Function at 0x443c60
Capabilities:
Encode data using xor

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x240
mov ebx, dword [esp + 0x260]
mov dword [esp + 0x3b], 0xe48040
mov dword [esp + 0x38], 0x4010ec83
mov dword [esp + 0x34], 0x48e78948
mov dword [esp + 0x30], 0xce8948fc
mov dword [esp + 0x23], 0xc3fc8948
mov dword [esp + 0x20], 0x48d2ff41
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0xfffffff1
mov dword [esp + 0x14], 0xba49c031
lea edi, [esp + 0x40]
lea eax, [esp + 0x30]
mov ecx, 3
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
lea edi, [esp + 0x4c]
lea eax, [esp + 0x3c]
mov ecx, 1
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
movzx eax, byte [esp + 0x3e]
mov byte [esp + 0x4e], al
mov esi, ebx
cmp ebx, 4
jb 0x443cf1
mov esi, 4
lea edx, [esp + 0x4f]
test ebx, ebx
je 0x443eb3
xor ebp, ebp
jmp 0x443d3a
mov eax, 0x4493c5
mov ecx, 1
mov edi, edx
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
add edx, 4
mov eax, 0x4493c9
xor ecx, ecx
mov edi, edx
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
inc ebp
cmp esi, ebp
je 0x443db9
cmp ebp, 3
ja case.default.0x443d3f
jmp dword [ebp*4 + 0x448be0]
mov eax, 0x4493ca
xor ecx, ecx
mov edi, edx
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
mov eax, 0x4493ca
mov ecx, 1
mov edi, edx
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
mov byte [edx + 2], 0xe
add edx, 3
jmp case.default.0x443d3f
mov eax, 0x4493c0
mov ecx, 1
mov edi, edx
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
add edx, 4
mov eax, 0x4493c4
xor ecx, ecx
mov edi, edx
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
jmp case.default.0x443d3f
mov eax, 0x4493ce
mov ecx, 1
mov edi, edx
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
add edx, 4
mov eax, 0x4493d2
xor ecx, ecx
mov edi, edx
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
jmp case.default.0x443d3f
cmp ebx, 3
jbe 0x443eb3
test bl, 1
je 0x443dea
mov eax, 0x4493d7
mov esi, 0x4493d7
xor ecx, ecx
mov edi, edx
xchg esi, esi
rep movsd dword es:[edi], dword [esi]
xchg esi, esi
mov ecx, 1
mov edi, edx
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
add edx, 2
mov word [esp + 4], 0x50
mov dword [esp], 0x20468b48
mov byte [esp + 0x10], 0
mov dword [esp + 0xc], 0x50000000
mov dword [esp + 8], 0x80868b48
mov eax, ebx
and eax, 0xfffffff7
mov ecx, ebx
and ecx, 8
mov esi, ebx
or esi, 8
imul esi, ecx
xor ecx, 8
imul ecx, eax
add esi, ecx
cmp esi, 0x7ffffffe
ja 0x4440d9
lea esi, [ebx - 1]
cmp esi, 4
jb 0x443eb3
lea ebx, [ebx*8 - 8]
lea eax, [esp + 8]
jmp 0x443e7e
mov dword [esp + 0xb], ebx
mov ebp, eax
mov ecx, 2
mov edi, edx
xchg esi, ebp
rep movsd dword es:[edi], dword [esi]
xchg esi, ebp
add edx, 8
lea ebp, [esp + 0x10]
mov edi, edx
xor ecx, ecx
xchg esi, ebp
rep movsw word es:[edi], word [esi]
xchg esi, ebp
dec esi
add ebx, 0xfffffff8
cmp esi, 3
jbe 0x443eb3
cmp ebx, 0x7e
ja 0x443e50
mov byte [esp + 3], bl
mov ebp, esp
mov edi, edx
mov ecx, 1
xchg esi, ebp
rep movsd dword es:[edi], dword [esi]
xchg esi, ebp
lea edi, [edx + 4]
lea ebp, [esp + 4]
xor ecx, ecx
xchg esi, ebp
rep movsw word es:[edi], word [esi]
xchg esi, ebp
movzx ecx, byte [esp + 4]
mov byte [edx + 4], cl
add edx, 5
jmp 0x443e75
mov eax, dword [esp + 0x258]
mov esi, 0x4493bb
mov edi, edx
mov ecx, 1
xchg esi, esi
rep movsd dword es:[edi], dword [esi]
xchg esi, esi
lea esi, [edx + 4]
mov ebx, 0x4493bf
mov edi, esi
xor ecx, ecx
xchg esi, ebx
rep movsw word es:[edi], word [esi]
xchg esi, ebx
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x254]
mov dword [esp + 0x18], eax
lea eax, [esp + 0x14]
mov edi, esi
mov ecx, 4
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
lea edi, [edx + 0x14]
lea eax, [esp + 0x24]
mov ecx, 1
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
movzx eax, byte [esp + 0x26]
mov byte [edx + 0x16], al
lea ecx, [esp + 0x40]
mov eax, ecx
neg eax
lea esi, [edx + eax]
add esi, 0x17
sub edx, ecx
add edx, 0x70
mov dword [esp + 0x2c], edx
xor eax, eax
mov dword [esp], 0
mov dword [esp + 8], 0xc0c7c6c5
mov dword [esp + 0xc], 0
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, eax
add cl, 0xd1
xor cl, byte [esp + eax + 8]
add cl, 0xeb
mov byte [esp + eax + 8], cl
inc eax
cmp eax, 8
jne 0x443f50
mov eax, dword [esp + 8]
mov ecx, dword [0x452164]
test ecx, ecx
je 0x443fbc
xor edx, edx
mov edi, dword [0x452168]
nop
nop
nop
nop
cmp dword [edi + edx*8], 0xf3285e74
je 0x443f90
inc edx
cmp ecx, edx
jne 0x443f80
jmp 0x443fbc
mov ecx, dword [edi + edx*8 + 4]
cmp ecx, eax
je 0x443fbc
lea eax, [esp + 0x2c]
mov edx, esp
push 0x40
push 0x3000
push eax
push 0
push edx
push 0xffffffffffffffff
push 6
push dword [0x45216c]
push ecx
call fcn.00442160
add esp, 0x24
test eax, eax
js 0x4440a0
mov eax, dword [esp]
mov edx, 0x448b85
mov edi, eax
mov ecx, 0x16
xchg esi, edx
rep movsd dword es:[edi], dword [esi]
xchg esi, edx
lea edi, [eax + 0x58]
mov ebp, 0x448bdd
mov edx, esi
xor ebx, ebx
xor ecx, ecx
xchg esi, ebp
rep movsw word es:[edi], word [esi]
xchg esi, ebp
mov byte [eax + 0x58], 0x24
mov eax, dword [esp]
lea edi, [eax + 0x59]
mov ecx, esi
shr ecx, 2
lea esi, [esp + 0x40]
xchg esi, esi
rep movsd dword es:[edi], dword [esi]
xchg esi, esi
mov ecx, edx
and ecx, 0xfffffffc
add eax, ecx
add eax, 0x59
lea esi, [esp + ecx]
add esi, 0x40
mov ecx, edx
shr ecx, 1
and ecx, 1
mov ebp, esi
mov edi, eax
xchg esi, ebp
rep movsw word es:[edi], word [esi]
xchg esi, ebp
test dl, 1
je 0x444038
and edx, 2
movzx ecx, byte [esi + edx]
mov byte [eax + edx], cl
mov eax, dword [esp]
lea ecx, [eax + 0x59]
push dword [esp + 0x25c]
push ecx
call eax
mov dword [esp + 0x28], 0
mov dword [esp + 8], 0xc0c7c6c5
mov dword [esp + 0xc], 0
mov ecx, ebx
add cl, 0xd1
xor cl, byte [esp + ebx + 8]
add cl, 0xeb
mov byte [esp + ebx + 8], cl
inc ebx
cmp ebx, 8
jne 0x444060
mov ecx, dword [0x452164]
test ecx, ecx
je 0x4440e3
mov esi, dword [esp + 8]
xor edi, edi
mov ebx, dword [0x452168]
nop
nop
nop
nop
cmp dword [ebx + edi*8], 0x731cdbf3
je 0x4440a7
inc edi
cmp ecx, edi
jne 0x444090
jmp 0x4440e3
mov edx, eax
sar edx, 0x1f
jmp 0x4440e3
mov ecx, dword [ebx + edi*8 + 4]
cmp ecx, esi
je 0x4440e3
lea esi, [esp + 0x28]
mov edi, esp
push 0x8000
push esi
push edi
push 0xffffffffffffffff
push 4
push dword [0x45216c]
push ecx
mov esi, eax
mov edi, edx
call fcn.00442160
mov edx, edi
mov eax, esi
add esp, 0x1c
jmp 0x4440e3
mov eax, 0xffffffff
mov edx, 0xffffffff
add esp, 0x240
pop esi
pop edi
pop ebx
pop ebp
ret 0x10