Function at 0x40ff6b
Capabilities:
Encode data using xor
Encrypt data using aes
Reference aes constants

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push esi
mov esi, dword [ebp + 8]
mov eax, dword [esi + 0xf0]
shr eax, 1
cmp eax, 7
mov dword [ebp - 0x10], eax
ja 0x4104c4
test eax, eax
je 0x4104c4
push ebx
mov ebx, dword [ebp + 0xc]
push edi
push 4
pop edi
lea eax, [ebp + 8]
push edi
push ebx
push eax
call sub.MSVCRT.dll_memcpy
lea eax, [ebx + 4]
push edi
push eax
lea eax, [ebp + 0xc]
push eax
call sub.MSVCRT.dll_memcpy
lea eax, [ebx + 8]
push edi
push eax
lea eax, [ebp - 4]
push eax
call sub.MSVCRT.dll_memcpy
add ebx, 0xc
push edi
lea eax, [ebp - 8]
push ebx
push eax
call sub.MSVCRT.dll_memcpy
add esp, 0x30
push dword [ebp + 8]
call fcn.0040f93d
push dword [ebp + 0xc]
mov dword [ebp + 8], eax
call fcn.0040f93d
push dword [ebp - 4]
mov dword [ebp + 0xc], eax
call fcn.0040f93d
push dword [ebp - 8]
mov dword [ebp - 4], eax
call fcn.0040f93d
mov ecx, dword [ebp - 4]
xor eax, dword [esi + 0xc]
xor ecx, dword [esi + 8]
mov edi, dword [ebp + 8]
mov ebx, eax
xor edi, dword [esi]
mov dword [ebp - 4], ecx
mov edx, dword [ebp + 0xc]
shr ebx, 0x10
shr ecx, 8
movzx ebx, bl
movzx ecx, cl
mov dword [ebp - 0xc], ecx
mov ecx, dword [ebx*4 + 0x41bf2c]
mov ebx, dword [ebp - 0xc]
xor edx, dword [esi + 4]
mov dword [ebp + 8], edi
xor ecx, dword [ebx*4 + 0x41c32c]
mov ebx, edi
shr ebx, 0x18
mov dword [ebp + 0xc], edx
xor ecx, dword [ebx*4 + 0x41bb2c]
movzx ebx, dl
xor ecx, dword [ebx*4 + 0x41c72c]
mov ebx, edx
shr ebx, 0x18
xor ecx, dword [esi + 0x10]
mov dword [ebp - 8], ecx
mov ecx, eax
shr ecx, 8
movzx ecx, cl
mov ecx, dword [ecx*4 + 0x41c32c]
xor ecx, dword [ebx*4 + 0x41bb2c]
mov ebx, edi
shr ebx, 0x10
movzx ebx, bl
xor ecx, dword [ebx*4 + 0x41bf2c]
movzx ebx, byte [ebp - 4]
xor ecx, dword [ebx*4 + 0x41c72c]
mov ebx, dword [ebp - 4]
xor ecx, dword [esi + 0x14]
shr edx, 0x10
movzx edx, dl
shr ebx, 0x18
mov dword [ebp - 0xc], edx
add esi, 0x20
mov edx, dword [ebx*4 + 0x41bb2c]
mov ebx, dword [ebp - 0xc]
xor edx, dword [ebx*4 + 0x41bf2c]
mov ebx, edi
shr ebx, 8
movzx edi, bl
mov ebx, dword [ebp - 4]
mov dword [ebp - 4], esi
xor edx, dword [edi*4 + 0x41c32c]
movzx edi, al
shr ebx, 0x10
xor edx, dword [edi*4 + 0x41c72c]
shr eax, 0x18
movzx edi, bl
mov ebx, dword [ebp + 0xc]
mov eax, dword [eax*4 + 0x41bb2c]
xor eax, dword [edi*4 + 0x41bf2c]
xor edx, dword [esi - 8]
shr ebx, 8
movzx edi, bl
xor eax, dword [edi*4 + 0x41c32c]
movzx edi, byte [ebp + 8]
xor eax, dword [edi*4 + 0x41c72c]
mov edi, dword [ebp - 0x10]
xor eax, dword [esi - 4]
dec edi
je 0x4102fe
mov dword [ebp - 0xc], edi
mov ebx, eax
shr ebx, 0x10
movzx esi, bl
mov ebx, edx
mov esi, dword [esi*4 + 0x41bf2c]
shr ebx, 8
movzx edi, bl
mov ebx, eax
xor esi, dword [edi*4 + 0x41c32c]
mov edi, dword [ebp - 8]
shr edi, 0x18
mov dword [ebp + 8], esi
xor esi, dword [edi*4 + 0x41bb2c]
movzx edi, cl
shr ebx, 8
xor esi, dword [edi*4 + 0x41c72c]
mov edi, dword [ebp - 4]
xor esi, dword [edi]
mov edi, ecx
shr edi, 0x18
mov dword [ebp + 8], esi
movzx esi, bl
mov ebx, dword [ebp - 8]
mov esi, dword [esi*4 + 0x41c32c]
xor esi, dword [edi*4 + 0x41bb2c]
shr ebx, 0x10
movzx edi, bl
mov dword [ebp + 0xc], esi
mov ebx, ecx
xor esi, dword [edi*4 + 0x41bf2c]
movzx edi, dl
shr ebx, 0x10
xor esi, dword [edi*4 + 0x41c72c]
mov edi, dword [ebp - 4]
shr ecx, 8
xor esi, dword [edi + 4]
movzx edi, bl
mov dword [ebp + 0xc], esi
mov ebx, dword [ebp - 8]
mov esi, edx
shr esi, 0x18
shr ebx, 8
mov esi, dword [esi*4 + 0x41bb2c]
xor esi, dword [edi*4 + 0x41bf2c]
shr edx, 0x10
mov dword [ebp - 0x10], esi
movzx esi, bl
mov ebx, dword [ebp - 0x10]
xor ebx, dword [esi*4 + 0x41c32c]
movzx esi, al
shr eax, 0x18
movzx edx, dl
mov eax, dword [eax*4 + 0x41bb2c]
xor ebx, dword [esi*4 + 0x41c72c]
xor eax, dword [edx*4 + 0x41bf2c]
mov esi, dword [ebp - 4]
movzx ecx, cl
xor ebx, dword [esi + 8]
xor eax, dword [ecx*4 + 0x41c32c]
movzx ecx, byte [ebp - 8]
mov edx, ebx
xor eax, dword [ecx*4 + 0x41c72c]
shr edx, 8
xor eax, dword [esi + 0xc]
movzx edx, dl
mov ecx, eax
shr ecx, 0x10
movzx ecx, cl
mov ecx, dword [ecx*4 + 0x41bf2c]
xor ecx, dword [edx*4 + 0x41c32c]
mov edx, dword [ebp + 8]
shr edx, 0x18
xor ecx, dword [edx*4 + 0x41bb2c]
movzx edx, byte [ebp + 0xc]
xor ecx, dword [edx*4 + 0x41c72c]
mov edx, dword [ebp + 0xc]
xor ecx, dword [esi + 0x10]
mov dword [ebp - 8], ecx
mov ecx, eax
shr ecx, 8
movzx ecx, cl
mov ecx, dword [ecx*4 + 0x41c32c]
mov edi, ebx
shr edx, 0x18
shr edi, 0x18
xor ecx, dword [edx*4 + 0x41bb2c]
mov edx, dword [ebp + 8]
shr edx, 0x10
movzx edx, dl
mov edi, dword [edi*4 + 0x41bb2c]
add esi, 0x20
xor ecx, dword [edx*4 + 0x41bf2c]
mov dword [ebp - 4], esi
movzx edx, bl
shr ebx, 0x10
xor ecx, dword [edx*4 + 0x41c72c]
mov edx, dword [ebp + 0xc]
shr edx, 0x10
movzx edx, dl
xor ecx, dword [esi - 0xc]
xor edi, dword [edx*4 + 0x41bf2c]
mov edx, dword [ebp + 8]
shr edx, 8
movzx edx, dl
xor edi, dword [edx*4 + 0x41c32c]
movzx edx, al
shr eax, 0x18
xor edi, dword [edx*4 + 0x41c72c]
xor edi, dword [esi - 8]
mov edx, edi
movzx edi, bl
mov ebx, dword [eax*4 + 0x41bb2c]
mov eax, dword [ebp + 0xc]
xor ebx, dword [edi*4 + 0x41bf2c]
shr eax, 8
movzx eax, al
xor ebx, dword [eax*4 + 0x41c32c]
movzx eax, byte [ebp + 8]
xor ebx, dword [eax*4 + 0x41c72c]
xor ebx, dword [esi - 4]
dec dword [ebp - 0xc]
mov eax, ebx
jne 0x410114
mov ebx, eax
shr ebx, 0x10
movzx edi, bl
mov ebx, edx
mov edi, dword [edi*4 + str.RRRR_t_t_t_tjjjj]
shr ebx, 8
movzx ebx, bl
and edi, 0xff0000
mov ebx, dword [ebx*4 + str.RRRR_t_t_t_tjjjj]
and ebx, 0xff00
xor edi, ebx
mov ebx, dword [ebp - 8]
shr ebx, 0x18
mov ebx, dword [ebx*4 + str.RRRR_t_t_t_tjjjj]
and ebx, 0xff000000
xor edi, ebx
movzx ebx, cl
mov ebx, dword [ebx*4 + str.RRRR_t_t_t_tjjjj]
and ebx, 0xff
xor edi, ebx
mov ebx, dword [ebp - 8]
xor edi, dword [esi]
shr ebx, 0x10
mov dword [ebp + 8], edi
movzx edi, bl
mov ebx, eax
mov edi, dword [edi*4 + str.RRRR_t_t_t_tjjjj]
shr ebx, 8
movzx ebx, bl
and edi, 0xff0000
mov ebx, dword [ebx*4 + str.RRRR_t_t_t_tjjjj]
and ebx, 0xff00
xor edi, ebx
mov ebx, ecx
shr ebx, 0x18
mov ebx, dword [ebx*4 + str.RRRR_t_t_t_tjjjj]
and ebx, 0xff000000
xor edi, ebx
movzx ebx, dl
mov ebx, dword [ebx*4 + str.RRRR_t_t_t_tjjjj]
and ebx, 0xff
xor edi, ebx
mov ebx, ecx
xor edi, dword [esi + 4]
shr ebx, 0x10
mov dword [ebp + 0xc], edi
movzx edi, bl
mov ebx, edx
mov edi, dword [edi*4 + str.RRRR_t_t_t_tjjjj]
shr ebx, 0x18
and edi, 0xff0000
mov ebx, dword [ebx*4 + str.RRRR_t_t_t_tjjjj]
and ebx, 0xff000000
xor edi, ebx
mov ebx, dword [ebp - 8]
shr ebx, 8
movzx ebx, bl
shr edx, 0x10
mov ebx, dword [ebx*4 + str.RRRR_t_t_t_tjjjj]
and ebx, 0xff00
xor edi, ebx
movzx edx, dl
movzx ebx, al
mov edx, dword [edx*4 + str.RRRR_t_t_t_tjjjj]
shr eax, 0x18
mov ebx, dword [ebx*4 + str.RRRR_t_t_t_tjjjj]
and edx, 0xff0000
mov eax, dword [eax*4 + str.RRRR_t_t_t_tjjjj]
and ebx, 0xff
and eax, 0xff000000
xor edi, ebx
shr ecx, 8
xor edx, eax
xor edi, dword [esi + 8]
movzx eax, cl
mov dword [ebp - 4], edi
mov eax, dword [eax*4 + str.RRRR_t_t_t_tjjjj]
and eax, 0xff00
xor edx, eax
movzx eax, byte [ebp - 8]
mov eax, dword [eax*4 + str.RRRR_t_t_t_tjjjj]
push dword [ebp + 8]
and eax, 0xff
xor edx, eax
xor edx, dword [esi + 0xc]
mov dword [ebp - 8], edx
call fcn.0040f93d
push dword [ebp + 0xc]
mov dword [ebp + 8], eax
call fcn.0040f93d
push dword [ebp - 4]
mov dword [ebp + 0xc], eax
call fcn.0040f93d
push dword [ebp - 8]
mov dword [ebp - 4], eax
call fcn.0040f93d
mov esi, dword [ebp + 0x10]
push 4
mov dword [ebp - 8], eax
pop edi
lea eax, [ebp + 8]
push edi
push eax
push esi
call sub.MSVCRT.dll_memcpy
lea eax, [ebp + 0xc]
push edi
push eax
lea eax, [esi + 4]
push eax
call sub.MSVCRT.dll_memcpy
lea eax, [ebp - 4]
push edi
push eax
lea eax, [esi + 8]
push eax
call sub.MSVCRT.dll_memcpy
lea eax, [ebp - 8]
push edi
add esi, 0xc
push eax
push esi
call sub.MSVCRT.dll_memcpy
add esp, 0x30
pop edi
pop ebx
pop esi
leave
ret 0xc