Function at 0x647f00
Capabilities:
Encode data using xor

Disassembly:
push ebx
push esi
add esp, 0xffffffb8
mov ecx, pe_nt_image_headers32
mov dword [esp + 4], edx
mov dword [esp], eax
lea ebx, [esp + 8]
mov edx, dword [esp + 4]
mov eax, ebx
call fcn.005c83bc
xor eax, eax
mov edx, dword [ebx + 0x10]
add dword [ebx], edx
mov ecx, dword [ebx]
xor dword [ebx + 0x30], ecx
mov edx, dword [ebx + 0x30]
mov ecx, edx
shl ecx, 0x10
shr edx, 0x10
or ecx, edx
mov dword [ebx + 0x30], ecx
add dword [ebx + 0x20], ecx
mov edx, dword [ebx + 0x20]
xor dword [ebx + 0x10], edx
mov edx, dword [ebx + 0x10]
mov ecx, edx
shl ecx, 0xc
shr edx, 0x14
or ecx, edx
mov dword [ebx + 0x10], ecx
add dword [ebx], ecx
mov edx, dword [ebx]
xor dword [ebx + 0x30], edx
mov edx, dword [ebx + 0x30]
mov ecx, edx
shl ecx, 8
shr edx, 0x18
or ecx, edx
mov dword [ebx + 0x30], ecx
add dword [ebx + 0x20], ecx
mov edx, dword [ebx + 0x20]
xor dword [ebx + 0x10], edx
mov edx, dword [ebx + 0x10]
mov ecx, edx
shl ecx, 7
shr edx, 0x19
or ecx, edx
mov dword [ebx + 0x10], ecx
mov edx, dword [ebx + 0x14]
add dword [ebx + 4], edx
mov ecx, dword [ebx + 4]
xor dword [ebx + 0x34], ecx
mov edx, dword [ebx + 0x34]
mov ecx, edx
shl ecx, 0x10
shr edx, 0x10
or ecx, edx
mov dword [ebx + 0x34], ecx
add dword [ebx + 0x24], ecx
mov edx, dword [ebx + 0x24]
xor dword [ebx + 0x14], edx
mov edx, dword [ebx + 0x14]
mov ecx, edx
shl ecx, 0xc
shr edx, 0x14
or ecx, edx
mov dword [ebx + 0x14], ecx
add dword [ebx + 4], ecx
mov edx, dword [ebx + 4]
xor dword [ebx + 0x34], edx
mov edx, dword [ebx + 0x34]
mov ecx, edx
shl ecx, 8
shr edx, 0x18
or ecx, edx
mov dword [ebx + 0x34], ecx
add dword [ebx + 0x24], ecx
mov edx, dword [ebx + 0x24]
xor dword [ebx + 0x14], edx
mov edx, dword [ebx + 0x14]
mov ecx, edx
shl ecx, 7
shr edx, 0x19
or ecx, edx
mov dword [ebx + 0x14], ecx
mov edx, dword [ebx + 0x18]
add dword [ebx + 8], edx
mov ecx, dword [ebx + 8]
xor dword [ebx + 0x38], ecx
mov edx, dword [ebx + 0x38]
mov ecx, edx
shl ecx, 0x10
shr edx, 0x10
or ecx, edx
mov dword [ebx + 0x38], ecx
add dword [ebx + 0x28], ecx
mov edx, dword [ebx + 0x28]
xor dword [ebx + 0x18], edx
mov edx, dword [ebx + 0x18]
mov ecx, edx
shl ecx, 0xc
shr edx, 0x14
or ecx, edx
mov dword [ebx + 0x18], ecx
add dword [ebx + 8], ecx
mov edx, dword [ebx + 8]
xor dword [ebx + 0x38], edx
mov edx, dword [ebx + 0x38]
mov ecx, edx
shl ecx, 8
shr edx, 0x18
or ecx, edx
mov dword [ebx + 0x38], ecx
add dword [ebx + 0x28], ecx
mov edx, dword [ebx + 0x28]
xor dword [ebx + 0x18], edx
mov edx, dword [ebx + 0x18]
mov ecx, edx
shl ecx, 7
shr edx, 0x19
or ecx, edx
mov dword [ebx + 0x18], ecx
mov edx, dword [ebx + 0x1c]
add dword [ebx + 0xc], edx
mov ecx, dword [ebx + 0xc]
xor dword [ebx + 0x3c], ecx
mov edx, dword [ebx + 0x3c]
mov ecx, edx
shl ecx, 0x10
shr edx, 0x10
or ecx, edx
mov dword [ebx + 0x3c], ecx
add dword [ebx + 0x2c], ecx
mov edx, dword [ebx + 0x2c]
xor dword [ebx + 0x1c], edx
mov edx, dword [ebx + 0x1c]
mov ecx, edx
shl ecx, 0xc
shr edx, 0x14
or ecx, edx
mov dword [ebx + 0x1c], ecx
add dword [ebx + 0xc], ecx
mov edx, dword [ebx + 0xc]
xor dword [ebx + 0x3c], edx
mov edx, dword [ebx + 0x3c]
mov ecx, edx
shl ecx, 8
shr edx, 0x18
or ecx, edx
mov dword [ebx + 0x3c], ecx
mov edx, dword [ebx + 0x3c]
add dword [ebx + 0x2c], edx
mov ecx, dword [ebx + 0x2c]
xor dword [ebx + 0x1c], ecx
mov edx, dword [ebx + 0x1c]
shl edx, 7
mov ecx, dword [ebx + 0x1c]
shr ecx, 0x19
or edx, ecx
mov dword [ebx + 0x1c], edx
mov edx, dword [ebx + 0x14]
add dword [ebx], edx
mov ecx, dword [ebx]
xor dword [ebx + 0x3c], ecx
mov edx, dword [ebx + 0x3c]
shl edx, 0x10
mov ecx, dword [ebx + 0x3c]
shr ecx, 0x10
or edx, ecx
mov dword [ebx + 0x3c], edx
mov edx, dword [ebx + 0x3c]
add dword [ebx + 0x28], edx
mov ecx, dword [ebx + 0x28]
xor dword [ebx + 0x14], ecx
mov edx, dword [ebx + 0x14]
shl edx, 0xc
mov ecx, dword [ebx + 0x14]
shr ecx, 0x14
or edx, ecx
mov dword [ebx + 0x14], edx
mov edx, dword [ebx + 0x14]
add dword [ebx], edx
mov ecx, dword [ebx]
xor dword [ebx + 0x3c], ecx
mov edx, dword [ebx + 0x3c]
shl edx, 8
mov ecx, dword [ebx + 0x3c]
shr ecx, 0x18
or edx, ecx
mov dword [ebx + 0x3c], edx
mov edx, dword [ebx + 0x3c]
add dword [ebx + 0x28], edx
mov ecx, dword [ebx + 0x28]
xor dword [ebx + 0x14], ecx
mov edx, dword [ebx + 0x14]
shl edx, 7
mov ecx, dword [ebx + 0x14]
shr ecx, 0x19
or edx, ecx
mov dword [ebx + 0x14], edx
mov edx, dword [ebx + 0x18]
add dword [ebx + 4], edx
mov ecx, dword [ebx + 4]
xor dword [ebx + 0x30], ecx
mov edx, dword [ebx + 0x30]
shl edx, 0x10
mov ecx, dword [ebx + 0x30]
shr ecx, 0x10
or edx, ecx
mov dword [ebx + 0x30], edx
mov edx, dword [ebx + 0x30]
add dword [ebx + 0x2c], edx
mov ecx, dword [ebx + 0x2c]
xor dword [ebx + 0x18], ecx
mov edx, dword [ebx + 0x18]
shl edx, 0xc
mov ecx, dword [ebx + 0x18]
shr ecx, 0x14
or edx, ecx
mov dword [ebx + 0x18], edx
mov edx, dword [ebx + 0x18]
add dword [ebx + 4], edx
mov ecx, dword [ebx + 4]
xor dword [ebx + 0x30], ecx
mov edx, dword [ebx + 0x30]
shl edx, 8
mov ecx, dword [ebx + 0x30]
shr ecx, 0x18
or edx, ecx
mov dword [ebx + 0x30], edx
mov edx, dword [ebx + 0x30]
add dword [ebx + 0x2c], edx
mov ecx, dword [ebx + 0x2c]
xor dword [ebx + 0x18], ecx
mov edx, dword [ebx + 0x18]
shl edx, 7
mov ecx, dword [ebx + 0x18]
shr ecx, 0x19
or edx, ecx
mov dword [ebx + 0x18], edx
mov edx, dword [ebx + 0x1c]
add dword [ebx + 8], edx
mov ecx, dword [ebx + 8]
xor dword [ebx + 0x34], ecx
mov edx, dword [ebx + 0x34]
shl edx, 0x10
mov ecx, dword [ebx + 0x34]
shr ecx, 0x10
or edx, ecx
mov dword [ebx + 0x34], edx
mov edx, dword [ebx + 0x34]
add dword [ebx + 0x20], edx
mov ecx, dword [ebx + 0x20]
xor dword [ebx + 0x1c], ecx
mov edx, dword [ebx + 0x1c]
shl edx, 0xc
mov ecx, dword [ebx + 0x1c]
shr ecx, 0x14
or edx, ecx
mov dword [ebx + 0x1c], edx
mov edx, dword [ebx + 0x1c]
add dword [ebx + 8], edx
mov ecx, dword [ebx + 8]
xor dword [ebx + 0x34], ecx
mov edx, dword [ebx + 0x34]
shl edx, 8
mov ecx, dword [ebx + 0x34]
shr ecx, 0x18
or edx, ecx
mov dword [ebx + 0x34], edx
mov edx, dword [ebx + 0x34]
add dword [ebx + 0x20], edx
mov ecx, dword [ebx + 0x20]
xor dword [ebx + 0x1c], ecx
mov edx, dword [ebx + 0x1c]
shl edx, 7
mov ecx, dword [ebx + 0x1c]
shr ecx, 0x19
or edx, ecx
mov dword [ebx + 0x1c], edx
mov edx, dword [ebx + 0x10]
add dword [ebx + 0xc], edx
mov ecx, dword [ebx + 0xc]
xor dword [ebx + 0x38], ecx
mov edx, dword [ebx + 0x38]
shl edx, 0x10
mov ecx, dword [ebx + 0x38]
shr ecx, 0x10
or edx, ecx
mov dword [ebx + 0x38], edx
mov edx, dword [ebx + 0x38]
add dword [ebx + 0x24], edx
mov ecx, dword [ebx + 0x24]
xor dword [ebx + 0x10], ecx
mov edx, dword [ebx + 0x10]
shl edx, 0xc
mov ecx, dword [ebx + 0x10]
shr ecx, 0x14
or edx, ecx
mov dword [ebx + 0x10], edx
mov edx, dword [ebx + 0x10]
add dword [ebx + 0xc], edx
mov ecx, dword [ebx + 0xc]
xor dword [ebx + 0x38], ecx
mov edx, dword [ebx + 0x38]
shl edx, 8
mov ecx, dword [ebx + 0x38]
shr ecx, 0x18
or edx, ecx
mov dword [ebx + 0x38], edx
mov edx, dword [ebx + 0x38]
add dword [ebx + 0x24], edx
mov ecx, dword [ebx + 0x24]
xor dword [ebx + 0x10], ecx
mov edx, dword [ebx + 0x10]
shl edx, 7
mov ecx, dword [ebx + 0x10]
shr ecx, 0x19
or edx, ecx
mov dword [ebx + 0x10], edx
inc eax
cmp eax, 0xa
jl 0x647f22
xor eax, eax
mov edx, dword [esp]
mov esi, edx
mov edx, dword [esp + 4]
mov ecx, edx
mov edx, ebx
mov ebx, dword [edx]
add edx, 4
add ebx, dword [ecx]
add ecx, 4
mov dword [esi], ebx
add esi, 4
inc eax
cmp eax, 0x10
jl 0x6482a3
add esp, 0x48
pop esi
pop ebx
ret