Function at 0x4bf340
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0xd8
mov eax, dword [0x4d700c]
xor eax, esp
mov dword [esp + 0xd4], eax
push esi
push edi
lea ecx, [esp + 0x58]
call fcn.004bf100
movaps xmm0, xmmword [0x4d3350]
xor ecx, ecx
movups xmmword [esp + 0x18], xmm0
movaps xmm0, xmmword [0x4d3b30]
movups xmmword [esp + 0x28], xmm0
movaps xmm0, xmmword [0x4d3760]
movups xmmword [esp + 0x38], xmm0
movaps xmm0, xmmword [str.a_onm_a]
movups xmmword [esp + 0x48], xmm0
mov al, byte [esp + 0x18]
xor byte [esp + ecx + 0x19], al
inc ecx
cmp ecx, 0x3e
jb 0x4bf397
xorps xmm0, xmm0
mov byte [esp + 0x57], 0
lea ecx, [esp + 0x19]
movaps xmmword [esp + 0x90], xmm0
mov dword [esp + 0xa0], 0
lea edx, [ecx + 1]
mov dword [esp + 0xa4], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4bf3d2
sub ecx, edx
lea eax, [esp + 0x19]
push ecx
push eax
lea ecx, [esp + 0x98]
call fcn.004b4ff0
mov byte [esp + 8], 0x25
mov al, 0x56
xor al, byte [esp + 8]
mov cl, 0x4c
mov ch, 0x41
mov byte [esp + 9], al
mov al, byte [esp + 8]
mov dl, 0x12
xor cl, al
mov byte [esp + 0xf], 0
xor ch, al
mov byte [esp + 0xa], cl
mov ah, 0x72
mov byte [esp + 0xd], ch
mov dh, 0x49
mov byte [esp + 0xf], 0
xor dl, al
mov dword [esp + 0xc0], 0
xor ah, al
mov byte [esp + 0xb], dl
xor dh, al
mov byte [esp + 0xc], ah
xorps xmm0, xmm0
mov byte [esp + 0xe], dh
lea ecx, [esp + 9]
movaps xmmword [esp + 0xb0], xmm0
mov dword [esp + 0xc4], 0
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4bf460
sub ecx, edx
lea eax, [esp + 9]
push ecx
push eax
lea ecx, [esp + 0xb8]
call fcn.004b4ff0
mov byte [esp + 8], 0x44
mov al, 0x2d
xor al, byte [esp + 8]
mov cl, 2
xor cl, byte [esp + 8]
mov ch, 0x70
mov byte [esp + 9], al
mov dl, 7
mov byte [esp + 0xa], cl
mov ah, 0xf
mov cl, byte [esp + 8]
mov dh, 0x3e
mov byte [esp + 0x17], 0x26
xor ah, cl
mov al, byte [esp + 0x17]
xor ch, cl
xor al, cl
mov byte [esp + 0x16], 0x34
mov byte [esp + 0xf], al
xor dl, cl
mov al, byte [esp + 0x16]
xor dh, cl
xor al, cl
mov byte [esp + 0xd], ch
mov ecx, 1
mov byte [esp + 0xc], ah
cmp dword [esp + 0xc0], ecx
xorps xmm0, xmm0
mov byte [esp + 0x10], al
lea eax, [esp + 0xb0]
cmovb ecx, dword [esp + 0xc0]
cmp dword [esp + 0xc4], 0x10
push ecx
cmovae eax, dword [esp + 0xb4]
lea ecx, [esp + 0x74]
mov byte [esp + 0x15], 0
push eax
mov byte [esp + 0x13], dl
mov byte [esp + 0x16], dh
mov byte [esp + 0x19], 0
movaps xmmword [esp + 0x78], xmm0
mov dword [esp + 0x88], 0
mov dword [esp + 0x8c], 0
call fcn.004b4ff0
lea eax, [esp + 9]
push eax
lea ecx, [esp + 0x74]
call fcn.004b5380
mov ecx, dword [esp + 0x84]
mov byte [esp + 0x16], al
cmp ecx, 0x10
jb 0x4bf583
mov edx, dword [esp + 0x70]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4bf575
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4bfa08
push ecx
push edx
call fcn.004c6f3d
mov al, byte [esp + 0x1e]
add esp, 8
test al, al
je 0x4bf5ff
mov byte [esp + 8], 0x69
mov al, 3
xor al, byte [esp + 8]
mov cl, 0x51
mov byte [esp + 9], al
mov dl, 0x30
mov al, byte [esp + 8]
mov ch, 0x3f
mov dh, 0x5c
mov byte [esp + 0x16], 1
xor cl, al
mov byte [esp + 0x10], 0
xor dl, al
mov byte [esp + 0xa], cl
xor ch, al
mov byte [esp + 0xb], dl
xor dh, al
mov byte [esp + 0xd], ch
mov ah, 0x10
mov byte [esp + 0xe], dh
xor ah, al
mov byte [esp + 0x10], 0
mov al, byte [esp + 0x16]
lea ecx, [esp + 9]
xor al, byte [esp + 8]
lea edx, [ecx + 1]
mov byte [esp + 0xc], ah
mov byte [esp + 0xf], al
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4bf5e4
sub ecx, edx
lea eax, [esp + 9]
push ecx
push eax
lea ecx, [esp + 0xb8]
call fcn.004b45a0
mov ecx, dword [esp + 0xc4]
cmp ecx, 0x10
jb 0x4bf63b
mov edx, dword [esp + 0xb0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4bf631
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4bfa08
push ecx
push edx
call fcn.004c6f3d
add esp, 8
mov ecx, dword [esp + 0x68]
xor edi, edi
test ecx, ecx
je 0x4bf6cb
mov eax, dword [esp + 0xa0]
xor esi, esi
test eax, eax
je 0x4bf6a9
mov byte [esp + 8], 0
nop dword [eax + eax]
cmp dword [esp + 0xa4], 0x10
lea edx, [esp + 0x90]
push edi
cmovae edx, dword [esp + 0x94]
lea ecx, [esp + 0x5c]
call fcn.004b3cf0
mov ecx, dword [esp + 8]
movzx ecx, cl
mov al, byte [eax]
cmp al, byte [edx + esi]
mov eax, 1
cmove ecx, eax
mov eax, dword [esp + 0xa0]
inc esi
mov dword [esp + 8], ecx
cmp esi, eax
jb 0x4bf660
test cl, cl
jne 0x4bf6c2
cmp dword [esp + 0x6c], 0x10
lea eax, [esp + 0x58]
cmovae eax, dword [esp + 0x58]
mov byte [eax + edi], 0x20
mov eax, dword [esp + 0xa0]
mov ecx, dword [esp + 0x68]
inc edi
cmp edi, ecx
jb 0x4bf650
mov edi, dword [esp + 0x6c]
lea eax, [esp + 0x58]
mov edx, dword [esp + 0x58]
lea esi, [esp + 0x58]
cmp edi, 0x10
push 0x20
cmovae eax, edx
add eax, ecx
cmp edi, 0x10
mov dword [esp + 0xc], eax
cmovae esi, edx
add esi, ecx
cmp edi, 0x10
lea ecx, [esp + 0x5c]
cmovae ecx, edx
mov edx, esi
call fcn.004c3f20
add esp, 4
mov edi, eax
cmp eax, esi
je 0x4bf71f
inc eax
cmp eax, esi
je 0x4bf71f
mov cl, byte [eax]
cmp cl, 0x20
je 0x4bf71a
mov byte [edi], cl
inc edi
inc eax
cmp eax, esi
jne 0x4bf710
cmp dword [esp + 0x6c], 0x10
lea eax, [esp + 0x58]
mov esi, edi
lea ecx, [esp + 0x58]
cmovae eax, dword [esp + 0x58]
sub dword [esp + 8], edi
sub esi, eax
mov edi, dword [esp + 0x68]
mov eax, edi
mov edx, dword [esp + 8]
sub eax, esi
cmp eax, edx
cmovb edx, eax
cmp dword [esp + 0x6c], 0x10
mov dword [esp + 8], edx
cmovae ecx, dword [esp + 0x58]
sub edi, edx
add ecx, esi
mov eax, edi
sub eax, esi
inc eax
push eax
lea eax, [ecx + edx]
push eax
push ecx
call sub.VCRUNTIME140.dll_memmove
mov eax, dword [0x4d77d0]
add esp, 0xc
mov dword [esp + 0x68], edi
cmp eax, 1
jne 0x4bf900
cmp dword [0x4d70a8], 0x10
jae 0x4bf99e
xor al, al
mov byte [esp + 8], 0x34
mov byte [esp + 0x10], al
mov cl, 5
xor al, byte [esp + 8]
mov dl, 0x77
mov byte [esp + 9], al
mov ch, 0x43
mov al, byte [esp + 8]
mov dh, 0x53
xor cl, al
mov byte [esp + 0x16], 0x4c
xor dl, al
mov byte [esp + 0xa], cl
xor ch, al
mov byte [esp + 0xb], dl
xor dh, al
mov byte [esp + 0xd], ch
mov ah, 0x63
mov byte [esp + 0xe], dh
xor ah, al
mov byte [esp + 0x10], 0
mov al, byte [esp + 0x16]
lea ecx, [esp + 9]
xor al, byte [esp + 8]
lea edx, [ecx + 1]
xorps xmm0, xmm0
mov byte [esp + 0xc], ah
mov byte [esp + 0xf], al
movaps xmmword [esp + 0x70], xmm0
mov dword [esp + 0x80], 0
mov dword [esp + 0x84], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4bf808
sub ecx, edx
lea eax, [esp + 9]
push ecx
push eax
lea ecx, [esp + 0x78]
call fcn.004b4ff0
mov byte [esp + 8], 0x2b
mov al, 0x5b
xor al, byte [esp + 8]
mov ah, 0x78
mov byte [esp + 9], al
mov cl, 0x67
mov al, byte [esp + 8]
mov dl, 0x7c
xor ah, al
mov byte [esp + 0xf], 0
mov ch, 0x6a
mov byte [esp + 0xc], ah
mov dh, 0x1c
mov byte [esp + 0xf], 0
xor cl, al
xor ch, al
xor dl, al
mov byte [esp + 0xa], cl
xor dh, al
mov byte [esp + 0xd], ch
lea eax, [esp + 9]
mov byte [esp + 0xb], dl
push eax
lea ecx, [esp + 0x74]
mov byte [esp + 0x12], dh
call fcn.004b3d50
mov ecx, dword [esp + 0x84]
cmp ecx, 0x10
jb 0x4bf8ae
mov edx, dword [esp + 0x70]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4bf8a4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4bf8a4
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.004c6f3d
add esp, 8
mov ecx, 0x10
mov dword [esp + 0x80], 0
sub ecx, dword [0x4d70a8]
lea eax, [esp + 0x58]
cmp dword [esp + 0x68], ecx
xorps xmm0, xmm0
movaps xmmword [esp + 0x70], xmm0
cmovb ecx, dword [esp + 0x68]
cmp dword [esp + 0x6c], 0x10
push ecx
cmovae eax, dword [esp + 0x5c]
lea ecx, [esp + 0x74]
push eax
mov dword [esp + 0x8c], 0
call fcn.004b4ff0
mov ecx, 0x4d7098
jmp 0x4bf95f
cmp eax, 2
jne 0x4bf99e
mov eax, dword [0x4d70d8]
cmp eax, 0x10
jae 0x4bf99e
mov ecx, 0x10
mov dword [esp + 0x80], 0
sub ecx, eax
mov dword [esp + 0x84], 0
cmp edi, ecx
lea eax, [esp + 0x58]
xorps xmm0, xmm0
cmovb ecx, edi
movaps xmmword [esp + 0x70], xmm0
cmp dword [esp + 0x6c], 0x10
push ecx
cmovae eax, dword [esp + 0x5c]
lea ecx, [esp + 0x74]
push eax
call fcn.004b4ff0
mov ecx, 0x4d70c8
lea eax, [esp + 0x70]
push eax
call fcn.004b3dc0
mov ecx, dword [esp + 0x84]
cmp ecx, 0x10
jb 0x4bf99e
mov edx, dword [esp + 0x70]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4bf994
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4bfa08
push ecx
push edx
call fcn.004c6f3d
add esp, 8
mov eax, dword [esp + 0xa4]
cmp eax, 0x10
jb 0x4bf9e0
lea ecx, [eax + 1]
mov eax, dword [esp + 0x90]
mov edx, eax
cmp ecx, 0x1000
jb 0x4bf9d6
mov eax, dword [edx - 4]
add ecx, 0x23
sub edx, eax
mov dword [esp + 8], eax
lea eax, [edx - 4]
cmp eax, 0x1f
ja 0x4bfa08
mov eax, dword [esp + 8]
push ecx
push eax
call fcn.004c6f3d
add esp, 8
mov ecx, dword [esp + 0x6c]
cmp ecx, 0x10
jb 0x4bfa18
mov edx, dword [esp + 0x58]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4bfa0e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4bfa0e
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.004c6f3d
add esp, 8
mov ecx, dword [esp + 0xdc]
pop edi
pop esi
xor ecx, esp
call fcn.004c6ca9
mov esp, ebp
pop ebp
ret