Function at 0x40a070
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x110
cmp dword [ecx + 0x20], 0
je 0x40a0c1
mov esi, ecx
movzx eax, byte [ecx]
mov byte [esp + 0xf], 0
test eax, eax
je 0x40a0c8
cmp al, 0x64
jb 0x40a0d7
lea ecx, [eax + eax*4]
lea ecx, [eax + ecx*8]
movzx edx, cx
shr edx, 0xc
imul ecx, edx, 0x64
sub al, cl
movzx eax, al
movzx eax, word [eax + eax + 0x43f438]
mov word [esp + 0xd], ax
mov ecx, 1
mov eax, edx
jmp 0x40a0e0
mov bl, 1
jmp 0x40a724
lea eax, [esp + 0xe]
mov dword [esp + 0x3c], eax
mov byte [esp + 0xe], 0x30
jmp 0x40a10c
mov ecx, 3
cmp al, 9
ja 0x40a0f7
movzx eax, byte [eax + 0x440550]
lea edx, [esp + ecx]
add edx, 0xb
mov dword [esp + 0x3c], edx
mov byte [esp + ecx + 0xb], al
jmp 0x40a10c
movzx eax, word [eax + eax + 0x43f438]
lea ecx, [esp + 0xd]
mov dword [esp + 0x3c], ecx
mov word [esp + 0xd], ax
lea eax, [esi + 0x10]
push eax
call fcn.004070c0
add esp, 4
mov edi, dword [esi + 0x10]
mov eax, dword [esi + 0x58]
mov eax, dword [eax + 0x48]
mov dword [esp + 0xe0], eax
lea ebx, [esp + 0xeb]
push ebx
call fcn.00435620
add esp, 4
mov dword [esp + 0xe4], edi
lea eax, [edi + 0x800]
push eax
call fcn.00437310
add esp, 4
mov edi, eax
mov dword [esp + 0x44], 0
mov dword [esp + 0x50], 0
mov dword [esp + 0x4c], 0
mov dword [esp + 0x48], 0
mov dword [esp + 0x40], 0xd7cbc6c8
mov byte [esp + 0x44], 0xb4
mov dword [esp + 0x10], 0
mov eax, dword [esp + 0x10]
cmp eax, 0x13
ja 0x40a1b5
nop
nop
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x10]
add al, 0x38
xor al, byte [esp + ecx + 0x40]
add al, 0x78
mov ecx, dword [esp + 0x10]
mov byte [esp + ecx + 0x40], al
inc dword [esp + 0x10]
mov eax, dword [esp + 0x10]
cmp eax, 0x14
jb 0x40a190
lea eax, [esp + 0x40]
mov ecx, esi
push ebx
mov ebx, eax
push eax
push edi
call fcn.004098e0
mov dword [esp + 0x50], 0
mov dword [esp + 0x4c], 0
mov dword [esp + 0x48], 0
mov dword [esp + 0x44], 0
mov dword [esp + 0x40], 0x6388f2f6
mov dword [esp + 0x10], 0
mov eax, dword [esp + 0x10]
cmp eax, 0x13
ja 0x40a238
nop
nop
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x10]
movzx edx, byte [esp + eax + 0x40]
lea eax, [ecx + edx]
add eax, 0xb18a231
add ecx, 0xb18a231
and ecx, edx
add ecx, ecx
sub eax, ecx
add al, 0xa9
mov ecx, dword [esp + 0x10]
mov byte [esp + ecx + 0x40], al
inc dword [esp + 0x10]
mov eax, dword [esp + 0x10]
cmp eax, 0x14
jb 0x40a200
mov ecx, esi
push dword [esp + 0x3c]
push ebx
push edi
call fcn.004098e0
mov eax, dword [0x441430]
mov dword [esp + 0x53], 0
mov dword [esp + 0x50], 0
mov dword [esp + 0x4c], 0
mov dword [esp + 0x48], 0
mov dword [esp + 0x44], 0
mov dword [esp + 0x40], 0x3b5c525a
mov dword [esp + 0x10], 0
mov ecx, dword [esp + 0x10]
cmp ecx, 0x16
ja 0x40a2d2
nop
nop
nop
nop
nop
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0x10]
movzx ecx, byte [esp + ecx + 0x40]
mov ebx, edx
and ebx, 0xd4d86427
xor edx, 0xd4d86427
lea edx, [edx + ebx*2]
mov ebx, edx
and ebx, ecx
not edx
or edx, ecx
add edx, ebx
sub ecx, edx
add cl, 0xee
mov edx, dword [esp + 0x10]
mov byte [esp + edx + 0x40], cl
inc dword [esp + 0x10]
mov ecx, dword [esp + 0x10]
cmp ecx, 0x17
jb 0x40a290
mov ecx, esi
push eax
lea ebx, [esp + 0x44]
push ebx
push edi
call fcn.004098e0
mov dword [esp + 0x40], 0xa7b8a0b3
mov dword [esp + 0x44], 0xa8bbbcab
mov dword [esp + 0x48], 0xbeb9b4ab
mov byte [esp + 0x4c], 0x50
mov dword [esp + 0x4d], 0
mov byte [esp + 0x51], 0
mov dword [esp + 0x10], 0
mov eax, dword [esp + 0x10]
cmp eax, 0x11
ja 0x40a353
nop
nop
nop
nop
nop
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x10]
movzx edx, byte [esp + eax + 0x40]
lea eax, [ecx + edx]
add eax, 0xa
add ecx, 0xa
and ecx, edx
add ecx, ecx
sub eax, ecx
add al, 0xba
mov ecx, dword [esp + 0x10]
mov byte [esp + ecx + 0x40], al
inc dword [esp + 0x10]
mov eax, dword [esp + 0x10]
cmp eax, 0x12
jb 0x40a320
mov dword [esp + 0x28], 0
mov dword [esp + 0x24], 0
mov dword [esp + 0x20], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0x8316eaed
mov dword [esp + 8], 0
mov eax, dword [esp + 8]
cmp eax, 0x1b
ja 0x40a3dd
nop
nop
nop
nop
mov ecx, dword [esp + 8]
mov eax, dword [esp + 8]
movzx edx, byte [esp + eax + 0x10]
lea eax, [ecx - 0x245fa4ea]
add ecx, 0x16
and ecx, edx
or eax, edx
sub eax, ecx
mov ecx, eax
or ecx, 0x65
and eax, 0x65
add eax, ecx
inc al
mov ecx, dword [esp + 8]
mov byte [esp + ecx + 0x10], al
inc dword [esp + 8]
mov eax, dword [esp + 8]
cmp eax, 0x1c
jb 0x40a3a0
lea eax, [esp + 0x10]
mov ecx, esi
push ebx
push eax
push edi
call fcn.004098e0
mov dword [esp + 0x44], 0
mov dword [esp + 0x53], 0
mov dword [esp + 0x50], 0
mov dword [esp + 0x4c], 0
mov dword [esp + 0x48], 0
mov dword [esp + 0x40], 0xc63ec4c6
mov byte [esp + 0x44], 0xa8
mov dword [esp + 0x10], 0
mov eax, dword [esp + 0x10]
cmp eax, 0x16
ja 0x40a487
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x10]
movzx edx, byte [esp + eax + 0x40]
lea eax, [ecx + edx]
add eax, 0x59b530ba
add ecx, 0x59b530ba
and ecx, edx
add ecx, ecx
sub eax, ecx
add al, 0xea
mov ecx, dword [esp + 0x10]
mov byte [esp + ecx + 0x40], al
mov eax, dword [esp + 0x10]
mov ecx, eax
and ecx, 1
xor eax, 1
lea eax, [eax + ecx*2]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x10]
cmp eax, 0x17
jb 0x40a440
mov ecx, esi
push dword [esp + 0xe4]
push dword [esp + 0xe4]
push ebx
push edi
call fcn.00409bb0
mov eax, dword [esi + 0x60]
mov dword [esp + 0x40], 0x5bed599b
mov dword [esp + 0x44], 0x57da55e2
mov dword [esp + 0x48], 0x53e451ed
mov dword [esp + 0x4c], 0x2fdb2da0
mov dword [esp + 0x50], 0x2ba32984
mov dword [esp + 0x54], 0x279b2594
mov dword [esp + 0x58], 0x23c221ea
mov dword [esp + 0x5c], 0x3fb33d89
mov dword [esp + 0x60], 0x3bb6398c
mov dword [esp + 0x64], 0x3786358d
mov dword [esp + 0x68], 0x33803191
mov dword [esp + 0x6c], 0xff90d80
mov dword [esp + 0x70], 0xbbd09b6
mov dword [esp + 0x74], 0x7b305b6
mov dword [esp + 0x78], 0x3be01f5
mov dword [esp + 0x7c], 0x1f921dbd
mov dword [esp + 0x80], 0x1bd119b9
mov dword [esp + 0x84], 0x17b415f4
mov dword [esp + 0x88], 0x139f11a7
mov dword [esp + 0x8c], 0xef52ed5a
mov dword [esp + 0x90], 0xeb58e949
mov dword [esp + 0x94], 0xe723e56d
mov dword [esp + 0x98], 0xe35fe142
mov dword [esp + 0x9c], 0xff33fd34
mov dword [esp + 0xa0], 0xfb47f944
mov dword [esp + 0xa4], 0xf74ff539
mov dword [esp + 0xa8], 0xf34ef140
mov dword [esp + 0xac], 0xcf6dcd7b
mov dword [esp + 0xb0], 0xcb77c971
mov dword [esp + 0xb4], 0xc774c576
mov dword [esp + 0xb8], 0xc333c17d
mov dword [esp + 0xbc], 0xdfc4ddc9
mov word [esp + 0xc0], 0xd9d8
mov word [esp + 0xd6], 0
mov dword [esp + 0xd2], 0
mov dword [esp + 0xce], 0
mov dword [esp + 0xca], 0
mov dword [esp + 0xc6], 0
mov dword [esp + 0xc2], 0
mov dword [esp + 0x10], 0
mov ecx, dword [esp + 0x10]
cmp ecx, 0x97
ja 0x40a673
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0x10]
movzx ebx, byte [esp + ecx + 0x40]
lea ecx, [edx + 0x4a644fb4]
add edx, 0xb4
and edx, ebx
or ecx, ebx
sub ecx, edx
mov edx, ecx
or edx, 0x13
and ecx, 0x13
add ecx, edx
inc cl
mov edx, dword [esp + 0x10]
mov byte [esp + edx + 0x40], cl
inc dword [esp + 0x10]
mov ecx, dword [esp + 0x10]
cmp ecx, 0x98
jb 0x40a630
mov dword [esp + 0x10], 0x3393316f
mov dword [esp + 0x14], 0x37af35a4
mov word [esp + 0x18], 0x2928
mov dword [esp + 0x1a], 0
mov dword [esp + 0x1e], 0
mov byte [esp + 0x22], 0
mov dword [esp + 8], 0
mov ecx, dword [esp + 8]
cmp ecx, 0x12
ja 0x40a6ef
mov ecx, dword [esp + 8]
mov edx, dword [esp + 8]
movzx edx, byte [esp + edx + 0x10]
mov ebx, ecx
and ebx, 0xc71f3c08
xor ecx, 0x471f3c08
lea ebx, [ecx + ebx*2]
lea ecx, [ebx + edx]
and ebx, edx
add ebx, ebx
sub ecx, ebx
add cl, 0xc8
mov edx, dword [esp + 8]
mov byte [esp + edx + 0x10], cl
inc dword [esp + 8]
mov ecx, dword [esp + 8]
cmp ecx, 0x13
jb 0x40a6b0
push 0x493e0
push eax
push edi
push 0
push 0
lea eax, [esp + 0x54]
push eax
lea eax, [esp + 0x28]
push eax
call fcn.0040e110
add esp, 0x1c
mov ebx, eax
push edi
call fcn.00408fc0
add esp, 4
mov eax, dword [esi + 0x60]
add dword [esi + 4], eax
mov dword [esi + 0x60], 0
mov eax, ebx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret