Function at 0x10003460
Capabilities:
Encode data using xor

Disassembly:
sub esp, 0xc
mov ecx, dword [esp + 0x18]
xor dword [esp + 0x20], 0x3665
push ebx
push ebp
mov ebp, dword [esp + 0x1c]
lea edx, [ecx + 3]
push esi
mov esi, dword [esp + 0x28]
mov ebx, ecx
push edi
lea edi, [ebp + 6]
mov dword [esp + 0x14], edx
xor ebp, 0x3b
xor ebx, 5
mov eax, ebp
mov dword [esp + 0x24], ebp
xor eax, 0x3d
mov dword [esp + 0x10], ebx
xor ecx, 0x3659
cmp ebx, eax
jl 0x10003650
xor edi, 0x33
mov dword [esi + 0x68], 0xb6db6db7
mov ebp, dword [0x101650f0]
inc edi
xor ecx, 0x366a
mov dword [esp + 0x18], edi
mov dword [esp + 0x28], ecx
xor edi, edi
mov dword [0x1016505c], 0x10006050
nop dword [eax]
nop word [eax + eax]
mov eax, 1
sub eax, dword [ebp + 0x104]
add dword [esi + 0x70], eax
mov eax, 1
mov ecx, dword [0x101650f0]
sub eax, dword [ecx + 0x50]
add dword [ecx + 0x90], eax
mov ecx, dword [0x101650f0]
mov eax, dword [ecx + 0x58]
xor eax, 0x1a861c
sub dword [ecx + 8], eax
mov eax, dword [0x1016505c]
mov ecx, dword [esi + 0xc]
mov edx, dword [eax + edi]
add edi, 4
mov eax, dword [0x10165038]
add eax, 0xff9e1391
add eax, dword [esi + 0x9c]
imul eax, dword [esi + 0x144]
mov dword [esi + 0x144], eax
xor ecx, dword [0x10164fcc]
mov eax, dword [0x101650e8]
add eax, 0xffe90fc5
add eax, ecx
mov dword [0x101650e8], eax
mov eax, dword [0x101650f0]
mov ebx, dword [esi + 0x68]
imul ebx, edx
mov eax, dword [eax + 0x9c]
xor eax, 0x58a6c3
imul eax, dword [esi + 0xc0]
mov edx, ebx
shr edx, 0x10
mov dword [esi + 0xc0], eax
mov eax, dword [0x10165068]
add eax, 0xffffffed
add dword [esi + 0x9c], eax
mov ecx, dword [esi + 0xb8]
mov eax, dword [0x10165014]
mov byte [eax + ecx], dl
mov edx, ebx
inc dword [0x10165014]
mov eax, dword [0x101650f0]
shr edx, 8
mov eax, dword [eax + 0x38]
sub dword [esi + 0x13c], eax
mov eax, dword [0x101650f0]
mov ecx, dword [eax + 0x6c]
mov eax, dword [0x10165060]
mov byte [eax + ecx], dl
mov eax, dword [0x101650f0]
inc dword [eax + 0x6c]
mov eax, dword [0x101650f0]
mov ecx, dword [eax + 0x6c]
mov eax, dword [esi + 0xb8]
mov byte [ecx + eax], bl
mov eax, dword [0x101650f0]
inc dword [eax + 0x6c]
mov eax, dword [0x101650f0]
mov ecx, dword [eax + 0x8c]
mov eax, dword [0x101650c0]
add ecx, dword [0x10165018]
add eax, 0xffeafcf3
add eax, ecx
mov dword [0x101650c0], eax
mov eax, dword [esi + 8]
sub eax, 0x17fc1f
add dword [esi + 0x104], eax
mov ebp, dword [0x101650f0]
mov eax, dword [esi + 0x144]
add eax, 0xfff5da89
add eax, dword [ebp + 0x8c]
or dword [0x101650e8], eax
cmp edi, 0x41c40
jl 0x100034e0
mov edi, dword [esp + 0x18]
mov ebp, dword [esp + 0x24]
mov ebx, dword [esp + 0x10]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x14]
lea eax, [edx + 3]
cmp ebx, eax
jge 0x100037d2
mov eax, dword [0x10164fe8]
lea ecx, [ebx + 0xe]
sub eax, dword [esi + 0x4c]
xor ebp, 0x38
sub eax, 0x69df4fe
mov dword [0x10165010], eax
lea eax, [edi + 1]
push eax
push ecx
push ebp
lea eax, [ebx + 0x11]
push eax
push ecx
push esi
call fcn.10001d40
add esp, 0x18
mov dword [esi + 0xb4], 0x10094ba0
xor edi, edi
mov eax, dword [0x1016505c]
mov ecx, dword [esi + 0x6c]
mov edx, dword [edi + eax]
add edi, 4
mov eax, dword [esi + 0x10]
sub eax, dword [esi + 0x38]
imul edx, dword [esi + 0x68]
dec eax
add dword [esi + 0x118], eax
mov eax, dword [esi + 0xb8]
mov byte [ecx + eax], dl
inc dword [esi + 0x6c]
mov eax, dword [0x101650f0]
mov eax, dword [eax + 0xd8]
xor eax, dword [0x10164fe0]
xor eax, dword [esi + 8]
xor eax, 1
mov dword [esi + 8], eax
mov edx, dword [0x101650f0]
mov eax, dword [0x101650c4]
add eax, 0x1ceccf
xor dword [0x10164fcc], eax
mov eax, dword [edx + 8]
sub eax, dword [0x10165038]
sub eax, 0xeb671
xor dword [0x101650e4], eax
mov eax, dword [0x10165018]
add eax, 0xffda6b7f
add eax, dword [esi + 0xd0]
or dword [edx + 0xfc], eax
mov ecx, dword [0x101650f0]
mov eax, dword [esi + 0x60]
xor eax, 0x1c230f
sub dword [ecx + 0xd0], eax
mov ecx, dword [0x101650f0]
mov eax, dword [esi + 0xf4]
sub eax, dword [esi + 0x140]
add eax, 0x228e9
add dword [ecx + 0x9c], eax
mov eax, dword [0x101650e4]
sub dword [esi + 0x50], eax
mov eax, dword [esi + 0xac]
xor eax, dword [0x10165044]
add eax, 0x2bfc7b2d
or dword [esi + 0xc0], eax
mov eax, dword [0x101650f0]
mov eax, dword [eax + 0x94]
add eax, dword [esi + 0x24]
sub dword [esi + 0x140], eax
mov edx, dword [0x101650f0]
mov eax, dword [0x10165030]
add eax, 0xfff5da8a
mov ecx, dword [edx + 0x8c]
add ecx, dword [edx + 0x24]
add eax, ecx
mov dword [0x10165030], eax
mov eax, 0x14
sub eax, dword [edx + 0xc0]
sub eax, dword [0x101650ec]
add dword [esi + 0x38], eax
mov eax, 5
sub eax, dword [esi + 0x7c]
add dword [esi + 0xc], eax
cmp edi, 0x46770
jl 0x10003693
pop edi
pop esi
pop ebp
lea eax, [ebx - 5]
pop ebx
add esp, 0xc
ret
mov eax, dword [esi + 0x60]
add eax, edx
and eax, dword [0x101650a4]
cmp edi, eax
je 0x10003894
mov eax, dword [esi + 0x54]
and eax, edx
sub eax, dword [esi + 0x70]
cmp dword [esi + 0x11c], eax
jne 0x10003900
mov eax, dword [0x101650f0]
mov ebx, dword [0x101650f0]
mov eax, dword [eax + 0xac]
and eax, dword [esp + 0x30]
imul eax, dword [ebx + 0x58]
push eax
mov eax, ebx
mov eax, dword [eax + 0x90]
sub eax, ecx
push eax
mov eax, edx
and eax, 0x3652
push eax
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
mov ebx, dword [esp + 0x10]
lea eax, [ebp + 0x365c]
and eax, edi
push eax
imul eax, dword [0x10165080], 0x365c
xor eax, ebx
push eax
push 0
call dword [sym.imp.KERNEL32.dll_CreateFiber]
mov eax, ebp
or eax, dword [esp + 0x14]
add eax, dword [0x10165048]
add dword [esi + 0xdc], eax
mov eax, dword [esi + 0xcc]
sub eax, dword [esp + 0x14]
mov ecx, dword [0x101650f0]
pop edi
xor dword [ecx + 0x94], eax
mov eax, dword [0x101650f0]
mov eax, dword [eax + 0x118]
or eax, ebp
add eax, dword [esi + 0x70]
add dword [esi + 0x50], eax
lea eax, [ebx - 5]
pop esi
pop ebp
pop ebx
add esp, 0xc
ret
mov eax, dword [0x101650f0]
mov eax, dword [eax + 0x24]
add eax, 0x3656
cmp edi, eax
jne 0x10003900
nop word [eax + eax]
push 0x31d
push 0x1fb3
push 0x33ce
push 0x20cf
push 0x7e
push 0x2de9
push 0xe8d
push 0xff8
push 0x28d9
push 0x3daf
call section..text
mov dword [0x10165138], eax
add edi, 3
mov eax, dword [0x101650f0]
add esp, 0x28
mov eax, dword [eax + 0x24]
add eax, 0x3656
cmp edi, eax
je 0x100038b0
pop edi
pop esi
pop ebp
lea eax, [ebx - 5]
pop ebx
add esp, 0xc
ret