Function at 0x402c30
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x4c
mov eax, dword [0x42b010]
xor eax, esp
mov dword [esp + 0x44], eax
push ebx
mov ebx, dword [0x4abc00]
xor ecx, ecx
mov dword [esp + 0x24], edx
push ebp
push esi
mov eax, dword [ebx + 0x3c]
push edi
mov dword [esp + 0x18], ebx
mov dword [esp + 0x24], 0
mov eax, dword [eax + ebx + 0x78]
add eax, ebx
mov dword [esp + 0x14], ecx
mov dword [esp + 0x38], eax
mov edx, dword [eax + 0x20]
mov eax, dword [eax + 0x18]
add edx, ebx
mov dword [esp + 0x10], edx
mov dword [esp + 0x34], eax
test eax, eax
je 0x402e35
mov edx, dword [edx]
xorps xmm0, xmm0
add edx, ebx
mov dword [esp + 0x4c], 0
mov eax, edx
mov dword [esp + 0x50], 0
movups xmmword [esp + 0x3c], xmm0
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x402ca4
sub eax, esi
lea ecx, [esp + 0x3c]
push eax
push edx
call fcn.00403d70
mov ebx, dword [esp + 0x4c]
lea eax, [esp + 0x3c]
mov ebp, dword [esp + 0x3c]
mov edi, ebx
xor edi, 0x235
mov dword [esp + 0x28], ebx
cmp dword [esp + 0x50], 0x10
mov dword [esp + 0x2c], ebp
cmovae eax, ebp
xor esi, esi
mov dword [esp + 0x20], eax
mov eax, ebx
shr eax, 2
mov dword [esp + 0x1c], eax
test eax, eax
je 0x402d34
mov ebx, dword [esp + 0x20]
mov ebp, eax
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
imul ecx, dword [ebx + esi*4], 0x5bd1e995
inc esi
imul edi, edi, 0x5bd1e995
mov eax, ecx
shr eax, 0x18
xor eax, ecx
imul ecx, eax, 0x5bd1e995
xor edi, ecx
cmp esi, ebp
jl 0x402cf5
mov ebx, dword [esp + 0x28]
mov ebp, dword [esp + 0x2c]
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
and ebx, 3
lea edx, [ecx + eax*4]
xor ecx, ecx
sub ebx, 1
je 0x402d5f
sub ebx, 1
je 0x402d56
sub ebx, 1
jne 0x402d6c
movsx ecx, byte [edx + 2]
shl ecx, 0x10
movsx eax, byte [edx + 1]
shl eax, 8
xor ecx, eax
movsx eax, byte [edx]
xor eax, ecx
imul eax, eax, 0x5bd1e995
xor edi, eax
mov eax, edi
shr eax, 0xd
xor eax, edi
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
cmp eax, dword [esp + 0x30]
je 0x402de2
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x50]
add edx, 4
mov dword [esp + 0x10], edx
cmp eax, 0x10
jb 0x402dc9
lea ecx, [eax + 1]
mov eax, ebp
cmp ecx, 0x1000
jb 0x402dbb
mov ebp, dword [eax - 4]
add ecx, 0x23
sub eax, ebp
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402e4e
push ecx
push ebp
call fcn.004065f3
mov edx, dword [esp + 0x18]
add esp, 8
mov ecx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
inc ecx
mov dword [esp + 0x14], ecx
cmp ecx, dword [esp + 0x34]
jb 0x402c83
jmp 0x402e35
mov edx, dword [esp + 0x38]
mov ecx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + ebx]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + ebx]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x50]
cmp eax, 0x10
jb 0x402e35
lea ecx, [eax + 1]
mov eax, ebp
cmp ecx, 0x1000
jb 0x402e2b
mov ebp, dword [eax - 4]
add ecx, 0x23
sub eax, ebp
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402e4e
push ecx
push ebp
call fcn.004065f3
add esp, 8
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x54]
add eax, ebx
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.004065b0
add esp, 0x4c
ret
call fcn.0040adda
int3