Function at 0x4fa380
Capabilities:
Encode data using xor

Disassembly:
mov eax, 0x18
call fcn.005466e0
push ebp
mov ebp, dword [esp + 0x2c]
xor ecx, ecx
push edi
mov edi, dword [esp + 0x24]
mov eax, dword [edi + 0x174]
mov dword [esp + 0x18], eax
mov eax, ebp
add eax, dword [edi + 0x38]
adc ecx, dword [edi + 0x3c]
cmp ecx, 0xf
ja 0x4fa610
jb 0x4fa3bc
cmp eax, 0xffffffe0
ja 0x4fa610
cmp dword [edi + 0x16c], 0
lea edx, [edi + 0x40]
mov dword [edi + 0x38], eax
lea eax, [edi + 0x60]
mov dword [edi + 0x3c], ecx
mov dword [esp + 0x10], edx
je 0x4fa3ee
push eax
push edx
call fcn.004fb3f0
add esp, 8
mov dword [edi + 0x16c], 0
lea edx, [edi + 0x40]
jmp 0x4fa3f2
mov dword [esp + 0x10], edx
movzx ecx, byte [edi + 0xc]
movzx eax, byte [edi + 0xd]
shl ecx, 8
or ecx, eax
movzx eax, byte [edi + 0xe]
shl ecx, 8
or ecx, eax
movzx eax, byte [edi + 0xf]
push ebx
mov ebx, dword [edi + 0x168]
shl ecx, 8
or ecx, eax
mov dword [esp + 0x20], ebx
mov dword [esp + 0x10], ecx
push esi
mov esi, dword [esp + 0x30]
mov dword [esp + 0x10], esi
test ebx, ebx
je 0x4fa499
mov dword [esp + 0x1c], edx
mov edx, dword [esp + 0x34]
mov dword [esp + 0x38], edx
nop dword [eax]
test ebp, ebp
je 0x4fa47e
mov al, byte [ebx + edi + 0x10]
dec ebp
mov cl, byte [esi]
inc esi
xor al, cl
mov dword [esp + 0x10], esi
mov byte [edx], al
lea eax, [edi + 0x40]
xor byte [eax + ebx], cl
inc edx
inc ebx
mov dword [esp + 0x38], edx
and ebx, 0xf
mov dword [esp + 0x1c], eax
mov dword [esp + 0x24], ebx
jne 0x4fa440
mov edx, eax
lea eax, [edi + 0x60]
push eax
push edx
call fcn.004fb3f0
add esp, 8
jmp 0x4fa4a1
mov edx, dword [esp + 0x1c]
test ebx, ebx
jne 0x4fa600
lea eax, [edi + 0x60]
push eax
push edx
call fcn.004fb3f0
add esp, 8
jmp 0x4fa4a1
mov eax, dword [esp + 0x34]
mov dword [esp + 0x38], eax
cmp ebp, 0xc00
jb 0x4fa531
mov ebx, dword [esp + 0x14]
mov eax, 0xaaaaaaab
mul ebp
shr edx, 0xb
mov dword [esp + 0x1c], edx
nop
push 0xc00
push esi
lea eax, [edi + 0x60]
push eax
push dword [esp + 0x24]
call fcn.004fb1c0
push edi
push dword [esp + 0x34]
push 0xc0
push dword [esp + 0x54]
push esi
call dword [esp + 0x60]
add dword [esp + 0x5c], 0xc00
add ebx, 0xc0
mov eax, ebx
mov byte [edi + 0xf], bl
shr eax, 0x18
add esp, 0x24
mov byte [edi + 0xc], al
add esi, 0xc00
mov eax, ebx
sub ebp, 0xc00
shr eax, 0x10
mov byte [edi + 0xd], al
mov eax, ebx
shr eax, 8
sub dword [esp + 0x1c], 1
mov byte [edi + 0xe], al
jne 0x4fa4c0
mov dword [esp + 0x14], ebx
mov ebx, dword [esp + 0x24]
mov dword [esp + 0x10], esi
mov eax, ebp
and eax, 0xfffffff0
mov dword [esp + 0x24], eax
je 0x4fa59d
push eax
push dword [esp + 0x14]
mov esi, eax
lea eax, [edi + 0x60]
push eax
push dword [esp + 0x24]
shr esi, 4
call fcn.004fb1c0
push edi
push dword [esp + 0x34]
push esi
push dword [esp + 0x54]
push dword [esp + 0x30]
call dword [esp + 0x60]
mov ecx, dword [esp + 0x38]
add esp, 0x24
add ecx, esi
mov esi, dword [esp + 0x10]
mov eax, ecx
mov dword [esp + 0x14], ecx
shr eax, 0x18
mov byte [edi + 0xc], al
mov eax, ecx
shr eax, 0x10
mov byte [edi + 0xd], al
mov eax, ecx
shr eax, 8
mov byte [edi + 0xe], al
mov eax, dword [esp + 0x24]
add esi, eax
add dword [esp + 0x38], eax
sub ebp, eax
mov byte [edi + 0xf], cl
test ebp, ebp
je 0x4fa600
push dword [esp + 0x20]
lea eax, [edi + 0x10]
push eax
mov eax, dword [edi + 0x170]
push edi
call eax
mov ecx, dword [esp + 0x20]
add esp, 0xc
inc ecx
mov eax, ecx
mov byte [edi + 0xf], cl
shr eax, 0x18
mov byte [edi + 0xc], al
mov eax, ecx
shr eax, 0x10
mov byte [edi + 0xd], al
mov eax, ecx
shr eax, 8
mov byte [edi + 0xe], al
mov eax, dword [esp + 0x38]
sub esi, eax
mov edi, dword [esp + 0x18]
lea edx, [ebx + eax]
mov cl, byte [esi + edx]
lea eax, [edi + ebx]
xor byte [eax], cl
lea edx, [edx + 1]
mov al, byte [edi + ebx - 0x30]
inc ebx
xor al, cl
mov byte [edx - 1], al
sub ebp, 1
jne 0x4fa5e2
mov edi, dword [esp + 0x2c]
pop esi
mov dword [edi + 0x168], ebx
xor eax, eax
pop ebx
pop edi
pop ebp
add esp, 0x18
ret
pop edi
or eax, 0xffffffff
pop ebp
add esp, 0x18
ret