Function at 0x5848fc
Capabilities:
Encode data using xor
Encrypt data using twofish

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffd9c
push ebx
push esi
push edi
mov dword [ebp - 8], ecx
mov dword [ebp - 4], edx
mov ebx, eax
lea eax, [ebp - 0x34]
xor ecx, ecx
mov edx, 0x20
call fcn.00403b7c
mov ecx, dword [ebp - 4]
shr ecx, 3
lea edx, [ebp - 0x34]
mov eax, ebx
call fcn.004032f0
cmp dword [ebp - 4], 0x80
ja 0x584941
mov dword [ebp - 4], 0x80
jmp 0x58495a
cmp dword [ebp - 4], 0xc0
ja 0x584953
mov dword [ebp - 4], 0xc0
jmp 0x58495a
mov dword [ebp - 4], pe_nt_image_headers32
mov eax, dword [ebp - 4]
shr eax, 6
dec eax
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
test eax, eax
jb 0x5849a6
inc eax
mov dword [ebp - 0x14], eax
xor ebx, ebx
lea esi, [ebp - 0x44]
lea edi, [ebp - 0x54]
mov eax, ebx
add eax, eax
mov edx, dword [ebp + eax*4 - 0x34]
mov dword [esi], edx
mov eax, dword [ebp + eax*4 - 0x30]
mov dword [edi], eax
mov edx, dword [edi]
mov eax, dword [esi]
call fcn.00584648
mov edx, dword [ebp - 0xc]
mov dword [ebp + edx*4 - 0x64], eax
dec dword [ebp - 0xc]
inc ebx
add edi, 4
add esi, 4
dec dword [ebp - 0x14]
jne 0x584977
xor eax, eax
mov dword [ebp - 0x10], eax
xor ebx, ebx
lea edx, [ebp - 0x44]
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x10]
call fcn.00584730
mov esi, eax
lea edx, [ebp - 0x54]
mov eax, dword [ebp - 0x10]
add eax, 0x1010101
mov ecx, dword [ebp - 4]
call fcn.00584730
mov edx, eax
shl edx, 8
shr eax, 0x18
or edx, eax
mov eax, edx
mov edx, ebx
add edx, edx
mov ecx, dword [ebp - 8]
lea edi, [eax + esi]
mov dword [ecx + edx*4], edi
add eax, eax
add esi, eax
mov eax, esi
mov ecx, eax
shl ecx, 9
shr eax, 0x17
or ecx, eax
mov eax, dword [ebp - 8]
mov dword [eax + edx*4 + 4], ecx
add dword [ebp - 0x10], 0x2020202
inc ebx
cmp ebx, 0x14
jne 0x5849ad
mov eax, dword [ebp - 4]
sub eax, 0x80
je 0x584a2e
sub eax, 0x40
je 0x584c02
sub eax, 0x40
je 0x584e42
jmp 0x5851c4
movzx ecx, byte [ebp - 0x60]
and cl, 0xff
mov edx, 0x5df478
lea eax, [ebp - 0x164]
call fcn.005848d8
mov esi, dword [ebp - 0x64]
and esi, 0xff
xor ebx, ebx
mov eax, ebx
add eax, eax
mov edx, dword [ebp + 8]
movzx ecx, byte [ebp + ebx - 0x164]
movzx ecx, byte [ecx + 0x5df478]
xor ecx, esi
mov ecx, dword [ecx*4 + 0x640b18]
mov dword [edx + eax*4], ecx
mov edx, dword [ebp + 8]
movzx ecx, byte [ebp + ebx - 0x163]
movzx ecx, byte [ecx + 0x5df478]
xor ecx, esi
mov ecx, dword [ecx*4 + 0x640b18]
mov dword [edx + eax*4 + 8], ecx
add ebx, 2
cmp ebx, 0x100
jb 0x584a50
mov ecx, dword [ebp - 0x60]
shr ecx, 8
and cl, 0xff
mov edx, 0x5df578
lea eax, [ebp - 0x164]
call fcn.005848d8
mov esi, dword [ebp - 0x64]
shr esi, 8
and esi, 0xff
xor ebx, ebx
mov eax, ebx
add eax, eax
mov edx, dword [ebp + 8]
movzx ecx, byte [ebp + ebx - 0x164]
movzx ecx, byte [ecx + 0x5df478]
xor ecx, esi
mov ecx, dword [ecx*4 + 0x640f18]
mov dword [edx + eax*4 + 4], ecx
inc eax
mov edx, dword [ebp + 8]
movzx ecx, byte [ebp + ebx - 0x163]
movzx ecx, byte [ecx + 0x5df478]
xor ecx, esi
mov ecx, dword [ecx*4 + 0x640f18]
mov dword [edx + eax*4 + 8], ecx
add ebx, 2
cmp ebx, 0x100
jb 0x584ac3
mov ecx, dword [ebp - 0x60]
shr ecx, 0x10
and cl, 0xff
mov edx, 0x5df478
lea eax, [ebp - 0x164]
call fcn.005848d8
mov esi, dword [ebp - 0x64]
shr esi, 0x10
and esi, 0xff
xor ebx, ebx
mov eax, ebx
add eax, eax
mov edx, dword [ebp + 8]
movzx ecx, byte [ebp + ebx - 0x164]
movzx ecx, byte [ecx + 0x5df578]
xor ecx, esi
mov ecx, dword [ecx*4 + 0x641318]
mov dword [edx + eax*4 + 0x800], ecx
mov edx, dword [ebp + 8]
movzx ecx, byte [ebp + ebx - 0x163]
movzx ecx, byte [ecx + 0x5df578]
xor ecx, esi
mov ecx, dword [ecx*4 + 0x641318]
mov dword [edx + eax*4 + 0x808], ecx
add ebx, 2
cmp ebx, 0x100
jb 0x584b38
mov ecx, dword [ebp - 0x60]
shr ecx, 0x18
mov edx, 0x5df578
lea eax, [ebp - 0x164]
call fcn.005848d8
mov esi, dword [ebp - 0x64]
shr esi, 0x18
xor ebx, ebx
mov eax, ebx
add eax, eax
mov edx, dword [ebp + 8]
movzx ecx, byte [ebp + ebx - 0x164]
movzx ecx, byte [ecx + 0x5df578]
xor ecx, esi
mov ecx, dword [ecx*4 + 0x641718]
mov dword [edx + eax*4 + 0x804], ecx
inc eax
mov edx, dword [ebp + 8]
movzx ecx, byte [ebp + ebx - 0x163]
movzx ecx, byte [ecx + 0x5df578]
xor ecx, esi
mov ecx, dword [ecx*4 + 0x641718]
mov dword [edx + eax*4 + 0x808], ecx
add ebx, 2
cmp ebx, 0x100
jb 0x584ba9
jmp 0x5851c4
movzx ecx, byte [ebp - 0x5c]
and cl, 0xff
mov edx, 0x5df578
lea eax, [ebp - 0x164]
call fcn.005848d8
mov esi, dword [ebp - 0x64]
and esi, 0xff
mov eax, dword [ebp - 0x60]
and eax, 0xff
xor ebx, ebx
mov edx, ebx
add edx, edx
mov ecx, dword [ebp + 8]
movzx edi, byte [ebp + ebx - 0x164]
movzx edi, byte [edi + 0x5df478]
xor edi, eax
movzx edi, byte [edi + 0x5df478]
xor edi, esi
mov edi, dword [edi*4 + 0x640b18]
mov dword [ecx + edx*4], edi
mov ecx, dword [ebp + 8]
movzx edi, byte [ebp + ebx - 0x163]
movzx edi, byte [edi + 0x5df478]
xor edi, eax
movzx edi, byte [edi + 0x5df478]
xor edi, esi
mov edi, dword [edi*4 + 0x640b18]
mov dword [ecx + edx*4 + 8], edi
add ebx, 2
cmp ebx, 0x100
jb 0x584c2c
mov ecx, dword [ebp - 0x5c]
shr ecx, 8
and cl, 0xff
mov edx, 0x5df578
lea eax, [ebp - 0x164]
call fcn.005848d8
mov esi, dword [ebp - 0x64]
shr esi, 8
and esi, 0xff
mov eax, dword [ebp - 0x60]
shr eax, 8
and eax, 0xff
xor ebx, ebx
mov edx, ebx
add edx, edx
mov ecx, dword [ebp + 8]
movzx edi, byte [ebp + ebx - 0x164]
movzx edi, byte [edi + 0x5df578]
xor edi, eax
movzx edi, byte [edi + 0x5df478]
xor edi, esi
mov edi, dword [edi*4 + 0x640f18]
mov dword [ecx + edx*4 + 4], edi
inc edx
mov ecx, dword [ebp + 8]
movzx edi, byte [ebp + ebx - 0x163]
movzx edi, byte [edi + 0x5df578]
xor edi, eax
movzx edi, byte [edi + 0x5df478]
xor edi, esi
mov edi, dword [edi*4 + 0x640f18]
mov dword [ecx + edx*4 + 8], edi
add ebx, 2
cmp ebx, 0x100
jb 0x584cbc
mov ecx, dword [ebp - 0x5c]
shr ecx, 0x10
and cl, 0xff
mov edx, 0x5df478
lea eax, [ebp - 0x164]
call fcn.005848d8
mov esi, dword [ebp - 0x64]
shr esi, 0x10
and esi, 0xff
mov eax, dword [ebp - 0x60]
shr eax, 0x10
and eax, 0xff
xor ebx, ebx
mov edx, ebx
add edx, edx
mov ecx, dword [ebp + 8]
movzx edi, byte [ebp + ebx - 0x164]
movzx edi, byte [edi + 0x5df478]
xor edi, eax
movzx edi, byte [edi + 0x5df578]
xor edi, esi
mov edi, dword [edi*4 + 0x641318]
mov dword [ecx + edx*4 + 0x800], edi
mov ecx, dword [ebp + 8]
movzx edi, byte [ebp + ebx - 0x163]
movzx edi, byte [edi + 0x5df478]
xor edi, eax
movzx edi, byte [edi + 0x5df578]
xor edi, esi
mov edi, dword [edi*4 + 0x641318]
mov dword [ecx + edx*4 + 0x808], edi
add ebx, 2
cmp ebx, 0x100
jb 0x584d4e
mov ecx, dword [ebp - 0x5c]
shr ecx, 0x18
mov edx, 0x5df478
lea eax, [ebp - 0x164]
call fcn.005848d8
mov esi, dword [ebp - 0x64]
shr esi, 0x18
mov eax, dword [ebp - 0x60]
shr eax, 0x18
xor ebx, ebx
mov edx, ebx
add edx, edx
mov ecx, dword [ebp + 8]
movzx edi, byte [ebp + ebx - 0x164]
movzx edi, byte [edi + 0x5df578]
xor edi, eax
movzx edi, byte [edi + 0x5df578]
xor edi, esi
mov edi, dword [edi*4 + 0x641718]
mov dword [ecx + edx*4 + 0x804], edi
inc edx
mov ecx, dword [ebp + 8]
movzx edi, byte [ebp + ebx - 0x163]
movzx edi, byte [edi + 0x5df578]
xor edi, eax
movzx edi, byte [edi + 0x5df578]
xor edi, esi
mov edi, dword [edi*4 + 0x641718]
mov dword [ecx + edx*4 + 0x808], edi
add ebx, 2
cmp ebx, 0x100
jb 0x584dd7
jmp 0x5851c4
movzx ecx, byte [ebp - 0x58]
and cl, 0xff
mov edx, 0x5df578
lea eax, [ebp - 0x264]
call fcn.005848d8
xor ebx, ebx
movzx eax, byte [ebp + ebx - 0x264]
movzx eax, byte [eax + 0x5df578]
mov byte [ebp + ebx - 0x164], al
movzx eax, byte [ebp + ebx - 0x263]
movzx eax, byte [eax + 0x5df578]
mov byte [ebp + ebx - 0x163], al
add ebx, 2
cmp ebx, 0x100
jb 0x584e5b
movzx ecx, byte [ebp - 0x5c]
and cl, 0xff
lea edx, [ebp - 0x164]
lea eax, [ebp - 0x164]
call fcn.005848d8
mov esi, dword [ebp - 0x64]
and esi, 0xff
mov eax, dword [ebp - 0x60]
and eax, 0xff
xor ebx, ebx
mov edx, ebx
add edx, edx
mov ecx, dword [ebp + 8]
movzx edi, byte [ebp + ebx - 0x164]
movzx edi, byte [edi + 0x5df478]
xor edi, eax
movzx edi, byte [edi + 0x5df478]
xor edi, esi
mov edi, dword [edi*4 + 0x640b18]
mov dword [ecx + edx*4], edi
mov ecx, dword [ebp + 8]
movzx edi, byte [ebp + ebx - 0x163]
movzx edi, byte [edi + 0x5df478]
xor edi, eax
movzx edi, byte [edi + 0x5df478]
xor edi, esi
mov edi, dword [edi*4 + 0x640b18]
mov dword [ecx + edx*4 + 8], edi
add ebx, 2
cmp ebx, 0x100
jb 0x584ebd
mov ecx, dword [ebp - 0x58]
shr ecx, 8
and cl, 0xff
mov edx, 0x5df478
lea eax, [ebp - 0x264]
call fcn.005848d8
xor ebx, ebx
movzx eax, byte [ebp + ebx - 0x264]
movzx eax, byte [eax + 0x5df578]
mov byte [ebp + ebx - 0x164], al
movzx eax, byte [ebp + ebx - 0x263]
movzx eax, byte [eax + 0x5df578]
mov byte [ebp + ebx - 0x163], al
add ebx, 2
cmp ebx, 0x100
jb 0x584f36
mov ecx, dword [ebp - 0x5c]
shr ecx, 8
and cl, 0xff
lea edx, [ebp - 0x164]
lea eax, [ebp - 0x164]
call fcn.005848d8
mov esi, dword [ebp - 0x64]
shr esi, 8
and esi, 0xff
mov eax, dword [ebp - 0x60]
shr eax, 8
and eax, 0xff
xor ebx, ebx
mov edx, ebx
add edx, edx
mov ecx, dword [ebp + 8]
movzx edi, byte [ebp + ebx - 0x164]
movzx edi, byte [edi + 0x5df578]
xor edi, eax
movzx edi, byte [edi + 0x5df478]
xor edi, esi
mov edi, dword [edi*4 + 0x640f18]
mov dword [ecx + edx*4 + 4], edi
inc edx
mov ecx, dword [ebp + 8]
movzx edi, byte [ebp + ebx - 0x163]
movzx edi, byte [edi + 0x5df578]
xor edi, eax
movzx edi, byte [edi + 0x5df478]
xor edi, esi
mov edi, dword [edi*4 + 0x640f18]
mov dword [ecx + edx*4 + 8], edi
add ebx, 2
cmp ebx, 0x100
jb 0x584fa0
mov ecx, dword [ebp - 0x58]
shr ecx, 0x10
and cl, 0xff
mov edx, 0x5df478
lea eax, [ebp - 0x264]
call fcn.005848d8
xor ebx, ebx
movzx eax, byte [ebp + ebx - 0x264]
movzx eax, byte [eax + 0x5df478]
mov byte [ebp + ebx - 0x164], al
movzx eax, byte [ebp + ebx - 0x263]
movzx eax, byte [eax + 0x5df478]
mov byte [ebp + ebx - 0x163], al
add ebx, 2
cmp ebx, 0x100
jb 0x58501b
mov ecx, dword [ebp - 0x5c]
shr ecx, 0x10
and cl, 0xff
lea edx, [ebp - 0x164]
lea eax, [ebp - 0x164]
call fcn.005848d8
mov esi, dword [ebp - 0x64]
shr esi, 0x10
and esi, 0xff
mov eax, dword [ebp - 0x60]
shr eax, 0x10
and eax, 0xff
xor ebx, ebx
mov edx, ebx
add edx, edx
mov ecx, dword [ebp + 8]
movzx edi, byte [ebp + ebx - 0x164]
movzx edi, byte [edi + 0x5df478]
xor edi, eax
movzx edi, byte [edi + 0x5df578]
xor edi, esi
mov edi, dword [edi*4 + 0x641318]
mov dword [ecx + edx*4 + 0x800], edi
mov ecx, dword [ebp + 8]
movzx edi, byte [ebp + ebx - 0x163]
movzx edi, byte [edi + 0x5df478]
xor edi, eax
movzx edi, byte [edi + 0x5df578]
xor edi, esi
mov edi, dword [edi*4 + 0x641318]
mov dword [ecx + edx*4 + 0x808], edi
add ebx, 2
cmp ebx, 0x100
jb 0x585085
mov ecx, dword [ebp - 0x58]
shr ecx, 0x18
mov edx, 0x5df578
lea eax, [ebp - 0x264]
call fcn.005848d8
xor ebx, ebx
movzx eax, byte [ebp + ebx - 0x264]
movzx eax, byte [eax + 0x5df478]
mov byte [ebp + ebx - 0x164], al
movzx eax, byte [ebp + ebx - 0x263]
movzx eax, byte [eax + 0x5df478]
mov byte [ebp + ebx - 0x163], al
add ebx, 2
cmp ebx, 0x100
jb 0x585102
mov ecx, dword [ebp - 0x5c]
shr ecx, 0x18
lea edx, [ebp - 0x164]
lea eax, [ebp - 0x164]
call fcn.005848d8
mov esi, dword [ebp - 0x64]
shr esi, 0x18
mov eax, dword [ebp - 0x60]
shr eax, 0x18
xor ebx, ebx
mov edx, ebx
add edx, edx
mov ecx, dword [ebp + 8]
movzx edi, byte [ebp + ebx - 0x164]
movzx edi, byte [edi + 0x5df578]
xor edi, eax
movzx edi, byte [edi + 0x5df578]
xor edi, esi
mov edi, dword [edi*4 + 0x641718]
mov dword [ecx + edx*4 + 0x804], edi
inc edx
mov ecx, dword [ebp + 8]
movzx edi, byte [ebp + ebx - 0x163]
movzx edi, byte [edi + 0x5df578]
xor edi, eax
movzx edi, byte [edi + 0x5df578]
xor edi, esi
mov edi, dword [edi*4 + 0x641718]
mov dword [ecx + edx*4 + 0x808], edi
add ebx, 2
cmp ebx, 0x100
jb 0x58515e
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4