Function at 0x476070
Capabilities:
Encode data using xor

Disassembly:
mov eax, reloc.kernel32.dll_AcquireSRWLockShared
call fcn.004b8fc0
mov eax, dword [0x52bd60]
xor eax, esp
mov dword [esp + 0x44], eax
cmp dword [0x52ef44], 0
mov eax, dword [esp + 0x4c]
push ebx
mov dword [esp + 8], eax
je 0x47618f
lea ecx, [esp + 0xc]
push ecx
call fcn.00467360
push 0xda
push reloc.kernel32.dll_GetFileAttributesExW
push reloc.kernel32.dll_OpenSemaphoreW
push 5
call fcn.00467730
lea edx, [esp + 0x20]
push edx
push 0x52eaf8
call fcn.004673a0
mov ebx, eax
push 0xdc
neg ebx
push reloc.kernel32.dll_GetFileAttributesExW
sbb ebx, ebx
push reloc.kernel32.dll_OpenSemaphoreW
inc ebx
push 6
mov dword [esp + 0x30], ebx
call fcn.00467730
add esp, 0x2c
test ebx, ebx
jne 0x476102
push 0xe1
push reloc.kernel32.dll_GetFileAttributesExW
push reloc.kernel32.dll_SetSystemTime
push 9
call fcn.00467730
add esp, 0x10
mov eax, dword [0x52ef30]
mov edx, dword [0x52ef34]
mov ecx, dword [0x52ef2c]
mov dword [esp + 0x14], eax
mov eax, dword [0x52ef14]
push esi
mov esi, dword [esp + 0x58]
mov dword [esp + 0x1c], edx
mov edx, dword [0x52ef18]
mov dword [esp + 0x38], eax
mov eax, dword [0x52ef1c]
push edi
mov edi, ecx
add ecx, esi
cmp ecx, 0x3ff
mov dword [esp + 0x40], edx
mov edx, dword [0x52ef20]
mov dword [esp + 0x44], eax
mov eax, dword [0x52ef24]
mov dword [esp + 0x48], edx
mov dword [esp + 0x4c], eax
mov dword [0x52ef2c], ecx
jl 0x4761a0
mov eax, 0x7fdff7fd
imul ecx
sub edx, ecx
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0x3ff
add ecx, eax
mov dword [0x52ef2c], ecx
mov dword [0x52ef28], 0x3ff
jmp 0x4761b6
mov dword [esp + 4], 0
mov ebx, dword [esp + 4]
jmp 0x4760ec
mov eax, dword [0x52ef28]
cmp eax, 0x3ff
jge 0x4761b6
cmp ecx, eax
jle 0x4761b6
mov dword [0x52ef28], ecx
mov eax, 0x66666667
imul esi
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*4]
add ecx, ecx
add ecx, ecx
mov edx, esi
sub edx, ecx
xor ecx, ecx
test edx, edx
setg cl
add ecx, eax
add dword [0x52ef34], ecx
test ebx, ebx
jne 0x4761fb
push 0x101
push reloc.kernel32.dll_GetFileAttributesExW
push reloc.kernel32.dll_SetSystemTime
push reloc.kernel32.dll_AttachConsole
call fcn.00467730
add esp, 0x10
lea edx, [esp + 0x24]
push edx
call fcn.00485dd0
add esp, 4
test esi, esi
jle 0x47630e
push ebp
mov ebp, esi
dec esi
mov eax, 0xcccccccd
mul esi
shr edx, 4
inc edx
mov dword [esp + 0x18], edx
cmp ebp, 0x14
mov esi, ebp
jle 0x47622f
mov esi, reloc.kernel32.dll_SetConsoleCursorPosition
push 0
call fcn.0047ef00
push eax
lea eax, [esp + 0x30]
push eax
call fcn.00485e20
push reloc.kernel32.dll_SetConsoleCursorPosition
lea ecx, [esp + 0x50]
push ecx
lea edx, [esp + 0x3c]
push edx
call fcn.00485fd0
lea ebx, [esi + edi - 0x3ff]
add esp, 0x18
lea ecx, [edi + 0x52eb00]
lea edx, [esp + 0x28]
test ebx, ebx
jle 0x47628b
mov eax, esi
sub eax, ebx
push eax
push ecx
push edx
call fcn.00485fd0
push ebx
lea eax, [esp + 0x38]
push 0x52eb00
push eax
call fcn.00485fd0
add esp, 0x18
jmp 0x476296
push esi
push ecx
push edx
call fcn.00485fd0
add esp, 0xc
mov ebx, dword [esp + 0x14]
push esi
lea eax, [esp + 0x2c]
push ebx
push eax
call fcn.00485fd0
push 8
lea ecx, [esp + 0x30]
push ecx
lea edx, [esp + 0x3c]
push edx
call fcn.00485fd0
push 0
lea eax, [esp + 0x5c]
push eax
lea ecx, [esp + 0x48]
push ecx
call fcn.00485fe0
mov ecx, 1
add dword [esp + 0x48], ecx
add ebx, esi
add esp, 0x24
xor eax, eax
mov dword [esp + 0x14], ebx
test esi, esi
jle 0x4762fc
mov dl, byte [esp + eax + 0x40]
xor byte [edi + 0x52eb00], dl
add edi, ecx
cmp edi, 0x3ff
jl 0x4762f6
xor edi, edi
add eax, ecx
cmp eax, esi
jl 0x4762e0
sub ebp, 0x14
sub dword [esp + 0x18], ecx
jne 0x476223
mov ebx, dword [esp + 0x10]
pop ebp
lea eax, [esp + 0x24]
push eax
call fcn.00486060
add esp, 4
pop edi
pop esi
test ebx, ebx
jne 0x476337
push 0x134
push reloc.kernel32.dll_GetFileAttributesExW
push reloc.kernel32.dll_SetSystemTime
push 9
call fcn.00467730
add esp, 0x10
xor eax, eax
lea esp, [esp]
movzx ecx, byte [esp + eax + 0x34]
xor byte [eax + 0x52ef14], cl
movzx edx, byte [esp + eax + 0x35]
movzx ecx, byte [esp + eax + 0x36]
xor byte [eax + 0x52ef15], dl
xor byte [eax + 0x52ef16], cl
movzx edx, byte [esp + eax + 0x37]
movzx ecx, byte [esp + eax + 0x38]
xor byte [eax + 0x52ef17], dl
xor byte [eax + 0x52ef18], cl
add eax, 5
cmp eax, 0x14
jl 0x476340
fld qword [0x4ef4f8]
fld qword [0x52ef38]
fcom st(1)
fnstsw ax
fstp st(1)
test ah, 5
jp 0x4763a2
fadd qword [esp + 0x58]
fstp qword [0x52ef38]
jmp 0x4763a4
fstp st(0)
test ebx, ebx
pop ebx
jne 0x4763bf
push 0x13f
push reloc.kernel32.dll_GetFileAttributesExW
push reloc.kernel32.dll_SetSystemTime
push reloc.kernel32.dll_AttachConsole
call fcn.00467730
add esp, 0x10
mov ecx, dword [esp + 0x44]
xor ecx, esp
call fcn.004b4591
add esp, 0x48
ret