Function at 0x10038380
Capabilities:
Encode data using xor
Encrypt data using rc4 ksa
Resolve function by parsing pe exports

Disassembly:
push ebx
push esi
sub esp, 0xa8
mov eax, dword [esp + 0xb8]
mov dword [esp + 0x98], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 0x9c], eax
mov eax, dword [0x10064d00]
mov dword [esp + 0xa0], eax
mov eax, dword [0x10064cfc]
mov dword [esp + 0xa4], eax
mov eax, dword [esp + 0xa0]
sub eax, 0x6fb42fcb
mov dword [esp + 0x94], eax
mov eax, dword [esp + 0x94]
sub eax, 1
mov dword [esp + 0x90], eax
mov eax, dword [esp + 0xa4]
mov ecx, dword [esp + 0xa0]
mov edx, dword [esp + 0x90]
add edx, 0x6fb42fcb
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
mov byte [esp + 0x8e], cl
cmp eax, 0xa
setl al
mov byte [esp + 0x8f], al
mov dl, byte [esp + 0x8f]
mov cl, byte [esp + 0x8e]
mov al, cl
and al, dl
xor cl, dl
or al, cl
mov byte [esp + 0x8d], al
mov al, byte [esp + 0x8d]
test al, 1
jne 0x1003844c
jmp 0x100387c3
mov eax, dword [0x10064d00]
mov dword [esp + 0x80], eax
mov ecx, dword [0x10064cfc]
mov dword [esp + 0x84], ecx
add eax, 0x7650bdb3
mov dword [esp + 0x88], eax
mov eax, dword [esp + 0x88]
sub eax, 1
sub eax, 0x7650bdb3
mov dword [esp + 0x7c], eax
mov eax, dword [esp + 0x84]
mov edx, dword [esp + 0x7c]
mov ecx, dword [esp + 0x80]
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
mov byte [esp + 0x7a], cl
cmp eax, 0xa
setl al
mov byte [esp + 0x7b], al
mov dl, byte [esp + 0x7b]
mov cl, byte [esp + 0x7a]
mov al, cl
and al, dl
xor cl, dl
or al, cl
mov byte [esp + 0x79], al
mov al, byte [esp + 0x79]
test al, 1
jne 0x100384d5
jmp 0x100387e4
mov eax, dword [esp + 0x98]
add eax, 0x16
mov dword [esp + 0x74], eax
mov eax, dword [0x1006330c]
cmp dword [eax - 0x1fae6c29], 1
sete al
mov byte [esp + 0x78], al
mov eax, dword [0x10064d00]
mov dword [esp + 0x68], eax
mov ecx, dword [0x10064cfc]
mov dword [esp + 0x6c], ecx
add eax, 0x38ff7e26
sub eax, 1
mov dword [esp + 0x70], eax
mov eax, dword [esp + 0x70]
sub eax, 0x38ff7e26
mov dword [esp + 0x64], eax
mov ecx, dword [esp + 0x64]
mov eax, dword [esp + 0x68]
imul eax, ecx
and eax, 1
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x60]
cmp eax, 0
sete al
mov byte [esp + 0x5f], al
mov cl, byte [esp + 0x5f]
mov eax, dword [esp + 0x6c]
cmp eax, 0xa
setl dl
mov al, cl
and al, dl
xor cl, dl
or al, cl
test al, 1
jne 0x10038565
jmp 0x100387e4
mov eax, dword [0x10064d00]
mov dword [esp + 0x54], eax
mov eax, dword [0x10064cfc]
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x54]
sub eax, 0x893a18f6
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x50]
sub eax, 1
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x4c]
add ecx, 0x893a18f6
imul eax, ecx
and eax, 1
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x48]
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov dl, dh
xor dl, 0xff
mov cl, 1
xor cl, 1
mov ah, al
and ah, 0xff
and bl, cl
mov ch, dl
and ch, 0xff
and dh, cl
or ah, bl
or ch, dh
xor ah, ch
mov byte [esp + 0x46], ah
or al, dl
xor al, 0xff
or cl, 1
and al, cl
mov byte [esp + 0x47], al
mov cl, byte [esp + 0x47]
mov al, byte [esp + 0x46]
or al, cl
test al, 1
jne 0x10038605
jmp 0x100387c3
mov cl, byte [esp + 0x78]
xor eax, eax
test cl, 1
mov dword [esp + 0x40], eax
jne 0x100387ba
jmp 0x1003861d
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x98]
mov edx, dword [esp + 0x74]
mov dword [esp + 0x3c], eax
mov bh, byte [edx + eax]
mov esi, 0x16
xor edx, edx
div esi
mov eax, dword [esp + 0x3c]
mov bl, byte [ecx + edx]
mov dl, bh
xor dl, 0xff
and dl, 0xd6
mov cl, 0xff
xor cl, 0xd6
and bh, cl
mov dh, bl
xor dh, 0xff
and dh, 0xd6
and bl, cl
mov ecx, dword [esp + 0x9c]
or dl, bh
or dh, bl
xor dl, dh
mov byte [ecx + eax], dl
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, 1
add ecx, eax
xor eax, eax
sub eax, ecx
cmp eax, 0xb
mov dword [esp + 0x40], eax
jne 0x1003861d
mov eax, dword [0x10064d00]
mov dword [esp + 0x34], eax
mov eax, dword [0x10064cfc]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x34]
add eax, 0x8e922551
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x30]
sub edx, 1
sub edx, 0x8e922551
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
mov byte [esp + 0x2e], cl
cmp eax, 0xa
setl al
mov byte [esp + 0x2f], al
mov cl, byte [esp + 0x2f]
mov al, byte [esp + 0x2e]
mov dl, al
and dl, cl
mov byte [esp + 0x2c], dl
xor al, cl
mov byte [esp + 0x2d], al
mov cl, byte [esp + 0x2d]
mov al, byte [esp + 0x2c]
or al, cl
mov byte [esp + 0x2b], al
mov al, byte [esp + 0x2b]
test al, 1
jne 0x1003870b
jmp 0x10038805
mov eax, dword [0x1006330c]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x24]
mov dword [eax - 0x1fae6c29], 1
mov eax, dword [0x10064d00]
mov ecx, dword [0x10064cfc]
mov dword [esp + 0x1c], ecx
xor edx, edx
sub edx, 1
mov ecx, eax
add ecx, edx
imul eax, ecx
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x20]
and eax, 1
cmp eax, 0
sete al
mov byte [esp + 0x1b], al
mov al, byte [esp + 0x1b]
mov ecx, dword [esp + 0x1c]
cmp ecx, 0xa
setl cl
mov byte [esp + 0x19], cl
xor al, 0xff
mov byte [esp + 0x1a], al
mov al, byte [esp + 0x19]
xor al, 0xff
mov byte [esp + 0x18], al
mov ah, byte [esp + 0x18]
mov cl, byte [esp + 0x1a]
mov dh, byte [esp + 0x19]
mov bl, byte [esp + 0x1b]
mov dl, 1
xor dl, 0
mov al, cl
and al, 0
and bl, dl
mov ch, ah
and ch, 0
and dh, dl
or al, bl
or ch, dh
xor al, ch
or cl, ah
xor cl, 0xff
or dl, 0
and cl, dl
or al, cl
test al, 1
jne 0x100387b5
jmp 0x10038805
jmp 0x100387ba
add esp, 0xa8
pop esi
pop ebx
ret
mov eax, dword [0x1006330c]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x14]
add eax, 0xe05193d7
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x10]
mov eax, dword [eax]
jmp 0x1003844c
mov eax, dword [0x1006330c]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0xc]
add eax, 0xe05193d7
mov dword [esp + 8], eax
mov eax, dword [esp + 8]
mov eax, dword [eax]
jmp 0x100384d5
mov eax, dword [0x1006330c]
mov dword [esp + 4], eax
mov eax, dword [esp + 4]
add eax, 0xe05193d7
mov dword [esp], eax
mov eax, dword [esp]
mov dword [eax], 1
jmp 0x1003870b