Function at 0x40b990
Capabilities:
Encode data using xor

Disassembly:
push ebp
push ebx
push edi
push esi
mov eax, 0x15b4
call fcn.0040c430
mov edi, edx
mov dword [esp + 0x10], ecx
mov ebx, dword [esp + 0x15cc]
mov esi, dword [esp + 0x15c8]
lea eax, [esp + 0x30]
push 0x84
push 0
push eax
call fcn.0040c660
add esp, 0xc
cmp dword [esp + 0x15d0], 0
mov dword [esp + 0x18], edi
je 0x40ba5e
test esi, esi
mov ecx, esi
jle 0x40c217
xor eax, eax
cmp ecx, 1
je 0x40ba28
mov ecx, dword [esp + 0x15c8]
and ecx, 0x7ffffffe
mov eax, dword [esp + 0x18]
lea eax, [eax + eax*8]
shl eax, 5
mov edx, dword [esp + 0x10]
add edx, eax
add edx, 0x8f13
xor eax, eax
nop
nop
movzx esi, byte [edx + eax - 1]
inc dword [esp + esi*4 + 0x30]
movzx esi, byte [edx + eax]
inc dword [esp + esi*4 + 0x30]
add eax, 2
cmp ecx, eax
jne 0x40ba10
mov ecx, dword [esp + 0x15c8]
test cl, 1
je 0x40c217
mov ecx, dword [esp + 0x18]
lea ecx, [ecx + ecx*8]
shl ecx, 5
add ecx, dword [esp + 0x10]
movzx eax, byte [eax + ecx + 0x8f12]
mov ecx, dword [esp + 0x15c8]
inc dword [esp + eax*4 + 0x30]
jmp 0x40c217
lea eax, [edi + edi*8]
mov dword [esp + 0x24], eax
mov ebp, eax
shl ebp, 6
test esi, esi
mov dword [esp + 0x1c], ebp
jle 0x40bb59
cmp esi, 1
jne 0x40c082
xor eax, eax
xor ebx, ebx
mov ecx, dword [esp + 0x15c8]
test cl, 1
je 0x40bab5
mov ecx, dword [esp + 0x10]
add ecx, ebp
add ecx, 0x8192
movzx ecx, word [ecx + eax*2]
test cx, cx
je 0x40bab5
mov word [esp + ebx*4 + 0xb4], cx
mov word [esp + ebx*4 + 0xb6], ax
inc ebx
lea eax, [esp + 0x934]
push 0x800
push 0
push eax
call fcn.0040c660
add esp, 0xc
test ebx, ebx
sete byte [esp + 0xb]
je 0x40bb70
xor eax, eax
cmp ebx, 1
je 0x40bb2f
mov ecx, ebx
and ecx, 0xfffffffe
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, word [esp + eax*4 + 0xb4]
movzx esi, dl
inc dword [esp + esi*4 + 0x934]
shr edx, 8
inc dword [esp + edx*4 + 0xd34]
movzx edx, word [esp + eax*4 + 0xb8]
movzx esi, dl
inc dword [esp + esi*4 + 0x934]
shr edx, 8
inc dword [esp + edx*4 + 0xd34]
add eax, 2
cmp ecx, eax
jne 0x40baf0
test bl, 1
je 0x40bb50
movzx eax, word [esp + eax*4 + 0xb4]
movzx ecx, al
inc dword [esp + ecx*4 + 0x934]
shr eax, 8
inc dword [esp + eax*4 + 0xd34]
mov eax, dword [esp + 0xd34]
jmp 0x40bb79
lea eax, [esp + 0x934]
push 0x800
push 0
push eax
call fcn.0040c660
add esp, 0xc
xor ebx, ebx
mov byte [esp + 0xb], 1
xor eax, eax
xor ecx, ecx
cmp eax, ebx
setne cl
inc ecx
mov dword [esp + 0x28], ecx
lea eax, [ebx - 1]
mov dword [esp + 0x14], eax
mov dword [esp + 4], ebx
and ebx, 0xfffffffe
lea eax, [esp + 0xb4]
mov dword [esp], eax
lea eax, [esp + 0x1134]
xor ecx, ecx
lea esi, [esp + 0x938]
xor edi, edi
mov dword [esp + 0x2c], ebx
jmp 0x40bbd6
inc edi
add ecx, 8
add esi, 0x400
mov eax, ebp
cmp edi, dword [esp + 0x28]
je 0x40bcdb
mov dword [esp + 0x20], edi
mov edx, dword [esp]
mov dword [esp + 0xc], edx
mov dword [esp], eax
xor edx, edx
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
mov dword [esp + eax*4 + 0x534], edx
mov ebx, dword [esi + eax*4 - 4]
mov ebp, ebx
and ebp, edx
xor ebx, edx
lea edx, [ebx + ebp*2]
mov dword [esp + eax*4 + 0x538], edx
mov ebx, dword [esi + eax*4]
mov ebp, ebx
and ebp, edx
xor ebx, edx
lea edx, [ebx + ebp*2]
add eax, 2
cmp eax, 0x100
jne 0x40bbf0
cmp byte [esp + 0xb], 0
mov edi, dword [esp + 0x20]
mov ebp, dword [esp + 0xc]
jne 0x40bbc0
cmp dword [esp + 0x14], 0
je 0x40bc9c
xor eax, eax
mov edi, dword [esp]
nop
nop
nop
nop
movzx edx, word [ebp + eax*4]
shr edx, cl
movzx edx, dl
mov ebx, dword [esp + edx*4 + 0x534]
lea ebp, [ebx + 1]
mov dword [esp + edx*4 + 0x534], ebp
mov edx, dword [esp + 0xc]
mov edx, dword [edx + eax*4]
mov dword [edi + ebx*4], edx
mov edx, dword [esp + 0xc]
movzx edx, word [edx + eax*4 + 4]
shr edx, cl
movzx edx, dl
mov ebx, dword [esp + edx*4 + 0x534]
lea ebp, [ebx + 1]
mov dword [esp + edx*4 + 0x534], ebp
mov ebp, dword [esp + 0xc]
mov edx, dword [ebp + eax*4 + 4]
mov dword [edi + ebx*4], edx
mov ebx, dword [esp + 0x2c]
add eax, 2
cmp ebx, eax
jne 0x40bc40
jmp 0x40bc9e
xor eax, eax
test byte [esp + 4], 1
mov edi, dword [esp + 0x20]
je 0x40bbc0
movzx edx, word [ebp + eax*4]
shr edx, cl
movzx edx, dl
mov ebx, dword [esp + edx*4 + 0x534]
lea ebp, [ebx + 1]
mov dword [esp + edx*4 + 0x534], ebp
mov ebp, dword [esp + 0xc]
mov eax, dword [ebp + eax*4]
mov edx, dword [esp]
mov dword [edx + ebx*4], eax
jmp 0x40bbc0
cmp dword [esp + 4], 0
mov ebx, dword [esp + 0x15cc]
mov ebp, dword [esp + 0x1c]
je 0x40c0f5
cmp dword [esp + 4], 1
jne 0x40bd05
mov eax, dword [esp]
mov word [eax], 1
jmp 0x40bf68
mov ecx, dword [esp]
movzx eax, word [ecx + 4]
add word [ecx], ax
cmp dword [esp + 0x14], 2
jl 0x40bdc1
mov eax, 2
mov ebx, 2
sub ebx, dword [esp + 4]
xor edx, edx
mov esi, 1
jmp 0x40bd58
mov ebp, dword [esp]
movzx edi, word [ebp + eax*4]
inc eax
add word [ebp + esi*4], di
lea ecx, [ebx + esi]
inc ecx
inc esi
cmp ecx, 1
je 0x40bdc1
mov ebp, dword [esp]
movzx ecx, word [ebp + edx*4]
cmp eax, dword [esp + 4]
jge 0x40bd70
movzx edi, word [ebp + eax*4]
cmp cx, di
jae 0x40bda0
mov word [ebp + esi*4], cx
mov word [ebp + edx*4], si
inc edx
cmp eax, dword [esp + 4]
jge 0x40bdac
cmp edx, esi
jge 0x40bd40
mov ebp, dword [esp]
movzx ecx, word [ebp + edx*4]
movzx edi, word [ebp + eax*4]
cmp cx, di
jae 0x40bd48
jmp 0x40bdb4
inc eax
mov word [ebp + esi*4], di
cmp eax, dword [esp + 4]
jl 0x40bd81
mov ebp, dword [esp]
movzx ecx, word [ebp + edx*4]
add word [ebp + esi*4], cx
mov word [ebp + edx*4], si
inc edx
jmp 0x40bd4e
mov ecx, dword [esp + 4]
mov eax, ecx
not eax
mov esi, dword [esp]
mov word [esi + ecx*4 - 8], 0
and eax, 3
and ecx, 0xfffffffc
sub ecx, eax
js 0x40be71
mov edx, 1
sub edx, eax
mov eax, ecx
and edx, 3
je 0x40be1d
mov eax, ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov esi, dword [esp]
movzx esi, word [esi + eax*4]
mov edi, dword [esp]
movzx esi, word [edi + esi*4]
inc esi
mov edi, dword [esp]
mov word [edi + eax*4], si
mov esi, dword [esp]
dec eax
dec edx
jne 0x40be00
cmp ecx, 3
jb 0x40be71
inc eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ecx, word [esi + eax*4 - 4]
movzx ecx, word [esi + ecx*4]
inc ecx
mov word [esi + eax*4 - 4], cx
movzx ecx, word [esi + eax*4 - 8]
movzx ecx, word [esi + ecx*4]
inc ecx
mov word [esi + eax*4 - 8], cx
movzx ecx, word [esi + eax*4 - 0xc]
movzx ecx, word [esi + ecx*4]
inc ecx
mov word [esi + eax*4 - 0xc], cx
movzx ecx, word [esi + eax*4 - 0x10]
movzx ecx, word [esi + ecx*4]
inc ecx
mov word [esi + eax*4 - 0x10], cx
add eax, 0xfffffffc
jne 0x40be30
mov eax, dword [esp + 4]
add eax, 0xfffffffe
mov ebx, 1
xor ecx, ecx
mov edx, dword [esp + 0x14]
jmp 0x40bea0
lea ebx, [ebp*2]
inc ecx
test ebp, ebp
je 0x40bf52
test eax, eax
js 0x40bed0
lea ebp, [eax + 1]
xor edi, edi
nop
nop
nop
nop
nop
nop
nop
movzx esi, word [esi + eax*4]
cmp ecx, esi
jne 0x40bee0
inc edi
dec eax
cmp ebp, edi
mov esi, dword [esp]
jne 0x40beb0
mov eax, 0xffffffff
jmp 0x40bee5
xor ebp, ebp
jmp 0x40bee5
mov ebp, edi
mov esi, dword [esp]
mov edi, ebx
sub edi, ebp
jle 0x40be90
and edi, 3
je 0x40bf17
mov dword [esp + 0xc], ebx
mov ebx, edi
lea edi, [esi + edx*4]
xor esi, esi
nop
nop
nop
nop
nop
mov word [edi], cx
inc esi
add edi, 0xfffffffc
cmp ebx, esi
jne 0x40bf00
mov ebx, dword [esp + 0xc]
mov edi, ebx
sub edi, esi
sub edx, esi
jmp 0x40bf19
mov edi, ebx
mov esi, ebp
sub esi, ebx
cmp esi, 0xfffffffc
mov esi, dword [esp]
ja 0x40be90
nop
nop
nop
nop
nop
nop
nop
mov word [esi + edx*4], cx
mov word [esi + edx*4 - 4], cx
mov word [esi + edx*4 - 8], cx
mov word [esi + edx*4 - 0xc], cx
add edx, 0xfffffffc
add edi, 0xfffffffc
cmp edi, ebp
jg 0x40bf30
jmp 0x40be90
cmp dword [esp + 4], 0
mov ebp, dword [esp + 0x1c]
mov ebx, dword [esp + 0x15cc]
jle 0x40c0f5
mov eax, dword [esp + 4]
and eax, 3
xor ecx, ecx
cmp dword [esp + 0x14], 3
mov edi, dword [esp]
jb 0x40bfba
mov edx, dword [esp + 4]
and edx, 0xfffffffc
xor ecx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx esi, word [edi + ecx*4]
inc dword [esp + esi*4 + 0x30]
movzx esi, word [edi + ecx*4 + 4]
inc dword [esp + esi*4 + 0x30]
movzx esi, word [edi + ecx*4 + 8]
inc dword [esp + esi*4 + 0x30]
movzx esi, word [edi + ecx*4 + 0xc]
inc dword [esp + esi*4 + 0x30]
add ecx, 4
cmp edx, ecx
jne 0x40bf90
test eax, eax
je 0x40bfdd
mov edx, dword [esp]
lea ecx, [edx + ecx*4]
xor edx, edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx esi, word [ecx + edx*4]
inc dword [esp + esi*4 + 0x30]
inc edx
cmp eax, edx
jne 0x40bfd0
cmp dword [esp + 4], 2
jl 0x40c0f5
cmp ebx, 0x20
jge 0x40c050
mov eax, dword [esp + ebx*4 + 0x30]
mov edx, ebx
neg edx
mov ecx, ebx
and edx, 3
je 0x40c00c
nop
nop
nop
nop
add eax, dword [esp + ecx*4 + 0x34]
inc ecx
mov dword [esp + ebx*4 + 0x30], eax
dec edx
jne 0x40c000
lea edx, [ebx - 0x1d]
cmp edx, 3
jb 0x40c048
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
add eax, dword [esp + ecx*4 + 0x34]
mov dword [esp + ebx*4 + 0x30], eax
add eax, dword [esp + ecx*4 + 0x38]
mov dword [esp + ebx*4 + 0x30], eax
add eax, dword [esp + ecx*4 + 0x3c]
mov dword [esp + ebx*4 + 0x30], eax
add eax, dword [esp + ecx*4 + 0x40]
add ecx, 4
mov dword [esp + ebx*4 + 0x30], eax
cmp ecx, 0x20
jne 0x40c020
test ebx, ebx
jle 0x40c0e5
lea edx, [ebx + 1]
xor ecx, ecx
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov esi, dword [esp + edx*4 + 0x2c]
shl esi, cl
add eax, esi
dec edx
inc ecx
cmp edx, 1
ja 0x40c060
mov edx, 1
mov ecx, ebx
shl edx, cl
cmp eax, edx
jne 0x40c36d
jmp 0x40c0f5
mov ecx, esi
and ecx, 0x7ffffffe
mov eax, dword [esp + 0x10]
lea edx, [eax + ebp]
add edx, 0x8194
xor eax, eax
xor ebx, ebx
jmp 0x40c0ab
add eax, 2
cmp ecx, eax
je 0x40ba83
movzx esi, word [edx + eax*2 - 2]
test si, si
je 0x40c0c6
mov word [esp + ebx*4 + 0xb4], si
mov word [esp + ebx*4 + 0xb6], ax
inc ebx
movzx esi, word [edx + eax*2]
test si, si
je 0x40c0a0
mov word [esp + ebx*4 + 0xb4], si
lea esi, [eax + 1]
mov word [esp + ebx*4 + 0xb6], si
inc ebx
jmp 0x40c0a0
mov edx, 1
mov ecx, ebx
shl edx, cl
xor eax, eax
jmp 0x40c36d
mov esi, dword [esp + 0x24]
shl esi, 5
mov edi, dword [esp + 0x10]
lea eax, [edi + esi]
add eax, 0x8f12
push 0x120
push 0
push eax
call fcn.0040c660
add esp, 0xc
lea eax, [edi + ebp]
add eax, 0x8852
push 0x240
push 0
push eax
call fcn.0040c660
add esp, 0xc
test ebx, ebx
jle 0x40c210
add dword [esp], 0xfffffffe
mov eax, 1
add esi, dword [esp + 0x10]
jmp 0x40c165
mov edi, dword [esp + 4]
mov dword [esp + 4], edi
lea ecx, [eax + 1]
cmp eax, ebx
mov eax, ecx
je 0x40c210
mov ecx, dword [esp + eax*4 + 0x30]
test ecx, ecx
jle 0x40c150
mov edx, ecx
and edx, 3
je 0x40c1c0
mov edi, dword [esp + 4]
mov ebx, dword [esp]
lea edi, [ebx + edi*4]
mov ebp, esi
xor esi, esi
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ebx, word [edi]
mov byte [ebx + ebp + 0x8f12], al
inc esi
add edi, 0xfffffffc
cmp edx, esi
jne 0x40c190
sub dword [esp + 4], esi
mov edx, ecx
sub edx, esi
mov ebx, dword [esp + 0x15cc]
mov esi, ebp
jmp 0x40c1c2
mov edx, ecx
cmp ecx, 4
mov edi, dword [esp + 4]
mov ebp, dword [esp]
jb 0x40c154
dec edx
nop
movzx ecx, word [ebp + edi*4]
mov byte [ecx + esi + 0x8f12], al
movzx ecx, word [ebp + edi*4 - 4]
mov byte [ecx + esi + 0x8f12], al
movzx ecx, word [ebp + edi*4 - 8]
mov byte [ecx + esi + 0x8f12], al
movzx ecx, word [ebp + edi*4 - 0xc]
add edi, 0xfffffffc
mov byte [ecx + esi + 0x8f12], al
add edx, 0xfffffffc
cmp edx, 0xfffffffe
jb 0x40c1d0
jmp 0x40c154
mov ecx, dword [esp + 0x15c8]
mov dword [esp + 0x938], 0
cmp ebx, 2
jl 0x40c28d
lea ecx, [ebx - 1]
cmp ebx, 2
jne 0x40c238
xor eax, eax
mov edx, 2
jmp 0x40c274
mov ebx, ecx
and ebx, 0xfffffffe
xor eax, eax
xor edx, edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
add eax, dword [esp + edx*4 + 0x34]
add eax, eax
mov dword [esp + edx*4 + 0x93c], eax
add eax, dword [esp + edx*4 + 0x38]
add eax, eax
mov dword [esp + edx*4 + 0x940], eax
add edx, 2
cmp ebx, edx
jne 0x40c250
add edx, 2
test cl, 1
mov ecx, dword [esp + 0x15c8]
je 0x40c28d
add eax, dword [esp + edx*4 + 0x2c]
add eax, eax
mov dword [esp + edx*4 + 0x934], eax
test ecx, ecx
jle 0x40c362
xor eax, eax
mov edx, dword [esp + 0x18]
lea edi, [edx + edx*8]
mov edx, edi
shl edx, 5
mov esi, dword [esp + 0x10]
add edx, esi
shl edi, 6
add edi, esi
mov dword [esp + 0xc], edi
jmp 0x40c2dc
mov ecx, dword [esp + 0xc]
mov word [ecx + eax*2 + 0x8852], di
mov ecx, dword [esp + 0x15c8]
inc eax
cmp eax, ecx
je 0x40c362
movzx ebx, byte [eax + edx + 0x8f12]
test ebx, ebx
je 0x40c2d3
mov ecx, dword [esp + ebx*4 + 0x934]
lea edi, [ecx + 1]
mov dword [esp + ebx*4 + 0x934], edi
xor edi, edi
cmp bl, 4
jb 0x40c33f
mov ebp, ebx
and ebp, 0xfffffffc
xor edi, edi
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov esi, ecx
and esi, 1
shl esi, 2
lea esi, [esi + edi*8]
mov edi, ecx
and edi, 2
or edi, esi
mov esi, ecx
shr esi, 2
and esi, 1
or esi, edi
mov edi, ecx
shr edi, 3
and edi, 1
lea edi, [edi + esi*2]
shr ecx, 4
add ebp, 0xfffffffc
jne 0x40c310
and ebx, 3
je 0x40c2c0
nop
nop
nop
nop
nop
nop
nop
nop
mov esi, ecx
and esi, 1
lea edi, [esi + edi*2]
shr ecx, 1
dec ebx
jne 0x40c350
jmp 0x40c2c0
add esp, 0x15b4
pop esi
pop edi
pop ebx
pop ebp
ret
dec dword [esp + ebx*4 + 0x30]
mov ecx, ebx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp ecx, 2
jl 0x40c398
mov esi, dword [esp + ecx*4 + 0x2c]
dec ecx
test esi, esi
je 0x40c380
dec esi
mov dword [esp + ecx*4 + 0x30], esi
add dword [esp + ecx*4 + 0x34], 2
mov ecx, eax
not ecx
lea eax, [ecx + eax*2]
cmp eax, edx
jne 0x40c36d
jmp 0x40c0f5