Function at 0x48fbd0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x61d71f
mov eax, dword fs:[0]
push eax
sub esp, 0x40
mov eax, dword [0x6ec7c0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, dword [ebp + 8]
lea ecx, [ebp - 0x48]
push str.CHashChecker::PreTranslateMessage
call fcn.00562ae0
cmp dword [0x6e99bc], 0
mov esi, dword [sym.imp.USER32.dll_PostMessageW]
mov dword [ebp - 4], 0
jne 0x48fc78
cmp dword [0x6fdad0], 0
jne 0x48fc78
mov dword [0x6fdad0], 1
call fcn.00603ca3
mov ecx, eax
test ecx, ecx
je 0x48fcd7
mov eax, dword [ecx]
mov eax, dword [eax + 0x7c]
call eax
test eax, eax
je 0x48fcd7
call fcn.00603ca3
mov ecx, eax
test ecx, ecx
je 0x48fc65
mov eax, dword [ecx]
mov eax, dword [eax + 0x7c]
call eax
jmp 0x48fc67
xor eax, eax
push 0x2f0f
push 0x10f0
push 0x10
push dword [eax + 0x20]
call esi
mov eax, dword [edi + 4]
cmp eax, 0x10
jne 0x48fee0
cmp dword [edi + 8], 0x10f0
jne 0x48ffcd
cmp dword [edi + 0xc], 0x2f0f
jne 0x48ffcd
call fcn.00603ca3
mov ecx, eax
test ecx, ecx
je 0x48fdb9
mov eax, dword [ecx]
mov eax, dword [eax + 0x7c]
call eax
test eax, eax
je 0x48fdb9
call fcn.00603ca3
mov ecx, eax
test ecx, ecx
je 0x48fda1
mov eax, dword [ecx]
mov eax, dword [eax + 0x7c]
call eax
jmp 0x48fda3
test dword [0x6e99c0], 0x2000
je 0x48fd7c
movaps xmm2, xmmword [0x64f5d0]
mov eax, 0x40
movups xmm0, xmmword [0x6e99d0]
movaps xmm1, xmm2
xorps xmm1, xmm0
movups xmm0, xmmword [0x6e99e0]
movups xmmword [0x6e99d0], xmm1
movaps xmm1, xmm2
xorps xmm1, xmm0
movups xmm0, xmmword [0x6e99f0]
movups xmmword [0x6e99e0], xmm1
movaps xmm1, xmm2
xorps xmm1, xmm0
movups xmm0, xmmword [0x6e9a00]
movups xmmword [0x6e99f0], xmm1
xorps xmm2, xmm0
movups xmmword [0x6e9a00], xmm2
xor byte [eax + 0x6e99d0], 0x88
inc eax
cmp eax, 0x59
jb 0x48fd40
push 0x6e99d0
lea ecx, [ebp - 0x4c]
call dword [0x63f368]
push 0
push 0
mov ecx, eax
mov byte [ebp - 4], 1
call dword [0x63f36c]
push eax
call fcn.00603b59
lea ecx, [ebp - 0x4c]
call dword [0x63f5a8]
jmp 0x48fd99
call dword [0x63e3c4]
cdq
mov ecx, 0x33a
idiv ecx
lea eax, [edi + 0x1c]
or edx, 0xf00000
push edx
call eax
add esp, 4
push 0
call dword [0x63e2ac]
xor eax, eax
push 0xbb8
push 0
push 0
push 0x10
push dword [eax + 0x20]
call fcn.0048fb10
add esp, 0x14
test dword [0x6e99c0], 0x2000
je 0x48fea2
movaps xmm2, xmmword [0x64f5e0]
mov eax, 0x40
movups xmm0, xmmword [0x6e9a30]
movaps xmm1, xmm2
xorps xmm1, xmm0
movups xmm0, xmmword [0x6e9a40]
movups xmmword [0x6e9a30], xmm1
movaps xmm1, xmm2
xorps xmm1, xmm0
movups xmm0, xmmword [0x6e9a50]
movups xmmword [0x6e9a40], xmm1
movaps xmm1, xmm2
xorps xmm1, xmm0
movups xmm0, xmmword [0x6e9a60]
movups xmmword [0x6e9a50], xmm1
xorps xmm2, xmm0
movups xmmword [0x6e9a60], xmm2
xor byte [eax + 0x6e9a30], 0xc1
inc eax
cmp eax, 0x59
jb 0x48fe22
push 0x6e9a30
lea ecx, [ebp - 0x4c]
call dword [0x63f368]
push 0
push 0
push dword [eax]
mov byte [ebp - 4], 2
call fcn.00603b59
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0
call dword [0x63f5a8]
call fcn.00603ca3
mov ecx, eax
test ecx, ecx
je 0x48fe90
mov eax, dword [ecx]
mov eax, dword [eax + 0x7c]
call eax
test eax, eax
je 0x48fe90
call fcn.00603ca3
mov ecx, eax
test ecx, ecx
je 0x48fe83
mov eax, dword [ecx]
mov eax, dword [eax + 0x7c]
call eax
jmp 0x48fe85
xor eax, eax
push 0
push 0
push 0x10
push dword [eax + 0x20]
call esi
lea ecx, [ebp - 0x48]
call fcn.005630c0
mov eax, 1
jmp 0x48ffd7
call dword [0x63e3c4]
cdq
mov ecx, 0x30e
idiv ecx
mov esi, edx
or esi, 0xf00000
push esi
call edi
add esp, 4
mov ecx, 0x64
imul eax, esi, 0xc9
sub eax, 0xe
imul eax, esi
mov dword [eax + 0x19], 0x15
lea eax, [esi + 1]
cdq
idiv ecx
mov esi, edx
jmp 0x48fec3
cmp eax, 0x9673
jne 0x48ffcd
cmp dword [edi + 8], 0x192f
jne 0x48ffcd
cmp dword [edi + 0xc], 0x983f
jne 0x48ffcd
call fcn.00603ca3
mov ecx, eax
test ecx, ecx
je 0x48ff8c
mov eax, dword [ecx]
mov eax, dword [eax + 0x7c]
call eax
test eax, eax
je 0x48ff8c
call fcn.00603ca3
mov ecx, eax
test ecx, ecx
je 0x48ff33
mov eax, dword [ecx]
mov eax, dword [eax + 0x7c]
call eax
jmp 0x48ff35
xor eax, eax
push 0x2710
push 0
push 0
push 0x10
push dword [eax + 0x20]
call fcn.0048fb10
add esp, 0x14
call fcn.00603ca3
mov ecx, eax
test ecx, ecx
je 0x48ff5f
mov eax, dword [ecx]
mov eax, dword [eax + 0x7c]
call eax
jmp 0x48ff61
xor eax, eax
push 0x5dc
push 0x2f0f
push 0x10f0
push 0x10
push dword [eax + 0x20]
call fcn.0048fb10
add esp, 0x14
lea ecx, [ebp - 0x48]
call fcn.005630c0
mov eax, 1
jmp 0x48ffd7
call dword [sym.imp.KERNEL32.dll_GetTickCount]
xor edx, edx
mov ecx, 0x57
div ecx
mov ecx, 0x64
or edx, 0xf0000000
nop word [eax + eax]
imul eax, edx, 0xc9
add eax, 0x86
imul eax, edx
mov dword [eax + 0x19], 0x15
lea eax, [edx + 1]
cdq
idiv ecx
jmp 0x48ffb0
lea ecx, [ebp - 0x48]
call fcn.005630c0
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00604ed9
mov esp, ebp
pop ebp
ret