Function at 0x441e2e
Capabilities:
Encode data using xor
Encrypt data using aes
Reference aes constants

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2c
push ebx
push esi
push edi
mov edi, ecx
cmp byte [edi + 4], 0
mov dword [ebp - 0x20], edi
jne 0x441e5d
push 0x4af9b0
lea ecx, [ebp - 0x2c]
call fcn.00451cad
push 0x4a9828
lea eax, [ebp - 0x2c]
push eax
call fcn.00450d6b
mov eax, dword [ebp + 8]
movzx ecx, byte [eax]
shl ecx, 0x18
inc eax
movzx edx, byte [eax]
shl edx, 0x10
or ecx, edx
xor edx, edx
inc eax
mov dh, byte [eax]
or ecx, edx
inc eax
movzx edx, byte [eax]
or ecx, edx
xor ecx, dword [edi + 0x1e8]
inc eax
movzx esi, byte [eax]
shl esi, 0x18
inc eax
movzx edx, byte [eax]
shl edx, 0x10
or esi, edx
xor edx, edx
inc eax
mov dh, byte [eax]
mov dword [ebp - 0x10], ecx
or esi, edx
inc eax
movzx edx, byte [eax]
or esi, edx
xor esi, dword [edi + 0x1ec]
inc eax
mov dword [ebp - 0xc], esi
movzx esi, byte [eax]
shl esi, 0x18
inc eax
movzx edx, byte [eax]
shl edx, 0x10
or esi, edx
xor edx, edx
inc eax
mov dh, byte [eax]
or esi, edx
inc eax
movzx edx, byte [eax]
or esi, edx
xor esi, dword [edi + 0x1f0]
inc eax
mov dword [ebp - 8], esi
movzx esi, byte [eax]
shl esi, 0x18
inc eax
movzx edx, byte [eax]
shl edx, 0x10
or esi, edx
xor edx, edx
inc eax
mov dh, byte [eax]
mov dl, byte [eax + 1]
mov eax, dword [edi + 0x3d0]
mov dword [ebp - 0x1c], eax
or edx, esi
xor edx, dword [edi + 0x1f4]
cmp eax, 1
mov dword [ebp - 4], edx
mov esi, 0xff
jle 0x442000
lea ebx, [edi + 0x210]
dec eax
mov dword [ebp + 8], ebx
mov dword [ebp - 0x14], eax
movzx eax, byte [ebp - 3]
movzx edx, byte [ebp - 9]
mov eax, dword [eax*4 + 0x496df0]
xor eax, dword [edx*4 + 0x4965f0]
movzx edx, byte [ebp - 0xe]
xor eax, dword [edx*4 + 0x4969f0]
mov edx, dword [ebp - 8]
movzx edi, byte [ebp - 0xa]
and edx, esi
xor eax, dword [edx*4 + 0x4971f0]
movzx edx, byte [ebp - 5]
xor eax, dword [ebx - 4]
mov dword [ebp - 0x18], edi
mov edi, dword [edx*4 + 0x4965f0]
mov edx, dword [ebp - 0x18]
xor edi, dword [edx*4 + 0x4969f0]
movzx edx, ch
xor edi, dword [edx*4 + 0x496df0]
mov edx, dword [ebp - 4]
and edx, esi
xor edi, dword [edx*4 + 0x4971f0]
movzx edx, byte [ebp - 1]
xor edi, dword [ebx]
movzx ebx, byte [ebp - 6]
mov edx, dword [edx*4 + 0x4965f0]
xor edx, dword [ebx*4 + 0x4969f0]
movzx ebx, byte [ebp - 0xb]
xor edx, dword [ebx*4 + 0x496df0]
movzx ebx, byte [ebp - 7]
and ecx, esi
xor edx, dword [ecx*4 + 0x4971f0]
mov ecx, dword [ebp + 8]
xor edx, dword [ecx + 4]
movzx ecx, byte [ebp - 2]
mov ecx, dword [ecx*4 + 0x4969f0]
xor ecx, dword [ebx*4 + 0x496df0]
movzx ebx, byte [ebp - 0xd]
xor ecx, dword [ebx*4 + 0x4965f0]
mov ebx, dword [ebp - 0xc]
and ebx, esi
xor ecx, dword [ebx*4 + 0x4971f0]
mov ebx, dword [ebp + 8]
xor ecx, dword [ebx - 8]
add ebx, 0x20
dec dword [ebp - 0x14]
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], edi
mov dword [ebp - 4], edx
mov dword [ebp + 8], ebx
jne 0x441f18
mov eax, dword [ebp - 0x1c]
mov edi, dword [ebp - 0x20]
shl eax, 5
lea edi, [eax + edi + 0x1e8]
mov edx, dword [edi]
movzx eax, byte [ebp - 0xd]
mov ebx, edx
sar ebx, 0x18
xor bl, byte [eax + 0x4954f0]
mov eax, dword [ebp + 0xc]
mov byte [eax], bl
movzx ebx, byte [ebp - 2]
mov dword [ebp + 8], edx
sar edx, 0x10
xor dl, byte [ebx + 0x4954f0]
mov ebx, dword [ebp + 8]
mov byte [eax + 1], dl
movzx edx, byte [ebp - 7]
sar ebx, 8
xor bl, byte [edx + 0x4954f0]
mov edx, dword [ebp - 0xc]
mov byte [eax + 2], bl
movzx ebx, byte [ebp - 9]
and edx, esi
mov dl, byte [edx + 0x4954f0]
xor dl, byte [ebp + 8]
mov byte [eax + 3], dl
mov edx, dword [edi + 4]
mov dword [ebp + 8], edx
sar edx, 0x18
xor dl, byte [ebx + 0x4954f0]
mov ebx, dword [ebp + 8]
mov byte [eax + 4], dl
movzx edx, byte [ebp - 0xe]
sar ebx, 0x10
xor bl, byte [edx + 0x4954f0]
movzx edx, byte [ebp - 3]
mov byte [eax + 5], bl
mov ebx, dword [ebp + 8]
sar ebx, 8
xor bl, byte [edx + 0x4954f0]
mov edx, dword [ebp - 8]
mov byte [eax + 6], bl
movzx ebx, byte [ebp - 5]
and edx, esi
mov dl, byte [edx + 0x4954f0]
xor dl, byte [ebp + 8]
mov byte [eax + 7], dl
mov edx, dword [edi + 8]
mov dword [ebp + 8], edx
sar edx, 0x18
xor dl, byte [ebx + 0x4954f0]
mov ebx, dword [ebp + 8]
mov byte [eax + 8], dl
movzx edx, byte [ebp - 0xa]
sar ebx, 0x10
xor bl, byte [edx + 0x4954f0]
movzx edx, ch
mov byte [eax + 9], bl
mov ebx, dword [ebp + 8]
sar ebx, 8
xor bl, byte [edx + 0x4954f0]
mov edx, dword [ebp - 4]
mov byte [eax + 0xa], bl
and edx, esi
mov dl, byte [edx + 0x4954f0]
xor dl, byte [ebp + 8]
mov byte [eax + 0xb], dl
mov edx, dword [edi + 0xc]
movzx edi, byte [ebp - 1]
mov ebx, edx
sar ebx, 0x18
xor bl, byte [edi + 0x4954f0]
movzx edi, byte [ebp - 6]
mov byte [eax + 0xc], bl
mov ebx, edx
sar ebx, 0x10
xor bl, byte [edi + 0x4954f0]
movzx edi, byte [ebp - 0xb]
mov byte [eax + 0xd], bl
mov ebx, edx
sar ebx, 8
xor bl, byte [edi + 0x4954f0]
and ecx, esi
mov byte [eax + 0xe], bl
mov cl, byte [ecx + 0x4954f0]
pop edi
xor cl, dl
pop esi
mov byte [eax + 0xf], cl
pop ebx
leave
ret 8