Function at 0x4138b2
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28c
mov eax, dword [0x443040]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, ecx
xor ebx, ebx
push edi
mov dword [ebp - 0x218], esi
push str.Advapi32.dll
mov dword [ebp - 0x230], esi
mov dword [ebp - 0x218], esi
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 0x210], eax
test eax, eax
je 0x413bbb
lea edi, [ebp - 0x228]
mov esi, 0x43d4a8
push 0x34
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop esi
cmp byte [0x43d4b5], bl
je 0x413930
mov ecx, ebx
xor edx, edx
mov eax, ecx
div esi
add dl, 0x32
xor byte [ebp + ecx - 0x228], dl
inc ecx
cmp ecx, 0xe
jl 0x413914
mov eax, dword [ebp - 0x210]
lea ecx, [ebp - 0x228]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, str._VSrSCnXVNY_
mov dword [ebp - 0x22c], eax
lea edi, [ebp - 0x258]
mov ecx, ebx
push 0x34
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
pop esi
xor edx, edx
mov eax, ecx
div esi
add dl, 0x32
xor byte [ebp + ecx - 0x258], dl
inc ecx
cmp ecx, 0xd
jl 0x413958
lea eax, [ebp - 0x258]
push eax
push dword [ebp - 0x210]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
lea edi, [ebp - 0x248]
mov esi, str._VSvZXKqEw_AXfEWZ_HOXM_
mov dword [ebp - 0x214], eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
cmp byte [0x43d3fb], bl
je 0x4139b8
push 0x34
mov ecx, ebx
pop esi
xor edx, edx
mov eax, ecx
div esi
add dl, 0x32
xor byte [ebp + ecx - 0x248], dl
inc ecx
cmp ecx, 0xc
jl 0x4139a2
mov esi, dword [ebp - 0x210]
lea eax, [ebp - 0x248]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x22c], ebx
je 0x413bae
cmp dword [ebp - 0x214], ebx
je 0x413bae
test eax, eax
je 0x413bae
mov esi, 0x100
lea eax, [ebp - 0x104]
push esi
push ebx
push eax
call fcn.0041d020
push esi
lea eax, [ebp - 0x204]
push ebx
push eax
call fcn.0041d020
add esp, 0x18
mov dword [ebp - 0x208], esi
mov esi, str.araavjfvULP3._7
lea edi, [ebp - 0x28c]
push 0xb
pop ecx
rep movsd dword es:[edi], dword [esi]
push 0x34
mov ecx, ebx
movsb byte es:[edi], byte [esi]
pop esi
xor edx, edx
mov eax, ecx
div esi
add dl, 0x32
xor byte [ebp + ecx - 0x28c], dl
inc ecx
cmp ecx, 0x2d
jl 0x413a32
lea eax, [ebp - 0x20c]
push eax
push 0x20019
push ebx
lea eax, [ebp - 0x28c]
push eax
push 0x80000002
call dword [ebp - 0x22c]
test eax, eax
jne 0x413b20
lea edi, [ebp - 0x228]
mov esi, str.bA_QCTLw_VYaPFPSY
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
cmp byte [0x43d50b], bl
je 0x413aa0
push 0x34
mov ecx, ebx
pop esi
xor edx, edx
mov eax, ecx
div esi
add dl, 0x32
xor byte [ebp + ecx - 0x228], dl
inc ecx
cmp ecx, 0xc
jl 0x413a8a
lea eax, [ebp - 0x208]
push eax
lea eax, [ebp - 0x104]
push eax
push ebx
push 1
lea eax, [ebp - 0x228]
push eax
push ebx
push dword [ebp - 0x20c]
call dword [ebp - 0x214]
mov esi, str.qFFGSYLORPY_
lea edi, [ebp - 0x228]
push 0x34
mov ecx, ebx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
pop esi
xor edx, edx
mov eax, ecx
div esi
add dl, 0x32
xor byte [ebp + ecx - 0x228], dl
inc ecx
cmp ecx, 0xd
jl 0x413ad9
lea eax, [ebp - 0x208]
push eax
lea eax, [ebp - 0x204]
push eax
push ebx
push 1
lea eax, [ebp - 0x228]
push eax
push ebx
push dword [ebp - 0x20c]
call dword [ebp - 0x214]
push dword [ebp - 0x20c]
call dword [ebp - 0x218]
lea eax, [ebp - 0x204]
push eax
call fcn.0042122d
pop ecx
cmp eax, 0x4e20
jl 0x413b88
mov esi, str.eZZQY_K
lea edi, [ebp - 0x23c]
push 0x34
pop ecx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
xor edx, edx
mov eax, ebx
div ecx
add dl, 0x32
xor byte [ebp + ebx - 0x23c], dl
inc ebx
cmp ebx, 0xb
jl 0x413b47
lea ecx, [ebp - 0x104]
mov eax, dword [ecx]
lea edx, [ebp - 0x23c]
cmp eax, dword [edx]
jne 0x413b88
mov eax, dword [ecx + 4]
cmp eax, dword [edx + 4]
jne 0x413b88
movzx eax, word [ecx + 8]
cmp ax, word [edx + 8]
jne 0x413b88
mov byte [ebp - 0xfb], 0x31
push dword [ebp - 0x210]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov ecx, dword [ebp - 0x230]
lea eax, [ebp - 0x104]
push eax
call fcn.004040bd
mov eax, dword [ebp - 0x230]
jmp 0x413bc9
push esi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov esi, dword [ebp - 0x230]
push 0x43bf85
mov ecx, esi
call fcn.004040bd
mov eax, esi
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0041b28d
leave
ret