Function at 0x405f30
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x5c
mov eax, dword [esp + 0xac]
mov esi, dword [ecx + 0x48]
mov ebx, dword [esi + 4]
mov dword [esp + 0x58], ebx
test eax, eax
je 0x405f5e
cmp dword [esi + 0x34], 0
jne 0x405f5e
mov dword [ecx + 0x1c], 3
jmp 0x406575
mov dword [esp + 0x54], eax
mov dword [esp + 0x50], edx
movzx edx, word [esp + 0x78]
movzx eax, word [esp + 0x70]
movzx edx, dx
movzx ebp, word [esp + 0x80]
mov dword [esp + 0x40], edx
mov edi, eax
mov dword [esp + 0x44], eax
lea edi, [eax + edx]
add edi, ebp
mov eax, dword [esp + 0xb8]
xor edx, edx
add edi, eax
setb dl
add edi, ebx
adc edx, 0
add edi, 0x2e
adc edx, 0
cmp edi, 0xffffffff
sbb edx, 0
jb 0x405fb7
mov dword [ecx + 0x1c], 0xf
jmp 0x406575
mov dword [esp + 0x3c], ebp
mov dword [esp + 8], ebx
mov dword [esp + 4], ecx
mov dword [esp], esi
mov ebp, dword [esp + 0x90]
mov ecx, dword [esp + 0x88]
mov dword [esp + 0x48], ecx
mov edx, eax
mov dword [esp + 0x12], 0
mov dword [esp + 0x16], 0
mov dword [esp + 0x1a], 0
mov dword [esp + 0x1e], 0
mov dword [esp + 0x22], 0
mov dword [esp + 0x26], 0
mov dword [esp + 0x2a], 0
mov dword [esp + 0x2e], 0
mov word [esp + 0x32], 0
mov dword [esp + 0xe], 0x2014b50
movzx esi, word [esp + 0x9c]
movzx edi, word [esp + 0x98]
mov ebx, dword [esp + 0x94]
movzx ecx, word [esp + 0x78]
add ecx, eax
mov dword [esp + 0x4c], ecx
xor ecx, ecx
mov edx, 0
mov eax, edi
test di, di
je 0x40605b
mov dl, 0x14
mov byte [esp + 0x14], dl
mov edx, esi
mov byte [esp + 0x16], dl
mov byte [esp + 0x17], dh
mov byte [esp + 0x18], al
mov byte [esp + 0x19], ah
movzx eax, word [esp + 0xa0]
mov byte [esp + 0x1a], al
mov byte [esp + 0x1b], ah
movzx eax, word [esp + 0xa4]
mov byte [esp + 0x1c], al
mov byte [esp + 0x1d], ah
mov byte [esp + 0x1e], bl
mov byte [esp + 0x1f], bh
mov edx, ebx
shr edx, 0x10
mov byte [esp + 0x20], dl
shr ebx, 0x18
neg ebp
mov edx, 0
sbb edx, edx
mov byte [esp + 0x21], bl
or edx, dword [esp + 0x8c]
mov byte [esp + 0x22], dl
mov byte [esp + 0x23], dh
mov ebx, edx
shr ebx, 0x10
mov byte [esp + 0x24], bl
shr edx, 0x18
neg dword [esp + 0x48]
mov ebx, 0
sbb ebx, ebx
mov byte [esp + 0x25], dl
or ebx, dword [esp + 0x84]
mov byte [esp + 0x26], bl
mov byte [esp + 0x27], bh
mov edx, ebx
shr edx, 0x10
mov byte [esp + 0x28], dl
shr ebx, 0x18
mov byte [esp + 0x29], bl
movzx eax, word [esp + 0x70]
mov byte [esp + 0x2a], al
mov byte [esp + 0x2b], ah
mov eax, dword [esp + 0x4c]
mov byte [esp + 0x2c], al
mov byte [esp + 0x2d], ah
movzx edx, word [esp + 0x80]
mov byte [esp + 0x2e], dl
mov byte [esp + 0x2f], dh
mov eax, dword [esp + 0xb0]
mov byte [esp + 0x34], al
mov byte [esp + 0x35], ah
mov edx, eax
shr edx, 0x10
mov byte [esp + 0x36], dl
shr eax, 0x18
neg dword [esp + 0x54]
sbb ecx, ecx
mov byte [esp + 0x37], al
or ecx, dword [esp + 0xa8]
mov byte [esp + 0x38], cl
mov byte [esp + 0x39], ch
mov eax, ecx
shr eax, 0x10
mov byte [esp + 0x3a], al
shr ecx, 0x18
mov byte [esp + 0x3b], cl
mov edi, dword [esp + 8]
lea esi, [edi + 0x2e]
mov ebx, dword [esp]
mov eax, dword [ebx + 8]
cmp eax, esi
jae 0x4061d6
mov edi, 1
test eax, eax
je 0x4061a8
mov edi, eax
jmp 0x4061a8
mov eax, edi
and eax, 2
mov ecx, edi
or edi, 2
imul edi, eax
xor eax, 2
and ecx, 0xfffffffd
imul ecx, eax
add edi, ecx
cmp edi, esi
jb 0x406190
push edi
push dword [ebx + 0xc]
push dword [ebx]
mov eax, dword [esp + 0x10]
push dword [eax + 0x34]
call dword [eax + 0x30]
add esp, 0x10
test eax, eax
mov ecx, ebx
je 0x406544
mov dword [ecx], eax
mov dword [ecx + 8], edi
mov ebx, ecx
mov edi, dword [esp + 8]
jmp 0x4061d8
mov eax, dword [ebx]
mov dword [ebx + 4], esi
mov edx, dword [ebx + 0xc]
mov ecx, edx
imul ecx, edi
add ecx, eax
mov eax, edx
and eax, 0x2e
mov esi, edx
or edx, 0x2e
imul edx, eax
xor eax, 0x2e
and esi, 0xffffffd1
imul esi, eax
add edx, esi
lea eax, [esp + 0xe]
push edx
push eax
push ecx
call fcn.004084e0
add esp, 0xc
mov ebp, dword [ebx + 4]
mov eax, dword [ebx + 8]
mov ecx, dword [esp + 0x44]
lea edi, [ecx + ebp]
cmp eax, edi
jae 0x406272
mov esi, 1
test eax, eax
je 0x406248
mov esi, eax
jmp 0x406248
mov eax, esi
and eax, 2
mov ecx, esi
or esi, 2
imul esi, eax
xor eax, 2
and ecx, 0xfffffffd
imul ecx, eax
add esi, ecx
cmp esi, edi
jb 0x406230
push esi
push dword [ebx + 0xc]
push dword [ebx]
mov eax, dword [esp + 0x10]
push dword [eax + 0x34]
call dword [eax + 0x30]
add esp, 0x10
test eax, eax
mov ecx, ebx
je 0x406544
mov dword [ecx], eax
mov dword [ecx + 8], esi
mov ebx, ecx
jmp 0x406274
mov esi, eax
mov dword [ebx + 4], edi
cmp word [esp + 0x70], 0
je 0x4062b9
mov eax, dword [ebx + 0xc]
imul ebp, eax
add ebp, dword [ebx]
mov ecx, eax
not ecx
mov esi, dword [esp + 0x44]
and ecx, esi
mov edx, esi
not edx
and edx, eax
imul edx, ecx
mov ecx, eax
and ecx, esi
or eax, esi
imul eax, ecx
add eax, edx
push eax
push dword [esp + 0x54]
push ebp
call fcn.004084e0
add esp, 0xc
mov edi, dword [ebx + 4]
mov esi, dword [ebx + 8]
mov eax, dword [esp + 0x40]
lea ebp, [edi + eax]
cmp esi, ebp
jae 0x406324
mov ebx, 1
test esi, esi
je 0x4062f8
mov ebx, esi
jmp 0x4062f8
mov eax, ebx
and eax, 2
mov ecx, ebx
or ebx, 2
imul ebx, eax
xor eax, 2
and ecx, 0xfffffffd
imul ecx, eax
add ebx, ecx
cmp ebx, ebp
jb 0x4062e0
push ebx
mov esi, dword [esp + 4]
push dword [esi + 0xc]
push dword [esi]
mov eax, dword [esp + 0x10]
push dword [eax + 0x34]
call dword [eax + 0x30]
mov ecx, esi
add esp, 0x10
test eax, eax
je 0x406544
mov dword [ecx], eax
mov dword [ecx + 8], ebx
jmp 0x406328
mov ecx, ebx
mov ebx, esi
mov edx, dword [esp + 0xb8]
movzx eax, word [esp + 0x78]
mov dword [ecx + 4], ebp
test ax, ax
je 0x40637c
mov eax, dword [ecx + 0xc]
imul edi, eax
add edi, dword [ecx]
mov esi, ecx
mov ecx, eax
not ecx
mov ebx, dword [esp + 0x40]
and ecx, ebx
mov ebp, edx
mov edx, ebx
not edx
and edx, eax
imul edx, ecx
mov ecx, eax
and ecx, ebx
or eax, ebx
imul eax, ecx
add eax, edx
push eax
push dword [esp + 0x78]
push edi
call fcn.004084e0
mov edx, ebp
add esp, 0xc
mov ebp, dword [esi + 4]
mov ebx, dword [esi + 8]
lea edi, [edx + ebp]
cmp ebx, edi
jae 0x4063be
mov esi, 1
test ebx, ebx
je 0x40638e
mov esi, ebx
cmp esi, edi
jae 0x4063c5
mov ebx, dword [esp]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, esi
and eax, 2
mov ecx, esi
or esi, 2
imul esi, eax
xor eax, 2
and ecx, 0xfffffffd
imul ecx, eax
add esi, ecx
cmp esi, edi
jb 0x4063a0
jmp 0x4063c8
mov esi, ebx
mov ebx, dword [esp]
jmp 0x4063ec
mov ebx, dword [esp]
push esi
push dword [ebx + 0xc]
push dword [ebx]
mov eax, dword [esp + 0x10]
push dword [eax + 0x34]
call dword [eax + 0x30]
add esp, 0x10
test eax, eax
mov ecx, ebx
je 0x406544
mov dword [ecx], eax
mov dword [ecx + 8], esi
mov ebx, ecx
mov dword [ebx + 4], edi
mov edx, dword [esp + 0xb8]
test edx, edx
je 0x406433
mov eax, dword [ebx + 0xc]
imul ebp, eax
add ebp, dword [ebx]
mov ecx, eax
not ecx
and ecx, edx
mov esi, edx
not edx
and edx, eax
imul edx, ecx
mov ecx, eax
and ecx, esi
or eax, esi
imul eax, ecx
add eax, edx
push eax
push dword [esp + 0xb8]
push ebp
call fcn.004084e0
add esp, 0xc
mov edi, dword [ebx + 4]
mov esi, dword [ebx + 8]
mov ebp, dword [esp + 0x3c]
lea ebx, [edi + ebp]
cmp esi, ebx
jae 0x406496
mov ebp, 1
test esi, esi
je 0x406468
mov ebp, esi
jmp 0x406468
mov eax, ebp
and eax, 2
mov ecx, ebp
or ebp, 2
imul ebp, eax
xor eax, 2
and ecx, 0xfffffffd
imul ecx, eax
add ebp, ecx
cmp ebp, ebx
jb 0x406450
push ebp
mov esi, dword [esp + 4]
push dword [esi + 0xc]
push dword [esi]
mov eax, dword [esp + 0x10]
push dword [eax + 0x34]
call dword [eax + 0x30]
mov ecx, esi
add esp, 0x10
test eax, eax
je 0x406544
mov dword [ecx], eax
mov dword [ecx + 8], ebp
mov ebp, dword [esp + 0x3c]
mov eax, dword [esp]
mov dword [eax + 4], ebx
mov ebx, eax
cmp word [esp + 0x80], 0
je 0x4064dc
mov eax, dword [ebx + 0xc]
imul edi, eax
add edi, dword [ebx]
mov ecx, eax
not ecx
and ecx, ebp
mov edx, ebp
not edx
and edx, eax
imul edx, ecx
mov ecx, eax
and ecx, ebp
or eax, ebp
imul eax, ecx
add eax, edx
push eax
push dword [esp + 0x80]
push edi
call fcn.004084e0
add esp, 0xc
mov edi, dword [ebx + 0x14]
mov eax, dword [ebx + 0x18]
lea esi, [edi + 1]
cmp eax, esi
jae 0x40657f
mov ebx, 1
test eax, eax
je 0x406518
mov ebx, eax
jmp 0x406518
mov eax, ebx
and eax, 2
mov ecx, ebx
or ebx, 2
imul ebx, eax
xor eax, 2
and ecx, 0xfffffffd
imul ecx, eax
add ebx, ecx
cmp ebx, esi
jb 0x406500
push ebx
mov ebp, dword [esp + 4]
push dword [ebp + 0x1c]
push dword [ebp + 0x10]
mov eax, dword [esp + 0x10]
push dword [eax + 0x34]
call dword [eax + 0x30]
mov ecx, ebp
add esp, 0x10
test eax, eax
je 0x406544
mov dword [ecx + 0x10], eax
mov dword [ecx + 0x18], ebx
mov ebx, ecx
jmp 0x406582
mov ebx, dword [esp + 8]
cmp dword [ecx + 8], ebx
mov esi, ecx
mov edi, dword [esp + 4]
jae 0x40656b
push ebx
push dword [esi + 0xc]
push dword [esi]
push dword [edi + 0x34]
call dword [edi + 0x30]
add esp, 0x10
test eax, eax
je 0x40656e
mov dword [esi], eax
mov dword [esi + 8], ebx
mov dword [esi + 4], ebx
mov dword [edi + 0x1c], 0x10
xor eax, eax
add esp, 0x5c
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [ebx + 0x10]
mov dword [ebx + 0x14], esi
mov ecx, dword [ebx + 0x1c]
mov edx, ecx
not edx
imul edi, ecx
add edi, eax
mov eax, ecx
and eax, 1
neg eax
and edx, 1
mov esi, ecx
and esi, 0xfffffffe
imul esi, edx
or ecx, 1
and ecx, eax
add ecx, esi
lea eax, [esp + 0x58]
push ecx
push eax
push edi
call fcn.004084e0
add esp, 0xc
mov eax, 1
jmp 0x406577