Function at 0x4061d0
Capabilities:
Encode data using xor

Disassembly:
push ebp
push ebx
push edi
push esi
mov eax, 0x203c
call fcn.00416220
mov esi, dword [esp + 0x2054]
mov eax, dword [esp + 0x2050]
mov edi, ecx
mov dword [esp + 0x1c], edx
cmp esi, 0x1001
jb 0x406222
mov ecx, 0x1001
nop
cmp byte [eax + ecx - 1], 0xc0
lea ecx, [ecx - 1]
jl 0x406200
cmp ecx, esi
jae 0x40621c
cmp byte [eax + ecx], 0xbf
jle 0x40655e
mov esi, ecx
jmp 0x406222
jne 0x40655e
lea ebp, [esp + 0x3c]
push 0x1000
push ebp
push esi
push eax
push 8
push 0xfde9
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test eax, eax
je 0x406517
mov ebx, eax
cmp eax, 0x1001
mov dword [esp], edi
jae 0x40654e
lea edi, [esp + 4]
mov dword [esp + 4], 0
push 0
push edi
push ebx
push ebp
push dword [esp + 0x2c]
call dword [sym.imp.KERNEL32.dll_WriteConsoleW]
test eax, eax
je 0x4064d4
mov ecx, dword [esp + 4]
cmp ecx, ebx
je 0x4064e7
jae 0x40656d
movzx eax, word [esp + ecx*2 + 0x3c]
add eax, 0x2312
movzx eax, ax
cmp eax, 0x312
jae 0x4062c5
lea eax, [esp + ecx*2 + 0x3c]
inc ecx
mov dword [esp + 4], 0
mov esi, ecx
push 0
push edi
push 1
push eax
push dword [esp + 0x2c]
call dword [sym.imp.KERNEL32.dll_WriteConsoleW]
test eax, eax
je 0x4064fb
mov ecx, esi
cmp ecx, ebx
ja 0x40650b
test ecx, ecx
je 0x4064e5
lea eax, [ecx - 1]
xor esi, esi
and eax, 0x7fffffff
cmp eax, 6
jbe 0x406485
inc eax
mov edi, ecx
pxor xmm0, xmm0
lea edx, [esp + 0x44]
pxor xmm1, xmm1
mov ecx, eax
and ecx, 0xfffffff8
lea ebp, [esp + ecx*2 + 0x3c]
mov esi, ecx
nop word cs:[eax + eax]
nop dword [eax]
movq xmm6, qword [edx]
movdqu xmmword [esp + 0x2c], xmm1
movq xmm1, qword [edx - 8]
movdqa xmm3, xmmword [0x427250]
movdqu xmmword [esp + 0x1c], xmm0
movdqa xmm5, xmmword [0x427260]
add edx, 0x10
add esi, 0xfffffff8
movdqa xmm4, xmm6
movdqa xmm0, xmm1
punpcklwd xmm4, xmm6
punpcklwd xmm0, xmm1
movdqa xmm2, xmm4
paddw xmm4, xmmword [0x427250]
movdqa xmm7, xmm0
paddw xmm0, xmm3
movdqa xmm3, xmmword [0x427230]
pxor xmm2, xmmword [0x427230]
pxor xmm4, xmmword [0x427230]
pxor xmm0, xmm3
movdqa xmm3, xmm5
pcmpgtw xmm3, xmm0
pcmpgtw xmm2, xmmword [0x427240]
movdqa xmm0, xmm3
pcmpgtw xmm5, xmm4
movdqa xmm4, xmmword [0x427270]
pandn xmm0, xmm4
movdqa xmm4, xmmword [0x427280]
pand xmm3, xmm4
por xmm3, xmm0
movdqa xmm0, xmm5
pand xmm5, xmm4
movdqa xmm4, xmmword [0x427230]
pandn xmm0, xmmword [0x427270]
pxor xmm7, xmm4
por xmm5, xmm0
movdqa xmm0, xmmword [0x427290]
pand xmm5, xmm2
paddw xmm1, xmm0
paddw xmm6, xmm0
movdqa xmm0, xmmword [0x4272a0]
pxor xmm1, xmmword [0x427230]
pxor xmm6, xmm4
movdqa xmm4, xmmword [0x427240]
pcmpgtw xmm0, xmm1
movdqa xmm1, xmmword [0x4272a0]
pcmpgtw xmm7, xmm4
movdqa xmm4, xmmword [0x427280]
punpcklwd xmm0, xmm0
pand xmm3, xmm7
pcmpgtw xmm1, xmm6
pand xmm0, xmm4
pcmpeqd xmm6, xmm6
psubd xmm0, xmm6
pandn xmm7, xmm0
movdqu xmm0, xmmword [esp + 0x1c]
por xmm7, xmm3
paddd xmm0, xmm7
punpcklwd xmm1, xmm1
pand xmm1, xmm4
psubd xmm1, xmm6
pandn xmm2, xmm1
movdqu xmm1, xmmword [esp + 0x2c]
por xmm2, xmm5
paddd xmm1, xmm2
jne 0x406310
paddd xmm1, xmm0
cmp eax, ecx
mov ecx, edi
pshufd xmm0, xmm1, 0xee
paddd xmm0, xmm1
pshufd xmm1, xmm0, 0x55
paddd xmm1, xmm0
movd esi, xmm1
je 0x4064e7
lea eax, [esp + ecx*2 + 0x3c]
jmp 0x406499
add ebp, 2
add esi, edx
cmp ebp, eax
je 0x4064e7
movzx ecx, word [ebp]
mov edx, 1
cmp ecx, 0x80
jb 0x406490
movzx edi, cx
mov edx, 2
cmp edi, 0x800
jb 0x406490
add ecx, 0x2312
xor edx, edx
movzx ecx, cx
cmp ecx, 0x312
setae dl
lea edx, [edx + edx + 1]
jmp 0x406490
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [esp]
mov byte [ecx], 0
mov dword [ecx + 4], eax
jmp 0x4064f0
xor esi, esi
mov eax, dword [esp]
mov dword [eax + 4], esi
mov byte [eax], 4
add esp, 0x203c
pop esi
pop edi
pop ebx
pop ebp
ret
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, esi
cmp ecx, ebx
jbe 0x4062cd
push 0x427860
push ebx
push ecx
call fcn.00425730
mov dword [esp + 4], str.Unexpected_error_in_MultiByteToWideChar
mov dword [esp + 8], 1
mov dword [esp + 0x14], 0
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
lea eax, [esp + 4]
push 0x427830
push eax
call fcn.00425380
push 0x427840
push 0x1000
push ebx
call fcn.00425730
push 0x4277f0
push ecx
push 0
push esi
push eax
call fcn.00425650
push 0x427850
push ebx
push ecx
call fcn.004254d9
int3