Function at 0x4349c9
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x3c
mov eax, dword [ebp + 8]
lea edx, [ebp - 0x3c]
push ebx
push esi
xor ebx, ebx
mov dword [ebp - 0x3b], 0xb10496ff
push edi
lea ecx, [ebp - 0x14]
mov byte [eax], bl
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x34], 0x57b2805e
mov word [ebp - 0x26], 0x7210
mov word [ebp - 0x2f], 0x1497
mov word [ebp - 0x2c], 0xc12b
mov dword [ebp - 0x23], 0x16c648bb
mov word [ebp - 0x37], 0xbd5d
mov byte [ebp - 0x24], 0x1a
mov word [ebp - 0x29], 0xd016
mov byte [ebp - 0x3c], 0x1e
mov byte [ebp - 0x2a], 5
mov byte [ebp - 0x35], 0xc9
mov byte [ebp - 0x27], 0xa1
mov byte [ebp - 0x30], 0xf0
mov byte [ebp - 0x2d], 0xae
call fcn.0042b3ea
push eax
lea ecx, [ebp - 0x10]
call fcn.00401929
lea ecx, [ebp - 0x14]
call fcn.00401871
push 0x46
mov dword [ebp - 0xc], ebx
lea eax, [ebp - 8]
pop ebx
push eax
mov dword [ebp - 0x3c], 0xce50b9d4
lea esi, [ebp - 0x3c]
mov dword [ebp - 0x20], 0xb5296e9c
mov dword [ebp - 0x26], 0x9ce16fd2
mov dword [ebp - 0x2c], 0x397f9fed
mov dword [ebp - 0x30], 0x60d251b6
mov byte [ebp - 0x28], 0xaa
mov word [ebp - 0x38], 0x176b
mov word [ebp - 0x35], 0x483
mov word [ebp - 0x32], 0x988
mov byte [ebp - 0x27], bl
mov word [ebp - 0x22], 0x2e7e
mov byte [ebp - 0x36], 0xf7
mov byte [ebp - 0x33], 0xfa
call dword [sym.imp.system.dll_public:_static_class_Ref_class_String____cdecl_String::create_void_]
pop ecx
mov byte [ebp - 1], 0x92
mov byte [ebp - 0x14], bl
mov ecx, dword [ebp - 8]
lea edx, [ebp - 0x18]
push dword [ebp - 0x14]
push edx
mov eax, dword [ecx]
call dword [eax + 0x2c]
push eax
lea ecx, [ebp - 8]
call fcn.00401929
lea ecx, [ebp - 0x18]
call fcn.00401871
mov cl, byte [ebp - 1]
add cl, bl
inc esi
mov byte [ebp - 1], cl
mov bl, byte [esi]
xor bl, cl
mov byte [ebp - 0x14], bl
jne 0x434aac
lea eax, [ebp - 8]
push eax
lea ecx, [ebp - 0xc]
call fcn.00401929
lea ecx, [ebp - 8]
call fcn.00401871
push 0x34
pop ecx
mov esi, 0x454510
mov edi, 0x4741e0
rep movsd dword es:[edi], dword [esi]
xor edx, edx
mov esi, 0x473470
mov edi, 0x474170
xor ecx, ecx
mov eax, dword [esi + ecx*4]
mov ebx, 0x454368
cmp eax, dword [ebx + ecx*4]
mov ebx, 0x473470
jne 0x434b29
inc ecx
cmp ecx, 0x1a
jne 0x434b0f
jmp 0x434b53
add esi, 0x68
inc edx
cmp esi, edi
jl 0x434b0d
xor edx, edx
mov eax, ebx
cmp dword [eax], 0
je 0x434b44
add eax, 0x68
inc edx
cmp eax, edi
jl 0x434b35
jmp 0x434b5b
imul edi, edx, 0x68
mov esi, 0x454368
push 0x1a
pop ecx
add edi, ebx
rep movsd dword es:[edi], dword [esi]
test edx, edx
jns 0x434c0c
call dword [sym.imp.lib.syslog.dll_public:_static_unsigned_int___cdecl_SysLogFilter::level_void_]
cmp eax, 4
ja 0x434ce1
push dword [0x4741b0]
call dword [sym.imp.lib.syslog.dll_public:_static_bool___cdecl_SysLogFilter::state_unsigned_int_]
pop ecx
test al, al
je 0x434ce1
lea eax, [ebp - 0x1c]
push eax
call dword [sym.imp.lib.syslog.dll_public:_static_class_Ref_class_SysLogStream____cdecl_SysLogStream::stdOutPrinter_void_]
pop ecx
push 4
lea edx, [ebp - 8]
mov ecx, dword [eax]
push edx
mov eax, dword [ecx]
call dword [eax]
push dword [0x4741b0]
mov esi, dword [eax]
mov edi, dword [esi]
call dword [sym.imp.lib.syslog.dll_public:_static_unsigned_int___cdecl_SysLogFilter::id_unsigned_int_]
pop ecx
push eax
lea eax, [ebp - 0x14]
mov ecx, esi
push eax
call dword [edi + 4]
mov ecx, dword [eax]
push ecx
mov eax, dword [ecx + 4]
mov esi, dword [eax + 8]
lea eax, [ebp - 0x10]
add esi, ecx
mov ecx, esp
push eax
call fcn.0040203d
lea eax, [ebp - 0x18]
push eax
mov eax, dword [esi + 4]
lea ecx, [esi + 4]
call dword [eax + 0x1c]
lea edx, [ebp + 8]
push edx
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 0x6c]
lea ecx, [ebp + 8]
call fcn.00401871
lea ecx, [ebp - 0x18]
call fcn.00401871
lea ecx, [ebp - 0x14]
call fcn.00401871
lea ecx, [ebp - 8]
call fcn.00401871
lea ecx, [ebp - 0x1c]
call fcn.00401871
jmp 0x434ce1
call fcn.004374a4
test eax, eax
jns 0x434cdb
call dword [sym.imp.lib.syslog.dll_public:_static_unsigned_int___cdecl_SysLogFilter::level_void_]
cmp eax, 4
ja 0x434cd4
push dword [0x4741b0]
call dword [sym.imp.lib.syslog.dll_public:_static_bool___cdecl_SysLogFilter::state_unsigned_int_]
pop ecx
test al, al
je 0x434cd4
lea eax, [ebp - 8]
push eax
call dword [sym.imp.lib.syslog.dll_public:_static_class_Ref_class_SysLogStream____cdecl_SysLogStream::stdOutPrinter_void_]
pop ecx
push 4
lea edx, [ebp - 0x14]
mov ecx, dword [eax]
push edx
mov eax, dword [ecx]
call dword [eax]
push dword [0x4741b0]
mov esi, dword [eax]
mov edi, dword [esi]
call dword [sym.imp.lib.syslog.dll_public:_static_unsigned_int___cdecl_SysLogFilter::id_unsigned_int_]
pop ecx
push eax
lea eax, [ebp - 0x18]
mov ecx, esi
push eax
call dword [edi + 4]
push ecx
mov ecx, esp
mov esi, dword [eax]
mov eax, dword [ebp - 0xc]
mov dword [ecx], eax
test eax, eax
je 0x434c8d
mov ecx, dword [eax + 4]
add eax, 4
mov ecx, dword [ecx + 4]
add ecx, eax
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [esi + 4]
lea edx, [ebp - 0x1c]
push edx
mov ecx, dword [eax + 8]
add ecx, 4
add ecx, esi
mov eax, dword [ecx]
call dword [eax + 0x1c]
lea edx, [ebp + 8]
push edx
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 0x6c]
lea ecx, [ebp + 8]
call fcn.00401871
lea ecx, [ebp - 0x1c]
call fcn.00401871
lea ecx, [ebp - 0x18]
call fcn.00401871
lea ecx, [ebp - 0x14]
call fcn.00401871
lea ecx, [ebp - 8]
call fcn.00401871
call fcn.00437504
jmp 0x434ce1
mov eax, dword [ebp + 8]
mov byte [eax], 1
mov eax, dword [ebp - 0xc]
test eax, eax
je 0x434cf8
mov ecx, dword [eax + 4]
add eax, 4
mov ecx, dword [ecx + 4]
add ecx, eax
mov eax, dword [ecx]
call dword [eax + 8]
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x434d0f
mov ecx, dword [eax + 4]
add eax, 4
mov ecx, dword [ecx + 4]
add ecx, eax
mov eax, dword [ecx]
call dword [eax + 8]
pop edi
pop esi
pop ebx
leave
ret 4