Function at 0x56d5f0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x74ce71
mov eax, dword fs:[0]
push eax
sub esp, 0x268
mov eax, dword [0x899944]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ecx, dword [ebp + 0x24]
mov eax, dword [ebp + 0x1c]
mov esi, dword [ebp + 8]
mov edi, dword [ebp + 0x10]
mov dword [ebp - 0x264], ecx
lea ecx, [ebp - 0xf0]
mov dword [ebp - 0x26c], eax
call fcn.0056d340
lea ecx, [ebp - 0x260]
mov dword [ebp - 4], 0
call fcn.0056d340
lea ecx, [ebp - 0x1a8]
mov byte [ebp - 4], 1
call fcn.0056d340
cmp byte [ebp + 0x28], 0
mov ebx, dword [ebp + 0x14]
mov byte [ebp - 4], 2
je 0x56d6cf
mov ecx, dword [ebp - 0x264]
mov edx, dword [ecx]
mov eax, dword [edx + 0x24]
push 1
push str.ZipAes_derive_key
call eax
mov ecx, dword [ebp + 0xc]
push ecx
mov ecx, dword [ebp - 0x264]
push esi
push 0x7b32b0
call fcn.004741d0
mov edx, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x264]
push edx
push str.pwd_len
call fcn.00474a80
mov ecx, dword [ebp - 0x264]
push ebx
push edi
push str.salt
call fcn.004741d0
mov ecx, dword [ebp - 0x264]
push ebx
push str.salt_len
call fcn.00474a80
lea eax, [ebp - 0xf0]
push eax
call fcn.0056d3c0
mov edx, dword [ebp + 0xc]
lea ecx, [ebp - 0xf0]
push ecx
push edx
push esi
call fcn.0056d3f0
add esp, 0x10
lea eax, [ebp - 0xf0]
push eax
lea ecx, [ebp - 0x260]
call fcn.0056d380
lea ecx, [ebp - 0x260]
push ecx
push ebx
push edi
call fcn.0056d470
mov edx, dword [ebp + 0x20]
dec edx
mov eax, 0xcccccccd
mul edx
shr edx, 4
add esp, 0xc
inc edx
mov dword [ebp - 0x274], edx
je 0x56d848
mov dword [ebp - 0x268], 0
mov ebx, 1
lea edi, [ebp - 0x24]
xor eax, eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x260]
push eax
lea ecx, [ebp - 0x1a8]
call fcn.0056d380
mov eax, ebx
shr eax, 8
mov ecx, ebx
mov edx, ebx
mov byte [ebp - 0x36], al
mov eax, dword [ebp + 0x18]
shr ecx, 0x18
shr edx, 0x10
mov byte [ebp - 0x38], cl
mov byte [ebp - 0x37], dl
mov byte [ebp - 0x35], bl
mov esi, 4
test eax, eax
je 0x56d80e
mov dword [ebp - 0x270], eax
lea ecx, [ebp - 0x1a8]
push ecx
lea edx, [ebp - 0x38]
push esi
push edx
call fcn.0056d470
lea eax, [ebp - 0x1a8]
push eax
lea ecx, [ebp - 0x38]
push 0x14
push ecx
call fcn.0056d510
add esp, 0x18
xor esi, esi
jmp 0x56d7c0
movzx edx, byte [ebp + esi - 0x38]
movzx eax, byte [ebp + esi - 0x37]
xor byte [ebp + esi - 0x24], dl
xor byte [ebp + esi - 0x23], al
movzx edx, byte [ebp + esi - 0x35]
movzx eax, byte [ebp + esi - 0x34]
mov cl, byte [ebp + esi - 0x36]
xor byte [ebp + esi - 0x22], cl
xor byte [ebp + esi - 0x21], dl
xor byte [ebp + esi - 0x20], al
add esi, 5
cmp esi, 0x14
jb 0x56d7c0
lea ecx, [ebp - 0xf0]
push ecx
lea ecx, [ebp - 0x1a8]
call fcn.0056d380
dec dword [ebp - 0x270]
jne 0x56d793
mov eax, dword [ebp - 0x268]
xor ecx, ecx
cmp eax, dword [ebp + 0x20]
jae 0x56d82e
mov dl, byte [edi + eax]
mov esi, dword [ebp - 0x26c]
mov byte [eax + esi], dl
inc ecx
inc eax
cmp ecx, 0x14
jb 0x56d816
add dword [ebp - 0x268], 0x14
inc ebx
lea eax, [ebx - 1]
sub edi, 0x14
cmp eax, dword [ebp - 0x274]
jb 0x56d73f
cmp byte [ebp + 0x28], 0
je 0x56d884
mov ecx, dword [ebp + 0x20]
mov esi, dword [ebp - 0x264]
push ecx
push str.key_len
mov ecx, esi
call fcn.00474a80
mov edx, dword [ebp + 0x20]
mov eax, dword [ebp - 0x26c]
push edx
push eax
push 0x7a766c
mov ecx, esi
call fcn.004741d0
mov edx, dword [esi]
mov eax, dword [edx + 0x28]
mov ecx, esi
call eax
lea ecx, [ebp - 0x1a8]
mov byte [ebp - 4], 1
call fcn.0056d370
lea ecx, [ebp - 0x260]
mov byte [ebp - 4], 0
call fcn.0056d370
lea ecx, [ebp - 0xf0]
mov dword [ebp - 4], 0xffffffff
call fcn.0056d370
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0070bb4c
mov esp, ebp
pop ebp
ret