Function at 0x4187d9
Capabilities:
Encode data using xor

Disassembly:
push 0x20c
mov eax, 0x440e2f
call fcn.0043dbfe
mov esi, dword [ebp + 8]
xor ebx, ebx
mov edi, dword [ebp + 0xc]
cmp dword [0x457010], ebx
jne 0x418824
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x1f5]
call fcn.00412b7a
cmp byte [eax + 0xd], bl
je 0x418f78
push 0xe
mov ecx, ebx
pop edi
xor byte [ecx + eax], 0x36
inc ecx
cmp ecx, edi
jge 0x418f78
jmp 0x418815
mov eax, dword [str.ZURXDS7_QR7]
mov ecx, dword [0x446208]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], ecx
cmp byte [0x44620b], bl
je 0x41884f
mov ecx, ebx
mov al, cl
and al, 1
add al, 0x36
xor byte [ebp + ecx - 0x24], al
inc ecx
cmp ecx, 8
jl 0x41883f
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x1ac]
call fcn.004044d0
push eax
lea ecx, [ebp - 0x194]
mov dword [ebp - 4], 1
call fcn.004062b4
mov dword [ebp - 0x184], ebx
push esi
lea ecx, [ebp - 0x17c]
mov byte [ebp - 4], 2
call fcn.00405d5a
mov dword [ebp - 0x16c], ebx
push 3
pop eax
push 2
mov byte [ebp - 4], al
lea ecx, [ebp - 0x194]
push 1
lea eax, [ebp - 0x164]
push eax
push ecx
lea ecx, [ebp - 0x164]
call fcn.0040ef0d
mov dword [ebp - 0x154], ebx
mov eax, dword [0x44620c]
mov ecx, ebx
push 5
pop ebx
mov dword [ebp - 0x18], eax
mov al, byte [0x446210]
push 3
mov byte [ebp - 4], 4
mov byte [ebp - 0x14], al
pop esi
xor edx, edx
mov eax, ecx
div esi
add dl, 0x36
xor byte [ebp + ecx - 0x18], dl
inc ecx
cmp ecx, ebx
jl 0x4188d2
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0xd4]
call fcn.004044d0
push eax
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], bl
call fcn.004062b4
xor ebx, ebx
mov dword [ebp - 0x10c], ebx
push 6
pop eax
push edi
lea ecx, [ebp - 0x104]
mov byte [ebp - 4], al
call fcn.00405d5a
mov dword [ebp - 0xf4], ebx
push 7
pop eax
push 2
mov byte [ebp - 4], al
lea ecx, [ebp - 0x11c]
push 1
lea eax, [ebp - 0xec]
push eax
push ecx
lea ecx, [ebp - 0x14c]
call fcn.0040ef0d
mov dword [ebp - 0x13c], ebx
mov esi, str.DVV_YZVED8
mov byte [ebp - 4], 8
lea edi, [ebp - 0x38]
mov ecx, ebx
push 0xb
pop edx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov al, cl
and al, 3
add al, 0x36
xor byte [ebp + ecx - 0x38], al
inc ecx
cmp ecx, edx
jl 0x418961
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0xec]
call fcn.004044d0
push 9
pop ecx
mov byte [ebp - 4], cl
lea ecx, [ebp - 0x90]
push eax
call fcn.004062b4
mov dword [ebp - 0x80], ebx
call dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x800000ff
jns 0x4189a8
dec eax
or eax, 0xffffff00
inc eax
cdq
push edx
push eax
lea eax, [ebp - 0x78]
mov byte [ebp - 0x78], bl
push eax
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x6c], ebx
call fcn.0040a693
add esp, 0xc
mov dword [ebp - 0x68], ebx
push 0xa
pop eax
push 2
mov byte [ebp - 4], al
lea ecx, [ebp - 0x90]
push 1
lea eax, [ebp - 0x60]
push eax
push ecx
lea ecx, [ebp - 0x134]
call fcn.0040ef0d
mov dword [ebp - 0x124], ebx
push 2
push 1
lea eax, [ebp - 0x11c]
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x164]
push eax
push ecx
lea ecx, [ebp - 0x48]
call fcn.0040ef0d
push ebx
push ebx
push 0x20
push 0xffffffffffffffff
lea ecx, [ebp - 0x1c4]
mov byte [ebp - 4], 0x10
push ecx
mov ecx, eax
call fcn.0041a026
push dword [ebp - 0x48]
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x13
call fcn.00419dac
mov edi, 0x41159f
mov byte [ebp - 4], 0x14
push edi
push 3
pop eax
push eax
push 0x18
pop esi
push esi
lea eax, [ebp - 0x164]
push eax
call fcn.0043d762
push edi
push 2
push esi
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0x15
push eax
call fcn.0043d762
lea ecx, [ebp - 0xec]
call fcn.004043b0
mov byte [ebp - 4], 0x17
push edi
push 2
push esi
lea eax, [ebp - 0x11c]
push eax
call fcn.0043d762
lea ecx, [ebp - 0xd4]
call fcn.004043b0
push edi
push 2
push esi
lea eax, [ebp - 0x194]
mov byte [ebp - 4], 0x19
push eax
call fcn.0043d762
lea ecx, [ebp - 0x1ac]
mov byte [ebp - 4], 0x1a
call fcn.004043b0
cmp byte [0x446233], 0
lea edi, [ebp - 0xbc]
push 5
pop eax
mov ecx, eax
mov esi, str.CLI
rep movsd dword es:[edi], dword [esi]
je 0x418ae2
push eax
mov ecx, ebx
pop esi
xor edx, edx
mov eax, ecx
div esi
add dl, 0x36
xor byte [ebp + ecx - 0xbc], dl
inc ecx
cmp ecx, 0x14
jl 0x418acc
lea eax, [ebp - 0xbc]
push eax
lea ecx, [ebp - 0xa8]
call fcn.004044d0
push eax
lea ecx, [ebp - 0x200]
mov byte [ebp - 4], 0x1b
call fcn.0040fe1a
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 0x1d
call fcn.004043b0
mov esi, 0x446234
lea edi, [ebp - 0x1c]
push 6
mov ecx, ebx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
pop esi
push 0xb
pop edi
xor edx, edx
mov eax, ecx
div esi
add dl, 0x36
xor byte [ebp + ecx - 0x1c], dl
inc ecx
cmp ecx, edi
jl 0x418b28
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x60]
call fcn.004044d0
mov dword [ebp - 0x1fc], eax
cmp byte [0x44624b], 0
lea edi, [ebp - 0x28]
mov esi, str.p_MAy
mov byte [ebp - 4], 0x1e
push 0xc
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
pop esi
je 0x418b7e
push 7
mov ecx, ebx
pop edi
xor edx, edx
mov eax, ecx
div edi
add dl, 0x36
xor byte [ebp + ecx - 0x28], dl
inc ecx
cmp ecx, esi
jl 0x418b6c
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x1ac]
call fcn.004044d0
mov esi, eax
push dword [ebp - 0x1fc]
lea ecx, [ebp - 0x14c]
call fcn.00404480
push esi
lea ecx, [ebp - 0x134]
call fcn.00404480
lea eax, [ebp - 0x11c]
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x14c]
push eax
push ecx
lea ecx, [ebp - 0x208]
call fcn.0040f528
push 0x4116c4
push 1
push 0x30
lea eax, [ebp - 0x14c]
mov byte [ebp - 4], 0x22
push eax
call fcn.0043d762
lea ecx, [ebp - 0x1ac]
call fcn.004043b0
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0x24
call fcn.004043b0
mov esi, str.BR_M
lea edi, [ebp - 0x44]
push 0xb
mov ecx, ebx
pop ebx
movsd dword es:[edi], dword [esi]
push 0xa
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
pop esi
xor edx, edx
mov eax, ecx
div esi
add dl, 0x36
xor byte [ebp + ecx - 0x44], dl
inc ecx
cmp ecx, ebx
jl 0x418c0e
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x104]
call fcn.004044d0
mov dword [ebp - 0x20], eax
push 0x45be84
lea eax, [ebp - 0x1c4]
mov byte [ebp - 4], 0x25
push eax
lea eax, [ebp - 0x17c]
push eax
call fcn.0041acd8
add esp, 0xc
mov dword [ebp - 0x18], eax
cmp byte [0x446271], 0
lea edi, [ebp - 0x7c]
push 6
pop eax
mov ecx, eax
mov byte [ebp - 4], 0x26
mov esi, 0x446258
rep movsd dword es:[edi], dword [esi]
push 0
pop ebx
movsw word es:[edi], word [esi]
je 0x418c8d
push 9
mov ecx, ebx
pop esi
xor edx, edx
mov eax, ecx
div esi
add dl, 0x36
xor byte [ebp + ecx - 0x7c], dl
inc ecx
cmp ecx, 0x1a
jl 0x418c7a
lea eax, [ebp - 0x7c]
push eax
lea ecx, [ebp - 0x1f4]
call fcn.004044d0
mov dword [ebp - 0x1fc], eax
mov esi, 0x44624c
mov byte [ebp - 4], 0x27
lea edi, [ebp - 0x34]
mov ecx, ebx
push 9
pop ebx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov al, cl
and al, 7
add al, 0x36
xor byte [ebp + ecx - 0x34], al
inc ecx
cmp ecx, ebx
jl 0x418cb6
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x1dc]
call fcn.004044d0
cmp dword [0x457014], 0x10
mov ecx, section..data
push dword [0x457010]
cmovae ecx, dword [section..data]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x28
call fcn.00418679
push eax
lea ecx, [ebp - 0xec]
call fcn.00404480
push dword [ebp - 0x1fc]
lea eax, [ebp - 0xec]
mov byte [ebp - 4], 0x29
push eax
push dword [ebp - 0x15]
lea ecx, [ebp - 0xd4]
call fcn.0040f0cd
push dword [ebp - 0x20]
mov ecx, dword [ebp - 0x200]
lea eax, [ebp - 0x208]
push dword [ebp - 0x18]
mov byte [ebp - 4], 0x2a
push eax
lea eax, [ebp - 0xd4]
push eax
lea eax, [ebp - 0x218]
push eax
call fcn.004141f8
lea ecx, [ebp - 0xd4]
call fcn.004043b0
lea ecx, [ebp - 0xec]
call fcn.004043b0
lea ecx, [ebp - 0x1dc]
call fcn.004043b0
lea ecx, [ebp - 0x1f4]
call fcn.004043b0
lea ecx, [ebp - 0x17c]
call fcn.004043b0
lea ecx, [ebp - 0x104]
mov byte [ebp - 4], 0x31
call fcn.004043b0
mov eax, dword [ebp - 0x218]
add eax, 0x3c
push 0x45be84
push eax
lea eax, [ebp - 0x60]
push eax
call fcn.00419b96
mov edx, eax
push ecx
mov ecx, esp
mov byte [ebp - 4], 0x32
xor ebx, ebx
push ebx
push 1
sub esp, 0x28
mov eax, esp
push edx
push ecx
mov dword [eax + 0x24], ebx
call fcn.0040c8ab
add esp, 0x38
mov esi, 0x45bea0
mov ecx, esi
call fcn.00411e0e
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0x31
call fcn.004043b0
mov eax, dword [0x446280]
mov dword [ebp - 0x18], eax
mov ax, word [0x446284]
mov word [ebp - 0x14], ax
test ah, ah
je 0x418e12
push 0xb
pop edi
xor edx, edx
mov eax, ebx
div edi
push 6
add dl, 0x36
xor byte [ebp + ebx - 0x18], dl
inc ebx
pop eax
cmp ebx, eax
jl 0x418dfd
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x60]
call fcn.004044d0
push eax
mov ecx, esi
call fcn.00419390
lea ecx, [ebp - 0x60]
mov bl, al
call fcn.004043b0
test bl, bl
je 0x418ea6
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x1f5]
call fcn.004124ac
mov edi, eax
cmp byte [edi + 5], 0
je 0x418e69
push 0xc
xor esi, esi
pop ecx
xor edx, edx
mov eax, esi
div ecx
push 6
add dl, 0x36
xor byte [esi + edi], dl
inc esi
pop eax
cmp esi, eax
jl 0x418e50
mov esi, 0x45bea0
sub esp, 0x18
mov ecx, esp
push edi
call fcn.004044d0
mov ecx, esi
call fcn.00412204
lea ecx, [ebp - 0x60]
push ecx
mov ecx, eax
call fcn.0040b4e1
mov byte [ebp - 4], 0x33
push eax
lea ecx, [ebp - 0x9c]
call fcn.0041117d
push 0x454a0c
lea eax, [ebp - 0x9c]
jmp 0x418f98
mov eax, dword [str.EB_Z_HOCYSWULR]
xor esi, esi
cmp byte [0x446297], 0
mov ecx, dword [0x446294]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], ecx
je 0x418eda
mov ecx, esi
xor edx, edx
mov eax, ecx
push 0xd
pop edi
div edi
add dl, 0x36
xor byte [ebp + ecx - 0x1c], dl
inc ecx
cmp ecx, 8
jl 0x418ec4
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x60]
call fcn.004044d0
push eax
mov ecx, 0x45bea0
call fcn.00419390
lea ecx, [ebp - 0x60]
mov bl, al
call fcn.004043b0
test bl, bl
jne 0x418f3e
lea eax, [ebp - 0xb8]
push eax
lea ecx, [ebp - 0x1f5]
call fcn.004124c6
mov ecx, eax
cmp byte [ecx + 0xd], bl
je 0x418f2c
push 0xe
pop edi
xor edx, edx
mov eax, esi
div edi
add dl, 0x36
xor byte [esi + ecx], dl
inc esi
cmp esi, edi
jl 0x418f1b
push ecx
lea ecx, [ebp - 0x60]
call fcn.004044d0
mov byte [ebp - 4], 0x34
jmp 0x418e8a
lea ecx, [ebp - 0x218]
call fcn.00411c04
lea eax, [ebp - 0x208]
push eax
mov ecx, eax
call fcn.00408523
mov ecx, dword [ebp - 0x200]
test ecx, ecx
je 0x418f67
mov eax, dword [ecx]
push 1
call dword [eax]
lea ecx, [ebp - 0x1c4]
call fcn.004043b0
call fcn.0043dbbc
ret
push eax
lea ecx, [ebp - 0x104]
call fcn.004044d0
push eax
lea ecx, [ebp - 0x44]
mov dword [ebp - 4], ebx
call fcn.0041117d
push 0x454a0c
lea eax, [ebp - 0x44]
push eax
call sub.VCRUNTIME140.dll__CxxThrowException
int3