Function at 0x411c00
Capabilities:
Encode data using xor
Read file on windows
Write file on windows

Disassembly:
sub esp, 0xbc8
mov eax, dword [0x4606e0]
xor eax, esp
mov dword [esp + 0xbc4], eax
push ebx
push ebp
mov ebp, dword [esp + 0xbd4]
push esi
mov esi, dword [esp + 0xbdc]
push edi
mov edi, dword [ebp + 0x130]
xor ebx, ebx
cmp dword [edi + 0x21d14], ebx
mov dword [esp + 0x20], esi
mov dword [esp + 0x18], edi
mov dword [esp + 0x10], ebx
jg 0x411c4a
or eax, 0xffffffff
jmp 0x411fa5
push 0xb40
lea eax, [esp + 0x98]
push ebx
push eax
call fcn.00425f70
push 2
push ebx
push esi
call fcn.0042670e
push esi
call fcn.0042a135
add esp, 0x1c
cmp eax, ebx
mov dword [esp + 0x1c], eax
je 0x411c42
push ebx
push ebx
push esi
call fcn.0042670e
push esi
push 0xa
lea ecx, [esp + 0x38]
push 1
push ecx
call fcn.0042666c
push 3
lea edx, [esp + 0x44]
push 0x44db80
push edx
call fcn.0042a1a3
add esp, 0x28
test eax, eax
jne 0x411cde
movzx eax, byte [esp + 0x2a]
movzx ecx, byte [esp + 0x2b]
movzx edx, byte [esp + 0x2c]
and eax, 0x7f
shl eax, 7
and ecx, 0x7f
or eax, ecx
movzx ecx, byte [esp + 0x2d]
shl eax, 7
and edx, 0x7f
or eax, edx
shl eax, 7
and ecx, 0x7f
or eax, ecx
add eax, 0xa
mov dword [esp + 0x14], eax
jmp 0x411ce2
mov dword [esp + 0x14], ebx
mov edx, dword [ebp + 0x134]
add edx, dword [esp + 0x14]
push ebx
push edx
push esi
call fcn.0042670e
push esi
push 1
lea eax, [esp + 0xa8]
push 4
push eax
call fcn.0042666c
mov bl, byte [esp + 0xb1]
mov eax, dword [ebp + 0x118]
mov esi, 1
add esp, 0x1c
and bl, 0xf1
cmp eax, esi
mov byte [esp + 0x94], 0xff
jne 0x411d31
mov ecx, 0x80
jmp 0x411d45
xor ecx, ecx
cmp dword [ebp + 0xc], 0x3e80
setge cl
sub ecx, esi
and ecx, 0xffffffe0
add ecx, 0x40
cmp dword [ebp + 0x88], 0
jne 0x411d51
mov ecx, dword [ebp + 0x44]
cmp dword [ebp + 0x38], 0
je 0x411d5b
xor al, al
jmp 0x411d6c
mov edx, dword [ebp + 0xc]
push edx
push eax
push ecx
call fcn.0040d5d0
add esp, 0xc
shl al, 4
cmp dword [ebp + 0x118], esi
jne 0x411d8c
mov cl, byte [esp + 0x96]
and cl, 0xd
or bl, 0xa
or cl, al
mov byte [esp + 0x96], cl
jmp 0x411da2
mov dl, byte [esp + 0x96]
and dl, 0xd
or bl, 2
or dl, al
mov byte [esp + 0x96], dl
push 0x64
lea eax, [esp + 0x34]
push 0
push eax
mov byte [esp + 0xa1], bl
call fcn.00425f70
add esp, 0xc
cmp dword [ebp + 0x38], 0
je 0x411ded
mov ecx, 0xff
mov eax, 0x51eb851f
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
mov byte [esp + esi + 0x30], al
add ecx, 0xff
add esi, 1
cmp ecx, 0x639c
jl 0x411dc5
jmp 0x411e00
lea ecx, [esp + 0x30]
push ecx
lea ebx, [edi + 0x21d08]
call fcn.004112e0
add esp, 4
mov edx, dword [ebp + 0x54]
test edx, edx
mov ebx, dword [edi + 0xdc00]
je 0x411e10
sub ebx, 2
cmp dword [ebp + 0x88], 0
jne 0x411e44
mov byte [esp + ebx + 0x94], 0x49
add ebx, 1
mov byte [esp + ebx + 0x94], 0x6e
add ebx, 1
mov byte [esp + ebx + 0x94], 0x66
add ebx, 1
mov byte [esp + ebx + 0x94], 0x6f
jmp 0x411e6d
mov byte [esp + ebx + 0x94], 0x58
add ebx, 1
mov byte [esp + ebx + 0x94], 0x69
add ebx, 1
mov byte [esp + ebx + 0x94], 0x6e
add ebx, 1
mov byte [esp + ebx + 0x94], 0x67
mov eax, dword [ebp + 0x138]
mov byte [esp + ebx + 0x95], 0
mov byte [esp + ebx + 0x96], 0
mov byte [esp + ebx + 0x97], 0
mov byte [esp + ebx + 0x98], 0xf
add ebx, 1
add ebx, 4
mov ecx, eax
sar ecx, 0x18
mov byte [esp + ebx + 0x94], cl
mov ecx, eax
sar ecx, 0x10
mov byte [esp + ebx + 0x95], cl
mov byte [esp + ebx + 0x97], al
mov ecx, eax
mov eax, dword [esp + 0x1c]
sar ecx, 8
mov byte [esp + ebx + 0x96], cl
add ebx, 4
mov ecx, eax
sar ecx, 0x18
mov byte [esp + ebx + 0x94], cl
mov ecx, eax
sar ecx, 0x10
mov byte [esp + ebx + 0x95], cl
mov ecx, eax
sar ecx, 8
mov byte [esp + ebx + 0x96], cl
mov byte [esp + ebx + 0x97], al
add ebx, 4
lea edi, [esp + ebx + 0x94]
mov ecx, 0x19
lea esi, [esp + 0x30]
add ebx, 0x64
test edx, edx
rep movsd dword es:[edi], dword [esi]
je 0x411f27
mov eax, dword [esp + 0x18]
lea edx, [esp + 0x94]
push edx
push eax
call fcn.0040fc10
add esp, 8
xor esi, esi
test ebx, ebx
jle 0x411f5e
lea ecx, [ecx]
movzx eax, word [esp + 0x10]
movzx ecx, byte [esp + esi + 0x94]
xor ecx, eax
and ecx, 0xff
sar eax, 8
xor ax, word [ecx*4 + 0x460058]
add esi, 1
cmp esi, ebx
movzx edx, ax
mov dword [esp + 0x10], edx
jl 0x411f30
mov eax, dword [esp + 0x10]
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x20]
push eax
push edi
lea ecx, [esp + ebx + 0x9c]
push ecx
push esi
push ebp
call fcn.00411720
push 0
push edi
push esi
call fcn.0042670e
mov edx, dword [ebp + 0x134]
push esi
push 1
push edx
lea eax, [esp + 0xc0]
push eax
call fcn.00426a1a
sub eax, 1
add esp, 0x30
neg eax
sbb eax, eax
mov ecx, dword [esp + 0xbd4]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.00426065
add esp, 0xbc8
ret