Function at 0x401140
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x198
mov eax, dword [section..data]
xor eax, esp
mov dword [esp + 0x194], eax
push esi
push edi
call dword [sym.imp.DetectVM.dll_int___cdecl_IsVirtualizationPresent_void_]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
cmp eax, 2
jne 0x40195d
mov edx, str.___Microsoft_Hypervisor_detected._Continuing_program._n
call fcn.00401c10
mov ecx, 0x1a
lea edi, [esp + 0xb0]
mov esi, 0x403338
xor edx, edx
cmp dword [0x40542c], 2
rep movsd dword es:[edi], dword [esi]
mov dword [esp + 0xc], edx
movsb byte es:[edi], byte [esi]
jl 0x4012e0
movaps xmm0, xmmword [str.9999999999999999]
lea eax, [edx + 4]
movaps xmm4, xmmword [0x4034b0]
movaps xmm3, xmmword [0x4034f0]
movaps xmm5, xmmword [str.2222]
movaps xmmword [esp + 0x10], xmm0
mov ecx, dword [esp + 0x10]
nop word [eax + eax]
movd xmm0, edx
add edx, 8
pshufd xmm2, xmm0, 0
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
andps xmm1, xmmword [0x4034d0]
packuswb xmm1, xmm1
movd xmm0, ecx
paddb xmm1, xmm0
movd xmm0, dword [esp + eax + 0xac]
xorps xmm1, xmm0
movd xmm0, eax
pshufd xmm2, xmm0, 0
movd dword [esp + eax + 0xac], xmm1
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
andps xmm1, xmmword [0x4034d0]
packuswb xmm1, xmm1
movd xmm0, ecx
paddb xmm1, xmm0
movd xmm0, dword [esp + eax + 0xb0]
xorps xmm1, xmm0
movd dword [esp + eax + 0xb0], xmm1
add eax, 8
cmp eax, 0x6c
jl 0x4011d0
mov dword [esp + 0xc], edx
cmp edx, 0x69
jge 0x401313
nop dword [eax]
mov eax, 0x51eb851f
imul edx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [esp + 0xc]
movsx eax, al
mov cl, dl
imul eax, eax, 0x32
sub cl, al
add cl, 0x39
xor byte [esp + edx + 0xb0], cl
inc edx
mov dword [esp + 0xc], edx
cmp edx, 0x69
jl 0x4012e0
lea ecx, [esp + 0xb0]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x401320
sub ecx, edx
mov edx, 2
mov dword [esp + 0xc], ecx
lea edi, [ecx + 1]
xor ecx, ecx
mov eax, edi
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00401f68
add esp, 4
mov esi, eax
lea eax, [esp + 0xb0]
push dword [esp + 0xc]
push eax
push edi
lea eax, [esp + 0x1a4]
push esi
push eax
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_mbstowcs_s]
add esp, 0x14
mov ecx, esi
call section..text
mov ecx, 0x1c
lea edi, [esp + 0x120]
mov esi, 0x4033d8
xor edx, edx
cmp dword [0x40542c], 2
rep movsd dword es:[edi], dword [esi]
mov dword [esp + 0xc], edx
movsb byte es:[edi], byte [esi]
jl 0x4014d0
movaps xmm0, xmmword [str.9999999999999999]
lea eax, [edx + 4]
movaps xmm4, xmmword [0x4034b0]
movaps xmm3, xmmword [0x4034f0]
movaps xmm5, xmmword [str.2222]
movaps xmmword [esp + 0x10], xmm0
mov ecx, dword [esp + 0x10]
movd xmm0, edx
add edx, 8
pshufd xmm2, xmm0, 0
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
andps xmm1, xmmword [0x4034d0]
packuswb xmm1, xmm1
movd xmm0, ecx
paddb xmm1, xmm0
movd xmm0, dword [esp + eax + 0x11c]
xorps xmm1, xmm0
movd xmm0, eax
pshufd xmm2, xmm0, 0
movd dword [esp + eax + 0x11c], xmm1
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
andps xmm1, xmmword [0x4034d0]
packuswb xmm1, xmm1
movd xmm0, ecx
paddb xmm1, xmm0
movd xmm0, dword [esp + eax + 0x120]
xorps xmm1, xmm0
movd dword [esp + eax + 0x120], xmm1
add eax, 8
cmp eax, 0x74
jl 0x4013c2
mov dword [esp + 0xc], edx
cmp edx, 0x71
jge 0x401503
nop
mov eax, 0x51eb851f
imul edx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [esp + 0xc]
movsx eax, al
mov cl, dl
imul eax, eax, 0x32
sub cl, al
add cl, 0x39
xor byte [esp + edx + 0x120], cl
inc edx
mov dword [esp + 0xc], edx
cmp edx, 0x71
jl 0x4014d0
lea ecx, [esp + 0x120]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x401510
sub ecx, edx
mov edx, 2
mov dword [esp + 0xc], ecx
lea edi, [ecx + 1]
xor ecx, ecx
mov eax, edi
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00401f68
add esp, 4
mov esi, eax
lea eax, [esp + 0x120]
push dword [esp + 0xc]
push eax
push edi
lea eax, [esp + 0x1a4]
push esi
push eax
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_mbstowcs_s]
add esp, 0x14
mov ecx, esi
call section..text
movups xmm0, xmmword [0x4033a4]
mov eax, dword [0x4033cc]
xor edx, edx
cmp dword [0x40542c], 2
movups xmmword [esp + 0x20], xmm0
mov dword [esp + 0x48], eax
movups xmm0, xmmword [0x4033b4]
mov ax, word [0x4033d0]
mov word [esp + 0x4c], ax
mov al, byte [0x4033d2]
movups xmmword [esp + 0x30], xmm0
mov byte [esp + 0x4e], al
movq xmm0, qword [0x4033c4]
movq qword [esp + 0x40], xmm0
mov dword [esp + 0xc], edx
jl 0x4016e1
movaps xmm0, xmmword [str.9999999999999999]
lea eax, [edx + 4]
movaps xmm4, xmmword [0x4034b0]
movaps xmm3, xmmword [0x4034f0]
movaps xmm5, xmmword [str.2222]
movaps xmmword [esp + 0x10], xmm0
mov ecx, dword [esp + 0x10]
movd xmm0, edx
add edx, 8
pshufd xmm2, xmm0, 0
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
andps xmm1, xmmword [0x4034d0]
packuswb xmm1, xmm1
movd xmm0, ecx
paddb xmm1, xmm0
movd xmm0, dword [esp + eax + 0x1c]
xorps xmm1, xmm0
movd xmm0, eax
pshufd xmm2, xmm0, 0
movd dword [esp + eax + 0x1c], xmm1
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
andps xmm1, xmmword [0x4034d0]
packuswb xmm1, xmm1
movd xmm0, ecx
paddb xmm1, xmm0
movd xmm0, dword [esp + eax + 0x20]
xorps xmm1, xmm0
movd dword [esp + eax + 0x20], xmm1
add eax, 8
cmp eax, 0x2c
jl 0x4015e1
mov dword [esp + 0xc], edx
cmp edx, 0x2f
jge 0x401711
mov eax, 0x51eb851f
imul edx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [esp + 0xc]
movsx eax, al
mov cl, dl
imul eax, eax, 0x32
sub cl, al
add cl, 0x39
xor byte [esp + edx + 0x20], cl
inc edx
mov dword [esp + 0xc], edx
cmp edx, 0x2f
jl 0x4016e1
lea ecx, [esp + 0x20]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x401718
sub ecx, edx
mov edx, 2
mov dword [esp + 0xc], ecx
lea edi, [ecx + 1]
xor ecx, ecx
mov eax, edi
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00401f68
add esp, 4
mov esi, eax
lea eax, [esp + 0x20]
push dword [esp + 0xc]
push eax
push edi
lea eax, [esp + 0x1a4]
push esi
push eax
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_mbstowcs_s]
add esp, 0x14
mov ecx, esi
call section..text
mov ecx, 0x14
lea edi, [esp + 0x58]
mov esi, 0x403450
xor edx, edx
cmp dword [0x40542c], 2
rep movsd dword es:[edi], dword [esi]
mov dword [esp + 0xc], edx
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
jl 0x4018c0
movaps xmm0, xmmword [str.9999999999999999]
lea eax, [edx + 4]
movaps xmm4, xmmword [0x4034b0]
movaps xmm3, xmmword [0x4034f0]
movaps xmm5, xmmword [str.2222]
movaps xmmword [esp + 0x10], xmm0
mov ecx, dword [esp + 0x10]
nop word [eax + eax]
movd xmm0, edx
add edx, 8
pshufd xmm2, xmm0, 0
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
andps xmm1, xmmword [0x4034d0]
packuswb xmm1, xmm1
movd xmm0, ecx
paddb xmm1, xmm0
movd xmm0, dword [esp + eax + 0x54]
xorps xmm1, xmm0
movd xmm0, eax
pshufd xmm2, xmm0, 0
movd dword [esp + eax + 0x54], xmm1
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
andps xmm1, xmmword [0x4034d0]
packuswb xmm1, xmm1
movd xmm0, ecx
paddb xmm1, xmm0
movd xmm0, dword [esp + eax + 0x58]
xorps xmm1, xmm0
movd dword [esp + eax + 0x58], xmm1
add eax, 8
cmp eax, 0x54
jl 0x4017c0
mov dword [esp + 0xc], edx
cmp edx, 0x53
jge 0x4018f0
mov eax, 0x51eb851f
imul edx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [esp + 0xc]
movsx eax, al
mov cl, dl
imul eax, eax, 0x32
sub cl, al
add cl, 0x39
xor byte [esp + edx + 0x58], cl
inc edx
mov dword [esp + 0xc], edx
cmp edx, 0x53
jl 0x4018c0
lea ecx, [esp + 0x58]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4018f7
sub ecx, edx
mov edx, 2
mov dword [esp + 0xc], ecx
lea edi, [ecx + 1]
xor ecx, ecx
mov eax, edi
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00401f68
add esp, 4
mov esi, eax
lea eax, [esp + 0x58]
push dword [esp + 0xc]
push eax
push edi
lea eax, [esp + 0x1a4]
push esi
push eax
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_mbstowcs_s]
add esp, 0x14
mov ecx, esi
call section..text
xor eax, eax
pop edi
pop esi
mov ecx, dword [esp + 0x194]
xor ecx, esp
call fcn.00401f5a
mov esp, ebp
pop ebp
ret
cmp eax, 1
jne 0x401983
mov edx, str.___Virtualization_detected_by_another_vendor._Closing_program._n
call fcn.00401c10
or eax, 0xffffffff
pop edi
pop esi
mov ecx, dword [esp + 0x194]
xor ecx, esp
call fcn.00401f5a
mov esp, ebp
pop ebp
ret
mov edx, str.____No_virtualization_detected._n
call fcn.00401c10
mov ecx, dword [esp + 0x19c]
xor eax, eax
pop edi
pop esi
xor ecx, esp
call fcn.00401f5a
mov esp, ebp
pop ebp
ret