Function at 0x4104a0
Capabilities:
Encode data using xor

Disassembly:
mov eax, dword [esp + 8]
sub esp, 8
push ebx
push ebp
push esi
add eax, 0xfffffffd
cmp eax, 9
push edi
mov esi, ecx
ja case.0x4104b9.6
jmp dword [eax*4 + 0x410790]
mov ecx, dword [esi]
push ecx
push 2
mov edi, 1
lea edx, [esp + 0x28]
mov bl, 0xff
push edi
push edx
mov byte [esp + 0x30], bl
mov byte [esp + 0x31], bl
call fcn.00487020
add esp, 0x10
lea eax, [esp + 0x20]
push eax
mov ecx, esi
call fcn.004103a0
xor ecx, ecx
mov cx, ax
mov eax, dword [esp + 0x1c]
mov dword [eax + 4], edi
mov dword [eax + 8], edi
pop edi
pop esi
pop ebp
mov dword [eax], ecx
pop ebx
add esp, 8
ret 8
mov edx, dword [esi]
push edx
push 4
mov bl, 0xff
mov edi, 1
lea eax, [esp + 0x28]
push edi
push eax
mov byte [esp + 0x30], bl
mov byte [esp + 0x31], bl
mov byte [esp + 0x32], bl
mov byte [esp + 0x33], bl
call fcn.00487020
add esp, 0x10
lea ecx, [esp + 0x20]
push ecx
mov ecx, esi
call fcn.004084a0
mov ecx, dword [esp + 0x1c]
mov dword [ecx + 4], edi
mov dword [ecx + 8], edi
pop edi
pop esi
pop ebp
mov dword [ecx], eax
mov eax, ecx
pop ebx
add esp, 8
ret 8
mov edx, dword [esi]
push edx
push 4
mov bl, 0xff
mov edi, 1
lea eax, [esp + 0x28]
push edi
push eax
mov byte [esp + 0x30], bl
mov byte [esp + 0x31], bl
mov byte [esp + 0x32], bl
mov byte [esp + 0x33], bl
call fcn.00487020
add esp, 0x10
lea ecx, [esp + 0x20]
push ecx
mov ecx, esi
call fcn.004084a0
mov edx, dword [esi]
push edx
push 4
mov ebp, eax
lea eax, [esp + 0x28]
push edi
push eax
mov byte [esp + 0x30], bl
mov byte [esp + 0x31], bl
mov byte [esp + 0x32], bl
mov byte [esp + 0x33], bl
call fcn.00487020
add esp, 0x10
lea ecx, [esp + 0x20]
push ecx
mov ecx, esi
call fcn.004084a0
mov ecx, eax
mov eax, dword [esp + 0x1c]
mov dword [eax + 8], edi
pop edi
pop esi
mov dword [eax], ebp
pop ebp
mov dword [eax + 4], ecx
pop ebx
add esp, 8
ret 8
mov edx, dword [esi]
push edx
push 2
mov edi, 1
lea eax, [esp + 0x28]
mov bl, 0xff
push edi
push eax
mov byte [esp + 0x30], bl
mov byte [esp + 0x31], bl
call fcn.00487020
add esp, 0x10
lea ecx, [esp + 0x20]
push ecx
mov ecx, esi
call fcn.004103a0
xor edx, edx
mov dx, ax
mov eax, dword [esp + 0x1c]
mov dword [eax + 4], edi
mov dword [eax + 8], edi
pop edi
pop esi
pop ebp
mov dword [eax], edx
pop ebx
add esp, 8
ret 8
mov eax, dword [esi]
push eax
push 4
mov bl, 0xff
mov edi, 1
lea ecx, [esp + 0x28]
push edi
push ecx
mov byte [esp + 0x30], bl
mov byte [esp + 0x31], bl
mov byte [esp + 0x32], bl
mov byte [esp + 0x33], bl
call fcn.00487020
add esp, 0x10
lea edx, [esp + 0x20]
push edx
jmp 0x410538
mov eax, dword [esi]
push eax
push 4
mov bl, 0xff
mov edi, 1
lea ecx, [esp + 0x28]
push edi
push ecx
mov byte [esp + 0x30], bl
mov byte [esp + 0x31], bl
mov byte [esp + 0x32], bl
mov byte [esp + 0x33], bl
call fcn.00487020
add esp, 0x10
lea edx, [esp + 0x20]
push edx
mov ecx, esi
call fcn.004084a0
mov ebp, eax
mov eax, dword [esi]
push eax
push 4
lea ecx, [esp + 0x28]
push edi
push ecx
mov byte [esp + 0x30], bl
mov byte [esp + 0x31], bl
mov byte [esp + 0x32], bl
mov byte [esp + 0x33], bl
call fcn.00487020
add esp, 0x10
lea edx, [esp + 0x20]
push edx
jmp 0x4105b7
mov eax, dword [esi]
push eax
push 4
mov bl, 0xff
lea ecx, [esp + 0x28]
push 1
push ecx
mov byte [esp + 0x30], bl
mov byte [esp + 0x31], bl
mov byte [esp + 0x32], bl
mov byte [esp + 0x33], bl
call fcn.00487020
add esp, 0x10
lea edx, [esp + 0x20]
push edx
mov ecx, esi
call fcn.004084a0
pop edi
pop esi
mov dword [esp + 0x18], eax
fld dword [esp + 0x18]
mov eax, dword [esp + 0x14]
pop ebp
fstp qword [eax]
mov dword [eax + 8], 2
pop ebx
add esp, 8
ret 8
push 0x1234
call dword [sym.imp.WS2_32.dll_ntohs]
sub ax, 0x1234
neg ax
sbb eax, eax
xor ebx, ebx
inc eax
cmp word [esi + 4], 0x4949
sete bl
sub ebx, eax
neg ebx
sbb ebx, ebx
inc ebx
imul ebx, ebx, 7
xor edi, edi
mov eax, dword [esi]
push eax
call fcn.00487bf7
mov ecx, edi
xor ecx, ebx
add esp, 4
inc edi
cmp edi, 8
mov byte [esp + ecx + 0x10], al
jl 0x410735
fld qword [esp + 0x10]
mov eax, dword [esp + 0x1c]
pop edi
pop esi
pop ebp
fstp qword [eax]
mov dword [eax + 8], 2
pop ebx
add esp, 8
ret 8
mov edx, dword [esi]
push 1
push edx
call fcn.00487bf7
mov esi, dword [esp + 0x24]
add esp, 4
push eax
mov ecx, esi
call fcn.00410360
pop edi
mov eax, esi
pop esi
pop ebp
pop ebx
add esp, 8
ret 8