Function at 0x488f37
Capabilities:
Authenticate hmac
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0
push 0
sub esp, 0x2c
mov eax, dword [ebp + 0x18]
cmp eax, 6
je 0x488f59
cmp eax, 5
je 0x488f59
mov eax, 0x40
jmp 0x488f5e
mov eax, pe_nt_image_headers32
mov dword [ebp - 0xc], eax
push dword [ebp + 0x18]
call fcn.00488c60
mov dword [ebp - 0x14], eax
mov eax, 0
mov dword [ebp - 0x18], 0
mov eax, dword [ebp + 0x14]
mov edx, dword [ebp - 0xc]
cmp eax, edx
jle 0x488f9f
push dword [ebp + 0x18]
push dword [ebp + 0x14]
push dword [ebp + 0x10]
call fcn.0048960c
mov dword [ebp + 0x10], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp + 0x14], eax
push dword [ebp - 0xc]
call dword [sym.imp.MSVCRT.DLL_malloc]
add esp, 4
mov dword [ebp - 0x1c], eax
push dword [ebp - 0xc]
call dword [sym.imp.MSVCRT.DLL_malloc]
add esp, 4
mov dword [ebp - 0x20], eax
push dword [ebp - 0xc]
push 0
push dword [ebp - 0x1c]
call dword [sym.imp.MSVCRT.DLL_memset]
add esp, 0xc
push dword [ebp - 0xc]
push 0
push dword [ebp - 0x20]
call dword [sym.imp.MSVCRT.DLL_memset]
add esp, 0xc
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push dword [ebp - 0x1c]
call dword [sym.imp.MSVCRT.DLL_memcpy]
add esp, 0xc
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push dword [ebp - 0x20]
call dword [sym.imp.MSVCRT.DLL_memcpy]
add esp, 0xc
mov eax, 0
mov dword [ebp - 0x10], 0
mov eax, dword [ebp - 0xc]
cmp eax, 0
jle 0x489061
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x1c]
mov edi, dword [ebp - 0x10]
dec edi
mov al, byte [eax + edi]
xor eax, 0x36
mov edx, eax
mov eax, dword [ebp - 0x1c]
mov edi, dword [ebp - 0x10]
dec edi
mov byte [eax + edi], dl
mov eax, dword [ebp - 0x20]
mov edi, dword [ebp - 0x10]
dec edi
mov al, byte [eax + edi]
xor eax, 0x5c
mov edx, eax
mov eax, dword [ebp - 0x20]
mov edi, dword [ebp - 0x10]
dec edi
mov byte [eax + edi], dl
mov eax, dword [ebp - 0x34]
sub eax, 1
jg 0x489019
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp + 0xc]
add eax, edx
push eax
call dword [sym.imp.MSVCRT.DLL_malloc]
add esp, 4
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp + 0xc]
add eax, edx
push eax
push 0
push dword [ebp - 0x24]
call dword [sym.imp.MSVCRT.DLL_memset]
add esp, 0xc
push dword [ebp - 0xc]
push dword [ebp - 0x1c]
push dword [ebp - 0x24]
call dword [sym.imp.MSVCRT.DLL_memcpy]
add esp, 0xc
push dword [ebp + 0xc]
push dword [ebp + 8]
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0xc]
add eax, edx
push eax
call dword [sym.imp.MSVCRT.DLL_memcpy]
add esp, 0xc
push dword [ebp + 0x18]
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp + 0xc]
add eax, edx
push eax
push dword [ebp - 0x24]
call fcn.0048960c
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp - 0x14]
add eax, edx
push eax
call dword [sym.imp.MSVCRT.DLL_malloc]
add esp, 4
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp - 0x14]
add eax, edx
push eax
push 0
push dword [ebp - 0x28]
call dword [sym.imp.MSVCRT.DLL_memset]
add esp, 0xc
push dword [ebp - 0xc]
push dword [ebp - 0x20]
push dword [ebp - 0x28]
call dword [sym.imp.MSVCRT.DLL_memcpy]
add esp, 0xc
push dword [ebp - 0x14]
push dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
mov edx, dword [ebp - 0xc]
add eax, edx
push eax
call dword [sym.imp.MSVCRT.DLL_memcpy]
add esp, 0xc
push dword [ebp + 0x18]
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp - 0x14]
add eax, edx
push eax
push dword [ebp - 0x28]
call fcn.0048960c
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x18]
cmp eax, 0
je 0x489151
push dword [ebp - 0x18]
call dword [sym.imp.MSVCRT.DLL_free]
add esp, 4
push dword [ebp - 0x1c]
call dword [sym.imp.MSVCRT.DLL_free]
add esp, 4
push dword [ebp - 0x20]
call dword [sym.imp.MSVCRT.DLL_free]
add esp, 4
push dword [ebp - 0x24]
call dword [sym.imp.MSVCRT.DLL_free]
add esp, 4
push dword [ebp - 0x28]
call dword [sym.imp.MSVCRT.DLL_free]
add esp, 4
push dword [ebp - 0x2c]
call dword [sym.imp.MSVCRT.DLL_free]
add esp, 4
mov eax, dword [ebp - 0x30]
leave
ret 0x14