Function at 0x417910
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x410
mov esi, esp
mov eax, dword [ebp + 0x14]
mov eax, dword [ebp + 0x10]
mov eax, dword [ebp + 0xc]
mov eax, dword [ebp + 8]
mov dword [esi + 0x35c], 0x43ced0
mov dword [esi + 0x358], 0xd
mov byte [esi + 6], 0
mov al, byte [esi + 0xcc]
mov byte [esi + 0xd0], al
mov byte [esi + 0x150], 0xeb
mov byte [esi + 0x151], 0x85
mov byte [esi + 0x152], 0xef
mov byte [esi + 0x153], 0x8b
mov byte [esi + 0x154], 0x15
mov byte [esi + 0x155], 0x89
mov byte [esi + 0x156], 0xdc
mov byte [esi + 0x157], 0x8f
mov byte [esi + 0x158], 0xdc
mov byte [esi + 0x159], 0x8d
mov byte [esi + 0x15a], 0xe8
mov byte [esi + 0x15b], 0xb3
mov byte [esi + 0x15c], 0xd4
mov byte [esi + 0x15d], 0xb1
mov byte [esi + 0x15e], 0xb0
mov byte [esi + 0x15f], 0xb7
mov dword [esi + 0x164], 0
mov dword [esi + 0x160], 0
mov dword [esi + 0x14], 0
mov eax, dword [esi + 0x14]
cmp eax, 0x18
jae 0x417a43
jmp 0x4179e6
mov eax, dword [esi + 0x14]
mov ecx, dword [esi + 0x14]
movzx edx, byte [esi + ecx + 0x150]
mov edi, eax
add edi, 0x9fdaa95
lea ecx, [eax + edx + 0x9fdaa95]
add eax, 0x95
and eax, edx
and edi, edx
add eax, edi
mov edx, eax
xor edx, ecx
not eax
and ecx, eax
add ecx, ecx
sub ecx, edx
mov dword [esi + 0x360], ecx
mov eax, dword [esi + 0x360]
add al, 0xed
mov ecx, dword [esi + 0x14]
mov byte [esi + ecx + 0x150], al
mov eax, dword [esi + 0x14]
inc eax
mov dword [esi + 0x14], eax
mov eax, dword [esi + 0x14]
cmp eax, 0x18
jb 0x4179e6
jmp 0x417a43
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp + 8]
sub esp, 0xc
lea edx, [esi + 0x150]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.00414b60
add esp, 0xc
mov cl, byte [esi + 6]
or cl, al
mov byte [esi + 6], cl
mov al, byte [esi + 0xc8]
mov byte [esi + 0xd4], al
mov byte [esi + 0x1c0], 0x93
mov byte [esi + 0x1c1], 0x31
mov byte [esi + 0x1c2], 0x97
mov byte [esi + 0x1c3], 0x33
mov byte [esi + 0x1c4], 0x86
mov byte [esi + 0x1c5], 0x35
mov byte [esi + 0x1c6], 0x82
mov byte [esi + 0x1c7], 0x37
mov byte [esi + 0x1c8], 0xc1
mov byte [esi + 0x1c9], 9
mov byte [esi + 0x1ca], 0xf4
mov byte [esi + 0x1cb], 0xb
mov byte [esi + 0x1cc], 0xa8
mov byte [esi + 0x1cd], 0xd
mov byte [esi + 0x1ce], 0xac
mov byte [esi + 0x1cf], 0xf
mov byte [esi + 0x1d0], 0
mov byte [esi + 0x1d1], 1
mov dword [esi + 0x1d5], 0
mov dword [esi + 0x1d2], 0
mov dword [esi + 0x18], 0
mov eax, dword [esi + 0x18]
cmp eax, 0x19
jae 0x417b66
jmp 0x417b1c
mov eax, dword [esi + 0x18]
mov ecx, dword [esi + 0x18]
movzx ecx, byte [esi + ecx + 0x1c0]
mov edx, eax
add edx, 0x802b7cd8
add eax, 0xd8
and eax, ecx
or edx, ecx
sub edx, eax
mov dword [esi + 0x364], edx
mov eax, dword [esi + 0x364]
add al, 0x18
mov ecx, dword [esi + 0x18]
mov byte [esi + ecx + 0x1c0], al
mov eax, dword [esi + 0x18]
inc eax
mov dword [esi + 0x18], eax
mov eax, dword [esi + 0x18]
cmp eax, 0x19
jb 0x417b1c
jmp 0x417b66
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp + 8]
sub esp, 0xc
lea edx, [esi + 0x1c0]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.00414b60
add esp, 0xc
movzx edx, al
movzx ecx, byte [esi + 6]
mov eax, ecx
not eax
mov edi, edx
not edi
and eax, edi
or ecx, edx
not ecx
or eax, ecx
not al
mov byte [esi + 6], al
mov al, byte [esi + 0xc4]
mov byte [esi + 0xd8], al
mov byte [esi + 0x120], pe_nt_image_headers32
mov byte [esi + 0x121], 0xd1
mov byte [esi + 0x122], 0x41
mov byte [esi + 0x123], 0xd3
mov byte [esi + 0x124], 0x40
mov byte [esi + 0x125], 0xdd
mov byte [esi + 0x126], 0x4b
mov byte [esi + 0x127], 0xdf
mov byte [esi + 0x128], 0x76
mov byte [esi + 0x129], 0xd9
mov byte [esi + 0x12a], 0x73
mov byte [esi + 0x12b], 0xdb
mov byte [esi + 0x12c], 0x47
mov byte [esi + 0x12d], 0xc5
mov byte [esi + 0x12e], 0x58
mov byte [esi + 0x12f], 0xc7
mov byte [esi + 0x130], 0x57
mov byte [esi + 0x131], 0xc1
mov byte [esi + 0x132], 0x52
mov byte [esi + 0x133], 0xc3
mov byte [esi + 0x134], 0x59
mov byte [esi + 0x135], 0xcd
mov byte [esi + 0x136], 0x1a
mov byte [esi + 0x137], 0xcf
mov byte [esi + 0x138], 0x53
mov byte [esi + 0x139], 0xc9
mov byte [esi + 0x13a], 0x5b
mov byte [esi + 0x13b], 0xcb
mov byte [esi + 0x13c], 0x5e
mov byte [esi + 0x13d], 0xb5
mov byte [esi + 0x13e], 0x1f
mov byte [esi + 0x13f], 0xb7
mov byte [esi + 0x140], 0x2a
mov byte [esi + 0x141], 0xb1
mov byte [esi + 0x142], 0x1f
mov byte [esi + 0x143], 0xb3
mov byte [esi + 0x144], 0xb2
mov byte [esi + 0x145], 0xbd
mov byte [esi + 0x14a], 0
mov dword [esi + 0x146], 0
mov dword [esi + 0x1c], 0
mov eax, dword [esi + 0x1c]
cmp eax, 0x2b
jae 0x417d3e
jmp 0x417cdc
mov eax, dword [esi + 0x1c]
mov ecx, dword [esi + 0x1c]
movzx edx, byte [esi + ecx + 0x120]
mov ecx, eax
add ecx, 0x846b9423
lea eax, [eax + edx - 0x7b946bdd]
and ecx, edx
add ecx, ecx
mov edx, eax
not edx
mov edi, ecx
and edi, edx
not ecx
and eax, ecx
sub eax, edi
mov dword [esi + 0x368], eax
mov eax, dword [esi + 0x368]
add al, 0xb
mov ecx, dword [esi + 0x1c]
mov byte [esi + ecx + 0x120], al
mov eax, dword [esi + 0x1c]
mov ecx, eax
and ecx, 1
xor eax, 1
lea eax, [eax + ecx*2]
mov dword [esi + 0x1c], eax
mov eax, dword [esi + 0x1c]
cmp eax, 0x2b
jb 0x417cdc
jmp 0x417d3e
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp + 8]
sub esp, 0xc
lea edx, [esi + 0x120]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.00414b60
add esp, 0xc
movzx eax, al
mov dword [esi + 0x1b0], eax
mov eax, dword [esi + 0x358]
mov ecx, dword [esi + 0x35c]
mov eax, dword [ecx + eax*4]
push eax
mov ebx, esp
mov dword [ebx], 0x43d03c
push eax
mov dword [esi + 0x1f4], esp
push eax
mov ecx, esp
mov dword [esi + 0x204], ecx
mov dword [ecx], 0x43d044
push eax
mov dword [esi + 0x200], esp
push eax
mov ecx, esp
mov dword [esi + 0x1fc], ecx
mov dword [ecx], 0x43ced0
push eax
mov ecx, esp
mov dword [esi + 0x1f8], ecx
mov dword [ecx], 0x10
push eax
mov ecx, esp
mov dword [esi + 0x214], ecx
mov dword [ecx], 0x43d04c
push eax
mov dword [esi + 0x20c], esp
push eax
mov ecx, esp
mov dword [esi + 0x210], ecx
mov dword [ecx], 0x43ced0
push eax
mov ecx, esp
mov dword [esi + 0x208], ecx
mov dword [ecx], 0x39
push eax
mov ecx, esp
mov dword [esi + 0x230], ecx
mov dword [ecx], 0x43d054
push eax
mov dword [esi + 0x224], esp
push eax
mov ecx, esp
mov dword [esi + 0x228], ecx
mov dword [ecx], 0x43ced0
push eax
mov ecx, esp
mov dword [esi + 0x218], ecx
mov dword [ecx], 0x14
push eax
mov ecx, esp
mov dword [esi + 0x234], ecx
mov dword [ecx], 0x43ced0
push eax
mov ecx, esp
mov dword [esi + 0x220], ecx
mov dword [ecx], 0x15
push eax
mov ecx, esp
mov dword [esi + 0x22c], ecx
mov dword [ecx], 0x43d05c
push eax
mov dword [esi + 0x21c], esp
push eax
mov ecx, esp
mov dword [esi + 0x23c], ecx
mov dword [ecx], 0x43d064
push eax
mov dword [esi + 0x238], esp
push eax
mov ecx, esp
mov dword [esi + 0x25c], ecx
mov dword [ecx], 0x43d06c
push eax
mov dword [esi + 0x254], esp
push eax
mov ecx, esp
mov dword [esi + 0x258], ecx
mov dword [ecx], 0x43ced0
push eax
mov ecx, esp
mov dword [esi + 0x250], ecx
mov dword [ecx], 0x19
push eax
mov ecx, esp
mov dword [esi + 0x354], ecx
mov dword [ecx], 0x43ced0
push eax
mov ecx, esp
mov dword [esi + 0x350], ecx
mov dword [ecx], 0x1a
push eax
mov ecx, esp
mov dword [esi + 0x34c], ecx
mov dword [ecx], 0x43ced0
push eax
mov ecx, esp
mov dword [esi + 0x348], ecx
mov dword [ecx], 0x1b
push eax
mov ecx, esp
mov dword [esi + 0x344], ecx
mov dword [ecx], 0x43d074
push eax
mov dword [esi + 0x340], esp
push eax
mov ecx, esp
mov dword [esi + 0x33c], ecx
mov dword [ecx], 0x43ced0
push eax
mov ecx, esp
mov dword [esi + 0x338], ecx
mov dword [ecx], 0x2b
push eax
mov ecx, esp
mov dword [esi + 0x334], ecx
mov dword [ecx], 0x43d07c
push eax
mov dword [esi + 0x330], esp
push eax
mov ecx, esp
mov dword [esi + 0x32c], ecx
mov dword [ecx], 0x43ced0
push eax
mov ecx, esp
mov dword [esi + 0x328], ecx
mov dword [ecx], 0x1f
push eax
mov ecx, esp
mov dword [esi + 0x324], ecx
mov dword [ecx], 0x43ced0
push eax
mov ecx, esp
mov dword [esi + 0x320], ecx
mov dword [ecx], 0x25
push eax
mov ecx, esp
mov dword [esi + 0x31c], ecx
mov dword [ecx], 0x43d084
push eax
mov dword [esi + 0x318], esp
push eax
mov ecx, esp
mov dword [esi + 0x314], ecx
mov dword [ecx], 0x43d08c
push eax
mov dword [esi + 0x310], esp
push eax
mov ecx, esp
mov dword [esi + 0x30c], ecx
mov dword [ecx], 0x43d094
push eax
mov dword [esi + 0x308], esp
push eax
mov ecx, esp
mov dword [esi + 0x304], ecx
mov dword [ecx], 0x43ced0
push eax
mov ecx, esp
mov dword [esi + 0x300], ecx
mov dword [ecx], 0x24
push eax
mov ecx, esp
mov dword [esi + 0x2fc], ecx
mov dword [ecx], 0x43ced0
push eax
mov ecx, esp
mov dword [esi + 0x2f8], ecx
mov dword [ecx], 0x25
push eax
mov ecx, esp
mov dword [esi + 0x2f4], ecx
mov dword [ecx], 0x43ced0
push eax
mov ecx, esp
mov dword [esi + 0x2ec], ecx
mov dword [ecx], 0x26
push eax
mov ecx, esp
mov dword [esi + 0x2d4], ecx
mov dword [ecx], 0x43d09c
push eax
mov dword [esi + 0x2bc], esp
push eax
mov ecx, esp
mov dword [esi + 0x2b8], ecx
mov dword [ecx], 0x43ced0
push eax
mov ecx, esp
mov dword [esi + 0x2b0], ecx
mov dword [ecx], 0x28
push eax
mov ecx, esp
mov dword [esi + 0x2ac], ecx
mov dword [ecx], 0x43ced0
push eax
mov ecx, esp
mov dword [esi + 0x2a8], ecx
mov dword [ecx], 0x29
push eax
mov ecx, esp
mov dword [esi + 0x2a4], ecx
mov dword [ecx], 0x43ced0
push eax
mov ecx, esp
mov dword [esi + 0x2a0], ecx
mov dword [ecx], 0x2a
push eax
mov ecx, esp
mov dword [esi + 0x29c], ecx
mov dword [ecx], 0x43ced0
push eax
mov ecx, esp
mov dword [esi + 0x294], ecx
mov dword [ecx], 0x19
push eax
mov ecx, esp
mov dword [esi + 0x298], ecx
mov dword [ecx], 0x43ced0
push eax
mov ecx, esp
mov dword [esi + 0x290], ecx
mov dword [ecx], 0x2c
push eax
mov ecx, esp
mov dword [esi + 0x28c], ecx
mov dword [ecx], 0x43ced0
push eax
mov ecx, esp
mov dword [esi + 0x27c], ecx
mov dword [ecx], 0x2d
push eax
mov ecx, esp
mov dword [esi + 0x288], ecx
mov dword [ecx], 0x43d0a4
push eax
mov dword [esi + 0x280], esp
push eax
mov ecx, esp
mov dword [esi + 0x284], ecx
mov dword [ecx], 0x43ced0
push eax
mov ecx, esp
mov dword [esi + 0x278], ecx
mov dword [ecx], 0x2f
push eax
mov ecx, esp
mov dword [esi + 0x274], ecx
mov dword [ecx], 0x43ced0
push eax
mov ecx, esp
mov dword [esi + 0x268], ecx
mov dword [ecx], 0x30
push eax
mov ecx, esp
mov dword [esi + 0x270], ecx
mov dword [ecx], 0x43d0ac
push eax
mov dword [esi + 0x264], esp
push eax
mov ecx, esp
mov dword [esi + 0x1b4], ecx
mov dword [ecx], 0x43d0b4
push eax
mov dword [esi + 0x9c], esp
push eax
mov ecx, esp
mov dword [esi + 0x26c], ecx
mov dword [ecx], 0x43ced0
push eax
mov ecx, esp
mov dword [esi + 0x260], ecx
mov dword [ecx], 0x33
push eax
mov ecx, esp
mov dword [esi + 0x2f0], ecx
mov dword [ecx], 0x43ced0
push eax
mov ecx, esp
mov dword [esi + 0x2e8], ecx
mov dword [ecx], 0x34
push eax
mov ecx, esp
mov dword [esi + 0x2e4], ecx
mov dword [ecx], 0x43ced0
push eax
mov ecx, esp
mov dword [esi + 0x2cc], ecx
mov dword [ecx], 0x35
push eax
mov ecx, esp
mov dword [esi + 0x2e0], ecx
mov dword [ecx], 0x43d0bc
push eax
mov dword [esi + 0x2d0], esp
push eax
mov ecx, esp
mov dword [esi + 0x2dc], ecx
mov dword [ecx], 0x43ced0
push eax
mov ecx, esp
mov dword [esi + 0x2c8], ecx
mov dword [ecx], 0x37
push eax
mov ecx, esp
mov dword [esi + 0x2c4], ecx
mov dword [ecx], 0x43ced0
push eax
mov ecx, esp
mov dword [esi + 0x2b4], ecx
mov dword [ecx], 0x38
push eax
mov ecx, esp
mov dword [esi + 0x2d8], ecx
mov dword [ecx], 0x43ced0
push eax
mov ecx, esp
mov dword [esi + 0x2c0], ecx
mov dword [ecx], 0x39
push eax
mov ecx, esp
mov dword [esi + 0x1f0], ecx
mov dword [ecx], 0x43ced0
push eax
mov edi, esp
mov dword [edi], 0xe
push eax
mov ecx, esp
mov dword [esi + 0x244], ecx
mov dword [ecx], 0x43ced0
push eax
mov ecx, esp
mov dword [esi + 0x240], ecx
mov dword [ecx], 0x22
push eax
mov ecx, esp
mov dword [esi + 0x24c], ecx
mov dword [ecx], 0x43ced0
push eax
mov ecx, esp
mov dword [esi + 0x248], ecx
mov dword [ecx], 0x31
jmp eax