Function at 0x101a1670
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x8c4
mov eax, dword [0x102230c0]
xor eax, esp
mov dword [esp + 0x8c0], eax
inc dword [0x1046bba4]
push ebx
push esi
push edi
push ecx
mov byte [esp + 0x1b], dl
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test eax, eax
je 0x101a1830
push 0xc
lea ecx, [esp + 0x444]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_K32GetModuleInformation]
test eax, eax
je 0x101a1830
mov eax, dword [esp + 0x440]
mov esi, dword [esp + 0x444]
test eax, eax
je 0x101a1830
test esi, esi
je 0x101a1830
mov edx, dword [ebp + 0xc]
mov ebx, eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x18], esi
lea edi, [edx - 1]
mov dword [esp + 0x24], edi
test edx, edx
je 0x101a172f
or ecx, 0xffffffff
mov dword [esp + 0x20], ebx
lea eax, [edx - 1]
mov dword [esp + 0x18], esi
cmp eax, ecx
cmovb ecx, eax
mov eax, dword [ebp + 8]
add ecx, eax
cmp byte [ecx], 0x3f
je 0x101a172b
mov dword [esp + 0x20], ebx
mov dword [esp + 0x18], esi
cmp ecx, eax
je 0x101a172f
dec ecx
cmp byte [ecx], 0x3f
jne 0x101a1721
sub ecx, eax
jmp 0x101a1732
or ecx, 0xffffffff
xor esi, esi
mov dword [esp + 0x2c], 0
cmp ecx, 0xffffffff
mov eax, edx
cmovne esi, ecx
mov ecx, 1
sub eax, esi
dec eax
cmp eax, ecx
cmova ecx, eax
lea eax, [esp + 0x28]
mov dword [esp + 0x28], ecx
mov eax, dword [eax]
mov dword [esp + 0x1c], ecx
lea ecx, [esp + 0x2c]
cmp eax, dword [ecx]
jne 0x101a1780
push 0x400
lea eax, [esp + 0x44]
push 0
push eax
call fcn.101b7c50
mov edx, dword [ebp + 0xc]
add esp, 0xc
jmp 0x101a1793
mov eax, dword [esp + 0x1c]
lea edi, [esp + 0x40]
mov ecx, 0x100
rep stosd dword es:[edi], eax
mov edi, dword [esp + 0x24]
cmp esi, edi
jae 0x101a17b7
mov ebx, dword [ebp + 8]
nop word [eax + eax]
movzx eax, byte [ebx + esi]
sub edx, esi
dec edx
inc esi
mov dword [esp + eax*4 + 0x40], edx
mov edx, dword [ebp + 0xc]
cmp esi, edi
jb 0x101a17a0
mov ebx, dword [esp + 0x20]
mov eax, dword [esp + 0x18]
lea esi, [esp + 0x40]
sub eax, dword [ebp + 0xc]
lea edi, [esp + 0x4c8]
add eax, ebx
mov ecx, 0x100
mov dword [esp + 0x18], eax
rep movsd dword es:[edi], dword [esi]
cmp ebx, eax
ja 0x101a1830
mov edi, dword [esp + 0x24]
mov ecx, edi
test edi, edi
js 0x101a1802
mov esi, dword [ebp + 8]
lea eax, [ebx + edi]
sub esi, ebx
nop dword [eax]
mov dl, byte [esi + eax]
cmp dl, 0x3f
je 0x101a17fc
cmp byte [eax], dl
jne 0x101a181b
dec eax
sub ecx, 1
jns 0x101a17f0
mov eax, ebx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x8c0]
xor ecx, esp
call fcn.101b5eaa
mov esp, ebp
pop ebp
ret 8
movzx eax, byte [ebx + edi]
add ebx, dword [esp + eax*4 + 0x4c8]
cmp ebx, dword [esp + 0x18]
ja 0x101a1830
mov ecx, edi
jmp 0x101a17e4
cmp byte [esp + 0x17], 0
je 0x101a1c0b
mov ax, word [0x1020e108]
xor ebx, ebx
movq xmm0, qword [str.t__IN_]
mov word [esp + 0x448], ax
mov al, byte [0x1020e10a]
movq qword [esp + 0x440], xmm0
mov byte [esp + 0x44a], al
nop dword [eax + eax]
mov eax, 0x29e4129f
mov cl, bl
mul ebx
mov eax, ebx
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul eax, eax, 0x37
sub cl, al
add cl, 0x39
xor byte [esp + ebx + 0x440], cl
inc ebx
cmp ebx, 0xb
jl 0x101a1870
mov edx, dword [0x1046bba4]
lea ecx, [esp + 0x4b0]
call fcn.10003e40
movups xmm0, xmmword [0x10214344]
mov cl, byte [0x1021435c]
xor ebx, ebx
cmp dword [0x10241d90], 2
mov esi, eax
movups xmmword [esp + 0x44c], xmm0
mov byte [esp + 0x464], cl
movq xmm0, qword [0x10214354]
movq qword [esp + 0x45c], xmm0
jl 0x101a1a20
movaps xmm0, xmmword [0x10215c70]
lea edx, [esp + 0x450]
movaps xmm4, xmmword [0x10215ab0]
movaps xmm3, xmmword [0x10215c20]
movaps xmm5, xmmword [0x10215b60]
movaps xmmword [esp + 0x30], xmm0
mov ecx, dword [esp + 0x30]
nop dword [eax + eax]
movd xmm0, ebx
lea eax, [ebx + 4]
pshufd xmm2, xmm0, 0
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
andps xmm1, xmmword [0x10215c00]
packuswb xmm1, xmm1
movd xmm0, ecx
paddb xmm1, xmm0
movd xmm0, dword [esp + ebx + 0x44c]
xorps xmm1, xmm0
movd xmm0, eax
pshufd xmm2, xmm0, 0
movd dword [esp + ebx + 0x44c], xmm1
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
andps xmm1, xmmword [0x10215c00]
packuswb xmm1, xmm1
movd xmm0, ecx
paddb xmm1, xmm0
movd xmm0, dword [ebx + edx]
xorps xmm1, xmm0
movd dword [ebx + edx], xmm1
add ebx, 8
cmp ebx, 0x18
jl 0x101a1920
cmp ebx, 0x19
jge 0x101a1a4a
mov eax, 0x94f2095
mov cl, bl
imul ebx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
movsx eax, al
imul eax, eax, 0x37
sub cl, al
add cl, 0x39
xor byte [esp + ebx + 0x44c], cl
inc ebx
cmp ebx, 0x19
jl 0x101a1a20
xorps xmm0, xmm0
mov dword [esp + 0x4a8], 0
lea ecx, [esp + 0x44c]
mov dword [esp + 0x4ac], 0
movups xmmword [esp + 0x498], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x101a1a75
sub ecx, edx
lea eax, [esp + 0x44c]
push ecx
push eax
lea ecx, [esp + 0x4a0]
call fcn.10027e30
push esi
lea eax, [esp + 0x49c]
push eax
push dword [esp + 0x24]
lea ecx, [esp + 0x474]
call fcn.10029e20
mov ecx, dword [esp + 0x478]
mov edx, dword [esp + 0x47c]
cmp ecx, edx
jae 0x101a1ae2
lea eax, [ecx + 1]
cmp edx, 0xf
mov dword [esp + 0x478], eax
lea eax, [esp + 0x468]
cmova eax, dword [esp + 0x468]
mov word [eax + ecx], 0x21
jmp 0x101a1af6
push 0x21
push dword [esp + 0x20]
lea ecx, [esp + 0x470]
push 1
call fcn.10028910
movups xmm1, xmmword [esp + 0x468]
lea ecx, [esp + 0x480]
movq xmm0, qword [esp + 0x478]
movd eax, xmm1
movq qword [esp + 0x490], xmm0
cmp dword [esp + 0x494], 0xf
push 0x30
cmova ecx, eax
lea eax, [esp + 0x444]
push eax
push ecx
push 0
movups xmmword [esp + 0x490], xmm1
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, dword [esp + 0x494]
cmp ecx, 0xf
jbe 0x101a1b7d
mov edx, dword [esp + 0x480]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x101a1b73
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x101a1c24
push ecx
push edx
call fcn.101b61a3
add esp, 8
mov ecx, dword [esp + 0x4ac]
mov dword [esp + 0x490], 0
mov dword [esp + 0x494], 0xf
mov byte [esp + 0x480], 0
cmp ecx, 0xf
jbe 0x101a1bd3
mov edx, dword [esp + 0x498]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x101a1bc9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x101a1c24
push ecx
push edx
call fcn.101b61a3
add esp, 8
mov ecx, dword [esp + 0x4c4]
cmp ecx, 0xf
jbe 0x101a1c0b
mov edx, dword [esp + 0x4b0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x101a1c01
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x101a1c24
push ecx
push edx
call fcn.101b61a3
add esp, 8
mov ecx, dword [esp + 0x8cc]
xor eax, eax
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.101b5eaa
mov esp, ebp
pop ebp
ret 8
call fcn.101bb2d6
int3