Function at 0x48b480
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
mov edi, eax
mov ebx, edx
sub esp, 0x5c
mov dword [ebp - 0x44], eax
lea eax, [edx + 4]
mov edx, dword [ebp + 8]
mov dword [esp], ecx
mov ecx, eax
mov dword [esp + 4], edx
call fcn.00586fe0
mov eax, dword [ebp + 0x10]
sub esp, 8
lea ecx, [ebp - 0x38]
mov dword [esp + 4], eax
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.0057f3e0
mov esi, dword [edi + 4]
sub esp, 8
test esi, esi
je 0x48b67d
mov dword [ebp - 0x3c], 0
mov eax, dword [ebx]
sub esi, dword [ebp - 0x3c]
mov ecx, ebx
call dword [eax]
mov edx, dword [ebp - 0x34]
cmp esi, eax
mov ecx, ebx
cmovbe eax, esi
mov dword [ebp - 0x40], eax
mov eax, dword [ebx]
mov dword [esp + 4], edx
mov edx, dword [ebp - 0x38]
mov dword [esp], edx
call dword [eax + 0xc]
mov eax, dword [ebx]
sub esp, 8
mov ecx, ebx
call dword [eax]
lea ecx, [ebp - 0x28]
mov dword [esp], eax
call fcn.0057f500
mov eax, dword [ebx]
mov edx, dword [ebp - 0x28]
sub esp, 4
mov ecx, ebx
mov dword [esp], edx
call dword [eax + 0x10]
mov eax, dword [ebp - 0x24]
sub esp, 4
lea ecx, [ebp - 0x38]
mov dword [esp], eax
call fcn.0057eb20
sub esp, 4
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x24], eax
cmovbe eax, dword [ebp - 0x24]
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x28]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x38]
mov dword [esp], eax
call sub.msvcrt.dll_memmove
mov ecx, dword [ebp - 0x1c]
test ecx, ecx
je 0x48b572
mov eax, dword [ebp - 0x28]
mov esi, dword [ebp - 0x20]
test eax, eax
je 0x48b572
test esi, esi
je 0x48b572
mov edx, dword [ecx]
mov dword [esp + 4], esi
mov dword [esp], eax
call dword [edx + 4]
sub esp, 8
mov edx, dword [ebp - 0x34]
mov eax, dword [ebx]
mov ecx, ebx
mov dword [esp + 4], edx
mov edx, dword [ebp - 0x38]
mov dword [esp], edx
call dword [eax + 0xc]
mov edi, dword [ebp + 0x10]
sub esp, 8
mov eax, dword [ebx]
mov ecx, ebx
mov dword [esp + 4], edi
mov edi, dword [ebp + 0xc]
mov dword [esp], edi
call dword [eax + 0xc]
mov eax, dword [ebx]
sub esp, 8
mov ecx, ebx
call dword [eax]
lea ecx, [ebp - 0x28]
mov dword [esp], eax
call fcn.0057f500
mov eax, dword [ebx]
mov edx, dword [ebp - 0x28]
sub esp, 4
mov ecx, ebx
mov dword [esp], edx
call dword [eax + 0x10]
mov eax, dword [ebp - 0x44]
sub esp, 4
mov ecx, dword [ebp - 0x3c]
mov edi, dword [ebp - 0x28]
add ecx, dword [eax]
cmp dword [ebp - 0x40], 7
jbe 0x48b690
mov eax, dword [ebp - 0x40]
mov edx, ecx
mov dword [ebp - 0x4c], ecx
sub eax, 8
shr eax, 3
lea eax, [eax*8 + 8]
mov dword [ebp - 0x48], eax
lea esi, [edi + eax]
mov eax, edi
lea esi, [esi]
lea edi, [edi]
mov ecx, dword [eax]
xor dword [edx], ecx
add eax, 8
mov ecx, dword [eax - 4]
xor dword [edx + 4], ecx
add edx, 8
cmp eax, esi
jne 0x48b600
mov ecx, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x40]
add ecx, dword [ebp - 0x48]
and edx, 7
test edx, edx
je 0x48b647
mov edi, dword [ebp - 0x3c]
xor esi, esi
mov dword [ebp - 0x48], ebx
lea esi, [esi]
movzx ebx, byte [eax + esi]
xor byte [ecx + esi], bl
add esi, 1
cmp esi, edx
jne 0x48b630
mov dword [ebp - 0x3c], edi
mov ebx, dword [ebp - 0x48]
mov edi, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x40]
add dword [ebp - 0x3c], esi
test ecx, ecx
je 0x48b66e
test edi, edi
mov edx, dword [ebp - 0x20]
je 0x48b66e
test edx, edx
je 0x48b66e
mov eax, dword [ecx]
mov dword [esp + 4], edx
mov dword [esp], edi
call dword [eax + 4]
sub esp, 8
mov eax, dword [ebp - 0x44]
mov esi, dword [eax + 4]
cmp dword [ebp - 0x3c], esi
jne 0x48b4d1
lea ecx, [ebp - 0x38]
call fcn.0057ec30
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, edi
mov edx, dword [ebp - 0x40]
jmp 0x48b620