Function at 0x10041fe0
Capabilities:
Encode data using xor
Encrypt data using rc4 ksa
Resolve function by parsing pe exports

Disassembly:
push ebx
push esi
sub esp, 0x154
mov eax, dword [esp + 0x164]
mov dword [esp + 0x148], eax
mov eax, dword [esp + 0x160]
mov dword [esp + 0x14c], eax
mov eax, dword [0x10068cc0]
mov dword [esp + 0x150], eax
mov eax, dword [esp + 0x150]
mov ecx, dword [0x10068cbc]
mov dword [esp + 0x140], ecx
sub eax, 0xe2a505f0
sub eax, 1
add eax, 0xe2a505f0
mov dword [esp + 0x144], eax
mov ecx, dword [esp + 0x144]
mov eax, dword [esp + 0x150]
imul eax, ecx
and eax, 1
mov dword [esp + 0x13c], eax
mov eax, dword [esp + 0x13c]
cmp eax, 0
sete al
mov byte [esp + 0x13b], al
mov cl, byte [esp + 0x13b]
mov eax, dword [esp + 0x140]
cmp eax, 0xa
setl dl
mov al, cl
and al, dl
xor cl, dl
or al, cl
test al, 1
jne 0x10042090
jmp 0x10042b4b
mov eax, dword [esp + 0x148]
add eax, 0x15
mov dword [esp + 0x134], eax
mov eax, dword [0x1006732c]
add eax, 0xbb2b684e
mov dword [esp + 0x130], eax
mov eax, dword [esp + 0x130]
cmp dword [eax], 1
sete al
mov byte [esp + 0x123], al
mov eax, dword [0x10068cc0]
mov dword [esp + 0x124], eax
mov eax, dword [0x10068cbc]
mov dword [esp + 0x128], eax
xor eax, eax
sub eax, 1
mov dword [esp + 0x12c], eax
mov ecx, dword [esp + 0x12c]
mov eax, dword [esp + 0x124]
add eax, ecx
mov dword [esp + 0x11c], eax
mov ecx, dword [esp + 0x11c]
mov eax, dword [esp + 0x124]
imul eax, ecx
and eax, 1
cmp eax, 0
sete al
mov byte [esp + 0x11b], al
mov cl, byte [esp + 0x11b]
mov eax, dword [esp + 0x128]
cmp eax, 0xa
setl dl
mov al, cl
and al, dl
xor cl, dl
or al, cl
test al, 1
jne 0x1004214b
jmp 0x10042b4b
mov eax, dword [0x10068cc0]
mov dword [esp + 0x114], eax
mov eax, dword [esp + 0x114]
mov ecx, dword [0x10068cbc]
mov dword [esp + 0x10c], ecx
sub eax, 0x33310ede
sub eax, 1
add eax, 0x33310ede
mov dword [esp + 0x110], eax
mov ecx, dword [esp + 0x10c]
mov edx, dword [esp + 0x110]
mov eax, dword [esp + 0x114]
imul eax, edx
and eax, 1
cmp eax, 0
sete al
mov byte [esp + 0x109], al
cmp ecx, 0xa
setl cl
mov byte [esp + 0x10a], cl
and al, cl
mov byte [esp + 0x10b], al
mov cl, byte [esp + 0x10a]
mov al, byte [esp + 0x109]
xor al, cl
mov byte [esp + 0x108], al
mov cl, byte [esp + 0x108]
mov al, byte [esp + 0x10b]
or al, cl
mov byte [esp + 0x107], al
mov al, byte [esp + 0x107]
test al, 1
jne 0x100421ff
jmp 0x10042ca0
mov eax, dword [0x10068cc0]
mov ecx, dword [0x10068cbc]
mov dword [esp + 0x100], ecx
mov ecx, eax
add ecx, 0x4959ea92
sub ecx, 1
sub ecx, 0x4959ea92
imul eax, ecx
and eax, 1
cmp eax, 0
sete al
mov byte [esp + 0x106], al
mov al, byte [esp + 0x106]
mov ecx, dword [esp + 0x100]
cmp ecx, 0xa
setl cl
mov byte [esp + 0xfb], cl
xor al, 0xff
mov byte [esp + 0xfc], al
xor cl, 0xff
mov byte [esp + 0xfd], cl
mov cl, 1
xor cl, 1
mov byte [esp + 0xfe], cl
and al, 0xff
mov byte [esp + 0xff], al
mov al, byte [esp + 0xff]
mov ch, byte [esp + 0xfe]
mov dl, byte [esp + 0xfb]
mov cl, byte [esp + 0xfd]
mov ah, byte [esp + 0x106]
and ah, ch
and cl, 0xff
and dl, ch
or al, ah
or cl, dl
xor al, cl
mov byte [esp + 0xfa], al
mov cl, byte [esp + 0xfd]
mov al, byte [esp + 0xfc]
or al, cl
xor al, 0xff
mov byte [esp + 0xf9], al
mov al, byte [esp + 0xfa]
mov cl, byte [esp + 0xf9]
mov dl, byte [esp + 0xfe]
or dl, 1
and cl, dl
or al, cl
mov byte [esp + 0xf8], al
mov al, byte [esp + 0xf8]
test al, 1
jne 0x100422ff
jmp 0x10042ca0
mov cl, byte [esp + 0x123]
xor eax, eax
test cl, 1
mov dword [esp + 0xf4], eax
jne 0x100423c8
jmp 0x1004231d
mov eax, dword [esp + 0xf4]
mov ecx, dword [esp + 0x148]
mov edx, dword [esp + 0x134]
mov dword [esp + 0xf0], eax
mov bh, byte [edx + eax]
mov esi, 0x15
xor edx, edx
div esi
mov eax, dword [esp + 0xf0]
mov bl, byte [ecx + edx]
mov dl, bh
xor dl, 0xff
and dl, 0xec
mov cl, 0xff
xor cl, 0xec
and bh, cl
mov dh, bl
xor dh, 0xff
and dh, 0xec
and bl, cl
mov ecx, dword [esp + 0x14c]
or dl, bh
or dh, bl
xor dl, dh
mov byte [ecx + eax], dl
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, 1
add ecx, eax
xor eax, eax
sub eax, ecx
cmp eax, 0xd
mov dword [esp + 0xf4], eax
jne 0x1004231d
mov eax, dword [0x1006732c]
mov dword [esp + 0xec], eax
mov eax, dword [esp + 0xec]
add eax, 0xbb2b684e
mov dword [esp + 0xe8], eax
mov eax, dword [esp + 0xe8]
mov dword [eax], 1
jmp 0x100423c8
mov eax, dword [0x10068cc0]
mov dword [esp + 0xe0], eax
mov eax, dword [0x10068cbc]
mov dword [esp + 0xe4], eax
mov eax, dword [esp + 0xe0]
xor edx, edx
sub edx, 1
mov ecx, eax
add ecx, edx
imul eax, ecx
mov dword [esp + 0xdc], eax
mov eax, dword [esp + 0xe4]
mov ecx, dword [esp + 0xdc]
and ecx, 1
cmp ecx, 0
sete cl
mov byte [esp + 0xda], cl
cmp eax, 0xa
setl al
mov byte [esp + 0xdb], al
mov cl, byte [esp + 0xdb]
mov al, byte [esp + 0xda]
and al, cl
mov byte [esp + 0xd9], al
mov cl, byte [esp + 0xdb]
mov al, byte [esp + 0xda]
xor al, cl
mov byte [esp + 0xd8], al
mov cl, byte [esp + 0xd8]
mov al, byte [esp + 0xd9]
or al, cl
test al, 1
jne 0x10042470
jmp 0x10042c91
mov ecx, dword [0x10068cc0]
mov eax, dword [0x10068cbc]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
mov byte [esp + 0xd6], cl
cmp eax, 0xa
setl al
mov byte [esp + 0xd7], al
mov al, byte [esp + 0xd7]
mov cl, byte [esp + 0xd6]
xor cl, 0xff
mov byte [esp + 0xd4], cl
xor al, 0xff
mov byte [esp + 0xd5], al
mov dl, byte [esp + 0xd7]
mov cl, byte [esp + 0xd5]
mov ah, byte [esp + 0xd6]
mov al, byte [esp + 0xd4]
mov ch, 1
xor ch, 0
mov byte [esp + 0xd2], ch
and al, 0
and ah, ch
and cl, 0
and dl, ch
or al, ah
or cl, dl
xor al, cl
mov byte [esp + 0xd3], al
mov cl, byte [esp + 0xd5]
mov al, byte [esp + 0xd4]
or al, cl
mov byte [esp + 0xd1], al
mov al, byte [esp + 0xd2]
mov cl, byte [esp + 0xd1]
xor cl, 0xff
mov byte [esp + 0xcf], cl
or al, 0
mov byte [esp + 0xd0], al
mov al, byte [esp + 0xd3]
mov dl, byte [esp + 0xd0]
mov cl, byte [esp + 0xcf]
and cl, dl
or al, cl
test al, 1
jne 0x10042561
jmp 0x10042c96
mov eax, dword [0x10068cc0]
mov dword [esp + 0xc0], eax
mov ecx, dword [0x10068cbc]
mov dword [esp + 0xc4], ecx
add eax, 0xef573ed5
sub eax, 1
mov dword [esp + 0xc8], eax
mov eax, dword [esp + 0xc0]
mov ecx, dword [esp + 0xc8]
sub ecx, 0xef573ed5
imul eax, ecx
and eax, 1
mov dword [esp + 0xbc], eax
mov eax, dword [esp + 0xbc]
cmp eax, 0
sete al
mov byte [esp + 0xbb], al
mov eax, dword [esp + 0xc4]
cmp eax, 0xa
setl al
mov byte [esp + 0xba], al
mov cl, byte [esp + 0xba]
mov al, byte [esp + 0xbb]
mov dl, al
and dl, cl
mov byte [esp + 0xb8], dl
xor al, cl
mov byte [esp + 0xb9], al
mov cl, byte [esp + 0xb9]
mov al, byte [esp + 0xb8]
or al, cl
test al, 1
jne 0x10042611
jmp 0x10042ca5
mov eax, dword [0x10068cc0]
mov dword [esp + 0xb0], eax
mov eax, dword [0x10068cbc]
mov dword [esp + 0xb4], eax
mov eax, dword [esp + 0xb0]
sub eax, 0x2360840b
mov dword [esp + 0xac], eax
mov eax, dword [esp + 0xac]
sub eax, 1
add eax, 0x2360840b
mov dword [esp + 0xa8], eax
mov ecx, dword [esp + 0xa8]
mov eax, dword [esp + 0xb0]
imul eax, ecx
and eax, 1
cmp eax, 0
sete al
mov byte [esp + 0xa7], al
mov al, byte [esp + 0xa7]
mov ecx, dword [esp + 0xb4]
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
mov byte [esp + 0xa5], dl
xor al, cl
mov byte [esp + 0xa6], al
mov cl, byte [esp + 0xa6]
mov al, byte [esp + 0xa5]
or al, cl
test al, 1
jne 0x100426b8
jmp 0x10042ca5
mov eax, dword [0x10068cc0]
mov dword [esp + 0x98], eax
mov ecx, dword [0x10068cbc]
mov dword [esp + 0x9c], ecx
sub eax, 0x233dc0ec
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0x9c]
mov ecx, dword [esp + 0x98]
mov edx, dword [esp + 0xa0]
sub edx, 1
add edx, 0x233dc0ec
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
mov byte [esp + 0x96], cl
cmp eax, 0xa
setl al
mov byte [esp + 0x97], al
mov al, byte [esp + 0x97]
mov cl, byte [esp + 0x96]
xor cl, 0xff
mov byte [esp + 0x93], cl
xor al, 0xff
mov byte [esp + 0x94], al
mov al, 1
xor al, 1
mov byte [esp + 0x95], al
mov cl, byte [esp + 0x95]
mov al, byte [esp + 0x96]
mov dl, byte [esp + 0x93]
and dl, 0xff
mov byte [esp + 0x91], dl
and al, cl
mov byte [esp + 0x92], al
mov al, byte [esp + 0x94]
and al, 0xff
mov byte [esp + 0x90], al
mov dl, byte [esp + 0x95]
mov ah, byte [esp + 0x94]
mov cl, byte [esp + 0x93]
mov ch, byte [esp + 0x90]
mov bl, byte [esp + 0x92]
mov al, byte [esp + 0x91]
mov dh, byte [esp + 0x97]
and dh, dl
or al, bl
or ch, dh
xor al, ch
or cl, ah
xor cl, 0xff
or dl, 1
and cl, dl
or al, cl
test al, 1
jne 0x100427d1
jmp 0x10042c96
mov eax, dword [0x10068cc0]
mov dword [esp + 0x8c], eax
mov eax, dword [esp + 0x8c]
mov ecx, dword [0x10068cbc]
mov dword [esp + 0x84], ecx
xor edx, edx
sub edx, 1
mov ecx, eax
add ecx, edx
imul eax, ecx
mov dword [esp + 0x88], eax
mov eax, dword [esp + 0x88]
and eax, 1
cmp eax, 0
sete al
mov byte [esp + 0x83], al
mov al, byte [esp + 0x83]
mov ecx, dword [esp + 0x84]
cmp ecx, 0xa
setl cl
mov byte [esp + 0x81], cl
and al, cl
mov byte [esp + 0x82], al
mov al, byte [esp + 0x82]
mov dl, byte [esp + 0x81]
mov cl, byte [esp + 0x83]
xor cl, dl
or al, cl
mov byte [esp + 0x80], al
mov al, byte [esp + 0x80]
test al, 1
jne 0x10042873
jmp 0x10042caa
mov ecx, dword [0x10068cc0]
mov eax, dword [0x10068cbc]
mov edx, ecx
sub edx, 0x78b56e7e
sub edx, 1
add edx, 0x78b56e7e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
mov byte [esp + 0x7c], cl
cmp eax, 0xa
setl al
mov byte [esp + 0x7d], al
xor cl, 0xff
mov byte [esp + 0x7e], cl
xor al, 0xff
mov byte [esp + 0x7f], al
mov al, byte [esp + 0x7e]
mov cl, 1
xor cl, 1
mov byte [esp + 0x7a], cl
and al, 0xff
mov byte [esp + 0x7b], al
mov dl, byte [esp + 0x7b]
mov ch, byte [esp + 0x7a]
mov cl, byte [esp + 0x7d]
mov al, byte [esp + 0x7f]
mov ah, byte [esp + 0x7c]
and ah, ch
and al, 0xff
and cl, ch
or dl, ah
mov byte [esp + 0x78], dl
or al, cl
mov byte [esp + 0x79], al
mov cl, byte [esp + 0x79]
mov al, byte [esp + 0x78]
xor al, cl
mov byte [esp + 0x77], al
mov al, byte [esp + 0x77]
mov dl, byte [esp + 0x7a]
mov ah, byte [esp + 0x7f]
mov cl, byte [esp + 0x7e]
or cl, ah
xor cl, 0xff
or dl, 1
and cl, dl
or al, cl
mov byte [esp + 0x76], al
mov al, byte [esp + 0x76]
test al, 1
jne 0x1004292e
jmp 0x10042caa
mov eax, dword [0x10068cc0]
mov dword [esp + 0x70], eax
mov eax, dword [esp + 0x70]
mov ecx, dword [0x10068cbc]
mov dword [esp + 0x68], ecx
sub eax, 0x4ce99405
sub eax, 1
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 0x6c]
add ecx, 0x4ce99405
imul eax, ecx
and eax, 1
cmp eax, 0
sete al
mov byte [esp + 0x67], al
mov eax, dword [esp + 0x68]
cmp eax, 0xa
setl al
mov byte [esp + 0x66], al
mov cl, byte [esp + 0x66]
mov al, byte [esp + 0x67]
and al, cl
mov byte [esp + 0x65], al
mov al, byte [esp + 0x65]
mov dl, byte [esp + 0x66]
mov cl, byte [esp + 0x67]
xor cl, dl
or al, cl
test al, 1
jne 0x100429a8
jmp 0x10042c91
mov eax, dword [0x10068cc0]
mov dword [esp + 0x58], eax
mov ecx, dword [0x10068cbc]
mov dword [esp + 0x5c], ecx
sub eax, 0x797fc062
sub eax, 1
add eax, 0x797fc062
mov dword [esp + 0x60], eax
mov ecx, dword [esp + 0x60]
mov eax, dword [esp + 0x58]
imul eax, ecx
and eax, 1
cmp eax, 0
sete al
mov byte [esp + 0x57], al
mov al, byte [esp + 0x57]
mov ecx, dword [esp + 0x5c]
cmp ecx, 0xa
setl cl
mov byte [esp + 0x52], cl
xor al, 0xff
mov byte [esp + 0x53], al
xor cl, 0xff
mov byte [esp + 0x54], cl
mov cl, 1
xor cl, 1
mov byte [esp + 0x55], cl
and al, 0xff
mov byte [esp + 0x56], al
mov cl, byte [esp + 0x55]
mov dl, byte [esp + 0x54]
mov al, byte [esp + 0x53]
mov ah, byte [esp + 0x56]
mov dh, byte [esp + 0x52]
mov bl, byte [esp + 0x57]
and bl, cl
mov ch, dl
and ch, 0xff
and dh, cl
or ah, bl
or ch, dh
xor ah, ch
mov byte [esp + 0x50], ah
or al, dl
xor al, 0xff
or cl, 1
and al, cl
mov byte [esp + 0x51], al
mov cl, byte [esp + 0x51]
mov al, byte [esp + 0x50]
or al, cl
mov byte [esp + 0x4f], al
mov al, byte [esp + 0x4f]
test al, 1
jne 0x10042a69
jmp 0x10042c9b
mov eax, dword [0x10068cc0]
mov dword [esp + 0x40], eax
mov ecx, dword [0x10068cbc]
mov dword [esp + 0x44], ecx
add eax, 0x9e7a5daf
mov dword [esp + 0x48], eax
mov ecx, dword [esp + 0x44]
mov eax, dword [esp + 0x40]
mov edx, dword [esp + 0x48]
sub edx, 1
sub edx, 0x9e7a5daf
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov byte [esp + 0x3a], cl
mov dl, al
xor dl, 0xff
mov byte [esp + 0x3b], dl
xor cl, 0xff
mov byte [esp + 0x3c], cl
mov cl, 1
xor cl, 1
mov byte [esp + 0x3d], cl
and dl, 0xff
mov byte [esp + 0x3e], dl
and al, cl
mov byte [esp + 0x3f], al
mov cl, byte [esp + 0x3d]
mov al, byte [esp + 0x3a]
mov dl, byte [esp + 0x3c]
and dl, 0xff
mov byte [esp + 0x38], dl
and al, cl
mov byte [esp + 0x39], al
mov cl, byte [esp + 0x3f]
mov al, byte [esp + 0x3e]
or al, cl
mov byte [esp + 0x37], al
mov cl, byte [esp + 0x3c]
mov al, byte [esp + 0x3b]
mov dl, byte [esp + 0x37]
mov ch, byte [esp + 0x39]
mov ah, byte [esp + 0x38]
or ah, ch
xor dl, ah
mov byte [esp + 0x35], dl
or al, cl
mov byte [esp + 0x36], al
mov al, byte [esp + 0x35]
mov dl, byte [esp + 0x3d]
mov cl, byte [esp + 0x36]
xor cl, 0xff
or dl, 1
and cl, dl
or al, cl
test al, 1
jne 0x10042b42
jmp 0x10042c9b
add esp, 0x154
pop esi
pop ebx
ret
mov eax, dword [0x10068cc0]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x30]
mov ecx, dword [0x10068cbc]
mov dword [esp + 0x28], ecx
xor ecx, ecx
sub ecx, 1
add eax, ecx
mov dword [esp + 0x2c], eax
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x2c]
mov eax, dword [esp + 0x30]
imul eax, edx
and eax, 1
cmp eax, 0
sete al
mov byte [esp + 0x25], al
cmp ecx, 0xa
setl cl
mov byte [esp + 0x26], cl
and al, cl
mov byte [esp + 0x27], al
mov cl, byte [esp + 0x26]
mov al, byte [esp + 0x25]
xor al, cl
mov byte [esp + 0x24], al
mov cl, byte [esp + 0x24]
mov al, byte [esp + 0x27]
or al, cl
mov byte [esp + 0x23], al
mov al, byte [esp + 0x23]
test al, 1
jne 0x10042bc6
jmp 0x10042caf
mov eax, dword [0x10068cc0]
mov dword [esp + 0x14], eax
mov ecx, dword [0x10068cbc]
mov dword [esp + 0x18], ecx
add eax, 0x3e59e33d
sub eax, 1
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x1c]
sub ecx, 0x3e59e33d
imul eax, ecx
and eax, 1
cmp eax, 0
sete al
mov byte [esp + 0x13], al
mov cl, byte [esp + 0x13]
mov eax, dword [esp + 0x18]
cmp eax, 0xa
setl al
mov byte [esp + 0xc], al
mov ah, cl
xor ah, 0xff
mov byte [esp + 0xd], ah
xor al, 0xff
mov byte [esp + 0xe], al
mov dl, 1
xor dl, 0
mov byte [esp + 0xf], dl
and ah, 0
mov byte [esp + 0x10], ah
and cl, dl
mov byte [esp + 0x11], cl
and al, 0
mov byte [esp + 0x12], al
mov cl, byte [esp + 0xf]
mov dl, byte [esp + 0xe]
mov al, byte [esp + 0xd]
mov ch, byte [esp + 0x12]
mov bl, byte [esp + 0x11]
mov ah, byte [esp + 0x10]
mov dh, byte [esp + 0xc]
and dh, cl
or ah, bl
or ch, dh
xor ah, ch
mov byte [esp + 0xa], ah
or al, dl
xor al, 0xff
or cl, 0
and al, cl
mov byte [esp + 0xb], al
mov cl, byte [esp + 0xb]
mov al, byte [esp + 0xa]
or al, cl
test al, 1
jne 0x10042c8c
jmp 0x10042caf
jmp 0x10042090
jmp 0x10042470
jmp 0x10042561
jmp 0x10042a69
jmp 0x100421ff
jmp 0x10042611
jmp 0x10042873
mov eax, dword [0x1006732c]
mov dword [esp + 4], eax
mov eax, dword [esp + 4]
add eax, 0xbb2b684e
mov dword [esp], eax
mov eax, dword [esp]
mov eax, dword [eax]
jmp 0x10042bc6