Function at 0x417233
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x308
push ebx
push esi
push edi
push 1
xor ecx, ecx
pop eax
mov edx, eax
mov byte [ebp + ecx - 0x308], al
mov byte [ebp + ecx - 0x209], al
mov byte [ebp + eax - 0x108], cl
and dl, 0x80
inc ecx
neg dl
sbb edx, edx
lea esi, [eax + eax]
and edx, 0x11b
xor edx, esi
xor eax, edx
cmp eax, 1
jne 0x417244
mov ecx, 0x423c80
test eax, eax
mov dword [ecx], eax
je 0x417292
movzx eax, byte [ebp + eax - 0x108]
movzx eax, byte [ebp + eax - 0x2ef]
jmp 0x417294
xor eax, eax
add ecx, 4
cmp ecx, 0x423ca8
jb 0x41727a
and dword [ebp - 4], 0
cmp byte [ebp - 4], 0
je 0x4172c2
movzx eax, byte [ebp - 4]
lea ecx, [ebp - 0x209]
movzx eax, byte [ebp + eax - 0x108]
sub ecx, eax
movzx eax, byte [ecx]
jmp 0x4172c4
xor eax, eax
lea ecx, [eax + eax]
xor ecx, eax
shl ecx, 1
xor ecx, eax
shl ecx, 1
xor ecx, eax
shl ecx, 1
xor eax, ecx
mov ecx, eax
shr ecx, 8
xor cl, al
xor cl, 0x63
je 0x4172f6
movzx eax, cl
movzx eax, byte [ebp + eax - 0x108]
movzx eax, byte [ebp + eax - 0x307]
jmp 0x4172f8
xor eax, eax
test cl, cl
je 0x417311
movzx edx, cl
movzx edx, byte [ebp + edx - 0x108]
movzx edx, byte [ebp + edx - 0x2ef]
jmp 0x417313
xor edx, edx
movzx edi, cl
shl eax, 8
or eax, edi
push 8
shl eax, 8
or eax, edi
shl eax, 8
or eax, edx
mov ebx, eax
mov eax, dword [ebp - 4]
mov esi, eax
push ebx
shl esi, 2
mov dword [esi + 0x421c80], ebx
call sub.MSVCRT.dll__lrotl
push 0x10
push ebx
mov dword [esi + 0x422080], eax
call sub.MSVCRT.dll__lrotl
push 0x18
push ebx
mov dword [esi + 0x422480], eax
call sub.MSVCRT.dll__lrotl
push 8
push edi
mov dword [esi + 0x422880], eax
mov dword [esi + 0x420c80], edi
call sub.MSVCRT.dll__lrotl
push 0x10
push edi
mov dword [esi + 0x421080], eax
call sub.MSVCRT.dll__lrotl
push 0x18
push edi
mov dword [esi + 0x421480], eax
call sub.MSVCRT.dll__lrotl
movzx ecx, byte [ebp - 4]
mov dword [esi + 0x421880], eax
mov eax, ecx
shl eax, 3
xor eax, ecx
add esp, 0x30
shl eax, 2
xor eax, ecx
shl eax, 1
mov edx, eax
shr edx, 8
xor dl, al
xor dl, 5
je 0x4173e2
mov eax, ecx
shl eax, 3
xor eax, ecx
shl eax, 2
xor eax, ecx
shl eax, 1
mov ecx, eax
shr ecx, 8
movzx ecx, cl
movzx eax, al
xor ecx, eax
xor ecx, 5
movzx eax, byte [ebp + ecx - 0x108]
lea ecx, [ebp - 0x209]
sub ecx, eax
mov al, byte [ecx]
jmp 0x4173e4
xor al, al
test al, al
je 0x4173fd
movzx ecx, al
movzx ecx, byte [ebp + ecx - 0x108]
movzx ebx, byte [ebp + ecx - 0x2a0]
jmp 0x4173ff
xor ebx, ebx
test al, al
je 0x417418
movzx ecx, al
movzx ecx, byte [ebp + ecx - 0x108]
movzx edi, byte [ebp + ecx - 0x21a]
jmp 0x41741a
xor edi, edi
test al, al
je 0x417433
movzx ecx, al
movzx ecx, byte [ebp + ecx - 0x108]
movzx edx, byte [ebp + ecx - 0x241]
jmp 0x417435
xor edx, edx
test al, al
je 0x41744e
movzx ecx, al
movzx ecx, byte [ebp + ecx - 0x108]
movzx ecx, byte [ebp + ecx - 0x229]
jmp 0x417450
xor ecx, ecx
shl ebx, 8
or ebx, edi
push 8
shl ebx, 8
movzx eax, al
or ebx, edx
mov edi, eax
shl ebx, 8
or ebx, ecx
mov dword [ebp - 8], eax
shl edi, 2
push ebx
mov dword [edi + 0x424d00], ebx
call sub.MSVCRT.dll__lrotl
push 0x10
push ebx
mov dword [edi + 0x425100], eax
call sub.MSVCRT.dll__lrotl
push 0x18
push ebx
mov dword [edi + 0x425500], eax
call sub.MSVCRT.dll__lrotl
push 8
push ebx
mov dword [edi + 0x425900], eax
mov dword [esi + 0x423d00], ebx
call sub.MSVCRT.dll__lrotl
push 0x10
push ebx
mov dword [esi + 0x424100], eax
call sub.MSVCRT.dll__lrotl
push 0x18
push ebx
mov dword [esi + 0x424500], eax
call sub.MSVCRT.dll__lrotl
mov edi, dword [ebp - 8]
push 8
push edi
mov dword [esi + 0x424900], eax
mov dword [esi + 0x422c80], edi
call sub.MSVCRT.dll__lrotl
push 0x10
push edi
mov dword [esi + 0x423080], eax
call sub.MSVCRT.dll__lrotl
add esp, 0x40
mov dword [esi + 0x423480], eax
push 0x18
push edi
call sub.MSVCRT.dll__lrotl
inc dword [ebp - 4]
pop ecx
cmp dword [ebp - 4], 0x100
pop ecx
mov dword [esi + 0x423880], eax
jb 0x4172a3
pop edi
pop esi
mov byte [0x420c64], 1
pop ebx
leave
ret