Function at 0x43293c
Capabilities:
Encrypt data using rc4 ksa
Enumerate pe sections
Resolve function by parsing pe exports

Disassembly:
push edi
push esi
push ebp
push ebx
sub esp, 0xa0
mov ebx, ecx
mov dword [esp + 0x44], edx
mov esi, eax
mov ecx, dword [esp + 0xcc]
mov edx, dword [esp + 0xd4]
lea ebp, [ecx + ecx]
add ebp, ebp
mov dword [esp + 8], ebp
mov ebp, dword [esp + 0xc4]
sub ebp, ebx
inc ebp
mov edi, dword [esp + 0xc8]
sub edi, dword [esp + 0xc0]
inc edi
cmp ebp, edx
jl 0x43334e
mov eax, dword [esp + 0xd8]
cmp edi, eax
jl 0x43334e
lea eax, [edx + edx]
mov dword [esp + 0x48], eax
test eax, eax
jle 0x4329f1
xor eax, eax
mov dword [esp + 0x1c], eax
xor eax, eax
mov dword [esp + 0x10], eax
mov dword [esp + 0x40], edi
mov dword [esp + 0x3c], esi
mov ecx, eax
mov esi, dword [esp + 0x1c]
mov edi, dword [esp + 0x48]
mov eax, ecx
cdq
idiv edi
imul eax, ebp
sar eax, 8
mov dword [esi*4 + 0x7a7500], eax
add ecx, 0x10000
inc esi
cmp esi, edi
jl 0x4329be
mov edi, dword [esp + 0x40]
mov edx, dword [esp + 0xd4]
mov ecx, dword [esp + 0xcc]
mov esi, dword [esp + 0x3c]
mov ebp, dword [esp + 0xd8]
lea eax, [ebp + ebp]
test eax, eax
jle 0x432a41
xor ebp, ebp
mov dword [esp + 0x1c], ebp
xor ebp, ebp
mov dword [esp + 0x3c], esi
mov ecx, eax
mov esi, dword [esp + 0x1c]
mov eax, ebp
cdq
idiv ecx
imul eax, edi
sar eax, 8
mov dword [esi*4 + 0x797400], eax
add ebp, 0x10000
inc esi
cmp esi, ecx
jl 0x432a12
mov edx, dword [esp + 0xd4]
mov ecx, dword [esp + 0xcc]
mov esi, dword [esp + 0x3c]
mov ebp, dword [esp + 0xd8]
mov dword [esp + 0x20], ebp
test ebp, ebp
jle 0x433384
xor ebp, ebp
xor edi, edi
mov ecx, dword [esp + 0xd8]
mov eax, dword [esp + 0xc0]
mov edx, dword [edi*8 + 0x797400]
sar edx, 8
add edx, eax
test edx, edx
jge 0x432a79
lea ebp, [edi + 1]
cmp edx, dword [esp + 0xd0]
jge 0x43336d
inc edi
cmp edi, ecx
jl 0x432a66
mov edx, dword [esp + 0xd4]
mov ecx, dword [esp + 0xcc]
mov dword [esp + 0x48], edx
test edx, edx
jle 0x433366
xor edi, edi
xor eax, eax
mov dword [esp + 0x3c], esi
mov esi, dword [eax*8 + 0x7a7500]
sar esi, 8
add esi, ebx
test esi, esi
jge 0x432ac0
lea edi, [eax + 1]
cmp esi, ecx
jge 0x433359
inc eax
cmp eax, edx
jl 0x432aad
mov esi, dword [esp + 0x3c]
mov eax, dword [esp + 0x20]
cmp ebp, eax
jge 0x432ae1
mov eax, dword [esp + 0x48]
cmp edi, eax
jl 0x432b01
lea edx, [edx + edx]
add edx, edx
imul edx, dword [esp + 0xd8]
push edx
push esi
call dword [0x5b1480]
add esp, 0xa8
pop ebx
pop ebp
pop esi
pop edi
ret
lea eax, [edx + edx]
add eax, eax
mov dword [esp + 0x1c], eax
mov ecx, ebp
imul ecx, eax
push ecx
push esi
call dword [0x5b1480]
mov edx, dword [esp + 0xdc]
mov dword [esp + 8], edi
mov dword [esp + 0xc], ebx
mov edi, dword [esp + 0x28]
mov eax, edi
mov ebx, dword [esp + 0x24]
imul eax, ebx
add eax, esi
mov ecx, dword [esp + 0xe0]
imul ecx, ebx
neg edi
imul edi, ebx
add ecx, edi
push ecx
push eax
mov ebx, dword [esp + 0x14]
mov edi, dword [esp + 0x10]
call dword [0x5b1480]
mov edx, dword [esp + 0xe4]
add esp, 0x10
mov eax, dword [esp + 0x20]
add eax, 0xfffffffe
mov dword [esp + 0x20], eax
cmp ebp, eax
jge 0x43334e
lea eax, [edi + edi]
add eax, eax
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x48]
lea ecx, [eax + eax]
add ecx, ecx
add ecx, esi
sub edx, eax
add edx, edx
add edx, edx
mov dword [esp + 0x10], edx
add ebx, ebx
add ebx, ebx
mov edx, dword [esp + 0xc0]
imul edx, dword [esp + 8]
add ebx, edx
dec eax
mov dword [esp + 0x48], eax
mov eax, ebp
mov edx, dword [esp + 0x1c]
imul eax, edx
add eax, esi
mov esi, ebp
imul esi, edx
add esi, ecx
mov dword [esp + 0x18], esi
mov dword [esp + 0x24], eax
mov dword [esp + 4], ebx
mov dword [esp], edi
mov dword [esp + 0x14], ebp
mov eax, dword [esp + 0xc]
push eax
mov edx, dword [esp + 0x28]
push edx
call dword [0x5b1480]
mov eax, dword [esp + 0x18]
push eax
mov edx, dword [esp + 0x24]
push edx
call dword [0x5b1480]
add esp, 0x10
mov ebp, dword [esp + 0x14]
mov ebx, dword [ebp*8 + 0x797400]
mov esi, ebx
sar esi, 8
mov edx, dword [esp + 8]
imul esi, edx
mov eax, dword [esp + 4]
add esi, eax
mov ecx, dword [ebp*8 + 0x797404]
mov ebp, ecx
sar ebp, 8
imul ebp, edx
add ebp, eax
movzx ebx, bl
movzx ecx, cl
mov edx, dword [esp]
mov edi, dword [esp + 0x48]
cmp edx, edi
jge 0x43332d
mov edi, dword [esp + 8]
lea eax, [esi + edi]
lea edi, [edi + ebp]
mov dword [esp + 0x28], edi
mov dword [esp + 0x2c], eax
mov dword [esp + 0x40], edx
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x30], ebp
mov dword [esp + 0x34], esi
mov eax, dword [esp + 0x40]
mov esi, dword [eax*8 + 0x7a7500]
mov eax, dword [eax*8 + 0x7a7504]
mov ebx, esi
sar ebx, 8
add ebx, ebx
add ebx, ebx
mov edx, eax
sar edx, 8
add edx, edx
add edx, edx
and esi, 0xff
mov dword [esp + 0x4c], esi
movzx eax, al
mov dword [esp + 0x50], eax
mov ecx, dword [esp + 0x34]
lea eax, [ecx + ebx]
lea ecx, [ecx + edx]
mov dword [esp + 0x54], ecx
mov ebp, dword [esp + 0x2c]
lea ecx, [ebp + ebx]
lea ebp, [ebp + edx]
mov dword [esp + 0x58], ebp
mov edi, dword [esp + 0x30]
lea ebp, [edi + ebx]
mov dword [esp + 0x5c], ebp
lea ebp, [edi + edx]
mov dword [esp + 0x60], ebp
mov ebp, dword [esp + 0x28]
add ebx, ebp
mov dword [esp + 0x64], ebx
add edx, ebp
mov dword [esp + 0x68], edx
mov edx, dword [esp + 0x44]
movzx ebp, byte [eax + edx]
movzx ebx, byte [eax + edx + 1]
mov dword [esp + 0x6c], ebx
movzx ebx, byte [eax + edx + 2]
mov dword [esp + 0x70], ebx
movzx ebx, byte [eax + edx + 3]
mov dword [esp + 0x74], ebx
movzx ebx, byte [eax + edx + 4]
movzx edi, byte [eax + edx + 5]
mov dword [esp + 0x78], edi
movzx edi, byte [eax + edx + 6]
mov dword [esp + 0x7c], edi
movzx eax, byte [eax + edx + 7]
mov dword [esp + 0x80], eax
movzx edi, byte [ecx + edx]
movzx eax, byte [ecx + edx + 1]
mov dword [esp + 0x84], eax
movzx eax, byte [ecx + edx + 2]
mov dword [esp + 0x88], eax
movzx eax, byte [ecx + edx + 3]
mov dword [esp + 0x8c], eax
movzx eax, byte [ecx + edx + 4]
mov dword [esp + 0x90], eax
movzx eax, byte [ecx + edx + 5]
mov dword [esp + 0x94], eax
movzx eax, byte [ecx + edx + 6]
movzx edx, byte [ecx + edx + 7]
mov dword [esp + 0x98], edx
sub ebx, ebp
imul ebx, esi
sar ebx, 8
add ebp, ebx
mov ebx, edi
sub ebx, ebp
mov edx, dword [esp + 0x90]
sub edx, edi
imul edx, esi
sar edx, 8
add ebx, edx
mov ecx, dword [esp + 0x38]
imul ebx, ecx
sar ebx, 8
add ebp, ebx
mov edx, ebp
and edx, 0xff
mov dword [esp + 0x90], edx
mov ebx, dword [esp + 0x78]
mov edx, dword [esp + 0x6c]
sub ebx, edx
imul ebx, esi
sar ebx, 8
add edx, ebx
mov ebx, dword [esp + 0x84]
mov edi, ebx
sub edi, edx
mov ebp, dword [esp + 0x94]
sub ebp, ebx
imul ebp, esi
sar ebp, 8
add edi, ebp
imul edi, ecx
sar edi, 8
add edx, edi
movzx edx, dl
mov dword [esp + 0x94], edx
mov edx, dword [esp + 0x7c]
mov ebp, dword [esp + 0x70]
sub edx, ebp
imul edx, esi
sar edx, 8
add ebp, edx
mov edx, dword [esp + 0x88]
mov ebx, edx
sub ebx, ebp
sub eax, edx
imul eax, esi
sar eax, 8
add ebx, eax
imul ebx, ecx
sar ebx, 8
add ebp, ebx
mov eax, ebp
and eax, 0xff
mov dword [esp + 0x88], eax
mov eax, dword [esp + 0x80]
mov ebp, dword [esp + 0x74]
sub eax, ebp
imul eax, esi
sar eax, 8
add ebp, eax
mov eax, dword [esp + 0x8c]
mov ebx, eax
sub ebx, ebp
mov edx, dword [esp + 0x98]
sub edx, eax
imul edx, esi
sar edx, 8
add ebx, edx
imul ebx, ecx
sar ebx, 8
add ebp, ebx
mov eax, ebp
and eax, 0xff
mov dword [esp + 0x98], eax
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x54]
movzx ebp, byte [ecx + eax]
movzx edx, byte [ecx + eax + 1]
mov dword [esp + 0x8c], edx
movzx edx, byte [ecx + eax + 2]
mov dword [esp + 0x84], edx
movzx edx, byte [ecx + eax + 3]
mov dword [esp + 0x80], edx
movzx edx, byte [ecx + eax + 4]
movzx ebx, byte [ecx + eax + 5]
mov dword [esp + 0x7c], ebx
movzx ebx, byte [ecx + eax + 6]
mov dword [esp + 0x78], ebx
movzx ecx, byte [ecx + eax + 7]
mov dword [esp + 0x74], ecx
mov edi, dword [esp + 0x58]
movzx ecx, byte [edi + eax]
movzx ebx, byte [edi + eax + 1]
mov dword [esp + 0x70], ebx
movzx ebx, byte [edi + eax + 2]
mov dword [esp + 0x6c], ebx
movzx ebx, byte [edi + eax + 3]
mov dword [esp + 0x54], ebx
movzx ebx, byte [edi + eax + 4]
movzx esi, byte [edi + eax + 5]
mov dword [esp + 0x9c], esi
movzx esi, byte [edi + eax + 6]
movzx eax, byte [edi + eax + 7]
mov dword [esp + 0x58], eax
sub edx, ebp
mov eax, dword [esp + 0x50]
imul edx, eax
sar edx, 8
add ebp, edx
mov edx, ecx
sub edx, ebp
sub ebx, ecx
imul ebx, eax
sar ebx, 8
add edx, ebx
mov ecx, dword [esp + 0x38]
imul edx, ecx
sar edx, 8
add ebp, edx
and ebp, 0xff
add dword [esp + 0x90], ebp
mov edx, dword [esp + 0x8c]
mov ebx, dword [esp + 0x7c]
sub ebx, edx
imul ebx, eax
sar ebx, 8
add edx, ebx
mov ebx, dword [esp + 0x70]
mov edi, ebx
sub edi, edx
mov ebp, dword [esp + 0x9c]
sub ebp, ebx
imul ebp, eax
sar ebp, 8
add edi, ebp
imul edi, ecx
sar edi, 8
add edx, edi
movzx edx, dl
add dword [esp + 0x94], edx
mov edx, dword [esp + 0x78]
mov ebp, dword [esp + 0x84]
sub edx, ebp
imul edx, eax
sar edx, 8
add ebp, edx
mov edx, dword [esp + 0x6c]
mov ebx, edx
sub ebx, ebp
sub esi, edx
imul esi, eax
sar esi, 8
add ebx, esi
imul ebx, ecx
sar ebx, 8
add ebp, ebx
and ebp, 0xff
add dword [esp + 0x88], ebp
mov edx, dword [esp + 0x74]
mov esi, dword [esp + 0x80]
sub edx, esi
imul edx, eax
sar edx, 8
add esi, edx
mov edx, dword [esp + 0x54]
mov ebp, edx
sub ebp, esi
mov ebx, dword [esp + 0x58]
sub ebx, edx
imul ebx, eax
sar ebx, 8
add ebp, ebx
imul ebp, ecx
sar ebp, 8
add esi, ebp
and esi, 0xff
add dword [esp + 0x98], esi
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x5c]
movzx ebp, byte [ecx + eax]
movzx edx, byte [ecx + eax + 1]
mov dword [esp + 0x9c], edx
movzx edx, byte [ecx + eax + 2]
mov dword [esp + 0x8c], edx
movzx edx, byte [ecx + eax + 3]
mov dword [esp + 0x84], edx
movzx edx, byte [ecx + eax + 4]
movzx ebx, byte [ecx + eax + 5]
mov dword [esp + 0x80], ebx
movzx ebx, byte [ecx + eax + 6]
mov dword [esp + 0x7c], ebx
movzx ecx, byte [ecx + eax + 7]
mov dword [esp + 0x78], ecx
mov edi, dword [esp + 0x64]
movzx ecx, byte [edi + eax]
movzx ebx, byte [edi + eax + 1]
mov dword [esp + 0x74], ebx
movzx ebx, byte [edi + eax + 2]
mov dword [esp + 0x70], ebx
movzx ebx, byte [edi + eax + 3]
mov dword [esp + 0x6c], ebx
movzx ebx, byte [edi + eax + 4]
movzx esi, byte [edi + eax + 5]
mov dword [esp + 0x5c], esi
movzx esi, byte [edi + eax + 6]
movzx eax, byte [edi + eax + 7]
mov dword [esp + 0x64], eax
sub edx, ebp
mov eax, dword [esp + 0x4c]
imul edx, eax
sar edx, 8
add ebp, edx
mov edx, ecx
sub edx, ebp
sub ebx, ecx
imul ebx, eax
sar ebx, 8
add edx, ebx
mov ecx, dword [esp + 0x3c]
imul edx, ecx
sar edx, 8
add ebp, edx
and ebp, 0xff
add dword [esp + 0x90], ebp
mov edx, dword [esp + 0x9c]
mov ebx, dword [esp + 0x80]
sub ebx, edx
imul ebx, eax
sar ebx, 8
add edx, ebx
mov ebx, dword [esp + 0x74]
mov edi, ebx
sub edi, edx
mov ebp, dword [esp + 0x5c]
sub ebp, ebx
imul ebp, eax
sar ebp, 8
add edi, ebp
imul edi, ecx
sar edi, 8
add edx, edi
movzx edx, dl
add dword [esp + 0x94], edx
mov edx, dword [esp + 0x7c]
mov ebp, dword [esp + 0x8c]
sub edx, ebp
imul edx, eax
sar edx, 8
add ebp, edx
mov edx, dword [esp + 0x70]
mov ebx, edx
sub ebx, ebp
sub esi, edx
imul esi, eax
sar esi, 8
add ebx, esi
imul ebx, ecx
sar ebx, 8
add ebp, ebx
and ebp, 0xff
add dword [esp + 0x88], ebp
mov edx, dword [esp + 0x78]
mov esi, dword [esp + 0x84]
sub edx, esi
imul edx, eax
sar edx, 8
add esi, edx
mov edx, dword [esp + 0x6c]
mov ebp, edx
sub ebp, esi
mov ebx, dword [esp + 0x64]
sub ebx, edx
imul eax, ebx
sar eax, 8
add ebp, eax
imul ebp, ecx
sar ebp, 8
add esi, ebp
and esi, 0xff
add dword [esp + 0x98], esi
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x60]
movzx esi, byte [ecx + eax]
movzx edx, byte [ecx + eax + 1]
mov dword [esp + 0x9c], edx
movzx edx, byte [ecx + eax + 2]
mov dword [esp + 0x8c], edx
movzx edx, byte [ecx + eax + 3]
mov dword [esp + 0x84], edx
movzx edx, byte [ecx + eax + 4]
movzx ebx, byte [ecx + eax + 5]
mov dword [esp + 0x80], ebx
movzx ebx, byte [ecx + eax + 6]
mov dword [esp + 0x7c], ebx
movzx ecx, byte [ecx + eax + 7]
mov dword [esp + 0x78], ecx
mov ebp, dword [esp + 0x68]
movzx ecx, byte [ebp + eax]
movzx ebx, byte [ebp + eax + 1]
mov dword [esp + 0x74], ebx
movzx ebx, byte [ebp + eax + 2]
mov dword [esp + 0x70], ebx
movzx ebx, byte [ebp + eax + 3]
mov dword [esp + 0x6c], ebx
movzx ebx, byte [ebp + eax + 4]
movzx edi, byte [ebp + eax + 5]
mov dword [esp + 0x64], edi
movzx edi, byte [ebp + eax + 6]
movzx eax, byte [ebp + eax + 7]
mov dword [esp + 0x68], eax
sub edx, esi
mov ebp, dword [esp + 0x50]
imul edx, ebp
sar edx, 8
add esi, edx
mov edx, ecx
sub edx, esi
sub ebx, ecx
imul ebx, ebp
sar ebx, 8
add edx, ebx
mov eax, dword [esp + 0x3c]
imul edx, eax
sar edx, 8
add esi, edx
and esi, 0xff
add dword [esp + 0x90], esi
mov ecx, dword [esp + 0x9c]
mov edx, dword [esp + 0x80]
sub edx, ecx
imul edx, ebp
sar edx, 8
add ecx, edx
mov edx, dword [esp + 0x74]
mov esi, edx
sub esi, ecx
mov ebx, dword [esp + 0x64]
sub ebx, edx
imul ebx, ebp
sar ebx, 8
add esi, ebx
imul esi, eax
sar esi, 8
add ecx, esi
movzx ecx, cl
mov edx, dword [esp + 0x94]
add edx, ecx
mov ebx, dword [esp + 0x7c]
mov ecx, dword [esp + 0x8c]
sub ebx, ecx
imul ebx, ebp
sar ebx, 8
add ecx, ebx
mov ebx, dword [esp + 0x70]
mov esi, ebx
sub esi, ecx
sub edi, ebx
imul edi, ebp
sar edi, 8
add esi, edi
imul esi, eax
sar esi, 8
add ecx, esi
movzx ecx, cl
add dword [esp + 0x88], ecx
mov ecx, dword [esp + 0x78]
mov ebx, dword [esp + 0x84]
sub ecx, ebx
imul ecx, ebp
sar ecx, 8
add ebx, ecx
mov ecx, dword [esp + 0x6c]
mov edi, ecx
sub edi, ebx
mov esi, dword [esp + 0x68]
sub esi, ecx
imul ebp, esi
sar ebp, 8
add edi, ebp
imul edi, eax
sar edi, 8
add ebx, edi
movzx ebx, bl
mov ecx, dword [esp + 0x98]
add ecx, ebx
mov eax, dword [esp + 0x90]
sar eax, 2
mov ebx, dword [esp + 0x24]
mov ebp, dword [esp + 0x40]
mov byte [ebx + ebp*4], al
sar edx, 2
mov byte [ebx + ebp*4 + 1], dl
mov eax, dword [esp + 0x88]
sar eax, 2
mov byte [ebx + ebp*4 + 2], al
sar ecx, 2
mov byte [ebx + ebp*4 + 3], cl
inc ebp
mov dword [esp + 0x40], ebp
mov eax, dword [esp + 0x48]
cmp ebp, eax
jl 0x432c59
mov eax, dword [esp + 0x1c]
add dword [esp + 0x24], eax
add dword [esp + 0x18], eax
mov edx, dword [esp + 0x14]
inc edx
mov dword [esp + 0x14], edx
mov ecx, dword [esp + 0x20]
cmp edx, ecx
jl 0x432bcd
add esp, 0xa0
pop ebx
pop ebp
pop esi
pop edi
ret
mov esi, dword [esp + 0x3c]
mov dword [esp + 0x48], eax
jmp 0x432ad1
xor edi, edi
jmp 0x432ad1
mov edx, dword [esp + 0xd4]
mov ecx, dword [esp + 0xcc]
mov dword [esp + 0x20], edi
jmp 0x432a99
xor ebp, ebp
jmp 0x432a99