Function at 0x4fba30
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov eax, dword [0x55ca98]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
push 0x38
xor edi, edi
push edi
push esi
call sub.VCRUNTIME140.dll_memset
mov edx, dword [ebp + 0xc]
add esp, 0xc
xor ecx, ecx
mov eax, dword [edx + 4]
mov dword [ebp - 8], eax
test eax, eax
jle 0x4fbf90
lea ebx, [edx + 8]
mov esi, eax
mov dword [ebp - 0x24], ebx
mov ebx, dword [ebx]
cmp byte [ebx + ecx], 0
lea eax, [edi + 1]
cmovle eax, edi
inc ecx
mov edi, eax
cmp ecx, esi
jl 0x4fba71
mov esi, dword [ebp + 8]
mov eax, dword [ebp - 8]
mov dword [esi + 8], edi
mov dword [esi + 4], eax
lea eax, [esi + 8]
mov dword [ebp - 0x1c], eax
mov eax, dword [edx]
mov dword [esi], eax
test edi, edi
jle 0x4fbf97
push edi
push dword [edx + 4]
push dword [edx + 8]
call fcn.004fb760
add esp, 0xc
mov dword [ebp - 0x20], eax
lea eax, [edi*4]
mov dword [ebp - 0xc], eax
call fcn.0050a090
mov eax, dword [ebp - 0x20]
mov ecx, esp
mov dword [ebp - 0x10], ecx
test eax, eax
jne 0x4fbb38
mov eax, dword [esi + 0x10]
mov edi, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
test eax, eax
je 0x4fbae0
push eax
call edi
add esp, 4
mov eax, dword [esi + 0x14]
test eax, eax
je 0x4fbaed
push eax
call edi
add esp, 4
mov eax, dword [esi + 0x18]
test eax, eax
je 0x4fbafa
push eax
call edi
add esp, 4
mov eax, dword [esi + 0x1c]
test eax, eax
je 0x4fbb07
push eax
call edi
add esp, 4
mov eax, dword [esi + 0x20]
test eax, eax
je 0x4fbb14
push eax
call edi
add esp, 4
push 0x38
push 0
push esi
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
or eax, 0xffffffff
lea esp, [ebp - 0x34]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.005091c5
mov esp, ebp
pop ebp
ret
sub ecx, eax
mov dword [ebp - 0x14], edi
mov ebx, eax
mov dword [ebp - 8], ecx
mov esi, ecx
mov ecx, dword [ebx]
rol ecx, 0x10
mov edx, ecx
mov eax, ecx
shr edx, 8
shl eax, 8
xor edx, eax
shl ecx, 8
and edx, 0xff00ff
xor edx, ecx
mov ecx, edx
mov eax, edx
shr ecx, 4
shl eax, 4
xor ecx, eax
shl edx, 4
and ecx, 0xf0f0f0f
xor ecx, edx
mov edx, ecx
shr edx, 2
lea eax, [ecx*4]
xor edx, eax
lea eax, [ecx*4]
and edx, 0x33333333
xor edx, eax
mov ecx, edx
shr ecx, 1
lea eax, [edx + edx]
xor ecx, eax
lea eax, [edx + edx]
and ecx, 0x55555555
xor ecx, eax
mov dword [ebx], ecx
mov dword [esi + ebx], ebx
add ebx, 4
sub edi, 1
jne 0x4fbb44
push 0x4fb9a0
push 4
push dword [ebp - 0x14]
push dword [ebp - 0x10]
call dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_qsort]
mov ebx, dword [ebp - 0xc]
add esp, 0x10
mov eax, ebx
call fcn.0050a090
mov edi, esp
push ebx
mov dword [ebp - 8], edi
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov esi, dword [ebp + 8]
add esp, 4
mov edx, dword [ebp - 0x14]
xor ecx, ecx
mov ebx, dword [ebp - 0x24]
mov dword [esi + 0x14], eax
test edx, edx
jle 0x4fbc19
mov eax, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x10]
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x1c], eax
mov eax, dword [esi + ecx*4]
sub eax, dword [ebp - 0x20]
sar eax, 2
mov dword [edi + eax*4], ecx
inc ecx
cmp ecx, edx
jl 0x4fbc05
mov esi, dword [ebp + 8]
mov eax, dword [ebp - 0x20]
mov ebx, edx
sub eax, edi
mov dword [ebp - 0x10], edi
mov dword [ebp - 0x28], eax
mov edx, dword [edi]
lea edi, [edi + 4]
mov ecx, dword [esi + 0x14]
mov eax, dword [eax + edi - 4]
mov dword [ecx + edx*4], eax
mov eax, dword [ebp - 0x28]
sub ebx, 1
jne 0x4fbc26
push dword [ebp - 0x20]
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov edi, dword [ebp - 8]
push edi
push dword [ebp - 0x14]
mov edi, dword [ebp + 0xc]
push edi
call fcn.004fb490
push dword [ebp - 0xc]
mov dword [esi + 0x10], eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov ebx, dword [ebp - 0x24]
xor ecx, ecx
add esp, 0x14
mov dword [esi + 0x18], eax
xor edx, edx
mov dword [ebp - 0xc], ecx
cmp dword [edi + 4], ecx
jle 0x4fbc9a
mov eax, dword [ebx]
cmp byte [edx + eax], 0
jle 0x4fbc92
mov eax, dword [ebp - 8]
mov ecx, dword [eax + ecx*4]
mov eax, dword [esi + 0x18]
mov dword [eax + ecx*4], edx
mov ecx, dword [ebp - 0xc]
inc ecx
mov dword [ebp - 0xc], ecx
inc edx
cmp edx, dword [edi + 4]
jl 0x4fbc77
jmp 0x4fbca3
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x1c], eax
push ecx
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov dword [esi + 0x1c], eax
xor edi, edi
mov eax, dword [ebp + 0xc]
xor edx, edx
add esp, 4
mov dword [esi + 0x28], 0
mov dword [ebp - 0x14], edi
cmp dword [eax + 4], edx
jle 0x4fbd29
mov eax, dword [ebx]
mov al, byte [edx + eax]
mov byte [ebp - 0x15], al
test al, al
jle 0x4fbcf3
mov eax, dword [ebp - 8]
mov bl, byte [ebp - 0x15]
mov ecx, dword [eax + edi*4]
inc edi
mov eax, dword [esi + 0x1c]
mov byte [ecx + eax], bl
mov ebx, dword [ebp - 0x24]
mov eax, dword [ebx]
movsx eax, byte [eax + edx]
cmp eax, dword [esi + 0x28]
jle 0x4fbcf3
mov dword [esi + 0x28], eax
mov eax, dword [ebp + 0xc]
inc edx
cmp edx, dword [eax + 4]
jl 0x4fbcc6
mov dword [ebp - 0x14], edi
cmp edi, 1
jne 0x4fbd29
cmp dword [esi + 0x28], edi
jne 0x4fbd29
push 4
push 2
mov dword [esi + 0x24], edi
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov dword [esi + 0x20], eax
add esp, 8
mov dword [eax + 4], edi
mov eax, dword [esi + 0x20]
mov dword [eax], edi
jmp 0x4fbf97
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
mov eax, dword [eax]
test eax, eax
je 0x4fbd39
inc ecx
shr eax, 1
jne 0x4fbd34
add ecx, 0xfffffffc
mov dword [esi + 0x24], ecx
cmp ecx, 5
jge 0x4fbd52
mov dword [esi + 0x24], 5
mov ecx, 5
jmp 0x4fbd63
cmp ecx, 8
jle 0x4fbd63
mov dword [esi + 0x24], 8
mov ecx, 8
mov eax, 1
shl eax, cl
push 4
push eax
mov dword [ebp - 0x20], eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
add esp, 8
mov dword [esi + 0x20], eax
xor ebx, ebx
test edi, edi
jle 0x4fbe5e
mov eax, dword [esi + 0x1c]
movsx ecx, byte [eax + ebx]
mov dword [ebp - 0x10], ecx
cmp ecx, dword [esi + 0x24]
jg 0x4fbe55
mov eax, dword [esi + 0x14]
mov ecx, dword [eax + ebx*4]
rol ecx, 0x10
mov edx, ecx
mov eax, ecx
shr edx, 8
shl eax, 8
xor edx, eax
shl ecx, 8
and edx, 0xff00ff
xor edx, ecx
mov ecx, edx
mov eax, edx
shr ecx, 4
shl eax, 4
xor ecx, eax
shl edx, 4
and ecx, 0xf0f0f0f
xor ecx, edx
mov edx, ecx
shr edx, 2
lea eax, [ecx*4]
xor edx, eax
lea eax, [ecx*4]
and edx, 0x33333333
xor edx, eax
mov ecx, edx
shr ecx, 1
lea eax, [edx + edx]
xor ecx, eax
lea eax, [edx + edx]
and ecx, 0x55555555
xor edx, edx
xor ecx, eax
mov dword [ebp - 0xc], edx
mov dword [ebp - 8], ecx
mov eax, 1
mov ecx, dword [esi + 0x24]
sub ecx, dword [ebp - 0x10]
shl eax, cl
test eax, eax
jle 0x4fbe55
nop word [eax + eax]
mov eax, dword [esi + 0x1c]
lea edi, [ebx + 1]
mov cl, byte [eax + ebx]
mov eax, dword [esi + 0x20]
shl edx, cl
or edx, dword [ebp - 8]
mov dword [eax + edx*4], edi
mov eax, dword [esi + 0x1c]
mov ecx, dword [esi + 0x24]
mov edx, dword [ebp - 0xc]
inc edx
movsx eax, byte [eax + ebx]
sub ecx, eax
mov dword [ebp - 0xc], edx
mov eax, 1
shl eax, cl
cmp edx, eax
jl 0x4fbe20
mov edi, dword [ebp - 0x14]
inc ebx
cmp ebx, edi
jl 0x4fbd86
mov edx, dword [esi + 0x24]
mov ecx, 0x1f
sub ecx, edx
mov dword [ebp - 8], edx
mov eax, 0xfffffffe
xor ebx, ebx
shl eax, cl
xor edi, edi
mov dword [ebp - 0x28], eax
xor eax, eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x20], eax
jle 0x4fbf97
mov ecx, 0x20
sub ecx, edx
shl eax, cl
mov ecx, eax
mov dword [ebp - 0xc], eax
rol ecx, 0x10
mov edx, ecx
mov eax, ecx
shr edx, 8
shl eax, 8
xor edx, eax
shl ecx, 8
and edx, 0xff00ff
xor edx, ecx
mov ecx, edx
mov eax, edx
shr ecx, 4
shl eax, 4
xor ecx, eax
shl edx, 4
and ecx, 0xf0f0f0f
xor ecx, edx
mov edx, ecx
shr edx, 2
lea eax, [ecx*4]
xor edx, eax
lea eax, [ecx*4]
and edx, 0x33333333
xor edx, eax
mov ecx, edx
shr ecx, 1
lea eax, [edx + edx]
xor ecx, eax
lea eax, [edx + edx]
mov edx, dword [ebp - 8]
and ecx, 0x55555555
xor ecx, eax
mov dword [ebp - 8], edx
mov eax, dword [esi + 0x20]
cmp dword [eax + ecx*4], 0
lea eax, [eax + ecx*4]
mov dword [ebp - 0x1c], eax
jne 0x4fbf7e
mov ecx, dword [ebp - 0x14]
lea edx, [ebx + 1]
cmp edx, ecx
jge 0x4fbf32
mov eax, dword [esi + 0x14]
mov esi, dword [ebp - 0xc]
lea eax, [eax + ebx*4]
add eax, 4
cmp dword [eax], esi
ja 0x4fbf2f
inc edx
inc ebx
add eax, 4
cmp edx, ecx
jl 0x4fbf22
mov esi, dword [ebp + 8]
cmp edi, ecx
jge 0x4fbf52
mov eax, dword [esi + 0x14]
lea edx, [eax + edi*4]
nop dword [eax]
mov eax, dword [edx]
and eax, dword [ebp - 0x28]
cmp dword [ebp - 0xc], eax
jb 0x4fbf52
inc edi
add edx, 4
cmp edi, ecx
jl 0x4fbf40
sub ecx, edi
mov edx, 0x7fff
cmp ebx, 0x7fff
mov eax, ebx
cmova eax, edx
cmp ecx, edx
cmova ecx, edx
or eax, 0xffff0000
shl eax, 0xf
or eax, ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ecx], eax
mov edx, dword [esi + 0x24]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp eax, dword [ebp - 0x20]
jl 0x4fbe87
jmp 0x4fbf97
mov dword [esi + 4], eax
mov eax, dword [edx]
mov dword [esi], eax
xor eax, eax
lea esp, [ebp - 0x34]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.005091c5
mov esp, ebp
pop ebp
ret