Function at 0x414ac0
Capabilities:
Encode data using xor

Disassembly:
sub edx, dword [edi + 0x46]
jnp 0x414ad4
bnd je 0x414b47
invalid
and byte [ecx], 0xf3
fstp st(2)
sbb byte [ebp - 0x36], bl
invalid
jo 0x414ba0
and ebp, esp
invalid
ja 0x414bc7
call 0x5ca1caa7
jg 0x414c02
pop esp
movsb byte es:[edi], byte es:[esi]
movsb byte es:[edi], byte [esi]
sbb eax, 0xde7af422
mov dword [0xf4255f35], eax
outsb dx, byte [esi]
push dword [ecx]
inc edx
mov esp, 0xe49aa096
xchg esi, eax
mov al, byte [0x3b0be49a]
or edi, dword [ebx]
and bl, dl
jg 0x414b9c
mov dword [0xa21dff35], eax
xor eax, 0xb460de7e
call [0xde7e35a2]
jle 0x414ba4
pushal
mov ah, 0xb9
sar byte [eax], 0xb5
mov ecx, 0x89b538c0
pushal
aad 0x89
mov dword [eax - 0x2b], esp
mov dword [0x7e35a3d4], ecx
or eax, 0x7e35a3d4
jle 0x414bb4
fisub word [ebx - 0x5c2181cb]
mov dword [0xa3de7e35], eax
jle 0x414bb8
mov dword [0xa3de7e35], eax
xor eax, 0x35a3de7e
jle 0x414bc4
xor eax, 0x35a3de7e
jle 0x414bc0
jle 0x414bbc
mov dword [0xa3de7e35], eax
xor eax, 0x35a3de7e
jle 0x414bc8
mov dword [0xa3de7e35], eax
xor eax, 0x35a3de7e
jle 0x414bcc
mov dword [0xa3de7e35], eax
xor eax, 0x35a3de7e
jle 0x414bd0
mov dword [0xa3de7e35], eax
xor eax, 0x35a3de7e
jle 0x414bd4
mov dword [0xa3de7e35], eax
xor eax, 0x35a3de7e
jle 0x414bd8
mov dword [0xa3de7e35], eax
xor eax, 0x35a3de7e
jle 0x414bdc
mov dword [0xa3de7e35], eax
xor eax, 0x35a3de7e
pop ecx
sub eax, 0x2d59fc4a
dec edx
cld
pop ecx
sub eax, 0x2d59fc4a
dec edx
cld
pop ecx
sub eax, 0x2d59fc4a
dec edx
cld
pop ecx
sub eax, 0x2d59fc4a
dec edx
cld
pop ecx
sub eax, 0x2d59fc4a
dec edx
cld
pop ecx
sub eax, 0x2d59fc4a
dec edx
cld
pop ecx
sub eax, 0x2d59fc4a
dec edx
cld
pop ecx
sub eax, 0x2d59fc4a
dec edx
cld
pop ecx
sub eax, 0x2d59fc4a
dec edx
cld
pop ecx
sub eax, 0x2d59fc4a
dec edx
cld
pop ecx
sub eax, 0x2d59fc4a
dec edx
cld
pop ecx
sub eax, 0x2d59fc4a
dec edx
cld
pop ecx
sub eax, 0x2d59fc4a
dec edx
cld
pop ecx
sub eax, 0x2d59fc4a
dec edx
cld
pop ecx
sub eax, 0x2d59fc4a
dec edx
cld
pop ecx
sub eax, 0x2d59fc4a
dec edx
cld
pop ecx
sub eax, 0x2d59fc4a
dec edx
cld
pop ecx
sub eax, 0x2d59fc4a
dec edx
cld
pop ecx
sub eax, 0x2d59fc4a
dec edx
cld
pop ecx
sub eax, 0x2d59fc4a
dec edx
cld
pop ecx
sub eax, 0x2d59fc4a
dec edx
cld
pop ecx
sub eax, 0x2d59fc4a
dec edx
cld
pop ecx
sub eax, 0x2d59fc4a
dec edx
cld
pop ecx
sub eax, 0x2d59fc4a
dec edx
cld
pop ecx
sub eax, 0x2d59fc4a
dec edx
cld
pop ecx
sub eax, 0x2d59fc4a
dec edx
cld
pop ecx
sub eax, 0x2d59fc4a
dec edx
cld
pop ecx
sub eax, 0x2d59fc4a
dec edx
cld
pop ecx
sub eax, 0x2d59fc4a
dec edx
cld
pop ecx
sub eax, 0x2d59fc4a
dec edx
cld
pop ecx
sub eax, 0x2d59fc4a
dec edx
cld
pop ecx
sub eax, 0x2d59fc4a
dec edx
cld
pop ecx
sub eax, 0x2d59fc4a
dec edx
cld
pop ecx
sub eax, 0x2d59fc4a
dec edx
cld
pop ecx
sub eax, 0x5559fc4a
mov dword [0xa3de7e35], eax
xor eax, 0xfc4a2d59
mov dword [0x4a2d5935], eax
dec edx
cld
pop ecx
sub eax, 0x2d59fc4a
dec edx
cld
pop ecx
sub eax, 0x2d59fc4a
dec edx
cld
pop ecx
sub eax, 0x2d59fc4a
dec edx
cld
pop ecx
sub eax, 0x2d59fc4a
dec edx
cld
pop ecx
sub eax, 0x2d59fc4a
dec edx
cld
pop ecx
sub eax, 0x2d59fc4a
dec edx
cld
pop ecx
sub eax, 0x2d59fc4a
dec edx
cld
pop ecx
sub eax, 0x2d59fc4a
dec edx
cld
pop ecx
sub eax, 0x2d59fc4a
dec edx
cld
pop ecx
sub eax, 0x2d59fc4a
dec edx
cld
pop ecx
sub eax, 0x2d59fc4a
dec edx
cld
pop ecx
sub eax, 0x2d59fc4a
dec edx
cld
pop ecx
sub eax, 0x2d59fc4a
dec edx
cld
pop ecx
sub eax, 0x2d59fc4a
dec edx
cld
pop ecx
sub eax, 0x2d59fc4a
dec edx
cld
pop ecx
sub eax, 0x2d59fc4a
dec edx
cld
pop ecx
sub eax, 0x2d59fc4a
dec edx
cld
pop ecx
sub eax, 0x2d59fc4a
dec edx
cld
pop ecx
sub eax, 0x2d59fc4a
dec edx
cld
pop ecx
sub eax, 0x2d59fc4a
dec edx
cld
pop ecx
sub eax, 0x2d59fc4a
dec edx
cld
pop ecx
sub eax, 0x2d59fc4a
dec edx
cld
pop ecx
sub eax, 0x2d59fc4a
dec edx
cld
pop ecx
sub eax, 0x2d59fc4a
dec edx
cld
pop ecx
sub eax, 0x2d59fc4a
dec edx
cld
pop ecx
sub eax, 0x2d59fc4a
dec edx
cld
pop ecx
sub eax, 0x2d59fc4a
dec edx
cld
pop ecx
sub eax, 0x2d59fc4a
dec edx
cld
pop ecx
sub eax, 0x2d59fc4a
dec edx
cld
pop ecx
sub eax, 0x2d59fc4a
dec edx
cld
pop ecx
sub eax, 0x2d59fc4a
dec edx
cld
pop ecx
sub eax, 0x2d59fc4a
dec edx
cld
pop ecx
sub eax, 0x2d59fc4a
dec edx
cld
pop ecx
sub eax, 0x2d59fc4a
dec edx
cld
pop ecx
push ebp
and dword [ecx - 0x3e], edx
push ebx
and dword [edx - 0x37], ebx
pop ebp
sub byte [edi + 0xb2007a], al
mov dl, 0xe8
fld qword [esi - 0x6a]
lea ebp, [ebx - 0x3ff8579]
xor byte [edx + 0x44c7f45f], dh
mov eax, 0xff90771e
mov bl, pe_nt_image_headers32
xchg esi, eax
mov esi, 0x85f7968d
cmp al, 0x6a
out 0xed, eax
xchg dword [ecx - 0x4f], ecx
enter 0x1706, 0xffffffffffffff93
pop ecx
or al, 0x16
or ecx, eax
add esp, dword [ecx]
mov esp, 0xd1491d32
jl 0x414d03
stc
xor bl, ah
mov eax, dword [0x367230ff]
mov ch, bh
test bl, 0x50
push eax
push esp
push ebx
push esi
ret