Function at 0x47e760
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x128
mov eax, dword [0x4fc040]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
xor esi, esi
mov dword [ebp - 0x124], ecx
push edi
add edx, 2
movzx ecx, byte [edx - 2]
lea edx, [edx + 4]
movzx eax, byte [edx - 5]
shl ecx, 8
or ecx, eax
movzx eax, byte [edx - 4]
shl ecx, 8
or ecx, eax
movzx eax, byte [edx - 3]
shl ecx, 8
or ecx, eax
mov dword [ebp + esi*4 - 0x104], ecx
inc esi
cmp esi, 0x10
jb 0x47e781
lea eax, [ebp - 0x100]
mov ebx, 0x30
nop dword [eax + eax]
mov edx, dword [eax]
lea eax, [eax + 4]
mov esi, dword [eax + 0x30]
mov edi, edx
mov ecx, edx
ror edi, 0x12
ror ecx, 7
xor edi, ecx
shr edx, 3
xor edi, edx
mov ecx, esi
mov edx, esi
ror ecx, 0x11
ror edx, 0x13
xor edx, ecx
shr esi, 0xa
xor edx, esi
add edi, edx
add edi, dword [eax + 0x1c]
add edi, dword [eax - 8]
mov dword [eax + 0x38], edi
sub ebx, 1
jne 0x47e7c0
mov ebx, dword [ebp - 0x124]
mov dword [ebp - 0x11c], 0
mov eax, dword [ebx]
mov esi, eax
mov edx, dword [ebx + 0x14]
mov edi, dword [ebx + 4]
mov ecx, dword [ebx + 0xc]
mov dword [ebp - 0x128], eax
mov eax, dword [ebx + 8]
mov dword [ebp - 0x10c], edx
mov edx, dword [ebx + 0x18]
mov dword [ebp - 0x120], eax
mov eax, dword [ebx + 0x10]
mov dword [ebp - 0x110], edx
mov edx, dword [ebx + 0x1c]
mov ebx, dword [ebp - 0x120]
mov dword [ebp - 0x108], eax
mov dword [ebp - 0x114], edx
jmp 0x47e85c
mov ecx, dword [ebp - 0x118]
mov eax, dword [ebp - 0x108]
mov edx, eax
ror eax, 0xb
ror edx, 0x19
xor edx, eax
mov eax, dword [ebp - 0x108]
ror eax, 6
xor edx, eax
mov eax, dword [ebp - 0x110]
xor eax, dword [ebp - 0x10c]
and eax, dword [ebp - 0x108]
xor eax, dword [ebp - 0x110]
add edx, eax
mov eax, dword [ebp - 0x11c]
add edx, dword [eax + 0x4d2e08]
add edx, dword [ebp + eax - 0x104]
mov eax, esi
add edx, dword [ebp - 0x114]
ror eax, 0xd
add ecx, edx
mov dword [ebp - 0x118], ecx
mov ecx, esi
ror ecx, 0x16
xor ecx, eax
mov eax, esi
ror eax, 2
xor ecx, eax
mov eax, edi
or eax, esi
add ecx, edx
and eax, ebx
mov dword [ebp - 0x114], eax
mov eax, edi
and eax, esi
or dword [ebp - 0x114], eax
add dword [ebp - 0x114], ecx
mov ecx, dword [ebp - 0x118]
mov edx, ecx
ror edx, 0x19
mov eax, ecx
ror eax, 0xb
xor edx, eax
mov eax, ecx
ror eax, 6
xor edx, eax
mov eax, dword [ebp - 0x10c]
xor eax, dword [ebp - 0x108]
and eax, ecx
xor eax, dword [ebp - 0x10c]
add edx, eax
mov eax, dword [ebp - 0x11c]
add edx, dword [ebp + eax - 0x100]
add edx, dword [eax + 0x4d2e0c]
mov eax, dword [ebp - 0x114]
mov ecx, eax
add edx, dword [ebp - 0x110]
ror eax, 0xd
add ebx, edx
ror ecx, 0x16
xor ecx, eax
mov eax, dword [ebp - 0x114]
ror eax, 2
xor ecx, eax
mov eax, dword [ebp - 0x114]
or eax, esi
add ecx, edx
and eax, edi
mov edx, ebx
mov dword [ebp - 0x110], eax
mov eax, dword [ebp - 0x114]
and eax, esi
ror edx, 0x19
or dword [ebp - 0x110], eax
mov eax, ebx
add dword [ebp - 0x110], ecx
ror eax, 0xb
xor edx, eax
mov eax, ebx
ror eax, 6
xor edx, eax
mov eax, dword [ebp - 0x108]
xor eax, dword [ebp - 0x118]
and eax, ebx
xor eax, dword [ebp - 0x108]
add edx, eax
mov eax, dword [ebp - 0x11c]
add edx, dword [ebp + eax - 0xfc]
add edx, dword [eax + 0x4d2e10]
add edx, dword [ebp - 0x10c]
mov eax, dword [ebp - 0x110]
add edi, edx
mov ecx, eax
ror eax, 0xd
ror ecx, 0x16
xor ecx, eax
mov eax, dword [ebp - 0x110]
ror eax, 2
xor ecx, eax
mov eax, dword [ebp - 0x114]
or eax, dword [ebp - 0x110]
add ecx, edx
and eax, esi
mov edx, edi
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0x114]
and eax, dword [ebp - 0x110]
or dword [ebp - 0x10c], eax
mov eax, edi
ror eax, 0xb
add dword [ebp - 0x10c], ecx
ror edx, 0x19
xor edx, eax
mov eax, edi
ror eax, 6
xor edx, eax
mov eax, dword [ebp - 0x118]
xor eax, ebx
and eax, edi
xor eax, dword [ebp - 0x118]
add edx, eax
mov eax, dword [ebp - 0x11c]
add edx, dword [ebp + eax - 0xf8]
add edx, dword [eax + 0x4d2e14]
mov eax, dword [ebp - 0x10c]
mov ecx, eax
add edx, dword [ebp - 0x108]
ror eax, 0xd
add esi, edx
ror ecx, 0x16
xor ecx, eax
mov eax, dword [ebp - 0x10c]
ror eax, 2
xor ecx, eax
mov eax, dword [ebp - 0x110]
or eax, dword [ebp - 0x10c]
add ecx, edx
and eax, dword [ebp - 0x114]
mov edx, esi
mov dword [ebp - 0x108], eax
mov eax, dword [ebp - 0x110]
and eax, dword [ebp - 0x10c]
or dword [ebp - 0x108], eax
mov eax, esi
add dword [ebp - 0x108], ecx
ror eax, 0xb
ror edx, 0x19
xor edx, eax
mov eax, esi
ror eax, 6
xor edx, eax
mov eax, ebx
xor eax, edi
and eax, esi
xor eax, ebx
add edx, eax
mov eax, dword [ebp - 0x11c]
add edx, dword [ebp + eax - 0xf4]
add edx, dword [eax + 0x4d2e18]
add edx, dword [ebp - 0x118]
mov eax, dword [ebp - 0x108]
mov ecx, eax
add dword [ebp - 0x114], edx
ror ecx, 0x16
ror eax, 0xd
xor ecx, eax
mov eax, dword [ebp - 0x108]
ror eax, 2
xor ecx, eax
mov eax, dword [ebp - 0x10c]
or eax, dword [ebp - 0x108]
add ecx, edx
and eax, dword [ebp - 0x110]
mov dword [ebp - 0x118], eax
mov eax, dword [ebp - 0x10c]
and eax, dword [ebp - 0x108]
or dword [ebp - 0x118], eax
add dword [ebp - 0x118], ecx
mov ecx, dword [ebp - 0x114]
mov edx, ecx
ror edx, 0x19
mov eax, ecx
ror eax, 0xb
xor edx, eax
mov eax, ecx
ror eax, 6
xor edx, eax
mov eax, edi
xor eax, esi
and eax, ecx
xor eax, edi
add edx, eax
mov eax, dword [ebp - 0x11c]
add edx, dword [ebp + eax - 0xf0]
add edx, dword [eax + 0x4d2e1c]
add edx, ebx
mov ebx, dword [ebp - 0x118]
add dword [ebp - 0x110], edx
mov ecx, ebx
ror ecx, 0x16
mov eax, ebx
ror eax, 0xd
xor ecx, eax
mov eax, ebx
ror eax, 2
xor ecx, eax
mov eax, dword [ebp - 0x108]
mov ebx, eax
add ecx, edx
and eax, dword [ebp - 0x118]
or ebx, dword [ebp - 0x118]
and ebx, dword [ebp - 0x10c]
or ebx, eax
add ebx, ecx
mov ecx, dword [ebp - 0x110]
mov edx, ecx
mov eax, ecx
ror eax, 0xb
ror edx, 0x19
xor edx, eax
mov eax, ecx
ror eax, 6
xor edx, eax
mov eax, dword [ebp - 0x114]
xor eax, esi
and eax, ecx
mov ecx, ebx
xor eax, esi
ror ecx, 0x16
add edx, eax
mov eax, dword [ebp - 0x11c]
add edx, dword [ebp + eax - 0xec]
add edx, dword [eax + 0x4d2e20]
mov eax, ebx
ror eax, 0xd
add edx, edi
add dword [ebp - 0x10c], edx
xor ecx, eax
mov eax, ebx
ror eax, 2
xor ecx, eax
mov eax, dword [ebp - 0x118]
mov edi, eax
or edi, ebx
and edi, dword [ebp - 0x108]
and eax, ebx
add ecx, edx
or edi, eax
add edi, ecx
mov ecx, dword [ebp - 0x10c]
mov edx, ecx
mov eax, ecx
ror eax, 0xb
ror edx, 0x19
xor edx, eax
mov eax, ecx
ror eax, 6
xor edx, eax
mov eax, dword [ebp - 0x114]
xor eax, dword [ebp - 0x110]
and eax, ecx
mov ecx, edi
xor eax, dword [ebp - 0x114]
add edx, eax
ror ecx, 0x16
mov eax, dword [ebp - 0x11c]
add edx, dword [ebp + eax - 0xe8]
add edx, dword [eax + 0x4d2e24]
mov eax, edi
ror eax, 0xd
add edx, esi
add dword [ebp - 0x108], edx
xor ecx, eax
mov eax, edi
mov esi, ebx
ror eax, 2
or esi, edi
and esi, dword [ebp - 0x118]
xor ecx, eax
mov eax, ebx
add ecx, edx
and eax, edi
or esi, eax
mov eax, dword [ebp - 0x11c]
add eax, 0x20
add esi, ecx
mov dword [ebp - 0x11c], eax
cmp eax, 0x100
jb 0x47e850
mov eax, dword [ebp - 0x128]
lea ecx, [ebp - 0x104]
add eax, esi
mov dword [ebp - 0x120], ebx
mov ebx, dword [ebp - 0x124]
mov edx, pe_nt_image_headers32
add dword [ebx + 4], edi
mov dword [ebx], eax
mov eax, dword [ebp - 0x120]
add dword [ebx + 8], eax
mov eax, dword [ebp - 0x118]
add dword [ebx + 0xc], eax
mov eax, dword [ebp - 0x108]
add dword [ebx + 0x10], eax
mov eax, dword [ebp - 0x10c]
add dword [ebx + 0x14], eax
mov eax, dword [ebp - 0x110]
add dword [ebx + 0x18], eax
mov eax, dword [ebp - 0x114]
add dword [ebx + 0x1c], eax
call fcn.00492670
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00495b16
mov esp, ebp
pop ebp
ret