Function at 0x40a3a0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x368
mov eax, dword [0x445f74]
mov cl, byte [esp + 0x20]
mov byte [esp + 0x24], cl
mov byte [esp + 0x28], 0x9f
mov byte [esp + 0x29], 0x15
mov byte [esp + 0x2a], 0x8b
mov byte [esp + 0x2b], 0xb
mov byte [esp + 0x2c], 0x98
mov byte [esp + 0x2d], 9
mov byte [esp + 0x2e], 0x90
mov byte [esp + 0x2f], 0xf
mov byte [esp + 0x30], 0x9a
mov byte [esp + 0x31], 0xd
mov byte [esp + 0x32], 0x98
mov byte [esp + 0x33], 3
mov byte [esp + 0x34], 0x92
mov byte [esp + 0x35], 1
mov byte [esp + 0x36], 0x52
mov byte [esp + 0x37], 7
mov byte [esp + 0x38], 0xa2
mov byte [esp + 0x39], 5
mov byte [esp + 0x3a], 0x98
mov byte [esp + 0x3b], 0x7b
mov byte [esp + 0x3c], 0xe6
mov byte [esp + 0x3d], 0x79
mov byte [esp + 0x3e], pe_nt_image_headers32
mov byte [esp + 0x3f], 0x7f
mov word [esp + 0x40], 0
jmp 0x40a43d
jmp 0x40a43f
mov dword [esp + 0x14], 0
mov ecx, dword [esp + 0x14]
cmp ecx, 0x1a
jae 0x40a4a9
jmp 0x40a452
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x14]
movzx edx, byte [esp + edx + 0x28]
add ecx, 0xeb97cdad
mov esi, ecx
and esi, edx
mov edi, ecx
xor edi, edx
lea esi, [edi + esi*2]
or ecx, edx
xor edi, ecx
add edi, edi
sub esi, edi
mov dword [esp + 0x5c], esi
mov ecx, dword [esp + 0x5c]
add cl, 0x45
mov edx, dword [esp + 0x14]
mov byte [esp + edx + 0x28], cl
mov ecx, dword [esp + 0x14]
mov edx, ecx
xor edx, 1
and ecx, 1
lea ecx, [edx + ecx*2]
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0x14]
cmp ecx, 0x1a
jb 0x40a452
jmp 0x40a4a9
lea ecx, [esp + 0x28]
xor edx, edx
mov dword [esp], ecx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x800
call eax
sub esp, 0xc
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x58]
lea ecx, [0x445f3c]
mov dword [esp], eax
call fcn.00436570
sub esp, 4
jmp 0x40a4e2
jmp 0x40a4e4
test al, 1
jne 0x40a4fe
jmp 0x40a4ea
mov byte [esp + 0xf], 0
mov dword [esp + 0x10], 1
jmp 0x40a4f9
jmp 0x40a7d7
mov eax, dword [0x445f3c]
mov dword [esp], eax
mov dword [esp + 4], 0xcd5bd590
call fcn.00438ca0
mov dword [0x445f44], eax
mov eax, dword [0x445f3c]
mov dword [esp], eax
mov dword [esp + 4], 0x3098095e
call fcn.00438ca0
mov dword [0x445f48], eax
mov eax, dword [0x445f3c]
mov dword [esp], eax
mov dword [esp + 4], 0x4133be71
call fcn.00438ca0
mov dword [0x445f4c], eax
mov eax, dword [0x445f3c]
mov dword [esp], eax
mov dword [esp + 4], 0x1c8a781f
call fcn.00438ca0
mov dword [0x445f50], eax
mov eax, dword [0x445f3c]
mov dword [esp], eax
mov dword [esp + 4], 0x71c23cd8
call fcn.00438ca0
mov dword [0x445f54], eax
mov eax, dword [0x445f3c]
mov dword [esp], eax
mov dword [esp + 4], 0x1c121576
call fcn.00438ca0
mov dword [0x445f58], eax
mov eax, dword [0x445f3c]
mov dword [esp], eax
mov dword [esp + 4], 0x21bbc64b
call fcn.00438ca0
mov dword [0x445f5c], eax
mov eax, dword [0x445f3c]
mov dword [esp], eax
mov dword [esp + 4], 0x8d2eb73e
call fcn.00438ca0
mov dword [0x445f60], eax
mov eax, dword [0x445f3c]
mov dword [esp], eax
mov dword [esp + 4], 0xde1934d7
call fcn.00438ca0
mov dword [0x445f64], eax
mov eax, dword [0x445f3c]
mov dword [esp], eax
mov dword [esp + 4], 0xa2add3c4
call fcn.00438ca0
mov dword [0x445f68], eax
jmp 0x40a604
jmp 0x40a606
mov eax, dword [0x445f3c]
mov dword [esp], eax
mov dword [esp + 4], 0x1f4c40ff
call fcn.00438ca0
mov dword [0x445f6c], eax
mov eax, dword [0x445f3c]
mov dword [esp], eax
mov dword [esp + 4], 0xfe8974d2
call fcn.00438ca0
mov dword [0x445f70], eax
lea eax, [0x43c5f4]
mov dword [esp + 0x60], eax
jmp 0x40a646
jmp 0x40a648
jmp 0x40a64a
lea eax, [0x43c5f4]
mov dword [esp + 0x18], eax
jmp 0x40a656
jmp 0x40a658
lea eax, [0x43c5f4]
add eax, 0x24
mov dword [esp + 0x54], eax
jmp 0x40a667
jmp 0x40a669
jmp 0x40a66b
mov eax, dword [esp + 0x18]
cmp eax, dword [esp + 0x54]
setne al
test al, 1
jne 0x40a689
jmp 0x40a67c
mov dword [esp + 0x10], 2
jmp 0x40a7b9
mov eax, dword [esp + 0x18]
mov eax, dword [eax]
mov dword [esp + 0x50], eax
lea eax, [esp + 0x64]
mov ecx, dword [esp + 0x50]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00433840
jmp 0x40a6a9
lea esi, [esp + 0x64]
jmp 0x40a6af
lea ebx, [esp + 0x164]
mov eax, ebx
add eax, 0x200
mov dword [esp + 0x1c], eax
mov ecx, esi
mov eax, ecx
mov dl, byte [eax]
add ecx, 1
cmp dl, 0
jne 0x40a6c3
sub eax, esi
mov edi, esi
add edi, eax
mov dword [esp + 0x4c], 0
mov eax, dword [esp + 0x1c]
add eax, 0xfffffffe
cmp edi, esi
ja 0x40a6ea
jmp 0x40a737
mov dword [esp + 0x1c], eax
jmp 0x40a6f0
cmp byte [esi], 0
jne 0x40a6f9
mov eax, ebx
jmp 0x40a735
lea eax, [esp + 0x4c]
mov dword [esp + 8], eax
mov dword [esp + 4], edi
mov dword [esp], esi
call fcn.0040eb20
add esi, eax
mov cx, word [esp + 0x4c]
mov eax, ebx
add eax, 2
mov word [ebx], cx
mov ecx, eax
sub ecx, dword [esp + 0x1c]
setb cl
mov edx, esi
sub edx, edi
setb dl
and cl, dl
test cl, 1
mov ebx, eax
jne 0x40a6f0
mov ebx, eax
mov word [ebx], 0
lea eax, [esp + 0x164]
mov dword [esp], eax
call fcn.0040a7f0
test al, 1
jne 0x40a751
jmp 0x40a77d
lea eax, [esp + 0x164]
lea ecx, [0x445f78]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040b2d0
jmp 0x40a76c
mov byte [esp + 0xf], 1
mov dword [esp + 0x10], 1
jmp 0x40a77b
jmp 0x40a787
mov dword [esp + 0x10], 0
jmp 0x40a787
jmp 0x40a789
mov eax, dword [esp + 0x10]
jmp 0x40a78f
cmp eax, 0
jne 0x40a79e
mov dword [esp + 0x10], 0
jmp 0x40a79e
cmp dword [esp + 0x10], 0
jne 0x40a7b7
jmp 0x40a7a7
mov eax, dword [esp + 0x18]
add eax, 4
mov dword [esp + 0x18], eax
jmp 0x40a66b
jmp 0x40a7b9
jmp 0x40a7bb
mov eax, dword [esp + 0x10]
jmp 0x40a7c1
cmp eax, 2
jne 0x40a7d7
mov byte [esp + 0xf], 0
mov dword [esp + 0x10], 1
jmp 0x40a7d5
jmp 0x40a7d7
mov al, byte [esp + 0xf]
and al, 1
movzx eax, al
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret