Function at 0x40b710
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0xb0
mov esi, esp
call fcn.00409ab0
push eax
mov ecx, esp
push eax
mov eax, esp
sub esp, 0xc
mov dword [esi + 0x20], esp
sub esp, 0x18
mov ebx, esp
and ebx, 0xfffffff8
mov esp, ebx
push eax
mov dword [esi + 0x60], esp
push eax
mov dword [esi + 0x1c], esp
sub esp, 0x70
mov edx, esp
and edx, 0xfffffff8
mov esp, edx
push eax
mov dword [esi + 0x64], esp
sub esp, 0x18
mov edi, esp
and edi, 0xfffffff8
mov dword [esi + 0x24], edi
mov esp, edi
push eax
mov dword [esi + 0x68], esp
sub esp, 0x10
mov edi, esp
and edi, 0xfffffff8
mov dword [esi + 0x54], edi
mov esp, edi
push eax
mov dword [esi + 0x6c], esp
sub esp, 0x10
mov edi, esp
and edi, 0xfffffff8
mov dword [esi + 0x28], edi
mov esp, edi
push eax
mov dword [esi + 0x74], esp
sub esp, 0x14
mov dword [esi + 0x84], esp
sub esp, 0x20
mov edi, esp
and edi, 0xfffffff8
mov dword [esi + 0x80], edi
mov esp, edi
push eax
mov dword [esi + 0x78], esp
push eax
mov dword [esi + 0x30], esp
push eax
mov dword [esi + 0x88], esp
sub esp, 0x10
mov edi, esp
and edi, 0xfffffff8
mov dword [esi + 0x2c], edi
mov esp, edi
push eax
mov dword [esi + 0x7c], esp
mov dword [esi + 0x70], ecx
mov edi, dword [ebp + 8]
mov dword [ecx], edi
mov dword [esi + 0x34], eax
mov byte [eax], 0
mov eax, dword [esi + 0x60]
mov cl, byte [eax]
mov byte [esi + 0x38], cl
mov byte [ebx], 0x91
mov byte [ebx + 1], 0x92
mov byte [ebx + 2], 0xa6
mov byte [ebx + 3], 0x7e
mov byte [ebx + 4], 0xa8
mov byte [ebx + 5], 0xac
mov byte [ebx + 6], 0x90
mov byte [ebx + 7], 0x92
mov byte [ebx + 8], 0x28
mov dword [ebx + 0x11], 0
mov dword [ebx + 0xd], 0
mov dword [ebx + 9], 0
mov dword [esi], 0
mov ecx, dword [esi]
cmp ecx, 0x15
jae 0x40b859
jmp 0x40b81b
mov eax, dword [esi]
mov edi, dword [esi]
movzx edi, byte [ebx + edi]
mov ecx, eax
add ecx, 0x88
and ecx, edi
add eax, edi
add ecx, ecx
sub eax, ecx
add eax, 0xbd036a88
mov dword [esi + 0x8c], eax
mov eax, dword [esi + 0x8c]
add al, 0x48
mov ecx, dword [esi]
mov byte [ebx + ecx], al
mov eax, dword [esi]
inc eax
mov dword [esi], eax
mov eax, dword [esi]
cmp eax, 0x15
jb 0x40b81b
jmp 0x40b859
mov eax, ebx
mov edi, dword [esi + 0x20]
mov ecx, 2
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
mov edi, dword [esi + 0x20]
add edi, 8
mov eax, ebx
add eax, 8
xor ecx, ecx
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
mov al, byte [ebx + 8]
mov ecx, dword [esi + 0x20]
mov byte [ecx + 8], al
mov eax, dword [esi + 0x64]
mov al, byte [eax]
mov byte [esi + 0x3c], al
mov byte [edx], 0xeb
mov byte [edx + 1], 0x35
mov byte [edx + 2], 0xc5
mov byte [edx + 3], 0x33
mov byte [edx + 4], 0xc0
mov byte [edx + 5], 0x31
mov byte [edx + 6], 0xbc
mov byte [edx + 7], 0xcf
mov byte [edx + 8], 0x35
mov byte [edx + 9], 0xcd
mov byte [edx + 0xa], 0x3e
mov byte [edx + 0xb], 0xcb
mov byte [edx + 0xc], 0x46
mov byte [edx + 0xd], 0xc9
mov byte [edx + 0xe], 0xfb
mov byte [edx + 0xf], 0xc7
mov byte [edx + 0x10], 0x2a
mov byte [edx + 0x11], 0xc5
mov byte [edx + 0x12], 0x43
mov byte [edx + 0x13], 0xc3
mov byte [edx + 0x14], 0x32
mov byte [edx + 0x15], 0xc1
mov byte [edx + 0x16], 0x3b
mov byte [edx + 0x17], 0xdf
mov byte [edx + 0x18], 0x18
mov byte [edx + 0x19], 0xdd
mov byte [edx + 0x1a], 0xfc
mov byte [edx + 0x1b], 0xdb
mov byte [edx + 0x1c], 0x25
mov byte [edx + 0x1d], 0xd9
mov byte [edx + 0x1e], 0x28
mov byte [edx + 0x1f], 0xd7
mov byte [edx + 0x20], 0x26
mov byte [edx + 0x21], 0xd5
mov byte [edx + 0x22], 0x20
mov byte [edx + 0x23], 0xd3
mov byte [edx + 0x24], 0x25
mov byte [edx + 0x25], 0xd1
mov byte [edx + 0x26], 0x2d
mov byte [edx + 0x27], 0xef
mov byte [edx + 0x28], 0x11
mov byte [edx + 0x29], 0xed
mov byte [edx + 0x2a], 0x60
mov byte [edx + 0x2b], 0xeb
mov byte [edx + 0x2c], 0x1d
mov byte [edx + 0x2d], 0xe9
mov byte [edx + 0x2e], 0x19
mov byte [edx + 0x2f], 0xe7
mov byte [edx + 0x30], 0x14
mov byte [edx + 0x31], 0xe5
mov byte [edx + 0x32], 0xd5
mov byte [edx + 0x33], 0xe3
mov byte [edx + 0x34], 0x6a
mov byte [edx + 0x35], 0xe1
mov byte [edx + 0x36], 0xd3
mov byte [edx + 0x37], 0xff
mov byte [edx + 0x38], 0x77
mov byte [edx + 0x39], 0xfd
mov byte [edx + 0x3a], 0x75
mov byte [edx + 0x3b], 0xfb
mov byte [edx + 0x3c], 0x73
mov byte [edx + 0x3d], 0xf9
mov byte [edx + 0x3e], 0xcb
mov byte [edx + 0x3f], 0xf7
mov byte [edx + 0x40], 0xc
mov byte [edx + 0x41], 0xf5
mov byte [edx + 0x42], 5
mov byte [edx + 0x43], 0xf3
mov byte [edx + 0x44], 0x7c
mov byte [edx + 0x45], 0xf1
mov byte [edx + 0x46], 3
mov byte [edx + 0x47], 0x8f
mov byte [edx + 0x48], 0xbd
mov byte [edx + 0x49], 0x8d
mov byte [edx + 0x4a], 7
mov byte [edx + 0x4b], 0x8b
mov byte [edx + 0x4c], 4
mov byte [edx + 0x4d], 0x89
mov byte [edx + 0x4e], 0x7c
mov byte [edx + 0x4f], 0x87
mov byte [edx + 0x50], 0x7d
mov byte [edx + 0x51], 0x85
mov byte [edx + 0x52], 0x76
mov byte [edx + 0x53], 0x83
mov byte [edx + 0x54], 0x7f
mov byte [edx + 0x55], 0x81
mov byte [edx + 0x56], 0x71
mov byte [edx + 0x57], 0x9f
mov byte [edx + 0x58], 0x62
mov byte [edx + 0x59], 0x9d
mov byte [edx + 0x5a], 0x67
mov byte [edx + 0x5b], 0x9b
mov byte [edx + 0x5c], 0x66
mov byte [edx + 0x5d], 0x99
mov byte [edx + 0x5e], 0x8b
mov byte [edx + 0x5f], 0x97
mov byte [edx + 0x60], 0x80
mov byte [edx + 0x61], 0x95
mov byte [edx + 0x62], 0x94
mov byte [edx + 0x63], 0x93
mov byte [edx + 0x68], 0
mov dword [edx + 0x64], 0
mov dword [esi + 4], 0
mov eax, dword [esi + 4]
cmp eax, 0x69
jae 0x40ba80
jmp 0x40ba35
mov edi, dword [esi + 4]
mov eax, dword [esi + 4]
movzx eax, byte [edx + eax]
mov ecx, edi
add ecx, 0x7e391b79
mov ebx, ecx
and ebx, eax
xor ecx, eax
add edi, 0x79
and edi, eax
mov eax, ebx
add eax, edi
sub ecx, eax
lea eax, [ecx + ebx*2]
mov dword [esi + 0x90], eax
mov eax, dword [esi + 0x90]
add al, 0xb1
mov ecx, dword [esi + 4]
mov byte [edx + ecx], al
mov eax, dword [esi + 4]
inc eax
mov dword [esi + 4], eax
mov eax, dword [esi + 4]
cmp eax, 0x69
jb 0x40ba35
jmp 0x40ba80
mov eax, dword [esi + 0x68]
mov al, byte [eax]
mov byte [esi + 0x40], al
mov eax, dword [esi + 0x24]
mov byte [eax], 0x87
mov byte [eax + 1], 0xd1
mov byte [eax + 2], 0x73
mov byte [eax + 3], 0xd3
mov byte [eax + 4], 0x42
mov byte [eax + 5], 0xdd
mov byte [eax + 6], 0x77
mov byte [eax + 7], 0xdf
mov byte [eax + 8], 0xde
mov byte [eax + 9], 0xd9
mov byte [eax + 0x12], 0
mov dword [eax + 0xe], 0
mov dword [eax + 0xa], 0
mov dword [esi + 8], 0
mov eax, dword [esi + 8]
cmp eax, 0x13
mov ebx, dword [esi + 0x54]
jae 0x40bb31
jmp 0x40bad8
mov ecx, dword [esi + 8]
mov eax, dword [esi + 8]
mov ebx, dword [esi + 0x24]
movzx eax, byte [ebx + eax]
mov edi, ecx
add edi, eax
add ecx, 0xe3
and ecx, eax
add ecx, ecx
sub edi, ecx
add edi, 0x25b804e3
mov dword [esi + 0x94], edi
mov eax, dword [esi + 0x94]
mov ecx, eax
xor ecx, 0xca
and eax, 0x4a
lea eax, [ecx + eax*2]
inc al
mov ecx, dword [esi + 8]
mov byte [ebx + ecx], al
mov eax, dword [esi + 8]
inc eax
mov dword [esi + 8], eax
mov eax, dword [esi + 8]
cmp eax, 0x13
jb 0x40bad8
mov ebx, dword [esi + 0x54]
jmp 0x40bb31
mov eax, dword [esi + 0x70]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov eax, dword [esi + 0x24]
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov eax, dword [esi + 0x20]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 8
mov edi, dword [esi + 0x1c]
mov dword [esp + 0x14], edi
mov dword [esp + 0x18], 0
call fcn.0040c660
add esp, 0x1c
test al, 1
jne 0x40bb78
jmp 0x40bf55
mov eax, dword [esi + 0x6c]
mov al, byte [eax]
mov byte [esi + 0x44], al
mov byte [ebx], 0xbf
mov byte [ebx + 1], 0xba
mov byte [ebx + 2], 0xa
mov dword [ebx + 0xb], 0
mov dword [ebx + 7], 0
mov dword [ebx + 3], 0
mov dword [esi + 0xc], 0
mov eax, dword [esi + 0xc]
cmp eax, 0xf
jae 0x40bbfb
jmp 0x40bbb1
mov edi, dword [esi + 0xc]
mov eax, dword [esi + 0xc]
movzx ecx, byte [ebx + eax]
mov eax, edi
add eax, 0xaa
mov edx, 0x94e94c55
sub edx, edi
and eax, ecx
or edx, ecx
not edx
add edx, ecx
sub edx, eax
mov dword [esi + 0x98], edx
mov eax, dword [esi + 0x98]
add al, 0x5a
mov ecx, dword [esi + 0xc]
mov byte [ebx + ecx], al
mov eax, dword [esi + 0xc]
inc eax
mov dword [esi + 0xc], eax
mov eax, dword [esi + 0xc]
cmp eax, 0xf
jb 0x40bbb1
mov edi, dword [esi + 0x1c]
jmp 0x40bbfb
mov eax, dword [edi]
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], ebx
call fcn.0040ddb0
add esp, 8
cmp eax, 0
sete al
jmp 0x40bc17
test al, 1
jne 0x40bc1d
jmp 0x40bc28
mov eax, dword [esi + 0x34]
mov byte [eax], 1
jmp 0x40bf45
mov eax, dword [esi + 0x74]
mov al, byte [eax]
mov byte [esi + 0x48], al
mov eax, dword [esi + 0x28]
mov byte [eax], 3
mov byte [eax + 1], 0xe
mov byte [eax + 2], 0x31
mov byte [eax + 3], 0x1f
mov byte [eax + 4], 0x15
mov byte [eax + 5], 0x18
mov byte [eax + 6], 0x1a
mov byte [eax + 7], 0x8f
mov byte [eax + 0xc], 0
mov dword [eax + 8], 0
mov dword [esi + 0x10], 0
mov eax, dword [esi + 0x10]
cmp eax, 0xd
jae 0x40bcb6
jmp 0x40bc6e
mov eax, dword [esi + 0x10]
mov ecx, dword [esi + 0x10]
mov ebx, dword [esi + 0x28]
movzx edx, byte [ebx + ecx]
mov ecx, 0x11b40812
sub ecx, eax
add eax, 0xed
and eax, edx
or ecx, edx
not ecx
add ecx, edx
sub ecx, eax
mov dword [esi + 0x9c], ecx
mov eax, dword [esi + 0x9c]
add al, 0x85
mov ecx, dword [esi + 0x10]
mov byte [ebx + ecx], al
mov eax, dword [esi + 0x10]
inc eax
mov dword [esi + 0x10], eax
mov eax, dword [esi + 0x10]
cmp eax, 0xd
jb 0x40bc6e
jmp 0x40bcb6
mov eax, dword [edi]
sub esp, 8
mov dword [esp], eax
mov eax, dword [esi + 0x28]
mov dword [esp + 4], eax
call fcn.0040c600
add esp, 8
cmp eax, 0
je 0x40bf43
mov eax, dword [esi + 0x78]
mov al, byte [eax]
mov byte [esi + 0x4c], al
mov ebx, dword [esi + 0x80]
mov byte [ebx], 0x8e
mov byte [ebx + 1], 0x90
mov byte [ebx + 2], 0x8f
mov byte [ebx + 3], 0x96
mov byte [ebx + 4], 0xf9
mov byte [ebx + 5], 0xd7
mov byte [ebx + 6], 0x97
mov byte [ebx + 7], 0x83
mov byte [ebx + 8], 0xb7
mov byte [ebx + 9], 0xb2
mov byte [ebx + 0xa], 0xe8
mov byte [ebx + 0xb], 0xeb
mov byte [ebx + 0xc], 0xba
mov byte [ebx + 0xd], 0xac
mov byte [ebx + 0xe], 0xb2
mov byte [ebx + 0xf], 0xba
mov byte [ebx + 0x10], 0xa5
mov byte [ebx + 0x11], 0xcc
mov byte [ebx + 0x12], 0xe0
mov byte [ebx + 0x13], 3
mov dword [ebx + 0x1c], 0
mov dword [ebx + 0x18], 0
mov dword [ebx + 0x14], 0
mov dword [esi + 0x14], 0
mov eax, dword [esi + 0x14]
cmp eax, 0x20
jae 0x40bd9b
jmp 0x40bd59
mov eax, dword [esi + 0x14]
mov ecx, dword [esi + 0x14]
movzx ecx, byte [ebx + ecx]
mov edx, eax
add edx, 0x27baa8d8
add eax, 0xd8
and eax, ecx
or edx, ecx
sub edx, eax
mov dword [esi + 0xa0], edx
mov eax, dword [esi + 0xa0]
add al, 0x18
mov ecx, dword [esi + 0x14]
mov byte [ebx + ecx], al
mov eax, dword [esi + 0x14]
inc eax
mov dword [esi + 0x14], eax
mov eax, dword [esi + 0x14]
cmp eax, 0x20
jb 0x40bd59
jmp 0x40bd9b
mov eax, ebx
mov edx, dword [esi + 0x84]
mov edi, edx
mov ecx, 5
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
mov edi, edx
add edi, 0x14
add ebx, 0x14
xor ecx, ecx
xchg esi, ebx
rep movsw word es:[edi], word [esi]
xchg esi, ebx
mov edi, dword [esi + 0x1c]
mov eax, dword [edi]
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.0040c600
add esp, 8
mov ecx, dword [esi + 0x30]
mov dword [ecx], eax
cmp dword [ecx], 0
je 0x40bf41
mov eax, dword [ecx]
add eax, 0x13
mov dword [ecx], eax
mov eax, dword [esi + 0x7c]
mov al, byte [eax]
mov byte [esi + 0x50], al
mov eax, dword [esi + 0x2c]
mov byte [eax], 0x44
mov byte [eax + 1], 0x37
mov byte [eax + 2], pe_nt_image_headers32
mov byte [eax + 0xb], 0
mov dword [eax + 7], 0
mov dword [eax + 3], 0
mov dword [esi + 0x18], 0
mov eax, dword [esi + 0x18]
cmp eax, 0xc
jae 0x40be74
jmp 0x40be24
mov edi, dword [esi + 0x18]
mov eax, dword [esi + 0x18]
mov ebx, dword [esi + 0x2c]
movzx ecx, byte [ebx + eax]
mov eax, edi
add eax, 0xef
and eax, ecx
mov edx, 0x93e6bf10
sub edx, edi
or edx, ecx
not edx
add edx, ecx
sub edx, eax
mov dword [esi + 0xa4], edx
mov eax, dword [esi + 0xa4]
add al, 0x77
mov ecx, dword [esi + 0x18]
mov byte [ebx + ecx], al
mov eax, dword [esi + 0x18]
inc eax
mov dword [esi + 0x18], eax
mov eax, dword [esi + 0x18]
cmp eax, 0xc
jb 0x40be24
mov edi, dword [esi + 0x1c]
mov ecx, dword [esi + 0x30]
jmp 0x40be74
mov eax, dword [ecx]
sub esp, 8
mov dword [esp], eax
mov eax, dword [esi + 0x2c]
mov dword [esp + 4], eax
call fcn.0040c600
add esp, 8
mov ecx, dword [esi + 0x88]
mov dword [ecx], eax
mov eax, ecx
cmp dword [eax], 0
je 0x40bf3f
mov byte [0x448b08], 1
mov ebx, dword [eax]
mov eax, dword [esi + 0x30]
mov edi, dword [eax]
cmp ebx, 0
jne 0x40bec7
mov ecx, edi
jmp 0x40beb5
mov eax, ecx
mov dl, byte [eax]
add ecx, 1
cmp dl, 0
jne 0x40beb5
sub eax, edi
mov ebx, edi
add ebx, eax
mov dword [esi + 0x58], 0
lea eax, [0x448b0a]
cmp ebx, edi
jbe 0x40bf31
lea ecx, [0x448b0a]
jmp 0x40bee0
cmp byte [edi], 0
jne 0x40bee9
mov eax, ecx
jmp 0x40bf31
sub esp, 0xc
lea eax, [esi + 0x58]
mov dword [esp + 8], eax
mov dword [esp + 4], ebx
mov dword [esp], edi
mov dword [esi + 0x5c], ecx
call fcn.0040f180
add esp, 0xc
add edi, eax
mov cx, word [esi + 0x58]
mov edx, dword [esi + 0x5c]
mov eax, edx
add eax, 2
mov word [edx], cx
mov ecx, eax
sub ecx, 0x448d08
setb cl
mov edx, edi
sub edx, ebx
setb dl
and cl, dl
test cl, 1
mov ecx, eax
jne 0x40bee0
mov word [eax], 0
mov eax, dword [esi + 0x34]
mov byte [eax], 1
mov edi, dword [esi + 0x1c]
jmp 0x40bf41
jmp 0x40bf43
jmp 0x40bf45
mov eax, dword [edi]
sub esp, 4
mov dword [esp], eax
call fcn.00438bf0
add esp, 4
mov eax, dword [esi + 0x34]
mov al, byte [eax]
and al, 1
movzx eax, al
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret