Function at 0x412a3d
Capabilities:
Encode data using xor
Encrypt data using aes
Reference aes constants

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x38
push esi
mov esi, ecx
cmp byte [esi + 4], 0
jne 0x412a67
push 0x48d368
lea ecx, [ebp - 0x38]
call fcn.00437c6a
push 0x484900
lea eax, [ebp - 0x38]
push eax
call fcn.00437067
mov eax, dword [esi + 0x3cc]
cmp eax, 0x10
jne 0x412a84
push dword [ebp + 0xc]
mov ecx, esi
push dword [ebp + 8]
call fcn.00412429
jmp 0x412cc9
push ebx
cdq
push edi
push 4
pop ecx
idiv ecx
mov edi, eax
sub eax, ecx
xor ecx, ecx
cmp edi, 6
setne cl
inc ecx
neg eax
sbb eax, eax
and eax, ecx
shl eax, 5
test edi, edi
mov ecx, dword [eax + 0x4765f0]
mov dword [ebp - 0x1c], ecx
mov ecx, dword [eax + 0x4765f8]
mov eax, dword [eax + 0x476600]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x18], ecx
lea eax, [esi + 0x454]
jle 0x412b07
lea ecx, [esi + 8]
mov dword [ebp - 4], ecx
mov ecx, dword [ebp + 8]
mov dword [ebp - 0xc], edi
movzx edx, byte [ecx]
shl edx, 0x18
mov dword [eax], edx
inc ecx
movzx edx, byte [ecx]
shl edx, 0x10
or dword [eax], edx
xor edx, edx
inc ecx
mov dh, byte [ecx]
or dword [eax], edx
inc ecx
movzx ebx, byte [ecx]
or dword [eax], ebx
mov ebx, dword [ebp - 4]
mov ebx, dword [ebx]
add dword [ebp - 4], 4
mov edx, eax
xor dword [edx], ebx
inc ecx
add eax, 4
dec dword [ebp - 0xc]
jne 0x412ad3
xor eax, eax
inc eax
cmp dword [esi + 0x3d0], eax
mov dword [ebp - 0xc], eax
mov ebx, 0xff
jle 0x412bfe
lea eax, [esi + 0x28]
mov dword [ebp - 8], eax
test edi, edi
jle 0x412bcc
mov ecx, dword [ebp - 0x1c]
lea eax, [esi + 0x434]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0x18]
sub eax, ecx
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x20]
sub eax, ecx
mov dword [ebp + 8], ecx
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x14], edi
mov ecx, dword [ebp + 8]
mov eax, dword [ebp - 0x24]
add eax, ecx
cdq
idiv edi
movzx eax, byte [esi + edx*4 + 0x455]
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0x2c], eax
lea eax, [edx + ecx]
cdq
idiv edi
mov ecx, dword [ebp - 0x2c]
mov ecx, dword [ecx*4 + 0x473dc8]
mov eax, dword [esi + edx*4 + 0x454]
and eax, ebx
xor ecx, dword [eax*4 + 0x4741c8]
mov eax, dword [ebp + 8]
cdq
idiv edi
xor eax, eax
mov al, byte [esi + edx*4 + 0x456]
and eax, ebx
xor ecx, dword [eax*4 + 0x4739c8]
mov eax, dword [ebp - 0x10]
movzx edx, byte [eax + 0x23]
xor ecx, dword [edx*4 + 0x4735c8]
mov edx, dword [ebp - 4]
xor ecx, dword [edx]
add dword [ebp - 4], 4
mov dword [eax], ecx
add eax, 4
inc dword [ebp + 8]
dec dword [ebp - 0x14]
mov dword [ebp - 0x10], eax
jne 0x412b54
mov eax, edi
shl eax, 2
push eax
lea eax, [esi + 0x434]
push eax
lea eax, [esi + 0x454]
push eax
call fcn.00436500
add dword [ebp - 8], 0x20
add esp, 0xc
inc dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
cmp eax, dword [esi + 0x3d0]
jl 0x412b24
and dword [ebp - 4], 0
test edi, edi
jle 0x412cc7
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp + 0xc]
lea eax, [esi + 0x454]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x1c]
sub eax, edx
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x20]
sub eax, edx
mov dword [ebp + 8], edx
mov dword [ebp - 0x28], eax
mov eax, dword [esi + 0x3d0]
mov edx, dword [ebp - 4]
lea eax, [edx + eax*8]
mov eax, dword [esi + eax*4 + 8]
mov edx, dword [ebp - 0xc]
movzx edx, byte [edx + 3]
mov dword [ebp + 0xc], eax
sar eax, 0x18
xor al, byte [edx + str.cw]
mov edx, dword [ebp - 0x2c]
mov byte [ecx], al
mov eax, dword [ebp + 8]
add eax, edx
cdq
idiv edi
xor eax, eax
inc ecx
add dword [ebp - 0xc], 4
mov al, byte [esi + edx*4 + 0x456]
mov edx, dword [ebp + 0xc]
sar edx, 0x10
and eax, ebx
xor dl, byte [eax + str.cw]
mov eax, dword [ebp + 8]
mov byte [ecx], dl
cdq
idiv edi
inc ecx
movzx eax, byte [esi + edx*4 + 0x455]
mov edx, dword [ebp + 0xc]
sar edx, 8
xor dl, byte [eax + str.cw]
mov eax, dword [ebp + 8]
mov byte [ecx], dl
mov edx, dword [ebp - 0x28]
add eax, edx
cdq
idiv edi
inc ecx
mov eax, dword [esi + edx*4 + 0x454]
and eax, ebx
mov al, byte [eax + str.cw]
xor al, byte [ebp + 0xc]
mov byte [ecx], al
inc ecx
inc dword [ebp - 4]
inc dword [ebp + 8]
cmp dword [ebp - 4], edi
jl 0x412c2c
pop edi
pop ebx
pop esi
leave
ret 8