Function at 0x420320
Capabilities:
Encode data using xor
Generate random numbers using the delphi lcg
Hash data with crc32

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x5ac
mov eax, dword [0x43c014]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
mov ebx, ecx
mov ecx, dword [ebp + 0xc]
push esi
push edi
mov dword [ebp - 0x5a0], ecx
cmp dword [ebx + 0x14], 0
je 0x420362
mov eax, 0x40000
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00426682
mov esp, ebp
pop ebp
ret 0x10
cmp byte [ebx + 0x2c], 0
je 0x420380
mov eax, 0x50000
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00426682
mov esp, ebp
pop ebp
ret 0x10
xor edi, edi
mov ecx, 0xc
cmp dword [ebx], edi
push eax
lea eax, [ebp - 0x238]
cmovne edi, ecx
push 0x104
push eax
mov dword [ebp - 0x5a8], edi
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s]
add esp, 0xc
cmp word [ebp - 0x238], 0
jne 0x4203ca
mov eax, 0x10000
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00426682
mov esp, ebp
pop ebp
ret 0x10
lea eax, [ebp - 0x238]
mov ecx, 0x2f
cmp word [eax], 0x5c
jne 0x4203de
mov word [eax], cx
add eax, 2
cmp word [eax], 0
jne 0x4203d5
lea ecx, [ebp - 0x238]
mov esi, 8
call fcn.0041faf0
push dword [ebp + 0x10]
xor ecx, ecx
test al, al
push dword [ebp - 0x5a0]
cmovne esi, ecx
mov ecx, ebx
mov dword [ebp - 0x5a4], esi
call fcn.0041fee0
test eax, eax
jne 0x4209ea
push 0x42fbec
mov dword [ebp - 0x23c], eax
lea eax, [ebp - 0x560]
push 0x104
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
add esp, 0xc
lea eax, [ebp - 0x450]
push 0
push 0
push 0x104
push eax
push 0xffffffffffffffff
lea eax, [ebp - 0x238]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
lea ecx, [ebp - 0x450]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x420468
push 0x42fbec
lea eax, [ebp - 0x34c]
sub ecx, edx
push 0x104
push eax
mov dword [ebp - 0x580], ecx
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
xor eax, eax
mov dword [ebp - 0x454], 0
mov word [ebp - 0x56e], ax
add esp, 0xc
cmp dword [ebx], 0
mov eax, dword [ebx + 0x68]
mov dword [ebp - 0x590], eax
mov eax, 8
mov dword [ebp - 0x574], 0
mov dword [ebp - 0x248], 1
mov dword [ebp - 0x240], 0
mov dword [ebp - 0x598], 0x140b17
mov dword [ebp - 0x58c], 0
mov word [ebp - 0x594], ax
je 0x4204fc
mov eax, 9
mov word [ebp - 0x594], ax
mov word [ebp - 0x56c], ax
mov word [ebp - 0x592], si
test esi, esi
jne 0x42051f
mov eax, dword [ebx + 0x70]
test eax, eax
js 0x42051f
add eax, edi
mov dword [ebp - 0x588], eax
jmp 0x420529
mov dword [ebp - 0x588], 0
mov eax, dword [ebx + 0x70]
mov dword [ebp - 0x584], eax
xor eax, eax
mov word [ebp - 0x570], ax
mov eax, dword [ebx + 0x4c]
mov dword [ebp - 0x568], eax
mov eax, dword [ebx + 0x18]
add eax, dword [ebx + 0x10]
mov dword [ebp - 0x564], eax
lea eax, [ebp - 0x18]
mov dword [ebp - 0x45c], eax
lea eax, [ebp - 0x24]
mov edx, dword [ebx + 0x5c]
mov ecx, dword [ebx + 0x58]
mov dword [ebp - 0x458], eax
mov al, byte [ebx + 0x58]
mov byte [ebp - 0x13], al
mov eax, edx
shrd ecx, eax, 8
mov dword [ebp - 0x18], 0xd5455
sar eax, 8
mov byte [ebp - 0x12], cl
mov eax, edx
mov ecx, dword [ebx + 0x58]
shrd ecx, eax, 0x10
mov byte [ebp - 0x14], 7
sar eax, 0x10
mov eax, dword [ebx + 0x58]
shrd eax, edx, 0x18
mov byte [ebp - 0x11], cl
mov ecx, dword [ebx + 0x50]
mov dword [ebp - 0x5a0], eax
mov byte [ebp - 0x10], al
mov al, byte [ebx + 0x50]
mov byte [ebp - 0xf], al
sar edx, 0x18
mov edx, dword [ebx + 0x54]
mov eax, edx
shrd ecx, eax, 8
movq xmm0, qword [ebp - 0x18]
sar eax, 8
mov byte [ebp - 0xe], cl
mov eax, edx
mov ecx, dword [ebx + 0x50]
shrd ecx, eax, 0x10
movq qword [ebp - 0x24], xmm0
sar eax, 0x10
mov eax, dword [ebx + 0x50]
shrd eax, edx, 0x18
mov byte [ebp - 0xd], cl
mov ecx, dword [ebx + 0x60]
mov byte [ebp - 0xc], al
mov al, byte [ebx + 0x60]
mov byte [ebp - 0xb], al
sar edx, 0x18
mov edx, dword [ebx + 0x64]
mov eax, edx
shrd ecx, eax, 8
push ebx
sar eax, 8
mov byte [ebp - 0xa], cl
mov eax, edx
mov ecx, dword [ebx + 0x60]
shrd ecx, eax, 0x10
mov dword [ebp - 0x57c], 0x11
sar eax, 0x10
mov eax, dword [ebx + 0x60]
shrd eax, edx, 0x18
mov byte [ebp - 9], cl
lea ecx, [ebp - 0x598]
mov byte [ebp - 8], al
mov eax, dword [ebp - 0x5a0]
sar edx, 0x18
mov dword [ebp - 0x578], 9
mov byte [ebp - 0x1c], al
mov byte [ebp - 0x22], 5
call fcn.0041f030
add esp, 4
test eax, eax
je 0x42066c
mov ecx, ebx
call fcn.00420110
mov eax, 0x400
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00426682
mov esp, ebp
pop ebp
ret 0x10
mov eax, dword [ebp - 0x57c]
add eax, 0x1e
add eax, dword [ebp - 0x580]
add dword [ebx + 0x18], eax
cmp dword [ebx + 0x14], 0
je 0x4206a1
mov ecx, ebx
call fcn.00420110
mov eax, dword [ebx + 0x14]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00426682
mov esp, ebp
pop ebp
ret 0x10
mov dword [ebx + 0x30], 0x12345678
mov dword [ebx + 0x34], 0x23456789
mov dword [ebx + 0x38], 0x34567890
mov edx, dword [ebx]
test edx, edx
je 0x42070e
nop dword [eax]
mov al, byte [edx]
test al, al
je 0x42070e
mov ecx, dword [ebx + 0x30]
movsx eax, al
xor eax, dword [ebx + 0x30]
movzx eax, al
shr ecx, 8
mov eax, dword [eax*4 + 0x42e4f0]
xor eax, ecx
mov ecx, dword [ebx + 0x38]
mov dword [ebx + 0x30], eax
movzx eax, al
add eax, dword [ebx + 0x34]
imul eax, eax, 0x8088405
inc eax
mov dword [ebx + 0x34], eax
shr eax, 0x18
xor eax, ecx
shr ecx, 8
movzx eax, al
xor ecx, dword [eax*4 + 0x42e4f0]
mov dword [ebx + 0x38], ecx
add edx, 1
jne 0x4206c0
cmp byte [0x43cdcc], 0
jne 0x420731
call dword [sym.imp.USER32.dll_GetDesktopWindow]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
xor esi, eax
push esi
call dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
add esp, 4
mov edi, dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
xor esi, esi
nop dword [eax]
call edi
sar eax, 7
mov byte [ebp + esi - 0x30], al
inc esi
cmp esi, 0xc
jl 0x420740
mov eax, dword [ebp - 0x590]
shr eax, 8
xor edi, edi
mov byte [ebp - 0x25], al
nop dword [eax]
mov al, byte [ebp + edi - 0x30]
mov ecx, dword [ebx + 0x30]
mov byte [ebp - 0x599], al
movsx eax, al
xor eax, dword [ebx + 0x30]
movzx eax, al
mov edx, dword [ebx + 0x38]
mov esi, edx
shr ecx, 8
and esi, 0xfffd
or esi, 2
mov eax, dword [eax*4 + 0x42e4f0]
xor eax, ecx
mov dword [ebx + 0x30], eax
movzx eax, al
add eax, dword [ebx + 0x34]
imul eax, eax, 0x8088405
inc eax
mov dword [ebx + 0x34], eax
shr eax, 0x18
xor eax, edx
shr edx, 8
movzx eax, al
xor edx, dword [eax*4 + 0x42e4f0]
mov eax, esi
xor eax, 1
mov dword [ebx + 0x38], edx
imul eax, esi
shr eax, 8
xor al, byte [ebp - 0x599]
mov byte [ebp + edi - 0x30], al
inc edi
cmp edi, 0xc
jl 0x420760
cmp dword [ebx], 0
je 0x4207e9
push 0xc
lea eax, [ebp - 0x30]
mov ecx, ebx
push eax
call fcn.0041fcb0
add dword [ebx + 0x18], 0xc
mov esi, dword [ebp - 0x5a4]
xor eax, eax
xor edi, edi
cmp dword [ebx], eax
setne al
mov byte [ebx + 0x2d], al
cmp esi, 8
jne 0x420810
lea eax, [ebp - 0x598]
mov ecx, ebx
push eax
call fcn.00420170
jmp 0x42081b
test esi, esi
jne 0x42081d
mov ecx, ebx
call fcn.004202b0
mov edi, eax
cmp byte [ebx + 0x80], 0
mov byte [ebx + 0x2d], 0
je 0x420838
mov eax, dword [ebx + 0x7c]
test eax, eax
je 0x420838
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebx + 0x90]
add dword [ebx + 0x18], ecx
mov eax, dword [ebx + 0x14]
mov edx, dword [ebx + 0x74]
mov dword [ebx + 0x7c], 0
mov dword [ebx + 0x70], edx
test eax, eax
jne 0x4209ea
test edi, edi
jne 0x420654
add ecx, dword [ebp - 0x5a8]
cmp dword [ebp - 0x588], ecx
mov eax, dword [ebx + 0x78]
sete byte [ebp - 0x599]
mov dword [ebp - 0x58c], eax
cmp byte [ebx + 0x1c], 0
mov dword [ebp - 0x588], ecx
mov dword [ebp - 0x584], edx
je 0x42090d
cmp dword [ebx], edi
jne 0x42090d
mov ax, word [ebp - 0x594]
mov word [ebp - 0x592], si
test al, 1
jne 0x4208b4
mov ecx, 0xfff7
and ax, cx
mov word [ebp - 0x594], ax
mov word [ebp - 0x56c], ax
mov ecx, ebx
mov eax, dword [ebp - 0x564]
sub eax, dword [ebx + 0x10]
push eax
call fcn.0041fe00
test al, al
je 0x4208f5
push ebx
lea ecx, [ebp - 0x598]
call fcn.0041f030
add esp, 4
test eax, eax
jne 0x420654
push dword [ebx + 0x18]
mov ecx, ebx
call fcn.0041fe00
test al, al
jne 0x420964
mov eax, 0x2000000
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00426682
mov esp, ebp
pop ebp
ret 0x10
cmp word [ebp - 0x592], si
je 0x42092e
mov eax, 0x4000000
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00426682
mov esp, ebp
pop ebp
ret 0x10
test esi, esi
jne 0x42093b
cmp byte [ebp - 0x599], 0
je 0x420916
push ebx
lea ecx, [ebp - 0x598]
call fcn.0041f2e0
add esp, 4
test eax, eax
jne 0x420654
mov ax, word [ebp - 0x56c]
add dword [ebx + 0x18], 0x10
mov word [ebp - 0x594], ax
mov eax, dword [ebx + 0x14]
test eax, eax
jne 0x4209ea
push dword [ebp - 0x578]
call dword [sym.imp.mfc140u.dll_operator_1]
add esp, 4
mov esi, eax
push dword [ebp - 0x578]
push dword [ebp - 0x458]
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov dword [ebp - 0x458], esi
push 0x360
call dword [sym.imp.mfc140u.dll_operator_2]
mov edx, eax
lea esi, [ebp - 0x598]
mov ecx, 0xd8
mov edi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebx + 0x44]
add esp, 4
test ecx, ecx
jne 0x4209c2
mov dword [ebx + 0x44], edx
jmp 0x4209e8
cmp dword [ecx + 0x35c], 0
lea eax, [ecx + 0x35c]
je 0x4209e2
mov ecx, dword [eax]
cmp dword [ecx + 0x35c], 0
lea eax, [ecx + 0x35c]
jne 0x4209d1
mov dword [ecx + 0x35c], edx
xor eax, eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00426682
mov esp, ebp
pop ebp
ret 0x10