Function at 0x1004e9c0
Capabilities:
Encode data using xor
Read file on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x102b8
call fcn.10087710
mov eax, dword [0x101165b0]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push esi
mov dword [ebp - 0x102b4], eax
mov eax, dword [ebp + 0x14]
mov esi, dword [eax]
push edi
mov edi, edx
lea edx, [ebx + esi + 8]
push edx
mov dword [ebp - 0x102a4], edi
mov dword [ebp - 0x102ac], ecx
mov dword [ebp - 0x102b0], eax
mov dword [ebp - 0x10288], 0
mov dword [ebp - 0x10298], esi
call fcn.10085e5d
push esi
mov dword [ebp - 0x102a8], eax
call fcn.10085e5d
push esi
mov dword [ebp - 0x1028c], eax
call fcn.10085e5d
push esi
mov dword [ebp - 0x10294], eax
call fcn.10085e5d
mov dword [ebp - 0x1029c], eax
sub edi, esi
lea eax, [edi - 1]
push eax
call fcn.10085e5d
push edi
mov esi, eax
call fcn.10085e5d
add esp, 0x18
mov dword [ebp - 0x10290], eax
test ebx, ebx
je 0x1004ea6e
push ebx
call fcn.10085e5d
add esp, 4
mov dword [ebp - 0x10288], eax
mov ecx, dword [ebp - 0x102b0]
push ecx
lea edx, [ebp - 0x10284]
push edx
call sym.cis_cc_3.2.dll_HASH_Initialize
mov eax, dword [ebp + 0xc]
add esp, 8
cmp eax, 0xffffffff
jne 0x1004eb6e
mov edi, dword [ebp - 0x102ac]
push edi
call fcn.10085a69
add esp, 4
test eax, eax
jne 0x1004ecb3
jmp 0x1004eab0
push edi
push 0x10000
lea eax, [ebp - 0x10004]
push 1
push eax
call fcn.10085d20
push edi
mov dword [ebp - 0x102a0], eax
call fcn.10085a91
add esp, 0x14
test eax, eax
jne 0x1004eb03
mov ecx, dword [ebp - 0x102a0]
push ecx
lea edx, [ebp - 0x10004]
push edx
lea eax, [ebp - 0x10284]
push eax
call sym.cis_cc_3.2.dll_HASH_Update_PCIS
push edi
call fcn.10085a69
add esp, 0x10
test eax, eax
je 0x1004eab0
jmp 0x1004ecb3
mov ecx, dword [ebp - 0x102a8]
push ecx
call fcn.10085a2f
mov edx, dword [ebp - 0x1028c]
push edx
call fcn.10085a2f
mov eax, dword [ebp - 0x10294]
push eax
call fcn.10085a2f
mov ecx, dword [ebp - 0x1029c]
push ecx
call fcn.10085a2f
push esi
call fcn.10085a2f
mov edx, dword [ebp - 0x10290]
push edx
call fcn.10085a2f
add esp, 0x18
test ebx, ebx
je 0x1004eb5b
mov eax, dword [ebp - 0x10288]
push eax
call fcn.10085a2f
add esp, 4
pop edi
or eax, 0xffffffff
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1008600b
mov esp, ebp
pop ebp
ret
cmp eax, 0x10000
jbe 0x1004ec59
lea esp, [esp]
mov edi, dword [ebp - 0x102ac]
push edi
push 0x10000
lea ecx, [ebp - 0x10004]
push 1
push ecx
call fcn.10085d20
push edi
mov dword [ebp - 0x102a0], eax
call fcn.10085a91
add esp, 0x14
test eax, eax
jne 0x1004ebea
mov edx, dword [ebp - 0x102a0]
push edx
lea eax, [ebp - 0x10004]
push eax
lea ecx, [ebp - 0x10284]
push ecx
call sym.cis_cc_3.2.dll_HASH_Update_PCIS
sub dword [ebp + 0xc], 0x10000
push edi
call fcn.10085a69
add esp, 0x10
test eax, eax
jne 0x1004ec5f
cmp dword [ebp + 0xc], 0x10000
ja 0x1004eb80
jmp 0x1004ec5f
mov edx, dword [ebp - 0x102a8]
push edx
call fcn.10085a2f
mov eax, dword [ebp - 0x1028c]
push eax
call fcn.10085a2f
mov ecx, dword [ebp - 0x10294]
push ecx
call fcn.10085a2f
mov edx, dword [ebp - 0x1029c]
push edx
call fcn.10085a2f
push esi
call fcn.10085a2f
mov eax, dword [ebp - 0x10290]
push eax
call fcn.10085a2f
add esp, 0x18
test ebx, ebx
je 0x1004eb5b
mov ecx, dword [ebp - 0x10288]
push ecx
call fcn.10085a2f
add esp, 4
pop edi
or eax, 0xffffffff
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1008600b
mov esp, ebp
pop ebp
ret
mov edi, dword [ebp - 0x102ac]
push edi
call fcn.10085a69
add esp, 4
test eax, eax
jne 0x1004ecb3
mov edx, dword [ebp + 0xc]
push edi
push edx
lea eax, [ebp - 0x10004]
push 1
push eax
call fcn.10085d20
push edi
mov dword [ebp - 0x102a0], eax
call fcn.10085a91
add esp, 0x14
test eax, eax
jne 0x1004eb03
mov ecx, dword [ebp - 0x102a0]
push ecx
lea edx, [ebp - 0x10004]
push edx
lea eax, [ebp - 0x10284]
push eax
call sym.cis_cc_3.2.dll_HASH_Update_PCIS
add esp, 0xc
mov edi, dword [ebp - 0x1029c]
lea ecx, [ebp - 0x10284]
push ecx
lea edx, [ebp - 0x10298]
push edx
push edi
call sym.cis_cc_3.2.dll_HASH_Finalize
mov ecx, dword [ebp - 0x102a4]
mov edx, dword [ebp - 0x10298]
mov eax, ecx
sub eax, ebx
sub eax, edx
sub eax, 2
mov dword [ebp - 0x102a0], eax
lea eax, [ebx + edx + 2]
add esp, 0xc
cmp ecx, eax
jae 0x1004ed5a
mov ecx, dword [ebp - 0x102a8]
push ecx
call fcn.10085a2f
mov edx, dword [ebp - 0x1028c]
push edx
call fcn.10085a2f
mov eax, dword [ebp - 0x10294]
push eax
call fcn.10085a2f
push edi
call fcn.10085a2f
push esi
call fcn.10085a2f
mov ecx, dword [ebp - 0x10290]
push ecx
call fcn.10085a2f
add esp, 0x18
test ebx, ebx
je 0x1004ed45
mov edx, dword [ebp - 0x10288]
push edx
call fcn.10085a2f
add esp, 4
pop edi
mov eax, 0xfffffbba
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1008600b
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp - 0x102b4]
cmp byte [ecx + eax - 1], 0xbc
je 0x1004edce
mov eax, dword [ebp - 0x102a8]
push eax
call fcn.10085a2f
mov ecx, dword [ebp - 0x1028c]
push ecx
call fcn.10085a2f
mov edx, dword [ebp - 0x10294]
push edx
call fcn.10085a2f
push edi
call fcn.10085a2f
push esi
call fcn.10085a2f
mov eax, dword [ebp - 0x10290]
push eax
call fcn.10085a2f
add esp, 0x18
test ebx, ebx
je 0x1004ed45
mov ecx, dword [ebp - 0x10288]
push ecx
call fcn.10085a2f
add esp, 4
pop edi
mov eax, 0xfffffbba
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1008600b
mov esp, ebp
pop ebp
ret
sub ecx, edx
lea edi, [ecx - 1]
push edi
push eax
push esi
mov dword [ebp - 0x102ac], edi
call fcn.10086490
mov edx, dword [ebp - 0x10298]
mov eax, dword [ebp - 0x102b4]
mov ecx, dword [ebp - 0x1028c]
push edx
add eax, edi
push eax
push ecx
call fcn.10086490
mov edx, dword [ebp - 0x10298]
mov eax, dword [ebp - 0x10290]
mov ecx, dword [ebp - 0x1028c]
push edx
push edi
mov edi, dword [ebp - 0x102b0]
push eax
call fcn.1004d750
mov edi, eax
add esp, 0x24
test edi, edi
je 0x1004ee90
mov ecx, dword [ebp - 0x102a8]
push ecx
call fcn.10085a2f
mov edx, dword [ebp - 0x1028c]
push edx
call fcn.10085a2f
mov eax, dword [ebp - 0x10294]
push eax
call fcn.10085a2f
mov ecx, dword [ebp - 0x1029c]
push ecx
call fcn.10085a2f
push esi
call fcn.10085a2f
mov edx, dword [ebp - 0x10290]
push edx
call fcn.10085a2f
add esp, 0x18
test ebx, ebx
je 0x1004ee7e
mov eax, dword [ebp - 0x10288]
push eax
call fcn.10085a2f
add esp, 4
mov eax, edi
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1008600b
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 0x102ac]
test ecx, ecx
je 0x1004eead
mov edi, dword [ebp - 0x10290]
mov eax, esi
sub edi, esi
mov dl, byte [edi + eax]
xor byte [eax], dl
inc eax
dec ecx
jne 0x1004eea4
mov ecx, dword [ebp - 0x102a4]
add ecx, ecx
add ecx, ecx
add ecx, ecx
sub ecx, dword [ebp + 0x10]
mov eax, 0xff
sar eax, cl
and byte [esi], al
test ebx, ebx
je 0x1004eee4
mov ecx, dword [ebp - 0x102a0]
mov eax, dword [ebp - 0x10288]
push ebx
lea edx, [ecx + esi + 1]
push edx
push eax
call fcn.10086490
add esp, 0xc
mov edi, dword [ebp - 0x102a8]
mov edx, dword [ebp - 0x1029c]
xor eax, eax
mov dword [edi], eax
mov dword [edi + 4], eax
mov ecx, dword [ebp - 0x10298]
push ecx
push edx
lea eax, [edi + 8]
push eax
call fcn.10086490
add esp, 0xc
test ebx, ebx
je 0x1004ef2a
mov ecx, dword [ebp - 0x10288]
mov edx, dword [ebp - 0x10298]
push ebx
push ecx
lea eax, [edi + edx + 8]
push eax
call fcn.10086490
add esp, 0xc
mov ecx, dword [ebp - 0x10298]
mov eax, dword [ebp - 0x102b0]
lea edx, [ebx + ecx + 8]
push eax
lea ecx, [ebp - 0x10284]
push ecx
mov dword [ebp - 0x102a4], edx
call sym.cis_cc_3.2.dll_HASH_Initialize
mov edx, dword [ebp - 0x102a4]
push edx
lea eax, [ebp - 0x10284]
push edi
push eax
call sym.cis_cc_3.2.dll_HASH_Update_PCIS
mov eax, dword [ebp - 0x10294]
lea ecx, [ebp - 0x10284]
push ecx
lea edx, [ebp - 0x102b8]
push edx
push eax
call sym.cis_cc_3.2.dll_HASH_Finalize
add esp, 0x20
cmp dword [ebp - 0x10298], 0
mov dword [ebp - 0x102a4], 0
jbe 0x1004efbd
mov eax, dword [ebp - 0x1028c]
mov edx, dword [ebp - 0x10294]
sub edx, eax
nop
mov cl, byte [eax]
cmp cl, byte [edx + eax]
jne 0x1004f021
mov ecx, dword [ebp - 0x102a4]
inc ecx
inc eax
mov dword [ebp - 0x102a4], ecx
cmp ecx, dword [ebp - 0x10298]
jb 0x1004efa0
push edi
call fcn.10085a2f
mov ecx, dword [ebp - 0x1028c]
push ecx
call fcn.10085a2f
mov edx, dword [ebp - 0x10294]
push edx
call fcn.10085a2f
mov eax, dword [ebp - 0x1029c]
push eax
call fcn.10085a2f
push esi
call fcn.10085a2f
mov ecx, dword [ebp - 0x10290]
push ecx
call fcn.10085a2f
add esp, 0x18
test ebx, ebx
je 0x1004f00f
mov edx, dword [ebp - 0x10288]
push edx
call fcn.10085a2f
add esp, 4
pop edi
xor eax, eax
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1008600b
mov esp, ebp
pop ebp
ret
push edi
call fcn.10085a2f
mov edx, dword [ebp - 0x1028c]
push edx
call fcn.10085a2f
mov eax, dword [ebp - 0x10294]
push eax
call fcn.10085a2f
mov ecx, dword [ebp - 0x1029c]
push ecx
call fcn.10085a2f
push esi
call fcn.10085a2f
mov edx, dword [ebp - 0x10290]
push edx
call fcn.10085a2f
add esp, 0x18
test ebx, ebx
je 0x1004ed45
mov eax, dword [ebp - 0x10288]
push eax
call fcn.10085a2f
mov ecx, dword [ebp - 4]
add esp, 4
pop edi
xor ecx, ebp
mov eax, 0xfffffbba
pop esi
call fcn.1008600b
mov esp, ebp
pop ebp
ret