Function at 0x41ecc5
Capabilities:
Encode data using xor

Disassembly:
push 0x20c
mov eax, 0x4477cc
call fcn.00443d31
mov esi, dword [ebp + 8]
xor ebx, ebx
mov edi, dword [ebp + 0xc]
cmp dword [0x45e010], ebx
jne 0x41ed10
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x1f5]
call fcn.00419219
cmp byte [eax + 0xd], bl
je 0x41f464
push 0xe
mov ecx, ebx
pop edi
xor byte [ecx + eax], 0x36
inc ecx
cmp ecx, edi
jge 0x41f464
jmp 0x41ed01
mov eax, dword [str.ZURXDS7_QR7]
mov ecx, dword [0x44c2a0]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], ecx
cmp byte [0x44c2a3], bl
je 0x41ed3b
mov ecx, ebx
mov al, cl
and al, 1
add al, 0x36
xor byte [ebp + ecx - 0x24], al
inc ecx
cmp ecx, 8
jl 0x41ed2b
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x1ac]
call fcn.00408990
push eax
lea ecx, [ebp - 0x194]
mov dword [ebp - 4], 1
call fcn.0040c556
mov dword [ebp - 0x184], ebx
push esi
lea ecx, [ebp - 0x17c]
mov byte [ebp - 4], 2
call fcn.0040c053
mov dword [ebp - 0x16c], ebx
push 3
pop eax
push 2
mov byte [ebp - 4], al
lea ecx, [ebp - 0x194]
push 1
lea eax, [ebp - 0x164]
push eax
push ecx
lea ecx, [ebp - 0x164]
call fcn.00415646
mov dword [ebp - 0x154], ebx
mov eax, dword [0x44c2a4]
mov ecx, ebx
push 5
pop ebx
mov dword [ebp - 0x18], eax
mov al, byte [0x44c2a8]
push 3
mov byte [ebp - 4], 4
mov byte [ebp - 0x14], al
pop esi
xor edx, edx
mov eax, ecx
div esi
add dl, 0x36
xor byte [ebp + ecx - 0x18], dl
inc ecx
cmp ecx, ebx
jl 0x41edbe
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0xd4]
call fcn.00408990
push eax
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], bl
call fcn.0040c556
xor ebx, ebx
mov dword [ebp - 0x10c], ebx
push 6
pop eax
push edi
lea ecx, [ebp - 0x104]
mov byte [ebp - 4], al
call fcn.0040c053
mov dword [ebp - 0xf4], ebx
push 7
pop eax
push 2
mov byte [ebp - 4], al
lea ecx, [ebp - 0x11c]
push 1
lea eax, [ebp - 0xec]
push eax
push ecx
lea ecx, [ebp - 0x14c]
call fcn.00415646
mov dword [ebp - 0x13c], ebx
mov esi, str.DVV_YZVED8
mov byte [ebp - 4], 8
lea edi, [ebp - 0x38]
mov ecx, ebx
push 0xb
pop edx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov al, cl
and al, 3
add al, 0x36
xor byte [ebp + ecx - 0x38], al
inc ecx
cmp ecx, edx
jl 0x41ee4d
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0xec]
call fcn.00408990
push 9
pop ecx
mov byte [ebp - 4], cl
lea ecx, [ebp - 0x90]
push eax
call fcn.0040c556
mov dword [ebp - 0x80], ebx
call dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x800000ff
jns 0x41ee94
dec eax
or eax, 0xffffff00
inc eax
cdq
push edx
push eax
lea eax, [ebp - 0x78]
mov byte [ebp - 0x78], bl
push eax
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x6c], ebx
call fcn.004108e3
add esp, 0xc
mov dword [ebp - 0x68], ebx
push 0xa
pop eax
push 2
mov byte [ebp - 4], al
lea ecx, [ebp - 0x90]
push 1
lea eax, [ebp - 0x60]
push eax
push ecx
lea ecx, [ebp - 0x134]
call fcn.00415646
mov dword [ebp - 0x124], ebx
push 2
push 1
lea eax, [ebp - 0x11c]
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x164]
push eax
push ecx
lea ecx, [ebp - 0x48]
call fcn.00415646
push ebx
push ebx
push 0x20
push 0xffffffffffffffff
lea ecx, [ebp - 0x1c4]
mov byte [ebp - 4], 0x10
push ecx
mov ecx, eax
call fcn.00420516
push dword [ebp - 0x48]
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x13
call fcn.0042029c
mov edi, 0x417c25
mov byte [ebp - 4], 0x14
push edi
push 3
pop eax
push eax
push 0x18
pop esi
push esi
lea eax, [ebp - 0x164]
push eax
call fcn.00443613
push edi
push 2
push esi
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0x15
push eax
call fcn.00443613
lea ecx, [ebp - 0xec]
call fcn.00408850
mov byte [ebp - 4], 0x17
push edi
push 2
push esi
lea eax, [ebp - 0x11c]
push eax
call fcn.00443613
lea ecx, [ebp - 0xd4]
call fcn.00408850
push edi
push 2
push esi
lea eax, [ebp - 0x194]
mov byte [ebp - 4], 0x19
push eax
call fcn.00443613
lea ecx, [ebp - 0x1ac]
mov byte [ebp - 4], 0x1a
call fcn.00408850
cmp byte [0x44c2cb], 0
lea edi, [ebp - 0xbc]
push 5
pop eax
mov ecx, eax
mov esi, 0x44c2b8
rep movsd dword es:[edi], dword [esi]
je 0x41efce
push eax
mov ecx, ebx
pop esi
xor edx, edx
mov eax, ecx
div esi
add dl, 0x36
xor byte [ebp + ecx - 0xbc], dl
inc ecx
cmp ecx, 0x14
jl 0x41efb8
lea eax, [ebp - 0xbc]
push eax
lea ecx, [ebp - 0xa8]
call fcn.00408990
push eax
lea ecx, [ebp - 0x200]
mov byte [ebp - 4], 0x1b
call fcn.00416522
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 0x1d
call fcn.00408850
mov esi, 0x44c2cc
lea edi, [ebp - 0x1c]
push 6
mov ecx, ebx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
pop esi
push 0xb
pop edi
xor edx, edx
mov eax, ecx
div esi
add dl, 0x36
xor byte [ebp + ecx - 0x1c], dl
inc ecx
cmp ecx, edi
jl 0x41f014
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x60]
call fcn.00408990
mov dword [ebp - 0x1fc], eax
cmp byte [0x44c2e3], 0
lea edi, [ebp - 0x28]
mov esi, 0x44c2d8
mov byte [ebp - 4], 0x1e
push 0xc
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
pop esi
je 0x41f06a
push 7
mov ecx, ebx
pop edi
xor edx, edx
mov eax, ecx
div edi
add dl, 0x36
xor byte [ebp + ecx - 0x28], dl
inc ecx
cmp ecx, esi
jl 0x41f058
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x1ac]
call fcn.00408990
mov esi, eax
push dword [ebp - 0x1fc]
lea ecx, [ebp - 0x14c]
call fcn.00408940
push esi
lea ecx, [ebp - 0x134]
call fcn.00408940
lea eax, [ebp - 0x11c]
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x14c]
push eax
push ecx
lea ecx, [ebp - 0x208]
call fcn.00415c30
push fcn.004023d0
push 1
push 0x30
lea eax, [ebp - 0x14c]
mov byte [ebp - 4], 0x22
push eax
call fcn.00443613
lea ecx, [ebp - 0x1ac]
call fcn.00408850
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0x24
call fcn.00408850
mov esi, str.BR_M
lea edi, [ebp - 0x44]
push 0xb
mov ecx, ebx
pop ebx
movsd dword es:[edi], dword [esi]
push 0xa
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
pop esi
xor edx, edx
mov eax, ecx
div esi
add dl, 0x36
xor byte [ebp + ecx - 0x44], dl
inc ecx
cmp ecx, ebx
jl 0x41f0fa
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x104]
call fcn.00408990
mov dword [ebp - 0x20], eax
push 0x462f6c
lea eax, [ebp - 0x1c4]
mov byte [ebp - 4], 0x25
push eax
lea eax, [ebp - 0x17c]
push eax
call fcn.004211c8
add esp, 0xc
mov dword [ebp - 0x18], eax
cmp byte [0x44c309], 0
lea edi, [ebp - 0x7c]
push 6
pop eax
mov ecx, eax
mov byte [ebp - 4], 0x26
mov esi, 0x44c2f0
rep movsd dword es:[edi], dword [esi]
push 0
pop ebx
movsw word es:[edi], word [esi]
je 0x41f179
push 9
mov ecx, ebx
pop esi
xor edx, edx
mov eax, ecx
div esi
add dl, 0x36
xor byte [ebp + ecx - 0x7c], dl
inc ecx
cmp ecx, 0x1a
jl 0x41f166
lea eax, [ebp - 0x7c]
push eax
lea ecx, [ebp - 0x1f4]
call fcn.00408990
mov dword [ebp - 0x1fc], eax
mov esi, 0x44c2e4
mov byte [ebp - 4], 0x27
lea edi, [ebp - 0x34]
mov ecx, ebx
push 9
pop ebx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov al, cl
and al, 7
add al, 0x36
xor byte [ebp + ecx - 0x34], al
inc ecx
cmp ecx, ebx
jl 0x41f1a2
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x1dc]
call fcn.00408990
cmp dword [0x45e014], 0x10
mov ecx, section..data
push dword [0x45e010]
cmovae ecx, dword [section..data]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x28
call fcn.0041eba8
push eax
lea ecx, [ebp - 0xec]
call fcn.00408940
push dword [ebp - 0x1fc]
lea eax, [ebp - 0xec]
mov byte [ebp - 4], 0x29
push eax
push dword [ebp - 0x15]
lea ecx, [ebp - 0xd4]
call fcn.00415821
push dword [ebp - 0x20]
mov ecx, dword [ebp - 0x200]
lea eax, [ebp - 0x208]
push dword [ebp - 0x18]
mov byte [ebp - 4], 0x2a
push eax
lea eax, [ebp - 0xd4]
push eax
lea eax, [ebp - 0x218]
push eax
call fcn.0041a8b7
lea ecx, [ebp - 0xd4]
call fcn.00408850
lea ecx, [ebp - 0xec]
call fcn.00408850
lea ecx, [ebp - 0x1dc]
call fcn.00408850
lea ecx, [ebp - 0x1f4]
call fcn.00408850
lea ecx, [ebp - 0x17c]
call fcn.00408850
lea ecx, [ebp - 0x104]
mov byte [ebp - 4], 0x31
call fcn.00408850
mov eax, dword [ebp - 0x218]
add eax, 0x3c
push 0x462f6c
push eax
lea eax, [ebp - 0x60]
push eax
call fcn.00420086
mov edx, eax
push ecx
mov ecx, esp
mov byte [ebp - 4], 0x32
xor ebx, ebx
push ebx
push 1
sub esp, 0x28
mov eax, esp
push edx
push ecx
mov dword [eax + 0x24], ebx
call fcn.00413091
add esp, 0x38
mov esi, 0x462f88
mov ecx, esi
call fcn.004184a1
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0x31
call fcn.00408850
mov eax, dword [0x44c318]
mov dword [ebp - 0x18], eax
mov ax, word [0x44c31c]
mov word [ebp - 0x14], ax
test ah, ah
je 0x41f2fe
push 0xb
pop edi
xor edx, edx
mov eax, ebx
div edi
push 6
add dl, 0x36
xor byte [ebp + ebx - 0x18], dl
inc ebx
pop eax
cmp ebx, eax
jl 0x41f2e9
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x60]
call fcn.00408990
push eax
mov ecx, esi
call fcn.0041f880
lea ecx, [ebp - 0x60]
mov bl, al
call fcn.00408850
test bl, bl
je 0x41f392
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x1f5]
call fcn.00418b34
mov edi, eax
cmp byte [edi + 5], 0
je 0x41f355
push 0xc
xor esi, esi
pop ecx
xor edx, edx
mov eax, esi
div ecx
push 6
add dl, 0x36
xor byte [esi + edi], dl
inc esi
pop eax
cmp esi, eax
jl 0x41f33c
mov esi, 0x462f88
sub esp, 0x18
mov ecx, esp
push edi
call fcn.00408990
mov ecx, esi
call fcn.00418872
lea ecx, [ebp - 0x60]
push ecx
mov ecx, eax
call fcn.00411ccc
mov byte [ebp - 4], 0x33
push eax
lea ecx, [ebp - 0x9c]
call fcn.00417885
push 0x45b3ac
lea eax, [ebp - 0x9c]
jmp 0x41f484
mov eax, dword [str.EB_Z_HOCYSWULR]
xor esi, esi
cmp byte [0x44c32f], 0
mov ecx, dword [0x44c32c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], ecx
je 0x41f3c6
mov ecx, esi
xor edx, edx
mov eax, ecx
push 0xd
pop edi
div edi
add dl, 0x36
xor byte [ebp + ecx - 0x1c], dl
inc ecx
cmp ecx, 8
jl 0x41f3b0
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x60]
call fcn.00408990
push eax
mov ecx, 0x462f88
call fcn.0041f880
lea ecx, [ebp - 0x60]
mov bl, al
call fcn.00408850
test bl, bl
jne 0x41f42a
lea eax, [ebp - 0xb8]
push eax
lea ecx, [ebp - 0x1f5]
call fcn.00418b4e
mov ecx, eax
cmp byte [ecx + 0xd], bl
je 0x41f418
push 0xe
pop edi
xor edx, edx
mov eax, esi
div edi
add dl, 0x36
xor byte [esi + ecx], dl
inc esi
cmp esi, edi
jl 0x41f407
push ecx
lea ecx, [ebp - 0x60]
call fcn.00408990
mov byte [ebp - 4], 0x34
jmp 0x41f376
lea ecx, [ebp - 0x218]
call fcn.00418297
lea eax, [ebp - 0x208]
push eax
mov ecx, eax
call fcn.0040a0b0
mov ecx, dword [ebp - 0x200]
test ecx, ecx
je 0x41f453
mov eax, dword [ecx]
push 1
call dword [eax]
lea ecx, [ebp - 0x1c4]
call fcn.00408850
call fcn.00443cef
ret
push eax
lea ecx, [ebp - 0x104]
call fcn.00408990
push eax
lea ecx, [ebp - 0x44]
mov dword [ebp - 4], ebx
call fcn.00417885
push 0x45b3ac
lea eax, [ebp - 0x44]
push eax
call sub.VCRUNTIME140.dll__CxxThrowException
int3