Function at 0x406840
Capabilities:
Encode data using xor

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x108
mov esi, dword [esp + 0x11c]
lea eax, [esi + 0x8f12]
push 0x90
push 8
push eax
call fcn.00408330
add esp, 0xc
lea eax, [esi + 0x8fa2]
push 0x70
push 9
push eax
call fcn.00408330
add esp, 0xc
mov dword [esi + 0x9012], 0x7070707
mov dword [esi + 0x9016], 0x7070707
mov dword [esi + 0x901a], 0x7070707
mov dword [esi + 0x901e], 0x7070707
mov dword [esi + 0x9022], 0x7070707
mov dword [esi + 0x9026], 0x7070707
mov dword [esi + 0x902e], 0x8080808
mov dword [esi + 0x902a], 0x8080808
mov dword [esi + 0x9032], 0x5050505
mov dword [esi + 0x9036], 0x5050505
mov dword [esi + 0x903a], 0x5050505
mov dword [esi + 0x903e], 0x5050505
mov dword [esi + 0x9042], 0x5050505
mov dword [esi + 0x9046], 0x5050505
mov dword [esi + 0x904a], 0x5050505
mov dword [esi + 0x904e], 0x5050505
lea eax, [esp + 0x84]
push 0x84
push 0
push eax
call fcn.00408330
add esp, 0xc
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ecx, byte [esi + eax + 0x8f12]
inc dword [esp + ecx*4 + 0x84]
mov ecx, eax
and ecx, 1
xor eax, 1
lea eax, [eax + ecx*2]
cmp eax, 0x120
jl 0x406940
mov dword [esp + 4], 0
mov eax, dword [esp + 0x88]
add eax, eax
mov dword [esp + 8], eax
add eax, dword [esp + 0x8c]
add eax, eax
mov dword [esp + 0xc], eax
add eax, dword [esp + 0x90]
add eax, eax
mov dword [esp + 0x10], eax
add eax, dword [esp + 0x94]
add eax, eax
mov dword [esp + 0x14], eax
add eax, dword [esp + 0x98]
add eax, eax
mov dword [esp + 0x18], eax
add eax, dword [esp + 0x9c]
add eax, eax
mov dword [esp + 0x1c], eax
add eax, dword [esp + 0xa0]
add eax, eax
mov dword [esp + 0x20], eax
add eax, dword [esp + 0xa4]
add eax, eax
mov dword [esp + 0x24], eax
add eax, dword [esp + 0xa8]
add eax, eax
mov dword [esp + 0x28], eax
add eax, dword [esp + 0xac]
add eax, eax
mov dword [esp + 0x2c], eax
add eax, dword [esp + 0xb0]
add eax, eax
mov dword [esp + 0x30], eax
add eax, dword [esp + 0xb4]
add eax, eax
mov dword [esp + 0x34], eax
add eax, dword [esp + 0xb8]
add eax, eax
mov dword [esp + 0x38], eax
add eax, dword [esp + 0xbc]
add eax, eax
mov dword [esp + 0x3c], eax
xor eax, eax
jmp 0x406a47
mov esi, dword [esp + 0x11c]
mov word [esi + eax*2 + 0x8852], bx
inc eax
cmp eax, 0x120
je 0x406ab8
movzx edx, byte [esi + eax + 0x8f12]
test edx, edx
je 0x406a3f
mov esi, dword [esp + edx*4]
lea ecx, [esi + 1]
mov dword [esp + edx*4], ecx
xor ebx, ebx
cmp edx, 1
je 0x406aa0
mov ebp, edx
and ebp, 0xfffffffe
xor edi, edi
nop
nop
nop
nop
nop
nop
mov ebx, esi
xor ebx, 0x7ffffffe
mov ecx, esi
or ecx, 1
and ecx, ebx
mov ebx, esi
shr ebx, 1
shl edi, 2
add ecx, ecx
or ecx, edi
mov edi, ebx
xor edi, 0xfffffffe
or ebx, 1
and ebx, edi
or ebx, ecx
shr esi, 2
mov edi, ebx
add ebp, 0xfffffffe
jne 0x406a70
test dl, 1
je 0x406a30
add ebx, ebx
mov ecx, esi
xor ecx, 0xfffffffe
or esi, 1
and esi, ecx
or ebx, esi
jmp 0x406a30
push 0x84
push 0
lea eax, [esp + 0x8c]
push eax
call fcn.00408330
add esp, 0xc
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ecx, byte [esi + eax + 0x9032]
inc dword [esp + ecx*4 + 0x84]
mov ecx, eax
and ecx, 1
xor eax, 1
lea ecx, [eax + ecx*2]
movzx edx, byte [esi + ecx + 0x9032]
inc dword [esp + edx*4 + 0x84]
and eax, 1
xor ecx, 1
lea eax, [ecx + eax*2]
cmp eax, 0x20
jl 0x406ae0
mov dword [esp + 4], 0
mov eax, dword [esp + 0x88]
add eax, eax
mov dword [esp + 8], eax
add eax, dword [esp + 0x8c]
add eax, eax
mov dword [esp + 0xc], eax
add eax, dword [esp + 0x90]
add eax, eax
mov dword [esp + 0x10], eax
add eax, dword [esp + 0x94]
add eax, eax
mov dword [esp + 0x14], eax
add eax, dword [esp + 0x98]
add eax, eax
mov dword [esp + 0x18], eax
add eax, dword [esp + 0x9c]
add eax, eax
mov dword [esp + 0x1c], eax
add eax, dword [esp + 0xa0]
add eax, eax
mov dword [esp + 0x20], eax
add eax, dword [esp + 0xa4]
add eax, eax
mov dword [esp + 0x24], eax
add eax, dword [esp + 0xa8]
add eax, eax
mov dword [esp + 0x28], eax
add eax, dword [esp + 0xac]
add eax, eax
mov dword [esp + 0x2c], eax
add eax, dword [esp + 0xb0]
add eax, eax
mov dword [esp + 0x30], eax
add eax, dword [esp + 0xb4]
add eax, eax
mov dword [esp + 0x34], eax
add eax, dword [esp + 0xb8]
add eax, eax
mov dword [esp + 0x38], eax
add eax, dword [esp + 0xbc]
add eax, eax
mov dword [esp + 0x3c], eax
xor eax, eax
jmp 0x406bf5
mov esi, dword [esp + 0x11c]
mov word [esi + eax*2 + 0x8a92], di
inc eax
cmp eax, 0x20
je 0x406c68
movzx edx, byte [esi + eax + 0x9032]
test edx, edx
je 0x406bef
mov ecx, dword [esp + edx*4]
lea esi, [ecx + 1]
mov dword [esp + edx*4], esi
xor edi, edi
cmp edx, 1
je 0x406c50
mov ebx, edx
and ebx, 0xfffffffe
xor ebp, ebp
nop
nop
nop
nop
nop
nop
nop
nop
mov edi, ecx
xor edi, 0x7ffffffe
mov esi, ecx
or esi, 1
and esi, edi
mov edi, ecx
shr edi, 1
shl ebp, 2
add esi, esi
or esi, ebp
mov ebp, edi
xor ebp, 0xfffffffe
or edi, 1
and edi, ebp
or edi, esi
shr ecx, 2
mov ebp, edi
add ebx, 0xfffffffe
jne 0x406c20
test dl, 1
je 0x406be0
add edi, edi
mov edx, ecx
xor edx, 0xfffffffe
or ecx, 1
and ecx, edx
or edi, ecx
jmp 0x406be0
mov ecx, dword [esi + 0x44]
mov eax, dword [esi + 0x48]
bts eax, ecx
mov dword [esi + 0x48], eax
add ecx, 2
mov dword [esi + 0x44], ecx
cmp ecx, 8
jae 0x406ca1
add esp, 0x108
pop esi
pop edi
pop ebx
pop ebp
ret
shr eax, 8
mov dword [esi + 0x48], eax
add ecx, 0xfffffff8
mov dword [esi + 0x44], ecx
cmp ecx, 7
jbe 0x406c7f
mov edx, dword [esi + 0x30]
cmp edx, dword [esi + 0x34]
jae 0x406c90
lea ecx, [edx + 1]
mov dword [esi + 0x30], ecx
mov byte [edx], al
mov ecx, dword [esi + 0x44]
mov eax, dword [esi + 0x48]
jmp 0x406c90