Function at 0x494e30
Capabilities:
Encode data using xor

Disassembly:
mov eax, 0xd8
call fcn.004c1db0
mov eax, dword [section..data]
xor eax, esp
mov dword [esp + 0xd4], eax
mov eax, dword [esp + 0xdc]
push ebx
mov ebx, dword [esp + 0xf0]
push ebp
mov ebp, dword [esp + 0xf0]
push esi
mov esi, dword [esp + 0xf0]
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x100]
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x104]
shr esi, 3
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x108]
mov dword [esp + 0x20], ebp
mov dword [esp + 0x44], ebx
mov dword [esp + 0x54], eax
mov dword [esp + 0x38], 0
mov dword [esp + 0x30], 0
mov dword [esp + 0x2c], 2
push edi
mov edi, dword [esp + 0x110]
mov dword [esp + 0x1c], edi
cmp esi, 0x14
je 0x494ed1
cmp esi, 0x1c
je 0x494ed1
cmp esi, 0x20
je 0x494ed1
xor eax, eax
jmp 0x4955ca
test ebp, ebp
jne 0x494f06
cmp esi, 0x14
jne 0x494ee7
call fcn.0047e1b0
mov ebp, eax
mov dword [esp + 0x24], ebp
jmp 0x494f11
cmp esi, 0x1c
jne 0x494ef9
call fcn.0047e1c0
mov ebp, eax
mov dword [esp + 0x24], ebp
jmp 0x494f11
call fcn.0047e1d0
mov ebp, eax
mov dword [esp + 0x24], ebp
jmp 0x494f11
push ebp
call fcn.004719f0
add esp, 4
mov esi, eax
mov ecx, dword [esp + 0xf0]
mov eax, 0x200
cmp ecx, eax
cmovb ecx, eax
lea eax, [ecx + 0x3f]
and eax, 0xffffffc0
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x100]
test eax, eax
je 0x494f42
xor ecx, ecx
cmp eax, esi
cmovb ebx, ecx
mov dword [esp + 0x48], ebx
cmp eax, esi
cmova eax, esi
mov dword [esp + 0x100], eax
test ebx, ebx
je 0x494f64
push eax
lea eax, [esp + 0xa8]
push ebx
push eax
call sub.MSVCR120.dll_memcpy
add esp, 0xc
call fcn.004a9190
mov dword [esp + 0x2c], eax
test eax, eax
je 0x4955c6
call fcn.00498e30
mov ebx, eax
mov dword [esp + 0x10], ebx
test ebx, ebx
je 0x4955ba
push ebx
call fcn.00498eb0
push ebx
call fcn.00498dd0
push dword [esp + 0x18]
mov ebx, eax
call fcn.00498dd0
push dword [esp + 0x1c]
mov dword [esp + 0x38], eax
call fcn.00498dd0
push dword [esp + 0x20]
mov dword [esp + 0x58], eax
call fcn.00498dd0
push dword [esp + 0x24]
mov dword [esp + 0x38], eax
call fcn.00498dd0
push dword [esp + 0x28]
mov dword [esp + 0x6c], eax
call fcn.00498dd0
push dword [esp + 0x2c]
mov dword [esp + 0x6c], eax
call fcn.00498dd0
push dword [esp + 0x30]
mov dword [esp + 0x3c], eax
call fcn.00498dd0
add esp, 0x24
mov dword [esp + 0x14], eax
test eax, eax
je 0x4955a7
mov eax, dword [esp + 0x38]
dec eax
push eax
call fcn.004781d0
push eax
push dword [esp + 0x1c]
call fcn.004787f0
add esp, 0xc
test eax, eax
je 0x4955a7
lea esp, [esp]
push dword [esp + 0x34]
push 0
push edi
call fcn.004a78f0
inc dword [esp + 0x40]
add esp, 0xc
test eax, eax
je 0x4955a7
cmp dword [esp + 0x100], 0
je 0x495057
cmp dword [esp + 0x48], 0
je 0x495057
xor edi, edi
mov dword [esp + 0x100], edi
jmp 0x495075
lea eax, [esp + 0xa4]
push esi
push eax
call fcn.00471aa0
add esp, 8
test eax, eax
jle 0x4955a7
mov edi, 1
push esi
lea eax, [esp + 0xa8]
push eax
lea eax, [esp + 0x8c]
push eax
call sub.MSVCR120.dll_memcpy
push esi
lea eax, [esp + 0xb4]
push eax
lea eax, [esp + 0xd8]
push eax
call sub.MSVCR120.dll_memcpy
lea eax, [esi - 1]
add esp, 0x18
test eax, eax
js 0x4950bc
jmp 0x4950b0
inc byte [esp + eax + 0x84]
jne 0x4950bc
dec eax
jns 0x4950b0
push 0
push ebp
push 0
lea eax, [esp + 0x70]
push eax
lea eax, [esp + 0xb4]
push esi
push eax
call fcn.0047db00
add esp, 0x18
test eax, eax
je 0x4955a7
push 0
push ebp
push 0
lea eax, [esp + 0xd0]
push eax
lea eax, [esp + 0x94]
push esi
push eax
call fcn.0047db00
add esp, 0x18
test eax, eax
je 0x4955a7
xor ecx, ecx
test esi, esi
jle 0x495180
cmp esi, 0x20
jb 0x495169
mov eax, esi
and eax, 0x8000001f
jns 0x49511e
dec eax
or eax, 0xffffffe0
inc eax
mov edx, esi
sub edx, eax
jmp 0x495130
movdqu xmm0, xmmword [esp + ecx + 0x64]
movdqu xmm1, xmmword [esp + ecx + 0xc4]
pxor xmm1, xmm0
movdqu xmmword [esp + ecx + 0x64], xmm1
movdqu xmm0, xmmword [esp + ecx + 0x74]
movdqu xmm1, xmmword [esp + ecx + 0xd4]
pxor xmm1, xmm0
movdqu xmmword [esp + ecx + 0x74], xmm1
add ecx, 0x20
cmp ecx, edx
jl 0x495130
cmp ecx, esi
jge 0x495180
lea ecx, [ecx]
mov al, byte [esp + ecx + 0xc4]
xor byte [esp + ecx + 0x64], al
inc ecx
cmp ecx, esi
jl 0x495170
push dword [esp + 0x20]
or byte [esp + 0x68], 0x80
lea eax, [esp + 0x68]
or byte [esp + esi + 0x67], 1
push esi
push eax
call fcn.00477900
add esp, 0xc
test eax, eax
je 0x4955a7
push dword [esp + 0x1c]
push edi
push dword [esp + 0x18]
push 0x40
push dword [esp + 0x30]
call fcn.004a7b60
add esp, 0x14
test eax, eax
jg 0x4951ce
jne 0x4955a7
mov edi, dword [esp + 0x1c]
jmp 0x495020
mov ebp, dword [esp + 0x1c]
push 0
push 2
push ebp
call fcn.004a78f0
add esp, 0xc
test eax, eax
je 0x4955a7
push 0
push 3
push ebp
call fcn.004a78f0
add esp, 0xc
test eax, eax
je 0x4955a7
mov ecx, dword [esp + 0x38]
mov eax, 0xcccccccd
xor edi, edi
mov dword [esp + 0x40], edi
lea ecx, [ecx - 1]
mul ecx
mov ebp, edx
shr ebp, 7
test edi, edi
je 0x495230
push edi
push 0
push dword [esp + 0x24]
call fcn.004a78f0
add esp, 0xc
test eax, eax
je 0x4955a7
push 0
push dword [esp + 0x48]
call fcn.00478130
add esp, 8
xor edi, edi
test ebp, ebp
js 0x4952d6
lea eax, [esi - 1]
test eax, eax
js 0x49525c
nop
inc byte [esp + eax + 0x84]
jne 0x49525c
dec eax
jns 0x495250
push 0
push dword [esp + 0x28]
lea eax, [esp + 0x6c]
push 0
push eax
lea eax, [esp + 0x94]
push esi
push eax
call fcn.0047db00
add esp, 0x18
test eax, eax
je 0x4955a7
push ebx
lea eax, [esp + 0x68]
push esi
push eax
call fcn.00477900
add esp, 0xc
test eax, eax
je 0x4955a7
lea eax, [esi*8]
imul eax, edi
push eax
push ebx
push ebx
call fcn.004787f0
add esp, 0xc
test eax, eax
je 0x4955a7
mov eax, dword [esp + 0x44]
push ebx
push eax
push eax
call fcn.00482630
add esp, 0xc
test eax, eax
je 0x4955a7
inc edi
cmp edi, ebp
jle 0x495248
mov eax, dword [esp + 0x38]
mov edi, dword [esp + 0x44]
dec eax
push eax
push edi
call fcn.00477ec0
add esp, 8
test eax, eax
je 0x4955a7
push edi
mov edi, dword [esp + 0x54]
push edi
call fcn.00477d10
add esp, 8
test eax, eax
je 0x4955a7
push dword [esp + 0x14]
push edi
push edi
call fcn.00482630
add esp, 0xc
test eax, eax
je 0x4955a7
push dword [esp + 0x20]
push ebx
call fcn.00478960
add esp, 8
test eax, eax
je 0x4955a7
push dword [esp + 0x10]
push ebx
push edi
push dword [esp + 0x58]
push 0
call fcn.004a82f0
add esp, 0x14
test eax, eax
je 0x4955a7
call fcn.004781d0
push eax
push dword [esp + 0x50]
push ebx
call fcn.004826c0
add esp, 0xc
test eax, eax
je 0x4955a7
push ebx
push edi
mov edi, dword [esp + 0x20]
push edi
call fcn.004826c0
add esp, 0xc
test eax, eax
je 0x4955a7
push dword [esp + 0x14]
push edi
call fcn.00477ad0
add esp, 8
test eax, eax
js 0x4953b4
mov edi, dword [esp + 0x1c]
push edi
push 1
push dword [esp + 0x18]
push 0x40
push dword [esp + 0x28]
call fcn.004a7b60
add esp, 0x14
test eax, eax
jg 0x4953d6
jne 0x4955a7
mov edi, dword [esp + 0x40]
inc edi
mov dword [esp + 0x40], edi
cmp edi, 0x1000
jl 0x495215
mov ebp, dword [esp + 0x24]
mov edi, dword [esp + 0x1c]
jmp 0x495020
push 1
push 2
push edi
call fcn.004a78f0
add esp, 0xc
test eax, eax
je 0x4955a7
call fcn.004781d0
push eax
push dword [esp + 0x1c]
push dword [esp + 0x1c]
call fcn.004826c0
add esp, 0xc
test eax, eax
je 0x4955a7
mov ebp, dword [esp + 0x10]
push ebp
push dword [esp + 0x24]
push dword [esp + 0x1c]
push 0
push ebx
call fcn.004a82f0
add esp, 0x14
test eax, eax
je 0x4955a7
push 2
push dword [esp + 0x18]
call fcn.00478130
add esp, 8
test eax, eax
je 0x4955a7
push ebp
push dword [esp + 0x1c]
push dword [esp + 0x34]
call fcn.004a91f0
add esp, 0xc
test eax, eax
je 0x4955a7
push dword [esp + 0x2c]
push ebp
push dword [esp + 0x20]
push ebx
push dword [esp + 0x24]
push dword [esp + 0x3c]
call fcn.0049c530
add esp, 0x18
test eax, eax
je 0x4955a7
lea ebx, [ebx]
mov ecx, dword [esp + 0x28]
cmp dword [ecx + 4], 1
jne 0x4954da
mov eax, dword [ecx]
cmp dword [eax], 1
jne 0x4954da
cmp dword [ecx + 0xc], 0
jne 0x4954da
call fcn.004781d0
push eax
mov eax, dword [esp + 0x18]
push eax
push eax
call fcn.00482630
add esp, 0xc
test eax, eax
je 0x4955a7
push dword [esp + 0x2c]
inc dword [esp + 0x34]
push ebp
push dword [esp + 0x20]
push ebx
push dword [esp + 0x24]
push dword [esp + 0x3c]
call fcn.0049c530
add esp, 0x18
test eax, eax
jne 0x495480
jmp 0x4955a7
push 1
push 3
push edi
call fcn.004a78f0
add esp, 0xc
test eax, eax
je 0x4955a7
mov ebx, dword [esp + 0x60]
mov dword [esp + 0x3c], 1
jmp 0x495500
mov eax, dword [ebx + 0xc]
test eax, eax
je 0x495510
push eax
call fcn.00477e20
add esp, 4
mov eax, dword [ebx + 0x10]
test eax, eax
je 0x495520
push eax
call fcn.00477e20
add esp, 4
mov eax, dword [ebx + 0x14]
test eax, eax
je 0x495530
push eax
call fcn.00477e20
add esp, 4
push dword [esp + 0x18]
call fcn.00477de0
push dword [esp + 0x24]
mov dword [ebx + 0xc], eax
call fcn.00477de0
push dword [esp + 0x30]
mov dword [ebx + 0x10], eax
call fcn.00477de0
add esp, 0xc
mov dword [ebx + 0x14], eax
cmp dword [ebx + 0xc], 0
je 0x49559f
cmp dword [ebx + 0x10], 0
je 0x49559f
test eax, eax
je 0x49559f
mov ecx, dword [esp + 0x5c]
test ecx, ecx
je 0x495575
mov eax, dword [esp + 0x40]
mov dword [ecx], eax
mov ecx, dword [esp + 0x58]
test ecx, ecx
je 0x495583
mov eax, dword [esp + 0x30]
mov dword [ecx], eax
mov eax, dword [esp + 0x54]
test eax, eax
je 0x4955a7
push esi
lea ecx, [esp + 0xa8]
push ecx
push eax
call sub.MSVCR120.dll_memcpy
add esp, 0xc
jmp 0x4955a7
mov dword [esp + 0x3c], 0
mov ebx, dword [esp + 0x10]
push ebx
call fcn.00498d60
push ebx
call fcn.00498da0
add esp, 8
push dword [esp + 0x2c]
call fcn.004a9150
add esp, 4
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0xe4]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.0046bea8
add esp, 0xd8
ret