Function at 0x100503a0
Capabilities:
Encode data using xor
Encrypt data using rc4 ksa
Resolve function by parsing pe exports

Disassembly:
push ebx
push edi
push esi
sub esp, 0x100
mov eax, dword [esp + 0x114]
mov dword [esp + 0xf4], eax
mov eax, dword [esp + 0x110]
mov dword [esp + 0xf8], eax
mov eax, dword [0x10068bf8]
mov dword [esp + 0xfc], eax
mov eax, dword [esp + 0xfc]
mov ecx, dword [0x10068bf4]
mov dword [esp + 0xec], ecx
sub eax, 0xe1e24808
sub eax, 1
mov dword [esp + 0xf0], eax
mov eax, dword [esp + 0xfc]
mov ecx, dword [esp + 0xf0]
add ecx, 0xe1e24808
imul eax, ecx
and eax, 1
cmp eax, 0
sete al
mov byte [esp + 0xeb], al
mov al, byte [esp + 0xeb]
mov ecx, dword [esp + 0xec]
cmp ecx, 0xa
setl cl
mov byte [esp + 0xe9], cl
and al, cl
mov byte [esp + 0xea], al
mov cl, byte [esp + 0xe9]
mov al, byte [esp + 0xeb]
xor al, cl
mov byte [esp + 0xe8], al
mov cl, byte [esp + 0xe8]
mov al, byte [esp + 0xea]
or al, cl
test al, 1
jne 0x10050473
jmp 0x10050b8d
mov eax, dword [esp + 0xf4]
add eax, 0x18
mov dword [esp + 0xd4], eax
mov eax, dword [0x1006739c]
cmp dword [eax - 0x37dccc3d], 1
sete al
mov byte [esp + 0xdb], al
mov eax, dword [0x10068bf8]
mov dword [esp + 0xdc], eax
mov ecx, dword [0x10068bf4]
mov dword [esp + 0xe0], ecx
sub eax, 0xfcde6b1c
mov dword [esp + 0xe4], eax
mov eax, dword [esp + 0xe4]
sub eax, 1
add eax, 0xfcde6b1c
mov dword [esp + 0xd0], eax
mov ecx, dword [esp + 0xd0]
mov eax, dword [esp + 0xdc]
imul eax, ecx
mov dword [esp + 0xcc], eax
mov eax, dword [esp + 0xe0]
mov ecx, dword [esp + 0xcc]
and ecx, 1
cmp ecx, 0
sete cl
mov byte [esp + 0xc7], cl
cmp eax, 0xa
setl al
mov byte [esp + 0xc8], al
xor cl, 0xff
mov byte [esp + 0xc9], cl
xor al, 0xff
mov byte [esp + 0xca], al
mov al, 1
xor al, 1
mov byte [esp + 0xcb], al
mov dl, byte [esp + 0xcb]
mov ah, byte [esp + 0xca]
mov cl, byte [esp + 0xc9]
mov dh, byte [esp + 0xc8]
mov bl, byte [esp + 0xc7]
mov al, cl
and al, 0xff
and bl, dl
mov ch, ah
and ch, 0xff
and dh, dl
or al, bl
or ch, dh
xor al, ch
or cl, ah
xor cl, 0xff
or dl, 1
and cl, dl
or al, cl
test al, 1
jne 0x10050585
jmp 0x10050b8d
mov cl, byte [esp + 0xdb]
xor eax, eax
test cl, 1
mov dword [esp + 0xc0], eax
jne 0x10050908
jmp 0x100505a3
mov eax, dword [esp + 0xc0]
mov ecx, dword [esp + 0xf8]
mov esi, dword [esp + 0xf4]
mov edx, dword [esp + 0xd4]
mov dword [esp + 0xb8], eax
mov dl, byte [edx + eax]
mov byte [esp + 0xbf], dl
mov edi, 0x18
xor edx, edx
div edi
mov eax, dword [esp + 0xb8]
mov edi, edx
mov dh, byte [esp + 0xbf]
mov bl, byte [esi + edi]
mov bh, dh
xor bh, 0xff
mov dl, bl
and dl, bh
xor bl, 0xff
and dh, bl
or dl, dh
mov byte [ecx + eax], dl
sub eax, 0x26bc8c39
add eax, 1
add eax, 0x26bc8c39
cmp eax, 0x14
mov dword [esp + 0xc0], eax
jne 0x100505a3
mov eax, dword [0x10068bf8]
mov dword [esp + 0xb4], eax
mov eax, dword [esp + 0xb4]
mov ecx, dword [0x10068bf4]
mov dword [esp + 0xac], ecx
add eax, 0xc47d04bc
mov dword [esp + 0xb0], eax
mov eax, dword [esp + 0xb0]
sub eax, 1
mov dword [esp + 0xa8], eax
mov eax, dword [esp + 0xb4]
mov ecx, dword [esp + 0xa8]
sub ecx, 0xc47d04bc
imul eax, ecx
mov dword [esp + 0xa4], eax
mov eax, dword [esp + 0xa4]
and eax, 1
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0xac]
mov ecx, dword [esp + 0xa0]
cmp ecx, 0
sete cl
cmp eax, 0xa
setl dl
mov al, cl
and al, dl
xor cl, dl
or al, cl
test al, 1
jne 0x100506b7
jmp 0x10050912
mov eax, dword [0x1006739c]
mov dword [eax - 0x37dccc3d], 1
mov eax, dword [0x10068bf8]
mov dword [esp + 0x94], eax
mov ecx, dword [0x10068bf4]
mov dword [esp + 0x98], ecx
sub eax, 0xced95f7f
sub eax, 1
add eax, 0xced95f7f
mov dword [esp + 0x9c], eax
mov eax, dword [esp + 0x98]
mov edx, dword [esp + 0x9c]
mov ecx, dword [esp + 0x94]
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
mov byte [esp + 0x92], cl
cmp eax, 0xa
setl al
mov byte [esp + 0x93], al
mov cl, byte [esp + 0x93]
mov al, byte [esp + 0x92]
mov dl, al
and dl, cl
mov byte [esp + 0x90], dl
xor al, cl
mov byte [esp + 0x91], al
mov cl, byte [esp + 0x91]
mov al, byte [esp + 0x90]
or al, cl
mov byte [esp + 0x8f], al
mov al, byte [esp + 0x8f]
test al, 1
jne 0x10050775
jmp 0x10050912
mov eax, dword [0x10068bf8]
mov dword [esp + 0x80], eax
mov ecx, dword [0x10068bf4]
mov dword [esp + 0x84], ecx
add eax, 0xad3b2671
sub eax, 1
sub eax, 0xad3b2671
mov dword [esp + 0x88], eax
mov ecx, dword [esp + 0x88]
mov eax, dword [esp + 0x80]
imul eax, ecx
mov dword [esp + 0x7c], eax
mov ecx, dword [esp + 0x84]
mov eax, dword [esp + 0x7c]
and eax, 1
cmp eax, 0
sete ah
cmp ecx, 0xa
setl al
mov ch, ah
xor ch, 0xff
mov byte [esp + 0x75], ch
mov dl, al
xor dl, 0xff
mov byte [esp + 0x76], dl
mov cl, 1
xor cl, 1
mov byte [esp + 0x77], cl
and ch, 0xff
mov byte [esp + 0x78], ch
and ah, cl
mov byte [esp + 0x79], ah
and dl, 0xff
mov byte [esp + 0x7a], dl
and al, cl
mov byte [esp + 0x7b], al
mov dl, byte [esp + 0x7b]
mov cl, byte [esp + 0x7a]
mov ah, byte [esp + 0x79]
mov al, byte [esp + 0x78]
or al, ah
or cl, dl
xor al, cl
mov byte [esp + 0x74], al
mov al, byte [esp + 0x74]
mov dl, byte [esp + 0x77]
mov ah, byte [esp + 0x76]
mov cl, byte [esp + 0x75]
or cl, ah
xor cl, 0xff
or dl, 1
and cl, dl
or al, cl
test al, 1
jne 0x10050849
jmp 0x10050a68
mov eax, dword [0x10068bf8]
mov dword [esp + 0x70], eax
mov eax, dword [esp + 0x70]
mov ecx, dword [0x10068bf4]
mov dword [esp + 0x68], ecx
sub eax, 0x11a4b76c
sub eax, 1
add eax, 0x11a4b76c
mov dword [esp + 0x6c], eax
mov ecx, dword [esp + 0x6c]
mov eax, dword [esp + 0x70]
imul eax, ecx
mov dword [esp + 0x64], eax
mov ecx, dword [esp + 0x68]
mov eax, dword [esp + 0x64]
and eax, 1
cmp eax, 0
sete al
mov byte [esp + 0x61], al
cmp ecx, 0xa
setl cl
mov byte [esp + 0x62], cl
xor al, 0xff
mov byte [esp + 0x63], al
mov al, byte [esp + 0x63]
mov cl, byte [esp + 0x62]
xor cl, 0xff
mov byte [esp + 0x5e], cl
mov cl, 1
xor cl, 0
mov byte [esp + 0x5f], cl
and al, 0
mov byte [esp + 0x60], al
mov dl, byte [esp + 0x5f]
mov ah, byte [esp + 0x5e]
mov cl, byte [esp + 0x63]
mov al, byte [esp + 0x60]
mov dh, byte [esp + 0x62]
mov bl, byte [esp + 0x61]
and bl, dl
mov ch, ah
and ch, 0
and dh, dl
or al, bl
or ch, dh
xor al, ch
or cl, ah
xor cl, 0xff
or dl, 0
and cl, dl
or al, cl
test al, 1
jne 0x10050903
jmp 0x10050a68
jmp 0x10050908
add esp, 0x100
pop esi
pop edi
pop ebx
ret
mov eax, dword [0x10068bf8]
mov dword [esp + 0x54], eax
mov eax, dword [0x10068bf4]
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x54]
xor ecx, ecx
sub ecx, 1
add eax, ecx
mov dword [esp + 0x50], eax
mov ecx, dword [esp + 0x50]
mov eax, dword [esp + 0x54]
imul eax, ecx
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x4c]
and ecx, 1
cmp ecx, 0
sete cl
mov byte [esp + 0x4a], cl
cmp eax, 0xa
setl al
mov byte [esp + 0x4b], al
mov dl, byte [esp + 0x4b]
mov cl, byte [esp + 0x4a]
mov al, cl
and al, dl
xor cl, dl
or al, cl
mov byte [esp + 0x49], al
mov al, byte [esp + 0x49]
test al, 1
jne 0x10050986
jmp 0x10050bae
mov eax, dword [0x1006739c]
mov dword [eax - 0x37dccc3d], 1
mov eax, dword [0x10068bf8]
mov dword [esp + 0x40], eax
mov eax, dword [0x10068bf4]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x40]
sub eax, 0x3401b84f
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x3c]
sub ecx, 1
add ecx, 0x3401b84f
imul eax, ecx
and eax, 1
mov dword [esp + 0x38], eax
mov ecx, dword [esp + 0x44]
mov eax, dword [esp + 0x38]
cmp eax, 0
sete ah
cmp ecx, 0xa
setl al
mov ch, ah
xor ch, 0xff
mov byte [esp + 0x31], ch
mov dl, al
xor dl, 0xff
mov byte [esp + 0x32], dl
mov cl, 1
xor cl, 1
mov byte [esp + 0x33], cl
and ch, 0xff
mov byte [esp + 0x34], ch
and ah, cl
mov byte [esp + 0x35], ah
and dl, 0xff
mov byte [esp + 0x36], dl
and al, cl
mov byte [esp + 0x37], al
mov cl, byte [esp + 0x32]
mov al, byte [esp + 0x31]
mov ch, byte [esp + 0x37]
mov ah, byte [esp + 0x36]
mov dh, byte [esp + 0x35]
mov dl, byte [esp + 0x34]
or dl, dh
or ah, ch
xor dl, ah
mov byte [esp + 0x2f], dl
or al, cl
mov byte [esp + 0x30], al
mov al, byte [esp + 0x2f]
mov dl, byte [esp + 0x33]
mov cl, byte [esp + 0x30]
xor cl, 0xff
or dl, 1
and cl, dl
or al, cl
test al, 1
jne 0x10050a63
jmp 0x10050bae
jmp 0x100506b7
mov eax, dword [0x10068bf8]
mov dword [esp + 0x28], eax
mov eax, dword [0x10068bf4]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x28]
add eax, 0x64d36e40
sub eax, 1
sub eax, 0x64d36e40
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x24]
mov edx, dword [esp + 0x20]
mov ecx, dword [esp + 0x28]
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
mov byte [esp + 0x1e], cl
cmp eax, 0xa
setl al
mov byte [esp + 0x1f], al
mov dl, byte [esp + 0x1f]
mov cl, byte [esp + 0x1e]
mov al, cl
and al, dl
xor cl, dl
or al, cl
mov byte [esp + 0x1d], al
mov al, byte [esp + 0x1d]
test al, 1
jne 0x10050ada
jmp 0x10050bd1
mov eax, dword [0x10068bf8]
mov dword [esp + 0x18], eax
mov ecx, dword [esp + 0x18]
mov eax, dword [0x10068bf4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
mov byte [esp + 0x16], cl
cmp eax, 0xa
setl al
mov byte [esp + 0x17], al
mov al, byte [esp + 0x17]
mov cl, byte [esp + 0x16]
xor cl, 0xff
mov byte [esp + 0x13], cl
xor al, 0xff
mov byte [esp + 0x14], al
mov al, 1
xor al, 1
mov byte [esp + 0x15], al
mov cl, byte [esp + 0x14]
mov al, byte [esp + 0x13]
mov bl, byte [esp + 0x15]
mov ch, byte [esp + 0x17]
mov dh, byte [esp + 0x16]
mov dl, al
and dl, 0xff
and dh, bl
mov ah, cl
and ah, 0xff
and ch, bl
or dl, dh
or ah, ch
xor dl, ah
mov byte [esp + 0x11], dl
or al, cl
xor al, 0xff
mov byte [esp + 0x12], al
mov al, byte [esp + 0x11]
mov cl, byte [esp + 0x12]
mov dl, byte [esp + 0x15]
or dl, 1
and cl, dl
or al, cl
mov byte [esp + 0x10], al
mov al, byte [esp + 0x10]
test al, 1
jne 0x10050b88
jmp 0x10050bd1
jmp 0x10050849
mov eax, dword [0x1006739c]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0xc]
add eax, 0xc82333c3
mov dword [esp + 8], eax
mov eax, dword [esp + 8]
mov eax, dword [eax]
jmp 0x10050473
mov eax, dword [0x1006739c]
mov dword [esp + 4], eax
mov eax, dword [esp + 4]
add eax, 0xc82333c3
mov dword [esp], eax
mov eax, dword [esp]
mov dword [eax], 1
jmp 0x10050986
jmp 0x10050ada