Function at 0x4eb375
Capabilities:
Encode data using xor

Disassembly:
push edx
lea esp, [esp + 4]
mov eax, 0x403
jmp 0x4eb763
call fcn.004eb3f5
sub esp, 6
mov word [esp + 2], sp
lea esp, [esp + 5]
lea esp, [esp + 1]
jmp 0x4eb399
call fcn.004eb170
pop esp
fisttp word [edi + 0x2a]
fst dword [ebp - 0x46]
xor byte [esi - 0x527dcf3f], ah
mov esp, 0xe881168f
stc
add al, byte [eax]
cmp dl, 0x2b
push edx
push dword [esp + 2]
jmp 0x4eb24a
cmp bl, 0x61
push esp
jmp 0x4bbfac
mov dword [esp], eax
lea esp, [esp + 4]
jb 0x4eab9c
clc
clc
jmp 0x4eb2b7
pop ebp
call fcn.004eab76
pop edi
pop esi
pop ebx
jmp 0x4eab54
call 0x4eb442
dec eax
leave
pop ecx
cmp bl, cl
or ebp, edx
push 0xfffffffffffffff8
lahf
push 0xffffffffffffffde
or esp, dword [edx + reloc.WSOCK32.dll___WSAFDIsSet]
pop word [esp]
lea esp, [esp + 2]
jmp 0x4eab71
pushal
push dword [esp + 0x1e]
jmp 0x4eb31a
cmc
invalid
call 0x4eb6aa
jno 0x4eabc7
add edi, esi
aas
popal
jmp 0x4eac53
push edx
jmp 0x4eb525
jmp 0x4eac15
pop eax
jmp 0x4eac67
cmp al, 0x39
call fcn.004eabfb
jbe 0x4ddd1f36
invalid
mov ebx, 0x3dceab3b
mov byte [ebx + 0x24d5b21c], dl
loope 0x4eac18
pushal
jmp 0x4eb6de
add byte [eax], al
movsb byte es:[edi], byte ss:[esi]
cmp bl, byte [ebp - 0x54]
adc al, byte [eax - 0x2f]
inc ecx
and bl, dl
rcl byte [ebx - 0x36]
xchg esp, eax
pop es
call fcn.004eb8f4
mov esp, 0x34c5a22c
test byte [edx + 0x3bc8a939], ch
cld
cwde
sti
ror byte [ebp - 0x24], cl
call fcn.004eb8db
cmp esi, dword [ebx + reloc.WSOCK32.dll___WSAFDIsSet]
and esi, dword [edx + ebp + reloc.WSOCK32.dll___WSAFDIsSet]
pushal
mov dword [reloc.WSOCK32.dll___WSAFDIsSet], eax
jmp 0x4eba90
jmp 0x4eb5a1
xor ah, byte [eax - 0x4c08cd39]
stosb byte es:[edi], al
invalid
call 0x4eb3d2
push 0xfffffffffffffff6
add edi, esi
aas
js 0x4eb0e5
jnp 0x4eb11a
in eax, dx
sub cl, byte [esi - 0x4da487e7]
lea esp, [esp + 0x18]
cmp dl, 0x5a
pushal
lea esp, [esp + 7]
lea esp, [esp + 1]
jmp 0x4eb14b
mov dl, 0xbc
lodsb al, byte ds:[esi]
retf
cmp dl, 0x41
call fcn.004eb12a
lea esp, [esp + 0x18]
jbe 0x4bbf39
ja 0x4bbf5b
mov ah, 0x3b
stosd dword es:[edi], eax
into
cmp eax, 0x648d9e85
and al, 2
lea esp, [esp + 0x5c]
mov dl, byte [ecx + 1]
stc
jmp 0x4eb143
lea esp, [esp + 8]
je 0x4bbf39
sub esp, 0x12
lea esp, [esp + 2]
jmp 0x4eb278
lea esp, [esp + 0x10]
cmp dl, 0x2f
push edx
mov byte [esp], dh
jmp 0x4eb474
cmp bl, 0x7a
push edx
lea esp, [esp + 1]
call fcn.004eb2a0
lea esp, [esp + 4]
jbe 0x4eab7b
ja 0x4eab9c
fisttp qword [edx + eax*8 - 0x5b]
push esp
xchg ecx, eax
pop ecx
lea esp, [esp + 4]
jbe 0x4eab7b
ja 0x4bbfa2
lodsb al, byte [esi]
cmp ch, byte [eax - 0x6474c531]
in eax, dx
cld
mov byte [esp + 1], bh
jmp 0x4eb2db
lea esp, [esp + 0xc]
jb 0x4eb0ed
sub esp, 0x1c
lea esp, [esp + 0x15]
jmp 0x4eb34f
lea esp, [esp + 0x24]
cmp bl, 0x30
call fcn.004eb2fb
xlatb
inc ecx
sal dword [eax + reloc.WSOCK32.dll___WSAFDIsSet], 1
nop
test dword [edx], reloc.WSOCK32.dll___WSAFDIsSet
push dword [esp]
lea esp, [esp + 8]
cmp bl, 0x5a
call 0x4eb2f5
mov word [esp + 4], dx
push dword [esp + 2]
jmp 0x4eb300
lea esp, [esp + 3]
lea esp, [esp + 4]
cmp bl, 0x39
call 0x4eb375
pop esp
invalid
jb 0x4bbfa2
call 0x4eb335
pop word [esp]
lea esp, [esp + 2]
jmp 0x4eb383
jbe 0x4eab7b
ja 0x4eb0ed
jg 0x4eb375
jp 0x4eb3b0
in al, dx
pop eax
xchg ecx, eax
adc byte [ebx + 0x41fb800a], dl
cmp bl, 0x41
pushal
mov word [esp + 0x16], sp
lea esp, [esp + 0x20]
jmp 0x4eb36a
push word [esp + 3]
lea esp, [esp + 3]
lea esp, [esp + 3]
jmp 0x4eb427
je 0x4eab7b
call fcn.004eb401
lea esp, [esp + 0x24]
jne 0x4bbee5
je 0x4eab7b
lea esp, [esp + 1]
lea esp, [esp + 1]
call fcn.004eb581
xchg esi, eax
sbb ecx, dword [ebx - 0x126e212]
leave
push 0x24648d8b
or byte [eax - 0x9fd005], al
je 0x4eb488
or al, 0x88
insb byte es:[edi], dx
and al, 0x1d
jmp 0x4eb432
lea esp, [esp + 4]
jne 0x4bbee5
je 0x4bbf39
lea esp, [esp + 2]
jmp 0x4eb4a4
lea esp, [esp + 4]
cmp cl, 0x41
pushal
pushal
push dword [esp + 0x20]
jmp 0x4eb4b7
lea esp, [esp + 0x44]
call fcn.004eb4f2
or byte [edx + eax - 0x61da6b9b], cl
sbb dword [ecx - 0x754e418], ecx
lea esp, [esp + 4]
mov cl, byte [ecx + 3]
stc
clc
call fcn.004eb49d
push word [esp + 5]
lea esp, [esp + 2]
jmp 0x4eb53d
lea esp, [esp + 4]
cmp cl, 0x61
push edx
mov word [esp], di
mov dword [esp], eax
jmp 0x4eb56a
mov byte [esp], ch
lea esp, [esp + 3]
push esp
lea esp, [esp + 1]
jmp 0x4eb505
lea esp, [esp + 0x18]
cmp cl, 0x5a
jbe 0x4eabca
ja 0x4eabe3
lea esp, [esp + 8]
jb 0x4ead7d
jae 0x4eb6a2
dec esi
rcl byte [esi + 0x31], 0xc0
jae 0x4eb564
sal byte [ebx - 3], 0xcc
pop edi
cmpsb byte [esi], byte es:[edi]
int3
push dword [esp]
jmp 0x4eb550
cmp cl, 0x30
pushal
call fcn.004eb58a
cmpsb byte [esi], byte es:[edi]
xor al, 0xaa
int 0x3c
xor byte [eax + 0x23d0b121], 0x96
invalid
cmp cl, 0x7a
call 0x4eb679
call 0x4eb74c
lea esp, [esp + 0xc]
cmp al, 0x2b
push esp
mov word [esp], di
push dword [esp + 2]
jmp 0x4eb6ff
lea esp, [esp + 0x20]
ret
lea esp, [esp + 0x20]
cmp al, 0x2f
push esp
mov byte [esp + 2], ch
jmp 0x4eb734
lea esp, [esp + 8]
jne 0x4eac2f
push 0x3e
jmp 0x4eac12
push dword [esp + 6]
lea esp, [esp + 0xc]
push 0x3f
jmp 0x4eac12
lea esp, [esp + 4]
jne 0x4eabf9
push edx
mov dword [esp], ebp
push dword [esp]
jmp 0x4eb710
pop ebx
pushal
mov word [esp + 0x16], dx
push word [esp + 0x19]
lea esp, [esp + 2]
jmp 0x4eb6d4
push dword [esp + 6]
lea esp, [esp + 0x24]
sub eax, 0x47
jmp 0x4eac67