Function at 0x10044f30
Capabilities:
Encode data using xor
Encrypt data using rc4 ksa
Resolve function by parsing pe exports

Disassembly:
push ebx
push edi
push esi
sub esp, 0x90
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x84], eax
mov ecx, dword [esp + 0xa0]
mov dword [esp + 0x88], ecx
add eax, 0x1f
mov dword [esp + 0x8c], eax
mov eax, dword [0x1005f380]
mov dword [esp + 0x80], eax
mov eax, dword [esp + 0x80]
add eax, 0x9712c1e6
mov dword [esp + 0x7c], eax
mov eax, dword [esp + 0x7c]
mov eax, dword [eax]
mov dword [esp + 0x78], eax
mov eax, dword [esp + 0x78]
cmp eax, 1
sete al
mov byte [esp + 0x77], al
mov cl, byte [esp + 0x77]
xor eax, eax
test cl, 1
mov dword [esp + 0x70], eax
jne 0x1004516f
jmp 0x10044fab
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 0x88]
mov esi, dword [esp + 0x84]
mov edx, dword [esp + 0x8c]
mov dword [esp + 0x68], eax
mov dl, byte [edx + eax]
mov byte [esp + 0x6f], dl
mov edi, 0x1f
xor edx, edx
div edi
mov eax, dword [esp + 0x68]
mov edi, edx
mov dh, byte [esp + 0x6f]
mov bl, byte [esi + edi]
mov bh, dh
xor bh, 0xff
mov dl, bl
and dl, bh
xor bl, 0xff
and dh, bl
or dl, dh
mov byte [ecx + eax], dl
add eax, 0x88ae3f72
add eax, 1
sub eax, 0x88ae3f72
cmp eax, 0x40
mov dword [esp + 0x70], eax
jne 0x10044fab
mov eax, dword [0x10060c30]
mov dword [esp + 0x5c], eax
mov ecx, dword [0x10060c2c]
mov dword [esp + 0x60], ecx
add eax, 0x4931bf01
sub eax, 1
mov dword [esp + 0x64], eax
mov eax, dword [esp + 0x64]
sub eax, 0x4931bf01
mov dword [esp + 0x58], eax
mov ecx, dword [esp + 0x60]
mov edx, dword [esp + 0x58]
mov eax, dword [esp + 0x5c]
imul eax, edx
and eax, 1
cmp eax, 0
sete al
mov byte [esp + 0x52], al
cmp ecx, 0xa
setl cl
mov byte [esp + 0x53], cl
xor al, 0xff
mov byte [esp + 0x54], al
xor cl, 0xff
mov byte [esp + 0x55], cl
mov cl, 1
xor cl, 0
mov byte [esp + 0x56], cl
and al, 0
mov byte [esp + 0x57], al
mov cl, byte [esp + 0x56]
mov al, byte [esp + 0x53]
mov dl, byte [esp + 0x55]
mov ah, byte [esp + 0x52]
and ah, cl
mov byte [esp + 0x4f], ah
and dl, 0
mov byte [esp + 0x50], dl
and al, cl
mov byte [esp + 0x51], al
mov dl, byte [esp + 0x56]
mov ah, byte [esp + 0x55]
mov cl, byte [esp + 0x54]
mov dh, byte [esp + 0x51]
mov ch, byte [esp + 0x50]
mov bl, byte [esp + 0x4f]
mov al, byte [esp + 0x57]
or al, bl
or ch, dh
xor al, ch
or cl, ah
xor cl, 0xff
or dl, 0
and cl, dl
or al, cl
mov byte [esp + 0x4e], al
mov al, byte [esp + 0x4e]
test al, 1
jne 0x100450e6
jmp 0x10045291
mov eax, dword [0x1005f380]
add eax, 0x9712c1e6
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x48]
mov dword [eax], 1
mov eax, dword [0x10060c30]
mov dword [esp + 0x3c], eax
mov eax, dword [0x10060c2c]
mov dword [esp + 0x40], eax
xor eax, eax
sub eax, 1
mov dword [esp + 0x44], eax
mov ecx, dword [esp + 0x44]
mov eax, dword [esp + 0x3c]
add eax, ecx
mov dword [esp + 0x38], eax
mov ecx, dword [esp + 0x38]
mov eax, dword [esp + 0x3c]
imul eax, ecx
and eax, 1
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x34]
cmp ecx, 0
sete cl
cmp eax, 0xa
setl dl
mov al, cl
and al, dl
xor cl, dl
or al, cl
mov byte [esp + 0x33], al
mov al, byte [esp + 0x33]
test al, 1
jne 0x1004516a
jmp 0x10045291
jmp 0x1004516f
mov eax, dword [0x10060c30]
mov dword [esp + 0x24], eax
mov ecx, dword [0x10060c2c]
mov dword [esp + 0x28], ecx
xor ecx, ecx
sub ecx, 1
add eax, ecx
mov dword [esp + 0x2c], eax
mov ecx, dword [esp + 0x2c]
mov eax, dword [esp + 0x24]
imul eax, ecx
and eax, 1
mov dword [esp + 0x20], eax
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x20]
cmp eax, 0
sete al
mov byte [esp + 0x1d], al
cmp ecx, 0xa
setl cl
mov byte [esp + 0x1e], cl
and al, cl
mov byte [esp + 0x1f], al
mov al, byte [esp + 0x1f]
mov dl, byte [esp + 0x1e]
mov cl, byte [esp + 0x1d]
xor cl, dl
or al, cl
mov byte [esp + 0x1c], al
mov al, byte [esp + 0x1c]
test al, 1
jne 0x100451e6
jmp 0x100452b4
mov eax, dword [0x10060c30]
mov dword [esp + 0x10], eax
mov ecx, dword [0x10060c2c]
mov dword [esp + 0x14], ecx
xor ecx, ecx
sub ecx, 1
add eax, ecx
mov dword [esp + 0x18], eax
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x10]
imul eax, ecx
and eax, 1
cmp eax, 0
sete al
mov byte [esp + 0xf], al
mov al, byte [esp + 0xf]
mov ecx, dword [esp + 0x14]
cmp ecx, 0xa
setl cl
mov byte [esp + 0xd], cl
xor al, 0xff
mov byte [esp + 0xe], al
mov al, byte [esp + 0xd]
xor al, 0xff
mov byte [esp + 0xc], al
mov ah, byte [esp + 0xc]
mov cl, byte [esp + 0xe]
mov dh, byte [esp + 0xd]
mov bl, byte [esp + 0xf]
mov dl, 1
xor dl, 1
mov al, cl
and al, 0xff
and bl, dl
mov ch, ah
and ch, 0xff
and dh, dl
or al, bl
or ch, dh
xor al, ch
or cl, ah
xor cl, 0xff
or dl, 1
and cl, dl
or al, cl
mov byte [esp + 0xb], al
mov al, byte [esp + 0xb]
test al, 1
jne 0x10045287
jmp 0x100452b4
add esp, 0x90
pop esi
pop edi
pop ebx
ret
mov eax, dword [0x1005f380]
mov dword [esp + 4], eax
mov eax, dword [esp + 4]
add eax, 0x9712c1e6
mov dword [esp], eax
mov eax, dword [esp]
mov dword [eax], 1
jmp 0x100450e6
jmp 0x100451e6