Function at 0x414ac0
Capabilities:
Encode data using xor

Disassembly:
and byte [edx + 0x22], ah
mov byte [0x212446e0], al
sbb byte [edx], dh
adc eax, esp
arpl bx, bx
invalid
sub eax, dword ss:[0xb17266f5]
jb 0x414b2c
mov dword [0xe8a1e388], eax
loopne 0x414b29
jecxz 0x414a6e
call 0x4ad6a4b2
xchg ebp, eax
dec edx
lcall 0xc7db, 0xb05d9df6
push ds
int3
in al, 0xd3
sub dword [edx - 0x1cfcfca8], esp
loopne 0x414ac7
xor ebx, dword [ebp + 0x1f]
int3
mov byte [0xe8c5df88], al
loopne 0x414ae2
invalid
mov word [edi - 0x80], ss
inc esi
inc ecx
and dword [edi + esi], ecx
movsb byte es:[edi], byte [esi]
cmpsb byte [esi], byte es:[edi]
les esi, [ebx]
adc esp, ebx
loopne 0x414acb
mov ebp, eax
and eax, 0x706aabf9
popal
call 0x6aed446a
jo 0x414ba8
fldenv [edx - 0x5e]
loopne 0x414b7f
or esp, dword [edx - 0x69c8c10]
leave
shl edx, 0x65
sbb eax, 0x8864ed9f
adc ebp, dword [eax]
jecxz 0x414b3f
push 0x42
pop eax
popal
int1
invalid
insb byte es:[edi], dx
loop 0x414bca
or al, 0x23
mov cl, byte [edi - 0x4a748347]
loopne 0x414bbf
arpl word [ebx], sp
xor ah, byte es:[ebx - 0x5e]
loopne 0x414b8e
mov eax, dword [0xe27ce0ae]
pushal
mov cl, 0x2d
add bh, byte [ecx]
popal
hlt
bound esp, qword [edx + 0x61e233e0]
in al, 0x33
arpl word [edx - 0x7bf50b9f], sp
fnstenv [edi - 0xe9eab16]
bound esp, qword [edx + 0x695a33e0]
xor ebx, dword [edx + 0x69]
xchg ebp, eax
shr dword [0x63c1e961], cl
mov byte [0xa26333e0], al
loopne 0x414c03
loopne 0x414bff
arpl word [edx - 0x5d9ccc20], sp
loopne 0x414c07
arpl word [edx - 0x5d9ccc20], sp
loopne 0x414c0b
arpl word [edx - 0x5d9ccc20], sp
loopne 0x414c0f
arpl word [edx - 0x5d9ccc20], sp
loopne 0x414c13
arpl word [edx - 0x5d9ccc20], sp
loopne 0x414c17
arpl word [edx - 0x5d9ccc20], sp
loopne 0x414c1b
arpl word [edx - 0x5d9ccc20], sp
loopne 0x414c1f
arpl word [edx - 0x5d9ccc20], sp
loopne 0x414c23
arpl word [edx - 0x5d9ccc20], sp
loopne 0x414c27
arpl word [edx - 0x5d9ccc20], sp
loopne 0x414c2b
arpl word [edx - 0x5d9ccc20], sp
loopne 0x414c2f
arpl word [edx - 0x5d9ccc20], sp
loopne 0x414c33
arpl word [edx + 0x7f7333e0], sp
xor esi, dword [ebx + 0x7f]
jae 0x414c81
xchg ebx, eax
leave
jae 0x414c85
xchg ebx, eax
leave
jae 0x414c89
xchg ebx, eax
leave
jae 0x414c8d
xchg ebx, eax
leave
jae 0x414c91
xchg ebx, eax
leave
jae 0x414c95
xchg ebx, eax
leave
jae 0x414c99
xchg ebx, eax
leave
jae 0x414c9d
xchg ebx, eax
leave
jae 0x414ca1
xchg ebx, eax
leave
jae 0x414ca5
xchg ebx, eax
leave
jae 0x414ca9
xchg ebx, eax
leave
jae 0x414cad
xchg ebx, eax
leave
jae 0x414cb1
xchg ebx, eax
leave
jae 0x414cb5
xchg ebx, eax
leave
jae 0x414cb9
xchg ebx, eax
leave
jae 0x414cbd
xchg ebx, eax
leave
jae 0x414cc1
xchg ebx, eax
leave
jae 0x414cc5
xchg ebx, eax
leave
jae 0x414cc9
xchg ebx, eax
leave
jae 0x414ccd
xchg ebx, eax
leave
jae 0x414cd1
xchg ebx, eax
leave
jae 0x414cd5
xchg ebx, eax
leave
jae 0x414cd9
xchg ebx, eax
leave
jae 0x414cdd
xchg ebx, eax
leave
jae 0x414ce1
xchg ebx, eax
leave
jae 0x414ce5
xchg ebx, eax
leave
jae 0x414ce9
xchg ebx, eax
leave
jae 0x414ced
xchg ebx, eax
leave
jae 0x414cf1
xchg ebx, eax
leave
jae 0x414cf5
xchg ebx, eax
leave
jae 0x414cf9
xchg ebx, eax
leave
jae 0x414cfd
xchg ebx, eax
leave
jae 0x414d01
jg 0x414c16
xchg ebx, eax
leave
jae 0x414d05
jg 0x414c1a
xchg ebx, eax
leave
jae 0x414d09
jg 0x414c1e
xchg ebx, eax
leave
jae 0x414d0d
jg 0x414c22
xchg ebx, eax
leave
jae 0x414d11
jg 0x414c26
xchg ebx, eax
leave
jae 0x414d15
jg 0x414c2a
xchg ebx, eax
leave
jae 0x414d19
jg 0x414c2e
xchg ebx, eax
leave
jae 0x414d1d
jg 0x414c32
xchg ebx, eax
leave
jae 0x414d21
jg 0x414c36
xchg ebx, eax
leave
jae 0x414d25
jg 0x414c3a
xchg ebx, eax
leave
jae 0x414d29
jg 0x414c3e
xchg ebx, eax
leave
jae 0x414d2d
jg 0x414c42
xchg ebx, eax
leave
jae 0x414d31
jg 0x414c46
xchg ebx, eax
leave
jae 0x414d35
jg 0x414c4a
xchg ebx, eax
leave
jae 0x414d39
jg 0x414c4e
xchg ebx, eax
leave
jae 0x414d3d
jg 0x414c52
xchg ebx, eax
leave
jae 0x414d41
jg 0x414c56
xchg ebx, eax
leave
jae 0x414d45
jg 0x414c5a
xchg ebx, eax
leave
jae 0x414d49
jg 0x414c5e
xchg ebx, eax
leave
jae 0x414d4d
jg 0x414c62
xchg ebx, eax
leave
jae 0x414d51
jg 0x414c66
xchg ebx, eax
leave
jae 0x414d55
jg 0x414c6a
xchg ebx, eax
leave
jae 0x414d59
jg 0x414c6e
xchg ebx, eax
leave
jae 0x414d5d
jg 0x414c72
xchg ebx, eax
leave
jae 0x414d61
jg 0x414c76
xchg ebx, eax
leave
jae 0x414d65
jg 0x414c7a
xchg ebx, eax
leave
jae 0x414d69
jg 0x414c7e
xchg ebx, eax
leave
jae 0x414d6d
jg 0x414c82
xchg ebx, eax
leave
jae 0x414d71
jg 0x414c86
xchg ebx, eax
leave
jae 0x414d75
jg 0x414c8a
xchg ebx, eax
leave
jae 0x414d79
jg 0x414c8e
xchg ebx, eax
leave
jae 0x414d7d
jg 0x414c92
xchg ebx, eax
leave
jae 0x414d81
jg 0x414c96
xchg ebx, eax
leave
jae 0x414d85
jg 0x414c9a
xchg ebx, eax
leave
jae 0x414d89
jg 0x414c9e
xchg ebx, eax
leave
jae 0x414d8d
jg 0x414ca2
xchg ebx, eax
leave
jae 0x414d91
jg 0x414ca6
xchg ebx, eax
leave
jae 0x414d95
jg 0x414caa
xchg ebx, eax
leave
jae 0x414d99
jg 0x414cae
xchg ebx, eax
leave
jae 0x414d9d
jg 0x414cb2
xchg ebx, eax
leave
jae 0x414da1
jg 0x414cb6
xchg ebx, eax
leave
jae 0x414da5
jg 0x414cba
xchg ebx, eax
leave
jae 0x414da9
jg 0x414cbe
xchg ebx, eax
leave
jae 0x414dad
jg 0x414cc2
xchg ebx, eax
leave
jae 0x414db1
jg 0x414cc6
xchg ebx, eax
xor eax, 0x3129b521
and dword [ebx + 0x6f293725], edi
and dword [ebp - 0x44deced7], esi
and eax, 0x9a6f2937
push 0x8052e8b7
salc
mov ch, 0x29
xor dword [ecx], esp
mov ebx, 0x6f293725
outsd dx, dword [esi]
lcall 0xd680, 0x52e8b768
call 0xa717cd98
cmpsb byte [esi], byte es:[edi]
jbe 0x414d6f
sbb ah, ch
in al, dx
push es
sub eax, 0x3ba5c570
dec edi
lds esp, [ebp - 0x861b0c5]
inc eax
sahf
div dword [esi]
inc eax
cwde
cld
xor al, 0x47
mov byte [0xca54c841], al
test byte [ebp - 0x7bd3ebe9], dh
test eax, 0x9d99cd7c
retf 0xb584
adc al, 0x2c
test byte [ecx - 0x62663284], ch
jl 0x414d34
cdq
popfd
test eax, 0xadee1aa9
out dx, al
lodsd eax, dword [esi]
push ds
pop edi
retf 0x5f50
push esp
pop esi
pop ecx
pop edx
pop ebx
pop esi
pop edi
in al, dx
add al, 0xc7
add al, 0x24
in al, dx
and al, 0xec
cmpsb byte [esi], byte es:[edi]
dec edx
add byte [ecx + 0x72b5cee9], al
mov ch, 0x72
adc eax, 0x41700068
add byte [eax + 0x41], dh
add byte [ecx - 0x331a5e17], al
inc ebp
int3
arpl word [edx + 0xb833e0], sp
adc byte [eax], al
add byte [ecx], al
mov ebx, 0x414c00
add byte [ecx + eax*2], cl
ljmp 0x27e8:0xabbd75c1
stosd dword es:[edi], eax