Function at 0x409260
Capabilities:
Encode data using xor

Disassembly:
push ebp
push ebx
push edi
push esi
mov eax, 0x15b8
call fcn.00409d60
mov edi, edx
mov dword [esp + 0xc], ecx
mov esi, dword [esp + 0x15cc]
lea eax, [esp + 0x34]
push 0x84
push 0
push eax
call fcn.00409e10
add esp, 0xc
cmp dword [esp + 0x15d4], 0
mov dword [esp + 0x1c], edi
je 0x409354
test esi, esi
mov ecx, esi
jle 0x409b57
xor eax, eax
cmp ecx, 1
je 0x409316
mov ecx, dword [esp + 0x15cc]
and ecx, 0x7ffffffe
mov eax, dword [esp + 0x1c]
lea eax, [eax + eax*8]
shl eax, 5
mov edx, dword [esp + 0xc]
add edx, eax
add edx, 0x8f13
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx esi, byte [edx + eax - 1]
mov edi, dword [esp + esi*4 + 0x34]
mov ebx, edi
and ebx, 1
xor edi, 1
lea edi, [edi + ebx*2]
mov dword [esp + esi*4 + 0x34], edi
movzx esi, byte [edx + eax]
mov edi, dword [esp + esi*4 + 0x34]
mov ebx, edi
and ebx, 1
xor edi, 1
lea edi, [edi + ebx*2]
mov dword [esp + esi*4 + 0x34], edi
add eax, 2
cmp ecx, eax
jne 0x4092e0
mov ecx, dword [esp + 0x15cc]
test cl, 1
je 0x409b57
mov ecx, dword [esp + 0x1c]
lea ecx, [ecx + ecx*8]
shl ecx, 5
add ecx, dword [esp + 0xc]
movzx eax, byte [eax + ecx + 0x8f12]
mov ecx, dword [esp + eax*4 + 0x34]
mov edx, ecx
and edx, 1
xor ecx, 1
lea ecx, [ecx + edx*2]
mov dword [esp + eax*4 + 0x34], ecx
jmp 0x409b50
lea eax, [edi + edi*8]
mov dword [esp + 0x18], eax
shl eax, 6
mov dword [esp + 0x14], eax
test esi, esi
jle 0x409449
cmp esi, 1
jne 0x4096ae
xor eax, eax
xor ebx, ebx
mov ecx, dword [esp + 0x15cc]
test cl, 1
je 0x4093ad
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x14]
add ecx, edx
add ecx, 0x8192
movzx ecx, word [ecx + eax*2]
test cx, cx
je 0x4093ad
mov word [esp + ebx*4 + 0x4b8], cx
mov word [esp + ebx*4 + 0x4ba], ax
inc ebx
lea eax, [esp + 0x938]
push 0x800
push 0
push eax
call fcn.00409e10
add esp, 0xc
test ebx, ebx
sete byte [esp + 7]
je 0x409460
xor eax, eax
cmp ebx, 1
je 0x40941f
mov ecx, ebx
and ecx, 0xfffffffe
xor eax, eax
nop
movzx edx, word [esp + eax*4 + 0x4b8]
movzx esi, dl
inc dword [esp + esi*4 + 0x938]
shr edx, 8
inc dword [esp + edx*4 + 0xd38]
movzx edx, word [esp + eax*4 + 0x4bc]
movzx esi, dl
inc dword [esp + esi*4 + 0x938]
shr edx, 8
inc dword [esp + edx*4 + 0xd38]
add eax, 2
cmp ecx, eax
jne 0x4093e0
test bl, 1
je 0x409440
movzx eax, word [esp + eax*4 + 0x4b8]
movzx ecx, al
inc dword [esp + ecx*4 + 0x938]
shr eax, 8
inc dword [esp + eax*4 + 0xd38]
mov eax, dword [esp + 0xd38]
jmp 0x409469
lea eax, [esp + 0x938]
push 0x800
push 0
push eax
call fcn.00409e10
add esp, 0xc
xor ebx, ebx
mov byte [esp + 7], 1
xor eax, eax
xor ecx, ecx
cmp eax, ebx
setne cl
inc ecx
mov dword [esp + 0x30], ecx
lea eax, [ebx - 1]
mov dword [esp + 0x20], eax
mov edx, ebx
and edx, 0xfffffffe
lea ebp, [esp + 0x4b8]
lea eax, [esp + 0x1138]
xor ecx, ecx
lea esi, [esp + 0x938]
xor edi, edi
mov dword [esp + 8], ebx
mov dword [esp + 0x10], edx
jmp 0x4094c7
inc edi
add ecx, 8
add esi, 0x400
mov eax, dword [esp]
cmp edi, dword [esp + 0x30]
je 0x4095e0
mov dword [esp + 0x28], edi
mov dword [esp], ebp
mov ebp, eax
mov eax, 3
xor edx, edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov dword [esp + eax*4 + 0xac], edx
add edx, dword [esi + eax*4 - 0xc]
mov dword [esp + eax*4 + 0xb0], edx
add edx, dword [esi + eax*4 - 8]
mov dword [esp + eax*4 + 0xb4], edx
add edx, dword [esi + eax*4 - 4]
mov dword [esp + eax*4 + 0xb8], edx
add edx, dword [esi + eax*4]
add eax, 4
cmp eax, 0x103
jne 0x4094e0
cmp byte [esp + 7], 0
mov edi, dword [esp + 0x28]
jne 0x4094b0
cmp dword [esp + 0x20], 0
je 0x40958d
xor eax, eax
mov edi, dword [esp]
nop
nop
nop
nop
movzx edx, word [edi + eax*4]
shr edx, cl
movzx edx, dl
mov ebx, dword [esp + edx*4 + 0xb8]
mov edi, ebp
lea ebp, [ebx + 1]
mov dword [esp + edx*4 + 0xb8], ebp
mov edx, dword [esp]
mov edx, dword [edx + eax*4]
mov dword [edi + ebx*4], edx
mov edx, dword [esp]
movzx edx, word [edx + eax*4 + 4]
shr edx, cl
movzx edx, dl
mov ebx, dword [esp + edx*4 + 0xb8]
lea ebp, [ebx + 1]
mov dword [esp + edx*4 + 0xb8], ebp
mov ebp, edi
mov edi, dword [esp]
mov edx, dword [edi + eax*4 + 4]
mov dword [ebp + ebx*4], edx
mov edx, dword [esp + 0x10]
add eax, 2
cmp edx, eax
jne 0x409530
jmp 0x40958f
xor eax, eax
mov ebx, dword [esp + 8]
test bl, 1
mov edi, dword [esp + 0x28]
je 0x4094b0
mov edx, dword [esp]
movzx edx, word [edx + eax*4]
shr edx, cl
movzx edx, dl
mov ebx, dword [esp + edx*4 + 0xb8]
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x24], ebp
lea ebp, [ebx + 1]
mov dword [esp + edx*4 + 0xb8], ebp
mov ebp, dword [esp + 0x24]
mov ebx, dword [esp]
mov eax, dword [ebx + eax*4]
mov ebx, dword [esp + 0x2c]
mov dword [ebp + ebx*4], eax
mov ebx, dword [esp + 8]
jmp 0x4094b0
test ebx, ebx
mov edi, dword [esp + 0x18]
je 0x409a27
cmp ebx, 1
jne 0x4095fc
mov word [ebp], 1
jmp 0x4098ef
movzx eax, word [ebp + 4]
add word [ebp], ax
cmp ebx, 3
jl 0x409715
mov eax, 2
mov ecx, 2
sub ecx, ebx
xor edx, edx
mov esi, 1
jmp 0x40964d
movzx edi, word [ebp + eax*4]
inc eax
add word [ebp + esi*4], di
lea edi, [ecx + esi]
inc edi
inc esi
cmp edi, 1
mov ebx, dword [esp + 8]
je 0x40972f
movzx edi, word [ebp + edx*4]
cmp eax, ebx
jge 0x409660
movzx ebx, word [ebp + eax*4]
cmp di, bx
jae 0x409690
mov word [ebp + esi*4], di
mov word [ebp + edx*4], si
inc edx
cmp eax, dword [esp + 8]
jge 0x40969c
cmp edx, esi
jge 0x409630
movzx ebx, word [ebp + edx*4]
movzx edi, word [ebp + eax*4]
cmp bx, di
jae 0x409635
jmp 0x4096a1
inc eax
mov word [ebp + esi*4], bx
cmp eax, dword [esp + 8]
jl 0x409671
movzx ebx, word [ebp + edx*4]
add word [ebp + esi*4], bx
mov word [ebp + edx*4], si
inc edx
jmp 0x40963b
mov ecx, esi
and ecx, 0x7ffffffe
mov eax, dword [esp + 0xc]
mov edx, dword [esp + 0x14]
add edx, eax
add edx, 0x8194
xor eax, eax
xor ebx, ebx
jmp 0x4096db
add eax, 2
cmp ecx, eax
je 0x409377
movzx esi, word [edx + eax*2 - 2]
test si, si
je 0x4096f6
mov word [esp + ebx*4 + 0x4b8], si
mov word [esp + ebx*4 + 0x4ba], ax
inc ebx
movzx esi, word [edx + eax*2]
test si, si
je 0x4096d0
mov word [esp + ebx*4 + 0x4b8], si
lea esi, [eax + 1]
mov word [esp + ebx*4 + 0x4ba], si
inc ebx
jmp 0x4096d0
mov eax, ebx
xor eax, 2
mov ecx, ebx
and ecx, 0xfffffffd
add ecx, ecx
sub ecx, eax
mov word [ebp + ecx*4], 0
jmp 0x4097c5
mov eax, ebx
xor eax, 2
mov ecx, ebx
and ecx, 0xfffffffd
add ecx, ecx
sub ecx, eax
mov word [ebp + ecx*4], 0
lea edx, [ebx - 3]
mov esi, ebx
and esi, 3
xor esi, 2
mov eax, edx
je 0x409774
mov eax, edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edi, word [ebp + eax*4]
movzx edi, word [ebp + edi*4]
inc edi
mov word [ebp + eax*4], di
dec eax
dec esi
jne 0x409760
cmp edx, 3
jb 0x4097c5
inc eax
nop
nop
nop
nop
nop
nop
movzx edx, word [ebp + eax*4 - 4]
movzx edx, word [ebp + edx*4]
inc edx
mov word [ebp + eax*4 - 4], dx
movzx edx, word [ebp + eax*4 - 8]
movzx edx, word [ebp + edx*4]
inc edx
mov word [ebp + eax*4 - 8], dx
movzx edx, word [ebp + eax*4 - 0xc]
movzx edx, word [ebp + edx*4]
inc edx
mov word [ebp + eax*4 - 0xc], dx
movzx edx, word [ebp + eax*4 - 0x10]
movzx edx, word [ebp + edx*4]
inc edx
mov word [ebp + eax*4 - 0x10], dx
add eax, 0xfffffffc
jne 0x409780
mov edi, 1
xor edx, edx
mov eax, dword [esp + 0x20]
jmp 0x409812
inc edx
mov edi, esi
or edi, 2
mov dword [esp], edi
mov edi, esi
and edi, 2
mov esi, dword [esp]
imul esi, edi
mov dword [esp], esi
mov esi, dword [esp + 0x10]
and esi, 0x7ffffffd
xor edi, 2
imul edi, esi
add edi, dword [esp]
test edi, edi
jle 0x4098e3
test ecx, ecx
mov dword [esp], edi
js 0x409850
lea esi, [ecx + 1]
mov dword [esp + 0x10], esi
mov esi, ecx
not esi
xor edi, edi
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ebx, word [ebp + ecx*4]
cmp edx, ebx
jne 0x409860
inc edi
dec ecx
mov ebx, esi
add ebx, edi
jne 0x409830
mov ecx, 0xffffffff
mov ebx, dword [esp + 8]
mov esi, dword [esp + 0x10]
jmp 0x409866
xor esi, esi
jmp 0x409869
mov esi, edi
mov ebx, dword [esp + 8]
mov edi, dword [esp]
sub edi, esi
mov dword [esp + 0x10], esi
jle 0x4097e0
and edi, 3
je 0x4098a8
lea ebx, [eax*4]
add ebx, ebp
xor esi, esi
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [ebx], dx
inc esi
add ebx, 0xfffffffc
cmp edi, esi
jne 0x409890
mov edi, dword [esp]
sub edi, esi
sub eax, esi
mov ebx, dword [esp + 8]
jmp 0x4098ab
mov edi, dword [esp]
mov esi, dword [esp + 0x10]
sub esi, dword [esp]
cmp esi, 0xfffffffc
mov esi, dword [esp + 0x10]
ja 0x4097e0
nop
mov word [ebp + eax*4], dx
mov word [ebp + eax*4 - 4], dx
mov word [ebp + eax*4 - 8], dx
mov word [ebp + eax*4 - 0xc], dx
add eax, 0xfffffffc
add edi, 0xfffffffc
cmp edi, esi
jg 0x4098c0
jmp 0x4097e0
test ebx, ebx
mov edi, dword [esp + 0x18]
jle 0x409a27
mov eax, ebx
and eax, 3
xor ecx, ecx
cmp dword [esp + 0x20], 3
jb 0x40993b
mov edx, ebx
and edx, 0xfffffffc
xor ecx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx esi, word [ebp + ecx*4]
inc dword [esp + esi*4 + 0x34]
movzx esi, word [ebp + ecx*4 + 4]
inc dword [esp + esi*4 + 0x34]
movzx esi, word [ebp + ecx*4 + 8]
inc dword [esp + esi*4 + 0x34]
movzx esi, word [ebp + ecx*4 + 0xc]
inc dword [esp + esi*4 + 0x34]
add ecx, 4
cmp edx, ecx
jne 0x409910
test eax, eax
je 0x40995d
lea ecx, [ecx*4]
add ecx, ebp
xor edx, edx
nop
nop
nop
nop
nop
nop
movzx esi, word [ecx + edx*4]
inc dword [esp + esi*4 + 0x34]
inc edx
cmp eax, edx
jne 0x409950
cmp ebx, 2
jl 0x409a27
mov edx, dword [esp + 0x15d0]
cmp edx, 0x20
jge 0x4099dc
mov eax, dword [esp + edx*4 + 0x34]
mov esi, edx
neg edx
mov ecx, esi
and edx, 3
je 0x40999c
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
add eax, dword [esp + ecx*4 + 0x38]
inc ecx
mov dword [esp + esi*4 + 0x34], eax
dec edx
jne 0x409990
lea edx, [esi - 0x1d]
cmp edx, 3
mov edx, esi
jb 0x4099d8
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
add eax, dword [esp + ecx*4 + 0x38]
mov dword [esp + edx*4 + 0x34], eax
add eax, dword [esp + ecx*4 + 0x3c]
mov dword [esp + edx*4 + 0x34], eax
add eax, dword [esp + ecx*4 + 0x40]
mov dword [esp + edx*4 + 0x34], eax
add eax, dword [esp + ecx*4 + 0x44]
add ecx, 4
mov dword [esp + edx*4 + 0x34], eax
cmp ecx, 0x20
jne 0x4099b0
test edx, edx
jle 0x409a17
inc edx
xor ecx, ecx
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov esi, dword [esp + edx*4 + 0x30]
shl esi, cl
add eax, esi
dec edx
inc ecx
cmp edx, 1
ja 0x4099f0
mov edx, 1
mov ecx, dword [esp + 0x15d0]
shl edx, cl
cmp eax, edx
jne 0x409cbd
jmp 0x409a27
mov ecx, edx
mov edx, 1
shl edx, cl
xor eax, eax
jmp 0x409cbd
shl edi, 5
mov esi, dword [esp + 0xc]
lea eax, [esi + edi]
add eax, 0x8f12
push 0x120
push 0
push eax
call fcn.00409e10
add esp, 0xc
mov eax, dword [esp + 0x14]
add eax, esi
add eax, 0x8852
push 0x240
push 0
push eax
call fcn.00409e10
add esp, 0xc
cmp dword [esp + 0x15d0], 0
jle 0x409b50
mov eax, dword [esp + 0x15d0]
inc eax
cmp eax, 3
jge 0x409a81
mov eax, 2
add ebp, 0xfffffffe
mov ecx, 1
add edi, dword [esp + 0xc]
mov dword [esp + 0x24], ebp
mov dword [esp], eax
jmp 0x409aa9
inc ecx
cmp ecx, eax
je 0x409b50
mov edx, dword [esp + ecx*4 + 0x34]
test edx, edx
jle 0x409aa0
mov esi, edx
and esi, 3
je 0x409b00
mov dword [esp + 8], ebx
lea ebx, [ebx*4]
add ebx, ebp
mov eax, edi
xor edi, edi
nop
nop
nop
nop
nop
nop
nop
movzx ebp, word [ebx]
mov byte [ebp + eax + 0x8f12], cl
inc edi
add ebx, 0xfffffffc
cmp esi, edi
jne 0x409ad0
mov ebx, dword [esp + 8]
sub ebx, edi
mov esi, edx
sub esi, edi
mov edi, eax
mov ebp, dword [esp + 0x24]
mov eax, dword [esp]
cmp edx, 4
jb 0x409aa0
jmp 0x409b07
mov esi, edx
cmp edx, 4
jb 0x409aa0
dec esi
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, word [ebp + ebx*4]
mov byte [edx + edi + 0x8f12], cl
movzx edx, word [ebp + ebx*4 - 4]
mov byte [edx + edi + 0x8f12], cl
movzx edx, word [ebp + ebx*4 - 8]
mov byte [edx + edi + 0x8f12], cl
movzx edx, word [ebp + ebx*4 - 0xc]
add ebx, 0xfffffffc
mov byte [edx + edi + 0x8f12], cl
add esi, 0xfffffffc
cmp esi, 0xfffffffe
jb 0x409b10
jmp 0x409aa0
mov ecx, dword [esp + 0x15cc]
mov dword [esp + 0x93c], 0
mov eax, dword [esp + 0x15d0]
cmp eax, 2
jl 0x409bcd
lea ecx, [eax - 1]
cmp eax, 2
jne 0x409b7f
xor eax, eax
mov edx, 2
jmp 0x409bb4
mov ebx, ecx
and ebx, 0xfffffffe
xor eax, eax
xor edx, edx
nop
nop
nop
nop
nop
nop
nop
nop
add eax, dword [esp + edx*4 + 0x38]
add eax, eax
mov dword [esp + edx*4 + 0x940], eax
add eax, dword [esp + edx*4 + 0x3c]
add eax, eax
mov dword [esp + edx*4 + 0x944], eax
add edx, 2
cmp ebx, edx
jne 0x409b90
add edx, 2
test cl, 1
mov ecx, dword [esp + 0x15cc]
je 0x409bcd
add eax, dword [esp + edx*4 + 0x30]
add eax, eax
mov dword [esp + edx*4 + 0x938], eax
test ecx, ecx
jle 0x409cb2
xor eax, eax
mov edx, dword [esp + 0x1c]
lea edi, [edx + edx*8]
mov edx, edi
shl edx, 5
mov esi, dword [esp + 0xc]
add edx, esi
shl edi, 6
add edi, esi
mov dword [esp], edi
jmp 0x409c1b
mov ecx, dword [esp]
mov word [ecx + eax*2 + 0x8852], di
mov ecx, dword [esp + 0x15cc]
inc eax
cmp eax, ecx
je 0x409cb2
movzx ebx, byte [eax + edx + 0x8f12]
test ebx, ebx
je 0x409c12
mov ecx, dword [esp + ebx*4 + 0x938]
mov edi, ecx
and edi, 1
mov ebp, ecx
xor ebp, 1
lea edi, [edi*2]
add edi, ebp
mov dword [esp + ebx*4 + 0x938], edi
xor edi, edi
cmp bl, 4
jb 0x409c8f
mov ebp, ebx
and ebp, 0xfffffffc
xor edi, edi
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov esi, ecx
and esi, 1
shl esi, 2
lea esi, [esi + edi*8]
mov edi, ecx
and edi, 2
or edi, esi
mov esi, ecx
shr esi, 2
and esi, 1
or esi, edi
mov edi, ecx
shr edi, 3
and edi, 1
lea edi, [edi + esi*2]
shr ecx, 4
add ebp, 0xfffffffc
jne 0x409c60
and ebx, 3
je 0x409c00
nop
nop
nop
nop
nop
nop
nop
nop
mov esi, ecx
and esi, 1
lea edi, [esi + edi*2]
shr ecx, 1
dec ebx
jne 0x409ca0
jmp 0x409c00
add esp, 0x15b8
pop esi
pop edi
pop ebx
pop ebp
ret
mov ecx, dword [esp + 0x15d0]
dec dword [esp + ecx*4 + 0x34]
nop
nop
nop
nop
nop
nop
nop
nop
cmp ecx, 2
jl 0x409cf2
mov esi, dword [esp + ecx*4 + 0x30]
dec ecx
test esi, esi
je 0x409cd0
mov edi, esi
not edi
lea esi, [edi + esi*2]
mov edi, dword [esp + 0x18]
mov dword [esp + ecx*4 + 0x34], esi
add dword [esp + ecx*4 + 0x38], 2
dec eax
cmp eax, edx
jne 0x409cbd
jmp 0x409a27