Function at 0x40919c
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ecx, 9
mov edx, str.System_Standby_Failed
mov ebp, esp
push edi
push esi
lea edi, [ebp - 0x13f]
mov esi, 0x42df1d
push ebx
sub esp, 0x15c
rep movsb byte es:[edi], byte [esi]
lea edi, [ebp - 0x12d]
mov esi, str.SdbpGetPathCustomSdb
mov ecx, 0x15
rep movsb byte es:[edi], byte [esi]
mov ecx, 0x9d4
movzx eax, word [edx]
add edx, 2
test ax, ax
je 0x4091fa
add ecx, eax
cmp ecx, 0x1b61
jbe 0x4091d6
call fcn.00410d24
xor dword [0x4295c0], 0x95d2ea20
imul eax, dword [0x4295e8], 0xe65543ac
xor dword [0x4295c0], 0xbb979f22
mov dword [0x4295e8], eax
call fcn.0040fd30
xor eax, eax
mov byte [ebp + eax - 0x118], al
inc eax
cmp eax, 0x100
jne 0x40921a
xor esi, esi
xor ebx, ebx
mov eax, ebx
mov edi, 0x14
xor edx, edx
mov cl, byte [ebp + ebx - 0x118]
div edi
mov byte [ebp - 0x149], cl
movzx eax, byte [ebp + edx - 0x12d]
movzx edx, cl
add eax, edx
add eax, esi
movzx esi, al
mov al, byte [ebp + esi - 0x118]
mov byte [ebp + ebx - 0x118], al
mov eax, dword [0x4295e8]
inc ebx
mov dword [esp + 8], str._RtlpMuiRegLoadLicInformation_failed_with_status__x
mov dword [esp + 0xc], eax
mov dword [esp + 4], str.No_result_associated_with_this_instance_exists.
mov eax, dword [0x4295c0]
mov dword [esp], eax
call fcn.00412a74
mov cl, byte [ebp - 0x149]
imul eax, dword [0x4295e8], 0x7345e49e
mov byte [ebp + esi - 0x118], cl
add eax, 0x6e5383d9
mov dword [0x4295c0], eax
xor eax, 0x16ee7e6
mov dword [0x4295e8], eax
cmp ebx, 0x100
jne 0x40922d
xor eax, eax
cmp word [eax + str.System_Standby_Failed], 0
je 0x409312
add eax, 2
cmp eax, 0x1ffe
jne 0x4092c5
mov dword [esp + 8], str.SdbGetTagDataSize
mov dword [esp + 4], str.System_Standby_Failed
mov dword [esp], str._RtlpMuiRegLoadLicInformation_failed_with_status__x
call fcn.00413cc8
imul eax, dword [0x4295c0], 0xd5ef28e2
mov dword [0x4295c0], eax
mov dword [esp], 0x15b8
call dword [sym.imp.USER32.dll_GetWindowTextLengthW]
push edx
imul eax, dword [0x4295e8], 0x408e91a1
xor edi, edi
xor esi, esi
xor ebx, ebx
xor eax, 0x546711a8
mov dword [0x4295c0], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov eax, dword [0x4295c0]
imul edx, eax, 0x808c06a
imul eax, eax, 0x38582846
mov dword [0x4295e8], edx
add eax, 0x2db37f94
mov dword [0x4295c0], eax
mov dword [esp + 8], str.The_ACPI_subsystem_has_not_been_initialized
mov dword [esp + 4], str.System_Standby_Failed
mov dword [esp], str._RtlpMuiRegLoadLicInformation_failed_with_status__x
call fcn.00413cc8
imul eax, dword [0x4295c0], 0x93d0391
inc ebx
movzx ebx, bl
sub eax, 0x5702318e
mov dword [0x4295c0], eax
call fcn.004108ac
mov al, byte [ebp + ebx - 0x118]
imul ecx, dword [0x4295c0], 0x28f731a4
lea edx, [eax + esi]
movzx esi, dl
xor ecx, 0xba4f3b2d
mov dl, byte [ebp + esi - 0x118]
mov dword [0x4295e8], ecx
mov byte [ebp + ebx - 0x118], dl
mov byte [ebp + esi - 0x118], al
add al, byte [ebp + ebx - 0x118]
movzx eax, al
mov al, byte [ebp + eax - 0x118]
xor al, byte [ebp + edi - 0x13f]
mov byte [ebp + edi - 0x136], al
inc edi
cmp edi, 9
jne 0x40936f
imul ecx, ecx, 0x6fe3d3f2
mov byte [ebp - 0x12d], 0
mov dword [0x4295e8], ecx
or ecx, 0x5ca7e3f2
mov dword [0x4295c0], ecx
mov dword [esp], str.FreeEncryptedFileKeyInfo
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
add dword [0x4295c0], 0x6209a22e
call fcn.004150c4
lea edx, [ebp - 0x136]
imul eax, dword [0x4295c0], 0xe861c0a
mov dword [0x4295e8], eax
and eax, 0x5e771a7d
mov dword [0x4295c0], eax
mov dword [esp + 0xc], 9
mov dword [esp + 8], edx
mov dword [esp + 4], 0x1c80
mov dword [esp], str.0PdLpsuEvzBzGt1puvgWewMQ_6FmSODqFNvVAkRUKsOx6WdBqDEYiLap23JYLcZeR7mWBIs9D6FiHEUuQIaEk_jI3BFbMksGbtn1oP_gBZ7BtPYkqkEkxfZkNWslX0D1fZ4Oq2nmNIAy5b93MNxGgtfgKs6GBXLrLmAmLAhI741Zbl4t2YBO9qAR_dZJtsv7CWbP8dh8cbaAVRAB81hdu78yr81fg5FVu9K3itB672AWMDSczhKJch39AU_EnE4dQO9EiYAXdWkVKtuGZ7_VFV3WQ6DXEgq7tntxXNv5ZbYGI1vpv_lmN4YhZt4gynE4EGGql9dh4LNoBd5BjuFeS5RIifR0sZXQA3NrATWmJgxJsa6XdY5AzTB949OAnvTiw7iC3eS3w6aT7ySmvAbVKzgFGxeZSxWyW0FCvgMMFrE9Q9NRxieoDDMZcRJ4P_m9U9cvVko02965aN4cC3NfEoB5YGFaQs_NdowChjsM8kBrW7u42XGcjSRLckAUkeoB9G8szYiraGXYYRfZCQVP97qb7sv_r9u9q4jfODOOCKjBuKjOZFvPcVWK2kRtmetqOT3AVHj3FmNQN2Xz7wQTyaqo4NYCgb0EvO6aMr6lx52Wi1h49RHWKz2orqaVMi5e4pz9HvEE4wtmmQ3MtVZd1e7KbKrXBzLNd4J0yxBnttz6qufekcSpU42UWQqzHDrVHXR_Qc0dhul6ztxTGrBDUJou1fMhPdLjdhaHRkhtzZUqTpRVlYmbpXSDrqGqIKz6OrX8gU18jolhQA6XgYonLbR1yPuksOsohEPzFAMKCbitpa1XTIX3jjGf6rvu4YV46Ok1a7sS1OZa_HwtqmB4m3xShE1nk0esWG0td8cBNdgVj9lgf2Pl3Kp5hR7fBf21f9FYjHqoVInDTORTsilHhvO6yc0A9jehWLDxOCIViE0EKMw2q7Lh5iGHCiOQz0Lbb29qXy6AmZXObGRK8If8Y2ul1FmgBL0BUlv9URtjlaetPRaAbCHaMlHTLVoo1A3lZqCwnNSHsGVspdXlERlwj5o3SKP77LnP7_PbHf7fBLgZgRmLaPBcUiWrxRsR5e4wg1TmDW2j6Rh_faZUovHzvqaBHbaB6Bv_tTabjc0xfmiWmvjzqfyNo_hqnxt5OXfIsD0Q5LbS6H8xtANE4y6J4bqrEmInXhsTVlXviYjb5SSIuBpEA_cLn7dsPkMs6IkoVbbLPV8_0rCVeFOYrmXI6nciugdcVytXMaLjjFjb5dWJYphx1cDBqYJxfEQeaAJ6eYIk0oWSQ4riejBxWoAwqvkeuE3ZYpRDFZ_Jxn1amSbzZGzVgMzPszyi0HftxgFbZadwZdlvUUWWBMZOrPzEd3pYzjM6kBCl0JAJhJb5pKnhI63uASbuEEzjUzK4CC4_7asXMyBwEfJad1ILewJhPMI4cdU57wVdAMFrlMn8D70Mdcr7UlQeyq7Nn5HiBYGSjyJN5JGcHyj8q56TeZ1u9EtTt51O37v634FMi1DGqvxYpmmiif34GrB7u2gRofwT2u_bEcxxs7L2h674ObRJp1Kl4_367XoDYWAs1soKyZbHkDLUQeC1Tqwxmv81pPMEPe4xvYvE7lBs3hYSttUamsiqmix7lcoaqhpmHSamCxKOtFfT9qq0Mdl6cNh5WsJCcbrLHlHG1AQ167l6Qnpn4fz7zFHo3E6teqAP8otqhYHFDYR4UWReIGJNL8qUKwGDLePCC87eG_tkJJHPX0dEmOBVKJEjmkZZ24lIzCKfDd55awS_Puzzf48ilpnXiKf2fGoKOBLHg41Zo9yoHAWqvCQjCdaqTjOCTfETUbhJ0gSIDBPYVCWHd6Pa60C0S5Acq_TmgmK3RpcIulhYS2QjxzGP4XrDkoQa4CohlSFlW55_62oLgNvJ5mdqiqo2lGKloX3MH03rVLVAeWL9jX62ZtSdWqxru4cbA1k2CLrNTZejJh_TJBbCQkLVdbNGY37ZKyActyyyG2uhX4RZSIWcu0krc89eQU0jJJQ20fb6uKxUAliAgm2cMO_sefZMMJ9wXBRA5v_HiifRISwVjwdHqr5kXiERv_IImAiEM8X31IowyVENL3VPftdEirXLhrmL5_9EreoKsx1X9A1KDuBtDR_Bw1Lc2OeNcwX2M8xxlJ7xXCftxtpIF16M4gFLqvxZNO2AbkTm7SJ9rqQO9UUqZw8j4KQ0QYCABmr7KpQ_zzweMAqszviGs_WwESX0kcdESlHDSXX_vy48R14YFXI9csKLnoBIueS4bMNBgPV2srPE1mnd76l6Z4zjRr18pFKRYBgBtMOKd90Z0RiXLEnJclXh7bCFRMxSZ10rAxx6xdUIeDJ658JBVzf4TzKMjXY3VAAQhi2RSdki9EZ5Dd6CMxhr75mP5UIpxpdfzVC5_f3dinzoHThx1grLX4ykxkRVcZfVz6xNMKqoRckTAmKhBqsTq3hrjnSP_R2SyyAoW17QcTtZH7XJw6KQ3xRmW3JElqcXcF2Pxp9TuypnJcGIBX8oBNg5L9aTqJpZFbl5284VailmdU8CLOKj0nAKIS3AiyTgJ66akcJrJpFihMGel_UcOW0eS62KHOMS6MpEtirMPxd0XMbUYh91U_YCRidcrECQSM18AJrjrVL3GI5CcEAosF56O8oamhXswiXwiLfnjiaMzLmqmtaujZ6nSDm5w8Tn7Wq8LHxPubkh8C0MZjY15rG9qn4Srl9VkzzqhfzHFMmlG8yTII63csrvJIImX0Pn7fSdvqloTeHF4nhbH_3d2UL2sD4WSPij9Tg8FiD2Lv4DTClOjr4CvAj7PUiExDF8vIkSmNYnKrP6_uUtP8fN_9zUb9GhQYwL1wqrGgah0PnH121RmuwHBHTxVaLzFz5HWIreN8jHwLPEsdKeLpAbdfuIHiWcX0rxmoEvkfwLZSBj0UV6Q_0KVcFgW_jPvYUoiiN8SiD4XRnzQ5y6woFtftZ1nj3UE34ZczKQ_Xz33qidolrm50ApP3OZUMDXDrypMW8yq6wONhbomwPJPl9ahmN3WzVw6tGBYwT7q9ChJOrN4NfkoWnD3B9LkvaVtBqiqslX8I_lX6zTIImGmgprZnbdbo_qb7vGUiqXjyQ8Gz8Ai732tBALTda4lfMMUzIUNwl56z5LHyvl0nNUYi5YXhph8IbDW9BviAVzRc9juwXfBHBatZRwnDJdwKxGNZoISEHP9_M1AE1bfzhzbflsDW7DVNu2w5I3IU1oPY04iAlAoC7X3Esuhm_bQ0u6xkdGwABAwzhKKqObNx9RXxmEpBtoptSaw96Tlrhw99dT8vyzr7OhlE_By7V_43jAME1xxwEiP4gMcdmmMsGBdWk1OgKN934QNLdQGE3PKmfhqFvAbJ8iwR8CSwlPrORufIOpvnPiCpC5gW4JZ5hIMpbNJNr6w6WyZY8bP8F2cKkPe4Zg2bIZM9kW_Xid2YAnByUIg0DC7FOTbzIBvFspjzCkwLtVNErFkhli9ZRrU4q15QbGE27nEaS6iW4BENl98arJRNGJwPhF0Pg5U69jyebP5e7BkYjElT9_bUKWISgE2xu5X_PbeXjVVuKWUsknIQ66YMRmxikxxkRQQyBfZIfPr6qbGNjlNWDBey81sIKXqbuh_jMWCiuNu6IVWuio65lIHd0QbBTzgY050Cpr6QDgpssuYKaOkERBwwetFMsEDtdgFeCry_gZOj4tgojbGWdJMFlxNr3mscxZCFZlG_fczLtrAlYI6Y1jVeDAKNVDXyGIs2C6Qu1_8JBNF7bLK3flX13Exk_iCi0Vp51H0VzkJActojYLnZFUgRmisOjPRwsOuk_z9MWCHCu6lXAWUZ7ODsoW07zHYnaSoJ4fnHBr_84ca5d5j_3Z1K9X2lLjijLIRMnOjgjgzzDAvCTVMFDhr__rpvVckxM1Cr_3fsOHcTjrR5AYdmX4BAXcRNPBVxFRLTzko2P8Vla5WwcgN4tQKekglid6O3Ucaot6BcImV3Yx3v9cGHkTboJUvBIvucn9NN5UHTVFFrQBuK
call fcn.0040be04
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret