Function at 0x404f70
Capabilities:
Encode data using xor

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x4c
mov esi, dword [esp + 0x70]
push 0x4df40
call fcn.00408f60
add esp, 4
mov dword [esi], 0
xor edi, edi
test eax, eax
je 0x40552b
mov ebp, eax
mov eax, dword [esp + 0x6c]
imul eax, dword [esp + 0x64]
mov dword [esp + 4], 0
mov dword [esp + 0x10], 1
mov dword [esp + 0x18], eax
inc eax
imul eax, dword [esp + 0x68]
mov ecx, 0x79
cmp eax, 0x40
jl 0x404fcc
add eax, 0x39
mov ecx, eax
mov dword [esp + 8], ecx
push ecx
call fcn.00408f60
add esp, 4
mov dword [esp + 0xc], eax
test eax, eax
je 0x40533e
mov dword [esp + 0x1c], 0x29
xor esi, esi
mov cl, 0x29
mov ebx, 0x29
mov dword [esp + 0x14], ebp
jmp 0x405011
mov edi, esi
mov ebp, dword [esp + 0x14]
mov esi, edi
dec ebx
mov dword [esp + 0x1c], ebx
mov ecx, ebx
je 0x40508e
lea edi, [esi + 1]
mov ebp, dword [esp + 8]
cmp edi, ebp
jbe 0x405050
cmp dword [esp + 0x10], 0
je 0x405000
mov byte [esp + 3], cl
jmp 0x405034
cmp edi, ebp
jbe 0x405060
add ebp, ebp
cmp ebp, 0x81
jae 0x405030
mov ebp, 0x80
jmp 0x405030
mov eax, dword [esp + 0xc]
jmp 0x40507e
push ebp
push dword [esp + 0x10]
call fcn.00408f80
add esp, 8
test eax, eax
je 0x405000
mov dword [esp + 0xc], eax
mov dword [esp + 8], ebp
movzx ecx, byte [esp + 3]
mov byte [eax + esi], cl
mov dword [esp + 4], edi
mov ebx, dword [esp + 0x1c]
jmp 0x405002
mov eax, dword [esp + 0x74]
cmp eax, 0xa
jb 0x40509c
mov eax, 0xa
mov eax, dword [eax*4 + 0x438a58]
mov ecx, eax
or ecx, 0x1000
mov dword [ebp], 0x404ee0
lea edx, [esp + 4]
mov dword [ebp + 4], edx
mov dword [ebp + 8], ecx
mov ecx, eax
and ecx, 0xfff
imul edx, ecx, 0x5556
add edx, 0xaaac
shr edx, 0x10
inc edx
mov dword [ebp + 0xc], edx
shr eax, 0xe
and eax, 1
mov dword [ebp + 0x14], eax
shr ecx, 2
imul eax, ecx, 0x5556
add eax, 0xaaac
shr eax, 0x10
inc eax
mov dword [ebp + 0x10], eax
lea eax, [ebp + 0x29272]
push 0x10000
push 0
push eax
call fcn.00408fe0
add esp, 0xc
mov dword [ebp + 0x24], 0
mov dword [ebp + 0x20], 0
mov dword [ebp + 0x1c], 0
lea eax, [ebp + 0x9272]
lea ecx, [ebp + 0x9273]
mov dword [ebp + 0x3c], 0
mov dword [ebp + 0x40], 0
mov dword [ebp + 0x44], 0
mov dword [ebp + 0x48], 0
mov dword [ebp + 0x58], 0
mov dword [ebp + 0x5c], 0
mov dword [ebp + 0x60], 0
mov dword [ebp + 0x64], 0
mov dword [ebp + 0x68], 0
mov dword [ebp + 0x28], ecx
mov dword [ebp + 0x2c], eax
mov byte [ebp + 0x9272], 0
mov dword [ebp + 0x38], 8
lea eax, [ebp + 0x39272]
mov dword [ebp + 0x30], eax
mov dword [ebp + 0x34], eax
mov dword [ebp + 0x6c], 0
mov dword [ebp + 0x54], 0
mov dword [ebp + 0x50], 0
mov dword [ebp + 0x4c], 0
mov dword [ebp + 0x18], 1
lea esi, [ebp + 0x70]
mov eax, ebp
add eax, 0x8192
push 0x280
push 0
push eax
call fcn.00408fe0
add esp, 0xc
push 0x8121
push 0
push esi
call fcn.00408fe0
add esp, 0xc
lea edi, [esp + 0x20]
cmp dword [esp + 0x68], 0
jle 0x40524a
mov eax, dword [esp + 0x68]
lea esi, [eax - 1]
xor ebx, ebx
jmp 0x40521c
mov ecx, dword [esp + 0x18]
imul eax, ecx
add eax, dword [esp + 0x60]
mov dword [esp + 0x20], ecx
push 0
push 0
push 0
mov edi, ebp
push ebp
push eax
mov ebp, dword [esp + 0x28]
push ebp
call fcn.00403910
add esp, 0x18
inc ebx
add esi, 0xffffffff
jae 0x40524a
mov dword [esp + 0x20], 1
push 0
push 0
push 0
mov eax, ebp
mov ebp, edi
push edi
lea ecx, [esp + 0x2c]
push ecx
push eax
call fcn.00403910
add esp, 0x18
mov eax, ebx
cmp dword [esp + 0x78], 0
je 0x4051f0
mov eax, esi
jmp 0x4051f0
mov dword [esp + 0x20], 0
push 4
push 0
push 0
push edi
push 0
push ebp
call fcn.00403910
add esp, 0x18
cmp eax, 1
jne 0x40534c
mov ebp, dword [esp + 4]
lea ebx, [ebp - 0x29]
mov eax, dword [esp + 0x70]
mov dword [eax], ebx
push 0x29
push 0x438a89
push edi
call fcn.00408f90
add esp, 0xc
mov eax, dword [esp + 0x64]
mov byte [esp + 0x32], ah
mov byte [esp + 0x33], al
mov eax, dword [esp + 0x68]
mov byte [esp + 0x36], ah
mov byte [esp + 0x37], al
mov eax, dword [esp + 0x6c]
movzx eax, byte [eax + 0x438a84]
mov byte [esp + 0x39], al
mov eax, ebx
shr eax, 0x18
mov byte [esp + 0x41], al
mov eax, ebx
shr eax, 0x10
mov byte [esp + 0x42], al
mov byte [esp + 0x43], bh
mov byte [esp + 0x44], bl
mov ecx, 0xffffffff
mov eax, 0xc
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [esp + eax + 0x20]
mov esi, ecx
shr esi, 4
xor ecx, edx
and ecx, 0xf
xor esi, dword [ecx*4 + 0x438a18]
mov ecx, esi
shr ecx, 4
and esi, 0xf
shr edx, 4
xor edx, esi
xor ecx, dword [edx*4 + 0x438a18]
cmp eax, 0x1c
je 0x40535e
movzx edx, byte [esp + eax + 0x21]
mov esi, ecx
shr esi, 4
xor ecx, edx
and ecx, 0xf
xor esi, dword [ecx*4 + 0x438a18]
mov ecx, esi
shr ecx, 4
and esi, 0xf
shr edx, 4
xor edx, esi
xor ecx, dword [edx*4 + 0x438a18]
add eax, 2
jmp 0x4052e0
push ebp
call fcn.00408f70
add esp, 4
jmp 0x40552b
push ebp
call fcn.00408f70
add esp, 4
push dword [esp + 0xc]
jmp 0x405521
not ecx
bswap ecx
mov dword [esp + 0x3d], ecx
mov ebx, dword [esp + 0xc]
push 0x29
push edi
push ebx
call fcn.00408f90
add esp, 0xc
lea esi, [ebp + 0x10]
mov edi, dword [esp + 8]
cmp esi, edi
jbe 0x4053a5
cmp dword [esp + 0x10], 0
jne 0x405394
jmp 0x40550a
cmp esi, edi
jbe 0x4053a9
add edi, edi
cmp edi, 0x81
jae 0x405390
mov edi, 0x80
jmp 0x405390
mov eax, ebp
jmp 0x4053c9
push edi
push ebx
call fcn.00408f80
add esp, 8
test eax, eax
je 0x405506
mov ebx, eax
mov dword [esp + 0xc], eax
mov dword [esp + 8], edi
mov eax, dword [esp + 4]
mov dword [ebx + eax + 0xc], 0x826042ae
mov dword [ebx + eax + 8], 0x444e4549
mov dword [ebx + eax + 4], 0
mov dword [ebx + eax], 0
mov dword [esp + 4], esi
mov ebx, dword [esp + 0x70]
mov edx, dword [ebx]
mov esi, edx
mov edi, dword [esp + 0xc]
add esi, 4
je 0x405418
mov dword [esp + 0x18], edi
add edi, 0x25
cmp edx, 0xfffffffd
jne 0x40541f
mov ecx, 0xffffffff
test dl, 1
jne 0x405492
jmp 0x4054ba
xor ecx, ecx
jmp 0x4054c0
and esi, 0xfffffffe
mov ecx, 0xffffffff
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ebx, byte [edi]
mov eax, ecx
shr eax, 4
xor ecx, ebx
and ecx, 0xf
xor eax, dword [ecx*4 + 0x438a18]
mov ecx, eax
shr ecx, 4
and eax, 0xf
shr ebx, 4
xor ebx, eax
xor ecx, dword [ebx*4 + 0x438a18]
movzx ebx, byte [edi + 1]
add edi, 2
mov eax, ecx
shr eax, 4
xor ecx, ebx
and ecx, 0xf
xor eax, dword [ecx*4 + 0x438a18]
mov ecx, eax
shr ecx, 4
and eax, 0xf
shr ebx, 4
xor ebx, eax
xor ecx, dword [ebx*4 + 0x438a18]
add esi, 0xfffffffe
jne 0x405430
mov ebx, dword [esp + 0x70]
test dl, 1
je 0x4054ba
movzx edx, byte [edi]
mov eax, ecx
shr eax, 4
xor ecx, edx
and ecx, 0xf
xor eax, dword [ecx*4 + 0x438a18]
mov ecx, eax
shr ecx, 4
and eax, 0xf
shr edx, 4
xor edx, eax
xor ecx, dword [edx*4 + 0x438a18]
not ecx
mov edi, dword [esp + 0x18]
mov eax, ecx
shr eax, 0x18
mov byte [edi + ebp], al
mov eax, ecx
shr eax, 0x10
mov edx, dword [esp + 4]
mov esi, dword [esp + 0xc]
mov byte [esi + edx - 0xf], al
mov eax, dword [esp + 4]
mov edx, dword [esp + 0xc]
mov byte [edx + eax - 0xe], ch
mov eax, dword [esp + 4]
mov edx, dword [esp + 0xc]
mov byte [edx + eax - 0xd], cl
add dword [ebx], 0x39
push dword [esp + 0x14]
call fcn.00408f70
add esp, 4
mov edi, dword [esp + 0xc]
jmp 0x40552b
mov ebx, dword [esp + 0xc]
mov eax, dword [esp + 0x70]
mov dword [eax], 0
push dword [esp + 0x14]
call fcn.00408f70
add esp, 4
push ebx
call fcn.00408f70
add esp, 4
xor edi, edi
mov eax, edi
add esp, 0x4c
pop esi
pop edi
pop ebx
pop ebp
ret