Function at 0x40b4a0
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x90
mov dword [esp + 0x28], 0x6ebaaaaf
mov dword [esp + 0x2c], 0xb2b4b8bc
lea edx, [esp + 0x30]
mov byte [esp + 0x30], 0x54
mov dword [esp + 0x31], 0
mov byte [esp + 0x35], 0
mov dword [esp + 0x1c], 0
mov eax, dword [esp + 0x1c]
cmp eax, 0xd
ja 0x40b52e
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1c]
movzx ecx, byte [esp + ecx + 0x28]
lea esi, [eax + ecx]
add eax, 0xd
and eax, ecx
add eax, eax
sub esi, eax
add esi, 0x16718a0d
mov dword [esp + 0xc], esi
mov eax, dword [esp + 0xc]
add al, 0xbf
mov ecx, dword [esp + 0x1c]
mov byte [esp + ecx + 0x28], al
inc dword [esp + 0x1c]
mov eax, dword [esp + 0x1c]
cmp eax, 0xe
jb 0x40b4f0
lea eax, [esp + 0x1c]
lea esi, [esp + 0x28]
mov ebx, esi
mov edi, eax
mov ecx, 2
xchg esi, ebx
rep movsd dword es:[edi], dword [esi]
xchg esi, ebx
lea edi, [esp + 0x24]
xor ecx, ecx
xchg esi, edx
rep movsw word es:[edi], word [esi]
xchg esi, edx
movzx ecx, byte [esp + 0x30]
mov byte [esp + 0x24], cl
mov dword [esp + 0x28], 0x9f6d995f
mov dword [esp + 0x2c], 0xa3569d6e
mov dword [esp + 0x30], 0xa754a145
mov dword [esp + 0x34], 0xab87a550
mov dword [esp + 0x38], 0xaf57a97c
mov dword [esp + 0x3c], 0xb357ad5c
mov dword [esp + 0x40], 0xb796b18e
mov dword [esp + 0x44], 0xbb4ab555
mov dword [esp + 0x48], 0xbf52b948
mov dword [esp + 0x4c], 0x43a5bd55
mov dword [esp + 0x50], 0x47b241a1
mov dword [esp + 0x54], 0x4bb945ad
mov dword [esp + 0x58], 0x4f7d49ba
mov dword [esp + 0x5c], 0x537f4db4
mov dword [esp + 0x60], 0x57ad51ab
mov dword [esp + 0x64], 0x5b7755af
mov dword [esp + 0x68], 0x5fad59b2
mov dword [esp + 0x6c], 0x638f5daa
mov dword [esp + 0x70], 0x6793614d
mov dword [esp + 0x74], 0x6b866592
mov dword [esp + 0x78], 0x6f9c698d
mov dword [esp + 0x7c], 0x73816d8b
mov dword [esp + 0x80], 0x77937194
mov dword [esp + 0x84], 0x7b777590
mov dword [esp + 0x88], 0x7f7e7976
mov word [esp + 0x8c], 0
mov dword [esp], 0
mov ecx, dword [esp]
cmp ecx, 0x65
ja 0x40b680
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [esp]
mov edx, dword [esp]
movzx edx, byte [esp + edx + 0x28]
add ecx, 0xb24bb8da
xor ecx, edx
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0xc]
add cl, 0xbe
mov edx, dword [esp]
mov byte [esp + edx + 0x28], cl
inc dword [esp]
mov ecx, dword [esp]
cmp ecx, 0x66
jb 0x40b650
mov ecx, dword [esp + 0xa4]
mov dword [esp + 0xc], 0x3e3012f
mov dword [esp + 0x10], 0x7ef05f4
mov dword [esp + 0x14], 0x908
mov byte [esp + 0x18], 0
mov dword [esp + 4], 0
mov edx, dword [esp + 4]
cmp edx, 0xc
ja 0x40b6f3
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, dword [esp + 4]
mov edi, dword [esp + 4]
movzx edi, byte [esp + edi + 0xc]
add edx, 0x575a0bc0
xor edx, edi
mov dword [esp], edx
mov edx, dword [esp]
add dl, 0x40
mov edi, dword [esp + 4]
mov byte [esp + edi + 0xc], dl
inc dword [esp + 4]
mov edx, dword [esp + 4]
cmp edx, 0xd
jb 0x40b6c0
lea edx, [esp + 4]
lea edi, [esp + 0xc]
push 0
push edx
push 8
push eax
push esi
push edi
push ecx
call fcn.0040c220
add esp, 0x1c
test al, al
je 0x40b844
mov word [esp + 0x28], 0xe21d
mov byte [esp + 0x2a], 0x8e
mov word [esp + 0x2b], 0
mov dword [esp], 0
mov eax, dword [esp]
cmp eax, 4
ja 0x40b76e
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp]
mov ecx, dword [esp]
movzx ecx, byte [esp + ecx + 0x28]
add eax, 0xa064fa9d
xor eax, ecx
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0xc]
add al, 0xef
mov ecx, dword [esp]
mov byte [esp + ecx + 0x28], al
inc dword [esp]
mov eax, dword [esp]
cmp eax, 5
jb 0x40b740
xor eax, eax
mov ecx, dword [esp + 4]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [ecx + eax]
mov dh, byte [esp + eax + 0x28]
test dl, dl
je 0x40b791
inc eax
cmp dl, dh
je 0x40b780
mov al, 1
mov dword [esp + 8], eax
cmp dl, dh
je 0x40ba32
mov dword [esp + 0x28], 0x65171061
mov dword [esp + 0x2c], 0xe574766f
mov byte [esp + 0x30], 0
mov dword [esp], 0
mov eax, dword [esp]
cmp eax, 8
ja 0x40b7fe
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp]
mov ecx, dword [esp]
movzx ecx, byte [esp + ecx + 0x28]
add eax, 0x5aad262b
xor eax, ecx
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0xc]
add al, 0x29
mov ecx, dword [esp]
mov byte [esp + ecx + 0x28], al
inc dword [esp]
mov eax, dword [esp]
cmp eax, 9
jb 0x40b7d0
mov eax, dword [esp + 4]
movzx ebx, byte [esp + 0x28]
test bl, bl
je 0x40b84b
mov edx, esi
mov ecx, eax
jmp 0x40b827
movzx ebx, byte [edx]
test bl, bl
je 0x40b84d
mov bh, byte [eax]
test bh, bh
je 0x40ba2a
inc eax
inc edx
lea edi, [ecx + 1]
cmp bh, bl
je 0x40b83e
mov ecx, edi
mov eax, edi
je 0x40b820
mov edx, esi
jmp 0x40b820
xor eax, eax
jmp 0x40ba42
mov ecx, eax
test ecx, ecx
je 0x40ba2a
mov dword [esp + 0x28], 0xf2e9f4ee
mov dword [esp + 0x2c], 0xd9c989db
mov dword [esp + 0x30], 0x818cd6d5
mov dword [esp + 0x34], 0xd6dac0da
mov dword [esp + 0x38], 0xa984e8c7
mov word [esp + 0x3c], 0
mov byte [esp + 0x3e], 0
mov dword [esp], 0
mov eax, dword [esp]
cmp eax, 0x16
ja 0x40b8ce
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp]
mov ecx, dword [esp]
movzx ecx, byte [esp + ecx + 0x28]
add eax, 0xbb42c49b
xor eax, ecx
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0xc]
add al, 0xf9
mov ecx, dword [esp]
mov byte [esp + ecx + 0x28], al
inc dword [esp]
mov eax, dword [esp]
cmp eax, 0x17
jb 0x40b8a0
mov eax, dword [esp + 4]
movzx ecx, byte [esp + 0x28]
test cl, cl
je 0x40b914
lea edi, [esp + 0x28]
mov edx, edi
mov esi, eax
jmp 0x40b8f7
movzx ecx, byte [edx]
test cl, cl
je 0x40b916
mov ch, byte [eax]
test ch, ch
je 0x40ba2a
inc eax
inc edx
lea ebx, [esi + 1]
cmp ch, cl
je 0x40b90e
mov esi, ebx
mov eax, ebx
je 0x40b8f0
mov edx, edi
jmp 0x40b8f0
mov esi, eax
test esi, esi
je 0x40ba2a
mov dword [esp], 0x22ef02
mov dword [esp + 0xc], 0
mov eax, dword [esp + 0xc]
cmp eax, 3
ja 0x40b97e
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xc]
movzx ecx, byte [esp + ecx]
lea edx, [eax + ecx]
add eax, 0xf8
and eax, ecx
add eax, eax
sub edx, eax
add edx, 0x9214f4f8
mov dword [esp + 0x28], edx
mov eax, dword [esp + 0x28]
add al, 0x28
mov ecx, dword [esp + 0xc]
mov byte [esp + ecx], al
inc dword [esp + 0xc]
mov eax, dword [esp + 0xc]
cmp eax, 4
jb 0x40b940
movzx eax, byte [esp]
test al, al
je 0x40b9c0
add esi, 0x13
mov ebp, esp
mov ecx, ebp
mov edx, esi
mov edi, esi
jmp 0x40b9a7
movzx eax, byte [ecx]
test al, al
je 0x40b9d1
mov ah, byte [edx]
test ah, ah
je 0x40ba2a
inc edx
inc ecx
lea ebx, [edi + 1]
cmp ah, al
je 0x40b9ba
mov edi, ebx
mov edx, ebx
je 0x40b9a0
mov ecx, ebp
jmp 0x40b9a0
mov byte [0x442d48], 1
mov eax, 0x442d4a
jmp 0x40ba53
test edi, edi
je 0x40ba2a
mov byte [0x442d48], 1
mov dword [esp + 0x28], 0
mov eax, 0x442d4a
cmp esi, edi
jae 0x40ba53
xor ebx, ebx
lea ebp, [esp + 0x28]
cmp byte [esi], 0
je 0x40ba4d
push ebp
push edi
push esi
call fcn.0040d1b0
add esp, 0xc
movzx edx, word [esp + 0x28]
lea ecx, [ebx + 2]
mov word [ebx + 0x442d4a], dx
cmp ebx, 0x1fb
ja 0x40ba22
add esi, eax
mov ebx, ecx
cmp esi, edi
jb 0x40b9f3
lea eax, [ecx + 0x442d4a]
jmp 0x40ba53
mov dword [esp + 8], 0
push dword [esp + 4]
call fcn.00433ff0
add esp, 4
mov eax, dword [esp + 8]
add esp, 0x90
pop esi
pop edi
pop ebx
pop ebp
ret
lea eax, [ebx + 0x442d4a]
mov word [eax], 0
jmp 0x40ba32