Function at 0x1004d870
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebx
push esi
sub esp, 0xa4
mov eax, dword [esp + 0xb4]
mov dword [esp + 0x98], eax
mov ecx, dword [esp + 0xb0]
mov dword [esp + 0x9c], ecx
add eax, 0x1f
mov dword [esp + 0xa0], eax
mov eax, dword [0x100633ac]
mov dword [esp + 0x94], eax
mov eax, dword [esp + 0x94]
add eax, 0x2931be95
mov dword [esp + 0x90], eax
mov eax, dword [esp + 0x90]
mov eax, dword [eax]
mov dword [esp + 0x8c], eax
mov eax, dword [esp + 0x8c]
cmp eax, 1
sete al
mov byte [esp + 0x8b], al
mov cl, byte [esp + 0x8b]
xor eax, eax
test cl, 1
mov dword [esp + 0x84], eax
jne 0x1004da71
jmp 0x1004d8ff
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x98]
mov edx, dword [esp + 0xa0]
mov dword [esp + 0x80], eax
mov bh, byte [edx + eax]
mov esi, 0x1f
xor edx, edx
div esi
mov eax, dword [esp + 0x80]
mov bl, byte [ecx + edx]
mov dl, bh
xor dl, 0xff
and dl, 0xcc
mov cl, 0xff
xor cl, 0xcc
and bh, cl
mov dh, bl
xor dh, 0xff
and dh, 0xcc
and bl, cl
mov ecx, dword [esp + 0x9c]
or dl, bh
or dh, bl
xor dl, dh
mov byte [ecx + eax], dl
xor ecx, ecx
sub ecx, 1
sub eax, ecx
cmp eax, 0xd
mov dword [esp + 0x84], eax
jne 0x1004d8ff
mov eax, dword [0x10064bd8]
mov dword [esp + 0x74], eax
mov ecx, dword [0x10064bd4]
mov dword [esp + 0x78], ecx
add eax, 0xa13aa3c5
sub eax, 1
mov dword [esp + 0x7c], eax
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0x7c]
sub ecx, 0xa13aa3c5
imul eax, ecx
and eax, 1
cmp eax, 0
sete al
mov byte [esp + 0x73], al
mov al, byte [esp + 0x73]
mov ecx, dword [esp + 0x78]
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
mov byte [esp + 0x71], dl
xor al, cl
mov byte [esp + 0x72], al
mov cl, byte [esp + 0x72]
mov al, byte [esp + 0x71]
or al, cl
mov byte [esp + 0x70], al
mov al, byte [esp + 0x70]
test al, 1
jne 0x1004d9e9
jmp 0x1004dca6
mov eax, dword [0x100633ac]
mov dword [eax + 0x2931be95], 1
mov eax, dword [0x10064bd8]
mov dword [esp + 0x64], eax
mov eax, dword [0x10064bd4]
mov dword [esp + 0x68], eax
xor eax, eax
sub eax, 1
mov dword [esp + 0x6c], eax
mov ecx, dword [esp + 0x6c]
mov eax, dword [esp + 0x64]
add eax, ecx
mov dword [esp + 0x60], eax
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0x60]
mov eax, dword [esp + 0x64]
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
mov byte [esp + 0x5e], dl
xor al, cl
mov byte [esp + 0x5f], al
mov cl, byte [esp + 0x5f]
mov al, byte [esp + 0x5e]
or al, cl
mov byte [esp + 0x5d], al
mov al, byte [esp + 0x5d]
test al, 1
jne 0x1004da6c
jmp 0x1004dca6
jmp 0x1004da71
mov eax, dword [0x10064bd8]
mov dword [esp + 0x50], eax
mov ecx, dword [0x10064bd4]
mov dword [esp + 0x54], ecx
add eax, 0x8da5edac
sub eax, 1
sub eax, 0x8da5edac
mov dword [esp + 0x58], eax
mov ecx, dword [esp + 0x58]
mov eax, dword [esp + 0x50]
imul eax, ecx
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x4c]
and ecx, 1
cmp ecx, 0
sete cl
mov byte [esp + 0x4a], cl
cmp eax, 0xa
setl al
mov byte [esp + 0x4b], al
mov dl, byte [esp + 0x4b]
mov cl, byte [esp + 0x4a]
mov al, cl
and al, dl
xor cl, dl
or al, cl
mov byte [esp + 0x49], al
mov al, byte [esp + 0x49]
test al, 1
jne 0x1004dae8
jmp 0x1004dcc9
mov eax, dword [0x10064bd8]
mov dword [esp + 0x40], eax
mov eax, dword [0x10064bd4]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x40]
add eax, 0x3771bd8a
sub eax, 1
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x3c]
sub eax, 0x3771bd8a
mov dword [esp + 0x38], eax
mov ecx, dword [esp + 0x38]
mov eax, dword [esp + 0x40]
imul eax, ecx
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x34]
and ecx, 1
cmp ecx, 0
sete cl
mov byte [esp + 0x32], cl
cmp eax, 0xa
setl al
mov byte [esp + 0x33], al
mov dl, byte [esp + 0x33]
mov cl, byte [esp + 0x32]
mov al, cl
and al, dl
xor cl, dl
or al, cl
test al, 1
jne 0x1004db62
jmp 0x1004dcc9
mov eax, dword [0x10064bd8]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x2c]
mov ecx, dword [0x10064bd4]
mov dword [esp + 0x24], ecx
mov ecx, eax
sub ecx, 0xb9759132
sub ecx, 1
add ecx, 0xb9759132
imul eax, ecx
and eax, 1
cmp eax, 0
sete al
mov byte [esp + 0x2b], al
mov al, byte [esp + 0x2b]
mov ecx, dword [esp + 0x24]
cmp ecx, 0xa
setl cl
mov byte [esp + 0x1f], cl
xor al, 0xff
mov byte [esp + 0x20], al
xor cl, 0xff
mov byte [esp + 0x21], cl
mov cl, 1
xor cl, 0
mov byte [esp + 0x22], cl
and al, 0
mov byte [esp + 0x23], al
mov cl, byte [esp + 0x21]
mov al, byte [esp + 0x20]
mov dl, byte [esp + 0x23]
mov bl, byte [esp + 0x22]
mov ch, byte [esp + 0x1f]
mov dh, byte [esp + 0x2b]
and dh, bl
mov ah, cl
and ah, 0
and ch, bl
or dl, dh
or ah, ch
xor dl, ah
mov byte [esp + 0x1d], dl
or al, cl
mov byte [esp + 0x1e], al
mov al, byte [esp + 0x22]
mov cl, byte [esp + 0x1e]
xor cl, 0xff
mov byte [esp + 0x1b], cl
or al, 0
mov byte [esp + 0x1c], al
mov al, byte [esp + 0x1d]
mov dl, byte [esp + 0x1c]
mov cl, byte [esp + 0x1b]
and cl, dl
or al, cl
test al, 1
jne 0x1004dc2b
jmp 0x1004dcce
mov eax, dword [0x10064bd8]
mov dword [esp + 0x10], eax
mov eax, dword [0x10064bd4]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x10]
mov ecx, eax
add ecx, 0xe10d6b6d
sub ecx, 1
sub ecx, 0xe10d6b6d
imul eax, ecx
and eax, 1
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
cmp ecx, 0
sete cl
mov byte [esp + 0xa], cl
cmp eax, 0xa
setl al
mov byte [esp + 0xb], al
mov dl, byte [esp + 0xb]
mov cl, byte [esp + 0xa]
mov al, cl
and al, dl
xor cl, dl
or al, cl
mov byte [esp + 9], al
mov al, byte [esp + 9]
test al, 1
jne 0x1004dc9d
jmp 0x1004dcce
add esp, 0xa4
pop esi
pop ebx
ret
mov eax, dword [0x100633ac]
mov dword [esp + 4], eax
mov eax, dword [esp + 4]
add eax, 0x2931be95
mov dword [esp], eax
mov eax, dword [esp]
mov dword [eax], 1
jmp 0x1004d9e9
jmp 0x1004dae8
jmp 0x1004dc2b