Function at 0x408a70
Capabilities:
Encode data using xor

Disassembly:
push ebp
push ebx
push edi
push esi
mov eax, 0x15b4
call fcn.004094b0
mov edi, edx
mov dword [esp + 0x10], ecx
mov esi, dword [esp + 0x15c8]
lea eax, [esp + 0x30]
push 0x84
push 0
push eax
call fcn.00409650
add esp, 0xc
cmp dword [esp + 0x15d0], 0
mov dword [esp + 0x14], edi
je 0x408b2a
test esi, esi
mov ecx, esi
jle 0x409296
xor eax, eax
cmp ecx, 1
je 0x408af8
mov ecx, dword [esp + 0x15c8]
and ecx, 0x7ffffffe
lea eax, [edi + edi*8]
shl eax, 5
mov edx, dword [esp + 0x10]
add edx, eax
add edx, 0x8f13
xor eax, eax
nop
movzx esi, byte [edx + eax - 1]
inc dword [esp + esi*4 + 0x30]
movzx esi, byte [edx + eax]
inc dword [esp + esi*4 + 0x30]
add eax, 2
cmp ecx, eax
jne 0x408ae0
mov ecx, dword [esp + 0x15c8]
test cl, 1
je 0x409296
lea ecx, [edi + edi*8]
shl ecx, 5
add ecx, dword [esp + 0x10]
movzx eax, byte [eax + ecx + 0x8f12]
mov ecx, dword [esp + 0x15c8]
inc dword [esp + eax*4 + 0x30]
jmp 0x409296
lea ebp, [edi + edi*8]
mov ecx, ebp
shl ecx, 6
test esi, esi
mov dword [esp + 0x28], ecx
jle 0x408c29
mov eax, dword [esp + 0x10]
add eax, ecx
add eax, 0x8192
xor ecx, ecx
xor ebx, ebx
jmp 0x408b64
mov edx, ecx
and edx, 1
xor ecx, 1
lea ecx, [ecx + edx*2]
cmp ecx, dword [esp + 0x15c8]
jge 0x408b80
movzx edx, word [eax + ecx*2]
test dx, dx
je 0x408b50
mov word [esp + ebx*4 + 0xcb4], dx
mov word [esp + ebx*4 + 0xcb6], cx
inc ebx
jmp 0x408b50
lea eax, [esp + 0x4b4]
push 0x800
push 0
push eax
call fcn.00409650
add esp, 0xc
test ebx, ebx
sete byte [esp + 0xb]
je 0x408c40
xor eax, eax
cmp ebx, 1
je 0x408bff
mov ecx, ebx
and ecx, 0xfffffffe
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, word [esp + eax*4 + 0xcb4]
movzx esi, dl
inc dword [esp + esi*4 + 0x4b4]
shr edx, 8
inc dword [esp + edx*4 + 0x8b4]
movzx edx, word [esp + eax*4 + 0xcb8]
movzx esi, dl
inc dword [esp + esi*4 + 0x4b4]
shr edx, 8
inc dword [esp + edx*4 + 0x8b4]
add eax, 2
cmp ecx, eax
jne 0x408bc0
test bl, 1
je 0x408c20
movzx eax, word [esp + eax*4 + 0xcb4]
movzx ecx, al
inc dword [esp + ecx*4 + 0x4b4]
shr eax, 8
inc dword [esp + eax*4 + 0x8b4]
mov eax, dword [esp + 0x8b4]
jmp 0x408c49
lea eax, [esp + 0x4b4]
push 0x800
push 0
push eax
call fcn.00409650
add esp, 0xc
xor ebx, ebx
mov byte [esp + 0xb], 1
xor eax, eax
xor ecx, ecx
cmp eax, ebx
setne cl
inc ecx
mov dword [esp + 0x2c], ecx
lea eax, [ebx - 1]
mov dword [esp + 0x1c], eax
mov edx, ebx
and edx, 0xfffffffe
lea eax, [esp + 0xcb4]
mov dword [esp], eax
lea eax, [esp + 0x1134]
xor ecx, ecx
lea esi, [esp + 0x4b4]
xor edi, edi
mov dword [esp + 0xc], ebx
mov dword [esp + 0x20], ebp
mov dword [esp + 0x18], edx
jmp 0x408ca8
add ecx, 8
inc edi
add esi, 0x400
mov eax, dword [esp + 4]
cmp edi, dword [esp + 0x2c]
je 0x408dbb
mov dword [esp + 0x24], edi
mov edx, dword [esp]
mov dword [esp + 4], edx
mov dword [esp], eax
mov eax, 3
xor edx, edx
nop
nop
nop
mov dword [esp + eax*4 + 0xa8], edx
add edx, dword [esi + eax*4 - 0xc]
mov dword [esp + eax*4 + 0xac], edx
add edx, dword [esi + eax*4 - 8]
mov dword [esp + eax*4 + 0xb0], edx
add edx, dword [esi + eax*4 - 4]
mov dword [esp + eax*4 + 0xb4], edx
add edx, dword [esi + eax*4]
add eax, 4
cmp eax, 0x103
jne 0x408cc0
cmp byte [esp + 0xb], 0
mov edi, dword [esp + 0x24]
jne 0x408c90
cmp dword [esp + 0x1c], 0
je 0x408d6c
xor eax, eax
mov edi, dword [esp]
mov ebp, dword [esp + 4]
movzx edx, word [ebp + eax*4]
shr edx, cl
movzx edx, dl
mov ebx, dword [esp + edx*4 + 0xb4]
lea ebp, [ebx + 1]
mov dword [esp + edx*4 + 0xb4], ebp
mov edx, dword [esp + 4]
mov edx, dword [edx + eax*4]
mov dword [edi + ebx*4], edx
mov edx, dword [esp + 4]
movzx edx, word [edx + eax*4 + 4]
shr edx, cl
movzx edx, dl
mov ebx, dword [esp + edx*4 + 0xb4]
lea ebp, [ebx + 1]
mov dword [esp + edx*4 + 0xb4], ebp
mov ebp, dword [esp + 4]
mov edx, dword [ebp + eax*4 + 4]
mov dword [edi + ebx*4], edx
mov edx, dword [esp + 0x18]
add eax, 2
cmp edx, eax
jne 0x408d10
jmp 0x408d6e
xor eax, eax
mov ebx, dword [esp + 0xc]
test bl, 1
mov ebp, dword [esp + 0x20]
mov edi, dword [esp + 0x24]
je 0x408c90
mov edx, dword [esp + 4]
movzx edx, word [edx + eax*4]
shr edx, cl
movzx edx, dl
mov ebx, dword [esp + edx*4 + 0xb4]
lea ebp, [ebx + 1]
mov dword [esp + edx*4 + 0xb4], ebp
mov ebp, dword [esp + 0x20]
mov edx, dword [esp + 4]
mov eax, dword [edx + eax*4]
mov edx, dword [esp]
mov dword [edx + ebx*4], eax
mov ebx, dword [esp + 0xc]
jmp 0x408c90
test ebx, ebx
mov edi, dword [esp + 0x14]
je 0x409177
cmp ebx, 1
jne 0x408dd9
mov eax, dword [esp]
mov word [eax], 1
jmp 0x409042
mov edx, dword [esp]
movzx eax, word [edx + 4]
add word [edx], ax
cmp ebx, 3
jl 0x408e8d
mov eax, 2
mov ecx, 2
sub ecx, ebx
mov dword [esp + 4], ecx
xor edx, edx
mov esi, 1
jmp 0x408e2e
mov ecx, dword [esp]
movzx edi, word [ecx + eax*4]
inc eax
add word [ecx + esi*4], di
mov ecx, dword [esp + 4]
lea edi, [ecx + esi]
inc edi
inc esi
cmp edi, 1
mov ebx, dword [esp + 0xc]
je 0x408e9c
mov ecx, dword [esp]
movzx edi, word [ecx + edx*4]
cmp eax, ebx
jge 0x408e42
movzx ebx, word [ecx + eax*4]
cmp di, bx
jae 0x408e70
mov word [ecx + esi*4], di
mov word [ecx + edx*4], si
inc edx
cmp eax, dword [esp + 0xc]
jge 0x408e7b
cmp edx, esi
jge 0x408e10
mov ecx, dword [esp]
movzx ebx, word [ecx + edx*4]
movzx edi, word [ecx + eax*4]
cmp bx, di
jae 0x408e17
jmp 0x408e82
inc eax
mov word [ecx + esi*4], bx
cmp eax, dword [esp + 0xc]
jl 0x408e51
mov ecx, dword [esp]
movzx ebx, word [ecx + edx*4]
add word [ecx + esi*4], bx
mov word [ecx + edx*4], si
inc edx
jmp 0x408e1c
lea ecx, [ebx - 2]
mov word [edx + ebx*4 - 8], 0
jmp 0x408f31
mov esi, dword [esp]
mov word [esi + ebx*4 - 8], 0
lea edx, [ebx - 3]
mov ecx, ebx
and ecx, 3
xor ecx, 2
mov eax, edx
je 0x408edd
mov eax, edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov esi, dword [esp]
movzx esi, word [esi + eax*4]
mov edi, dword [esp]
movzx esi, word [edi + esi*4]
inc esi
mov edi, dword [esp]
mov word [edi + eax*4], si
mov esi, dword [esp]
dec eax
dec ecx
jne 0x408ec0
lea ecx, [ebx - 2]
cmp edx, 3
jb 0x408f31
inc eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, word [esi + eax*4 - 4]
movzx edx, word [esi + edx*4]
inc edx
mov word [esi + eax*4 - 4], dx
movzx edx, word [esi + eax*4 - 8]
movzx edx, word [esi + edx*4]
inc edx
mov word [esi + eax*4 - 8], dx
movzx edx, word [esi + eax*4 - 0xc]
movzx edx, word [esi + edx*4]
inc edx
mov word [esi + eax*4 - 0xc], dx
movzx edx, word [esi + eax*4 - 0x10]
movzx edx, word [esi + edx*4]
inc edx
mov word [esi + eax*4 - 0x10], dx
add eax, 0xfffffffc
jne 0x408ef0
mov edi, 1
xor edx, edx
mov eax, dword [esp + 0x1c]
jmp 0x408f6a
mov ebp, dword [esp + 0x18]
mov esi, ebp
and esi, 2
mov edi, ebp
or ebp, 2
imul ebp, esi
xor esi, 2
and edi, 0x7ffffffd
imul edi, esi
add ebp, edi
inc edx
mov edi, ebp
test ebp, ebp
jle 0x409032
test ecx, ecx
mov esi, dword [esp]
mov dword [esp + 4], edi
js 0x408fa0
lea ebp, [ecx + 1]
xor edi, edi
nop
nop
nop
nop
nop
nop
movzx esi, word [esi + ecx*4]
cmp edx, esi
jne 0x408fb0
inc edi
dec ecx
cmp ebp, edi
mov esi, dword [esp]
jne 0x408f80
mov ecx, 0xffffffff
jmp 0x408fb5
xor ebp, ebp
jmp 0x408fb9
mov ebp, edi
mov esi, dword [esp]
mov edi, dword [esp + 4]
mov dword [esp + 0x18], ebp
sub edi, ebp
jle 0x408f40
and edi, 3
je 0x408fe9
lea ebx, [esi + eax*4]
xor esi, esi
nop
mov word [ebx], dx
inc esi
add ebx, 0xfffffffc
cmp edi, esi
jne 0x408fd0
mov edi, dword [esp + 4]
sub edi, esi
sub eax, esi
mov ebx, dword [esp + 0xc]
jmp 0x408fed
mov edi, dword [esp + 4]
mov ebp, dword [esp + 0x18]
mov esi, ebp
sub esi, dword [esp + 4]
cmp esi, 0xfffffffc
mov esi, dword [esp]
ja 0x408f44
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [esi + eax*4], dx
mov word [esi + eax*4 - 4], dx
mov word [esi + eax*4 - 8], dx
mov word [esi + eax*4 - 0xc], dx
add eax, 0xfffffffc
add edi, 0xfffffffc
cmp edi, ebp
jg 0x409010
jmp 0x408f44
test ebx, ebx
mov edi, dword [esp + 0x14]
mov ebp, dword [esp + 0x20]
jle 0x409177
mov eax, ebx
and eax, 3
xor ecx, ecx
cmp dword [esp + 0x1c], 3
mov edi, dword [esp]
jb 0x40908a
mov edx, ebx
and edx, 0xfffffffc
xor ecx, ecx
nop
nop
nop
nop
nop
nop
movzx esi, word [edi + ecx*4]
inc dword [esp + esi*4 + 0x30]
movzx esi, word [edi + ecx*4 + 4]
inc dword [esp + esi*4 + 0x30]
movzx esi, word [edi + ecx*4 + 8]
inc dword [esp + esi*4 + 0x30]
movzx esi, word [edi + ecx*4 + 0xc]
inc dword [esp + esi*4 + 0x30]
add ecx, 4
cmp edx, ecx
jne 0x409060
test eax, eax
je 0x4090ad
mov edx, dword [esp]
lea ecx, [edx + ecx*4]
xor edx, edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx esi, word [ecx + edx*4]
inc dword [esp + esi*4 + 0x30]
inc edx
cmp eax, edx
jne 0x4090a0
cmp ebx, 2
mov edi, dword [esp + 0x14]
jl 0x409177
mov edx, dword [esp + 0x15cc]
cmp edx, 0x20
jge 0x40912c
mov eax, dword [esp + edx*4 + 0x30]
mov esi, edx
neg edx
mov ecx, esi
and edx, 3
je 0x4090ec
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
add eax, dword [esp + ecx*4 + 0x34]
inc ecx
mov dword [esp + esi*4 + 0x30], eax
dec edx
jne 0x4090e0
lea edx, [esi - 0x1d]
cmp edx, 3
mov edx, esi
jb 0x409128
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
add eax, dword [esp + ecx*4 + 0x34]
mov dword [esp + edx*4 + 0x30], eax
add eax, dword [esp + ecx*4 + 0x38]
mov dword [esp + edx*4 + 0x30], eax
add eax, dword [esp + ecx*4 + 0x3c]
mov dword [esp + edx*4 + 0x30], eax
add eax, dword [esp + ecx*4 + 0x40]
add ecx, 4
mov dword [esp + edx*4 + 0x30], eax
cmp ecx, 0x20
jne 0x409100
test edx, edx
jle 0x409167
inc edx
xor ecx, ecx
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov esi, dword [esp + edx*4 + 0x2c]
shl esi, cl
add eax, esi
dec edx
inc ecx
cmp edx, 1
ja 0x409140
mov edx, 1
mov ecx, dword [esp + 0x15cc]
shl edx, cl
cmp eax, edx
jne 0x40940d
jmp 0x409177
mov ecx, edx
mov edx, 1
shl edx, cl
xor eax, eax
jmp 0x40940d
shl ebp, 5
mov esi, dword [esp + 0x10]
lea eax, [esi + ebp]
add eax, 0x8f12
push 0x120
push 0
push eax
call fcn.00409650
add esp, 0xc
mov eax, dword [esp + 0x28]
add eax, esi
add eax, 0x8852
push 0x240
push 0
push eax
call fcn.00409650
add esp, 0xc
cmp dword [esp + 0x15cc], 0
mov esi, dword [esp]
jle 0x40928f
add esi, 0xfffffffe
mov eax, 1
add ebp, dword [esp + 0x10]
mov dword [esp], esi
jmp 0x4091f2
lea ecx, [eax + 1]
cmp eax, dword [esp + 0x15cc]
mov eax, ecx
je 0x40928f
mov ecx, dword [esp + eax*4 + 0x30]
test ecx, ecx
jle 0x4091e0
mov edx, ecx
and edx, 3
je 0x409240
mov dword [esp + 0xc], ebx
lea edi, [esi + ebx*4]
xor esi, esi
nop
nop
nop
nop
nop
nop
movzx ebx, word [edi]
mov byte [ebx + ebp + 0x8f12], al
inc esi
add edi, 0xfffffffc
cmp edx, esi
jne 0x409210
mov ebx, dword [esp + 0xc]
sub ebx, esi
mov edx, ecx
sub edx, esi
mov edi, dword [esp + 0x14]
mov esi, dword [esp]
cmp ecx, 4
jb 0x4091e0
jmp 0x409247
mov edx, ecx
cmp ecx, 4
jb 0x4091e0
dec edx
nop
nop
nop
nop
nop
nop
nop
nop
movzx ecx, word [esi + ebx*4]
mov byte [ecx + ebp + 0x8f12], al
movzx ecx, word [esi + ebx*4 - 4]
mov byte [ecx + ebp + 0x8f12], al
movzx ecx, word [esi + ebx*4 - 8]
mov byte [ecx + ebp + 0x8f12], al
movzx ecx, word [esi + ebx*4 - 0xc]
add ebx, 0xfffffffc
mov byte [ecx + ebp + 0x8f12], al
add edx, 0xfffffffc
cmp edx, 0xfffffffe
jb 0x409250
jmp 0x4091e0
mov ecx, dword [esp + 0x15c8]
mov dword [esp + 0x4b8], 0
mov eax, dword [esp + 0x15cc]
cmp eax, 2
jl 0x409333
lea ecx, [eax - 1]
cmp eax, 2
jne 0x4092c2
xor edx, edx
mov eax, 2
jmp 0x40930a
mov ebx, ecx
and ebx, 0xfffffffe
xor edx, edx
xor eax, eax
nop
nop
nop
nop
nop
mov edi, dword [esp + eax*4 + 0x34]
mov esi, dword [esp + eax*4 + 0x38]
mov ebp, edi
and ebp, edx
xor edi, edx
add edi, edi
lea edx, [edi + ebp*4]
mov dword [esp + eax*4 + 0x4bc], edx
mov edi, esi
and edi, edx
xor esi, edx
add esi, esi
lea edx, [esi + edi*4]
mov dword [esp + eax*4 + 0x4c0], edx
add eax, 2
cmp ebx, eax
jne 0x4092d0
add eax, 2
mov edi, dword [esp + 0x14]
test cl, 1
mov ecx, dword [esp + 0x15c8]
je 0x409333
mov ecx, dword [esp + eax*4 + 0x2c]
mov esi, ecx
and esi, edx
xor ecx, edx
add ecx, ecx
lea ecx, [ecx + esi*4]
mov dword [esp + eax*4 + 0x4b4], ecx
mov ecx, dword [esp + 0x15c8]
test ecx, ecx
jle 0x409402
xor eax, eax
lea edi, [edi + edi*8]
mov edx, edi
shl edx, 5
mov esi, dword [esp + 0x10]
add edx, esi
shl edi, 6
add edi, esi
mov dword [esp + 4], edi
jmp 0x40937c
mov ecx, dword [esp + 4]
mov word [ecx + eax*2 + 0x8852], di
mov ecx, dword [esp + 0x15c8]
inc eax
cmp eax, ecx
je 0x409402
movzx ebx, byte [eax + edx + 0x8f12]
test ebx, ebx
je 0x409373
mov ecx, dword [esp + ebx*4 + 0x4b4]
lea edi, [ecx + 1]
mov dword [esp + ebx*4 + 0x4b4], edi
xor edi, edi
cmp bl, 4
jb 0x4093df
mov ebp, ebx
and ebp, 0xfffffffc
xor edi, edi
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov esi, ecx
and esi, 1
shl esi, 2
lea esi, [esi + edi*8]
mov edi, ecx
and edi, 2
or edi, esi
mov esi, ecx
shr esi, 2
and esi, 1
or esi, edi
mov edi, ecx
shr edi, 3
and edi, 1
lea edi, [edi + esi*2]
shr ecx, 4
add ebp, 0xfffffffc
jne 0x4093b0
and ebx, 3
je 0x409360
nop
nop
nop
nop
nop
nop
nop
nop
mov esi, ecx
and esi, 1
lea edi, [esi + edi*2]
shr ecx, 1
dec ebx
jne 0x4093f0
jmp 0x409360
add esp, 0x15b4
pop esi
pop edi
pop ebx
pop ebp
ret
mov ecx, dword [esp + 0x15cc]
dec dword [esp + ecx*4 + 0x30]
nop
nop
nop
nop
nop
nop
nop
nop
cmp ecx, 2
jl 0x409438
mov esi, dword [esp + ecx*4 + 0x2c]
dec ecx
test esi, esi
je 0x409420
dec esi
mov dword [esp + ecx*4 + 0x30], esi
add dword [esp + ecx*4 + 0x34], 2
dec eax
cmp eax, edx
jne 0x40940d
jmp 0x409177