Function at 0x404ca3
Capabilities:
Encode data using xor
Get file attributes

Disassembly:
sub esp, 0x10
push ebx
mov ebx, dword [esp + 0x1c]
push ebp
mov ebp, dword [esp + 0x24]
xor ebx, 0x7e9
push esi
mov esi, dword [esp + 0x30]
mov eax, ebp
push edi
mov edi, dword [esp + 0x24]
xor eax, 0x2c8
add edi, 0xffffdd5c
mov dword [esp + 0x18], eax
mov ecx, ebp
mov dword [esp + 0x1c], edi
xor ecx, 0x3b78
xor ebp, 0x6c7
mov edx, edi
mov dword [esp + 0x14], ecx
lea eax, [edi + 0x1fb4]
mov dword [esp + 0x10], edx
mov dword [esp + 0x2c], ebp
cmp ebx, eax
jl 0x404d94
lea eax, [edi + 0x2463]
push eax
mov eax, dword [esp + 0x28]
add eax, 0x133
push eax
lea eax, [ecx + 0x99]
push eax
push ebp
push dword [0x7a1444]
lea eax, [ecx + 0x974]
push eax
call fcn.00405eaa
mov ecx, dword [0x7a13fc]
add esp, 0x18
mov edx, eax
mov dword [esp + 0x10], eax
cmp ecx, dword [0x7a132c]
jb 0x404d55
mov ecx, dword [esi + 0x110]
add ecx, dword [esi + 0xa8]
or dword [0x7a137c], ecx
jmp 0x404d6f
mov eax, dword [0x7a1444]
mov ecx, dword [eax + 0x100]
mov eax, dword [esi + 0xdc]
add eax, 0x187295
add eax, ecx
mov dword [esi], eax
cmp dword [esi + 0x48], 0x500b
mov ecx, dword [0x7a1444]
je 0x404d89
mov eax, dword [ecx + 0xf8]
mov dword [0x7a13d0], eax
mov eax, dword [0x7a1328]
sub dword [ecx + 0xb0], eax
mov eax, edi
xor eax, 0x2933
cmp ebx, eax
je 0x404fb4
mov ecx, dword [0x7a1444]
mov eax, dword [esi + 0x74]
cmp eax, dword [ecx + 0xdc]
ja 0x404dd4
mov eax, dword [ecx + 0xc8]
xor eax, dword [ecx + 0x98]
sub eax, dword [0x7a1364]
imul eax, dword [0x7a1354]
mov dword [0x7a1354], eax
jmp 0x404ddf
mov eax, dword [ecx + 0xf8]
mov dword [0x7a1414], eax
mov eax, dword [ecx + 0xe4]
cmp eax, dword [0x7a1320]
jb 0x404dff
mov eax, dword [ecx + 0xc]
add eax, dword [0x7a13cc]
imul eax, dword [esi + 0x64]
mov dword [esi + 0x64], eax
jmp 0x404e08
mov eax, dword [esi + 0x18]
add dword [ecx + 0xf4], eax
mov edi, dword [esp + 0x14]
xor edx, 0x6e
mov eax, edi
xor eax, 0x3b78
push eax
lea eax, [ebx + 0xfb]
push eax
mov eax, dword [esp + 0x2c]
push edx
add eax, 0x2d9
push 0x7a1320
push eax
call fcn.00407a92
add esp, 0x14
xor ebp, ebp
mov ecx, dword [0x7a1368]
xor ecx, dword [0x7a142c]
mov eax, dword [esi + 0xe0]
xor ecx, 0x1095c6c
mov ebx, dword [eax + ebp]
add ebp, 4
mov eax, dword [0x7a1398]
imul ebx, dword [esi + 0x54]
xor eax, ecx
add eax, 0x2a4ef
mov dword [0x7a1368], ecx
imul eax, dword [esi + 0x5c]
and dword [esi + 0x110], 0
mov ecx, dword [esi + 0x88]
mov edx, ebx
shr edx, 0x10
mov dword [esi + 0x5c], eax
mov eax, dword [0x7a1408]
mov byte [eax + ecx], dl
mov edx, ebx
inc dword [esi + 0x88]
mov eax, dword [0x7a1444]
shr edx, 8
mov ecx, dword [eax + 0x88]
mov eax, dword [esi + 0xe8]
mov byte [ecx + eax], dl
mov eax, dword [0x7a1444]
inc dword [eax + 0x88]
mov eax, dword [0x7a1444]
mov eax, dword [eax + 0x10c]
xor eax, dword [0x7a1334]
sub eax, 0x1095c28
xor dword [esi + 0xc8], eax
mov eax, dword [0x7a1444]
mov eax, dword [eax + 0x5c]
xor eax, dword [esi + 0x100]
xor eax, dword [esi + 0xc8]
xor eax, 0x9f807
mov dword [esi + 0xc8], eax
mov eax, dword [0x7a1444]
mov ecx, dword [eax + 0x88]
mov eax, dword [esi + 0xe8]
mov byte [ecx + eax], bl
mov eax, dword [0x7a1444]
inc dword [eax + 0x88]
mov eax, dword [0x7a1444]
mov ecx, dword [esi + 0x10c]
add ecx, 0xfef040a9
mov eax, dword [eax + 4]
add eax, dword [0x7a1368]
xor eax, 0xfff3f6c6
add dword [esi + 0x9c], eax
mov eax, dword [esi + 0x64]
add eax, ecx
imul eax, dword [esi + 0xc4]
mov dword [esi + 0xc4], eax
add eax, 0xfff75b5b
mov ecx, dword [0x7a1444]
or dword [ecx + 0x74], eax
mov eax, dword [0x7a1444]
mov eax, dword [eax + 0x10c]
sub eax, 0x1095c6b
imul eax, dword [esi + 0xdc]
mov dword [esi + 0xdc], eax
cmp ebp, 0x7dde0
jl 0x404e38
mov ecx, dword [esp + 0x10]
lea eax, [ecx + 0x2a]
push eax
lea eax, [edi + 0x5c8]
push eax
mov eax, dword [esp + 0x34]
add eax, 0x6b9
push eax
push dword [0x7a1444]
lea eax, [ecx - 0x68f]
push eax
call fcn.0040507a
add esp, 0x14
mov edi, eax
jmp 0x40506c
lea eax, [edi - 0x2783]
or edx, eax
mov eax, dword [0x7a1404]
mov dword [esp + 0x24], eax
mov eax, dword [0x7a1444]
mov dword [esp + 0x10], edx
mov ecx, dword [eax + 0xc0]
sub ecx, dword [eax + 0x10c]
and ecx, ebx
cmp dword [esp + 0x24], ecx
jae 0x405031
mov ebp, dword [esp + 0x24]
mov eax, ebx
sub eax, edi
mov edi, eax
mov eax, dword [esi + 0x48]
xor eax, dword [esi + 4]
sub eax, dword [esp + 0x18]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
lea eax, [ebx - 0x2933]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [0x7a1444]
add ebp, 4
mov ecx, dword [eax + 0xc0]
sub ecx, dword [eax + 0x10c]
and ecx, ebx
cmp ebp, ecx
jb 0x404fec
mov edi, dword [esp + 0x1c]
mov ebp, dword [esp + 0x2c]
mov edx, dword [esp + 0x10]
mov eax, dword [0x7a13c8]
not eax
and eax, edx
cmp dword [0x7a13c4], eax
jae 0x40506c
mov eax, dword [0x7a1320]
add eax, 0xffffde62
cmp dword [esi + 0x58], eax
jb 0x40506c
mov eax, dword [0x7a138c]
xor eax, 0x229d
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
mov eax, dword [0x7a1444]
and ebp, edi
add dword [eax + 0x48], ebp
lea eax, [edi + 0x7a3]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret