Function at 0x100048b5
Capabilities:
Encode data using xor
Encrypt data using rc4 ksa

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x364
mov ecx, str.com.avast.ipm.ClientParameters.GoogleAccount
push esi
push edi
push 0x63
pop edx
push 9
pop esi
lea eax, [edx - 0x30]
cmp ax, si
ja 0x100048e7
add ecx, 2
movzx eax, word [ecx]
mov edx, eax
test ax, ax
jne 0x100048cb
mov eax, dword [0x1002832c]
jmp 0x100048f1
mov eax, dword [0x1002832c]
add eax, 0x2e6c0195
push 0x41
imul esi, eax, 0x5572457b
mov ecx, 0x17a6
mov eax, str.AV_AVG_BUSINESS
pop edx
add ecx, edx
inc eax
cmp ecx, 0x1396
ja 0x10004918
movsx edx, byte [eax]
test edx, edx
jne 0x10004904
jmp 0x10004928
mov ecx, str._decoraau
call fcn.10001c70
and esi, 0xf2c6643f
and esi, 0xdf0f9ce9
imul eax, esi, 0x9245ee45
mov dword [ebp - 8], eax
call fcn.100012e2
mov al, byte [str.Obsolete_software_key]
xor ecx, ecx
mov edx, ecx
test al, al
je 0x1000495a
inc edx
cmp edx, 0x684
jg 0x1000496a
cmp byte [edx + str.Obsolete_software_key], cl
jne 0x10004949
mov edx, dword [ebp - 8]
or edx, 0x9edfd96f
mov esi, str.Obsolete_software_key
jmp 0x1000497e
mov edx, dword [ebp - 8]
or edx, 0x4e3ed17f
jmp 0x1000495d
sub al, 0x30
cmp al, 9
ja 0x10004984
inc esi
mov al, byte [esi]
test al, al
jne 0x10004975
jmp 0x1000498a
add edx, 0x668f5ea2
and edx, 0x64e62cf9
push ecx
call fcn.10001998
mov dword [ebp - 0x18], 6
lea edi, [ebp - 0x54]
mov dword [ebp - 0x14], 8
mov esi, str.tdes_wrap_update
mov dword [ebp - 0x10], 0x39
add esp, 4
mov dword [ebp - 0xc], 0xffffff90
movups xmm1, xmmword [ebp - 0x18]
movsd dword es:[edi], dword [esi]
push 0x18
movaps xmm0, xmm1
mov dword [ebp - 0x3c], 0xa6173473
psrldq xmm0, 8
paddd xmm1, xmm0
movsd dword es:[edi], dword [esi]
movups xmm0, xmm1
mov byte [ebp - 0x38], 0x6e
psrldq xmm0, 4
paddd xmm1, xmm0
mov dword [ebp - 0x36], 0xd426763b
movsd dword es:[edi], dword [esi]
movd eax, xmm1
mov dword [ebp - 0x32], 0xfa7dfc5c
mov word [ebp - 0x2e], 0xc2a4
add eax, 0x2a
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x40], eax
pop eax
mov dword [ebp - 0x2c], eax
movsb byte es:[edi], byte [esi]
mov byte [ebp - 0x37], al
mov edi, ecx
mov eax, ecx
or edx, 0xb7e9514
mov byte [ebp + eax - 0x198], al
xor edx, 0xdc30c3d2
inc eax
cmp eax, 0x100
jb 0x10004a14
mov dword [ebp - 8], edx
mov esi, ecx
mov dl, byte [ebp + esi - 0x198]
mov eax, esi
and eax, 0xf
movzx ecx, dl
movzx eax, byte [ebp + eax - 0x54]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [ebp + edi - 0x198]
mov byte [ebp + esi - 0x198], al
inc esi
mov byte [ebp + edi - 0x198], dl
cmp esi, 0x100
jb 0x10004a34
xor eax, eax
add dword [ebp - 8], 0x651a7650
mov dword [ebp - 0x24], eax
mov edi, eax
mov esi, eax
lea eax, [esi + 1]
movzx esi, al
mov eax, dword [ebp - 0x24]
mov cl, byte [ebp + esi - 0x198]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [ebp - 0x24], eax
mov al, byte [ebp + eax - 0x198]
mov byte [ebp + esi - 0x198], al
mov eax, dword [ebp - 0x24]
mov byte [ebp + eax - 0x198], cl
movzx eax, byte [ebp + esi - 0x198]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x198]
xor al, byte [ebp + edi - 0x3c]
mov byte [ebp + edi - 0x98], al
inc edi
cmp edi, 0x10
jb 0x10004a7d
xor edx, edx
mov dword [ebp - 0x54], 0x25
add dword [ebp - 8], 0x1f3da683
mov eax, edx
push 0xe
mov byte [ebp - 0x88], dl
pop ecx
mov dword [ebp - 0x50], 0x22
mov dword [ebp - 0x4c], 0x40
mov dword [ebp - 0x48], 0x3b
mov dword [ebp - 0x44], 0xffffff4b
sub ecx, dword [ebp + eax*4 - 0x54]
inc eax
cmp eax, 5
jl 0x10004b0c
push 6
mov dword [ebp - 0x30], ecx
lea edi, [ebp - 0x70]
pop ecx
mov esi, str.ChromeExtensionAosStatus
mov dword [ebp - 0x18], 0x5cf9e96f
rep movsd dword es:[edi], dword [esi]
push 0x63
mov dword [ebp - 0x14], 0xd03683f7
mov eax, str.com.avast.ipm.ClientParameters.GoogleAccount
mov dword [ebp - 0x10], 0x232004ed
movsb byte es:[edi], byte [esi]
imul esi, dword [ebp - 8], 0x3c6bd58e
mov edi, 0x811
mov dword [ebp - 0xc], 0x350a6036
pop ecx
add edi, ecx
lea eax, [eax + 2]
cmp edi, 0xacf
ja 0x10004b6d
movzx ecx, word [eax]
test ecx, ecx
jne 0x10004b57
jmp 0x10004b7a
call fcn.10001178
xor esi, 0xbd238641
xor edx, edx
xor esi, 0x7b153435
imul esi, esi, 0xd8ec356b
push ecx
push ecx
mov ecx, esi
mov dword [ebp - 0x24], esi
call fcn.1000178a
pop ecx
pop ecx
mov dword [ebp - 0x20], edx
mov eax, edx
mov byte [ebp + eax - 0x198], al
inc eax
cmp eax, 0x100
jb 0x10004b99
mov esi, dword [ebp - 0x20]
mov edi, edx
xor edx, edx
mov cl, byte [ebp + edi - 0x198]
mov eax, edi
mov byte [ebp - 1], cl
div dword [ebp - 0x2c]
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x70]
add eax, esi
add ecx, eax
movzx esi, cl
mov al, byte [ebp + esi - 0x198]
mov byte [ebp + edi - 0x198], al
inc edi
mov al, byte [ebp - 1]
mov byte [ebp + esi - 0x198], al
cmp edi, 0x100
jb 0x10004bad
mov esi, dword [ebp - 0x24]
mov eax, 0x1920
push 0x63
pop edi
or esi, 0x421e20a9
mov edx, str.com.avast.ipm.ClientParameters.GoogleAccount
mov ecx, edi
imul eax, eax, 0x10000001
lea edx, [edx + 2]
add eax, ecx
cmp eax, 0x1c
ja 0x10004c1f
movzx ecx, word [edx]
test ecx, ecx
jne 0x10004c06
jmp 0x10004c2a
call fcn.10001178
imul esi, esi, 0x3eb97406
push 9
mov edx, edi
mov ecx, str.com.avast.ipm.ClientParameters.GoogleAccount
pop edi
lea eax, [edx - 0x30]
cmp ax, di
ja 0x10004c4b
add ecx, 2
movzx eax, word [ecx]
mov edx, eax
test ax, ax
jne 0x10004c34
jmp 0x10004c51
xor esi, 0x7f96af64
or esi, 0xb62b86a8
push ecx
mov edx, esi
call fcn.10001998
add esp, 4
and esi, 0xd9a0ad1b
imul esi, esi, 0x518fa44a
call fcn.10001866
push 0x41
mov eax, 0x1c04
mov ecx, str.AV_AVG_BUSINESS
pop edx
add eax, edx
inc ecx
cmp eax, 0x1862
ja 0x10004c93
movsx edx, byte [ecx]
test edx, edx
jne 0x10004c80
jmp 0x10004ca4
push ecx
or esi, 0x9babad65
push ecx
mov ecx, esi
call fcn.1000178a
pop ecx
pop ecx
and esi, 0xc37137f0
add esi, 0x68334834
push ecx
mov edx, esi
call fcn.10001998
add esp, 4
xor ecx, ecx
mov dword [ebp - 0x24], ecx
mov edx, ecx
mov edi, ecx
lea eax, [edx + 1]
movzx eax, al
mov dword [ebp - 0x2c], eax
mov al, byte [ebp + eax - 0x198]
movzx edx, al
mov byte [ebp - 1], al
mov eax, dword [ebp - 0x24]
add eax, edx
mov dword [ebp - 0x20], edx
movzx eax, al
mov edx, ecx
mov dword [ebp - 0x24], eax
mov eax, str.com.avast.ipm.ClientParameters.GoogleAccount
inc edx
lea eax, [eax + 2]
cmp edx, 0xb8e
jl 0x10004d02
cmp word [eax], cx
jne 0x10004cef
jmp 0x10004d0d
call fcn.100016f0
imul esi, esi, 0xa188b7c0
xor esi, 0x45eb6c6
imul esi, esi, 0x85f05ac4
push 0x100281d4
push ecx
mov edx, esi
call fcn.100013fa
mov edx, dword [ebp - 0x2c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x24]
push 0
mov al, byte [ebp + ecx - 0x198]
mov byte [ebp + edx - 0x198], al
mov al, byte [ebp - 1]
mov byte [ebp + ecx - 0x198], al
movzx eax, byte [ebp + edx - 0x198]
add eax, dword [ebp - 0x20]
movzx eax, al
pop ecx
mov al, byte [ebp + eax - 0x198]
xor al, byte [ebp + edi - 0x18]
mov byte [ebp + edi - 0x54], al
inc edi
cmp edi, 0x10
jb 0x10004cc4
push 0x24
xor eax, eax
mov dword [0x1002832c], esi
pop edi
mov byte [ebp - 0x44], al
mov esi, eax
mov dword [ebp - 0x1c], 0x26
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x14], 0x14
mov dword [ebp - 0x10], 0x42
mov dword [ebp - 0xc], 0xffffff60
sub esi, dword [ebp + eax*4 - 0x1c]
inc eax
cmp eax, 5
jl 0x10004d9f
mov ecx, dword [ebp - 0x40]
lea edx, [ebp - 0x98]
call fcn.1001b5c7
call eax
lea ecx, [ebp - 0x364]
mov dword [ebp - 0x364], 0x10010
push ecx
mov ecx, dword [ebp - 0x30]
lea edx, [ebp - 0x54]
push eax
call fcn.1001b5c7
call eax
test eax, eax
je 0x1000507e
push 0x19
xor eax, eax
mov dword [ebp - 0x34], 0x3b
pop edx
mov dword [ebp - 0x30], 0xffffffac
mov ecx, eax
add edx, dword [ebp + ecx*4 - 0x34]
inc ecx
cmp ecx, 2
jl 0x10004df5
xorps xmm1, xmm1
mov dword [ebp - 0x18], 0x34
mov dword [ebp - 0x14], 0x35
xorps xmm2, xmm2
mov dword [ebp - 0x10], 0x4e
mov ecx, eax
mov dword [ebp - 0xc], 0xffffff49
movups xmm0, xmmword [ebp - 0x18]
mov dword [ebp - 0x18], 0x1a
mov dword [ebp - 0x14], edi
psubd xmm1, xmm0
mov dword [ebp - 0x10], 0x4c
movaps xmm0, xmm1
mov dword [ebp - 0xc], 0xffffff76
psrldq xmm0, 8
paddd xmm1, xmm0
mov dword [ebp - 0x30], edx
movups xmm0, xmm1
mov dword [ebp - 0x84], 0xa
psrldq xmm0, 4
mov edx, eax
paddd xmm1, xmm0
mov dword [ebp - 0x80], 0x4f
movups xmm0, xmmword [ebp - 0x18]
mov dword [ebp - 0x7c], 0x3f
movd dword [ebp - 0x40], xmm1
xorps xmm1, xmm1
psubd xmm1, xmm0
mov dword [ebp - 0x78], 0xe
movaps xmm0, xmm1
mov dword [ebp - 0x74], 0xffffff5a
psrldq xmm0, 8
paddd xmm1, xmm0
movups xmm0, xmm1
psrldq xmm0, 4
paddd xmm1, xmm0
movd dword [ebp - 0x2c], xmm1
sub edx, dword [ebp + ecx*4 - 0x84]
inc ecx
cmp ecx, 5
jl 0x10004eb3
mov esi, dword [0x1002832c]
mov edi, eax
or esi, 0x4aa6077
mov dword [ebp - 0x20], edx
xor esi, 0x91628619
mov dword [ebp - 0x6c], 0x51
mov dword [ebp - 0x68], 7
mov ecx, eax
mov dword [ebp - 0x64], 0x34
mov dword [ebp - 0x60], 0x55
mov dword [ebp - 0x5c], 0xffffff1f
sub edi, dword [ebp + ecx*4 - 0x6c]
inc ecx
cmp ecx, 5
jl 0x10004efc
push 0x63
pop edx
mov dword [ebp - 0x18], edx
movaps xmm1, xmm2
mov dword [ebp - 0x14], 0x2c
and esi, 0x440c4082
mov dword [ebp - 0x10], 6
mov ecx, eax
mov dword [ebp - 0xc], 0xffffff6b
movups xmm0, xmmword [ebp - 0x18]
mov dword [ebp - 0x28], 0x51
mov dword [ebp - 0x24], 0xffffff4d
psubd xmm1, xmm0
movaps xmm0, xmm1
psrldq xmm0, 8
paddd xmm1, xmm0
movups xmm0, xmm1
psrldq xmm0, 4
paddd xmm1, xmm0
add edx, dword [ebp + ecx*4 - 0x28]
inc ecx
cmp ecx, 2
jl 0x10004f5a
mov dword [ebp - 0x24], edx
cmp byte [0x100281d4], al
je 0x10004f88
inc eax
cmp eax, 0xe1
jl 0x10004f82
cmp byte [eax + 0x100281d4], 0
jne 0x10004f6f
jmp 0x10004f88
imul esi, esi, 0x3e1c36b7
movzx eax, byte [str.Obsolete_software_key]
add esi, 0xb6d0e4a1
xor esi, 0xe0a9c12d
mov edx, 0x8a8
mov ecx, str.Obsolete_software_key
test eax, eax
je 0x10004fc9
add edx, eax
inc ecx
cmp edx, 0x3ec
ja 0x10004fc3
movzx eax, byte [ecx]
test eax, eax
jne 0x10004fa9
and esi, 0x3fbda692
jmp 0x10004fdb
xor esi, 0x619989d4
mov edx, str._decoraau
mov ecx, esi
call section..text
add esi, 0x2d447401
or esi, 0x366824ef
mov edx, str.Obsolete_software_key
mov ecx, 0x100281d4
mov dword [0x1002832c], esi
call fcn.10001d56
mov ecx, dword [ebp - 0x30]
mov dword [ebp - 0x18], 0x56
mov dword [ebp - 0x14], 0x1e
mov dword [ebp - 0x10], 0x22
mov dword [ebp - 0xc], 0xffffff2c
movups xmm0, xmmword [ebp - 0x18]
paddd xmm2, xmm0
movaps xmm0, xmm2
psrldq xmm0, 8
paddd xmm2, xmm0
movups xmm0, xmm2
psrldq xmm0, 4
paddd xmm2, xmm0
movd eax, xmm2
add eax, 0x3e
cmp dword [ebp - 0x360], ecx
jne 0x10005079
mov ecx, dword [ebp - 0x40]
cmp dword [ebp - 0x35c], ecx
jne 0x10005079
mov ecx, dword [ebp - 0x2c]
cmp dword [ebp - 0x358], ecx
jne 0x10005079
mov ecx, dword [ebp - 0x20]
cmp dword [ebp - 0x354], ecx
jne 0x10005079
cmp dword [ebp - 0x350], edi
jne 0x10005079
movd ecx, xmm1
cmp dword [ebp - 0x34c], ecx
je 0x10005080
mov eax, dword [ebp - 0x24]
jmp 0x10005080
mov eax, esi
pop edi
pop esi
leave
ret