Function at 0x406990
Capabilities:
Encode data using xor
Encrypt data using rc4 prga
Hash data using fnv

Disassembly:
sub esp, 0x18
mov edx, dword [esp + 0x1c]
mov eax, 0x1fffffff
push ebx
mov ebx, ecx
bsr ecx, eax
push ebp
push esi
push edi
mov edi, 1
mov dword [esp + 0x20], ebx
mov eax, edi
shl eax, cl
cmp edx, eax
ja 0x406bd1
mov esi, dword [ebx + 4]
lea eax, [edx - 1]
or eax, edi
mov dword [esp + 0x1c], esi
bsr ecx, eax
push esi
lea ecx, [ecx + 1]
shl edi, cl
lea ecx, [ebx + 0xc]
lea eax, [edi + edi]
push eax
call fcn.00406370
lea eax, [edi - 1]
mov dword [ebx + 0x1c], edi
mov dword [ebx + 0x18], eax
mov ecx, dword [ebx + 4]
mov ecx, dword [ecx]
mov edx, ecx
cmp ecx, esi
je 0x406bc7
mov eax, dword [ecx + 0x1c]
lea edi, [ecx + 8]
mov ebx, dword [edi + 0x10]
mov edx, dword [edx]
mov dword [esp + 0x10], ebx
mov dword [esp + 0x2c], edi
mov dword [esp + 0x14], eax
cmp eax, 7
jbe 0x406a15
mov eax, dword [edi]
mov dword [esp + 0x2c], eax
lea eax, [ebx + ebx]
xor edi, edi
mov dword [esp + 0x18], eax
mov ebp, 0x811c9dc5
test eax, eax
je 0x406a53
mov esi, dword [esp + 0x2c]
mov ebx, eax
nop dword [eax]
movzx eax, byte [edi + esi]
inc edi
xor eax, ebp
imul ebp, eax, 0x1000193
cmp edi, ebx
jb 0x406a30
mov ebx, dword [ecx + 0x18]
mov eax, dword [ecx + 0x1c]
mov esi, dword [esp + 0x1c]
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x20]
mov edi, dword [eax + 0x18]
mov eax, dword [eax + 0xc]
and edi, ebp
lea eax, [eax + edi*8]
mov dword [esp + 0x2c], eax
cmp dword [eax], esi
jne 0x406a74
mov dword [eax], ecx
mov dword [eax + 4], ecx
jmp 0x406bbd
mov eax, dword [eax + 4]
cmp dword [eax + 0x1c], 7
lea ebp, [eax + 8]
mov edi, dword [ebp + 0x10]
mov dword [esp + 0x18], edi
jbe 0x406a8a
mov ebp, dword [ebp]
cmp dword [esp + 0x14], 7
lea edi, [ecx + 8]
jbe 0x406a97
mov edi, dword [ecx + 8]
cmp ebx, dword [esp + 0x18]
jne 0x406afb
test ebx, ebx
je 0x406ad1
sub edi, ebp
mov dword [esp + 0x18], edi
nop word [eax + eax]
movzx ebx, word [edi + ebp]
movzx edi, word [ebp]
cmp bx, di
jne 0x406afb
mov ebx, dword [esp + 0x10]
add ebp, 2
mov edi, dword [esp + 0x18]
dec ebx
mov dword [esp + 0x10], ebx
test ebx, ebx
jne 0x406ab0
mov ebp, dword [eax]
cmp ebp, ecx
je 0x406aef
mov ebx, dword [ecx + 4]
mov dword [ebx], edx
mov edi, dword [edx + 4]
mov dword [edi], ebp
mov eax, dword [ebp + 4]
mov dword [eax], ecx
mov dword [ebp + 4], edi
mov dword [edx + 4], ebx
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x2c]
mov dword [eax + 4], ecx
jmp 0x406bbd
mov edi, dword [esp + 0x2c]
cmp dword [edi], eax
je 0x406b9e
mov ebp, dword [ecx + 0x1c]
lea ebx, [ecx + 8]
mov dword [esp + 0x18], ebp
mov ebp, dword [ebx + 0x10]
mov dword [esp + 0x14], ebp
nop dword [eax + eax]
mov eax, dword [eax + 4]
cmp dword [eax + 0x1c], 7
lea edi, [eax + 8]
mov ebp, dword [edi + 0x10]
jbe 0x406b31
mov edi, dword [edi]
cmp dword [esp + 0x18], 7
jbe 0x406b3b
mov ebx, dword [ecx + 8]
cmp dword [esp + 0x14], ebp
jne 0x406b75
mov ebp, dword [esp + 0x14]
mov dword [esp + 0x10], ebp
test ebp, ebp
je 0x406b82
sub ebx, edi
mov dword [esp + 0x24], ebx
movzx ebp, word [edi + ebx]
movzx ebx, word [edi]
cmp bp, bx
jne 0x406b75
mov ebx, dword [esp + 0x10]
add edi, 2
dec ebx
mov dword [esp + 0x10], ebx
test ebx, ebx
je 0x406b82
mov ebx, dword [esp + 0x24]
jmp 0x406b53
mov ebx, dword [esp + 0x2c]
cmp dword [ebx], eax
je 0x406b9e
lea ebx, [ecx + 8]
jmp 0x406b20
mov ebx, dword [ecx + 4]
mov ebp, dword [eax]
mov dword [ebx], edx
mov edi, dword [edx + 4]
mov dword [edi], ebp
mov eax, dword [ebp + 4]
mov dword [eax], ecx
mov dword [ebp + 4], edi
mov dword [edx + 4], ebx
mov dword [ecx + 4], eax
jmp 0x406bbd
mov ebp, dword [ecx + 4]
mov dword [ebp], edx
mov ebx, dword [edx + 4]
mov dword [ebx], eax
mov edi, dword [eax + 4]
mov dword [edi], ecx
mov dword [eax + 4], ebx
mov eax, dword [esp + 0x2c]
mov dword [edx + 4], ebp
mov dword [ecx + 4], edi
mov dword [eax], ecx
mov ecx, edx
cmp edx, esi
jne 0x4069f3
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x18
ret 4
push str.invalid_hash_bucket_count
call fcn.0041113f
int3