Function at 0x48f6fe
Capabilities:
Encode data using xor

Disassembly:
push 0x468
mov eax, 0x4e2d3d
call fcn.004b6799
and dword [ebp - 4], 0
mov eax, 0x579040
push eax
mov dword [ebp - 0x474], eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov byte [ebp - 4], 1
call fcn.0049219b
push eax
lea ecx, [ebp - 0x454]
call fcn.00402802
push 6
lea eax, [ebp - 0x454]
push 0x5305bc
push eax
mov byte [ebp - 4], 2
call fcn.00402a07
mov esi, dword [ebp + 8]
add esp, 0xc
push dword [ebp - 0x454]
mov ecx, 0x57a8dc
call fcn.004a071a
push esi
mov ecx, eax
call fcn.0040272d
mov edi, dword [ebp + 8]
lea eax, [ebp - 0x450]
push eax
lea esi, [ebp - 0x470]
mov dword [ebp - 0x450], VariantCopy
call fcn.0040acc7
mov byte [ebp - 4], 3
call fcn.0049219b
push eax
lea ecx, [ebp - 0x450]
call fcn.00402802
push 6
mov byte [ebp - 4], 4
push dword [0x57a8c0]
lea eax, [ebp - 0x450]
push dword [0x57a8c8]
push eax
call fcn.00402a07
add esp, 0x10
call fcn.0049219b
push eax
lea ecx, [ebp - 0x458]
call fcn.00402802
push 0x200
lea eax, [ebp - 0x33c]
push 0
mov byte [ebp - 4], 5
push eax
mov dword [ebp - 0x470], 0x2001f
call fcn.004b62d0
add esp, 0xc
mov ebx, 0xff
push ebx
lea eax, [ebp - 0x33c]
push edi
push eax
call fcn.004b3b7a
mov eax, dword [0x57a8d8]
add esp, 0xc
cmp dword [eax - 0xc], 0
jne 0x48f823
push edi
mov ecx, 0x57a8d8
call fcn.0040272d
push 7
pop ecx
mov esi, str.Microsoft_Visual_C_Library
lea edi, [ebp - 0x34]
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov esi, 0x101
push esi
lea eax, [ebp - 0x13c]
push 0
push eax
call fcn.004b62d0
add esp, 0xc
push esi
lea eax, [ebp - 0x444]
push 0
push eax
call fcn.004b62d0
add esp, 0xc
xor eax, eax
lea edi, [esi - 1]
mov byte [ebp + eax - 0x13c], al
inc eax
cmp eax, edi
jb 0x48f85f
xor eax, eax
xor esi, esi
cmp eax, 0x1c
jb 0x48f876
xor eax, eax
mov cl, byte [ebp + eax - 0x34]
inc eax
mov byte [ebp + esi - 0x444], cl
inc esi
cmp esi, edi
jb 0x48f86f
and dword [ebp - 0x44c], 0
xor edi, edi
movzx edx, byte [ebp + edi - 0x444]
add edx, dword [ebp - 0x44c]
lea eax, [ebp + edi - 0x13c]
mov cl, byte [eax]
movzx esi, cl
add esi, edx
and esi, ebx
mov edx, esi
movzx cx, cl
lea esi, [ebp + edx - 0x13c]
mov dword [ebp - 0x44c], edx
mov dl, byte [esi]
movzx ecx, cx
inc edi
mov byte [eax], dl
mov byte [esi], cl
cmp edi, 0x100
jb 0x48f890
xor edi, edi
mov dword [ebp - 0x44c], edi
mov dword [ebp - 0x448], edi
inc edi
and edi, ebx
lea eax, [ebp + edi - 0x13c]
mov cl, byte [eax]
movzx edx, cl
add edx, dword [ebp - 0x44c]
movzx cx, cl
and edx, ebx
movzx ecx, cx
lea esi, [ebp + edx - 0x13c]
mov dword [ebp - 0x44c], edx
mov dl, byte [esi]
mov byte [eax], dl
mov byte [esi], cl
movzx eax, byte [eax]
movzx ecx, cl
add eax, ecx
mov ecx, dword [ebp - 0x448]
and eax, ebx
movzx ax, byte [ebp + eax - 0x13c]
movzx eax, ax
lea ecx, [ebp + ecx - 0x33c]
xor byte [ecx], al
inc dword [ebp - 0x448]
cmp dword [ebp - 0x448], 0x1fe
jb 0x48f8e1
xor eax, eax
mov word [ebp - 0x13e], ax
call fcn.0049219b
push eax
lea ecx, [ebp - 0x448]
call fcn.00402802
push 6
mov byte [ebp - 4], 6
push dword [0x57a8d0]
lea eax, [ebp - 0x448]
push eax
call fcn.00402a07
add esp, 8
lea eax, [ebp - 0x448]
mov dword [ebp - 0x44c], esp
mov ecx, esp
push eax
lea esi, [ebp - 0x33c]
call fcn.004022fa
mov ecx, esi
call fcn.0048caaf
pop ecx
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x448]
add ecx, 0xfffffff0
call fcn.00402845
mov edi, dword [ebp - 0x450]
push 1
push edi
push SysReAllocStringLen
lea esi, [ebp - 0x470]
call fcn.0040ace3
mov ebx, dword [ebp - 0x458]
test eax, eax
je 0x48f9ee
push 0x200
lea eax, [ebp - 0x33c]
push eax
push ebx
mov eax, esi
call fcn.0040af75
call fcn.0040ad41
push 1
push edi
push reloc.OLEAUT32.dll_SysReAllocString
lea esi, [ebp - 0x470]
call fcn.0040ace3
test eax, eax
je 0x48fa1e
push 0x200
lea eax, [ebp - 0x33c]
push eax
push ebx
mov eax, esi
call fcn.0040af75
call fcn.0040ad41
lea ecx, [ebx - 0x10]
call fcn.00402845
lea ecx, [edi - 0x10]
call fcn.00402845
lea esi, [ebp - 0x470]
call fcn.0040ad41
mov ecx, dword [ebp - 0x468]
add ecx, 0xfffffff0
call fcn.00402845
mov ecx, dword [ebp - 0x454]
add ecx, 0xfffffff0
call fcn.00402845
push 0x579040
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.00402845
call fcn.004b681c
ret 4