Function at 0x4380ac
Capabilities:
Encode data using xor

Disassembly:
mov eax, 0x4d1420
call fcn.0046fad0
sub esp, 0x38c
push ebx
push esi
mov dword [ebp - 4], 1
call sub.MFC42.DLL_AfxGetAppModuleState
mov eax, dword [eax + 4]
lea ecx, [ebp - 0x24]
push ecx
mov eax, dword [eax + 0xd4]
push eax
call dword [sym.imp.BasicCtrlDll.dll_int___cdecl_GetCurrentUin_struct_IQQCore___unsigned_long_int__]
pop ecx
pop ecx
push dword [ebp - 0x24]
call sub.WSOCK32.dll_htonl
push 0x10
mov dword [ebp - 0x24], eax
push dword [ebp + 0xc]
lea eax, [ebp - 0x8c]
push eax
call sub.MSVCRT.dll_memcpy
add esp, 0xc
call sub.MFC42.DLL_AfxGetAppModuleState
mov eax, dword [eax + 4]
push 5
movzx eax, byte [eax + 0xcf]
mov byte [ebp - 0x34], al
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x33], eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x7c]
push eax
call fcn.0043a832
mov ebx, dword [ebp + 0x1c]
lea eax, [ebp - 0x8c]
push 0x20
push eax
push ebx
call fcn.0043a832
add esp, 0x18
call dword [sym.imp.MSVCRT.dll_rand]
sub al, 0x78
mov byte [ebp - 0x5c], al
je 0x43813b
xor eax, eax
mov dword [ebp + 8], eax
mov cl, byte [ebp + eax - 0x7c]
xor cl, byte [eax + ebx]
inc eax
cmp eax, 0x10
mov dword [ebp + 8], eax
mov byte [ebp + eax - 0x6d], cl
jl 0x43814d
lea eax, [ebp - 0x398]
and word [ebp - 0x388], 0
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x294]
mov dword [ebp - 0x28], eax
push edi
lea eax, [ebp - 0x190]
push 9
mov dword [ebp - 0x38], eax
pop eax
lea esi, [ebp - 0x20]
lea edi, [ebp - 0x398]
mov byte [ebp - 0x20], 0x77
mov byte [ebp - 0x1f], 0x29
mov byte [ebp - 0x1e], 0x84
mov byte [ebp - 0x1d], 0xbe
mov byte [ebp - 0x1c], 0x6c
mov byte [ebp - 0x1b], 0xe1
mov byte [ebp - 0x1a], 0xae
mov byte [ebp - 0x19], 0xd6
mov byte [ebp - 0x18], 0x90
mov byte [ebp - 0x17], 0x52
mov byte [ebp - 0x16], 0xf1
mov byte [ebp - 0x15], 0x49
mov byte [ebp - 0x14], 0xbb
mov byte [ebp - 0x13], 0xf1
mov byte [ebp - 0x12], 0xeb
mov byte [ebp - 0x11], 0xe9
mov byte [ebp - 0x10], 0xa6
mov byte [ebp - 0xf], 0xb3
mov dword [ebp - 0x44], eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x28]
lea esi, [ebp - 0x6c]
and word [eax + 0x10], 0
mov edi, dword [ebp - 0x28]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x3c]
movsd dword es:[edi], dword [esi]
push eax
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x44]
movsd dword es:[edi], dword [esi]
push eax
lea eax, [ebp - 0x2c]
push eax
movsb byte es:[edi], byte [esi]
call fcn.004382e8
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 0x3c]
push 0
push eax
call fcn.0043829b
add esp, 0x1c
push 0x11
pop esi
pop edi
cmp dword [ebp + 8], esi
ja 0x438275
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x3c]
push eax
call fcn.0043829b
mov eax, dword [ebp + 8]
add esp, 0xc
cmp byte [ebp + eax - 0x59], 0
jne 0x43825e
sub eax, 0x10
cmp eax, esi
mov dword [ebp + 8], eax
jge 0x438275
mov cl, byte [ebp + eax - 0x58]
mov byte [ebx + eax - 1], cl
mov eax, dword [ebp + 8]
inc eax
jmp 0x438249
sub eax, esi
cmp eax, 0x10
mov dword [ebp + 8], eax
jge 0x438275
mov cl, byte [ebp + eax - 0x58]
mov byte [eax + ebx], cl
mov eax, dword [ebp + 8]
inc eax
jmp 0x438260
and byte [ebp - 4], 0
lea ecx, [ebp + 0x14]
call sub.MFC42.DLL_CString::CString
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x18]
call sub.MFC42.DLL_CString::CString
mov ecx, dword [ebp - 0xc]
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret