Function at 0x476cf0
Capabilities:
Encode data using xor
Encrypt data using aes

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push ebx
mov ebx, ecx
mov dword [ebp - 8], ebx
push edi
test ebx, ebx
je 0x4771db
mov edi, dword [ebp + 8]
test edi, edi
je 0x4771db
cmp edx, 0x80
je 0x476d3b
cmp edx, 0xc0
je 0x476d33
cmp edx, 0x100
je 0x476d33
pop edi
mov eax, 0xfffffffe
pop ebx
mov esp, ebp
pop ebp
ret
cmp edx, 0x80
jne 0x476d47
mov dword [edi + 0xf0], 0xa
jmp 0x476d5f
xor eax, eax
cmp edx, 0xc0
setne al
lea eax, [eax*2 + 0xc]
mov dword [edi + 0xf0], eax
mov ecx, dword [ebx]
mov eax, ecx
ror eax, 8
rol ecx, 8
and eax, 0xff00ff00
and ecx, 0xff00ff
or eax, ecx
mov dword [edi], eax
mov ecx, dword [ebx + 4]
mov eax, ecx
ror eax, 8
rol ecx, 8
and eax, 0xff00ff00
and ecx, 0xff00ff
or eax, ecx
mov dword [edi + 4], eax
mov ecx, dword [ebx + 8]
mov eax, ecx
push esi
lea esi, [edi + 4]
ror eax, 8
rol ecx, 8
and eax, 0xff00ff00
and ecx, 0xff00ff
or eax, ecx
mov dword [edi + 8], eax
mov eax, dword [ebx + 0xc]
mov ecx, eax
ror ecx, 8
rol eax, 8
and ecx, 0xff00ff00
and eax, 0xff00ff
or ecx, eax
mov dword [ebp - 4], ecx
mov dword [edi + 0xc], ecx
cmp edx, 0x80
jne 0x476ed4
mov edx, dword [ebp - 4]
mov eax, ecx
shr eax, 0x10
movzx eax, al
mov ecx, dword [eax*4 + str.cc]
mov eax, edx
shr eax, 8
xor ecx, 0x1000000
movzx eax, al
and ecx, 0xff000000
mov eax, dword [eax*4 + 0x54e170]
and eax, 0xff0000
xor ecx, eax
mov eax, edx
shr eax, 0x18
movzx eax, byte [eax*4 + 0x54d570]
xor ecx, eax
movzx eax, dl
mov eax, dword [eax*4 + 0x54c470]
and eax, 0xff00
xor ecx, eax
mov eax, dword [esi]
xor ecx, dword [edi]
mov dword [edi + 0x10], ecx
xor eax, ecx
mov ecx, dword [edi + 8]
xor ecx, eax
mov dword [edi + 0x14], eax
mov dword [edi + 0x18], ecx
xor ecx, edx
mov dword [edi + 0x1c], ecx
mov edi, 0x54c444
nop
mov ecx, dword [esi + 0x18]
lea esi, [esi + 0x10]
mov eax, ecx
shr eax, 8
movzx eax, al
mov edx, dword [eax*4 + 0x54e170]
mov eax, ecx
shr eax, 0x10
and edx, 0xff0000
movzx eax, al
mov eax, dword [eax*4 + str.cc]
and eax, 0xff000000
xor edx, eax
mov eax, ecx
shr eax, 0x18
movzx eax, byte [eax*4 + 0x54d570]
xor edx, eax
movzx eax, cl
mov eax, dword [eax*4 + 0x54c470]
and eax, 0xff00
xor edx, eax
xor edx, dword [esi - 4]
xor edx, dword [edi]
add edi, 4
mov dword [esi + 0xc], edx
mov eax, dword [esi]
xor eax, edx
mov dword [esi + 0x10], eax
mov ecx, dword [esi + 4]
xor ecx, eax
mov dword [esi + 0x14], ecx
mov eax, dword [esi + 8]
xor eax, ecx
mov dword [esi + 0x18], eax
cmp edi, 0x54c468
jne 0x476e50
pop esi
pop edi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebx + 0x10]
mov eax, ecx
ror eax, 8
and eax, 0xff00ff00
rol ecx, 8
and ecx, 0xff00ff
or eax, ecx
mov dword [edi + 0x10], eax
mov eax, dword [ebx + 0x14]
mov ebx, eax
ror ebx, 8
rol eax, 8
and ebx, 0xff00ff00
and eax, 0xff00ff
or ebx, eax
mov dword [edi + 0x14], ebx
cmp edx, 0xc0
jne 0x47702c
mov eax, ebx
shr eax, 0x10
movzx eax, al
mov ecx, dword [eax*4 + str.cc]
mov eax, ebx
shr eax, 8
xor ecx, 0x1000000
movzx eax, al
and ecx, 0xff000000
mov eax, dword [eax*4 + 0x54e170]
and eax, 0xff0000
xor ecx, eax
mov eax, ebx
shr eax, 0x18
movzx eax, byte [eax*4 + 0x54d570]
xor ecx, eax
movzx eax, bl
mov eax, dword [eax*4 + 0x54c470]
and eax, 0xff00
xor ecx, eax
mov eax, dword [esi]
xor ecx, dword [edi]
xor eax, ecx
mov dword [edi + 0x18], ecx
mov ecx, dword [edi + 8]
mov dword [edi + 0x1c], eax
xor ecx, eax
mov eax, dword [edi + 0xc]
xor eax, ecx
mov dword [edi + 0x20], ecx
mov dword [edi + 0x24], eax
lea eax, [edi + 0x28]
mov edi, 0x54c444
nop dword [eax + eax]
mov edx, dword [eax - 0x18]
lea eax, [eax + 0x18]
xor edx, dword [eax - 0x1c]
mov ecx, dword [eax - 0x2c]
xor ecx, edx
mov dword [eax - 0x18], edx
mov dword [eax - 0x14], ecx
mov edx, dword [eax - 0x14]
mov ecx, edx
shr ecx, 8
movzx ecx, cl
mov esi, dword [ecx*4 + 0x54e170]
mov ecx, edx
shr ecx, 0x10
and esi, 0xff0000
movzx ecx, cl
mov ecx, dword [ecx*4 + str.cc]
and ecx, 0xff000000
xor esi, ecx
mov ecx, edx
shr ecx, 0x18
movzx ecx, byte [ecx*4 + 0x54d570]
xor esi, ecx
movzx ecx, dl
mov ecx, dword [ecx*4 + 0x54c470]
and ecx, 0xff00
xor esi, ecx
xor esi, dword [eax - 0x28]
xor esi, dword [edi]
add edi, 4
mov dword [eax - 0x10], esi
mov ecx, dword [eax - 0x24]
xor ecx, esi
mov dword [eax - 0xc], ecx
mov edx, dword [eax - 0x20]
xor edx, ecx
mov dword [eax - 8], edx
mov ecx, dword [eax - 0x1c]
xor ecx, edx
mov dword [eax - 4], ecx
cmp edi, 0x54c460
jne 0x476f90
pop esi
pop edi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret
mov ebx, dword [ebp - 8]
mov ecx, dword [ebx + 0x18]
mov eax, ecx
ror eax, 8
and eax, 0xff00ff00
rol ecx, 8
and ecx, 0xff00ff
or eax, ecx
mov dword [edi + 0x18], eax
mov eax, dword [ebx + 0x1c]
mov ebx, eax
ror ebx, 8
rol eax, 8
and ebx, 0xff00ff00
and eax, 0xff00ff
or ebx, eax
mov dword [edi + 0x1c], ebx
cmp edx, 0x100
jne 0x476ecb
mov eax, ebx
shr eax, 0x10
movzx eax, al
mov ecx, dword [eax*4 + str.cc]
mov eax, ebx
shr eax, 8
xor ecx, 0x1000000
movzx eax, al
and ecx, 0xff000000
mov eax, dword [eax*4 + 0x54e170]
and eax, 0xff0000
xor ecx, eax
mov eax, ebx
shr eax, 0x18
movzx eax, byte [eax*4 + 0x54d570]
xor ecx, eax
movzx eax, bl
mov eax, dword [eax*4 + 0x54c470]
and eax, 0xff00
xor ecx, eax
mov eax, dword [esi]
xor ecx, dword [edi]
mov esi, 0x54c444
xor eax, ecx
mov dword [edi + 0x20], ecx
mov ecx, dword [edi + 8]
xor ecx, eax
mov dword [edi + 0x24], eax
mov eax, dword [edi + 0xc]
xor eax, ecx
mov dword [edi + 0x28], ecx
mov dword [edi + 0x2c], eax
add edi, 0x30
mov ecx, dword [edi - 4]
lea edi, [edi + 0x20]
mov eax, ecx
shr eax, 0x10
movzx eax, al
mov edx, dword [eax*4 + 0x54e170]
mov eax, ecx
shr eax, 8
and edx, 0xff0000
movzx eax, al
mov eax, dword [eax*4 + 0x54c470]
and eax, 0xff00
xor edx, eax
mov eax, ecx
shr eax, 0x18
mov eax, dword [eax*4 + str.cc]
and eax, 0xff000000
xor edx, eax
movzx eax, cl
mov ecx, dword [edi - 0x38]
movzx eax, byte [eax*4 + 0x54d570]
xor edx, eax
mov eax, dword [edi - 0x3c]
xor edx, dword [edi - 0x40]
xor eax, edx
mov dword [edi - 0x20], edx
mov dword [edi - 0x1c], eax
xor ecx, eax
mov eax, dword [edi - 0x34]
xor eax, ecx
mov dword [edi - 0x18], ecx
mov dword [edi - 0x14], eax
mov ecx, dword [edi - 0x14]
mov eax, ecx
shr eax, 8
movzx eax, al
mov edx, dword [eax*4 + 0x54e170]
mov eax, ecx
shr eax, 0x10
and edx, 0xff0000
movzx eax, al
mov eax, dword [eax*4 + str.cc]
and eax, 0xff000000
xor edx, eax
mov eax, ecx
shr eax, 0x18
movzx eax, byte [eax*4 + 0x54d570]
xor edx, eax
movzx eax, cl
mov eax, dword [eax*4 + 0x54c470]
and eax, 0xff00
xor edx, eax
xor edx, dword [edi - 0x30]
xor edx, dword [esi]
add esi, 4
mov dword [edi - 0x10], edx
mov eax, dword [edi - 0x2c]
xor eax, edx
mov dword [edi - 0xc], eax
mov ecx, dword [edi - 0x28]
xor ecx, eax
mov dword [edi - 8], ecx
mov eax, dword [edi - 0x24]
xor eax, ecx
mov dword [edi - 4], eax
cmp esi, 0x54c45c
jne 0x4770e6
pop esi
pop edi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret
pop edi
or eax, 0xffffffff
pop ebx
mov esp, ebp
pop ebp
ret