Function at 0x414ddd
Capabilities:
Encode data using xor

Disassembly:
sub eax, 0x7d1e9dc6
lahf
sub dword [ecx + 0x8104e78], ebx
mov edx, 0x8eb2780d
cmpsd dword [esi], dword es:[edi]
add bl, byte [0x3028b086]
fmul qword [ecx + 0x4fc12786]
cwde
xor ah, bl
mov dword [esi - 0x67b03ed9], eax
lcall 0x4f3a, 0x387cf578
shr al, 0x18
push cs
js 0x414ad7
jl 0x414b1c
cmp cl, byte [edi - 0x40]
call 0x30b95904
sbb byte [esi], cl
js 0x414b1c
sub byte [eax + 0x14902787], dh
xchg dword [edi], esp
nop
adc al, 0x87
daa
xchg edi, esi
push 0x904f39b8
cmp dword [edi - 0x70], ecx
or esi, edi
mov al, 0x87
adc dword [ebx + 0x78d8784f], edi
invalid
mov ebx, 0x78d8784f
dec edi
js 0x414ae0
js 0x414b59
js 0x414ae4
js 0x414b5d
js 0x414ae8
xchg dword [eax + 0x4f782787], esi
js 0x414af0
xchg dword [eax + 0x4f782787], esi
js 0x414b6d
js 0x414af8
js 0x414b71
js 0x414afc
js 0x414b75
js 0x414b00
js 0x414b79
sti
xor al, 0x7c
mov byte [esp + edi*8 - 0x6c], bh
out 0x3a, eax
fdiv dword [ecx - 0x4c]
aaa
mov al, 0x78
aas
cmp eax, ebx
or al, al
add dl, bh
jne 0x414b41
arpl word [edi + 0x519d181e], si
mov al, 0x3e
popal
js 0x414bad
cmp al, bl
stc
mov byte [ecx - 0x28], bh
js 0x414ba5
stc
xchg ecx, eax
cmp dword [eax + 0x3a], esi
stc
mov eax, dword [0x4f78d879]
ret 0x33f8
xor ecx, dword [esi]
js 0x414bc1
xchg edi, eax
in eax, dx
mov ah, 0xec
pop esp
dec esi
xchg dword [eax], esi
push ebx
dec edi
js 0x414b4c
ret
adc eax, 0x5116bd03
push ss
push ecx
pop ebx
pop esp
pop ebx
mov esp, 0xf81ff94b
clc
jg 0x414bd6
cwde
nop
pop ebp
js 0x414b64
js 0x414bdc
xchg cl, dl
invalid
adc dword [ebx], esi
cmpsw word [esi], word es:[edi]
sbb dh, byte [edi + ecx*2 + 0x51]
je 0x414be9
push ecx
jno 0x414b56
xor ebp, ecx
jns 0x414b93
xchg ebx, ecx
mov byte [0x7c19f98c], al
dec edi
js 0x414b84
invalid
pop ecx
mov ah, 0x2f
cmp ecx, 0xffffffa0
cdq
push ecx
stc
mov al, byte [0x31905199]
inc ecx
or dword [0x7937f9aa], ecx
nop
xor dword [ecx + 9], eax
or eax, 0x7937f9aa
jns 0x414c0d
dec edi
js 0x414b98
stc
invalid
js 0x414c15
mov ebx, 0xe351bf59
pop eax
mov edi, 0x8f58e351
int1
push cs
or eax, dword fs:[ebp + 0x78]
invalid
or eax, dword [ebp + 0x78]
fdivr dword [eax + 0x4f]
js 0x414c25
js 0x414bb0
js 0x414c29
js 0x414bb4
js 0x414c2d
js 0x414bb8
js 0x414c31
js 0x414bbc
js 0x414c35
js 0x414bc0
js 0x414c39
dec edi
js 0x414bc4
js 0x414c3d
js 0x414bc8
js 0x414c41
js 0x414bcc
js 0x414c45
js 0x414bd0
js 0x414c49
js 0x414bd4
js 0x414c4d
js 0x414bd8
test dword [esp - 0x80], eax
test dword [esp - 0x80], eax
test dword [esp - 0x80], eax
test dword [esp - 0x80], eax
test dword [esp - 0x80], eax
test dword [esp - 0x80], eax
test dword [esp - 0x80], eax
test dword [esp - 0x80], eax
test dword [esp - 0x80], eax
test dword [esp - 0x80], eax
test dword [esp - 0x80], eax
test dword [esp - 0x80], eax
test dword [esp - 0x80], eax
test dword [esp - 0x80], eax
test dword [esp - 0x80], eax
test dword [esp - 0x80], eax
test dword [esp - 0x80], eax
test dword [esp - 0x80], eax
test dword [esp - 0x80], eax
test dword [esp - 0x80], eax
test dword [esp - 0x80], eax
test dword [esp - 0x80], eax
test dword [esp - 0x80], eax
test dword [esp - 0x80], eax
test dword [esp - 0x80], eax
test dword [esp - 0x80], eax
test dword [esp - 0x80], eax
test dword [esp - 0x80], eax
test dword [esp - 0x80], eax
test dword [esp - 0x80], eax
test dword [esp - 0x80], eax
test dword [esp - 0x80], eax
test dword [esp - 0x80], eax
test dword [esp - 0x80], eax
test dword [esp - 0x80], eax
test dword [esp - 0x80], eax
test dword [esp - 0x80], eax
test dword [esp - 0x80], eax
test dword [esp - 0x80], eax
test dword [esp - 0x80], eax
test dword [esp - 0x80], eax
test dword [esp - 0x80], eax
test dword [esp - 0x80], eax
test dword [esp - 0x80], eax
test dword [esp - 0x80], eax
test dword [esp - 0x80], eax
test dword [esp - 0x80], eax
test dword [esp - 0x80], eax
test dword [esp - 0x80], eax
test dword [esp - 0x80], eax
test dword [esp - 0x80], eax
test dword [esp - 0x80], eax
test dword [esp - 0x80], eax
test dword [esp - 0x80], eax
test dword [esp - 0x80], eax
test dword [esp - 0x80], eax
test dword [esp - 0x80], eax
test dword [esp - 0x80], eax
test dword [esp - 0x80], eax
test dword [esp - 0x80], eax
test dword [esp - 0x80], eax
test dword [esp - 0x80], eax
test dword [esp - 0x80], eax
test dword [esp - 0x80], eax
test dword [esp - 0x80], eax
test dword [esp - 0x80], eax
test dword [esp - 0x80], eax
test dword [esp - 0x80], eax
test dword [esp - 0x80], eax
test dword [edi + ecx], edi
sub eax, 0x260f3a1e
adc eax, 0xa6fb0634
inc esp
add byte fs:[ebp - 0x7a7f9bbc], 0x44
inc esp
add byte fs:[ebp - 0x7a7f9bbc], 0x44
add byte fs:[ebp - 0x7a7f9bbc], 0x44
inc esp
add byte fs:[ebp - 0x7a7f9bbc], 0x44
inc esp
add byte fs:[ebp - 0x7a7f9bbc], 0x44
inc esp
add byte fs:[ebp - 0x7a7f9bbc], 0x44
inc esp
add byte fs:[ebp - 0x7a7f9bbc], 0x44
inc esp
add byte fs:[ebp - 0x7a7f9bbc], 0x44
inc esp
add byte fs:[ebp - 0x7a7f9bbc], 0x44
inc esp
add byte fs:[ebp - 0x7a7f9bbc], 0x44
inc esp
add byte fs:[ebp - 0x7a7f9bbc], 0x44
inc esp
add byte fs:[ebp - 0x7a7f9bbc], 0x44
inc esp
add byte fs:[ebp - 0x7a7f9bbc], 0x44
add byte fs:[ebp - 0x7a7f9bbc], 0x44
add byte fs:[ebp - 0x7a7f9bbc], 0x44
add byte fs:[ebp - 0x7a7f9bbc], 0x44
add byte fs:[ebp - 0x7a7f9bbc], 0x44
add byte fs:[ebp - 0x7a7f9bbc], 0x44
add byte fs:[ebp - 0x7a7f9bbc], 0x44
add byte fs:[ebp - 0x7a7f9bbc], 0x44
add byte fs:[ebp - 0x7a7f9bbc], 0x44
add byte fs:[ebp - 0x7a7f9bbc], 0x44
add byte fs:[ebp - 0x7a7f9bbc], 0x44
add byte fs:[ebp - 0x7a7f9bbc], 0x44
add byte fs:[ebp - 0x7a7f9bbc], 0x44
add byte fs:[ebp - 0x7a7f9bbc], 0x44
add byte fs:[ebp - 0x7a7f9bbc], 0x44
add byte fs:[ebp - 0x7a7f9bbc], 0x44
add byte fs:[ebp - 0x7a7f9bbc], 0x44
add byte fs:[ebp - 0x7a7f9bbc], 0x44
add byte fs:[ebp - 0x7a7f9bbc], 0x44
add byte fs:[ebp - 0x7a7f9bbc], 0x44
add byte fs:[ebp - 0x7a7f9bbc], 0x44
add byte fs:[ebp - 0x7a7f9bbc], 0x44
add byte fs:[ebp - 0x7a7f9bbc], 0x44
add byte fs:[ebp - 0x7a7f9bbc], 0x44
add byte fs:[ebp - 0x7a7f9bbc], 0x44
add byte fs:[ebp + 0x1e2d0f3c], 0x3a
invalid
inc esp
add byte fs:[ebp - 0x7a7f9bbc], 0x44
add byte fs:[ebp - 0x7a7f9bbc], 0x44
add byte fs:[ebp - 0x7a7f9bbc], 0x44
add byte fs:[ebp - 0x7a7f9bbc], 0x44
add byte fs:[ebp - 0x7a7f9bbc], 0x44
add byte fs:[ebp - 0x7a7f9bbc], 0x44
add byte fs:[ebp - 0x7a7f9bbc], 0x44
add byte fs:[ebp - 0x7a7f9bbc], 0x44
add byte fs:[ebp - 0x7a7f9bbc], 0x44
add byte fs:[ebp - 0x7a7f9bbc], 0x44
add byte fs:[ebp - 0x7a7f9bbc], 0x44
add byte fs:[ebp - 0x7a7f9bbc], 0x44
add byte fs:[ebp - 0x7a7f9bbc], 0x44
add byte fs:[ebp - 0x7a7f9bbc], 0x44
add byte fs:[ebp - 0x7a7f9bbc], 0x44
add byte fs:[ebp - 0x7a7f9bbc], 0x44
add byte fs:[ebp - 0x7a7f9bbc], 0x44
add byte fs:[ebp - 0x7a7f9bbc], 0x44
add byte fs:[ebp - 0x7a7f9bbc], 0x44
add byte fs:[ebp - 0x7a7f9bbc], 0x44
add byte fs:[ebp - 0x7a7f9bbc], 0x44
add byte fs:[ebp - 0x7a7f9bbc], 0x44
add byte fs:[ebp - 0x7a7f9bbc], 0x44
add byte fs:[ebp - 0x7a7f9bbc], 0x44
add byte fs:[ebp - 0x7a7f9bbc], 0x3c
cvtps2pi mm3, qword [esi]
cmp cl, byte [edi]
adc eax, 0xa6fb0634
imul ebx, dword [esp + edi*2 + 0x3af3816e], 0xfb85e44a
cmpsb byte [esi], byte es:[edi]
imul edx, edx, 0xda366e4c
mov ebx, 0xb30d198
leave
sbb dword [edi - 0x41], 0x85b494e
dec ebp
clc
mov word [edx + reloc.winhttp.dll_WinHttpCrackUrl], ss
or byte [edx], bh
jns 0x414d38
or cl, dh
test eax, 0xa96803ef
jecxz 0x414d59
ret
stosd dword es:[edi], eax
js 0x414dda
pop esp
stosd dword es:[edi], eax
stc
mov edi, 0xfe89ab35
pop ebp
xor byte [esi], 1
mov bh, 0x6f
test eax, 0x1f45dcd2
mov bl, 0xbb
pop ecx
push eax
push ebp
pop eax
push eax
pop esi
pop esp
push ecx
pop edx
add byte [ecx], al
fnstenv [ecx]
xor dword [edi], eax