Function at 0x442e00
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x518
mov edi, dword [ebp + 8]
mov dword [esp + 0x188], 0x14151a1b
mov dword [esp + 0x18c], 0
mov eax, 0x1675bf86
nop
nop
nop
movzx ecx, byte [esp + eax - 0x1675bdfe]
mov edx, eax
and edx, ecx
add edx, edx
sub ecx, edx
add ecx, eax
mov edx, ecx
xor edx, 0x1e
mov esi, ecx
or esi, 0x61
and esi, edx
xor ecx, 0x61
lea ecx, [ecx + esi*2]
inc cl
mov byte [esp + eax - 0x1675bdfe], cl
inc eax
cmp eax, 0x1675bf8e
jne 0x442e30
mov eax, dword [esp + 0x188]
mov ecx, dword [0x45064c]
test ecx, ecx
je 0x442eba
xor edx, edx
mov esi, dword [0x450650]
nop
nop
cmp dword [esi + edx*8], 0x89c57e52
je 0x442e90
inc edx
cmp ecx, edx
jne 0x442e80
jmp 0x442eba
mov ecx, dword [esi + edx*8 + 4]
cmp ecx, eax
je 0x442eba
lea eax, [esp + 0x10]
push 2
push 0
push 0
push eax
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 7
push dword [0x450654]
push ecx
call fcn.00441b40
add esp, 0x28
test eax, eax
js 0x443176
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x188], 0x14151a1b
mov dword [esp + 0x18c], 0
mov ecx, 0x1675bf86
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [esp + ecx - 0x1675bdfe]
mov eax, ecx
and eax, edx
add eax, eax
sub edx, eax
add edx, ecx
mov eax, edx
xor eax, 0x1e
mov esi, edx
or esi, 0x61
and esi, eax
xor edx, 0x61
lea eax, [edx + esi*2]
inc al
mov byte [esp + ecx - 0x1675bdfe], al
inc ecx
cmp ecx, 0x1675bf8e
jne 0x442ef0
mov esi, dword [esp + 0x188]
mov ecx, dword [0x45064c]
test ecx, ecx
je 0x442f7e
xor eax, eax
mov edx, dword [0x450650]
nop
cmp dword [edx + eax*8], 0xc3cdc4a6
je 0x442f50
inc eax
cmp ecx, eax
jne 0x442f40
jmp 0x442f7e
mov eax, dword [edx + eax*8 + 4]
cmp eax, esi
je 0x442f7e
lea ecx, [esp + 0x188]
push 0
push 0x30
push ecx
push 0
push ebx
push 5
push dword [0x450654]
push eax
call fcn.00441b40
add esp, 0x20
mov esi, eax
mov ebx, dword [esp + 0x10]
mov dword [esp + 0xc], ebx
mov eax, dword [esp + 0x190]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x194]
mov dword [esp + 4], eax
mov dword [esp + 0x68], 0x14151a1b
mov dword [esp + 0x6c], 0
mov ecx, 0x1675bf86
nop
nop
nop
movzx edx, byte [esp + ecx - 0x1675bf1e]
mov eax, ecx
and eax, edx
add eax, eax
sub edx, eax
add edx, ecx
mov eax, edx
xor eax, 0x1e
mov ebx, edx
or ebx, 0x61
and ebx, eax
xor edx, 0x61
lea eax, [edx + ebx*2]
inc al
mov byte [esp + ecx - 0x1675bf1e], al
inc ecx
cmp ecx, 0x1675bf8e
jne 0x442fb0
mov ecx, dword [0x45064c]
test ecx, ecx
je 0x44302d
mov edx, dword [esp + 0x68]
xor eax, eax
mov ebx, dword [0x450650]
nop
nop
nop
nop
cmp dword [ebx + eax*8], 0xb62b8d10
je 0x443010
inc eax
cmp ecx, eax
jne 0x443000
jmp 0x44302d
mov eax, dword [ebx + eax*8 + 4]
cmp eax, edx
je 0x44302d
push dword [esp + 0xc]
push 1
push dword [0x450654]
push eax
call fcn.00441b40
add esp, 0x10
test esi, esi
js 0x443176
lea eax, [esp + 0x188]
push 0x20
push eax
push dword [esp + 0xc]
push dword [esp + 0x14]
call fcn.00442c10
add esp, 0x10
test eax, eax
js 0x443176
lea eax, [esp + 0x10]
push 0x20
push eax
push dword [esp + 0x1ac]
push dword [esp + 0x1ac]
call fcn.00442c10
add esp, 0x10
test eax, eax
js 0x443176
mov ecx, dword [esp + 0x1a0]
mov edx, dword [esp + 0x1a4]
lea eax, [ecx + ecx]
and eax, 0x20
xor ecx, 0x10
add ecx, eax
mov dword [esp + 8], ecx
adc edx, 0
mov dword [esp + 4], edx
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x68], eax
jmp 0x4430ee
cmp cx, dx
je 0x443182
push esi
call fcn.0043e820
add esp, 4
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x6c]
mov edx, ecx
xor edx, dword [esp + 4]
mov esi, eax
xor esi, dword [esp + 8]
or esi, edx
je 0x443176
push 0x68
lea edx, [esp + 0x6c]
push edx
push ecx
push eax
call fcn.00442c10
add esp, 0x10
test eax, eax
js 0x443176
movzx eax, word [esp + 0xc2]
push eax
call fcn.0043e7c0
add esp, 4
mov esi, eax
movzx eax, word [esp + 0xc2]
push eax
push esi
push dword [esp + 0xd4]
push dword [esp + 0xd4]
call fcn.00442c10
add esp, 0x10
test eax, eax
js 0x4430c9
xor eax, eax
nop
nop
nop
nop
movzx ecx, word [edi + eax]
lea edx, [ecx - 0x41]
cmp dx, 0x1a
jae 0x443150
or ecx, 0x20
movzx edx, word [esi + eax]
lea ebx, [edx - 0x41]
cmp bx, 0x1a
jae 0x443160
or edx, 0x20
test cx, cx
je 0x4430c0
add eax, 2
cmp cx, dx
je 0x443140
jmp 0x4430c0
xor eax, eax
xor edx, edx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov edi, dword [esp + 0x98]
mov ebx, dword [esp + 0x9c]
push esi
call fcn.0043e820
mov edx, ebx
mov eax, edi
add esp, 4
jmp 0x44317a