Function at 0x41ee80
Capabilities:
Encode data using xor

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x504df8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push ebx
sub esp, 0xb0
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 4], 0
mov byte [ebp - 4], 1
cmp edx, 0x2710
jne 0x41ef2f
sub esp, 0x18
xorps xmm0, xmm0
mov eax, esp
mov edx, 0x2711
movups xmmword [eax], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
call fcn.0041ea80
add esp, 0x18
mov ebx, dword [ebp - 0x14]
mov ecx, dword [ebx + 0x1c]
cmp ecx, 0x10
jb 0x41f637
mov edx, dword [ebx + 8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41f62d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41f64b
jmp 0x41f62d
cmp edx, 0x2721
jne 0x41ef59
cmp dword [ebx + 0x1c], 0x10
lea eax, [ebx + 8]
push dword [ebx + 0x18]
cmovae eax, dword [ebx + 8]
mov ecx, 0x535bec
push eax
call fcn.00465cf0
mov byte [0x537eed], 1
jmp 0x41eef5
cmp edx, 0x2731
jne 0x41ef86
cmp dword [ebx + 0x1c], 0x10
lea eax, [ebx + 8]
push dword [ebx + 0x18]
cmovae eax, dword [ebx + 8]
mov ecx, 0x535c1c
push eax
call fcn.00465cf0
mov byte [0x537eeb], 1
jmp 0x41eef5
cmp edx, 0x2712
jne 0x41efb5
cmp dword [ebx + 0x18], 0x18
jne 0x41eef5
cmp dword [ebx + 0x1c], 0x10
lea eax, [ebx + 8]
push 0x18
cmovae eax, dword [ebx + 8]
mov ecx, 0x535c04
push eax
call fcn.00465cf0
jmp 0x41eef5
cmp edx, 0x2713
jne 0x41efdb
cmp dword [ebx + 0x1c], 0x10
lea eax, [ebx + 8]
cmovae eax, dword [ebx + 8]
push eax
call fcn.004ead47
add esp, 4
mov dword [0x535ac0], eax
jmp 0x41eef5
cmp edx, 0x272b
jne 0x41efef
mov byte [0x537eea], 1
jmp 0x41eef5
cmp edx, 0x2715
jne 0x41f397
cmp dword [ebx + 0x1c], 0x10
lea esi, [ebx + 8]
mov ecx, 0x19
lea edi, [ebp - 0xc0]
cmovae esi, dword [ebx + 8]
rep movsd dword es:[edi], dword [esi]
push 0x5380b4
call fcn.004dc762
add esp, 4
test eax, eax
jne 0x41f650
xor edi, edi
nop word [eax + eax]
mov ecx, dword [0x5381b8]
mov eax, 0x2aaaaaab
mov esi, dword [0x5381b4]
sub ecx, esi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jae 0x41f37f
lea eax, [edi + edi*2]
mov dword [ebp - 0x48], 0
shl eax, 3
lea ecx, [ebp - 0xc0]
xorps xmm0, xmm0
mov dword [ebp - 0x20], eax
add esi, eax
mov dword [ebp - 0x44], 0
movups xmmword [ebp - 0x58], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41f080
sub ecx, edx
lea eax, [ebp - 0xc0]
push ecx
push eax
lea ecx, [ebp - 0x58]
call fcn.004028a0
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 2
push eax
lea edx, [ebp - 0x1b]
mov word [ebp - 0x1b], 0x5c
lea ecx, [ebp - 0x38]
mov byte [ebp - 0x19], 0
call fcn.00469ec0
add esp, 4
cmp dword [eax + 0x14], 0x10
mov ecx, dword [eax + 0x10]
jb 0x41f0c4
mov eax, dword [eax]
cmp dword [esi + 0x14], 0x10
mov edx, dword [esi + 0x10]
jb 0x41f0cf
mov esi, dword [esi]
push ecx
push eax
push 0
mov ecx, esi
call fcn.0046b770
mov ecx, dword [ebp - 0x24]
add esp, 0xc
mov esi, eax
cmp ecx, 0x10
jb 0x41f113
mov edx, dword [ebp - 0x38]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41f109
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41f656
push ecx
push edx
call fcn.004dd461
add esp, 8
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x44]
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0xf
mov byte [ebp - 0x38], 0
cmp ecx, 0x10
jb 0x41f15d
mov edx, dword [ebp - 0x58]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41f153
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41f656
push ecx
push edx
call fcn.004dd461
add esp, 8
cmp esi, 0xffffffff
je 0x41f391
mov ecx, dword [ebx + 0x18]
lea eax, [ebx + 8]
add ecx, 0xffffff9c
mov dword [ebp - 0x28], 0
cmp dword [ebx + 0x1c], 0x10
xorps xmm0, xmm0
push ecx
cmovae eax, dword [ebx + 8]
lea ecx, [ebp - 0x38]
add eax, 0x64
mov dword [ebp - 0x24], 0
push eax
movups xmmword [ebp - 0x38], xmm0
call fcn.004028a0
lea edx, [ebp - 0x38]
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x58]
call fcn.00415170
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x24]
cmp ecx, 0x10
jb 0x41f1e0
mov edx, dword [ebp - 0x38]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41f1d6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41f65b
push ecx
push edx
call fcn.004dd461
add esp, 8
mov edi, dword [ebp - 0x20]
add edi, dword [0x5381b4]
xor ecx, ecx
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0xf
mov byte [ebp - 0x38], 0
mov dword [ebp - 0x3e], 0xc0ebfbf4
mov word [ebp - 0x3a], 0x100
nop word [eax + eax]
mov al, cl
sub al, 0x47
xor byte [ebp + ecx - 0x3e], al
inc ecx
cmp ecx, 4
jb 0x41f210
lea eax, [ebp - 0x3e]
mov byte [ebp - 0x39], 0
sub esp, 8
mov edx, eax
mov esi, esp
lea ecx, [edx + 1]
mov dword [esi], eax
mov al, byte [edx]
inc edx
test al, al
jne 0x41f231
sub edx, ecx
mov ecx, edi
mov dword [esi + 4], edx
call fcn.00465af0
test al, al
je 0x41f26a
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
sub esp, 0x18
mov esi, eax
lea eax, [ebp - 0x58]
mov ecx, esp
push eax
call fcn.00466110
mov ecx, esi
call fcn.0041a7b0
add esp, 0x18
jmp 0x41f2c8
mov dword [ebp - 0x1c], 0x100d8ce
xor ecx, ecx
mov al, cl
sub al, 0x47
xor byte [ebp + ecx - 0x1c], al
inc ecx
cmp ecx, 2
jb 0x41f273
mov eax, dword [0x5381b4]
add eax, dword [ebp - 0x20]
mov byte [ebp - 0x19], 0
cmp dword [eax + 0x14], 0x10
jb 0x41f295
mov eax, dword [eax]
lea ecx, [ebp - 0x1c]
push ecx
push eax
call fcn.004e32b0
mov esi, eax
add esp, 8
test esi, esi
je 0x41f2c8
cmp dword [ebp - 0x44], 0x10
lea ecx, [ebp - 0x58]
push esi
push dword [ebp - 0x48]
cmovae ecx, dword [ebp - 0x58]
push 1
push ecx
call fcn.004eb0b8
push esi
call fcn.004e6b38
add esp, 0x14
mov eax, dword [0x5381b4]
add eax, dword [ebp - 0x20]
mov esi, dword [0x5381b8]
mov dword [ebp - 0x20], eax
lea edi, [eax + 0x18]
cmp edi, esi
je 0x41f2fe
push edi
mov ecx, eax
call fcn.00465f90
mov eax, dword [ebp - 0x20]
add edi, 0x18
add eax, 0x18
mov dword [ebp - 0x20], eax
cmp edi, esi
jne 0x41f2e0
mov esi, dword [0x5381b8]
mov ecx, dword [esi - 4]
cmp ecx, 0x10
jb 0x41f332
mov eax, dword [esi - 0x18]
inc ecx
cmp ecx, 0x1000
jb 0x41f328
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41f660
mov eax, edx
push ecx
push eax
call fcn.004dd461
add esp, 8
mov dword [esi - 8], 0
mov dword [esi - 4], 0xf
mov byte [esi - 0x18], 0
sub dword [0x5381b8], 0x18
mov ecx, dword [ebp - 0x44]
cmp ecx, 0x10
jb 0x41f37f
mov edx, dword [ebp - 0x58]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41f375
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41f660
push ecx
push edx
call fcn.004dd461
add esp, 8
push 0x5380b4
call fcn.004dc773
add esp, 4
jmp 0x41eef5
inc edi
jmp 0x41f030
cmp edx, 0x2717
jne 0x41f405
sub esp, 0x28
lea ecx, [ebp - 0x30]
mov eax, esp
lea edx, [ebx + 8]
push 0
push 1
mov dword [eax + 0x24], 0
call fcn.0046a4a0
mov cl, byte [0x538098]
add esp, 0x30
mov al, byte [ebp - 0x30]
mov esi, dword [0x5380a4]
mov edx, dword [0x5380a0]
mov byte [ebp - 0x30], cl
mov ecx, dword [ebp - 0x24]
mov byte [0x538098], al
mov eax, dword [ebp - 0x28]
mov dword [0x5380a4], ecx
lea ecx, [ebp - 0x30]
mov dword [0x5380a0], eax
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x24], esi
call fcn.00463bb0
mov byte [0x537ec2], 1
jmp 0x41eef5
cmp edx, 0x2719
jne 0x41f473
sub esp, 0x28
lea ecx, [ebp - 0x30]
mov eax, esp
lea edx, [ebx + 8]
push 0
push 1
mov dword [eax + 0x24], 0
call fcn.0046a4a0
mov cl, byte [0x5380f0]
add esp, 0x30
mov al, byte [ebp - 0x30]
mov esi, dword [0x5380fc]
mov edx, dword [0x5380f8]
mov byte [ebp - 0x30], cl
mov ecx, dword [ebp - 0x24]
mov byte [0x5380f0], al
mov eax, dword [ebp - 0x28]
mov dword [0x5380fc], ecx
lea ecx, [ebp - 0x30]
mov dword [0x5380f8], eax
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x24], esi
call fcn.00463bb0
mov byte [0x537ee1], 1
jmp 0x41eef5
cmp edx, 0x271b
jne 0x41f4e1
sub esp, 0x28
lea ecx, [ebp - 0x30]
mov eax, esp
lea edx, [ebx + 8]
push 0
push 1
mov dword [eax + 0x24], 0
call fcn.0046a4a0
mov cl, byte [0x538130]
add esp, 0x30
mov al, byte [ebp - 0x30]
mov esi, dword [0x53813c]
mov edx, dword [0x538138]
mov byte [ebp - 0x30], cl
mov ecx, dword [ebp - 0x24]
mov byte [0x538130], al
mov eax, dword [ebp - 0x28]
mov dword [0x53813c], ecx
lea ecx, [ebp - 0x30]
mov dword [0x538138], eax
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x24], esi
call fcn.00463bb0
mov byte [0x537ec0], 1
jmp 0x41eef5
cmp edx, 0x271d
jne 0x41f54f
sub esp, 0x28
lea ecx, [ebp - 0x30]
mov eax, esp
lea edx, [ebx + 8]
push 0
push 1
mov dword [eax + 0x24], 0
call fcn.0046a4a0
mov cl, byte [0x538188]
add esp, 0x30
mov al, byte [ebp - 0x30]
mov esi, dword [0x538194]
mov edx, dword [0x538190]
mov byte [ebp - 0x30], cl
mov ecx, dword [ebp - 0x24]
mov byte [0x538188], al
mov eax, dword [ebp - 0x28]
mov dword [0x538194], ecx
lea ecx, [ebp - 0x30]
mov dword [0x538190], eax
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x24], esi
call fcn.00463bb0
mov byte [0x537ee0], 1
jmp 0x41eef5
cmp edx, 0x272e
jne 0x41f5bd
sub esp, 0x28
lea ecx, [ebp - 0x30]
mov eax, esp
lea edx, [ebx + 8]
push 0
push 1
mov dword [eax + 0x24], 0
call fcn.0046a4a0
mov cl, byte [0x5381c0]
add esp, 0x30
mov al, byte [ebp - 0x30]
mov esi, dword [0x5381cc]
mov edx, dword [0x5381c8]
mov byte [ebp - 0x30], cl
mov ecx, dword [ebp - 0x24]
mov byte [0x5381c0], al
mov eax, dword [ebp - 0x28]
mov dword [0x5381cc], ecx
lea ecx, [ebp - 0x30]
mov dword [0x5381c8], eax
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x24], esi
call fcn.00463bb0
mov byte [0x537ee9], 1
jmp 0x41eef5
cmp edx, 0x2723
jne 0x41eef5
lea edx, [ebx + 8]
lea ecx, [ebp - 0x58]
call fcn.00402560
push eax
mov ecx, 0x535b5c
call fcn.00465f90
mov ecx, dword [ebp - 0x44]
cmp ecx, 0x10
jb 0x41f60f
mov edx, dword [ebp - 0x58]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41f605
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41f665
push ecx
push edx
call fcn.004dd461
add esp, 8
mov byte [0x537eec], 1
jmp 0x41eef5
push ecx
push edx
call fcn.004dd461
add esp, 8
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
pop ebx
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.004e2700
push eax
call fcn.004dc40b
call fcn.004e2700
call fcn.004e2700
call fcn.004e2700
call fcn.004e2700
int3