Function at 0x100410d0
Capabilities:
Encode data using xor
Encrypt data using rc4 ksa
Resolve function by parsing pe exports

Disassembly:
push ebx
push esi
sub esp, 0xd4
mov eax, dword [esp + 0xe4]
mov dword [esp + 0xc8], eax
mov eax, dword [esp + 0xe0]
mov dword [esp + 0xcc], eax
mov eax, dword [0x10068cd0]
mov dword [esp + 0xd0], eax
mov eax, dword [esp + 0xd0]
mov ecx, dword [0x10068ccc]
mov dword [esp + 0xc0], ecx
add eax, 0x974420ef
sub eax, 1
sub eax, 0x974420ef
mov dword [esp + 0xc4], eax
mov ecx, dword [esp + 0xc4]
mov eax, dword [esp + 0xd0]
imul eax, ecx
mov dword [esp + 0xbc], eax
mov eax, dword [esp + 0xbc]
and eax, 1
mov dword [esp + 0xb8], eax
mov eax, dword [esp + 0xc0]
mov ecx, dword [esp + 0xb8]
cmp ecx, 0
sete cl
cmp eax, 0xa
setl dl
mov al, cl
and al, dl
xor cl, dl
or al, cl
test al, 1
jne 0x10041180
jmp 0x10041731
mov eax, dword [esp + 0xc8]
add eax, 0x1f
mov dword [esp + 0xac], eax
mov eax, dword [0x10067324]
cmp dword [eax + 0x7aac34f5], 1
sete al
mov byte [esp + 0xb3], al
mov eax, dword [0x10068cd0]
mov dword [esp + 0xb4], eax
mov eax, dword [esp + 0xb4]
mov ecx, dword [0x10068ccc]
mov dword [esp + 0xa4], ecx
sub eax, 0x8af3e421
mov dword [esp + 0xa8], eax
mov eax, dword [esp + 0xb4]
mov ecx, dword [esp + 0xa8]
sub ecx, 1
add ecx, 0x8af3e421
imul eax, ecx
and eax, 1
mov dword [esp + 0xa0], eax
mov ecx, dword [esp + 0xa4]
mov eax, dword [esp + 0xa0]
cmp eax, 0
sete al
mov byte [esp + 0x9d], al
cmp ecx, 0xa
setl cl
mov byte [esp + 0x9e], cl
and al, cl
mov byte [esp + 0x9f], al
mov al, byte [esp + 0x9f]
mov dl, byte [esp + 0x9e]
mov cl, byte [esp + 0x9d]
xor cl, dl
or al, cl
mov byte [esp + 0x9c], al
mov al, byte [esp + 0x9c]
test al, 1
jne 0x1004125c
jmp 0x10041731
mov cl, byte [esp + 0xb3]
xor eax, eax
test cl, 1
mov dword [esp + 0x98], eax
jne 0x10041728
jmp 0x1004127a
mov eax, dword [esp + 0x98]
mov ecx, dword [esp + 0xc8]
mov edx, dword [esp + 0xac]
mov dword [esp + 0x94], eax
mov bh, byte [edx + eax]
mov esi, 0x1f
xor edx, edx
div esi
mov eax, dword [esp + 0x94]
mov bl, byte [ecx + edx]
mov dl, bh
xor dl, 0xff
and dl, 0x33
mov cl, 0xff
xor cl, 0x33
and bh, cl
mov dh, bl
xor dh, 0xff
and dh, 0x33
and bl, cl
mov ecx, dword [esp + 0xcc]
or dl, bh
or dh, bl
xor dl, dh
mov byte [ecx + eax], dl
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, 1
add ecx, eax
xor eax, eax
sub eax, ecx
cmp eax, 0xd
mov dword [esp + 0x98], eax
jne 0x1004127a
mov eax, dword [0x10068cd0]
mov dword [esp + 0x8c], eax
mov eax, dword [0x10068ccc]
mov dword [esp + 0x90], eax
mov eax, dword [esp + 0x8c]
add eax, 0x561688ff
sub eax, 1
mov dword [esp + 0x88], eax
mov eax, dword [esp + 0x8c]
mov ecx, dword [esp + 0x88]
sub ecx, 0x561688ff
imul eax, ecx
and eax, 1
mov dword [esp + 0x84], eax
mov eax, dword [esp + 0x90]
mov ecx, dword [esp + 0x84]
cmp ecx, 0
sete cl
mov byte [esp + 0x82], cl
cmp eax, 0xa
setl al
mov byte [esp + 0x83], al
mov dl, byte [esp + 0x83]
mov ah, byte [esp + 0x82]
mov al, ah
xor al, 0xff
mov byte [esp + 0x7e], al
mov cl, dl
xor cl, 0xff
mov byte [esp + 0x7f], cl
mov ch, 1
xor ch, 1
mov byte [esp + 0x80], ch
and al, 0xff
and ah, ch
and cl, 0xff
and dl, ch
or al, ah
or cl, dl
xor al, cl
mov byte [esp + 0x81], al
mov al, byte [esp + 0x81]
mov dl, byte [esp + 0x80]
mov ah, byte [esp + 0x7f]
mov cl, byte [esp + 0x7e]
or cl, ah
xor cl, 0xff
or dl, 1
and cl, dl
or al, cl
test al, 1
jne 0x100413db
jmp 0x10041775
mov eax, dword [0x10068cd0]
mov dword [esp + 0x70], eax
mov ecx, dword [0x10068ccc]
mov dword [esp + 0x74], ecx
xor ecx, ecx
sub ecx, 1
add eax, ecx
mov dword [esp + 0x78], eax
mov ecx, dword [esp + 0x78]
mov eax, dword [esp + 0x70]
imul eax, ecx
and eax, 1
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0x6c]
cmp eax, 0
sete al
mov byte [esp + 0x6b], al
mov al, byte [esp + 0x6b]
mov ecx, dword [esp + 0x74]
cmp ecx, 0xa
setl cl
mov byte [esp + 0x69], cl
and al, cl
mov byte [esp + 0x6a], al
mov cl, byte [esp + 0x69]
mov al, byte [esp + 0x6b]
xor al, cl
mov byte [esp + 0x68], al
mov cl, byte [esp + 0x68]
mov al, byte [esp + 0x6a]
or al, cl
test al, 1
jne 0x10041456
jmp 0x10041775
mov eax, dword [0x10068cd0]
mov dword [esp + 0x5c], eax
mov ecx, dword [0x10068ccc]
mov dword [esp + 0x60], ecx
sub eax, 0x7101aa7
mov dword [esp + 0x64], eax
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x64]
sub ecx, 1
add ecx, 0x7101aa7
imul eax, ecx
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x58]
and eax, 1
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x54]
cmp ecx, 0
sete cl
mov byte [esp + 0x52], cl
cmp eax, 0xa
setl al
mov byte [esp + 0x53], al
mov cl, byte [esp + 0x53]
mov al, byte [esp + 0x52]
and al, cl
mov byte [esp + 0x51], al
mov al, byte [esp + 0x51]
mov dl, byte [esp + 0x53]
mov cl, byte [esp + 0x52]
xor cl, dl
or al, cl
test al, 1
jne 0x100414dc
jmp 0x10041752
mov eax, dword [0x10067324]
mov dword [eax + 0x7aac34f5], 1
mov eax, dword [0x10068cd0]
mov dword [esp + 0x44], eax
mov ecx, dword [0x10068ccc]
mov dword [esp + 0x48], ecx
sub eax, 0xfa649eb7
sub eax, 1
add eax, 0xfa649eb7
mov dword [esp + 0x4c], eax
mov ecx, dword [esp + 0x4c]
mov eax, dword [esp + 0x44]
imul eax, ecx
and eax, 1
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x40]
cmp ecx, 0
sete cl
cmp eax, 0xa
setl al
mov byte [esp + 0x39], al
mov ah, cl
xor ah, 0xff
mov byte [esp + 0x3a], ah
xor al, 0xff
mov byte [esp + 0x3b], al
mov dl, 1
xor dl, 1
mov byte [esp + 0x3c], dl
and ah, 0xff
mov byte [esp + 0x3d], ah
and cl, dl
mov byte [esp + 0x3e], cl
and al, 0xff
mov byte [esp + 0x3f], al
mov cl, byte [esp + 0x3b]
mov al, byte [esp + 0x3a]
mov ah, byte [esp + 0x3f]
mov dh, byte [esp + 0x3e]
mov dl, byte [esp + 0x3d]
mov bl, byte [esp + 0x3c]
mov ch, byte [esp + 0x39]
and ch, bl
or dl, dh
or ah, ch
xor dl, ah
mov byte [esp + 0x37], dl
or al, cl
xor al, 0xff
mov byte [esp + 0x38], al
mov al, byte [esp + 0x37]
mov cl, byte [esp + 0x38]
mov dl, byte [esp + 0x3c]
or dl, 1
and cl, dl
or al, cl
test al, 1
jne 0x100415b4
jmp 0x10041752
mov eax, dword [0x10068cd0]
mov dword [esp + 0x2c], eax
mov eax, dword [0x10068ccc]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x2c]
mov edx, ecx
add edx, 0x6053d152
sub edx, 1
sub edx, 0x6053d152
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete dh
cmp eax, 0xa
setl ch
mov al, dh
xor al, 0xff
mov cl, ch
xor cl, 0xff
mov bl, 1
xor bl, 0
mov byte [esp + 0x29], bl
mov dl, al
and dl, 0
and dh, bl
mov ah, cl
and ah, 0
and ch, bl
or dl, dh
or ah, ch
xor dl, ah
mov byte [esp + 0x2a], dl
or al, cl
mov byte [esp + 0x2b], al
mov al, byte [esp + 0x2b]
xor al, 0xff
mov byte [esp + 0x28], al
mov al, byte [esp + 0x29]
or al, 0
mov byte [esp + 0x27], al
mov al, byte [esp + 0x2a]
mov dl, byte [esp + 0x27]
mov cl, byte [esp + 0x28]
and cl, dl
or al, cl
mov byte [esp + 0x26], al
mov al, byte [esp + 0x26]
test al, 1
jne 0x1004165a
jmp 0x1004177a
mov eax, dword [0x10068cd0]
mov dword [esp + 0x1c], eax
mov eax, dword [0x10068ccc]
mov dword [esp + 0x20], eax
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x1c]
mov edx, eax
add edx, 0x7ef4b98a
sub edx, 1
sub edx, 0x7ef4b98a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov byte [esp + 0x16], cl
mov dl, al
xor dl, 0xff
mov byte [esp + 0x17], dl
xor cl, 0xff
mov byte [esp + 0x18], cl
mov cl, 1
xor cl, 0
mov byte [esp + 0x19], cl
and dl, 0
mov byte [esp + 0x1a], dl
and al, cl
mov byte [esp + 0x1b], al
mov al, byte [esp + 0x18]
and al, 0
mov byte [esp + 0x15], al
mov cl, byte [esp + 0x18]
mov al, byte [esp + 0x17]
mov ah, byte [esp + 0x15]
mov dh, byte [esp + 0x1b]
mov dl, byte [esp + 0x1a]
mov bl, byte [esp + 0x19]
mov ch, byte [esp + 0x16]
and ch, bl
or dl, dh
or ah, ch
xor dl, ah
mov byte [esp + 0x13], dl
or al, cl
xor al, 0xff
mov byte [esp + 0x14], al
mov al, byte [esp + 0x13]
mov cl, byte [esp + 0x14]
mov dl, byte [esp + 0x19]
or dl, 0
and cl, dl
or al, cl
mov byte [esp + 0x12], al
mov al, byte [esp + 0x12]
test al, 1
jne 0x10041723
jmp 0x1004177a
jmp 0x10041728
add esp, 0xd4
pop esi
pop ebx
ret
mov eax, dword [0x10067324]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0xc]
add eax, 0x7aac34f5
mov dword [esp + 8], eax
mov eax, dword [esp + 8]
mov eax, dword [eax]
jmp 0x10041180
mov eax, dword [0x10067324]
mov dword [esp + 4], eax
mov eax, dword [esp + 4]
add eax, 0x7aac34f5
mov dword [esp], eax
mov eax, dword [esp]
mov dword [eax], 1
jmp 0x100414dc
jmp 0x100413db
jmp 0x1004165a