Function at 0x48af10
Capabilities:
Create thread
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x5c
mov eax, dword [0x71de04]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [ebp + 8]
mov ebx, ecx
push edi
xor edi, edi
mov dword [ebp - 0x44], ebx
cmp dword [ebx + 0x60], edi
jne 0x48af47
pop edi
pop esi
xor eax, eax
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.005e0710
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [esi]
test ecx, ecx
je 0x48af55
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [esi], edi
mov edx, edi
mov dword [esi + 0xc], edi
mov ecx, dword [esi + 8]
lea eax, [edx + 4]
cmp eax, ecx
mov eax, dword [esi + 4]
jg 0x48af76
mov eax, dword [eax + edx]
mov dword [esi + 0x380], eax
add dword [esi + 0xc], 4
jmp 0x48af94
sub ecx, edx
add eax, edx
push ecx
mov dword [ebp - 0x3c], ecx
lea ecx, [esi + 0x380]
push eax
push ecx
call fcn.004a030c
mov eax, dword [ebp - 0x3c]
add esp, 0xc
add dword [esi + 0xc], eax
mov eax, dword [esi + 0xc]
lea edx, [esi + 0x384]
mov ecx, dword [esi + 8]
add eax, 4
cmp eax, ecx
mov eax, dword [esi + 4]
jg 0x48afb8
mov ecx, dword [esi + 0xc]
mov eax, dword [eax + ecx]
mov dword [edx], eax
add dword [esi + 0xc], 4
jmp 0x48afd2
sub ecx, dword [esi + 0xc]
add eax, dword [esi + 0xc]
push ecx
push eax
push edx
mov dword [ebp - 0x3c], ecx
call fcn.004a030c
mov eax, dword [ebp - 0x3c]
add esp, 0xc
add dword [esi + 0xc], eax
mov eax, dword [esi + 0xc]
lea ecx, [esi + 0x388]
mov edx, dword [esi + 8]
add eax, 4
cmp eax, edx
mov eax, dword [esi + 4]
jg 0x48aff6
mov edx, dword [esi + 0xc]
mov eax, dword [eax + edx]
mov dword [ecx], eax
add dword [esi + 0xc], 4
jmp 0x48b010
sub edx, dword [esi + 0xc]
add eax, dword [esi + 0xc]
push edx
push eax
push ecx
mov dword [ebp - 0x3c], edx
call fcn.004a030c
mov eax, dword [ebp - 0x3c]
add esp, 0xc
add dword [esi + 0xc], eax
mov ecx, dword [esi + 4]
cmp byte [ecx + 0xc], 0x54
jne 0x48b059
cmp byte [ecx + 0xd], 0x69
jne 0x48b059
cmp byte [ecx + 0xe], 0x6e
jne 0x48b059
cmp byte [ecx + 0xf], 0x6b
jne 0x48b059
mov edx, 4
mov eax, dword [ebx + 0x164]
mov al, byte [edi + eax]
xor byte [ecx + edx + 0xc], al
xor eax, eax
inc edx
cmp edi, dword [ebx + 0x168]
cmove edi, eax
inc edi
cmp edx, 0xe1f
jl 0x48b030
mov dword [ecx + 0xc], 0x5367674f
lea eax, [ebp - 0x58]
mov ecx, ebx
push eax
push esi
call fcn.0048ab40
test eax, eax
je 0x48af32
mov edi, dword [esi + 0x380]
lea edx, [esi + 0x388]
test edi, edi
jne 0x48b091
cmp dword [esi + 0x384], edi
jne 0x48b091
cmp dword [edx], edi
jne 0x48b091
mov dword [esi + 0x37c], edi
jmp 0x48b09b
mov dword [esi + 0x37c], 1
cmp dword [esi + 0x37c], 0
jne 0x48b25b
movzx edi, word [ebp - 0x4c]
mov ebx, dword [ebp - 0x54]
mov eax, edi
imul eax, ebx
lea ecx, [eax + eax*2]
mov eax, 0xaaaaaaab
mul ecx
mov ecx, edx
xor edx, edx
shr ecx, 1
mov eax, ecx
div edi
sub ecx, edx
mov dword [ebp - 0x5c], ecx
lea eax, [ecx + ecx*2]
mov ecx, dword [ebp - 0x44]
mov dword [ecx + 0x1f8], eax
add eax, 0x1000
push eax
lea ecx, [esi + 0x10]
call fcn.0041f0e0
push dword [esi + 0x14]
push 0
push dword [esi + 0x10]
call fcn.004a0318
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
movups xmmword [ebp - 0x14], xmm0
mov eax, 1
mov dword [ebp - 0x10], ebx
mov ebx, dword [ebp - 0x44]
lea edx, [ebp - 0x38]
mov word [ebp - 0x14], ax
add esp, 0xc
movzx eax, word [ebp - 0x56]
mov word [ebp - 0x12], ax
movzx eax, word [ebp - 0x4a]
mov word [ebp - 6], ax
mov ax, word [ebp - 0x4c]
mov word [ebp - 8], ax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0xc], eax
mov eax, dword [ebx + 0x1f8]
movups xmmword [ebp - 0x38], xmm0
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x14]
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x28], eax
movups xmm0, xmmword [0x69320c]
mov eax, dword [ebp - 0x5c]
mov dword [esi + 0x324], eax
mov eax, dword [ebx + 0x60]
push 0
push esi
mov dword [ebp - 0x38], 0x24
mov dword [ebp - 0x34], 0x18182
movups xmmword [ebp - 0x24], xmm0
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0xc]
push 0
mov ecx, esi
call fcn.0048c820
mov eax, dword [esi]
lea edx, [ebp - 0x40]
push 2
push 0
push 0
push edx
lea edx, [ebp - 0x3c]
mov dword [ebp - 0x3c], 0
push edx
push 0
mov dword [ebp - 0x40], 0
mov ecx, dword [eax]
push 0
push eax
call dword [ecx + 0x2c]
push dword [ebp - 0x40]
push 0
push dword [ebp - 0x3c]
call fcn.004a0318
push dword [ebp - 0x40]
push dword [esi + 0x10]
push dword [ebp - 0x3c]
call fcn.004a030c
mov eax, dword [esi]
add esp, 0x18
mov ecx, dword [eax]
push 0
push 0
push dword [ebp - 0x40]
push dword [ebp - 0x3c]
push eax
call dword [ecx + 0x4c]
cmp dword [ebx + 0x1f4], 0
lea eax, [esi + 0x310]
push eax
push 0
push esi
jne 0x48b1f6
push 0x418320
jmp 0x48b1fb
push 0x418320
push 0
push 0
call fcn.005ede87
mov ecx, dword [ebp - 0x40]
xor edx, edx
mov dword [esi + 0x20], eax
add esp, 0x18
xor dword [ebx + 0x1f4], 1
mov eax, ecx
mov dword [esi + 0x318], ecx
div dword [ebx + 0x1f8]
mov dword [esi + 0x320], ecx
mov eax, ecx
mov dword [esi + 0x318], edx
xor edx, edx
div dword [ebx + 0x1f8]
mov eax, dword [esi + 0x31c]
sub eax, ecx
mov dword [esi + 0x320], edx
push eax
mov ecx, esi
call fcn.0048c820
mov eax, dword [ebx + 0x1f8]
jmp 0x48b41b
movzx eax, word [ebp - 0x4c]
imul eax, edi
movzx edi, word [ebp - 0x4c]
mov dword [esi + 0x380], eax
mov eax, dword [esi + 0x384]
imul eax, edi
mov dword [esi + 0x384], eax
mov eax, dword [ebp - 0x54]
cmp dword [edx], eax
jae 0x48b284
mov dword [edx], eax
mov ecx, dword [edx]
mov eax, 0xaaaaaaab
imul ecx, edi
mov dword [edx], ecx
mul ecx
mov eax, ecx
lea ecx, [esi + 0x10]
mov edi, edx
xor edx, edx
shr edi, 1
div edi
sub edi, edx
lea eax, [edi + edi*2]
mov dword [ebx + 0x1f8], eax
mov eax, dword [esi + 0x308]
add eax, 0x1000
push eax
call fcn.0041f0e0
push dword [esi + 0x14]
push 0
push dword [esi + 0x10]
call fcn.004a0318
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
movups xmmword [ebp - 0x14], xmm0
mov eax, 1
lea edx, [ebp - 0x38]
mov word [ebp - 0x14], ax
mov ecx, ebx
movzx eax, word [ebp - 0x56]
add esp, 0xc
mov word [ebp - 0x12], ax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x10], eax
movzx eax, word [ebp - 0x4a]
mov word [ebp - 6], ax
mov ax, word [ebp - 0x4c]
mov word [ebp - 8], ax
mov eax, dword [ebp - 0x50]
movups xmmword [ebp - 0x38], xmm0
mov dword [ebp - 0xc], eax
mov eax, dword [ecx + 0x1f8]
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x14]
movups xmm0, xmmword [0x69320c]
mov dword [esi + 0x324], edi
mov edi, ecx
mov dword [ebp - 0x28], eax
push 0
push esi
mov eax, dword [edi + 0x60]
mov dword [ebp - 0x38], 0x24
mov dword [ebp - 0x34], 0x18182
movups xmmword [ebp - 0x24], xmm0
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0xc]
push 0
mov ecx, esi
call fcn.0048c940
mov eax, dword [esi]
lea edx, [ebp - 0x40]
push 2
push 0
push 0
push edx
lea edx, [ebp - 0x3c]
mov dword [ebp - 0x3c], 0
push edx
push 0
mov dword [ebp - 0x40], 0
mov ecx, dword [eax]
push 0
push eax
call dword [ecx + 0x2c]
push dword [ebp - 0x40]
push 0
push dword [ebp - 0x3c]
call fcn.004a0318
push dword [ebp - 0x40]
push dword [esi + 0x10]
push dword [ebp - 0x3c]
call fcn.004a030c
mov eax, dword [esi]
add esp, 0x18
mov ecx, dword [eax]
push 0
push 0
push dword [ebp - 0x40]
push dword [ebp - 0x3c]
push eax
call dword [ecx + 0x4c]
cmp dword [edi + 0x1f4], 0
lea eax, [esi + 0x310]
push eax
push 0
push esi
jne 0x48b3cb
push 0x418320
jmp 0x48b3d0
push 0x418320
push 0
push 0
call fcn.005ede87
mov ecx, dword [ebp - 0x40]
xor edx, edx
mov dword [esi + 0x20], eax
add esp, 0x18
xor dword [edi + 0x1f4], 1
mov eax, ecx
mov dword [esi + 0x320], ecx
mov dword [esi + 0x318], ecx
div dword [edi + 0x1f8]
mov eax, dword [esi + 0x31c]
sub eax, ecx
mov dword [esi + 0x320], edx
push eax
mov ecx, esi
call fcn.0048c940
mov eax, dword [edi + 0x1f8]
mov ecx, dword [ebp - 4]
cdq
xor ecx, ebp
sub eax, edx
sar eax, 1
pop edi
mov dword [esi + 0x328], eax
mov eax, 1
pop esi
pop ebx
call fcn.005e0710
mov esp, ebp
pop ebp
ret 4