Function at 0x10044470
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebx
push edi
push esi
sub esp, 0xa8
mov eax, dword [esp + 0xbc]
mov dword [esp + 0x98], eax
mov eax, dword [esp + 0xb8]
mov dword [esp + 0x9c], eax
mov eax, dword [0x10060c40]
mov dword [esp + 0xa0], eax
mov eax, dword [0x10060c3c]
mov dword [esp + 0xa4], eax
mov eax, dword [esp + 0xa0]
add eax, 0xb9af2aed
mov dword [esp + 0x94], eax
mov eax, dword [esp + 0x94]
sub eax, 1
sub eax, 0xb9af2aed
mov dword [esp + 0x90], eax
mov eax, dword [esp + 0xa4]
mov edx, dword [esp + 0x90]
mov ecx, dword [esp + 0xa0]
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
mov byte [esp + 0x8e], cl
cmp eax, 0xa
setl al
mov byte [esp + 0x8f], al
mov dl, byte [esp + 0x8f]
mov cl, byte [esp + 0x8e]
mov al, cl
and al, dl
xor cl, dl
or al, cl
mov byte [esp + 0x8d], al
mov al, byte [esp + 0x8d]
test al, 1
jne 0x1004453c
jmp 0x100449d2
mov eax, dword [esp + 0x98]
add eax, 0x10
mov dword [esp + 0x88], eax
mov eax, dword [0x1005f378]
cmp dword [eax + 0x3971de26], 1
sete al
mov byte [esp + 0x87], al
mov eax, dword [0x10060c40]
mov dword [esp + 0x7c], eax
mov eax, dword [0x10060c3c]
mov dword [esp + 0x80], eax
mov eax, dword [esp + 0x7c]
add eax, 0xc6be2589
sub eax, 1
sub eax, 0xc6be2589
mov dword [esp + 0x78], eax
mov eax, dword [esp + 0x80]
mov edx, dword [esp + 0x78]
mov ecx, dword [esp + 0x7c]
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov cl, bl
xor cl, 0xff
mov ah, dh
xor ah, 0xff
mov dl, 1
xor dl, 1
mov al, cl
and al, 0xff
and bl, dl
mov ch, ah
and ch, 0xff
and dh, dl
or al, bl
or ch, dh
xor al, ch
or cl, ah
xor cl, 0xff
or dl, 1
and cl, dl
or al, cl
mov byte [esp + 0x77], al
mov al, byte [esp + 0x77]
test al, 1
jne 0x100445f1
jmp 0x100449d2
mov cl, byte [esp + 0x87]
xor eax, eax
test cl, 1
mov dword [esp + 0x70], eax
jne 0x100449a3
jmp 0x1004460c
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 0x9c]
mov esi, dword [esp + 0x98]
mov edx, dword [esp + 0x88]
mov dh, byte [edx + eax]
mov edi, eax
and edi, 0xf
mov bl, byte [esi + edi]
mov bh, dh
xor bh, 0xff
mov dl, bl
and dl, bh
xor bl, 0xff
and dh, bl
or dl, dh
mov byte [ecx + eax], dl
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, 1
add ecx, eax
xor eax, eax
sub eax, ecx
cmp eax, 0x13
mov dword [esp + 0x70], eax
jne 0x1004460c
mov ecx, dword [0x10060c40]
mov eax, dword [0x10060c3c]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
cmp eax, 0xa
setl al
mov byte [esp + 0x69], al
mov ah, cl
xor ah, 0xff
mov byte [esp + 0x6a], ah
xor al, 0xff
mov byte [esp + 0x6b], al
mov dl, 1
xor dl, 0
mov byte [esp + 0x6c], dl
and ah, 0
mov byte [esp + 0x6d], ah
and cl, dl
mov byte [esp + 0x6e], cl
and al, 0
mov byte [esp + 0x6f], al
mov cl, byte [esp + 0x6f]
mov ah, byte [esp + 0x6e]
mov al, byte [esp + 0x6d]
mov ch, byte [esp + 0x6c]
mov dl, byte [esp + 0x69]
and dl, ch
or al, ah
or cl, dl
xor al, cl
mov byte [esp + 0x68], al
mov cl, byte [esp + 0x6b]
mov al, byte [esp + 0x6a]
or al, cl
mov byte [esp + 0x67], al
mov al, byte [esp + 0x6c]
mov cl, byte [esp + 0x67]
xor cl, 0xff
mov byte [esp + 0x65], cl
or al, 0
mov byte [esp + 0x66], al
mov cl, byte [esp + 0x66]
mov al, byte [esp + 0x65]
and al, cl
mov byte [esp + 0x64], al
mov cl, byte [esp + 0x64]
mov al, byte [esp + 0x68]
or al, cl
test al, 1
jne 0x1004471c
jmp 0x100449ad
mov eax, dword [0x10060c40]
mov dword [esp + 0x58], eax
mov ecx, dword [0x10060c3c]
mov dword [esp + 0x5c], ecx
sub eax, 0xec663ef
sub eax, 1
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x60]
add eax, 0xec663ef
mov dword [esp + 0x54], eax
mov ecx, dword [esp + 0x5c]
mov edx, dword [esp + 0x54]
mov eax, dword [esp + 0x58]
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov byte [esp + 0x4e], cl
mov dl, al
xor dl, 0xff
mov byte [esp + 0x4f], dl
xor cl, 0xff
mov byte [esp + 0x50], cl
mov cl, 1
xor cl, 0
mov byte [esp + 0x51], cl
and dl, 0
mov byte [esp + 0x52], dl
and al, cl
mov byte [esp + 0x53], al
mov cl, byte [esp + 0x53]
mov al, byte [esp + 0x52]
mov ah, byte [esp + 0x51]
mov dl, byte [esp + 0x4e]
mov ch, byte [esp + 0x50]
and ch, 0
mov byte [esp + 0x4b], ch
and dl, ah
mov byte [esp + 0x4c], dl
or al, cl
mov byte [esp + 0x4d], al
mov dl, byte [esp + 0x51]
mov ah, byte [esp + 0x50]
mov cl, byte [esp + 0x4f]
mov al, byte [esp + 0x4d]
mov dh, byte [esp + 0x4c]
mov ch, byte [esp + 0x4b]
or ch, dh
xor al, ch
or cl, ah
xor cl, 0xff
or dl, 0
and cl, dl
or al, cl
test al, 1
jne 0x100447ec
jmp 0x100449f3
mov eax, dword [0x1005f378]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x44]
mov dword [eax + 0x3971de26], 1
mov eax, dword [0x10060c40]
mov dword [esp + 0x38], eax
mov ecx, dword [0x10060c3c]
mov dword [esp + 0x3c], ecx
sub eax, 0x4cf970a7
sub eax, 1
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x40]
add edx, 0x4cf970a7
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
mov byte [esp + 0x33], cl
cmp eax, 0xa
setl al
mov byte [esp + 0x34], al
xor cl, 0xff
mov byte [esp + 0x35], cl
xor al, 0xff
mov byte [esp + 0x36], al
mov al, 1
xor al, 1
mov byte [esp + 0x37], al
mov ah, byte [esp + 0x37]
mov dl, byte [esp + 0x34]
mov ch, byte [esp + 0x36]
mov cl, byte [esp + 0x33]
mov al, byte [esp + 0x35]
and al, 0xff
and cl, ah
and ch, 0xff
mov byte [esp + 0x30], ch
and dl, ah
mov byte [esp + 0x31], dl
or al, cl
mov byte [esp + 0x32], al
mov cl, byte [esp + 0x37]
mov dl, byte [esp + 0x36]
mov al, byte [esp + 0x35]
mov ah, byte [esp + 0x32]
mov dh, byte [esp + 0x31]
mov ch, byte [esp + 0x30]
or ch, dh
xor ah, ch
mov byte [esp + 0x2e], ah
or al, dl
xor al, 0xff
or cl, 1
and al, cl
mov byte [esp + 0x2f], al
mov cl, byte [esp + 0x2f]
mov al, byte [esp + 0x2e]
or al, cl
test al, 1
jne 0x100448d2
jmp 0x100449f3
mov eax, dword [0x10060c40]
mov ecx, dword [0x10060c3c]
mov dword [esp + 0x24], ecx
mov ecx, eax
add ecx, 0x4446535a
sub ecx, 1
sub ecx, 0x4446535a
imul eax, ecx
and eax, 1
mov dword [esp + 0x28], eax
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 0x28]
cmp eax, 0
sete al
mov byte [esp + 0x1e], al
cmp ecx, 0xa
setl cl
mov byte [esp + 0x1f], cl
xor al, 0xff
mov byte [esp + 0x20], al
xor cl, 0xff
mov byte [esp + 0x21], cl
mov cl, 1
xor cl, 1
mov byte [esp + 0x22], cl
and al, 0xff
mov byte [esp + 0x23], al
mov cl, byte [esp + 0x22]
mov al, byte [esp + 0x1e]
and al, cl
mov byte [esp + 0x1d], al
mov cl, byte [esp + 0x22]
mov al, byte [esp + 0x1f]
mov dl, byte [esp + 0x21]
and dl, 0xff
mov byte [esp + 0x1b], dl
and al, cl
mov byte [esp + 0x1c], al
mov dl, byte [esp + 0x1c]
mov cl, byte [esp + 0x1b]
mov ah, byte [esp + 0x1d]
mov al, byte [esp + 0x23]
or al, ah
or cl, dl
xor al, cl
mov byte [esp + 0x1a], al
mov al, byte [esp + 0x1a]
mov dl, byte [esp + 0x22]
mov ah, byte [esp + 0x21]
mov cl, byte [esp + 0x20]
or cl, ah
xor cl, 0xff
or dl, 1
and cl, dl
or al, cl
test al, 1
jne 0x1004499e
jmp 0x100449ad
jmp 0x100449a3
add esp, 0xa8
pop esi
pop edi
pop ebx
ret
mov eax, dword [0x1005f378]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x14]
add eax, 0x3971de26
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x10]
mov dword [eax], 1
jmp 0x1004471c
mov eax, dword [0x1005f378]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0xc]
add eax, 0x3971de26
mov dword [esp + 8], eax
mov eax, dword [esp + 8]
mov eax, dword [eax]
jmp 0x1004453c
mov eax, dword [0x1005f378]
mov dword [esp + 4], eax
mov eax, dword [esp + 4]
add eax, 0x3971de26
mov dword [esp], eax
mov eax, dword [esp]
mov dword [eax], 1
jmp 0x100447ec