Function at 0x4ae9f0
Capabilities:
Encode data using xor

Disassembly:
mov eax, reloc.kernel32.dll_CreateFileA
call fcn.004b8fc0
mov eax, dword [esp + 0x38]
push ebx
push edi
xor edi, edi
push eax
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], edi
call fcn.0047caf0
mov ebx, eax
add esp, 4
cmp ebx, edi
jl 0x4aec31
push esi
mov esi, dword [esp + 0x48]
cmp esi, 0xffffffff
jne 0x4aeab7
mov esi, ebx
mov edi, dword [esp + 0x38]
mov ecx, dword [edi + 0x10]
push ebp
push ecx
call fcn.00466960
mov ebp, eax
dec ebp
and ebp, 7
push edi
mov dword [esp + 0x24], ebp
call fcn.00461c50
add esp, 8
mov edi, eax
mov dword [esp + 0x18], eax
test ebp, ebp
jne 0x4aea69
mov eax, dword [esp + 0x40]
mov byte [eax], 0
inc eax
dec edi
mov dword [esp + 0x40], eax
mov dword [esp + 0x18], edi
cmp esi, 0xfffffffe
jne 0x4aeaeb
mov esi, edi
sub esi, ebx
sub esi, 2
test esi, esi
jle 0x4aeb29
push 0xda
push str..crypto_rsa_rsa_pss.c
push esi
call fcn.00466300
mov ebp, eax
add esp, 0xc
mov dword [esp + 0x10], ebp
test ebp, ebp
jne 0x4aeb17
push 0xde
push str..crypto_rsa_rsa_pss.c
push reloc.kernel32.dll_SetEvent
push reloc.kernel32.dll_CloseThreadpoolCleanupGroupMembers
push 4
call fcn.00463a30
add esp, 0x14
jmp 0x4aec14
cmp esi, 0xfffffffe
jne 0x4aeac1
jmp 0x4aea2d
jge 0x4aea2d
push 0xc3
push str..crypto_rsa_rsa_pss.c
push reloc.kernel32.dll_GetNumberFormatW
push reloc.kernel32.dll_CloseThreadpoolCleanupGroupMembers
push 4
call fcn.00463a30
add esp, 0x14
pop esi
mov eax, edi
pop edi
pop ebx
add esp, 0x28
ret
lea edx, [ebx + esi + 2]
cmp edi, edx
jge 0x4aea75
push 0xd5
push str..crypto_rsa_rsa_pss.c
push reloc.kernel32.dll_CreateWaitableTimerA
push reloc.kernel32.dll_CloseThreadpoolCleanupGroupMembers
push 4
call fcn.00463a30
add esp, 0x14
mov eax, dword [esp + 0x14]
pop ebp
pop esi
pop edi
pop ebx
add esp, 0x28
ret
push esi
push ebp
call fcn.00469630
add esp, 8
test eax, eax
jle 0x4aec10
lea eax, [esp + 0x20]
sub edi, ebx
push eax
lea ebp, [edi - 1]
call fcn.00485dd0
mov ecx, dword [esp + 0x4c]
push 0
push ecx
lea edx, [esp + 0x2c]
push edx
call fcn.00485e20
push 8
lea eax, [esp + 0x34]
push 0x509810
push eax
call fcn.00485fd0
mov ecx, dword [esp + 0x60]
push ebx
push ecx
lea edx, [esp + 0x44]
push edx
call fcn.00485fd0
add esp, 0x28
test esi, esi
je 0x4aeb84
mov eax, dword [esp + 0x10]
push esi
push eax
lea ecx, [esp + 0x28]
push ecx
call fcn.00485fd0
add esp, 0xc
mov edx, dword [esp + 0x40]
lea eax, [edx + ebp]
push 0
push eax
lea eax, [esp + 0x28]
push eax
call fcn.00486110
lea ecx, [esp + 0x2c]
push ecx
call fcn.00486060
mov edx, dword [esp + 0x58]
mov eax, dword [esp + 0x50]
push edx
push ebx
add eax, ebp
push eax
push ebp
mov ebp, dword [esp + 0x60]
push ebp
call fcn.00471c20
add esp, 0x24
test eax, eax
jne 0x4aec10
sub edi, esi
xor byte [edi + ebp - 2], 1
lea eax, [edi + ebp - 2]
inc eax
test esi, esi
jle 0x4aebe6
xor ecx, ecx
test esi, esi
jle 0x4aebe6
mov edx, dword [esp + 0x10]
mov dl, byte [ecx + edx]
xor byte [eax], dl
inc ecx
inc eax
cmp ecx, esi
jl 0x4aebd7
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x4aebff
mov ecx, 8
sub ecx, eax
mov eax, 0xff
sar eax, cl
and byte [ebp], al
mov ecx, dword [esp + 0x18]
mov byte [ecx + ebp - 1], 0xbc
mov dword [esp + 0x14], 1
mov ebp, dword [esp + 0x10]
test ebp, ebp
je 0x4aeb0b
push ebp
call fcn.004664a0
mov eax, dword [esp + 0x18]
add esp, 4
pop ebp
pop esi
pop edi
pop ebx
add esp, 0x28
ret
mov eax, edi
pop edi
pop ebx
add esp, 0x28
ret