Function at 0x100415d0
Capabilities:
Encode data using xor
Encrypt data using rc4 ksa
Resolve function by parsing pe exports

Disassembly:
push ebx
push esi
sub esp, 0xe8
mov eax, dword [esp + 0xf8]
mov dword [esp + 0xd8], eax
mov eax, dword [esp + 0xf4]
mov dword [esp + 0xdc], eax
mov eax, dword [0x10060c78]
mov dword [esp + 0xe0], eax
mov eax, dword [0x10060c74]
mov dword [esp + 0xe4], eax
mov eax, dword [esp + 0xe0]
xor ecx, ecx
sub ecx, 1
add eax, ecx
mov dword [esp + 0xd4], eax
mov ecx, dword [esp + 0xd4]
mov eax, dword [esp + 0xe0]
imul eax, ecx
mov dword [esp + 0xd0], eax
mov eax, dword [esp + 0xe4]
mov ecx, dword [esp + 0xd0]
and ecx, 1
cmp ecx, 0
sete cl
mov byte [esp + 0xce], cl
cmp eax, 0xa
setl al
mov byte [esp + 0xcf], al
mov dl, byte [esp + 0xcf]
mov cl, byte [esp + 0xce]
mov al, cl
and al, dl
xor cl, dl
or al, cl
mov byte [esp + 0xcd], al
mov al, byte [esp + 0xcd]
test al, 1
jne 0x10041695
jmp 0x10041add
mov eax, dword [esp + 0xd8]
add eax, 0x19
mov dword [esp + 0xc8], eax
mov eax, dword [0x1005f354]
cmp dword [eax + 0x44305253], 1
sete al
mov byte [esp + 0xbb], al
mov eax, dword [0x10060c78]
mov dword [esp + 0xbc], eax
mov ecx, dword [0x10060c74]
mov dword [esp + 0xc0], ecx
add eax, 0xdc91d38e
mov dword [esp + 0xc4], eax
mov eax, dword [esp + 0xbc]
mov ecx, dword [esp + 0xc4]
sub ecx, 1
sub ecx, 0xdc91d38e
imul eax, ecx
and eax, 1
cmp eax, 0
sete al
mov byte [esp + 0xba], al
mov cl, byte [esp + 0xba]
mov eax, dword [esp + 0xc0]
cmp eax, 0xa
setl dl
mov al, cl
and al, dl
xor cl, dl
or al, cl
mov byte [esp + 0xb9], al
mov al, byte [esp + 0xb9]
test al, 1
jne 0x10041742
jmp 0x10041add
mov eax, dword [0x10060c78]
mov dword [esp + 0xb0], eax
mov eax, dword [0x10060c74]
mov dword [esp + 0xb4], eax
mov eax, dword [esp + 0xb0]
sub eax, 0x14e26b1c
sub eax, 1
add eax, 0x14e26b1c
mov dword [esp + 0xac], eax
mov ecx, dword [esp + 0xb4]
mov edx, dword [esp + 0xac]
mov eax, dword [esp + 0xb0]
imul eax, edx
and eax, 1
cmp eax, 0
sete al
mov byte [esp + 0xa9], al
cmp ecx, 0xa
setl cl
mov byte [esp + 0xaa], cl
and al, cl
mov byte [esp + 0xab], al
mov cl, byte [esp + 0xaa]
mov al, byte [esp + 0xa9]
xor al, cl
mov byte [esp + 0xa8], al
mov cl, byte [esp + 0xa8]
mov al, byte [esp + 0xab]
or al, cl
mov byte [esp + 0xa7], al
mov al, byte [esp + 0xa7]
test al, 1
jne 0x100417f5
jmp 0x10041d48
mov eax, dword [0x10060c78]
mov ecx, dword [0x10060c74]
mov dword [esp + 0x9c], ecx
mov ecx, eax
add ecx, 0x7e248124
sub ecx, 1
sub ecx, 0x7e248124
imul eax, ecx
and eax, 1
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0x9c]
mov ecx, dword [esp + 0xa0]
cmp ecx, 0
sete cl
mov byte [esp + 0x98], cl
cmp eax, 0xa
setl al
mov byte [esp + 0x99], al
xor cl, 0xff
mov byte [esp + 0x9a], cl
xor al, 0xff
mov byte [esp + 0x9b], al
mov al, byte [esp + 0x99]
mov dl, byte [esp + 0x9b]
mov ah, byte [esp + 0x98]
mov ch, byte [esp + 0x9a]
mov cl, 1
xor cl, 1
mov byte [esp + 0x93], cl
and ch, 0xff
mov byte [esp + 0x94], ch
and ah, cl
mov byte [esp + 0x95], ah
and dl, 0xff
mov byte [esp + 0x96], dl
and al, cl
mov byte [esp + 0x97], al
mov al, byte [esp + 0x93]
mov dl, byte [esp + 0x9b]
mov cl, byte [esp + 0x9a]
mov dh, byte [esp + 0x97]
mov ch, byte [esp + 0x96]
mov bl, byte [esp + 0x95]
mov ah, byte [esp + 0x94]
or ah, bl
or ch, dh
xor ah, ch
mov byte [esp + 0x90], ah
or cl, dl
xor cl, 0xff
mov byte [esp + 0x91], cl
or al, 1
mov byte [esp + 0x92], al
mov al, byte [esp + 0x90]
mov dl, byte [esp + 0x92]
mov cl, byte [esp + 0x91]
and cl, dl
or al, cl
mov byte [esp + 0x8f], al
mov al, byte [esp + 0x8f]
test al, 1
jne 0x10041935
jmp 0x10041d48
mov cl, byte [esp + 0xbb]
xor eax, eax
test cl, 1
mov dword [esp + 0x88], eax
jne 0x10041ad4
jmp 0x10041953
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0xd8]
mov edx, dword [esp + 0xc8]
mov dword [esp + 0x84], eax
mov bh, byte [edx + eax]
mov esi, 0x19
xor edx, edx
div esi
mov eax, dword [esp + 0x84]
mov bl, byte [ecx + edx]
mov dl, bh
xor dl, 0xff
and dl, 0xca
mov cl, 0xff
xor cl, 0xca
and bh, cl
mov dh, bl
xor dh, 0xff
and dh, 0xca
and bl, cl
mov ecx, dword [esp + 0xdc]
or dl, bh
or dh, bl
xor dl, dh
mov byte [ecx + eax], dl
add eax, 0x1eeee989
add eax, 1
sub eax, 0x1eeee989
cmp eax, 0x16
mov dword [esp + 0x88], eax
jne 0x10041953
mov eax, dword [0x10060c78]
mov dword [esp + 0x78], eax
mov ecx, dword [0x10060c74]
mov dword [esp + 0x7c], ecx
sub eax, 0xbe4bacdc
sub eax, 1
mov dword [esp + 0x80], eax
mov eax, dword [esp + 0x80]
add eax, 0xbe4bacdc
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0x7c]
mov edx, dword [esp + 0x74]
mov ecx, dword [esp + 0x78]
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
mov byte [esp + 0x72], cl
cmp eax, 0xa
setl al
mov byte [esp + 0x73], al
mov dl, byte [esp + 0x73]
mov cl, byte [esp + 0x72]
mov al, cl
and al, dl
xor cl, dl
or al, cl
mov byte [esp + 0x71], al
mov al, byte [esp + 0x71]
test al, 1
jne 0x10041a48
jmp 0x10041d04
mov eax, dword [0x1005f354]
add eax, 0x44305253
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0x6c]
mov dword [eax], 1
mov eax, dword [0x10060c78]
mov dword [esp + 0x60], eax
mov ecx, dword [0x10060c74]
mov dword [esp + 0x64], ecx
sub eax, 0x4d80a9dc
sub eax, 1
add eax, 0x4d80a9dc
mov dword [esp + 0x68], eax
mov ecx, dword [esp + 0x68]
mov eax, dword [esp + 0x60]
imul eax, ecx
and eax, 1
mov dword [esp + 0x5c], eax
mov ecx, dword [esp + 0x64]
mov eax, dword [esp + 0x5c]
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
mov byte [esp + 0x5a], dl
xor al, cl
mov byte [esp + 0x5b], al
mov cl, byte [esp + 0x5b]
mov al, byte [esp + 0x5a]
or al, cl
test al, 1
jne 0x10041acf
jmp 0x10041d04
jmp 0x10041ad4
add esp, 0xe8
pop esi
pop ebx
ret
mov eax, dword [0x10060c78]
mov dword [esp + 0x50], eax
mov eax, dword [0x10060c74]
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x50]
add eax, 0x8c83b73
sub eax, 1
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x4c]
sub eax, 0x8c83b73
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x54]
mov edx, dword [esp + 0x48]
mov ecx, dword [esp + 0x50]
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
mov byte [esp + 0x46], cl
cmp eax, 0xa
setl al
mov byte [esp + 0x47], al
mov dl, byte [esp + 0x47]
mov cl, byte [esp + 0x46]
mov al, cl
and al, dl
xor cl, dl
or al, cl
mov byte [esp + 0x45], al
mov al, byte [esp + 0x45]
test al, 1
jne 0x10041b57
jmp 0x10041d4d
mov eax, dword [0x10060c78]
mov dword [esp + 0x38], eax
mov ecx, dword [0x10060c74]
mov dword [esp + 0x3c], ecx
add eax, 0xe97c520
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x40]
sub eax, 1
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x34]
sub ecx, 0xe97c520
imul eax, ecx
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x30]
and eax, 1
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x2c]
cmp ecx, 0
sete cl
cmp eax, 0xa
setl dl
mov al, cl
and al, dl
xor cl, dl
or al, cl
mov byte [esp + 0x2b], al
mov al, byte [esp + 0x2b]
test al, 1
jne 0x10041bcf
jmp 0x10041d4d
mov ecx, dword [0x10060c78]
mov eax, dword [0x10060c74]
mov edx, ecx
sub edx, 0x15789c11
sub edx, 1
add edx, 0x15789c11
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
mov byte [esp + 0x27], cl
cmp eax, 0xa
setl al
mov byte [esp + 0x28], al
xor cl, 0xff
mov byte [esp + 0x29], cl
xor al, 0xff
mov byte [esp + 0x2a], al
mov al, byte [esp + 0x27]
mov dl, byte [esp + 0x29]
mov cl, 1
xor cl, 1
mov byte [esp + 0x24], cl
and dl, 0xff
mov byte [esp + 0x25], dl
and al, cl
mov byte [esp + 0x26], al
mov al, byte [esp + 0x2a]
and al, 0xff
mov byte [esp + 0x23], al
mov cl, byte [esp + 0x24]
mov al, byte [esp + 0x28]
and al, cl
mov byte [esp + 0x22], al
mov dl, byte [esp + 0x24]
mov ah, byte [esp + 0x2a]
mov cl, byte [esp + 0x29]
mov dh, byte [esp + 0x22]
mov ch, byte [esp + 0x23]
mov bl, byte [esp + 0x26]
mov al, byte [esp + 0x25]
or al, bl
or ch, dh
xor al, ch
or cl, ah
xor cl, 0xff
or dl, 1
and cl, dl
or al, cl
mov byte [esp + 0x21], al
mov al, byte [esp + 0x21]
test al, 1
jne 0x10041c8b
jmp 0x10041d29
mov eax, dword [0x1005f354]
add eax, 0x44305253
mov eax, dword [0x10060c78]
mov dword [esp + 0x1c], eax
mov eax, dword [0x10060c74]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x1c]
sub eax, 0x1419ae67
sub eax, 1
add eax, 0x1419ae67
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x1c]
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
mov byte [esp + 0x12], cl
cmp eax, 0xa
setl al
mov byte [esp + 0x13], al
mov dl, byte [esp + 0x13]
mov cl, byte [esp + 0x12]
mov al, cl
and al, dl
xor cl, dl
or al, cl
test al, 1
jne 0x10041cff
jmp 0x10041d29
jmp 0x10041695
mov eax, dword [0x1005f354]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0xc]
add eax, 0x44305253
mov dword [esp + 8], eax
mov eax, dword [esp + 8]
mov dword [eax], 1
jmp 0x10041a48
mov eax, dword [0x1005f354]
mov dword [esp + 4], eax
mov eax, dword [esp + 4]
add eax, 0x44305253
mov dword [esp], eax
mov eax, dword [esp]
mov eax, dword [eax]
jmp 0x10041c8b
jmp 0x100417f5
jmp 0x10041b57