Function at 0x441f80
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x518
mov edi, dword [ebp + 8]
mov dword [esp + 0x188], 0x909f9e9d
mov eax, 0xc4e76de5
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [esp + eax + 0x3b1893a3]
mov ecx, eax
and ecx, edx
mov ebx, ecx
and ebx, 2
mov esi, ecx
or ecx, 2
imul ecx, ebx
xor ebx, 2
and esi, 0xffffffed
imul esi, ebx
add ecx, esi
add edx, eax
mov esi, ecx
xor esi, edx
not ecx
and ecx, edx
add ecx, ecx
sub ecx, esi
mov edx, 1
sub edx, ecx
or edx, 0xfe
or ecx, 1
sub ecx, edx
add cl, 0x85
mov byte [esp + eax + 0x3b1893a3], cl
inc eax
cmp eax, 0xc4e76de9
jne 0x441fb0
mov eax, dword [esp + 0x188]
mov ecx, dword [0x4504d8]
test ecx, ecx
je 0x44205a
xor edx, edx
mov esi, dword [0x4504dc]
nop
cmp dword [esi + edx*8], 0x89c57e52
je 0x442030
inc edx
cmp ecx, edx
jne 0x442020
jmp 0x44205a
mov ecx, dword [esi + edx*8 + 4]
cmp ecx, eax
je 0x44205a
lea eax, [esp + 0x10]
push 2
push 0
push 0
push eax
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 7
push dword [0x4504e0]
push ecx
call fcn.00440d90
add esp, 0x28
test eax, eax
js 0x442316
mov eax, dword [esp + 0x10]
mov dword [esp + 4], eax
mov dword [esp + 0x188], 0x909f9e9d
mov ecx, 0xc4e76de5
nop
nop
nop
nop
nop
nop
movzx esi, byte [esp + ecx + 0x3b1893a3]
mov edx, ecx
and edx, esi
mov ebx, edx
and ebx, 2
mov eax, edx
or edx, 2
imul edx, ebx
xor ebx, 2
and eax, 0xffffffed
imul eax, ebx
add edx, eax
add esi, ecx
mov eax, edx
xor eax, esi
not edx
and edx, esi
add edx, edx
sub edx, eax
mov eax, 1
sub eax, edx
or eax, 0xfe
or edx, 1
sub edx, eax
add dl, 0x85
mov byte [esp + ecx + 0x3b1893a3], dl
inc ecx
cmp ecx, 0xc4e76de9
jne 0x442080
mov esi, dword [esp + 0x188]
mov eax, dword [0x4504d8]
test eax, eax
je 0x44210c
xor ecx, ecx
mov edx, dword [0x4504dc]
nop
nop
cmp dword [edx + ecx*8], 0xc3cdc4a6
je 0x442100
inc ecx
cmp eax, ecx
jne 0x4420f0
jmp 0x44210c
mov eax, dword [edx + ecx*8 + 4]
cmp eax, esi
jne 0x442322
mov dword [esp], esi
mov eax, dword [esp + 0x190]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x194]
mov dword [esp + 0xc], eax
mov dword [esp + 0x68], 0x909f9e9d
mov ecx, 0xc4e76de5
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx eax, byte [esp + ecx + 0x3b189283]
mov edx, ecx
and edx, eax
mov esi, edx
and esi, 2
mov ebx, edx
or edx, 2
imul edx, esi
xor esi, 2
and ebx, 0xffffffed
imul ebx, esi
add edx, ebx
add eax, ecx
mov esi, edx
xor esi, eax
not edx
and edx, eax
add edx, edx
sub edx, esi
mov eax, 1
sub eax, edx
or eax, 0xfe
or edx, 1
sub edx, eax
add dl, 0x85
mov byte [esp + ecx + 0x3b189283], dl
inc ecx
cmp ecx, 0xc4e76de9
jne 0x442140
mov eax, dword [0x4504d8]
test eax, eax
mov esi, dword [esp]
je 0x4421dd
mov ecx, dword [esp + 0x68]
xor edx, edx
mov ebx, dword [0x4504dc]
nop
nop
cmp dword [ebx + edx*8], 0xb62b8d10
je 0x4421c0
inc edx
cmp eax, edx
jne 0x4421b0
jmp 0x4421dd
mov eax, dword [ebx + edx*8 + 4]
cmp eax, ecx
je 0x4421dd
push dword [esp + 4]
push 1
push dword [0x4504e0]
push eax
call fcn.00440d90
add esp, 0x10
test esi, esi
js 0x442316
lea eax, [esp + 0x188]
push 0x20
push eax
push dword [esp + 0x14]
push dword [esp + 0x14]
call fcn.00441d60
add esp, 0x10
test eax, eax
js 0x442316
lea eax, [esp + 0x10]
push 0x20
push eax
push dword [esp + 0x1ac]
push dword [esp + 0x1ac]
call fcn.00441d60
add esp, 0x10
test eax, eax
js 0x442316
mov eax, dword [esp + 0x1a0]
mov ecx, dword [esp + 0x1a4]
add eax, 0x10
mov dword [esp], eax
adc ecx, 0
mov dword [esp + 8], ecx
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x68], eax
jmp 0x44228d
cmp cx, dx
je 0x442355
push esi
call fcn.0043dc40
add esp, 4
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x6c]
mov edx, ecx
xor edx, dword [esp + 8]
mov esi, eax
xor esi, dword [esp]
or esi, edx
je 0x442316
push 0x68
lea edx, [esp + 0x6c]
push edx
push ecx
push eax
call fcn.00441d60
add esp, 0x10
test eax, eax
js 0x442316
movzx eax, word [esp + 0xc2]
push eax
call fcn.0043dbb0
add esp, 4
mov esi, eax
movzx eax, word [esp + 0xc2]
push eax
push esi
push dword [esp + 0xd4]
push dword [esp + 0xd4]
call fcn.00441d60
add esp, 0x10
test eax, eax
js 0x442269
xor eax, eax
nop
nop
nop
nop
nop
movzx ecx, word [edi + eax]
lea edx, [ecx - 0x41]
cmp dx, 0x1a
jae 0x4422f0
or ecx, 0x20
movzx edx, word [esi + eax]
lea ebx, [edx - 0x41]
cmp bx, 0x1a
jae 0x442300
or edx, 0x20
test cx, cx
je 0x442260
add eax, 2
cmp cx, dx
je 0x4422e0
jmp 0x442260
xor eax, eax
xor edx, edx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
lea ecx, [esp + 0x188]
push 0
push 0x30
push ecx
push 0
push dword [esp + 0x14]
push 5
push dword [0x4504e0]
push eax
call fcn.00440d90
add esp, 0x20
mov dword [esp], eax
mov eax, dword [esp + 0x10]
mov dword [esp + 4], eax
jmp 0x44210f
mov edi, dword [esp + 0x98]
mov ebx, dword [esp + 0x9c]
push esi
call fcn.0043dc40
mov edx, ebx
mov eax, edi
add esp, 4
jmp 0x44231a