Function at 0x4b86a0
Capabilities:
Encode data using xor

Disassembly:
push 0x130
mov eax, 0x518773
call fcn.004e3d69
mov esi, ecx
mov dword [ebp - 0x80], esi
xor eax, eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x44], eax
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x3c]
call fcn.00402305
lea ebx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.0040db9b
mov ebx, eax
call fcn.0040dbe8
lea edi, [ebp - 0x3c]
call fcn.004078bd
add esi, 8
mov eax, dword [esi]
mov eax, dword [eax - 0xc]
test eax, eax
je 0x4b8727
push dword [ebp - 0x3c]
xor ecx, ecx
call fcn.0040788c
cmp eax, 0xffffffff
je 0x4b8727
mov ecx, dword [ebp - 0x3c]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.0040285b
xor al, al
call fcn.004e3dec
ret 4
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x3c]
add ecx, 0xfffffff0
call fcn.0040285b
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x3c]
call fcn.00402305
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 2
call fcn.00402305
mov byte [ebp - 4], 3
mov ebx, dword [ebp - 0x40]
mov eax, dword [ebx - 0xc]
cmp eax, 0x17
je 0x4b8769
lea ecx, [ebx - 0x10]
jmp 0x4b8ec8
call fcn.004be6f3
push eax
lea ecx, [ebp - 0x48]
call fcn.004027f9
mov byte [ebp - 4], 4
call fcn.004be6f3
push eax
lea ecx, [ebp - 0x64]
call fcn.004027f9
mov byte [ebp - 4], 5
call fcn.004be6f3
push eax
lea ecx, [ebp - 0x5c]
call fcn.004027f9
mov byte [ebp - 4], 6
call fcn.004be6f3
push eax
lea ecx, [ebp - 0x58]
call fcn.004027f9
mov edi, 0x5bfea4
push edi
xor ecx, ecx
lea esi, [ebp - 0x40]
mov byte [ebp - 4], 7
call fcn.0040788c
mov esi, eax
cmp esi, 0xffffffff
je 0x4b8d69
push esi
push 0
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x40]
call fcn.00407906
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 8
call fcn.004025da
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x44]
add ecx, 0xfffffff0
call fcn.0040285b
push dword [ebx - 0xc]
inc esi
push esi
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x40]
call fcn.00407906
push eax
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 9
call fcn.004025da
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x44]
add ecx, 0xfffffff0
call fcn.0040285b
push edi
xor ecx, ecx
lea esi, [ebp - 0x40]
call fcn.0040788c
mov esi, eax
cmp esi, 0xffffffff
je 0x4b8aaa
push esi
push 0
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x40]
call fcn.00407906
push eax
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0xa
call fcn.004025da
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x44]
add ecx, 0xfffffff0
call fcn.0040285b
mov eax, dword [ebp - 0x40]
push dword [eax - 0xc]
inc esi
push esi
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x40]
call fcn.00407906
push eax
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0xb
call fcn.004025da
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x44]
add ecx, 0xfffffff0
call fcn.0040285b
push edi
xor ecx, ecx
lea esi, [ebp - 0x40]
call fcn.0040788c
mov esi, eax
cmp esi, 0xffffffff
je 0x4b8aaa
push esi
push 0
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x40]
call fcn.00407906
push eax
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0xc
call fcn.004025da
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x44]
add ecx, 0xfffffff0
call fcn.0040285b
mov eax, dword [ebp - 0x40]
push dword [eax - 0xc]
inc esi
push esi
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x40]
call fcn.00407906
push eax
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0xd
call fcn.004025da
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x44]
add ecx, 0xfffffff0
call fcn.0040285b
push 6
pop edi
push 2
xor ecx, ecx
pop esi
mov eax, edi
mov edx, esi
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004bd34c
pop ecx
mov ecx, eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x70], ecx
sub ecx, eax
movzx edx, word [eax]
mov word [eax + ecx], dx
add eax, esi
test dx, dx
jne 0x4b892c
xor ecx, ecx
mov eax, edi
mov edx, esi
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004bd34c
mov edx, eax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x78], edx
pop ecx
sub edx, eax
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, esi
test cx, cx
jne 0x4b895a
xor ecx, ecx
mov eax, edi
mov edx, esi
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004bd34c
mov ebx, eax
mov eax, dword [ebp - 0x5c]
mov edx, ebx
pop ecx
mov dword [ebp - 0xac], ebx
sub edx, eax
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, esi
test cx, cx
jne 0x4b898d
xor ecx, ecx
mov eax, edi
mov edx, esi
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004bd34c
mov edx, eax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x74], edx
pop ecx
sub edx, eax
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, esi
test cx, cx
jne 0x4b89bb
xor ecx, ecx
mov eax, edi
mov edx, esi
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004bd34c
mov edx, dword [ebp - 0x70]
pop ecx
mov ecx, eax
mov eax, dword [ebp - 0x78]
sub eax, edx
mov dword [ebp - 0x4c], edx
sub dword [ebp - 0x4c], ecx
mov dword [ebp - 0x7c], ecx
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x50], 5
mov eax, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x44]
or dword [ebp - 0x6c], 0xffffffff
or dword [ebp - 0x68], 0xffffffff
add eax, ecx
mov dl, byte [eax + edx]
mov al, byte [eax]
mov byte [ebp - 0x51], al
xor edi, edi
cmp byte [edi + str.9PHVYB7EM6TW5SFZ8KUA3CNX4G2DRJ], dl
jne 0x4b8a21
mov dword [ebp - 0x6c], edi
mov al, byte [ebp - 0x51]
cmp byte [edi + str.23456789ABCDEFGHJKMNPRSTUVWXYZ], al
jne 0x4b8a2f
mov dword [ebp - 0x68], edi
inc edi
cmp edi, 0x1e
jl 0x4b8a16
mov eax, dword [ebp - 0x6c]
sub eax, dword [ebp - 0x68]
jns 0x4b8a40
add eax, 0x1e
movsx ax, byte [eax + str.23456789ABCDEFGHJKMNPRSTUVWXYZ]
mov word [ecx], ax
add ecx, esi
dec dword [ebp - 0x50]
jne 0x4b89fc
mov edi, dword [ebp - 0x7c]
xor eax, eax
push edi
mov ecx, 0x60b2d0
mov word [edi + 0xa], ax
call fcn.00413eb9
test eax, eax
je 0x4b8ae1
mov eax, 0x5d078c
mov edx, edi
sub edx, eax
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, esi
test cx, cx
jne 0x4b8a73
push dword [ebp - 0x70]
call fcn.004bd341
pop ecx
push dword [ebp - 0x78]
call fcn.004bd341
pop ecx
push edi
call fcn.004bd341
pop ecx
push ebx
call fcn.004bd341
pop ecx
push dword [ebp - 0x74]
call fcn.004bd341
pop ecx
mov ecx, dword [ebp - 0x58]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [ebp - 0x5c]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [ebp - 0x64]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [ebp - 0x48]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [ebp - 0x40]
add ecx, 0xfffffff0
jmp 0x4b8ec8
mov al, byte [ebx]
xor esi, esi
mov dword [ebp - 0x60], esi
xor ecx, ecx
cmp byte [ecx + str.VE9WMBCX8SP3DJT7A5GZUNHF2R6KY4], al
je 0x4b8afa
inc ecx
cmp ecx, 0xb
jl 0x4b8aea
jmp 0x4b8afd
mov dword [ebp - 0x60], ecx
mov al, byte [ebx + 2]
push 0xb
pop edx
mov ecx, edx
cmp byte [edx + str.VE9WMBCX8SP3DJT7A5GZUNHF2R6KY4], al
je 0x4b8b15
inc edx
cmp edx, 0x17
jl 0x4b8b05
jmp 0x4b8b17
mov ecx, edx
add ecx, 0xfffffff5
or edi, 0xffffffff
mov dword [ebp - 0x4c], edi
mov dword [ebp - 0x50], edi
mov al, byte [esi + str.VE9WMBCX8SP3DJT7A5GZUNHF2R6KY4]
cmp al, byte [ebx + 4]
jne 0x4b8b31
mov dword [ebp - 0x4c], esi
cmp al, byte [ebx + 6]
jne 0x4b8b38
mov edi, esi
cmp al, byte [ebx + 8]
jne 0x4b8b40
mov dword [ebp - 0x50], esi
cmp dword [ebp - 0x4c], 0
jl 0x4b8b50
test edi, edi
jl 0x4b8b50
cmp dword [ebp - 0x50], 0
jge 0x4b8b56
inc esi
cmp esi, 0x1e
jl 0x4b8b23
mov eax, dword [ebp - 0x4c]
cdq
sub eax, edx
mov esi, eax
mov eax, edi
cdq
sar esi, 1
add esi, 0xe
sub eax, edx
sar eax, 1
mov dword [ebp - 0x6c], esi
mov dword [ebp - 0x68], eax
jne 0x4b8b79
mov dword [ebp - 0x68], 0xc
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x4c], 0x1e
test eax, eax
je 0x4b8b8a
mov dword [ebp - 0x4c], eax
cmp esi, 0x64
jae 0x4b8b98
add esi, 0x7d0
mov dword [ebp - 0x6c], esi
mov eax, dword [ebp - 0x60]
imul ecx, ecx, 0x1e
imul eax, eax, 0x16d
lea eax, [eax + ecx + 4]
mov dword [ebp - 0x44], eax
call fcn.004be6f3
push eax
lea ecx, [ebp - 0x84]
call fcn.004027f9
mov byte [ebp - 4], 0xe
xor edi, edi
mov eax, dword [ebp - 0x74]
mov al, byte [eax + edi*2]
xor esi, esi
cmp byte [esi + str.9PHVYB7EM6TW5SFZ8KUA3CNX4G2DRJ], al
je 0x4b8bd8
inc esi
cmp esi, 0xa
jl 0x4b8bca
call fcn.004be6f3
push eax
lea ecx, [ebp - 0x60]
call fcn.004027f9
push esi
lea eax, [ebp - 0x60]
push 0x5b2754
push eax
mov byte [ebp - 4], 0xf
call fcn.00402a1d
mov esi, dword [ebp - 0x60]
add esp, 0xc
push dword [esi - 0xc]
lea ecx, [ebp - 0x84]
push esi
call fcn.00414446
add esi, 0xfffffff0
mov ecx, esi
mov byte [ebp - 4], 0xe
call fcn.0040285b
inc edi
cmp edi, 5
jl 0x4b8bc2
mov esi, dword [ebp - 0x84]
push esi
call fcn.004df43f
pop ecx
push 8
mov dword [ebp - 0x60], eax
pop ecx
xor eax, eax
mov word [ebp - 0x38], ax
push ebx
push dword [ebp - 0x7c]
lea edi, [ebp - 0x36]
push dword [ebp - 0x70]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [ebp - 0x38]
push str._s__s__s
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x14
push 0x12
call fcn.004bd34c
mov ebx, eax
pop ecx
lea eax, [ebp - 0x138]
mov dword [ebp - 0x13c], eax
push 3
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x13c]
push eax
call fcn.00407356
mov edx, dword [ebp - 0x13c]
mov edi, ebx
mov eax, edx
sub edi, edx
mov cl, byte [eax]
mov byte [eax + edi], cl
inc eax
test cl, cl
jne 0x4b8c8f
lea eax, [ebp - 0x138]
cmp edx, eax
je 0x4b8caa
push edx
call fcn.004de9e3
pop ecx
mov dword [ebp - 0x50], 0x11
mov eax, ebx
xor edi, edi
movzx edx, byte [eax]
mov ecx, edi
shr ecx, 8
shl edi, 8
xor ecx, edx
xor edi, dword [ecx*4 + 0x6017a8]
and edi, 0xffff
inc eax
dec dword [ebp - 0x50]
cmp dword [ebp - 0x50], 0
jg 0x4b8cb5
push ebx
call fcn.004bd341
movzx eax, di
cmp dword [ebp - 0x60], eax
pop ecx
push dword [ebp - 0x70]
sete bl
call fcn.004bd341
pop ecx
push dword [ebp - 0x78]
call fcn.004bd341
pop ecx
push dword [ebp - 0x7c]
call fcn.004bd341
pop ecx
push dword [ebp - 0xac]
call fcn.004bd341
pop ecx
push dword [ebp - 0x74]
call fcn.004bd341
pop ecx
lea ecx, [esi - 0x10]
call fcn.0040285b
mov ecx, dword [ebp - 0x58]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [ebp - 0x5c]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [ebp - 0x64]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [ebp - 0x48]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [ebp - 0x40]
add ecx, 0xfffffff0
call fcn.0040285b
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x3c]
add ecx, 0xfffffff0
call fcn.0040285b
jmp 0x4b8dae
mov ecx, dword [ebp - 0x58]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [ebp - 0x5c]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [ebp - 0x64]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [ebp - 0x48]
add ecx, 0xfffffff0
call fcn.0040285b
lea ecx, [ebx - 0x10]
call fcn.0040285b
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x3c]
add ecx, 0xfffffff0
call fcn.0040285b
xor bl, bl
test bl, bl
je 0x4b8ed8
lea eax, [ebp - 0x3c]
push eax
push dword [ebp - 0x80]
call fcn.004b8604
mov byte [ebp - 4], 0x10
push dword [ebp + 8]
lea ecx, [ebp - 0x3c]
call fcn.00413eb9
test eax, eax
jne 0x4b8f08
push 2
lea eax, [ebp - 0x48]
push eax
call fcn.004b7aaa
fldz
push 0x400
fstp qword [ebp - 0x90]
xor esi, esi
push esi
push dword [ebp - 0x48]
lea ecx, [ebp - 0x90]
mov dword [ebp - 0x88], esi
call fcn.00445e46
test al, al
je 0x4b8f00
cmp dword [ebp - 0x88], esi
jne 0x4b8f00
lea eax, [ebp - 0xa8]
call fcn.00445b7d
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp - 0x90]
call fcn.004bcfd0
test al, al
je 0x4b8e7d
lea eax, [ebp - 0xa8]
push eax
lea esi, [ebp - 0x9c]
lea eax, [ebp - 0x90]
call fcn.00493003
mov ecx, esi
call fcn.00492fd3
fcomp qword [0x5d12b0]
fnstsw ax
test ah, 5
jp 0x4b8f00
mov ecx, dword [ebp - 0x48]
add ecx, 0xfffffff0
call fcn.0040285b
jmp 0x4b8707
lea esi, [ebp - 0x90]
lea edi, [ebp - 0xa8]
call fcn.004bcf95
test al, al
je 0x4b8f00
mov eax, esi
push eax
lea esi, [ebp - 0x9c]
mov eax, edi
call fcn.00493003
mov ecx, esi
call fcn.00492fd3
fild dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
test eax, eax
jge 0x4b8eb9
fadd qword [0x5d12a8]
mov ecx, dword [ebp - 0x48]
fcompp
add ecx, 0xfffffff0
fnstsw ax
test ah, 5
jp 0x4b8eec
call fcn.0040285b
mov ecx, dword [ebp - 0x3c]
add ecx, 0xfffffff0
call fcn.0040285b
xor bl, bl
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.0040285b
mov al, bl
jmp 0x4b871f
call fcn.0040285b
mov ecx, dword [ebp - 0x3c]
add ecx, 0xfffffff0
call fcn.0040285b
mov bl, 1
jmp 0x4b8eda
mov ecx, dword [ebp - 0x48]
add ecx, 0xfffffff0
jmp 0x4b8eec
lea eax, [ebp - 0xb8]
call fcn.00445b7d
xor eax, eax
push eax
push eax
push eax
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x9c]
push dword [ebp - 0x68]
push dword [ebp - 0x6c]
call fcn.00445cb8
lea eax, [ebp - 0xb8]
push eax
lea ecx, [ebp - 0x9c]
call fcn.004bcfd0
test al, al
je 0x4b8ef1
lea eax, [ebp - 0xb8]
push eax
lea esi, [ebp - 0xa8]
lea eax, [ebp - 0x9c]
call fcn.00493003
mov ecx, esi
call fcn.00492fd3
fcomp qword [0x5d12b0]
fnstsw ax
test ah, 0x41
jne 0x4b8ef1
jmp 0x4b8ecd