Function at 0x408990
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x54
mov edi, dword [esp + 0x78]
push 0x4df40
call fcn.0040cc40
add esp, 4
mov dword [edi], 0
xor edi, edi
test eax, eax
je 0x408eef
mov esi, eax
mov eax, dword [esp + 0x74]
imul eax, dword [esp + 0x6c]
mov dword [esp + 8], 0
mov dword [esp + 0x14], 1
mov dword [esp + 0x24], eax
inc eax
imul eax, dword [esp + 0x70]
cmp eax, 0x41
jge 0x4089e7
mov eax, 0x40
add eax, 0x39
mov dword [esp + 0xc], eax
mov ebp, eax
push eax
call fcn.0040cc40
add esp, 4
mov dword [esp + 0x10], eax
mov dword [esp], eax
test eax, eax
je 0x408da5
mov dword [esp + 0x18], esi
mov dword [esp + 0x1c], 0x29
xor edi, edi
mov byte [esp + 4], 0x29
mov ebx, 0x29
mov eax, dword [esp]
mov ecx, ebp
jmp 0x408a71
mov dword [esp + 0x20], ecx
push esi
push dword [esp + 4]
call fcn.0040cc60
add esp, 8
test eax, eax
je 0x408aa9
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], esi
mov dword [esp], eax
mov ecx, esi
movzx ebx, byte [esp + 4]
mov byte [eax + edi], bl
mov dword [esp + 8], ebp
mov ebx, dword [esp + 0x1c]
mov edi, ebp
dec ebx
mov dword [esp + 0x1c], ebx
mov edx, ebx
mov byte [esp + 4], bl
je 0x408ab4
lea ebp, [edi + 1]
cmp ebp, ecx
jbe 0x408a52
cmp dword [esp + 0x14], 0
je 0x408aa5
mov esi, ecx
jmp 0x408a94
cmp ebp, esi
jbe 0x408a30
add esi, esi
cmp esi, 0x81
jae 0x408a90
mov esi, 0x80
jmp 0x408a90
mov ebp, edi
jmp 0x408a62
mov eax, dword [esp]
mov ebp, edi
mov ecx, dword [esp + 0x20]
jmp 0x408a62
mov eax, dword [esp + 0x7c]
cmp eax, 0xa
jb 0x408ac2
mov eax, 0xa
mov eax, dword [eax*4 + 0x442c90]
mov ecx, eax
or ecx, 0x1000
mov edi, dword [esp + 0x18]
mov dword [edi], 0x408900
lea edx, [esp + 8]
mov dword [edi + 4], edx
mov dword [edi + 8], ecx
mov ecx, eax
and ecx, 0xfff
imul edx, ecx, 0x5556
add edx, 0xaaac
shr edx, 0x10
inc edx
mov dword [edi + 0xc], edx
shr eax, 0xe
and eax, 1
mov dword [edi + 0x14], eax
shr ecx, 2
imul eax, ecx, 0x5556
add eax, 0xaaac
shr eax, 0x10
inc eax
mov dword [edi + 0x10], eax
lea eax, [edi + 0x29272]
push 0x10000
push 0
push eax
call fcn.0040ccd0
add esp, 0xc
mov dword [edi + 0x24], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x1c], 0
lea eax, [edi + 0x9272]
lea ecx, [edi + 0x9273]
mov dword [edi + 0x3c], 0
mov dword [edi + 0x40], 0
mov dword [edi + 0x44], 0
mov dword [edi + 0x48], 0
mov dword [edi + 0x58], 0
mov dword [edi + 0x5c], 0
mov dword [edi + 0x60], 0
mov dword [edi + 0x64], 0
mov dword [edi + 0x68], 0
mov dword [edi + 0x28], ecx
mov dword [edi + 0x2c], eax
mov byte [edi + 0x9272], 0
mov dword [edi + 0x38], 8
lea eax, [edi + 0x39272]
mov dword [edi + 0x30], eax
mov dword [edi + 0x34], eax
mov dword [edi + 0x6c], 0
mov dword [edi + 0x54], 0
mov dword [edi + 0x50], 0
mov dword [edi + 0x4c], 0
mov dword [edi + 0x18], 1
lea esi, [edi + 0x70]
mov eax, edi
add eax, 0x8192
push 0x280
push 0
push eax
call fcn.0040ccd0
add esp, 0xc
push 0x8121
push 0
push esi
call fcn.0040ccd0
add esp, 0xc
lea ecx, [esp + 0x28]
cmp dword [esp + 0x70], 0
jle 0x408c7b
mov eax, dword [esp + 0x70]
lea esi, [eax - 1]
xor ebx, ebx
jmp 0x408c4c
mov ecx, dword [esp + 0x24]
imul eax, ecx
add eax, dword [esp + 0x68]
mov dword [esp + 0x28], ecx
push 0
push 0
push 0
push ebp
push eax
mov edi, dword [esp + 0x2c]
push edi
call fcn.00407350
mov ecx, ebp
add esp, 0x18
inc ebx
add esi, 0xffffffff
jae 0x408c7b
mov dword [esp + 0x28], 1
push 0
push 0
push 0
mov ebp, ecx
push ecx
lea eax, [esp + 0x2c]
push eax
push edi
call fcn.00407350
add esp, 0x18
mov eax, ebx
cmp dword [esp + 0x80], 0
je 0x408c20
mov eax, esi
jmp 0x408c20
mov dword [esp + 0x28], 0
push 4
push 0
push 0
push ecx
push 0
push edi
mov esi, ecx
call fcn.00407350
add esp, 0x18
cmp eax, 1
jne 0x408db3
mov eax, dword [esp + 8]
mov dword [esp + 4], eax
lea ebx, [eax - 0x29]
mov edi, dword [esp + 0x78]
mov dword [edi], ebx
push 0x29
push 0x442cc1
push esi
call fcn.0040cc70
add esp, 0xc
mov eax, dword [esp + 0x6c]
mov byte [esp + 0x3a], ah
mov byte [esp + 0x3b], al
mov eax, dword [esp + 0x70]
mov byte [esp + 0x3e], ah
mov byte [esp + 0x3f], al
mov eax, dword [esp + 0x74]
movzx eax, byte [eax + 0x442cbc]
mov byte [esp + 0x41], al
mov eax, ebx
shr eax, 0x18
mov byte [esp + 0x49], al
mov eax, ebx
shr eax, 0x10
mov byte [esp + 0x4a], al
mov byte [esp + 0x4b], bh
mov byte [esp + 0x4c], bl
mov ecx, 0xffffffff
mov eax, 0xffffffef
nop
nop
nop
nop
movzx ebp, byte [esp + eax + 0x45]
mov esi, ecx
shr esi, 4
mov edx, ebp
and edx, 0xf
mov ebx, edx
and ebx, ecx
and ecx, 0xf
add ecx, edx
add ebx, ebx
sub ecx, ebx
mov ebx, dword [ecx*4 + 0x442c50]
mov ecx, ebx
and ecx, esi
add ecx, ecx
sub ebx, ecx
add ebx, esi
mov ecx, ebx
shr ecx, 4
and ebx, 0xf
shr ebp, 4
xor ebp, ebx
xor ecx, dword [ebp*4 + 0x442c50]
inc eax
jne 0x408d10
not ecx
bswap ecx
mov dword [esp + 0x45], ecx
mov ebx, dword [esp + 0x10]
push 0x29
lea eax, [esp + 0x2c]
push eax
push ebx
call fcn.0040cc70
add esp, 0xc
mov eax, dword [esp + 4]
lea ebp, [eax + 0x10]
mov esi, dword [esp + 0xc]
cmp ebp, esi
jbe 0x408de5
cmp dword [esp + 0x14], 0
jne 0x408d94
jmp 0x408ed2
cmp ebp, esi
jbe 0x408dc5
add esi, esi
cmp esi, 0x81
jae 0x408d90
mov esi, 0x80
jmp 0x408d90
push esi
call fcn.0040cc50
add esp, 4
jmp 0x408eef
push edi
call fcn.0040cc50
add esp, 4
push dword [esp + 0x10]
jmp 0x408ee5
push esi
push ebx
call fcn.0040cc60
add esp, 8
test eax, eax
je 0x408ece
mov ebx, eax
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], esi
mov eax, dword [esp + 8]
mov dword [ebx + eax + 0xc], 0x826042ae
mov dword [ebx + eax + 8], 0x444e4549
mov dword [ebx + eax + 4], 0
mov dword [ebx + eax], 0
mov dword [esp + 8], ebp
mov ecx, dword [edi]
mov edx, dword [esp + 0x10]
add ecx, 4
je 0x408e85
mov dword [esp], ebp
mov eax, 0xffffffff
xor esi, esi
mov dword [esp + 4], ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ecx, byte [edx + esi + 0x25]
mov ebp, eax
mov ebx, ecx
and ebx, 0xf
mov edi, ebx
and edi, eax
and eax, 0xf
add eax, ebx
shr ebp, 4
add edi, edi
sub eax, edi
mov edi, dword [eax*4 + 0x442c50]
mov eax, edi
and eax, ebp
add eax, eax
sub edi, eax
add edi, ebp
mov eax, edi
and edi, 0xf
shr ecx, 4
xor ecx, edi
shr eax, 4
xor eax, dword [ecx*4 + 0x442c50]
mov ecx, dword [esp + 4]
inc esi
cmp ecx, esi
jne 0x408e30
not eax
mov edi, dword [esp + 0x78]
mov ebp, dword [esp]
jmp 0x408e87
xor eax, eax
mov ecx, eax
shr ecx, 0x18
mov byte [edx + ebp - 0x10], cl
mov ecx, eax
shr ecx, 0x10
mov edx, dword [esp + 8]
mov esi, dword [esp + 0x10]
mov byte [esi + edx - 0xf], cl
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x10]
mov byte [edx + ecx - 0xe], ah
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x10]
mov byte [edx + ecx - 0xd], al
add dword [edi], 0x39
push dword [esp + 0x18]
call fcn.0040cc50
add esp, 4
mov edi, dword [esp + 0x10]
jmp 0x408eef
mov ebx, dword [esp + 0x10]
mov dword [edi], 0
push dword [esp + 0x18]
call fcn.0040cc50
add esp, 4
push ebx
call fcn.0040cc50
add esp, 4
xor edi, edi
mov eax, edi
add esp, 0x54
pop esi
pop edi
pop ebx
pop ebp
ret