Function at 0x4279bc
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ecx
push 0x427bb4
call sub.kernel32.dll_GetModuleHandleW
mov dword [ebp - 4], eax
push ebp
mov edx, 0x4273ac
mov eax, 0x427bd0
call fcn.00427990
pop ecx
mov dword [0x4c1134], eax
push ebp
mov edx, 0x4273f4
mov eax, 0x427be4
call fcn.00427990
pop ecx
mov dword [0x4c1138], eax
push ebp
mov edx, 0x4273f4
mov eax, 0x427bec
call fcn.00427990
pop ecx
mov dword [0x4c113c], eax
push ebp
mov edx, 0x427400
mov eax, 0x427bf4
call fcn.00427990
pop ecx
mov dword [0x4c1140], eax
push ebp
mov edx, 0x427400
mov eax, 0x427bfc
call fcn.00427990
pop ecx
mov dword [0x4c1144], eax
push ebp
mov edx, 0x427400
mov eax, 0x427c04
call fcn.00427990
pop ecx
mov dword [0x4c1148], eax
push ebp
mov edx, 0x427400
mov eax, 0x427c0c
call fcn.00427990
pop ecx
mov dword [0x4c114c], eax
push ebp
mov edx, 0x427400
mov eax, 0x427c14
call fcn.00427990
pop ecx
mov dword [0x4c1150], eax
push ebp
mov edx, 0x427400
mov eax, 0x427c1c
call fcn.00427990
pop ecx
mov ebx, 0x696dfdf5
neg esi
and edx, 0xddbcd4d7
mov edi, ecx
and esi, esp
rol ecx, 0xa
sub edi, 0xcc34b059
dec esi
sub ecx, esp
or edx, 0x10065b35
xchg ecx, eax
sub eax, edi
and esi, 0x42425be0
test edx, ecx
jne 0x427ac1
and edi, edx
neg edx
or eax, 0xc701ade6
shl esi, 0xc
mov esi, 0x839401a8
and eax, eax
neg ebx
shl esi, 1
mov ecx, 0x455b877c
not ebx
ror edi, 3
cmp dword [0x4b9cc0], 0x5c17aa4e
jae 0x427af1
shr edi, 9
sub esi, ebx
mov dword [0x4b8be5], edi
sub edi, esp
or edx, 0xef5878f6
shr esi, 9
shl eax, 0x19
not eax
loop 0x427add
cmp dword [0x4b81ff], ebx
jge 0x427b19
xor esi, 0xada34ec2
add dword [0x4b915b], esi
dec edi
mov edx, 0x51189101
or edi, edx
add eax, ecx
sub eax, ebx
dec eax
or ecx, dword [0x4ba458]
xor dword [0x4b7279], eax
or esi, ebp
xor ecx, ebx
cmp ebx, 0x131d044f
jo 0x427b4a
xor eax, 0x15b52390
inc edi
sub eax, eax
add ebx, 0xf09005d6
mov edi, esp
rol esi, 0x13
test dword [0x4b7384], 0xe75911d4
jge 0x427b6a
cmp dword [0x4b92d1], eax
jns 0x427b6e
mov edi, edi
and eax, 0x5533406a
dec eax
shl edi, 0xe
call fcn.00494907
mov ecx, 0x75b78e85
not esi
sub edx, dword [0x4b8f00]
mov edx, eax
shr edx, 0x15
shl edi, 2
add ebx, 0x67d207dc
xchg ebx, esi
rol ebx, 0x1f
or esi, 0x46dbf607
mov dword [0x4ba11d], ecx
add esi, eax
or edi, 0x5f229193
cmp dword [0x4ba1a4], 0x4571637a
jne 0x427bc3
add edx, dword [0x4b8ee4]
loop 0x427b82
rol edx, 0x13
ror ebx, 8
add ecx, 0xbef00611
rol esi, 0x10
dec ebx
xor edi, esi
rol edi, 0x17
test ebp, 0x281ea132
js 0x427be7
mov ecx, 0x6fb63091
or edi, dword [0x4b8c75]
ror eax, 0xd
sub edi, esp
mov eax, 0xb1599766
add ebx, 0xb61b1cb9
not edx
xor edi, ebx
shr ebx, 7
xor dword [0x4b9f4a], ebx
or edx, ebp
add eax, eax
call fcn.00499739
and edi, 0xe0f94afd
loop 0x427be7
inc edx
call fcn.0041c2fa
and ecx, dword [0x4b7d0a]
add edi, eax
call fcn.004992dc
dec ebx
sub edi, ecx
add edx, 0xdf5bfef7
inc edi
ror eax, 0xb
call fcn.00499739
xor ebx, 0xca7b1030
call fcn.00427385
sub eax, 0x9bb9e58
xor ecx, 0xd8cf9fbb
add ebx, 0xcfaad87
inc edi
sub eax, edi
add eax, 0x9b7b020c
dec ecx
sub ebx, 0xdf115986
push 0x4b7515
add ebx, dword [str.ibm775]
xchg eax, esi
or ecx, dword [0x4ba3e3]
xor ecx, 0x127c3cd2
add edx, 0x5cebbef5
xor eax, 0x25af4a7a
inc edi
xor dword [0x4baa34], ecx
add edi, ecx
not esi
mov ebx, 0xdcd52d75
or ecx, dword [0x4bae5f]
xchg ebx, edx
add ebx, ebp
or dword [0x4baba2], edx
inc ecx
dec edi
or edx, dword [0x4bacf9]
add ecx, dword [0x4bac8d]
sub edx, edi
xor ecx, dword [0x4bad0f]
call fcn.00421a57
xor edx, dword [0x4bad08]
neg ebx
inc eax
and dword [0x4ba867], esi
and dword [0x4ba9b5], edx
dec eax
neg ebx
call fcn.0048fc44
add edx, edi
inc edi
dec ecx
sub ebx, ebp
xchg ebx, edx
xor ebx, 0x1bdb4c0c
add ecx, dword [0x4bae31]
ror ecx, 3
add dword [0x4baacc], edx
xor edi, 0x6a688f9c
not edi
dec edx
sub dword [0x4baac2], edx
add ebx, dword [0x4bacf5]
ror esi, 0xe
neg eax
ror eax, 0x14
rol eax, 0x14
neg eax
rol esi, 0xe
and dword [0x4baaf5], esi
inc edx
not edi
xor edi, 0x6a688f9c
or dword [0x4ba8be], esi
rol ecx, 3
xor ebx, 0xc70e6139
dec edi
rol eax, 1
or edi, dword [0x4bacde]
not esi
sub esi, 0xa116e87b
xor esi, 0xe989c303
sub esi, dword [0x4bacc5]
sub esi, 0xa6ce0c2d
or dword [0x4baa75], ebx
add edx, edi
add eax, dword [0x4bac21]
call fcn.004733cc
and dword [0x4ba8c8], 0x7db18ada
sub dword [0x4ba8ea], ebx
xchg ebx, esi
add eax, dword [0x4baf12]
xchg ebx, esi
and dword [0x4bab99], 0x1c9fc081
sub edx, edi
add esi, 0xa6ce0c2d
xor esi, 0xe989c303
add esi, 0xa116e87b
not esi
ror eax, 1
inc edi
push ebx
and dword [0x4bab92], ecx
sub dword [0x4bab56], eax
add edi, 0x3796cda2
neg edi
add ecx, dword [0x4bad50]
dec eax
add edi, ecx
neg ecx
xor ebx, edx
xchg esi, edx
call fcn.004733cc
rol eax, 7
xchg eax, edx
xchg eax, edx
ror eax, 7
call fcn.00419e15
xchg esi, edx
xor ebx, edx
neg ecx
sub edi, ecx
inc eax
neg edi
sub edi, 0x3796cda2
or dword [0x4bab99], eax
mov ecx, 0x48339
ror edx, 0x16
inc esi
or ebx, dword [0x4baf1c]
call fcn.004733cc
rol eax, 0x1c
xor esi, 0x9242c58
call fcn.004733cc
xor edi, dword [0x4baccd]
call fcn.00404ded
dec esi
add eax, 0x66f85ba7
or eax, dword [0x4bac3d]
or ebx, dword [0x4bac37]
sub eax, 0x66f85ba7
inc esi
call fcn.004733cc
xor esi, 0x9242c58
ror eax, 0x1c
call fcn.0041b85d
dec esi
rol edx, 0x16
push ecx
neg ebx
rol esi, 0x12
dec esi
neg esi
add eax, ebx
xchg ecx, esi
neg esi
or edi, dword [0x4bac0d]
not esi
or ecx, dword [0x4bad91]
not esi
neg esi
xchg ecx, esi
sub eax, ebx
neg esi
inc esi
ror esi, 0x12
neg ebx
mov esi, 0xc8ebe24b
sub ecx, 0x3537a635
neg esi
xor ebx, dword [0x4babfe]
xor ebx, esp
add ebx, edi
xor eax, 0x549c6eee
sub dword [0x4baac7], 0xb432cc9b
neg ecx
xchg edi, esi
dec edi
sub edx, dword [0x4badff]
call fcn.004a24de
xor eax, 0x9653463f
sub ebx, dword [0x4bae3d]
xor eax, ebx
xor eax, ebx
xor eax, 0x9653463f
call fcn.004993ce
inc edi
xchg edi, esi
neg ecx
xor eax, 0x549c6eee
sub ebx, edi
xor ebx, esp
neg esi
add ecx, 0x3537a635
sub esi, 0x835a997d
or dword [0x4baab4], eax
dec eax
add ebx, dword [0x4baf72]
xor edx, 0xf04f11b3
ror edi, 0x18
dec eax
and dword [0x4ba95b], ecx
xor esi, 0xf763d72a
ror ebx, 0x13
add ebx, dword [0x4baeec]
xor ecx, dword [0x4bad9b]
xchg ebx, edx
xor ebx, 0x7a32f8e8
and dword [0x4ba9a6], ebx
call fcn.0047d03c
not esi
and dword [0x4baa30], edx
rol ebx, 0x15
ror ebx, 0x15
not esi
call fcn.0040e1da
or dword [0x4babd6], ecx
xor ebx, 0x7a32f8e8
xchg ebx, edx
rol ebx, 0x13
xor esi, 0xf763d72a
inc eax
rol edi, 0x18
xor edx, 0xf04f11b3
inc eax
mov dword [0x4ba934], esi
xor esi, 0x45d3c9ef
or dword [0x4baa67], eax
xchg ecx, edx
not ecx
inc edi
or ecx, dword [0x4bac92]
add ecx, dword [0x4baf78]
and dword [0x4ba931], ebx
not esi
xor esi, 0x54a59e25
call fcn.0049c12d
call fcn.004733cc
xor esi, 0x54a59e25
not esi
dec edi
not ecx
xchg ecx, edx
add dword [0x4baaf8], ecx
push esi
xor ecx, dword [0x4bafc8]
sub dword [0x4bab93], edi
rol esi, 0x12
add dword [0x4baa75], eax
rol edx, 0x15
dec esi
xor eax, 0x504b21e8
sub dword [0x4babe0], ecx
sub eax, dword [0x4baf3e]
xchg ecx, esi
mov dword [0x4babda], ebx
xchg ecx, esi
and dword [0x4baa1a], ecx
xor edx, 0x9441b82
add ecx, dword [0x4baf31]
rol edx, 0xc
ror edx, 0xc
xor edx, 0x9441b82
xchg ecx, esi
sub dword [0x4ba925], edx
xchg ecx, esi
or dword [0x4ba9c7], esi
xor eax, 0x504b21e8
inc esi
ror edx, 0x15
xor dword [0x4babe7], edx
ror esi, 0x12
sub dword [0x4babbc], eax
call dword [sym.imp.kernel32.dll_VirtualProtect]
inc esi
dec ecx
ror eax, 0xe
sub esi, 0xc908169b
xor edi, dword [0x4badb9]
dec edx
or edi, dword [0x4bad58]
inc ecx
call fcn.004952b1
not esi
and dword [0x4ba9d9], 0xe0ac07fa
xor edi, esp
call fcn.0040d440
add ebx, ebp
and dword [0x4ba9cf], edx
xor dword [0x4ba8a1], ebx
or dword [0x4ba8f2], ebx
sub dword [0x4ba84f], ebx
sub ebx, ebp
call fcn.004a1f9c
xor edi, esp
not esi
call fcn.004733cc
dec ecx
inc edx
add esi, 0xc908169b
rol eax, 0xe
inc ecx
dec esi
mov eax, esi
sub dword [0x4baa16], 0xc972753e
sub edi, dword [0x4baef6]
mov dword [0x4baa5a], 0xf19d6ce4
sub eax, esp
and dword [0x4ba95f], esi
not ebx
or dword [0x4ba9cb], esi
ror ecx, 2
and dword [0x4baab7], ecx
xor ebx, 0x6c548520
xor ebx, 0x6c548520
mov dword [0x4baa3f], ebx
rol ecx, 2
mov dword [0x4baa36], ebx
not ebx
or dword [0x4ba9ad], ecx
add eax, esp
sub dword [0x4baa5c], 0x810d0dca
inc ebx
sub edi, ecx
xor edi, edx
sub edi, dword [0x4baf5f]
neg esi
add esi, ebx
xor ebx, 0x1b71bc16
xor esi, esp
sub ebx, ecx
xor ecx, ebx
ror edi, 0x17
sub edx, dword [0x4bac42]
dec eax
add edx, dword [0x4bac05]
xor esi, dword [0x4bae0f]
neg edi
add eax, 0x6013027d
sub eax, 0x6013027d
neg edi
inc eax
rol edi, 0x17
xor ecx, ebx
add ebx, ecx
xor esi, esp
xor ebx, 0x1b71bc16
sub esi, ebx
neg esi
xor edi, edx
add edi, ecx
dec ebx
mov ecx, 0x47d8c
rol ebx, 4
or ebx, dword [0x4bac2b]
not ebx
dec esi
rol esi, 9
or edx, dword [0x4bad8a]
not esi
xor esi, dword [0x4baf75]
dec ecx
xor esi, 0x1d495c78
add dword [0x4ba8d7], eax
xor edx, 0x709602b6
xor edx, 0x709602b6
xor esi, 0x1d495c78
inc ecx
not esi
ror esi, 9
inc esi
not ebx
ror ebx, 4
xchg ebx, eax
xor dword [0x4ba891], edx
call fcn.004733cc
dec edx
call fcn.004733cc
neg edx
or ebx, dword [0x4bae20]
xor ecx, 0xab3f4aa7
ror edx, 9
inc eax
neg esi
call fcn.004195b2
add ecx, esp
neg ebx
add edi, dword [0x4bac38]
xchg ecx, eax
rol eax, 0x1c
or dword [0x4ba98b], ecx
add edx, 0xc5c9b6cb
or ebx, dword [0x4badde]
call fcn.004253fb
or edi, dword [0x4bac2a]
call fcn.00484683
sub edx, 0xc5c9b6cb
add dword [0x4baa65], ecx
ror eax, 0x1c
xchg ecx, eax
neg ebx
sub ecx, esp
neg esi
dec eax
rol edx, 9
xor ecx, 0xab3f4aa7
neg edx
call fcn.004733cc
inc edx
call fcn.004733cc
add ebx, 0x5ad
sub edx, dword [0x4bad25]
ror ebx, 6
sub ebx, eax
xchg edi, eax
xor eax, ecx
call fcn.004733cc
or ecx, dword [0x4baeee]
not esi
sub dword [0x4ba858], eax
xor ecx, dword [0x4bac87]
not esi
xor eax, ecx
xchg edi, eax
add ebx, eax
rol ebx, 6
sub dword [ebx], 0xa0e01fc8
rol ecx, 6
xor edi, ecx
dec eax
ror edx, 4
call fcn.004733cc
sub dword [0x4ba905], esi
add eax, ebp
xor ecx, 0xbd4fb7
add edx, dword [0x4baf46]
xchg esi, edx
not esi
call fcn.0047b843
xor edi, dword [0x4baed9]
call fcn.004733cc
add ebx, 0x74e6e002
xor edi, dword [0x4bac1b]
dec esi
add ebx, ecx
add dword [0x4ba976], 0xe8107fad
sub ebx, ecx
inc esi
sub ebx, 0x74e6e002
call fcn.004733cc
call fcn.004733cc
not esi
xchg esi, edx
xor ecx, 0xbd4fb7
sub eax, ebp
xor dword [0x4ba94d], ebx
rol edx, 4
inc eax
xor edi, ecx
ror ecx, 6
not dword [ebx]
dec eax
rol ecx, 0x1b
xor edi, edx
mov dword [0x4baa46], 0x3bfb65c3
sub ecx, 0xf919bf50
rol edx, 0x1b
xchg ecx, edx
add ebx, dword [0x4bafb8]
sub eax, esp
sub esi, dword [0x4bae13]
add eax, esp
xchg ecx, edx
ror edx, 0x1b
add ecx, 0xf919bf50
xor dword [0x4baaad], 0xe2e6732c
xor edi, edx
ror ecx, 0x1b
inc eax
sub dword [ebx], 0x8b15ceaf
xor esi, 0xaf5c255
sub dword [0x4ba882], 0xc0ed556c
add dword [0x4babc4], 0xc0eb3810
xor edx, 0x715a97f3
ror esi, 3
and dword [0x4ba837], edx
not esi
mov dword [0x4baa92], edi
xor ecx, ebp
call fcn.004733cc
add dword [0x4baadf], eax
sub dword [0x4bab80], ebx
xor ecx, ebp
not esi
mov dword [0x4ba8a3], eax
rol esi, 3
xor edx, 0x715a97f3
add dword [0x4baafb], 0x3d3e288f
xor esi, 0xaf5c255
add dword [ebx], 0x3476556a
or ecx, dword [0x4baf6e]
neg esi
or esi, dword [0x4bafb6]
dec esi
add ebx, esi
mov dword [0x4ba81d], eax
sub eax, ebp
xor edx, eax
rol ebx, 0x1e
xor dword [0x4ba951], 0xe8dc9313
xor edx, 0x26143902
and dword [0x4ba9f4], ebx
sub dword [0x4ba9bb], edi
xor edx, 0x26143902
sub dword [0x4bab24], 0x48b8f398
ror ebx, 0x1e
xor edx, eax
add eax, ebp
add dword [0x4baa3c], esi
sub ebx, esi
inc esi
neg esi
sub dword [ebx], 0x3e66f93d
not edx
ror ebx, 0x1f
xor ebx, dword [0x4bae53]
dec eax
call fcn.004733cc
rol eax, 0x12
sub edi, dword [0x4bac35]
neg edi
or dword [0x4ba8f3], 0xb7961640
call fcn.0047b843
ror esi, 0x1c
xchg ecx, eax
xchg ecx, eax
rol esi, 0x1c
call fcn.0047db7d
add dword [0x4ba92a], 0xacba17a5
neg edi
ror eax, 0x12
call fcn.0049aa9b
inc eax
rol ebx, 0x1f
not edx
sub dword [ebx], 0x698d239c
call fcn.00414a39
sub ebx, dword [0x4baf35]
xor ebx, 0xbda39f9f
sub eax, dword [0x4bac2d]
dec ecx
xor eax, dword [0x4bafc8]
inc esi
call fcn.0049036b
xor edi, ebx
dec edi
xor ebx, eax
mov dword [0x4ba8ae], 0xfb8dc9bc
sub edi, dword [0x4bafdc]
xor ecx, 0xa0cb6d7c
call fcn.004a0acb
sub ecx, esp
and dword [0x4baa1e], esi
ror ecx, 0x1a
call fcn.004733cc
call fcn.00408bea
rol ecx, 0x1a
add ecx, esp
xor ecx, 0xa0cb6d7c
or dword [0x4ba96d], 0xfec03da3
xor ebx, eax
inc edi
xor edi, ebx
dec esi
inc ecx
xor ebx, 0xbda39f9f
call fcn.004056a0
add dword [ebx], 0x51316ee2
and dword [0x4babe5], 0x77fab6bc
and dword [0x4ba9d4], 0xaa938be3
inc esi
rol ebx, 0x1e
add ebx, dword [0x4bad9e]
inc esi
ror edx, 0x17
neg edi
xchg eax, edx
sub ebx, dword [0x4bad03]
sub edx, edi
or dword [0x4baa00], 0x2da95c04
add dword [0x4ba9bd], 0xc40ca77f
xor edi, ebp
xor ecx, edi
call fcn.0047b843
not eax
not eax
call fcn.0042337f
xor ecx, edi
xor edi, ebp
add edx, edi
xchg eax, edx
neg edi
rol edx, 0x17
dec esi
ror ebx, 0x1e
dec esi
mov dword [0x4ba8ee], 0x47640224
sub dword [ebx], 0xb772f08e
add ebx, esp
call fcn.0048a87c
add eax, dword [0x4bacd9]
add eax, dword [0x4bac87]
rol edi, 0x15
dec ebx
and dword [0x4baa07], ecx
add edi, 0xb079bbd9
neg edi
sub dword [0x4ba969], edx
xor edi, ecx
call fcn.004275c3
sub eax, dword [0x4bae1f]
neg edi
or eax, dword [0x4baf2d]
ror ebx, 0x16
mov dword [0x4ba84d], esi
rol ebx, 0x16
neg edi
call fcn.004733cc
xor edi, ecx
xor dword [0x4ba9c4], edx
neg edi
sub edi, 0xb079bbd9
inc ebx
ror edi, 0x15
call fcn.004733cc
sub ebx, esp
not dword [ebx]
sub ecx, dword [0x4bac42]
and dword [0x4baab6], edx
ror eax, 0xd
sub ecx, eax
add dword [0x4baadc], eax
not ecx
call fcn.0047c2f6
not esi
mov dword [0x4bab8f], edi
add edi, dword [0x4bacbd]
xor ecx, 0xff6f97d3
call fcn.0041eb70
not ebx
or eax, dword [0x4baf5d]
not ebx
call fcn.00421a6b
xor ecx, 0xff6f97d3
or dword [0x4ba8e6], ebx
not esi
not ecx
xor dword [0x4ba8a6], edx
add ecx, eax
rol eax, 0xd
xor dword [0x4ba95c], eax
add ebx, 4
ror edi, 0x13
or edi, dword [0x4bae14]
sub dword [0x4babb7], ecx
sub esi, 0x5a19d149
ror eax, 0xb
call fcn.00486645
sub edi, esp
call fcn.0041d12d
ror esi, 0x1f
neg edi
xor esi, 0xdae80506
call fcn.004733cc
xchg ecx, eax
xor ebx, dword [0x4bae28]
dec edi
add dword [0x4ba89b], ebx
inc edi
xchg ecx, eax
call fcn.004195b2
xor esi, 0xdae80506
neg edi
rol esi, 0x1f
add edi, esp
call fcn.004733cc
rol eax, 0xb
add esi, 0x5a19d149
rol edi, 0x13
sub ecx, 4
jne 0x428259
mov esp, esi
cwde
mov al, byte [0x3cf3e822]
inc byte [edi]
or edx, dword [esi - 0x39ffa575]
push ebx
hlt