Function at 0x4417c4
Capabilities:
Encode data using xor

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x18
mov esi, dword [esp + 0x3c]
mov edi, dword [esp + 0x34]
mov dword [esp + 4], 0x585b5a45
mov word [esp + 8], 0
mov byte [esp + 0xa], 0
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, eax
add cl, 0xf
xor cl, byte [esp + eax + 4]
add cl, 0xb5
mov byte [esp + eax + 4], cl
inc eax
cmp eax, 7
jne 0x4417e0
mov eax, dword [esp + 4]
mov ebx, dword [0x44c010]
test ebx, ebx
je 0x44184c
xor ecx, ecx
mov edx, dword [0x44c014]
nop
nop
nop
nop
cmp dword [edx + ecx*8], 0x3602324e
je 0x441820
inc ecx
cmp ebx, ecx
jne 0x441810
jmp 0x44184c
mov edx, dword [edx + ecx*8 + 4]
cmp edx, eax
je 0x44184c
lea ecx, [esp + 0x10]
push ecx
push 0
push 0
push 1
push dword [esp + 0x40]
push dword [esp + 0x40]
push 6
push edx
push dword [0x44c018]
call fcn.0043d120
add esp, 0x24
cmp eax, 0xc0000023
jne 0x441a95
push dword [esp + 0x10]
call fcn.004397b0
add esp, 4
mov dword [esp], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 4], 0x585b5a45
mov word [esp + 8], 0
mov byte [esp + 0xa], 0
xor edx, edx
mov ebx, edx
add bl, 0xf
xor bl, byte [esp + edx + 4]
add bl, 0xb5
mov byte [esp + edx + 4], bl
inc edx
cmp edx, 7
jne 0x441880
mov ebp, dword [esp + 4]
mov edx, dword [0x44c010]
test edx, edx
je 0x4418d7
mov dword [esp + 0xc], ecx
mov ecx, ebp
xor esi, esi
mov ebp, dword [0x44c014]
mov ebx, dword [esp + 0x44]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp dword [ebp + esi*8], 0x3602324e
je 0x4418dd
inc esi
cmp edx, esi
jne 0x4418c0
mov esi, dword [esp + 0x3c]
mov ebp, ecx
jmp 0x44191d
mov ebx, dword [esp + 0x44]
jmp 0x44191d
mov edx, dword [ebp + esi*8 + 4]
mov ebp, ecx
cmp edx, ecx
mov esi, dword [esp + 0x3c]
je 0x44191d
lea esi, [esp + 0x10]
push esi
push dword [esp + 0x10]
push dword [esp + 8]
push 1
push dword [esp + 0x40]
push dword [esp + 0x40]
push 6
push edx
push dword [0x44c018]
mov esi, eax
call fcn.0043d120
add esp, 0x24
mov ebp, eax
mov eax, esi
mov esi, dword [esp + 0x3c]
mov dword [esp + 0xc], ebp
test ebp, ebp
mov ebp, dword [esp + 0x40]
js 0x441a86
cmp dword [esp + 0x38], 0
je 0x441a1d
test edi, edi
je 0x441a0f
mov ecx, dword [esp]
mov ecx, dword [ecx + 0x10]
shr ecx, 1
mov edx, dword [esp + 0x38]
mov edx, dword [edx]
cmp edx, ecx
jb 0x441954
mov edx, ecx
test edx, edx
je 0x441a0a
add eax, 0x14
mov ecx, edx
and ecx, 3
je 0x4419a0
mov dword [esp + 0x14], edx
xor esi, esi
nop
nop
nop
nop
movzx ebp, word [eax]
xor edx, edx
test bp, bp
setne dl
lea eax, [eax + edx*2]
mov word [edi], bp
add edi, 2
inc esi
cmp ecx, esi
jne 0x441970
mov edx, dword [esp + 0x14]
mov ecx, edx
sub ecx, esi
mov ebp, dword [esp + 0x40]
mov esi, dword [esp + 0x3c]
cmp edx, 4
jae 0x4419b0
jmp 0x441a0a
mov ecx, edx
cmp edx, 4
jb 0x441a0a
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, word [eax]
xor ebx, ebx
test dx, dx
setne bl
lea esi, [eax + ebx*2]
mov word [edi], dx
movzx eax, word [eax + ebx*2]
xor edx, edx
test ax, ax
setne dl
lea ebx, [esi + edx*2]
mov word [edi + 2], ax
movzx eax, word [esi + edx*2]
xor edx, edx
test ax, ax
setne dl
lea esi, [ebx + edx*2]
mov word [edi + 4], ax
movzx edx, word [ebx + edx*2]
xor eax, eax
test dx, dx
setne al
mov word [edi + 6], dx
add edi, 8
lea eax, [esi + eax*2]
add ecx, 0xfffffffc
jne 0x4419b0
mov ebx, dword [esp + 0x44]
mov esi, dword [esp + 0x3c]
mov word [edi], 0
mov eax, dword [esp]
mov eax, dword [eax + 0x10]
shr eax, 1
mov ecx, dword [esp + 0x38]
mov dword [ecx], eax
test esi, esi
je 0x441a29
mov eax, dword [esp]
mov eax, dword [eax + 4]
mov dword [esi], eax
test ebx, ebx
je 0x441a86
test ebp, ebp
je 0x441a7e
mov eax, dword [ebx]
mov ecx, dword [esp]
mov ecx, dword [ecx + 0xc]
cmp eax, ecx
jb 0x441a3f
mov eax, ecx
mov ecx, dword [esp]
mov esi, dword [ecx + 8]
add esi, ecx
mov ecx, eax
shr ecx, 2
mov edx, eax
and edx, 0xfffffffc
mov edi, ebp
add ebp, edx
add edx, esi
xchg esi, esi
rep movsd dword es:[edi], dword [esi]
xchg esi, esi
mov ecx, eax
shr ecx, 1
and ecx, 1
mov esi, edx
mov edi, ebp
xchg esi, esi
rep movsw word es:[edi], word [esi]
xchg esi, esi
test al, 1
je 0x441a7e
and eax, 2
movzx ecx, byte [edx + eax]
mov byte [ebp + eax], cl
mov eax, dword [esp]
mov eax, dword [eax + 0xc]
mov dword [ebx], eax
push dword [esp]
call fcn.00439840
add esp, 4
mov eax, dword [esp + 0xc]
add esp, 0x18
pop esi
pop edi
pop ebx
pop ebp
ret