Function at 0x439676
Capabilities:
Encrypt data using rc4 ksa
Enumerate pe sections
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x184
push esi
mov esi, ecx
mov edx, dword [esi + 0x28]
xor ecx, ecx
xor eax, eax
cmp edx, ecx
mov dword [esp + 0x18], eax
jle 0x439dbf
push ebx
push ebp
push edi
nop
cmp dword [esi + 0x24], ecx
mov dword [esp + 0x20], ecx
jle 0x439da8
lea ecx, [ecx]
cmp dword [esi + 0xc0], ecx
mov dword [esp + 0x38], ecx
jle 0x439b3b
lea eax, [esi + 0xe90]
lea ebx, [esi + 0x30]
mov dword [esp + 0x14], eax
mov dword [esp + 0x34], ebx
mov ecx, dword [ebx + 8]
shl ecx, 6
lea edx, [ecx + esi + 0xd4]
mov ecx, dword [esi + 0x1c]
mov dword [esp + 0x4c], edx
mov eax, ecx
cdq
idiv dword [ebx]
mov edi, dword [esi + 0x20]
mov ebp, eax
mov eax, edi
cdq
idiv dword [ebx + 4]
mov dword [esp + 0x28], ebp
mov dword [esp + 0x44], eax
mov eax, ebp
cdq
and edx, 7
add eax, edx
sar eax, 3
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x44]
cdq
and edx, 7
add eax, edx
mov ebp, eax
sar ebp, 3
xor eax, eax
test edi, edi
mov dword [esp + 0x50], ebp
mov dword [esp + 0x1c], eax
jle 0x439b10
lea ecx, [ecx]
test ecx, ecx
mov dword [esp + 0x18], 0
jle 0x439afb
mov ecx, dword [esp + 0x24]
add eax, ecx
mov dword [esp + 0x40], eax
lea ebx, [ebx]
mov ecx, dword [esi + 0x24]
mov edx, dword [esp + 0x40]
mov ebx, dword [esp + 0x18]
imul edx, ecx
imul ecx, ebp
mov edi, dword [esp + 0x20]
mov eax, dword [esp + 0x14]
mov eax, dword [eax]
add edx, ebx
add edx, edi
shl ecx, 2
lea eax, [eax + edx*4]
mov edx, ecx
lea ecx, [esp + 0x98]
mov edi, 2
mov ebx, dword [eax]
mov dword [ecx - 4], ebx
mov ebx, dword [eax + 4]
mov dword [ecx], ebx
mov ebx, dword [eax + 8]
mov dword [ecx + 4], ebx
mov ebx, dword [eax + 0xc]
mov dword [ecx + 8], ebx
mov ebx, dword [eax + 0x10]
mov dword [ecx + 0xc], ebx
mov ebx, dword [eax + 0x14]
mov dword [ecx + 0x10], ebx
mov ebx, dword [eax + 0x18]
mov dword [ecx + 0x14], ebx
mov ebx, dword [eax + 0x1c]
mov dword [ecx + 0x18], ebx
mov ebx, dword [eax + edx]
mov dword [ecx + 0x1c], ebx
mov ebx, dword [eax + edx + 4]
mov dword [ecx + 0x20], ebx
mov ebx, dword [eax + edx + 8]
add eax, edx
mov dword [ecx + 0x24], ebx
mov ebx, dword [eax + 0xc]
mov dword [ecx + 0x28], ebx
mov ebx, dword [eax + 0x10]
mov dword [ecx + 0x2c], ebx
mov ebx, dword [eax + 0x14]
mov dword [ecx + 0x30], ebx
mov ebx, dword [eax + 0x18]
mov dword [ecx + 0x34], ebx
mov ebx, dword [eax + 0x1c]
mov dword [ecx + 0x38], ebx
mov ebx, dword [eax + edx]
mov dword [ecx + 0x3c], ebx
mov ebx, dword [eax + edx + 4]
add eax, edx
mov dword [ecx + 0x40], ebx
mov ebx, dword [eax + 8]
mov dword [ecx + 0x44], ebx
mov ebx, dword [eax + 0xc]
mov dword [ecx + 0x48], ebx
mov ebx, dword [eax + 0x10]
mov dword [ecx + 0x4c], ebx
mov ebx, dword [eax + 0x14]
mov dword [ecx + 0x50], ebx
mov ebx, dword [eax + 0x18]
mov dword [ecx + 0x54], ebx
mov ebx, dword [eax + 0x1c]
add eax, edx
mov dword [ecx + 0x58], ebx
mov ebx, dword [eax]
mov dword [ecx + 0x5c], ebx
mov ebx, dword [eax + 4]
mov dword [ecx + 0x60], ebx
mov ebx, dword [eax + 8]
mov dword [ecx + 0x64], ebx
mov ebx, dword [eax + 0xc]
mov dword [ecx + 0x68], ebx
mov ebx, dword [eax + 0x10]
mov dword [ecx + 0x6c], ebx
mov ebx, dword [eax + 0x14]
mov dword [ecx + 0x70], ebx
mov ebx, dword [eax + 0x18]
mov dword [ecx + 0x74], ebx
mov ebx, dword [eax + 0x1c]
mov dword [ecx + 0x78], ebx
add eax, edx
add ecx, 0x80
dec edi
jne 0x439773
mov eax, dword [esp + 0x4c]
lea ecx, [esp + 0x54]
push ecx
lea edx, [esp + 0x98]
push edx
push eax
mov ecx, esi
call fcn.00437bb0
mov eax, dword [esi + 0x24]
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x18]
imul ecx, eax
mov ebx, dword [esp + 0x20]
add ecx, edx
mov edx, dword [esp + 0x14]
mov edx, dword [edx]
add ecx, ebx
lea edx, [edx + ecx*4]
mov ecx, dword [esp + 0x10]
cmp ecx, 1
jne 0x4399a2
cmp ebp, ecx
jne 0x439a56
lea eax, [esp + 0x55]
mov edi, 2
mov edi, edi
movzx ecx, byte [eax - 1]
mov dword [edx], ecx
movzx ecx, byte [eax]
mov dword [edx + 4], ecx
movzx ecx, byte [eax + 1]
mov dword [edx + 8], ecx
movzx ecx, byte [eax + 2]
mov dword [edx + 0xc], ecx
movzx ecx, byte [eax + 3]
mov dword [edx + 0x10], ecx
movzx ecx, byte [eax + 4]
mov dword [edx + 0x14], ecx
movzx ecx, byte [eax + 5]
mov dword [edx + 0x18], ecx
movzx ecx, byte [eax + 6]
mov dword [edx + 0x1c], ecx
mov ecx, dword [esi + 0x24]
lea ecx, [edx + ecx*4]
movzx edx, byte [eax + 7]
mov dword [ecx], edx
movzx edx, byte [eax + 8]
mov dword [ecx + 4], edx
movzx edx, byte [eax + 9]
mov dword [ecx + 8], edx
movzx edx, byte [eax + 0xa]
mov dword [ecx + 0xc], edx
movzx edx, byte [eax + 0xb]
mov dword [ecx + 0x10], edx
movzx edx, byte [eax + 0xc]
mov dword [ecx + 0x14], edx
movzx edx, byte [eax + 0xd]
mov dword [ecx + 0x18], edx
movzx edx, byte [eax + 0xe]
mov dword [ecx + 0x1c], edx
mov edx, dword [esi + 0x24]
lea ecx, [ecx + edx*4]
movzx edx, byte [eax + 0xf]
mov dword [ecx], edx
movzx edx, byte [eax + 0x10]
mov dword [ecx + 4], edx
movzx edx, byte [eax + 0x11]
mov dword [ecx + 8], edx
movzx edx, byte [eax + 0x12]
mov dword [ecx + 0xc], edx
movzx edx, byte [eax + 0x13]
mov dword [ecx + 0x10], edx
movzx edx, byte [eax + 0x14]
mov dword [ecx + 0x14], edx
movzx edx, byte [eax + 0x15]
mov dword [ecx + 0x18], edx
movzx edx, byte [eax + 0x16]
mov dword [ecx + 0x1c], edx
mov edx, dword [esi + 0x24]
lea ecx, [ecx + edx*4]
movzx edx, byte [eax + 0x17]
mov dword [ecx], edx
movzx edx, byte [eax + 0x18]
mov dword [ecx + 4], edx
movzx edx, byte [eax + 0x19]
mov dword [ecx + 8], edx
movzx edx, byte [eax + 0x1a]
mov dword [ecx + 0xc], edx
movzx edx, byte [eax + 0x1b]
mov dword [ecx + 0x10], edx
movzx edx, byte [eax + 0x1c]
mov dword [ecx + 0x14], edx
movzx edx, byte [eax + 0x1d]
mov dword [ecx + 0x18], edx
movzx edx, byte [eax + 0x1e]
mov dword [ecx + 0x1c], edx
mov edx, dword [esi + 0x24]
add eax, 0x20
dec edi
lea edx, [ecx + edx*4]
jne 0x4398a0
jmp 0x439ada
cmp ecx, 2
jne 0x439a56
cmp ebp, ecx
jne 0x439a56
lea eax, [edx + eax*4]
lea ecx, [esp + 0x55]
mov ebx, 8
nop
movzx edi, byte [ecx - 1]
mov dword [eax + 4], edi
mov dword [eax], edi
mov dword [edx + 4], edi
mov dword [edx], edi
movzx edi, byte [ecx]
mov dword [eax + 0xc], edi
mov dword [eax + 8], edi
mov dword [edx + 0xc], edi
mov dword [edx + 8], edi
movzx edi, byte [ecx + 1]
mov dword [eax + 0x14], edi
mov dword [eax + 0x10], edi
mov dword [edx + 0x14], edi
mov dword [edx + 0x10], edi
movzx edi, byte [ecx + 2]
mov dword [eax + 0x1c], edi
mov dword [eax + 0x18], edi
mov dword [edx + 0x1c], edi
mov dword [edx + 0x18], edi
movzx edi, byte [ecx + 3]
mov dword [eax + 0x24], edi
mov dword [eax + 0x20], edi
mov dword [edx + 0x24], edi
mov dword [edx + 0x20], edi
movzx edi, byte [ecx + 4]
mov dword [eax + 0x2c], edi
mov dword [eax + 0x28], edi
mov dword [edx + 0x2c], edi
mov dword [edx + 0x28], edi
movzx edi, byte [ecx + 5]
mov dword [eax + 0x34], edi
mov dword [eax + 0x30], edi
mov dword [edx + 0x34], edi
mov dword [edx + 0x30], edi
movzx edi, byte [ecx + 6]
mov dword [eax + 0x3c], edi
mov dword [eax + 0x38], edi
mov dword [edx + 0x3c], edi
mov dword [edx + 0x38], edi
mov edi, dword [esi + 0x24]
shl edi, 3
add edx, edi
add eax, edi
add ecx, 8
dec ebx
jne 0x4399c0
jmp 0x439ada
mov dword [esp + 0x2c], 0
mov dword [esp + 0x48], 8
jmp 0x439a70
mov ebx, edx
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x30], 8
mov edi, edi
test ebp, ebp
jle 0x439aa6
mov ecx, dword [esp + 0x10]
test ecx, ecx
jle 0x439a99
mov eax, dword [esp + 0x2c]
movzx eax, byte [esp + eax + 0x54]
mov edi, ebx
rep stosd dword es:[edi], eax
dec ebp
mov ecx, dword [esi + 0x24]
lea ebx, [ebx + ecx*4]
jne 0x439a84
mov ebp, dword [esp + 0x50]
mov eax, dword [esp + 0x10]
mov ebx, dword [esp + 0x3c]
mov edi, dword [esp + 0x2c]
shl eax, 2
add ebx, eax
mov eax, dword [esp + 0x30]
inc edi
dec eax
mov dword [esp + 0x2c], edi
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x30], eax
jne 0x439a80
mov eax, dword [esi + 0x24]
imul eax, ebp
lea edx, [edx + eax*4]
dec dword [esp + 0x48]
jne 0x439a70
mov eax, dword [esp + 0x18]
mov edi, dword [esp + 0x28]
mov ecx, dword [esi + 0x1c]
add eax, edi
cmp eax, ecx
mov dword [esp + 0x18], eax
jl 0x439740
mov ebx, dword [esp + 0x34]
mov eax, dword [esp + 0x1c]
mov edi, dword [esp + 0x44]
mov edx, dword [esi + 0x20]
add eax, edi
cmp eax, edx
mov dword [esp + 0x1c], eax
jl 0x439720
mov eax, dword [esp + 0x38]
mov edx, dword [esp + 0x14]
mov ecx, dword [esi + 0xc0]
inc eax
add ebx, 0x14
add edx, 4
cmp eax, ecx
mov dword [esp + 0x38], eax
mov dword [esp + 0x34], ebx
mov dword [esp + 0x14], edx
jl 0x4396c1
xor ecx, ecx
cmp dword [esi + 0xc4], ecx
je 0x439d8c
mov eax, dword [esi + 0xc0]
cmp eax, 3
jne 0x439c62
cmp dword [esi + 0x20], ecx
mov dword [esp + 0x1c], ecx
jle 0x439d8c
mov ecx, dword [esp + 0x24]
mov ebx, dword [esi + 0x1c]
mov dword [esp + 0x10], ecx
mov edi, edi
mov ecx, dword [esi + 0x24]
imul ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x20]
mov edx, dword [esi + 0xe90]
mov edi, dword [esi + 0xe94]
add ecx, eax
mov eax, dword [esi + 0xe98]
shl ecx, 2
add eax, ecx
add edx, ecx
add edi, ecx
test ebx, ebx
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 0
jle 0x439c40
lea ecx, [ecx]
mov eax, dword [eax]
mov ebx, dword [edx]
mov ecx, dword [edi]
sub eax, 0x80
mov ebp, eax
imul eax, eax, 0xffff492e
imul ebp, ebp, 0x166e9
shl ebx, 0x10
lea ebp, [ebx + ebp + 0x8000]
sar ebp, 0x10
movzx ebp, byte [ebp + 0x486828]
sub ecx, 0x80
mov dword [edx], ebp
mov ebp, ecx
imul ecx, ecx, 0x1c5a2
imul ebp, ebp, 0x5819
sub eax, ebp
lea eax, [eax + ebx + 0x8000]
sar eax, 0x10
movzx eax, byte [eax + 0x486828]
lea ecx, [ecx + ebx + 0x8000]
mov dword [edi], eax
mov eax, dword [esp + 0x14]
sar ecx, 0x10
movzx ecx, byte [ecx + 0x486828]
mov dword [eax], ecx
mov ecx, dword [esp + 0x18]
mov ebx, dword [esi + 0x1c]
add eax, 4
add edx, 4
add edi, 4
inc ecx
cmp ecx, ebx
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ecx
jl 0x439bb0
mov eax, dword [esp + 0x1c]
mov edx, dword [esp + 0x10]
mov ecx, dword [esi + 0x20]
inc eax
inc edx
cmp eax, ecx
mov dword [esp + 0x1c], eax
mov dword [esp + 0x10], edx
jl 0x439b70
jmp 0x439d8a
cmp eax, 4
jne 0x439d8c
cmp dword [esi + 0x20], ecx
mov dword [esp + 0x1c], ecx
jle 0x439d8c
mov edx, dword [esp + 0x24]
mov ebx, dword [esi + 0x1c]
mov dword [esp + 0x10], edx
mov ecx, dword [esi + 0x24]
imul ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x20]
mov edx, dword [esi + 0xe90]
mov edi, dword [esi + 0xe94]
add ecx, eax
mov eax, dword [esi + 0xe98]
shl ecx, 2
add eax, ecx
add edx, ecx
add edi, ecx
test ebx, ebx
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 0
jle 0x439d6d
mov eax, dword [eax]
mov ebx, dword [edx]
mov ecx, dword [edi]
sub eax, 0x80
mov ebp, eax
imul eax, eax, 0xffff492e
imul ebp, ebp, 0x166e9
shl ebx, 0x10
mov dword [esp + 0x28], ebx
lea ebx, [ebx + ebp + 0x8000]
sar ebx, 0x10
movzx ebx, byte [ebx + 0x486828]
sub ecx, 0x80
mov ebp, 0xff
sub ebp, ebx
mov ebx, ecx
imul ecx, ecx, 0x1c5a2
imul ebx, ebx, 0x5819
sub eax, ebx
mov ebx, dword [esp + 0x28]
lea eax, [eax + ebx + 0x8000]
mov dword [edx], ebp
sar eax, 0x10
movzx eax, byte [eax + 0x486828]
lea ecx, [ecx + ebx + 0x8000]
sar ecx, 0x10
mov ebp, 0xff
sub ebp, eax
mov dword [edi], ebp
movzx eax, byte [ecx + 0x486828]
mov ecx, 0xff
sub ecx, eax
mov eax, dword [esp + 0x14]
mov dword [eax], ecx
mov ecx, dword [esp + 0x18]
mov ebx, dword [esi + 0x1c]
add eax, 4
add edx, 4
add edi, 4
inc ecx
cmp ecx, ebx
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ecx
jl 0x439cc0
mov eax, dword [esp + 0x1c]
mov edx, dword [esp + 0x10]
mov ecx, dword [esi + 0x20]
inc eax
inc edx
cmp eax, ecx
mov dword [esp + 0x1c], eax
mov dword [esp + 0x10], edx
jl 0x439c83
xor ecx, ecx
mov eax, dword [esp + 0x20]
mov edi, dword [esi + 0x1c]
mov edx, dword [esi + 0x24]
add eax, edi
cmp eax, edx
mov dword [esp + 0x20], eax
jl 0x4396a0
mov eax, dword [esp + 0x24]
mov edi, dword [esi + 0x20]
mov edx, dword [esi + 0x28]
add eax, edi
cmp eax, edx
mov dword [esp + 0x24], eax
jl 0x439690
pop edi
pop ebp
pop ebx
pop esi
add esp, 0x184
ret