Function at 0x409da0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x78
mov eax, dword [ebp + 8]
add eax, dword [ecx + 0x60]
mov word [esp + 0x18], 0x6379
mov byte [esp + 0x1a], pe_nt_image_headers32
mov dword [esp + 0x1b], 0
mov dword [esp + 0x1f], 0
mov byte [esp + 0x23], 0
mov dword [esp + 8], 0
mov edx, dword [esp + 8]
cmp edx, 0xb
ja 0x409e30
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, dword [esp + 8]
mov esi, dword [esp + 8]
movzx esi, byte [esp + esi + 0x18]
mov edi, 0x70
sub edi, edx
add edx, 0xa75ed68f
xor edi, edx
and edi, esi
xor edi, edx
mov dword [esp + 0x28], edi
mov edx, dword [esp + 0x28]
add dl, 0x17
mov esi, dword [esp + 8]
mov byte [esp + esi + 0x18], dl
inc dword [esp + 8]
mov edx, dword [esp + 8]
cmp edx, 0xc
jb 0x409df0
mov dword [esp + 8], 0xbebcb0aa
mov word [esp + 0xc], 0x41be
mov dword [esp + 0x12], 0
mov dword [esp + 0xe], 0
mov dword [esp], 0
mov edx, dword [esp]
cmp edx, 0xd
ja 0x409e9b
nop
nop
mov edx, dword [esp]
mov esi, dword [esp]
movzx esi, byte [esp + esi + 8]
mov edi, 0x49
sub edi, edx
add edx, 0xa9daeb6
xor edi, edx
and edi, esi
xor edi, edx
mov dword [esp + 0x28], edi
mov edx, dword [esp + 0x28]
add dl, 6
mov esi, dword [esp]
mov byte [esp + esi + 8], dl
inc dword [esp]
mov edx, dword [esp]
cmp edx, 0xe
jb 0x409e60
mov dword [esp + 0x28], 0x86804c4d
mov dword [esp + 0x2c], 0x8282b0bc
mov dword [esp + 0x30], 0x8ffa80bd
mov dword [esp + 0x34], 0x8a878e83
mov dword [esp + 0x38], 0xc2f78382
mov dword [esp + 0x3c], 0xf8d51f19
mov dword [esp + 0x40], 0xf5ff8df6
mov dword [esp + 0x44], 0xf6da3088
mov dword [esp + 0x48], 0x90ed9193
mov dword [esp + 0x4c], 0xe8ef91ed
mov dword [esp + 0x50], 0xed2ad3e6
mov dword [esp + 0x54], 0x22e39fe3
mov dword [esp + 0x58], 0xd2a6d0d4
mov dword [esp + 0x5c], 0xd6d815ef
mov dword [esp + 0x60], 0x19e7dcd5
mov byte [esp + 0x64], 0x3c
mov dword [esp + 0x65], 0
mov byte [esp + 0x69], 0
mov dword [esp + 4], 0
mov edx, dword [esp + 4]
cmp edx, 0x41
ja 0x409f7e
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, dword [esp + 4]
mov esi, dword [esp + 4]
movzx esi, byte [esp + esi + 0x28]
mov edi, 0xcf
sub edi, edx
add edx, 0xede3f30
xor edi, edx
and edi, esi
xor edi, edx
mov dword [esp], edi
mov edx, dword [esp]
add dl, 0xb0
mov esi, dword [esp + 4]
mov byte [esp + esi + 0x28], dl
inc dword [esp + 4]
mov edx, dword [esp + 4]
cmp edx, 0x42
jb 0x409f40
mov esi, dword [ebp + 0xc]
movzx ebx, byte [esp + 0x28]
mov edx, eax
test bl, bl
je 0x409fab
lea edi, [esp + 0x29]
mov edx, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edx], bl
inc edx
movzx ebx, byte [edi]
inc edi
test bl, bl
jne 0x409fa0
mov byte [edx], 0
movzx ebx, byte [esi]
test bl, bl
je 0x409fcb
inc esi
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edx], bl
inc edx
movzx ebx, byte [esi]
inc esi
test bl, bl
jne 0x409fc0
mov esi, dword [ebp + 0x10]
mov byte [edx], 0
movzx ebx, byte [esp + 8]
test bl, bl
je 0x409feb
lea edi, [esp + 9]
nop
nop
mov byte [edx], bl
inc edx
movzx ebx, byte [edi]
inc edi
test bl, bl
jne 0x409fe0
mov byte [edx], 0
movzx ebx, byte [esi]
test bl, bl
je 0x40a00b
inc esi
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edx], bl
inc edx
movzx ebx, byte [esi]
inc esi
test bl, bl
jne 0x40a000
mov byte [edx], 0
movzx ebx, byte [esp + 0x18]
test bl, bl
je 0x40a02b
lea esi, [esp + 0x19]
nop
nop
nop
nop
nop
mov byte [edx], bl
inc edx
movzx ebx, byte [esi]
inc esi
test bl, bl
jne 0x40a020
mov byte [edx], 0
sub edx, eax
add dword [ecx + 0x60], edx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret 0xc