Function at 0x40df00
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x80
mov eax, dword [0x4af6f0]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
mov ecx, dword [ebp + 0x10]
push ebx
push esi
push edi
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x40], ecx
test eax, eax
je 0x40e6e7
mov eax, dword [ebp + 0xc]
test eax, eax
je 0x40e6e7
test ecx, ecx
je 0x40e6e7
mov edi, dword [ebp + 0x14]
test edi, edi
je 0x40e6e7
mov ecx, eax
and ecx, 7
je 0x40df54
sub eax, ecx
add eax, 8
push eax
call fcn.0040ac20
push 1
mov esi, eax
call fcn.0040ac20
add esi, eax
push 8
mov dword [ebp - 0x7c], esi
call fcn.0040ac20
mov ebx, eax
add esi, ebx
mov dword [ebp - 0x78], esi
add esi, 3
add esp, 0xc
mov dword [ebp - 0x50], ebx
cmp edi, esi
jbe 0x40e6e0
lea eax, [edi + 8]
cmp eax, 0x400
ja 0x40dfa4
call fcn.004705a0
mov eax, esp
test eax, eax
je 0x40dfba
mov dword [eax], 0xcccc
jmp 0x40dfb7
push eax
call fcn.00470108
add esp, 4
test eax, eax
je 0x40dfba
mov dword [eax], 0xdddd
add eax, 8
mov dword [ebp - 0x48], eax
test eax, eax
je 0x40e6cb
lea eax, [ebx + 9]
cmp eax, 0x400
ja 0x40dfe2
call fcn.004705a0
mov eax, esp
test eax, eax
je 0x40dff8
mov dword [eax], 0xcccc
jmp 0x40dff5
push eax
call fcn.00470108
add esp, 4
test eax, eax
je 0x40dff8
mov dword [eax], 0xdddd
add eax, 8
mov dword [ebp - 0x44], eax
test eax, eax
je 0x40e6aa
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edx, 8
lea esi, [ebp - 0x14]
lea edi, [edx - 4]
mov ecx, 0x20
sub ecx, edx
mov ebx, eax
shr ebx, cl
add edx, 8
inc esi
sub edi, 1
mov byte [esi - 1], bl
jne 0x40e014
mov edi, dword [ebp - 0x40]
xor edi, dword [ebp - 0x54]
mov eax, 8
lea esi, [ebp - 0x10]
lea edx, [eax - 4]
mov ecx, 0x20
sub ecx, eax
mov ebx, edi
shr ebx, cl
add eax, 8
inc esi
sub edx, 1
mov byte [esi - 1], bl
jne 0x40e03c
mov byte [ebp - 0xc], 0xb2
mov byte [ebp - 0xb], 0x33
mov byte [ebp - 0xa], 0x65
mov byte [ebp - 9], 0x8b
mov byte [ebp - 8], 0x2d
mov byte [ebp - 7], 0xc3
mov byte [ebp - 6], 0x17
mov byte [ebp - 5], 0x4d
xor eax, eax
lea ecx, [edx + 8]
jmp 0x40e080
mov dl, byte [ebp + eax - 0xc]
xor dl, byte [ebp + eax - 0x14]
inc eax
sub ecx, 1
mov byte [ebp + eax - 0x1d], dl
jne 0x40e080
movzx eax, byte [ebp - 0x1c]
xor edi, edi
and eax, 0x80000007
lea esi, [ecx + 8]
jns 0x40e0a7
dec eax
or eax, 0xfffffff8
inc eax
movzx eax, byte [ebp + eax - 0x1c]
cdq
mov ecx, 5
idiv ecx
lea eax, [ebp + edx - 0x1c]
lea edx, [ecx - 1]
jmp 0x40e0c0
movzx ebx, byte [eax]
mov ecx, 0x20
sub ecx, esi
shl ebx, cl
add esi, 8
inc eax
or edi, ebx
sub edx, 1
jne 0x40e0c0
movzx edx, byte [ebp - 0x15]
and edx, 0x80000007
mov dword [ebp - 0x38], edi
jns 0x40e0eb
dec edx
or edx, 0xfffffff8
inc edx
movzx eax, byte [ebp + edx - 0x1c]
and eax, 0x80000001
jns 0x40e0fc
dec eax
or eax, 0xfffffffe
inc eax
mov byte [ebp - 0x4c], al
movzx eax, al
mov dword [ebp - 0x3c], eax
and eax, 0x80000001
jns 0x40e111
dec eax
or eax, 0xfffffffe
inc eax
je 0x40e36d
mov eax, 0x10
call fcn.0046f160
mov edi, esp
test edi, edi
je 0x40e570
mov dword [edi], 0xcccc
add edi, 8
mov dword [ebp - 8], edi
je 0x40e570
push 8
lea eax, [ebp - 0x1c]
push eax
push 8
push edi
call fcn.004736d4
mov ecx, dword [ebp - 0x38]
add esp, 0x10
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x34], edi
xor edx, edx
mov eax, 8
lea esi, [edx + 4]
movzx ebx, byte [edi]
mov ecx, 0x20
sub ecx, eax
shl ebx, cl
add eax, 8
inc edi
or edx, ebx
sub esi, 1
jne 0x40e168
mov eax, dword [ebp + 0x18]
mov ecx, dword [ebp - 0x4c]
push eax
mov eax, dword [ebp - 0x28]
push ecx
push eax
push edx
call fcn.00406120
mov edx, 8
mov dword [ebp - 0x80], eax
add esp, 0x10
lea esi, [ebp - 0x10]
lea eax, [edx - 4]
mov ebx, dword [ebp - 0x80]
mov ecx, 0x20
sub ecx, edx
shr ebx, cl
add edx, 8
inc esi
sub eax, 1
mov byte [esi - 1], bl
jne 0x40e1a2
mov esi, dword [ebp - 0x30]
mov eax, dword [ebp - 0x34]
mov edx, 2
sub edx, esi
push 4
lea ecx, [ebp - 0x10]
add edx, edx
push ecx
add edx, edx
push edx
push eax
call fcn.004736d4
mov ecx, dword [ebp - 0x38]
add dword [ebp - 0x28], ecx
inc esi
add esp, 0x10
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x34], edi
cmp esi, 2
jb 0x40e15e
mov eax, 0x108
call fcn.004705a0
mov eax, esp
mov dword [ebp - 0x34], esp
test eax, eax
je 0x40e210
mov dword [eax], 0xcccc
add eax, 8
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x14], eax
mov eax, 0x108
call fcn.004705a0
mov eax, esp
mov dword [ebp - 0x28], esp
test eax, eax
je 0x40e232
mov dword [eax], 0xcccc
add eax, 8
mov dword [ebp - 0x28], eax
mov edx, dword [ebp - 0x38]
mov dword [ebp - 0x10], eax
xor eax, eax
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x30], eax
lea eax, [edx*8]
push eax
xor bl, bl
call fcn.00413ee0
add esp, 4
call fcn.004140d0
and al, 7
mov cl, al
shr cl, 5
mov byte [ebp - 0x29], cl
movzx edi, byte [ebp - 0x29]
movzx esi, al
mov ecx, esi
and ecx, 0x1f
mov edx, 1
shl edx, cl
mov ecx, dword [ebp + edi*4 - 0x74]
lea edi, [ebp + edi*4 - 0x74]
test edx, ecx
jne 0x40e2aa
or ecx, edx
mov edx, dword [ebp - 0x34]
mov dword [edi], ecx
movzx ecx, bl
mov byte [ecx + edx], al
mov eax, dword [ebp - 0x28]
mov byte [esi + eax], bl
inc bl
inc dword [ebp - 0x30]
cmp bl, 8
jae 0x40e2f6
mov ecx, 0x800
cmp word [ebp - 0x30], cx
jb 0x40e267
mov esi, dword [ebp - 0x28]
xor dl, dl
cmp bl, 8
jae 0x40e2f6
movzx eax, dl
mov ecx, eax
and ecx, 0x1f
mov edi, 1
shl edi, cl
mov ecx, eax
shr ecx, 5
test dword [ebp + ecx*4 - 0x74], edi
jne 0x40e2ef
mov edi, dword [ebp - 0x34]
movzx ecx, bl
mov byte [ecx + edi], dl
mov byte [eax + esi], bl
inc bl
inc dl
cmp dl, 8
jb 0x40e2c2
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp + edx*4 - 0x14]
mov ebx, dword [ebp - 8]
xor edi, edi
lea ecx, [ebp - 0x24]
lea esi, [edi + 8]
movzx edx, byte [eax]
add edx, edi
mov dl, byte [edx + ebx]
mov byte [ecx], dl
inc eax
inc ecx
sub esi, 1
jne 0x40e308
mov eax, dword [ebp - 0x34]
test eax, eax
je 0x40e334
add eax, 0xfffffff8
cmp dword [eax], 0xdddd
jne 0x40e334
push eax
call fcn.0046ec03
add esp, 4
mov eax, dword [ebp - 0x28]
test eax, eax
je 0x40e34f
add eax, 0xfffffff8
cmp dword [eax], 0xdddd
jne 0x40e34f
push eax
call fcn.0046ec03
add esp, 4
cmp dword [ebx - 8], 0xdddd
lea eax, [ebx - 8]
jne 0x40e570
push eax
call fcn.0046ec03
add esp, 4
jmp 0x40e570
mov eax, 0x108
call fcn.004705a0
mov eax, esp
mov dword [ebp - 0x28], esp
test eax, eax
je 0x40e38c
mov dword [eax], 0xcccc
add eax, 8
mov dword [ebp - 0x28], eax
mov dword [ebp - 0xc], eax
mov eax, 0x108
call fcn.004705a0
mov eax, esp
mov dword [ebp - 0x34], esp
test eax, eax
je 0x40e3ae
mov dword [eax], 0xcccc
add eax, 8
mov dword [ebp - 0x34], eax
mov dword [ebp - 8], eax
xor eax, eax
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x30], eax
lea eax, [edi*8]
push eax
xor bl, bl
call fcn.00413ee0
add esp, 4
call fcn.004140d0
and al, 7
mov cl, al
shr cl, 5
mov byte [ebp - 0x29], cl
movzx edi, byte [ebp - 0x29]
movzx esi, al
mov ecx, esi
and ecx, 0x1f
mov edx, 1
shl edx, cl
mov ecx, dword [ebp + edi*4 - 0x74]
lea edi, [ebp + edi*4 - 0x74]
test edx, ecx
jne 0x40e423
or ecx, edx
mov edx, dword [ebp - 0x28]
mov dword [edi], ecx
movzx ecx, bl
mov byte [ecx + edx], al
mov eax, dword [ebp - 0x34]
mov byte [esi + eax], bl
inc bl
inc dword [ebp - 0x30]
cmp bl, 8
jae 0x40e474
mov ecx, 0x800
cmp word [ebp - 0x30], cx
jb 0x40e3e0
mov esi, dword [ebp - 0x34]
xor dl, dl
jmp 0x40e440
cmp bl, 8
jae 0x40e474
movzx eax, dl
mov ecx, eax
and ecx, 0x1f
mov edi, 1
shl edi, cl
mov ecx, eax
shr ecx, 5
test dword [ebp + ecx*4 - 0x74], edi
jne 0x40e46d
mov edi, dword [ebp - 0x28]
movzx ecx, bl
mov byte [ecx + edi], dl
mov byte [eax + esi], bl
inc bl
inc dl
cmp dl, 8
jb 0x40e440
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp + edx*4 - 0xc]
xor edi, edi
lea ecx, [ebp - 0x24]
lea esi, [edi + 8]
movzx edx, byte [eax]
add edx, edi
mov dl, byte [ebp + edx - 0x1c]
mov byte [ecx], dl
inc eax
inc ecx
sub esi, 1
jne 0x40e483
mov eax, dword [ebp - 0x28]
cmp eax, edi
je 0x40e4b0
add eax, 0xfffffff8
cmp dword [eax], 0xdddd
jne 0x40e4b0
push eax
call fcn.0046ec03
add esp, 4
mov eax, dword [ebp - 0x34]
cmp eax, edi
je 0x40e4cb
add eax, 0xfffffff8
cmp dword [eax], 0xdddd
jne 0x40e4cb
push eax
call fcn.0046ec03
add esp, 4
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x3c], edi
lea edi, [ebp - 0x24]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x28], edi
xor edx, edx
mov eax, 8
lea esi, [edx + 4]
movzx ebx, byte [edi]
mov ecx, 0x20
sub ecx, eax
shl ebx, cl
add eax, 8
inc edi
or edx, ebx
sub esi, 1
jne 0x40e4e4
mov ecx, dword [ebp + 0x18]
mov eax, dword [ebp - 0x4c]
push ecx
mov ecx, dword [ebp - 0x30]
push eax
push ecx
push edx
call fcn.00406120
mov edx, 8
mov dword [ebp - 8], eax
add esp, 0x10
lea esi, [ebp - 0x10]
lea eax, [edx - 4]
mov ebx, dword [ebp - 8]
mov ecx, 0x20
sub ecx, edx
shr ebx, cl
add edx, 8
inc esi
sub eax, 1
mov byte [esi - 1], bl
jne 0x40e51e
mov esi, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x28]
mov eax, 2
sub eax, esi
push 4
lea edx, [ebp - 0x10]
add eax, eax
push edx
add eax, eax
push eax
push ecx
call fcn.004736d4
mov edx, dword [ebp - 0x38]
add dword [ebp - 0x30], edx
inc esi
add esp, 0x10
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x28], edi
cmp esi, 2
jb 0x40e4da
lea ecx, [ecx]
xor edi, edi
mov eax, 8
lea edx, [ebp - 0x24]
lea esi, [edi + 4]
lea ecx, [ecx]
movzx ebx, byte [edx]
mov ecx, 0x20
sub ecx, eax
shl ebx, cl
add eax, 8
inc edx
or edi, ebx
sub esi, 1
jne 0x40e580
xor ebx, ebx
mov dword [ebp - 8], edi
lea edx, [ebp - 0x20]
mov eax, 8
lea esi, [ebx + 4]
jmp 0x40e5b0
movzx edi, byte [edx]
mov ecx, 0x20
sub ecx, eax
shl edi, cl
add eax, 8
inc edx
or ebx, edi
sub esi, 1
jne 0x40e5b0
mov eax, dword [ebp + 0x18]
mov ecx, dword [ebp - 8]
mov edi, dword [ebp + 0x14]
push eax
mov eax, dword [ebp - 0x40]
push ecx
mov ecx, dword [ebp + 0xc]
lea edx, [ebp - 0x24]
push edx
mov edx, dword [ebp - 0x54]
push edi
push eax
push ecx
push edx
call fcn.0040da20
mov esi, eax
add esp, 0x1c
test esi, esi
jne 0x40e6af
mov eax, dword [ebp + 0x18]
mov edx, dword [ebp - 0x50]
push eax
mov eax, dword [ebp - 0x44]
mov ecx, ebx
and ecx, 0x7fff
push ecx
inc edx
push edx
push eax
lea ecx, [ebp - 0x24]
push 8
push ecx
call fcn.0040ba80
mov esi, eax
add esp, 0x18
test esi, esi
jne 0x40e6af
mov dl, bl
and dl, 0x1f
movzx eax, dl
push eax
call fcn.0040ab20
mov ecx, ebx
shr ecx, 5
and cl, 0x1f
movzx edx, cl
push edx
mov byte [ebp - 0x38], al
call fcn.0040ab20
shr ebx, 0xa
mov byte [ebp - 0x37], al
and bl, 0x1f
movzx eax, bl
push eax
call fcn.0040ab20
mov ecx, dword [ebp - 0x50]
mov edx, dword [ebp - 0x44]
mov ebx, dword [ebp - 0x48]
push esi
push ecx
mov ecx, dword [ebp - 0x40]
push edx
mov byte [ebp - 0x36], al
mov eax, dword [ebp - 0x7c]
push eax
push edi
push ebx
push ecx
call fcn.0040aed0
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x40]
push 1
push 3
lea edx, [ebp - 0x38]
push edx
push eax
push edi
push ecx
push ebx
call fcn.0040aed0
mov edx, dword [ebp - 0x44]
add esp, 0x44
push edx
call fcn.0042dc80
mov eax, ebx
add esp, 4
push eax
call fcn.0042dc80
add esp, 4
mov eax, esi
jmp 0x40e6ec
mov esi, 8
mov edx, dword [ebp - 0x44]
push edx
call fcn.0042dc80
mov eax, dword [ebp - 0x48]
add esp, 4
push eax
call fcn.0042dc80
add esp, 4
mov eax, esi
jmp 0x40e6ec
mov eax, dword [ebp - 0x48]
push eax
mov esi, 8
call fcn.0042dc80
add esp, 4
mov eax, esi
jmp 0x40e6ec
mov eax, 0x7a
jmp 0x40e6ec
mov eax, 0x57
lea esp, [ebp - 0x8c]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0046ecfa
mov esp, ebp
pop ebp
ret