Function at 0x408ac0
Capabilities:
Encode data using xor

Disassembly:
push ebp
push ebx
push edi
push esi
mov eax, 0x15b4
call fcn.00409570
mov edi, edx
mov dword [esp + 0x10], ecx
mov esi, dword [esp + 0x15c8]
lea eax, [esp + 0x30]
push 0x84
push 0
push eax
call fcn.00409730
add esp, 0xc
cmp dword [esp + 0x15d0], 0
mov dword [esp + 0x1c], edi
je 0x408b8e
test esi, esi
mov ecx, esi
jle 0x409326
xor eax, eax
cmp ecx, 1
je 0x408b58
mov ecx, dword [esp + 0x15c8]
and ecx, 0x7ffffffe
mov eax, dword [esp + 0x1c]
lea eax, [eax + eax*8]
shl eax, 5
mov edx, dword [esp + 0x10]
add edx, eax
add edx, 0x8f13
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx esi, byte [edx + eax - 1]
inc dword [esp + esi*4 + 0x30]
movzx esi, byte [edx + eax]
inc dword [esp + esi*4 + 0x30]
add eax, 2
cmp ecx, eax
jne 0x408b40
mov ecx, dword [esp + 0x15c8]
test cl, 1
je 0x409326
mov ecx, dword [esp + 0x1c]
lea ecx, [ecx + ecx*8]
shl ecx, 5
add ecx, dword [esp + 0x10]
movzx eax, byte [eax + ecx + 0x8f12]
mov ecx, dword [esp + 0x15c8]
inc dword [esp + eax*4 + 0x30]
jmp 0x409326
lea ebp, [edi + edi*8]
mov eax, ebp
shl eax, 6
mov dword [esp + 0x18], eax
test esi, esi
jle 0x408c89
cmp esi, 1
jne 0x408eed
xor eax, eax
xor ebx, ebx
mov ecx, dword [esp + 0x15c8]
test cl, 1
je 0x408be5
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x18]
add ecx, edx
add ecx, 0x8192
movzx ecx, word [ecx + eax*2]
test cx, cx
je 0x408be5
mov word [esp + ebx*4 + 0x4b4], cx
mov word [esp + ebx*4 + 0x4b6], ax
inc ebx
lea eax, [esp + 0x934]
push 0x800
push 0
push eax
call fcn.00409730
add esp, 0xc
test ebx, ebx
sete byte [esp + 0xb]
je 0x408ca0
xor eax, eax
cmp ebx, 1
je 0x408c5f
mov ecx, ebx
and ecx, 0xfffffffe
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, word [esp + eax*4 + 0x4b4]
movzx esi, dl
inc dword [esp + esi*4 + 0x934]
shr edx, 8
inc dword [esp + edx*4 + 0xd34]
movzx edx, word [esp + eax*4 + 0x4b8]
movzx esi, dl
inc dword [esp + esi*4 + 0x934]
shr edx, 8
inc dword [esp + edx*4 + 0xd34]
add eax, 2
cmp ecx, eax
jne 0x408c20
test bl, 1
je 0x408c80
movzx eax, word [esp + eax*4 + 0x4b4]
movzx ecx, al
inc dword [esp + ecx*4 + 0x934]
shr eax, 8
inc dword [esp + eax*4 + 0xd34]
mov eax, dword [esp + 0xd34]
jmp 0x408ca9
lea eax, [esp + 0x934]
push 0x800
push 0
push eax
call fcn.00409730
add esp, 0xc
xor ebx, ebx
mov byte [esp + 0xb], 1
xor eax, eax
xor ecx, ecx
cmp eax, ebx
setne cl
inc ecx
mov dword [esp + 0x2c], ecx
lea eax, [ebx - 1]
mov dword [esp + 0x20], eax
mov edx, ebx
and edx, 0xfffffffe
lea eax, [esp + 0x4b4]
mov dword [esp], eax
lea eax, [esp + 0x1134]
xor ecx, ecx
lea esi, [esp + 0x934]
xor edi, edi
mov dword [esp + 0xc], ebx
mov dword [esp + 0x24], ebp
mov dword [esp + 0x14], edx
jmp 0x408d08
inc edi
add ecx, 8
add esi, 0x400
mov eax, dword [esp + 4]
cmp edi, dword [esp + 0x2c]
je 0x408e1b
mov dword [esp + 0x28], edi
mov edx, dword [esp]
mov dword [esp + 4], edx
mov dword [esp], eax
mov eax, 3
xor edx, edx
nop
nop
nop
mov dword [esp + eax*4 + 0xa8], edx
add edx, dword [esi + eax*4 - 0xc]
mov dword [esp + eax*4 + 0xac], edx
add edx, dword [esi + eax*4 - 8]
mov dword [esp + eax*4 + 0xb0], edx
add edx, dword [esi + eax*4 - 4]
mov dword [esp + eax*4 + 0xb4], edx
add edx, dword [esi + eax*4]
add eax, 4
cmp eax, 0x103
jne 0x408d20
cmp byte [esp + 0xb], 0
mov edi, dword [esp + 0x28]
jne 0x408cf0
cmp dword [esp + 0x20], 0
je 0x408dcc
xor eax, eax
mov edi, dword [esp]
mov ebp, dword [esp + 4]
movzx edx, word [ebp + eax*4]
shr edx, cl
movzx edx, dl
mov ebx, dword [esp + edx*4 + 0xb4]
lea ebp, [ebx + 1]
mov dword [esp + edx*4 + 0xb4], ebp
mov edx, dword [esp + 4]
mov edx, dword [edx + eax*4]
mov dword [edi + ebx*4], edx
mov edx, dword [esp + 4]
movzx edx, word [edx + eax*4 + 4]
shr edx, cl
movzx edx, dl
mov ebx, dword [esp + edx*4 + 0xb4]
lea ebp, [ebx + 1]
mov dword [esp + edx*4 + 0xb4], ebp
mov ebp, dword [esp + 4]
mov edx, dword [ebp + eax*4 + 4]
mov dword [edi + ebx*4], edx
mov edx, dword [esp + 0x14]
add eax, 2
cmp edx, eax
jne 0x408d70
jmp 0x408dce
xor eax, eax
mov ebx, dword [esp + 0xc]
test bl, 1
mov ebp, dword [esp + 0x24]
mov edi, dword [esp + 0x28]
je 0x408cf0
mov edx, dword [esp + 4]
movzx edx, word [edx + eax*4]
shr edx, cl
movzx edx, dl
mov ebx, dword [esp + edx*4 + 0xb4]
lea ebp, [ebx + 1]
mov dword [esp + edx*4 + 0xb4], ebp
mov ebp, dword [esp + 0x24]
mov edx, dword [esp + 4]
mov eax, dword [edx + eax*4]
mov edx, dword [esp]
mov dword [edx + ebx*4], eax
mov ebx, dword [esp + 0xc]
jmp 0x408cf0
test ebx, ebx
je 0x409205
mov ebx, dword [esp + 0xc]
cmp ebx, 1
jne 0x408e39
mov eax, dword [esp]
mov word [eax], 1
jmp 0x4090dd
mov esi, dword [esp]
movzx eax, word [esi + 4]
add word [esi], ax
mov eax, ebx
not eax
cmp ebx, 3
jl 0x408f55
mov dword [esp + 0x14], eax
mov ecx, 2
mov eax, 2
sub eax, ebx
mov dword [esp + 4], eax
xor esi, esi
mov edi, 1
jmp 0x408e91
mov edx, dword [esp]
movzx ebx, word [edx + ecx*4]
inc ecx
add word [edx + edi*4], bx
mov eax, dword [esp + 4]
add eax, edi
inc eax
inc edi
cmp eax, 1
mov ebx, dword [esp + 0xc]
je 0x408f6a
mov edx, dword [esp]
movzx eax, word [edx + esi*4]
cmp ecx, ebx
jge 0x408ea5
movzx ebx, word [edx + ecx*4]
cmp ax, bx
jae 0x408ed0
mov word [edx + edi*4], ax
mov word [edx + esi*4], di
inc esi
cmp ecx, dword [esp + 0xc]
jge 0x408edb
cmp esi, edi
jge 0x408e70
mov edx, dword [esp]
movzx eax, word [edx + esi*4]
movzx ebx, word [edx + ecx*4]
cmp ax, bx
jae 0x408e77
jmp 0x408ee2
inc ecx
mov word [edx + edi*4], bx
cmp ecx, dword [esp + 0xc]
jl 0x408eb4
mov edx, dword [esp]
movzx eax, word [edx + esi*4]
add word [edx + edi*4], ax
mov word [edx + esi*4], di
inc esi
jmp 0x408e7c
mov ecx, esi
and ecx, 0x7ffffffe
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x18]
add edx, eax
add edx, 0x8194
xor eax, eax
xor ebx, ebx
jmp 0x408f1b
add eax, 2
cmp ecx, eax
je 0x408baf
movzx esi, word [edx + eax*2 - 2]
test si, si
je 0x408f36
mov word [esp + ebx*4 + 0x4b4], si
mov word [esp + ebx*4 + 0x4b6], ax
inc ebx
movzx esi, word [edx + eax*2]
test si, si
je 0x408f10
mov word [esp + ebx*4 + 0x4b4], si
lea esi, [eax + 1]
mov word [esp + ebx*4 + 0x4b6], si
inc ebx
jmp 0x408f10
and eax, 2
mov ecx, ebx
and ecx, 0xfffffffd
sub ecx, eax
mov word [esi + ecx*4], 0
jmp 0x409001
mov eax, dword [esp + 0x14]
and eax, 2
mov ecx, ebx
and ecx, 0x7ffffffd
sub ecx, eax
mov edx, dword [esp]
mov word [edx + ecx*4], 0
lea eax, [ebx - 3]
mov esi, ebx
mov ebx, eax
and esi, 3
xor esi, 2
je 0x408fb1
mov eax, ebx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edi, word [edx + eax*4]
movzx edi, word [edx + edi*4]
inc edi
mov word [edx + eax*4], di
dec eax
dec esi
jne 0x408fa0
cmp ebx, 3
jae 0x408fbb
mov esi, dword [esp]
jmp 0x409001
inc eax
mov esi, dword [esp]
nop
movzx edx, word [esi + eax*4 - 4]
movzx edx, word [esi + edx*4]
inc edx
mov word [esi + eax*4 - 4], dx
movzx edx, word [esi + eax*4 - 8]
movzx edx, word [esi + edx*4]
inc edx
mov word [esi + eax*4 - 8], dx
movzx edx, word [esi + eax*4 - 0xc]
movzx edx, word [esi + edx*4]
inc edx
mov word [esi + eax*4 - 0xc], dx
movzx edx, word [esi + eax*4 - 0x10]
movzx edx, word [esi + edx*4]
inc edx
mov word [esi + eax*4 - 0x10], dx
add eax, 0xfffffffc
jne 0x408fc0
mov ebx, 1
xor eax, eax
mov edx, dword [esp + 0x20]
jmp 0x40901c
inc eax
lea ebx, [edi + edi]
test edi, edi
je 0x4090d2
test ecx, ecx
mov dword [esp + 4], ebx
js 0x409050
lea edi, [ecx + 1]
xor ebx, ebx
nop
nop
nop
nop
nop
nop
nop
movzx esi, word [esi + ecx*4]
cmp eax, esi
jne 0x409060
inc ebx
dec ecx
cmp edi, ebx
mov esi, dword [esp]
jne 0x409030
mov ecx, 0xffffffff
jmp 0x409065
xor edi, edi
sub ebx, edi
jle 0x409010
jmp 0x40906d
mov edi, ebx
mov esi, dword [esp]
mov ebx, dword [esp + 4]
sub ebx, edi
jle 0x409010
and ebx, 3
je 0x409099
mov dword [esp + 0x14], edi
lea esi, [esi + edx*4]
xor edi, edi
nop
nop
nop
nop
nop
mov word [esi], ax
inc edi
add esi, 0xfffffffc
cmp ebx, edi
jne 0x409080
mov ebx, dword [esp + 4]
sub ebx, edi
sub edx, edi
mov edi, dword [esp + 0x14]
jmp 0x40909d
mov ebx, dword [esp + 4]
mov esi, edi
sub esi, dword [esp + 4]
cmp esi, 0xfffffffc
mov esi, dword [esp]
ja 0x409010
nop
mov word [esi + edx*4], ax
mov word [esi + edx*4 - 4], ax
mov word [esi + edx*4 - 8], ax
mov word [esi + edx*4 - 0xc], ax
add edx, 0xfffffffc
add ebx, 0xfffffffc
cmp ebx, edi
jg 0x4090b0
jmp 0x409010
cmp dword [esp + 0xc], 0
jle 0x409205
mov edi, dword [esp + 0xc]
mov eax, edi
and eax, 3
xor ecx, ecx
cmp dword [esp + 0x20], 3
mov ebx, dword [esp]
jb 0x40912a
mov edx, edi
and edx, 0xfffffffc
xor ecx, ecx
nop
nop
nop
nop
nop
nop
nop
movzx esi, word [ebx + ecx*4]
inc dword [esp + esi*4 + 0x30]
movzx esi, word [ebx + ecx*4 + 4]
inc dword [esp + esi*4 + 0x30]
movzx esi, word [ebx + ecx*4 + 8]
inc dword [esp + esi*4 + 0x30]
movzx esi, word [ebx + ecx*4 + 0xc]
inc dword [esp + esi*4 + 0x30]
add ecx, 4
cmp edx, ecx
jne 0x409100
test eax, eax
je 0x40914d
mov edx, dword [esp]
lea ecx, [edx + ecx*4]
xor edx, edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx esi, word [ecx + edx*4]
inc dword [esp + esi*4 + 0x30]
inc edx
cmp eax, edx
jne 0x409140
cmp edi, 2
jl 0x409205
mov edx, dword [esp + 0x15cc]
cmp edx, 0x20
jge 0x4091d0
mov eax, dword [esp + edx*4 + 0x30]
mov esi, edx
neg edx
mov ecx, esi
and edx, 3
je 0x40918c
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
add eax, dword [esp + ecx*4 + 0x34]
inc ecx
mov dword [esp + esi*4 + 0x30], eax
dec edx
jne 0x409180
lea edx, [esi - 0x1d]
cmp edx, 3
mov edx, esi
jb 0x4091c8
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
add eax, dword [esp + ecx*4 + 0x34]
mov dword [esp + edx*4 + 0x30], eax
add eax, dword [esp + ecx*4 + 0x38]
mov dword [esp + edx*4 + 0x30], eax
add eax, dword [esp + ecx*4 + 0x3c]
mov dword [esp + edx*4 + 0x30], eax
add eax, dword [esp + ecx*4 + 0x40]
add ecx, 4
mov dword [esp + edx*4 + 0x30], eax
cmp ecx, 0x20
jne 0x4091a0
test edx, edx
jle 0x40949d
inc edx
xor ecx, ecx
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov esi, dword [esp + edx*4 + 0x2c]
shl esi, cl
add eax, esi
dec edx
inc ecx
cmp edx, 1
ja 0x4091e0
mov edx, 1
mov ecx, dword [esp + 0x15cc]
shl edx, cl
cmp eax, edx
jne 0x4094a8
shl ebp, 5
mov esi, dword [esp + 0x10]
lea eax, [esi + ebp]
add eax, 0x8f12
push 0x120
push 0
push eax
call fcn.00409730
add esp, 0xc
mov eax, dword [esp + 0x18]
add eax, esi
add eax, 0x8852
push 0x240
push 0
push eax
call fcn.00409730
add esp, 0xc
cmp dword [esp + 0x15cc], 0
mov edi, dword [esp + 0xc]
mov esi, dword [esp]
jle 0x40931f
add esi, 0xfffffffe
mov eax, 1
add ebp, dword [esp + 0x10]
mov dword [esp], esi
jmp 0x409282
lea ecx, [eax + 1]
cmp eax, dword [esp + 0x15cc]
mov eax, ecx
je 0x40931f
mov ecx, dword [esp + eax*4 + 0x30]
test ecx, ecx
jle 0x409270
mov edx, ecx
and edx, 3
je 0x4092d0
mov dword [esp + 0xc], edi
lea edi, [esi + edi*4]
xor esi, esi
nop
nop
nop
nop
nop
nop
movzx ebx, word [edi]
mov byte [ebx + ebp + 0x8f12], al
inc esi
add edi, 0xfffffffc
cmp edx, esi
jne 0x4092a0
mov edi, dword [esp + 0xc]
sub edi, esi
mov edx, ecx
sub edx, esi
mov esi, dword [esp]
cmp ecx, 4
jb 0x409270
jmp 0x4092d7
mov edx, ecx
cmp ecx, 4
jb 0x409270
dec edx
nop
nop
nop
nop
nop
nop
nop
nop
movzx ecx, word [esi + edi*4]
mov byte [ecx + ebp + 0x8f12], al
movzx ecx, word [esi + edi*4 - 4]
mov byte [ecx + ebp + 0x8f12], al
movzx ecx, word [esi + edi*4 - 8]
mov byte [ecx + ebp + 0x8f12], al
movzx ecx, word [esi + edi*4 - 0xc]
add edi, 0xfffffffc
mov byte [ecx + ebp + 0x8f12], al
add edx, 0xfffffffc
cmp edx, 0xfffffffe
jb 0x4092e0
jmp 0x409270
mov ecx, dword [esp + 0x15c8]
mov dword [esp + 0x938], 0
mov eax, dword [esp + 0x15cc]
cmp eax, 2
jl 0x4093bf
lea ecx, [eax - 1]
cmp eax, 2
jne 0x409352
xor edx, edx
mov eax, 2
jmp 0x409396
mov ebx, ecx
and ebx, 0xfffffffe
xor edx, edx
xor eax, eax
nop
nop
nop
nop
nop
mov edi, dword [esp + eax*4 + 0x34]
mov esi, dword [esp + eax*4 + 0x38]
mov ebp, edi
and ebp, edx
xor edi, edx
add edi, edi
lea edx, [edi + ebp*4]
mov dword [esp + eax*4 + 0x93c], edx
mov edi, esi
and edi, edx
xor esi, edx
add esi, esi
lea edx, [esi + edi*4]
mov dword [esp + eax*4 + 0x940], edx
add eax, 2
cmp ebx, eax
jne 0x409360
add eax, 2
test cl, 1
mov ecx, dword [esp + 0x15c8]
je 0x4093bf
mov ecx, dword [esp + eax*4 + 0x2c]
mov esi, ecx
and esi, edx
xor ecx, edx
add ecx, ecx
lea ecx, [ecx + esi*4]
mov dword [esp + eax*4 + 0x934], ecx
mov ecx, dword [esp + 0x15c8]
test ecx, ecx
jle 0x409492
xor eax, eax
mov edx, dword [esp + 0x1c]
lea esi, [edx + edx*8]
mov edi, esi
shl edi, 5
mov edx, dword [esp + 0x10]
add edi, edx
mov dword [esp + 4], edi
shl esi, 6
add esi, edx
mov dword [esp + 0x14], esi
jmp 0x40940c
mov ecx, dword [esp + 0x14]
mov word [ecx + eax*2 + 0x8852], di
mov ecx, dword [esp + 0x15c8]
inc eax
cmp eax, ecx
je 0x409492
mov edx, dword [esp + 4]
movzx ebx, byte [eax + edx + 0x8f12]
test ebx, ebx
je 0x409403
mov ecx, dword [esp + ebx*4 + 0x934]
lea edi, [ecx + 1]
mov dword [esp + ebx*4 + 0x934], edi
xor edi, edi
cmp bl, 4
jb 0x40946f
mov ebp, ebx
and ebp, 0xfffffffc
xor edi, edi
nop
nop
nop
nop
nop
mov edx, ecx
and edx, 2
mov esi, ecx
and esi, 1
shl esi, 2
lea esi, [esi + edi*8]
or esi, edx
mov edx, ecx
shr edx, 2
and edx, 1
or edx, esi
mov esi, ecx
shr esi, 3
and esi, 1
lea edi, [esi + edx*2]
shr ecx, 4
add ebp, 0xfffffffc
jne 0x409440
and ebx, 3
je 0x4093f0
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, ecx
and edx, 1
lea edi, [edx + edi*2]
shr ecx, 1
dec ebx
jne 0x409480
jmp 0x4093f0
add esp, 0x15b4
pop esi
pop edi
pop ebx
pop ebp
ret
mov ecx, edx
mov edx, 1
shl edx, cl
xor eax, eax
mov ecx, dword [esp + 0x15cc]
lea esi, [ecx - 1]
mov dword [esp + 4], esi
lea esi, [ecx*2 - 2]
jmp 0x4094d3
dec ecx
mov dword [esp + edi*2 + 0x30], ecx
add dword [esp + edi*2 + 0x34], 2
dec eax
cmp eax, edx
je 0x409205
mov ecx, dword [esp + 0x15cc]
dec dword [esp + ecx*4 + 0x30]
cmp ecx, 2
jl 0x4094ca
mov ebx, dword [esp + 4]
mov edi, esi
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [esp + edi*2 + 0x30]
test ecx, ecx
jne 0x4094c0
add edi, 0xfffffffe
dec ebx
test ebx, ebx
jg 0x4094f0
jmp 0x4094ca