Function at 0x443250
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x518
mov edi, dword [ebp + 8]
mov dword [esp + 0x188], 0x4c4d4a4b
mov dword [esp + 0x18c], 0
xor eax, eax
nop
nop
nop
nop
nop
nop
movzx ecx, byte [esp + eax + 0x188]
mov edx, eax
xor edx, 0x8ac45b6d
mov esi, eax
or esi, 0x753ba492
and edx, esi
add edx, esi
mov esi, ecx
and esi, edx
add esi, esi
sub edx, esi
add dl, cl
add dl, 0x26
mov byte [esp + eax + 0x188], dl
inc eax
cmp eax, 8
jne 0x443280
mov eax, dword [esp + 0x188]
mov ecx, dword [0x451b4c]
test ecx, ecx
je 0x44330a
xor edx, edx
mov esi, dword [0x451b50]
nop
cmp dword [esi + edx*8], 0x7789b0cb
je 0x4432e0
inc edx
cmp ecx, edx
jne 0x4432d0
jmp 0x44330a
mov ecx, dword [esi + edx*8 + 4]
cmp ecx, eax
je 0x44330a
lea eax, [esp + 0x10]
push 2
push 0
push 0
push eax
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 7
push dword [0x451b54]
push ecx
call fcn.00441b10
add esp, 0x28
test eax, eax
js 0x4435c6
mov eax, dword [esp + 0x10]
mov dword [esp + 4], eax
mov dword [esp + 0x188], 0x4c4d4a4b
mov dword [esp + 0x18c], 0
xor ecx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [esp + ecx + 0x188]
mov ebx, ecx
xor ebx, 0x8ac45b6d
mov eax, ecx
or eax, 0x753ba492
and ebx, eax
add ebx, eax
mov eax, edx
and eax, ebx
add eax, eax
sub ebx, eax
add bl, dl
add bl, 0x26
mov byte [esp + ecx + 0x188], bl
inc ecx
cmp ecx, 8
jne 0x443340
mov esi, dword [esp + 0x188]
mov eax, dword [0x451b4c]
test eax, eax
je 0x4433d5
xor ecx, ecx
mov edx, dword [0x451b50]
nop
nop
nop
cmp dword [edx + ecx*8], 0x1cbb9425
je 0x4433a0
inc ecx
cmp eax, ecx
jne 0x443390
jmp 0x4433d5
mov eax, dword [edx + ecx*8 + 4]
cmp eax, esi
je 0x4433d5
lea ecx, [esp + 0x188]
push 0
push 0x30
push ecx
push 0
push dword [esp + 0x14]
push 5
push dword [0x451b54]
push eax
call fcn.00441b10
add esp, 0x20
mov esi, eax
mov eax, dword [esp + 0x10]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x190]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x194]
mov dword [esp + 8], eax
mov dword [esp + 0x68], 0x4c4d4a4b
mov dword [esp + 0x6c], 0
xor eax, eax
nop
nop
nop
movzx edx, byte [esp + eax + 0x68]
mov ecx, eax
xor ecx, 0x8ac45b6d
mov ebx, eax
or ebx, 0x753ba492
and ecx, ebx
add ecx, ebx
mov ebx, edx
and ebx, ecx
add ebx, ebx
sub ecx, ebx
add cl, dl
add cl, 0x26
mov byte [esp + eax + 0x68], cl
inc eax
cmp eax, 8
jne 0x443400
mov ecx, dword [0x451b4c]
test ecx, ecx
je 0x44347d
mov eax, dword [esp + 0x68]
xor edx, edx
mov ebx, dword [0x451b50]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp dword [ebx + edx*8], 0x7e776f1
je 0x443460
inc edx
cmp ecx, edx
jne 0x443450
jmp 0x44347d
mov ecx, dword [ebx + edx*8 + 4]
cmp ecx, eax
je 0x44347d
push dword [esp + 4]
push 1
push dword [0x451b54]
push ecx
call fcn.00441b10
add esp, 0x10
test esi, esi
js 0x4435c6
lea eax, [esp + 0x188]
push 0x20
push eax
push dword [esp + 0x10]
push dword [esp + 0x18]
call fcn.00443070
add esp, 0x10
test eax, eax
js 0x4435c6
lea eax, [esp + 0x10]
push 0x20
push eax
push dword [esp + 0x1ac]
push dword [esp + 0x1ac]
call fcn.00443070
add esp, 0x10
test eax, eax
js 0x4435c6
mov ecx, dword [esp + 0x1a0]
mov edx, dword [esp + 0x1a4]
lea eax, [ecx + ecx]
and eax, 0x20
xor ecx, 0x10
add ecx, eax
mov dword [esp + 0xc], ecx
adc edx, 0
mov dword [esp + 8], edx
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x68], eax
jmp 0x44353e
cmp cx, dx
je 0x4435d2
push esi
call fcn.0043f300
add esp, 4
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x6c]
mov edx, ecx
xor edx, dword [esp + 8]
mov esi, eax
xor esi, dword [esp + 0xc]
or esi, edx
je 0x4435c6
push 0x68
lea edx, [esp + 0x6c]
push edx
push ecx
push eax
call fcn.00443070
add esp, 0x10
test eax, eax
js 0x4435c6
movzx eax, word [esp + 0xc2]
push eax
call fcn.0043f270
add esp, 4
mov esi, eax
movzx eax, word [esp + 0xc2]
push eax
push esi
push dword [esp + 0xd4]
push dword [esp + 0xd4]
call fcn.00443070
add esp, 0x10
test eax, eax
js 0x443519
xor eax, eax
nop
nop
nop
nop
movzx ecx, word [edi + eax]
lea edx, [ecx - 0x41]
cmp dx, 0x1a
jae 0x4435a0
or ecx, 0x20
movzx edx, word [esi + eax]
lea ebx, [edx - 0x41]
cmp bx, 0x1a
jae 0x4435b0
or edx, 0x20
test cx, cx
je 0x443510
add eax, 2
cmp cx, dx
je 0x443590
jmp 0x443510
xor eax, eax
xor edx, edx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov edi, dword [esp + 0x98]
mov ebx, dword [esp + 0x9c]
push esi
call fcn.0043f300
mov edx, ebx
mov eax, edi
add esp, 4
jmp 0x4435ca