Function at 0x402500
Capabilities:
Encode data using xor

Disassembly:
push ecx
push ebx
push ebp
mov ebp, dword [esp + 0x10]
push esi
push edi
xor edi, edi
push edi
push ebp
call dword [sym.imp.KERNEL32.dll__lopen]
mov esi, eax
cmp esi, 0xffffffff
jne 0x402535
push ebp
push 0x43f348
push 0x43f268
call fcn.0042c420
add esp, 0xc
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
pop ecx
ret
mov ebp, dword [sym.imp.KERNEL32.dll__llseek]
push 2
push 0
push esi
call ebp
cmp eax, 0xb4
mov dword [esp + 0x18], eax
ja 0x40256e
push esi
call dword [sym.imp.KERNEL32.dll__lclose]
push 0x43f32c
push 0x43f268
call fcn.0042c420
add esp, 8
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
pop ecx
ret
cmp eax, 0x100000
jl 0x402596
push esi
call dword [sym.imp.KERNEL32.dll__lclose]
push 0x43f32c
push 0x43f268
call fcn.0042c420
add esp, 8
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
pop ecx
ret
push 0
push 0
push esi
call ebp
mov ebx, dword [sym.imp.KERNEL32.dll__lread]
push 4
push 0x4439f8
push esi
call ebx
xor eax, eax
mov dl, 0x36
mov cl, byte [eax + 0x4439f8]
xor cl, dl
mov byte [eax + 0x4439f8], cl
and ecx, 0xff
add edi, ecx
inc eax
cmp eax, 4
jl 0x4025b1
mov eax, dword [0x4439f8]
mov edx, dword [esp + 0x18]
lea eax, [eax + eax*4]
shl eax, 1
lea ecx, [eax + 8]
cmp edx, ecx
jg 0x40260a
push esi
call dword [sym.imp.KERNEL32.dll__lclose]
mov edx, dword [0x4439f8]
push edx
push 0x43f300
push 0x43f268
call fcn.0042c420
add esp, 0xc
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
pop ecx
ret
add eax, 4
push 0
push eax
push esi
call ebp
push 4
push 0x444cd8
push esi
call ebx
xor eax, eax
mov dl, 0x52
mov cl, byte [eax + 0x444cd8]
xor cl, dl
mov byte [eax + 0x444cd8], cl
and ecx, 0xff
add edi, ecx
inc eax
cmp eax, 4
jl 0x402621
mov eax, dword [0x4439f8]
mov ecx, dword [0x444cd8]
add eax, ecx
mov ecx, dword [esp + 0x18]
lea eax, [eax + eax*4]
shl eax, 1
lea edx, [eax + 0x10]
cmp ecx, edx
jg 0x402681
push esi
call dword [sym.imp.KERNEL32.dll__lclose]
mov eax, dword [0x444cd8]
push eax
push 0x43f2d4
push 0x43f268
call fcn.0042c420
add esp, 0xc
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
pop ecx
ret
add eax, 8
push 0
push eax
push esi
call ebp
lea ecx, [esp + 0x10]
push 4
push ecx
push esi
call ebx
push 4
push 0x4432e0
push esi
call ebx
xor eax, eax
mov dl, 0x6e
mov cl, byte [eax + 0x4432e0]
xor cl, dl
mov byte [eax + 0x4432e0], cl
and ecx, 0xff
add edi, ecx
inc eax
cmp eax, 4
jl 0x4026a2
mov edx, dword [0x444cd8]
mov eax, dword [0x4432e0]
lea eax, [edx + eax*2]
mov edx, dword [0x4439f8]
add eax, edx
lea ecx, [eax + eax*4]
mov eax, dword [esp + 0x18]
lea edx, [ecx + ecx + 0x90]
cmp eax, edx
je 0x402707
push esi
call dword [sym.imp.KERNEL32.dll__lclose]
push 0x43f32c
push 0x43f268
call fcn.0042c420
add esp, 8
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
pop ecx
ret
add eax, 0x20
mov ecx, 0x444cc0
push eax
call fcn.0042c2d0
test eax, eax
je 0x4028bc
mov eax, dword [0x4439f8]
mov ecx, 0x444cc0
lea eax, [eax + eax*4]
shl eax, 1
push eax
call fcn.0042c380
test eax, eax
mov dword [0x4439f4], eax
je 0x4028bc
push 0
push 4
push esi
call ebp
mov eax, dword [0x4439f8]
mov edx, dword [0x4439f4]
lea ecx, [eax + eax*4]
shl ecx, 1
push ecx
push edx
push esi
call ebx
mov ecx, dword [0x4439f8]
mov edx, dword [0x4439f4]
xor eax, eax
lea ecx, [ecx + ecx*4]
shl ecx, 1
test ecx, ecx
jle 0x402793
mov cl, byte [eax + edx]
xor cl, 0x44
mov byte [eax + edx], cl
and ecx, 0xff
add edi, ecx
mov ecx, dword [0x4439f8]
inc eax
lea ecx, [ecx + ecx*4]
shl ecx, 1
cmp eax, ecx
jl 0x402772
mov eax, dword [0x444cd8]
mov ecx, 0x444cc0
lea edx, [eax + eax*4]
shl edx, 1
push edx
call fcn.0042c380
test eax, eax
mov dword [0x4432e4], eax
je 0x4028bc
push 1
push 4
push esi
call ebp
mov eax, dword [0x444cd8]
mov ecx, dword [0x4432e4]
lea eax, [eax + eax*4]
shl eax, 1
push eax
push ecx
push esi
call ebx
mov ecx, dword [0x444cd8]
mov edx, dword [0x4432e4]
xor eax, eax
lea ecx, [ecx + ecx*4]
shl ecx, 1
test ecx, ecx
jle 0x402809
mov cl, byte [eax + edx]
xor cl, 0x60
mov byte [eax + edx], cl
and ecx, 0xff
add edi, ecx
mov ecx, dword [0x444cd8]
inc eax
lea ecx, [ecx + ecx*4]
shl ecx, 1
cmp eax, ecx
jl 0x4027e8
mov eax, dword [0x4432e0]
mov ecx, 0x444cc0
lea edx, [eax + eax*4]
shl edx, 2
push edx
call fcn.0042c380
test eax, eax
mov dword [0x444cbc], eax
je 0x4028bc
push 1
push 8
push esi
call ebp
mov eax, dword [0x4432e0]
mov ecx, dword [0x444cbc]
lea eax, [eax + eax*4]
shl eax, 2
push eax
push ecx
push esi
call ebx
mov ecx, dword [0x4432e0]
mov edx, dword [0x444cbc]
xor eax, eax
lea ebp, [ecx + ecx*4]
shl ebp, 2
test ebp, ebp
jle 0x402883
mov cl, byte [eax + edx]
xor cl, 0x7c
mov byte [eax + edx], cl
and ecx, 0xff
add edi, ecx
mov ecx, dword [0x4432e0]
inc eax
lea ebp, [ecx + ecx*4]
shl ebp, 2
cmp eax, ebp
jl 0x402861
xor eax, eax
test ecx, ecx
jle 0x4028a4
xor ecx, ecx
mov edx, dword [0x444cbc]
inc eax
mov byte [ecx + edx + 0x13], 0
mov edx, dword [0x4432e0]
add ecx, 0x14
cmp eax, edx
jl 0x40288b
push 0x80
mov ecx, 0x444cc0
call fcn.0042c380
test eax, eax
mov dword [0x4432e8], eax
jne 0x4028dd
push esi
call dword [sym.imp.KERNEL32.dll__lclose]
push 0x43f2bc
push 0x43f268
call fcn.0042c420
add esp, 8
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
pop ecx
ret
push 0x80
push eax
push esi
call ebx
push esi
call dword [sym.imp.KERNEL32.dll__lclose]
mov ecx, dword [0x4432e8]
xor eax, eax
mov dl, byte [ecx + eax]
xor dl, 0x8a
mov byte [ecx + eax], dl
mov ecx, dword [0x4432e8]
movsx edx, byte [ecx + eax]
add edi, edx
inc eax
cmp eax, 0x80
jl 0x4028f5
cmp edi, dword [esp + 0x10]
je 0x402932
push 0x43f32c
push 0x43f268
call fcn.0042c420
add esp, 8
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
pop ecx
ret
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
pop ecx
ret