Function at 0x406c70
Capabilities:
Encode data using xor

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x108
mov esi, dword [esp + 0x11c]
lea eax, [esi + 0x8f12]
push 0x90
push 8
push eax
call fcn.004086a0
add esp, 0xc
lea eax, [esi + 0x8fa2]
push 0x70
push 9
push eax
call fcn.004086a0
add esp, 0xc
mov dword [esi + 0x9012], 0x7070707
mov dword [esi + 0x9016], 0x7070707
mov dword [esi + 0x901a], 0x7070707
mov dword [esi + 0x901e], 0x7070707
mov dword [esi + 0x9022], 0x7070707
mov dword [esi + 0x9026], 0x7070707
mov dword [esi + 0x902e], 0x8080808
mov dword [esi + 0x902a], 0x8080808
mov dword [esi + 0x9032], 0x5050505
mov dword [esi + 0x9036], 0x5050505
mov dword [esi + 0x903a], 0x5050505
mov dword [esi + 0x903e], 0x5050505
mov dword [esi + 0x9042], 0x5050505
mov dword [esi + 0x9046], 0x5050505
mov dword [esi + 0x904a], 0x5050505
mov dword [esi + 0x904e], 0x5050505
mov eax, esp
push 0x84
push 0
push eax
call fcn.004086a0
add esp, 0xc
xor eax, eax
nop
nop
movzx ecx, byte [esi + eax + 0x8f12]
inc dword [esp + ecx*4]
movzx ecx, byte [esi + eax + 0x8f13]
inc dword [esp + ecx*4]
movzx ecx, byte [esi + eax + 0x8f14]
inc dword [esp + ecx*4]
movzx ecx, byte [esi + eax + 0x8f15]
inc dword [esp + ecx*4]
add eax, 4
cmp eax, 0x120
jne 0x406d60
mov dword [esp + 0x88], 0
xor ecx, ecx
mov eax, 2
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, dword [esp + eax*4 - 4]
mov ebx, edx
and ebx, ecx
xor edx, ecx
add edx, edx
lea ecx, [edx + ebx*4]
mov dword [esp + eax*4 + 0x84], ecx
mov edx, eax
xor edx, 1
and eax, 1
lea eax, [edx + eax*2]
mov ebx, dword [esp + eax*4 - 4]
mov ebp, ebx
and ebp, ecx
xor ebx, ecx
add ebx, ebx
lea ecx, [ebx + ebp*4]
mov dword [esp + eax*4 + 0x84], ecx
xor eax, 1
and edx, 1
lea eax, [eax + edx*2]
cmp eax, 0x10
jl 0x406db0
xor eax, eax
jmp 0x406e14
mov word [esi + eax*2 + 0x8852], bx
inc eax
cmp eax, 0x120
je 0x406e92
movzx ecx, byte [esi + eax + 0x8f12]
test ecx, ecx
je 0x406e08
mov edi, dword [esp + ecx*4 + 0x84]
lea ebx, [edi + 1]
mov dword [esp + ecx*4 + 0x84], ebx
xor ebx, ebx
cmp cl, 4
jb 0x406e6f
mov ebp, ecx
and ebp, 0xfffffffc
xor ebx, ebx
nop
mov edx, edi
and edx, 1
shl edx, 2
lea edx, [edx + ebx*8]
mov ebx, edi
and ebx, 2
or ebx, edx
mov edx, edi
shr edx, 2
and edx, 1
or edx, ebx
mov ebx, edi
shr ebx, 3
and ebx, 1
lea ebx, [ebx + edx*2]
shr edi, 4
add ebp, 0xfffffffc
jne 0x406e40
and ecx, 3
je 0x406e00
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, edi
and edx, 1
lea ebx, [edx + ebx*2]
shr edi, 1
dec ecx
jne 0x406e80
jmp 0x406e00
push 0x84
push 0
lea eax, [esp + 8]
push eax
call fcn.004086a0
add esp, 0xc
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
movzx ecx, byte [esi + eax + 0x9032]
inc dword [esp + ecx*4]
movzx ecx, byte [esi + eax + 0x9033]
inc dword [esp + ecx*4]
movzx ecx, byte [esi + eax + 0x9034]
inc dword [esp + ecx*4]
movzx ecx, byte [esi + eax + 0x9035]
inc dword [esp + ecx*4]
add eax, 4
cmp eax, 0x20
jne 0x406eb0
mov dword [esp + 0x88], 0
xor ecx, ecx
mov eax, 2
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, dword [esp + eax*4 - 4]
mov edi, edx
and edi, ecx
xor edx, ecx
add edx, edx
lea ecx, [edx + edi*4]
mov dword [esp + eax*4 + 0x84], ecx
mov edx, eax
xor edx, 1
and eax, 1
lea eax, [edx + eax*2]
mov edi, dword [esp + eax*4 - 4]
mov ebx, edi
and ebx, ecx
xor edi, ecx
add edi, edi
lea ecx, [edi + ebx*4]
mov dword [esp + eax*4 + 0x84], ecx
xor eax, 1
and edx, 1
lea eax, [eax + edx*2]
cmp eax, 0x10
jl 0x406f00
xor eax, eax
jmp 0x406f62
mov word [esi + eax*2 + 0x8a92], di
inc eax
cmp eax, 0x20
je 0x406fe2
movzx ecx, byte [esi + eax + 0x9032]
test ecx, ecx
je 0x406f58
mov edx, dword [esp + ecx*4 + 0x84]
lea edi, [edx + 1]
mov dword [esp + ecx*4 + 0x84], edi
xor edi, edi
cmp cl, 4
jb 0x406fcb
mov ebx, ecx
and ebx, 0xfffffffc
xor edi, edi
nop
nop
nop
mov ebp, edx
and ebp, 1
shl ebp, 2
lea edi, [edi*8]
add edi, ebp
mov ebp, edx
and ebp, 2
or ebp, edi
mov edi, edx
shr edi, 2
and edi, 1
or edi, ebp
mov ebp, edx
shr ebp, 3
and ebp, 1
lea edi, [edi*2]
add edi, ebp
shr edx, 4
add ebx, 0xfffffffc
jne 0x406f90
and ecx, 3
je 0x406f50
mov ebx, edx
and ebx, 1
lea edi, [ebx + edi*2]
shr edx, 1
dec ecx
jne 0x406fd0
jmp 0x406f50
mov ecx, dword [esi + 0x44]
mov eax, dword [esi + 0x48]
bts eax, ecx
mov dword [esi + 0x48], eax
add ecx, 2
mov dword [esi + 0x44], ecx
cmp ecx, 8
jae 0x407021
add esp, 0x108
pop esi
pop edi
pop ebx
pop ebp
ret
shr eax, 8
mov dword [esi + 0x48], eax
add ecx, 0xfffffff8
mov dword [esi + 0x44], ecx
cmp ecx, 7
jbe 0x406ff9
mov edx, dword [esi + 0x30]
cmp edx, dword [esi + 0x34]
jae 0x407010
lea ecx, [edx + 1]
mov dword [esi + 0x30], ecx
mov byte [edx], al
mov ecx, dword [esi + 0x44]
mov eax, dword [esi + 0x48]
jmp 0x407010