Function at 0x1004a040
Capabilities:
Encode data using xor
Encrypt data using rc4 ksa
Resolve function by parsing pe exports

Disassembly:
push ebx
push esi
sub esp, 0xf8
mov eax, dword [esp + 0x108]
mov dword [esp + 0xe4], eax
mov eax, dword [esp + 0x104]
mov dword [esp + 0xe8], eax
mov eax, dword [0x10063c20]
mov dword [esp + 0xec], eax
mov ecx, dword [0x10063c1c]
mov dword [esp + 0xf0], ecx
sub eax, 0xa7b7565
sub eax, 1
mov dword [esp + 0xf4], eax
mov eax, dword [esp + 0xec]
mov ecx, dword [esp + 0xf4]
add ecx, 0xa7b7565
imul eax, ecx
and eax, 1
cmp eax, 0
sete al
mov byte [esp + 0xe3], al
mov al, byte [esp + 0xe3]
mov ecx, dword [esp + 0xf0]
cmp ecx, 0xa
setl cl
mov byte [esp + 0xe1], cl
and al, cl
mov byte [esp + 0xe2], al
mov cl, byte [esp + 0xe1]
mov al, byte [esp + 0xe3]
xor al, cl
mov byte [esp + 0xe0], al
mov cl, byte [esp + 0xe0]
mov al, byte [esp + 0xe2]
or al, cl
mov byte [esp + 0xdf], al
mov al, byte [esp + 0xdf]
test al, 1
jne 0x1004a119
jmp 0x1004a87a
mov eax, dword [esp + 0xe4]
add eax, 0x18
mov dword [esp + 0xc8], eax
mov eax, dword [0x10062380]
cmp dword [eax + 0x45acdeb4], 1
sete al
mov byte [esp + 0xcf], al
mov eax, dword [0x10063c20]
mov dword [esp + 0xd0], eax
mov ecx, dword [0x10063c1c]
mov dword [esp + 0xd4], ecx
add eax, 0x34c174a9
sub eax, 1
mov dword [esp + 0xd8], eax
mov eax, dword [esp + 0xd8]
sub eax, 0x34c174a9
mov dword [esp + 0xc4], eax
mov ecx, dword [esp + 0xd4]
mov edx, dword [esp + 0xc4]
mov eax, dword [esp + 0xd0]
imul eax, edx
and eax, 1
cmp eax, 0
sete al
mov byte [esp + 0xbe], al
cmp ecx, 0xa
setl cl
mov byte [esp + 0xbf], cl
xor al, 0xff
mov byte [esp + 0xc0], al
xor cl, 0xff
mov byte [esp + 0xc1], cl
mov cl, 1
xor cl, 0
mov byte [esp + 0xc2], cl
and al, 0
mov byte [esp + 0xc3], al
mov cl, byte [esp + 0xc2]
mov al, byte [esp + 0xbe]
and al, cl
mov byte [esp + 0xbd], al
mov dl, byte [esp + 0xc2]
mov ah, byte [esp + 0xc1]
mov cl, byte [esp + 0xc0]
mov bl, byte [esp + 0xbd]
mov al, byte [esp + 0xc3]
mov dh, byte [esp + 0xbf]
mov ch, ah
and ch, 0
and dh, dl
or al, bl
or ch, dh
xor al, ch
or cl, ah
xor cl, 0xff
or dl, 0
and cl, dl
or al, cl
mov byte [esp + 0xbc], al
mov al, byte [esp + 0xbc]
test al, 1
jne 0x1004a24d
jmp 0x1004a87a
mov cl, byte [esp + 0xcf]
xor eax, eax
test cl, 1
mov dword [esp + 0xb8], eax
jne 0x1004a6c4
jmp 0x1004a26b
mov eax, dword [esp + 0xb8]
mov ecx, dword [esp + 0xe4]
mov edx, dword [esp + 0xc8]
mov dword [esp + 0xb4], eax
mov bh, byte [edx + eax]
mov esi, 0x18
xor edx, edx
div esi
mov eax, dword [esp + 0xb4]
mov bl, byte [ecx + edx]
mov dl, bh
xor dl, 0xff
and dl, 0xa0
mov cl, 0xff
xor cl, 0xa0
and bh, cl
mov dh, bl
xor dh, 0xff
and dh, 0xa0
and bl, cl
mov ecx, dword [esp + 0xe8]
or dl, bh
or dh, bl
xor dl, dh
mov byte [ecx + eax], dl
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, 1
add ecx, eax
xor eax, eax
sub eax, ecx
cmp eax, 0x40
mov dword [esp + 0xb8], eax
jne 0x1004a26b
mov ecx, dword [0x10063c20]
mov eax, dword [0x10063c1c]
mov edx, ecx
add edx, 0x25cbaa1a
sub edx, 1
sub edx, 0x25cbaa1a
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
mov byte [esp + 0xb2], cl
cmp eax, 0xa
setl al
mov byte [esp + 0xb3], al
mov al, byte [esp + 0xb3]
mov cl, byte [esp + 0xb2]
xor cl, 0xff
mov byte [esp + 0xaf], cl
xor al, 0xff
mov byte [esp + 0xb0], al
mov al, 1
xor al, 0
mov byte [esp + 0xb1], al
mov cl, byte [esp + 0xb1]
mov dl, byte [esp + 0xb0]
mov al, byte [esp + 0xaf]
mov dh, byte [esp + 0xb3]
mov bl, byte [esp + 0xb2]
mov ah, al
and ah, 0
and bl, cl
mov ch, dl
and ch, 0
and dh, cl
or ah, bl
or ch, dh
xor ah, ch
mov byte [esp + 0xad], ah
or al, dl
xor al, 0xff
or cl, 0
and al, cl
mov byte [esp + 0xae], al
mov cl, byte [esp + 0xae]
mov al, byte [esp + 0xad]
or al, cl
mov byte [esp + 0xac], al
mov al, byte [esp + 0xac]
test al, 1
jne 0x1004a3c6
jmp 0x1004a6cd
mov eax, dword [0x10063c20]
mov dword [esp + 0xa4], eax
mov eax, dword [0x10063c1c]
mov dword [esp + 0xa8], eax
mov eax, dword [esp + 0xa4]
add eax, 0xcf88e7f0
sub eax, 1
sub eax, 0xcf88e7f0
mov dword [esp + 0xa0], eax
mov ecx, dword [esp + 0xa0]
mov eax, dword [esp + 0xa4]
imul eax, ecx
mov dword [esp + 0x9c], eax
mov eax, dword [esp + 0x9c]
and eax, 1
cmp eax, 0
sete al
mov byte [esp + 0x9b], al
mov cl, byte [esp + 0x9b]
mov eax, dword [esp + 0xa8]
cmp eax, 0xa
setl dl
mov al, cl
and al, dl
xor cl, dl
or al, cl
mov byte [esp + 0x9a], al
mov al, byte [esp + 0x9a]
test al, 1
jne 0x1004a45f
jmp 0x1004a89b
mov eax, dword [0x10062380]
mov dword [eax + 0x45acdeb4], 1
mov eax, dword [0x10063c20]
mov dword [esp + 0x90], eax
mov eax, dword [0x10063c1c]
mov dword [esp + 0x94], eax
mov eax, dword [esp + 0x90]
xor ecx, ecx
sub ecx, 1
add eax, ecx
mov dword [esp + 0x8c], eax
mov ecx, dword [esp + 0x8c]
mov eax, dword [esp + 0x90]
imul eax, ecx
and eax, 1
mov dword [esp + 0x88], eax
mov eax, dword [esp + 0x88]
cmp eax, 0
sete al
mov byte [esp + 0x87], al
mov cl, byte [esp + 0x87]
mov eax, dword [esp + 0x94]
cmp eax, 0xa
setl al
mov byte [esp + 0x83], al
xor cl, 0xff
mov byte [esp + 0x84], cl
xor al, 0xff
mov byte [esp + 0x85], al
mov al, 1
xor al, 1
mov byte [esp + 0x86], al
mov dl, byte [esp + 0x86]
mov ah, byte [esp + 0x85]
mov cl, byte [esp + 0x84]
mov dh, byte [esp + 0x83]
mov bl, byte [esp + 0x87]
mov al, cl
and al, 0xff
and bl, dl
mov ch, ah
and ch, 0xff
and dh, dl
or al, bl
or ch, dh
xor al, ch
or cl, ah
xor cl, 0xff
or dl, 1
and cl, dl
or al, cl
test al, 1
jne 0x1004a552
jmp 0x1004a89b
mov eax, dword [0x10063c20]
mov dword [esp + 0x74], eax
mov eax, dword [0x10063c1c]
mov dword [esp + 0x78], eax
xor eax, eax
sub eax, 1
mov dword [esp + 0x7c], eax
mov ecx, dword [esp + 0x7c]
mov eax, dword [esp + 0x74]
add eax, ecx
mov dword [esp + 0x70], eax
mov ecx, dword [esp + 0x70]
mov eax, dword [esp + 0x74]
imul eax, ecx
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0x6c]
and eax, 1
cmp eax, 0
sete al
mov byte [esp + 0x6b], al
mov eax, dword [esp + 0x78]
cmp eax, 0xa
setl al
mov byte [esp + 0x6a], al
mov dl, byte [esp + 0x6a]
mov cl, byte [esp + 0x6b]
mov al, cl
and al, dl
xor cl, dl
or al, cl
test al, 1
jne 0x1004a5c6
jmp 0x1004a6cd
mov eax, dword [0x10063c20]
mov dword [esp + 0x64], eax
mov eax, dword [0x10063c1c]
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x64]
mov ecx, eax
sub ecx, 0xdd673469
sub ecx, 1
add ecx, 0xdd673469
imul eax, ecx
and eax, 1
cmp eax, 0
sete al
mov byte [esp + 0x5f], al
mov al, byte [esp + 0x5f]
mov ecx, dword [esp + 0x60]
cmp ecx, 0xa
setl cl
mov byte [esp + 0x5d], cl
and al, cl
mov byte [esp + 0x5e], al
mov cl, byte [esp + 0x5d]
mov al, byte [esp + 0x5f]
xor al, cl
mov byte [esp + 0x5c], al
mov cl, byte [esp + 0x5c]
mov al, byte [esp + 0x5e]
or al, cl
test al, 1
jne 0x1004a63a
jmp 0x1004a8c0
mov eax, dword [0x10063c20]
mov dword [esp + 0x50], eax
mov ecx, dword [0x10063c1c]
mov dword [esp + 0x54], ecx
sub eax, 0x94013d91
sub eax, 1
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x58]
add eax, 0x94013d91
mov dword [esp + 0x4c], eax
mov ecx, dword [esp + 0x4c]
mov eax, dword [esp + 0x50]
imul eax, ecx
mov dword [esp + 0x48], eax
mov ecx, dword [esp + 0x54]
mov eax, dword [esp + 0x48]
and eax, 1
cmp eax, 0
sete al
mov byte [esp + 0x45], al
cmp ecx, 0xa
setl cl
mov byte [esp + 0x46], cl
and al, cl
mov byte [esp + 0x47], al
mov cl, byte [esp + 0x46]
mov al, byte [esp + 0x45]
xor al, cl
mov byte [esp + 0x44], al
mov cl, byte [esp + 0x44]
mov al, byte [esp + 0x47]
or al, cl
test al, 1
jne 0x1004a6bf
jmp 0x1004a8c0
jmp 0x1004a6c4
add esp, 0xf8
pop esi
pop ebx
ret
mov eax, dword [0x10063c20]
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x40]
mov ecx, dword [0x10063c1c]
mov dword [esp + 0x38], ecx
sub eax, 0x7a03dd
sub eax, 1
add eax, 0x7a03dd
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x38]
mov edx, dword [esp + 0x3c]
mov ecx, dword [esp + 0x40]
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
mov byte [esp + 0x36], cl
cmp eax, 0xa
setl al
mov byte [esp + 0x37], al
mov al, byte [esp + 0x37]
mov ah, byte [esp + 0x36]
mov ch, ah
xor ch, 0xff
mov byte [esp + 0x2f], ch
mov dl, al
xor dl, 0xff
mov byte [esp + 0x30], dl
mov cl, 1
xor cl, 1
mov byte [esp + 0x31], cl
and ch, 0xff
mov byte [esp + 0x32], ch
and ah, cl
mov byte [esp + 0x33], ah
and dl, 0xff
mov byte [esp + 0x34], dl
and al, cl
mov byte [esp + 0x35], al
mov cl, byte [esp + 0x35]
mov al, byte [esp + 0x34]
mov ah, byte [esp + 0x33]
mov dl, byte [esp + 0x32]
or dl, ah
mov byte [esp + 0x2d], dl
or al, cl
mov byte [esp + 0x2e], al
mov dl, byte [esp + 0x31]
mov ah, byte [esp + 0x30]
mov cl, byte [esp + 0x2f]
mov ch, byte [esp + 0x2e]
mov al, byte [esp + 0x2d]
xor al, ch
or cl, ah
xor cl, 0xff
or dl, 1
and cl, dl
or al, cl
test al, 1
jne 0x1004a7a3
jmp 0x1004a8c5
mov eax, dword [0x10062380]
mov dword [eax + 0x45acdeb4], 1
mov eax, dword [0x10063c20]
mov dword [esp + 0x20], eax
mov ecx, dword [0x10063c1c]
mov dword [esp + 0x24], ecx
sub eax, 0x9ec853be
sub eax, 1
add eax, 0x9ec853be
mov dword [esp + 0x28], eax
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x20]
imul eax, ecx
and eax, 1
cmp eax, 0
sete al
mov byte [esp + 0x1f], al
mov cl, byte [esp + 0x1f]
mov eax, dword [esp + 0x24]
cmp eax, 0xa
setl al
mov byte [esp + 0x1b], al
xor cl, 0xff
mov byte [esp + 0x1c], cl
xor al, 0xff
mov byte [esp + 0x1d], al
mov al, 1
xor al, 1
mov byte [esp + 0x1e], al
mov ah, byte [esp + 0x1e]
mov dl, byte [esp + 0x1b]
mov ch, byte [esp + 0x1d]
mov cl, byte [esp + 0x1f]
mov al, byte [esp + 0x1c]
and al, 0xff
and cl, ah
and ch, 0xff
mov byte [esp + 0x18], ch
and dl, ah
mov byte [esp + 0x19], dl
or al, cl
mov byte [esp + 0x1a], al
mov dl, byte [esp + 0x1e]
mov ah, byte [esp + 0x1d]
mov cl, byte [esp + 0x1c]
mov al, byte [esp + 0x1a]
mov dh, byte [esp + 0x19]
mov ch, byte [esp + 0x18]
or ch, dh
xor al, ch
or cl, ah
xor cl, 0xff
or dl, 1
and cl, dl
or al, cl
test al, 1
jne 0x1004a875
jmp 0x1004a8c5
jmp 0x1004a3c6
mov eax, dword [0x10062380]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x14]
add eax, 0x45acdeb4
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x10]
mov eax, dword [eax]
jmp 0x1004a119
mov eax, dword [0x10062380]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0xc]
add eax, 0x45acdeb4
mov dword [esp + 8], eax
mov eax, dword [esp + 8]
mov dword [eax], 1
jmp 0x1004a45f
jmp 0x1004a63a
mov eax, dword [0x10062380]
mov dword [esp + 4], eax
mov eax, dword [esp + 4]
add eax, 0x45acdeb4
mov dword [esp], eax
mov eax, dword [esp]
mov dword [eax], 1
jmp 0x1004a7a3