Function at 0x406690
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x5c
mov eax, dword [esp + 0xac]
mov esi, dword [ecx + 0x48]
mov ebx, dword [esi + 4]
mov dword [esp + 0x58], ebx
test eax, eax
je 0x4066be
cmp dword [esi + 0x34], 0
jne 0x4066be
mov dword [ecx + 0x1c], 3
jmp 0x406cd5
mov dword [esp + 0x54], eax
mov dword [esp + 0x50], edx
movzx edx, word [esp + 0x78]
movzx eax, word [esp + 0x70]
movzx edx, dx
movzx ebp, word [esp + 0x80]
mov dword [esp + 0x40], edx
mov edi, eax
mov dword [esp + 0x44], eax
lea edi, [eax + edx]
add edi, ebp
mov eax, dword [esp + 0xb8]
xor edx, edx
add edi, eax
setb dl
add edi, ebx
adc edx, 0
add edi, 0x2e
adc edx, 0
cmp edi, 0xffffffff
sbb edx, 0
jb 0x406717
mov dword [ecx + 0x1c], 0xf
jmp 0x406cd5
mov dword [esp + 0x3c], ebp
mov dword [esp + 8], ebx
mov dword [esp + 4], ecx
mov dword [esp], esi
mov ebp, dword [esp + 0x90]
mov ecx, dword [esp + 0x88]
mov dword [esp + 0x48], ecx
mov edx, eax
mov dword [esp + 0x12], 0
mov dword [esp + 0x16], 0
mov dword [esp + 0x1a], 0
mov dword [esp + 0x1e], 0
mov dword [esp + 0x22], 0
mov dword [esp + 0x26], 0
mov dword [esp + 0x2a], 0
mov dword [esp + 0x2e], 0
mov word [esp + 0x32], 0
mov dword [esp + 0xe], 0x2014b50
movzx edi, word [esp + 0x9c]
movzx esi, word [esp + 0x98]
mov ebx, dword [esp + 0x94]
movzx ecx, word [esp + 0x78]
add ecx, eax
mov dword [esp + 0x4c], ecx
xor ecx, ecx
mov edx, 0
mov eax, esi
test si, si
je 0x4067bb
mov dl, 0x14
mov byte [esp + 0x14], dl
mov edx, edi
mov byte [esp + 0x16], dl
mov byte [esp + 0x17], dh
mov byte [esp + 0x18], al
mov byte [esp + 0x19], ah
movzx eax, word [esp + 0xa0]
mov byte [esp + 0x1a], al
mov byte [esp + 0x1b], ah
movzx eax, word [esp + 0xa4]
mov byte [esp + 0x1c], al
mov byte [esp + 0x1d], ah
mov byte [esp + 0x1e], bl
mov byte [esp + 0x1f], bh
mov edx, ebx
shr edx, 0x10
mov byte [esp + 0x20], dl
shr ebx, 0x18
neg ebp
mov edx, 0
sbb edx, edx
mov byte [esp + 0x21], bl
or edx, dword [esp + 0x8c]
mov byte [esp + 0x22], dl
mov byte [esp + 0x23], dh
mov ebx, edx
shr ebx, 0x10
mov byte [esp + 0x24], bl
shr edx, 0x18
neg dword [esp + 0x48]
mov ebx, 0
sbb ebx, ebx
mov byte [esp + 0x25], dl
or ebx, dword [esp + 0x84]
mov byte [esp + 0x26], bl
mov byte [esp + 0x27], bh
mov edx, ebx
shr edx, 0x10
mov byte [esp + 0x28], dl
shr ebx, 0x18
mov byte [esp + 0x29], bl
movzx eax, word [esp + 0x70]
mov byte [esp + 0x2a], al
mov byte [esp + 0x2b], ah
mov eax, dword [esp + 0x4c]
mov byte [esp + 0x2c], al
mov byte [esp + 0x2d], ah
movzx edx, word [esp + 0x80]
mov byte [esp + 0x2e], dl
mov byte [esp + 0x2f], dh
mov eax, dword [esp + 0xb0]
mov byte [esp + 0x34], al
mov byte [esp + 0x35], ah
mov edx, eax
shr edx, 0x10
mov byte [esp + 0x36], dl
shr eax, 0x18
neg dword [esp + 0x54]
sbb ecx, ecx
mov byte [esp + 0x37], al
or ecx, dword [esp + 0xa8]
mov byte [esp + 0x38], cl
mov byte [esp + 0x39], ch
mov eax, ecx
shr eax, 0x10
mov byte [esp + 0x3a], al
shr ecx, 0x18
mov byte [esp + 0x3b], cl
mov ebp, dword [esp + 8]
lea esi, [ebp + 0x2e]
mov ebx, dword [esp]
mov eax, dword [ebx + 8]
cmp eax, esi
jae 0x406936
mov edi, 1
test eax, eax
je 0x406908
mov edi, eax
jmp 0x406908
mov eax, edi
and eax, 0xfffffffd
mov ecx, edi
and ecx, 2
or edi, 2
imul edi, ecx
xor ecx, 2
imul ecx, eax
add edi, ecx
cmp edi, esi
jb 0x4068f0
push edi
push dword [ebx + 0xc]
push dword [ebx]
mov eax, dword [esp + 0x10]
push dword [eax + 0x34]
call dword [eax + 0x30]
add esp, 0x10
test eax, eax
mov ecx, ebx
je 0x406ca4
mov dword [ecx], eax
mov dword [ecx + 8], edi
mov ebx, ecx
mov ebp, dword [esp + 8]
jmp 0x406938
mov eax, dword [ebx]
mov dword [ebx + 4], esi
mov ecx, dword [ebx + 0xc]
mov esi, ebp
not esi
and esi, ecx
mov edx, ecx
not edx
and edx, ebp
imul edx, esi
mov esi, ecx
and esi, ebp
imul edi, ecx, 0x2e
or ecx, ebp
imul ecx, esi
add ecx, eax
add ecx, edx
lea eax, [esp + 0xe]
push edi
push eax
push ecx
call fcn.00408c30
add esp, 0xc
mov esi, dword [ebx + 4]
mov eax, dword [ebx + 8]
mov ecx, dword [esp + 0x44]
lea edi, [esi + ecx]
cmp eax, edi
jae 0x4069d2
mov ebp, 1
test eax, eax
je 0x4069a8
mov ebp, eax
jmp 0x4069a8
mov eax, ebp
and eax, 0xfffffffd
mov ecx, ebp
and ecx, 2
or ebp, 2
imul ebp, ecx
xor ecx, 2
imul ecx, eax
add ebp, ecx
cmp ebp, edi
jb 0x406990
push ebp
push dword [ebx + 0xc]
push dword [ebx]
mov eax, dword [esp + 0x10]
push dword [eax + 0x34]
call dword [eax + 0x30]
add esp, 0x10
test eax, eax
mov ecx, ebx
je 0x406ca4
mov dword [ecx], eax
mov dword [ecx + 8], ebp
mov ebx, ecx
jmp 0x4069d4
mov ebp, eax
mov dword [ebx + 4], edi
cmp word [esp + 0x70], 0
je 0x406a19
mov eax, dword [ebx + 0xc]
mov ecx, esi
not ecx
and ecx, eax
mov edx, eax
not edx
and edx, esi
imul edx, ecx
mov ecx, eax
and ecx, esi
or esi, eax
imul esi, ecx
add esi, edx
add esi, dword [ebx]
mov ecx, dword [esp + 0x44]
imul ecx, eax
push ecx
push dword [esp + 0x54]
push esi
call fcn.00408c30
add esp, 0xc
mov edi, dword [ebx + 4]
mov ebp, dword [ebx + 8]
mov eax, dword [esp + 0x40]
lea esi, [edi + eax]
cmp ebp, esi
jae 0x406a85
mov ebx, 1
test ebp, ebp
je 0x406a58
mov ebx, ebp
jmp 0x406a58
mov eax, ebx
and eax, 0xfffffffd
mov ecx, ebx
and ecx, 2
or ebx, 2
imul ebx, ecx
xor ecx, 2
imul ecx, eax
add ebx, ecx
cmp ebx, esi
jb 0x406a40
push ebx
mov ebp, dword [esp + 4]
push dword [ebp + 0xc]
push dword [ebp]
mov eax, dword [esp + 0x10]
push dword [eax + 0x34]
call dword [eax + 0x30]
mov ecx, ebp
add esp, 0x10
test eax, eax
je 0x406ca4
mov dword [ecx], eax
mov dword [ecx + 8], ebx
jmp 0x406a89
mov ecx, ebx
mov ebx, ebp
mov ebp, dword [esp + 0xb8]
movzx eax, word [esp + 0x78]
mov dword [ecx + 4], esi
test ax, ax
je 0x406ad9
mov eax, dword [ecx + 0xc]
mov ebx, ecx
mov ecx, edi
not ecx
and ecx, eax
mov edx, eax
not edx
and edx, edi
imul edx, ecx
mov ecx, eax
and ecx, edi
or edi, eax
imul edi, ecx
add edi, edx
add edi, dword [ebx]
mov ecx, dword [esp + 0x40]
imul ecx, eax
push ecx
push dword [esp + 0x78]
push edi
call fcn.00408c30
add esp, 0xc
mov esi, dword [ebx + 4]
mov ebx, dword [ebx + 8]
lea edi, [esi + ebp]
cmp ebx, edi
jae 0x406b1e
mov ebp, 1
test ebx, ebx
je 0x406aeb
mov ebp, ebx
cmp ebp, edi
jae 0x406b25
mov ebx, dword [esp]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, ebp
and eax, 0xfffffffd
mov ecx, ebp
and ecx, 2
or ebp, 2
imul ebp, ecx
xor ecx, 2
imul ecx, eax
add ebp, ecx
cmp ebp, edi
jb 0x406b00
jmp 0x406b28
mov ebp, ebx
mov ebx, dword [esp]
jmp 0x406b4c
mov ebx, dword [esp]
push ebp
push dword [ebx + 0xc]
push dword [ebx]
mov eax, dword [esp + 0x10]
push dword [eax + 0x34]
call dword [eax + 0x30]
add esp, 0x10
test eax, eax
mov ecx, ebx
je 0x406ca4
mov dword [ecx], eax
mov dword [ecx + 8], ebp
mov ebx, ecx
mov dword [ebx + 4], edi
mov eax, dword [esp + 0xb8]
test eax, eax
je 0x406b95
mov edi, eax
mov eax, dword [ebx + 0xc]
mov ecx, esi
not ecx
and ecx, eax
mov edx, eax
not edx
and edx, esi
imul edx, ecx
mov ecx, eax
and ecx, esi
or esi, eax
imul esi, ecx
add esi, edx
add esi, dword [ebx]
imul edi, eax
push edi
push dword [esp + 0xb8]
push esi
call fcn.00408c30
add esp, 0xc
mov edi, dword [ebx + 4]
mov ebp, dword [ebx + 8]
mov eax, dword [esp + 0x3c]
lea esi, [edi + eax]
cmp ebp, esi
jae 0x406bf5
mov ebx, 1
test ebp, ebp
je 0x406bc8
mov ebx, ebp
jmp 0x406bc8
mov eax, ebx
and eax, 0xfffffffd
mov ecx, ebx
and ecx, 2
or ebx, 2
imul ebx, ecx
xor ecx, 2
imul ecx, eax
add ebx, ecx
cmp ebx, esi
jb 0x406bb0
push ebx
mov ebp, dword [esp + 4]
push dword [ebp + 0xc]
push dword [ebp]
mov eax, dword [esp + 0x10]
push dword [eax + 0x34]
call dword [eax + 0x30]
mov ecx, ebp
add esp, 0x10
test eax, eax
je 0x406ca4
mov dword [ecx], eax
mov dword [ecx + 8], ebx
mov ebx, ecx
mov dword [ebx + 4], esi
cmp word [esp + 0x80], 0
je 0x406c3a
mov eax, dword [ebx + 0xc]
mov ecx, edi
not ecx
and ecx, eax
mov edx, eax
not edx
and edx, edi
imul edx, ecx
mov ecx, eax
and ecx, edi
or edi, eax
imul edi, ecx
add edi, edx
add edi, dword [ebx]
mov ecx, dword [esp + 0x3c]
imul ecx, eax
push ecx
push dword [esp + 0x80]
push edi
call fcn.00408c30
add esp, 0xc
mov esi, dword [ebx + 0x14]
mov eax, dword [ebx + 0x18]
lea edi, [esi + 1]
cmp eax, edi
jae 0x406cdf
mov ebx, 1
test eax, eax
je 0x406c78
mov ebx, eax
jmp 0x406c78
mov eax, ebx
and eax, 0xfffffffd
mov ecx, ebx
and ecx, 2
or ebx, 2
imul ebx, ecx
xor ecx, 2
imul ecx, eax
add ebx, ecx
cmp ebx, edi
jb 0x406c60
push ebx
mov ebp, dword [esp + 4]
push dword [ebp + 0x1c]
push dword [ebp + 0x10]
mov eax, dword [esp + 0x10]
push dword [eax + 0x34]
call dword [eax + 0x30]
mov ecx, ebp
add esp, 0x10
test eax, eax
je 0x406ca4
mov dword [ecx + 0x10], eax
mov dword [ecx + 0x18], ebx
mov ebx, ecx
jmp 0x406ce2
mov ebx, dword [esp + 8]
cmp dword [ecx + 8], ebx
mov esi, ecx
mov edi, dword [esp + 4]
jae 0x406ccb
push ebx
push dword [esi + 0xc]
push dword [esi]
push dword [edi + 0x34]
call dword [edi + 0x30]
add esp, 0x10
test eax, eax
je 0x406cce
mov dword [esi], eax
mov dword [esi + 8], ebx
mov dword [esi + 4], ebx
mov dword [edi + 0x1c], 0x10
xor eax, eax
add esp, 0x5c
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [ebx + 0x10]
mov dword [ebx + 0x14], edi
mov ecx, dword [ebx + 0x1c]
mov edi, esi
not edi
and edi, ecx
mov edx, ecx
not edx
and edx, esi
imul edx, edi
mov edi, ecx
and edi, esi
or esi, ecx
imul esi, edi
add esi, eax
add esi, edx
lea eax, [esp + 0x58]
push ecx
push eax
push esi
call fcn.00408c30
add esp, 0xc
mov eax, 1
jmp 0x406cd7