Function at 0x41ef60
Capabilities:
Encode data using xor

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x54
mov ebp, dword [esp + 0x6c]
mov ebx, dword [ebp + 4]
mov ecx, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, ecx
cmp word [ebx + ecx + 2], 0
lea ecx, [ecx + 2]
jne 0x41ef80
mov eax, dword [esp + 0x70]
mov edi, dword [eax + 4]
mov eax, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
cmp word [edi + eax + 2], 0
lea eax, [eax + 2]
jne 0x41efa0
sar ecx, 1
sar eax, 1
lea edx, [ecx + eax]
mov dword [esp + 0x4c], eax
add eax, ecx
add eax, 0x1b
test eax, eax
mov dword [esp + 0x50], ecx
mov dword [esp + 0x48], edx
jns 0x41efce
mov eax, 0xffffffff
jmp 0x41efd5
lea eax, [edx*2 + 0x36]
push eax
call fcn.00408380
add esp, 4
mov dword [esp + 0x44], eax
mov dword [esp + 8], 0x1fd219c4
mov dword [esp + 0xc], 0xe3451daf
mov dword [esp + 0x10], 0xe74ae141
mov dword [esp + 0x14], 0xeb2fe504
mov dword [esp + 0x18], 0xef5ae950
mov dword [esp + 0x1c], 0xf340ed49
mov dword [esp + 0x20], 0xf75ff147
mov dword [esp + 0x24], 0xfb48f547
mov dword [esp + 0x28], 0xff29f918
mov dword [esp + 0x2c], 0xc376fd59
mov dword [esp + 0x30], 0xc76fc174
mov dword [esp + 0x34], 0xcb61c576
mov dword [esp + 0x38], 0xcf12c97f
mov word [esp + 0x3c], 0xcdcc
mov dword [esp + 0x3e], 0
mov byte [esp + 0x42], 0
mov eax, 0xfa
mov ecx, 0xd9624905
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [esp + eax - 0xf2]
mov esi, eax
xor esi, ecx
and esi, edx
xor esi, ecx
mov edx, esi
not edx
and edx, 0x1d
xor esi, 0xe2
lea edx, [esi + edx*2]
inc dl
mov byte [esp + eax - 0xf2], dl
inc eax
dec ecx
cmp eax, 0x135
jne 0x41f070
movzx ecx, word [ebx]
mov edx, dword [esp + 0x44]
mov eax, edx
test cx, cx
je 0x41f0d1
add ebx, 2
mov eax, edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [ebx]
add ebx, 2
test cx, cx
jne 0x41f0c0
mov word [eax], 0
movzx ecx, word [esp + 8]
test cx, cx
je 0x41f101
lea edx, [esp + 0xa]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x41f0f0
mov word [eax], 0
movzx ecx, word [edi]
test cx, cx
je 0x41f131
add edi, 2
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edi]
add edi, 2
test cx, cx
jne 0x41f120
mov word [eax], 0
mov esi, dword [ebp]
mov eax, 0xfffffffe
nop
nop
cmp word [esi + eax + 2], 0
lea eax, [eax + 2]
jne 0x41f140
mov ebp, dword [ebp + 8]
mov ecx, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp word [ebp + ecx + 2], 0
lea ecx, [ecx + 2]
jne 0x41f160
mov edx, dword [esp + 0x70]
mov ebx, dword [edx]
mov edx, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp word [ebx + edx + 2], 0
lea edx, [edx + 2]
jne 0x41f180
sar eax, 1
sar ecx, 1
sar edx, 1
add ecx, eax
lea eax, [edx + ecx]
add eax, 0x13
test eax, eax
jns 0x41f1a4
mov eax, 0xffffffff
jmp 0x41f1ad
add ecx, edx
lea eax, [ecx*2 + 0x26]
push eax
call fcn.00408380
add esp, 4
mov edi, eax
movzx eax, word [esi]
mov dword [esp + 4], edi
test ax, ax
je 0x41f1e1
add esi, 2
mov edi, dword [esp + 4]
nop
nop
nop
nop
nop
mov word [edi], ax
add edi, 2
movzx eax, word [esi]
add esi, 2
test ax, ax
jne 0x41f1d0
mov word [edi], 0x2f
mov dword [esp + 8], 0xb7fb89db
mov dword [esp + 0xc], 0xb32eb52c
mov dword [esp + 0x10], 0xbf2cb1dd
mov dword [esp + 0x14], 0xbbd3bd23
mov dword [esp + 0x18], 0xa734b92b
mov dword [esp + 0x1c], 0xa3f1a53b
mov word [esp + 0x20], 0xa1a0
mov dword [esp + 0x22], 0
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [esp + eax + 8]
lea ecx, [eax + 0x1e]
and ecx, edx
add ecx, ecx
add edx, eax
sub ecx, edx
lea esi, [ecx*2 - 0x6839b43c]
add ecx, 0x4be325e2
and esi, 0x2e
xor ecx, 0x7b6fbd68
inc ecx
mov edx, ecx
sub edx, esi
and ecx, 1
or edx, 1
add edx, ecx
mov byte [esp + eax + 8], dl
mov ecx, eax
and ecx, 1
xor eax, 1
lea eax, [eax + ecx*2]
cmp eax, 0x1e
jb 0x41f230
add edi, 2
movzx eax, word [ebp]
test ax, ax
je 0x41f2a2
add ebp, 2
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [edi], ax
add edi, 2
movzx eax, word [ebp]
add ebp, 2
test ax, ax
jne 0x41f290
mov word [edi], 0
movzx eax, word [esp + 8]
test ax, ax
je 0x41f2d1
lea ecx, [esp + 0xa]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [edi], ax
add edi, 2
movzx eax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41f2c0
mov word [edi], 0
movzx eax, word [ebx]
test ax, ax
je 0x41f301
add ebx, 2
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [edi], ax
add edi, 2
movzx eax, word [ebx]
add ebx, 2
test ax, ax
jne 0x41f2f0
mov word [edi], 0
mov dword [esp + 8], 0x514e4f66
mov word [esp + 0xc], 0
mov byte [esp + 0xe], 0
mov eax, 0x88db398d
nop
movzx esi, byte [esp + eax + 0x7724c67b]
mov edx, eax
and edx, esi
mov ebx, edx
and ebx, 2
mov ebp, edx
or ebp, 0xfffffffd
inc ebp
mov ecx, edx
and ecx, 0xffffff9d
imul ecx, ebp
or edx, 2
imul edx, ebx
add ecx, esi
sub ecx, edx
add ecx, eax
mov edx, ecx
and edx, 0x3e
add edx, edx
xor ecx, 0xc1
sub edx, ecx
mov byte [esp + eax + 0x7724c67b], dl
inc eax
cmp eax, 0x88db3994
jne 0x41f320
lea ebx, [esp + 8]
push 0
push 0
push 0xc00000
push ebx
mov esi, dword [esp + 0x54]
push esi
push dword [esp + 0x18]
push dword [esp + 0x80]
call fcn.00422fa0
add esp, 0x1c
mov byte [esp + 3], al
jmp dword [0x446e78]