Function at 0x408b70
Capabilities:
Encode data using xor

Disassembly:
push ebp
push ebx
push edi
push esi
mov eax, 0x15b4
call fcn.00409660
mov edi, edx
mov dword [esp + 0xc], ecx
mov esi, dword [esp + 0x15c8]
lea eax, [esp + 0x30]
push 0x84
push 0
push eax
call fcn.00409710
add esp, 0xc
cmp dword [esp + 0x15d0], 0
mov dword [esp + 0x24], edi
je 0x408c64
test esi, esi
mov ecx, esi
jle 0x409466
xor eax, eax
cmp ecx, 1
je 0x408c26
mov ecx, dword [esp + 0x15c8]
and ecx, 0x7ffffffe
mov eax, dword [esp + 0x24]
lea eax, [eax + eax*8]
shl eax, 5
mov edx, dword [esp + 0xc]
add edx, eax
add edx, 0x8f13
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx esi, byte [edx + eax - 1]
mov edi, dword [esp + esi*4 + 0x30]
mov ebx, edi
and ebx, 1
xor edi, 1
lea edi, [edi + ebx*2]
mov dword [esp + esi*4 + 0x30], edi
movzx esi, byte [edx + eax]
mov edi, dword [esp + esi*4 + 0x30]
mov ebx, edi
and ebx, 1
xor edi, 1
lea edi, [edi + ebx*2]
mov dword [esp + esi*4 + 0x30], edi
add eax, 2
cmp ecx, eax
jne 0x408bf0
mov ecx, dword [esp + 0x15c8]
test cl, 1
je 0x409466
mov ecx, dword [esp + 0x24]
lea ecx, [ecx + ecx*8]
shl ecx, 5
add ecx, dword [esp + 0xc]
movzx eax, byte [eax + ecx + 0x8f12]
mov ecx, dword [esp + eax*4 + 0x30]
mov edx, ecx
and edx, 1
xor ecx, 1
lea ecx, [ecx + edx*2]
mov dword [esp + eax*4 + 0x30], ecx
jmp 0x40945f
lea ebp, [edi + edi*8]
mov eax, ebp
shl eax, 6
mov dword [esp + 0x20], eax
test esi, esi
jle 0x408d69
cmp esi, 1
jne 0x4092ba
xor eax, eax
xor ebx, ebx
mov ecx, dword [esp + 0x15c8]
test cl, 1
je 0x408cc5
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x20]
add ecx, edx
add ecx, 0x8192
movzx ecx, word [ecx + eax*2]
test cx, cx
je 0x408cc5
mov word [esp + ebx*4 + 0x4b4], cx
mov ecx, ebx
mov word [esp + ebx*4 + 0x4b6], ax
and ebx, 1
xor ecx, 1
lea ebx, [ecx + ebx*2]
lea eax, [esp + 0x934]
push 0x800
push 0
push eax
call fcn.00409710
add esp, 0xc
test ebx, ebx
sete byte [esp + 0x10]
je 0x408d80
xor eax, eax
cmp ebx, 1
je 0x408d3f
mov ecx, ebx
and ecx, 0xfffffffe
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, word [esp + eax*4 + 0x4b4]
movzx esi, dl
inc dword [esp + esi*4 + 0x934]
shr edx, 8
inc dword [esp + edx*4 + 0xd34]
movzx edx, word [esp + eax*4 + 0x4b8]
movzx esi, dl
inc dword [esp + esi*4 + 0x934]
shr edx, 8
inc dword [esp + edx*4 + 0xd34]
add eax, 2
cmp ecx, eax
jne 0x408d00
test bl, 1
je 0x408d60
movzx eax, word [esp + eax*4 + 0x4b4]
movzx ecx, al
inc dword [esp + ecx*4 + 0x934]
shr eax, 8
inc dword [esp + eax*4 + 0xd34]
mov eax, dword [esp + 0xd34]
jmp 0x408d89
lea eax, [esp + 0x934]
push 0x800
push 0
push eax
call fcn.00409710
add esp, 0xc
xor ebx, ebx
mov byte [esp + 0x10], 1
xor eax, eax
xor ecx, ecx
cmp eax, ebx
setne cl
inc ecx
mov dword [esp + 0x2c], ecx
lea eax, [ebx - 1]
mov dword [esp + 0x28], eax
mov edx, ebx
and edx, 0xfffffffe
lea eax, [esp + 0x4b4]
mov dword [esp], eax
lea eax, [esp + 0x1134]
xor ecx, ecx
lea esi, [esp + 0x934]
xor edi, edi
mov dword [esp + 0x14], ebp
mov dword [esp + 0x18], ebx
mov dword [esp + 8], edx
jmp 0x408de8
inc edi
add ecx, 8
add esi, 0x400
mov eax, dword [esp + 4]
cmp edi, dword [esp + 0x2c]
je 0x408efb
mov dword [esp + 0x1c], edi
mov edx, dword [esp]
mov dword [esp + 4], edx
mov dword [esp], eax
mov eax, 3
xor edx, edx
nop
nop
nop
mov dword [esp + eax*4 + 0xa8], edx
add edx, dword [esi + eax*4 - 0xc]
mov dword [esp + eax*4 + 0xac], edx
add edx, dword [esi + eax*4 - 8]
mov dword [esp + eax*4 + 0xb0], edx
add edx, dword [esi + eax*4 - 4]
mov dword [esp + eax*4 + 0xb4], edx
add edx, dword [esi + eax*4]
add eax, 4
cmp eax, 0x103
jne 0x408e00
cmp byte [esp + 0x10], 0
mov edi, dword [esp + 0x1c]
jne 0x408dd0
cmp dword [esp + 0x28], 0
je 0x408eac
xor eax, eax
mov edi, dword [esp]
mov ebp, dword [esp + 4]
movzx edx, word [ebp + eax*4]
shr edx, cl
movzx edx, dl
mov ebp, dword [esp + edx*4 + 0xb4]
lea ebx, [ebp + 1]
mov dword [esp + edx*4 + 0xb4], ebx
mov edx, dword [esp + 4]
mov edx, dword [edx + eax*4]
mov dword [edi + ebp*4], edx
mov edx, dword [esp + 4]
movzx edx, word [edx + eax*4 + 4]
shr edx, cl
movzx edx, dl
mov ebx, dword [esp + edx*4 + 0xb4]
lea ebp, [ebx + 1]
mov dword [esp + edx*4 + 0xb4], ebp
mov ebp, dword [esp + 4]
mov edx, dword [ebp + eax*4 + 4]
mov dword [edi + ebx*4], edx
mov edx, dword [esp + 8]
add eax, 2
cmp edx, eax
jne 0x408e50
jmp 0x408eae
xor eax, eax
mov ebx, dword [esp + 0x18]
test bl, 1
mov ebp, dword [esp + 0x14]
mov edi, dword [esp + 0x1c]
je 0x408dd0
mov edx, dword [esp + 4]
movzx edx, word [edx + eax*4]
shr edx, cl
movzx edx, dl
mov ebx, dword [esp + edx*4 + 0xb4]
lea ebp, [ebx + 1]
mov dword [esp + edx*4 + 0xb4], ebp
mov ebp, dword [esp + 0x14]
mov edx, dword [esp + 4]
mov eax, dword [edx + eax*4]
mov edx, dword [esp]
mov dword [edx + ebx*4], eax
mov ebx, dword [esp + 0x18]
jmp 0x408dd0
test ebx, ebx
je 0x409349
cmp ebx, 1
jne 0x408f15
mov eax, dword [esp]
mov word [eax], 1
jmp 0x40918c
mov ecx, dword [esp]
movzx eax, word [ecx + 4]
add word [ecx], ax
cmp ebx, 3
jl 0x408fe5
mov ecx, 2
mov eax, 2
sub eax, ebx
mov dword [esp + 0x1c], eax
xor edx, edx
mov esi, 1
jmp 0x408f6a
inc dword [esp + 4]
add word [edi + esi*4], ax
mov eax, dword [esp + 0x1c]
lea ecx, [eax + esi]
inc ecx
inc esi
cmp ecx, 1
mov ecx, dword [esp + 4]
je 0x408fe5
mov eax, dword [esp]
movzx edi, word [eax + edx*4]
cmp ecx, ebx
jge 0x408f8d
mov dword [esp + 0x10], edx
movzx edx, word [eax + ecx*4]
mov word [esp + 8], dx
mov edx, dword [esp + 0x10]
cmp di, word [esp + 8]
jae 0x408fa0
mov dword [esp + 4], ecx
mov word [eax + esi*4], di
mov word [eax + edx*4], si
inc edx
jmp 0x408fae
inc ecx
mov dword [esp + 4], ecx
movzx ecx, word [esp + 8]
mov word [eax + esi*4], cx
mov eax, dword [esp + 4]
cmp eax, ebx
jge 0x408fd0
mov edi, dword [esp]
movzx eax, word [edi + eax*4]
cmp edx, esi
jge 0x408f50
movzx ecx, word [edi + edx*4]
cmp cx, ax
jae 0x408f50
jmp 0x408fd7
mov edi, dword [esp]
movzx ecx, word [edi + edx*4]
add word [edi + esi*4], cx
mov word [edi + edx*4], si
inc edx
jmp 0x408f58
mov esi, dword [esp]
mov word [esi + ebx*4 - 8], 0
mov ecx, ebx
add ecx, 0xfffffffd
js 0x409081
mov edx, ebx
and edx, 3
xor edx, 2
mov eax, ecx
je 0x40902d
mov eax, ecx
nop
nop
nop
nop
nop
nop
nop
nop
mov esi, dword [esp]
movzx esi, word [esi + eax*4]
mov edi, dword [esp]
movzx esi, word [edi + esi*4]
inc esi
mov edi, dword [esp]
mov word [edi + eax*4], si
mov esi, dword [esp]
dec eax
dec edx
jne 0x409010
cmp ecx, 3
jb 0x409081
inc eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ecx, word [esi + eax*4 - 4]
movzx ecx, word [esi + ecx*4]
inc ecx
mov word [esi + eax*4 - 4], cx
movzx ecx, word [esi + eax*4 - 8]
movzx ecx, word [esi + ecx*4]
inc ecx
mov word [esi + eax*4 - 8], cx
movzx ecx, word [esi + eax*4 - 0xc]
movzx ecx, word [esi + ecx*4]
inc ecx
mov word [esi + eax*4 - 0xc], cx
movzx ecx, word [esi + eax*4 - 0x10]
movzx ecx, word [esi + ecx*4]
inc ecx
mov word [esi + eax*4 - 0x10], cx
add eax, 0xfffffffc
jne 0x409040
lea eax, [ebx - 2]
mov edi, 1
xor ecx, ecx
mov edx, dword [esp + 0x28]
jmp 0x4090be
mov ebp, dword [esp + 0x14]
mov edi, dword [esp + 4]
add edi, edi
mov dword [esp + 8], edi
inc ecx
cmp dword [esp + 4], 0
mov edi, dword [esp + 8]
je 0x409184
mov dword [esp + 8], edi
test eax, eax
js 0x4090f0
lea ebp, [eax + 1]
xor edi, edi
nop
nop
nop
nop
nop
movzx esi, word [esi + eax*4]
cmp ecx, esi
jne 0x409100
inc edi
dec eax
cmp ebp, edi
mov esi, dword [esp]
jne 0x4090d0
mov eax, 0xffffffff
mov edi, ebp
jmp 0x409103
xor edi, edi
jmp 0x409103
mov esi, dword [esp]
mov ebp, dword [esp + 8]
sub ebp, edi
mov dword [esp + 4], edi
jle 0x4090a0
and ebp, 3
je 0x409137
lea edi, [esi + edx*4]
xor esi, esi
nop
nop
nop
nop
nop
nop
nop
mov word [edi], cx
inc esi
add edi, 0xfffffffc
cmp ebp, esi
jne 0x409120
mov ebp, dword [esp + 8]
mov edi, ebp
sub edi, esi
sub edx, esi
jmp 0x40913d
mov ebp, dword [esp + 8]
mov edi, ebp
mov esi, dword [esp + 4]
sub esi, ebp
cmp esi, 0xfffffffc
mov esi, dword [esp]
mov ebp, dword [esp + 0x14]
ja 0x4090a4
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [esi + edx*4], cx
mov word [esi + edx*4 - 4], cx
mov word [esi + edx*4 - 8], cx
mov word [esi + edx*4 - 0xc], cx
add edx, 0xfffffffc
add edi, 0xfffffffc
cmp edi, dword [esp + 4]
jg 0x409160
jmp 0x4090a4
test ebx, ebx
jle 0x409349
mov eax, ebx
and eax, 3
xor ecx, ecx
cmp dword [esp + 0x28], 3
mov edi, dword [esp]
jb 0x4091da
mov edx, ebx
and edx, 0xfffffffc
xor ecx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx esi, word [edi + ecx*4]
inc dword [esp + esi*4 + 0x30]
movzx esi, word [edi + ecx*4 + 4]
inc dword [esp + esi*4 + 0x30]
movzx esi, word [edi + ecx*4 + 8]
inc dword [esp + esi*4 + 0x30]
movzx esi, word [edi + ecx*4 + 0xc]
inc dword [esp + esi*4 + 0x30]
add ecx, 4
cmp edx, ecx
jne 0x4091b0
test eax, eax
je 0x4091fd
mov edx, dword [esp]
lea ecx, [edx + ecx*4]
xor edx, edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx esi, word [ecx + edx*4]
inc dword [esp + esi*4 + 0x30]
inc edx
cmp eax, edx
jne 0x4091f0
cmp ebx, 2
jl 0x409349
mov edx, dword [esp + 0x15cc]
cmp edx, 0x20
jge 0x409280
mov eax, dword [esp + edx*4 + 0x30]
mov esi, edx
neg edx
mov ecx, esi
and edx, 3
je 0x40923c
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
add eax, dword [esp + ecx*4 + 0x34]
inc ecx
mov dword [esp + esi*4 + 0x30], eax
dec edx
jne 0x409230
lea edx, [esi - 0x1d]
cmp edx, 3
mov edx, esi
jb 0x409278
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
add eax, dword [esp + ecx*4 + 0x34]
mov dword [esp + edx*4 + 0x30], eax
add eax, dword [esp + ecx*4 + 0x38]
mov dword [esp + edx*4 + 0x30], eax
add eax, dword [esp + ecx*4 + 0x3c]
mov dword [esp + edx*4 + 0x30], eax
add eax, dword [esp + ecx*4 + 0x40]
add ecx, 4
mov dword [esp + edx*4 + 0x30], eax
cmp ecx, 0x20
jne 0x409250
test edx, edx
jle 0x409339
inc edx
xor ecx, ecx
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov esi, dword [esp + edx*4 + 0x2c]
shl esi, cl
add eax, esi
dec edx
inc ecx
cmp edx, 1
ja 0x409290
mov edx, 1
mov ecx, dword [esp + 0x15cc]
shl edx, cl
cmp eax, edx
jne 0x4095bd
jmp 0x409349
mov ecx, esi
and ecx, 0x7ffffffe
mov eax, dword [esp + 0xc]
mov edx, dword [esp + 0x20]
add edx, eax
add edx, 0x8194
xor eax, eax
xor ebx, ebx
jmp 0x4092eb
add eax, 2
cmp ecx, eax
je 0x408c85
movzx esi, word [edx + eax*2 - 2]
test si, si
je 0x409310
mov word [esp + ebx*4 + 0x4b4], si
mov esi, ebx
mov word [esp + ebx*4 + 0x4b6], ax
and ebx, 1
xor esi, 1
lea ebx, [esi + ebx*2]
movzx esi, word [edx + eax*2]
test si, si
je 0x4092e0
mov word [esp + ebx*4 + 0x4b4], si
mov esi, ebx
lea edi, [eax + 1]
mov word [esp + ebx*4 + 0x4b6], di
and ebx, 1
xor esi, 1
lea ebx, [esi + ebx*2]
jmp 0x4092e0
mov ecx, edx
mov edx, 1
shl edx, cl
xor eax, eax
jmp 0x4095bd
shl ebp, 5
mov esi, dword [esp + 0xc]
lea eax, [esi + ebp]
add eax, 0x8f12
push 0x120
push 0
push eax
call fcn.00409710
add esp, 0xc
mov eax, dword [esp + 0x20]
add eax, esi
add eax, 0x8852
push 0x240
push 0
push eax
call fcn.00409710
add esp, 0xc
cmp dword [esp + 0x15cc], 0
mov esi, dword [esp]
jle 0x40945f
add esi, 0xfffffffe
mov eax, 1
add ebp, dword [esp + 0xc]
mov dword [esp], esi
jmp 0x4093c2
lea ecx, [eax + 1]
cmp eax, dword [esp + 0x15cc]
mov eax, ecx
je 0x40945f
mov ecx, dword [esp + eax*4 + 0x30]
test ecx, ecx
jle 0x4093b0
mov edx, ecx
and edx, 3
je 0x409410
mov dword [esp + 0x18], ebx
lea edi, [esi + ebx*4]
xor esi, esi
nop
nop
nop
nop
nop
nop
movzx ebx, word [edi]
mov byte [ebx + ebp + 0x8f12], al
inc esi
add edi, 0xfffffffc
cmp edx, esi
jne 0x4093e0
mov ebx, dword [esp + 0x18]
sub ebx, esi
mov edx, ecx
sub edx, esi
mov esi, dword [esp]
cmp ecx, 4
jb 0x4093b0
jmp 0x409417
mov edx, ecx
cmp ecx, 4
jb 0x4093b0
dec edx
nop
nop
nop
nop
nop
nop
nop
nop
movzx ecx, word [esi + ebx*4]
mov byte [ecx + ebp + 0x8f12], al
movzx ecx, word [esi + ebx*4 - 4]
mov byte [ecx + ebp + 0x8f12], al
movzx ecx, word [esi + ebx*4 - 8]
mov byte [ecx + ebp + 0x8f12], al
movzx ecx, word [esi + ebx*4 - 0xc]
add ebx, 0xfffffffc
mov byte [ecx + ebp + 0x8f12], al
add edx, 0xfffffffc
cmp edx, 0xfffffffe
jb 0x409420
jmp 0x4093b0
mov ecx, dword [esp + 0x15c8]
mov dword [esp + 0x938], 0
mov eax, dword [esp + 0x15cc]
cmp eax, 2
jl 0x4094dd
lea ecx, [eax - 1]
cmp eax, 2
jne 0x40948e
xor eax, eax
mov edx, 2
jmp 0x4094c4
mov ebx, ecx
and ebx, 0xfffffffe
xor eax, eax
xor edx, edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
add eax, dword [esp + edx*4 + 0x34]
add eax, eax
mov dword [esp + edx*4 + 0x93c], eax
add eax, dword [esp + edx*4 + 0x38]
add eax, eax
mov dword [esp + edx*4 + 0x940], eax
add edx, 2
cmp ebx, edx
jne 0x4094a0
add edx, 2
test cl, 1
mov ecx, dword [esp + 0x15c8]
je 0x4094dd
add eax, dword [esp + edx*4 + 0x2c]
add eax, eax
mov dword [esp + edx*4 + 0x934], eax
test ecx, ecx
jle 0x4095b2
xor eax, eax
mov edx, dword [esp + 0x24]
lea edi, [edx + edx*8]
mov edx, edi
shl edx, 5
mov esi, dword [esp + 0xc]
add edx, esi
shl edi, 6
add edi, esi
mov dword [esp + 4], edi
jmp 0x40952c
mov ecx, dword [esp + 4]
mov word [ecx + eax*2 + 0x8852], di
mov ecx, dword [esp + 0x15c8]
inc eax
cmp eax, ecx
je 0x4095b2
movzx ebx, byte [eax + edx + 0x8f12]
test ebx, ebx
je 0x409523
mov ecx, dword [esp + ebx*4 + 0x934]
lea edi, [ecx + 1]
mov dword [esp + ebx*4 + 0x934], edi
xor edi, edi
cmp bl, 4
jb 0x40958f
mov ebp, ebx
and ebp, 0xfffffffc
xor edi, edi
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov esi, ecx
and esi, 1
shl esi, 2
lea esi, [esi + edi*8]
mov edi, ecx
and edi, 2
or edi, esi
mov esi, ecx
shr esi, 2
and esi, 1
or esi, edi
mov edi, ecx
shr edi, 3
and edi, 1
lea edi, [edi + esi*2]
shr ecx, 4
add ebp, 0xfffffffc
jne 0x409560
and ebx, 3
je 0x409510
nop
nop
nop
nop
nop
nop
nop
nop
mov esi, ecx
and esi, 1
lea edi, [esi + edi*2]
shr ecx, 1
dec ebx
jne 0x4095a0
jmp 0x409510
add esp, 0x15b4
pop esi
pop edi
pop ebx
pop ebp
ret
mov ecx, dword [esp + 0x15cc]
dec dword [esp + ecx*4 + 0x30]
nop
nop
nop
nop
nop
nop
nop
nop
cmp ecx, 2
jl 0x4095e8
mov esi, dword [esp + ecx*4 + 0x2c]
dec ecx
test esi, esi
je 0x4095d0
dec esi
mov dword [esp + ecx*4 + 0x30], esi
add dword [esp + ecx*4 + 0x34], 2
dec eax
cmp eax, edx
jne 0x4095bd
jmp 0x409349