 0x1f]
mov dl, byte [esp + 0x1e]
mov cl, byte [esp + 0x1d]
xor cl, dl
or al, cl
mov byte [esp + 0x1c], al
mov al, byte [esp + 0x1c]
test al, 1
jne 0x10047cfe
jmp 0x10047dab
mov eax, dword [0x1006337c]
mov dword [eax - 0x46560b89], 1
mov eax, dword [0x10064c30]
mov dword [esp + 0x14], eax
mov eax, dword [0x10064c2c]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x14]
sub eax, 0x489cba44
sub eax, 1
add eax, 0x489cba44
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x14]
imul eax, ecx
mov dword [esp + 0xc], eax
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0xc]
and eax, 1
cmp eax, 0
sete al
mov byte [esp + 9], al
cmp ecx, 0xa
setl cl
mov byte [esp + 0xa], cl
and al, cl
mov byte [esp + 0xb], al
mov cl, byte [esp + 0xa]
mov al, byte [esp + 9]
xor al, cl
mov byte [esp + 8], al
mov cl, byte [esp + 8]
mov al, byte [esp + 0xb]
or al, cl
test al, 1
jne 0x10047d8d
jmp 0x10047dab
jmp 0x100474ff
jmp 0x100476ad
jmp 0x10047a90
jmp 0x10047368
jmp 0x100477d2
jmp 0x10047bab
mov eax, dword [0x1006337c]
mov dword [esp + 4], eax
mov eax, dword [esp + 4]
add eax, 0xb9a9f477
mov dword [esp], eax
mov eax, dword [esp]
mov dword [eax], 1
jmp 0x10047cfe