Function at 0x1004dd60
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2b8
mov eax, dword [0x101165b0]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push esi
mov dword [ebp - 0x2b4], eax
mov eax, dword [ebp + 0x14]
mov esi, dword [eax]
push edi
mov edi, edx
lea edx, [ebx + esi + 8]
push edx
mov dword [ebp - 0x2a0], edi
mov dword [ebp - 0x2b0], ecx
mov dword [ebp - 0x2ac], eax
mov dword [ebp - 0x290], 0
mov dword [ebp - 0x288], esi
call fcn.10085e5d
push esi
mov dword [ebp - 0x2a4], eax
call fcn.10085e5d
push esi
mov dword [ebp - 0x28c], eax
call fcn.10085e5d
push esi
mov dword [ebp - 0x294], eax
call fcn.10085e5d
mov dword [ebp - 0x29c], eax
sub edi, esi
lea eax, [edi - 1]
push eax
call fcn.10085e5d
push edi
mov esi, eax
call fcn.10085e5d
add esp, 0x18
mov dword [ebp - 0x298], eax
test ebx, ebx
je 0x1004de0a
push ebx
call fcn.10085e5d
add esp, 4
mov dword [ebp - 0x290], eax
mov ecx, dword [ebp - 0x2ac]
push ecx
lea edx, [ebp - 0x284]
push edx
call sym.cis_cc_3.2.dll_HASH_Initialize
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x2b0]
push eax
push ecx
lea edx, [ebp - 0x284]
push edx
call sym.cis_cc_3.2.dll_HASH_Update_PCIS
mov edi, dword [ebp - 0x29c]
lea eax, [ebp - 0x284]
push eax
lea ecx, [ebp - 0x288]
push ecx
push edi
call sym.cis_cc_3.2.dll_HASH_Finalize
mov ecx, dword [ebp - 0x2a0]
mov edx, dword [ebp - 0x288]
mov eax, ecx
sub eax, ebx
sub eax, edx
sub eax, 2
mov dword [ebp - 0x2a8], eax
lea eax, [ebx + edx + 2]
add esp, 0x20
cmp ecx, eax
jae 0x1004dedb
mov ecx, dword [ebp - 0x2a4]
push ecx
call fcn.10085a2f
mov edx, dword [ebp - 0x28c]
push edx
call fcn.10085a2f
mov eax, dword [ebp - 0x294]
push eax
call fcn.10085a2f
push edi
call fcn.10085a2f
push esi
call fcn.10085a2f
mov ecx, dword [ebp - 0x298]
push ecx
call fcn.10085a2f
add esp, 0x18
test ebx, ebx
je 0x1004dec6
mov edx, dword [ebp - 0x290]
push edx
call fcn.10085a2f
add esp, 4
pop edi
mov eax, 0xfffffbba
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1008600b
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp - 0x2b4]
cmp byte [ecx + eax - 1], 0xbc
je 0x1004df4f
mov eax, dword [ebp - 0x2a4]
push eax
call fcn.10085a2f
mov ecx, dword [ebp - 0x28c]
push ecx
call fcn.10085a2f
mov edx, dword [ebp - 0x294]
push edx
call fcn.10085a2f
push edi
call fcn.10085a2f
push esi
call fcn.10085a2f
mov eax, dword [ebp - 0x298]
push eax
call fcn.10085a2f
add esp, 0x18
test ebx, ebx
je 0x1004dec6
mov ecx, dword [ebp - 0x290]
push ecx
call fcn.10085a2f
add esp, 4
pop edi
mov eax, 0xfffffbba
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1008600b
mov esp, ebp
pop ebp
ret
sub ecx, edx
lea edi, [ecx - 1]
push edi
push eax
push esi
mov dword [ebp - 0x2b0], edi
call fcn.10086490
mov edx, dword [ebp - 0x288]
mov eax, dword [ebp - 0x2b4]
mov ecx, dword [ebp - 0x28c]
push edx
add eax, edi
push eax
push ecx
call fcn.10086490
mov edx, dword [ebp - 0x288]
mov eax, dword [ebp - 0x298]
mov ecx, dword [ebp - 0x28c]
push edx
push edi
mov edi, dword [ebp - 0x2ac]
push eax
call fcn.1004d750
mov edi, eax
add esp, 0x24
test edi, edi
je 0x1004e011
mov ecx, dword [ebp - 0x2a4]
push ecx
call fcn.10085a2f
mov edx, dword [ebp - 0x28c]
push edx
call fcn.10085a2f
mov eax, dword [ebp - 0x294]
push eax
call fcn.10085a2f
mov ecx, dword [ebp - 0x29c]
push ecx
call fcn.10085a2f
push esi
call fcn.10085a2f
mov edx, dword [ebp - 0x298]
push edx
call fcn.10085a2f
add esp, 0x18
test ebx, ebx
je 0x1004dfff
mov eax, dword [ebp - 0x290]
push eax
call fcn.10085a2f
add esp, 4
mov eax, edi
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1008600b
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 0x2b0]
test ecx, ecx
je 0x1004e02e
mov edi, dword [ebp - 0x298]
mov eax, esi
sub edi, esi
mov dl, byte [edi + eax]
xor byte [eax], dl
inc eax
dec ecx
jne 0x1004e025
mov ecx, dword [ebp - 0x2a0]
add ecx, ecx
add ecx, ecx
add ecx, ecx
sub ecx, dword [ebp + 0x10]
mov eax, 0xff
sar eax, cl
and byte [esi], al
test ebx, ebx
je 0x1004e065
mov ecx, dword [ebp - 0x2a8]
mov eax, dword [ebp - 0x290]
push ebx
lea edx, [ecx + esi + 1]
push edx
push eax
call fcn.10086490
add esp, 0xc
mov edi, dword [ebp - 0x2a4]
mov edx, dword [ebp - 0x29c]
xor eax, eax
mov dword [edi], eax
mov dword [edi + 4], eax
mov ecx, dword [ebp - 0x288]
push ecx
push edx
lea eax, [edi + 8]
push eax
call fcn.10086490
add esp, 0xc
test ebx, ebx
je 0x1004e0ab
mov ecx, dword [ebp - 0x290]
mov edx, dword [ebp - 0x288]
push ebx
push ecx
lea eax, [edi + edx + 8]
push eax
call fcn.10086490
add esp, 0xc
mov ecx, dword [ebp - 0x288]
mov eax, dword [ebp - 0x2ac]
lea edx, [ebx + ecx + 8]
push eax
lea ecx, [ebp - 0x284]
push ecx
mov dword [ebp - 0x2a8], edx
call sym.cis_cc_3.2.dll_HASH_Initialize
mov edx, dword [ebp - 0x2a8]
push edx
lea eax, [ebp - 0x284]
push edi
push eax
call sym.cis_cc_3.2.dll_HASH_Update_PCIS
mov eax, dword [ebp - 0x294]
lea ecx, [ebp - 0x284]
push ecx
lea edx, [ebp - 0x2b8]
push edx
push eax
call sym.cis_cc_3.2.dll_HASH_Finalize
add esp, 0x20
cmp dword [ebp - 0x288], 0
mov dword [ebp - 0x2a0], 0
jbe 0x1004e13d
mov eax, dword [ebp - 0x28c]
mov edx, dword [ebp - 0x294]
sub edx, eax
mov cl, byte [eax]
cmp cl, byte [edx + eax]
jne 0x1004e1a1
mov ecx, dword [ebp - 0x2a0]
inc ecx
inc eax
mov dword [ebp - 0x2a0], ecx
cmp ecx, dword [ebp - 0x288]
jb 0x1004e120
push edi
call fcn.10085a2f
mov ecx, dword [ebp - 0x28c]
push ecx
call fcn.10085a2f
mov edx, dword [ebp - 0x294]
push edx
call fcn.10085a2f
mov eax, dword [ebp - 0x29c]
push eax
call fcn.10085a2f
push esi
call fcn.10085a2f
mov ecx, dword [ebp - 0x298]
push ecx
call fcn.10085a2f
add esp, 0x18
test ebx, ebx
je 0x1004e18f
mov edx, dword [ebp - 0x290]
push edx
call fcn.10085a2f
add esp, 4
pop edi
xor eax, eax
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1008600b
mov esp, ebp
pop ebp
ret
push edi
call fcn.10085a2f
mov edx, dword [ebp - 0x28c]
push edx
call fcn.10085a2f
mov eax, dword [ebp - 0x294]
push eax
call fcn.10085a2f
mov ecx, dword [ebp - 0x29c]
push ecx
call fcn.10085a2f
push esi
call fcn.10085a2f
mov edx, dword [ebp - 0x298]
push edx
call fcn.10085a2f
add esp, 0x18
test ebx, ebx
je 0x1004dec6
mov eax, dword [ebp - 0x290]
push eax
call fcn.10085a2f
mov ecx, dword [ebp - 4]
add esp, 4
pop edi
xor ecx, ebp
mov eax, 0xfffffbba
pop esi
call fcn.1008600b
mov esp, ebp
pop ebp
ret