Function at 0x1000b43d
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x178
mov eax, dword [ebp + 8]
xor ecx, ecx
mov dword [0x101d5344], 0x11bb
mov edx, ecx
mov dword [ebp - 0x130], eax
mov dword [ebp - 0x134], edx
mov dword [ebp - 0x138], ecx
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
lea edx, section..data
mov esi, eax
add esi, 1
imul edi, eax, 0xd8
mov ebx, edx
add ebx, edi
add ebx, 0x18
imul eax, eax, 0xd8
add edx, eax
add edx, 0xc0
mov eax, dword [edx]
movzx edx, word [ebx]
xor edx, eax
add edx, ecx
cmp esi, 0x192
mov eax, edx
mov dword [ebp - 0x134], eax
mov dword [ebp - 0x13c], edx
mov dword [ebp - 0x138], esi
jne 0x1000b46c
lea eax, [0x101bf667]
mov ecx, 0xe
lea edx, [ebp - 0x2c]
mov dword [0x101d5344], 0xfffff0ef
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], 0xe
mov dword [ebp - 0x140], edx
mov dword [ebp - 0x144], ecx
call fcn.1000bb62
mov eax, dword [0x101d5344]
add eax, 0xffffdb0c
mov dword [0x101d5348], eax
mov dword [0x101d5344], 0x1b9e
call fcn.1000ba0b
mov dword [esp], eax
mov eax, dword [ebp - 0x140]
mov dword [esp + 4], eax
call fcn.1000b0a3
mov ecx, eax
mov dword [0x101d5364], eax
mov eax, esp
mov edx, dword [ebp - 0x13c]
mov dword [eax + 4], edx
mov dword [eax + 0xc], 4
mov dword [eax + 8], 0x1000
mov dword [eax], 0
call ecx
sub esp, 0x10
xor ecx, ecx
mov edx, dword [0x101d5344]
add edx, 0xffffec8a
mov dword [0x101d5344], edx
mov edx, ecx
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x14c], edx
mov dword [ebp - 0x150], ecx
mov eax, dword [ebp - 0x150]
mov ecx, dword [ebp - 0x14c]
lea edx, section..data
imul esi, eax, 0xd8
mov edi, edx
add edi, esi
mov esi, dword [ebp - 0x148]
add esi, ecx
mov ebx, eax
add ebx, 1
mov dword [ebp - 0x154], eax
imul eax, eax, 0xd8
mov dword [ebp - 0x158], eax
mov eax, edx
mov dword [ebp - 0x15c], ecx
mov ecx, dword [ebp - 0x158]
add eax, ecx
add eax, 0xc0
mov ecx, dword [ebp - 0x154]
imul ecx, ecx, 0xd8
add edx, ecx
add edx, 0x18
mov eax, dword [eax]
mov ecx, dword [edi]
movzx edx, word [edx]
xor edx, eax
mov dword [esp], esi
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [ebp - 0x160], edx
mov dword [ebp - 0x164], ebx
call fcn.1000c128
mov eax, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x15c]
add eax, ecx
mov edx, dword [ebp - 0x164]
cmp edx, 0x192
mov dword [ebp - 0x150], edx
mov dword [ebp - 0x14c], eax
jne 0x1000b584
lea eax, [0x101bf675]
mov ecx, 0x20
lea edx, [ebp - 0x12c]
mov esi, dword [ebp - 0x148]
add esi, 0x47cec
mov edi, dword [ebp - 0x148]
add edi, 0x5a4f3
mov dword [0x101d5348], 0xda2
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x20
mov dword [ebp - 0x168], edi
mov dword [ebp - 0x16c], ecx
mov dword [ebp - 0x170], edx
mov dword [ebp - 0x174], esi
call fcn.1000be1a
mov eax, dword [ebp - 0x170]
mov dword [esp], eax
mov ecx, dword [ebp - 0x148]
mov dword [esp + 4], ecx
mov dword [esp + 8], ecx
mov edx, dword [ebp - 0x13c]
mov dword [esp + 0xc], edx
call fcn.1000c363
xor eax, eax
mov ecx, dword [ebp - 0x130]
mov edx, dword [ebp - 0x168]
mov dword [ecx], edx
mov dword [ecx + 4], 0x150000
mov edx, dword [ebp - 0x174]
mov dword [ecx + 8], edx
mov dword [ecx + 0xc], 0x2090
mov dword [0x101d5348], 0x1223
add esp, 0x178
pop esi
pop edi
pop ebx
pop ebp
ret