Function at 0x485d70
Capabilities:
Encode data using xor
Encrypt data using aes
Encrypt data using aes via x86 extensions
Reference aes constants

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 0x28
push esi
push edi
mov edi, dword [ebx + 0xc]
mov esi, ecx
shr edi, 2
lea eax, [edi + 6]
mov dword [esi + 0x10], eax
lea eax, [eax*4 + 4]
lea ecx, [esi + 0x18]
push eax
mov dword [ebp - 8], esi
call fcn.00485cdf
cmp byte [0x4d4519], 0
mov esi, dword [esi + 0x11c]
jne 0x485dc0
call fcn.0048691e
cmp byte [0x4d451e], 0
mov ecx, dword [ebx + 0xc]
push ecx
je 0x485f76
mov eax, dword [ebx + 8]
movdqu xmm0, xmmword [eax + ecx - 0x10]
push eax
push esi
movdqa xmmword [ebp - 0x20], xmm0
call fcn.00401b00
movdqa xmm0, xmmword [ebp - 0x20]
mov edx, dword [ebp - 8]
aeskeygenassist xmm1, xmm0, 0
pextrd eax, xmm1, 3
xor eax, dword [esi]
add esp, 0xc
xor eax, 1
mov dword [esi + edi*4], eax
mov ecx, dword [esi + 4]
xor ecx, eax
mov dword [esi + edi*4 + 4], ecx
mov eax, dword [esi + 8]
xor eax, ecx
mov dword [esi + edi*4 + 8], eax
mov ecx, dword [esi + 0xc]
xor ecx, eax
mov dword [esi + edi*4 + 0xc], ecx
mov ecx, dword [edx + 0x11c]
mov eax, dword [edx + 0x118]
lea eax, [ecx + eax*4]
lea ecx, [esi + edi*4 + 0x10]
mov dword [ebp - 4], 0x4af8e4
cmp ecx, eax
je 0x485ef6
mov eax, dword [ebx + 0xc]
cmp eax, 0x18
jne 0x485e5d
mov eax, dword [esi + 0x24]
xor eax, dword [esi + 0x10]
mov ecx, dword [esi + 0x14]
xor ecx, eax
mov dword [esi + 0x28], eax
mov dword [esi + 0x2c], ecx
jmp 0x485e9a
cmp eax, 0x20
jne 0x485e97
mov eax, dword [esi + 0x2c]
mov ecx, dword [esi + 0x14]
pinsrd xmm0, eax, 3
aeskeygenassist xmm1, xmm0, 0
pextrd eax, xmm1, 2
xor eax, dword [esi + 0x10]
xor ecx, eax
mov dword [esi + 0x30], eax
mov eax, dword [esi + 0x18]
xor eax, ecx
mov dword [esi + 0x34], ecx
mov ecx, dword [esi + 0x1c]
xor ecx, eax
mov dword [esi + 0x38], eax
mov dword [esi + 0x3c], ecx
jmp 0x485e9a
mov ecx, dword [esi + 0x1c]
mov eax, dword [ebp - 4]
pinsrd xmm0, ecx, 3
lea esi, [esi + edi*4]
add eax, 4
aeskeygenassist xmm1, xmm0, 0
pextrd ecx, xmm1, 3
xor ecx, dword [eax - 4]
mov dword [ebp - 4], eax
xor ecx, dword [esi]
mov dword [esi + edi*4], ecx
mov eax, dword [esi + 4]
xor eax, ecx
mov dword [esi + edi*4 + 4], eax
mov ecx, dword [esi + 8]
xor ecx, eax
mov dword [esi + edi*4 + 8], ecx
mov eax, dword [esi + 0xc]
xor eax, ecx
mov dword [esi + edi*4 + 0xc], eax
mov eax, dword [edx + 0x11c]
mov ecx, dword [edx + 0x118]
lea ecx, [eax + ecx*4]
lea eax, [esi + edi*4 + 0x10]
cmp eax, ecx
jne 0x485e42
mov esi, edx
mov edx, dword [esi + 4]
mov eax, dword [edx + 0x1c]
lea ecx, [esi + 4]
call eax
test al, al
jne 0x48670f
mov ecx, dword [esi + 0x10]
mov eax, dword [esi + 0x11c]
movdqa xmm0, xmmword [eax]
add ecx, ecx
movdqa xmm1, xmmword [eax + ecx*8]
movdqa xmmword [eax], xmm1
movdqa xmmword [eax + ecx*8], xmm0
mov ecx, dword [esi + 0x10]
mov edx, 4
lea ecx, [ecx*4 - 4]
cmp ecx, edx
jbe 0x485f60
jmp 0x485f40
aesimc xmm0, xmmword [eax + edx*4]
aesimc xmm1, xmmword [eax + ecx*4]
movdqa xmmword [eax + edx*4], xmm1
movdqa xmmword [eax + ecx*4], xmm0
add edx, 4
sub ecx, 4
cmp edx, ecx
jb 0x485f40
aesimc xmm0, xmmword [eax + edx*4]
movdqa xmmword [eax + edx*4], xmm0
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0xc
mov dword [ebp - 0xc], ecx
mov ecx, dword [ebx + 8]
push ecx
lea eax, [edi*4]
push eax
push esi
mov dword [ebp - 0x10], 4
call fcn.0040feec
mov eax, dword [ebx + 0xc]
lea edx, [edi*4]
sub edx, eax
push edx
add eax, esi
push 0
push eax
call fcn.00402e70
lea ecx, [ebp - 0x10]
push ecx
lea edx, [ebp - 0xc]
push edx
call fcn.0046dc1e
shr eax, 2
mov ecx, eax
add esp, 0x24
xor eax, eax
test ecx, ecx
je 0x485fd1
mov edx, dword [esi + eax*4]
bswap edx
mov dword [esi + eax*4], edx
inc eax
cmp eax, ecx
jb 0x485fc4
mov ecx, dword [esi + edi*4 - 4]
mov eax, ecx
shr eax, 0x10
movzx edx, al
movzx eax, byte [edx + str.cw]
mov edx, ecx
shr edx, 8
shl eax, 8
movzx edx, dl
movzx edx, byte [edx + str.cw]
xor eax, edx
movzx edx, cl
movzx edx, byte [edx + str.cw]
shl eax, 8
xor eax, edx
shr ecx, 0x18
movzx ecx, byte [ecx + str.cw]
shl eax, 8
xor eax, ecx
xor eax, dword [esi]
mov dword [ebp - 4], 0x4afb64
xor eax, dword [0x4afb60]
mov dword [esi + edi*4], eax
mov ecx, dword [esi + 4]
xor ecx, eax
mov dword [esi + edi*4 + 4], ecx
mov eax, dword [esi + 8]
xor eax, ecx
mov dword [esi + edi*4 + 8], eax
mov edx, dword [esi + 0xc]
xor edx, eax
mov eax, dword [ebp - 8]
add eax, 0x18
mov dword [esi + edi*4 + 0xc], edx
mov ecx, dword [eax + 0x100]
mov edx, dword [eax + 0x104]
mov dword [ebp - 0x10], eax
lea eax, [edx + ecx*4]
lea ecx, [esi + edi*4 + 0x10]
cmp ecx, eax
je 0x48617c
mov eax, dword [ebx + 0xc]
cmp eax, 0x18
jne 0x486082
mov eax, dword [esi + 0x24]
xor eax, dword [esi + 0x10]
mov edx, dword [esi + 0x14]
xor edx, eax
mov dword [esi + 0x28], eax
mov dword [esi + 0x2c], edx
jmp 0x4860eb
cmp eax, 0x20
jne 0x4860eb
mov ecx, dword [esi + 0x2c]
mov edx, ecx
shr edx, 0x10
mov eax, ecx
shr eax, 0x18
movzx eax, byte [eax + str.cw]
movzx edx, dl
movzx edx, byte [edx + str.cw]
shl eax, 8
xor eax, edx
mov edx, ecx
shr edx, 8
movzx edx, dl
movzx edx, byte [edx + str.cw]
shl eax, 8
movzx ecx, cl
xor eax, edx
movzx edx, byte [ecx + str.cw]
mov ecx, dword [esi + 0x14]
shl eax, 8
xor eax, edx
xor eax, dword [esi + 0x10]
xor ecx, eax
mov dword [esi + 0x30], eax
mov eax, dword [esi + 0x18]
xor eax, ecx
mov dword [esi + 0x34], ecx
mov ecx, dword [esi + 0x1c]
xor ecx, eax
mov dword [esi + 0x38], eax
mov dword [esi + 0x3c], ecx
lea esi, [esi + edi*4]
mov eax, dword [esi + edi*4 - 4]
mov edx, eax
shr edx, 0x10
movzx ecx, dl
movzx edx, byte [ecx + str.cw]
mov ecx, eax
shr ecx, 8
movzx ecx, cl
movzx ecx, byte [ecx + str.cw]
shl edx, 8
xor edx, ecx
movzx ecx, al
movzx ecx, byte [ecx + str.cw]
shl edx, 8
xor edx, ecx
shr eax, 0x18
movzx eax, byte [eax + str.cw]
shl edx, 8
xor edx, eax
xor edx, dword [esi]
mov eax, dword [ebp - 4]
xor edx, dword [eax]
add eax, 4
mov dword [esi + edi*4], edx
mov dword [ebp - 4], eax
mov eax, dword [esi + 4]
xor eax, edx
mov dword [esi + edi*4 + 4], eax
mov ecx, dword [esi + 8]
xor ecx, eax
mov eax, dword [ebp - 0x10]
mov dword [esi + edi*4 + 8], ecx
mov edx, dword [esi + 0xc]
xor edx, ecx
mov dword [esi + edi*4 + 0xc], edx
mov ecx, dword [eax + 0x100]
mov edx, dword [eax + 0x104]
lea eax, [edx + ecx*4]
lea ecx, [esi + edi*4 + 0x10]
cmp ecx, eax
jne 0x486067
mov edi, dword [ebp - 8]
mov edx, dword [edi + 4]
mov eax, dword [edx + 0x1c]
mov esi, dword [edi + 0x11c]
lea ecx, [edi + 4]
call eax
test al, al
je 0x4861da
mov cl, byte [0x4d4110]
test cl, cl
jne 0x4861a3
call fcn.004848dd
xor eax, eax
mov edx, dword [esi + eax*4]
bswap edx
mov dword [esi + eax*4], edx
inc eax
cmp eax, 4
jb 0x4861a5
mov eax, dword [edi + 0x10]
shl eax, 4
add eax, esi
mov ecx, eax
sub ecx, eax
mov dword [ebp - 8], 4
mov edx, dword [ecx + eax]
bswap edx
mov dword [eax], edx
add eax, 4
dec dword [ebp - 8]
jne 0x4861c6
jmp 0x4866db
mov al, byte [0x4d4111]
test al, al
jne 0x4861e8
call fcn.00484965
mov eax, dword [edi + 0x10]
mov ecx, 4
lea eax, [eax*4 - 4]
mov dword [ebp - 0xc], ecx
mov dword [ebp - 0x10], eax
cmp eax, ecx
jbe 0x48650b
lea edi, [esi + eax*4 + 8]
lea eax, [esi + 0x18]
lea esp, [esp]
mov ecx, dword [eax - 8]
mov edx, ecx
shr ecx, 0x10
movzx ecx, cl
movzx ecx, byte [ecx + str.cw]
shr edx, 0x18
movzx edx, byte [edx + str.cw]
mov dword [ebp - 4], ecx
mov ecx, dword [edx*8 + 0x4d3914]
mov edx, dword [ebp - 4]
xor ecx, dword [edx*8 + 0x4d3911]
mov edx, dword [eax - 8]
shr edx, 8
movzx edx, dl
movzx edx, byte [edx + str.cw]
xor ecx, dword [edx*8 + 0x4d3912]
movzx edx, byte [eax - 8]
movzx edx, byte [edx + str.cw]
xor ecx, dword [edx*8 + 0x4d3913]
mov dword [ebp - 4], ecx
mov ecx, dword [edi - 8]
mov edx, ecx
shr ecx, 0x10
movzx ecx, cl
movzx ecx, byte [ecx + str.cw]
shr edx, 0x18
movzx edx, byte [edx + str.cw]
mov edx, dword [edx*8 + 0x4d3914]
xor edx, dword [ecx*8 + 0x4d3911]
mov ecx, dword [edi - 8]
shr ecx, 8
movzx ecx, cl
movzx ecx, byte [ecx + str.cw]
xor edx, dword [ecx*8 + 0x4d3912]
movzx ecx, byte [edi - 8]
movzx ecx, byte [ecx + str.cw]
xor edx, dword [ecx*8 + 0x4d3913]
mov dword [eax - 8], edx
mov edx, dword [ebp - 4]
mov dword [edi - 8], edx
mov ecx, dword [eax - 4]
mov edx, ecx
shr ecx, 0x10
movzx ecx, cl
movzx ecx, byte [ecx + str.cw]
shr edx, 0x18
movzx edx, byte [edx + str.cw]
mov dword [ebp - 4], ecx
mov ecx, dword [edx*8 + 0x4d3914]
mov edx, dword [ebp - 4]
xor ecx, dword [edx*8 + 0x4d3911]
mov edx, dword [eax - 4]
shr edx, 8
movzx edx, dl
movzx edx, byte [edx + str.cw]
xor ecx, dword [edx*8 + 0x4d3912]
movzx edx, byte [eax - 4]
movzx edx, byte [edx + str.cw]
xor ecx, dword [edx*8 + 0x4d3913]
mov dword [ebp - 4], ecx
mov ecx, dword [edi - 4]
mov edx, ecx
shr ecx, 0x10
movzx ecx, cl
movzx ecx, byte [ecx + str.cw]
shr edx, 0x18
movzx edx, byte [edx + str.cw]
mov edx, dword [edx*8 + 0x4d3914]
xor edx, dword [ecx*8 + 0x4d3911]
mov ecx, dword [edi - 4]
shr ecx, 8
movzx ecx, cl
movzx ecx, byte [ecx + str.cw]
xor edx, dword [ecx*8 + 0x4d3912]
movzx ecx, byte [edi - 4]
movzx ecx, byte [ecx + str.cw]
xor edx, dword [ecx*8 + 0x4d3913]
mov dword [eax - 4], edx
mov edx, dword [ebp - 4]
mov dword [edi - 4], edx
mov ecx, dword [eax]
mov edx, ecx
shr ecx, 0x10
movzx ecx, cl
movzx ecx, byte [ecx + str.cw]
shr edx, 0x18
movzx edx, byte [edx + str.cw]
mov dword [ebp - 4], ecx
mov ecx, dword [edx*8 + 0x4d3914]
mov edx, dword [ebp - 4]
xor ecx, dword [edx*8 + 0x4d3911]
mov edx, dword [eax]
shr edx, 8
movzx edx, dl
movzx edx, byte [edx + str.cw]
xor ecx, dword [edx*8 + 0x4d3912]
movzx edx, byte [eax]
movzx edx, byte [edx + str.cw]
xor ecx, dword [edx*8 + 0x4d3913]
mov dword [ebp - 4], ecx
mov ecx, dword [edi]
mov edx, ecx
shr ecx, 0x10
movzx ecx, cl
movzx ecx, byte [ecx + str.cw]
shr edx, 0x18
movzx edx, byte [edx + str.cw]
mov edx, dword [edx*8 + 0x4d3914]
xor edx, dword [ecx*8 + 0x4d3911]
mov ecx, dword [edi]
shr ecx, 8
movzx ecx, cl
movzx ecx, byte [ecx + str.cw]
xor edx, dword [ecx*8 + 0x4d3912]
movzx ecx, byte [edi]
movzx ecx, byte [ecx + str.cw]
xor edx, dword [ecx*8 + 0x4d3913]
mov dword [eax], edx
mov edx, dword [ebp - 4]
mov dword [edi], edx
mov ecx, dword [eax + 4]
mov edx, ecx
shr ecx, 0x10
movzx ecx, cl
movzx ecx, byte [ecx + str.cw]
shr edx, 0x18
movzx edx, byte [edx + str.cw]
mov dword [ebp - 4], ecx
mov ecx, dword [edx*8 + 0x4d3914]
mov edx, dword [ebp - 4]
xor ecx, dword [edx*8 + 0x4d3911]
mov edx, dword [eax + 4]
shr edx, 8
movzx edx, dl
movzx edx, byte [edx + str.cw]
xor ecx, dword [edx*8 + 0x4d3912]
movzx edx, byte [eax + 4]
movzx edx, byte [edx + str.cw]
xor ecx, dword [edx*8 + 0x4d3913]
mov dword [ebp - 4], ecx
mov ecx, dword [edi + 4]
mov edx, ecx
shr ecx, 0x10
movzx ecx, cl
movzx ecx, byte [ecx + str.cw]
shr edx, 0x18
movzx edx, byte [edx + str.cw]
mov edx, dword [edx*8 + 0x4d3914]
xor edx, dword [ecx*8 + 0x4d3911]
mov ecx, dword [edi + 4]
shr ecx, 8
movzx ecx, cl
movzx ecx, byte [ecx + str.cw]
xor edx, dword [ecx*8 + 0x4d3912]
movzx ecx, byte [edi + 4]
movzx ecx, byte [ecx + str.cw]
xor edx, dword [ecx*8 + 0x4d3913]
mov ecx, dword [ebp - 0xc]
mov dword [eax + 4], edx
mov edx, dword [ebp - 4]
mov dword [edi + 4], edx
add ecx, 4
mov edx, dword [ebp - 0x10]
sub edx, 4
add eax, 0x10
sub edi, 0x10
mov dword [ebp - 0xc], ecx
mov dword [ebp - 0x10], edx
cmp ecx, edx
jb 0x486210
mov edi, dword [ebp - 8]
mov eax, dword [esi + ecx*4]
mov edx, eax
shr eax, 0x10
movzx eax, al
movzx eax, byte [eax + str.cw]
shr edx, 0x18
movzx edx, byte [edx + str.cw]
mov edx, dword [edx*8 + 0x4d3914]
xor edx, dword [eax*8 + 0x4d3911]
mov eax, dword [esi + ecx*4]
shr eax, 8
movzx eax, al
movzx eax, byte [eax + str.cw]
xor edx, dword [eax*8 + 0x4d3912]
movzx eax, byte [esi + ecx*4]
movzx eax, byte [eax + str.cw]
xor edx, dword [eax*8 + 0x4d3913]
mov eax, dword [esi + ecx*4 + 4]
mov dword [esi + ecx*4], edx
mov edx, eax
shr eax, 0x10
movzx eax, al
movzx eax, byte [eax + str.cw]
shr edx, 0x18
movzx edx, byte [edx + str.cw]
mov edx, dword [edx*8 + 0x4d3914]
xor edx, dword [eax*8 + 0x4d3911]
mov eax, dword [esi + ecx*4 + 4]
shr eax, 8
movzx eax, al
movzx eax, byte [eax + str.cw]
xor edx, dword [eax*8 + 0x4d3912]
movzx eax, byte [esi + ecx*4 + 4]
movzx eax, byte [eax + str.cw]
xor edx, dword [eax*8 + 0x4d3913]
mov eax, dword [esi + ecx*4 + 8]
mov dword [esi + ecx*4 + 4], edx
mov edx, eax
shr eax, 0x10
movzx eax, al
movzx eax, byte [eax + str.cw]
shr edx, 0x18
movzx edx, byte [edx + str.cw]
mov edx, dword [edx*8 + 0x4d3914]
xor edx, dword [eax*8 + 0x4d3911]
mov eax, dword [esi + ecx*4 + 8]
shr eax, 8
movzx eax, al
movzx eax, byte [eax + str.cw]
xor edx, dword [eax*8 + 0x4d3912]
movzx eax, byte [esi + ecx*4 + 8]
movzx eax, byte [eax + str.cw]
xor edx, dword [eax*8 + 0x4d3913]
mov eax, dword [esi + ecx*4 + 0xc]
mov dword [esi + ecx*4 + 8], edx
mov edx, eax
shr eax, 0x10
movzx eax, al
movzx eax, byte [eax + str.cw]
shr edx, 0x18
movzx edx, byte [edx + str.cw]
mov edx, dword [edx*8 + 0x4d3914]
xor edx, dword [eax*8 + 0x4d3911]
mov eax, dword [esi + ecx*4 + 0xc]
shr eax, 8
movzx eax, al
movzx eax, byte [eax + str.cw]
xor edx, dword [eax*8 + 0x4d3912]
movzx eax, byte [esi + ecx*4 + 0xc]
movzx eax, byte [eax + str.cw]
xor edx, dword [eax*8 + 0x4d3913]
mov dword [esi + ecx*4 + 0xc], edx
mov ecx, dword [edi + 0x10]
mov eax, dword [esi]
add ecx, ecx
mov ecx, dword [esi + ecx*8]
bswap ecx
mov dword [esi], ecx
mov edx, dword [edi + 0x10]
bswap eax
add edx, edx
mov dword [esi + edx*8], eax
mov ecx, dword [edi + 0x10]
mov eax, dword [esi + 4]
add ecx, ecx
mov ecx, dword [esi + ecx*8 + 4]
bswap ecx
mov dword [esi + 4], ecx
mov edx, dword [edi + 0x10]
bswap eax
add edx, edx
mov dword [esi + edx*8 + 4], eax
mov ecx, dword [edi + 0x10]
mov eax, dword [esi + 8]
add ecx, ecx
mov ecx, dword [esi + ecx*8 + 8]
bswap ecx
mov dword [esi + 8], ecx
mov edx, dword [edi + 0x10]
bswap eax
add edx, edx
mov dword [esi + edx*8 + 8], eax
mov ecx, dword [edi + 0x10]
mov eax, dword [esi + 0xc]
add ecx, ecx
mov ecx, dword [esi + ecx*8 + 0xc]
bswap ecx
mov dword [esi + 0xc], ecx
mov edx, dword [edi + 0x10]
bswap eax
add edx, edx
mov dword [esi + edx*8 + 0xc], eax
cmp byte [0x4d4519], 0
jne 0x4866e9
call fcn.0048691e
cmp byte [0x4d451e], 0
je 0x48670f
mov edi, dword [edi + 0x10]
dec edi
shl edi, 4
shr edi, 2
test edi, edi
je 0x48670f
lea eax, [esi + 0x10]
mov ecx, dword [eax]
bswap ecx
mov dword [eax], ecx
add eax, 4
dec edi
jne 0x486703
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0xc