Function at 0x4223a0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x793df8
mov eax, dword fs:[0]
push eax
sub esp, 0xc4
mov eax, dword [0x831184]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov eax, edx
mov dword [ebp - 0x7c], eax
mov edi, ecx
mov dword [ebp - 0xa0], edi
mov dword [ebp - 0x80], edi
mov dword [ebp - 4], 0
xor ecx, ecx
mov dword [ebp - 0xa4], edi
mov dword [ebp - 0x78], 0
mov dword [ebp - 0xa8], eax
mov eax, 0x12
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x70], 0xc400e0
mov dword [ebp - 0x6c], 0xd800d8
mov dword [ebp - 0x68], 0xc200cc
mov dword [ebp - 0x64], 0xd500c3
mov dword [ebp - 0x60], 0xee00c3
mov dword [ebp - 0x5c], 0xc600e3
mov dword [ebp - 0x58], 0xd200da
mov dword [ebp - 0x54], 0xdb00c2
mov dword [ebp - 0x50], 0xc900cd
mov dword [ebp - 0x4c], 0xbb
nop dword [eax + eax]
lea eax, [ecx + 0xa9]
xor word [ebp + ecx*2 - 0x70], ax
inc ecx
mov eax, dword [ebp - 0x74]
cmp ecx, eax
jb 0x422450
xor ecx, ecx
mov word [ebp + eax*2 - 0x70], cx
xor eax, eax
mov dword [ebp - 0x30], ecx
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x2c], 7
lea edx, [ecx + 2]
mov word [ebp - 0x40], ax
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x422480
sub ecx, edx
lea eax, [ebp - 0x70]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x40]
call fcn.004044f0
mov dword [ebp - 4], 1
xor eax, eax
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 7
mov word [edi], ax
mov dword [ebp - 0x78], 1
mov dword [ebp - 0x1c], eax
push 0x20019
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 3
push eax
push SysReAllocString
lea ecx, [ebp - 0x1c]
call fcn.00420010
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x1c]
call fcn.00420090
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x24]
mov esi, dword [ebp - 0x28]
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0x80], esi
cmp esi, ecx
je 0x4227e0
mov dword [ebp - 0x18], 0
push 0x7cf384
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 6
push eax
lea eax, [ebp - 0xc0]
push eax
call fcn.00421b40
add esp, 0xc
mov ecx, eax
mov byte [ebp - 4], 7
mov eax, esi
cmp dword [esi + 0x14], 8
jb 0x422534
mov eax, dword [esi]
push dword [esi + 0x10]
push eax
call fcn.00407c50
or dword [ebp - 0x78], 2
xor ecx, ecx
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x98], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x88], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov byte [ebp - 4], 8
lea eax, [ebp - 0x98]
cmp dword [ebp - 0x84], 8
mov dword [ebp - 0x44], ecx
lea ecx, [ebp - 0x44]
cmovae eax, dword [ebp - 0x98]
push ecx
push 0x20019
push 0
push eax
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x422874
lea ecx, [ebp - 0x18]
call fcn.0041ff70
mov eax, dword [ebp - 0x44]
lea ecx, [ebp - 0x98]
mov dword [ebp - 0x18], eax
call fcn.00404490
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 6
call fcn.00404490
mov dword [ebp - 0x64], 0xb
xor ecx, ecx
mov dword [ebp - 0x60], 0xd800f9
mov dword [ebp - 0x5c], 0xc800c4
mov dword [ebp - 0x58], 0xcd00d8
mov dword [ebp - 0x54], 0xfe00db
mov dword [ebp - 0x50], 0xdf00d0
mov dword [ebp - 0x4c], 0xb400d6
lea eax, [ecx + 0xa9]
xor word [ebp + ecx*2 - 0x60], ax
inc ecx
mov eax, dword [ebp - 0x64]
cmp ecx, eax
jb 0x422614
xor ecx, ecx
mov word [ebp + eax*2 - 0x60], cx
xor eax, eax
mov dword [ebp - 0x88], ecx
lea ecx, [ebp - 0x60]
mov dword [ebp - 0x84], 7
lea edx, [ecx + 2]
mov word [ebp - 0x98], ax
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x422650
sub ecx, edx
lea eax, [ebp - 0x60]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x98]
call fcn.004044f0
lea eax, [ebp - 0x98]
mov byte [ebp - 4], 9
push eax
lea edx, [ebp - 0x18]
lea ecx, [ebp - 0xc0]
call fcn.00422320
mov ecx, dword [ebp - 0x7c]
add esp, 4
mov edx, ecx
cmp dword [ecx + 0x14], 8
jb 0x422698
mov edx, dword [ecx]
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x4226a3
mov eax, dword [eax]
mov edi, dword [ebp - 0x7c]
cmp ecx, dword [edi + 0x10]
mov edi, dword [ebp - 0xa0]
jne 0x4226c4
push ecx
push edx
push eax
call fcn.004090d0
add esp, 0xc
mov byte [ebp - 0x45], 1
test eax, eax
je 0x4226c8
mov byte [ebp - 0x45], 0
lea ecx, [ebp - 0xc0]
call fcn.00404490
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 6
call fcn.00404490
cmp byte [ebp - 0x45], 0
je 0x4227f2
mov dword [ebp - 0x64], 0xb
xor eax, eax
mov dword [ebp - 0x60], 0xd800f9
mov dword [ebp - 0x5c], 0xc800c4
mov dword [ebp - 0x58], 0xcd00d8
mov dword [ebp - 0x54], 0xf900db
mov dword [ebp - 0x50], 0xdd00d2
mov dword [ebp - 0x4c], 0xb400dd
nop
lea ecx, [eax + 0xa9]
xor word [ebp + eax*2 - 0x60], cx
inc eax
mov ecx, dword [ebp - 0x64]
cmp eax, ecx
jb 0x422720
xor eax, eax
mov word [ebp + ecx*2 - 0x60], ax
lea ecx, [ebp - 0x60]
mov dword [ebp - 0x88], eax
lea edx, [ecx + 2]
mov dword [ebp - 0x84], 7
mov word [ebp - 0x98], ax
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x422757
sub ecx, edx
lea eax, [ebp - 0x60]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x98]
call fcn.004044f0
lea eax, [ebp - 0x98]
mov byte [ebp - 4], 0xa
push eax
lea edx, [ebp - 0x18]
lea ecx, [ebp - 0xc0]
call fcn.00422320
mov esi, eax
add esp, 4
cmp edi, esi
je 0x4227c2
mov ecx, edi
call fcn.00404490
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [edi], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [edi + 0x10], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
lea ecx, [ebp - 0xc0]
call fcn.00404490
lea ecx, [ebp - 0x98]
call fcn.00404490
lea ecx, [ebp - 0x18]
call fcn.0041ff70
lea ecx, [ebp - 0x28]
call fcn.00404220
lea ecx, [ebp - 0x1c]
call fcn.0041ff70
jmp 0x42284e
lea ecx, [ebp - 0x18]
call fcn.0041ff70
mov ecx, dword [ebp - 0x9c]
add esi, 0x18
mov dword [ebp - 4], 4
jmp 0x4224f6
lea ecx, [ebp - 0x40]
call fcn.00404490
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0076eb7e
mov esp, ebp
pop ebp
ret
push eax
push str.RegOpenKeyEx_failed.
lea ecx, [ebp - 0xd0]
call fcn.0041fec0
push 0x826a10
lea eax, [ebp - 0xd0]
push eax
call sub.VCRUNTIME140.dll__CxxThrowException
int3