Function at 0x10044130
Capabilities:
Encode data using xor
Encrypt data using rc4 ksa
Resolve function by parsing pe exports

Disassembly:
push ebx
push esi
sub esp, 0xb4
mov eax, dword [esp + 0xc4]
mov dword [esp + 0xa8], eax
mov ecx, dword [esp + 0xc0]
mov dword [esp + 0xac], ecx
add eax, 0x17
mov dword [esp + 0xb0], eax
mov eax, dword [0x1006733c]
mov dword [esp + 0xa4], eax
mov eax, dword [esp + 0xa4]
add eax, 0xbb6571e5
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0xa0]
mov eax, dword [eax]
mov dword [esp + 0x9c], eax
mov eax, dword [esp + 0x9c]
cmp eax, 1
sete al
mov byte [esp + 0x9b], al
mov cl, byte [esp + 0x9b]
xor eax, eax
test cl, 1
mov dword [esp + 0x94], eax
jne 0x100443c5
jmp 0x100441bf
mov eax, dword [esp + 0x94]
mov ecx, dword [esp + 0xa8]
mov edx, dword [esp + 0xb0]
mov dword [esp + 0x90], eax
mov bh, byte [edx + eax]
mov esi, 0x17
xor edx, edx
div esi
mov eax, dword [esp + 0x90]
mov bl, byte [ecx + edx]
mov dl, bh
xor dl, 0xff
and dl, 0x16
mov cl, 0xff
xor cl, 0x16
and bh, cl
mov dh, bl
xor dh, 0xff
and dh, 0x16
and bl, cl
mov ecx, dword [esp + 0xac]
or dl, bh
or dh, bl
xor dl, dh
mov byte [ecx + eax], dl
sub eax, 0x7413574d
add eax, 1
add eax, 0x7413574d
cmp eax, 8
mov dword [esp + 0x94], eax
jne 0x100441bf
mov eax, dword [0x10068ca0]
mov ecx, dword [0x10068c9c]
mov dword [esp + 0x88], ecx
xor edx, edx
sub edx, 1
mov ecx, eax
add ecx, edx
imul eax, ecx
mov dword [esp + 0x8c], eax
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0x8c]
and ecx, 1
cmp ecx, 0
sete cl
mov byte [esp + 0x84], cl
cmp eax, 0xa
setl al
mov byte [esp + 0x85], al
xor cl, 0xff
mov byte [esp + 0x86], cl
xor al, 0xff
mov byte [esp + 0x87], al
mov al, byte [esp + 0x87]
mov cl, byte [esp + 0x84]
mov ah, byte [esp + 0x86]
mov dl, 1
xor dl, 1
mov byte [esp + 0x80], dl
and ah, 0xff
mov byte [esp + 0x81], ah
and cl, dl
mov byte [esp + 0x82], cl
and al, 0xff
mov byte [esp + 0x83], al
mov cl, byte [esp + 0x87]
mov al, byte [esp + 0x86]
mov ah, byte [esp + 0x83]
mov dh, byte [esp + 0x82]
mov dl, byte [esp + 0x81]
mov bl, byte [esp + 0x80]
mov ch, byte [esp + 0x85]
and ch, bl
or dl, dh
or ah, ch
xor dl, ah
mov byte [esp + 0x7e], dl
or al, cl
xor al, 0xff
mov byte [esp + 0x7f], al
mov al, byte [esp + 0x7f]
mov cl, byte [esp + 0x80]
or cl, 1
and al, cl
mov byte [esp + 0x7d], al
mov cl, byte [esp + 0x7d]
mov al, byte [esp + 0x7e]
or al, cl
test al, 1
jne 0x10044347
jmp 0x100446f1
mov eax, dword [0x1006733c]
mov dword [eax - 0x449a8e1b], 1
mov eax, dword [0x10068ca0]
mov dword [esp + 0x78], eax
mov eax, dword [0x10068c9c]
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0x78]
mov ecx, eax
sub ecx, 0x78b410b4
sub ecx, 1
add ecx, 0x78b410b4
imul eax, ecx
mov dword [esp + 0x70], eax
mov eax, dword [esp + 0x70]
and eax, 1
cmp eax, 0
sete al
mov byte [esp + 0x6f], al
mov eax, dword [esp + 0x74]
cmp eax, 0xa
setl al
mov byte [esp + 0x6e], al
mov dl, byte [esp + 0x6e]
mov cl, byte [esp + 0x6f]
mov al, cl
and al, dl
xor cl, dl
or al, cl
test al, 1
jne 0x100443c0
jmp 0x100446f1
jmp 0x100443c5
mov eax, dword [0x10068ca0]
mov dword [esp + 0x68], eax
mov eax, dword [0x10068c9c]
mov dword [esp + 0x64], eax
mov eax, dword [esp + 0x64]
mov ecx, dword [esp + 0x68]
mov edx, ecx
add edx, 0x2185c69
sub edx, 1
sub edx, 0x2185c69
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
mov byte [esp + 0x62], cl
cmp eax, 0xa
setl al
mov byte [esp + 0x63], al
mov al, byte [esp + 0x63]
mov ah, byte [esp + 0x62]
mov ch, ah
xor ch, 0xff
mov byte [esp + 0x5b], ch
mov dl, al
xor dl, 0xff
mov byte [esp + 0x5c], dl
mov cl, 1
xor cl, 1
mov byte [esp + 0x5d], cl
and ch, 0xff
mov byte [esp + 0x5e], ch
and ah, cl
mov byte [esp + 0x5f], ah
and dl, 0xff
mov byte [esp + 0x60], dl
and al, cl
mov byte [esp + 0x61], al
mov cl, byte [esp + 0x5d]
mov dl, byte [esp + 0x5c]
mov al, byte [esp + 0x5b]
mov dh, byte [esp + 0x61]
mov ch, byte [esp + 0x60]
mov bl, byte [esp + 0x5f]
mov ah, byte [esp + 0x5e]
or ah, bl
or ch, dh
xor ah, ch
mov byte [esp + 0x59], ah
or al, dl
xor al, 0xff
or cl, 1
and al, cl
mov byte [esp + 0x5a], al
mov cl, byte [esp + 0x5a]
mov al, byte [esp + 0x59]
or al, cl
test al, 1
jne 0x10044491
jmp 0x1004455b
mov eax, dword [0x10068ca0]
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x54]
mov ecx, dword [0x10068c9c]
mov dword [esp + 0x4c], ecx
xor ecx, ecx
sub ecx, 1
add eax, ecx
mov dword [esp + 0x50], eax
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x50]
mov eax, dword [esp + 0x54]
imul eax, edx
and eax, 1
cmp eax, 0
sete al
mov byte [esp + 0x46], al
cmp ecx, 0xa
setl cl
mov byte [esp + 0x47], cl
xor al, 0xff
mov byte [esp + 0x48], al
xor cl, 0xff
mov byte [esp + 0x49], cl
mov cl, 1
xor cl, 1
mov byte [esp + 0x4a], cl
and al, 0xff
mov byte [esp + 0x4b], al
mov al, byte [esp + 0x49]
mov dl, byte [esp + 0x4a]
mov cl, byte [esp + 0x46]
and cl, dl
mov byte [esp + 0x44], cl
and al, 0xff
mov byte [esp + 0x45], al
mov dl, byte [esp + 0x4a]
mov ah, byte [esp + 0x49]
mov cl, byte [esp + 0x48]
mov ch, byte [esp + 0x45]
mov bl, byte [esp + 0x44]
mov al, byte [esp + 0x4b]
mov dh, byte [esp + 0x47]
and dh, dl
or al, bl
or ch, dh
xor al, ch
or cl, ah
xor cl, 0xff
or dl, 1
and cl, dl
or al, cl
mov byte [esp + 0x43], al
mov al, byte [esp + 0x43]
test al, 1
jne 0x10044552
jmp 0x1004455b
add esp, 0xb4
pop esi
pop ebx
ret
mov eax, dword [0x10068ca0]
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x3c]
mov ecx, dword [0x10068c9c]
mov dword [esp + 0x34], ecx
add eax, 0xc2747cfc
mov dword [esp + 0x38], eax
mov ecx, dword [esp + 0x34]
mov eax, dword [esp + 0x3c]
mov edx, dword [esp + 0x38]
sub edx, 1
sub edx, 0xc2747cfc
imul eax, edx
and eax, 1
cmp eax, 0
sete al
mov byte [esp + 0x2e], al
cmp ecx, 0xa
setl cl
mov byte [esp + 0x2f], cl
xor al, 0xff
mov byte [esp + 0x30], al
xor cl, 0xff
mov byte [esp + 0x31], cl
mov cl, 1
xor cl, 0
mov byte [esp + 0x32], cl
and al, 0
mov byte [esp + 0x33], al
mov cl, byte [esp + 0x31]
mov al, byte [esp + 0x30]
mov dl, byte [esp + 0x33]
mov bl, byte [esp + 0x32]
mov ch, byte [esp + 0x2f]
mov dh, byte [esp + 0x2e]
and dh, bl
mov ah, cl
and ah, 0
and ch, bl
or dl, dh
or ah, ch
xor dl, ah
mov byte [esp + 0x2c], dl
or al, cl
mov byte [esp + 0x2d], al
mov cl, byte [esp + 0x32]
mov al, byte [esp + 0x2d]
xor al, 0xff
or cl, 0
and al, cl
mov byte [esp + 0x2b], al
mov cl, byte [esp + 0x2b]
mov al, byte [esp + 0x2c]
or al, cl
test al, 1
jne 0x10044621
jmp 0x10044714
mov eax, dword [0x10068ca0]
mov dword [esp + 0x1c], eax
mov ecx, dword [0x10068c9c]
mov dword [esp + 0x20], ecx
add eax, 0x294d680e
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x24]
sub eax, 1
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
sub ecx, 0x294d680e
imul eax, ecx
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x14]
and eax, 1
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x10]
cmp eax, 0
sete ah
cmp ecx, 0xa
setl al
mov ch, ah
xor ch, 0xff
mov byte [esp + 9], ch
mov dl, al
xor dl, 0xff
mov byte [esp + 0xa], dl
mov cl, 1
xor cl, 1
mov byte [esp + 0xb], cl
and ch, 0xff
mov byte [esp + 0xc], ch
and ah, cl
mov byte [esp + 0xd], ah
and dl, 0xff
mov byte [esp + 0xe], dl
and al, cl
mov byte [esp + 0xf], al
mov dl, byte [esp + 0xb]
mov ah, byte [esp + 0xa]
mov cl, byte [esp + 9]
mov dh, byte [esp + 0xf]
mov ch, byte [esp + 0xe]
mov bl, byte [esp + 0xd]
mov al, byte [esp + 0xc]
or al, bl
or ch, dh
xor al, ch
or cl, ah
xor cl, 0xff
or dl, 1
and cl, dl
or al, cl
test al, 1
jne 0x100446ec
jmp 0x10044714
jmp 0x10044491
mov eax, dword [0x1006733c]
mov dword [esp + 4], eax
mov eax, dword [esp + 4]
add eax, 0xbb6571e5
mov dword [esp], eax
mov eax, dword [esp]
mov dword [eax], 1
jmp 0x10044347
jmp 0x10044621