Function at 0x576780
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffec4
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 8], ecx
mov esi, edx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x576ca6
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 8]
dec eax
test eax, eax
jl 0x576c88
inc eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0xc], 0
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
call fcn.0041e374
mov ebx, eax
mov eax, dword [ebp - 4]
mov edi, dword [ebp - 8]
sub edi, dword [eax + 0x1c]
mov eax, dword [0x67c718]
add edi, dword [eax + 0x4b8]
mov eax, dword [ebx + 0x44]
add eax, dword [ebx + 0x4c]
push eax
lea eax, [ebp - 0x34]
push eax
mov ecx, dword [ebx + 0x40]
add ecx, dword [ebx + 0x48]
mov edx, dword [ebx + 0x44]
mov eax, dword [ebx + 0x40]
call fcn.0041cd1c
push edi
mov eax, dword [0x67c718]
mov eax, dword [eax + 0x4b0]
add eax, dword [0x67c778]
push eax
lea eax, [ebp - 0x34]
push eax
call sub.user32.dll_OffsetRect
mov eax, dword [ebp + 8]
add dword [ebp - 0x28], eax
lea eax, [ebp - 0x34]
call fcn.00576738
mov eax, ebx
mov edx, dword [0x46d468]
call fcn.0040407c
test al, al
je 0x576a81
mov eax, ebx
mov edx, dword [0x46d468]
call fcn.004040a0
mov edx, dword [eax + 0x68]
mov eax, dword [esi + 0xc]
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, ebx
mov edx, dword [0x46d468]
call fcn.004040a0
mov eax, dword [eax + 0x68]
call fcn.0042a500
mov dword [ebp - 0x38], eax
fild dword [ebp - 0x38]
fmul qword [0x67f1a0]
fsub dword [0x576cb8]
call fcn.00402dfc
mov edx, eax
mov eax, dword [esi + 0xc]
call fcn.0042a508
mov eax, dword [esi + 0xc]
call fcn.0042a500
cdq
xor eax, edx
sub eax, edx
add eax, 2
mov edx, dword [ebp - 0x28]
sub edx, dword [ebp - 0x30]
cmp eax, edx
jle 0x5768be
mov eax, dword [esi + 0xc]
call fcn.0042a500
cdq
xor eax, edx
sub eax, edx
add eax, dword [ebp - 0x30]
add eax, 2
mov dword [ebp - 0x28], eax
mov eax, ebx
mov edx, dword [0x46d468]
call fcn.004040a0
mov dl, byte [eax + 0x224]
test dl, dl
jne 0x5768dc
xor eax, eax
mov dword [ebp - 0x10], eax
jmp 0x5768f1
cmp dl, 1
jne 0x5768ea
mov dword [ebp - 0x10], 2
jmp 0x5768f1
mov dword [ebp - 0x10], 1
mov eax, ebx
mov edx, dword [0x46d468]
call fcn.004040a0
mov eax, dword [eax + 0xc]
push eax
lea eax, [ebp - 0x3c]
push eax
mov eax, ebx
mov edx, dword [0x46d468]
call fcn.004040a0
mov ecx, dword [eax + 0x80]
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 4]
call fcn.00577034
mov eax, dword [ebp - 0x3c]
push eax
mov eax, ebx
mov edx, dword [0x46d468]
call fcn.004040a0
mov eax, dword [eax + 0x220]
pop edx
mov ecx, dword [eax]
call dword [ecx + 0x2c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x18]
add eax, 0xfffffffe
sub eax, 2
jae 0x5769dd
push 0
push 2
mov eax, dword [ebx + 0x4c]
add eax, dword [ebp + 8]
mov dword [ebp - 0x38], eax
fild dword [ebp - 0x38]
fmul qword [0x67f1a8]
call fcn.00402dfc
push edx
push eax
mov eax, ebx
mov edx, dword [0x46d468]
call fcn.004040a0
mov eax, dword [eax + 0x220]
mov edx, dword [eax]
call dword [edx + 0x14]
mov edi, eax
mov eax, dword [esi + 0xc]
call fcn.0042a500
add eax, eax
lea eax, [eax + eax*2]
mov ecx, 5
cdq
idiv ecx
cdq
xor eax, edx
sub eax, edx
imul edi, eax
mov eax, edi
cdq
sub dword [esp], eax
sbb dword [esp + 4], edx
pop eax
pop edx
push edx
push eax
mov eax, dword [esi + 0xc]
call fcn.0042a500
mov ecx, 5
cdq
idiv ecx
cdq
xor eax, edx
sub eax, edx
cdq
add eax, dword [esp]
adc edx, dword [esp + 4]
add esp, 8
call fcn.00405c28
add dword [ebp - 0x30], eax
mov eax, ebx
mov edx, dword [0x46d468]
call fcn.004040a0
mov eax, dword [eax + 0x220]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x576c7c
inc eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x14], 0
mov eax, ebx
mov edx, dword [0x46d468]
call fcn.004040a0
mov eax, dword [eax + 0x220]
lea ecx, [ebp - 0x18]
mov edx, dword [ebp - 0x14]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x10]
push eax
lea eax, [ebp - 0x34]
push eax
mov eax, dword [ebp - 0x18]
call fcn.00404f40
push eax
mov eax, dword [ebp - 0x18]
call fcn.00405140
push eax
mov eax, esi
call fcn.0042b86c
push eax
call sub.user32.dll_DrawTextA
mov eax, dword [esi + 0xc]
call fcn.0042a500
add eax, eax
lea eax, [eax + eax*2]
mov ecx, 5
cdq
idiv ecx
cdq
xor eax, edx
sub eax, edx
push eax
push 0
lea eax, [ebp - 0x34]
push eax
call sub.user32.dll_OffsetRect
inc dword [ebp - 0x14]
dec dword [ebp - 0x24]
jne 0x576a09
jmp 0x576c7c
mov eax, ebx
mov edx, dword [0x43aeb4]
call fcn.0040407c
test al, al
je 0x576ab7
mov eax, ebx
mov edx, dword [0x43aeb4]
call fcn.004040a0
mov eax, dword [eax + 0x168]
mov ecx, dword [eax + 0xc]
lea edx, [ebp - 0x34]
mov eax, esi
call fcn.0042b4d0
jmp 0x576c7c
mov eax, ebx
mov edx, dword [0x43a560]
call fcn.0040407c
test al, al
jne 0x576aec
lea edx, [ebp - 0x13c]
mov eax, dword [ebx]
call fcn.00403e40
lea edx, [ebp - 0x13c]
mov eax, 0x576cbc
call fcn.00402d1c
dec eax
jle 0x576bd7
mov eax, dword [esi + 0x14]
call fcn.0042ac20
mov byte [ebp - 0x19], al
mov dl, 1
mov eax, dword [esi + 0x14]
call fcn.0042ac28
lea edx, [ebp - 0x13c]
mov eax, dword [ebx]
call fcn.00403e40
lea edx, [ebp - 0x13c]
mov eax, 0x576cbc
call fcn.00402d1c
dec eax
cmp dword [ebx + 0x48], 1
jg 0x576b6e
mov eax, dword [ebx + 0x44]
add eax, dword [ebx + 0x4c]
push eax
lea eax, [ebp - 0x34]
push eax
mov ecx, dword [ebx + 0x40]
mov edx, dword [ebx + 0x44]
mov eax, dword [ebx + 0x40]
call fcn.0041cd1c
push edi
mov eax, dword [0x67c718]
mov eax, dword [eax + 0x4b0]
add eax, dword [0x67c778]
push eax
lea eax, [ebp - 0x34]
push eax
call sub.user32.dll_OffsetRect
push 0
push 0
push 0
push 0
lea edx, [ebp - 0x34]
mov eax, esi
call fcn.005766a0
jmp 0x576bc7
cmp dword [ebx + 0x4c], 1
jg 0x576bbd
mov eax, dword [ebx + 0x44]
push eax
lea eax, [ebp - 0x34]
push eax
mov ecx, dword [ebx + 0x40]
add ecx, dword [ebx + 0x48]
mov edx, dword [ebx + 0x44]
mov eax, dword [ebx + 0x40]
call fcn.0041cd1c
push edi
mov eax, dword [0x67c718]
mov eax, dword [eax + 0x4b0]
add eax, dword [0x67c778]
push eax
lea eax, [ebp - 0x34]
push eax
call sub.user32.dll_OffsetRect
push 0
push 0
push 0
push 0
lea edx, [ebp - 0x34]
mov eax, esi
call fcn.005766a0
jmp 0x576bc7
lea edx, [ebp - 0x34]
mov eax, esi
call fcn.0042b464
mov dl, byte [ebp - 0x19]
mov eax, dword [esi + 0x14]
call fcn.0042ac28
jmp 0x576c7c
lea edx, [ebp - 0x13c]
mov eax, dword [ebx]
call fcn.00403e40
lea edx, [ebp - 0x13c]
mov eax, 0x576cc8
call fcn.00402d1c
dec eax
jle 0x576c7c
cmp dword [ebx + 0xc], 2
jne 0x576c22
mov eax, dword [ebx + 0x44]
add eax, dword [ebx + 0x4c]
add eax, dword [ebp + 8]
push eax
lea eax, [ebp - 0x34]
push eax
mov ecx, dword [ebx + 0x40]
add ecx, dword [ebx + 0x48]
mov edx, dword [ebx + 0x44]
mov eax, dword [ebx + 0x40]
call fcn.0041cd1c
jmp 0x576c41
mov eax, dword [ebx + 0x44]
add eax, dword [ebx + 0x4c]
add eax, dword [ebp + 8]
push eax
lea eax, [ebp - 0x34]
push eax
mov eax, dword [ebx + 0x40]
add eax, dword [ebx + 0x48]
mov ecx, dword [ebx + 0x40]
mov edx, dword [ebx + 0x44]
call fcn.0041cd1c
push edi
mov eax, dword [0x67c718]
mov eax, dword [eax + 0x4b0]
add eax, dword [0x67c778]
push eax
lea eax, [ebp - 0x34]
push eax
call sub.user32.dll_OffsetRect
push 0
push 0xffffffffffffffff
lea eax, [ebp - 0x34]
push eax
call sub.user32.dll_OffsetRect
push 0
push 0
push 0
push 0
lea edx, [ebp - 0x34]
mov eax, esi
call fcn.005766a0
inc dword [ebp - 0xc]
dec dword [ebp - 0x20]
jne 0x5767c4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x576cad
lea eax, [ebp - 0x3c]
call fcn.00404c80
lea eax, [ebp - 0x18]
call fcn.00404c80
ret