Function at 0x441770
Capabilities:
Encode data using xor

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x20
mov eax, dword [esp + 0x38]
test eax, eax
je 0x4417ba
mov ecx, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp word [eax + ecx + 2], 0
lea ecx, [ecx + 2]
jne 0x441790
sar ecx, 1
mov edx, ecx
and edx, 2
mov esi, ecx
or ecx, 2
imul ecx, edx
xor edx, 2
and esi, 0xfffd
imul esi, edx
add ecx, esi
jmp 0x4417bc
xor ecx, ecx
mov word [esp + 0x18], cx
mov edx, eax
test eax, eax
je 0x4417cc
add ecx, 2
mov edx, ecx
mov word [esp + 0x1a], dx
mov dword [esp + 0x1c], eax
mov dword [esp], 0x4c4d4a4b
mov dword [esp + 4], 0
xor eax, eax
xor ecx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
movzx edi, byte [esp + ecx]
mov ebx, eax
and ebx, 4
mov edx, ecx
xor edx, 0xbadbc4f2
add edx, ebx
xor edx, edi
lea edi, [edx + 0x59b52745]
mov ebx, edi
and ebx, 1
and edi, 0xfe
and edx, 1
or edx, edi
lea edx, [edx + ebx*2]
mov byte [esp + ecx], dl
inc ecx
add eax, 2
cmp ecx, 8
jne 0x4417f0
mov ebx, dword [esp]
mov eax, dword [0x44cff0]
test eax, eax
je 0x44187f
xor ecx, ecx
mov edx, dword [0x44cff4]
nop
nop
cmp dword [edx + ecx*8], 0x877f203a
je 0x441850
inc ecx
cmp eax, ecx
jne 0x441840
jmp 0x44187f
mov eax, dword [edx + ecx*8 + 4]
cmp eax, ebx
je 0x44187f
lea ecx, [esp + 0xc]
lea edx, [esp + 0x18]
push ecx
push 0
push 0
push 2
push edx
push dword [esp + 0x48]
push 0x18
push eax
push dword [0x44cff8]
call fcn.0043def0
add esp, 0x24
mov ebx, eax
mov dword [esp], 0x33727193
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, eax
add cl, 0x14
xor cl, byte [esp + eax]
add cl, 0x9c
mov byte [esp + eax], cl
inc eax
cmp eax, 4
jne 0x441890
cmp ebx, dword [esp]
jne 0x441a6f
push dword [esp + 0xc]
call fcn.0043b840
add esp, 4
mov ecx, dword [esp + 0xc]
mov dword [esp + 8], ecx
mov dword [esp + 0x10], 0x898a8b92
mov byte [esp + 0x14], 0
mov edx, 0x35f35b23
mov ebx, 0xca0ca4dd
nop
nop
nop
nop
nop
nop
nop
nop
movzx ebp, byte [esp + edx - 0x35f35b13]
mov ecx, ebp
not ecx
lea edi, [ebp*2]
not edi
add edi, ebp
or edi, ecx
and edi, edx
mov ecx, edx
and ecx, ebp
xor ebp, edx
add ebp, ecx
add ebp, ebx
or edi, ebp
and ebp, 0x50
xor edi, 0x50
lea ecx, [edi + ebp*2]
inc cl
mov byte [esp + edx - 0x35f35b13], cl
inc edx
dec ebx
cmp edx, 0x35f35b28
jne 0x4418e0
mov edx, dword [esp + 0x10]
mov dword [esp], 0x4c4d4a4b
mov dword [esp + 4], 0
xor esi, esi
xor ebp, ebp
nop
nop
nop
nop
nop
nop
movzx ecx, byte [esp + ebp]
mov ebx, esi
and ebx, 4
mov edi, ebp
xor edi, 0xbadbc4f2
add edi, ebx
xor edi, ecx
lea ecx, [edi + 0x59b52745]
mov ebx, ecx
and ebx, 1
and ecx, 0xfe
and edi, 1
or edi, ecx
lea ecx, [edi + ebx*2]
mov byte [esp + ebp], cl
inc ebp
add esi, 2
cmp ebp, 8
jne 0x441940
mov ebx, dword [esp]
mov edi, dword [0x44cff0]
test edi, edi
je 0x4419b0
xor ebp, ebp
mov ecx, dword [0x44cff4]
mov esi, dword [esp + 0x44]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp dword [ecx + ebp*8], 0x877f203a
je 0x4419b6
inc ebp
cmp edi, ebp
jne 0x4419a0
jmp 0x4419ed
mov esi, dword [esp + 0x44]
jmp 0x4419ed
mov ebp, dword [ecx + ebp*8 + 4]
cmp ebp, ebx
je 0x4419ed
lea ecx, [esp + 0xc]
lea esi, [esp + 0x18]
push ecx
push dword [esp + 0xc]
push eax
push edx
push esi
mov esi, dword [esp + 0x58]
push dword [esp + 0x48]
push 0x18
push ebp
push dword [0x44cff8]
mov edi, eax
call fcn.0043def0
add esp, 0x24
mov ebx, eax
mov eax, edi
test ebx, ebx
js 0x441a66
mov edx, dword [esp + 0x3c]
test edx, edx
je 0x4419fe
mov ecx, dword [eax + 4]
mov dword [edx], ecx
test esi, esi
je 0x441a66
cmp dword [esp + 0x40], 0
je 0x441a61
mov edx, dword [esi]
mov ecx, dword [eax + 8]
cmp edx, ecx
jb 0x441a14
mov edx, ecx
lea esi, [eax + 0xc]
mov ecx, edx
shr ecx, 2
mov ebp, dword [esp + 0x40]
mov edi, ebp
xchg esi, esi
rep movsd dword es:[edi], dword [esi]
xchg esi, esi
mov ecx, edx
and ecx, 0xfffffffc
add ebp, ecx
lea esi, [eax + ecx]
add esi, 0xc
mov ecx, edx
shr ecx, 1
and ecx, 1
mov dword [esp + 8], esi
mov edi, ebp
xchg esi, esi
rep movsw word es:[edi], word [esi]
xchg esi, esi
test dl, 1
mov esi, dword [esp + 0x44]
je 0x441a61
and edx, 2
mov ecx, dword [esp + 8]
movzx ecx, byte [ecx + edx]
mov byte [ebp + edx], cl
mov ecx, dword [eax + 8]
mov dword [esi], ecx
push eax
call fcn.0043b890
add esp, 4
mov eax, ebx
add esp, 0x20
pop esi
pop edi
pop ebx
pop ebp
ret