Function at 0x4013e0
Capabilities:
Encode data using xor

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x140
mov eax, dword [sym.imp.msvcrt.dll___argc]
mov eax, dword [eax]
mov esi, dword [eax]
call dword [sym.imp.msvcrt.dll___p___argv]
cmp esi, 2
jl 0x40177d
mov esi, dword [eax]
je 0x401425
push str.failrestart
push dword [esi + 8]
call sub.msvcrt.dll_strcmp
add esp, 8
test eax, eax
jne 0x401425
push 0x3a98
call dword [sym.imp.KERNEL32.dll_Sleep]
sub esp, 8
mov dword [esp + 4], 0x453000
call fcn.00401790
add esp, 8
push dword [esi + 4]
call fcn.004030f0
add esp, 4
mov esi, dword [esi + 4]
call fcn.00408460
push 0x408530
push eax
call fcn.004076d0
add esp, 8
call fcn.00408460
push 1
push eax
call fcn.004076e0
add esp, 8
push esi
call sub.msvcrt.dll_strlen
add esp, 4
cmp eax, 0x152
ja 0x40177d
xorps xmm0, xmm0
movups xmmword [esp + 0x12e], xmm0
movups xmmword [esp + 0x124], xmm0
movups xmmword [esp + 0x114], xmm0
movups xmmword [esp + 0x104], xmm0
movups xmmword [esp + 0xf4], xmm0
movups xmmword [esp + 0xe4], xmm0
movups xmmword [esp + 0xd4], xmm0
movups xmmword [esp + 0xc4], xmm0
movups xmmword [esp + 0xb4], xmm0
movups xmmword [esp + 0xa4], xmm0
movups xmmword [esp + 0x94], xmm0
movups xmmword [esp + 0x84], xmm0
movups xmmword [esp + 0x74], xmm0
movups xmmword [esp + 0x64], xmm0
movups xmmword [esp + 0x54], xmm0
movups xmmword [esp + 0x44], xmm0
lea ecx, [esp + 0x44]
push ecx
push eax
push esi
call fcn.0040dff0
add esp, 0xc
movzx eax, al
cmp eax, 0xf
jb 0x40177d
add eax, 0xfffffffb
mov dword [esp], eax
and eax, 0xfffffffe
mov dword [esp + 4], eax
xor ebx, ebx
mov eax, 5
mov esi, 6
mov ebp, 0xcccccccd
nop dword [eax]
mov ecx, eax
mul ebp
shr edx, 2
lea eax, [edx + edx*4]
lea edi, [esp + 0x49]
sub edi, eax
mov eax, esi
mul ebp
shr edx, 2
lea eax, [edx + edx*4]
lea edx, [esp + 0x4a]
sub edx, eax
mov eax, ebx
movzx ebx, byte [esp + ebx + 0x49]
xor bl, byte [edi + eax]
mov bh, al
add bh, 5
xor bh, bl
mov bl, byte [esp + eax + 0x4a]
mov byte [esp + eax + 0x49], bh
xor bl, byte [edx + eax]
mov edx, eax
add dl, 6
xor dl, bl
mov byte [esp + eax + 0x4a], dl
lea ebx, [eax + 2]
add esi, 2
add eax, 7
cmp ebx, dword [esp + 4]
jne 0x401530
test byte [esp], 1
je 0x4015b7
add ecx, 2
mov edx, 0xcccccccd
mov eax, ecx
mul edx
lea eax, [esp + ebx]
add eax, 0x49
movzx ecx, byte [esp + ebx + 0x49]
shr edx, 2
lea edx, [edx + edx*4]
sub eax, edx
xor cl, byte [eax]
mov eax, ebx
add al, 5
xor al, cl
mov byte [esp + ebx + 0x49], al
push str._____________________
call fcn.004058d0
add esp, 4
mov edi, eax
push eax
call fcn.00405190
add esp, 4
mov esi, eax
push edi
call fcn.00405940
add esp, 4
xorps xmm0, xmm0
movups xmmword [esp + 0x28], xmm0
movups xmmword [esp + 0x18], xmm0
movups xmmword [esp + 8], xmm0
lea eax, [esp + 8]
push 0xc
push eax
push dword [esp + 8]
lea eax, [esp + 0x55]
push eax
push esi
call fcn.00406000
add esp, 0x14
test eax, eax
jle 0x40177d
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
sub ecx, eax
cmp ecx, 0x95
mov edx, 0x95
cmovge ecx, edx
push ecx
push eax
push 0x44d270
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov ebx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
sub eax, ebx
cmp eax, 9
mov ebp, 9
cmovl ebp, eax
lea eax, [ebp - 0xa]
neg eax
xor ecx, ecx
cmp ebp, 0xa
cmovb ecx, eax
lea eax, [esp + ebp + 0x3a]
push ecx
push 0
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
lea edi, [esp + 0x3a]
push ebp
push ebx
push edi
call sub.msvcrt.dll_memcpy
add esp, 0xc
push edi
call sub.msvcrt.dll_atoi
add esp, 4
mov dword [0x44d308], eax
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
sub ecx, eax
cmp ecx, 0x95
mov edx, 0x95
cmovge ecx, edx
push ecx
push eax
push 0x44d30c
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x2c]
sub eax, ecx
cmp eax, 0xa
mov edx, 0xa
cmovge eax, edx
mov edi, dword [esp + 0x34]
mov ebx, dword [esp + 0x30]
sub edi, ebx
cmp edi, 0xa
cmovge edi, edx
push ebx
push edi
push 0x4450e7
push ecx
push eax
push str._client_version_:__.s._s._.s_
push 0x44d3a2
call fcn.004017c0
add esp, 0x1c
test eax, eax
jle 0x40177d
push esi
call fcn.00405280
add esp, 4
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
nop word cs:[eax + eax]
push 2
call fcn.0040a7b0
add esp, 4
mov dword [0x44d3d4], eax
push 0x401880
push 0x4017e0
push 0x1bb
push str.1.1.1.1
push eax
call fcn.0040c210
add esp, 0x14
mov esi, eax
push 0
push eax
call fcn.00409180
add esp, 8
push esi
call fcn.00409130
add esp, 4
push dword [0x44d3d4]
call fcn.0040aaf0
add esp, 4
mov dword [0x44d3d8], 0
mov dword [0x44d3d4], 0
push 0x3a98
call edi
jmp 0x401710
xor eax, eax
add esp, 0x140
pop esi
pop edi
pop ebx
pop ebp
ret 0x10