Function at 0x4f6c90
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x34
mov esi, edx
mov edx, dword [ebp + 8]
mov edi, ecx
cmp edx, 0xe
jne 0x4f6da1
push 0xe
push str.Decimal_NumberenclosingmarkEnclosing_MarkfinalpunctuationFinal_PunctuationformatinitialpunctuationInitial_PunctuationlLetterletterletternumberLetter_NumberlineseparatorLine_SeparatorllLowercase_LetterlmModifier_LetterloOther_LetterlowercaseletterltTitlecase_LetterluUppercase_LettermarkmathsymbolMath_SymbolmcSpacing_MarkmemnNonspacing_MarkmodifierlettermodifiersymbolModifier_SymbolnNumberndnlnoOther_NumbernonspacingmarknumberopenpunctuationOpen_PunctuationotherotherletterothernumberotherpunctuationOther_PunctuationothersymbolOther_SymbolpPunctuationparagraphseparatorParagraph_SeparatorpcpdpepfpipoprivateusepspunctuationSymbolseparatorSeparatorsksmsospaceseparatorSpace_Separatorspacingmarksurrogatesymboltitlecaseletteruppercaseletterzzlzpzs
push esi
call sub.msvcrt.dll_memcmp
mov edx, dword [ebp + 8]
add esp, 0xc
test eax, eax
jne 0x4f6ec5
mov eax, dword [0x6074b4]
mov esi, dword [0x6074a0]
movzx eax, byte [eax]
mov eax, dword [esi]
test eax, eax
jne 0x4f6ce7
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x4f7029
mov dword [esi], eax
push 0x200
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
je 0x4f7029
movdqa xmm0, xmmword [0x5b1cd0]
mov ecx, 0xfffffe00
nop dword [eax]
movdqu xmm1, xmmword [ecx + 0x5c1664]
pshufd xmm3, xmm1, 0xed
pshufd xmm2, xmm1, 0xe8
movdqa xmm5, xmm3
movdqa xmm1, xmm2
movdqa xmm6, xmm2
pxor xmm5, xmm0
pxor xmm1, xmm0
movdqa xmm4, xmm5
pcmpgtd xmm4, xmm1
pcmpgtd xmm1, xmm5
pand xmm6, xmm4
pandn xmm4, xmm3
pand xmm2, xmm1
pandn xmm1, xmm3
por xmm4, xmm6
por xmm1, xmm2
punpckldq xmm4, xmm1
movdqu xmmword [eax + ecx + 0x200], xmm4
add ecx, 0x10
jne 0x4f6d10
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], 0x40
mov dword [ebp - 0x14], 0x40
mov byte [ebp - 0x10], 0
lea ecx, [ebp - 0x1c]
call fcn.004e32b0
movsd xmm0, qword [ebp - 0x1c]
movsd xmm1, qword [ebp - 0x14]
movsd qword [edi + 8], xmm1
movsd qword [edi], xmm0
jmp 0x4f6f96
cmp edx, 3
je 0x4f6e36
cmp edx, 8
je 0x4f6eae
cmp edx, 5
jne 0x4f6ec5
mov eax, 0x49435341
movzx ecx, byte [esi + 4]
xor eax, dword [esi]
xor ecx, 0x49
or ecx, eax
jne 0x4f6ec5
mov eax, dword [0x6074b4]
mov esi, dword [0x6074a0]
movzx eax, byte [eax]
mov eax, dword [esi]
test eax, eax
jne 0x4f6df5
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x4f7030
mov dword [esi], eax
push 8
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
je 0x4f7030
mov dword [eax], 0
mov dword [eax + 4], 0x7f
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], 1
mov dword [ebp - 0x14], 1
mov byte [ebp - 0x10], 0
lea ecx, [ebp - 0x1c]
call fcn.004e32b0
jmp 0x4f6d89
movzx eax, word [esi]
movzx ecx, byte [esi + 2]
xor eax, 0x6e41
xor ecx, 0x79
or cx, ax
jne 0x4f6ec5
mov eax, dword [0x6074b4]
mov esi, dword [0x6074a0]
movzx eax, byte [eax]
mov eax, dword [esi]
test eax, eax
jne 0x4f6e6d
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x4f7032
mov dword [esi], eax
push 8
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
je 0x4f7032
mov dword [eax], 0
mov dword [eax + 4], 0x10ffff
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], 1
mov dword [ebp - 0x14], 1
mov byte [ebp - 0x10], 0
lea ecx, [ebp - 0x1c]
call fcn.004e32b0
jmp 0x4f6d89
mov eax, 0x69737341
mov ecx, 0x64656e67
xor eax, dword [esi]
xor ecx, dword [esi + 4]
or ecx, eax
je 0x4f6fc3
mov dword [ebp - 0x3c], esi
xor eax, eax
mov esi, 0x25
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x38], 0x25
jmp 0x4f6ef1
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x38], esi
mov edx, dword [ebp + 8]
sub esi, eax
jbe 0x4f6f8c
shr esi, 1
mov dword [ebp - 0x40], eax
add esi, eax
mov ebx, esi
shl ebx, 4
mov eax, dword [ebx + 0x5d6ae0]
mov edi, eax
sub edi, edx
jb 0x4f6f0b
mov eax, edx
push eax
push dword [ebp - 0x3c]
push dword [ebx + 0x5d6adc]
call sub.msvcrt.dll_memcmp
add esp, 0xc
test eax, eax
mov ecx, 0xff
cmovne edi, eax
xor eax, eax
test edi, edi
setne al
cmovs eax, ecx
cmp al, 1
je 0x4f6ee0
movzx eax, al
cmp eax, 0xff
jne 0x4f6f4e
inc esi
mov eax, esi
mov esi, dword [ebp - 0x38]
mov edx, dword [ebp + 8]
sub esi, eax
ja 0x4f6ef1
jmp 0x4f6f8c
mov edx, dword [ebx + 0x5d6ae4]
lea ecx, [ebp - 0x1c]
push dword [ebx + 0x5d6ae8]
call fcn.004f67b0
add esp, 4
mov eax, dword [ebp - 0x14]
movsd xmm0, qword [ebp - 0x1c]
movzx ecx, word [ebp - 0xf]
movzx edx, byte [ebp - 0xd]
mov dword [ebp - 0x28], eax
movzx eax, byte [ebp - 0x10]
movsd qword [ebp - 0x30], xmm0
mov word [ebp - 0x20], cx
mov byte [ebp - 0x1e], dl
cmp al, 2
jne 0x4f6f9e
mov eax, dword [ebp - 0x34]
mov byte [eax], 1
mov byte [eax + 0xc], 2
add esp, 0x34
pop esi
pop edi
pop ebx
pop ebp
ret
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x34]
movsd xmm0, qword [ebp - 0x30]
movzx esi, word [ebp - 0x20]
mov ah, byte [ebp - 0x1e]
mov dword [edx + 8], ecx
movsd qword [edx], xmm0
mov word [edx + 0xd], si
mov byte [edx + 0xf], ah
mov byte [edx + 0xc], al
jmp 0x4f6f96
lea ecx, [ebp - 0x1c]
mov edx, 0x5c3831
push 0xa
call fcn.004f6c90
add esp, 4
movzx ecx, byte [ebp - 0x10]
movzx eax, byte [ebp - 0x1c]
cmp cl, 2
jne 0x4f6fea
mov byte [edi], al
mov byte [edi + 0xc], 2
jmp 0x4f6f96
mov edx, dword [ebp - 0x14]
movq xmm0, qword [ebp - 0x1b]
movzx esi, word [ebp - 0xf]
mov ch, byte [ebp - 0xd]
mov dword [ebp - 0x28], edx
movq qword [ebp - 0x2f], xmm0
mov word [ebp - 0x23], si
mov byte [ebp - 0x21], ch
mov byte [ebp - 0x30], al
mov byte [ebp - 0x24], cl
lea eax, [ebp - 0x30]
push eax
call fcn.004f3de0
add esp, 4
movsd xmm0, qword [ebp - 0x30]
movsd xmm1, qword [ebp - 0x28]
jmp 0x4f6d93
push 0x200
jmp 0x4f7034
jmp 0x4f7032
push 8
push 4
call fcn.0041a8c0
add esp, 8
ud2