Function at 0x6428dafb
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2a4
push ebx
push esi
push edi
push str.shell32.dll
xor bl, bl
call dword [sym.imp.kernel32.dll_LoadLibraryW]
mov esi, eax
test esi, esi
je 0x6428dd1b
push str.SHGetFolderPathW
push esi
call dword [sym.imp.kernel32.dll_GetProcAddress]
push 0x10
pop edi
test eax, eax
je 0x6428dc15
lea ecx, [ebp - 0x2a0]
push ecx
xor ecx, ecx
push ecx
push ecx
push 0x801a
push ecx
call eax
test eax, eax
jne 0x6428dc15
and dword [ebp - 0x18], eax
lea ecx, [ebp - 0x30]
and dword [ebp - 0x10], eax
lea eax, [ebp - 0x2a0]
push eax
call fcn.64273fc0
push str.EasyAntiCheat_
lea ecx, [ebp - 0x30]
call fcn.64275272
push 0xc
push 0x648adeac
lea eax, [ebp - 0x98]
push edi
push eax
call fcn.6427e312
add esp, 0x10
lea eax, [ebp - 0x98]
lea ecx, [ebp - 0x30]
push eax
call fcn.64275272
push str.loader.log
lea ecx, [ebp - 0x30]
call fcn.64275272
cmp dword [ebp - 0x1c], 8
lea ecx, [ebp - 0x30]
mov eax, dword [ebp - 0x18]
cmovae ecx, dword [ebp - 0x30]
mov dword [ebp - 0x14], eax
test ecx, ecx
je 0x6428dbcf
push 0x800
lea edx, [ebp - 0x18]
call fcn.64273e4e
pop ecx
mov cl, al
mov eax, dword [ebp - 0x14]
jmp 0x6428dbd1
xor cl, cl
test cl, cl
je 0x6428dc05
mov byte [ebp - 1], 0
cmp dword [ebp - 0x10], eax
je 0x6428dbe6
mov byte [eax], 0
inc dword [ebp - 0x14]
jmp 0x6428dbf3
lea ecx, [ebp - 1]
push ecx
push eax
lea ecx, [ebp - 0x18]
call fcn.642794ba
mov ecx, dword [ebp - 0x18]
mov edx, str._prerelease_
call fcn.6427e339
test eax, eax
setne bl
lea ecx, [ebp - 0x30]
call fcn.64274031
lea ecx, [ebp - 0x18]
call fcn.64274770
push esi
call dword [sym.imp.kernel32.dll_FreeLibrary]
test bl, bl
je 0x6428dd1b
movaps xmm0, xmmword [0x648ae8e0]
lea eax, [ebp - 0x40]
movups xmmword [ebp - 0x40], xmm0
xor ebx, ebx
mov dword [ebp - 8], eax
mov edx, 0xb9169097
mov dword [ebp - 0xc], eax
mov esi, ebx
mov eax, dword [ebp - 8]
imul edx, edx, 0x343fd
mov ecx, dword [eax + esi]
mov eax, dword [ebp - 0xc]
add edx, 0x269ec3
rol edx, 4
xor ecx, edx
mov dword [eax + esi], ecx
add esi, 4
cmp esi, edi
jb 0x6428dc41
lea eax, [ebp - 0x78]
push eax
call fcn.6428dd20
lea eax, [ebp - 0x78]
mov edx, 0xc29fb595
mov dword [ebp - 0xc], eax
mov esi, ebx
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0xc]
mov ecx, dword [eax + esi]
mov eax, dword [ebp - 8]
xor ecx, edx
mov dword [eax + esi], ecx
mov ecx, edx
shr ecx, 7
add esi, 4
xor ecx, edx
mov eax, ecx
shl eax, 9
xor ecx, eax
mov edx, ecx
shr edx, 0xd
xor edx, ecx
rol edx, 4
cmp esi, 0x34
jb 0x6428dc7e
lea eax, [ebp - 0x78]
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0xc]
push 0x648b4928
push 0x6428638c
push 0x648b493c
mov cl, byte [eax + 0x34]
mov eax, dword [ebp - 8]
xor cl, dl
mov byte [eax + 0x34], cl
call fcn.6427e16c
mov eax, dword [0x648b4928]
add esp, 0xc
rol eax, 7
bswap eax
test eax, eax
je 0x6428dd02
mov eax, dword [0x648b4928]
lea ecx, [ebp - 0x40]
push 0x50040
push ecx
lea ecx, [ebp - 0x78]
rol eax, 7
push ecx
push ebx
bswap eax
call eax
push 0x35
pop ecx
lea eax, [ebp - 0x78]
mov byte [eax], bl
inc eax
sub ecx, 1
jne 0x6428dd08
lea eax, [ebp - 0x40]
mov byte [eax], bl
inc eax
sub edi, 1
jne 0x6428dd13
pop edi
pop esi
pop ebx
leave
ret