Function at 0x1004b1b0
Capabilities:
Encode data using xor
Encrypt data using rc4 ksa
Resolve function by parsing pe exports

Disassembly:
push ebx
push esi
sub esp, 0x138
mov eax, dword [esp + 0x148]
mov dword [esp + 0x128], eax
mov eax, dword [esp + 0x144]
mov dword [esp + 0x12c], eax
mov eax, dword [0x10064c00]
mov ecx, dword [0x10064bfc]
mov dword [esp + 0x130], ecx
mov ecx, eax
sub ecx, 0xd9ffdbb3
sub ecx, 1
add ecx, 0xd9ffdbb3
imul eax, ecx
and eax, 1
cmp eax, 0
sete al
mov byte [esp + 0x137], al
mov eax, dword [esp + 0x130]
cmp eax, 0xa
setl al
mov byte [esp + 0x127], al
mov al, byte [esp + 0x127]
mov cl, byte [esp + 0x137]
xor cl, 0xff
mov byte [esp + 0x124], cl
xor al, 0xff
mov byte [esp + 0x125], al
mov al, 1
xor al, 1
mov byte [esp + 0x126], al
mov cl, byte [esp + 0x125]
mov al, byte [esp + 0x124]
mov bl, byte [esp + 0x126]
mov ch, byte [esp + 0x127]
mov dh, byte [esp + 0x137]
mov dl, al
and dl, 0xff
and dh, bl
mov ah, cl
and ah, 0xff
and ch, bl
or dl, dh
or ah, ch
xor dl, ah
mov byte [esp + 0x122], dl
or al, cl
xor al, 0xff
mov byte [esp + 0x123], al
mov al, byte [esp + 0x122]
mov cl, byte [esp + 0x123]
mov dl, byte [esp + 0x126]
or dl, 1
and cl, dl
or al, cl
mov byte [esp + 0x121], al
mov al, byte [esp + 0x121]
test al, 1
jne 0x1004b2ca
jmp 0x1004bc42
mov eax, dword [0x10064c00]
mov dword [esp + 0x114], eax
mov ecx, dword [0x10064bfc]
mov dword [esp + 0x118], ecx
xor ecx, ecx
sub ecx, 1
add eax, ecx
mov dword [esp + 0x11c], eax
mov eax, dword [esp + 0x118]
mov edx, dword [esp + 0x11c]
mov ecx, dword [esp + 0x114]
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
mov byte [esp + 0x10f], cl
cmp eax, 0xa
setl al
mov byte [esp + 0x110], al
xor cl, 0xff
mov byte [esp + 0x111], cl
xor al, 0xff
mov byte [esp + 0x112], al
mov al, 1
xor al, 0
mov byte [esp + 0x113], al
mov cl, byte [esp + 0x113]
mov al, byte [esp + 0x110]
mov dl, byte [esp + 0x112]
mov ah, byte [esp + 0x10f]
mov ch, byte [esp + 0x111]
and ch, 0
mov byte [esp + 0x10b], ch
and ah, cl
mov byte [esp + 0x10c], ah
and dl, 0
mov byte [esp + 0x10d], dl
and al, cl
mov byte [esp + 0x10e], al
mov dl, byte [esp + 0x10e]
mov cl, byte [esp + 0x10d]
mov ah, byte [esp + 0x10c]
mov al, byte [esp + 0x10b]
or al, ah
or cl, dl
xor al, cl
mov byte [esp + 0x10a], al
mov cl, byte [esp + 0x112]
mov al, byte [esp + 0x111]
or al, cl
mov byte [esp + 0x109], al
mov al, byte [esp + 0x10a]
mov dl, byte [esp + 0x113]
mov cl, byte [esp + 0x109]
xor cl, 0xff
or dl, 0
and cl, dl
or al, cl
test al, 1
jne 0x1004b3f9
jmp 0x1004bc42
mov eax, dword [0x10064c00]
mov dword [esp + 0xfc], eax
mov ecx, dword [0x10064bfc]
mov dword [esp + 0x100], ecx
sub eax, 0xe53b6543
sub eax, 1
mov dword [esp + 0x104], eax
mov ecx, dword [esp + 0x100]
mov eax, dword [esp + 0xfc]
mov edx, dword [esp + 0x104]
add edx, 0xe53b6543
imul eax, edx
and eax, 1
cmp eax, 0
sete al
mov byte [esp + 0xf9], al
cmp ecx, 0xa
setl cl
mov byte [esp + 0xfa], cl
xor al, 0xff
mov byte [esp + 0xfb], al
mov cl, byte [esp + 0xf9]
mov ah, byte [esp + 0xfb]
mov al, byte [esp + 0xfa]
xor al, 0xff
mov byte [esp + 0xf4], al
mov dl, 1
xor dl, 1
mov byte [esp + 0xf5], dl
and ah, 0xff
mov byte [esp + 0xf6], ah
and cl, dl
mov byte [esp + 0xf7], cl
and al, 0xff
mov byte [esp + 0xf8], al
mov cl, byte [esp + 0xf7]
mov al, byte [esp + 0xf6]
mov ah, byte [esp + 0xf5]
mov dl, byte [esp + 0xfa]
and dl, ah
mov byte [esp + 0xf2], dl
or al, cl
mov byte [esp + 0xf3], al
mov dl, byte [esp + 0xf5]
mov ah, byte [esp + 0xf4]
mov cl, byte [esp + 0xfb]
mov al, byte [esp + 0xf3]
mov dh, byte [esp + 0xf2]
mov ch, byte [esp + 0xf8]
or ch, dh
xor al, ch
or cl, ah
xor cl, 0xff
or dl, 1
and cl, dl
or al, cl
mov byte [esp + 0xf1], al
mov al, byte [esp + 0xf1]
test al, 1
jne 0x1004b52e
jmp 0x1004bc19
mov eax, dword [esp + 0x128]
add eax, 0x19
mov dword [esp + 0xe8], eax
mov eax, dword [0x10063398]
mov dword [esp + 0xec], eax
mov eax, dword [esp + 0xec]
mov eax, dword [eax + 0x1ecec94]
mov dword [esp + 0xe4], eax
mov eax, dword [esp + 0xe4]
cmp eax, 1
sete al
mov byte [esp + 0xd7], al
mov eax, dword [0x10064c00]
mov dword [esp + 0xd8], eax
mov ecx, dword [0x10064bfc]
mov dword [esp + 0xdc], ecx
xor ecx, ecx
sub ecx, 1
add eax, ecx
mov dword [esp + 0xe0], eax
mov ecx, dword [esp + 0xdc]
mov edx, dword [esp + 0xe0]
mov eax, dword [esp + 0xd8]
imul eax, edx
and eax, 1
cmp eax, 0
sete al
mov byte [esp + 0xd4], al
cmp ecx, 0xa
setl cl
mov byte [esp + 0xd5], cl
and al, cl
mov byte [esp + 0xd6], al
mov cl, byte [esp + 0xd5]
mov al, byte [esp + 0xd4]
xor al, cl
mov byte [esp + 0xd3], al
mov cl, byte [esp + 0xd3]
mov al, byte [esp + 0xd6]
or al, cl
test al, 1
jne 0x1004b60c
jmp 0x1004bc19
mov eax, dword [0x10064c00]
mov dword [esp + 0xc4], eax
mov eax, dword [0x10064bfc]
mov dword [esp + 0xc8], eax
xor eax, eax
sub eax, 1
mov dword [esp + 0xcc], eax
mov eax, dword [esp + 0xc4]
mov edx, dword [esp + 0xcc]
mov ecx, eax
add ecx, edx
imul eax, ecx
mov dword [esp + 0xc0], eax
mov eax, dword [esp + 0xc0]
and eax, 1
mov dword [esp + 0xbc], eax
mov ecx, dword [esp + 0xc8]
mov eax, dword [esp + 0xbc]
cmp eax, 0
sete al
mov byte [esp + 0xb6], al
cmp ecx, 0xa
setl cl
mov byte [esp + 0xb7], cl
xor al, 0xff
mov byte [esp + 0xb8], al
xor cl, 0xff
mov byte [esp + 0xb9], cl
mov cl, 1
xor cl, 1
mov byte [esp + 0xba], cl
and al, 0xff
mov byte [esp + 0xbb], al
mov al, byte [esp + 0xba]
mov dl, byte [esp + 0xb9]
mov cl, byte [esp + 0xb8]
mov ah, byte [esp + 0xbb]
mov dh, byte [esp + 0xb7]
mov bl, byte [esp + 0xb6]
and bl, al
mov ch, dl
and ch, 0xff
and dh, al
or ah, bl
or ch, dh
xor ah, ch
mov byte [esp + 0xb3], ah
or cl, dl
xor cl, 0xff
mov byte [esp + 0xb4], cl
or al, 1
mov byte [esp + 0xb5], al
mov al, byte [esp + 0xb3]
mov dl, byte [esp + 0xb5]
mov cl, byte [esp + 0xb4]
and cl, dl
or al, cl
test al, 1
jne 0x1004b728
jmp 0x1004bc47
mov eax, dword [0x10064c00]
mov dword [esp + 0xa8], eax
mov eax, dword [0x10064bfc]
mov dword [esp + 0xac], eax
mov eax, dword [esp + 0xa8]
sub eax, 0x6b360cd6
mov dword [esp + 0xa4], eax
mov eax, dword [esp + 0xa8]
mov ecx, dword [esp + 0xa4]
sub ecx, 1
add ecx, 0x6b360cd6
imul eax, ecx
mov dword [esp + 0xa0], eax
mov ecx, dword [esp + 0xac]
mov eax, dword [esp + 0xa0]
and eax, 1
cmp eax, 0
sete al
mov byte [esp + 0x9d], al
cmp ecx, 0xa
setl cl
mov byte [esp + 0x9e], cl
and al, cl
mov byte [esp + 0x9f], al
mov al, byte [esp + 0x9f]
mov dl, byte [esp + 0x9e]
mov cl, byte [esp + 0x9d]
xor cl, dl
or al, cl
mov byte [esp + 0x9c], al
mov al, byte [esp + 0x9c]
test al, 1
jne 0x1004b7dc
jmp 0x1004bc47
mov eax, dword [0x10064c00]
mov dword [esp + 0x90], eax
mov eax, dword [0x10064bfc]
mov dword [esp + 0x94], eax
xor eax, eax
sub eax, 1
mov dword [esp + 0x98], eax
mov ecx, dword [esp + 0x98]
mov eax, dword [esp + 0x90]
add eax, ecx
mov dword [esp + 0x8c], eax
mov ecx, dword [esp + 0x8c]
mov eax, dword [esp + 0x90]
imul eax, ecx
and eax, 1
cmp eax, 0
sete al
mov byte [esp + 0x8b], al
mov cl, byte [esp + 0x8b]
mov eax, dword [esp + 0x94]
cmp eax, 0xa
setl dl
mov al, cl
and al, dl
xor cl, dl
or al, cl
mov byte [esp + 0x8a], al
mov al, byte [esp + 0x8a]
test al, 1
jne 0x1004b86f
jmp 0x1004bc3d
mov eax, dword [0x10064c00]
mov dword [esp + 0x7c], eax
mov ecx, dword [0x10064bfc]
mov dword [esp + 0x80], ecx
add eax, 0x222eb24d
sub eax, 1
sub eax, 0x222eb24d
mov dword [esp + 0x84], eax
mov ecx, dword [esp + 0x84]
mov eax, dword [esp + 0x7c]
imul eax, ecx
mov dword [esp + 0x78], eax
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x78]
and ecx, 1
cmp ecx, 0
sete cl
mov byte [esp + 0x76], cl
cmp eax, 0xa
setl al
mov byte [esp + 0x77], al
mov cl, byte [esp + 0x77]
mov al, byte [esp + 0x76]
mov dl, al
and dl, cl
mov byte [esp + 0x74], dl
xor al, cl
mov byte [esp + 0x75], al
mov cl, byte [esp + 0x75]
mov al, byte [esp + 0x74]
or al, cl
mov byte [esp + 0x73], al
mov al, byte [esp + 0x73]
test al, 1
jne 0x1004b902
jmp 0x1004bc3d
mov cl, byte [esp + 0xd7]
xor eax, eax
test cl, 1
mov dword [esp + 0x6c], eax
jne 0x1004b9b0
jmp 0x1004b91d
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x128]
mov edx, dword [esp + 0xe8]
mov dword [esp + 0x68], eax
mov bh, byte [edx + eax]
mov esi, 0x19
xor edx, edx
div esi
mov eax, dword [esp + 0x68]
mov bl, byte [ecx + edx]
mov dl, bh
xor dl, 0xff
and dl, 0xf6
mov cl, 0xff
xor cl, 0xf6
and bh, cl
mov dh, bl
xor dh, 0xff
and dh, 0xf6
and bl, cl
mov ecx, dword [esp + 0x12c]
or dl, bh
or dh, bl
xor dl, dh
mov byte [ecx + eax], dl
add eax, 0x1bd909d6
add eax, 1
sub eax, 0x1bd909d6
cmp eax, 0x8d
mov dword [esp + 0x6c], eax
jne 0x1004b91d
mov eax, dword [0x10063398]
mov dword [esp + 0x64], eax
mov eax, dword [esp + 0x64]
add eax, 0x1ecec94
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x60]
mov dword [eax], 1
jmp 0x1004b9b0
mov eax, dword [0x10064c00]
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x5c]
mov ecx, dword [0x10064bfc]
mov dword [esp + 0x54], ecx
add eax, 0x76ec199
mov dword [esp + 0x58], eax
mov ecx, dword [esp + 0x54]
mov eax, dword [esp + 0x5c]
mov edx, dword [esp + 0x58]
sub edx, 1
sub edx, 0x76ec199
imul eax, edx
and eax, 1
cmp eax, 0
sete al
mov byte [esp + 0x4e], al
cmp ecx, 0xa
setl cl
mov byte [esp + 0x4f], cl
xor al, 0xff
mov byte [esp + 0x50], al
xor cl, 0xff
mov byte [esp + 0x51], cl
mov cl, 1
xor cl, 0
mov byte [esp + 0x52], cl
and al, 0
mov byte [esp + 0x53], al
mov al, byte [esp + 0x53]
mov ch, byte [esp + 0x52]
mov dl, byte [esp + 0x4f]
mov cl, byte [esp + 0x51]
mov ah, byte [esp + 0x4e]
and ah, ch
and cl, 0
and dl, ch
or al, ah
or cl, dl
xor al, cl
mov byte [esp + 0x4d], al
mov al, byte [esp + 0x4d]
mov dl, byte [esp + 0x52]
mov ah, byte [esp + 0x51]
mov cl, byte [esp + 0x50]
or cl, ah
xor cl, 0xff
or dl, 0
and cl, dl
or al, cl
mov byte [esp + 0x4c], al
mov al, byte [esp + 0x4c]
test al, 1
jne 0x1004ba71
jmp 0x1004bc38
mov eax, dword [0x10064c00]
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x48]
mov ecx, dword [0x10064bfc]
mov dword [esp + 0x40], ecx
sub eax, 0x9f367a6e
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x44]
sub eax, 1
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x3c]
add eax, 0x9f367a6e
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x40]
mov edx, dword [esp + 0x38]
mov ecx, dword [esp + 0x48]
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
cmp eax, 0xa
setl dl
mov al, cl
and al, dl
xor cl, dl
or al, cl
mov byte [esp + 0x37], al
mov al, byte [esp + 0x37]
test al, 1
jne 0x1004bae4
jmp 0x1004bc38
mov eax, dword [0x10064c00]
mov dword [esp + 0x2c], eax
mov eax, dword [0x10064bfc]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x2c]
xor edx, edx
sub edx, 1
mov ecx, eax
add ecx, edx
imul eax, ecx
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x28]
and eax, 1
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x24]
cmp ecx, 0
sete cl
mov byte [esp + 0x22], cl
cmp eax, 0xa
setl al
mov byte [esp + 0x23], al
mov dl, byte [esp + 0x23]
mov cl, byte [esp + 0x22]
mov al, cl
and al, dl
xor cl, dl
or al, cl
mov byte [esp + 0x21], al
mov al, byte [esp + 0x21]
test al, 1
jne 0x1004bb56
jmp 0x1004bc4c
mov eax, dword [0x10064c00]
mov dword [esp + 0x14], eax
mov ecx, dword [0x10064bfc]
mov dword [esp + 0x18], ecx
sub eax, 0x35999ed0
sub eax, 1
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x1c]
add ecx, 0x35999ed0
imul eax, ecx
and eax, 1
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x10]
cmp eax, 0
sete al
mov byte [esp + 0xd], al
cmp ecx, 0xa
setl cl
mov byte [esp + 0xe], cl
xor al, 0xff
mov byte [esp + 0xf], al
mov dl, byte [esp + 0xe]
mov ah, byte [esp + 0xd]
mov al, byte [esp + 0xf]
mov cl, dl
xor cl, 0xff
mov byte [esp + 0xa], cl
mov ch, 1
xor ch, 0
mov byte [esp + 0xb], ch
and al, 0
and ah, ch
and cl, 0
and dl, ch
or al, ah
or cl, dl
xor al, cl
mov byte [esp + 0xc], al
mov cl, byte [esp + 0xa]
mov al, byte [esp + 0xf]
or al, cl
xor al, 0xff
mov byte [esp + 9], al
mov al, byte [esp + 0xc]
mov cl, byte [esp + 9]
mov dl, byte [esp + 0xb]
or dl, 0
and cl, dl
or al, cl
test al, 1
jne 0x1004bc10
jmp 0x1004bc4c
add esp, 0x138
pop esi
pop ebx
ret
mov eax, dword [0x10063398]
mov dword [esp + 4], eax
mov eax, dword [esp + 4]
add eax, 0x1ecec94
mov dword [esp], eax
mov eax, dword [esp]
mov eax, dword [eax]
jmp 0x1004b52e
jmp 0x1004ba71
jmp 0x1004b86f
jmp 0x1004b2ca
jmp 0x1004b728
jmp 0x1004bb56