Function at 0x41d215
Capabilities:
Encode data using xor

Disassembly:
push 0x20c
mov eax, 0x445876
call fcn.00442101
mov esi, dword [ebp + 8]
xor ebx, ebx
mov edi, dword [ebp + 0xc]
cmp dword [0x45c010], ebx
jne 0x41d260
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x1f5]
call fcn.004177e7
cmp byte [eax + 0xd], bl
je 0x41d9b4
push 0xe
mov ecx, ebx
pop edi
xor byte [ecx + eax], 0x36
inc ecx
cmp ecx, edi
jge 0x41d9b4
jmp 0x41d251
mov eax, dword [str.ZURXDS7_QR7]
mov ecx, dword [0x44a248]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], ecx
cmp byte [0x44a24b], bl
je 0x41d28b
mov ecx, ebx
mov al, cl
and al, 1
add al, 0x36
xor byte [ebp + ecx - 0x24], al
inc ecx
cmp ecx, 8
jl 0x41d27b
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x1ac]
call fcn.004079e0
push eax
lea ecx, [ebp - 0x194]
mov dword [ebp - 4], 1
call fcn.0040b174
mov dword [ebp - 0x184], ebx
push esi
lea ecx, [ebp - 0x17c]
mov byte [ebp - 4], 2
call fcn.0040ac71
mov dword [ebp - 0x16c], ebx
push 3
pop eax
push 2
mov byte [ebp - 4], al
lea ecx, [ebp - 0x194]
push 1
lea eax, [ebp - 0x164]
push eax
push ecx
lea ecx, [ebp - 0x164]
call fcn.00413c23
mov dword [ebp - 0x154], ebx
mov eax, dword [0x44a24c]
mov ecx, ebx
push 5
pop ebx
mov dword [ebp - 0x18], eax
mov al, byte [0x44a250]
push 3
mov byte [ebp - 4], 4
mov byte [ebp - 0x14], al
pop esi
xor edx, edx
mov eax, ecx
div esi
add dl, 0x36
xor byte [ebp + ecx - 0x18], dl
inc ecx
cmp ecx, ebx
jl 0x41d30e
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0xd4]
call fcn.004079e0
push eax
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], bl
call fcn.0040b174
xor ebx, ebx
mov dword [ebp - 0x10c], ebx
push 6
pop eax
push edi
lea ecx, [ebp - 0x104]
mov byte [ebp - 4], al
call fcn.0040ac71
mov dword [ebp - 0xf4], ebx
push 7
pop eax
push 2
mov byte [ebp - 4], al
lea ecx, [ebp - 0x11c]
push 1
lea eax, [ebp - 0xec]
push eax
push ecx
lea ecx, [ebp - 0x14c]
call fcn.00413c23
mov dword [ebp - 0x13c], ebx
mov esi, str.DVV_YZVED8
mov byte [ebp - 4], 8
lea edi, [ebp - 0x38]
mov ecx, ebx
push 0xb
pop edx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov al, cl
and al, 3
add al, 0x36
xor byte [ebp + ecx - 0x38], al
inc ecx
cmp ecx, edx
jl 0x41d39d
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0xec]
call fcn.004079e0
push 9
pop ecx
mov byte [ebp - 4], cl
lea ecx, [ebp - 0x90]
push eax
call fcn.0040b174
mov dword [ebp - 0x80], ebx
call dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x800000ff
jns 0x41d3e4
dec eax
or eax, 0xffffff00
inc eax
cdq
push edx
push eax
lea eax, [ebp - 0x78]
mov byte [ebp - 0x78], bl
push eax
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x6c], ebx
call fcn.0040f45b
add esp, 0xc
mov dword [ebp - 0x68], ebx
push 0xa
pop eax
push 2
mov byte [ebp - 4], al
lea ecx, [ebp - 0x90]
push 1
lea eax, [ebp - 0x60]
push eax
push ecx
lea ecx, [ebp - 0x134]
call fcn.00413c23
mov dword [ebp - 0x124], ebx
push 2
push 1
lea eax, [ebp - 0x11c]
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x164]
push eax
push ecx
lea ecx, [ebp - 0x48]
call fcn.00413c23
push ebx
push ebx
push 0x20
push 0xffffffffffffffff
lea ecx, [ebp - 0x1c4]
mov byte [ebp - 4], 0x10
push ecx
mov ecx, eax
call fcn.0041ea37
push dword [ebp - 0x48]
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x13
call fcn.0041e7bd
mov edi, 0x416202
mov byte [ebp - 4], 0x14
push edi
push 3
pop eax
push eax
push 0x18
pop esi
push esi
lea eax, [ebp - 0x164]
push eax
call fcn.004419e3
push edi
push 2
push esi
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0x15
push eax
call fcn.004419e3
lea ecx, [ebp - 0xec]
call fcn.00407930
mov byte [ebp - 4], 0x17
push edi
push 2
push esi
lea eax, [ebp - 0x11c]
push eax
call fcn.004419e3
lea ecx, [ebp - 0xd4]
call fcn.00407930
push edi
push 2
push esi
lea eax, [ebp - 0x194]
mov byte [ebp - 4], 0x19
push eax
call fcn.004419e3
lea ecx, [ebp - 0x1ac]
mov byte [ebp - 4], 0x1a
call fcn.00407930
cmp byte [0x44a273], 0
lea edi, [ebp - 0xbc]
push 5
pop eax
mov ecx, eax
mov esi, str.CLI
rep movsd dword es:[edi], dword [esi]
je 0x41d51e
push eax
mov ecx, ebx
pop esi
xor edx, edx
mov eax, ecx
div esi
add dl, 0x36
xor byte [ebp + ecx - 0xbc], dl
inc ecx
cmp ecx, 0x14
jl 0x41d508
lea eax, [ebp - 0xbc]
push eax
lea ecx, [ebp - 0xa8]
call fcn.004079e0
push eax
lea ecx, [ebp - 0x200]
mov byte [ebp - 4], 0x1b
call fcn.00414aff
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 0x1d
call fcn.00407930
mov esi, 0x44a274
lea edi, [ebp - 0x1c]
push 6
mov ecx, ebx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
pop esi
push 0xb
pop edi
xor edx, edx
mov eax, ecx
div esi
add dl, 0x36
xor byte [ebp + ecx - 0x1c], dl
inc ecx
cmp ecx, edi
jl 0x41d564
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x60]
call fcn.004079e0
mov dword [ebp - 0x1fc], eax
cmp byte [0x44a28b], 0
lea edi, [ebp - 0x28]
mov esi, str.p_MAy
mov byte [ebp - 4], 0x1e
push 0xc
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
pop esi
je 0x41d5ba
push 7
mov ecx, ebx
pop edi
xor edx, edx
mov eax, ecx
div edi
add dl, 0x36
xor byte [ebp + ecx - 0x28], dl
inc ecx
cmp ecx, esi
jl 0x41d5a8
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x1ac]
call fcn.004079e0
mov esi, eax
push dword [ebp - 0x1fc]
lea ecx, [ebp - 0x14c]
call fcn.00407990
push esi
lea ecx, [ebp - 0x134]
call fcn.00407990
lea eax, [ebp - 0x11c]
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x14c]
push eax
push ecx
lea ecx, [ebp - 0x208]
call fcn.0041420d
push fcn.00402170
push 1
push 0x30
lea eax, [ebp - 0x14c]
mov byte [ebp - 4], 0x22
push eax
call fcn.004419e3
lea ecx, [ebp - 0x1ac]
call fcn.00407930
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0x24
call fcn.00407930
mov esi, str.BR_M
lea edi, [ebp - 0x44]
push 0xb
mov ecx, ebx
pop ebx
movsd dword es:[edi], dword [esi]
push 0xa
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
pop esi
xor edx, edx
mov eax, ecx
div esi
add dl, 0x36
xor byte [ebp + ecx - 0x44], dl
inc ecx
cmp ecx, ebx
jl 0x41d64a
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x104]
call fcn.004079e0
mov dword [ebp - 0x20], eax
push 0x460f6c
lea eax, [ebp - 0x1c4]
mov byte [ebp - 4], 0x25
push eax
lea eax, [ebp - 0x17c]
push eax
call fcn.0041f6e9
add esp, 0xc
mov dword [ebp - 0x18], eax
cmp byte [0x44a2b1], 0
lea edi, [ebp - 0x7c]
push 6
pop eax
mov ecx, eax
mov byte [ebp - 4], 0x26
mov esi, 0x44a298
rep movsd dword es:[edi], dword [esi]
push 0
pop ebx
movsw word es:[edi], word [esi]
je 0x41d6c9
push 9
mov ecx, ebx
pop esi
xor edx, edx
mov eax, ecx
div esi
add dl, 0x36
xor byte [ebp + ecx - 0x7c], dl
inc ecx
cmp ecx, 0x1a
jl 0x41d6b6
lea eax, [ebp - 0x7c]
push eax
lea ecx, [ebp - 0x1f4]
call fcn.004079e0
mov dword [ebp - 0x1fc], eax
mov esi, 0x44a28c
mov byte [ebp - 4], 0x27
lea edi, [ebp - 0x34]
mov ecx, ebx
push 9
pop ebx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov al, cl
and al, 7
add al, 0x36
xor byte [ebp + ecx - 0x34], al
inc ecx
cmp ecx, ebx
jl 0x41d6f2
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x1dc]
call fcn.004079e0
cmp dword [0x45c014], 0x10
mov ecx, section..data
push dword [0x45c010]
cmovae ecx, dword [section..data]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x28
call fcn.0041d0fa
push eax
lea ecx, [ebp - 0xec]
call fcn.00407990
push dword [ebp - 0x1fc]
lea eax, [ebp - 0xec]
mov byte [ebp - 4], 0x29
push eax
push dword [ebp - 0x15]
lea ecx, [ebp - 0xd4]
call fcn.00413dfe
push dword [ebp - 0x20]
mov ecx, dword [ebp - 0x200]
lea eax, [ebp - 0x208]
push dword [ebp - 0x18]
mov byte [ebp - 4], 0x2a
push eax
lea eax, [ebp - 0xd4]
push eax
lea eax, [ebp - 0x218]
push eax
call fcn.00418ddc
lea ecx, [ebp - 0xd4]
call fcn.00407930
lea ecx, [ebp - 0xec]
call fcn.00407930
lea ecx, [ebp - 0x1dc]
call fcn.00407930
lea ecx, [ebp - 0x1f4]
call fcn.00407930
lea ecx, [ebp - 0x17c]
call fcn.00407930
lea ecx, [ebp - 0x104]
mov byte [ebp - 4], 0x31
call fcn.00407930
mov eax, dword [ebp - 0x218]
add eax, 0x3c
push 0x460f6c
push eax
lea eax, [ebp - 0x60]
push eax
call fcn.0041e5a7
mov edx, eax
push ecx
mov ecx, esp
mov byte [ebp - 4], 0x32
xor ebx, ebx
push ebx
push 1
sub esp, 0x28
mov eax, esp
push edx
push ecx
mov dword [eax + 0x24], ebx
call fcn.0041166e
add esp, 0x38
mov esi, 0x460f88
mov ecx, esi
call fcn.00416a7e
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0x31
call fcn.00407930
mov eax, dword [0x44a2c0]
mov dword [ebp - 0x18], eax
mov ax, word [0x44a2c4]
mov word [ebp - 0x14], ax
test ah, ah
je 0x41d84e
push 0xb
pop edi
xor edx, edx
mov eax, ebx
div edi
push 6
add dl, 0x36
xor byte [ebp + ebx - 0x18], dl
inc ebx
pop eax
cmp ebx, eax
jl 0x41d839
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x60]
call fcn.004079e0
push eax
mov ecx, esi
call fcn.0041dda1
lea ecx, [ebp - 0x60]
mov bl, al
call fcn.00407930
test bl, bl
je 0x41d8e2
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x1f5]
call fcn.00417119
mov edi, eax
cmp byte [edi + 5], 0
je 0x41d8a5
push 0xc
xor esi, esi
pop ecx
xor edx, edx
mov eax, esi
div ecx
push 6
add dl, 0x36
xor byte [esi + edi], dl
inc esi
pop eax
cmp esi, eax
jl 0x41d88c
mov esi, 0x460f88
sub esp, 0x18
mov ecx, esp
push edi
call fcn.004079e0
mov ecx, esi
call fcn.00416e6e
lea ecx, [ebp - 0x60]
push ecx
mov ecx, eax
call fcn.004102a9
mov byte [ebp - 4], 0x33
push eax
lea ecx, [ebp - 0x9c]
call fcn.00415e62
push 0x458dfc
lea eax, [ebp - 0x9c]
jmp 0x41d9d4
mov eax, dword [str.EB_Z_HOCYSWULR]
xor esi, esi
cmp byte [0x44a2d7], 0
mov ecx, dword [0x44a2d4]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], ecx
je 0x41d916
mov ecx, esi
xor edx, edx
mov eax, ecx
push 0xd
pop edi
div edi
add dl, 0x36
xor byte [ebp + ecx - 0x1c], dl
inc ecx
cmp ecx, 8
jl 0x41d900
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x60]
call fcn.004079e0
push eax
mov ecx, 0x460f88
call fcn.0041dda1
lea ecx, [ebp - 0x60]
mov bl, al
call fcn.00407930
test bl, bl
jne 0x41d97a
lea eax, [ebp - 0xb8]
push eax
lea ecx, [ebp - 0x1f5]
call fcn.00417133
mov ecx, eax
cmp byte [ecx + 0xd], bl
je 0x41d968
push 0xe
pop edi
xor edx, edx
mov eax, esi
div edi
add dl, 0x36
xor byte [esi + ecx], dl
inc esi
cmp esi, edi
jl 0x41d957
push ecx
lea ecx, [ebp - 0x60]
call fcn.004079e0
mov byte [ebp - 4], 0x34
jmp 0x41d8c6
lea ecx, [ebp - 0x218]
call fcn.00416874
lea eax, [ebp - 0x208]
push eax
mov ecx, eax
call fcn.004090e0
mov ecx, dword [ebp - 0x200]
test ecx, ecx
je 0x41d9a3
mov eax, dword [ecx]
push 1
call dword [eax]
lea ecx, [ebp - 0x1c4]
call fcn.00407930
call fcn.004420bf
ret
push eax
lea ecx, [ebp - 0x104]
call fcn.004079e0
push eax
lea ecx, [ebp - 0x44]
mov dword [ebp - 4], ebx
call fcn.00415e62
push 0x458dfc
lea eax, [ebp - 0x44]
push eax
call sub.VCRUNTIME140.dll__CxxThrowException
int3