Function at 0x1f05b20
Capabilities:
Encode data using xor

Disassembly:
jmp 0x1f06e32
mov edi, dword [esp]
jmp 0x1f07510
call fcn.01f0774e
jle 0x1e8ea3e
call 0x896c69d7
mov al, 0xdd
inc ebp
in al, 0xb1
push ebx
retf 0x9465
push esp
jmp 0x1f077dd
mov eax, dword [esp + 0x10]
xchg cl, ch
lea ecx, [eax*4]
jmp 0x1f0833b
jmp 0x1f075fe
fidivr dword [ebp + 0x7071f94c]
jae 0x1e8eab0
test dword [edi], edx
fdivp st(1)
fdivr dword [ebx]
adc ah, byte [esi + 0x57]
push di
jmp 0x1f08316
clc
jmp 0x1f07651
clc
jmp 0x1f07b30
push ebx
jmp 0x1f076dc
imul ecx, dword [edi + 0x62], 0x7d
push ecx
test al, 0x6a
movsb byte es:[edi], byte [esi]
and al, 0x7a
push ebp
les esi, [edi - 0x75]
invalid
mov eax, dword [ebp - 8]
sub esp, 5
lea esp, [esp + 1]
jmp 0x1f07000
jmp 0x1f07477
call fcn.01f0740b
movsb byte es:[edi], byte [esi]
xor dword [ecx - reloc.KERNEL32.dll_HeapDestroy], esp
xor ah, byte [eax - 0x4c0fcd39]
stosb byte es:[edi], al
lds esi, [edi - 0x1f]
and dword [esi - reloc.KERNEL32.dll_HeapDestroy], edx
invalid
jmp 0x1f07154
mov eax, dword [ebp - 4]
mov esi, dword [eax + 0x10]
call 0x1f05b20
and cl, byte [ebp - 0x16dbdb9c]
dec esi
push ss
add byte [eax], al
sub cl, byte [ebx - 0x23]
dec ebp
adc al, 0xe7
daa
lodsb al, byte [esi]
mov edi, 0x33303186
fld xword [edi - 0x46]
push 0x8131e41d
call fcn.01e99ce2
mov esi, dword [ebp - 0xc]
jmp 0x1f05ae3
bsf bx, dx
mov ebx, 0x4673a3fa
sub esp, 0x12
lea esp, [esp + 2]
jmp 0x1f05d9d
test edx, edx
pushfd
push ax
jmp 0x1f074bc
mov ebx, dword [edx]
sub esp, 0x1c
lea esp, [esp + 0x2c]
test ebx, ebx
jmp 0x1f079fd
lea esp, [esp + 8]
cmp dword [ebp + 0xc], 0
jmp 0x1f06de1
je 0x1e8e9ce
cmc
push si
push ecx
push ebp
lea esp, [esp + 2]
jmp 0x1f06dba
je 0x1f05acd
jne 0x1e8e99e
pop edi
pushfd
lea esp, [esp + 4]
test ebx, ebx
jmp 0x1f06dd0
push edi
mov edi, edx
lea edi, [edi + 0x10]
mov ebx, dword [edi]
jmp 0x1f06e05
pushfd
pushfd
lea esp, [esp + 8]
jb 0x1e8e99e
jae 0x1e8e9b8
lea esp, [esp + 2]
jmp 0x1f06eec
lea esp, [esp + 0x18]
test eax, eax
jne 0x1f05ab7
btc cx, di
call 0x1f06ed6
add ebx, 0xfffffffc
mov ecx, dword [ebx]
pop ebx
pushal
jmp 0x1f06f22
mov ecx, dword [ecx + 0xc]
mov ah, bh
mov eax, dword [0x1e97b58]
call fcn.01f072d1
sbb dword [eax - 0x4f], edi
sub byte [esi - 0x3a15d727], bh
je 0x1f06fa3
mov es, word [eax]
add byte [eax], al
add byte [eax], al
add byte [eax], al
lea esp, [esp + 4]
jb 0x1e8e9b8
pushfd
lea esp, [esp + 4]
cmp ebx, dword [eax + 0x50]
jmp 0x1f06ea2
and al, 4
push 0
add ecx, esi
call 0x1f06f69
dec ebx
lea esp, [esp + 4]
jmp 0x1f06f9a
mov dword [ebp - 8], eax
jmp 0x1f06fdd
inc ebx
cli
aad 0xc1
push ebx
ret
push ecx
call eax
push esi
clc
mov byte [esp + 2], bl
jmp 0x1f06f84
je 0x1f05ae3
jne 0x1f05ab7
cld
insb byte es:[edi], dx
loop 0x1f06f5c
je 0x1f06f8a
stc
fdivr dword [ebx]
adc cl, byte [ebp - 0x7afbdb9c]
rcl byte [edx - 0x73], 0x64
and al, 4
lea esp, [esp + 4]
test eax, eax
push edx
lea esp, [esp + 4]
jmp 0x1f06fc7
mov byte [ebp - 0x16], 0x3c
call fcn.01f07025
sub dh, byte [edx + 0x76b24720]
sub byte [edi + 0x7db14227], dh
sub cl, byte [ebp + 0x3b042464]
inc ebp
or byte [edi], cl
test dword [edx], eax
jmp 0x1f0700b
lea esp, [esp + 4]
cmp eax, dword [ebp + 8]
jne 0x1f05b0f
invalid
jmp 0x1f06fea
pushal
jmp 0x1f05b14
add edx, 0x14
jmp 0x1f07499
mov dword [ebp - 4], edx
jmp 0x1f05bb3
lea esp, [esp + 2]
lea esp, [esp + 4]
jne 0x1f05b9d
je 0x1e8e9ce
aad 0x44
neg esi
sub dword [eax], ecx
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
pushfd
pop word [esp]
call fcn.01f07570
jmp 0x1f075cf
push esi
mov esi, 0x1e97a98
mov dword [esi], eax
pop esi
jmp 0x1e8ea37
lea esp, [esp + 8]
call dword [fcn.01e97b44]
jmp 0x1f075b9
sub esp, 0x16
add esp, 0xf
lea esp, [esp + 3]
lea esp, [esp + 4]
push 8
jmp 0x1f07586
mov dword [esp + 0x10], edi
cmp dword [eax], edi
jbe 0x1e8ea05
ja 0x1e8ea63
arpl cx, sp
jno 0x1f07624
jecxz 0x1f0763a
mov al, byte [0x751ae3]
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
lea esp, [esp + 4]
and al, 4
push 0x4c0
jmp 0x1f075ec
jne 0x1e8e9ee
lea esi, [esp - 0x8e]
mov si, bp
jmp 0x1f07686
jmp dword [esi - 0x75]
sub esp, 0x15
pop word [esp + 0xa]
lea esp, [esp + 3]
lea esp, [esp + 0x10]
cmp ebx, dword [eax + edi + 4]
jmp 0x1f0762e
cmp dword [eax + edi + 8], esi
jbe 0x1e8e9ee
call 0x1f07695
xchg dword [ebx - 0x2e], ebx
inc eax
daa
shl byte [edi - 0x2d], cl
dec edx
in eax, 0x14
add byte [eax], al
add byte [eax], al
add byte [ebx], dh
test byte [ebx + 0x648d17ec], 0x24
add ecx, dword [ebp - reloc.KERNEL32.dll_HeapDestroy]
shl byte [esi - 0x71], cl
add al, 0x24
lea esp, [esp + 2]
jmp 0x1f07771
xor esi, esi
sub esp, 0x17
lea esp, [esp + 3]
lea esp, [esp + 0x14]
jmp 0x1f07667
lea esp, [esp + 1]
lea esp, [esp + 8]
cmp ebx, dword [eax + 0x54]
push edx
jmp 0x1f06f44
mov ecx, dword [ebx]
pop ebx
bts ax, sp
neg al
jmp 0x1f076fc
mov ebx, edi
lea ebx, [eax + ebx]
add ebx, 0xc
jmp 0x1f076c6
lea esp, [esp + 4]
jmp 0x1f0771c
add ecx, dword [esp + 0x14]
mov eax, dword [ebp + 0xc]
push ecx
jmp 0x1f076e6
push ebp
mov ebp, 0x1e97a98
mov eax, dword [ebp]
pop ebp
jmp 0x1f07742
call fcn.01ea649d
stc
test eax, eax
je 0x1e8ea1b
jne 0x1f07706
jb 0x1e8eaa7
jae 0x1e8e9ee
cmpsd dword [esi], dword es:[edi]
das
mov edi, 0xc2f229da
jge 0x1f0778d
fild word [ebx + 0x14142444]
add dword [esp + 0x14], 0x14
inc esi
cmp esi, dword [eax + edi + 8]
jmp 0x1f0772c
and dword [esp + 0x14], esi
jmp 0x1e8eaa7
push dword [esp + 7]
lea esp, [esp + 1]
jmp 0x1f07855
mov dh, 0xed
cld
lea esp, [esp + 1]
lea esp, [esp + 8]
add edi, 0xc
sub esp, 0x17
push word [esp + 4]
jmp 0x1f0777a
mov ecx, dword [eax + 0x7c]
jmp 0x1f07829
lea edi, [ebx + 0xa0]
mov ecx, dword [esp]
mov di, 0xe625
jmp 0x1f077a5
mov ecx, ebx
lea esp, [esp + 4]
call fcn.01ea64a2
lea edi, reloc.KERNEL32.dll_HeapDestroy
jmp 0x1f077bb
lea esp, [esp + 8]
mov dword [esp + 0x2c], ecx
jmp 0x1f07836
pushfd
push word [esp + 1]
lea esp, [esp + 2]
add edi, ebx
push edx
jmp 0x1f077f0
mov edi, dword [eax + 0x78]
bswap esi
btr si, di
xor esi, esi
jmp 0x1f07806
cmp ecx, esi
je 0x1e8eeae
cmp edi, ebx
jmp 0x1f0787d
lea esp, [esp + 0x1c]
cmp ecx, dword [eax]
jb 0x1e8ea63
jae 0x1e8ea05
lea esp, [esp + 1]
jmp 0x1f07918
push cx
lea esp, [esp + 1]
call 0x1f07867
popfd
xor eax, 0xc43552bc
jno 0x1f07899
test al, 0xcb
bound eax, qword [eax]
add byte [eax], al
add byte [eax], al
add byte [eax], al
add bh, dh
ror dword [ebp + reloc.KERNEL32.dll_HeapDestroy], 1
test dword [ebp + reloc.KERNEL32.dll_HeapDestroy], ecx
and al, 0x10
add byte [eax], al
not ecx
lea ecx, reloc.KERNEL32.dll_HeapDestroy
lea ecx, [ecx + edi]
mov ecx, dword [esp + 0x10]
sub esp, 9
jmp 0x1f07790
lea esp, [esp + 4]
jbe 0x1e8eeae
mov eax, ebx
mov eax, dword [0x1e97b58]
call fcn.01f078e5
bsr ax, bx
mov ch, byte [esp]
setns dl
mov dx, bp
jmp 0x1f0794f
mov eax, dword [0x1e97a98]
mov ecx, dword [eax]
mov edx, dword [edi + 0x18]
jmp 0x1f0795f
imul ecx, ecx, 0xc
sub esp, 0x1e
sub esp, 9
sub esp, 0x1e
lea esp, [esp + 1]
jmp 0x1f079c7
lea esp, [esp + 0x14]
push 8
jmp 0x1f079a5
imul eax, eax, 0x14
sub esp, 0x1b
lea esp, [esp + 3]
mov dword [esp + 0x14], eax
jmp 0x1f0797f
push dword [0x1e97b30]
call dword [fcn.01e97b44]
not ch
xchg ch, dh
jmp 0x1f079d4
mov dword [eax + ecx + 8], edx
mov eax, dword [edi + 0x18]
lea esp, [esp + 0x44]
jmp 0x1f07995
mov ecx, dword [0x1e97a98]
mov edx, dword [ecx]
call 0x1f079e2
push 0xe9241c89
sbb eax, dword [ecx]
add byte [eax], al
mov ch, 0x2e
mov esp, 0xa58336db
inc ebx
sal dword [esi + reloc.KERNEL32.dll_HeapDestroy], cl
xor byte [ebx], dh
sub al, byte [eax]
add byte [edi], cl
test byte [ebp - 0x7c000791], dh
in al, dx
or esp, dword [esi - 0x77]
jl 0x1f07a2e
je 0x1e8e9b8
sub esp, 0xb
mov word [esp + 3], di
pop word [esp + 6]
add esp, dword [esi - 0x71]
inc esp
and al, 6
clc
jmp 0x1f076b5
lea esp, [esp + 0x18]
cmp dword [edi + 0x18], esi
jmp 0x1f07aa1
push esp
and al, 1
lea esp, [esp + 4]
mov dword [esp + 0x14], esi
sub esp, 0x18
jmp 0x1f07a16
jbe 0x1e8ea4d
push edi
call fcn.01f07a74
mov byte [esp + 1], dl
add esi, ebx
lea esp, [esp + 4]
call fcn.01ea6582
jmp 0x1f07ae5
and eax, 0x7b05935c
mov eax, esi
sub esp, 0xc
cmc
bsr cx, ax
jmp 0x1f07b65
jne 0x1e8ea79
push esi
jmp 0x1f07b4d
mov dl, byte [eax]
inc eax
test dl, dl
jmp 0x1f07b14
lea esi, [esp + 0x3c]
jmp 0x1f07b71
sub eax, ecx
lea esi, [esi*4]
jmp 0x1f07b37
lea esp, [esp + 0xc]
lea ecx, [eax + 1]
jmp 0x1e8ea79
call fcn.01ea65a6
bswap eax
mov eax, esi
jmp 0x1f08197
imul ecx, ecx, 0xc
mov dh, byte [esp]
lea edx, reloc.KERNEL32.dll_HeapDestroy
mov dl, bh
bts dx, si
jmp 0x1f07c1c
lea edx, [esp + 0x98]
jmp 0x1f07bd8
mov ecx, dword [edi]
pop edi
inc ecx
xchg dl, dh
jmp 0x1f07b90
lea esi, [edx + ebx]
sub esp, 0xc
bswap esi
jmp 0x1f07bff
call 0x1ea65e5
setl cl
mov cx, dx
mov eax, dword [esp + 0x1c]
jmp 0x1f07bc2
mov ecx, dword [esp]
neg esi
not ecx
jmp 0x1f07c9b
lea esp, [esp + 0xc]
pop ecx
dec ecx
btr si, bx
jmp 0x1f07be9
mov ecx, dword [eax + ecx]
add ecx, dword [esp + 0x14]
push 0x10
jmp 0x1f07ba4
mov ebp, ecx
lea ebp, [eax + ebp]
movzx eax, word [ebp]
pop ebp
or cx, ax
jmp 0x1f07c64
lea eax, [ebx + eax*2]
bswap esi
mov esi, esp
push ebp
jmp 0x1f07c2a
lea esp, [esp + 4]
lea eax, [ecx + eax*4]
jmp 0x1f07c77
mov ecx, esp
mov cx, word [esp]
push ebx
mov ecx, dword [edi + 0x1c]
lea esi, [eax*4]
jmp 0x1f07c4e
mov esi, dword [eax + ebx]
sub esp, 5
push dword [esp + 2]
push dword [esp + 4]
call fcn.01f07caa
mov ebx, 0xb59c0d92
test byte [ebx], 0x52
invalid
mov ecx, dword [edi + 0x24]
mov esi, edx
mov si, word [esp]
lea esp, [esp + 4]
jmp 0x1f07c44
mov ecx, ebp
bswap ecx
push edi
mov edi, eax
jmp 0x1f07bba
call fcn.01ea662a
bswap edx
lea ecx, reloc.KERNEL32.dll_HeapDestroy
mov eax, dword [0x1e97a98]
bswap edx
jmp 0x1f07cd0
mov word [esp], sp
lea esp, [esp + 2]
mov eax, dword [0x1e97a98]
pushfd
call fcn.01f082f7
mov ecx, dword [0x1e97a98]
cmc
sub esp, 1
pushfd
mov byte [esp], al
jmp 0x1f083b5
lea esp, [esp + 1]
lea esp, [esp + 4]
inc eax
cmc
call fcn.01f0837d
pop esi
call fcn.01f083e9
push esp
mov dword [ecx + 0xf], 0x9292e67b
and dword [ebp + 0x75], edx
sub bh, dh
outsb dx, byte [esi]
jns 0x1f08432
lea esp, [esp]
lea esp, [esp + 2]
popal
lea esi, [eax + esi]
mov eax, dword [esi]
jmp 0x1f083c4
pop ebp
jmp 0x1e8eeb9
cmc
mov ebp, esi
lea ebp, [eax + ebp]
lea ebp, [ebp + 0x10]
mov eax, dword [ebp]
jmp 0x1f083f4