Function at 0x41f790
Capabilities:
Encode data using xor

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x468
cmp byte [esp + 0x480], 0
jne 0x41f8cf
mov edi, dword [esp + 0x488]
mov ebp, dword [esp + 0x47c]
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0xfa65f898
mov dword [esp + 0x14], 0xfe2efc5e
mov dword [esp + 0x18], 0xf22ff02d
mov dword [esp + 0x1c], 0xf669f457
mov dword [esp + 0x20], 0xeae9e86b
mov eax, 0xff
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ecx, byte [esp + eax - 0xef]
lea edx, [eax - 0x1b700d00]
mov esi, eax
and esi, ecx
or edx, ecx
xor edx, esi
mov ecx, edx
xor ecx, 0xf8
or edx, 7
and ecx, edx
add ecx, edx
inc cl
mov byte [esp + eax - 0xef], cl
inc eax
cmp eax, 0x113
jne 0x41f800
lea eax, [esp + 0x10]
lea ecx, [esp + 8]
push eax
call fcn.00435a60
push 0xebc73df8
push dword [esp + 0xc]
call fcn.00437540
add esp, 8
mov ecx, esp
push ecx
push 0x43a598
push 1
push 0
push 0x43a5a8
call eax
test eax, eax
js 0x41f8cf
mov eax, dword [esp]
mov ecx, dword [eax]
lea edx, [esp + 4]
push edx
push 0x43a5b8
push eax
call dword [ecx]
test eax, eax
js 0x41f8d6
mov ebx, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp word [ebp + ebx + 2], 0
lea ebx, [ebx + 2]
jne 0x41f890
mov edi, dword [edi + 8]
mov eax, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp word [edi + eax + 2], 0
lea eax, [eax + 2]
jne 0x41f8b0
sar ebx, 1
sar eax, 1
add eax, ebx
add eax, 2
test eax, eax
jns 0x41f8dd
mov eax, 0xffffffff
jmp 0x41f8df
xor ebx, ebx
jmp 0x41fa79
xor ebx, ebx
jmp 0x41fa70
add eax, eax
push eax
call fcn.00408300
add esp, 4
mov esi, eax
movzx ecx, word [edi]
test cx, cx
je 0x41f911
add edi, 2
mov eax, esi
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edi]
add edi, 2
test cx, cx
jne 0x41f900
mov word [eax], 0x5c
add eax, 2
movzx ecx, word [ebp]
test cx, cx
je 0x41f941
lea edx, [ebp + 2]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x41f930
mov word [eax], 0
mov eax, dword [esp + 4]
mov ecx, dword [eax]
push 0
push esi
push eax
call dword [ecx + 0x14]
test eax, eax
js 0x41f9b8
mov eax, dword [esp]
mov ecx, dword [eax]
push 1
push 0
push eax
call dword [ecx + 0x4c]
test eax, eax
js 0x41f9b8
mov eax, dword [esp]
mov ecx, dword [eax]
lea edi, [esp + 0x260]
push 1
lea edx, [esp + 0x14]
push edx
push 0x104
push edi
push eax
call dword [ecx + 0xc]
test eax, eax
js 0x41f9b8
add ebx, 2
mov eax, dword [esp + 0x488]
mov edi, dword [eax + 4]
mov eax, 0xfffffffe
nop
nop
nop
nop
nop
cmp word [edi + eax + 2], 0
lea eax, [eax + 2]
jne 0x41f9a0
sar eax, 1
add ebx, eax
jns 0x41f9bf
mov ebx, 0xffffffff
jmp 0x41f9c1
xor ebx, ebx
jmp 0x41fa5d
add ebx, ebx
push ebx
call fcn.00408300
add esp, 4
mov ebx, eax
movzx ecx, word [edi]
test cx, cx
je 0x41f9f1
add edi, 2
mov eax, ebx
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edi]
add edi, 2
test cx, cx
jne 0x41f9e0
mov word [eax], 0x2f
add eax, 2
movzx ecx, word [ebp]
test cx, cx
je 0x41fa24
add ebp, 2
mov edx, dword [esp + 0x488]
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [ebp]
add ebp, 2
test cx, cx
jne 0x41fa10
jmp 0x41fa2b
mov edx, dword [esp + 0x488]
mov word [eax], 0
mov eax, dword [edx + 0x14]
dec eax
push 1
push eax
push dword [edx + 0x10]
push dword [edx + 0xc]
lea eax, [esp + 0x270]
push eax
push ebx
push dword [edx]
call fcn.0041e9a0
add esp, 0x1c
mov ecx, ebx
mov ebx, eax
push ecx
call fcn.00408310
add esp, 4
mov eax, dword [esp + 4]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push esi
call fcn.00408310
add esp, 4
mov eax, dword [esp]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, ebx
add esp, 0x468
pop esi
pop edi
pop ebx
pop ebp
ret 0x10