Function at 0x1003d810
Capabilities:
Encode data using xor
Encrypt data using rc4 ksa
Resolve function by parsing pe exports

Disassembly:
push ebx
push esi
sub esp, 0xc4
mov eax, dword [esp + 0xd4]
mov dword [esp + 0xb4], eax
mov eax, dword [esp + 0xd0]
mov dword [esp + 0xb8], eax
mov eax, dword [0x1005fc80]
mov dword [esp + 0xbc], eax
mov eax, dword [0x1005fc7c]
mov dword [esp + 0xc0], eax
mov eax, dword [esp + 0xc0]
mov ecx, dword [esp + 0xbc]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
mov byte [esp + 0xb2], cl
cmp eax, 0xa
setl al
mov byte [esp + 0xb3], al
mov cl, byte [esp + 0xb3]
mov al, byte [esp + 0xb2]
and al, cl
mov byte [esp + 0xb1], al
mov al, byte [esp + 0xb1]
mov dl, byte [esp + 0xb3]
mov cl, byte [esp + 0xb2]
xor cl, dl
or al, cl
mov byte [esp + 0xb0], al
mov al, byte [esp + 0xb0]
test al, 1
jne 0x1003d8ce
jmp 0x1003dba4
mov eax, dword [esp + 0xb4]
add eax, 0x1d
mov dword [esp + 0xa8], eax
mov eax, dword [0x1005e358]
mov eax, dword [eax + 0x2df47802]
mov dword [esp + 0xac], eax
mov eax, dword [esp + 0xac]
cmp eax, 1
sete al
mov byte [esp + 0x9b], al
mov eax, dword [0x1005fc80]
mov dword [esp + 0x9c], eax
mov ecx, dword [0x1005fc7c]
mov dword [esp + 0xa0], ecx
sub eax, 0x7fc77117
mov dword [esp + 0xa4], eax
mov eax, dword [esp + 0x9c]
mov ecx, dword [esp + 0xa4]
sub ecx, 1
add ecx, 0x7fc77117
imul eax, ecx
and eax, 1
mov dword [esp + 0x94], eax
mov eax, dword [esp + 0x94]
cmp eax, 0
sete al
mov byte [esp + 0x93], al
mov cl, byte [esp + 0x93]
mov eax, dword [esp + 0xa0]
cmp eax, 0xa
setl dl
mov al, cl
and al, dl
xor cl, dl
or al, cl
mov byte [esp + 0x92], al
mov al, byte [esp + 0x92]
test al, 1
jne 0x1003d999
jmp 0x1003dba4
mov cl, byte [esp + 0x9b]
xor eax, eax
test cl, 1
mov dword [esp + 0x8c], eax
jne 0x1003da60
jmp 0x1003d9b7
mov eax, dword [esp + 0x8c]
mov ecx, dword [esp + 0xb4]
mov edx, dword [esp + 0xa8]
mov dword [esp + 0x88], eax
mov bh, byte [edx + eax]
mov esi, 0x1d
xor edx, edx
div esi
mov eax, dword [esp + 0x88]
mov bl, byte [ecx + edx]
mov dl, bh
xor dl, 0xff
and dl, 0x3c
mov cl, 0xff
xor cl, 0x3c
and bh, cl
mov dh, bl
xor dh, 0xff
and dh, 0x3c
and bl, cl
mov ecx, dword [esp + 0xb8]
or dl, bh
or dh, bl
xor dl, dh
mov byte [ecx + eax], dl
add eax, 0x31ad9cb3
add eax, 1
sub eax, 0x31ad9cb3
cmp eax, 0xa
mov dword [esp + 0x8c], eax
jne 0x1003d9b7
mov eax, dword [0x1005e358]
mov dword [esp + 0x84], eax
mov eax, dword [esp + 0x84]
add eax, 0x2df47802
mov dword [esp + 0x80], eax
mov eax, dword [esp + 0x80]
mov dword [eax], 1
jmp 0x1003da60
mov eax, dword [0x1005fc80]
mov dword [esp + 0x78], eax
mov eax, dword [0x1005fc7c]
mov dword [esp + 0x7c], eax
mov eax, dword [esp + 0x78]
sub eax, 0x7783f2d
sub eax, 1
mov dword [esp + 0x74], eax
mov ecx, dword [esp + 0x7c]
mov eax, dword [esp + 0x78]
mov edx, dword [esp + 0x74]
add edx, 0x7783f2d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
mov byte [esp + 0x71], al
cmp ecx, 0xa
setl cl
mov byte [esp + 0x72], cl
and al, cl
mov byte [esp + 0x73], al
mov cl, byte [esp + 0x72]
mov al, byte [esp + 0x71]
xor al, cl
mov byte [esp + 0x70], al
mov cl, byte [esp + 0x70]
mov al, byte [esp + 0x73]
or al, cl
mov byte [esp + 0x6f], al
mov al, byte [esp + 0x6f]
test al, 1
jne 0x1003dae1
jmp 0x1003dcc8
mov eax, dword [0x1005fc80]
mov dword [esp + 0x60], eax
mov ecx, dword [0x1005fc7c]
mov dword [esp + 0x64], ecx
add eax, 0x4f2fcbc6
sub eax, 1
sub eax, 0x4f2fcbc6
mov dword [esp + 0x68], eax
mov ecx, dword [esp + 0x68]
mov eax, dword [esp + 0x60]
imul eax, ecx
mov dword [esp + 0x5c], eax
mov ecx, dword [esp + 0x64]
mov eax, dword [esp + 0x5c]
and eax, 1
cmp eax, 0
sete al
mov byte [esp + 0x59], al
cmp ecx, 0xa
setl cl
mov byte [esp + 0x5a], cl
xor al, 0xff
mov byte [esp + 0x5b], al
mov dl, byte [esp + 0x5a]
mov ah, byte [esp + 0x59]
mov al, byte [esp + 0x5b]
mov cl, dl
xor cl, 0xff
mov byte [esp + 0x56], cl
mov ch, 1
xor ch, 1
mov byte [esp + 0x57], ch
and al, 0xff
and ah, ch
and cl, 0xff
and dl, ch
or al, ah
or cl, dl
xor al, cl
mov byte [esp + 0x58], al
mov cl, byte [esp + 0x56]
mov al, byte [esp + 0x5b]
or al, cl
mov byte [esp + 0x55], al
mov al, byte [esp + 0x58]
mov dl, byte [esp + 0x57]
mov cl, byte [esp + 0x55]
xor cl, 0xff
or dl, 1
and cl, dl
or al, cl
test al, 1
jne 0x1003db9b
jmp 0x1003dcc8
add esp, 0xc4
pop esi
pop ebx
ret
mov eax, dword [0x1005fc80]
mov dword [esp + 0x4c], eax
mov eax, dword [0x1005fc7c]
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x4c]
mov ecx, eax
add ecx, 0xd057cfd2
sub ecx, 1
sub ecx, 0xd057cfd2
imul eax, ecx
and eax, 1
mov dword [esp + 0x48], eax
mov ecx, dword [esp + 0x50]
mov eax, dword [esp + 0x48]
cmp eax, 0
sete al
mov byte [esp + 0x45], al
cmp ecx, 0xa
setl cl
mov byte [esp + 0x46], cl
and al, cl
mov byte [esp + 0x47], al
mov cl, byte [esp + 0x46]
mov al, byte [esp + 0x45]
xor al, cl
mov byte [esp + 0x44], al
mov cl, byte [esp + 0x44]
mov al, byte [esp + 0x47]
or al, cl
mov byte [esp + 0x43], al
mov al, byte [esp + 0x43]
test al, 1
jne 0x1003dc24
jmp 0x1003de0e
mov eax, dword [0x1005fc80]
mov dword [esp + 0x38], eax
mov eax, dword [0x1005fc7c]
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x38]
xor edx, edx
sub edx, 1
mov ecx, eax
add ecx, edx
imul eax, ecx
and eax, 1
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x34]
cmp eax, 0
sete al
mov byte [esp + 0x33], al
mov eax, dword [esp + 0x3c]
cmp eax, 0xa
setl al
mov byte [esp + 0x32], al
mov ch, byte [esp + 0x32]
mov dh, byte [esp + 0x33]
mov al, dh
xor al, 0xff
mov cl, ch
xor cl, 0xff
mov bl, 1
xor bl, 0
mov byte [esp + 0x2f], bl
mov dl, al
and dl, 0
and dh, bl
mov ah, cl
and ah, 0
and ch, bl
or dl, dh
or ah, ch
xor dl, ah
mov byte [esp + 0x30], dl
or al, cl
xor al, 0xff
mov byte [esp + 0x31], al
mov al, byte [esp + 0x30]
mov cl, byte [esp + 0x31]
mov dl, byte [esp + 0x2f]
or dl, 0
and cl, dl
or al, cl
test al, 1
jne 0x1003dcc3
jmp 0x1003de0e
jmp 0x1003d8ce
mov eax, dword [0x1005fc80]
mov dword [esp + 0x28], eax
mov eax, dword [0x1005fc7c]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x28]
add eax, 0x33aa3114
sub eax, 1
sub eax, 0x33aa3114
mov dword [esp + 0x20], eax
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 0x28]
imul eax, edx
and eax, 1
cmp eax, 0
sete al
mov byte [esp + 0x1d], al
cmp ecx, 0xa
setl cl
mov byte [esp + 0x1e], cl
and al, cl
mov byte [esp + 0x1f], al
mov cl, byte [esp + 0x1e]
mov al, byte [esp + 0x1d]
xor al, cl
mov byte [esp + 0x1c], al
mov cl, byte [esp + 0x1c]
mov al, byte [esp + 0x1f]
or al, cl
test al, 1
jne 0x1003dd40
jmp 0x1003de2d
mov eax, dword [0x1005fc80]
mov ecx, dword [0x1005fc7c]
mov dword [esp + 0x14], ecx
mov ecx, eax
sub ecx, 0x7f64859f
sub ecx, 1
add ecx, 0x7f64859f
imul eax, ecx
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x18]
and eax, 1
cmp eax, 0
sete al
mov byte [esp + 0x13], al
mov cl, byte [esp + 0x13]
mov eax, dword [esp + 0x14]
cmp eax, 0xa
setl al
mov byte [esp + 0xf], al
xor cl, 0xff
mov byte [esp + 0x10], cl
xor al, 0xff
mov byte [esp + 0x11], al
mov al, 1
xor al, 1
mov byte [esp + 0x12], al
mov cl, byte [esp + 0x12]
mov al, byte [esp + 0x13]
mov dl, byte [esp + 0x10]
and dl, 0xff
mov byte [esp + 0xd], dl
and al, cl
mov byte [esp + 0xe], al
mov cl, byte [esp + 0x11]
mov al, byte [esp + 0x10]
mov dh, byte [esp + 0xe]
mov dl, byte [esp + 0xd]
mov bl, byte [esp + 0x12]
mov ch, byte [esp + 0xf]
mov ah, cl
and ah, 0xff
and ch, bl
or dl, dh
or ah, ch
xor dl, ah
mov byte [esp + 0xb], dl
or al, cl
xor al, 0xff
mov byte [esp + 0xc], al
mov al, byte [esp + 0xb]
mov cl, byte [esp + 0xc]
mov dl, byte [esp + 0x12]
or dl, 1
and cl, dl
or al, cl
test al, 1
jne 0x1003de09
jmp 0x1003de2d
jmp 0x1003dae1
mov eax, dword [0x1005e358]
mov dword [esp + 4], eax
mov eax, dword [esp + 4]
add eax, 0x2df47802
mov dword [esp], eax
mov eax, dword [esp]
mov eax, dword [eax]
jmp 0x1003dc24
jmp 0x1003dd40