Function at 0x408cf0
Capabilities:
Encode data using xor

Disassembly:
push ebp
push ebx
push edi
push esi
mov eax, 0x15b0
call fcn.00409690
mov edi, edx
mov dword [esp + 0xc], ecx
mov ebx, dword [esp + 0x15c8]
mov esi, dword [esp + 0x15c4]
lea eax, [esp + 0x2c]
push 0x84
push 0
push eax
call fcn.00409940
add esp, 0xc
cmp dword [esp + 0x15cc], 0
mov dword [esp + 0x18], edi
je 0x408dbe
test esi, esi
mov ecx, esi
jle 0x4094d6
xor eax, eax
cmp ecx, 1
je 0x408d88
mov ecx, dword [esp + 0x15c4]
and ecx, 0x7ffffffe
mov eax, dword [esp + 0x18]
lea eax, [eax + eax*8]
shl eax, 5
mov edx, dword [esp + 0xc]
add edx, eax
add edx, 0x8f13
xor eax, eax
nop
nop
movzx esi, byte [edx + eax - 1]
inc dword [esp + esi*4 + 0x2c]
movzx esi, byte [edx + eax]
inc dword [esp + esi*4 + 0x2c]
add eax, 2
cmp ecx, eax
jne 0x408d70
mov ecx, dword [esp + 0x15c4]
test cl, 1
je 0x4094d6
mov ecx, dword [esp + 0x18]
lea ecx, [ecx + ecx*8]
shl ecx, 5
add ecx, dword [esp + 0xc]
movzx eax, byte [eax + ecx + 0x8f12]
mov ecx, dword [esp + 0x15c4]
inc dword [esp + eax*4 + 0x2c]
jmp 0x4094d6
lea eax, [edi + edi*8]
mov dword [esp + 0x28], eax
mov ebx, eax
shl ebx, 6
test esi, esi
mov dword [esp + 0x24], ebx
jle 0x408e8c
cmp esi, 1
jne 0x409335
xor eax, eax
xor ebp, ebp
mov ecx, dword [esp + 0x15c4]
test cl, 1
je 0x408e1f
mov ecx, dword [esp + 0xc]
add ecx, ebx
add ecx, 0x8192
movzx ecx, word [ecx + eax*2]
test cx, cx
je 0x408e1f
mov word [esp + ebp*4 + 0xb0], cx
mov word [esp + ebp*4 + 0xb2], ax
mov eax, ebp
xor eax, 1
and ebp, 1
lea ebp, [eax + ebp*2]
lea eax, [esp + 0x530]
push 0x800
push 0
push eax
call fcn.00409940
add esp, 0xc
test ebp, ebp
sete byte [esp + 4]
je 0x408ea3
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ecx, word [esp + eax*4 + 0xb0]
movzx edx, cl
mov esi, dword [esp + edx*4 + 0x530]
mov ebx, esi
and ebx, 1
xor esi, 1
lea esi, [esi + ebx*2]
mov dword [esp + edx*4 + 0x530], esi
shr ecx, 8
inc dword [esp + ecx*4 + 0x930]
inc eax
cmp ebp, eax
jne 0x408e50
mov eax, dword [esp + 0x930]
jmp 0x408eac
lea eax, [esp + 0x530]
push 0x800
push 0
push eax
call fcn.00409940
add esp, 0xc
xor ebp, ebp
mov byte [esp + 4], 1
xor eax, eax
xor ecx, ecx
cmp eax, ebp
setne cl
inc ecx
mov dword [esp + 0x1c], ecx
lea eax, [esp + 0xb0]
mov dword [esp], eax
lea eax, [esp + 0x1130]
xor ecx, ecx
lea esi, [esp + 0x530]
xor edx, edx
mov dword [esp + 0x14], ebp
jmp 0x408efe
mov edx, dword [esp + 8]
inc edx
add ecx, 8
mov esi, dword [esp + 0x10]
add esi, 0x400
mov eax, ebx
cmp edx, dword [esp + 0x1c]
je 0x408f96
mov dword [esp + 8], edx
mov ebx, dword [esp]
mov dword [esp], eax
mov edx, 3
xor eax, eax
nop
mov dword [esp + edx*4 + 0xd24], eax
add eax, dword [esi + edx*4 - 0xc]
mov dword [esp + edx*4 + 0xd28], eax
add eax, dword [esi + edx*4 - 8]
mov dword [esp + edx*4 + 0xd2c], eax
add eax, dword [esi + edx*4 - 4]
mov dword [esp + edx*4 + 0xd30], eax
add eax, dword [esi + edx*4]
add edx, 4
cmp edx, 0x103
jne 0x408f10
mov dword [esp + 0x10], esi
cmp byte [esp + 4], 0
mov esi, dword [esp]
jne 0x408ee0
xor edx, edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ebp, word [ebx + edx*4]
shr ebp, cl
mov eax, ebp
not eax
or eax, 0xff
add eax, ebp
mov ebp, dword [esp + eax*4 + 0xd34]
lea edi, [ebp + 1]
mov dword [esp + eax*4 + 0xd34], edi
mov eax, dword [ebx + edx*4]
mov dword [esi + ebp*4], eax
mov ebp, dword [esp + 0x14]
inc edx
cmp ebp, edx
jne 0x408f60
jmp 0x408ee0
test ebp, ebp
mov ebx, dword [esp + 0x15c8]
mov edi, dword [esp + 0x28]
je 0x4093b9
cmp ebp, 1
jne 0x408fbb
mov eax, dword [esp]
mov word [eax], 1
jmp 0x40920c
mov esi, dword [esp]
movzx eax, word [esi + 4]
add word [esi], ax
lea eax, [ebp - 1]
mov dword [esp + 0x10], eax
cmp eax, 2
jl 0x40907f
mov ecx, 2
mov eax, 2
sub eax, ebp
mov dword [esp + 0x1c], eax
xor ebx, ebx
mov edx, 1
jmp 0x409010
movzx eax, word [esi + ecx*4]
mov word [esp + 4], ax
inc ecx
movzx eax, word [esp + 4]
add word [esi + edx*4], ax
mov eax, dword [esp + 0x1c]
add eax, edx
inc eax
inc edx
cmp eax, 1
je 0x40907f
cmp ecx, ebp
mov dword [esp + 8], ecx
jge 0x409030
movzx eax, word [esi + ebx*4]
movzx ecx, word [esi + ecx*4]
cmp ax, cx
jb 0x409034
inc dword [esp + 8]
mov word [esi + edx*4], cx
jmp 0x40903d
movzx eax, word [esi + ebx*4]
mov word [esi + edx*4], ax
mov word [esi + ebx*4], dx
inc ebx
mov ecx, dword [esp + 8]
cmp ecx, ebp
jge 0x409070
cmp ebx, edx
jge 0x408ff0
movzx eax, word [esi + ebx*4]
mov word [esp + 0x22], ax
movzx eax, word [esi + ecx*4]
mov word [esp + 4], ax
movzx eax, word [esp + 0x22]
cmp ax, word [esp + 4]
jae 0x408ff9
jmp 0x409074
movzx eax, word [esi + ebx*4]
add word [esi + edx*4], ax
mov word [esi + ebx*4], dx
inc ebx
jmp 0x409003
mov word [esi + ebp*4 - 8], 0
mov ebx, ebp
add ebx, 0xfffffffd
js 0x409101
mov edx, esi
mov esi, ebp
and esi, 3
xor esi, 2
mov ecx, ebx
je 0x4090b1
mov ecx, ebx
nop
nop
nop
movzx eax, word [edx + ecx*4]
movzx eax, word [edx + eax*4]
inc eax
mov word [edx + ecx*4], ax
dec ecx
dec esi
jne 0x4090a0
cmp ebx, 3
jb 0x409101
inc ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx eax, word [edx + ecx*4 - 4]
movzx eax, word [edx + eax*4]
inc eax
mov word [edx + ecx*4 - 4], ax
movzx eax, word [edx + ecx*4 - 8]
movzx eax, word [edx + eax*4]
inc eax
mov word [edx + ecx*4 - 8], ax
movzx eax, word [edx + ecx*4 - 0xc]
movzx eax, word [edx + eax*4]
inc eax
mov word [edx + ecx*4 - 0xc], ax
movzx eax, word [edx + ecx*4 - 0x10]
movzx eax, word [edx + eax*4]
inc eax
mov word [edx + ecx*4 - 0x10], ax
add ecx, 0xfffffffc
jne 0x4090c0
lea ecx, [ebp - 2]
mov eax, 1
xor edx, edx
jmp 0x40912f
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x10], ebx
mov esi, dword [esp + 8]
lea eax, [esi + esi]
inc edx
test esi, esi
mov ebx, dword [esp + 0x15c8]
je 0x409204
test ecx, ecx
mov dword [esp + 4], eax
js 0x409160
lea ebx, [ecx + 1]
xor esi, esi
nop
nop
nop
nop
mov eax, dword [esp]
movzx eax, word [eax + ecx*4]
cmp edx, eax
jne 0x409170
inc esi
dec ecx
cmp ebx, esi
jne 0x409140
mov ecx, 0xffffffff
jmp 0x409172
xor ebx, ebx
jmp 0x409176
mov ebx, esi
mov eax, dword [esp + 4]
mov esi, eax
sub esi, ebx
mov dword [esp + 8], ebx
jle 0x409110
and esi, 3
je 0x4091bb
mov eax, dword [esp]
mov ebx, dword [esp + 0x10]
lea eax, [eax + ebx*4]
xor ebx, ebx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], dx
inc ebx
add eax, 0xfffffffc
cmp esi, ebx
jne 0x4091a0
mov esi, dword [esp + 4]
sub esi, ebx
sub dword [esp + 0x10], ebx
mov ebx, dword [esp + 8]
jmp 0x4091bd
mov esi, eax
mov eax, ebx
sub eax, dword [esp + 4]
cmp eax, 0xfffffffc
mov eax, dword [esp]
mov ebx, dword [esp + 0x10]
ja 0x409114
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax + ebx*4], dx
mov word [eax + ebx*4 - 4], dx
mov word [eax + ebx*4 - 8], dx
mov word [eax + ebx*4 - 0xc], dx
add ebx, 0xfffffffc
add esi, 0xfffffffc
cmp esi, dword [esp + 8]
jg 0x4091e0
jmp 0x409114
test ebp, ebp
jle 0x4093b9
lea edx, [ebp - 1]
mov eax, ebp
and eax, 3
xor ecx, ecx
cmp edx, 3
mov ebx, dword [esp]
jb 0x40925a
mov edx, ebp
and edx, 0xfffffffc
xor ecx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx esi, word [ebx + ecx*4]
inc dword [esp + esi*4 + 0x2c]
movzx esi, word [ebx + ecx*4 + 4]
inc dword [esp + esi*4 + 0x2c]
movzx esi, word [ebx + ecx*4 + 8]
inc dword [esp + esi*4 + 0x2c]
movzx esi, word [ebx + ecx*4 + 0xc]
inc dword [esp + esi*4 + 0x2c]
add ecx, 4
cmp edx, ecx
jne 0x409230
test eax, eax
je 0x40927d
mov edx, dword [esp]
lea ecx, [edx + ecx*4]
xor edx, edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx esi, word [ecx + edx*4]
inc dword [esp + esi*4 + 0x2c]
inc edx
cmp eax, edx
jne 0x409270
cmp ebp, 2
mov ebx, dword [esp + 0x15c8]
jl 0x4093b9
cmp ebx, 0x20
jge 0x409300
mov eax, dword [esp + ebx*4 + 0x2c]
mov edx, ebx
neg edx
mov ecx, ebx
and edx, 3
je 0x4092bc
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
add eax, dword [esp + ecx*4 + 0x30]
inc ecx
mov dword [esp + ebx*4 + 0x2c], eax
dec edx
jne 0x4092b0
lea edx, [ebx - 0x1d]
cmp edx, 3
jb 0x4092f8
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
add eax, dword [esp + ecx*4 + 0x30]
mov dword [esp + ebx*4 + 0x2c], eax
add eax, dword [esp + ecx*4 + 0x34]
mov dword [esp + ebx*4 + 0x2c], eax
add eax, dword [esp + ecx*4 + 0x38]
mov dword [esp + ebx*4 + 0x2c], eax
add eax, dword [esp + ecx*4 + 0x3c]
add ecx, 4
mov dword [esp + ebx*4 + 0x2c], eax
cmp ecx, 0x20
jne 0x4092d0
test ebx, ebx
jle 0x4093a9
lea edx, [ebx + 1]
xor ecx, ecx
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov esi, dword [esp + edx*4 + 0x28]
shl esi, cl
add eax, esi
dec edx
inc ecx
cmp edx, 1
ja 0x409310
mov edx, 1
mov ecx, ebx
shl edx, cl
cmp eax, edx
jne 0x4095f5
jmp 0x4093b9
mov ecx, esi
and ecx, 0x7ffffffe
mov eax, dword [esp + 0xc]
lea edx, [ebx + eax]
add edx, 0x8194
xor eax, eax
xor ebp, ebp
jmp 0x40935b
add eax, 2
cmp ecx, eax
je 0x408de3
movzx esi, word [edx + eax*2 - 2]
test si, si
je 0x409380
mov word [esp + ebp*4 + 0xb0], si
mov word [esp + ebp*4 + 0xb2], ax
mov esi, ebp
xor esi, 1
and ebp, 1
lea ebp, [esi + ebp*2]
movzx esi, word [edx + eax*2]
test si, si
je 0x409350
mov word [esp + ebp*4 + 0xb0], si
lea esi, [eax + 1]
mov word [esp + ebp*4 + 0xb2], si
mov esi, ebp
xor esi, 1
and ebp, 1
lea ebp, [esi + ebp*2]
jmp 0x409350
mov edx, 1
mov ecx, ebx
shl edx, cl
xor eax, eax
jmp 0x4095f5
shl edi, 5
mov esi, dword [esp + 0xc]
lea eax, [esi + edi]
add eax, 0x8f12
push 0x120
push 0
push eax
call fcn.00409940
add esp, 0xc
mov eax, dword [esp + 0x24]
add eax, esi
add eax, 0x8852
push 0x240
push 0
push eax
call fcn.00409940
add esp, 0xc
test ebx, ebx
mov esi, dword [esp]
jle 0x4094cf
add esi, 0xfffffffe
mov eax, 1
add edi, dword [esp + 0xc]
mov dword [esp], esi
jmp 0x40941d
lea ecx, [eax + 1]
cmp eax, ebx
mov eax, ecx
je 0x4094cf
mov ecx, dword [esp + eax*4 + 0x2c]
test ecx, ecx
jle 0x409410
mov edx, ecx
and edx, 3
je 0x409480
mov dword [esp + 0x14], ebp
lea ebx, [esi + ebp*4]
xor esi, esi
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ebp, edi
movzx edi, word [ebx]
mov byte [edi + ebp + 0x8f12], al
mov edi, ebp
inc esi
add ebx, 0xfffffffc
cmp edx, esi
jne 0x409440
mov ebp, dword [esp + 0x14]
sub ebp, esi
mov edx, ecx
sub edx, esi
mov ebx, dword [esp + 0x15c8]
mov esi, dword [esp]
cmp ecx, 4
jb 0x409410
jmp 0x409487
mov edx, ecx
cmp ecx, 4
jb 0x409410
dec edx
nop
nop
nop
nop
nop
nop
nop
nop
movzx ecx, word [esi + ebp*4]
mov byte [ecx + edi + 0x8f12], al
movzx ecx, word [esi + ebp*4 - 4]
mov byte [ecx + edi + 0x8f12], al
movzx ecx, word [esi + ebp*4 - 8]
mov byte [ecx + edi + 0x8f12], al
movzx ecx, word [esi + ebp*4 - 0xc]
add ebp, 0xfffffffc
mov byte [ecx + edi + 0x8f12], al
add edx, 0xfffffffc
cmp edx, 0xfffffffe
jb 0x409490
jmp 0x409410
mov ecx, dword [esp + 0x15c4]
mov dword [esp + 0x534], 0
cmp ebx, 2
jl 0x40953d
lea ecx, [ebx - 1]
cmp ebx, 2
jne 0x4094f7
xor eax, eax
mov edx, 2
jmp 0x409524
mov ebx, ecx
and ebx, 0xfffffffe
xor eax, eax
xor edx, edx
add eax, dword [esp + edx*4 + 0x30]
add eax, eax
mov dword [esp + edx*4 + 0x538], eax
add eax, dword [esp + edx*4 + 0x34]
add eax, eax
mov dword [esp + edx*4 + 0x53c], eax
add edx, 2
cmp ebx, edx
jne 0x409500
add edx, 2
test cl, 1
mov ecx, dword [esp + 0x15c4]
je 0x40953d
add eax, dword [esp + edx*4 + 0x28]
add eax, eax
mov dword [esp + edx*4 + 0x530], eax
test ecx, ecx
jle 0x4095ea
xor eax, eax
mov edx, dword [esp + 0x18]
lea esi, [edx + edx*8]
mov edi, esi
shl edi, 5
mov edx, dword [esp + 0xc]
add edi, edx
mov dword [esp + 0x14], edi
shl esi, 6
add esi, edx
mov dword [esp], esi
jmp 0x409587
mov ecx, dword [esp]
mov word [ecx + eax*2 + 0x8852], di
mov ecx, dword [esp + 0x15c4]
inc eax
cmp eax, ecx
je 0x4095ea
mov edx, dword [esp + 0x14]
movzx ebx, byte [eax + edx + 0x8f12]
test ebx, ebx
je 0x409582
mov edx, dword [esp + ebx*4 + 0x530]
lea ecx, [edx + 1]
mov dword [esp + ebx*4 + 0x530], ecx
xor edi, edi
cmp ebx, 1
je 0x4095dd
mov ebp, ebx
and ebp, 0xfffffffe
xor ecx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edi, edx
shr edi, 1
mov esi, edx
and esi, 1
add esi, esi
lea ecx, [esi + ecx*4]
and edi, 1
or edi, ecx
shr edx, 2
mov ecx, edi
add ebp, 0xfffffffe
jne 0x4095c0
test bl, 1
je 0x409570
and edx, 1
lea edi, [edx + edi*2]
jmp 0x409570
add esp, 0x15b0
pop esi
pop edi
pop ebx
pop ebp
ret
dec dword [esp + ebx*4 + 0x2c]
mov ecx, ebx
nop
nop
nop
nop
nop
cmp ecx, 2
jl 0x409618
mov esi, dword [esp + ecx*4 + 0x28]
dec ecx
test esi, esi
je 0x409600
dec esi
mov dword [esp + ecx*4 + 0x2c], esi
add dword [esp + ecx*4 + 0x30], 2
dec eax
cmp eax, edx
jne 0x4095f5
jmp 0x4093b9