Function at 0x423c40
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4c9358
mov eax, dword fs:[0]
push eax
sub esp, 0x34
push ebx
push esi
push edi
mov eax, dword [0x524ee0]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
call fcn.004246f0
test al, al
jne 0x423d03
mov edx, dword [0x526340]
xor esi, esi
nop
mov ecx, esi
and ecx, 1
dec ecx
not ecx
and ecx, edx
mov eax, esi
sar eax, 1
xor ecx, eax
mov eax, ecx
and eax, 1
dec eax
not eax
and eax, edx
sar ecx, 1
xor eax, ecx
mov ecx, eax
and ecx, 1
dec ecx
sar eax, 1
not ecx
and ecx, edx
xor ecx, eax
mov eax, ecx
and eax, 1
dec eax
not eax
and eax, edx
sar ecx, 1
xor eax, ecx
mov ecx, eax
and ecx, 1
dec ecx
sar eax, 1
not ecx
and ecx, edx
xor ecx, eax
mov eax, ecx
and eax, 1
dec eax
not eax
and eax, edx
sar ecx, 1
xor eax, ecx
mov ecx, eax
and ecx, 1
dec ecx
sar eax, 1
not ecx
and ecx, edx
xor ecx, eax
mov eax, ecx
and eax, 1
dec eax
not eax
and eax, edx
sar ecx, 1
xor eax, ecx
inc esi
add edx, eax
cmp esi, 0x100
jl 0x423c80
mov dword [0x526340], edx
mov dword [ebp - 0x18], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x14], 0
mov eax, dword [0x524ab0]
mov ecx, 0x524ab0
mov byte [ebp - 4], 2
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x10], eax
mov esi, dword [0x526340]
mov ecx, 0x18
lea eax, [esi + 1]
imul eax, esi
cdq
idiv ecx
mov byte [ebp - 4], 3
cmp edx, 0x15
jne 0x423dbe
test esi, esi
je 0x423dbe
jmp 0x423d60
mov ecx, esi
and ecx, 0x80000001
jns 0x423d6f
dec ecx
or ecx, 0xfffffffe
inc ecx
jne 0x423d7c
mov eax, esi
cdq
sub eax, edx
mov esi, eax
sar esi, 1
jmp 0x423d83
lea esi, [esi*2 + 1]
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ecx, esi
lea eax, [eax + eax*2]
sub ecx, eax
mov dword [0x526340], esi
sub ecx, 0
je 0x423dad
sub ecx, 2
je 0x423db0
dec ecx
je 0x423db1
jmp 0x423dba
add esi, 2
inc esi
add esi, 2
mov dword [0x526340], esi
test esi, esi
jne 0x423d60
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x18]
push eax
push dword [ebp + 8]
mov ecx, edi
call fcn.00423070
mov ecx, dword [0x526340]
mov bl, al
lea eax, [ecx + 1]
imul eax, ecx
cdq
mov ecx, 0x17
idiv ecx
cmp edx, 0xd
jne 0x423e09
call dword [sym.imp.KERNEL32.dll_GetTickCount]
xor edx, edx
mov ecx, 0x50
div ecx
inc edx
mov dword [0x526340], edx
test bl, bl
jne 0x423ef1
push 0x4e1944
push 0x4e1948
lea ecx, [ebp - 0x10]
call fcn.004231e0
mov eax, dword [0x524ab0]
mov ecx, 0x524ab0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp + 8], eax
mov eax, str.addJsErrorHandle_QueryInterfacesForSandBox_
mov byte [ebp - 4], 4
test eax, 0xffff0000
jne 0x423e64
movzx esi, ax
push 0
push esi
call fcn.00403b10
add esp, 8
test eax, eax
je 0x423e71
push esi
push eax
lea ecx, [ebp + 8]
call fcn.004074c0
jmp 0x423e71
push str.addJsErrorHandle_QueryInterfacesForSandBox_
lea ecx, [ebp + 8]
call fcn.0040b3b0
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 0x1c]
push eax
mov byte [ebp - 4], 5
call fcn.0040b600
add esp, 0xc
mov edx, dword [edi]
push eax
mov ecx, edi
mov byte [ebp - 4], 6
call dword [edx + 0x50]
mov edx, dword [ebp - 0x1c]
add edx, 0xfffffff0
or esi, 0xffffffff
mov byte [ebp - 4], 5
lea ecx, [edx + 0xc]
mov eax, esi
lock xadd dword [ecx], eax
dec eax
test eax, eax
jg 0x423eb8
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp + 8]
add edx, 0xfffffff0
mov byte [ebp - 4], 3
lea eax, [edx + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x423ed8
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x10]
add edx, 0xfffffff0
mov byte [ebp - 4], 2
lea eax, [edx + 0xc]
lock xadd dword [eax], esi
dec esi
test esi, esi
jmp 0x42400e
mov ecx, dword [edi + 0x68]
mov esi, dword [ebp - 0x18]
test ecx, ecx
jne 0x423f04
test esi, esi
je 0x423f60
jmp 0x423ff7
test esi, esi
je 0x423ff7
lea edx, [ebp + 8]
push edx
mov dword [ebp + 8], 0
mov dword [ebp - 0x1c], 0
mov eax, dword [ecx]
push 0x4df3c0
push ecx
call dword [eax]
mov eax, dword [esi]
lea ecx, [ebp - 0x1c]
push ecx
push 0x4df3c0
push esi
call dword [eax]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp + 8]
cmp eax, ecx
sete bl
test ecx, ecx
je 0x423f4e
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov eax, dword [ebp + 8]
test eax, eax
je 0x423f58
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
test bl, bl
je 0x423ff7
cmp dword [edi + 0x70], 0
je 0x423ff7
mov eax, dword [ebp - 0x14]
lea edx, [ebp - 0x40]
mov esi, 9
mov word [ebp - 0x40], si
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0xbc]
cmp word [ebp - 0x40], 1
jne 0x423fc6
mov eax, dword [edi + 0x70]
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x14]
mov word [ebp - 0x30], si
movq xmm0, qword [ebp - 0x30]
mov edx, dword [eax]
movq qword [ecx], xmm0
movq xmm0, qword [ebp - 0x28]
push eax
movq qword [ecx + 8], xmm0
call dword [edx + 0xb8]
mov eax, dword [edi + 0x68]
push 0xffffffffffffffff
mov ecx, dword [eax]
push eax
call dword [ecx + 0xf0]
mov eax, dword [0x526340]
mov ecx, eax
imul ecx, eax
imul ecx, eax
and ecx, 0x8000000f
jns 0x423fe0
dec ecx
or ecx, 0xfffffff0
inc ecx
cmp ecx, 0xc
jne 0x423ff7
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_PeekNamedPipe]
mov edx, dword [ebp - 0x10]
add edx, 0xfffffff0
or ecx, 0xffffffff
lea eax, [edx + 0xc]
mov byte [ebp - 4], 2
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x424018
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00424920
test al, al
jne 0x42407f
mov edi, dword [0x526340]
mov eax, edi
cdq
sub eax, edx
xor ecx, ecx
mov ebx, eax
sar ebx, 1
mov esi, 0x8c
mov dword [ebp + 8], ecx
mov dword [ebp - 0x1c], ebx
lea ecx, [ecx]
test ebx, ebx
jle 0x424077
mov eax, edi
cdq
and edx, 3
lea edi, [edx + eax]
sar edi, 2
xor edx, edx
test edi, edi
jle 0x424069
mov eax, edx
mov ecx, edi
lea ebx, [ebx]
add esi, eax
dec eax
dec ecx
jne 0x424060
mov ecx, dword [ebp + 8]
add edx, ecx
dec ebx
jne 0x424052
mov ebx, dword [ebp - 0x1c]
mov edi, dword [0x526340]
inc ecx
mov dword [ebp + 8], ecx
cmp ecx, esi
jl 0x424040
mov eax, dword [ebp - 0x14]
mov byte [ebp - 4], 1
test eax, eax
je 0x424090
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x20]
mov byte [ebp - 4], 0
test eax, eax
je 0x4240a1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 4], 0xffffffff
test eax, eax
je 0x4240b5
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4