Function at 0x411740
Capabilities:
Access peb ldr_data
Encode data using xor

Disassembly:
push 0xffffffffffffffff
push 0x4559e9
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x10c
call sub.MFC42.DLL_AfxGetModuleState
mov ecx, dword [eax + 4]
call sub.MFC42.DLL_CCmdTarget::BeginWaitCursor
lea ecx, [esp]
mov dword [esp + 0x114], 0
call fcn.00414c14
mov eax, dword [esp + 0x120]
push 0
push 0x8002
mov byte [esp + 0x11c], 1
mov ecx, dword [eax]
mov dword [esp + 0x20], ecx
mov edx, dword [eax + 4]
mov dword [esp + 0x24], edx
mov ecx, dword [eax + 8]
mov dword [esp + 0x28], ecx
lea ecx, [esp + 8]
mov edx, dword [eax + 0xc]
mov eax, dword [esp + 0x124]
push eax
mov dword [esp + 0x30], edx
call sub.MFC42.DLL_CFile::Open
test eax, eax
jne 0x4117ff
lea ecx, [esp]
mov byte [esp + 0x114], al
call sub.MFC42.DLL_CFile::CFile
mov dword [esp + 0x114], 0xffffffff
call sub.MFC42.DLL_AfxGetModuleState
mov ecx, dword [eax + 4]
call sub.MFC42.DLL_CCmdTarget::EndWaitCursor
mov ecx, dword [esp + 0x10c]
mov dword fs:[0], ecx
add esp, 0x118
ret
lea ecx, [esp]
call sub.MFC42.DLL_CFile::GetLength
cmp eax, 8
jb 0x411837
push 2
push 0
lea ecx, [esp + 8]
call sub.MFC42.DLL_CFile::Seek
push 1
push 0xfffffffffffffff8
lea ecx, [esp + 8]
call sub.MFC42.DLL_CFile::Seek
lea ecx, [esp + 0x2c]
push 8
push ecx
lea ecx, [esp + 8]
call sub.MFC42.DLL_CFile::Read
push esi
lea esi, [esp + 0x30]
mov eax, 0x4662d8
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x411865
test cl, cl
je 0x411861
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x411865
add eax, 2
add esi, 2
test cl, cl
jne 0x411841
xor eax, eax
jmp 0x41186a
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x411894
lea ecx, [esp + 4]
call sub.MFC42.DLL_CFile::Close
push 0
push 0
push 0x465d6c
mov dword [0x4695a4], 1
call sub.MFC42.DLL_AfxMessageBox
jmp 0x411aff
push ebp
push edi
lea ecx, [esp + 0xc]
call sub.MFC42.DLL_CFile::GetLength
push 0
push 0
lea ecx, [esp + 0x14]
mov esi, eax
call sub.MFC42.DLL_CFile::Seek
mov ebp, esi
lea ecx, [esp + 0x40]
shr ebp, 6
mov eax, ebp
push ecx
shl eax, 6
sub esi, eax
mov dword [esp + 0x20], esi
call fcn.00410fa0
mov edx, dword [esp + 0x134]
lea eax, [esp + 0x28]
push edx
lea ecx, [esp + 0x48]
push eax
push ecx
call fcn.00410fd0
lea edx, [esp + 0x50]
push edx
call fcn.00411080
mov eax, dword [esp + 0x54]
mov ecx, 0x10
lea esi, [esp + 0x54]
lea edi, [esp + 0xec]
mov edx, dword [esp + 0x5c]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x60]
add esp, 0x14
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x10
lea esi, [esp + 0x40]
mov edi, 0x469524
mov dword [esp + 0x2c], edx
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [esp + 0x44]
mov dword [esp + 0x30], eax
test ebp, ebp
mov dword [esp + 0x28], ecx
jbe 0x4119ed
push 0x40
push 0x469564
lea ecx, [esp + 0x14]
call sub.MFC42.DLL_CFile::Read
xor eax, eax
mov cl, byte [eax + 0x469524]
mov dl, byte [eax + 0x469564]
xor cl, dl
inc eax
not cl
mov byte [eax + 0x469563], cl
cmp eax, 0x40
jl 0x411948
lea edx, [esp + 0x40]
push edx
call fcn.00410fa0
push 0x40
lea eax, [esp + 0x48]
push 0x469564
push eax
call fcn.00410fd0
lea ecx, [esp + 0x50]
push ecx
call fcn.00411080
mov ecx, 0x10
lea esi, [esp + 0x54]
lea edi, [esp + 0xac]
add esp, 0x14
rep movsd dword es:[edi], dword [esi]
xor eax, eax
mov dl, byte [esp + eax + 0x98]
mov cl, byte [esp + eax + 0xd8]
xor dl, cl
mov byte [eax + 0x469524], dl
inc eax
cmp eax, 0x40
jl 0x4119a0
push 1
push 0xffffffffffffffc0
lea ecx, [esp + 0x14]
call sub.MFC42.DLL_CFile::Seek
push 0x40
push 0x469564
lea ecx, [esp + 0x14]
call sub.MFC42.DLL_CFile::Write
mov ecx, dword [0x4690f4]
inc ecx
dec ebp
mov dword [0x4690f4], ecx
jne 0x411936
mov ecx, 0x10
xor eax, eax
mov edi, 0x469564
push 2
rep stosd dword es:[edi], eax
mov eax, dword [esp + 0x20]
lea ecx, [esp + 0x10]
neg eax
push eax
call sub.MFC42.DLL_CFile::Seek
mov ecx, dword [esp + 0x1c]
push ecx
push 0x469564
lea ecx, [esp + 0x14]
call sub.MFC42.DLL_CFile::Read
pop edi
xor eax, eax
pop ebp
mov dl, byte [eax + 0x469524]
mov cl, byte [eax + 0x469564]
xor dl, cl
inc eax
not dl
mov byte [eax + 0x469563], dl
cmp eax, 0x40
jl 0x411a24
mov eax, dword [esp + 0x14]
push 1
neg eax
push eax
lea ecx, [esp + 0xc]
call sub.MFC42.DLL_CFile::Seek
push 0x40
push 0x469564
lea ecx, [esp + 0xc]
call sub.MFC42.DLL_CFile::Write
lea ecx, [esp + 0x1c]
push 0x10
push ecx
lea ecx, [esp + 0xc]
call sub.MFC42.DLL_CFile::Write
lea edx, [esp + 0x14]
push 0x10
push edx
lea ecx, [esp + 0xc]
call sub.MFC42.DLL_CFile::Write
push 8
push 0x4662d8
lea ecx, [esp + 0xc]
call sub.MFC42.DLL_CFile::Write
lea ecx, [esp + 4]
call sub.MFC42.DLL_CFile::Close
mov eax, dword [esp + 0x120]
lea ecx, [esp + 0x18]
push eax
call fcn.004149aa
lea ecx, [esp + 0x18]
push str..des
lea edx, [esp + 0x30]
push ecx
push edx
mov byte [esp + 0x124], 2
call sub.MFC42.DLL_operator_2
mov eax, dword [eax]
mov byte [esp + 0x118], 3
push eax
mov eax, dword [esp + 0x1c]
push eax
call sub.MFC42.DLL_CFile::Rename
lea ecx, [esp + 0x2c]
mov byte [esp + 0x118], 2
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x18]
mov byte [esp + 0x118], 1
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 4]
mov byte [esp + 0x118], 0
call sub.MFC42.DLL_CFile::CFile
mov dword [esp + 0x118], 0xffffffff
call sub.MFC42.DLL_AfxGetModuleState
mov ecx, dword [eax + 4]
call sub.MFC42.DLL_CCmdTarget::EndWaitCursor
mov ecx, dword [esp + 0x110]
pop esi
mov dword fs:[0], ecx
add esp, 0x118
ret