Function at 0x661b7698
Capabilities:
Encode data using xor

Disassembly:
mov eax, dword [esp]
jmp 0x661b75b5
mov ebx, dword [esp]
add esp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
sti
jmp 0x661b718a
push esp
jmp 0x661b786e
mov dword [esp], esi
push eax
jmp 0x661b7466
xor edi, 0x620a09c7
mov ebx, edi
pop edi
add ebp, ebx
jmp 0x661b7070
xchg dword [esp], esi
pop esp
add eax, 4
sub esp, 4
jmp 0x661b7177
shr edi, 1
inc edi
neg edi
shr edi, 1
jmp 0x661b7095
mov ebx, dword [esp]
add esp, 4
add esi, eax
jmp 0x661b727f
pop ebp
sub ebx, reloc.kernel32.dll_GetCurrentThreadId
push eax
mov eax, 0x7defc069
sub eax, 0x6e519363
not eax
add eax, 0x2ec6a45e
add ebx, eax
pop eax
sub edi, 0xeff7333
add edi, ebx
add edi, 0xeff7333
mov ebx, dword [esp]
add esp, 4
sub edx, edi
pop edi
push esi
mov esi, esp
add esi, 4
sub esi, 4
push esi
push dword [esp + 4]
pop esi
jmp 0x661b7995
add esp, 4
add edx, 0x7bc7b9b9
sub edx, esi
sub edx, 0x7bc7b9b9
push dword [esp]
pop esi
push eax
push esp
push dword [esp]
pop eax
add esp, 4
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push 0x4f04ea31
jmp 0x661b71f3
pop esi
push edx
jmp 0x661b728e
mov dword [esp], eax
push dword [esp + 4]
pop eax
pop dword [esp]
pop esp
xor edi, edi
jmp 0x661b72bb
sub esp, 4
mov dword [esp], esi
mov esi, 0x5cff1bbd
push edi
mov edi, 0x7dff0862
add eax, edi
pop edi
sub eax, esi
push ebp
mov dword [esp], ebx
mov ebx, 0x7dff0862
sub eax, ebx
mov ebx, dword [esp]
add esp, 4
jmp 0x661b7170
push esi
mov esi, esp
add esi, 4
add esi, 4
jmp 0x661b70a5
mov edx, 4
add esi, 0x4efdf73d
add esi, edx
jmp 0x661b7210
pop eax
add ecx, 0x5d8d92f4
sub ecx, reloc.kernel32.dll_GetCurrentThreadId
xchg ecx, eax
not eax
xchg ecx, eax
dec ecx
jmp 0x661b75c2
mov dword [esp], esi
mov esi, esp
push eax
push ebx
push esi
mov dword [esp], ecx
mov ecx, 4
mov ebx, ecx
jmp 0x661b752e
push edx
jmp 0x661b71ca
sub esi, 0x4efdf73d
push dword [esp]
jmp 0x661b745a
xor esi, 0x1fce663f
add esi, 0xd7c409dd
add eax, esi
pop esi
add esi, eax
pop eax
xor esi, 0x7eead61e
push esi
xor dword [esp], reloc.kernel32.dll_GetCurrentThreadId
pop edi
xor edi, 0x77ef87da
pop esi
push eax
jmp 0x661b79e8
add dword [esp], reloc.kernel32.dll_GetCurrentThreadId
jmp 0x661b73a1
mov dword [esp], esi
mov esi, esp
jmp 0x661b720a
not ecx
inc ecx
add ecx, 1
push eax
jmp 0x661b777f
add esi, ebx
sub esi, 0x5ef72e94
push dword [esp]
pop ebx
jmp 0x661b72dc
mov eax, dword [esp]
add esp, 4
push eax
jmp 0x661b75fe
mov edx, 0x7ff6626d
sub edx, 0x321b07cb
sub eax, edx
pop edx
add eax, 0x7ef9437e
push ecx
mov ecx, 0x7ddf355e
shr ecx, 7
xor ecx, 0x6bd7cd6f
jmp 0x661b7436
pop edx
jmp 0x661b7747
push dword [edi + eax]
push dword [esp]
push dword [esp]
jmp 0x661b73f6
add eax, ebx
pop ebx
add eax, edx
sub eax, 0x6ef74dd1
push dword [esp]
pop edx
jmp 0x661b71b9
add esp, 4
push eax
mov eax, 4
push edi
mov edi, 0x77df3bb2
jmp 0x661b7705
sub eax, 0x7ef9437e
add eax, 0x4ddb5aa2
add eax, 0x5cff1bbd
push eax
push esp
pop eax
push 0x61e3833a
mov dword [esp], eax
mov eax, esp
push edx
mov edx, 0x5ed8c847
shl edx, 8
inc edx
neg edx
sub edx, 0x2737b8fb
add eax, edx
jmp 0x661b72b5
xor edi, edx
jmp 0x661b77c5
pop esi
sub esi, 0xf7f68a1
jmp 0x661b7719
push edi
mov edi, 0x77d7d8f2
sub esp, 4
mov dword [esp], edi
jmp 0x661b740e
shl ecx, 7
push ebp
mov ebp, 0xffedb304
xor ecx, ebp
pop ebp
add edx, 0x657f6286
add edx, ecx
sub edx, 0x657f6286
pop ecx
push ecx
jmp 0x661b73be
mov dword [esp], reloc.kernel32.dll_GetCurrentThreadId
mov dword [esp], edi
mov dword [esp], esp
push eax
mov eax, 4
add dword [esp + 4], eax
pop eax
mov ebp, dword [esp]
add esp, 4
push edx
mov dword [esp], reloc.kernel32.dll_GetCurrentThreadId
mov dword [esp], ecx
jmp 0x661b76a0
push dword [esp]
pop eax
sub esp, 4
mov dword [esp], eax
mov eax, esp
push ecx
mov ecx, 0x3f6e9a9e
jmp 0x661b7262
pop edi
jmp 0x661b70b4
mov ecx, 4
add edx, ecx
pop ecx
xchg dword [esp], edx
jmp 0x661b79a3
push dword [esp]
pop eax
add esp, 4
add eax, 0x776972eb
add eax, ecx
sub eax, 0x776972eb
pop ecx
push ecx
mov dword [esp], edi
push edx
mov edx, 0x739b984c
mov edi, 0xa648c4c
jmp 0x661b7328
pop edx
push ecx
mov dword [esp], esi
mov esi, esp
push ebx
mov ebx, 4
add esi, 0x5ef72e94
jmp 0x661b726e
dec dword [esp]
jmp 0x661b73b8
add ebx, eax
jmp 0x661b74ab
xor eax, dword [esp]
mov esp, dword [esp]
mov dword [esp], ecx
mov dword [esp], edx
jmp 0x661b77b5
add eax, dword [esp]
jmp 0x661b761a
push edi
jmp 0x661b708c
not edi
push ecx
mov ecx, 0x2c9a0f86
shr ecx, 4
jmp 0x661b76c2
push ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
jmp 0x661b7867
pop edx
add esp, 4
jmp 0x661b74b1
mov eax, 0x796f81da
jmp 0x661b7546
push ebx
jmp 0x661b7370
mov eax, dword [esp]
add esp, 4
pop dword [esp]
pop esp
mov dword [esp], ebx
push edi
mov dword [esp], esi
mov dword [esp], reloc.kernel32.dll_GetCurrentThreadId
neg dword [esp]
sub dword [esp], reloc.kernel32.dll_GetCurrentThreadId
not dword [esp]
jmp 0x661b763d
add edx, 4
xchg dword [esp], edx
jmp 0x661b75de
pop eax
jmp 0x661b76b7
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
jmp 0x661b76aa
push esi
jmp 0x661b74c5
push dword [esp + 4]
push dword [esp]
pop esi
add esp, 4
pop dword [esp]
pop esp
mov dword [esp], esi
mov dword [esp], edx
jmp 0x661b7777
xor edx, 0x3dbe7242
inc edx
push ecx
push ebp
mov dword [esp], eax
mov eax, 0x4e8603eb
xor eax, 0x79097ed4
add eax, 0xfc6eeccb
mov ecx, eax
jmp 0x661b71dc
xor edx, eax
mov eax, dword [esp]
add esp, 4
push ebx
mov ebx, 0x6bfa4bb1
xor ebx, 0x7aff13c0
jmp 0x661b77e8
add edx, 0x42c622c4
mov eax, edx
pop edx
jmp 0x661b7737
mov ecx, dword [esp]
sub esp, 4
jmp 0x661b758d
add dword [esp], reloc.kernel32.dll_GetCurrentThreadId
push edi
jmp 0x661b795a
mov esi, 0xe4cd14f2
sub esi, 0x7ffc9716
sub esi, eax
jmp 0x661b759d
sub edi, esi
push esi
mov esi, 0x3fe30be0
sub edi, esi
pop esi
push dword [esp]
pop esi
jmp 0x661b7721
push 0x3db09500
mov dword [esp], eax
mov dword [esp], ebx
jmp 0x661b733b
sub ebx, reloc.kernel32.dll_GetCurrentThreadId
xor ebx, 0xfc0bbf6f
jmp 0x661b76e6
mov dword [esp], edx
push esp
pop edx
add edx, 4
jmp 0x661b74a0
add esi, 0x7ffc9716
pop eax
xor ecx, esi
pop esi
sub ecx, 0xa0772365
add eax, ecx
pop ecx
jmp 0x661b742e
push 0x2386e878
mov dword [esp], ebp
jmp 0x661b7470
xor ecx, 0x514380fe
xor edx, ecx
pop ecx
jmp 0x661b78d6
push 0x2c8e53
mov dword [esp], esi
push ecx
jmp 0x661b78bd
pop esp
mov eax, ebx
jmp 0x661b70c2
push edx
mov dword [esp], eax
mov dword [esp], reloc.kernel32.dll_GetCurrentThreadId
mov dword [esp], ebx
mov ebx, 0x3f373601
jmp 0x661b7971
push edx
mov edx, 0x5fd51d61
not edx
and edx, 0x5f7d48c2
xor edx, 0x5eb4ae22
shl edx, 1
jmp 0x661b7520
push ebx
push edx
push 0x72fffbf2
pop edx
neg edx
shr edx, 1
xor edx, 0x197abebf
mov ebx, edx
pop edx
sub eax, ebx
mov ebx, dword [esp]
add esp, 4
jmp 0x661b72f3
add dword [esp], reloc.kernel32.dll_GetCurrentThreadId
add dword [esp], reloc.kernel32.dll_GetCurrentThreadId
mov dword [esp], ebp
mov ebp, 0x7f7c9b20
push edx
mov edx, 0x4abfbde4
mov ebx, 0xaa219a35
xor ebx, edx
pop edx
sub ebx, ebp
pop ebp
xor edx, ebx
mov ebx, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], esi
mov dword [esp], edi
push ebx
mov ebx, 0x747681db
mov edi, ebx
pop ebx
jmp 0x661b743c
add esi, eax
jmp 0x661b7804
shr edi, 3
dec edi
jmp 0x661b7a06
xor edi, ecx
mov ecx, dword [esp]
push ebp
mov ebp, esp
jmp 0x661b7755
mov ecx, 4
jmp 0x661b77ad
push edx
mov dword [esp], reloc.kernel32.dll_GetCurrentThreadId
jmp 0x661b76cd
add ebx, 4
jmp 0x661b744c
xor ecx, 0x2d729022
jmp 0x661b7693
add dword [esp], reloc.kernel32.dll_GetCurrentThreadId
shl dword [esp], 8
not dword [esp]
jmp 0x661b724c
push ecx
jmp 0x661b782f
add ecx, ebx
pop ebx
shr ecx, 3
not ecx
xor ecx, 0xa4c7de1c
push ecx
push ebp
mov ebp, 0xf7f68a1
add dword [esp + 4], ebp
pop ebp
jmp 0x661b732f
inc edi
neg edi
sub edi, 0x6b5d6cad
add edi, 0x77f64fff
jmp 0x661b77da
mov ecx, dword [esp]
jmp 0x661b713a
push edx
push esp
pop edx
jmp 0x661b76e0
not ecx
sub ecx, 1
push ebp
jmp 0x661b77d0
sub esi, eax
mov eax, dword [esp]
add esp, 4
jmp 0x661b74bf
sub eax, 4
xor eax, dword [esp]
xor dword [esp], eax
jmp 0x661b741d
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
add edi, 0x6d7f25a5
push edi
not dword [esp]
pop edi
push ecx
push esi
jmp 0x661b792c
pop dword [eax + edi]
jmp 0x661b75d0
mov eax, 0x78ba47bf
xor eax, 0x7bfb8a22
xor eax, 0x7dfd6100
sub eax, 0x3f4e11fc
add ecx, eax
jmp 0x661b73ce
mov eax, 0x657f7628
add ebx, eax
pop eax
xor ebx, 0x3fdb5c89
jmp 0x661b757c
add ebp, ecx
pop ecx
jmp 0x661b756c
mov edx, 0x6fde5134
push eax
mov eax, 0x6fde5130
jmp 0x661b7504
mov ebp, 0x6f775b66
jmp 0x661b798d
add edi, 0xab3df82a
add esi, edi
pop edi
jmp 0x661b7683
or ebx, 0x5f71df2a
not ebx
or ebx, 0x7adf8bac
push ebp
mov ebp, 0x9428e67d
xor ebx, ebp
pop ebp
jmp 0x661b72c9
sub esi, 0x3ff79fc9
jmp 0x661b780f
pop eax
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
pop esp
push edx
mov dword [esp], edi
mov dword [esp], ebx
mov ebx, esp
push eax
push 4
pop eax
jmp 0x661b7416
mov ecx, 0x5db011be
xor ecx, 0x264b80ff
jmp 0x661b7849
push dword [esp]
pop ebx
push ebx
jmp 0x661b7258
push 0x1daefa70
mov dword [esp], ecx
not dword [esp]
pop ecx
jmp 0x661b7729
pop esp
push eax
jmp 0x661b7086
pop eax
sub esp, 4
mov dword [esp], ecx
mov dword [esp], ebp
mov ebp, 4
add eax, ebp
pop ebp
push ebx
push 0x5dd3b2d7
pop ebx
and ebx, 0x5edc7e09
jmp 0x661b7895
shr ebx, 6
or ebx, 0x3fef0047
jmp 0x661b78a3
shl ebx, 1
dec ebx
sub ebx, 0x83f6bc2
sub ebx, 0x77bf15d7
sub eax, ebx
mov ebx, dword [esp]
jmp 0x661b78c9
mov ecx, 4
mov esi, ecx
jmp 0x661b7911
add esp, 4
push eax
push dword [esp + 4]
jmp 0x661b7476
sub edx, 0x76dd2483
push edi
push 0x53dd2e19
mov dword [esp], esi
push 0x5fbe9ca
jmp 0x661b78ef
mov esi, dword [esp]
add esp, 4
add esi, 0x71bf4cb7
neg esi
push eax
mov eax, 0x7bf5241
push esi
mov esi, 0x7fbe513f
jmp 0x661b79dd
pop ecx
push eax
mov eax, 0x5fb3fdde
add eax, 0x73fe24d9
and eax, 0x7eed7540
sub eax, 0x3ff0d49a
jmp 0x661b7983
mov esi, 0x77cb2721
mov ecx, 0x514abd3
xor ecx, esi
pop esi
sub ecx, 0x6ff66bd1
xor ecx, 0x7d12a160
xor edi, ecx
mov ecx, dword [esp]
add esp, 4
jmp 0x661b75e6
add edi, eax
pop eax
jmp 0x661b7558
mov edi, 0xc1b45b68
xor dword [esp + 4], edi
mov edi, dword [esp]
add esp, 4
jmp 0x661b783f
shl ebx, 1
push ebp
mov ebp, 0
sub ebp, ebx
xchg ebx, ebp
jmp 0x661b70ea
sub eax, 0xd2cc3f86
jmp 0x661b7952
or ecx, ebp
pop ebp
jmp 0x661b734f
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], esi
jmp 0x661b79bd
mov esp, dword [esp]
cmp edi, 0xffffa348
jne 0x661b72bb
sti
mov edx, 0x67f77914
jmp 0x661b74e2
push ecx
mov ecx, 0x19b75a54
push 0x43dedab3
mov dword [esp], ebx
mov ebx, 0x7f8fa380
or ebx, 0x6fef1d90
inc ebx
push eax
jmp 0x661b779a
push ebp
mov ebp, 0x3ffee332
jmp 0x661b79f7
mov eax, 0
sub eax, edi
mov edi, eax
pop eax
jmp 0x661b768a
xor esi, ebp
pop ebp
shl esi, 1
not esi
neg esi
jmp 0x661b721e
inc edi
shl edi, 2
xor edi, 0x6dfdb832
add edx, edi
pop edi
push 0x7b176cba
mov dword [esp], ebp
mov dword [esp], reloc.kernel32.dll_GetCurrentThreadId
mov dword [esp], eax
push ecx
mov dword [esp], esi
mov esi, 0x7d5b4c0f
mov dword [esp + 4], esi
mov esi, dword [esp]
add esp, 4
jmp 0x661b7539