Function at 0x101405e0
Capabilities:
Encode data using xor
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0xa4
mov eax, dword [0x102070c0]
xor eax, esp
mov dword [esp + 0xa0], eax
mov eax, dword [0x10224ca0]
push ebx
push esi
push edi
cmp byte [eax + 0x359e], 0
mov esi, ecx
je 0x10140a71
movups xmm0, xmmword [str.gzdTXXJXWZ]
mov ax, word [0x101f0714]
xor ebx, ebx
mov edx, dword [0x10225d40]
mov word [esp + 0xa8], ax
mov al, byte [0x101f0716]
mov byte [esp + 0xaa], al
movups xmmword [esp + 0x88], xmm0
movups xmm0, xmmword [0x101f0704]
movups xmmword [esp + 0x98], xmm0
cmp edx, 2
jl 0x10140790
movaps xmm0, xmmword [0x101f8f00]
movaps xmm4, xmmword [0x101f8d60]
movaps xmm3, xmmword [0x101f91b0]
movaps xmm5, xmmword [0x101f8e10]
movaps xmmword [esp + 0x10], xmm0
mov ecx, dword [esp + 0x10]
nop
movd xmm0, ebx
lea eax, [ebx + 4]
pshufd xmm2, xmm0, 0
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
andps xmm1, xmmword [0x101f8eb0]
packuswb xmm1, xmm1
movd xmm0, ecx
paddb xmm1, xmm0
movd xmm0, dword [esp + ebx + 0x88]
xorps xmm1, xmm0
movd xmm0, eax
pshufd xmm2, xmm0, 0
movd dword [esp + ebx + 0x88], xmm1
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
andps xmm1, xmmword [0x101f8eb0]
packuswb xmm1, xmm1
movd xmm0, ecx
paddb xmm1, xmm0
movd xmm0, dword [esp + ebx + 0x8c]
xorps xmm1, xmm0
movd dword [esp + ebx + 0x8c], xmm1
add ebx, 8
cmp ebx, 0x20
jl 0x10140680
cmp ebx, 0x23
jge 0x101407c1
nop dword [eax + eax]
mov eax, 0x4bda12f7
mov cl, bl
imul ebx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
movsx eax, al
imul eax, eax, 0x36
sub cl, al
add cl, 0x32
xor byte [esp + ebx + 0x88], cl
inc ebx
cmp ebx, 0x23
jl 0x10140790
mov edx, dword [0x10225d40]
lea eax, [esp + 0x88]
mov cl, byte [esi]
cmp cl, byte [eax]
jne 0x101407e8
test cl, cl
je 0x101407e4
mov cl, byte [esi + 1]
cmp cl, byte [eax + 1]
jne 0x101407e8
add esi, 2
add eax, 2
test cl, cl
jne 0x101407c8
xor eax, eax
jmp 0x101407ed
sbb eax, eax
or eax, 1
test eax, eax
jne 0x10140a71
cmp byte [0x101f0cc7], 0
mov esi, dword [0x10224c9c]
movups xmm0, xmmword [0x101f0cb4]
mov eax, dword [0x101f0cc4]
mov edi, dword [esi + 0x1c]
movups xmmword [esp + 0x74], xmm0
mov dword [esp + 0x84], eax
je 0x10140978
xor ecx, ecx
cmp edx, 2
jl 0x10140950
movaps xmm0, xmmword [0x101f8f00]
movaps xmm4, xmmword [0x101f8d60]
movaps xmm3, xmmword [0x101f91b0]
movaps xmm5, xmmword [0x101f8e10]
movaps xmmword [esp + 0x10], xmm0
mov edx, dword [esp + 0x10]
movd xmm0, ecx
lea eax, [ecx + 4]
pshufd xmm2, xmm0, 0
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
andps xmm1, xmmword [0x101f8eb0]
packuswb xmm1, xmm1
movd xmm0, edx
paddb xmm1, xmm0
movd xmm0, dword [esp + ecx + 0x74]
xorps xmm1, xmm0
movd xmm0, eax
pshufd xmm2, xmm0, 0
movd dword [esp + ecx + 0x74], xmm1
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
andps xmm1, xmmword [0x101f8eb0]
packuswb xmm1, xmm1
movd xmm0, edx
paddb xmm1, xmm0
movd xmm0, dword [esp + ecx + 0x78]
xorps xmm1, xmm0
movd dword [esp + ecx + 0x78], xmm1
add ecx, 8
cmp ecx, 0x10
jl 0x10140853
cmp ecx, 0x14
jge 0x10140978
nop
mov eax, 0x4bda12f7
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dl, cl
movsx eax, al
imul eax, eax, 0x36
sub dl, al
add dl, 0x32
xor byte [esp + ecx + 0x74], dl
inc ecx
cmp ecx, 0x14
jl 0x10140950
lea eax, [esp + 0x74]
push eax
mov eax, dword [esi + 0x228]
lea ecx, [esp + 0x10]
call eax
mov edx, dword [edi + 0x10]
cmp edx, 0xffffffff
je 0x10140a2a
mov esi, dword [edi + 4]
mov cx, word [esp + 0xc]
nop dword [eax]
mov eax, edx
shl eax, 4
sub eax, edx
movups xmm0, xmmword [esi + eax*4]
movups xmm1, xmmword [esi + eax*4 + 0x10]
movups xmmword [esp + 0x38], xmm0
movups xmm0, xmmword [esi + eax*4 + 0x20]
movups xmmword [esp + 0x58], xmm0
movq xmm0, qword [esi + eax*4 + 0x30]
movd eax, xmm1
movq qword [esp + 0x68], xmm0
cmp ax, cx
jge 0x101409da
mov edx, dword [esp + 0x3c]
jmp 0x101409e0
jle 0x101409e5
mov edx, dword [esp + 0x38]
cmp edx, 0xffffffff
jne 0x101409a0
cmp edx, 0xffffffff
je 0x10140a2a
mov eax, dword [0x10224c9c]
mov ecx, edx
shl ecx, 4
sub ecx, edx
push 0
mov eax, dword [eax + 0x1c]
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*4 + 0x1c]
call eax
mov esi, eax
add esp, 4
test esi, esi
je 0x10140a2a
mov ecx, dword [0x10224ca8]
mov ecx, dword [ecx + 0x4c]
mov edx, dword [ecx]
mov edx, dword [edx + 0x2c]
call edx
mov ecx, eax
push esi
mov edx, dword [eax]
mov eax, dword [edx + 0xd0]
call eax
push 0
push 0x101f0460
call dword [sym.imp.USER32.dll_FindWindowW]
mov esi, eax
mov dword [esp + 0x10], 0x14
lea eax, [esp + 0x10]
mov dword [esp + 0x14], esi
push eax
mov dword [esp + 0x1c], 0xe
mov dword [esp + 0x20], 0
mov dword [esp + 0x24], 0
call dword [sym.imp.USER32.dll_FlashWindowEx]
push 9
push esi
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [esp + 0xac]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.1019a294
mov esp, ebp
pop ebp
ret