Function at 0x401ac0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0xb0
mov eax, dword [ebp + 8]
mov ecx, 0x76b0
lea edx, section..data
mov word [esp + 0x9e], 0x7bd4
mov esi, dword [esp + 0xa8]
mov dword [esp + 0x94], 0
mov dword [esp + 0x90], 0x3436
mov byte [esp + 0x8f], 0xe9
mov dword [esp + 0x88], 0x76b0
mov dword [esp + 0x74], 0
mov dword [esp + 0x70], 0x7a05
mov byte [esp + 0x5f], 0x25
mov di, word [esp + 0x9e]
mov bx, di
xor bx, 0x2a91
mov word [esp + 0x4a], bx
mov ebx, esi
and ebx, ebx
mov dword [esp + 0xa8], ebx
mov dword [esp + 0x30], eax
mov dword [esp + 0x84], edx
mov dword [esp + 0x3c], 0
mov eax, dword [esp + 0x88]
xor eax, 0x76b0
mov dword [esp + 0x40], eax
sub ecx, dword [esp + 0x88]
mov dword [esp + 0x64], ecx
mov word [esp + 0x2e], di
mov dword [esp + 0x28], esi
jmp 0x401e30
mov eax, dword [esp + 0x64]
mov ecx, dword [esp + 0x28]
and ecx, 0x3020
shl eax, 4
add eax, dword [esp + 0x84]
mov dx, word [esp + 0x4a]
mov dword [esp + 0xa8], ecx
mov eax, dword [eax + 4]
mov dword [esp + 0x4c], eax
mov bl, byte [esp + 0x9d]
mov si, word [esp + 0x9e]
add si, 0xbf9e
mov eax, dword [esp + 0x64]
mov byte [esp + 0x9d], bl
shl eax, 4
add eax, dword [esp + 0x84]
mov eax, dword [eax + 0xc]
mov dword [esp + 0x60], eax
mov bl, byte [esp + 0x9d]
or bl, byte [esp + 0x9d]
mov byte [esp + 0x9d], bl
cmp dx, si
je 0x401e88
jmp 0x401d5e
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x80]
mov edx, esp
mov dword [edx + 8], eax
mov dword [edx + 4], ecx
mov dword [edx], ecx
call fcn.00401f00
sub esp, 0xc
mov eax, dword [esp + 0x80]
mov dword [esp + 0xa4], 0
mov dword [esp + 0xa0], 0x7950
mov ecx, dword [esp + 0x30]
add eax, 0x6b0d
mov dword [ecx], eax
mov eax, dword [esp + 0x30]
mov word [esp + 0x9a], 0x2b98
mov dword [eax + 4], 0x3fa00
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x80]
add ecx, 0x3842
mov dword [eax + 8], ecx
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0x30]
mov edx, 0x76b0
sub edx, eax
mov dword [ecx + 0xc], 0x2800
mov dword [esp + 0xa4], 0xffffffff
mov dword [esp + 0xa0], 0xffff94c5
mov eax, edx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret 4
mov eax, dword [esp + 0x7c]
mov byte [esp + 0x9d], 0xde
mov ecx, dword [esp + 0x84]
shl eax, 4
mov eax, dword [ecx + eax + 4]
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x7c]
shl ecx, 4
mov eax, dword [eax + ecx + 8]
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x7c]
mov ecx, dword [esp + 0x84]
shl eax, 4
mov eax, dword [ecx + eax + 0xc]
mov dword [esp + 0x50], eax
mov ecx, dword [esp + 0x58]
xor ecx, eax
mov dword [esp + 0x58], ecx
mov eax, dword [esp + 0x54]
mov edx, dword [esp + 0x80]
mov esi, dword [esp + 0x3c]
add edx, esi
mov esi, esp
mov dword [esi + 8], ecx
mov dword [esi + 4], eax
mov dword [esi], edx
call fcn.00403810
sub esp, 0xc
mov dword [esp + 0xa4], 0xffffffff
mov dword [esp + 0xa0], 0xffff835e
mov ecx, dword [esp + 0x3c]
add ecx, dword [esp + 0x58]
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x24], eax
jmp 0x401e70
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x64], eax
jmp 0x401e30
mov eax, dword [esp + 0x60]
mov dword [esp + 0x34], eax
mov cx, word [esp + 0x2e]
mov word [esp + 0x9a], cx
mov eax, dword [esp + 0x4c]
xor eax, dword [esp + 0x34]
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x4c]
add eax, dword [esp + 0x40]
mov dword [esp + 0x40], eax
jmp 0x401ece
mov eax, dword [esp + 0x88]
add eax, 0xffff8985
mov ecx, dword [esp + 0x44]
mov word [esp + 0x9a], 0x6668
cmp ecx, eax
jb 0x401b88
mov eax, 0x86b0
mov ecx, dword [esp + 0x88]
mov edx, dword [esp + 0x88]
add edx, 0xffff8954
sub eax, ecx
mov ecx, esp
mov dword [ecx], str.VirtualAlloc
mov dword [esp + 0x20], edx
mov dword [esp + 0x1c], eax
call fcn.004024e0
sub esp, 4
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x68]
mov edx, esp
mov esi, dword [esp + 0x20]
mov dword [edx + 0xc], esi
mov edi, dword [esp + 0x1c]
mov dword [edx + 8], edi
mov dword [edx + 4], eax
mov dword [edx], 0
call ecx
sub esp, 0x10
mov dword [esp + 0x80], eax
mov dword [esp + 0x7c], 0
mov eax, dword [esp + 0x28]
or eax, 0x2d1a
mov dword [esp + 0xa8], eax
jmp 0x401e88
mov eax, dword [esp + 0x90]
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0x70]
mov esi, dword [esp + 0x74]
xor edi, edi
mov ebx, 0x44f9
sub ebx, eax
sbb edi, ecx
mov eax, dword [esp + 0x64]
mov dword [esp + 0x44], eax
sub edx, ebx
sbb esi, edi
mov dword [esp + 0x18], edx
mov dword [esp + 0x14], esi
jae 0x401d90
jmp 0x401c06
mov eax, 0x76b1
mov ecx, dword [esp + 0x88]
mov edx, dword [esp + 0x7c]
sub eax, ecx
add edx, eax
mov dword [esp + 0x7c], edx
mov ax, 0xcced
mov cx, word [esp + 0x9e]
xor cx, 0x12a7
mov word [esp + 0x3a], cx
mov cx, word [esp + 0x9e]
mov dx, word [esp + 0x3a]
sub ax, cx
cmp dx, ax
jb 0x401e88
mov eax, 0x76e5
sub eax, dword [esp + 0x88]
cmp dword [esp + 0x7c], eax
jb 0x401caf
jmp 0x401c06
mov al, 0xe7
mov ecx, dword [esp + 0x64]
add ecx, 1
sub al, byte [esp + 0x8f]
mov dl, byte [esp + 0x5f]
mov dword [esp + 0x6c], ecx
mov ecx, dword [esp + 0x28]
mov dword [esp + 0xa8], ecx
cmp dl, al
ja 0x401e30
jmp 0x401d51