Function at 0x10048a00
Capabilities:
Encode data using xor
Encrypt data using rc4 ksa
Resolve function by parsing pe exports

Disassembly:
push ebx
push esi
sub esp, 0x164
mov eax, dword [esp + 0x174]
mov dword [esp + 0x158], eax
mov ecx, dword [esp + 0x170]
mov dword [esp + 0x15c], ecx
add eax, 0x1f
mov dword [esp + 0x160], eax
mov eax, dword [0x1006338c]
mov dword [esp + 0x154], eax
mov eax, dword [esp + 0x154]
add eax, 0x7202ca9
mov dword [esp + 0x150], eax
mov eax, dword [esp + 0x150]
mov eax, dword [eax]
mov dword [esp + 0x14c], eax
mov eax, dword [esp + 0x14c]
cmp eax, 1
sete al
mov byte [esp + 0x14b], al
mov cl, byte [esp + 0x14b]
xor eax, eax
test cl, 1
mov dword [esp + 0x144], eax
jne 0x10048e87
jmp 0x10048a8f
mov eax, dword [esp + 0x144]
mov ecx, dword [esp + 0x158]
mov edx, dword [esp + 0x160]
mov dword [esp + 0x140], eax
mov bh, byte [edx + eax]
mov esi, 0x1f
xor edx, edx
div esi
mov eax, dword [esp + 0x140]
mov bl, byte [ecx + edx]
mov dl, bh
xor dl, 0xff
and dl, 0xd3
mov cl, 0xff
xor cl, 0xd3
and bh, cl
mov dh, bl
xor dh, 0xff
and dh, 0xd3
and bl, cl
mov ecx, dword [esp + 0x15c]
or dl, bh
or dh, bl
xor dl, dh
mov byte [ecx + eax], dl
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, 1
add ecx, eax
xor eax, eax
sub eax, ecx
cmp eax, 0x1c
mov dword [esp + 0x144], eax
jne 0x10048a8f
mov eax, dword [0x10064c18]
mov dword [esp + 0x134], eax
mov eax, dword [0x10064c14]
mov dword [esp + 0x138], eax
xor eax, eax
sub eax, 1
mov dword [esp + 0x13c], eax
mov ecx, dword [esp + 0x13c]
mov eax, dword [esp + 0x134]
add eax, ecx
mov dword [esp + 0x130], eax
mov ecx, dword [esp + 0x130]
mov eax, dword [esp + 0x134]
imul eax, ecx
and eax, 1
mov dword [esp + 0x12c], eax
mov eax, dword [esp + 0x138]
mov ecx, dword [esp + 0x12c]
cmp ecx, 0
sete cl
cmp eax, 0xa
setl dl
mov al, cl
and al, dl
xor cl, dl
or al, cl
mov byte [esp + 0x12b], al
mov al, byte [esp + 0x12b]
test al, 1
jne 0x10048b9c
jmp 0x100496c2
mov eax, dword [0x10064c18]
mov ecx, dword [0x10064c14]
mov dword [esp + 0x120], ecx
mov ecx, eax
sub ecx, 0xafae931d
sub ecx, 1
add ecx, 0xafae931d
imul eax, ecx
and eax, 1
mov dword [esp + 0x124], eax
mov eax, dword [esp + 0x124]
cmp eax, 0
sete al
mov byte [esp + 0x11f], al
mov cl, byte [esp + 0x11f]
mov eax, dword [esp + 0x120]
cmp eax, 0xa
setl dl
mov al, cl
xor al, 0xff
mov byte [esp + 0x119], al
mov ch, dl
xor ch, 0xff
mov byte [esp + 0x11a], ch
mov ah, 1
xor ah, 0
mov byte [esp + 0x11b], ah
and al, 0
and cl, ah
and ch, 0
mov byte [esp + 0x11c], ch
and dl, ah
mov byte [esp + 0x11d], dl
or al, cl
mov byte [esp + 0x11e], al
mov cl, byte [esp + 0x11a]
mov al, byte [esp + 0x119]
mov dl, byte [esp + 0x11e]
mov ch, byte [esp + 0x11d]
mov ah, byte [esp + 0x11c]
or ah, ch
xor dl, ah
mov byte [esp + 0x117], dl
or al, cl
mov byte [esp + 0x118], al
mov al, byte [esp + 0x117]
mov dl, byte [esp + 0x11b]
mov cl, byte [esp + 0x118]
xor cl, 0xff
or dl, 0
and cl, dl
or al, cl
mov byte [esp + 0x116], al
mov al, byte [esp + 0x116]
test al, 1
jne 0x10048ca8
jmp 0x100496c2
mov eax, dword [0x10064c18]
mov dword [esp + 0x10c], eax
mov eax, dword [0x10064c14]
mov dword [esp + 0x110], eax
mov eax, dword [esp + 0x10c]
sub eax, 0xb8d41c79
mov dword [esp + 0x108], eax
mov eax, dword [esp + 0x108]
sub eax, 1
mov dword [esp + 0x104], eax
mov eax, dword [esp + 0x104]
add eax, 0xb8d41c79
mov dword [esp + 0x100], eax
mov eax, dword [esp + 0x110]
mov edx, dword [esp + 0x100]
mov ecx, dword [esp + 0x10c]
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov dl, dh
xor dl, 0xff
mov cl, 1
xor cl, 0
mov ah, al
and ah, 0
and bl, cl
mov ch, dl
and ch, 0
and dh, cl
or ah, bl
or ch, dh
xor ah, ch
mov byte [esp + 0xfe], ah
or al, dl
xor al, 0xff
or cl, 0
and al, cl
mov byte [esp + 0xff], al
mov cl, byte [esp + 0xff]
mov al, byte [esp + 0xfe]
or al, cl
test al, 1
jne 0x10048d74
jmp 0x1004969a
mov eax, dword [0x1006338c]
mov dword [esp + 0xf8], eax
mov eax, dword [esp + 0xf8]
mov dword [eax + 0x7202ca9], 1
mov eax, dword [0x10064c18]
mov dword [esp + 0xf0], eax
mov eax, dword [0x10064c14]
mov dword [esp + 0xf4], eax
mov ecx, dword [esp + 0xf4]
mov eax, dword [esp + 0xf0]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
mov byte [esp + 0xea], al
cmp ecx, 0xa
setl cl
mov byte [esp + 0xeb], cl
xor al, 0xff
mov byte [esp + 0xec], al
xor cl, 0xff
mov byte [esp + 0xed], cl
mov cl, 1
xor cl, 1
mov byte [esp + 0xee], cl
and al, 0xff
mov byte [esp + 0xef], al
mov al, byte [esp + 0xef]
mov ch, byte [esp + 0xee]
mov dl, byte [esp + 0xeb]
mov cl, byte [esp + 0xed]
mov ah, byte [esp + 0xea]
and ah, ch
and cl, 0xff
and dl, ch
or al, ah
or cl, dl
xor al, cl
mov byte [esp + 0xe9], al
mov al, byte [esp + 0xe9]
mov dl, byte [esp + 0xee]
mov ah, byte [esp + 0xed]
mov cl, byte [esp + 0xec]
or cl, ah
xor cl, 0xff
or dl, 1
and cl, dl
or al, cl
mov byte [esp + 0xe8], al
mov al, byte [esp + 0xe8]
test al, 1
jne 0x10048e82
jmp 0x1004969a
jmp 0x10048e87
mov eax, dword [0x10064c18]
mov dword [esp + 0xe4], eax
mov eax, dword [0x10064c14]
mov dword [esp + 0xe0], eax
mov eax, dword [esp + 0xe4]
xor ecx, ecx
sub ecx, 1
add eax, ecx
mov dword [esp + 0xdc], eax
mov eax, dword [esp + 0xe0]
mov edx, dword [esp + 0xdc]
mov ecx, dword [esp + 0xe4]
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
mov byte [esp + 0xda], cl
cmp eax, 0xa
setl al
mov byte [esp + 0xdb], al
mov cl, byte [esp + 0xdb]
mov al, byte [esp + 0xda]
mov dl, al
and dl, cl
mov byte [esp + 0xd8], dl
xor al, cl
mov byte [esp + 0xd9], al
mov cl, byte [esp + 0xd9]
mov al, byte [esp + 0xd8]
or al, cl
test al, 1
jne 0x10048f28
jmp 0x100496c7
mov eax, dword [0x10064c18]
mov dword [esp + 0xd4], eax
mov eax, dword [0x10064c14]
mov dword [esp + 0xd0], eax
mov eax, dword [esp + 0xd4]
mov ecx, eax
add ecx, 0xb5575ce3
sub ecx, 1
sub ecx, 0xb5575ce3
imul eax, ecx
and eax, 1
mov dword [esp + 0xcc], eax
mov ecx, dword [esp + 0xd0]
mov eax, dword [esp + 0xcc]
cmp eax, 0
sete ah
cmp ecx, 0xa
setl al
mov ch, ah
xor ch, 0xff
mov byte [esp + 0xc5], ch
mov dl, al
xor dl, 0xff
mov byte [esp + 0xc6], dl
mov cl, 1
xor cl, 1
mov byte [esp + 0xc7], cl
and ch, 0xff
mov byte [esp + 0xc8], ch
and ah, cl
mov byte [esp + 0xc9], ah
and dl, 0xff
mov byte [esp + 0xca], dl
and al, cl
mov byte [esp + 0xcb], al
mov cl, byte [esp + 0xcb]
mov al, byte [esp + 0xca]
mov ah, byte [esp + 0xc9]
mov dl, byte [esp + 0xc8]
or dl, ah
mov byte [esp + 0xc3], dl
or al, cl
mov byte [esp + 0xc4], al
mov dl, byte [esp + 0xc7]
mov ah, byte [esp + 0xc6]
mov cl, byte [esp + 0xc5]
mov ch, byte [esp + 0xc4]
mov al, byte [esp + 0xc3]
xor al, ch
or cl, ah
xor cl, 0xff
or dl, 1
and cl, dl
or al, cl
test al, 1
jne 0x10049035
jmp 0x100496c7
mov eax, dword [0x10064c18]
mov dword [esp + 0xb8], eax
mov eax, dword [0x10064c14]
mov dword [esp + 0xbc], eax
mov eax, dword [esp + 0xb8]
sub eax, 0xd9deef3b
sub eax, 1
add eax, 0xd9deef3b
mov dword [esp + 0xb4], eax
mov eax, dword [esp + 0xbc]
mov edx, dword [esp + 0xb4]
mov ecx, dword [esp + 0xb8]
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
mov byte [esp + 0xaf], cl
cmp eax, 0xa
setl al
mov byte [esp + 0xb0], al
xor cl, 0xff
mov byte [esp + 0xb1], cl
xor al, 0xff
mov byte [esp + 0xb2], al
mov al, 1
xor al, 0
mov byte [esp + 0xb3], al
mov ah, byte [esp + 0xb3]
mov dl, byte [esp + 0xb0]
mov ch, byte [esp + 0xb2]
mov cl, byte [esp + 0xaf]
mov al, byte [esp + 0xb1]
and al, 0
and cl, ah
and ch, 0
mov byte [esp + 0xac], ch
and dl, ah
mov byte [esp + 0xad], dl
or al, cl
mov byte [esp + 0xae], al
mov cl, byte [esp + 0xb2]
mov al, byte [esp + 0xb1]
mov dl, byte [esp + 0xae]
mov ch, byte [esp + 0xad]
mov ah, byte [esp + 0xac]
or ah, ch
xor dl, ah
mov byte [esp + 0xaa], dl
or al, cl
mov byte [esp + 0xab], al
mov al, byte [esp + 0xaa]
mov dl, byte [esp + 0xb3]
mov cl, byte [esp + 0xab]
xor cl, 0xff
or dl, 0
and cl, dl
or al, cl
test al, 1
jne 0x10049161
jmp 0x100493f2
mov eax, dword [0x10064c18]
mov dword [esp + 0x9c], eax
mov ecx, dword [0x10064c14]
mov dword [esp + 0xa0], ecx
sub eax, 0x3f15dd15
sub eax, 1
add eax, 0x3f15dd15
mov dword [esp + 0xa4], eax
mov ecx, dword [esp + 0xa4]
mov eax, dword [esp + 0x9c]
imul eax, ecx
and eax, 1
mov dword [esp + 0x98], eax
mov eax, dword [esp + 0x98]
cmp eax, 0
sete al
mov byte [esp + 0x97], al
mov cl, byte [esp + 0x97]
mov eax, dword [esp + 0xa0]
cmp eax, 0xa
setl al
mov byte [esp + 0x93], al
xor cl, 0xff
mov byte [esp + 0x94], cl
xor al, 0xff
mov byte [esp + 0x95], al
mov al, 1
xor al, 0
mov byte [esp + 0x96], al
mov cl, byte [esp + 0x95]
mov al, byte [esp + 0x94]
mov bl, byte [esp + 0x96]
mov ch, byte [esp + 0x93]
mov dh, byte [esp + 0x97]
mov dl, al
and dl, 0
and dh, bl
mov ah, cl
and ah, 0
and ch, bl
or dl, dh
or ah, ch
xor dl, ah
mov byte [esp + 0x91], dl
or al, cl
mov byte [esp + 0x92], al
mov al, byte [esp + 0x91]
mov dl, byte [esp + 0x96]
mov cl, byte [esp + 0x92]
xor cl, 0xff
or dl, 0
and cl, dl
or al, cl
test al, 1
jne 0x10049269
jmp 0x100493f2
mov eax, dword [0x10064c18]
mov ecx, dword [0x10064c14]
mov dword [esp + 0x88], ecx
mov ecx, eax
sub ecx, 0x5b64318b
sub ecx, 1
add ecx, 0x5b64318b
imul eax, ecx
and eax, 1
mov dword [esp + 0x8c], eax
mov eax, dword [esp + 0x8c]
cmp eax, 0
sete al
mov byte [esp + 0x87], al
mov al, byte [esp + 0x87]
mov ecx, dword [esp + 0x88]
cmp ecx, 0xa
setl cl
mov byte [esp + 0x85], cl
xor al, 0xff
mov byte [esp + 0x86], al
mov al, byte [esp + 0x85]
mov ah, byte [esp + 0x87]
mov ch, byte [esp + 0x86]
mov dl, al
xor dl, 0xff
mov byte [esp + 0x7f], dl
mov cl, 1
xor cl, 0
mov byte [esp + 0x80], cl
and ch, 0
mov byte [esp + 0x81], ch
and ah, cl
mov byte [esp + 0x82], ah
and dl, 0
mov byte [esp + 0x83], dl
and al, cl
mov byte [esp + 0x84], al
mov dl, byte [esp + 0x80]
mov ah, byte [esp + 0x7f]
mov cl, byte [esp + 0x86]
mov dh, byte [esp + 0x84]
mov ch, byte [esp + 0x83]
mov bl, byte [esp + 0x82]
mov al, byte [esp + 0x81]
or al, bl
or ch, dh
xor al, ch
or cl, ah
xor cl, 0xff
or dl, 0
and cl, dl
or al, cl
mov byte [esp + 0x7e], al
mov al, byte [esp + 0x7e]
test al, 1
jne 0x10049376
jmp 0x100496cc
mov eax, dword [0x10064c18]
mov dword [esp + 0x78], eax
mov eax, dword [esp + 0x78]
mov ecx, dword [0x10064c14]
mov dword [esp + 0x70], ecx
sub eax, 0x1169122f
sub eax, 1
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0x74]
add eax, 0x1169122f
mov dword [esp + 0x6c], eax
mov ecx, dword [esp + 0x6c]
mov eax, dword [esp + 0x78]
imul eax, ecx
and eax, 1
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x68]
cmp eax, 0
sete al
mov byte [esp + 0x67], al
mov cl, byte [esp + 0x67]
mov eax, dword [esp + 0x70]
cmp eax, 0xa
setl dl
mov al, cl
and al, dl
xor cl, dl
or al, cl
test al, 1
jne 0x100493e9
jmp 0x100496cc
add esp, 0x164
pop esi
pop ebx
ret
mov eax, dword [0x10064c18]
mov dword [esp + 0x58], eax
mov ecx, dword [0x10064c14]
mov dword [esp + 0x5c], ecx
add eax, 0xedf33a69
sub eax, 1
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x60]
sub ecx, 0xedf33a69
imul eax, ecx
and eax, 1
mov dword [esp + 0x54], eax
mov ecx, dword [esp + 0x5c]
mov eax, dword [esp + 0x54]
cmp eax, 0
sete al
mov byte [esp + 0x4e], al
cmp ecx, 0xa
setl cl
mov byte [esp + 0x4f], cl
xor al, 0xff
mov byte [esp + 0x50], al
xor cl, 0xff
mov byte [esp + 0x51], cl
mov cl, 1
xor cl, 0
mov byte [esp + 0x52], cl
and al, 0
mov byte [esp + 0x53], al
mov al, byte [esp + 0x51]
mov dl, byte [esp + 0x52]
mov cl, byte [esp + 0x4e]
and cl, dl
mov byte [esp + 0x4c], cl
and al, 0
mov byte [esp + 0x4d], al
mov al, byte [esp + 0x52]
mov dl, byte [esp + 0x51]
mov cl, byte [esp + 0x50]
mov ch, byte [esp + 0x4d]
mov bl, byte [esp + 0x4c]
mov ah, byte [esp + 0x53]
mov dh, byte [esp + 0x4f]
and dh, al
or ah, bl
or ch, dh
xor ah, ch
mov byte [esp + 0x49], ah
or cl, dl
xor cl, 0xff
mov byte [esp + 0x4a], cl
or al, 0
mov byte [esp + 0x4b], al
mov al, byte [esp + 0x49]
mov dl, byte [esp + 0x4b]
mov cl, byte [esp + 0x4a]
and cl, dl
or al, cl
test al, 1
jne 0x100494cd
jmp 0x100496bd
mov eax, dword [0x10064c18]
mov dword [esp + 0x40], eax
mov eax, dword [0x10064c14]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x40]
sub eax, 0x5ccccffe
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 0x44]
mov eax, dword [esp + 0x40]
mov edx, dword [esp + 0x3c]
sub edx, 1
add edx, 0x5ccccffe
imul eax, edx
and eax, 1
cmp eax, 0
sete al
mov byte [esp + 0x36], al
cmp ecx, 0xa
setl cl
mov byte [esp + 0x37], cl
xor al, 0xff
mov byte [esp + 0x38], al
xor cl, 0xff
mov byte [esp + 0x39], cl
mov cl, 1
xor cl, 0
mov byte [esp + 0x3a], cl
and al, 0
mov byte [esp + 0x3b], al
mov cl, byte [esp + 0x3a]
mov al, byte [esp + 0x37]
mov dl, byte [esp + 0x39]
mov ah, byte [esp + 0x36]
and ah, cl
mov byte [esp + 0x33], ah
and dl, 0
mov byte [esp + 0x34], dl
and al, cl
mov byte [esp + 0x35], al
mov cl, byte [esp + 0x39]
mov al, byte [esp + 0x38]
mov ch, byte [esp + 0x35]
mov ah, byte [esp + 0x34]
mov dh, byte [esp + 0x33]
mov dl, byte [esp + 0x3b]
or dl, dh
or ah, ch
xor dl, ah
mov byte [esp + 0x31], dl
or al, cl
xor al, 0xff
mov byte [esp + 0x32], al
mov al, byte [esp + 0x31]
mov cl, byte [esp + 0x32]
mov dl, byte [esp + 0x3a]
or dl, 0
and cl, dl
or al, cl
test al, 1
jne 0x100495a4
jmp 0x100496bd
mov eax, dword [0x10064c18]
mov dword [esp + 0x24], eax
mov ecx, dword [0x10064c14]
mov dword [esp + 0x28], ecx
xor ecx, ecx
sub ecx, 1
add eax, ecx
mov dword [esp + 0x2c], eax
mov ecx, dword [esp + 0x2c]
mov eax, dword [esp + 0x24]
imul eax, ecx
and eax, 1
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x20]
cmp ecx, 0
sete cl
mov byte [esp + 0x1e], cl
cmp eax, 0xa
setl al
mov byte [esp + 0x1f], al
mov dl, byte [esp + 0x1f]
mov cl, byte [esp + 0x1e]
mov al, cl
and al, dl
xor cl, dl
or al, cl
mov byte [esp + 0x1d], al
mov al, byte [esp + 0x1d]
test al, 1
jne 0x10049615
jmp 0x100496d1
mov eax, dword [0x10064c18]
mov dword [esp + 0x10], eax
mov ecx, dword [0x10064c14]
mov dword [esp + 0x14], ecx
sub eax, 0x9bca0694
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x18]
sub ecx, 1
add ecx, 0x9bca0694
imul eax, ecx
and eax, 1
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0xc]
cmp eax, 0
sete al
mov byte [esp + 0xb], al
mov eax, dword [esp + 0x14]
cmp eax, 0xa
setl al
mov byte [esp + 0xa], al
mov cl, byte [esp + 0xa]
mov al, byte [esp + 0xb]
mov dl, al
and dl, cl
mov byte [esp + 8], dl
xor al, cl
mov byte [esp + 9], al
mov cl, byte [esp + 9]
mov al, byte [esp + 8]
or al, cl
test al, 1
jne 0x10049695
jmp 0x100496d1
jmp 0x10049161
mov eax, dword [0x1006338c]
mov dword [esp + 4], eax
mov eax, dword [esp + 4]
add eax, 0x7202ca9
mov dword [esp], eax
mov eax, dword [esp]
mov dword [eax], 1
jmp 0x10048d74
jmp 0x100494cd
jmp 0x10048b9c
jmp 0x10048f28
jmp 0x10049376
jmp 0x10049615