Function at 0x452800
Capabilities:
Encode data using xor
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x68
mov eax, dword [0x5080c0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push 0x20
mov esi, ecx
call dword [sym.imp.d3d9.dll_Direct3DCreate9]
mov edx, eax
mov dword [0x518388], edx
test edx, edx
je 0x45296c
push 0x518404
push 0x518418
push 0x40
xorps xmm0, xmm0
mov dword [0x51842c], 0
push esi
push 1
movlpd qword [0x518418], xmm0
movlpd qword [0x518424], xmm0
mov dword [0x518434], 0
movlpd qword [0x51843c], xmm0
movlpd qword [0x518444], xmm0
mov dword [0x518438], 1
mov dword [0x518430], 1
mov dword [0x518420], 0x15
mov dword [0x51844c], 0
mov eax, dword [edx]
push 0
push edx
call dword [eax + 0x40]
test eax, eax
je 0x452b8d
mov ecx, dword [0x518388]
push 0x518404
push 0x518418
push 0x20
mov eax, dword [ecx]
push esi
push 1
push 0
push ecx
call dword [eax + 0x40]
mov ebx, eax
test ebx, ebx
je 0x452b8d
cmp ebx, 0x8876086a
jg 0x4529f1
je 0x4529b6
cmp ebx, 0x8876017c
je 0x45297e
cmp ebx, 0x88760868
jne 0x4529fd
movaps xmm0, xmmword [0x503550]
xor ecx, ecx
movups xmmword [ebp - 0x1c], xmm0
mov word [ebp - 0xc], 0x5651
mov byte [ebp - 0xa], 0
mov al, byte [ebp - 0x1c]
xor byte [ebp + ecx - 0x1b], al
inc ecx
cmp ecx, 0x11
jb 0x452912
movaps xmm0, xmmword [0x503710]
xor ecx, ecx
movups xmmword [ebp - 0x40], xmm0
mov byte [ebp - 0xa], 0
movaps xmm0, xmmword [0x503470]
movups xmmword [ebp - 0x30], xmm0
mov word [ebp - 0x20], 0x773d
mov byte [ebp - 0x1e], 0
mov al, byte [ebp - 0x40]
xor byte [ebp + ecx - 0x3f], al
inc ecx
cmp ecx, 0x21
jb 0x452945
push 0x30
lea eax, [ebp - 0x1b]
push eax
lea eax, [ebp - 0x3f]
mov byte [ebp - 0x1e], 0
push eax
push dword [0x517af8]
call dword [sym.imp.USER32.dll_MessageBoxA]
xor al, al
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004abb31
mov esp, ebp
pop ebp
ret
movaps xmm0, xmmword [0x503410]
xor ecx, ecx
movups xmmword [ebp - 0x40], xmm0
mov word [ebp - 0x20], 0x246e
movaps xmm0, xmmword [0x503670]
movups xmmword [ebp - 0x30], xmm0
mov byte [ebp - 0x1e], 0
mov al, byte [ebp - 0x40]
xor byte [ebp + ecx - 0x3f], al
inc ecx
cmp ecx, 0x21
jb 0x4529a0
push 0x30
push str.D3DERR_OUTOFVIDEOMEMORY
jmp 0x452958
movaps xmm0, xmmword [0x5036e0]
xor ecx, ecx
movups xmmword [ebp - 0x40], xmm0
mov word [ebp - 0x20], 0x763c
movaps xmm0, xmmword [0x503480]
movups xmmword [ebp - 0x30], xmm0
mov byte [ebp - 0x1e], 0
mov al, byte [ebp - 0x40]
xor byte [ebp + ecx - 0x3f], al
inc ecx
cmp ecx, 0x21
jb 0x4529d8
push 0x30
push str.D3DERR_NOTAVAILABLE
jmp 0x452958
cmp ebx, 0x8876086c
je 0x452afe
lea esi, [ebp - 7]
test ebx, ebx
jns 0x452a30
neg ebx
mov eax, 0xcccccccd
dec esi
mul ebx
shr edx, 3
mov al, dl
shl al, 2
lea ecx, [eax + edx]
add cl, cl
sub bl, cl
add bl, 0x30
mov byte [esi], bl
mov ebx, edx
test ebx, ebx
jne 0x452a06
dec esi
mov byte [esi], 0x2d
jmp 0x452a52
mov eax, 0xcccccccd
dec esi
mul ebx
shr edx, 3
mov al, dl
shl al, 2
lea ecx, [eax + edx]
add cl, cl
sub bl, cl
add bl, 0x30
mov byte [esi], bl
mov ebx, edx
test ebx, ebx
jne 0x452a30
push ecx
lea eax, [ebp - 7]
push eax
push esi
lea ecx, [ebp - 0x38]
call fcn.00456c70
movaps xmm0, xmmword [0x5034f0]
lea edx, [ebp - 0x38]
cmp dword [ebp - 0x24], 0xf
movups xmmword [ebp - 0x64], xmm0
cmova edx, dword [ebp - 0x38]
xor ecx, ecx
movaps xmm0, xmmword [0x5031e0]
movups xmmword [ebp - 0x54], xmm0
mov word [ebp - 0x44], 0x4c06
mov byte [ebp - 0x42], 0
nop dword [eax]
mov al, byte [ebp - 0x64]
xor byte [ebp + ecx - 0x63], al
inc ecx
cmp ecx, 0x21
jb 0x452a90
push 0x30
push edx
lea eax, [ebp - 0x63]
mov byte [ebp - 0x42], 0
push eax
push dword [0x517af8]
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, dword [ebp - 0x24]
cmp ecx, 0xf
jbe 0x45296c
mov edx, dword [ebp - 0x38]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x452ae2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x452b9f
push ecx
push edx
call fcn.004abdca
add esp, 8
xor al, al
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004abb31
mov esp, ebp
pop ebp
ret
movaps xmm0, xmmword [str.cP11__5___J]
xor ecx, ecx
movups xmmword [ebp - 0x1c], xmm0
mov dword [ebp - 0xc], 0x2f2f22
mov al, byte [ebp - 0x1c]
xor byte [ebp + ecx - 0x1b], al
inc ecx
cmp ecx, 0x12
jb 0x452b12
movaps xmm0, xmmword [0x503420]
xor ecx, ecx
movups xmmword [ebp - 0x64], xmm0
mov byte [ebp - 9], 0
movaps xmm0, xmmword [0x503640]
movups xmmword [ebp - 0x54], xmm0
mov word [ebp - 0x44], 0x2268
mov byte [ebp - 0x42], 0
mov al, byte [ebp - 0x64]
xor byte [ebp + ecx - 0x63], al
inc ecx
cmp ecx, 0x21
jb 0x452b45
push 0x30
lea eax, [ebp - 0x1b]
mov byte [ebp - 0x42], 0
push eax
lea eax, [ebp - 0x63]
push eax
push dword [0x517af8]
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
xor al, al
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004abb31
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 4]
mov al, 1
pop esi
xor ecx, ebp
pop ebx
call fcn.004abb31
mov esp, ebp
pop ebp
ret
call fcn.004b4061
int3