Function at 0x4b9f6f
Capabilities:
Encode data using xor

Disassembly:
push 0x668
mov eax, 0x517890
call fcn.004e3d69
xor esi, esi
cmp dword [ebp + 8], esi
jge 0x4b9f88
mov dword [ebp + 8], esi
mov ebx, 0x200
push ebx
lea eax, [ebp - 0x640]
push esi
push eax
call fcn.004e38a0
add esp, 0xc
push 0xa
lea eax, [ebp - 0x640]
push eax
push dword [ebp + 8]
call fcn.004e3676
add esp, 0xc
lea eax, [ebp - 0x640]
push eax
lea ecx, [ebp - 0x658]
call fcn.0040253b
mov edi, 0x6098a8
mov dword [ebp - 4], esi
push edi
mov dword [ebp - 0x674], edi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov byte [ebp - 4], 1
call fcn.004be6f3
push eax
lea ecx, [ebp - 0x654]
call fcn.004027f9
push esi
lea eax, [ebp - 0x654]
push 0x5b2754
push eax
mov byte [ebp - 4], 2
call fcn.00402a1d
mov esi, dword [ebp - 0x658]
add esp, 0xc
push dword [ebp - 0x654]
mov ecx, 0x60b2d8
call fcn.004ccb16
push esi
mov ecx, eax
call fcn.00402719
mov eax, dword [ebp - 0x658]
mov dword [ebp - 0x644], eax
lea eax, [ebp - 0x64c]
push eax
lea esi, [ebp - 0x670]
mov dword [ebp - 0x64c], VariantCopy
call fcn.0040ac2c
mov byte [ebp - 4], 3
call fcn.004be6f3
push eax
lea ecx, [ebp - 0x650]
call fcn.004027f9
push 0
mov byte [ebp - 4], 4
push dword [0x60b2bc]
lea eax, [ebp - 0x650]
push dword [0x60b2c4]
push eax
call fcn.00402a1d
add esp, 0x10
call fcn.004be6f3
push eax
lea ecx, [ebp - 0x64c]
call fcn.004027f9
push ebx
lea eax, [ebp - 0x440]
push 0
mov byte [ebp - 4], 5
push eax
mov dword [ebp - 0x670], 0x2001f
call fcn.004e38a0
add esp, 0xc
mov ebx, 0xff
push ebx
push dword [ebp - 0x644]
lea eax, [ebp - 0x440]
push eax
call fcn.004dfd1a
mov eax, dword [0x60b2d4]
add esp, 0xc
cmp dword [eax - 0xc], 0
jne 0x4ba10e
mov ecx, dword [ebp - 0x64c]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [ebp - 0x650]
add ecx, 0xfffffff0
call fcn.0040285b
call fcn.0040aca6
mov ecx, dword [ebp - 0x668]
add ecx, 0xfffffff0
call fcn.0040285b
jmp 0x4ba361
push 7
pop ecx
mov esi, str.Microsoft_Visual_C_Library
lea edi, [ebp - 0x30]
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov esi, 0x101
push esi
lea eax, [ebp - 0x138]
push 0
push eax
call fcn.004e38a0
add esp, 0xc
push esi
lea eax, [ebp - 0x240]
push 0
push eax
call fcn.004e38a0
add esp, 0xc
xor eax, eax
lea edi, [esi - 1]
mov byte [ebp + eax - 0x138], al
inc eax
cmp eax, edi
jb 0x4ba14a
mov ecx, dword [0x60b2d4]
mov ecx, dword [ecx - 0xc]
xor eax, eax
xor esi, esi
test ecx, ecx
je 0x4ba185
cmp eax, ecx
jb 0x4ba16d
xor eax, eax
mov edx, dword [0x60b2d4]
mov dl, byte [edx + eax*2]
inc eax
mov byte [ebp + esi - 0x240], dl
inc esi
cmp esi, edi
jb 0x4ba167
jmp 0x4ba19d
cmp eax, 0x1c
jb 0x4ba18c
xor eax, eax
mov cl, byte [ebp + eax - 0x30]
inc eax
mov byte [ebp + esi - 0x240], cl
inc esi
cmp esi, edi
jb 0x4ba185
xor edi, edi
mov dword [ebp - 0x648], edi
movzx edx, byte [ebp + edi - 0x240]
add edx, dword [ebp - 0x648]
lea eax, [ebp + edi - 0x138]
mov cl, byte [eax]
movzx esi, cl
add esi, edx
and esi, ebx
mov edx, esi
movzx cx, cl
lea esi, [ebp + edx - 0x138]
mov dword [ebp - 0x648], edx
mov dl, byte [esi]
movzx ecx, cx
inc edi
mov byte [eax], dl
mov byte [esi], cl
cmp edi, 0x100
jb 0x4ba1a5
xor edi, edi
mov dword [ebp - 0x648], edi
mov dword [ebp - 0x644], edi
inc edi
and edi, ebx
lea eax, [ebp + edi - 0x138]
mov cl, byte [eax]
movzx edx, cl
add edx, dword [ebp - 0x648]
movzx cx, cl
and edx, ebx
movzx ecx, cx
lea esi, [ebp + edx - 0x138]
mov dword [ebp - 0x648], edx
mov dl, byte [esi]
mov byte [eax], dl
mov byte [esi], cl
movzx eax, byte [eax]
movzx ecx, cl
add eax, ecx
mov ecx, dword [ebp - 0x644]
and eax, ebx
movzx ax, byte [ebp + eax - 0x138]
movzx eax, ax
lea ecx, [ebp + ecx - 0x440]
xor byte [ecx], al
inc dword [ebp - 0x644]
cmp dword [ebp - 0x644], 0x1fe
jb 0x4ba1f6
xor eax, eax
mov word [ebp - 0x242], ax
call fcn.004be6f3
push eax
lea ecx, [ebp - 0x644]
call fcn.004027f9
push 0
mov byte [ebp - 4], 6
push dword [0x60b2cc]
lea eax, [ebp - 0x644]
push eax
call fcn.00402a1d
add esp, 8
lea eax, [ebp - 0x644]
mov dword [ebp - 0x648], esp
mov ecx, esp
push eax
lea esi, [ebp - 0x440]
call fcn.00402305
mov ecx, esi
call fcn.004b7807
pop ecx
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x644]
add ecx, 0xfffffff0
call fcn.0040285b
mov edi, dword [ebp - 0x650]
push 1
push edi
push SysReAllocStringLen
lea esi, [ebp - 0x670]
call fcn.0040ac48
mov ebx, dword [ebp - 0x64c]
test eax, eax
je 0x4ba303
push 0x200
lea eax, [ebp - 0x440]
push eax
push ebx
mov eax, esi
call fcn.0040aeda
call fcn.0040aca6
push 1
push edi
push reloc.OLEAUT32.dll_SysReAllocString
lea esi, [ebp - 0x670]
call fcn.0040ac48
test eax, eax
je 0x4ba333
push 0x200
lea eax, [ebp - 0x440]
push eax
push ebx
mov eax, esi
call fcn.0040aeda
call fcn.0040aca6
lea ecx, [ebx - 0x10]
call fcn.0040285b
lea ecx, [edi - 0x10]
call fcn.0040285b
lea esi, [ebp - 0x670]
call fcn.0040aca6
mov ecx, dword [ebp - 0x668]
add ecx, 0xfffffff0
call fcn.0040285b
mov edi, 0x6098a8
mov ecx, dword [ebp - 0x654]
add ecx, 0xfffffff0
call fcn.0040285b
push edi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [ebp - 0x658]
add ecx, 0xfffffff0
call fcn.0040285b
call fcn.004e3dec
ret 4