Function at 0x475ea0
Capabilities:
Encode data using xor
Encrypt data using aes
Reference aes constants

Disassembly:
sub esp, 0x20
mov eax, dword [esp + 0x24]
push ebx
mov ebx, ecx
mov dword [esp + 8], eax
push ebp
mov ebp, dword [esp + 0x30]
push esi
mov ecx, dword [ebx + 0x28]
mov edx, dword [ebx + 0x2c]
mov dword [esp + 0x24], ebx
push edi
cmp ecx, 0x120c
je 0x475ee9
test edx, edx
je 0x475eda
mov edi, edx
xor al, al
rep stosb byte es:[edi], al
push edx
call sub.MSVCR120.dll_free
add esp, 4
push 0x120c
call fcn.0045c120
add esp, 4
mov edx, eax
mov edi, ebp
mov dword [ebx + 0x2c], edx
shr edi, 2
lea ecx, [ebx + 0x10]
mov dword [ebx + 0x28], 0x120c
mov dword [ebx + 0x24], 0xffffffff
mov dword [ebx + 0x24], 0
lea eax, [edi + 6]
mov dword [esp + 0x10], edi
mov dword [ebx + 0xc], eax
lea eax, [eax*4 + 4]
push eax
mov dword [esp + 0x24], ecx
call fcn.00469930
mov al, byte [0x4ae2fc]
mov esi, dword [ebx + 0x1c]
test al, al
jne 0x475f3a
call fcn.0047c5d0
mov al, byte [0x4ae2fc]
cmp byte [0x4ae302], 0
je 0x475f8e
test al, al
jne 0x475f4c
call fcn.0047c5d0
cmp byte [0x4ae2ff], 0
je 0x475f8e
push esi
push ebp
push dword [esp + 0x1c]
call fcn.0047d850
mov eax, dword [ebx + 4]
lea ecx, [ebx + 4]
add esp, 0xc
mov eax, dword [eax + 0x20]
call eax
test al, al
jne 0x4766f3
push dword [ebx + 0xc]
push dword [ebx + 0x1c]
call fcn.0047d7f0
add esp, 8
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x20
ret 0xc
push ebp
push dword [esp + 0x18]
shl edi, 2
push edi
push esi
mov dword [esp + 0x2c], ebp
mov dword [esp + 0x28], 4
call dword [sym.imp.MSVCR120.dll_memcpy_s]
sub edi, ebp
lea eax, [esi + ebp]
push edi
push 0
push eax
call sub.MSVCR120.dll_memset
lea eax, [esp + 0x34]
push eax
lea eax, [esp + 0x3c]
push eax
call fcn.0045d850
push eax
push esi
push esi
call fcn.004745f0
mov eax, dword [esp + 0x40]
add esp, 0x30
shl eax, 2
mov ecx, dword [eax + esi - 4]
lea edi, [eax + esi]
mov dword [esp + 0x14], eax
mov eax, ecx
shr eax, 0x10
movzx eax, al
movzx edx, byte [eax + str.cw]
mov eax, ecx
shr eax, 8
movzx eax, al
shl edx, 8
movzx eax, byte [eax + str.cw]
xor edx, eax
movzx eax, cl
shl edx, 8
shr ecx, 0x18
movzx eax, byte [eax + str.cw]
xor edx, eax
movzx eax, byte [ecx + str.cw]
shl edx, 8
xor edx, eax
xor edx, dword [esi]
xor edx, dword [0x48db90]
mov dword [edi], edx
mov eax, dword [esi + 4]
xor eax, edx
mov edx, dword [esp + 0x10]
mov dword [edi + 4], eax
mov ecx, dword [esi + 8]
xor ecx, eax
lea eax, [edx*4 + 8]
mov dword [eax + esi], ecx
mov dword [esp + 0x10], eax
lea eax, [edx*4 + 0xc]
mov dword [esp + 0x2c], eax
mov eax, dword [esi + 0xc]
xor eax, ecx
mov dword [esi + edx*4 + 0xc], eax
lea edx, [edx*4 + 0x10]
mov eax, dword [ebx + 0x1c]
mov ecx, dword [ebx + 0x18]
mov dword [esp + 0x24], edx
lea ecx, [eax + ecx*4]
lea eax, [edx + esi]
cmp eax, ecx
je 0x4761b5
mov edx, dword [esp + 0x14]
lea ebx, [edx - 4]
lea eax, [edx + 4]
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x18], eax
mov ebx, 0x48db94
cmp ebp, 0x18
jne 0x4760b0
mov ecx, dword [esi + 0x24]
xor ecx, dword [esi + 0x10]
mov eax, dword [esi + 0x14]
xor eax, ecx
mov dword [esi + 0x28], ecx
mov dword [esi + 0x2c], eax
jmp 0x476119
cmp ebp, 0x20
jne 0x476119
mov ecx, dword [esi + 0x2c]
mov eax, ecx
shr eax, 0x18
movzx edx, byte [eax + str.cw]
mov eax, ecx
shr eax, 0x10
movzx eax, al
shl edx, 8
movzx eax, byte [eax + str.cw]
xor edx, eax
mov eax, ecx
shr eax, 8
movzx eax, al
shl edx, 8
movzx eax, byte [eax + str.cw]
xor edx, eax
movzx eax, cl
mov ecx, dword [esi + 0x18]
shl edx, 8
movzx eax, byte [eax + str.cw]
xor edx, eax
mov eax, dword [esi + 0x14]
xor edx, dword [esi + 0x10]
xor eax, edx
mov dword [esi + 0x30], edx
xor ecx, eax
mov dword [esi + 0x34], eax
mov eax, dword [esi + 0x1c]
xor eax, ecx
mov dword [esi + 0x38], ecx
mov dword [esi + 0x3c], eax
mov eax, dword [esp + 0x1c]
mov esi, edi
mov edi, dword [esp + 0x14]
add edi, esi
mov edx, dword [eax + esi]
mov eax, edx
shr eax, 0x10
movzx eax, al
movzx ecx, byte [eax + str.cw]
mov eax, edx
shr eax, 8
movzx eax, al
shl ecx, 8
movzx eax, byte [eax + str.cw]
xor ecx, eax
movzx eax, dl
shl ecx, 8
shr edx, 0x18
movzx eax, byte [eax + str.cw]
xor ecx, eax
movzx eax, byte [edx + str.cw]
shl ecx, 8
xor ecx, eax
mov edx, dword [esp + 0x20]
xor ecx, dword [ebx]
add ebx, 4
xor ecx, dword [esi]
mov dword [edi], ecx
mov eax, dword [esi + 4]
xor eax, ecx
mov ecx, dword [esp + 0x18]
mov dword [ecx + esi], eax
mov ecx, dword [esi + 8]
xor ecx, eax
mov eax, dword [esp + 0x10]
mov dword [eax + esi], ecx
mov eax, dword [esi + 0xc]
xor eax, ecx
mov ecx, dword [esp + 0x2c]
mov dword [ecx + esi], eax
mov eax, dword [edx + 0xc]
mov ecx, dword [edx + 8]
lea ecx, [eax + ecx*4]
mov eax, dword [esp + 0x24]
add eax, esi
cmp eax, ecx
jne 0x476098
mov ebx, dword [esp + 0x28]
mov eax, dword [ebx + 4]
lea ecx, [ebx + 4]
mov edi, dword [ebx + 0x1c]
mov dword [esp + 0x20], edi
mov eax, dword [eax + 0x20]
call eax
test al, al
je 0x4761fb
cmp byte [0x4adaf0], 0
jne 0x4761d9
call fcn.00474b20
push 0x10
push edi
push edi
call fcn.004745f0
mov eax, dword [ebx + 0xc]
shl eax, 4
add eax, edi
push 0x10
push eax
push eax
call fcn.004745f0
add esp, 0x18
jmp 0x4766c7
cmp byte [0x4adaf1], 0
jne 0x476209
call fcn.004749c0
mov eax, dword [ebx + 0xc]
mov esi, 4
mov dword [esp + 0x10], esi
lea ebp, [eax*4 - 4]
cmp ebp, esi
jbe 0x4764fe
lea ebx, [ebp + 2]
lea eax, [edi + 0x18]
lea ebx, [edi + ebx*4]
mov dword [esp + 0x24], eax
mov edi, eax
mov edx, dword [edi - 8]
mov eax, edx
shr eax, 0x18
movzx ecx, byte [eax + str.cw]
mov eax, edx
shr eax, 0x10
movzx eax, al
shr edx, 8
mov esi, dword [ecx*8 + 0x4adafc]
movzx eax, byte [eax + str.cw]
xor esi, dword [eax*8 + 0x4adaf9]
movzx eax, dl
mov edx, dword [ebx - 8]
movzx eax, byte [eax + str.cw]
xor esi, dword [eax*8 + 0x4adafa]
movzx eax, byte [edi - 8]
movzx eax, byte [eax + str.cw]
xor esi, dword [eax*8 + 0x4adafb]
mov eax, edx
shr eax, 0x18
movzx ecx, byte [eax + str.cw]
mov eax, edx
shr eax, 0x10
movzx eax, al
shr edx, 8
mov ecx, dword [ecx*8 + 0x4adafc]
movzx eax, byte [eax + str.cw]
xor ecx, dword [eax*8 + 0x4adaf9]
movzx eax, dl
movzx eax, byte [eax + str.cw]
xor ecx, dword [eax*8 + 0x4adafa]
movzx eax, byte [ebx - 8]
movzx eax, byte [eax + str.cw]
xor ecx, dword [eax*8 + 0x4adafb]
mov dword [edi - 8], ecx
mov dword [ebx - 8], esi
mov edx, dword [edi - 4]
mov eax, edx
shr eax, 0x18
movzx ecx, byte [eax + str.cw]
mov eax, edx
shr eax, 0x10
movzx eax, al
shr edx, 8
mov esi, dword [ecx*8 + 0x4adafc]
movzx eax, byte [eax + str.cw]
xor esi, dword [eax*8 + 0x4adaf9]
movzx eax, dl
mov edx, dword [ebx - 4]
movzx eax, byte [eax + str.cw]
xor esi, dword [eax*8 + 0x4adafa]
movzx eax, byte [edi - 4]
movzx eax, byte [eax + str.cw]
xor esi, dword [eax*8 + 0x4adafb]
mov eax, edx
shr eax, 0x18
movzx ecx, byte [eax + str.cw]
mov eax, edx
shr eax, 0x10
movzx eax, al
shr edx, 8
mov ecx, dword [ecx*8 + 0x4adafc]
movzx eax, byte [eax + str.cw]
xor ecx, dword [eax*8 + 0x4adaf9]
movzx eax, dl
movzx eax, byte [eax + str.cw]
xor ecx, dword [eax*8 + 0x4adafa]
movzx eax, byte [ebx - 4]
movzx eax, byte [eax + str.cw]
xor ecx, dword [eax*8 + 0x4adafb]
mov dword [edi - 4], ecx
mov dword [ebx - 4], esi
mov edx, dword [edi]
mov eax, edx
shr eax, 0x18
movzx ecx, byte [eax + str.cw]
mov eax, edx
shr eax, 0x10
movzx eax, al
mov esi, dword [ecx*8 + 0x4adafc]
movzx eax, byte [eax + str.cw]
xor esi, dword [eax*8 + 0x4adaf9]
lea edi, [edi + 0x10]
shr edx, 8
lea ebx, [ebx - 0x10]
movzx eax, dl
sub ebp, 4
mov edx, dword [ebx + 0x10]
movzx eax, byte [eax + str.cw]
xor esi, dword [eax*8 + 0x4adafa]
movzx eax, byte [edi - 0x10]
movzx eax, byte [eax + str.cw]
xor esi, dword [eax*8 + 0x4adafb]
mov eax, edx
shr eax, 0x18
movzx ecx, byte [eax + str.cw]
mov eax, edx
shr eax, 0x10
movzx eax, al
shr edx, 8
mov ecx, dword [ecx*8 + 0x4adafc]
movzx eax, byte [eax + str.cw]
xor ecx, dword [eax*8 + 0x4adaf9]
movzx eax, dl
movzx eax, byte [eax + str.cw]
xor ecx, dword [eax*8 + 0x4adafa]
movzx eax, byte [ebx + 0x10]
movzx eax, byte [eax + str.cw]
xor ecx, dword [eax*8 + 0x4adafb]
mov dword [edi - 0x10], ecx
mov dword [ebx + 0x10], esi
mov edx, dword [edi - 0xc]
mov eax, edx
shr eax, 0x18
movzx ecx, byte [eax + str.cw]
mov eax, edx
shr eax, 0x10
movzx eax, al
shr edx, 8
mov esi, dword [ecx*8 + 0x4adafc]
movzx eax, byte [eax + str.cw]
xor esi, dword [eax*8 + 0x4adaf9]
movzx eax, dl
mov edx, dword [ebx + 0x14]
movzx eax, byte [eax + str.cw]
xor esi, dword [eax*8 + 0x4adafa]
movzx eax, byte [edi - 0xc]
movzx eax, byte [eax + str.cw]
xor esi, dword [eax*8 + 0x4adafb]
mov eax, edx
shr eax, 0x18
movzx ecx, byte [eax + str.cw]
mov eax, edx
shr eax, 0x10
movzx eax, al
shr edx, 8
mov ecx, dword [ecx*8 + 0x4adafc]
movzx eax, byte [eax + str.cw]
xor ecx, dword [eax*8 + 0x4adaf9]
movzx eax, dl
movzx eax, byte [eax + str.cw]
xor ecx, dword [eax*8 + 0x4adafa]
movzx eax, byte [ebx + 0x14]
movzx eax, byte [eax + str.cw]
xor ecx, dword [eax*8 + 0x4adafb]
mov dword [edi - 0xc], ecx
mov dword [ebx + 0x14], esi
mov esi, dword [esp + 0x10]
add esi, 4
mov dword [esp + 0x10], esi
cmp esi, ebp
jb 0x476233
mov ebx, dword [esp + 0x28]
mov edi, dword [esp + 0x20]
mov edx, dword [edi + esi*4]
mov eax, edx
shr eax, 0x18
movzx ecx, byte [eax + str.cw]
mov eax, edx
shr eax, 0x10
movzx eax, al
shr edx, 8
mov ecx, dword [ecx*8 + 0x4adafc]
movzx eax, byte [eax + str.cw]
xor ecx, dword [eax*8 + 0x4adaf9]
movzx eax, dl
mov edx, dword [edi + esi*4 + 4]
movzx eax, byte [eax + str.cw]
xor ecx, dword [eax*8 + 0x4adafa]
movzx eax, byte [edi + esi*4]
movzx eax, byte [eax + str.cw]
xor ecx, dword [eax*8 + 0x4adafb]
mov eax, edx
shr eax, 0x18
mov dword [edi + esi*4], ecx
movzx ecx, byte [eax + str.cw]
mov eax, edx
shr eax, 0x10
movzx eax, al
shr edx, 8
mov ecx, dword [ecx*8 + 0x4adafc]
movzx eax, byte [eax + str.cw]
xor ecx, dword [eax*8 + 0x4adaf9]
movzx eax, dl
mov edx, dword [edi + esi*4 + 8]
movzx eax, byte [eax + str.cw]
xor ecx, dword [eax*8 + 0x4adafa]
movzx eax, byte [edi + esi*4 + 4]
movzx eax, byte [eax + str.cw]
xor ecx, dword [eax*8 + 0x4adafb]
mov eax, edx
shr eax, 0x18
mov dword [edi + esi*4 + 4], ecx
movzx ecx, byte [eax + str.cw]
mov eax, edx
shr eax, 0x10
movzx eax, al
shr edx, 8
mov ecx, dword [ecx*8 + 0x4adafc]
movzx eax, byte [eax + str.cw]
xor ecx, dword [eax*8 + 0x4adaf9]
movzx eax, dl
mov edx, dword [edi + esi*4 + 0xc]
movzx eax, byte [eax + str.cw]
xor ecx, dword [eax*8 + 0x4adafa]
movzx eax, byte [edi + esi*4 + 8]
movzx eax, byte [eax + str.cw]
xor ecx, dword [eax*8 + 0x4adafb]
mov eax, edx
shr eax, 0x18
mov dword [edi + esi*4 + 8], ecx
movzx ecx, byte [eax + str.cw]
mov eax, edx
shr eax, 0x10
movzx eax, al
shr edx, 8
mov ecx, dword [ecx*8 + 0x4adafc]
movzx eax, byte [eax + str.cw]
xor ecx, dword [eax*8 + 0x4adaf9]
movzx eax, dl
movzx eax, byte [eax + str.cw]
xor ecx, dword [eax*8 + 0x4adafa]
movzx eax, byte [edi + esi*4 + 0xc]
movzx eax, byte [eax + str.cw]
xor ecx, dword [eax*8 + 0x4adafb]
mov dword [edi + esi*4 + 0xc], ecx
mov eax, dword [ebx + 0xc]
mov ecx, dword [edi]
add eax, eax
bswap ecx
mov eax, dword [edi + eax*8]
bswap eax
mov dword [edi], eax
mov eax, dword [ebx + 0xc]
add eax, eax
mov dword [edi + eax*8], ecx
mov eax, dword [ebx + 0xc]
mov ecx, dword [edi + 4]
add eax, eax
bswap ecx
mov eax, dword [edi + eax*8 + 4]
bswap eax
mov dword [edi + 4], eax
mov eax, dword [ebx + 0xc]
add eax, eax
mov dword [edi + eax*8 + 4], ecx
mov eax, dword [ebx + 0xc]
mov ecx, dword [edi + 8]
add eax, eax
bswap ecx
mov eax, dword [edi + eax*8 + 8]
bswap eax
mov dword [edi + 8], eax
mov eax, dword [ebx + 0xc]
add eax, eax
mov dword [edi + eax*8 + 8], ecx
mov eax, dword [ebx + 0xc]
mov ecx, dword [edi + 0xc]
add eax, eax
bswap ecx
mov eax, dword [edi + eax*8 + 0xc]
bswap eax
mov dword [edi + 0xc], eax
mov eax, dword [ebx + 0xc]
add eax, eax
mov dword [edi + eax*8 + 0xc], ecx
cmp byte [0x4ae2fc], 0
jne 0x4766d5
call fcn.0047c5d0
cmp byte [0x4ae302], 0
je 0x4766f3
mov ecx, dword [ebx + 0xc]
lea eax, [edi + 0x10]
dec ecx
shl ecx, 4
push ecx
push eax
push eax
call fcn.004745f0
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x20
ret 0xc