Function at 0x403490
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x30
xor eax, eax
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], eax
mov eax, dword [esi + 4]
mov cl, byte [eax + 0xe04]
mov al, byte [eax + 0xe05]
push ebx
push edi
mov edi, 2
mov byte [esp + 0x28], cl
mov byte [esp + 0x29], al
lea ebx, [edi - 1]
test al, 2
je 0x4034d0
mov dword [esp + 0x14], ebx
mov edx, dword [esi + 4]
mov ecx, dword [edx + 0x40]
lea eax, [esp + 0xc]
push eax
mov eax, 8
call fcn.0040a840
add esp, 4
test eax, eax
je 0x403527
mov eax, dword [esp + 0xc]
cmp eax, 0xff
je 0x403533
mov byte [esp + edi + 0x28], al
add edi, ebx
cmp edi, 4
jb 0x4034d0
movzx edx, byte [esp + 0x2a]
mov eax, edx
shr eax, 4
mov dword [esp + 0x10], edi
cmp eax, 0xf
ja case.default.0x403520
movzx ecx, byte [eax + 0x403b98]
jmp dword [ecx*4 + 0x403b84]
mov dword [esp + 0x10], edi
xor eax, eax
pop edi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [esi + 4]
mov dword [esp + 0x10], edi
mov byte [ecx + 0xe06], 0xff
mov edx, dword [esi + 4]
mov dword [edx + 0xdc8], ebx
mov eax, dword [esi + 4]
cmp dword [eax + 0xe30], 0
jne 0x403564
mov ecx, dword [eax + 0x38]
mov edx, dword [eax + 0x20]
push ecx
push ebx
push esi
call edx
add esp, 0xc
mov eax, dword [esi]
mov dword [eax], 2
mov eax, ebx
pop edi
pop ebx
mov esp, ebp
pop ebp
ret
mov dword [esp + 0x14], ebx
jmp case.default.0x403520
mov eax, dword [esi + 4]
mov dword [eax + 0x478], 0xc0
jmp case.default.0x403520
lea ecx, [eax - 2]
mov eax, 0x240
jmp 0x4035a1
mov dword [esp + 0x1c], eax
jmp case.default.0x403520
lea ecx, [eax - 8]
mov eax, pe_nt_image_headers32
shl eax, cl
mov ecx, dword [esi + 4]
mov dword [ecx + 0x478], eax
and edx, 0xf
cmp edx, 0xf
ja case.default.0x4035b4
jmp dword [edx*4 + 0x403ba8]
mov edx, dword [esi + 4]
cmp dword [edx + 0x100], 0
je 0x40361b
mov eax, edx
mov ecx, dword [eax + 0x128]
mov dword [eax + 0x47c], ecx
mov dl, byte [esp + 0x2b]
mov edi, dword [esi + 4]
movzx ecx, dl
mov eax, ecx
shr eax, 4
test al, 8
je 0x40373c
and eax, 7
sub eax, 0
mov dword [edi + 0x480], 2
je 0x403731
sub eax, ebx
je 0x403722
sub eax, ebx
je 0x403713
mov dword [esp + 0x14], ebx
jmp 0x403750
mov dword [esp + 0x14], ebx
jmp case.default.0x4035b4
mov edx, dword [esi + 4]
mov dword [edx + 0x47c], 0x15888
jmp case.default.0x4035b4
mov eax, dword [esi + 4]
mov dword [eax + 0x47c], 0x2b110
jmp case.default.0x4035b4
mov ecx, dword [esi + 4]
mov dword [ecx + 0x47c], 0x2ee00
jmp case.default.0x4035b4
mov edx, dword [esi + 4]
mov dword [edx + 0x47c], 0x1f40
jmp case.default.0x4035b4
mov eax, dword [esi + 4]
mov dword [eax + 0x47c], 0x3e80
jmp case.default.0x4035b4
mov ecx, dword [esi + 4]
mov dword [ecx + 0x47c], 0x5622
jmp case.default.0x4035b4
mov edx, dword [esi + 4]
mov dword [edx + 0x47c], 0x5dc0
jmp case.default.0x4035b4
mov eax, dword [esi + 4]
mov dword [eax + 0x47c], 0x7d00
jmp case.default.0x4035b4
mov ecx, dword [esi + 4]
mov dword [ecx + 0x47c], 0xac44
jmp case.default.0x4035b4
mov edx, dword [esi + 4]
mov dword [edx + 0x47c], 0xbb80
jmp case.default.0x4035b4
mov eax, dword [esi + 4]
mov dword [eax + 0x47c], 0x17700
jmp case.default.0x4035b4
mov dword [esp + 0x18], edx
jmp case.default.0x4035b4
mov ecx, dword [esi + 4]
cmp dword [ecx + 0xe30], 0
jne 0x403703
mov eax, ecx
mov edx, dword [eax + 0x38]
mov eax, dword [eax + 0x20]
push edx
push ebx
push esi
call eax
add esp, 0xc
mov ecx, dword [esi]
mov dword [ecx], 2
mov eax, ebx
pop edi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [esi + 4]
mov dword [eax + 0x484], 3
jmp 0x403750
mov eax, dword [esi + 4]
mov dword [eax + 0x484], 2
jmp 0x403750
mov eax, dword [esi + 4]
mov dword [eax + 0x484], ebx
jmp 0x403750
inc eax
mov dword [edi + 0x480], eax
mov eax, dword [esi + 4]
mov dword [eax + 0x484], 0
shr ecx, 1
and ecx, 7
mov dword [esp + 0xc], ecx
cmp ecx, 7
ja case.default.0x40375e
jmp dword [ecx*4 + 0x403be8]
mov ecx, dword [esi + 4]
cmp dword [ecx + 0x100], 0
je case.0x40375e.3
mov eax, ecx
mov ecx, dword [eax + 0x130]
mov dword [eax + 0x488], ecx
jmp case.default.0x40375e
mov eax, dword [esi + 4]
mov dword [eax + 0x488], 8
jmp case.default.0x40375e
mov ecx, dword [esi + 4]
mov dword [ecx + 0x488], 0xc
jmp case.default.0x40375e
mov eax, dword [esi + 4]
mov dword [eax + 0x488], 0x10
jmp case.default.0x40375e
mov ecx, dword [esi + 4]
mov dword [ecx + 0x488], 0x14
jmp case.default.0x40375e
mov eax, dword [esi + 4]
mov dword [eax + 0x488], 0x18
jmp case.default.0x40375e
mov dword [esp + 0x14], ebx
test bl, dl
je 0x4037d8
mov dword [esp + 0x14], ebx
test byte [esp + 0x29], bl
jne 0x403857
mov ecx, dword [esi + 4]
cmp dword [ecx + 0x100], 0
je 0x4037fa
mov eax, ecx
mov edx, dword [eax + 0x118]
cmp edx, dword [eax + 0x11c]
jne 0x403857
mov ecx, dword [ecx + 0x40]
lea eax, [esp + 0x10]
push eax
lea edx, [esp + 0x2c]
push edx
lea eax, [esp + 0x14]
push eax
push ecx
call fcn.0040b100
add esp, 0x10
test eax, eax
je 0x40352b
mov eax, dword [esp + 0xc]
cmp eax, 0xffffffff
jne 0x40383c
mov eax, dword [esp + 0x10]
mov edx, dword [esi + 4]
mov cl, byte [esp + eax + 0x27]
mov byte [edx + 0xe06], cl
jmp 0x403541
mov ecx, dword [esi + 4]
mov dword [ecx + 0x48c], 0
mov edx, dword [esi + 4]
mov dword [edx + 0x490], eax
jmp 0x4038f0
lea eax, [esp + 0x10]
push eax
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
push ecx
mov ecx, dword [eax + 0x40]
lea edx, [esp + 0x28]
push edx
push ecx
call fcn.0040b240
add esp, 0x10
test eax, eax
je 0x40352b
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x24]
mov eax, ecx
and eax, edx
cmp eax, 0xffffffff
jne 0x4038d8
mov edx, dword [esp + 0x10]
mov ecx, dword [esi + 4]
mov al, byte [esp + edx + 0x27]
mov byte [ecx + 0xe06], al
mov ecx, dword [esi + 4]
mov dword [ecx + 0xdc8], ebx
mov edx, dword [esi + 4]
cmp dword [edx + 0xe30], 0
jne 0x403564
mov eax, edx
mov ecx, dword [eax + 0x38]
mov edx, dword [eax + 0x20]
push ecx
push ebx
push esi
call edx
mov eax, dword [esi]
mov dword [eax], 2
add esp, 0xc
mov eax, ebx
pop edi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [esi + 4]
mov dword [eax + 0x48c], ebx
mov eax, dword [esi + 4]
mov dword [eax + 0x490], ecx
mov dword [eax + 0x494], edx
cmp dword [esp + 0x1c], 0
je 0x403969
mov ecx, dword [esi + 4]
mov ecx, dword [ecx + 0x40]
lea edx, [esp + 0xc]
push edx
mov eax, 8
call fcn.0040a840
add esp, 4
test eax, eax
je 0x40352b
mov edi, dword [esp + 0x10]
mov ebx, dword [esp + 0xc]
mov byte [esp + edi + 0x28], bl
inc edi
cmp dword [esp + 0x1c], 7
jne 0x40395d
mov eax, dword [esi + 4]
mov ecx, dword [eax + 0x40]
lea edx, [esp + 0x1c]
push edx
mov eax, 8
call fcn.0040a840
add esp, 4
test eax, eax
je 0x40352b
mov eax, dword [esp + 0x1c]
mov byte [esp + edi + 0x28], al
shl ebx, 8
inc edi
or ebx, eax
mov dword [esp + 0xc], ebx
mov eax, dword [esi + 4]
inc ebx
mov dword [eax + 0x478], ebx
jmp 0x40396d
mov edi, dword [esp + 0x10]
cmp dword [esp + 0x18], 0
je 0x403a08
mov ecx, dword [esi + 4]
mov ecx, dword [ecx + 0x40]
lea edx, [esp + 0xc]
push edx
mov eax, 8
call fcn.0040a840
add esp, 4
test eax, eax
je 0x40352b
mov ebx, dword [esp + 0xc]
mov eax, dword [esi + 4]
mov byte [esp + edi + 0x28], bl
inc edi
cmp dword [esp + 0x18], 0xc
je 0x4039ec
mov ecx, dword [eax + 0x40]
lea edx, [esp + 0x1c]
push edx
mov eax, 8
call fcn.0040a840
add esp, 4
test eax, eax
je 0x40352b
mov eax, dword [esp + 0x1c]
shl ebx, 8
mov byte [esp + edi + 0x28], al
or ebx, eax
inc edi
cmp dword [esp + 0x18], 0xd
mov dword [esp + 0xc], ebx
jne 0x4039fa
mov ecx, dword [esi + 4]
mov dword [ecx + 0x47c], ebx
jmp 0x403a08
imul ebx, ebx, 0x3e8
mov dword [eax + 0x47c], ebx
jmp 0x403a08
mov eax, dword [esi + 4]
lea edx, [ebx + ebx*4]
add edx, edx
mov dword [eax + 0x47c], edx
mov ecx, dword [esi + 4]
mov ecx, dword [ecx + 0x40]
lea edx, [esp + 0xc]
push edx
mov eax, 8
call fcn.0040a840
add esp, 4
test eax, eax
je 0x40352b
xor ebx, ebx
xor al, al
lea ecx, [esp + 0x28]
cmp edi, ebx
je 0x403a48
movzx edx, byte [ecx]
movzx eax, al
dec edi
xor edx, eax
mov al, byte [edx + 0x5c1708]
inc ecx
cmp edi, ebx
jne 0x403a34
cmp al, byte [esp + 0xc]
je 0x403a7d
mov ecx, dword [esi + 4]
cmp dword [ecx + 0xe30], ebx
jne 0x403a6a
mov eax, ecx
mov edx, dword [eax + 0x38]
mov eax, dword [eax + 0x20]
push edx
push 1
push esi
call eax
add esp, 0xc
mov ecx, dword [esi]
mov dword [ecx], 2
mov eax, 1
pop edi
pop ebx
mov esp, ebp
pop ebp
ret
mov edx, dword [esi + 4]
mov dword [edx + 0xf0], ebx
mov eax, dword [esi + 4]
cmp dword [eax + 0x48c], ebx
jne 0x403b33
mov edx, dword [eax + 0x490]
mov dword [eax + 0x48c], 1
mov ecx, dword [esi + 4]
cmp dword [ecx + 0xec], ebx
je 0x403ab8
mov eax, dword [ecx + 0xec]
jmp 0x403b25
mov eax, dword [esi + 4]
cmp dword [eax + 0x100], ebx
je 0x403af8
mov ecx, dword [eax + 0x118]
cmp ecx, dword [eax + 0x11c]
jne 0x403b39
mov ecx, eax
mov eax, dword [ecx + 0x118]
mul edx
mov dword [ecx + 0x490], eax
mov dword [ecx + 0x494], edx
mov eax, dword [esi + 4]
mov edx, dword [eax + 0x11c]
mov dword [eax + 0xf0], edx
jmp 0x403b33
cmp edx, ebx
jne 0x403b1c
mov eax, dword [esi + 4]
mov dword [eax + 0x490], ebx
mov dword [eax + 0x494], ebx
mov eax, dword [esi + 4]
mov ecx, dword [eax + 0x478]
mov dword [eax + 0xf0], ecx
jmp 0x403b33
mov ecx, dword [esi + 4]
mov eax, dword [ecx + 0x478]
mul edx
mov dword [ecx + 0x490], eax
mov dword [ecx + 0x494], edx
cmp dword [esp + 0x14], ebx
je 0x403b76
mov edx, dword [esi + 4]
mov eax, edx
cmp dword [edx + 0xe30], ebx
jne 0x403b68
mov ecx, dword [eax + 0x38]
mov edx, dword [eax + 0x20]
push ecx
push 3
push esi
call edx
mov eax, dword [esi]
mov dword [eax], 2
add esp, 0xc
mov eax, 1
pop edi
pop ebx
mov esp, ebp
pop ebp
ret
inc dword [eax + 0x1808]
mov eax, dword [esi]
mov dword [eax], 2
pop edi
mov eax, 1
pop ebx
mov esp, ebp
pop ebp
ret