Function at 0x42c9e0
Capabilities:
Encode data using xor

Disassembly:
mov eax, 0xc6b8
call fcn.00496660
push ebx
push ebp
push esi
mov esi, dword [esp + 0xc6c8]
push edi
mov ebx, ecx
push 0
push 0
mov ecx, esi
mov dword [esp + 0x58], ebx
call fcn.0048c330
push 1
push 0x3c0
lea eax, [esp + 0x310]
push eax
mov ecx, esi
call fcn.0048c290
push 0xe
lea ecx, [esp + 0x30c]
push str.T98FDDIMAGE.R1
push ecx
call fcn.004982c0
add esp, 0xc
test eax, eax
je 0x42ca46
pop edi
pop esi
pop ebp
xor al, al
pop ebx
add esp, 0xc6b8
ret 4
push 0
push 0
mov ecx, esi
call fcn.0048c330
mov edx, dword [esp + 0x41b]
mov eax, dword [esp + 0x41a]
mov ecx, dword [esp + 0x419]
and edx, 0xff
shl edx, 8
and eax, 0xff
or edx, eax
mov eax, dword [esp + 0x418]
shl edx, 8
and ecx, 0xff
or edx, ecx
shl edx, 8
and eax, 0xff
or edx, eax
push edx
call fcn.00497ba0
mov ecx, dword [esp + 0x41f]
mov edx, dword [esp + 0x41e]
and ecx, 0xff
shl ecx, 8
mov ebp, eax
mov eax, dword [esp + 0x41d]
and edx, 0xff
or ecx, edx
mov edx, dword [esp + 0x41c]
shl ecx, 8
and eax, 0xff
or ecx, eax
add esp, 4
shl ecx, 8
and edx, 0xff
push 1
or ecx, edx
push ecx
push ebp
mov ecx, esi
mov dword [esp + 0x34], ebp
call fcn.0048c290
xor eax, eax
mov ecx, 0xac
lea edi, [esp + 0x58]
push str.NFD_R1
rep stosd dword es:[edi], eax
lea eax, [esp + 0x5c]
push 0x11
push eax
call fcn.00489320
mov cl, byte [ebp + 0x114]
lea edi, [ebx + 4]
mov byte [esp + 0x7e], cl
mov dword [ebx + 0x40020c], 0
mov dword [esp + 0x58], edi
mov ecx, 0xac
lea esi, [esp + 0x64]
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 0x40020c], 0x2b0
add esp, 0xc
mov ebx, 0x2b0
xor eax, eax
lea edi, [esp + 0x79]
lea esi, [ebp + 0x122]
mov dword [esp + 0x30], ebx
mov dword [esp + 0x48], eax
mov dword [esp + 0x40], edi
mov dword [esp + 0x38], esi
xor ecx, ecx
mov ch, byte [esi + 1]
xor edx, edx
mov dl, byte [esi - 1]
mov cl, byte [esi]
shl ecx, 8
or ecx, edx
xor edx, edx
mov dl, byte [esi - 2]
shl ecx, 8
or ecx, edx
je 0x42cfa5
mov byte [edi - 1], bl
mov edx, ebx
shr edx, 8
mov byte [edi], dl
mov edx, ebx
shr edx, 0x10
mov byte [edi + 1], dl
lea esi, [ecx + ebp]
mov edx, ebx
shr edx, 0x18
mov byte [edi + 2], dl
movzx dx, byte [esi + 1]
mov dword [esp + 0x3c], eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x2c], eax
mov al, byte [esi]
movzx bp, al
shl edx, 8
add ecx, 0x10
mov dword [esp + 0x24], esi
or ebp, edx
test bp, bp
jbe 0x42ce9f
jmp 0x42cbd0
mov ecx, dword [esp + 0x44]
mov esi, dword [esp + 0x28]
mov bl, byte [ecx + esi + 4]
lea ebp, [ecx + esi]
add ecx, 0x10
movzx ax, al
mov dword [esp + 0x44], ecx
xor ecx, ecx
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], ecx
or eax, edx
mov cl, byte [ebp]
xor edx, edx
mov byte [esp + 0x18], al
test bl, bl
sete al
mov dl, ah
mov byte [esp + 0x14], cl
mov cl, byte [ebp + 1]
mov byte [esp + 0x15], cl
mov cl, byte [ebp + 2]
mov byte [esp + 0x19], dl
mov dl, byte [ebp + 8]
dec eax
and eax, 0xffffffc0
add eax, 0x40
mov byte [esp + 0x1a], al
mov al, byte [ebp + 5]
test al, al
sete al
mov byte [esp + 0x16], cl
mov cl, byte [ebp + 3]
mov byte [esp + 0x17], cl
dec eax
and eax, 0x10
test dl, 0x20
mov byte [esp + 0x1b], al
je 0x42cc5b
mov dl, byte [ebp + 9]
shr dl, 1
and dl, 0x10
or dl, 0xa0
mov byte [esp + 0x1c], dl
jmp 0x42cc76
test dl, 1
je 0x42cc67
mov byte [esp + 0x1c], 0xe0
jmp 0x42cc76
test byte [ebp + 9], 1
mov byte [esp + 0x1c], 0xf0
jne 0x42cc76
mov byte [esp + 0x1c], al
and ecx, 3
mov dx, word [ecx*4 + 0x4ae2e8]
xor eax, eax
mov byte [esp + 0x6c8], 0
mov ecx, 0xfff
lea edi, [esp + 0x6c9]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
xor ebx, ebx
mov bl, dh
mov eax, 0xe5e5e5e5
mov ecx, 0x1000
lea edi, [esp + 0x46c8]
rep stosd dword es:[edi], eax
mov edi, dword [esp + 0xc6cc]
xor eax, eax
mov ah, bl
mov byte [esp + 0x22], dl
mov byte [esp + 0x23], bl
and edx, 0xff
push 1
lea ecx, [esp + 0x46cc]
mov byte [esp + 0x16], 0
and eax, 0xffff
mov ebx, eax
or ebx, edx
push ebx
push ecx
mov ecx, edi
call fcn.0048c290
mov al, byte [ebp + 0xa]
test al, al
mov dword [esp + 0x54], 0
jbe 0x42cd58
mov esi, ebx
push 1
push esi
lea edx, [esp + 0x86d0]
push edx
mov ecx, edi
call fcn.0048c290
xor eax, eax
test esi, esi
jle 0x42cd46
mov esi, ebx
mov dl, byte [esp + eax + 0x46c8]
mov cl, byte [esp + eax + 0x86c8]
xor cl, dl
mov dl, byte [esp + eax + 0x6c8]
or dl, cl
mov cl, byte [esp + 0x12]
or cl, dl
mov byte [esp + eax + 0x6c8], dl
inc eax
cmp eax, esi
mov byte [esp + 0x12], cl
jl 0x42cd17
mov eax, dword [esp + 0x54]
xor ecx, ecx
mov cl, byte [ebp + 0xa]
inc eax
mov dword [esp + 0x54], eax
cmp eax, ecx
jl 0x42ccfd
mov eax, dword [esp + 0x50]
mov ecx, dword [eax + 0x40020c]
lea edx, [ecx + 0x10]
cmp edx, 0x380000
ja 0x42ca37
mov edx, dword [esp + 0x14]
lea ecx, [ecx + eax + 4]
mov dword [ecx], edx
mov edx, dword [esp + 0x18]
mov dword [ecx + 4], edx
mov edx, dword [esp + 0x1c]
mov dword [ecx + 8], edx
mov edx, dword [esp + 0x20]
mov dword [ecx + 0xc], edx
mov edi, dword [eax + 0x40020c]
add edi, 0x10
mov edx, edi
lea ecx, [ebx + edx]
cmp ecx, 0x380000
mov dword [eax + 0x40020c], edi
ja 0x42ca37
mov edi, dword [esp + 0x4c]
add edi, edx
mov ecx, ebx
mov edx, ecx
shr ecx, 2
lea esi, [esp + 0x46c8]
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
add dword [eax + 0x40020c], ebx
mov eax, dword [esp + 0x30]
lea ecx, [eax + ebx + 0x10]
cmp byte [ebp + 0xb], 0x10
mov al, byte [esp + 0x12]
setne dl
mov dword [esp + 0x30], ecx
dec edx
and edx, 0xfffffff0
add edx, 0x20
test al, al
mov byte [esp + 0x73], dl
je 0x42ce5c
mov eax, dword [esp + 0x2c]
mov edx, dword [esp + 0x14]
mov byte [esp + 0x1d], al
sar eax, 8
mov byte [esp + 0x1e], al
mov eax, dword [esp + 0x34]
lea ecx, [eax + 0x507808]
mov dword [ecx], edx
mov edx, dword [esp + 0x18]
mov dword [ecx + 4], edx
mov edx, dword [esp + 0x1c]
mov dword [ecx + 8], edx
mov edx, dword [esp + 0x20]
mov dword [ecx + 0xc], edx
add eax, 0x10
mov ecx, ebx
mov edx, ecx
shr ecx, 2
lea edi, [eax + 0x507808]
lea esi, [esp + 0x6c8]
rep movsd dword es:[edi], dword [esi]
add eax, ebx
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x3c]
mov ecx, edx
and ecx, 3
inc eax
rep movsb byte es:[edi], byte [esi]
mov dword [esp + 0x3c], eax
mov edx, dword [esp + 0x2c]
mov eax, dword [esp + 0x24]
inc edx
mov dword [esp + 0x2c], edx
movzx dx, byte [eax + 1]
mov al, byte [eax]
shl edx, 8
mov ecx, eax
mov esi, edx
and esi, 0xffff
and ecx, 0xff
or ecx, esi
cmp dword [esp + 0x2c], ecx
jl 0x42cbcc
mov ebx, dword [esp + 0x30]
mov ecx, dword [esp + 0x44]
mov esi, dword [esp + 0x24]
mov edi, dword [esp + 0x40]
xor edx, edx
mov dh, byte [esi + 3]
mov dword [esp + 0x24], 0
mov dl, byte [esi + 2]
test dx, dx
jbe 0x42cf09
mov eax, dword [esp + 0x28]
lea ebp, [ecx + eax]
xor ecx, ecx
mov eax, ebp
mov ch, byte [eax + 0xd]
xor edx, edx
mov dl, byte [eax + 0xb]
add ebp, 0x10
push 1
mov cl, byte [eax + 0xc]
shl ecx, 8
or ecx, edx
xor edx, edx
mov dl, byte [eax + 0xa]
shl ecx, 8
or ecx, edx
xor edx, edx
mov dl, byte [eax + 9]
inc edx
imul ecx, edx
push ecx
mov ecx, dword [esp + 0xc6d4]
call fcn.0048c330
mov eax, dword [esp + 0x24]
xor ecx, ecx
mov ch, byte [esi + 3]
inc eax
mov dword [esp + 0x24], eax
mov cl, byte [esi + 2]
cmp eax, ecx
jl 0x42cebb
mov ecx, dword [esp + 0x3c]
test ecx, ecx
je 0x42cf9b
mov eax, 0x507808
jle 0x42cf46
mov dx, cx
shr dx, 8
mov word [esp + 0x12], dx
mov esi, ecx
jmp 0x42cf31
mov dx, word [esp + 0x12]
mov byte [eax + 5], dl
xor edx, edx
dec esi
mov byte [eax + 4], cl
mov dh, byte [eax + 0xf]
mov dl, byte [eax + 0xe]
lea eax, [eax + edx + 0x10]
jne 0x42cf2c
mov eax, dword [esp + 0x50]
mov edx, dword [eax + 0x40020c]
mov ecx, dword [esp + 0x34]
lea esi, [edx + ecx]
cmp esi, 0x380000
ja 0x42ca37
lea edi, [edx + eax + 4]
mov edx, ecx
shr ecx, 2
mov esi, 0x507808
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov esi, dword [eax + 0x40020c]
mov edi, dword [esp + 0x40]
mov ecx, edx
add esi, ecx
add ebx, ecx
mov dword [eax + 0x40020c], esi
mov dword [esp + 0x30], ebx
mov byte [eax + 0x40021d], 1
mov esi, dword [esp + 0x38]
mov ebp, dword [esp + 0x28]
xor eax, eax
mov ecx, dword [esp + 0x48]
inc ecx
add esi, 4
add edi, 4
cmp ecx, 0xa4
mov dword [esp + 0x48], ecx
mov dword [esp + 0x38], esi
mov dword [esp + 0x40], edi
jl 0x42cb60
push ebp
call fcn.00496e03
mov edi, dword [esp + 0x50]
mov ecx, ebx
add esp, 4
mov eax, ebx
shr ecx, 0x10
mov byte [esp + 0x74], bl
shr eax, 8
mov byte [esp + 0x76], cl
shr ebx, 0x18
mov byte [esp + 0x75], al
mov byte [esp + 0x77], bl
mov ecx, 0xac
lea esi, [esp + 0x58]
rep movsd dword es:[edi], dword [esi]
pop edi
pop esi
pop ebp
mov al, 1
pop ebx
add esp, 0xc6b8
ret 4