Function at 0x4213df
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffac
mov eax, 0xd054
mov ecx, 0x9233
mov edx, 0xf6df
and edx, 0x223a
adc edx, 0x5faa
sbb dword [0x42a5bb], 0x878
mul dword [0x42a5bb]
mov dword [ebp - 0x28], 0x1d75
mov dword [ebp - 0x50], 0xb3bc
mov dword [ebp - 0x38], 0xa508
adc dword [ebp - 0x28], 0xa6db
mov dword [ebp - 0x30], 0x3fbf
shr dword [ebp - 0x28], 1
sbb edx, 0x1321
add edx, 0x1381
adc edx, 0xaf11
sbb edx, 0xd5fc
mul eax
sbb ecx, 0x5788
and dword [0x42a5cb], 0x6973
shl dword [0x42a5b3], 3
or dword [ebp - 0x50], 0x4db1
adc dword [ebp - 0x28], ecx
and eax, dword [0x42a5cb]
xor ecx, dword [ebp - 0x28]
sub ecx, 0x3b23
shl edx, 0x19
and edx, eax
sbb dword [0x42a5c3], 0x579b
adc ecx, 0x7779
or dword [0x42a5d3], eax
sbb dword [ebp - 0x38], 0xb3c6
mov dword [ebp - 0x4c], 0xc9ee
add dword [ebp - 0x50], eax
and eax, dword [0x42a5b3]
mul ecx
xor ecx, 0xd3be
adc edx, 0xb7d8
sbb edx, 0xa234
sub dword [0x42a5cb], 0x1cc6
shr ecx, 8
or dword [0x42a5ab], eax
adc dword [ebp - 0x28], 0x48c0
mov dword [ebp - 0x10], 0x2384
sub edx, ecx
or ecx, 0x79db
shl dword [0x42a5a7], 0x1a
sub dword [0x42a5d7], eax
shr dword [ebp - 0x54], 6
add dword [ebp - 0x48], 0xc96a
shl eax, 0x13
or eax, dword [ebp - 0x40]
mul edx
sbb eax, ecx
sub ecx, eax
sbb eax, 0xc07a
adc dword [0x42a5f3], 0x1e89
mul dword [0x42a5fb]
add dword [ebp - 0x1c], 0x653a
mov dword [ebp - 0x18], 0xb17
mul dword [ebp - 0xc]
sbb eax, 0xa0eb
adc edx, 0x80ee
and eax, 0x14a6
sub ecx, eax
or ecx, 0x5ac5
shl dword [0x42a5bf], 0x18
xor edx, 0x534f
adc dword [0x42a5af], eax
sub dword [ebp - 0x50], 0xe732
dec dword [0x42a5ff]
jne 0x4214e7
shl eax, 0x14
and ecx, 0xc53c
sbb dword [0x42a5ab], 0x4187
shl dword [0x42a5b3], 9
mov dword [ebp - 0x54], 0xce9f
adc dword [ebp - 0x28], 0x714f
sub dword [ebp - 0x4c], eax
xor edx, dword [0x42a5c3]
sbb eax, dword [ebp - 0x30]
and eax, 0x3c0d
adc eax, 0x46de
xor edx, ecx
shl edx, 0xf
sub dword [0x42a5b3], 0xa7ce
shr dword [0x42a5cb], 2
mov dword [ebp - 0x48], 0x913
mov dword [ebp - 0x40], 0xd840
mov dword [ebp - 8], 0x9a7
sub dword [ebp - 0x50], 0xf301
shl dword [ebp - 0x30], 0x1a
xor edx, 0x26d5
sub edx, dword [ebp - 0x30]
shr eax, 0x10
shl ecx, 9
sub eax, edx
add dword [0x42a5cb], 0x3424
shl eax, 3
xor dword [0x42a5df], edx
adc dword [ebp - 8], 0x7f78
xor dword [ebp - 0x40], edx
shl ecx, 7
adc ecx, dword [ebp - 0x40]
shr edx, 0x15
imul eax, eax, 0
or eax, dword [sym.imp.kernel32.dll_CloseHandle]
mov dword [0x42509f], 0
xor dword [0x42509f], eax
and dword [0x42509f], 0xffff0000
sub eax, eax
or eax, dword [0x42509f]
imul dx, dx, 0
push esi
mov si, 0xd5a4
xor dx, si
pop esi
ror dx, 2
ror dx, 0xa
cmp dx, word [eax]
je 0x421676
push ebx
mov ebx, 0xffff0000
add eax, ebx
pop ebx
push 0x421662
ret
push eax
pop dword [0x42a60b]
shr ecx, 0x10
adc ecx, 0x2744
sub dword [0x42a5c7], 0xedcb
shr dword [0x42a5db], 0x10
mov dword [ebp - 0x3c], 0x17ec
mov dword [ebp - 0x2c], 0xddcf
mov dword [ebp - 0x20], 0x6a8
mov dword [ebp - 0x24], 0xaf67
shl dword [ebp - 0x38], 0x11
xor dword [ebp - 0x54], 0x9b3d
sub edx, 0x1c98
or edx, dword [ebp - 0x10]
mul edx
adc ecx, edx
and eax, edx
shl edx, 5
mul dword [0x42a5b3]
or dword [0x42a5cf], ecx
mov dword [ebp - 0xc], 0x185e
mul dword [ebp - 0xc]
shl dword [ebp - 0x48], 0x15
adc eax, 0xc3a1
mul edx
shr eax, 0xf
or edx, ecx
xor ecx, 0x59df
shl dword [0x42a5eb], 7
adc ecx, 0xdda
or dword [0x42a5d3], 0x33a7
sub dword [ebp - 0x30], 0x856f
adc dword [ebp - 0x20], ecx
sub edx, 0x995d
sbb ecx, dword [ebp - 8]
sub ecx, 0xf53
or edx, eax
sbb ecx, 0xf847
adc dword [0x42a5e3], 0xd34d
xor edx, 0x20e1
add dword [0x42a5ab], eax
xor dword [ebp - 0x30], 0xe92
mov dword [ebp - 4], 0x1fd5
mul dword [ebp - 8]
and edx, dword [0x42a5bb]
sbb edx, 0x33b0
or edx, 0xd8c
xor edx, 0xf1a6
sub edx, eax
add dword [0x42a5ef], 0xec48
shl dword [ebp - 0x2c], 0x1b
sub ecx, 0x339e
mov dword [0x4250ef], 0
xor dword [0x4250ef], edx
sub edx, edx
add edx, 0x61fc1c2d
not edx
push eax
mov eax, 0x23f7e389
xor edx, eax
pop eax
push edx
and edx, 0
add edx, dword [0x4250ef]
push dword [0x42a60b]
mov dword [0x42513b], 0
xor dword [0x42513b], edx
push 0x4217d8
mov edx, fcn.004011b2
jmp edx