Function at 0x401000
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x1bcc
lea eax, [esp + 0x1c]
push ebx
push esi
push edi
push 0x100
push 0
push eax
call fcn.004034a0
add esp, 0xc
xor edi, edi
xor eax, eax
jmp 0x401030
mov byte [esp + eax + 0x28], al
inc eax
cmp eax, 0x100
jb 0x401030
xor esi, esi
mov edi, edi
mov dl, byte [esp + esi + 0x28]
mov eax, esi
and eax, 3
movzx ecx, dl
movzx eax, byte [eax + 0x41b1e8]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [esp + edi + 0x28]
mov byte [esp + esi + 0x28], al
inc esi
mov byte [esp + edi + 0x28], dl
cmp esi, 0x100
jb 0x401040
mov cl, byte [esp + 0x29]
movzx esi, cl
push 0x100
movzx eax, byte [esp + esi + 0x2c]
mov byte [esp + 0x2d], al
mov byte [esp + esi + 0x2c], cl
movzx eax, byte [esp + 0x2d]
mov cl, byte [esp + 0x2e]
add eax, esi
movzx eax, al
movzx edx, cl
mov al, byte [esp + eax + 0x2c]
xor al, 0xb4
mov byte [esp + 0x12], al
lea eax, [edx + esi]
movzx esi, al
movzx eax, byte [esp + esi + 0x2c]
mov byte [esp + 0x2e], al
mov byte [esp + esi + 0x2c], cl
movzx eax, byte [esp + 0x2e]
mov cl, byte [esp + 0x2f]
add eax, edx
movzx eax, al
mov al, byte [esp + eax + 0x2c]
xor al, 0xc0
mov byte [esp + 0x13], al
movzx eax, cl
add eax, esi
movzx eax, al
mov byte [esp + eax + 0x2c], cl
xor eax, eax
push eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x30]
push eax
call fcn.004034a0
add esp, 0xc
xor edi, edi
xor eax, eax
mov byte [esp + eax + 0x28], al
inc eax
cmp eax, 0x100
jb 0x401102
xor esi, esi
mov dl, byte [esp + esi + 0x28]
mov eax, esi
and eax, 3
movzx ecx, dl
movzx eax, byte [eax + 0x41b1d0]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [esp + edi + 0x28]
mov byte [esp + esi + 0x28], al
inc esi
mov byte [esp + edi + 0x28], dl
cmp esi, 0x100
jb 0x401110
xor edi, edi
xor ebx, ebx
xor esi, esi
lea eax, [edi + 1]
movzx edi, al
mov cl, byte [esp + edi + 0x28]
movzx edx, cl
lea eax, [edx + ebx]
movzx ebx, al
movzx eax, byte [esp + ebx + 0x28]
mov byte [esp + edi + 0x28], al
mov byte [esp + ebx + 0x28], cl
movzx eax, byte [esp + edi + 0x28]
add eax, edx
movzx eax, al
movzx eax, byte [esp + eax + 0x28]
xor al, byte [esi + str.cD]
mov byte [esp + esi + 0x14], al
inc esi
cmp esi, 0x14
jb 0x401145
push 0x1b28
lea eax, [esp + 0x2c]
push 0
push eax
call fcn.004034a0
push 0x78
lea eax, [esp + 0x1b64]
push 0
push eax
call fcn.004034a0
xor esi, esi
add esp, 0x18
mov dword [esp + 0x1bd4], esi
cmp dword [0x7f2350], esi
jne 0x4013b6
xor edx, edx
lea ecx, [esp + 0x14]
call fcn.00404200
mov edi, eax
mov dword [esp + 0x1ab0], edi
test edi, edi
je 0x4013b6
mov ecx, dword [edi + 0x18]
mov dword [esp + 0x1ab4], ecx
test ecx, ecx
je 0x4013b6
mov eax, dword [ecx + 0x3c]
add eax, ecx
mov dword [esp + 0x1aec], eax
je 0x4013b6
add eax, 0x78
mov dword [esp + 0x1b44], eax
je 0x4013b6
mov edx, dword [eax]
mov dword [esp + 0x10], edx
mov dword [esp + 0x1b48], edx
test edx, edx
je 0x4013b6
cmp dword [eax + 4], esi
je 0x4013b6
lea ebx, [ecx + edx]
mov dword [esp + 0x1a84], ebx
test ebx, ebx
je 0x4013b6
mov eax, dword [ebx + 0x1c]
mov edx, dword [ebx + 0x18]
add eax, ecx
mov ebx, dword [ebx + 0x20]
mov dword [esp + 0x1b50], eax
add ebx, ecx
mov eax, dword [esp + 0x10]
mov dword [esp + 0x1b4c], edx
mov dword [esp + 0x1bcc], ebx
mov eax, dword [ecx + eax + 0x24]
add eax, ecx
mov dword [esp + 0x1bd0], eax
mov ecx, dword [ebx + edx*4 - 4]
add ecx, dword [edi + 0x18]
je 0x40130f
mov al, byte [esp + 0xe]
cmp byte [ecx], al
jne 0x40130f
mov al, byte [esp + 0xf]
cmp byte [ecx + 1], al
jne 0x40130f
add ecx, 2
mov edx, 0x777eda1e
cmp byte [ecx], 0
je 0x4012b7
movzx eax, word [ecx]
lea ecx, [ecx + 1]
imul edx, edx, 0x1003f
add edx, eax
cmp byte [ecx], 0
jne 0x4012a4
mov dword [esp + esi*8 + 0x2c], edx
mov eax, dword [esp + 0x1b4c]
mov ecx, dword [esp + 0x1bd0]
movzx ecx, word [ecx + eax*2 - 2]
mov eax, dword [esp + 0x1b50]
mov ecx, dword [eax + ecx*4]
mov eax, dword [esp + 0x1bd4]
mov dword [esp + eax*8 + 0x30], ecx
mov esi, dword [esp + 0x1bd4]
inc esi
mov dword [esp + 0x1bd4], esi
cmp esi, 0x34b
je 0x40131f
mov ebx, dword [esp + 0x1bcc]
mov edx, dword [esp + 0x1b4c]
mov edi, dword [esp + 0x1ab0]
sub edx, 1
mov dword [esp + 0x1b4c], edx
jne 0x401271
xor edx, edx
mov dword [esp + 0x28], esi
lea eax, [esi - 1]
mov dword [esp + 0x10], edx
test eax, eax
je 0x401382
mov ecx, esi
xor eax, eax
sub ecx, edx
sub ecx, 1
je 0x401376
jmp 0x401340
mov edi, dword [esp + eax*8 + 0x38]
mov ebx, dword [esp + eax*8 + 0x30]
cmp ebx, edi
jbe 0x40136c
mov edx, dword [esp + eax*8 + 0x2c]
mov ecx, dword [esp + eax*8 + 0x34]
mov dword [esp + eax*8 + 0x34], edx
mov edx, dword [esp + 0x10]
mov dword [esp + eax*8 + 0x2c], ecx
mov dword [esp + eax*8 + 0x30], edi
mov dword [esp + eax*8 + 0x38], ebx
mov esi, dword [esp + 0x28]
mov ecx, esi
inc eax
sub ecx, edx
dec ecx
cmp eax, ecx
jb 0x401340
inc edx
lea eax, [esi - 1]
mov dword [esp + 0x10], edx
cmp edx, eax
jb 0x401330
xor ecx, ecx
mov dword [0x7f2350], esi
test esi, esi
je 0x4013b6
mov edi, edi
mov eax, dword [esp + ecx*8 + 0x2c]
mov dword [ecx*4 + 0x7f2354], eax
inc ecx
cmp ecx, esi
jb 0x401390
mov esi, dword [0x7f2350]
test esi, esi
je 0x4013b6
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret