Function at 0x4eb230
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x64
push ebx
push esi
mov esi, dword [edx]
mov ebx, ecx
mov ecx, dword [edx + 4]
inc esi
push edi
mov edi, dword [edx + 0x10]
mov eax, dword [ebx]
push esi
push dword [ebx + 0xc]
mov dword [esp + 0x44], eax
mov eax, dword [edx + 0x14]
mov dword [esp + 0x38], ebx
mov dword [esp + 0x24], 0
mov dword [esp + 0x30], 0
mov dword [esp + 0x40], 0
mov dword [esp + 0x18], ecx
mov dword [esp + 0x2c], edi
mov dword [esp + 0x70], edi
mov dword [esp + 0x1c], eax
mov dword [esp + 0x74], eax
call fcn.00477970
mov ecx, dword [esp + 0x38]
add esp, 8
mov ebx, eax
mov dword [esp + 0x18], ebx
mov ecx, dword [ecx + 0xc]
push esi
push ecx
test ebx, ebx
jne 0x4eb2b8
call fcn.00477bf0
sub eax, 5
add esp, 8
neg eax
sbb eax, eax
and eax, 7
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
call fcn.00477500
mov ecx, dword [esp + 0x44]
mov dword [esp + 0x58], eax
mov ecx, dword [ecx + 0x24]
mov edx, dword [ecx]
mov dword [esp + 0x50], edx
lea edx, [esp + 0x4c]
push edx
push eax
mov eax, dword [esp + 0x40]
push ebx
mov edx, dword [eax + 0x14]
call fcn.004dee10
add esp, 0x14
test eax, eax
jne 0x4eb916
mov ebx, dword [ebp + 0x20]
nop
lea eax, [esp + 0x1c]
mov dword [esp + 0x4c], 0xffffffff
push eax
lea eax, [esp + 0x38]
mov dword [esp + 0x24], 0
push eax
lea eax, [esp + 0x28]
mov dword [esp + 0x3c], 0
push eax
lea eax, [esp + 0x58]
push eax
lea eax, [esp + 0x70]
push eax
mov eax, dword [esp + 0x5c]
push dword [esp + 0x58]
mov eax, dword [eax + 0x14]
call eax
mov esi, eax
add esp, 0x18
test esi, esi
jne 0x4eb86a
mov ecx, dword [esp + 0x10]
cmp dword [esp + 0x1c], ecx
jl 0x4eb2f0
cmp dword [esp + 0x38], eax
jne 0x4eb606
mov eax, dword [esp + 0x50]
sub eax, dword [esp + 0x20]
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x18]
add eax, dword [esp + 0x20]
mov dword [esp + 0x58], eax
mov eax, edi
or eax, dword [esp + 0x14]
je 0x4eb51a
mov eax, edi
mov dword [esp + 0x38], esi
and eax, 1
or eax, esi
jne 0x4eb3ab
mov ebx, dword [esp + 0x14]
inc esi
xor edx, edx
xor ecx, ecx
mov eax, esi
bts edx, eax
cmp eax, 0x20
cmovae ecx, edx
xor edx, ecx
cmp eax, 0x40
cmovae ecx, edx
and edx, edi
and ecx, ebx
or edx, ecx
je 0x4eb384
mov ebx, dword [ebp + 0x20]
mov dword [esp + 0x38], esi
mov edi, dword [ebp + 0x10]
xor edx, edx
dec edi
mov dword [esp + 0x2c], 0
xor ecx, ecx
mov eax, edi
bts edx, eax
cmp eax, 0x20
cmovae ecx, edx
xor edx, ecx
cmp eax, 0x40
cmovae ecx, edx
and edx, dword [esp + 0x24]
and ecx, dword [esp + 0x14]
or edx, ecx
jne 0x4eb410
mov ebx, dword [esp + 0x2c]
mov esi, dword [esp + 0x24]
dec edi
xor edx, edx
xor ecx, ecx
mov eax, edi
bts edx, eax
inc ebx
cmp eax, 0x20
cmovae ecx, edx
xor edx, ecx
cmp eax, 0x40
cmovae ecx, edx
and edx, esi
and ecx, dword [esp + 0x14]
or edx, ecx
je 0x4eb3e2
mov esi, dword [esp + 0x38]
mov dword [esp + 0x2c], ebx
mov ebx, dword [ebp + 0x20]
sub esi, dword [esp + 0x2c]
mov eax, esi
cdq
sub eax, edx
mov edi, eax
sar edi, 1
test edi, edi
jle 0x4eb51a
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x2c], 0
mov ecx, dword [eax + 0x24]
mov eax, dword [ecx]
mov dword [esp + 0x38], eax
lea eax, [esp + 0x40]
push eax
mov eax, dword [esp + 0x34]
push dword [esp + 0x58]
push dword [esp + 0x60]
mov edx, dword [eax + 0x14]
call fcn.004dee10
mov esi, eax
add esp, 0xc
test esi, esi
je 0x4eb465
mov ecx, dword [esp + 0x10]
jmp 0x4eb520
add edi, dword [ebp + 0x10]
mov eax, dword [esp + 0x40]
mov ebx, dword [esp + 0x38]
cmp dword [esp + 0x2c], edi
jge 0x4eb4ba
lea ecx, [esp + 0x2c]
mov dword [esp + 0x5c], 0
push ecx
lea ecx, [esp + 0x5c]
mov dword [esp + 0x58], 0
push ecx
lea ecx, [esp + 0x5c]
mov dword [esp + 0x60], 0
push ecx
lea ecx, [esp + 0x68]
push ecx
lea ecx, [esp + 0x74]
push ecx
push eax
mov eax, dword [ebx + 0x14]
call eax
mov esi, eax
add esp, 0x18
mov eax, dword [esp + 0x40]
test esi, esi
je 0x4eb470
push eax
mov eax, ebx
mov eax, dword [eax + 0x10]
call eax
mov ebx, dword [ebp + 0x20]
add esp, 4
test esi, esi
je 0x4eb4d7
cmp esi, 0x65
je 0x4eb4d7
mov ecx, dword [esp + 0x10]
jmp 0x4eb520
mov ecx, dword [esp + 0x10]
xor eax, eax
cmp esi, 0x65
sete al
sub eax, dword [ebp + 0x10]
add eax, dword [esp + 0x2c]
test eax, eax
jle 0x4eb51e
movq xmm1, qword [esp + 0x68]
add ecx, eax
movd xmm0, eax
psrlq xmm1, xmm0
mov dword [esp + 0x10], ecx
movq qword [esp + 0x68], xmm1
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0x24], eax
jmp 0x4eb51e
mov ecx, dword [esp + 0x10]
xor esi, esi
mov dword [esp + 0x38], 1
test esi, esi
jne 0x4eb904
test ecx, ecx
jg 0x4eb563
cmp dword [ebp + 8], esi
jg 0x4eb563
mov ecx, dword [esp + 0x20]
test ecx, ecx
je 0x4eb5f4
mov edx, dword [esp + 0x18]
push ecx
mov ecx, ebx
call fcn.004eb180
mov esi, eax
add esp, 4
test esi, esi
jne 0x4eb904
jmp 0x4eb5f4
mov edi, dword [ebp + 0x1c]
lea ecx, [edi + 1]
nop dword [eax]
mov al, byte [edi]
inc edi
test al, al
jne 0x4eb570
mov eax, dword [ebx + 4]
sub edi, ecx
mov edx, dword [ebx + 8]
lea ecx, [edi + 1]
add ecx, eax
cmp ecx, edx
jl 0x4eb5d4
mov eax, edx
cdq
mov esi, eax
mov ecx, edx
mov eax, edi
cdq
add esi, eax
mov eax, dword [ebx]
mov dword [esp + 0x58], eax
adc ecx, edx
add esi, 0x64
adc ecx, 0
mov dword [esp + 0x5c], ecx
call fcn.004d1900
test eax, eax
jne 0x4eb860
push dword [esp + 0x5c]
mov ecx, dword [esp + 0x5c]
push esi
call fcn.004521b0
add esp, 8
test eax, eax
je 0x4eb860
mov dword [ebx], eax
mov eax, dword [ebx + 4]
mov dword [ebx + 8], esi
mov ecx, dword [ebp + 0x1c]
mov esi, dword [ebx]
add eax, esi
push edi
push ecx
push eax
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [ebx + 4]
add esp, 0xc
add eax, edi
mov dword [ebx + 4], eax
mov byte [esi + eax], 0
xor esi, esi
mov ecx, dword [esp + 0x10]
mov edi, dword [esp + 0x24]
cmp dword [esp + 0x1c], ecx
jl 0x4eb2f0
mov eax, dword [ebp + 0x10]
mov edx, dword [esp + 0x1c]
add eax, ecx
cmp edx, eax
jge 0x4eb7dc
sub edx, ecx
xor eax, eax
xor ecx, ecx
bts ecx, edx
cmp edx, 0x20
cmovae eax, ecx
xor ecx, eax
cmp edx, 0x40
cmovae eax, ecx
and ecx, edi
and eax, dword [esp + 0x14]
or ecx, eax
je 0x4eb63f
mov edi, 1
jmp 0x4eb641
xor edi, edi
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x2c], edi
cmp dword [esp + 0x1c], ecx
jle 0x4eb675
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x20]
sub eax, ecx
push eax
lea edx, [edx + ecx]
mov ecx, ebx
call fcn.004eb180
mov esi, eax
add esp, 4
test esi, esi
jne 0x4eb7c3
test edi, edi
je 0x4eb708
mov edi, dword [ebp + 0x14]
lea ecx, [edi + 1]
mov al, byte [edi]
inc edi
test al, al
jne 0x4eb683
mov eax, dword [ebx + 4]
sub edi, ecx
mov edx, dword [ebx + 8]
lea ecx, [edi + 1]
add ecx, eax
cmp ecx, edx
jl 0x4eb6e7
mov eax, edx
cdq
mov esi, eax
mov ecx, edx
mov eax, edi
cdq
add esi, eax
mov eax, dword [ebx]
mov dword [esp + 0x58], eax
adc ecx, edx
add esi, 0x64
adc ecx, 0
mov dword [esp + 0x5c], ecx
call fcn.004d1900
test eax, eax
jne 0x4eb860
push dword [esp + 0x5c]
mov ecx, dword [esp + 0x5c]
push esi
call fcn.004521b0
add esp, 8
test eax, eax
je 0x4eb860
mov dword [ebx], eax
mov eax, dword [ebx + 4]
mov dword [ebx + 8], esi
mov esi, dword [ebx]
add eax, esi
push edi
push dword [ebp + 0x14]
push eax
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [ebx + 4]
add esp, 0xc
add eax, edi
mov edi, dword [esp + 0x2c]
mov dword [ebx + 4], eax
mov byte [esi + eax], 0
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x34]
sub eax, ecx
push eax
lea edx, [ecx + edx]
mov ecx, ebx
call fcn.004eb180
mov esi, eax
add esp, 4
test esi, esi
jne 0x4eb7c3
test edi, edi
je 0x4eb7c3
mov edi, dword [ebp + 0x18]
lea ecx, [edi + 1]
nop dword [eax]
mov al, byte [edi]
inc edi
test al, al
jne 0x4eb740
mov eax, dword [ebx + 4]
sub edi, ecx
mov edx, dword [ebx + 8]
lea ecx, [edi + 1]
add ecx, eax
cmp ecx, edx
jl 0x4eb7a4
mov eax, edx
cdq
mov esi, eax
mov ecx, edx
mov eax, edi
cdq
add esi, eax
mov eax, dword [ebx]
mov dword [esp + 0x58], eax
adc ecx, edx
add esi, 0x64
adc ecx, 0
mov dword [esp + 0x5c], ecx
call fcn.004d1900
test eax, eax
jne 0x4eb860
push dword [esp + 0x5c]
mov ecx, dword [esp + 0x5c]
push esi
call fcn.004521b0
add esp, 8
test eax, eax
je 0x4eb860
mov dword [ebx], eax
mov eax, dword [ebx + 4]
mov dword [ebx + 8], esi
mov esi, dword [ebx]
add eax, esi
push edi
push dword [ebp + 0x18]
push eax
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [ebx + 4]
add esp, 0xc
add eax, edi
mov dword [ebx + 4], eax
mov byte [esi + eax], 0
xor esi, esi
mov eax, dword [esp + 0x34]
mov dword [esp + 0x28], eax
test esi, esi
jne 0x4eb904
mov edi, dword [esp + 0x24]
jmp 0x4eb2f0
cmp dword [ebp + 0xc], 0
je 0x4eb904
mov edi, dword [ebp + 0x1c]
lea ecx, [edi + 1]
nop dword [eax]
mov al, byte [edi]
inc edi
test al, al
jne 0x4eb7f0
mov eax, dword [ebx + 4]
sub edi, ecx
mov edx, dword [ebx + 8]
lea ecx, [edi + 1]
add ecx, eax
cmp ecx, edx
jl 0x4eb84c
mov eax, edx
cdq
mov esi, eax
mov ecx, edx
mov eax, edi
cdq
add esi, eax
mov eax, dword [ebx]
mov dword [esp + 0x58], eax
adc ecx, edx
add esi, 0x64
adc ecx, 0
mov dword [esp + 0x5c], ecx
call fcn.004d1900
test eax, eax
jne 0x4eb860
push dword [esp + 0x5c]
mov ecx, dword [esp + 0x5c]
push esi
call fcn.004521b0
add esp, 8
test eax, eax
je 0x4eb860
mov dword [ebx], eax
mov eax, dword [ebx + 4]
mov dword [ebx + 8], esi
mov ecx, dword [ebp + 0x1c]
mov esi, dword [ebx]
add eax, esi
push edi
push ecx
push eax
call sub.VCRUNTIME140.dll_memcpy
jmp 0x4eb8f3
mov esi, 7
jmp 0x4eb904
cmp esi, 0x65
jne 0x4eb904
mov edi, dword [esp + 0x28]
add edi, dword [esp + 0x18]
lea ecx, [edi + 1]
nop
mov al, byte [edi]
inc edi
test al, al
jne 0x4eb880
mov eax, dword [ebx + 4]
sub edi, ecx
mov edx, dword [ebx + 8]
lea ecx, [edi + 1]
add ecx, eax
cmp ecx, edx
jl 0x4eb8dc
mov eax, edx
cdq
mov esi, eax
mov ecx, edx
mov eax, edi
cdq
add esi, eax
mov eax, dword [ebx]
mov dword [esp + 0x58], eax
adc ecx, edx
add esi, 0x64
adc ecx, 0
mov dword [esp + 0x5c], ecx
call fcn.004d1900
test eax, eax
jne 0x4eb860
push dword [esp + 0x5c]
mov ecx, dword [esp + 0x5c]
push esi
call fcn.004521b0
add esp, 8
test eax, eax
je 0x4eb860
mov dword [ebx], eax
mov eax, dword [ebx + 4]
mov dword [ebx + 8], esi
mov ecx, dword [esp + 0x18]
add ecx, dword [esp + 0x28]
mov esi, dword [ebx]
add eax, esi
push edi
push ecx
push eax
call sub.VCRUNTIME140.dll_memcpy
mov ebx, dword [ebp + 0x20]
mov eax, dword [ebx + 4]
add esp, 0xc
add eax, edi
mov dword [ebx + 4], eax
mov byte [esi + eax], 0
xor esi, esi
mov eax, dword [esp + 0x48]
push dword [esp + 0x44]
mov eax, dword [eax + 0x10]
call eax
add esp, 4
mov eax, esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret