Function at 0x811ea4
Capabilities:
Encode data using xor

Disassembly:
mov eax, 0x40
call fcn.007f6794
cmp dword [esp + 0x4c], 0
mov ecx, dword [esp + 0x44]
mov eax, dword [esp + 0x48]
push ebx
mov ebx, dword [ecx + 8]
push ebp
mov ebp, dword [ecx + 4]
je 0x812828
push esi
push edi
movzx esi, byte [eax]
xor edx, edx
mov dh, byte [eax + 1]
add eax, 1
add eax, 1
add eax, 1
movzx edi, byte [eax + 1]
or esi, edx
movzx edx, byte [eax - 1]
shl edx, 0x10
or esi, edx
movzx edx, byte [eax]
shl edx, 0x18
or esi, edx
xor edx, edx
add eax, 1
mov dh, byte [eax + 1]
add eax, 1
add eax, 1
add eax, 1
add eax, 1
sub dword [esp + 0x5c], 1
add eax, 1
or edi, edx
movzx edx, byte [eax - 3]
shl edx, 0x10
or edi, edx
movzx edx, byte [eax - 2]
shl edx, 0x18
or edi, edx
mov edx, dword [ecx + 0xc]
mov dword [esp + 0x28], edi
mov edi, edx
xor edi, ebx
and edi, ebp
xor edi, edx
mov edx, dword [ecx]
add edi, esi
mov dword [esp + 0x4c], esi
lea esi, reloc.PSAPI.DLL_GetMappedFileNameW
movzx edi, byte [eax - 1]
xor edx, edx
mov dh, byte [eax]
add eax, 1
add eax, 1
rol esi, 7
add esi, ebp
add eax, 1
add eax, 1
or edi, edx
movzx edx, byte [eax - 3]
shl edx, 0x10
or edi, edx
movzx edx, byte [eax - 2]
shl edx, 0x18
or edi, edx
mov edx, dword [ecx + 0xc]
mov dword [esp + 0x44], edi
mov edi, ebx
xor edi, ebp
and edi, esi
xor edi, ebx
add edi, dword [esp + 0x28]
xor ebx, ebx
mov bh, byte [eax]
lea edi, reloc.PSAPI.DLL_GetMappedFileNameW
movzx edx, byte [eax - 1]
add eax, 1
add eax, 1
or edx, ebx
movzx ebx, byte [eax - 1]
shl ebx, 0x10
or edx, ebx
movzx ebx, byte [eax]
shl ebx, 0x18
rol edi, 0xc
or edx, ebx
add edi, esi
add eax, 1
mov dword [esp + 0x20], edx
mov ebx, ebp
xor ebx, esi
and ebx, edi
xor ebx, ebp
add ebx, dword [esp + 0x44]
mov edx, dword [ecx + 8]
lea ebp, reloc.PSAPI.DLL_GetMappedFileNameW
movzx edx, byte [eax]
xor ebx, ebx
mov bh, byte [eax + 1]
add eax, 1
add eax, 1
add eax, 1
rol ebp, 0x11
add ebp, edi
add eax, 1
or edx, ebx
movzx ebx, byte [eax - 2]
shl ebx, 0x10
or edx, ebx
movzx ebx, byte [eax - 1]
shl ebx, 0x18
or edx, ebx
mov dword [esp + 0x3c], edx
mov edx, dword [ecx + 4]
mov ebx, edi
xor ebx, esi
and ebx, ebp
xor ebx, esi
add ebx, dword [esp + 0x20]
add eax, 1
lea edx, reloc.PSAPI.DLL_GetMappedFileNameW
rol edx, 0x16
add edx, ebp
mov dword [esp + 0x58], edx
movzx edx, byte [eax - 1]
xor ebx, ebx
mov bh, byte [eax]
add eax, 1
add eax, 1
add eax, 1
add eax, 1
add eax, 1
add eax, 1
or edx, ebx
movzx ebx, byte [eax - 5]
shl ebx, 0x10
or edx, ebx
movzx ebx, byte [eax - 4]
shl ebx, 0x18
or edx, ebx
mov dword [esp + 0x18], edx
mov edx, edi
xor edx, ebp
and edx, dword [esp + 0x58]
xor ebx, ebx
mov bh, byte [eax - 2]
xor edx, edi
add edx, dword [esp + 0x3c]
add eax, 1
lea esi, reloc.PSAPI.DLL_GetMappedFileNameW
movzx edx, byte [eax - 4]
or edx, ebx
movzx ebx, byte [eax - 2]
shl ebx, 0x10
or edx, ebx
movzx ebx, byte [eax - 1]
shl ebx, 0x18
or edx, ebx
mov dword [esp + 0x34], edx
rol esi, 7
add esi, dword [esp + 0x58]
mov edx, ebp
xor edx, dword [esp + 0x58]
and edx, esi
xor edx, ebp
add edx, dword [esp + 0x18]
lea edi, reloc.PSAPI.DLL_GetMappedFileNameW
movzx edx, byte [eax]
rol edi, 0xc
add edi, esi
add eax, 1
xor ebx, ebx
mov bh, byte [eax]
add eax, 1
add eax, 1
add eax, 1
add eax, 1
add eax, 1
add eax, 1
or edx, ebx
movzx ebx, byte [eax - 5]
shl ebx, 0x10
or edx, ebx
movzx ebx, byte [eax - 4]
shl ebx, 0x18
or edx, ebx
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x58]
mov ebx, edx
xor ebx, esi
and ebx, edi
xor ebx, edx
add ebx, dword [esp + 0x34]
movzx edx, byte [eax - 3]
lea ebp, reloc.PSAPI.DLL_GetMappedFileNameW
xor ebx, ebx
mov bh, byte [eax - 2]
rol ebp, 0x11
add ebp, edi
add eax, 1
add eax, 1
add eax, 1
add eax, 1
or edx, ebx
movzx ebx, byte [eax - 5]
shl ebx, 0x10
or edx, ebx
movzx ebx, byte [eax - 4]
shl ebx, 0x18
or edx, ebx
mov ebx, dword [esp + 0x58]
mov dword [esp + 0x2c], edx
mov edx, edi
xor edx, esi
and edx, ebp
xor edx, esi
add edx, dword [esp + 0x10]
add eax, 1
lea edx, reloc.PSAPI.DLL_GetMappedFileNameW
rol edx, 0x16
add edx, ebp
mov dword [esp + 0x58], edx
movzx edx, byte [eax - 4]
xor ebx, ebx
mov bh, byte [eax - 3]
add eax, 1
add eax, 1
or edx, ebx
movzx ebx, byte [eax - 4]
shl ebx, 0x10
or edx, ebx
movzx ebx, byte [eax - 3]
shl ebx, 0x18
or edx, ebx
mov dword [esp + 0x48], edx
mov edx, edi
xor edx, ebp
and edx, dword [esp + 0x58]
xor ebx, ebx
mov bh, byte [eax - 1]
xor edx, edi
add edx, dword [esp + 0x2c]
lea esi, reloc.PSAPI.DLL_GetMappedFileNameW
movzx edx, byte [eax - 2]
or edx, ebx
movzx ebx, byte [eax]
shl ebx, 0x10
rol esi, 7
add esi, dword [esp + 0x58]
or edx, ebx
movzx ebx, byte [eax + 1]
add eax, 1
shl ebx, 0x18
or edx, ebx
mov dword [esp + 0x24], edx
xor ebx, ebx
add eax, 1
mov bh, byte [eax + 1]
mov edx, ebp
xor edx, dword [esp + 0x58]
add eax, 1
and edx, esi
xor edx, ebp
add edx, dword [esp + 0x48]
add eax, 1
lea edi, reloc.PSAPI.DLL_GetMappedFileNameW
movzx edx, byte [eax - 2]
or edx, ebx
movzx ebx, byte [eax]
shl ebx, 0x10
or edx, ebx
movzx ebx, byte [eax + 1]
shl ebx, 0x18
or edx, ebx
add eax, 1
mov dword [esp + 0x40], edx
mov edx, dword [esp + 0x58]
mov ebx, edx
xor ebx, esi
rol edi, 0xc
add edi, esi
and ebx, edi
xor ebx, edx
add ebx, dword [esp + 0x24]
movzx edx, byte [eax + 1]
lea ebp, reloc.PSAPI.DLL_GetMappedFileNameW
add eax, 1
xor ebx, ebx
mov bh, byte [eax + 1]
add eax, 1
add eax, 1
add eax, 1
rol ebp, 0x11
add ebp, edi
add eax, 1
or edx, ebx
movzx ebx, byte [eax - 2]
shl ebx, 0x10
or edx, ebx
movzx ebx, byte [eax - 1]
shl ebx, 0x18
or edx, ebx
mov ebx, dword [esp + 0x58]
mov dword [esp + 0x1c], edx
mov edx, edi
xor edx, esi
and edx, ebp
xor edx, esi
add edx, dword [esp + 0x40]
add eax, 1
lea edx, reloc.PSAPI.DLL_GetMappedFileNameW
rol edx, 0x16
add edx, ebp
mov dword [esp + 0x58], edx
movzx edx, byte [eax - 1]
xor ebx, ebx
mov bh, byte [eax]
add eax, 1
add eax, 1
add eax, 1
or edx, ebx
movzx ebx, byte [eax - 2]
shl ebx, 0x10
or edx, ebx
movzx ebx, byte [eax - 1]
shl ebx, 0x18
or edx, ebx
mov dword [esp + 0x38], edx
mov edx, edi
xor edx, ebp
and edx, dword [esp + 0x58]
xor edx, edi
add edx, dword [esp + 0x1c]
xor ebx, ebx
mov bh, byte [eax + 1]
lea esi, reloc.PSAPI.DLL_GetMappedFileNameW
movzx edx, byte [eax]
add eax, 1
add eax, 1
or edx, ebx
movzx ebx, byte [eax]
shl ebx, 0x10
or edx, ebx
movzx ebx, byte [eax + 1]
shl ebx, 0x18
or edx, ebx
add eax, 1
mov dword [esp + 0x14], edx
rol esi, 7
add esi, dword [esp + 0x58]
xor ebx, ebx
mov edx, ebp
xor edx, dword [esp + 0x58]
add eax, 1
mov bh, byte [eax + 1]
and edx, esi
xor edx, ebp
add edx, dword [esp + 0x38]
add eax, 1
lea edi, reloc.PSAPI.DLL_GetMappedFileNameW
movzx edx, byte [eax - 1]
or edx, ebx
movzx ebx, byte [eax + 1]
shl ebx, 0x10
or edx, ebx
add eax, 1
movzx ebx, byte [eax + 1]
shl ebx, 0x18
or edx, ebx
add eax, 1
rol edi, 0xc
add edi, esi
mov dword [esp + 0x30], edx
mov edx, dword [esp + 0x58]
mov ebx, edx
xor ebx, esi
and ebx, edi
xor ebx, edx
add ebx, dword [esp + 0x14]
mov edx, edi
lea ebp, reloc.PSAPI.DLL_GetMappedFileNameW
mov ebx, dword [esp + 0x58]
xor edx, esi
add eax, 1
rol ebp, 0x11
add ebp, edi
and edx, ebp
xor edx, esi
add edx, dword [esp + 0x30]
mov dword [esp + 0x54], edi
lea edx, reloc.PSAPI.DLL_GetMappedFileNameW
rol edx, 0x16
add edx, ebp
mov ebx, ebp
xor ebx, edx
and ebx, edi
xor ebx, ebp
add ebx, dword [esp + 0x28]
mov edi, edx
lea esi, reloc.PSAPI.DLL_GetMappedFileNameW
mov ebx, dword [esp + 0x54]
rol esi, 5
add esi, edx
xor edi, esi
and edi, ebp
xor edi, edx
add edi, dword [esp + 0x34]
lea edi, reloc.PSAPI.DLL_GetMappedFileNameW
rol edi, 9
add edi, esi
mov dword [esp + 0x54], edi
xor edi, esi
and edi, edx
xor edi, esi
add edi, dword [esp + 0x40]
lea ebp, reloc.PSAPI.DLL_GetMappedFileNameW
mov edi, dword [esp + 0x54]
mov ebx, edi
rol ebp, 0xe
add ebp, edi
xor ebx, ebp
and ebx, esi
xor ebx, edi
add ebx, dword [esp + 0x4c]
mov edi, ebp
lea edx, reloc.PSAPI.DLL_GetMappedFileNameW
rol edx, 0x14
add edx, ebp
xor edi, edx
and edi, dword [esp + 0x54]
mov ebx, dword [esp + 0x54]
xor edi, ebp
add edi, dword [esp + 0x18]
lea esi, reloc.PSAPI.DLL_GetMappedFileNameW
rol esi, 5
add esi, edx
mov edi, edx
xor edi, esi
and edi, ebp
xor edi, edx
add edi, dword [esp + 0x24]
lea edi, reloc.PSAPI.DLL_GetMappedFileNameW
rol edi, 9
add edi, esi
mov dword [esp + 0x54], edi
xor edi, esi
and edi, edx
xor edi, esi
add edi, dword [esp + 0x30]
lea ebp, reloc.PSAPI.DLL_GetMappedFileNameW
mov edi, dword [esp + 0x54]
mov ebx, edi
rol ebp, 0xe
add ebp, edi
xor ebx, ebp
and ebx, esi
xor ebx, edi
add ebx, dword [esp + 0x3c]
mov edi, ebp
lea edx, reloc.PSAPI.DLL_GetMappedFileNameW
mov ebx, dword [esp + 0x54]
rol edx, 0x14
add edx, ebp
xor edi, edx
and edi, dword [esp + 0x54]
xor edi, ebp
add edi, dword [esp + 0x48]
lea esi, reloc.PSAPI.DLL_GetMappedFileNameW
rol esi, 5
add esi, edx
mov edi, edx
xor edi, esi
and edi, ebp
xor edi, edx
add edi, dword [esp + 0x14]
lea edi, reloc.PSAPI.DLL_GetMappedFileNameW
rol edi, 9
add edi, esi
mov dword [esp + 0x54], edi
xor edi, esi
and edi, edx
xor edi, esi
add edi, dword [esp + 0x20]
lea ebp, reloc.PSAPI.DLL_GetMappedFileNameW
mov edi, dword [esp + 0x54]
rol ebp, 0xe
add ebp, edi
mov ebx, edi
xor ebx, ebp
and ebx, esi
xor ebx, edi
add ebx, dword [esp + 0x2c]
lea edx, reloc.PSAPI.DLL_GetMappedFileNameW
rol edx, 0x14
add edx, ebp
mov ebx, dword [esp + 0x54]
mov edi, ebp
xor edi, edx
and edi, dword [esp + 0x54]
xor edi, ebp
add edi, dword [esp + 0x38]
lea esi, reloc.PSAPI.DLL_GetMappedFileNameW
rol esi, 5
add esi, edx
mov edi, edx
xor edi, esi
and edi, ebp
xor edi, edx
add edi, dword [esp + 0x44]
lea edi, reloc.PSAPI.DLL_GetMappedFileNameW
rol edi, 9
add edi, esi
mov dword [esp + 0x54], edi
xor edi, esi
and edi, edx
xor edi, esi
add edi, dword [esp + 0x10]
lea ebp, reloc.PSAPI.DLL_GetMappedFileNameW
mov edi, dword [esp + 0x54]
mov ebx, edi
rol ebp, 0xe
add ebp, edi
xor ebx, ebp
mov dword [esp + 0x58], ebx
and ebx, esi
xor ebx, edi
add ebx, dword [esp + 0x1c]
mov edi, dword [esp + 0x58]
lea edx, reloc.PSAPI.DLL_GetMappedFileNameW
mov ebx, dword [esp + 0x54]
rol edx, 0x14
add edx, ebp
xor edi, edx
add edi, dword [esp + 0x18]
lea esi, reloc.PSAPI.DLL_GetMappedFileNameW
rol esi, 4
add esi, edx
mov edi, ebp
xor edi, edx
xor edi, esi
add edi, dword [esp + 0x2c]
lea edi, reloc.PSAPI.DLL_GetMappedFileNameW
rol edi, 0xb
add edi, esi
mov ebx, edi
xor ebx, edx
xor ebx, esi
add ebx, dword [esp + 0x40]
lea ebp, reloc.PSAPI.DLL_GetMappedFileNameW
rol ebp, 0x10
add ebp, edi
mov ebx, edi
xor ebx, ebp
mov dword [esp + 0x58], ebx
xor ebx, esi
add ebx, dword [esp + 0x14]
lea edx, reloc.PSAPI.DLL_GetMappedFileNameW
mov ebx, dword [esp + 0x58]
rol edx, 0x17
add edx, ebp
xor ebx, edx
add ebx, dword [esp + 0x28]
lea esi, reloc.PSAPI.DLL_GetMappedFileNameW
rol esi, 4
add esi, edx
mov ebx, ebp
xor ebx, edx
xor ebx, esi
add ebx, dword [esp + 0x3c]
lea edi, reloc.PSAPI.DLL_GetMappedFileNameW
rol edi, 0xb
add edi, esi
mov ebx, edi
xor ebx, edx
xor ebx, esi
add ebx, dword [esp + 0x10]
lea ebp, reloc.PSAPI.DLL_GetMappedFileNameW
rol ebp, 0x10
add ebp, edi
mov ebx, edi
xor ebx, ebp
mov dword [esp + 0x58], ebx
xor ebx, esi
add ebx, dword [esp + 0x24]
lea edx, reloc.PSAPI.DLL_GetMappedFileNameW
mov ebx, dword [esp + 0x58]
rol edx, 0x17
add edx, ebp
xor ebx, edx
add ebx, dword [esp + 0x38]
lea esi, reloc.PSAPI.DLL_GetMappedFileNameW
mov ebx, ebp
xor ebx, edx
rol esi, 4
add esi, edx
xor ebx, esi
add ebx, dword [esp + 0x4c]
lea edi, reloc.PSAPI.DLL_GetMappedFileNameW
rol edi, 0xb
add edi, esi
mov ebx, edi
xor ebx, edx
xor ebx, esi
add ebx, dword [esp + 0x20]
lea ebp, reloc.PSAPI.DLL_GetMappedFileNameW
rol ebp, 0x10
add ebp, edi
mov ebx, edi
xor ebx, ebp
mov dword [esp + 0x58], ebx
xor ebx, esi
add ebx, dword [esp + 0x34]
mov dword [esp + 0x54], ebp
lea edx, reloc.PSAPI.DLL_GetMappedFileNameW
mov ebx, dword [esp + 0x58]
rol edx, 0x17
add edx, ebp
xor ebx, edx
add ebx, dword [esp + 0x48]
xor ebp, edx
lea esi, reloc.PSAPI.DLL_GetMappedFileNameW
rol esi, 4
add esi, edx
xor ebp, esi
add ebp, dword [esp + 0x1c]
lea edi, reloc.PSAPI.DLL_GetMappedFileNameW
mov ebp, dword [esp + 0x54]
rol edi, 0xb
add edi, esi
mov ebx, edi
xor ebx, edx
xor ebx, esi
add ebx, dword [esp + 0x30]
lea ebx, reloc.PSAPI.DLL_GetMappedFileNameW
rol ebx, 0x10
add ebx, edi
mov ebp, edi
xor ebp, ebx
xor ebp, esi
add ebp, dword [esp + 0x44]
mov dword [esp + 0x54], ebx
lea edx, reloc.PSAPI.DLL_GetMappedFileNameW
rol edx, 0x17
add edx, ebx
mov ebx, edi
not ebx
or ebx, edx
xor ebx, dword [esp + 0x54]
add ebx, dword [esp + 0x4c]
lea esi, reloc.PSAPI.DLL_GetMappedFileNameW
mov ebx, dword [esp + 0x54]
rol esi, 6
mov ebp, ebx
add esi, edx
not ebp
or ebp, esi
xor ebp, edx
add ebp, dword [esp + 0x10]
lea edi, reloc.PSAPI.DLL_GetMappedFileNameW
rol edi, 0xa
add edi, esi
mov ebp, edx
not ebp
or ebp, edi
xor ebp, esi
add ebp, dword [esp + 0x14]
lea ebx, reloc.PSAPI.DLL_GetMappedFileNameW
rol ebx, 0xf
add ebx, edi
mov ebp, esi
not ebp
or ebp, ebx
xor ebp, edi
add ebp, dword [esp + 0x18]
lea edx, reloc.PSAPI.DLL_GetMappedFileNameW
rol edx, 0x15
add edx, ebx
mov ebp, edi
not ebp
or ebp, edx
xor ebp, ebx
add ebp, dword [esp + 0x1c]
lea esi, reloc.PSAPI.DLL_GetMappedFileNameW
rol esi, 6
add esi, edx
mov ebp, ebx
not ebp
or ebp, esi
xor ebp, edx
add ebp, dword [esp + 0x20]
lea edi, reloc.PSAPI.DLL_GetMappedFileNameW
rol edi, 0xa
add edi, esi
mov ebp, edx
not ebp
or ebp, edi
xor ebp, esi
add ebp, dword [esp + 0x24]
lea ebx, reloc.PSAPI.DLL_GetMappedFileNameW
rol ebx, 0xf
add ebx, edi
mov ebp, esi
not ebp
or ebp, ebx
xor ebp, edi
add ebp, dword [esp + 0x28]
lea edx, reloc.PSAPI.DLL_GetMappedFileNameW
rol edx, 0x15
add edx, ebx
mov ebp, edi
not ebp
or ebp, edx
xor ebp, ebx
add ebp, dword [esp + 0x2c]
lea esi, reloc.PSAPI.DLL_GetMappedFileNameW
rol esi, 6
add esi, edx
mov ebp, ebx
not ebp
or ebp, esi
xor ebp, edx
add ebp, dword [esp + 0x30]
lea edi, reloc.PSAPI.DLL_GetMappedFileNameW
rol edi, 0xa
add edi, esi
mov ebp, edx
not ebp
or ebp, edi
xor ebp, esi
add ebp, dword [esp + 0x34]
lea ebx, reloc.PSAPI.DLL_GetMappedFileNameW
rol ebx, 0xf
mov ebp, esi
not ebp
add ebx, edi
or ebp, ebx
xor ebp, edi
add ebp, dword [esp + 0x38]
lea edx, reloc.PSAPI.DLL_GetMappedFileNameW
rol edx, 0x15
add edx, ebx
mov ebp, edi
not ebp
or ebp, edx
xor ebp, ebx
add ebp, dword [esp + 0x3c]
lea esi, reloc.PSAPI.DLL_GetMappedFileNameW
rol esi, 6
add esi, edx
mov ebp, ebx
not ebp
or ebp, esi
xor ebp, edx
add ebp, dword [esp + 0x40]
add dword [ecx], esi
lea edi, reloc.PSAPI.DLL_GetMappedFileNameW
rol edi, 0xa
add edi, esi
add dword [ecx + 0xc], edi
mov ebp, edx
not ebp
or ebp, edi
xor ebp, esi
add ebp, dword [esp + 0x44]
lea ebx, reloc.PSAPI.DLL_GetMappedFileNameW
rol ebx, 0xf
add ebx, edi
add dword [ecx + 8], ebx
mov ebp, esi
not ebp
or ebp, ebx
xor ebp, edi
add ebp, dword [esp + 0x48]
lea ebp, reloc.PSAPI.DLL_GetMappedFileNameW
rol ebp, 0x15
add ebp, ebx
add dword [ecx + 4], ebp
cmp dword [esp + 0x5c], 0
mov ebp, dword [ecx + 4]
mov ebx, dword [ecx + 8]
jne 0x811ecb
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x40
ret