Function at 0x441b29
Capabilities:
Encode data using xor
Encrypt data using aes
Reference aes constants

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
push ebx
push esi
push edi
mov edi, ecx
cmp byte [edi + 4], 0
mov dword [ebp - 0x1c], edi
jne 0x441b58
push 0x4af9b0
lea ecx, [ebp - 0x28]
call fcn.00451cad
push 0x4a9828
lea eax, [ebp - 0x28]
push eax
call fcn.00450d6b
mov eax, dword [ebp + 8]
movzx ebx, byte [eax]
shl ebx, 0x18
inc eax
movzx ecx, byte [eax]
shl ecx, 0x10
or ebx, ecx
xor ecx, ecx
inc eax
mov ch, byte [eax]
or ebx, ecx
inc eax
movzx ecx, byte [eax]
or ebx, ecx
xor ebx, dword [edi + 8]
inc eax
movzx esi, byte [eax]
shl esi, 0x18
inc eax
movzx ecx, byte [eax]
shl ecx, 0x10
or esi, ecx
xor ecx, ecx
inc eax
mov ch, byte [eax]
mov dword [ebp - 0xc], ebx
or esi, ecx
inc eax
movzx ecx, byte [eax]
or esi, ecx
xor esi, dword [edi + 0xc]
inc eax
movzx edx, byte [eax]
shl edx, 0x18
inc eax
movzx ecx, byte [eax]
shl ecx, 0x10
or edx, ecx
xor ecx, ecx
inc eax
mov ch, byte [eax]
mov dword [ebp - 8], esi
or edx, ecx
inc eax
movzx ecx, byte [eax]
or edx, ecx
xor edx, dword [edi + 0x10]
inc eax
movzx esi, byte [eax]
shl esi, 0x18
inc eax
movzx ecx, byte [eax]
shl ecx, 0x10
or esi, ecx
xor ecx, ecx
inc eax
mov ch, byte [eax]
mov dword [ebp - 0x10], edx
mov cl, byte [eax + 1]
mov eax, dword [edi + 0x3d0]
mov dword [ebp - 0x18], eax
or ecx, esi
xor ecx, dword [edi + 0x14]
cmp eax, 1
mov dword [ebp - 4], ecx
mov esi, 0xff
jle 0x441cf4
add edi, 0x30
dec eax
mov dword [ebp + 8], edi
mov dword [ebp - 0x14], eax
movzx eax, byte [ebp - 3]
movzx ecx, byte [ebp - 0xe]
mov eax, dword [eax*4 + 0x495df0]
xor eax, dword [ecx*4 + 0x4959f0]
movzx ecx, byte [ebp - 5]
xor eax, dword [ecx*4 + 0x4955f0]
movzx edi, byte [ebp - 0xd]
mov ecx, ebx
and ecx, esi
xor eax, dword [ecx*4 + 0x4961f0]
mov ecx, dword [ebp + 8]
xor eax, dword [ecx - 4]
movzx ecx, byte [ebp - 2]
mov dword [ebp - 0x10], edi
mov edi, dword [ecx*4 + 0x4959f0]
mov ecx, dword [ebp - 0x10]
xor edi, dword [ecx*4 + 0x4955f0]
movzx ecx, bh
xor edi, dword [ecx*4 + 0x495df0]
mov ecx, dword [ebp - 8]
movzx ebx, byte [ebp - 7]
and ecx, esi
xor edi, dword [ecx*4 + 0x4961f0]
mov ecx, dword [ebp + 8]
xor edi, dword [ecx]
movzx ecx, byte [ebp - 1]
mov ecx, dword [ecx*4 + 0x4955f0]
xor ecx, dword [ebx*4 + 0x495df0]
movzx ebx, byte [ebp - 0xa]
xor ecx, dword [ebx*4 + 0x4959f0]
mov ebx, edx
and ebx, esi
xor ecx, dword [ebx*4 + 0x4961f0]
mov ebx, dword [ebp + 8]
xor ecx, dword [ebx + 4]
movzx ebx, byte [ebp - 6]
movzx edx, dh
mov edx, dword [edx*4 + 0x495df0]
xor edx, dword [ebx*4 + 0x4959f0]
movzx ebx, byte [ebp - 9]
xor edx, dword [ebx*4 + 0x4955f0]
mov ebx, dword [ebp - 4]
and ebx, esi
xor edx, dword [ebx*4 + 0x4961f0]
mov ebx, dword [ebp + 8]
xor edx, dword [ebx - 8]
add dword [ebp + 8], 0x20
dec dword [ebp - 0x14]
mov ebx, edx
mov edx, edi
mov dword [ebp - 0xc], ebx
mov dword [ebp - 8], eax
mov dword [ebp - 0x10], edx
mov dword [ebp - 4], ecx
jne 0x441c04
mov eax, dword [ebp - 0x18]
mov edi, dword [ebp - 0x1c]
shl eax, 5
lea edi, [eax + edi + 8]
mov ecx, dword [edi]
movzx eax, byte [ebp - 9]
mov ebx, ecx
sar ebx, 0x18
xor bl, byte [eax + str.cw]
mov eax, dword [ebp + 0xc]
mov byte [eax], bl
movzx ebx, byte [ebp - 6]
mov dword [ebp + 8], ecx
sar ecx, 0x10
xor cl, byte [ebx + str.cw]
mov ebx, dword [ebp + 8]
mov byte [eax + 1], cl
sar ebx, 8
movzx ecx, dh
xor bl, byte [ecx + str.cw]
mov ecx, dword [ebp - 4]
mov byte [eax + 2], bl
movzx ebx, byte [ebp - 5]
and ecx, esi
mov cl, byte [ecx + str.cw]
xor cl, byte [ebp + 8]
mov byte [eax + 3], cl
mov ecx, dword [edi + 4]
mov dword [ebp + 8], ecx
sar ecx, 0x18
xor cl, byte [ebx + str.cw]
mov ebx, dword [ebp + 8]
mov byte [eax + 4], cl
movzx ecx, byte [ebp - 0xe]
sar ebx, 0x10
xor bl, byte [ecx + str.cw]
movzx ecx, byte [ebp - 3]
mov byte [eax + 5], bl
mov ebx, dword [ebp + 8]
sar ebx, 8
xor bl, byte [ecx + str.cw]
mov ecx, dword [ebp - 0xc]
mov byte [eax + 6], bl
movzx ebx, byte [ebp - 0xd]
and ecx, esi
mov cl, byte [ecx + str.cw]
xor cl, byte [ebp + 8]
mov byte [eax + 7], cl
mov ecx, dword [edi + 8]
mov dword [ebp + 8], ecx
sar ecx, 0x18
xor cl, byte [ebx + str.cw]
mov ebx, dword [ebp + 8]
mov byte [eax + 8], cl
movzx ecx, byte [ebp - 2]
sar ebx, 0x10
xor bl, byte [ecx + str.cw]
movzx ecx, byte [ebp - 0xb]
mov byte [eax + 9], bl
mov ebx, dword [ebp + 8]
sar ebx, 8
xor bl, byte [ecx + str.cw]
mov ecx, dword [ebp - 8]
mov byte [eax + 0xa], bl
and ecx, esi
mov cl, byte [ecx + str.cw]
xor cl, byte [ebp + 8]
mov byte [eax + 0xb], cl
mov ecx, dword [edi + 0xc]
movzx edi, byte [ebp - 1]
mov ebx, ecx
sar ebx, 0x18
xor bl, byte [edi + str.cw]
movzx edi, byte [ebp - 0xa]
mov byte [eax + 0xc], bl
mov ebx, ecx
sar ebx, 0x10
xor bl, byte [edi + str.cw]
movzx edi, byte [ebp - 7]
mov byte [eax + 0xd], bl
mov ebx, ecx
sar ebx, 8
xor bl, byte [edi + str.cw]
and edx, esi
mov byte [eax + 0xe], bl
mov dl, byte [edx + str.cw]
pop edi
xor dl, cl
pop esi
mov byte [eax + 0xf], dl
pop ebx
leave
ret 8