Function at 0x4875f6
Capabilities:
Encode data using xor

Disassembly:
push 0x98
mov eax, 0x51003e
call fcn.004f41ae
mov ebx, ecx
mov dword [ebp - 0x44], ebx
mov ecx, dword [ebp + 0x14]
mov dword [ebp - 0x24], ecx
test ecx, ecx
je 0x47b0c6
test ebx, ebx
je 0x47b0c6
mov eax, dword [ebp + 0x10]
mov edx, eax
imul edx, ecx
xor ecx, ecx
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x5c], ecx
mov byte [ebp + 0x13], cl
mov dword [ebp - 0x20], edx
test eax, eax
je 0x47b0c6
mov byte [ebx + 0x1b8c], cl
push ecx
mov ecx, dword [ebx + 0x4c]
call fcn.00487c63
xor eax, eax
cmp dword [ebx + 0x1ab4], eax
jne 0x47a8b8
mov ecx, dword [ebx + 0x4c]
push eax
call fcn.004896d0
test al, al
je 0x47a8b6
mov byte [ebp + 0x17], 1
jmp 0x47a8cb
xor eax, eax
mov byte [ebp + 0x17], al
cmp dword [ebx + 0x1ba8], eax
je 0x47a8cd
push eax
mov ecx, ebx
call fcn.00481256
xor eax, eax
mov ecx, dword [ebx + 0x4c]
push eax
call fcn.0048702d
mov ecx, dword [0x5a23ec]
push eax
call fcn.0045e98e
mov esi, eax
mov ecx, esi
call fcn.004a283b
mov ecx, dword [ebx + 0x4c]
mov byte [ebp - 0x1c], al
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x4c]
mov ecx, dword [ecx]
push eax
push esi
mov cl, byte [ecx + 0x14df]
mov byte [ebp - 0x3c], cl
mov ecx, ebx
call fcn.0047ed90
lea ecx, [ebp - 0x78]
call fcn.004404f9
xor eax, eax
lea ecx, [ebp - 0x78]
push 0xffffffffffffffff
push eax
mov dword [ebp - 4], eax
lea eax, [ebx + 0x1a10]
push eax
call fcn.004e6dba
lea eax, [ebx + 0x1b48]
push eax
lea ecx, [ebp - 0xa4]
call fcn.004e97f9
mov eax, dword [sym.imp.KERNEL32.dll_GetTickCount]
mov byte [ebp - 4], 1
mov dword [ebp - 0x60], eax
call eax
mov dword [ebx + 0x1b40], eax
mov eax, dword [ebx + 0x4c]
test eax, eax
je 0x47a960
mov cl, byte [eax + 0x11]
and cl, 0xf
jmp 0x47a962
mov cl, 7
test eax, eax
je 0x47a96d
mov al, byte [eax + 0x12]
and al, 0xf
jmp 0x47a96f
xor eax, eax
shl al, 4
lea edi, [ebp - 0x90]
or al, cl
movzx eax, al
imul esi, eax, 0x18
mov eax, dword [ebp + 0xc]
push 6
pop ecx
mov dword [ebp - 0x34], eax
add esi, dword [ebp - 0x14]
cmp dword [ebx], 5
rep movsd dword es:[edi], dword [esi]
mov esi, dword [ebp + 8]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x4c], eax
je 0x47aacc
cmp dword [ebx], 2
je 0x47aacc
cmp dword [ebx], 3
je 0x47aacc
cmp dword [ebx], 4
je 0x47aacc
lea ecx, [ebp - 0x6c]
call fcn.00477032
lea eax, [ebp - 0x6c]
mov byte [ebp - 4], 2
push eax
mov ecx, ebx
call fcn.0047b27c
test al, al
je 0x47aa6d
cmp byte [ebx + 0x1b58], 0
je 0x47aa6d
xor eax, eax
lea ecx, [ebp - 0x6c]
push eax
call fcn.00476501
test al, al
je 0x47aa6d
cmp byte [ebp + 0x17], 0
mov byte [ebp + 0x13], 1
je 0x47aa30
mov eax, dword [ebx + 0x4c]
cmp dword [eax + 0x4294], ebx
jne 0x47aa30
mov ecx, dword [0x5a22a0]
xor eax, eax
push eax
push 1
push eax
call fcn.0041ef08
test al, al
je 0x47aa30
xor eax, eax
mov ecx, ebx
push eax
call fcn.0047fa6c
push dword [ebp - 0x1c]
lea esi, [ebp - 0x90]
push dword [ebp - 0x3c]
push dword [ebp - 0x4c]
push dword [ebp - 0x14]
sub esp, 0x18
push 6
pop ecx
mov edi, esp
push 0x20
push dword [ebp - 0x24]
rep movsd dword es:[edi], dword [esi]
mov esi, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x68]
push esi
push dword [ebp - 0x34]
push dword [ebp + 8]
call fcn.00475f32
mov edi, eax
mov dword [ebp - 0x40], eax
imul edi, esi
jmp 0x47aab5
mov eax, dword [ebp - 0x24]
lea ecx, [ebp - 0x6c]
mov dword [ebp - 0x40], eax
xor eax, eax
push eax
call fcn.00476501
mov edi, dword [ebp - 0x20]
push edi
push 0x20
push esi
call fcn.00476523
add esp, 0xc
test edi, edi
je 0x47aab5
mov eax, dword [ebp - 0x34]
lea esi, [ebp - 0x90]
push 6
pop ecx
mov edi, eax
rep movsd dword es:[edi], dword [esi]
imul ecx, dword [ebp - 0x20], 0x18
lea edi, [eax + 0x18]
mov esi, eax
sub ecx, 0x18
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov edi, dword [ebp - 0x20]
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 1
call fcn.00477212
mov eax, dword [ebp + 8]
lea edi, [eax + edi*2]
jmp 0x47ac9b
movsx edx, word [ebx + 0x1bec]
mov eax, dword [ebp - 0x10]
cmp edx, eax
movsx ecx, word [ebx + 0x1b08]
mov edi, dword [ebp - 0x24]
cmovl eax, edx
mov dword [ebp - 0x20], eax
movsx eax, word [ebx + 0x1bee]
sub eax, ecx
mov byte [ebp + 0x13], 1
cmp eax, edi
cmovl edi, eax
movsx eax, word [ebx + 0x1b06]
imul ecx, edx
mov dword [ebp - 0x40], edi
add ecx, eax
mov eax, dword [ebx + 0x1bf8]
lea edx, [eax + ecx*2]
imul eax, ecx, 0x18
mov ecx, edi
mov dword [ebp - 0x3c], edx
mov edi, esi
add eax, dword [ebx + 0x1bfc]
mov dword [ebp - 0x14], eax
test ecx, ecx
jle 0x47ac9e
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x1c], ecx
lea esi, [eax + eax]
imul eax, eax, 0x18
mov dword [ebp - 0x50], esi
mov esi, dword [ebp - 0x10]
mov dword [ebp - 0x48], eax
imul eax, esi, 0x18
mov dword [ebp - 0x58], eax
push dword [ebp - 0x50]
push edx
push edi
call fcn.004f5d30
push dword [ebp - 0x48]
push dword [ebp - 0x14]
push dword [ebp - 0x2c]
call fcn.004f5d30
mov ecx, dword [ebp - 0x20]
xor edx, edx
add esp, 0x18
mov dword [ebp - 0x28], edx
test ecx, ecx
jle 0x47abd2
mov ebx, dword [ebp - 0x2c]
mov esi, ecx
mov dword [ebp - 0x38], edi
add ebx, 8
jmp 0x47ab7e
xor edx, edx
mov eax, esi
dec esi
test eax, eax
jle 0x47abc9
lea eax, [ebp + 0xf]
mov byte [ebx - 1], dl
push eax
test esi, esi
push edi
setg byte [ebp + 0xf]
call fcn.004e9976
push eax
call fcn.004f0eb4
xor ecx, ecx
add esp, 0xc
sub eax, ecx
je 0x47abb2
dec eax
sub eax, 1
jne 0x47abb5
or byte [ebx], 4
jmp 0x47abb5
or byte [ebx], 2
mov edx, dword [ebp - 0x28]
add edi, 2
mov ecx, dword [ebp - 0x20]
inc edx
add ebx, 0x18
mov dword [ebp - 0x28], edx
cmp edx, ecx
jl 0x47ab7c
mov ebx, dword [ebp - 0x44]
mov esi, dword [ebp - 0x10]
mov edi, dword [ebp - 0x30]
cmp esi, ecx
jle 0x47ac6f
mov eax, esi
lea edx, [ecx + ecx]
sub eax, ecx
add edx, edi
push eax
push 0x20
push edx
mov dword [ebp - 0x38], edx
call fcn.00476523
mov eax, dword [ebp - 0x20]
mov edx, esi
add esp, 0xc
mov dword [ebp - 0x28], eax
cmp eax, edx
jge 0x47ac6f
mov ebx, dword [ebp - 0x2c]
add ebx, 8
add ebx, dword [ebp - 0x48]
mov eax, edx
dec edx
mov dword [ebp - 0x54], edx
test eax, eax
jle 0x47ac69
push 6
pop ecx
lea edi, [ebx - 8]
test edx, edx
lea esi, [ebp - 0x90]
lea eax, [ebp + 0xf]
setg byte [ebp + 0xf]
rep movsd dword es:[edi], dword [esi]
mov esi, dword [ebp - 0x38]
push eax
push esi
call fcn.004e9976
push eax
call fcn.004f0eb4
xor ecx, ecx
add esp, 0xc
sub eax, ecx
je 0x47ac4c
dec eax
sub eax, 1
jne 0x47ac4f
or byte [ebx], 4
jmp 0x47ac4f
or byte [ebx], 2
mov ecx, dword [ebp - 0x28]
add esi, 2
mov edx, dword [ebp - 0x54]
inc ecx
mov dword [ebp - 0x38], esi
add ebx, 0x18
mov esi, dword [ebp - 0x10]
mov dword [ebp - 0x28], ecx
cmp ecx, esi
jl 0x47ac07
mov ebx, dword [ebp - 0x44]
mov edi, dword [ebp - 0x30]
mov eax, dword [ebp - 0x58]
lea edi, [edi + esi*2]
add dword [ebp - 0x2c], eax
movsx eax, word [ebx + 0x1bec]
mov edx, dword [ebp - 0x3c]
mov dword [ebp - 0x30], edi
lea edx, [edx + eax*2]
imul eax, eax, 0x18
mov dword [ebp - 0x3c], edx
add dword [ebp - 0x14], eax
sub dword [ebp - 0x1c], 1
jne 0x47ab48
mov ecx, dword [ebp - 0x40]
mov esi, dword [ebp - 0x24]
cmp ecx, esi
jge 0x47ad00
mov esi, dword [ebp - 0x10]
mov ebx, dword [ebp - 0x2c]
imul eax, esi, 0x18
mov dword [ebp + 0xc], eax
mov eax, dword [ebp - 0x24]
sub eax, ecx
mov dword [ebp - 0x1c], eax
push esi
push 0x20
push edi
call fcn.00476523
mov eax, dword [ebp + 0xc]
lea edi, [edi + esi*2]
add esp, 0xc
mov dword [ebp - 0x30], edi
test esi, esi
jle 0x47acf2
push 6
pop ecx
lea esi, [ebp - 0x90]
mov edi, ebx
rep movsd dword es:[edi], dword [esi]
lea ecx, [eax - 0x18]
mov esi, ebx
shr ecx, 2
lea edi, [ebx + 0x18]
rep movsd dword es:[edi], dword [esi]
mov esi, dword [ebp - 0x10]
mov edi, dword [ebp - 0x30]
add ebx, eax
sub dword [ebp - 0x1c], 1
jne 0x47acb9
mov ebx, dword [ebp - 0x44]
mov esi, dword [ebp - 0x24]
xor eax, eax
mov word [edi], ax
mov edi, dword [ebp + 0x18]
cmp byte [ebp + 0x17], al
je 0x47ad50
cmp dword [ebx + 0x1ba8], eax
je 0x47ad52
push eax
push 1
push dword [ebx + 0x1ba0]
lea eax, [ebp + 0x14]
mov ecx, ebx
push eax
call fcn.00477d97
mov ecx, ebx
mov eax, dword [eax]
mov dword [edi], eax
xor eax, eax
push eax
push 1
push dword [ebx + 0x1ba4]
lea eax, [ebp + 0x14]
push eax
call fcn.00477d97
mov eax, dword [eax]
mov dword [edi + 4], eax
mov eax, dword [ebx + 0x1ba8]
jmp 0x47ad52
xor eax, eax
mov dword [edi + 8], eax
cmp byte [ebp + 0x13], 0
mov edi, dword [ebp - 0x10]
je 0x47afeb
push esi
push edi
push dword [ebp - 0x34]
mov ecx, ebx
push dword [ebp + 8]
call fcn.0047ee48
lea ecx, [ebx + 0x50]
call fcn.004f293e
cmp dword [ebx + 0x19f8], eax
je 0x47adc7
cmp dword [ebx], 1
jne 0x47ad8d
mov ecx, ebx
call fcn.0047a209
mov ecx, dword [ebx + 0x4c]
xor eax, eax
push eax
call fcn.00496e36
test al, al
je 0x47adb9
mov ecx, dword [ebx + 0x4c]
cmp ebx, dword [ecx + 0x4294]
jne 0x47adb9
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x20
call fcn.004888cf
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
lea ecx, [ebx + 0x50]
call fcn.004f293e
mov dword [ebx + 0x19f8], eax
mov eax, dword [ebx + 0x1ab4]
test eax, eax
je 0x47afeb
shr eax, 9
and eax, 0xffffff01
mov dword [ebp - 0x58], eax
movsx eax, word [ebx + 0x1abe]
push eax
movsx eax, word [ebx + 0x1abc]
push eax
call fcn.004e6aad
pop ecx
pop ecx
xor ecx, ecx
push ecx
push 1
push eax
lea eax, [ebp + 0x14]
mov ecx, ebx
push eax
call fcn.00477d97
movsx eax, word [ebx + 0x1ac2]
push eax
movsx eax, word [ebx + 0x1ac0]
push eax
call fcn.004e6aad
pop ecx
pop ecx
xor ecx, ecx
push ecx
push 1
push eax
lea eax, [ebp + 0x10]
mov ecx, ebx
push eax
call fcn.00477d97
movzx eax, word [ebx + 0x1abe]
mov dword [ebp - 0x50], eax
movzx eax, word [ebx + 0x1b08]
mov dword [ebp - 0x54], eax
movzx eax, word [ebx + 0x1ac2]
mov dword [ebp - 0x3c], eax
movzx eax, word [ebx + 0x1b0c]
mov dword [ebp - 0x1c], eax
mov ax, word [ebp + 0x14]
mov word [ebp - 0x18], ax
mov ax, word [ebp + 0x16]
mov word [ebp - 0x16], ax
mov ax, word [ebp + 0x10]
mov word [ebp - 0x14], ax
mov ax, word [ebp + 0x12]
mov word [ebp - 0x12], ax
lea eax, [edi - 1]
push eax
xor eax, eax
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.00476e0d
lea eax, [edi - 1]
push eax
xor eax, eax
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.00476e0d
dec esi
xor eax, eax
push esi
push eax
lea eax, [ebp - 0x16]
push eax
call fcn.00476e0d
xor eax, eax
push esi
push eax
lea eax, [ebp - 0x12]
push eax
call fcn.00476e0d
mov eax, dword [0x5a23ec]
add esp, 0x30
mov al, byte [eax + 0x10fce]
mov cl, al
and cl, 0xf
movsx esi, word [ebp - 0x12]
mov byte [ebp + 0x17], cl
mov cl, al
shr cl, 4
movzx eax, al
mov byte [ebp + 0x13], cl
imul ecx, eax, 0x18
mov eax, dword [ebx + 0x4c]
mov eax, dword [eax + 0x429c]
mov edx, dword [ecx + eax + 8]
mov eax, dword [ecx + eax + 0xc]
movsx ecx, word [ebp - 0x16]
mov dword [ebp - 0x48], eax
mov eax, ecx
mov dword [ebp - 0x38], edx
mov dword [ebp + 0xc], eax
cmp eax, esi
jg 0x47afeb
mov ebx, dword [ebp - 0x34]
mov edx, eax
imul edx, edi
mov dword [ebp + 0x18], edx
cmp byte [ebp - 0x58], 0
jne 0x47af1e
movsx ecx, word [ebp - 0x18]
movsx esi, word [ebp - 0x14]
jmp 0x47af47
cmp eax, ecx
jne 0x47af31
mov ecx, dword [ebp - 0x54]
cmp word [ebp - 0x50], cx
jl 0x47af31
movsx ecx, word [ebp - 0x18]
jmp 0x47af33
xor ecx, ecx
cmp eax, esi
jne 0x47af44
mov eax, dword [ebp - 0x1c]
movsx esi, word [ebp - 0x14]
cmp word [ebp - 0x3c], ax
jle 0x47af47
lea esi, [edi - 1]
lea eax, [edx + ecx]
imul edx, eax, 0x18
add edx, ebx
cmp ecx, esi
jg 0x47afc9
mov eax, dword [ebp - 0x48]
mov ebx, 0xffffff
mov edi, dword [ebp - 0x38]
and eax, ebx
and edi, ebx
mov dword [ebp - 0x28], eax
sub esi, ecx
mov ebx, eax
inc esi
mov ecx, dword [edx + 0xc]
mov eax, dword [edx]
and ecx, 0xff000000
or ecx, edi
xor eax, ecx
mov dword [edx + 0xc], ecx
mov ecx, dword [edx + 4]
and eax, 0xffffff
xor dword [edx], eax
lea edx, [edx + 0x18]
mov eax, dword [edx - 8]
and eax, 0xff000000
or eax, ebx
xor ecx, eax
mov dword [edx - 8], eax
mov al, byte [ebp + 0x17]
and ecx, 0xffffff
xor ecx, dword [edx - 0x14]
mov dword [edx - 0x14], ecx
mov byte [edx - 0xf], al
mov al, byte [ebp + 0x13]
shr ecx, 0x18
mov byte [edx - 0xe], al
and cl, 0xef
xor eax, eax
mov byte [edx - 0x11], cl
mov byte [edx - 0x15], al
sub esi, 1
jne 0x47af6a
mov edi, dword [ebp - 0x10]
mov ebx, dword [ebp - 0x34]
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp + 0x18]
inc eax
movsx esi, word [ebp - 0x12]
add edx, edi
movsx ecx, word [ebp - 0x16]
mov dword [ebp + 0xc], eax
mov dword [ebp + 0x18], edx
cmp eax, esi
jle 0x47af0e
mov ebx, dword [ebp - 0x44]
mov ecx, dword [ebx + 0x4c]
xor eax, eax
cmp word [ecx + 0x518], ax
je 0x47b0a2
test byte [ecx + 0x514], 4
je 0x47b0a2
mov eax, dword [0x5a23ec]
cmp byte [eax + 0x11014], 0
je 0x47b032
push 1
call fcn.00496e36
test al, al
je 0x47b0a2
mov ecx, dword [ebx + 0x4c]
xor eax, eax
push eax
call fcn.00496e36
test al, al
jne 0x47b0a2
mov ecx, dword [ebx + 0x4c]
add ecx, 0x518
mov esi, ecx
lea edx, [esi + 2]
mov ax, word [esi]
add esi, 2
cmp ax, word [ebp - 0x5c]
jne 0x47b040
sub esi, edx
sar esi, 1
lea eax, [esi + esi]
push eax
push ecx
push dword [ebp + 8]
call fcn.004f62d0
add esp, 0xc
cmp edi, esi
jle 0x47b07a
mov eax, edi
sub eax, esi
push eax
mov eax, dword [ebp + 8]
push 0x20
lea eax, [eax + esi*2]
push eax
call fcn.00476523
add esp, 0xc
mov esi, dword [ebp - 0x4c]
add esi, 0xa8
test edi, edi
jle 0x47b0a2
mov eax, dword [ebp - 0x34]
mov edi, eax
push 6
pop ecx
rep movsd dword es:[edi], dword [esi]
imul ecx, dword [ebp - 0x10], 0x18
lea edi, [eax + 0x18]
mov esi, eax
sub ecx, 0x18
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
call dword [ebp - 0x60]
lea ecx, [ebp - 0x78]
mov dword [ebx + 0x1b44], eax
call fcn.004e6fd1
lea ecx, [ebp - 0xa4]
call fcn.004e983b
lea ecx, [ebp - 0x78]
call fcn.004e6c72
call fcn.004f4177
ret 0x14
push ebp
mov ebp, esp
test ecx, ecx
je 0x487619
cmp byte [ecx + 0x4298], 0
je 0x48760d
mov byte [ecx + 0x4298], 0
mov ecx, dword [ecx + 0x4294]
pop ebp
jmp 0x47a842
pop ebp
ret 0x14