Function at 0x10039ae0
Capabilities:
Encode data using xor
Encrypt data using rc4 ksa
Resolve function by parsing pe exports

Disassembly:
push ebx
push esi
sub esp, 0xa8
mov eax, dword [esp + 0xb8]
mov dword [esp + 0x9c], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 0xa0], eax
mov eax, dword [0x1005fcb0]
mov dword [esp + 0xa4], eax
mov eax, dword [0x1005fcac]
mov dword [esp + 0x98], eax
mov eax, dword [esp + 0xa4]
add eax, 0x758f166e
mov dword [esp + 0x94], eax
mov eax, dword [esp + 0xa4]
mov ecx, dword [esp + 0x94]
sub ecx, 1
sub ecx, 0x758f166e
imul eax, ecx
mov dword [esp + 0x90], eax
mov eax, dword [esp + 0x98]
mov ecx, dword [esp + 0x90]
and ecx, 1
cmp ecx, 0
sete dh
cmp eax, 0xa
setl ch
mov al, dh
xor al, 0xff
mov cl, ch
xor cl, 0xff
mov bl, 1
xor bl, 1
mov byte [esp + 0x8d], bl
mov dl, al
and dl, 0xff
and dh, bl
mov ah, cl
and ah, 0xff
and ch, bl
or dl, dh
or ah, ch
xor dl, ah
mov byte [esp + 0x8e], dl
or al, cl
xor al, 0xff
mov byte [esp + 0x8f], al
mov al, byte [esp + 0x8e]
mov cl, byte [esp + 0x8f]
mov dl, byte [esp + 0x8d]
or dl, 1
and cl, dl
or al, cl
test al, 1
jne 0x10039bd1
jmp 0x10039ff3
mov eax, dword [esp + 0x9c]
add eax, 0x13
mov dword [esp + 0x88], eax
mov eax, dword [0x1005e340]
mov eax, dword [eax - 0x38d02cbb]
mov dword [esp + 0x84], eax
mov eax, dword [esp + 0x84]
cmp eax, 1
sete al
mov byte [esp + 0x77], al
mov eax, dword [0x1005fcb0]
mov dword [esp + 0x78], eax
mov ecx, dword [0x1005fcac]
mov dword [esp + 0x7c], ecx
add eax, 0x67b7a361
mov dword [esp + 0x80], eax
mov eax, dword [esp + 0x7c]
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x80]
sub edx, 1
sub edx, 0x67b7a361
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
mov byte [esp + 0x75], cl
cmp eax, 0xa
setl al
mov byte [esp + 0x76], al
mov dh, byte [esp + 0x76]
mov bl, byte [esp + 0x75]
mov cl, bl
xor cl, 0xff
mov dl, dh
xor dl, 0xff
mov al, 1
xor al, 1
mov ah, cl
and ah, 0xff
and bl, al
mov ch, dl
and ch, 0xff
and dh, al
or ah, bl
or ch, dh
xor ah, ch
mov byte [esp + 0x72], ah
or cl, dl
xor cl, 0xff
mov byte [esp + 0x73], cl
or al, 1
mov byte [esp + 0x74], al
mov al, byte [esp + 0x72]
mov dl, byte [esp + 0x74]
mov cl, byte [esp + 0x73]
and cl, dl
or al, cl
test al, 1
jne 0x10039cb0
jmp 0x10039ff3
mov cl, byte [esp + 0x77]
xor eax, eax
test cl, 1
mov dword [esp + 0x6c], eax
jne 0x10039e8e
jmp 0x10039cc8
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x9c]
mov edx, dword [esp + 0x88]
mov dword [esp + 0x68], eax
mov bh, byte [edx + eax]
mov esi, 0x13
xor edx, edx
div esi
mov eax, dword [esp + 0x68]
mov bl, byte [ecx + edx]
mov dl, bh
xor dl, 0xff
and dl, 0x61
mov cl, 0xff
xor cl, 0x61
and bh, cl
mov dh, bl
xor dh, 0xff
and dh, 0x61
and bl, cl
mov ecx, dword [esp + 0xa0]
or dl, bh
or dh, bl
xor dl, dh
mov byte [ecx + eax], dl
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, 1
add ecx, eax
xor eax, eax
sub eax, ecx
cmp eax, 7
mov dword [esp + 0x6c], eax
jne 0x10039cc8
mov eax, dword [0x1005fcb0]
mov dword [esp + 0x60], eax
mov eax, dword [0x1005fcac]
mov dword [esp + 0x64], eax
mov eax, dword [esp + 0x60]
mov ecx, eax
add ecx, 0x90d1ab74
sub ecx, 1
sub ecx, 0x90d1ab74
imul eax, ecx
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x5c]
and eax, 1
cmp eax, 0
sete al
mov byte [esp + 0x5b], al
mov eax, dword [esp + 0x64]
cmp eax, 0xa
setl al
mov byte [esp + 0x5a], al
mov dl, byte [esp + 0x5a]
mov cl, byte [esp + 0x5b]
mov al, cl
and al, dl
xor cl, dl
or al, cl
mov byte [esp + 0x59], al
mov al, byte [esp + 0x59]
test al, 1
jne 0x10039da8
jmp 0x1003a014
mov eax, dword [0x1005e340]
mov dword [eax - 0x38d02cbb], 1
mov eax, dword [0x1005fcb0]
mov ecx, dword [0x1005fcac]
mov dword [esp + 0x50], ecx
mov ecx, eax
add ecx, 0xe89557c5
sub ecx, 1
sub ecx, 0xe89557c5
imul eax, ecx
and eax, 1
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x54]
cmp eax, 0
sete al
mov byte [esp + 0x4f], al
mov al, byte [esp + 0x4f]
mov ecx, dword [esp + 0x50]
cmp ecx, 0xa
setl cl
mov byte [esp + 0x4d], cl
xor al, 0xff
mov byte [esp + 0x4e], al
mov al, byte [esp + 0x4d]
mov ah, byte [esp + 0x4f]
mov ch, byte [esp + 0x4e]
mov dl, al
xor dl, 0xff
mov byte [esp + 0x47], dl
mov cl, 1
xor cl, 1
mov byte [esp + 0x48], cl
and ch, 0xff
mov byte [esp + 0x49], ch
and ah, cl
mov byte [esp + 0x4a], ah
and dl, 0xff
mov byte [esp + 0x4b], dl
and al, cl
mov byte [esp + 0x4c], al
mov cl, byte [esp + 0x48]
mov dl, byte [esp + 0x47]
mov al, byte [esp + 0x4e]
mov dh, byte [esp + 0x4c]
mov ch, byte [esp + 0x4b]
mov bl, byte [esp + 0x4a]
mov ah, byte [esp + 0x49]
or ah, bl
or ch, dh
xor ah, ch
mov byte [esp + 0x45], ah
or al, dl
xor al, 0xff
or cl, 1
and al, cl
mov byte [esp + 0x46], al
mov cl, byte [esp + 0x46]
mov al, byte [esp + 0x45]
or al, cl
test al, 1
jne 0x10039e89
jmp 0x1003a014
jmp 0x10039e8e
mov eax, dword [0x1005fcb0]
mov dword [esp + 0x38], eax
mov eax, dword [0x1005fcac]
mov dword [esp + 0x3c], eax
xor eax, eax
sub eax, 1
mov dword [esp + 0x40], eax
mov ecx, dword [esp + 0x40]
mov eax, dword [esp + 0x38]
add eax, ecx
mov dword [esp + 0x34], eax
mov ecx, dword [esp + 0x34]
mov eax, dword [esp + 0x38]
imul eax, ecx
mov dword [esp + 0x30], eax
mov ecx, dword [esp + 0x3c]
mov eax, dword [esp + 0x30]
and eax, 1
cmp eax, 0
sete al
mov byte [esp + 0x2d], al
cmp ecx, 0xa
setl cl
mov byte [esp + 0x2e], cl
and al, cl
mov byte [esp + 0x2f], al
mov cl, byte [esp + 0x2e]
mov al, byte [esp + 0x2d]
xor al, cl
mov byte [esp + 0x2c], al
mov cl, byte [esp + 0x2c]
mov al, byte [esp + 0x2f]
or al, cl
test al, 1
jne 0x10039f10
jmp 0x1003a037
mov eax, dword [0x1005fcb0]
mov dword [esp + 0x20], eax
mov ecx, dword [0x1005fcac]
mov dword [esp + 0x24], ecx
sub eax, 0x99f29a88
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x28]
sub eax, 1
add eax, 0x99f29a88
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x24]
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
mov byte [esp + 0x1a], cl
cmp eax, 0xa
setl al
mov byte [esp + 0x1b], al
mov al, byte [esp + 0x1b]
mov ah, byte [esp + 0x1a]
mov ch, ah
xor ch, 0xff
mov byte [esp + 0x13], ch
mov dl, al
xor dl, 0xff
mov byte [esp + 0x14], dl
mov cl, 1
xor cl, 0
mov byte [esp + 0x15], cl
and ch, 0
mov byte [esp + 0x16], ch
and ah, cl
mov byte [esp + 0x17], ah
and dl, 0
mov byte [esp + 0x18], dl
and al, cl
mov byte [esp + 0x19], al
mov cl, byte [esp + 0x19]
mov al, byte [esp + 0x18]
mov ah, byte [esp + 0x17]
mov dl, byte [esp + 0x16]
or dl, ah
mov byte [esp + 0x11], dl
or al, cl
mov byte [esp + 0x12], al
mov dl, byte [esp + 0x15]
mov ah, byte [esp + 0x14]
mov cl, byte [esp + 0x13]
mov ch, byte [esp + 0x12]
mov al, byte [esp + 0x11]
xor al, ch
or cl, ah
xor cl, 0xff
or dl, 0
and cl, dl
or al, cl
test al, 1
jne 0x10039fea
jmp 0x1003a037
add esp, 0xa8
pop esi
pop ebx
ret
mov eax, dword [0x1005e340]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0xc]
add eax, 0xc72fd345
mov dword [esp + 8], eax
mov eax, dword [esp + 8]
mov eax, dword [eax]
jmp 0x10039bd1
mov eax, dword [0x1005e340]
mov dword [esp + 4], eax
mov eax, dword [esp + 4]
add eax, 0xc72fd345
mov dword [esp], eax
mov eax, dword [esp]
mov dword [eax], 1
jmp 0x10039da8
jmp 0x10039f10