Function at 0x4143c4
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28c
mov eax, dword [0x447040]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, ecx
xor ebx, ebx
push edi
mov dword [ebp - 0x218], esi
push str.Advapi32.dll
mov dword [ebp - 0x230], esi
mov dword [ebp - 0x218], esi
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 0x210], eax
test eax, eax
je 0x4146cd
lea edi, [ebp - 0x228]
mov esi, str.fPQxHTpYDG
push 0x35
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop esi
cmp byte [0x440701], bl
je 0x414442
mov ecx, ebx
xor edx, edx
mov eax, ecx
div esi
add dl, 0x34
xor byte [ebp + ecx - 0x228], dl
inc ecx
cmp ecx, 0xe
jl 0x414426
mov eax, dword [ebp - 0x210]
lea ecx, [ebp - 0x228]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, str.fPQp_MlZPH__
mov dword [ebp - 0x22c], eax
lea edi, [ebp - 0x258]
mov ecx, ebx
push 0x35
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
pop esi
xor edx, edx
mov eax, ecx
div esi
add dl, 0x34
xor byte [ebp + ecx - 0x258], dl
inc ecx
cmp ecx, 0xd
jl 0x41446a
lea eax, [ebp - 0x258]
push eax
push dword [ebp - 0x210]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
lea edi, [ebp - 0x248]
mov esi, str.fPQtTVIwXG_
mov dword [ebp - 0x214], eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
cmp byte [0x4402db], bl
je 0x4144ca
push 0x35
mov ecx, ebx
pop esi
xor edx, edx
mov eax, ecx
div esi
add dl, 0x34
xor byte [ebp + ecx - 0x248], dl
inc ecx
cmp ecx, 0xc
jl 0x4144b4
mov esi, dword [ebp - 0x210]
lea eax, [ebp - 0x248]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x22c], ebx
je 0x4146c0
cmp dword [ebp - 0x214], ebx
je 0x4146c0
test eax, eax
je 0x4146c0
mov esi, 0x100
lea eax, [ebp - 0x104]
push esi
push ebx
push eax
call fcn.0041dab0
push esi
lea eax, [ebp - 0x204]
push ebx
push eax
call fcn.0041dab0
add esp, 0x18
mov dword [ebp - 0x208], esi
mov esi, 0x440798
lea edi, [ebp - 0x28c]
push 0xb
pop ecx
rep movsd dword es:[edi], dword [esi]
push 0x35
mov ecx, ebx
movsb byte es:[edi], byte [esi]
pop esi
xor edx, edx
mov eax, ecx
div esi
add dl, 0x34
xor byte [ebp + ecx - 0x28c], dl
inc ecx
cmp ecx, 0x2d
jl 0x414544
lea eax, [ebp - 0x20c]
push eax
push 0x20019
push ebx
lea eax, [ebp - 0x28c]
push eax
push 0x80000002
call dword [ebp - 0x22c]
test eax, eax
jne 0x414632
lea edi, [ebp - 0x228]
mov esi, str.dGYSMZNu_P__gzpcoxh_pW2.1__1
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
cmp byte [0x440797], bl
je 0x4145b2
push 0x35
mov ecx, ebx
pop esi
xor edx, edx
mov eax, ecx
div esi
add dl, 0x34
xor byte [ebp + ecx - 0x228], dl
inc ecx
cmp ecx, 0xc
jl 0x41459c
lea eax, [ebp - 0x208]
push eax
lea eax, [ebp - 0x104]
push eax
push ebx
push 1
lea eax, [ebp - 0x228]
push eax
push ebx
push dword [ebp - 0x20c]
call dword [ebp - 0x214]
mov esi, str.w_DE_WNyITR__
lea edi, [ebp - 0x228]
push 0x35
mov ecx, ebx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
pop esi
xor edx, edx
mov eax, ecx
div esi
add dl, 0x34
xor byte [ebp + ecx - 0x228], dl
inc ecx
cmp ecx, 0xd
jl 0x4145eb
lea eax, [ebp - 0x208]
push eax
lea eax, [ebp - 0x204]
push eax
push ebx
push 1
lea eax, [ebp - 0x228]
push eax
push ebx
push dword [ebp - 0x20c]
call dword [ebp - 0x214]
push dword [ebp - 0x20c]
call dword [ebp - 0x218]
lea eax, [ebp - 0x204]
push eax
call fcn.0042508b
pop ecx
cmp eax, 0x4e20
jl 0x41469a
mov esi, str.cXSWNIe_r_r_
lea edi, [ebp - 0x23c]
push 0x35
pop ecx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
xor edx, edx
mov eax, ebx
div ecx
add dl, 0x34
xor byte [ebp + ebx - 0x23c], dl
inc ebx
cmp ebx, 0xb
jl 0x414659
lea ecx, [ebp - 0x104]
mov eax, dword [ecx]
lea edx, [ebp - 0x23c]
cmp eax, dword [edx]
jne 0x41469a
mov eax, dword [ecx + 4]
cmp eax, dword [edx + 4]
jne 0x41469a
movzx eax, word [ecx + 8]
cmp ax, word [edx + 8]
jne 0x41469a
mov byte [ebp - 0xfb], 0x31
push dword [ebp - 0x210]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov ecx, dword [ebp - 0x230]
lea eax, [ebp - 0x104]
push eax
call fcn.004040bd
mov eax, dword [ebp - 0x230]
jmp 0x4146db
push esi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov esi, dword [ebp - 0x230]
push 0x43f133
mov ecx, esi
call fcn.004040bd
mov eax, esi
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0041bdfa
leave
ret