Function at 0x10001150
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x180
mov esi, esp
mov dword [esi + 0x168], ebp
mov dword [esi + 0x16c], esp
mov dword [esi + 0x178], 0xffffffff
lea eax, [esi + 0x170]
mov dword [esi + 0x174], 0x100115e0
mov ecx, dword fs:[0]
mov dword [esi + 0x170], ecx
mov dword fs:[0], eax
call fcn.10009e91
cmp eax, 0
je 0x10001b5c
call fcn.10009eba
mov dword [esi + 0x28], 0
lea edx, [esi + 0x28]
add edx, 4
mov dword [esi + 0x2c], 0
lea ecx, [esi + 0x28]
add ecx, 8
mov dword [esi + 0x30], 0
cmp eax, 0
je 0x10001b5c
mov dword [esi + 0x3c], edx
mov dword [esi + 0x88], ecx
mov dword [esi + 0x178], 1
mov dword [esp], 3
call fcn.10011da0
mov ebx, eax
jmp 0x100011fa
call fcn.10009ef7
cmp eax, 0
je 0x10001b76
call fcn.10009f5d
xorps xmm0, xmm0
movsd qword [esi + 0x50], xmm0
xorps xmm0, xmm0
movaps xmmword [esi + 0x40], xmm0
cmp eax, 0
jne 0x10001b76
call fcn.10009f7e
cmp eax, 0
je 0x10001b8a
call fcn.10009fb0
mov edi, eax
mov dword [esp], ebx
call fcn.1001b150
cmp eax, 0
setl cl
cmp edi, 0
jne 0x10001b8a
test cl, 1
jne 0x10001258
jmp 0x10001269
mov dword [esi + 0x178], 1
call fcn.10001fd0
jmp 0x10001269
cmp eax, 0x10
mov dword [esi + 0x24], ebx
mov dword [esi + 0x20], eax
jae 0x10001301
lea edi, [esi + 0x40]
add edi, 0x10
call fcn.10009fd6
mov ecx, dword [esi + 0x20]
cmp eax, 0
jne 0x10001b8f
call fcn.10009ffc
mov ecx, dword [esi + 0x20]
mov dword [edi], ecx
lea ebx, [esi + 0x40]
add ebx, 0x14
cmp eax, 0
je 0x10001b8f
call fcn.1000a02e
cmp eax, 0
mov dword [esi + 0x78], ebx
je 0x10001b96
call fcn.1000a070
mov dword [esi + 0x74], eax
mov dword [ebx], 0xf
lea eax, [esi + 0x40]
mov dword [esp], eax
mov eax, dword [esi + 0x24]
mov dword [esp + 4], eax
mov ebx, dword [esi + 0x20]
mov dword [esp + 8], ebx
call fcn.10017250
lea edi, [esi + 0x40]
add edi, ebx
mov ebx, dword [esi + 0x78]
cmp dword [esi + 0x74], 0
je 0x10001b96
mov dword [esi + 0x178], 2
jmp 0x100013d8
or eax, 0xf
mov ecx, eax
sub ecx, 0x17
mov edi, 0x16
cmovae edi, eax
cmp eax, 0xffe
mov dword [esi + 0x7c], edi
jbe 0x10001391
call fcn.1000a093
cmp eax, 0
jne 0x10001bba
call fcn.1000a0b9
mov ecx, edi
sub ecx, 0x507a3079
add ecx, 0x24
add ecx, 0x507a3079
cmp eax, 0
jne 0x10001bba
mov dword [esi + 0x178], 1
mov dword [esp], ecx
call fcn.1001355a
mov dword [esi + 0x34], eax
jmp 0x1000135f
mov ebx, dword [esi + 0x34]
add ebx, 0x23
call fcn.1000a0dc
cmp eax, 0
je 0x10001bbf
call fcn.1000a0fd
mov edi, ebx
and edi, 0xffffffe0
mov ecx, dword [esi + 0x34]
mov dword [edi - 4], ecx
cmp eax, 0
je 0x10001bbf
mov ecx, dword [esi + 0x24]
jmp 0x100013ad
mov eax, edi
inc eax
mov dword [esi + 0x178], 1
mov dword [esp], eax
call fcn.1001355a
mov ecx, dword [esi + 0x24]
mov edi, eax
jmp 0x100013ad
mov dword [esi + 0x40], edi
mov ebx, dword [esi + 0x20]
mov dword [esi + 0x50], ebx
mov eax, dword [esi + 0x7c]
mov dword [esi + 0x54], eax
mov dword [esp], edi
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.10017250
add edi, ebx
mov dword [esi + 0x178], 2
mov byte [edi], 0
call section..text
jmp 0x100013e2
call fcn.1000a13d
cmp eax, 0
jne 0x10001bd9
jmp 0x100013f2
call fcn.10006630
lea ecx, [esi + 0x40]
add ecx, 0x14
mov ebx, dword [esi + 0x54]
cmp eax, 0
jne 0x100013f2
mov dword [esi + 0x84], ecx
call fcn.1000a169
cmp eax, 0
jne 0x10001bde
call fcn.1000a188
cmp ebx, 0xf
seta cl
mov edi, dword [esi + 0x40]
cmp eax, 0
jne 0x10001bde
mov bl, cl
call fcn.1000a1b3
cmp eax, 0
jne 0x10001be3
call fcn.10006630
lea ecx, [esi + 0x40]
test bl, 1
cmovne ecx, edi
cmp eax, 0
jne 0x10001be3
mov dword [esi + 0x178], 2
mov dword [esp], ecx
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0x40
mov dword [esp + 4], 0x20
lea ecx, [esi + 0xb0]
call fcn.10007420
sub esp, 0x10
jmp 0x1000148c
cmp dword [esi + 0x10c], 0
je 0x10001987
call fcn.10006630
cmp eax, 0
jne 0x10001be8
jmp 0x100014a9
call fcn.10006630
mov ecx, dword [esi + 0xb0]
mov ecx, dword [ecx + 4]
cmp eax, 0
jne 0x100014a9
mov eax, dword [esi + ecx + 0xe8]
test eax, eax
mov dword [esi + 0x94], 0
mov byte [esi + 0x98], 1
mov byte [esi + 0x99], 0
mov dword [esi + 0x8c], eax
sete byte [esi + 0x90]
mov byte [esi + 0x91], 0
mov dword [esi + 0x178], 3
movsd xmm0, qword [esi + 0x94]
movsd qword [esp + 8], xmm0
movsd xmm0, qword [esi + 0x8c]
movsd qword [esp], xmm0
lea ecx, [esi + 0x28]
call fcn.10002360
sub esp, 0x10
jmp 0x10001523
lea ecx, [esi + 0xc0]
call fcn.100036f0
jmp 0x10001530
cmp eax, 0
mov ebx, dword [esi + 0x3c]
jne 0x1000162b
mov eax, dword [esi + 0xb0]
mov ecx, dword [eax + 4]
mov eax, dword [esi + ecx + 0xbc]
xor edx, edx
mov edi, 4
cmp dword [esi + ecx + 0xe8], 0
cmove edx, edi
and eax, 0x15
mov edi, edx
and edi, eax
xor edi, 0xffffffff
add eax, edx
add eax, 1
add eax, edi
mov edx, eax
and edx, 2
xor edx, 0xffffffff
add eax, 2
add eax, 1
add eax, edx
mov dword [esi + ecx + 0xbc], eax
mov edx, dword [esi + ecx + 0xc0]
mov ecx, edx
and ecx, eax
cmp ecx, 0
je 0x1000162b
mov eax, ecx
not eax
or eax, 4
add ecx, eax
test dl, 2
mov eax, str.ios_base::eofbit_set
mov edx, str.ios_base::failbit_set
cmove edx, eax
sub ecx, 0xffffffff
mov eax, str.ios_base::badbit_set
cmove eax, edx
mov dword [esp + 8], eax
mov dword [esp + 4], 0x1002c714
mov dword [esp], 1
lea ecx, [esi + 0x9c]
call fcn.100089e0
sub esp, 0xc
jmp 0x100015e1
call fcn.1000a1d1
cmp eax, 0
je 0x10001bed
call fcn.1000a1fe
lea ecx, vtable.std::ios_base::failure.0
mov dword [esi + 0x9c], ecx
cmp eax, 0
je 0x10001bed
mov dword [esi + 0x178], 3
lea eax, [esi + 0x9c]
mov dword [esp], eax
mov dword [esp + 4], 0x10034a78
call fcn.100152ef
jmp 0x1000162b
mov eax, dword [esi + 0x28]
mov dword [esi + 0x1c], eax
mov edi, dword [ebx]
call fcn.10009e62
cmp eax, 0
je 0x10001bfe
mov ebx, dword [esi + 0x1c]
jmp 0x10001646
call fcn.1000a22d
cmp ebx, edi
sete cl
cmp eax, 0
je 0x10001646
test cl, 1
je 0x10001661
mov edi, ebx
jmp 0x100018c7
call fcn.1000a256
cmp eax, 0
jne 0x10001c03
jmp 0x10001671
call fcn.1000a28e
cmp eax, 0
je 0x10001671
call fcn.10009e62
cmp eax, 0
je 0x10001c08
call fcn.1000a2be
mov ecx, edi
add ecx, 0x5f44bc0f
sub ecx, ebx
sub ecx, 0x5f44bc0f
cmp eax, 0
je 0x10001c08
mov dword [esi + 0x18], ecx
call fcn.10006630
cmp eax, 0
jne 0x10001c0d
jmp 0x100016ba
call fcn.1000a2e3
cmp dword [esi + 0x18], 8
setb cl
cmp eax, 0
je 0x100016ba
test cl, 1
je 0x100016d5
jmp 0x100017d2
mov dword [esi + 0x38], 0
cmp dword [esi + 0x18], 0x20
jb 0x100017d7
mov ebx, dword [esi + 0x18]
and ebx, 0xffffffe0
xor eax, eax
mov ecx, dword [esi + 0x1c]
movups xmm0, xmmword [ecx + eax]
movups xmm1, xmmword [ecx + eax + 0x10]
movaps xmm2, xmm0
psrlw xmm2, 5
movaps xmm3, xmmword [section..rdata]
movaps xmm4, xmm3
pandn xmm4, xmm2
psllw xmm0, 3
pand xmm0, xmm3
por xmm0, xmm4
movaps xmm2, xmm1
psrlw xmm2, 5
movaps xmm4, xmm3
pandn xmm4, xmm2
psllw xmm1, 3
pand xmm1, xmm3
por xmm1, xmm4
movaps xmm2, xmmword [0x1002c010]
paddb xmm0, xmm2
movaps xmm3, xmm1
pand xmm3, xmm2
paddb xmm3, xmm3
pxor xmm1, xmm2
paddb xmm1, xmm3
movdqu xmmword [ecx + eax], xmm0
movdqu xmmword [ecx + eax + 0x10], xmm1
add eax, 0x20
cmp eax, ebx
jne 0x100016f1
call fcn.1000a30c
cmp eax, 0
je 0x10001c12
jmp 0x10001779
call fcn.1000a353
cmp dword [esi + 0x18], ebx
sete cl
cmp eax, 0
je 0x10001779
mov dword [esi + 0x38], ebx
test cl, 1
jne 0x100018a0
jmp 0x10001797
mov ebx, dword [esi + 0x1c]
add ebx, dword [esi + 0x38]
call fcn.1000a37a
cmp eax, 0
je 0x10001c17
call fcn.1000a3a6
mov ecx, dword [esi + 0x18]
xor ecx, 0xffffffff
or ecx, 0xffffffe7
xor ecx, 0xffffffff
cmp ecx, 0
sete cl
cmp eax, 0
jne 0x10001c17
test cl, 1
jne 0x100017d2
jmp 0x100017d7
jmp 0x1000191e
mov dword [esi + 0x80], edi
call fcn.1000a3cf
cmp eax, 0
jne 0x10001c1c
jmp 0x100017ed
call fcn.10006630
mov edi, dword [esi + 0x18]
xor edi, 0xffffffff
or edi, 7
xor edi, 0xffffffff
mov ebx, dword [esi + 0x1c]
add ebx, edi
cmp eax, 0
jne 0x100017ed
mov eax, dword [esi + 0x1c]
mov ecx, dword [esi + 0x38]
jmp 0x10001810
movsd xmm0, qword [eax + ecx]
movaps xmm1, xmm0
psrlw xmm1, 5
movaps xmm2, xmmword [str._a_a_a_a_a_a_a_a_a_a_a_a_a_a_a_a]
pand xmm1, xmm2
psllw xmm0, 3
movaps xmm2, xmmword [section..rdata]
pand xmm0, xmm2
por xmm0, xmm1
movaps xmm1, xmmword [0x1002c030]
movaps xmm2, xmm0
pand xmm2, xmm1
paddb xmm2, xmm2
pxor xmm0, xmm1
paddb xmm0, xmm2
movlpd qword [eax + ecx], xmm0
add ecx, 0x99609daf
add ecx, 8
sub ecx, 0x99609daf
cmp ecx, edi
jne 0x10001810
call fcn.1000a3f5
cmp eax, 0
jne 0x10001c21
jmp 0x1000187e
call fcn.1000a41c
cmp dword [esi + 0x18], edi
sete cl
cmp eax, 0
jne 0x1000187e
test cl, 1
mov edi, dword [esi + 0x80]
jne 0x100018a0
jmp 0x100017d2
jmp 0x100018a0
call fcn.1000a443
cmp eax, 0
mov ebx, dword [esi + 0x3c]
jne 0x10001c26
call fcn.1000a477
mov edi, dword [ebx]
cmp eax, 0
je 0x10001c26
mov eax, dword [esi + 0x28]
mov dword [esi + 0x1c], eax
call fcn.10006630
cmp eax, 0
jne 0x10001c2b
call fcn.1000a4ce
mov ecx, dword [0x10038b04]
xor ebx, ebx
sub ebx, dword [esi + 0x1c]
mov edx, edi
add edx, ebx
cmp eax, 0
je 0x10001c2b
mov dword [esi + 0x178], 3
mov dword [esp + 4], edx
mov dword [esp + 0xc], 0x40
mov dword [esp + 8], 0x3000
mov dword [esp], 0
call ecx
sub esp, 0x10
jmp 0x1000193c
mov cl, byte [ebx]
rol cl, 3
xor eax, eax
sub al, cl
add al, 5
xor ecx, ecx
sub cl, al
mov byte [ebx], cl
add ebx, 1
cmp ebx, edi
je 0x1000189e
jmp 0x1000191e
cmp eax, 0
je 0x10001987
mov edx, eax
mov dword [esi + 0x64], edx
mov eax, dword [esi + 0x28]
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx]
sub ecx, eax
mov dword [esp + 8], ecx
mov dword [esp + 4], eax
mov dword [esp], edx
call fcn.10017250
call dword [esi + 0x64]
mov ecx, dword [esi + 0x64]
jmp 0x10001968
mov eax, dword [0x10038b08]
mov dword [esp], ecx
mov dword [esp + 8], 0x8000
mov dword [esp + 4], 0
call eax
sub esp, 0xc
jmp 0x10001987
lea ebx, [esi + 0xb0]
add ebx, 0x70
mov eax, dword [esi + 0xb0]
mov eax, dword [eax + 4]
lea ecx, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov dword [esi + eax + 0xb0], ecx
mov eax, dword [esi + 0xb0]
mov dword [esi + 0x68], eax
call fcn.1000a502
cmp eax, 0
jne 0x10001c30
call fcn.1000a52e
mov edi, eax
mov eax, dword [esi + 0x68]
mov eax, dword [eax + 4]
mov ecx, eax
add ecx, 0xffffff90
mov dword [esi + eax + 0xac], ecx
lea ecx, [esi + 0xb0]
add ecx, 0x10
call fcn.10003400
lea eax, vtable.std::ios_base.0
mov dword [ebx], eax
cmp edi, 0
je 0x10001c30
mov dword [esi + 0x178], 0
mov dword [esp], ebx
call fcn.10013b70
jmp 0x10001a09
mov eax, dword [esi + 0x84]
mov edi, dword [eax]
cmp edi, 0xf
jbe 0x10001ad7
mov eax, dword [esi + 0x40]
mov dword [esi + 0x6c], eax
mov ebx, edi
add ebx, 1
call fcn.1000a571
cmp eax, 0
jne 0x10001c5d
call fcn.1000a59b
cmp ebx, 0xfff
seta cl
cmp eax, 0
jne 0x10001c5d
test cl, 1
jne 0x10001a54
mov eax, dword [esi + 0x6c]
jmp 0x10001acb
mov ebx, dword [esi + 0x6c]
mov eax, dword [ebx - 4]
mov dword [esi + 0x70], eax
call fcn.1000a5be
cmp eax, 0
jne 0x10001c62
call fcn.1000a609
mov ecx, ebx
add ecx, 0xfffffffc
cmp eax, 0
je 0x10001c62
sub ecx, dword [esi + 0x70]
cmp ecx, 0x20
jb 0x10001a9e
call fcn.1000a65e
cmp eax, 0
jne 0x10001c67
call fcn.1000a67c
call fcn.100197a6
mov eax, edi
and eax, 0x24
shl eax, 1
xor edi, 0x24
mov ebx, edi
add ebx, eax
call fcn.1000a6a0
cmp eax, 0
je 0x10001c6c
jmp 0x10001abc
call fcn.1000a6cb
cmp eax, 0
jne 0x10001abc
mov eax, dword [esi + 0x70]
jmp 0x10001acb
mov dword [esp], eax
mov dword [esp + 4], ebx
call fcn.1001358a
mov eax, dword [esi + 0x28]
cmp eax, 0
je 0x10001b48
mov ecx, dword [esi + 0x88]
mov edi, dword [ecx]
add edi, 0xb126135
sub edi, eax
sub edi, 0xb126135
cmp edi, 0xfff
ja 0x10001b01
mov ebx, eax
jmp 0x10001b3c
mov ebx, dword [eax - 4]
add eax, 0xfffffffc
add eax, 0x1dda4a06
sub eax, ebx
sub eax, 0x1dda4a06
cmp eax, 0x20
jb 0x10001b1d
call fcn.100197a6
sub edi, 0xffffffdd
call fcn.1000a6ea
cmp eax, 0
je 0x10001c71
jmp 0x10001b30
call fcn.1000a725
cmp eax, 0
jne 0x10001b30
jmp 0x10001b3c
mov dword [esp], ebx
mov dword [esp + 4], edi
call fcn.1001358a
mov eax, dword [esi + 0x170]
mov dword fs:[0], eax
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [esi + 0x28], 0
mov dword [esi + 0x2c], 0
mov dword [esi + 0x30], 0
jmp 0x100011a8
xorps xmm0, xmm0
movsd qword [esi + 0x50], xmm0
xorps xmm0, xmm0
movaps xmmword [esi + 0x40], xmm0
jmp 0x10001208
jmp 0x10001233
mov dword [edi], ecx
jmp 0x1000128f
mov dword [ebx], 0xf
lea eax, [esi + 0x40]
mov dword [esp], eax
mov eax, dword [esi + 0x24]
mov dword [esp + 4], eax
mov eax, dword [esi + 0x20]
mov dword [esp + 8], eax
call fcn.10017250
jmp 0x100012b9
jmp 0x10001329
mov eax, ebx
xor eax, 0xffffffe0
xor eax, 0xffffffff
mov ecx, ebx
or ecx, 0xffffffe0
and ecx, eax
mov eax, dword [esi + 0x34]
mov dword [ecx - 4], eax
jmp 0x10001373
jmp 0x100013f0
jmp 0x10001419
jmp 0x10001440
jmp 0x100014a7
lea eax, vtable.std::ios_base::failure.0
mov dword [esi + 0x9c], eax
jmp 0x100015ef
jmp 0x10001641
jmp 0x1000166f
jmp 0x10001689
jmp 0x100016b8
jmp 0x10001777
jmp 0x100017ab
jmp 0x100017eb
jmp 0x1000187c
jmp 0x100018b1
jmp 0x100018d5
mov eax, dword [esi + 0x68]
mov eax, dword [eax + 4]
mov ecx, eax
sub ecx, 0x70
mov dword [esi + eax + 0xac], ecx
lea ecx, [esi + 0xb0]
add ecx, 0x10
call fcn.10003400
lea eax, vtable.std::ios_base.0
mov dword [ebx], eax
jmp 0x100019bd
jmp 0x10001a33
jmp 0x10001a6b
call fcn.100197a6
jmp 0x10001aba
jmp 0x10001b2e