Function at 0x417a70
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0xa8
lea eax, [esp + 0x60]
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
push eax
call fcn.00419ba0
add esp, 0x14
mov ebx, dword [esp + 0x94]
mov edx, dword [esp + 0x64]
mov ecx, dword [esp + 0x90]
cmp ebx, edx
mov dword [esp + 0xc], ecx
mov dword [esp], ebx
sete al
cmp dword [esp + 0x60], 0
je 0x417e44
mov eax, dword [esp + 0x7c]
mov esi, dword [ebp + 0xc]
cmp eax, ebx
je 0x417f68
mov edi, dword [esp + 0x9c]
mov edx, dword [esp + 0x78]
mov dword [esp + 4], eax
mov esi, dword [esp + 0x70]
mov eax, edi
mov ecx, edx
mov ecx, esi
mov dword [esp + 0x50], edx
mov dword [esp + 0x10], edi
mov dword [esp + 0x14], esi
sub eax, edx
mov edx, edi
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 4]
sub ecx, eax
mov dword [esp + 0x2c], ecx
mov ecx, eax
neg ecx
mov dword [esp + 0x24], ecx
xor ecx, ecx
sub edx, esi
cmovb edx, ecx
mov ecx, edi
lea ecx, [edi - 1]
mov edi, dword [esp + 0x98]
mov dword [esp + 0x30], ecx
mov ecx, dword [esp + 0x84]
mov dword [esp + 0x5c], edx
mov edx, dword [esp + 0xc]
mov dword [esp + 0x20], edi
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x68]
mov dword [esp + 0x38], ecx
mov ecx, dword [esp + 0x6c]
mov dword [esp + 0x34], ecx
lea ecx, [esi - 1]
mov dword [esp + 0x3c], ecx
lea ecx, [edx + eax]
mov dword [esp + 0x1c], ecx
lea ecx, [edi + esi]
mov dword [esp + 0x48], ecx
lea ecx, [esi + eax]
mov dword [esp + 0x44], ecx
add ecx, edx
mov dword [esp + 0x40], ecx
mov ecx, dword [esp + 0x10]
lea ecx, [eax + ecx - 1]
cmp ecx, ebx
jae 0x417f2f
mov edx, dword [esp + 0x10]
mov dword [esp + 4], eax
cmp dword [esp + 8], 0xffffffff
lea esi, [eax + edx]
mov eax, dword [esp + 0x50]
mov edx, dword [esp + 4]
mov dword [esp + 0x18], esi
lea eax, [edx + eax]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 4]
je 0x417cf0
mov edx, dword [esp + 0x2c]
mov edi, eax
neg edx
mov dword [esp + 0x54], edx
cmp eax, edi
jne 0x417f2f
mov esi, dword [esp + 0xc]
mov eax, 1
mov edi, 1
xor edx, edx
movzx ecx, byte [esi + ecx]
xor esi, esi
shld esi, eax, cl
shl edi, cl
test cl, 0x20
cmovne esi, edi
cmovne edi, edx
and esi, dword [esp + 0x34]
and edi, dword [esp + 0x38]
or edi, esi
je 0x417c50
mov eax, dword [esp + 0x14]
mov esi, dword [esp + 8]
mov ebx, dword [esp + 0x10]
cmp eax, esi
cmova esi, eax
mov eax, dword [esp + 4]
cmp esi, ebx
mov dword [esp + 0x58], esi
cmova ebx, esi
nop
cmp ebx, esi
je 0x417c80
lea edi, [eax + esi]
cmp edi, dword [esp]
jae 0x417f7a
mov ecx, dword [esp + 0x20]
mov edx, eax
mov eax, dword [esp + 0x1c]
lea edi, [esi + 1]
movzx ecx, byte [ecx + esi]
cmp cl, byte [eax + esi]
mov eax, edx
mov esi, edi
je 0x417c10
add edi, dword [esp + 0x54]
mov ebx, dword [esp]
jmp 0x417c58
mov edi, dword [esp + 0x18]
mov eax, dword [esp + 4]
xor edx, edx
mov ecx, dword [esp + 0x30]
mov dword [esp + 8], edx
add ecx, edi
cmp ecx, ebx
jb 0x417bb8
jmp 0x417f2f
mov ecx, dword [esp + 0x14]
nop word cs:[eax + eax]
nop
cmp dword [esp + 8], ecx
jae 0x417ce0
dec ecx
mov ebx, dword [esp]
cmp ecx, dword [esp + 0x10]
jae 0x417f83
mov eax, dword [esp + 4]
lea esi, [ecx + eax]
cmp esi, ebx
jae 0x417f8e
mov eax, dword [esp + 0x20]
mov edi, dword [esp + 0xc]
movzx ebx, byte [eax + ecx]
cmp bl, byte [edi + esi]
je 0x417c90
mov edx, dword [esp + 0x4c]
mov edi, dword [esp + 0x28]
mov ebx, dword [esp]
mov eax, dword [esp + 4]
jmp 0x417c5a
mov dword [esp + 8], 0
jmp 0x417e18
mov edx, dword [esp + 0x24]
mov esi, eax
neg edx
mov dword [esp + 8], edx
mov edx, dword [esp + 0x48]
jmp 0x417d22
mov ecx, dword [esp + 0x30]
mov eax, dword [esp + 4]
add ecx, esi
cmp ecx, ebx
jae 0x417f2f
cmp eax, esi
jne 0x417f2f
mov esi, dword [esp + 0xc]
mov eax, 1
mov edi, 1
movzx ecx, byte [esi + ecx]
xor esi, esi
shld esi, eax, cl
shl edi, cl
test cl, 0x20
mov ecx, 0
cmovne esi, edi
cmovne edi, ecx
and esi, dword [esp + 0x34]
and edi, dword [esp + 0x38]
or edi, esi
mov esi, dword [esp + 0x18]
je 0x417d10
xor ecx, ecx
nop word cs:[eax + eax]
nop dword [eax]
cmp dword [esp + 0x5c], ecx
je 0x417db0
mov esi, dword [esp + 0x44]
add esi, ecx
cmp esi, ebx
jae 0x417f97
movzx ebx, byte [edx + ecx]
mov eax, dword [esp + 0x40]
lea esi, [ecx + 1]
cmp bl, byte [eax + ecx]
mov ebx, dword [esp]
mov ecx, esi
je 0x417d70
add esi, dword [esp + 8]
jmp 0x417d10
mov ecx, dword [esp + 0x3c]
mov eax, dword [esp + 4]
nop dword [eax + eax]
cmp ecx, 0xffffffff
je 0x417e10
mov esi, dword [esp + 0x10]
mov ebx, dword [esp]
mov edi, edx
cmp dword [esp + 0x3c], esi
jae 0x417f83
lea esi, [eax + ecx]
cmp esi, ebx
jae 0x417f8e
mov esi, dword [esp + 0x20]
mov edx, edi
mov edi, dword [esp + 0x1c]
movzx ebx, byte [esi + ecx]
cmp bl, byte [edi + ecx]
lea ecx, [ecx - 1]
je 0x417dc0
mov esi, dword [esp + 0x28]
mov ebx, dword [esp]
jmp 0x417d10
mov dword [esp + 8], 0xffffffff
mov eax, dword [esp + 0x10]
mov ebx, dword [esp]
sub dword [esp + 0x2c], eax
add dword [esp + 0x1c], eax
sub dword [esp + 0x24], eax
add dword [esp + 0x40], eax
add dword [esp + 0x44], eax
mov eax, dword [esp + 0x18]
cmp eax, ebx
jne 0x417b6f
jmp 0x417f65
cmp byte [esp + 0x6e], 0
mov esi, dword [ebp + 0xc]
jne 0x417f68
movzx ecx, byte [esp + 0x6c]
test al, 1
je 0x417eb4
mov eax, dword [esp + 0xc]
test edx, edx
je 0x417f41
cmp ebx, edx
jbe 0x417f57
cmp byte [eax + edx], 0xc0
jl 0x417fb7
test cl, cl
je 0x417f68
nop word cs:[eax + eax]
nop dword [eax + eax]
xor cl, 1
jne 0x417e90
jmp 0x417f65
mov ch, byte [eax + edx]
test ch, ch
js 0x417ed4
movzx esi, ch
mov eax, ecx
xor al, 1
test cl, cl
mov ecx, eax
je 0x417f33
mov eax, dword [esp + 0xc]
test edx, edx
je 0x417ea0
cmp ebx, edx
jbe 0x417fb7
mov ch, byte [eax + edx]
cmp ch, 0xbf
jle 0x417fb7
test ch, ch
jns 0x417ea7
mov al, ch
and al, 0x1f
movzx esi, al
mov eax, dword [esp + 0xc]
movzx ebx, byte [eax + edx + 1]
and ebx, 0x3f
cmp ch, 0xe0
jb 0x417f18
movzx edi, byte [eax + edx + 2]
shl ebx, 6
and edi, 0x3f
or edi, ebx
cmp ch, 0xf0
jb 0x417f22
movzx eax, byte [eax + edx + 3]
mov ebx, dword [esp]
and esi, 7
shl edi, 6
shl esi, 0x12
and eax, 0x3f
or eax, edi
or esi, eax
jmp 0x417eaa
shl esi, 6
or esi, ebx
mov ebx, dword [esp]
jmp 0x417eaa
mov ebx, dword [esp]
shl esi, 0xc
or esi, edi
jmp 0x417eaa
mov esi, eax
jmp 0x417f68
cmp esi, 0x110000
cmove edx, dword [ebp + 0xc]
mov esi, edx
jmp 0x417f68
test cl, cl
je 0x417f68
nop word cs:[eax + eax]
nop
xor cl, 1
jne 0x417f50
jmp 0x417f65
test cl, cl
je 0x417f68
nop dword [eax + eax]
xor cl, 1
jne 0x417f60
mov esi, dword [ebp + 0xc]
mov eax, dword [ebp + 8]
mov edx, dword [ebp + 0xc]
add eax, esi
sub edx, esi
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov ebx, dword [esp]
mov ecx, dword [esp + 0x58]
jmp 0x417f9f
push 0x425518
push dword [esp + 0x14]
jmp 0x417fac
push 0x425528
push ebx
push esi
jmp 0x417fad
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 4]
add ecx, eax
cmp ebx, ecx
cmova ecx, ebx
push 0x425508
push ebx
push ecx
call fcn.004205b0
add esp, 0xc
ud2
push 0x425538
push ebx
push edx
push ebx
push eax
call fcn.00420810
add esp, 0x14
ud2