Function at 0x413230
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using djb2

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x584
mov eax, dword fs:[0x30]
push ebx
mov ebx, dword [0x4250f4]
push esi
mov eax, dword [eax + 0xc]
add eax, 0x14
push edi
mov dword [esp + 0x38], eax
mov edi, dword [eax]
cmp edi, eax
je 0x4132b7
jmp 0x413260
mov esi, dword [edi + 0x28]
mov eax, 0x1505
movzx edx, word [esi]
test edx, edx
je 0x4132a9
nop
lea ecx, [edx - 0x41]
lea esi, [esi + 2]
cmp ecx, 0x19
ja 0x41327e
or edx, 0x20
mov ecx, eax
shl eax, 5
add eax, edx
movzx edx, word [esi]
add eax, ecx
test edx, edx
jne 0x413270
cmp eax, 0x22d3b5ed
je 0x4132a1
cmp eax, 0x7040ee75
jne 0x4132a9
mov ebx, dword [edi + 0x10]
jmp 0x4132a9
mov eax, dword [edi + 0x10]
mov dword [0x4250f0], eax
mov edi, dword [edi]
cmp edi, dword [esp + 0x38]
jne 0x413260
mov dword [0x4250f4], ebx
test ebx, ebx
je 0x4132f6
mov edx, 0x6663971
mov ecx, ebx
call section..text
mov ecx, dword [0x4250f4]
mov edx, 0x666395b
mov dword [0x42503c], eax
call section..text
mov ecx, dword [0x4250f4]
mov edx, 0x82172f7f
mov dword [0x425414], eax
call section..text
mov dword [0x4251a8], eax
call fcn.004011c0
call fcn.004017c0
cmp dword [0x425ba8], 0
jne 0x413321
call dword [0x425260]
push 0
push 0
push 1
push eax
mov dword [0x425ba8], eax
call dword [0x425188]
call fcn.00412c60
lea eax, [esp + 0xd0]
push eax
call dword [0x425038]
cmp eax, 1
je 0x41334b
test eax, eax
je 0x41334b
cmp eax, 2
jne 0x413381
lea eax, [esp + 0x128]
jmp 0x413352
lea eax, [esp + 0xd4]
xor ecx, ecx
mov dword [esp + 0x1a], 0x720049
mov word [esp + 0x22], cx
lea ecx, [esp + 0x1a]
push ecx
push eax
mov dword [esp + 0x26], 0x6e0061
call dword [0x4252d0]
test eax, eax
je 0x413381
push 0
call dword [0x425068]
call dword [0x4253c8]
movzx esi, ax
call dword [0x4253bc]
mov ecx, 0x429
movzx eax, ax
cmp si, cx
je 0x4133a2
cmp ax, cx
jne 0x4133aa
push 0
call dword [0x425068]
mov esi, dword [section..qata]
xor ecx, ecx
mov edx, 0x39
test esi, esi
je 0x4133da
mov edi, 0x7fffffff
imul eax, edx, 0x7fffffed
xor edx, edx
add eax, 0x7fffffc3
div edi
xor byte [ecx + 0x426004], dl
inc ecx
cmp ecx, esi
jb 0x4133c0
mov edx, esi
mov ecx, 0x426004
call fcn.00407310
call fcn.00402c50
mov dword [esp + 0x40], 3
lea esi, [esp + 0x40]
mov dword [esp + 0x44], 0x11
mov eax, 3
mov dword [esp + 0x48], 0x14
mov dword [esp + 0x4c], 0x24
mov dword [esp + 0x50], 0x1d
mov dword [esp + 0x54], 0xe
mov dword [esp + 0x58], 5
mov dword [esp + 0x5c], 0x21
mov dword [esp + 0x60], 0x1c
mov dword [esp + 0x64], 0xd
mov dword [esp + 0x68], 0x12
mov dword [esp + 0x6c], 8
mov dword [esp + 0x70], 0xb
mov dword [esp + 0x74], 9
mov dword [esp + 0x78], 0x13
mov dword [esp + 0x7c], 0
mov byte [esp + 0x13], 0
lea esp, [esp]
lea ecx, [esp + 0x13]
push ecx
push 0
push 1
push eax
lea esi, [esi + 4]
call dword [0x425300]
mov eax, dword [esi]
test eax, eax
jne 0x413480
cmp dword [0x425440], eax
jne 0x413590
cmp dword [0x425438], eax
je 0x413590
lea eax, [esp + 0x14]
push eax
push 8
call dword [0x425294]
push eax
call dword [0x42521c]
test eax, eax
je 0x413590
lea eax, [esp + 0x3c]
mov dword [esp + 0x3c], 0
push eax
push 0x4c
lea eax, [esp + 0x88]
push eax
push 1
push dword [esp + 0x24]
call dword [0x42502c]
test eax, eax
je 0x413586
mov esi, dword [esp + 0x80]
push esi
call dword [0x4251d0]
mov edx, 0x423f0c
mov ecx, dword [eax]
cmp ecx, dword [edx]
jne 0x413586
movzx eax, word [eax + 4]
cmp ax, word [edx + 4]
jne 0x413586
cmp dword [esi + 8], 0x12
jne 0x413586
push dword [esp + 0x14]
call dword [0x4251e0]
push 0x104
lea eax, [esp + 0x38c]
push eax
push 0
call dword [0x425084]
lea eax, [esp + 0x388]
push eax
call dword [0x42517c]
mov esi, eax
push esi
call dword [0x42522c]
xor ecx, ecx
push 0x425b98
mov word [eax], cx
mov dword [0x425b98], esi
mov dword [0x425b9c], 0x419110
call dword [0x42527c]
call fcn.00419170
push 0
call dword [0x425068]
jmp 0x413590
push dword [esp + 0x14]
call dword [0x4251e0]
cmp dword [0x425454], 0
je 0x4135c4
push 0
push 0
push 0
push 0x40cb40
push 0
push 0
call dword [0x425348]
mov esi, eax
test esi, esi
je 0x4135c4
push 0xffffffffffffffff
push esi
call dword [0x42523c]
push esi
call dword [0x4251e0]
cmp dword [0x425458], 0
je 0x41365a
push 0x4256a8
lea eax, [esp + 0x28]
mov dword [esp + 0x28], 0x6c0047
push eax
lea eax, [esp + 0x188]
mov dword [esp + 0x30], 0x62006f
push eax
mov dword [esp + 0x38], 0x6c0061
mov dword [esp + 0x3c], 0x25005c
mov dword [esp + 0x40], 0x73
call dword [0x4250b4]
add esp, 0xc
lea eax, [esp + 0x180]
push eax
push 0
push 0x1f0001
call dword [0x4251e8]
mov dword [0x425998], eax
test eax, eax
je 0x413643
push eax
call dword [0x4251e0]
push 0
call dword [0x425068]
jmp 0x41365a
lea eax, [esp + 0x180]
push eax
push 1
push 0
call dword [0x4251f8]
mov dword [0x425998], eax
call fcn.0040b570
call fcn.00412e70
push 0
call dword [0x425068]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret