Function at 0x48a5b0
Capabilities:
Encode data using xor

Disassembly:
sub esp, 0x14
push ebx
mov ebx, dword [esp + 0x1c]
push ebp
push esi
push edi
xor edi, edi
cmp ebx, edi
jne 0x48a5ce
pop edi
pop esi
pop ebp
mov eax, 0xffffff9a
pop ebx
add esp, 0x14
ret
cmp dword [ebx + 0x38], edi
jne 0x48a5e0
pop edi
pop esi
pop ebp
mov eax, 0xffffff9a
pop ebx
add esp, 0x14
ret
cmp dword [ebx + 0x9c], edi
je 0x48a5f1
push ebx
call fcn.0048ae00
add esp, 4
lea eax, [esp + 0x10]
lea ecx, [esp + 0x28]
push eax
lea edx, [esp + 0x18]
push ecx
push edx
push ebx
call fcn.0048a920
add esp, 0x10
test eax, eax
je 0x48a61a
pop edi
pop esi
pop ebp
mov eax, 0xffffff99
pop ebx
add esp, 0x14
ret
mov esi, dword [sym.imp.MSVCRT.dll_malloc]
push 0x90
call esi
mov ebp, eax
add esp, 4
cmp ebp, edi
jne 0x48a63d
pop edi
pop esi
pop ebp
mov eax, 0xffffff98
pop ebx
add esp, 0x14
ret
push 0x4000
call esi
mov dword [ebp], eax
mov ecx, dword [esp + 0x2c]
mov dword [ebp + 0x44], ecx
mov edx, dword [esp + 0x14]
mov dword [ebp + 0x48], edx
mov edx, dword [esp + 0x38]
add esp, 4
cmp eax, edi
mov dword [ebp + 0x4c], edi
mov dword [ebp + 0x8c], edx
jne 0x48a680
push ebp
call dword [sym.imp.MSVCRT.dll_free]
add esp, 4
mov eax, 0xffffff98
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x14
ret
mov eax, dword [esp + 0x2c]
mov dword [ebp + 0x40], edi
cmp eax, edi
je 0x48a690
mov ecx, dword [ebx + 0x54]
mov dword [eax], ecx
mov ecx, dword [esp + 0x30]
cmp ecx, edi
je 0x48a6c9
mov dword [ecx], 6
mov eax, dword [ebx + 0x50]
and eax, 6
sub eax, 2
je 0x48a6c3
sub eax, 2
je 0x48a6bb
sub eax, 2
jne 0x48a6c9
mov dword [ecx], 1
jmp 0x48a6c9
mov dword [ecx], 2
jmp 0x48a6c9
mov dword [ecx], 9
mov eax, dword [ebx + 0x5c]
mov dword [ebp + 0x50], edi
mov dword [ebp + 0x54], eax
mov ecx, dword [ebx + 0x54]
mov dword [ebp + 0x84], ecx
mov eax, dword [ebx + 0x20]
lea edi, [ebp + 0x60]
mov ecx, 8
mov esi, ebx
mov dword [ebp + 0x80], eax
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebx + 0x2c]
xor esi, esi
mov dword [ebp + 0x88], ecx
mov dword [ebp + 0x18], esi
cmp dword [ebx + 0x54], 8
jne 0x48a73c
cmp edx, esi
jne 0x48a73c
push 0x38
lea eax, [ebp + 4]
push str.1.2.3
push 0xfffffffffffffff1
push eax
mov dword [ebp + 0x24], esi
mov dword [ebp + 0x28], esi
mov dword [ebp + 0x2c], esi
mov dword [eax], esi
mov dword [ebp + 8], esi
call fcn.004f4ff0
mov edi, eax
add esp, 0x10
cmp edi, esi
jne 0x48a7b9
mov dword [ebp + 0x40], 1
mov edx, dword [ebx + 0x60]
mov dword [ebp + 0x58], edx
mov eax, dword [ebx + 0x64]
mov dword [ebp + 0x5c], eax
mov ecx, dword [ebx + 0x98]
mov edx, dword [esp + 0x14]
mov dword [ebp + 8], esi
lea eax, [ecx + edx + 0x1e]
mov dword [ebp + 0x3c], eax
mov dword [ebx + 0x9c], ebp
mov ebp, dword [esp + 0x38]
cmp ebp, esi
je 0x48a83e
call fcn.004f4c70
lea edi, [ebx + 0xa4]
push eax
push edi
push ebp
mov dword [ebx + 0xb0], eax
call fcn.0048a8d0
mov eax, dword [ebx + 0x9c]
mov edx, dword [ebx + 0x20]
push esi
mov ecx, dword [eax + 0x88]
mov ebp, dword [eax + 0x3c]
mov eax, dword [ebx + 0x1c]
add ecx, ebp
push ecx
push edx
push eax
call dword [ebx + 0x10]
add esp, 0x1c
test eax, eax
je 0x48a7cd
pop edi
pop esi
pop ebp
mov eax, 0xffffff98
pop ebx
add esp, 0x14
ret
push ebp
call dword [sym.imp.MSVCRT.dll_free]
add esp, 4
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x14
ret
mov edx, dword [ebx + 0x20]
mov eax, dword [ebx + 0x1c]
lea ecx, [esp + 0x18]
push 0xc
push ecx
push edx
push eax
call dword [ebx + 4]
add esp, 0x10
cmp eax, 0xc
jae 0x48a7f4
pop edi
pop esi
pop ebp
mov eax, 0xffffff98
pop ebx
add esp, 0x14
ret
mov ecx, dword [ebx + 0xb0]
push ecx
push edi
call fcn.0048a850
mov cl, byte [esp + esi + 0x20]
xor cl, al
mov eax, dword [ebx + 0xb0]
movsx edx, cl
push edx
push eax
push edi
mov byte [esp + esi + 0x2c], cl
call fcn.0048a870
add esp, 0x14
inc esi
cmp esi, 0xc
jl 0x48a7f4
mov eax, dword [ebx + 0x9c]
mov ecx, dword [eax + 0x3c]
add ecx, 0xc
mov dword [eax + 0x3c], ecx
mov dword [ebx + 0xa0], 1
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x14
ret