Function at 0x4df8a0
Capabilities:
Encode data using xor

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0xbc
mov edx, dword [0xcbf6c0]
test edx, edx
je 0x4dfa7f
cmp dword [esp + 0xd4], 0x1e
ja 0x4dfbfc
mov eax, dword [esp + 0xd4]
mov dword [esp + 4], 0
mov dword [esp + 8], eax
mov eax, dword [esp + 0xdc]
mov dword [esp], eax
call sub.msvcrt.dll_memset
mov eax, dword [esp + 0xd4]
sub eax, 2
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0xd4]
cmp byte [eax + 0xcbf0fe], 0
je 0x4dfaf9
mov edi, dword [esp + 0x1c]
mov eax, edi
shl eax, 5
sub eax, edi
add eax, 0xcbf120
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0xd0]
test eax, eax
je 0x4dfa46
mov eax, dword [esp + 0xd8]
mov ebp, 0x80808081
mov dword [esp + 0x1c], eax
add eax, dword [esp + 0xd0]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0xdc]
add eax, 1
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0xd4]
sub eax, 1
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0xdc]
add eax, dword [esp + 0xd4]
mov dword [esp + 0x18], eax
lea esi, [esi]
lea edi, [edi]
mov eax, dword [esp + 0x1c]
mov edi, dword [esp + 0xdc]
movzx eax, byte [eax]
xor al, byte [edi]
movzx eax, al
movzx eax, byte [eax + 0xcbf4c0]
cmp al, 0xff
je 0x4dfa53
cmp dword [esp + 0xd4], 1
movzx edi, al
jbe 0x4df9ea
mov esi, dword [esp + 0x28]
add esi, dword [esp + 0x20]
mov ebx, dword [esp + 0x24]
nop
lea esi, [esi]
movzx ecx, byte [esi]
sub esi, 1
add ecx, edi
mov eax, ecx
mul ebp
shr edx, 7
mov eax, edx
shl eax, 8
sub eax, edx
sub ecx, eax
movzx eax, byte [ecx + 0xcbf5c0]
xor byte [ebx], al
add ebx, 1
cmp dword [esp + 0x18], ebx
jne 0x4df9c0
mov eax, dword [esp + 0x24]
mov esi, dword [esp + 0x20]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xdc]
mov dword [esp + 8], esi
mov dword [esp], eax
call sub.msvcrt.dll_memmove
mov eax, dword [esp + 0x28]
mov ebx, dword [esp + 0xdc]
movzx eax, byte [eax]
add edi, eax
mov eax, edi
mul ebp
shr edx, 7
mov eax, edx
shl eax, 8
sub eax, edx
sub edi, eax
movzx eax, byte [edi + 0xcbf5c0]
mov byte [ebx + esi], al
add dword [esp + 0x1c], 1
mov eax, dword [esp + 0x1c]
cmp eax, dword [esp + 0x2c]
jne 0x4df980
add esp, 0xbc
xor eax, eax
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, dword [esp + 0x24]
mov edi, dword [esp + 0x20]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xdc]
mov dword [esp + 8], edi
mov dword [esp], eax
call sub.msvcrt.dll_memmove
mov esi, dword [esp + 0xdc]
mov byte [esi + edi], 0
jmp 0x4dfa33
mov byte [0xcbf6bf], 0
mov byte [0xcbf4c0], 0xff
xor edx, edx
mov byte [0xcbf5c0], 1
mov byte [0xcbf4c1], 0
mov eax, 2
jmp 0x4dfac1
mov byte [edx + 0xcbf5c0], al
lea eax, [ecx + ecx]
mov byte [ecx + 0xcbf4c0], dl
mov ecx, eax
xor ecx, 0x11d
test ah, 1
cmovne eax, ecx
add edx, 1
movzx ecx, al
cmp edx, 0xff
jne 0x4dfaa4
xor eax, eax
mov dword [eax + 0xcbf100], 0
add eax, 4
cmp eax, 0x1c
jb 0x4dfad1
mov byte [eax + 0xcbf100], 0
mov dword [0xcbf6c0], 1
jmp 0x4df8b8
test eax, eax
mov dword [esp + 0x34], 1
je 0x4dfc0c
lea eax, [esp + 0x38]
lea ebp, [esp + 0x34]
mov dword [esp + 0x38], 1
mov esi, 1
mov edi, 0x80808081
mov dword [esp + 0x18], eax
mov eax, 1
lea esi, [esi]
movzx eax, byte [eax + 0xcbf4c0]
lea ecx, [esi + eax - 1]
mov eax, ecx
mul edi
shr edx, 7
mov eax, edx
shl eax, 8
sub eax, edx
sub ecx, eax
cmp dword [esp + 0xd4], esi
movzx edx, byte [ecx + 0xcbf5c0]
mov dword [esp + 0x34], edx
je 0x4dfbae
mov eax, dword [esp + 0x18]
test esi, esi
mov dword [eax + 4], 1
je 0x4dfba0
mov ebx, dword [esp + 0x18]
mov eax, dword [ebx]
sub ebx, 4
movzx ecx, byte [eax + 0xcbf4c0]
add ecx, esi
mov eax, ecx
mul edi
shr edx, 7
mov eax, edx
shl eax, 8
sub eax, edx
sub ecx, eax
movzx eax, byte [ecx + 0xcbf5c0]
xor eax, dword [ebx]
mov dword [ebx + 4], eax
cmp ebp, ebx
jne 0x4dfb72
mov eax, dword [esp + 0x34]
add esi, 1
add dword [esp + 0x18], 4
jmp 0x4dfb30
mov eax, dword [esp + 0xd4]
lea ebx, [eax + 1]
mov eax, dword [esp + 0x1c]
mov ecx, eax
shl ecx, 5
sub ecx, eax
xor eax, eax
jmp 0x4dfbd4
mov edx, dword [esp + eax*4 + 0x34]
movzx edx, byte [edx + 0xcbf4c0]
mov byte [ecx + eax + 0xcbf120], dl
add eax, 1
cmp ebx, eax
jne 0x4dfbd0
mov eax, dword [esp + 0xd4]
mov byte [eax + 0xcbf0fe], 1
jmp 0x4df90a
add esp, 0xbc
mov eax, 0xffffffff
pop ebx
pop esi
pop edi
pop ebp
ret
mov edi, dword [esp + 0x1c]
movzx edx, byte [0xcbf4c1]
mov eax, edi
shl eax, 5
sub eax, edi
mov byte [eax + 0xcbf120], dl
jmp 0x4dfbe9