Function at 0x4028c0
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x44
mov eax, dword [0x42a014]
xor eax, esp
mov dword [esp + 0x40], eax
push ebx
mov ebx, dword [esp + 0x4c]
xor ecx, ecx
push ebp
push esi
push edi
mov eax, dword [ebx + 0x3c]
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x24], 0
mov dword [esp + 0x18], ecx
mov eax, dword [eax + ebx + 0x78]
add eax, ebx
mov dword [esp + 0x34], eax
mov edx, dword [eax + 0x20]
mov eax, dword [eax + 0x18]
add edx, ebx
mov dword [esp + 0x14], edx
mov dword [esp + 0x30], eax
test eax, eax
je 0x402ae2
nop dword [eax]
mov edx, dword [edx]
xorps xmm0, xmm0
add edx, ebx
mov dword [esp + 0x48], 0
mov eax, edx
mov dword [esp + 0x4c], 0
movups xmmword [esp + 0x38], xmm0
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x402931
sub eax, esi
lea ecx, [esp + 0x38]
push eax
push edx
call fcn.004014d0
mov esi, dword [esp + 0x48]
lea eax, [esp + 0x38]
mov ebp, dword [esp + 0x38]
mov ebx, esi
xor ebx, 0x235
mov dword [esp + 0x28], esi
cmp dword [esp + 0x4c], 0x10
mov edx, esi
mov dword [esp + 0x2c], ebp
cmovae eax, ebp
shr edx, 2
xor edi, edi
mov dword [esp + 0x10], eax
mov dword [esp + 0x20], edx
test edx, edx
je 0x4029e1
mov ebp, edx
mov esi, eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_ArcTo]
push str.Z81xbyuAua
push 0x42b058
call fcn.004011a0
push eax
call fcn.004015a0
imul ecx, dword [esi + edi*4], 0x5bd1e995
add esp, 0xc
imul ebx, ebx, 0x5bd1e995
inc edi
mov eax, ecx
shr eax, 0x18
xor eax, ecx
imul ecx, eax, 0x5bd1e995
xor ebx, ecx
cmp edi, ebp
jl 0x402980
mov esi, dword [esp + 0x28]
mov ebp, dword [esp + 0x2c]
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 0x10]
and esi, 3
xor ecx, ecx
sub esi, 1
je 0x402a07
sub esi, 1
je 0x4029fd
sub esi, 1
jne 0x402a19
movsx ecx, byte [eax + edx*4 + 2]
shl ecx, 0x10
movsx eax, byte [eax + edx*4 + 1]
shl eax, 8
xor ecx, eax
mov eax, dword [esp + 0x10]
movsx eax, byte [eax + edx*4]
xor eax, ecx
imul eax, eax, 0x5bd1e995
xor ebx, eax
mov eax, ebx
shr eax, 0xd
xor eax, ebx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
cmp eax, dword [esp + 0x5c]
je 0x402a8f
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x4c]
add edx, 4
mov dword [esp + 0x14], edx
cmp eax, 0x10
jb 0x402a76
lea ecx, [eax + 1]
mov eax, ebp
cmp ecx, 0x1000
jb 0x402a68
mov ebp, dword [eax - 4]
add ecx, 0x23
sub eax, ebp
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402afb
push ecx
push ebp
call fcn.00405932
mov edx, dword [esp + 0x1c]
add esp, 8
mov ecx, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
inc ecx
mov dword [esp + 0x18], ecx
cmp ecx, dword [esp + 0x30]
jb 0x402910
jmp 0x402ae2
mov edx, dword [esp + 0x34]
mov ecx, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + ebx]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + ebx]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x4c]
cmp eax, 0x10
jb 0x402ae2
lea ecx, [eax + 1]
mov eax, ebp
cmp ecx, 0x1000
jb 0x402ad8
mov ebp, dword [eax - 4]
add ecx, 0x23
sub eax, ebp
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402afb
push ecx
push ebp
call fcn.00405932
add esp, 8
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x50]
add eax, ebx
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.00405940
add esp, 0x44
ret
call fcn.0040a3af
int3