Function at 0x100b65c0
Capabilities:
Encode data using xor

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x101b0b00
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0xa8
mov eax, dword [0x10249010]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x9c], ecx
lea eax, [ebx + 8]
mov dword [ebp - 4], 0
push eax
lea ecx, [ebp - 0x90]
call fcn.100180b0
mov edx, dword [ebp - 0x7c]
lea edi, [ebp - 0x90]
mov ecx, dword [ebp - 0x90]
cmp edx, 0x10
cmovae edi, ecx
mov esi, edi
lea eax, [esi + 1]
mov dword [ebp - 0x94], eax
nop dword [eax]
mov al, byte [esi]
inc esi
test al, al
jne 0x100b6640
sub esi, dword [ebp - 0x94]
lea eax, [esi + 1]
mov esi, 0x4fa38bcd
mov dword [ebp - 0x94], eax
test eax, eax
je 0x100b6ac8
mov edx, eax
movsx eax, byte [edi]
lea edi, [edi + 1]
xor eax, esi
imul esi, eax, 0xf1546419
sub edx, 1
jne 0x100b6665
mov edx, dword [ebp - 0x7c]
cmp esi, 0x6e8d5702
ja 0x100b6820
je 0x100b67e8
cmp esi, 0x41c21606
ja 0x100b67cc
je 0x100b6941
cmp esi, 0x2b2123ec
ja 0x100b6788
je 0x100b6750
cmp esi, 0xfdc3d83
je 0x100b6718
cmp esi, 0x1e54485f
jne 0x100b6ac8
cmp edx, 0x10
jb 0x100b66f3
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100b66e9
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100b6ae8
push edx
push ecx
call fcn.101519a9
add esp, 8
mov dword [ebp - 0xa4], 8
lea ecx, [ebp - 0xa4]
mov dword [ebp - 0xa0], 0x27
lea eax, [ebp - 0x9c]
jmp 0x100b69f7
cmp edx, 0x10
jb 0x100b6746
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100b673c
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100b6ae8
push edx
push ecx
call fcn.101519a9
add esp, 8
mov edx, 9
jmp 0x100b6a90
cmp edx, 0x10
jb 0x100b677e
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100b6774
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100b6ae8
push edx
push ecx
call fcn.101519a9
add esp, 8
mov edx, 2
jmp 0x100b6a90
cmp esi, 0x32db11da
jne 0x100b6ac8
cmp edx, 0x10
jb 0x100b67c2
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100b67b8
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100b6ae8
push edx
push ecx
call fcn.101519a9
add esp, 8
mov edx, 0x24
jmp 0x100b6a90
cmp esi, 0x50d12844
je 0x100b69a9
cmp esi, 0x5a25f87c
je 0x100b683a
cmp esi, 0x6c5a276a
jmp 0x100b6834
cmp edx, 0x10
jb 0x100b6816
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100b680c
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100b6ae8
push edx
push ecx
call fcn.101519a9
add esp, 8
mov edx, 0x1c
jmp 0x100b6a90
cmp esi, 0x7faa654f
ja 0x100b68c0
je 0x100b6888
cmp esi, 0x79b1d5f4
jne 0x100b6ac8
cmp edx, 0x10
jb 0x100b6868
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100b685e
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100b6ae8
push edx
push ecx
call fcn.101519a9
add esp, 8
mov dword [ebp - 0x20], 7
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x1c], 0x10
lea eax, [ebp - 0x14]
mov dword [ebp - 0x18], 0x3c
jmp 0x100b69f7
cmp edx, 0x10
jb 0x100b68b6
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100b68ac
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100b6ae8
push edx
push ecx
call fcn.101519a9
add esp, 8
mov edx, 0xe
jmp 0x100b6a90
cmp esi, 0xa85007a7
ja 0x100b6991
je 0x100b6941
cmp esi, 0x8f113116
je 0x100b66c5
cmp esi, 0x9cecce3e
je 0x100b68ee
cmp esi, 0xa3d16543
jne 0x100b6ac8
cmp edx, 0x10
jb 0x100b691c
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100b6912
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100b6ae8
push edx
push ecx
call fcn.101519a9
add esp, 8
mov dword [ebp - 0x98], 1
lea ecx, [ebp - 0x98]
mov dword [ebp - 0x94], 0x40
lea eax, [ebp - 0x90]
jmp 0x100b69f7
cmp edx, 0x10
jb 0x100b696f
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100b6965
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100b6ae8
push edx
push ecx
call fcn.101519a9
add esp, 8
mov dword [ebp - 0xac], 0x1e
lea ecx, [ebp - 0xac]
mov dword [ebp - 0xa8], 0x3f
lea eax, [ebp - 0xa4]
jmp 0x100b69f7
cmp esi, 0xbd2c91ba
je 0x100b6a61
cmp esi, 0xf906724c
jne 0x100b6ac8
cmp edx, 0x10
jb 0x100b69d7
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100b69cd
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100b6ae8
push edx
push ecx
call fcn.101519a9
add esp, 8
mov dword [ebp - 0xb4], 0x26
lea ecx, [ebp - 0xb4]
mov dword [ebp - 0xb0], 0xb
lea eax, [ebp - 0xac]
push ecx
push eax
push ecx
lea ecx, [ebp - 0x38]
mov byte [ebp - 0x90], 0
mov dword [ebp - 0x7c], 0xf
mov dword [ebp - 0x80], 0
call fcn.1004c190
mov eax, dword [0x103a1074]
mov edx, dword [eax]
mov edi, dword [eax + 4]
cmp edx, edi
je 0x100b6a47
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x38]
movzx esi, word [edx]
cmp eax, ecx
je 0x100b6a40
movsx esi, si
cmp esi, dword [eax]
je 0x100b6a54
add eax, 4
cmp eax, ecx
jne 0x100b6a35
add edx, 2
cmp edx, edi
jne 0x100b6a28
lea ecx, [ebp - 0x38]
call fcn.10018180
jmp 0x100b6b0d
lea ecx, [ebp - 0x38]
call fcn.10018180
jmp 0x100b6cbb
cmp edx, 0x10
jb 0x100b6a8b
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100b6a81
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100b6ae8
push edx
push ecx
call fcn.101519a9
add esp, 8
mov edx, 0x28
mov eax, dword [0x103a1074]
mov byte [ebp - 0x90], 0
mov dword [ebp - 0x7c], 0xf
mov dword [ebp - 0x80], 0
mov ecx, dword [eax]
mov esi, dword [eax + 4]
cmp ecx, esi
je 0x100b6b0d
movzx eax, word [ecx]
cwde
cmp eax, edx
je 0x100b6cbb
add ecx, 2
cmp ecx, esi
jne 0x100b6ab3
jmp 0x100b6b0d
cmp edx, 0x10
jb 0x100b6af8
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100b6aee
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100b6aee
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.101519a9
add esp, 8
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 0xf
mov byte [ebp - 0x90], 0
xorps xmm0, xmm0
mov dword [ebp - 0x34], 2
movups xmmword [ebp - 0x44], xmm0
mov eax, 0x203b
mov dword [ebp - 0x30], 0xf
mov word [ebp - 0x44], ax
mov byte [ebp - 0x42], 0
movups xmmword [ebp - 0x2c], xmm0
mov dword [ebp - 0x1c], 4
mov dword [ebp - 0x18], 0xf
mov dword [ebp - 0x2c], 0x20797562
mov byte [ebp - 0x28], 0
mov byte [ebp - 4], 2
lea ecx, [ebx + 8]
cmp dword [ebx + 0x1c], 0x10
mov esi, dword [ebx + 0x18]
cmovae ecx, dword [ebx + 8]
push esi
push ecx
cmp esi, 0xb
ja 0x100b6b81
lea eax, [esi + 4]
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x28]
push eax
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [ebp + esi - 0x28], 0
lea eax, [ebp - 0x2c]
jmp 0x100b6b90
push dword [ebp - 0x9c]
lea ecx, [ebp - 0x2c]
push esi
call fcn.10020960
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x5c], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x4c], xmm0
mov dword [eax + 0x10], 0
lea ecx, [ebp - 0x74]
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x5c]
mov byte [ebp - 4], 3
push eax
push dword [ebp - 0x9c]
call fcn.1004c4e0
mov ecx, dword [ebp - 0x9c]
lea eax, [ebp - 0x74]
push eax
mov byte [ebp - 4], 4
call fcn.1001ed00
mov ecx, dword [ebp - 0x60]
cmp ecx, 0x10
jb 0x100b6c13
mov edx, dword [ebp - 0x74]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b6c09
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100b6cab
push ecx
push edx
call fcn.101519a9
add esp, 8
mov ecx, dword [ebp - 0x48]
cmp ecx, 0x10
jb 0x100b6c43
mov edx, dword [ebp - 0x5c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b6c39
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100b6cab
push ecx
push edx
call fcn.101519a9
add esp, 8
mov ecx, dword [ebp - 0x18]
cmp ecx, 0x10
jb 0x100b6c73
mov edx, dword [ebp - 0x2c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b6c69
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100b6cab
push ecx
push edx
call fcn.101519a9
add esp, 8
mov ecx, dword [ebp - 0x30]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], 0
cmp ecx, 0x10
jb 0x100b6cbb
mov edx, dword [ebp - 0x44]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b6cb1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100b6cb1
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.101519a9
add esp, 8
mov ecx, dword [ebx + 0x1c]
cmp ecx, 0x10
jb 0x100b6cf1
mov edx, dword [ebx + 8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b6ce7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100b6ce7
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.101519a9
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.1015164c
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret