Function at 0x10043a30
Capabilities:
Encode data using xor
Encrypt data using rc4 ksa
Resolve function by parsing pe exports

Disassembly:
push ebx
push esi
sub esp, 0xc0
mov eax, dword [esp + 0xd0]
mov dword [esp + 0xb4], eax
mov ecx, dword [esp + 0xcc]
mov dword [esp + 0xb8], ecx
add eax, 0x13
mov dword [esp + 0xbc], eax
mov eax, dword [0x10067338]
mov dword [esp + 0xb0], eax
mov eax, dword [esp + 0xb0]
add eax, 0xac25529d
mov dword [esp + 0xac], eax
mov eax, dword [esp + 0xac]
mov eax, dword [eax]
mov dword [esp + 0xa8], eax
mov eax, dword [esp + 0xa8]
cmp eax, 1
sete al
mov byte [esp + 0xa7], al
mov cl, byte [esp + 0xa7]
xor eax, eax
test cl, 1
mov dword [esp + 0xa0], eax
jne 0x10043cf4
jmp 0x10043abf
mov eax, dword [esp + 0xa0]
mov ecx, dword [esp + 0xb4]
mov edx, dword [esp + 0xbc]
mov dword [esp + 0x9c], eax
mov bh, byte [edx + eax]
mov esi, 0x13
xor edx, edx
div esi
mov eax, dword [esp + 0x9c]
mov bl, byte [ecx + edx]
mov dl, bh
xor dl, 0xff
and dl, 0x42
mov cl, 0xff
xor cl, 0x42
and bh, cl
mov dh, bl
xor dh, 0xff
and dh, 0x42
and bl, cl
mov ecx, dword [esp + 0xb8]
or dl, bh
or dh, bl
xor dl, dh
mov byte [ecx + eax], dl
xor ecx, ecx
sub ecx, 1
sub eax, ecx
cmp eax, 0xb
mov dword [esp + 0xa0], eax
jne 0x10043abf
mov eax, dword [0x10068ca8]
mov ecx, dword [0x10068ca4]
mov edx, eax
sub edx, 0x9d59e360
sub edx, 1
add edx, 0x9d59e360
imul eax, edx
and eax, 1
cmp eax, 0
sete al
mov byte [esp + 0x96], al
cmp ecx, 0xa
setl cl
mov byte [esp + 0x97], cl
xor al, 0xff
mov byte [esp + 0x98], al
xor cl, 0xff
mov byte [esp + 0x99], cl
mov cl, 1
xor cl, 1
mov byte [esp + 0x9a], cl
and al, 0xff
mov byte [esp + 0x9b], al
mov cl, byte [esp + 0x9a]
mov al, byte [esp + 0x96]
and al, cl
mov byte [esp + 0x95], al
mov cl, byte [esp + 0x95]
mov al, byte [esp + 0x9b]
mov ah, byte [esp + 0x9a]
mov dl, byte [esp + 0x97]
mov ch, byte [esp + 0x99]
and ch, 0xff
mov byte [esp + 0x92], ch
and dl, ah
mov byte [esp + 0x93], dl
or al, cl
mov byte [esp + 0x94], al
mov cl, byte [esp + 0x9a]
mov dl, byte [esp + 0x99]
mov al, byte [esp + 0x98]
mov ah, byte [esp + 0x94]
mov dh, byte [esp + 0x93]
mov ch, byte [esp + 0x92]
or ch, dh
xor ah, ch
mov byte [esp + 0x90], ah
or al, dl
xor al, 0xff
or cl, 1
and al, cl
mov byte [esp + 0x91], al
mov cl, byte [esp + 0x91]
mov al, byte [esp + 0x90]
or al, cl
mov byte [esp + 0x8f], al
mov al, byte [esp + 0x8f]
test al, 1
jne 0x10043c5b
jmp 0x10043f7f
mov eax, dword [0x10067338]
mov dword [eax - 0x53daad63], 1
mov eax, dword [0x10068ca8]
mov dword [esp + 0x88], eax
mov eax, dword [esp + 0x88]
mov ecx, dword [0x10068ca4]
mov dword [esp + 0x80], ecx
mov ecx, eax
add ecx, 0xeb050f0
sub ecx, 1
sub ecx, 0xeb050f0
imul eax, ecx
mov dword [esp + 0x84], eax
mov eax, dword [esp + 0x84]
and eax, 1
cmp eax, 0
sete al
mov byte [esp + 0x7f], al
mov al, byte [esp + 0x7f]
mov ecx, dword [esp + 0x80]
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
mov byte [esp + 0x7d], dl
xor al, cl
mov byte [esp + 0x7e], al
mov cl, byte [esp + 0x7e]
mov al, byte [esp + 0x7d]
or al, cl
test al, 1
jne 0x10043cef
jmp 0x10043f7f
jmp 0x10043cf4
mov eax, dword [0x10068ca8]
mov dword [esp + 0x78], eax
mov eax, dword [esp + 0x78]
mov ecx, dword [0x10068ca4]
mov dword [esp + 0x70], ecx
sub eax, 0x6befe62
sub eax, 1
mov dword [esp + 0x74], eax
mov ecx, dword [esp + 0x70]
mov eax, dword [esp + 0x78]
mov edx, dword [esp + 0x74]
add edx, 0x6befe62
imul eax, edx
and eax, 1
cmp eax, 0
sete ah
cmp ecx, 0xa
setl al
mov ch, ah
xor ch, 0xff
mov byte [esp + 0x69], ch
mov dl, al
xor dl, 0xff
mov byte [esp + 0x6a], dl
mov cl, 1
xor cl, 0
mov byte [esp + 0x6b], cl
and ch, 0
mov byte [esp + 0x6c], ch
and ah, cl
mov byte [esp + 0x6d], ah
and dl, 0
mov byte [esp + 0x6e], dl
and al, cl
mov byte [esp + 0x6f], al
mov dl, byte [esp + 0x6f]
mov cl, byte [esp + 0x6e]
mov ah, byte [esp + 0x6d]
mov al, byte [esp + 0x6c]
or al, ah
or cl, dl
xor al, cl
mov byte [esp + 0x68], al
mov al, byte [esp + 0x6b]
mov dl, byte [esp + 0x6a]
mov cl, byte [esp + 0x69]
or cl, dl
xor cl, 0xff
mov byte [esp + 0x66], cl
or al, 0
mov byte [esp + 0x67], al
mov al, byte [esp + 0x68]
mov dl, byte [esp + 0x67]
mov cl, byte [esp + 0x66]
and cl, dl
or al, cl
test al, 1
jne 0x10043dc2
jmp 0x10043fa4
mov eax, dword [0x10068ca8]
mov dword [esp + 0x5c], eax
mov eax, dword [0x10068ca4]
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x5c]
xor ecx, ecx
sub ecx, 1
add eax, ecx
mov dword [esp + 0x58], eax
mov ecx, dword [esp + 0x60]
mov edx, dword [esp + 0x58]
mov eax, dword [esp + 0x5c]
imul eax, edx
and eax, 1
cmp eax, 0
sete al
mov byte [esp + 0x55], al
cmp ecx, 0xa
setl cl
mov byte [esp + 0x56], cl
and al, cl
mov byte [esp + 0x57], al
mov cl, byte [esp + 0x56]
mov al, byte [esp + 0x55]
xor al, cl
mov byte [esp + 0x54], al
mov cl, byte [esp + 0x54]
mov al, byte [esp + 0x57]
or al, cl
test al, 1
jne 0x10043e34
jmp 0x1004411c
mov eax, dword [0x10068ca8]
mov dword [esp + 0x4c], eax
mov eax, dword [0x10068ca4]
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x4c]
sub eax, 0xb754fabc
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x48]
sub eax, 1
add eax, 0xb754fabc
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x50]
mov edx, dword [esp + 0x44]
mov ecx, dword [esp + 0x4c]
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
cmp eax, 0xa
setl dl
mov al, cl
and al, dl
xor cl, dl
or al, cl
mov byte [esp + 0x43], al
mov al, byte [esp + 0x43]
test al, 1
jne 0x10043e9e
jmp 0x1004411c
mov eax, dword [0x10068ca8]
mov dword [esp + 0x34], eax
mov ecx, dword [0x10068ca4]
mov dword [esp + 0x38], ecx
sub eax, 0xe39de82
sub eax, 1
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 0x38]
mov eax, dword [esp + 0x34]
mov edx, dword [esp + 0x3c]
add edx, 0xe39de82
imul eax, edx
and eax, 1
cmp eax, 0
sete al
mov byte [esp + 0x31], al
cmp ecx, 0xa
setl cl
mov byte [esp + 0x32], cl
xor al, 0xff
mov byte [esp + 0x33], al
mov al, byte [esp + 0x32]
xor al, 0xff
mov byte [esp + 0x30], al
mov al, byte [esp + 0x32]
mov dl, byte [esp + 0x30]
mov ah, byte [esp + 0x31]
mov ch, byte [esp + 0x33]
mov cl, 1
xor cl, 1
mov byte [esp + 0x2b], cl
and ch, 0xff
mov byte [esp + 0x2c], ch
and ah, cl
mov byte [esp + 0x2d], ah
and dl, 0xff
mov byte [esp + 0x2e], dl
and al, cl
mov byte [esp + 0x2f], al
mov cl, byte [esp + 0x30]
mov al, byte [esp + 0x33]
mov ch, byte [esp + 0x2f]
mov ah, byte [esp + 0x2e]
mov dh, byte [esp + 0x2d]
mov dl, byte [esp + 0x2c]
or dl, dh
or ah, ch
xor dl, ah
mov byte [esp + 0x29], dl
or al, cl
xor al, 0xff
mov byte [esp + 0x2a], al
mov al, byte [esp + 0x29]
mov cl, byte [esp + 0x2a]
mov dl, byte [esp + 0x2b]
or dl, 1
and cl, dl
or al, cl
test al, 1
jne 0x10043f76
jmp 0x10043fa4
add esp, 0xc0
pop esi
pop ebx
ret
mov eax, dword [0x10067338]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x24]
add eax, 0xac25529d
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x20]
mov dword [eax], 1
jmp 0x10043c5b
mov eax, dword [0x10068ca8]
mov ecx, dword [0x10068ca4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov byte [esp + 0x1a], cl
mov dl, al
xor dl, 0xff
mov byte [esp + 0x1b], dl
xor cl, 0xff
mov byte [esp + 0x1c], cl
mov cl, 1
xor cl, 1
mov byte [esp + 0x1d], cl
and dl, 0xff
mov byte [esp + 0x1e], dl
and al, cl
mov byte [esp + 0x1f], al
mov cl, byte [esp + 0x1d]
mov al, byte [esp + 0x1a]
mov dl, byte [esp + 0x1c]
and dl, 0xff
mov byte [esp + 0x18], dl
and al, cl
mov byte [esp + 0x19], al
mov dl, byte [esp + 0x19]
mov cl, byte [esp + 0x18]
mov ah, byte [esp + 0x1f]
mov al, byte [esp + 0x1e]
or al, ah
or cl, dl
xor al, cl
mov byte [esp + 0x17], al
mov cl, byte [esp + 0x1c]
mov al, byte [esp + 0x1b]
or al, cl
mov byte [esp + 0x16], al
mov al, byte [esp + 0x16]
xor al, 0xff
mov byte [esp + 0x15], al
mov al, byte [esp + 0x17]
mov cl, byte [esp + 0x15]
mov dl, byte [esp + 0x1d]
or dl, 1
and cl, dl
or al, cl
test al, 1
jne 0x1004405f
jmp 0x10044121
mov eax, dword [0x10068ca8]
mov ecx, dword [0x10068ca4]
mov dword [esp + 0xc], ecx
xor edx, edx
sub edx, 1
mov ecx, eax
add ecx, edx
imul eax, ecx
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x10]
and eax, 1
mov dword [esp + 8], eax
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 8]
cmp eax, 0
sete al
mov byte [esp + 5], al
cmp ecx, 0xa
setl cl
mov byte [esp + 6], cl
xor al, 0xff
mov byte [esp + 7], al
mov al, byte [esp + 7]
mov cl, byte [esp + 6]
xor cl, 0xff
mov byte [esp + 2], cl
mov cl, 1
xor cl, 1
mov byte [esp + 3], cl
and al, 0xff
mov byte [esp + 4], al
mov al, byte [esp + 4]
mov ch, byte [esp + 3]
mov dl, byte [esp + 6]
mov cl, byte [esp + 2]
mov ah, byte [esp + 5]
and ah, ch
and cl, 0xff
and dl, ch
or al, ah
or cl, dl
xor al, cl
mov byte [esp + 1], al
mov al, byte [esp + 1]
mov dl, byte [esp + 3]
mov ah, byte [esp + 2]
mov cl, byte [esp + 7]
or cl, ah
xor cl, 0xff
or dl, 1
and cl, dl
or al, cl
test al, 1
jne 0x10044117
jmp 0x10044121
jmp 0x10043dc2
jmp 0x10043e34
jmp 0x1004405f