Function at 0x415e40
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
mov eax, 0x15bc
call fcn.00416950
mov edi, ecx
mov ebx, dword [esp + 0x15d0]
pxor xmm0, xmm0
movdqu xmmword [esp + 0x38], xmm0
movdqu xmmword [esp + 0x48], xmm0
movdqu xmmword [esp + 0x58], xmm0
movdqu xmmword [esp + 0x68], xmm0
movdqu xmmword [esp + 0x78], xmm0
movdqu xmmword [esp + 0x88], xmm0
movdqu xmmword [esp + 0x98], xmm0
movdqu xmmword [esp + 0xa8], xmm0
mov dword [esp + 0xb8], 0
cmp dword [esp + 0x15d8], 0
je 0x415f1c
test ebx, ebx
jle 0x4167dd
mov ebp, edx
xor eax, eax
cmp ebx, 1
je 0x415ef8
mov ecx, ebx
and ecx, 0xfffffffe
lea eax, [ebp*8]
add eax, ebp
shl eax, 5
lea edx, [eax + edi]
add edx, 0x8f13
xor eax, eax
nop word cs:[eax + eax]
movzx esi, byte [edx + eax - 1]
inc dword [esp + esi*4 + 0x38]
movzx esi, byte [edx + eax]
inc dword [esp + esi*4 + 0x38]
add eax, 2
cmp ecx, eax
jne 0x415ee0
test bl, 1
mov edx, ebp
je 0x4167dd
lea ecx, [edx + edx*8]
shl ecx, 5
add ecx, edi
movzx eax, byte [eax + ecx + 0x8f12]
inc dword [esp + eax*4 + 0x38]
jmp 0x4167dd
mov dword [esp + 0x30], edx
lea eax, [edx + edx*8]
mov dword [esp + 0x10], eax
shl eax, 6
test ebx, ebx
mov dword [esp + 0x14], edi
mov dword [esp + 0x2c], eax
jle 0x416019
add eax, edi
add eax, 0x8192
xor ecx, ecx
xor esi, esi
jmp 0x415f5f
mov edx, ecx
xor edx, 1
and ecx, 1
lea ecx, [edx + ecx*2]
cmp ecx, ebx
jge 0x415f7b
movzx edx, word [eax + ecx*2]
test dx, dx
je 0x415f50
mov word [esp + esi*4 + 0xcbc], dx
mov word [esp + esi*4 + 0xcbe], cx
inc esi
jmp 0x415f50
lea eax, [esp + 0x4bc]
push 0x800
push 0
push eax
call fcn.00416b30
add esp, 0xc
test esi, esi
sete byte [esp + 8]
je 0x416030
mov ebx, esi
xor eax, eax
cmp esi, 1
je 0x415fef
mov ecx, ebx
and ecx, 0xfffffffe
xor eax, eax
nop
movzx edx, word [esp + eax*4 + 0xcbc]
movzx esi, dl
inc dword [esp + esi*4 + 0x4bc]
shr edx, 8
inc dword [esp + edx*4 + 0x8bc]
movzx edx, word [esp + eax*4 + 0xcc0]
movzx esi, dl
inc dword [esp + esi*4 + 0x4bc]
shr edx, 8
inc dword [esp + edx*4 + 0x8bc]
add eax, 2
cmp ecx, eax
jne 0x415fb0
test bl, 1
je 0x416010
movzx eax, word [esp + eax*4 + 0xcbc]
movzx ecx, al
inc dword [esp + ecx*4 + 0x4bc]
shr eax, 8
inc dword [esp + eax*4 + 0x8bc]
mov eax, dword [esp + 0x8bc]
jmp 0x416039
lea eax, [esp + 0x4bc]
push 0x800
push 0
push eax
call fcn.00416b30
add esp, 0xc
xor ebx, ebx
mov byte [esp + 8], 1
xor eax, eax
xor ecx, ecx
cmp eax, ebx
sete cl
mov eax, 2
sub eax, ecx
mov dword [esp + 0x34], eax
lea eax, [ebx - 1]
mov dword [esp + 0x18], eax
mov dword [esp + 4], ebx
and ebx, 0xfffffffe
lea esi, [esp + 0x113c]
lea edx, [esp + 0xcbc]
xor edi, edi
lea eax, [esp + 0x4c0]
xor ecx, ecx
mov dword [esp + 0x1c], ebx
jmp 0x416097
mov edi, dword [esp + 0xc]
inc edi
add ecx, 8
add eax, 0x400
cmp edi, dword [esp + 0x34]
je 0x41619b
mov dword [esp + 0xc], edi
mov dword [esp], esi
mov esi, edx
xor ebp, ebp
xor edx, edx
nop word cs:[eax + eax]
mov dword [esp + ebp*4 + 0xbc], edx
mov edi, dword [eax + ebp*4 - 4]
mov ebx, edi
and ebx, edx
xor edi, edx
lea edx, [edi + ebx*2]
mov dword [esp + ebp*4 + 0xc0], edx
mov edi, dword [eax + ebp*4]
mov ebx, edi
and ebx, edx
xor edi, edx
lea edx, [edi + ebx*2]
add ebp, 2
cmp ebp, 0x100
jne 0x4160b0
cmp byte [esp + 8], 0
mov edx, dword [esp]
jne 0x416080
cmp dword [esp + 0x18], 0
je 0x416163
xor ebp, ebp
nop word cs:[eax + eax]
movzx edx, word [esi + ebp*4]
shr edx, cl
movzx edx, dl
mov edi, dword [esp + edx*4 + 0xbc]
lea ebx, [edi + 1]
mov dword [esp + edx*4 + 0xbc], ebx
mov edx, dword [esi + ebp*4]
mov ebx, dword [esp]
mov dword [ebx + edi*4], edx
movzx edx, word [esi + ebp*4 + 4]
shr edx, cl
movzx edx, dl
mov edi, dword [esp + edx*4 + 0xbc]
lea ebx, [edi + 1]
mov dword [esp + edx*4 + 0xbc], ebx
mov edx, dword [esi + ebp*4 + 4]
mov ebx, dword [esp]
mov dword [ebx + edi*4], edx
mov ebx, dword [esp + 0x1c]
mov edx, dword [esp]
add ebp, 2
cmp ebx, ebp
jne 0x416100
test byte [esp + 4], 1
je 0x416080
jmp 0x416170
xor ebp, ebp
test byte [esp + 4], 1
je 0x416080
movzx edx, word [esi + ebp*4]
shr edx, cl
movzx edx, dl
mov edi, dword [esp + edx*4 + 0xbc]
lea ebx, [edi + 1]
mov dword [esp + edx*4 + 0xbc], ebx
mov edx, dword [esi + ebp*4]
mov ebx, dword [esp]
mov dword [ebx + edi*4], edx
mov edx, dword [esp]
jmp 0x416080
cmp dword [esp + 4], 0
je 0x416685
mov ebx, dword [esp + 4]
cmp ebx, 1
jne 0x4161bc
mov eax, dword [esp]
mov word [eax], 1
jmp 0x41643d
mov edi, dword [esp]
movzx eax, word [edi + 4]
add word [edi], ax
cmp ebx, 3
jl 0x41627d
mov eax, 2
mov ecx, 2
sub ecx, ebx
xor edx, edx
mov esi, 1
jmp 0x416211
movzx ebx, word [ebp + edx*4]
add word [ebp + esi*4], bx
mov word [ebp + edx*4], si
inc edx
lea edi, [ecx + esi]
inc edi
inc esi
cmp edi, 1
mov ebx, dword [esp + 4]
mov edi, dword [esp]
je 0x41627d
mov ebp, edi
movzx edi, word [edi + edx*4]
cmp eax, ebx
jge 0x416225
movzx ebx, word [ebp + eax*4]
cmp di, bx
jae 0x416240
mov word [ebp + esi*4], di
mov word [ebp + edx*4], si
inc edx
cmp eax, dword [esp + 4]
jge 0x4161f0
jmp 0x41624c
inc eax
mov word [ebp + esi*4], bx
cmp eax, dword [esp + 4]
jge 0x4161f0
cmp edx, esi
jge 0x416270
movzx ebx, word [ebp + edx*4]
movzx edi, word [ebp + eax*4]
cmp bx, di
jb 0x4161f5
jmp 0x416275
movzx edi, word [ebp + eax*4]
inc eax
add word [ebp + esi*4], di
jmp 0x416200
mov word [edi + ebx*4 - 8], 0
lea eax, [ebx + ebx]
mov ecx, eax
and ecx, 0xfffffff8
mov edx, ebx
xor edx, 0xfffffffc
add edx, ecx
inc edx
js 0x416321
lea esi, [ebx + 2]
mov ecx, edx
and esi, 3
je 0x4162cf
mov ecx, edx
nop word cs:[eax + eax]
mov edi, dword [esp]
movzx edi, word [edi + ecx*4]
mov ebp, dword [esp]
movzx edi, word [ebp + edi*4]
inc edi
mov ebp, dword [esp]
mov word [ebp + ecx*4], di
mov edi, dword [esp]
dec ecx
dec esi
jne 0x4162b0
cmp edx, 3
jb 0x416321
inc ecx
nop word cs:[eax + eax]
movzx edx, word [edi + ecx*4 - 4]
movzx edx, word [edi + edx*4]
inc edx
mov word [edi + ecx*4 - 4], dx
movzx edx, word [edi + ecx*4 - 8]
movzx edx, word [edi + edx*4]
inc edx
mov word [edi + ecx*4 - 8], dx
movzx edx, word [edi + ecx*4 - 0xc]
movzx edx, word [edi + edx*4]
inc edx
mov word [edi + ecx*4 - 0xc], dx
movzx edx, word [edi + ecx*4 - 0x10]
movzx edx, word [edi + edx*4]
inc edx
mov word [edi + ecx*4 - 0x10], dx
add ecx, 0xfffffffc
jne 0x4162e0
mov ecx, ebx
xor ecx, 0xfffffffd
and eax, 0xfffffffa
add ecx, eax
inc ecx
mov ebx, 1
xor ebp, ebp
mov eax, dword [esp + 0x18]
jmp 0x416366
mov esi, edx
and edx, 0x7ffffffd
mov edi, esi
and edi, 2
or esi, 2
imul esi, edi
xor edi, 2
imul edi, edx
add esi, edi
inc ebp
mov ebx, esi
test esi, esi
jle 0x416432
test ecx, ecx
mov edi, dword [esp]
js 0x4163a0
mov dword [esp + 0x1c], ebp
lea edx, [ecx + 1]
xor ebp, ebp
nop word cs:[eax + eax]
movzx esi, word [edi + ecx*4]
cmp dword [esp + 0x1c], esi
jne 0x4163b0
inc ebp
dec ecx
cmp edx, ebp
jne 0x416380
mov ecx, 0xffffffff
jmp 0x4163b2
xor edx, edx
jmp 0x4163b6
mov edx, ebp
mov ebp, dword [esp + 0x1c]
mov esi, ebx
sub esi, edx
jle 0x416340
mov dword [esp + 0x1c], esi
mov esi, edx
not esi
add esi, ebx
mov dword [esp + 0xc], esi
and dword [esp + 0x1c], 3
je 0x4163f6
mov dword [esp + 8], edx
lea edi, [edi + eax*4]
xor esi, esi
mov edx, dword [esp + 0x1c]
nop
mov word [edi], bp
inc esi
add edi, 0xfffffffc
cmp edx, esi
jne 0x4163e0
sub ebx, esi
sub eax, esi
mov edi, dword [esp]
mov edx, dword [esp + 8]
cmp dword [esp + 0xc], 3
jb 0x416340
nop word cs:[eax + eax]
mov word [edi + eax*4], bp
mov word [edi + eax*4 - 4], bp
mov word [edi + eax*4 - 8], bp
mov word [edi + eax*4 - 0xc], bp
add eax, 0xfffffffc
add ebx, 0xfffffffc
cmp ebx, edx
jg 0x416410
jmp 0x416340
cmp dword [esp + 4], 0
jle 0x416685
mov edi, dword [esp + 4]
mov eax, edi
and eax, 3
xor ecx, ecx
cmp dword [esp + 0x18], 3
mov ebx, dword [esp]
jb 0x41648a
mov edx, edi
and edx, 0xfffffffc
xor ecx, ecx
nop dword [eax]
movzx esi, word [ebx + ecx*4]
inc dword [esp + esi*4 + 0x38]
movzx esi, word [ebx + ecx*4 + 4]
inc dword [esp + esi*4 + 0x38]
movzx esi, word [ebx + ecx*4 + 8]
inc dword [esp + esi*4 + 0x38]
movzx esi, word [ebx + ecx*4 + 0xc]
inc dword [esp + esi*4 + 0x38]
add ecx, 4
cmp edx, ecx
jne 0x416460
test eax, eax
je 0x4164ad
mov edx, dword [esp]
lea ecx, [edx + ecx*4]
xor edx, edx
nop word cs:[eax + eax]
movzx esi, word [ecx + edx*4]
inc dword [esp + esi*4 + 0x38]
inc edx
cmp eax, edx
jne 0x4164a0
cmp edi, 2
jl 0x416685
mov ecx, dword [esp + 0x15d4]
cmp ecx, 0x1f
jg 0x416530
mov eax, dword [esp + ecx*4 + 0x38]
mov edx, ecx
neg edx
mov esi, ecx
and edx, 3
je 0x4164ec
nop word cs:[eax + eax]
add eax, dword [esp + esi*4 + 0x3c]
inc esi
mov dword [esp + ecx*4 + 0x38], eax
dec edx
jne 0x4164e0
lea edx, [ecx - 0x1d]
cmp edx, 3
jb 0x416528
nop word cs:[eax + eax]
add eax, dword [esp + esi*4 + 0x3c]
mov dword [esp + ecx*4 + 0x38], eax
add eax, dword [esp + esi*4 + 0x40]
mov dword [esp + ecx*4 + 0x38], eax
add eax, dword [esp + esi*4 + 0x44]
mov dword [esp + ecx*4 + 0x38], eax
add eax, dword [esp + esi*4 + 0x48]
add esi, 4
mov dword [esp + ecx*4 + 0x38], eax
cmp esi, 0x20
jne 0x416500
test ecx, ecx
jle 0x4168dd
cmp ecx, 1
mov edi, ecx
adc edi, 0xffffffff
inc edi
mov eax, ecx
xor edx, edx
cmp edi, 8
jb 0x416650
mov edx, edi
and edx, 0xfffffff8
mov ecx, dword [esp + 0x15d4]
mov eax, ecx
sub eax, edx
movd xmm0, ecx
pshufd xmm0, xmm0, 0
movdqa xmm1, xmmword [0x45c920]
movdqu xmmword [esp + 0x1c], xmm0
paddd xmm1, xmm0
mov dword [esp + 0xc], edx
neg edx
lea ebx, [esp + ecx*4]
add ebx, 0x2c
pxor xmm2, xmm2
xor esi, esi
movdqa xmm5, xmmword [0x45c940]
pxor xmm3, xmm3
nop
movdqu xmm6, xmmword [ebx + esi*4]
pshufd xmm4, xmm6, 0x1b
movdqu xmm0, xmmword [esp + 0x1c]
psubd xmm0, xmm1
movdqa xmm7, xmm0
pslld xmm0, 0x17
paddd xmm0, xmm5
cvttps2dq xmm0, xmm0
pmuludq xmm4, xmm0
pshufd xmm6, xmm6, 0x4e
pshufd xmm0, xmm0, 0xf5
pmuludq xmm0, xmm6
pshufd xmm4, xmm4, 0xe8
pshufd xmm0, xmm0, 0xe8
punpckldq xmm4, xmm0
movdqu xmm0, xmmword [ebx + esi*4 - 0x10]
paddd xmm2, xmm4
pshufd xmm4, xmm0, 0x1b
psubd xmm7, xmmword [0x45c930]
pslld xmm7, 0x17
paddd xmm7, xmm5
cvttps2dq xmm6, xmm7
pmuludq xmm4, xmm6
pshufd xmm0, xmm0, 0x4e
pshufd xmm6, xmm6, 0xf5
pmuludq xmm6, xmm0
pshufd xmm0, xmm4, 0xe8
pshufd xmm4, xmm6, 0xe8
punpckldq xmm0, xmm4
paddd xmm3, xmm0
paddd xmm1, xmmword [0x45c950]
add esi, 0xfffffff8
cmp edx, esi
jne 0x416590
paddd xmm3, xmm2
pshufd xmm0, xmm3, 0xee
paddd xmm0, xmm3
pshufd xmm1, xmm0, 0x55
paddd xmm1, xmm0
movd edx, xmm1
cmp edi, dword [esp + 0xc]
je 0x41666f
mov ecx, dword [esp + 0x15d4]
sub ecx, eax
inc eax
nop word [eax + eax]
mov esi, dword [esp + eax*4 + 0x34]
shl esi, cl
add edx, esi
dec eax
inc ecx
cmp eax, 1
ja 0x416660
mov eax, 1
mov ecx, dword [esp + 0x15d4]
shl eax, cl
cmp edx, eax
jne 0x4168e6
mov ebp, dword [esp + 0x10]
shl ebp, 5
mov esi, dword [esp + 0x14]
mov dword [esp + 0x10], ebp
lea eax, [esi + ebp]
add eax, 0x8f12
push 0x120
push 0
push eax
call fcn.00416b30
add esp, 0xc
mov eax, dword [esp + 0x2c]
add eax, esi
add eax, 0x8852
push 0x240
push 0
push eax
call fcn.00416b30
add esp, 0xc
cmp dword [esp + 0x15d4], 0
mov ebx, dword [esp + 0x15d0]
jle 0x4167d5
add dword [esp], 0xfffffffe
mov eax, 1
jmp 0x416711
mov ebx, dword [esp + 4]
mov dword [esp + 4], ebx
lea ecx, [eax + 1]
cmp eax, dword [esp + 0x15d4]
mov eax, ecx
mov ebx, dword [esp + 0x15d0]
je 0x4167d5
mov ecx, dword [esp + eax*4 + 0x38]
test ecx, ecx
jle 0x4166f0
mov edx, ecx
and edx, 3
je 0x416770
mov dword [esp + 0x1c], ecx
mov ecx, dword [esp + 4]
mov esi, dword [esp]
lea ebx, [esi + ecx*4]
xor esi, esi
mov ecx, dword [esp + 0x10]
nop word cs:[eax + eax]
movzx edi, word [ebx]
mov ebp, dword [esp + 0x14]
add ebp, ecx
mov byte [edi + ebp + 0x8f12], al
inc esi
add ebx, 0xfffffffc
cmp edx, esi
jne 0x416740
sub dword [esp + 4], esi
mov ecx, dword [esp + 0x1c]
mov edx, ecx
sub edx, esi
jmp 0x416772
mov edx, ecx
cmp ecx, 4
mov ebx, dword [esp + 4]
mov edi, dword [esp]
mov ebp, dword [esp + 0x14]
jb 0x4166f4
dec edx
nop word [eax + eax]
movzx ecx, word [edi + ebx*4]
mov esi, dword [esp + 0x10]
add esi, ebp
mov byte [ecx + esi + 0x8f12], al
movzx ecx, word [edi + ebx*4 - 4]
mov byte [ecx + esi + 0x8f12], al
movzx ecx, word [edi + ebx*4 - 8]
mov byte [ecx + esi + 0x8f12], al
movzx ecx, word [edi + ebx*4 - 0xc]
mov byte [ecx + esi + 0x8f12], al
add ebx, 0xfffffffc
add edx, 0xfffffffc
cmp edx, 0xfffffffe
jb 0x416790
jmp 0x4166f4
mov edx, dword [esp + 0x30]
mov edi, dword [esp + 0x14]
mov dword [esp + 0x4c0], 0
mov esi, dword [esp + 0x15d4]
cmp esi, 2
jl 0x416812
xor eax, eax
mov ecx, 2
nop dword [eax + eax]
add eax, dword [esp + ecx*4 + 0x34]
add eax, eax
mov dword [esp + ecx*4 + 0x4bc], eax
inc ecx
cmp ecx, esi
jle 0x416800
test ebx, ebx
jle 0x4168d2
xor eax, eax
lea ecx, [edx + edx*8]
mov edx, ecx
shl edx, 5
add edx, edi
shl ecx, 6
add ecx, edi
mov dword [esp], ecx
jmp 0x41684b
mov ecx, dword [esp]
mov word [ecx + eax*2 + 0x8852], bx
mov ebx, dword [esp + 0x15d0]
inc eax
cmp eax, ebx
je 0x4168d2
movzx ecx, byte [eax + edx + 0x8f12]
test ecx, ecx
je 0x416842
mov ebp, dword [esp + ecx*4 + 0x4bc]
lea edi, [ebp + 1]
mov dword [esp + ecx*4 + 0x4bc], edi
mov edi, ecx
and edi, 3
xor ebx, ebx
cmp cl, 4
jb 0x4168af
and ecx, 0xfffffffc
xor ebx, ebx
nop dword [eax]
mov esi, ebp
and esi, 1
shl esi, 2
lea esi, [esi + ebx*8]
mov ebx, ebp
and ebx, 2
or ebx, esi
mov esi, ebp
shr esi, 2
and esi, 1
or esi, ebx
mov ebx, ebp
shr ebx, 3
and ebx, 1
lea ebx, [ebx + esi*2]
shr ebp, 4
add ecx, 0xfffffffc
jne 0x416880
test edi, edi
je 0x416830
nop word [eax + eax]
mov ecx, ebp
and ecx, 1
lea ebx, [ecx + ebx*2]
shr ebp, 1
dec edi
jne 0x4168c0
jmp 0x416830
add esp, 0x15bc
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, 1
shl eax, cl
xor edx, edx
mov edi, dword [esp + 0x15d4]
mov esi, edi
xor esi, 0xfffffffe
and edi, 0xfffffffe
lea ecx, [esi + edi*2]
inc ecx
lea esi, [esi + edi*2]
add esi, 2
jmp 0x416923
dec edi
mov dword [esp + ebx*4 + 0x34], edi
add dword [esp + ebx*4 + 0x38], 2
dec edx
cmp edx, eax
je 0x416685
mov edi, dword [esp + 0x15d4]
dec dword [esp + edi*4 + 0x38]
test ecx, ecx
jle 0x41691a
mov ebx, esi
nop word cs:[eax + eax]
mov edi, dword [esp + ebx*4 + 0x34]
test edi, edi
jne 0x416910
dec ebx
cmp ebx, 1
jg 0x416940
jmp 0x41691a