Function at 0x4077e0
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2cc
mov dword [ebp - 0xc], edx
mov dword [ebp - 0x14], ecx
push ebx
push esi
push edi
test edx, edx
je 0x407858
xor esi, esi
cmp dword [0x409098], esi
jbe 0x407858
mov ebx, dword [sym.imp.SHLWAPI.dll_StrCmpNIA]
xor edi, edi
nop dword [eax + eax]
mov ecx, dword [0x4094f4]
xor eax, eax
add ecx, edi
je 0x407827
cmp byte [ecx], al
je 0x407827
inc eax
cmp byte [eax + ecx], 0
jne 0x407820
push eax
push edx
push ecx
call ebx
test eax, eax
je 0x407841
mov edx, dword [ebp - 0xc]
inc esi
add edi, 0x44
cmp esi, dword [0x409098]
jb 0x407810
jmp 0x407858
mov eax, dword [0x4094f4]
mov ecx, esi
shl ecx, 4
add ecx, esi
lea eax, [eax + ecx*4]
test eax, eax
jne 0x407cc4
mov ecx, 0xf
lea edi, [ebp - 0x7c]
mov esi, 0x402270
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
xor esi, esi
cmp byte [ebp - 0x7c], 0
je 0x40787a
inc esi
cmp byte [ebp + esi - 0x7c], 0
jne 0x407872
xor edi, edi
nop dword [eax]
call fcn.00402420
xor edx, edx
div esi
mov al, byte [ebp + edx - 0x7c]
mov byte [ebp + edi - 0x2c], al
inc edi
cmp edi, 0x10
jb 0x407880
lea edx, [ebp - 0x3c]
mov byte [ebp - 0x1c], 0
lea ecx, [ebp - 0x2c]
call fcn.004073c0
lea eax, [ebp - 0x2c]
push eax
push 0x4090c4
push 0x6d
push 0x401a9c
lea eax, [ebp - 0x2c8]
push 0x1f4
push eax
call dword [sym.imp.SHLWAPI.dll_wnsprintfA]
mov ecx, dword [ebp + 0xc]
lea edi, [ebp - 0x2c8]
push dword [ebp - 0xc]
mov ebx, eax
mov edx, 0x401aa9
add edi, ebx
test ecx, ecx
cmovne edx, ecx
push edx
push 0x401b5c
push edi
call dword [sym.imp.USER32.dll_wsprintfA]
mov esi, eax
add esp, 0x28
xor edx, edx
test esi, esi
je 0x407911
nop word [eax + eax]
mov ecx, edx
and ecx, 0xf
mov al, byte [ebp + ecx - 0x3c]
xor byte [edx + edi], al
inc edx
cmp edx, esi
jb 0x407900
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
lea eax, [esi + ebx]
push eax
lea eax, [ebp - 0x2c8]
push eax
push ecx
mov ecx, 0x409104
call fcn.00406610
add esp, 0x10
mov dword [ebp - 0x10], eax
test eax, eax
je 0x407cc4
mov ecx, eax
movsx esi, byte [ecx]
mov ebx, ecx
mov dword [ebp - 4], ebx
inc ecx
mov eax, 0x401b64
movsx edx, byte [eax]
lea eax, [eax + 1]
test edx, edx
je 0x407960
cmp esi, edx
jne 0x407950
jmp 0x407942
test esi, esi
jne 0x407975
xor edx, edx
xor edi, edi
mov dword [0x409ec0], edx
xor eax, eax
jmp 0x407a2a
movsx esi, byte [ecx]
mov edi, ecx
inc ecx
mov eax, 0x401b64
movsx edx, byte [eax]
lea eax, [eax + 1]
cmp edx, esi
je 0x407990
test edx, edx
jne 0x407980
jmp 0x407975
test esi, esi
jne 0x407998
xor ecx, ecx
jmp 0x40799b
mov byte [edi], 0
mov dword [0x409ec0], ecx
test ecx, ecx
jne 0x4079b1
mov edx, dword [ebp - 4]
xor edi, edi
xor eax, eax
jmp 0x407a2a
mov dword [ebp - 4], ebx
movsx esi, byte [ecx]
mov edi, ecx
inc ecx
mov eax, 0x401b64
nop
movsx edx, byte [eax]
lea eax, [eax + 1]
test edx, edx
je 0x4079d0
cmp esi, edx
jne 0x4079c0
jmp 0x4079b4
test esi, esi
jne 0x4079e0
xor edi, edi
mov dword [0x409ec0], esi
xor eax, eax
jmp 0x407a27
movsx esi, byte [ecx]
mov ebx, ecx
inc ecx
mov eax, 0x401b64
nop dword [eax + eax]
movsx edx, byte [eax]
lea eax, [eax + 1]
cmp edx, esi
je 0x407a00
test edx, edx
jne 0x4079f0
jmp 0x4079e0
test esi, esi
jne 0x407a08
xor ecx, ecx
jmp 0x407a0b
mov byte [ebx], 0
xor eax, eax
mov dword [0x409ec0], ecx
test edi, edi
je 0x407a27
cmp byte [edi], al
je 0x407a27
nop dword [eax + eax]
inc eax
cmp byte [eax + edi], 0
jne 0x407a20
mov edx, dword [ebp - 4]
mov esi, dword [ebp - 0x10]
lea ebx, [edi + 1]
mov ecx, dword [ebp - 8]
add ebx, eax
sub esi, ebx
add esi, ecx
test edx, edx
je 0x407cb2
test edi, edi
je 0x407cb2
mov eax, ebx
sub eax, dword [ebp - 0x10]
cmp eax, ecx
ja 0x407cb2
xor ecx, ecx
mov al, byte [ecx + edi]
mov byte [ebp + ecx - 0x2c], al
inc ecx
cmp ecx, 0x10
jb 0x407a58
lea edx, [ebp - 0x3c]
lea ecx, [ebp - 0x2c]
call fcn.004073c0
xor ecx, ecx
test esi, esi
je 0x407a87
mov eax, ecx
and eax, 0xf
mov al, byte [ebp + eax - 0x3c]
xor byte [ecx + ebx], al
inc ecx
cmp ecx, esi
jb 0x407a76
mov eax, dword [ebp - 0x14]
sub eax, 1
je 0x407cab
sub eax, 1
je 0x407ca0
sub eax, 1
jne 0x407cb2
mov edi, dword [ebp + 8]
test edi, edi
je 0x407cb2
xor edx, edx
cmp byte [0x4090c4], dl
je 0x407aca
nop word [eax + eax]
inc edx
cmp byte [edx + 0x4090c4], 0
jne 0x407ac0
xor ecx, ecx
test edx, edx
je 0x407ae2
mov al, byte [ecx + 0x4090c4]
mov byte [ebp + ecx - 0xd0], al
inc ecx
cmp ecx, edx
jb 0x407ad0
mov byte [ebp + edx - 0xd0], 0
xor esi, esi
nop dword [eax]
inc esi
cmp byte [esi + 0x401b68], 0
jne 0x407af0
xor edx, edx
test esi, esi
je 0x407b12
mov al, byte [edx + 0x401b68]
mov byte [ebp + edx - 0x90], al
inc edx
cmp edx, esi
jb 0x407b00
mov ecx, ebx
mov byte [ebp + esi - 0x90], 0
call fcn.00405830
mov edx, eax
mov dword [ebp - 8], edx
test edx, edx
je 0x407cb2
mov ecx, dword [edx + 0x3c]
xor esi, esi
mov ebx, dword [ecx + edx + 0x78]
mov ecx, dword [ebx + edx + 0x1c]
add ebx, edx
add ecx, edx
mov dword [ebp - 0x18], ecx
mov eax, dword [ebx + 0x20]
mov ecx, dword [ebx + 0x24]
add eax, edx
add ecx, edx
mov dword [ebp - 0x14], eax
mov dword [ebp - 4], ecx
cmp dword [ebx + 0x18], esi
jbe 0x407cb2
nop dword [eax + eax]
mov eax, dword [eax + esi*4]
add eax, edx
push 0x401b74
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
je 0x407b86
mov edx, dword [ebp - 8]
inc esi
mov eax, dword [ebp - 0x14]
cmp esi, dword [ebx + 0x18]
jb 0x407b60
jmp 0x407cb2
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x18]
mov ebx, dword [ebp - 8]
movzx eax, word [eax + esi*2]
mov ecx, dword [ecx + eax*4]
add ecx, ebx
je 0x407cb2
xor eax, eax
cmp byte [edi], al
je 0x407bab
inc eax
cmp byte [eax + edi], 0
jne 0x407ba4
push 0x4075c0
lea edx, [ebp - 0xd0]
push edx
push eax
push edi
mov edi, dword [ebp - 0xc]
push edi
call ecx
push 0x409080
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ecx, dword [0x409098]
mov edx, dword [0x4094f4]
test ecx, ecx
je 0x407bf8
mov eax, ecx
shl eax, 4
dec eax
add eax, ecx
lea eax, [edx + eax*4]
cmp dword [eax], 0
jne 0x407bf2
sub eax, 0x44
sub ecx, 1
jne 0x407be5
mov dword [0x409098], ecx
xor eax, eax
test ecx, ecx
je 0x407c14
mov esi, edx
cmp dword [esi + 0x40], 0
je 0x407c10
inc eax
add esi, 0x44
cmp eax, ecx
jb 0x407c00
jmp 0x407c14
test esi, esi
jne 0x407c6a
lea eax, [ecx + 1]
mov ecx, eax
shl ecx, 4
add ecx, eax
shl ecx, 2
push ecx
test edx, edx
jne 0x407c37
push 8
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
jmp 0x407c47
push edx
push 8
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapReAlloc]
mov edx, eax
mov dword [0x4094f4], edx
test edx, edx
je 0x407c93
mov ecx, dword [0x409098]
mov eax, ecx
shl eax, 4
add eax, ecx
inc ecx
mov dword [0x409098], ecx
lea esi, [edx + eax*4]
xor edx, edx
mov dword [esi + 0x40], ebx
test edi, edi
je 0x407c8f
cmp byte [edi], dl
je 0x407c7e
inc edx
cmp byte [edx + edi], 0
jne 0x407c77
xor ecx, ecx
test edx, edx
je 0x407c8f
mov al, byte [ecx + edi]
mov byte [ecx + esi], al
inc ecx
cmp ecx, edx
jb 0x407c84
mov byte [edx + esi], 0
push 0x409080
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x407cb2
mov edx, esi
mov ecx, ebx
call fcn.00405de0
jmp 0x407cb2
mov ecx, ebx
call fcn.00405a60
push dword [ebp - 0x10]
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret