Function at 0x40bf30
Capabilities:
Encode data using xor

Disassembly:
push ebp
push ebx
push edi
push esi
mov eax, 0x15b4
call fcn.0040c970
mov edi, edx
mov dword [esp + 0x10], ecx
mov ebx, dword [esp + 0x15cc]
mov esi, dword [esp + 0x15c8]
lea eax, [esp + 0x30]
push 0x84
push 0
push eax
call fcn.0040ca90
add esp, 0xc
cmp dword [esp + 0x15d0], 0
mov dword [esp + 0x20], edi
je 0x40c007
test esi, esi
jle 0x40c7b0
xor eax, eax
cmp dword [esp + 0x15c8], 1
je 0x40bfd8
mov ecx, dword [esp + 0x15c8]
and ecx, 0x7ffffffe
mov eax, dword [esp + 0x20]
lea eax, [eax + eax*8]
shl eax, 5
mov edx, dword [esp + 0x10]
add edx, eax
add edx, 0x8f13
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx esi, byte [edx + eax - 1]
inc dword [esp + esi*4 + 0x30]
movzx esi, byte [edx + eax]
inc dword [esp + esi*4 + 0x30]
add eax, 2
cmp ecx, eax
jne 0x40bfc0
mov ecx, dword [esp + 0x15c8]
test cl, 1
je 0x40c7b0
mov ecx, dword [esp + 0x20]
lea ecx, [ecx + ecx*8]
shl ecx, 5
add ecx, dword [esp + 0x10]
movzx eax, byte [eax + ecx + 0x8f12]
inc dword [esp + eax*4 + 0x30]
jmp 0x40c7b0
lea ebp, [edi + edi*8]
mov eax, ebp
shl eax, 6
mov dword [esp + 0x1c], eax
test esi, esi
mov dword [esp + 0x14], ebp
jle 0x40c0ce
cmp esi, 1
jne 0x40c347
xor eax, eax
xor edi, edi
mov ecx, dword [esp + 0x15c8]
test cl, 1
je 0x40c066
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x1c]
add ecx, edx
add ecx, 0x8192
movzx ecx, word [ecx + eax*2]
test cx, cx
je 0x40c066
mov edx, edi
mov word [esp + edi*4 + 0x4b4], cx
mov word [esp + edi*4 + 0x4b6], ax
inc edx
mov edi, edx
lea eax, [esp + 0x934]
push 0x800
push 0
push eax
call fcn.0040ca90
add esp, 0xc
mov eax, edi
test edi, edi
sete byte [esp + 7]
je 0x40c0e5
xor eax, eax
nop
nop
nop
nop
nop
nop
movzx ecx, word [esp + eax*4 + 0x4b4]
movzx edx, cl
inc dword [esp + edx*4 + 0x934]
shr ecx, 8
mov edx, dword [esp + ecx*4 + 0xd34]
mov esi, edx
and esi, 1
xor edx, 1
lea edx, [edx + esi*2]
mov dword [esp + ecx*4 + 0xd34], edx
inc eax
cmp edi, eax
jne 0x40c090
mov ecx, edi
mov eax, dword [esp + 0xd34]
jmp 0x40c0ee
lea eax, [esp + 0x934]
push 0x800
push 0
push eax
call fcn.0040ca90
add esp, 0xc
xor ecx, ecx
mov byte [esp + 7], 1
xor eax, eax
xor edx, edx
cmp eax, ecx
setne dl
inc edx
mov dword [esp + 0x28], edx
lea eax, [ecx - 1]
mov dword [esp + 0x18], eax
mov dword [esp], ecx
mov edx, ecx
and edx, 0xfffffffe
lea ebp, [esp + 0x4b4]
lea eax, [esp + 0x1134]
xor ecx, ecx
lea esi, [esp + 0x934]
xor edi, edi
mov dword [esp + 0x2c], edx
jmp 0x40c14c
inc edi
add ecx, 8
add esi, 0x400
mov eax, dword [esp + 0xc]
cmp edi, dword [esp + 0x28]
mov ebp, dword [esp + 8]
je 0x40c26b
mov dword [esp + 0x24], edi
mov dword [esp + 0xc], ebp
mov dword [esp + 8], eax
mov eax, 3
xor edx, edx
nop
mov dword [esp + eax*4 + 0xa8], edx
add edx, dword [esi + eax*4 - 0xc]
mov dword [esp + eax*4 + 0xac], edx
add edx, dword [esi + eax*4 - 8]
mov dword [esp + eax*4 + 0xb0], edx
add edx, dword [esi + eax*4 - 4]
mov dword [esp + eax*4 + 0xb4], edx
add edx, dword [esi + eax*4]
add eax, 4
cmp eax, 0x103
jne 0x40c160
cmp byte [esp + 7], 0
mov edi, dword [esp + 0x24]
jne 0x40c130
cmp dword [esp + 0x18], 0
je 0x40c21c
xor eax, eax
mov edi, dword [esp + 8]
mov ebp, dword [esp + 0xc]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, word [ebp + eax*4]
shr edx, cl
movzx edx, dl
mov ebx, dword [esp + edx*4 + 0xb4]
lea ebp, [ebx + 1]
mov dword [esp + edx*4 + 0xb4], ebp
mov edx, dword [esp + 0xc]
mov edx, dword [edx + eax*4]
mov dword [edi + ebx*4], edx
mov edx, dword [esp + 0xc]
movzx edx, word [edx + eax*4 + 4]
shr edx, cl
movzx edx, dl
mov ebx, dword [esp + edx*4 + 0xb4]
lea ebp, [ebx + 1]
mov dword [esp + edx*4 + 0xb4], ebp
mov ebp, dword [esp + 0xc]
mov edx, dword [ebp + eax*4 + 4]
mov dword [edi + ebx*4], edx
mov edx, dword [esp + 0x2c]
add eax, 2
cmp edx, eax
jne 0x40c1c0
jmp 0x40c21e
xor eax, eax
test byte [esp], 1
mov ebx, dword [esp + 0x15cc]
mov edi, dword [esp + 0x24]
je 0x40c130
mov edx, dword [esp + 0xc]
movzx edx, word [edx + eax*4]
shr edx, cl
movzx edx, dl
mov ebx, dword [esp + edx*4 + 0xb4]
lea ebp, [ebx + 1]
mov dword [esp + edx*4 + 0xb4], ebp
mov edx, dword [esp + 0xc]
mov eax, dword [edx + eax*4]
mov edx, dword [esp + 8]
mov dword [edx + ebx*4], eax
mov ebx, dword [esp + 0x15cc]
jmp 0x40c130
cmp dword [esp], 0
je 0x40c682
mov edx, dword [esp]
cmp edx, 1
jne 0x40c288
mov word [ebp], 1
jmp 0x40c567
movzx eax, word [ebp + 4]
add word [ebp], ax
cmp dword [esp + 0x18], 2
jl 0x40c3b5
mov eax, 2
mov ecx, 2
sub ecx, edx
mov dword [esp + 0xc], ecx
xor esi, esi
mov edx, 1
mov ecx, dword [esp + 0xc]
jmp 0x40c2dd
movzx edi, word [ebp + eax*4]
inc eax
add word [ebp + edx*4], di
lea edi, [ecx + edx]
inc edi
inc edx
cmp edi, 1
mov ebp, dword [esp + 8]
je 0x40c3c4
movzx edi, word [ebp + esi*4]
cmp eax, dword [esp]
jge 0x40c2f1
movzx ebx, word [ebp + eax*4]
cmp di, bx
jae 0x40c320
mov word [ebp + edx*4], di
mov word [ebp + esi*4], dx
inc esi
cmp eax, dword [esp]
jge 0x40c32b
cmp esi, edx
jge 0x40c2c0
movzx ebx, word [ebp + esi*4]
movzx edi, word [ebp + eax*4]
cmp bx, di
jae 0x40c2c5
jmp 0x40c330
inc eax
mov word [ebp + edx*4], bx
cmp eax, dword [esp]
jl 0x40c301
movzx ebx, word [ebp + esi*4]
add word [ebp + edx*4], bx
mov edi, esi
mov word [ebp + esi*4], dx
and esi, 1
xor edi, 1
lea esi, [edi + esi*2]
jmp 0x40c2cb
mov ecx, esi
and ecx, 0x7ffffffe
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x1c]
add edx, eax
add edx, 0x8194
xor eax, eax
xor edi, edi
jmp 0x40c37b
add eax, 2
cmp ecx, eax
je 0x40c02c
movzx esi, word [edx + eax*2 - 2]
test si, si
je 0x40c396
mov word [esp + edi*4 + 0x4b4], si
mov word [esp + edi*4 + 0x4b6], ax
inc edi
movzx esi, word [edx + eax*2]
test si, si
je 0x40c370
mov word [esp + edi*4 + 0x4b4], si
lea esi, [eax + 1]
mov word [esp + edi*4 + 0x4b6], si
inc edi
jmp 0x40c370
lea ecx, [edx - 2]
mov word [ebp + edx*4 - 8], 0
jmp 0x40c465
mov esi, dword [esp]
lea ecx, [esi - 2]
mov word [ebp + esi*4 - 8], 0
cmp esi, 3
jl 0x40c465
lea ebx, [esi - 3]
and esi, 3
xor esi, 2
mov eax, ebx
je 0x40c40d
mov eax, ebx
mov ebp, dword [esp + 8]
nop
nop
nop
mov edi, dword [esp + 8]
movzx edi, word [edi + eax*4]
mov edx, dword [esp + 8]
movzx edi, word [edx + edi*4]
inc edi
mov edx, dword [esp + 8]
mov word [edx + eax*4], di
dec eax
dec esi
jne 0x40c3f0
cmp ebx, 3
jb 0x40c465
inc eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, word [ebp + eax*4 - 4]
movzx edx, word [ebp + edx*4]
inc edx
mov word [ebp + eax*4 - 4], dx
movzx edx, word [ebp + eax*4 - 8]
movzx edx, word [ebp + edx*4]
inc edx
mov word [ebp + eax*4 - 8], dx
movzx edx, word [ebp + eax*4 - 0xc]
movzx edx, word [ebp + edx*4]
inc edx
mov word [ebp + eax*4 - 0xc], dx
movzx edx, word [ebp + eax*4 - 0x10]
movzx edx, word [ebp + edx*4]
inc edx
mov word [ebp + eax*4 - 0x10], dx
add eax, 0xfffffffc
jne 0x40c420
mov ebp, 1
xor edx, edx
mov eax, dword [esp + 0x18]
jmp 0x40c4a6
mov esi, ebx
and esi, 0x7ffffffd
mov edi, ebx
and edi, 2
or ebx, 2
imul ebx, edi
xor edi, 2
imul edi, esi
add ebx, edi
inc edx
mov ebp, ebx
test ebx, ebx
jle 0x40c552
test ecx, ecx
js 0x40c4d0
lea ebx, [ecx + 1]
xor edi, edi
nop
mov esi, dword [esp + 8]
movzx esi, word [esi + ecx*4]
cmp edx, esi
jne 0x40c4e0
inc edi
dec ecx
cmp ebx, edi
jne 0x40c4b0
mov ecx, 0xffffffff
jmp 0x40c4e2
xor ebx, ebx
jmp 0x40c4e2
mov ebx, edi
mov edi, ebp
sub edi, ebx
jle 0x40c480
and edi, 3
je 0x40c517
mov dword [esp + 0xc], ebx
mov esi, dword [esp + 8]
lea esi, [esi + eax*4]
xor ebx, ebx
nop
nop
nop
nop
nop
nop
mov word [esi], dx
inc ebx
add esi, 0xfffffffc
cmp edi, ebx
jne 0x40c500
mov edi, ebp
sub edi, ebx
sub eax, ebx
mov ebx, dword [esp + 0xc]
jmp 0x40c519
mov edi, ebp
mov esi, ebx
sub esi, ebp
cmp esi, 0xfffffffc
mov esi, dword [esp + 8]
ja 0x40c480
nop
nop
nop
nop
nop
nop
mov word [esi + eax*4], dx
mov word [esi + eax*4 - 4], dx
mov word [esi + eax*4 - 8], dx
mov word [esi + eax*4 - 0xc], dx
add eax, 0xfffffffc
add edi, 0xfffffffc
cmp edi, ebx
jg 0x40c530
jmp 0x40c480
cmp dword [esp], 0
mov ebp, dword [esp + 8]
mov ebx, dword [esp + 0x15cc]
jle 0x40c682
mov eax, dword [esp]
and eax, 3
xor ecx, ecx
cmp dword [esp + 0x18], 3
jb 0x40c5ab
mov edx, dword [esp]
and edx, 0xfffffffc
xor ecx, ecx
nop
nop
movzx esi, word [ebp + ecx*4]
inc dword [esp + esi*4 + 0x30]
movzx esi, word [ebp + ecx*4 + 4]
inc dword [esp + esi*4 + 0x30]
movzx esi, word [ebp + ecx*4 + 8]
inc dword [esp + esi*4 + 0x30]
movzx esi, word [ebp + ecx*4 + 0xc]
inc dword [esp + esi*4 + 0x30]
add ecx, 4
cmp edx, ecx
jne 0x40c580
test eax, eax
je 0x40c5cd
lea ecx, [ecx*4]
add ecx, ebp
xor edx, edx
nop
nop
nop
nop
nop
nop
movzx esi, word [ecx + edx*4]
inc dword [esp + esi*4 + 0x30]
inc edx
cmp eax, edx
jne 0x40c5c0
cmp dword [esp], 2
jl 0x40c682
cmp ebx, 0x20
jge 0x40c63c
mov eax, dword [esp + ebx*4 + 0x30]
mov edx, ebx
neg edx
mov ecx, ebx
and edx, 3
je 0x40c5fc
nop
nop
nop
nop
nop
add eax, dword [esp + ecx*4 + 0x34]
inc ecx
mov dword [esp + ebx*4 + 0x30], eax
dec edx
jne 0x40c5f0
lea edx, [ebx - 0x1d]
cmp edx, 3
jb 0x40c638
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
add eax, dword [esp + ecx*4 + 0x34]
mov dword [esp + ebx*4 + 0x30], eax
add eax, dword [esp + ecx*4 + 0x38]
mov dword [esp + ebx*4 + 0x30], eax
add eax, dword [esp + ecx*4 + 0x3c]
mov dword [esp + ebx*4 + 0x30], eax
add eax, dword [esp + ecx*4 + 0x40]
add ecx, 4
mov dword [esp + ebx*4 + 0x30], eax
cmp ecx, 0x20
jne 0x40c610
test ebx, ebx
jle 0x40c672
lea edx, [ebx + 1]
xor ecx, ecx
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov esi, dword [esp + edx*4 + 0x2c]
shl esi, cl
add eax, esi
dec edx
inc ecx
cmp edx, 1
ja 0x40c650
mov edx, 1
mov ecx, ebx
shl edx, cl
cmp eax, edx
jne 0x40c8cd
jmp 0x40c682
mov edx, 1
mov ecx, ebx
shl edx, cl
xor eax, eax
jmp 0x40c8cd
mov ecx, dword [esp + 0x14]
shl ecx, 5
mov esi, dword [esp + 0x10]
mov dword [esp + 0x14], ecx
lea eax, [esi + ecx]
add eax, 0x8f12
push 0x120
push 0
push eax
call fcn.0040ca90
add esp, 0xc
mov eax, dword [esp + 0x1c]
add eax, esi
add eax, 0x8852
push 0x240
push 0
push eax
call fcn.0040ca90
add esp, 0xc
test ebx, ebx
jle 0x40c7b0
add ebp, 0xfffffffe
mov eax, 1
mov ecx, dword [esp + 0x14]
add ecx, dword [esp + 0x10]
mov dword [esp + 0x14], ecx
mov dword [esp + 8], ebp
jmp 0x40c703
mov esi, dword [esp]
mov dword [esp], esi
lea ecx, [eax + 1]
cmp eax, ebx
mov eax, ecx
je 0x40c7b0
mov ecx, dword [esp + eax*4 + 0x30]
test ecx, ecx
jle 0x40c6f0
mov edx, ecx
and edx, 3
je 0x40c760
mov esi, dword [esp]
lea edi, [esi*4]
add edi, ebp
xor esi, esi
mov ebp, dword [esp + 0x14]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ebx, word [edi]
mov byte [ebx + ebp + 0x8f12], al
inc esi
add edi, 0xfffffffc
cmp edx, esi
jne 0x40c730
sub dword [esp], esi
mov edx, ecx
sub edx, esi
mov ebx, dword [esp + 0x15cc]
mov ebp, dword [esp + 8]
jmp 0x40c762
mov edx, ecx
cmp ecx, 4
mov esi, dword [esp]
mov edi, dword [esp + 0x14]
jb 0x40c6f3
dec edx
nop
movzx ecx, word [ebp + esi*4]
mov byte [ecx + edi + 0x8f12], al
movzx ecx, word [ebp + esi*4 - 4]
mov byte [ecx + edi + 0x8f12], al
movzx ecx, word [ebp + esi*4 - 8]
mov byte [ecx + edi + 0x8f12], al
movzx ecx, word [ebp + esi*4 - 0xc]
add esi, 0xfffffffc
mov byte [ecx + edi + 0x8f12], al
add edx, 0xfffffffc
cmp edx, 0xfffffffe
jb 0x40c770
jmp 0x40c6f3
mov dword [esp + 0x938], 0
cmp ebx, 2
jl 0x40c7ec
xor eax, eax
mov ecx, 2
nop
nop
nop
nop
nop
nop
nop
nop
nop
add eax, dword [esp + ecx*4 + 0x2c]
add eax, eax
mov dword [esp + ecx*4 + 0x934], eax
mov edx, ecx
and edx, 1
xor ecx, 1
lea ecx, [ecx + edx*2]
cmp ecx, ebx
jle 0x40c7d0
mov ecx, dword [esp + 0x15c8]
test ecx, ecx
jle 0x40c8c2
xor eax, eax
mov edx, dword [esp + 0x20]
lea edi, [edx + edx*8]
mov edx, edi
shl edx, 5
mov esi, dword [esp + 0x10]
add edx, esi
shl edi, 6
add edi, esi
mov dword [esp + 0xc], edi
jmp 0x40c83c
mov ecx, dword [esp + 0xc]
mov word [ecx + eax*2 + 0x8852], di
mov ecx, dword [esp + 0x15c8]
inc eax
cmp eax, ecx
je 0x40c8c2
movzx ebx, byte [eax + edx + 0x8f12]
test ebx, ebx
je 0x40c833
mov ecx, dword [esp + ebx*4 + 0x934]
lea edi, [ecx + 1]
mov dword [esp + ebx*4 + 0x934], edi
xor edi, edi
cmp bl, 4
jb 0x40c89f
mov ebp, ebx
and ebp, 0xfffffffc
xor edi, edi
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov esi, ecx
and esi, 1
shl esi, 2
lea esi, [esi + edi*8]
mov edi, ecx
and edi, 2
or edi, esi
mov esi, ecx
shr esi, 2
and esi, 1
or esi, edi
mov edi, ecx
shr edi, 3
and edi, 1
lea edi, [edi + esi*2]
shr ecx, 4
add ebp, 0xfffffffc
jne 0x40c870
and ebx, 3
je 0x40c820
nop
nop
nop
nop
nop
nop
nop
nop
mov esi, ecx
and esi, 1
lea edi, [esi + edi*2]
shr ecx, 1
dec ebx
jne 0x40c8b0
jmp 0x40c820
add esp, 0x15b4
pop esi
pop edi
pop ebx
pop ebp
ret
dec dword [esp + ebx*4 + 0x30]
mov ecx, ebx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp ecx, 2
jl 0x40c8f8
mov esi, dword [esp + ecx*4 + 0x2c]
dec ecx
test esi, esi
je 0x40c8e0
dec esi
mov dword [esp + ecx*4 + 0x30], esi
add dword [esp + ecx*4 + 0x34], 2
dec eax
cmp eax, edx
jne 0x40c8cd
jmp 0x40c682