Function at 0x40c180
Capabilities:
Encode data using xor

Disassembly:
push ebp
push ebx
push edi
push esi
mov eax, 0x15ac
call fcn.0040cba0
mov edi, edx
mov dword [esp + 0xc], ecx
mov ebx, dword [esp + 0x15c4]
mov esi, dword [esp + 0x15c0]
lea eax, [esp + 0x28]
push 0x84
push 0
push eax
call fcn.0040ccd0
add esp, 0xc
cmp dword [esp + 0x15c8], 0
mov dword [esp + 0x14], edi
je 0x40c24e
test esi, esi
mov ecx, esi
jle 0x40c977
xor eax, eax
cmp ecx, 1
je 0x40c218
mov ecx, dword [esp + 0x15c0]
and ecx, 0x7ffffffe
mov eax, dword [esp + 0x14]
lea eax, [eax + eax*8]
shl eax, 5
mov edx, dword [esp + 0xc]
add edx, eax
add edx, 0x8f13
xor eax, eax
nop
nop
movzx esi, byte [edx + eax - 1]
inc dword [esp + esi*4 + 0x28]
movzx esi, byte [edx + eax]
inc dword [esp + esi*4 + 0x28]
add eax, 2
cmp ecx, eax
jne 0x40c200
mov ecx, dword [esp + 0x15c0]
test cl, 1
je 0x40c977
mov ecx, dword [esp + 0x14]
lea ecx, [ecx + ecx*8]
shl ecx, 5
add ecx, dword [esp + 0xc]
movzx eax, byte [eax + ecx + 0x8f12]
mov ecx, dword [esp + 0x15c0]
inc dword [esp + eax*4 + 0x28]
jmp 0x40c977
lea eax, [edi + edi*8]
mov dword [esp + 0x1c], eax
mov ebp, eax
shl ebp, 6
test esi, esi
mov dword [esp + 0x18], ebp
jle 0x40c349
cmp esi, 1
jne 0x40c531
xor eax, eax
xor ebx, ebx
mov ecx, dword [esp + 0x15c0]
test cl, 1
je 0x40c2a5
mov ecx, dword [esp + 0xc]
add ecx, ebp
add ecx, 0x8192
movzx ecx, word [ecx + eax*2]
test cx, cx
je 0x40c2a5
mov word [esp + ebx*4 + 0xac], cx
mov word [esp + ebx*4 + 0xae], ax
inc ebx
lea eax, [esp + 0x52c]
push 0x800
push 0
push eax
call fcn.0040ccd0
add esp, 0xc
test ebx, ebx
sete byte [esp + 0xb]
je 0x40c360
xor eax, eax
cmp ebx, 1
je 0x40c31f
mov ecx, ebx
and ecx, 0xfffffffe
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, word [esp + eax*4 + 0xac]
movzx esi, dl
inc dword [esp + esi*4 + 0x52c]
shr edx, 8
inc dword [esp + edx*4 + 0x92c]
movzx edx, word [esp + eax*4 + 0xb0]
movzx esi, dl
inc dword [esp + esi*4 + 0x52c]
shr edx, 8
inc dword [esp + edx*4 + 0x92c]
add eax, 2
cmp ecx, eax
jne 0x40c2e0
test bl, 1
je 0x40c340
movzx eax, word [esp + eax*4 + 0xac]
movzx ecx, al
inc dword [esp + ecx*4 + 0x52c]
shr eax, 8
inc dword [esp + eax*4 + 0x92c]
mov eax, dword [esp + 0x92c]
jmp 0x40c369
lea eax, [esp + 0x52c]
push 0x800
push 0
push eax
call fcn.0040ccd0
add esp, 0xc
xor ebx, ebx
mov byte [esp + 0xb], 1
xor eax, eax
xor ecx, ecx
cmp eax, ebx
setne cl
inc ecx
mov dword [esp + 0x20], ecx
lea eax, [esp + 0xac]
mov dword [esp], eax
lea eax, [esp + 0x112c]
xor ecx, ecx
lea esi, [esp + 0x52c]
xor edx, edx
mov dword [esp + 4], ebx
jmp 0x40c3be
mov edx, dword [esp + 0x10]
inc edx
add ecx, 8
mov esi, dword [esp + 0x24]
add esi, 0x400
mov eax, edi
cmp edx, dword [esp + 0x20]
je 0x40c45d
mov dword [esp + 0x10], edx
mov edi, dword [esp]
mov dword [esp], eax
mov edx, 3
xor eax, eax
nop
mov dword [esp + edx*4 + 0xd20], eax
add eax, dword [esi + edx*4 - 0xc]
mov dword [esp + edx*4 + 0xd24], eax
add eax, dword [esi + edx*4 - 8]
mov dword [esp + edx*4 + 0xd28], eax
add eax, dword [esi + edx*4 - 4]
mov dword [esp + edx*4 + 0xd2c], eax
add eax, dword [esi + edx*4]
add edx, 4
cmp edx, 0x103
jne 0x40c3d0
mov dword [esp + 0x24], esi
cmp byte [esp + 0xb], 0
jne 0x40c3a0
xor edx, edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx eax, word [edi + edx*4]
shr eax, cl
movzx eax, al
mov ebp, dword [esp + eax*4 + 0xd2c]
mov ebx, dword [edi + edx*4]
mov esi, edi
mov edi, dword [esp]
mov dword [edi + ebp*4], ebx
mov edi, esi
mov ebx, ebp
and ebp, 1
xor ebx, 1
lea ebx, [ebx + ebp*2]
mov dword [esp + eax*4 + 0xd2c], ebx
mov ebx, dword [esp + 4]
inc edx
cmp ebx, edx
jne 0x40c420
jmp 0x40c3a0
test ebx, ebx
mov ebx, dword [esp + 0x15c4]
mov ebp, dword [esp + 0x18]
je 0x40c850
mov ecx, dword [esp + 4]
cmp ecx, 1
jne 0x40c486
mov eax, dword [esp]
mov word [eax], 1
jmp 0x40c738
mov edx, dword [esp]
movzx eax, word [edx + 4]
add word [edx], ax
cmp ecx, 3
jl 0x40c595
mov eax, 2
mov ebx, 2
sub ebx, ecx
xor edx, edx
mov esi, 1
jmp 0x40c4cc
mov ebp, dword [esp]
movzx edi, word [ebp + eax*4]
inc eax
add word [ebp + esi*4], di
lea ecx, [ebx + esi]
inc ecx
inc esi
cmp ecx, 1
je 0x40c5a4
mov ebp, dword [esp]
movzx ecx, word [ebp + edx*4]
cmp eax, dword [esp + 4]
jge 0x40c4e4
movzx edi, word [ebp + eax*4]
cmp cx, di
jae 0x40c510
mov word [ebp + esi*4], cx
mov word [ebp + edx*4], si
inc edx
cmp eax, dword [esp + 4]
jge 0x40c51c
cmp edx, esi
jge 0x40c4b0
mov ebp, dword [esp]
movzx ecx, word [ebp + edx*4]
movzx edi, word [ebp + eax*4]
cmp cx, di
jae 0x40c4b8
jmp 0x40c524
inc eax
mov word [ebp + esi*4], di
cmp eax, dword [esp + 4]
jl 0x40c4f5
mov ebp, dword [esp]
movzx ecx, word [ebp + edx*4]
add word [ebp + esi*4], cx
mov word [ebp + edx*4], si
inc edx
jmp 0x40c4be
mov ecx, esi
and ecx, 0x7ffffffe
mov eax, dword [esp + 0xc]
lea edx, [eax + ebp]
add edx, 0x8194
xor eax, eax
xor ebx, ebx
jmp 0x40c55b
add eax, 2
cmp ecx, eax
je 0x40c273
movzx esi, word [edx + eax*2 - 2]
test si, si
je 0x40c576
mov word [esp + ebx*4 + 0xac], si
mov word [esp + ebx*4 + 0xae], ax
inc ebx
movzx esi, word [edx + eax*2]
test si, si
je 0x40c550
mov word [esp + ebx*4 + 0xac], si
lea esi, [eax + 1]
mov word [esp + ebx*4 + 0xae], si
inc ebx
jmp 0x40c550
lea eax, [ecx - 2]
mov word [edx + ecx*4 - 8], 0
jmp 0x40c645
mov eax, dword [esp + 4]
mov edi, dword [esp]
mov word [edi + eax*4 - 8], 0
lea edx, [eax - 3]
and eax, 3
xor eax, 2
mov ecx, edx
je 0x40c5e1
mov ecx, edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx esi, word [edi + ecx*4]
movzx esi, word [edi + esi*4]
inc esi
mov word [edi + ecx*4], si
dec ecx
dec eax
jne 0x40c5d0
mov eax, dword [esp + 4]
add eax, 0xfffffffe
cmp edx, 3
jb 0x40c641
inc ecx
mov esi, dword [esp]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, word [esi + ecx*4 - 4]
movzx edx, word [esi + edx*4]
inc edx
mov word [esi + ecx*4 - 4], dx
movzx edx, word [esi + ecx*4 - 8]
movzx edx, word [esi + edx*4]
inc edx
mov word [esi + ecx*4 - 8], dx
movzx edx, word [esi + ecx*4 - 0xc]
movzx edx, word [esi + edx*4]
inc edx
mov word [esi + ecx*4 - 0xc], dx
movzx edx, word [esi + ecx*4 - 0x10]
movzx edx, word [esi + edx*4]
inc edx
mov word [esi + ecx*4 - 0x10], dx
add ecx, 0xfffffffc
jne 0x40c600
mov ecx, dword [esp + 4]
dec ecx
mov ebx, 1
xor edx, edx
jmp 0x40c66a
lea ebx, [ebp*2]
mov esi, edx
and esi, 1
xor edx, 1
lea edx, [edx + esi*2]
test ebp, ebp
jle 0x40c722
test eax, eax
js 0x40c6a0
lea ebp, [eax + 1]
xor edi, edi
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov esi, dword [esp]
movzx esi, word [esi + eax*4]
cmp edx, esi
jne 0x40c6b0
inc edi
dec eax
cmp ebp, edi
jne 0x40c680
mov eax, 0xffffffff
jmp 0x40c6b2
xor ebp, ebp
jmp 0x40c6b2
mov ebp, edi
mov esi, ebx
sub esi, ebp
jle 0x40c650
and esi, 3
je 0x40c6e7
mov dword [esp + 0x10], ebx
mov ebx, esi
mov esi, dword [esp]
lea edi, [esi + ecx*4]
xor esi, esi
nop
nop
nop
nop
nop
mov word [edi], dx
inc esi
add edi, 0xfffffffc
cmp ebx, esi
jne 0x40c6d0
mov ebx, dword [esp + 0x10]
mov edi, ebx
sub edi, esi
sub ecx, esi
jmp 0x40c6e9
mov edi, ebx
mov esi, ebp
sub esi, ebx
cmp esi, 0xfffffffc
mov esi, dword [esp]
ja 0x40c650
nop
nop
nop
nop
nop
nop
nop
mov word [esi + ecx*4], dx
mov word [esi + ecx*4 - 4], dx
mov word [esi + ecx*4 - 8], dx
mov word [esi + ecx*4 - 0xc], dx
add ecx, 0xfffffffc
add edi, 0xfffffffc
cmp edi, ebp
jg 0x40c700
jmp 0x40c650
cmp dword [esp + 4], 0
mov ebp, dword [esp + 0x18]
mov ebx, dword [esp + 0x15c4]
jle 0x40c850
mov eax, dword [esp + 4]
lea edx, [eax - 1]
and eax, 3
xor ecx, ecx
cmp edx, 3
mov edi, dword [esp]
jb 0x40c78a
mov edx, dword [esp + 4]
and edx, 0xfffffffc
xor ecx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx esi, word [edi + ecx*4]
inc dword [esp + esi*4 + 0x28]
movzx esi, word [edi + ecx*4 + 4]
inc dword [esp + esi*4 + 0x28]
movzx esi, word [edi + ecx*4 + 8]
inc dword [esp + esi*4 + 0x28]
movzx esi, word [edi + ecx*4 + 0xc]
inc dword [esp + esi*4 + 0x28]
add ecx, 4
cmp edx, ecx
jne 0x40c760
test eax, eax
je 0x40c7ad
mov edx, dword [esp]
lea ecx, [edx + ecx*4]
xor edx, edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx esi, word [ecx + edx*4]
inc dword [esp + esi*4 + 0x28]
inc edx
cmp eax, edx
jne 0x40c7a0
cmp dword [esp + 4], 2
jl 0x40c850
cmp ebx, 0x20
jge 0x40c820
mov eax, dword [esp + ebx*4 + 0x28]
mov edx, ebx
neg edx
mov ecx, ebx
and edx, 3
je 0x40c7dc
nop
nop
nop
nop
add eax, dword [esp + ecx*4 + 0x2c]
inc ecx
mov dword [esp + ebx*4 + 0x28], eax
dec edx
jne 0x40c7d0
lea edx, [ebx - 0x1d]
cmp edx, 3
jb 0x40c818
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
add eax, dword [esp + ecx*4 + 0x2c]
mov dword [esp + ebx*4 + 0x28], eax
add eax, dword [esp + ecx*4 + 0x30]
mov dword [esp + ebx*4 + 0x28], eax
add eax, dword [esp + ecx*4 + 0x34]
mov dword [esp + ebx*4 + 0x28], eax
add eax, dword [esp + ecx*4 + 0x38]
add ecx, 4
mov dword [esp + ebx*4 + 0x28], eax
cmp ecx, 0x20
jne 0x40c7f0
test ebx, ebx
jle 0x40cacd
lea edx, [ebx + 1]
xor ecx, ecx
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov esi, dword [esp + edx*4 + 0x24]
shl esi, cl
add eax, esi
dec edx
inc ecx
cmp edx, 1
ja 0x40c830
mov edx, 1
mov ecx, ebx
shl edx, cl
cmp eax, edx
jne 0x40cad8
mov esi, dword [esp + 0x1c]
shl esi, 5
mov edi, dword [esp + 0xc]
lea eax, [edi + esi]
add eax, 0x8f12
push 0x120
push 0
push eax
call fcn.0040ccd0
add esp, 0xc
lea eax, [edi + ebp]
add eax, 0x8852
push 0x240
push 0
push eax
call fcn.0040ccd0
add esp, 0xc
test ebx, ebx
mov ebp, dword [esp]
jle 0x40c970
add ebp, 0xfffffffe
mov eax, 1
add esi, dword [esp + 0xc]
mov dword [esp], ebp
jmp 0x40c8c5
mov edi, dword [esp + 4]
mov dword [esp + 4], edi
lea ecx, [eax + 1]
cmp eax, ebx
mov eax, ecx
je 0x40c970
mov ecx, dword [esp + eax*4 + 0x28]
test ecx, ecx
jle 0x40c8b0
mov edx, ecx
and edx, 3
je 0x40c920
mov edi, dword [esp + 4]
lea edi, [edi*4]
add edi, ebp
mov ebp, esi
xor esi, esi
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ebx, word [edi]
mov byte [ebx + ebp + 0x8f12], al
inc esi
add edi, 0xfffffffc
cmp edx, esi
jne 0x40c8f0
sub dword [esp + 4], esi
mov edx, ecx
sub edx, esi
mov ebx, dword [esp + 0x15c4]
mov esi, ebp
mov ebp, dword [esp]
jmp 0x40c922
mov edx, ecx
cmp ecx, 4
mov edi, dword [esp + 4]
jb 0x40c8b4
dec edx
nop
nop
nop
nop
movzx ecx, word [ebp + edi*4]
mov byte [ecx + esi + 0x8f12], al
movzx ecx, word [ebp + edi*4 - 4]
mov byte [ecx + esi + 0x8f12], al
movzx ecx, word [ebp + edi*4 - 8]
mov byte [ecx + esi + 0x8f12], al
movzx ecx, word [ebp + edi*4 - 0xc]
add edi, 0xfffffffc
mov byte [ecx + esi + 0x8f12], al
add edx, 0xfffffffc
cmp edx, 0xfffffffe
jb 0x40c930
jmp 0x40c8b4
mov ecx, dword [esp + 0x15c0]
mov dword [esp + 0x530], 0
cmp ebx, 2
jl 0x40c9ed
lea ecx, [ebx - 1]
cmp ebx, 2
jne 0x40c998
xor eax, eax
mov edx, 2
jmp 0x40c9d4
mov ebx, ecx
and ebx, 0xfffffffe
xor eax, eax
xor edx, edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
add eax, dword [esp + edx*4 + 0x2c]
add eax, eax
mov dword [esp + edx*4 + 0x534], eax
add eax, dword [esp + edx*4 + 0x30]
add eax, eax
mov dword [esp + edx*4 + 0x538], eax
add edx, 2
cmp ebx, edx
jne 0x40c9b0
add edx, 2
test cl, 1
mov ecx, dword [esp + 0x15c0]
je 0x40c9ed
add eax, dword [esp + edx*4 + 0x24]
add eax, eax
mov dword [esp + edx*4 + 0x52c], eax
test ecx, ecx
jle 0x40cac2
xor eax, eax
mov edx, dword [esp + 0x14]
lea edi, [edx + edx*8]
mov edx, edi
shl edx, 5
mov esi, dword [esp + 0xc]
add edx, esi
shl edi, 6
add edi, esi
mov dword [esp], edi
jmp 0x40ca3b
mov ecx, dword [esp]
mov word [ecx + eax*2 + 0x8852], di
mov ecx, dword [esp + 0x15c0]
inc eax
cmp eax, ecx
je 0x40cac2
movzx ebx, byte [eax + edx + 0x8f12]
test ebx, ebx
je 0x40ca32
mov ecx, dword [esp + ebx*4 + 0x52c]
lea edi, [ecx + 1]
mov dword [esp + ebx*4 + 0x52c], edi
xor edi, edi
cmp bl, 4
jb 0x40ca9f
mov ebp, ebx
and ebp, 0xfffffffc
xor edi, edi
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov esi, ecx
and esi, 1
shl esi, 2
lea esi, [esi + edi*8]
mov edi, ecx
and edi, 2
or edi, esi
mov esi, ecx
shr esi, 2
and esi, 1
or esi, edi
mov edi, ecx
shr edi, 3
and edi, 1
lea edi, [edi + esi*2]
shr ecx, 4
add ebp, 0xfffffffc
jne 0x40ca70
and ebx, 3
je 0x40ca20
nop
nop
nop
nop
nop
nop
nop
nop
mov esi, ecx
and esi, 1
lea edi, [esi + edi*2]
shr ecx, 1
dec ebx
jne 0x40cab0
jmp 0x40ca20
add esp, 0x15ac
pop esi
pop edi
pop ebx
pop ebp
ret
mov edx, 1
mov ecx, ebx
shl edx, cl
xor eax, eax
mov esi, ebx
xor esi, 1
mov ecx, ebx
and ecx, 0xfffffffe
add ecx, ecx
sub ecx, esi
lea esi, [ecx + 1]
mov dword [esp + 0x10], esi
jmp 0x40cb18
dec esi
mov dword [esp + edi*4 + 0x24], esi
mov esi, dword [esp + edi*4 + 0x28]
mov ebx, esi
and ebx, 2
xor esi, 2
lea esi, [esi + ebx*2]
mov ebx, dword [esp + 0x15c4]
mov dword [esp + edi*4 + 0x28], esi
dec eax
cmp eax, edx
je 0x40c850
dec dword [esp + ebx*4 + 0x28]
test ecx, ecx
jle 0x40cb0f
mov edi, dword [esp + 0x10]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov esi, dword [esp + edi*4 + 0x24]
test esi, esi
jne 0x40caf0
dec edi
cmp edi, 1
jg 0x40cb30
jmp 0x40cb0f