Function at 0x470180
Capabilities:
Encode data using xor

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x18
mov ebx, dword [esp + 0x44]
mov ebp, dword [esp + 0x40]
mov esi, dword [esp + 0x34]
mov edi, dword [esp + 0x30]
mov eax, dword [esp + 0x2c]
cmp dword [esp + 0x48], 0
mov ecx, dword [ebx]
mov edx, dword [ebx + 4]
je 0x470309
cmp esi, 8
jb 0x470231
mov ebx, dword [esp + 0x38]
mov ebp, esi
nop word [eax + eax]
xor ecx, dword [eax]
xor edx, dword [eax + 4]
lea eax, [eax + 8]
mov dword [esp], ecx
mov dword [esp + 4], edx
push dword [esp + 0x40]
push dword [esp + 0x40]
push ebx
lea ecx, [esp + 0xc]
push ecx
mov esi, eax
call sym.fastboot.exe_DES_encrypt3
add esp, 0x10
mov ecx, dword [esp]
mov edx, dword [esp + 4]
add ebp, 0xfffffff8
mov eax, ecx
mov byte [edi], cl
mov byte [edi + 1], ch
shr eax, 0x10
mov byte [edi + 2], al
mov eax, ecx
shr eax, 0x18
mov byte [edi + 3], al
mov eax, edx
mov byte [edi + 4], dl
mov byte [edi + 5], dh
shr eax, 0x10
mov byte [edi + 6], al
mov eax, edx
shr eax, 0x18
mov byte [edi + 7], al
add edi, 8
mov eax, esi
cmp ebp, 7
ja 0x4701c0
mov esi, dword [esp + 0x34]
mov ebp, dword [esp + 0x40]
and esi, 7
test esi, esi
je 0x470454
mov ebx, esi
mov dword [esp + 8], edx
mov esi, eax
xor eax, eax
lea edx, [ebx - 1]
cmp edx, 6
ja case.default.0x47025d
add esi, ebx
mov ebx, edx
mov dword [esp + 0xc], ecx
xor ecx, ecx
xor ebp, ebp
xor edx, edx
jmp dword [ebx*4 + 0x51ee68]
movzx eax, byte [esi - 1]
dec esi
shl eax, 0x10
movzx ecx, byte [esi - 1]
dec esi
shl ecx, 8
or eax, ecx
movzx ecx, byte [esi - 1]
dec esi
or eax, ecx
mov ecx, eax
movzx eax, byte [esi - 1]
dec esi
shl eax, 0x18
movzx edx, byte [esi - 1]
dec esi
mov ebp, ecx
shl edx, 0x10
or eax, edx
movzx ecx, byte [esi - 1]
dec esi
mov edx, ebp
shl ecx, 8
or eax, ecx
movzx ecx, byte [esi - 1]
mov ebp, dword [esp + 0x40]
or eax, ecx
mov ecx, dword [esp + 0xc]
xor edx, dword [esp + 8]
xor eax, ecx
mov dword [esp], eax
mov eax, esp
mov dword [esp + 4], edx
push ebp
push dword [esp + 0x40]
push dword [esp + 0x40]
push eax
call sym.fastboot.exe_DES_encrypt3
add esp, 0x10
mov ecx, dword [esp]
mov edx, dword [esp + 4]
mov ebx, dword [esp + 0x44]
mov eax, ecx
mov byte [edi], cl
mov byte [edi + 1], ch
shr eax, 0x10
mov byte [edi + 2], al
mov eax, ecx
shr eax, 0x18
mov byte [edi + 3], al
mov eax, edx
mov byte [edi + 4], dl
mov byte [edi + 5], dh
shr eax, 0x10
mov byte [edi + 6], al
mov eax, edx
shr eax, 0x18
mov byte [edi + 7], al
jmp 0x470458
cmp esi, 8
jb 0x4703c2
mov ebp, esi
mov esi, eax
nop word cs:[eax + eax]
mov dword [esp + 0x10], ebp
mov eax, dword [esi]
mov ebp, dword [esi + 4]
add esi, 8
mov ebx, ecx
mov dword [esp + 8], edx
mov dword [esp], eax
mov dword [esp + 0xc], eax
mov dword [esp + 4], ebp
push dword [esp + 0x40]
push dword [esp + 0x40]
push dword [esp + 0x40]
lea eax, [esp + 0xc]
push eax
call sym.fastboot.exe_DES_decrypt3
mov edx, ebp
mov ebp, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
add esp, 0x10
mov eax, dword [esp + 8]
xor ebx, dword [esp]
add ebp, 0xfffffff8
xor eax, dword [esp + 4]
mov byte [edi], bl
mov byte [edi + 1], bh
mov dword [esp + 8], eax
mov eax, ebx
shr ebx, 0x18
shr eax, 0x10
mov byte [edi + 2], al
mov byte [edi + 3], bl
mov ebx, dword [esp + 8]
mov eax, ebx
mov byte [edi + 4], bl
mov byte [edi + 5], bh
shr ebx, 0x18
shr eax, 0x10
mov byte [edi + 6], al
mov byte [edi + 7], bl
add edi, 8
cmp ebp, 7
ja 0x470320
mov eax, dword [esp + 0x34]
mov ebx, dword [esp + 0x44]
mov ebp, dword [esp + 0x40]
and eax, 7
mov dword [esp + 0x10], eax
mov eax, esi
mov esi, dword [esp + 0x10]
test esi, esi
je 0x470458
mov dword [esp + 8], edx
mov edx, ebp
mov ebp, ecx
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0x10], esi
mov dword [esp], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 4], eax
mov eax, esp
mov dword [esp + 0x14], ecx
push edx
push dword [esp + 0x40]
push dword [esp + 0x40]
mov esi, dword [esp + 0x1c]
push eax
call sym.fastboot.exe_DES_decrypt3
add esp, 0x10
lea eax, [esi - 1]
cmp eax, 6
ja case.default.0x470419
mov edx, dword [esp + 8]
mov ecx, ebp
add edi, esi
xor ecx, dword [esp]
xor edx, dword [esp + 4]
jmp dword [eax*4 + 0x51ee84]
mov eax, edx
shr eax, 0x10
mov byte [edi - 1], al
dec edi
mov byte [edi - 1], dh
dec edi
mov byte [edi - 1], dl
dec edi
mov eax, ecx
shr eax, 0x18
mov byte [edi - 1], al
dec edi
mov eax, ecx
shr eax, 0x10
mov byte [edi - 1], al
dec edi
mov byte [edi - 1], ch
dec edi
mov byte [edi - 1], cl
mov edx, dword [esp + 0xc]
mov ecx, dword [esp + 0x14]
jmp 0x470458
mov ebx, dword [esp + 0x44]
mov eax, ecx
mov byte [ebx], cl
mov byte [ebx + 1], ch
shr ecx, 0x18
shr eax, 0x10
mov byte [ebx + 2], al
mov eax, edx
mov byte [ebx + 3], cl
mov byte [ebx + 4], dl
mov byte [ebx + 5], dh
shr edx, 0x18
shr eax, 0x10
mov byte [ebx + 6], al
mov byte [ebx + 7], dl
add esp, 0x18
pop esi
pop edi
pop ebx
pop ebp
ret
xor edx, edx
jmp 0x4702ad