Function at 0x415dd0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x57f6d1
mov eax, dword fs:[0]
push eax
sub esp, 0x7c
push ebx
push esi
push edi
mov eax, dword [0x6236f8]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov eax, dword [edi + 4]
mov ecx, dword [edi]
push eax
push ecx
lea eax, [ebp - 0x1c]
push eax
mov ecx, edi
call fcn.004151b0
mov eax, dword [edi + 0x14]
mov ecx, dword [edi + 0x10]
lea esi, [edi + 0x10]
push eax
push ecx
lea ecx, [ebp - 0x1c]
push ecx
mov ecx, esi
mov dword [ebp - 0x14], esi
call fcn.00413cd0
mov edx, dword [0x610024]
xor eax, eax
mov dword [ebp - 0x3c], vtable.CFileCtl.0
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x3c]
call fcn.0040e290
test eax, eax
jne 0x415ec7
mov ecx, dword [ebp - 0x38]
mov edx, dword [ecx]
mov eax, dword [edx + 0x1c]
call eax
mov ebx, eax
lea ecx, [ebx + 1]
push ecx
call fcn.0054e1ec
add esp, 4
mov byte [ebp + 8], 0
mov edx, dword [ebp + 8]
push edx
push eax
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x2c], eax
call fcn.0040b160
mov ecx, dword [ebp - 0x38]
mov eax, dword [ecx]
mov edx, dword [ebp - 0x2c]
mov eax, dword [eax + 0xc]
push edx
mov byte [ebp - 4], 1
call eax
test eax, eax
je 0x415eec
mov esi, dword [ebp - 0x28]
mov byte [ebp - 4], 0
test esi, esi
je 0x415ec7
lea ecx, [esi + 4]
or edx, 0xffffffff
lock xadd dword [ecx], edx
jne 0x415ec7
mov eax, dword [esi]
mov edx, dword [eax + 4]
mov ecx, esi
call edx
lea eax, [esi + 8]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0x415ec7
mov edx, dword [esi]
mov eax, dword [edx + 8]
mov ecx, esi
call eax
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 0xffffffff
call fcn.0040af10
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
xor eax, eax
mov dword [ebp - 0x88], vtable.CSerialize.0
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x7c], eax
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 3
call fcn.0041b350
lea ecx, [ebx - 1]
push ecx
lea ecx, [ebp - 0x84]
mov byte [ebp - 4], 4
call fcn.0040d7a0
mov edx, dword [ebp - 0x2c]
mov al, byte [edx]
mov byte [ebp + 0xb], al
dec ebx
xor eax, eax
test ebx, ebx
jle 0x415f4d
mov ecx, dword [ebp - 0x2c]
mov dl, byte [ecx + eax + 1]
xor dl, byte [ebp + 0xb]
mov ecx, dword [ebp - 0x84]
mov byte [ecx + eax], dl
inc eax
cmp eax, ebx
jl 0x415f35
mov eax, dword [ebp - 0x88]
lea edx, [ebp - 0x10]
push edx
mov edx, dword [eax + 0x5c]
lea ecx, [ebp - 0x88]
mov byte [ebp - 0x74], 0
mov dword [ebp - 0x70], 0
call edx
mov eax, dword [0x610024]
xor ebx, ebx
mov dword [ebp - 0x6c], vtable.CEventFg::CharFmt.0
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0x5c], ebx
mov byte [ebp - 4], 5
cmp dword [ebp - 0x10], ebx
jle 0x415fb6
mov edx, dword [ebp - 0x88]
mov eax, dword [edx + 0x60]
lea ecx, [ebp - 0x6c]
push ecx
lea ecx, [ebp - 0x88]
call eax
lea ecx, [ebp - 0x6c]
push ecx
mov ecx, edi
call fcn.00415d10
inc ebx
cmp ebx, dword [ebp - 0x10]
jl 0x415f90
mov eax, dword [ebp - 0x88]
lea edx, [ebp - 0x10]
push edx
mov edx, dword [eax + 0x5c]
lea ecx, [ebp - 0x88]
call edx
mov eax, dword [0x610024]
xor edi, edi
mov dword [ebp - 0x54], vtable.CEventFg::KaisouFmt.0
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], edi
mov dword [ebp - 0x48], edi
mov dword [ebp - 0x44], edi
mov byte [ebp - 4], 6
mov dword [ebp + 8], edi
cmp dword [ebp - 0x10], edi
jle 0x416213
jmp 0x416000
mov edx, dword [ebp - 0x88]
mov eax, dword [edx + 0x60]
lea ecx, [ebp - 0x54]
push ecx
lea ecx, [ebp - 0x88]
call eax
mov ecx, dword [esi + 4]
lea edx, [ebp - 0x54]
cmp edx, ecx
jae 0x41612e
mov ebx, dword [esi]
mov eax, edx
cmp ebx, eax
ja 0x41612e
mov esi, dword [esi + 8]
sub edx, ebx
mov eax, 0x2aaaaaab
imul edx
sar edx, 2
mov edi, edx
shr edi, 0x1f
add edi, edx
cmp ecx, esi
jne 0x4160a8
sub ecx, ebx
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
cmp ecx, 0xaaaaaa9
ja 0x416316
sub esi, ebx
mov eax, 0x2aaaaaab
imul esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
inc ecx
add eax, edx
cmp ecx, eax
jbe 0x4160a8
mov edx, eax
shr edx, 1
mov esi, 0xaaaaaaa
sub esi, edx
cmp esi, eax
jae 0x416093
xor eax, eax
jmp 0x416095
add eax, edx
cmp eax, ecx
jae 0x41609b
mov eax, ecx
mov ebx, dword [ebp - 0x14]
push eax
mov ecx, ebx
call fcn.00414580
jmp 0x4160ab
mov ebx, dword [ebp - 0x14]
mov edx, dword [ebx]
mov esi, dword [ebx + 4]
lea ecx, [edi + edi*2]
lea ecx, [edx + ecx*8]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x24], esi
test esi, esi
je 0x416122
mov dword [esi], vtable.CEventFg::KaisouFmt.0
mov eax, dword [ecx + 4]
cmp dword [eax - 0xc], 0
mov byte [ebp - 4], 8
jl 0x4160e5
mov dword [esi + 4], eax
add eax, 0xfffffff4
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
jmp 0x41610f
mov eax, dword [0x610024]
mov dword [esi + 4], eax
mov ecx, dword [ecx + 4]
mov dword [ebp - 0x18], ecx
test ecx, ecx
jne 0x4160fb
xor eax, eax
jmp 0x416105
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ecx, dword [ebp - 0x18]
push ecx
push eax
lea ecx, [esi + 4]
call fcn.004057d0
mov ecx, dword [ebp - 0x1c]
add ecx, 8
push ecx
lea ecx, [esi + 8]
mov byte [ebp - 4], 9
call fcn.00412bc0
add dword [ebx + 4], 0x18
mov esi, dword [ebp - 0x14]
jmp 0x4161fd
mov edi, dword [esi + 8]
cmp ecx, edi
jne 0x416191
mov ebx, dword [esi]
sub ecx, ebx
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
cmp ecx, 0xaaaaaa9
ja 0x416316
sub edi, ebx
mov eax, 0x2aaaaaab
imul edi
sar edx, 2
mov eax, edx
shr eax, 0x1f
inc ecx
add eax, edx
cmp ecx, eax
jbe 0x416191
mov edx, eax
shr edx, 1
mov edi, 0xaaaaaaa
sub edi, edx
cmp edi, eax
jae 0x416181
xor eax, eax
jmp 0x416183
add eax, edx
cmp eax, ecx
jae 0x416189
mov eax, ecx
push eax
mov ecx, esi
call fcn.00414580
mov edi, dword [esi + 4]
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x20], edi
test edi, edi
je 0x4161f9
mov dword [edi], vtable.CEventFg::KaisouFmt.0
mov eax, dword [ebp - 0x50]
cmp dword [eax - 0xc], 0
mov byte [ebp - 4], 0xb
jl 0x4161c3
mov dword [edi + 4], eax
mov edx, dword [ebp - 0x50]
add edx, 0xfffffff4
push edx
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
jmp 0x4161e9
mov eax, dword [0x610024]
mov dword [edi + 4], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x4161dc
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ecx, dword [ebp - 0x1c]
push ecx
push eax
lea ecx, [edi + 4]
call fcn.004057d0
lea edx, [ebp - 0x4c]
push edx
lea ecx, [edi + 8]
mov byte [ebp - 4], 0xc
call fcn.00412bc0
add dword [esi + 4], 0x18
mov eax, dword [ebp + 8]
inc eax
mov byte [ebp - 4], 6
mov dword [ebp + 8], eax
cmp eax, dword [ebp - 0x10]
jl 0x416000
xor edi, edi
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 5
call fcn.00410db0
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 4
call fcn.00410e60
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x88], vtable.CSerialize.0
cmp eax, edi
je 0x416248
push eax
call fcn.005517f7
add esp, 4
mov esi, dword [ebp - 0x28]
mov dword [ebp - 0x84], edi
mov dword [ebp - 0x80], edi
mov dword [ebp - 0x7c], edi
mov dword [ebp - 0x88], vtable.ISerialize.0
mov byte [ebp - 4], 0
cmp esi, edi
je 0x416293
lea eax, [esi + 4]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0x416293
mov edx, dword [esi]
mov eax, dword [edx + 4]
mov ecx, esi
call eax
lea ecx, [esi + 8]
or edx, 0xffffffff
lock xadd dword [ecx], edx
jne 0x416293
mov eax, dword [esi]
mov edx, dword [eax + 8]
mov ecx, esi
call edx
mov dword [ebp - 0x3c], vtable.CFileCtl.0
mov eax, dword [ebp - 0x30]
lea ecx, [eax - 0xc]
mov dword [ebp - 4], 0xd
cmp ecx, dword [0x610020]
je 0x4162cc
add eax, 0xfffffff4
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x4162cc
mov edx, dword [ebp - 0x30]
add edx, 0xfffffff4
push edx
call fcn.00551d56
add esp, 4
mov esi, dword [ebp - 0x34]
cmp esi, edi
je 0x4162fd
lea eax, [esi + 4]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0x4162fd
mov edx, dword [esi]
mov eax, dword [edx + 4]
mov ecx, esi
call eax
lea ecx, [esi + 8]
or edx, 0xffffffff
lock xadd dword [ecx], edx
jne 0x4162fd
mov eax, dword [esi]
mov edx, dword [eax + 8]
mov ecx, esi
call edx
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
push str.vector_T__too_long
call fcn.0054e131
int3