Function at 0x4a116b
Capabilities:
Encode data using xor

Disassembly:
sub esp, 0xac
push ebx
push ebp
push esi
push edi
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [0x65a600]
and dword [eax + 0x20], 0
call fcn.00497c24
call fcn.00499fe1
cmp dword [0x65a710], 0xf
mov ecx, 0x65a6fc
push 0x80e2
cmova ecx, dword [0x65a6fc]
xor edx, edx
call fcn.004c503f
pop ecx
push dword [esp + 0x10]
push ecx
lea ecx, [esp + 0x86]
call fcn.004a581a
push ecx
push 0x1b
lea ecx, [esp + 0x40]
mov esi, eax
call fcn.004a2831
xor edx, edx
mov ax, word [edx + esi + 2]
xor ax, word [esi]
cmp dword [esp + 0x4c], 7
movzx ecx, ax
lea eax, [esp + 0x38]
cmova eax, dword [esp + 0x38]
mov word [edx + eax], cx
add edx, 2
cmp edx, 0x36
jb 0x4a11d1
cmp dword [esp + 0x4c], 7
lea ecx, [esp + 0x38]
cmova ecx, dword [esp + 0x38]
call fcn.004ac971
lea ecx, [esp + 0x38]
mov bl, al
call fcn.004a2dca
test bl, bl
je 0x4a1be0
mov eax, dword [0x65a600]
mov eax, dword [eax + 0x3e48]
mov ecx, dword [eax + 0x14]
mov eax, dword [eax + 0x18]
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], eax
call fcn.004c77dc
mov esi, eax
call fcn.004c0d5c
call fcn.004c0d79
movss xmm1, dword [esp + 0x10]
lea ecx, [esp + 0x10]
movaps xmm0, xmm1
xorps xmm2, xmm2
addss xmm0, xmm2
movss dword [esp + 0x20], xmm0
xorps xmm0, xmm0
addss xmm0, dword [esp + 0x14]
movss dword [esp + 0x24], xmm0
movss xmm0, dword [0x50e2d8]
addss xmm1, xmm0
addss xmm0, dword [esp + 0x14]
movss dword [esp + 0x30], xmm1
movss dword [esp + 0x34], xmm0
movaps xmm0, xmmword [0x50e540]
movups xmmword [esp + 0x10], xmm0
movaps xmm0, xmmword [0x50e540]
movups xmmword [esp + 0x6c], xmm0
movaps xmm0, xmmword [0x50e5d0]
movups xmmword [esp + 0x54], xmm0
movaps xmm0, xmmword [0x50e540]
movups xmmword [esp + 0x38], xmm0
call fcn.004bdbd0
push eax
lea ecx, [esp + 0x70]
call fcn.004bdbd0
push eax
lea ecx, [esp + 0x5c]
call fcn.004bdbd0
push eax
lea ecx, [esp + 0x44]
call fcn.004bdbd0
push eax
lea eax, [esp + 0x40]
mov ecx, esi
push eax
lea eax, [esp + 0x34]
push eax
call fcn.004d88bb
call fcn.00496994
movss xmm1, dword [0x50e180]
xor ecx, ecx
call fcn.004beb97
xor ebx, ebx
mov dword [esp + 0x20], 0x43eb0000
push ebx
push ecx
lea eax, [esp + 0x28]
mov dword [esp + 0x2c], 0x43c80000
xor edx, edx
xor ecx, ecx
push eax
inc edx
call fcn.004c2ab2
add esp, 0xc
mov esi, 0x65b940
mov edi, 0x659578
push 3
pop ebp
test al, al
je 0x4a14d2
movss xmm0, dword [0x50e294]
call fcn.004c9a97
push esi
mov ecx, edi
mov dword [esp + 0x24], 0x428c0000
mov dword [esp + 0x28], 0x420c0000
call fcn.004a64ab
xor edx, edx
mov byte [esp + 0x14], bl
push 0x7e
pop ecx
div ecx
mov ecx, ebx
inc dl
mov al, dl
mov byte [esp + 0x10], dl
xor al, 0xef
mov byte [esp + 0x11], al
mov al, dl
xor al, 0x8e
mov byte [esp + 0x12], al
mov al, dl
xor al, 0x92
mov byte [esp + 0x13], al
mov al, byte [esp + ecx + 0x11]
xor al, dl
mov byte [ecx + 0x65b908], al
inc ecx
cmp ecx, ebp
jb 0x4a1391
push ecx
lea edx, [esp + 0x24]
mov byte [0x65b90b], bl
mov ecx, 0x65b908
call fcn.004e136c
pop ecx
test al, al
je 0x4a13c6
mov dword [0x5160c8], 1
movss xmm1, dword [0x50e328]
xorps xmm0, xmm0
call fcn.004c99b6
push esi
mov ecx, edi
mov dword [esp + 0x24], 0x428c0000
mov dword [esp + 0x28], 0x420c0000
call fcn.004a64ab
xor edx, edx
mov byte [esp + 0x14], bl
push 0x7e
pop ecx
div ecx
mov ecx, ebx
inc dl
mov al, dl
mov byte [esp + 0x10], dl
xor al, 0xef
mov byte [esp + 0x11], al
mov al, dl
xor al, 0x95
mov byte [esp + 0x12], al
mov al, dl
xor al, 0x84
mov byte [esp + 0x13], al
mov al, byte [esp + ecx + 0x11]
xor al, dl
mov byte [ecx + 0x65b85c], al
inc ecx
cmp ecx, ebp
jb 0x4a1419
push ecx
lea edx, [esp + 0x24]
mov byte [0x65b85f], bl
mov ecx, 0x65b85c
call fcn.004e136c
pop ecx
test al, al
je 0x4a144e
mov dword [0x5160c8], 2
movss xmm1, dword [0x50e328]
xorps xmm0, xmm0
call fcn.004c99b6
push esi
mov ecx, edi
mov dword [esp + 0x24], 0x428c0000
mov dword [esp + 0x28], 0x420c0000
call fcn.004a64ab
xor edx, edx
mov byte [esp + 0x14], bl
push 0x7e
pop ecx
div ecx
mov ecx, ebx
inc dl
mov al, dl
mov byte [esp + 0x10], dl
xor al, 0xef
mov byte [esp + 0x11], al
mov al, dl
xor al, 0x88
mov byte [esp + 0x12], al
mov al, dl
xor al, 0x9b
mov byte [esp + 0x13], al
mov al, byte [esp + ecx + 0x11]
xor al, dl
mov byte [ecx + 0x65b830], al
inc ecx
cmp ecx, ebp
jb 0x4a14a1
push ecx
lea edx, [esp + 0x24]
mov byte [0x65b833], bl
mov ecx, 0x65b830
call fcn.004e136c
pop ecx
test al, al
je 0x4a14d2
mov dword [0x5160c8], ebp
call fcn.004c2cc5
push ebx
push ecx
lea eax, [esp + 0x28]
mov dword [esp + 0x28], 0x43eb0000
xor edx, edx
mov dword [esp + 0x2c], 0x43c80000
push eax
inc edx
xor ecx, ecx
call fcn.004c2ab2
add esp, 0xc
test al, al
je 0x4a1acb
xorps xmm0, xmm0
call fcn.004c9b05
mov eax, dword [0x5160c8]
cmp eax, 1
jne 0x4a151f
call fcn.004a9563
jmp 0x4a1acb
cmp eax, 2
jne 0x4a17f1
push esi
mov ecx, edi
call fcn.004a64ab
mov ecx, 0x65b718
mov byte [0x65b718], bl
call fcn.004e311c
call fcn.004c739e
push dword [esp + 0x10]
push ecx
lea ecx, [esp + 0x28]
call fcn.004a591d
mov edx, ebx
mov cl, byte [eax + edx + 1]
xor cl, byte [eax]
mov byte [edx + 0x65b728], cl
inc edx
cmp edx, 7
jb 0x4a1555
push 0x65ad52
push 0x65b728
mov byte [0x65b72f], bl
call fcn.004f10f5
cmp byte [0x65ad52], bl
je 0x4a15cb
push dword [esp + 0x10]
push ecx
lea ecx, [esp + 0x28]
call fcn.004a5974
mov edx, ebx
mov cl, byte [edx + eax + 1]
xor cl, byte [eax]
mov byte [edx + 0x65b808], cl
inc edx
cmp edx, 0xc
jb 0x4a1594
push ecx
push 2
push 0x6594d8
push fcn.004e37c0
mov edx, 0x65ad74
mov byte [0x65b814], bl
mov ecx, 0x65b808
call fcn.004e3820
add esp, 0x10
push dword [esp + 0x10]
push ecx
lea ecx, [esp + 0x28]
call fcn.004a59eb
mov edx, ebx
mov cl, byte [eax + edx + 1]
xor cl, byte [eax]
mov byte [edx + 0x65b8e4], cl
inc edx
cmp edx, 0xc
jb 0x4a15db
push 0x65ad51
push 0x65b8e4
mov byte [0x65b8f0], bl
call fcn.004f10f5
push dword [esp + 0x10]
push ecx
lea ecx, [esp + 0x28]
call fcn.004a5a5f
mov edx, ebx
mov cl, byte [eax + edx + 1]
xor cl, byte [eax]
mov byte [edx + 0x65b790], cl
inc edx
cmp edx, 0xb
jb 0x4a1612
push 0x65ad78
push 0x65b790
mov byte [0x65b79b], bl
call fcn.004f10f5
cmp byte [0x65ad78], bl
je 0x4a1687
push dword [esp + 0x10]
push ecx
lea ecx, [esp + 0x40]
call fcn.004a5acf
mov edx, ebx
mov cl, byte [edx + eax + 1]
xor cl, byte [eax]
mov byte [edx + 0x65b8a8], cl
inc edx
cmp edx, 0x19
jb 0x4a1651
push ecx
push ebp
push 0x659194
push fcn.004e37c0
mov edx, 0x65ad8c
mov byte [0x65b8c1], bl
mov ecx, 0x65b8a8
call fcn.004e3820
add esp, 0x10
push dword [esp + 0x10]
push ecx
lea ecx, [esp + 0x28]
call fcn.004a5b8d
mov edx, ebx
mov cl, byte [eax + edx + 1]
xor cl, byte [eax]
mov byte [edx + 0x65b760], cl
inc edx
cmp edx, 0xd
jb 0x4a1697
mov edx, 0x65ad81
mov byte [0x65b76d], bl
mov ecx, 0x65b760
call fcn.004e2283
cmp byte [0x65ad81], bl
je 0x4a17cf
push dword [esp + 0x10]
push ecx
lea ecx, [esp + 0x28]
call fcn.004a5c05
mov edx, ebx
mov cl, byte [edx + eax + 1]
xor cl, byte [eax]
mov byte [edx + 0x65b7f0], cl
inc edx
cmp edx, 9
jb 0x4a16da
push ecx
push ecx
lea eax, [esp + 0x38]
mov byte [0x65b7f9], bl
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x3c], 0x5d
push eax
push 0x65907c
mov ecx, 0x65b7f0
mov dword [esp + 0x24], 0x32
call fcn.004e4979
add esp, 0x14
push dword [esp + 0x10]
push ecx
lea ecx, [esp + 0x28]
call fcn.004a5c63
mov edx, ebx
mov cl, byte [edx + eax + 1]
xor cl, byte [eax]
mov byte [edx + 0x65b7e8], cl
inc edx
cmp edx, 6
jb 0x4a1730
mov edx, 0x65ad55
mov byte [0x65b7ee], bl
mov ecx, 0x65b7e8
call fcn.004e2283
push esi
mov ecx, edi
call fcn.004a64ab
xor edx, edx
mov byte [esp + 0x14], bl
push 0x7e
pop ecx
div ecx
mov ecx, ebx
inc dl
mov al, dl
mov byte [esp + 0x10], dl
xor al, 0x46
mov byte [esp + 0x11], al
mov al, dl
xor al, 0x6f
mov byte [esp + 0x12], al
mov al, dl
xor al, 0x76
mov byte [esp + 0x13], al
mov al, byte [esp + ecx + 0x11]
xor al, dl
mov byte [ecx + 0x65cd14], al
inc ecx
cmp ecx, ebp
jb 0x4a178a
push ecx
push ecx
lea eax, [esp + 0x18]
mov byte [0x65cd17], bl
push eax
lea eax, [esp + 0x3c]
mov dword [esp + 0x1c], 0x5dc
push eax
push 0x659050
mov ecx, 0x65cd14
mov dword [esp + 0x44], 0x32
call fcn.004e4979
add esp, 0x14
call fcn.004c73f2
push esi
mov ecx, edi
call fcn.004a64ab
mov ecx, 0x65b71a
mov byte [0x65b71a], bl
call fcn.004e311c
jmp 0x4a1acb
cmp eax, ebp
jne 0x4a1ac1
push dword [esp + 0x10]
push ecx
lea ecx, [esp + 0x40]
call fcn.004a55ac
mov edx, ebx
mov cl, byte [eax + edx + 1]
xor cl, byte [eax]
mov byte [edx + 0x65b778], cl
inc edx
cmp edx, 0xf
jb 0x4a1809
mov ecx, 0x65b778
mov byte [0x65b787], bl
call fcn.004e311c
push dword [esp + 0x10]
push ecx
lea ecx, [esp + 0x40]
call fcn.004a562f
push ecx
push 7
lea ecx, [esp + 0x5c]
mov esi, eax
call fcn.004a2831
mov edx, ebx
mov ax, word [esi + edx + 2]
xor ax, word [esi]
cmp dword [esp + 0x68], 7
movzx ecx, ax
lea eax, [esp + 0x54]
cmova eax, dword [esp + 0x54]
mov word [eax + edx], cx
add edx, 2
cmp edx, 0xe
jb 0x4a1849
cmp dword [esp + 0x68], 7
lea ecx, [esp + 0x54]
cmova ecx, dword [esp + 0x54]
call fcn.004ac971
lea ecx, [esp + 0x54]
mov bl, al
call fcn.004a2dca
push dword [esp + 0x10]
push ecx
test bl, bl
je 0x4a1971
lea ecx, [esp + 0x28]
call fcn.004a5695
xor ebx, ebx
mov edx, ebx
mov cl, byte [edx + eax + 1]
xor cl, byte [eax]
mov byte [edx + 0x65e0d8], cl
inc edx
cmp edx, 0xb
jb 0x4a18a6
movaps xmm0, xmmword [0x50e610]
lea esi, [esp + 0x38]
movups xmmword [esp + 0x38], xmm0
lea edi, [esp + 0x20]
mov byte [0x65e0e3], bl
movsd dword es:[edi], dword [esi]
lea edx, [esp + 0x20]
push 0x15
pop ecx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004beaff
mov esi, 0x65b940
mov dword [esp + 0x20], 0x41f00000
mov edi, 0x659578
mov dword [esp + 0x24], 0x41f00000
push esi
mov ecx, edi
call fcn.004a64ab
xor edx, edx
mov byte [esp + 0x14], bl
push 0x7e
pop ecx
div ecx
mov ecx, ebx
inc dl
mov al, dl
mov byte [esp + 0x10], dl
xor al, 0xef
mov byte [esp + 0x11], al
mov al, dl
xor al, 0x88
mov byte [esp + 0x12], al
mov al, dl
xor al, 0x9b
mov byte [esp + 0x13], al
mov al, byte [esp + ecx + 0x11]
xor al, dl
mov byte [ecx + 0x65ccdc], al
inc ecx
cmp ecx, ebp
jb 0x4a192f
push ecx
lea edx, [esp + 0x24]
mov byte [0x65ccdf], bl
mov ecx, 0x65ccdc
call fcn.004e136c
movss xmm1, dword [0x50e328]
xorps xmm0, xmm0
pop ecx
call fcn.004c99b6
push ecx
mov ecx, 0x65e0d8
jmp 0x4a1a44
lea ecx, [esp + 0x18]
call fcn.004a5704
xor ebx, ebx
mov edx, ebx
mov cl, byte [edx + eax + 1]
xor cl, byte [eax]
mov byte [edx + 0x65b7c4], cl
inc edx
cmp edx, 0xc
jb 0x4a197e
movaps xmm0, xmmword [0x50e600]
lea esi, [esp + 0x38]
movups xmmword [esp + 0x38], xmm0
lea edi, [esp + 0x20]
mov byte [0x65b7d0], bl
movsd dword es:[edi], dword [esi]
lea edx, [esp + 0x20]
push 0x15
pop ecx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004beaff
mov esi, 0x65b940
mov dword [esp + 0x20], 0x41f00000
mov edi, 0x659578
mov dword [esp + 0x24], 0x41f00000
push esi
mov ecx, edi
call fcn.004a64ab
xor edx, edx
mov byte [esp + 0x14], bl
push 0x7e
pop ecx
div ecx
mov ecx, ebx
inc dl
mov al, dl
mov byte [esp + 0x10], dl
xor al, 0xef
mov byte [esp + 0x11], al
mov al, dl
xor al, 0x88
mov byte [esp + 0x12], al
mov al, dl
xor al, 0x9b
mov byte [esp + 0x13], al
mov al, byte [esp + ecx + 0x11]
xor al, dl
mov byte [ecx + 0x65b8f8], al
inc ecx
cmp ecx, ebp
jb 0x4a1a07
push ecx
lea edx, [esp + 0x24]
mov byte [0x65b8fb], bl
mov ecx, 0x65b8f8
call fcn.004e136c
movss xmm1, dword [0x50e328]
xorps xmm0, xmm0
pop ecx
call fcn.004c99b6
push ecx
mov ecx, 0x65b7c4
and dword [esp + 0x24], ebx
lea edx, [esp + 0x24]
and dword [esp + 0x28], ebx
call fcn.004e136c
pop ecx
xor ecx, ecx
inc ecx
call fcn.004beb47
call fcn.004c739e
push dword [esp + 0x10]
push ecx
lea ecx, [esp + 0x40]
call fcn.004a5777
mov edx, ebx
mov cl, byte [edx + eax + 1]
xor cl, byte [eax]
mov byte [edx + 0x65b848], cl
inc edx
cmp edx, 0x13
jb 0x4a1a73
push 0x65ad81
push 0x65b848
mov byte [0x65b85b], bl
call fcn.004f10f5
call fcn.004c73f2
push esi
mov ecx, edi
call fcn.004a64ab
mov ecx, 0x65b844
mov byte [0x65b844], bl
call fcn.004e311c
xorps xmm0, xmm0
call fcn.004c9b59
jmp 0x4a1acb
cmp eax, 6
jne 0x4a1acb
call fcn.004a89ae
call fcn.004c2cc5
push ebx
push ecx
lea eax, [esp + 0x28]
mov dword [esp + 0x28], 0x43eb0000
push eax
mov edx, ebp
mov dword [esp + 0x30], 0x42a00000
xor ecx, ecx
call fcn.004c2ab2
add esp, 0xc
test al, al
je 0x4a1bcc
lea ecx, [esp + 0x20]
call fcn.004c9d94
movss xmm1, dword [eax + 4]
mov eax, dword [0x65a600]
subss xmm1, dword [0x50e274]
mov eax, dword [eax + 0x3e48]
mulss xmm1, dword [0x50e140]
movss xmm0, dword [eax + 0xf4]
subss xmm0, dword [eax + 0x18]
addss xmm0, dword [eax + 0x7c]
addss xmm0, xmm1
call fcn.004c9ace
call fcn.00499918
call fcn.004e2a3e
push esi
mov ecx, edi
mov dword [esp + 0x24], 0x42200000
mov dword [esp + 0x28], 0x41f00000
call fcn.004a64ab
xor edx, edx
mov byte [esp + 0x14], bl
push 0x7e
pop ecx
div ecx
mov ecx, ebx
inc dl
mov al, dl
mov byte [esp + 0x10], dl
xor al, 0xef
mov byte [esp + 0x11], al
mov al, dl
xor al, 0x80
mov byte [esp + 0x12], al
mov al, dl
xor al, 0x91
mov byte [esp + 0x13], al
mov al, byte [esp + ecx + 0x11]
xor al, dl
mov byte [ecx + 0x65b820], al
inc ecx
cmp ecx, ebp
jb 0x4a1b8c
push ecx
lea edx, [esp + 0x24]
mov byte [0x65b823], bl
mov ecx, 0x65b820
call fcn.004e136c
pop ecx
test al, al
jne 0x4a1be0
movss xmm1, dword [0x50e328]
xorps xmm0, xmm0
call fcn.004c99b6
call fcn.00498f3a
call fcn.004c2cc5
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xac
jmp fcn.004c6e16
call fcn.00499837
int3