Function at 0x101ba3a0
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
mov eax, 0x6c
call fcn.10046610
mov eax, dword [0x102cd06c]
xor eax, esp
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x78]
push ebx
mov ebx, dword [esp + 0x88]
push esi
mov esi, dword [esp + 0x78]
push edi
mov edi, dword [esp + 0x98]
push ebx
mov dword [esp + 0x28], eax
mov dword [esp + 0x14], edi
mov dword [esp + 0x24], 1
call fcn.10167db0
add esp, 4
mov dword [esp + 0x14], eax
test eax, eax
js 0x101ba448
call fcn.101bac90
mov dword [esp + 0x1c], eax
test eax, eax
je 0x101ba448
test esi, esi
jne 0x101ba409
mov esi, 0x10266603
xor ecx, ecx
jmp 0x101ba429
mov ecx, dword [esp + 0x80]
cmp ecx, 0xffffffff
jne 0x101ba429
mov ecx, esi
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x101ba420
sub ecx, edx
push 0
push ebx
push ecx
push esi
mov esi, dword [esp + 0x2c]
push esi
call fcn.101baeb0
add esp, 0x14
test eax, eax
jne 0x101ba45c
push esi
call fcn.101bac20
add esp, 4
pop edi
pop esi
xor eax, eax
pop ebx
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.100451cc
add esp, 0x6c
ret
push ebp
call fcn.101bac90
mov ebp, eax
mov dword [esp + 0x34], ebp
test ebp, ebp
jne 0x101ba48a
push esi
call fcn.101bac20
add esp, 4
xor eax, eax
pop ebp
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.100451cc
add esp, 0x6c
ret
mov ecx, dword [esp + 0x98]
test ecx, ecx
je 0x101ba695
mov edx, 1
nop
cmp ecx, dword [esp + 0x18]
mov ebx, ecx
mov eax, edx
mov byte [esp + 0x13], dl
cmovg ebx, dword [esp + 0x18]
shr eax, 0x18
mov byte [esp + 0x10], al
mov eax, edx
shr eax, 0x10
mov byte [esp + 0x11], al
mov eax, edx
shr eax, 8
push esi
push ebp
mov byte [esp + 0x1a], al
call fcn.101bab70
add esp, 8
test eax, eax
je 0x101ba6bc
push dword [esp + 0x8c]
push dword [esp + 0x2c]
push ebp
call fcn.101bb0c0
add esp, 0xc
test eax, eax
je 0x101ba6bc
push 4
lea eax, [esp + 0x14]
push eax
push ebp
call fcn.101bb0c0
add esp, 0xc
test eax, eax
je 0x101ba6bc
push 0
lea eax, [esp + 0x3c]
push eax
push ebp
call fcn.101badc0
add esp, 0xc
test eax, eax
je 0x101ba6bc
push ebp
call fcn.101bacd0
push ebx
lea eax, [esp + 0x40]
push eax
push edi
call fcn.100a57b0
add esp, 0x10
mov dword [esp + 0x1c], 1
cmp dword [esp + 0x90], 1
jle 0x101ba66e
push esi
push ebp
call fcn.101bab70
add esp, 8
test eax, eax
je 0x101ba6bc
push dword [esp + 0x18]
lea eax, [esp + 0x3c]
push eax
push ebp
call fcn.101bb0c0
add esp, 0xc
test eax, eax
je 0x101ba6bc
push 0
lea eax, [esp + 0x3c]
push eax
push ebp
call fcn.101badc0
add esp, 0xc
test eax, eax
je 0x101ba6bc
push ebp
call fcn.101bacd0
add esp, 4
xor esi, esi
test ebx, ebx
jle 0x101ba654
cmp ebx, 0x20
jb 0x101ba62f
lea ecx, [edi - 1]
lea eax, [esp + ebx + 0x37]
add ecx, ebx
cmp edi, eax
ja 0x101ba5c8
lea eax, [esp + 0x38]
cmp ecx, eax
jae 0x101ba62f
mov eax, ebx
and eax, 0x8000001f
jns 0x101ba5d6
dec eax
or eax, 0xffffffe0
inc eax
mov edx, ebx
lea ebp, [esp + 0x48]
sub edx, eax
mov ecx, edi
mov eax, edi
lea edi, [esp + 0x38]
neg eax
add edi, eax
add eax, ebp
mov dword [esp + 0x2c], edi
mov edi, dword [esp + 0x14]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x2c]
mov ebp, dword [esp + 0x30]
movups xmm0, xmmword [ecx]
add esi, 0x20
lea ecx, [ecx + 0x20]
movups xmm1, xmmword [eax + ecx - 0x20]
pxor xmm1, xmm0
movups xmmword [ecx - 0x20], xmm1
movups xmm1, xmmword [ecx + ebp - 0x20]
movups xmm0, xmmword [ecx - 0x10]
pxor xmm1, xmm0
movups xmmword [ecx - 0x10], xmm1
cmp esi, edx
jl 0x101ba600
mov ebp, dword [esp + 0x34]
cmp esi, ebx
jge 0x101ba654
lea eax, [esi + edi]
mov edx, ebx
lea edi, [esp + 0x38]
sub edi, dword [esp + 0x14]
sub edx, esi
mov cl, byte [edi + eax]
lea eax, [eax + 1]
xor byte [eax - 1], cl
sub edx, 1
jne 0x101ba642
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
inc esi
cmp esi, dword [esp + 0x90]
mov dword [esp + 0x1c], esi
mov esi, dword [esp + 0x20]
jl 0x101ba553
mov ecx, dword [esp + 0x98]
add edi, ebx
mov edx, dword [esp + 0x24]
sub ecx, ebx
inc edx
mov dword [esp + 0x98], ecx
mov dword [esp + 0x24], edx
mov dword [esp + 0x14], edi
test ecx, ecx
jne 0x101ba4a0
push ebp
call fcn.101bac20
push esi
call fcn.101bac20
add esp, 8
mov eax, 1
pop ebp
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.100451cc
add esp, 0x6c
ret
push ebp
call fcn.101bac20
push esi
call fcn.101bac20
mov ecx, dword [esp + 0x80]
add esp, 8
xor eax, eax
pop ebp
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.100451cc
add esp, 0x6c
ret