Function at 0x421ee0
Capabilities:
Encode data using xor

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x470
cmp byte [esp + 0x488], 0
jne 0x422037
mov edi, dword [esp + 0x490]
mov ebp, dword [esp + 0x484]
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0x7b967997
mov dword [esp + 0x1c], 0x7f4d7d99
mov dword [esp + 0x20], 0x32c0132
mov dword [esp + 0x24], 0x7ea05e0
mov dword [esp + 0x28], 0xb0a09e4
mov eax, 0x1787f7b8
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [esp + eax - 0x1787f7a0]
mov ecx, eax
or ecx, edx
lea esi, [eax - 0x1787f700]
or esi, eax
and esi, edx
sub ecx, esi
add cl, 0x40
mov byte [esp + eax - 0x1787f7a0], cl
inc eax
cmp eax, 0x1787f7cc
jne 0x421f50
lea eax, [esp + 0x18]
lea ecx, [esp + 0x10]
push eax
call fcn.0043af70
push 0xebc73df8
push dword [esp + 0x14]
call int.0043ce00
add esp, 8
mov ecx, esp
push ecx
push 0x44059c
push 1
push 0
push 0x4405ac
call eax
test eax, eax
js 0x422037
mov eax, dword [esp]
mov ecx, dword [eax]
lea edx, [esp + 8]
push edx
push 0x4405bc
push eax
call dword [ecx]
xor ebx, ebx
test eax, eax
js 0x422258
cmp word [ebp + ebx], 0
lea ebx, [ebx + 2]
jne 0x421fd0
lea eax, [ebx + ebp]
add eax, 0xfffffffe
add ebx, ebp
mov ecx, 1
sub ecx, ebx
and ecx, ebp
mov esi, ebp
not esi
and esi, eax
sub esi, ecx
mov ebx, dword [edi + 8]
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
cmp word [ebx + eax], 0
lea eax, [eax + 2]
jne 0x422000
sar esi, 1
lea ecx, [ebx + eax]
add ecx, 0xfffffffe
add eax, ebx
mov edx, 1
sub edx, eax
and edx, ebx
mov eax, ebx
not eax
and eax, ecx
sub eax, edx
sar eax, 1
add eax, esi
add eax, 2
test eax, eax
jns 0x42203e
mov eax, 0xffffffff
jmp 0x422040
xor ebx, ebx
jmp 0x422261
add eax, eax
push eax
call fcn.00407ff0
add esp, 4
movzx ecx, word [ebx]
mov ebp, eax
test cx, cx
je 0x422072
add ebx, 2
mov ebp, eax
nop
nop
nop
nop
nop
nop
nop
nop
mov word [ebp], cx
add ebp, 2
movzx ecx, word [ebx]
add ebx, 2
test cx, cx
jne 0x422060
mov dword [esp + 4], eax
add esi, 2
mov dword [esp + 0xc], esi
mov word [esp + 0x18], 0x2578
xor ecx, ecx
mov dl, 1
nop
nop
nop
nop
nop
nop
nop
nop
movzx esi, byte [esp + ecx + 0x18]
mov ebx, ecx
or ebx, 4
and ebx, esi
lea edi, [ecx + esi]
add edi, 0x9cd5d7e3
add ebx, ebx
mov esi, edi
sub esi, ebx
and edi, 1
xor esi, 1
lea ebx, [esi + edi*2]
mov byte [esp + ecx + 0x18], bl
mov ecx, 1
test dl, 1
mov edx, 0
jne 0x422090
movzx ecx, word [esp + 0x18]
mov word [ebp], cx
add ebp, 2
mov eax, dword [esp + 0x484]
movzx ecx, word [eax]
test cx, cx
je 0x422104
lea edx, [eax + 2]
mov esi, dword [esp + 0x490]
mov edi, dword [esp + 4]
mov word [ebp], cx
add ebp, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x4220f0
jmp 0x42210f
mov esi, dword [esp + 0x490]
mov edi, dword [esp + 4]
mov word [ebp], 0
mov eax, dword [esp + 8]
mov ecx, dword [eax]
push 0
push edi
push eax
call dword [ecx + 0x14]
test eax, eax
js 0x4221ab
mov eax, dword [esp]
mov ecx, dword [eax]
push 1
push 0
push eax
call dword [ecx + 0x4c]
test eax, eax
js 0x4221ab
mov eax, dword [esp]
mov ecx, dword [eax]
lea ebp, [esp + 0x268]
push 1
lea edx, [esp + 0x1c]
push edx
push 0x104
push ebp
push eax
call dword [ecx + 0xc]
xor ebx, ebx
test eax, eax
js 0x422245
mov esi, dword [esi + 4]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp word [esi + ebx], 0
lea ebx, [ebx + 2]
jne 0x422170
lea eax, [esi + ebx]
add eax, 0xfffffffe
add ebx, esi
mov ecx, 1
sub ecx, ebx
and ecx, esi
mov edx, esi
not edx
and edx, eax
sub edx, ecx
sar edx, 1
mov eax, dword [esp + 0xc]
add eax, edx
mov ebx, dword [esp + 0x484]
jns 0x4221b2
mov eax, 0xffffffff
jmp 0x4221b4
xor ebx, ebx
jmp 0x422245
add eax, eax
push eax
call fcn.00407ff0
add esp, 4
mov edi, eax
movzx ecx, word [esi]
test cx, cx
je 0x4221e1
add esi, 2
mov eax, edi
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [esi]
add esi, 2
test cx, cx
jne 0x4221d0
mov word [eax], 0x2f
add eax, 2
movzx ecx, word [ebx]
test cx, cx
je 0x422211
add ebx, 2
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [ebx]
add ebx, 2
test cx, cx
jne 0x422200
mov word [eax], 0
mov ecx, dword [esp + 0x490]
mov eax, dword [ecx + 0x14]
dec eax
push 1
push eax
push dword [ecx + 0x10]
push dword [ecx + 0xc]
push ebp
push edi
push dword [ecx]
call fcn.00421270
add esp, 0x1c
mov ebx, eax
push edi
call fcn.00408000
add esp, 4
mov edi, dword [esp + 4]
mov eax, dword [esp + 8]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push edi
call fcn.00408000
add esp, 4
mov eax, dword [esp]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, ebx
add esp, 0x470
pop esi
pop edi
pop ebx
pop ebp
ret 0x10