Function at 0x10042940
Capabilities:
Encode data using xor
Encrypt data using rc4 ksa
Resolve function by parsing pe exports

Disassembly:
push ebx
push esi
sub esp, 0x8c
mov eax, dword [esp + 0x9c]
mov dword [esp + 0x78], eax
mov eax, dword [esp + 0x98]
mov dword [esp + 0x7c], eax
mov eax, dword [0x10066c80]
mov dword [esp + 0x80], eax
mov ecx, dword [0x10066c7c]
mov dword [esp + 0x84], ecx
sub eax, 0xaec295b7
sub eax, 1
add eax, 0xaec295b7
mov dword [esp + 0x88], eax
mov ecx, dword [esp + 0x88]
mov eax, dword [esp + 0x80]
imul eax, ecx
mov dword [esp + 0x74], eax
mov ecx, dword [esp + 0x84]
mov eax, dword [esp + 0x74]
and eax, 1
cmp eax, 0
sete al
mov byte [esp + 0x71], al
cmp ecx, 0xa
setl cl
mov byte [esp + 0x72], cl
xor al, 0xff
mov byte [esp + 0x73], al
mov al, byte [esp + 0x73]
mov ch, byte [esp + 0x72]
mov dh, byte [esp + 0x71]
mov cl, ch
xor cl, 0xff
mov bl, 1
xor bl, 1
mov byte [esp + 0x6e], bl
mov dl, al
and dl, 0xff
and dh, bl
mov ah, cl
and ah, 0xff
and ch, bl
or dl, dh
or ah, ch
xor dl, ah
mov byte [esp + 0x6f], dl
or al, cl
mov byte [esp + 0x70], al
mov al, byte [esp + 0x6e]
mov cl, byte [esp + 0x70]
xor cl, 0xff
mov byte [esp + 0x6c], cl
or al, 1
mov byte [esp + 0x6d], al
mov al, byte [esp + 0x6f]
mov dl, byte [esp + 0x6d]
mov cl, byte [esp + 0x6c]
and cl, dl
or al, cl
test al, 1
jne 0x10042a32
jmp 0x10042e57
mov eax, dword [esp + 0x78]
add eax, 0x1f
mov dword [esp + 0x64], eax
mov eax, dword [0x10065354]
mov eax, dword [eax - 0x7a103d08]
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x68]
cmp eax, 1
sete al
mov byte [esp + 0x61], al
mov ecx, dword [0x10066c80]
mov eax, dword [0x10066c7c]
mov edx, ecx
sub edx, 0x4f4cd0a7
sub edx, 1
add edx, 0x4f4cd0a7
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
mov byte [esp + 0x62], cl
cmp eax, 0xa
setl al
mov byte [esp + 0x63], al
mov cl, byte [esp + 0x63]
mov al, byte [esp + 0x62]
xor al, 0xff
mov byte [esp + 0x5d], al
xor cl, 0xff
mov byte [esp + 0x5e], cl
mov cl, 1
xor cl, 1
mov byte [esp + 0x5f], cl
and al, 0xff
mov byte [esp + 0x60], al
mov al, byte [esp + 0x5f]
mov dl, byte [esp + 0x5e]
mov cl, byte [esp + 0x5d]
mov ah, byte [esp + 0x60]
mov dh, byte [esp + 0x63]
mov bl, byte [esp + 0x62]
and bl, al
mov ch, dl
and ch, 0xff
and dh, al
or ah, bl
or ch, dh
xor ah, ch
mov byte [esp + 0x5a], ah
or cl, dl
xor cl, 0xff
mov byte [esp + 0x5b], cl
or al, 1
mov byte [esp + 0x5c], al
mov cl, byte [esp + 0x5c]
mov al, byte [esp + 0x5b]
and al, cl
mov byte [esp + 0x59], al
mov cl, byte [esp + 0x59]
mov al, byte [esp + 0x5a]
or al, cl
test al, 1
jne 0x10042b13
jmp 0x10042e57
mov ecx, dword [0x10066c80]
mov eax, dword [0x10066c7c]
mov edx, ecx
sub edx, 0x82b35934
sub edx, 1
add edx, 0x82b35934
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
mov byte [esp + 0x54], cl
cmp eax, 0xa
setl al
mov byte [esp + 0x55], al
xor cl, 0xff
mov byte [esp + 0x56], cl
xor al, 0xff
mov byte [esp + 0x57], al
mov al, 1
xor al, 1
mov byte [esp + 0x58], al
mov ch, byte [esp + 0x58]
mov cl, byte [esp + 0x55]
mov al, byte [esp + 0x57]
mov ah, byte [esp + 0x54]
mov dl, byte [esp + 0x56]
and dl, 0xff
and ah, ch
and al, 0xff
and cl, ch
or dl, ah
mov byte [esp + 0x52], dl
or al, cl
mov byte [esp + 0x53], al
mov cl, byte [esp + 0x53]
mov al, byte [esp + 0x52]
xor al, cl
mov byte [esp + 0x51], al
mov cl, byte [esp + 0x57]
mov al, byte [esp + 0x56]
or al, cl
mov byte [esp + 0x50], al
mov cl, byte [esp + 0x58]
mov al, byte [esp + 0x50]
xor al, 0xff
or cl, 1
and al, cl
mov byte [esp + 0x4f], al
mov cl, byte [esp + 0x4f]
mov al, byte [esp + 0x51]
or al, cl
test al, 1
jne 0x10042bcd
jmp 0x10042e78
mov eax, dword [0x10066c80]
mov dword [esp + 0x40], eax
mov ecx, dword [0x10066c7c]
mov dword [esp + 0x44], ecx
add eax, 0x54a7ba84
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x48]
sub ecx, 1
sub ecx, 0x54a7ba84
imul eax, ecx
and eax, 1
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x3c]
cmp eax, 0
sete al
mov byte [esp + 0x3b], al
mov al, byte [esp + 0x3b]
mov ecx, dword [esp + 0x44]
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
mov byte [esp + 0x39], dl
xor al, cl
mov byte [esp + 0x3a], al
mov cl, byte [esp + 0x3a]
mov al, byte [esp + 0x39]
or al, cl
mov byte [esp + 0x38], al
mov al, byte [esp + 0x38]
test al, 1
jne 0x10042c4d
jmp 0x10042e78
mov cl, byte [esp + 0x61]
xor eax, eax
test cl, 1
mov dword [esp + 0x34], eax
jne 0x10042e4e
jmp 0x10042c65
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x64]
mov dword [esp + 0x30], eax
mov bh, byte [edx + eax]
mov esi, 0x1f
xor edx, edx
div esi
mov eax, dword [esp + 0x30]
mov bl, byte [ecx + edx]
mov dl, bh
xor dl, 0xff
and dl, 0xba
mov cl, 0xff
xor cl, 0xba
and bh, cl
mov dh, bl
xor dh, 0xff
and dh, 0xba
and bl, cl
mov ecx, dword [esp + 0x7c]
or dl, bh
or dh, bl
xor dl, dh
mov byte [ecx + eax], dl
sub eax, 0x1f4dba9e
add eax, 1
add eax, 0x1f4dba9e
cmp eax, 0x16
mov dword [esp + 0x34], eax
jne 0x10042c65
mov eax, dword [0x10066c80]
mov dword [esp + 0x24], eax
mov ecx, dword [0x10066c7c]
mov dword [esp + 0x28], ecx
sub eax, 0x7b6b52f6
sub eax, 1
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x2c]
add edx, 0x7b6b52f6
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
mov byte [esp + 0x1f], cl
cmp eax, 0xa
setl al
mov byte [esp + 0x20], al
xor cl, 0xff
mov byte [esp + 0x21], cl
xor al, 0xff
mov byte [esp + 0x22], al
mov al, 1
xor al, 1
mov byte [esp + 0x23], al
mov ch, byte [esp + 0x23]
mov dl, byte [esp + 0x20]
mov cl, byte [esp + 0x22]
mov ah, byte [esp + 0x1f]
mov al, byte [esp + 0x21]
and al, 0xff
and ah, ch
and cl, 0xff
and dl, ch
or al, ah
or cl, dl
xor al, cl
mov byte [esp + 0x1e], al
mov cl, byte [esp + 0x22]
mov al, byte [esp + 0x21]
or al, cl
xor al, 0xff
mov byte [esp + 0x1d], al
mov al, byte [esp + 0x1d]
mov cl, byte [esp + 0x23]
or cl, 1
and al, cl
mov byte [esp + 0x1c], al
mov cl, byte [esp + 0x1c]
mov al, byte [esp + 0x1e]
or al, cl
test al, 1
jne 0x10042d87
jmp 0x10042e7d
mov eax, dword [0x10065354]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x18]
mov dword [eax - 0x7a103d08], 1
mov eax, dword [0x10066c80]
mov ecx, dword [0x10066c7c]
mov edx, eax
add edx, 0xc204320
sub edx, 1
sub edx, 0xc204320
imul eax, edx
and eax, 1
cmp eax, 0
sete al
mov byte [esp + 0x15], al
cmp ecx, 0xa
setl cl
mov byte [esp + 0x16], cl
xor al, 0xff
mov byte [esp + 0x17], al
mov al, byte [esp + 0x16]
xor al, 0xff
mov byte [esp + 0x14], al
mov cl, byte [esp + 0x16]
mov al, byte [esp + 0x14]
mov ah, byte [esp + 0x15]
mov dl, byte [esp + 0x17]
mov ch, 1
xor ch, 1
mov byte [esp + 0x11], ch
and dl, 0xff
and ah, ch
and al, 0xff
and cl, ch
or dl, ah
mov byte [esp + 0x12], dl
or al, cl
mov byte [esp + 0x13], al
mov dl, byte [esp + 0x11]
mov ah, byte [esp + 0x14]
mov cl, byte [esp + 0x17]
mov ch, byte [esp + 0x13]
mov al, byte [esp + 0x12]
xor al, ch
or cl, ah
xor cl, 0xff
or dl, 1
and cl, dl
or al, cl
mov byte [esp + 0x10], al
mov al, byte [esp + 0x10]
test al, 1
jne 0x10042e49
jmp 0x10042e7d
jmp 0x10042e4e
add esp, 0x8c
pop esi
pop ebx
ret
mov eax, dword [0x10065354]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0xc]
add eax, 0x85efc2f8
mov dword [esp + 8], eax
mov eax, dword [esp + 8]
mov eax, dword [eax]
jmp 0x10042a32
jmp 0x10042bcd
mov eax, dword [0x10065354]
mov dword [esp + 4], eax
mov eax, dword [esp + 4]
add eax, 0x85efc2f8
mov dword [esp], eax
mov eax, dword [esp]
mov dword [eax], 1
jmp 0x10042d87