Function at 0x408fe0
Capabilities:
Encode data using xor

Disassembly:
push ebp
push ebx
push edi
push esi
mov eax, 0x15b4
call fcn.00409a20
mov edi, edx
mov dword [esp + 0x10], ecx
mov ebx, dword [esp + 0x15cc]
mov esi, dword [esp + 0x15c8]
lea eax, [esp + 0x30]
push 0x84
push 0
push eax
call fcn.00409ad0
add esp, 0xc
cmp dword [esp + 0x15d0], 0
mov dword [esp + 0x1c], edi
je 0x4090ae
test esi, esi
mov ecx, esi
jle 0x409827
xor eax, eax
cmp ecx, 1
je 0x409078
mov ecx, dword [esp + 0x15c8]
and ecx, 0x7ffffffe
mov eax, dword [esp + 0x1c]
lea eax, [eax + eax*8]
shl eax, 5
mov edx, dword [esp + 0x10]
add edx, eax
add edx, 0x8f13
xor eax, eax
nop
nop
movzx esi, byte [edx + eax - 1]
inc dword [esp + esi*4 + 0x30]
movzx esi, byte [edx + eax]
inc dword [esp + esi*4 + 0x30]
add eax, 2
cmp ecx, eax
jne 0x409060
mov ecx, dword [esp + 0x15c8]
test cl, 1
je 0x409827
mov ecx, dword [esp + 0x1c]
lea ecx, [ecx + ecx*8]
shl ecx, 5
add ecx, dword [esp + 0x10]
movzx eax, byte [eax + ecx + 0x8f12]
mov ecx, dword [esp + 0x15c8]
inc dword [esp + eax*4 + 0x30]
jmp 0x409827
lea ebp, [edi + edi*8]
mov eax, ebp
shl eax, 6
mov dword [esp + 0x18], eax
test esi, esi
mov dword [esp + 0x14], ebp
jle 0x4091bb
cmp esi, 1
jne 0x40942a
xor eax, eax
xor edi, edi
mov ecx, dword [esp + 0x15c8]
test cl, 1
je 0x40910d
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x18]
add ecx, edx
add ecx, 0x8192
movzx ecx, word [ecx + eax*2]
test cx, cx
je 0x40910d
mov edx, edi
mov word [esp + edi*4 + 0x4b4], cx
mov word [esp + edi*4 + 0x4b6], ax
inc edx
mov edi, edx
lea eax, [esp + 0x934]
push 0x800
push 0
push eax
call fcn.00409ad0
add esp, 0xc
test edi, edi
sete byte [esp + 0xb]
je 0x4091d2
mov ecx, edi
xor eax, eax
cmp edi, 1
je 0x40918f
mov ecx, edi
and ecx, 0xfffffffe
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, word [esp + eax*4 + 0x4b4]
movzx esi, dl
inc dword [esp + esi*4 + 0x934]
shr edx, 8
inc dword [esp + edx*4 + 0xd34]
movzx edx, word [esp + eax*4 + 0x4b8]
movzx esi, dl
inc dword [esp + esi*4 + 0x934]
shr edx, 8
inc dword [esp + edx*4 + 0xd34]
add eax, 2
cmp ecx, eax
jne 0x409150
mov edx, edi
test dl, 1
je 0x4091b2
movzx eax, word [esp + eax*4 + 0x4b4]
movzx ecx, al
inc dword [esp + ecx*4 + 0x934]
shr eax, 8
inc dword [esp + eax*4 + 0xd34]
mov eax, dword [esp + 0xd34]
jmp 0x4091db
lea eax, [esp + 0x934]
push 0x800
push 0
push eax
call fcn.00409ad0
add esp, 0xc
xor edx, edx
mov byte [esp + 0xb], 1
xor eax, eax
xor ecx, ecx
cmp eax, edx
setne cl
inc ecx
mov dword [esp + 0x2c], ecx
lea eax, [edx - 1]
mov dword [esp + 0x20], eax
mov dword [esp], edx
and edx, 0xfffffffe
lea ebp, [esp + 0x4b4]
lea eax, [esp + 0x1134]
xor ecx, ecx
lea esi, [esp + 0x934]
xor edi, edi
mov dword [esp + 0x24], edx
jmp 0x40923c
inc edi
add ecx, 8
add esi, 0x400
mov eax, dword [esp + 4]
cmp edi, dword [esp + 0x2c]
mov ebp, dword [esp + 0xc]
je 0x40935b
mov dword [esp + 0x28], edi
mov dword [esp + 4], ebp
mov dword [esp + 0xc], eax
mov eax, 3
xor edx, edx
nop
mov dword [esp + eax*4 + 0xa8], edx
add edx, dword [esi + eax*4 - 0xc]
mov dword [esp + eax*4 + 0xac], edx
add edx, dword [esi + eax*4 - 8]
mov dword [esp + eax*4 + 0xb0], edx
add edx, dword [esi + eax*4 - 4]
mov dword [esp + eax*4 + 0xb4], edx
add edx, dword [esi + eax*4]
add eax, 4
cmp eax, 0x103
jne 0x409250
cmp byte [esp + 0xb], 0
mov edi, dword [esp + 0x28]
jne 0x409220
cmp dword [esp + 0x20], 0
je 0x40930c
xor eax, eax
mov edi, dword [esp + 0xc]
mov ebp, dword [esp + 4]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, word [ebp + eax*4]
shr edx, cl
movzx edx, dl
mov ebx, dword [esp + edx*4 + 0xb4]
lea ebp, [ebx + 1]
mov dword [esp + edx*4 + 0xb4], ebp
mov edx, dword [esp + 4]
mov edx, dword [edx + eax*4]
mov dword [edi + ebx*4], edx
mov edx, dword [esp + 4]
movzx edx, word [edx + eax*4 + 4]
shr edx, cl
movzx edx, dl
mov ebx, dword [esp + edx*4 + 0xb4]
lea ebp, [ebx + 1]
mov dword [esp + edx*4 + 0xb4], ebp
mov ebp, dword [esp + 4]
mov edx, dword [ebp + eax*4 + 4]
mov dword [edi + ebx*4], edx
mov edx, dword [esp + 0x24]
add eax, 2
cmp edx, eax
jne 0x4092b0
jmp 0x40930e
xor eax, eax
test byte [esp], 1
mov ebx, dword [esp + 0x15cc]
mov edi, dword [esp + 0x28]
je 0x409220
mov edx, dword [esp + 4]
movzx edx, word [edx + eax*4]
shr edx, cl
movzx edx, dl
mov ebx, dword [esp + edx*4 + 0xb4]
lea ebp, [ebx + 1]
mov dword [esp + edx*4 + 0xb4], ebp
mov edx, dword [esp + 4]
mov eax, dword [edx + eax*4]
mov edx, dword [esp + 0xc]
mov dword [edx + ebx*4], eax
mov ebx, dword [esp + 0x15cc]
jmp 0x409220
cmp dword [esp], 0
je 0x4096f2
mov edx, dword [esp]
cmp edx, 1
jne 0x409378
mov word [ebp], 1
jmp 0x409614
movzx eax, word [ebp + 4]
add word [ebp], ax
cmp edx, 3
jl 0x409495
mov eax, 2
mov ecx, 2
sub ecx, edx
mov dword [esp + 4], ecx
xor edx, edx
mov esi, 1
jmp 0x4093c7
inc eax
add word [ebp + esi*4], bx
mov ecx, dword [esp + 4]
add ecx, esi
inc ecx
inc esi
cmp ecx, 1
je 0x4094a4
cmp eax, dword [esp]
jge 0x409400
movzx ecx, word [ebp + eax*4]
movzx ebx, word [ebp + edx*4]
cmp bx, cx
jb 0x409405
inc eax
mov word [ebp + esi*4], cx
cmp eax, dword [esp]
jl 0x409415
movzx ecx, word [ebp + edx*4]
add word [ebp + esi*4], cx
mov word [ebp + edx*4], si
inc edx
jmp 0x4093b6
movzx ebx, word [ebp + edx*4]
mov word [ebp + esi*4], bx
mov word [ebp + edx*4], si
inc edx
cmp eax, dword [esp]
jge 0x4093e6
movzx ebx, word [ebp + eax*4]
cmp edx, esi
jge 0x4093b0
movzx ecx, word [ebp + edx*4]
cmp cx, bx
jae 0x4093b0
jmp 0x4093eb
mov ecx, esi
and ecx, 0x7ffffffe
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x18]
add edx, eax
add edx, 0x8194
xor eax, eax
xor edi, edi
jmp 0x40945b
add eax, 2
cmp ecx, eax
je 0x4090d3
movzx esi, word [edx + eax*2 - 2]
test si, si
je 0x409476
mov word [esp + edi*4 + 0x4b4], si
mov word [esp + edi*4 + 0x4b6], ax
inc edi
movzx esi, word [edx + eax*2]
test si, si
je 0x409450
mov word [esp + edi*4 + 0x4b4], si
lea esi, [eax + 1]
mov word [esp + edi*4 + 0x4b6], si
inc edi
jmp 0x409450
lea ecx, [edx - 2]
mov word [ebp + edx*4 - 8], 0
jmp 0x409525
mov ecx, dword [esp]
mov word [ebp + ecx*4 - 8], 0
lea edx, [ecx - 3]
and ecx, 3
xor ecx, 2
mov eax, edx
je 0x4094d4
mov eax, edx
nop
nop
nop
movzx esi, word [ebp + eax*4]
movzx esi, word [ebp + esi*4]
inc esi
mov word [ebp + eax*4], si
dec eax
dec ecx
jne 0x4094c0
mov ecx, dword [esp]
add ecx, 0xfffffffe
cmp edx, 3
jb 0x409525
inc eax
movzx edx, word [ebp + eax*4 - 4]
movzx edx, word [ebp + edx*4]
inc edx
mov word [ebp + eax*4 - 4], dx
movzx edx, word [ebp + eax*4 - 8]
movzx edx, word [ebp + edx*4]
inc edx
mov word [ebp + eax*4 - 8], dx
movzx edx, word [ebp + eax*4 - 0xc]
movzx edx, word [ebp + edx*4]
inc edx
mov word [ebp + eax*4 - 0xc], dx
movzx edx, word [ebp + eax*4 - 0x10]
movzx edx, word [ebp + edx*4]
inc edx
mov word [ebp + eax*4 - 0x10], dx
add eax, 0xfffffffc
jne 0x4094e0
mov dword [esp + 4], 1
xor eax, eax
mov edx, dword [esp + 0x20]
jmp 0x409550
lea edi, [ebx + ebx]
mov dword [esp + 4], edi
inc eax
test ebx, ebx
jle 0x409603
test ecx, ecx
js 0x409580
lea ebx, [ecx + 1]
xor edi, edi
nop
nop
nop
nop
nop
nop
nop
mov esi, dword [esp + 0xc]
movzx esi, word [esi + ecx*4]
cmp eax, esi
jne 0x409579
inc edi
dec ecx
cmp ebx, edi
jne 0x409560
mov ecx, 0xffffffff
mov edi, ebx
mov ebp, dword [esp + 0xc]
jmp 0x409582
xor edi, edi
mov esi, dword [esp + 4]
mov ebx, edi
sub esi, edi
jle 0x409540
and esi, 3
mov dword [esp + 0x24], esi
je 0x4095c7
lea edi, [edx*4]
add edi, ebp
xor esi, esi
mov ebp, dword [esp + 0x24]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [edi], ax
inc esi
add edi, 0xfffffffc
cmp ebp, esi
jne 0x4095b0
mov ebp, dword [esp + 4]
mov edi, ebp
sub edi, esi
sub edx, esi
jmp 0x4095cd
mov ebp, dword [esp + 4]
mov edi, ebp
mov esi, ebx
sub esi, ebp
cmp esi, 0xfffffffc
mov ebp, dword [esp + 0xc]
ja 0x409540
nop
nop
mov word [ebp + edx*4], ax
mov word [ebp + edx*4 - 4], ax
mov word [ebp + edx*4 - 8], ax
mov word [ebp + edx*4 - 0xc], ax
add edx, 0xfffffffc
add edi, 0xfffffffc
cmp edi, ebx
jg 0x4095e0
jmp 0x409540
cmp dword [esp], 0
mov ebx, dword [esp + 0x15cc]
jle 0x4096f2
mov eax, dword [esp]
and eax, 3
xor ecx, ecx
cmp dword [esp + 0x20], 3
jb 0x40965b
mov edx, dword [esp]
and edx, 0xfffffffc
xor ecx, ecx
nop
nop
nop
nop
nop
movzx esi, word [ebp + ecx*4]
inc dword [esp + esi*4 + 0x30]
movzx esi, word [ebp + ecx*4 + 4]
inc dword [esp + esi*4 + 0x30]
movzx esi, word [ebp + ecx*4 + 8]
inc dword [esp + esi*4 + 0x30]
movzx esi, word [ebp + ecx*4 + 0xc]
inc dword [esp + esi*4 + 0x30]
add ecx, 4
cmp edx, ecx
jne 0x409630
test eax, eax
je 0x40967d
lea ecx, [ecx*4]
add ecx, ebp
xor edx, edx
nop
nop
nop
nop
nop
nop
movzx esi, word [ecx + edx*4]
inc dword [esp + esi*4 + 0x30]
inc edx
cmp eax, edx
jne 0x409670
cmp dword [esp], 2
jl 0x4096f2
cmp ebx, 0x20
jge 0x4096ac
lea eax, [ebx + 1]
mov ecx, dword [esp + ebx*4 + 0x30]
nop
add ecx, dword [esp + eax*4 + 0x30]
mov dword [esp + ebx*4 + 0x30], ecx
mov edx, eax
and edx, 1
xor eax, 1
lea eax, [eax + edx*2]
cmp eax, 0x21
jl 0x409690
test ebx, ebx
jle 0x4096e2
lea edx, [ebx + 1]
xor ecx, ecx
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov esi, dword [esp + edx*4 + 0x2c]
shl esi, cl
add eax, esi
dec edx
inc ecx
cmp edx, 1
ja 0x4096c0
mov edx, 1
mov ecx, ebx
shl edx, cl
cmp eax, edx
jne 0x40997d
jmp 0x4096f2
mov edx, 1
mov ecx, ebx
shl edx, cl
xor eax, eax
jmp 0x40997d
mov ecx, dword [esp + 0x14]
shl ecx, 5
mov esi, dword [esp + 0x10]
mov dword [esp + 0x14], ecx
lea eax, [esi + ecx]
add eax, 0x8f12
push 0x120
push 0
push eax
call fcn.00409ad0
add esp, 0xc
mov eax, dword [esp + 0x18]
add eax, esi
add eax, 0x8852
push 0x240
push 0
push eax
call fcn.00409ad0
add esp, 0xc
test ebx, ebx
jle 0x409820
add ebp, 0xfffffffe
mov eax, 1
mov ecx, dword [esp + 0x14]
add ecx, dword [esp + 0x10]
mov dword [esp + 0x14], ecx
mov dword [esp + 0xc], ebp
jmp 0x409779
mov esi, dword [esp]
mov dword [esp], esi
mov ecx, eax
and ecx, 1
xor eax, 1
lea eax, [eax + ecx*2]
cmp eax, ebx
jg 0x409820
mov ecx, dword [esp + eax*4 + 0x30]
test ecx, ecx
jle 0x409760
mov edx, ecx
and edx, 3
je 0x4097d0
mov esi, dword [esp]
lea edi, [esi*4]
add edi, ebp
xor esi, esi
mov ebp, dword [esp + 0x14]
nop
nop
nop
nop
nop
nop
movzx ebx, word [edi]
mov byte [ebx + ebp + 0x8f12], al
inc esi
add edi, 0xfffffffc
cmp edx, esi
jne 0x4097a0
sub dword [esp], esi
mov edx, ecx
sub edx, esi
mov ebx, dword [esp + 0x15cc]
mov ebp, dword [esp + 0xc]
jmp 0x4097d2
mov edx, ecx
cmp ecx, 4
mov esi, dword [esp]
mov edi, dword [esp + 0x14]
jb 0x409763
dec edx
nop
movzx ecx, word [ebp + esi*4]
mov byte [ecx + edi + 0x8f12], al
movzx ecx, word [ebp + esi*4 - 4]
mov byte [ecx + edi + 0x8f12], al
movzx ecx, word [ebp + esi*4 - 8]
mov byte [ecx + edi + 0x8f12], al
movzx ecx, word [ebp + esi*4 - 0xc]
add esi, 0xfffffffc
mov byte [ecx + edi + 0x8f12], al
add edx, 0xfffffffc
cmp edx, 0xfffffffe
jb 0x4097e0
jmp 0x409763
mov ecx, dword [esp + 0x15c8]
mov dword [esp + 0x938], 0
cmp ebx, 2
jl 0x40989d
lea ecx, [ebx - 1]
cmp ebx, 2
jne 0x409848
xor eax, eax
mov edx, 2
jmp 0x409884
mov ebx, ecx
and ebx, 0xfffffffe
xor eax, eax
xor edx, edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
add eax, dword [esp + edx*4 + 0x34]
add eax, eax
mov dword [esp + edx*4 + 0x93c], eax
add eax, dword [esp + edx*4 + 0x38]
add eax, eax
mov dword [esp + edx*4 + 0x940], eax
add edx, 2
cmp ebx, edx
jne 0x409860
add edx, 2
test cl, 1
mov ecx, dword [esp + 0x15c8]
je 0x40989d
add eax, dword [esp + edx*4 + 0x2c]
add eax, eax
mov dword [esp + edx*4 + 0x934], eax
test ecx, ecx
jle 0x409972
xor eax, eax
mov edx, dword [esp + 0x1c]
lea edi, [edx + edx*8]
mov edx, edi
shl edx, 5
mov esi, dword [esp + 0x10]
add edx, esi
shl edi, 6
add edi, esi
mov dword [esp + 4], edi
jmp 0x4098ec
mov ecx, dword [esp + 4]
mov word [ecx + eax*2 + 0x8852], di
mov ecx, dword [esp + 0x15c8]
inc eax
cmp eax, ecx
je 0x409972
movzx ebx, byte [eax + edx + 0x8f12]
test ebx, ebx
je 0x4098e3
mov ecx, dword [esp + ebx*4 + 0x934]
lea edi, [ecx + 1]
mov dword [esp + ebx*4 + 0x934], edi
xor edi, edi
cmp bl, 4
jb 0x40994f
mov ebp, ebx
and ebp, 0xfffffffc
xor edi, edi
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov esi, ecx
and esi, 1
shl esi, 2
lea esi, [esi + edi*8]
mov edi, ecx
and edi, 2
or edi, esi
mov esi, ecx
shr esi, 2
and esi, 1
or esi, edi
mov edi, ecx
shr edi, 3
and edi, 1
lea edi, [edi + esi*2]
shr ecx, 4
add ebp, 0xfffffffc
jne 0x409920
and ebx, 3
je 0x4098d0
nop
nop
nop
nop
nop
nop
nop
nop
mov esi, ecx
and esi, 1
lea edi, [esi + edi*2]
shr ecx, 1
dec ebx
jne 0x409960
jmp 0x4098d0
add esp, 0x15b4
pop esi
pop edi
pop ebx
pop ebp
ret
dec dword [esp + ebx*4 + 0x30]
mov ecx, ebx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp ecx, 2
jl 0x4099a8
mov esi, dword [esp + ecx*4 + 0x2c]
dec ecx
test esi, esi
je 0x409990
dec esi
mov dword [esp + ecx*4 + 0x30], esi
add dword [esp + ecx*4 + 0x34], 2
dec eax
cmp eax, edx
jne 0x40997d
jmp 0x4096f2