Function at 0x406f00
Capabilities:
Encode data using xor

Disassembly:
push ecx
mov ecx, dword [esp + 8]
push ebx
mov ebx, dword [esp + 0x20]
mov edx, ebx
push ebp
mov ebp, dword [esp + 0x1c]
xor edx, 0x1450
mov eax, ebp
xor ebp, 0x149a
xor eax, 0x784
mov dword [esp + 0x1c], ebp
mov dword [esp + 8], eax
lea eax, [ecx + 0x384]
push esi
mov esi, dword [esp + 0x24]
xor ecx, 0x93d
mov dword [esp + 0x28], eax
lea eax, [edx + 0x66]
push edi
lea edi, [ebx - 0x131e]
cmp ecx, eax
jg 0x40711e
lea eax, [ebx - 0x282]
xor eax, 0x382
cmp ebp, eax
jne 0x4070d9
cmp dword [esi + 0xc], 0xa97b
je 0x406f79
mov dword [esi + 0xb4], 0x5390b8
xor edi, edi
mov ebp, edi
mov ecx, dword [0x8b055c]
mov eax, dword [esi + 0xc]
sub eax, dword [0x8b063c]
xor eax, 0xfb6cf
sub dword [0x8b066c], eax
mov eax, dword [ecx + 0xb4]
mov edx, dword [eax + ebp]
add ebp, 4
mov eax, dword [ecx + 0xe8]
xor eax, dword [0x8b05dc]
sub eax, 0x13e42d
mov ecx, dword [esi + 0x84]
add dword [esi + 0x120], eax
mov eax, dword [0x8b055c]
mov ebx, dword [eax + 0x80]
mov eax, dword [eax + 0x90]
imul ebx, edx
dec eax
add dword [esi + 0x110], eax
mov eax, dword [esi + 0xb8]
mov byte [ecx + eax], bl
mov ebx, 0xb2d12
inc dword [esi + 0x84]
mov edx, dword [0x8b055c]
mov eax, dword [0x8b0568]
add eax, 0xffffffbd
add eax, dword [esi + 0x110]
imul eax, dword [edx + 0xf4]
mov dword [edx + 0xf4], eax
mov eax, dword [0x8b0624]
add dword [esi + 0xe8], eax
mov eax, dword [0x8b0580]
add eax, dword [0x8b0668]
xor eax, 0x8e8bf
or dword [esi + 0x1c], eax
mov eax, dword [0x8b055c]
mov eax, dword [eax + 0xe8]
sub eax, ebx
or dword [esi + 0x68], eax
mov edx, dword [0x8b055c]
mov eax, dword [0x8b0580]
add eax, dword [0x8b066c]
sub dword [edx + 0xac], eax
mov eax, 0x1388df
sub eax, dword [esi + 0x124]
add dword [esi + 0x108], eax
mov eax, dword [esi + 0x44]
sub eax, 0x13ffca
xor dword [0x8b0670], eax
mov eax, 0xffe85340
mov ecx, dword [esi + 0x68]
xor ecx, dword [0x8b05dc]
sub eax, ecx
add dword [esi + 0xe8], eax
mov eax, dword [esi + 0x90]
sub eax, dword [esi + 0xe8]
mov ecx, dword [0x8b055c]
add eax, ebx
imul eax, dword [ecx + 0x7c]
mov dword [ecx + 0x7c], eax
cmp ebp, 0x2bf80
jl 0x406f7d
mov edx, dword [0x8b055c]
mov ebp, dword [esp + 0x24]
mov eax, dword [edx + 0x48]
cmp eax, dword [edx + 8]
ja 0x407126
mov eax, dword [esi + 0x1c]
add eax, 0xeeeeeedc
add eax, dword [edx + 0x90]
mov dword [edx + 0x80], eax
jmp 0x407120
mov ecx, dword [0x8b055c]
lea eax, [edx + 0x1735]
and eax, dword [esi + 0xfc]
add dword [ecx + 0x24], eax
mov eax, edi
sub eax, dword [esp + 0x2c]
add dword [esi + 0xe8], eax
mov eax, dword [esi + 0x6c]
imul eax, ebp
imul eax, eax, 0x5e7
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub edi, dword [esp + 0x10]
xor edi, dword [0x8b0674]
push edi
call dword [sym.imp.KERNEL32.dll_CreateActCtxA]
xor edi, edi
mov edx, dword [0x8b055c]
mov dword [edx + 0xb4], 0x5658e8
mov edx, dword [0x8b055c]
mov eax, dword [edx + 0x34]
xor eax, 1
add dword [0x8b066c], eax
mov eax, dword [esi + 0xb4]
mov ecx, dword [edi + eax]
add edi, 4
mov eax, dword [edx + 0xe0]
sub dword [esi + 0xa0], eax
mov ebx, dword [esi + 0x80]
mov eax, dword [esi + 0xb8]
imul ebx, ecx
mov ecx, dword [esi + 0x84]
mov edx, ebx
shr edx, 0x10
mov byte [ecx + eax], dl
mov edx, ebx
inc dword [esi + 0x84]
mov ecx, dword [esi + 0x114]
mov eax, dword [esi + 0x7c]
sub eax, ecx
shr edx, 8
sub eax, 0x18c922
add dword [esi + 0x78], eax
mov eax, dword [esi + 0x1c]
sub eax, 0x11
imul eax, ecx
mov dword [esi + 0x114], eax
mov eax, dword [esi + 8]
add eax, dword [0x8b05c8]
mov ecx, dword [0x8b055c]
xor eax, 0xfff09a93
or dword [0x8b05a8], eax
mov eax, dword [esi + 8]
sub eax, dword [esi + 0xc]
xor eax, 0xfff0490e
add dword [ecx + 0x108], eax
mov eax, dword [esi + 0x108]
xor eax, dword [0x8b0594]
xor eax, 1
mov dword [esi + 0x108], eax
mov eax, dword [0x8b055c]
mov ecx, dword [eax + 0x84]
mov eax, dword [esi + 0xb8]
mov byte [ecx + eax], dl
mov eax, dword [0x8b055c]
inc dword [eax + 0x84]
mov ecx, dword [esi + 0x84]
mov eax, dword [esi + 0xb8]
mov byte [ecx + eax], bl
inc dword [esi + 0x84]
cmp edi, 0x10d80
jl 0x407130
mov eax, dword [0x8b055c]
pop edi
mov eax, dword [eax + 0x20]
add eax, dword [esi + 0x124]
xor eax, 0xccdf4412
mov dword [esi + 0x80], eax
lea eax, [ebp - 0x484]
pop esi
pop ebp
pop ebx
pop ecx
ret