Function at 0x49f26d
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4addc5
jmp 0x49f0ab
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push ebx
je 0x49f612
jne 0x49f612
mov dword [esi], 0xb1ed40
push 0x115412f0
mov ecx, dword [0x11529594]
cmp edi, dword [ebx + 0x160]
mov eax, dword [edx + 0x7c]
repe cmpsd dword [esi], dword es:[edi]
mov dword [0x42dd58], eax
mov ecx, dword [0x11540c04]
or eax, 0x11540c04
mov dword [ebp - 0xe30], 0x42f1a8
cmp dword [0x571bac], ebx
mov dword [0xd285d8], 0x6fad90
push 0xcc76d4
mov dword [ebp + esi*4 - 0xce4], eax
mov word [edi], si
rol edi, 0x82
pop ebx
jnp 0x49f0e4
xchg esi, eax
mov bl, 0xd1
dec ecx
invalid
mov eax, dword [ebp - 0x14]
jmp 0x49fa06
push edi
mov eax, dword [0x5ddf80]
xor eax, ebp
jmp 0x49f75b
cmp esi, edi
je 0x49fccf
jne 0x49fccf
push 0x4a3c90
mov edi, dword [0x9b86b8]
cmp byte [ecx + 0xd34], 0
mov edi, 0x1020b6a0
mov eax, 0x80009b86
mov ecx, 0xd34
add byte [edi + 0x1020b6a0], bh
push 0x10041670
test edx, 0xffffe000
mov dword [esi], 0x697dd888
push 0x114813c8
push 0x49caa0
push 0x44ff60
call dword [0x102aa9dc]
and dword [ebp - 0x28], 0xffffefff
inc ebx
test byte [esi], dh
jno 0x49f3b9
or esi, esi
outsd dx, dword [esi]
dec esi
add ah, byte [edx + 0x7a]
jne 0x49f454
push 0x49ed84
ret
inc ecx
add dh, bl
lea eax, [eax]
mov esi, 0x34688dde
pop es
wait
add bh, bh
and eax, 0x106dee58
mov dword [0xdeed08], 0x606de0
cmp ecx, 0x25
push 0x1142a8c0
xchg dword [edx - 0x564b81], ebp
lea ecx, [edi]
test byte [esi + 1], al
add byte [eax], al
push 0x49e81b
ret
push esi
je 0x49f26d
jne 0x49f26d
add word [ebp - 0x28], 4
jmp dword [0x42a11c]
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
jmp 0x49fe09
mov eax, dword [0x54f54840]
pop ss
pop ss
xor ebp, 0x4d8b9bb3
hlt
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
je 0x49fbc3
jne 0x49fbc3
push 0x100a87d0
mov dword [0x106ca14], ecx
push 0x47f84a
mov eax, dword [0x100a2524]
push 0x697a456c
lea eax, [ebp - 0x7f34]
mov eax, dword [0x52ea28]
and ah, 0xfd
push 0xa7fb80
push 0x9d67f8
mov dword [0x44f034], ecx
push ebp
movsd dword es:[edi], dword [esi]
jp 0x49f9fa
insb byte es:[edi], dx
mov esp, 0xceec8966
mov dh, 0x47
jmp 0x652927da
pop ebx
mov esp, ebp
pop ebp
ret
pop edi
pop esi
jmp 0x49fb72
mov dword [ebp - 0x14], edi
mov dword [ebp - 4], edi
jmp 0x49f3a4
je 0x49f18c
mov eax, esi
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
push 0x49f406
ret
mov esi, dword [ebp + 8]
xor edi, edi
je 0x49fc24
jne 0x49fc24
call dword [0xd14bd8]
push 0x4288f8
call dword [0x100b209c]
mov dword [ebp - 0x170], 0x10330b30
cmp dword [edx + 0xd84], 0
push 0xb4e754
push 0x50451e
cmp dword [0xd2b258], edi
mov ecx, dword [0xdd7ad4]
push 0x50a670
push 0x511938
push 0x45a3a8
mov eax, 0xa03a20
push 0x4670cc
mov dword [0x418cdc], eax
test byte [ebp - 0x14], 3
mov eax, 0xba0ce4
push ss
xchg dword [ecx - 0xce46ba3], ebx
dec esi
pop es
xor eax, 0x4d8d578d
or cl, ch
movsd dword es:[edi], dword [esi]
push es
add byte [eax], al
push 0x1135ba60
push 0xa6a5a0
mov ecx, 0x109e980
mov dword [0x4d39bc], 0x4b32dc
mov dword [0x69981dd0], 0
mov dword [ebp + 0x18], 0xa7f694
mov byte [esi + 0x105], 0xff
cmp si, 0x41
jmp dword [esi*4 + 0x875694]