Function at 0x428b50
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push esi
mov esi, ecx
mov ebx, edx
mov eax, dword [esi]
mov dword [ebp - 0xc], esi
cmp dword [eax - 0xc], 0
jne 0x428c75
mov edx, dword [0x55e860]
lea ecx, [edx + 2]
lea eax, [edx + 1]
imul ecx, eax
imul ecx, edx
and ecx, 0x8000000f
jns 0x428b8a
dec ecx
or ecx, 0xfffffff0
inc ecx
cmp ecx, 0xf
jne 0x428c18
xor esi, esi
mov ecx, esi
and ecx, 1
dec ecx
not ecx
and ecx, edx
mov eax, esi
sar eax, 1
xor ecx, eax
mov eax, ecx
and eax, 1
dec eax
not eax
and eax, edx
sar ecx, 1
xor eax, ecx
mov ecx, eax
and ecx, 1
dec ecx
sar eax, 1
not ecx
and ecx, edx
xor ecx, eax
mov eax, ecx
and eax, 1
dec eax
not eax
and eax, edx
sar ecx, 1
xor eax, ecx
mov ecx, eax
and ecx, 1
dec ecx
sar eax, 1
not ecx
and ecx, edx
xor ecx, eax
mov eax, ecx
and eax, 1
dec eax
not eax
and eax, edx
sar ecx, 1
xor eax, ecx
mov ecx, eax
and ecx, 1
dec ecx
sar eax, 1
not ecx
and ecx, edx
xor ecx, eax
mov eax, ecx
and eax, 1
dec eax
not eax
and eax, edx
sar ecx, 1
xor eax, ecx
inc esi
add edx, eax
cmp esi, 0x100
jl 0x428b95
mov dword [0x55e860], edx
mov eax, dword [ebx]
cmp dword [eax - 0xc], 0
mov esi, dword [eax - 0x10]
lea edx, [eax - 0x10]
je 0x428c6d
cmp dword [edx + 0xc], 0
lea ecx, [edx + 0xc]
jge 0x428c4d
cmp dword [eax - 8], 0
jl 0x428dd0
mov dword [eax - 0xc], 0
mov eax, dword [ebx]
pop esi
mov byte [eax], 0
mov al, 1
pop ebx
mov esp, ebp
pop ebp
ret
or eax, 0xffffffff
lock xadd dword [ecx], eax
dec eax
test eax, eax
jg 0x428c61
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebx], eax
pop esi
mov al, 1
pop ebx
mov esp, ebp
pop ebp
ret
mov byte [ebp - 1], 0
call fcn.00426e50
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push dword [esi]
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov dword [ebp - 8], eax
test eax, eax
jne 0x428cb0
push dword [esi]
mov ecx, ebx
call fcn.0041c7f0
mov al, byte [ebp - 1]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push edi
push eax
call fcn.004aeef0
push dword [ebp - 8]
mov edi, eax
push 0
push edi
call fcn.004b4d70
mov ecx, dword [esi]
add esp, 0x10
push 0
push 0
push dword [ebp - 8]
push edi
push dword [ecx - 0xc]
push ecx
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov ecx, dword [0x55e860]
mov dword [ebp - 0x10], eax
mov eax, ecx
imul eax, ecx
cdq
mov dword [ebp - 8], 0xf
idiv dword [ebp - 8]
cmp edx, 0xe
jne 0x428d59
lea esi, [ecx + 1]
mov eax, esi
imul eax, ecx
cdq
mov dword [ebp - 8], 0x18
idiv dword [ebp - 8]
cmp edx, 0x16
je 0x428d38
lea eax, [ecx + 2]
imul eax, esi
imul eax, ecx
cdq
mov ecx, 0xc
idiv ecx
cmp edx, 9
jne 0x428d38
call fcn.004b0a92
mov dword [0x55e860], eax
push 4
call fcn.004b0975
mov esi, eax
call fcn.004b0a92
push esi
mov dword [esi], eax
mov dword [0x55e860], eax
call fcn.004b009b
mov esi, dword [ebp - 0xc]
add esp, 8
cmp dword [ebp - 0x10], 0
jne 0x428d6a
push dword [esi]
mov ecx, ebx
call fcn.0041c7f0
jmp 0x428db9
test edi, edi
jne 0x428d72
xor ecx, ecx
jmp 0x428d80
mov ecx, edi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x428d77
sub ecx, edx
push ecx
push edi
mov ecx, ebx
call fcn.00429260
mov ecx, dword [0x55e860]
mov byte [ebp - 1], 1
lea edx, [ecx + 2]
lea eax, [ecx + 1]
imul edx, eax
imul edx, ecx
and edx, 0x8000000f
jns 0x428dac
dec edx
or edx, 0xfffffff0
inc edx
cmp edx, 0xb
jne 0x428db9
push 0
call dword [sym.imp.KERNEL32.dll_GetFileType]
test edi, edi
je 0x428dc6
push edi
call fcn.004b08fb
add esp, 4
mov al, byte [ebp - 1]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0x80070057
call fcn.00401840
int3