Function at 0x10018250
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10041390
mov eax, dword fs:[0]
push eax
sub esp, 0x5c
mov eax, dword [0x10050018]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov eax, dword [esi]
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [0x100520d0], eax
call edi
sub eax, dword [esi + 0x30]
mov ecx, eax
sbb edx, dword [esi + 0x34]
call fcn.1003f990
cvtsd2ss xmm0, xmm0
divss xmm0, dword [0x10049254]
comiss xmm0, dword [0x10049214]
jb 0x100186f9
call edi
mov dword [esi + 0x30], eax
mov al, byte [esi + 0x20]
mov dword [esi + 0x34], edx
test al, al
je 0x100184ea
mov eax, dword [esi + 0x24]
test eax, eax
jle 0x100182d0
dec eax
mov dword [esi + 0x24], eax
mov edi, dword [esi + 0x24]
test edi, edi
js 0x100184d9
mov eax, 0x91a2b3c5
mov dword [ebp - 0x14], 0xf
imul edi
mov ecx, edi
mov dword [ebp - 0x18], 0
add edx, edi
mov byte [ebp - 0x28], 0
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0xe10
sub ecx, eax
mov eax, 0x88888889
imul ecx
mov eax, 0x88888889
add edx, ecx
sar edx, 5
mov ebx, edx
shr ebx, 0x1f
add ebx, edx
imul edi
add edx, edi
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, ecx
shl eax, 4
sub eax, ecx
shl eax, 2
sub edi, eax
mov dword [ebp - 4], 0
push edi
push ebx
cmp ebx, 0xa
jae 0x100183ad
sub esp, 0x18
cmp edi, 0xa
jae 0x10018383
mov bh, 0x7e
mov byte [ebp - 0x2c], 0
mov al, 0x4e
mov byte [ebp - 0x34], bh
mov cl, 0x5b
mov byte [ebp - 0x2c], 0
mov dl, 0x1a
mov ah, al
mov ch, cl
mov bl, 0x44
mov dh, dl
xor ch, bh
xor al, bh
mov byte [ebp - 0x2e], ch
xor cl, bh
xor dl, bh
xor bl, bh
xor ah, bh
xor dh, bh
mov byte [ebp - 0x2d], dh
jmp 0x10018400
mov dh, 0x4f
mov byte [ebp - 0x2d], 0
mov cl, 0x6a
mov byte [ebp - 0x34], dh
mov dl, 0x2b
mov byte [ebp - 0x2d], 0
mov ah, cl
mov al, 0x7f
mov bl, 0x75
mov ch, dl
xor al, dh
xor cl, dh
xor dl, dh
xor bl, dh
xor ah, dh
xor ch, dh
mov byte [ebp - 0x2e], ch
jmp 0x10018400
cmp edi, 0xa
jae 0x100183dc
mov dh, 2
mov byte [ebp - 0x2d], 0
mov al, 0x27
mov byte [ebp - 0x34], dh
mov cl, 0x66
mov byte [ebp - 0x2d], 0
mov ah, al
mov dl, 0x38
mov bl, 0x32
mov ch, cl
xor al, dh
xor cl, dh
xor dl, dh
xor bl, dh
xor ah, dh
xor ch, dh
mov byte [ebp - 0x2e], ch
jmp 0x100183fd
mov ch, 0x2d
mov byte [ebp - 0x2e], 0
mov al, 8
mov byte [ebp - 0x34], ch
mov cl, 0x49
mov byte [ebp - 0x2e], 0
mov bl, al
mov dl, 0x17
mov ah, cl
xor al, ch
xor cl, ch
xor dl, ch
xor bl, ch
xor ah, ch
sub esp, 0x18
mov byte [ebp - 0x33], al
mov byte [ebp - 0x2f], ah
lea eax, [ebp - 0x33]
mov byte [ebp - 0x32], cl
mov ecx, esp
push eax
mov byte [ebp - 0x31], dl
mov byte [ebp - 0x30], bl
call fcn.10003b10
lea eax, [ebp - 0x68]
push eax
call fcn.10009250
add esp, 0x24
lea ecx, [ebp - 0x28]
push eax
call fcn.10009330
lea ecx, [ebp - 0x68]
call fcn.10003a50
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
movaps xmm0, xmmword [0x100494f0]
cmovae eax, dword [ebp - 0x28]
xor ecx, ecx
push eax
movups xmmword [ebp - 0x50], xmm0
mov dword [ebp - 0x40], 0x715f0977
mov byte [ebp - 0x3c], 0
nop dword [eax + eax]
mov al, byte [ebp - 0x50]
xor byte [ebp + ecx - 0x4f], al
inc ecx
cmp ecx, 0x13
jb 0x10018460
sub esp, 0x18
mov byte [ebp - 0x3c], 0
lea eax, [ebp - 0x4f]
mov ecx, esp
push eax
call fcn.10003b10
lea eax, [ebp - 0x68]
push eax
call fcn.10009250
add esp, 0x20
mov ebx, eax
mov byte [ebp - 4], 1
mov edi, dword [esi + 8]
test edi, edi
je 0x100184ae
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x100184ae
push ebx
mov ecx, edi
call dword [0x10049058]
mov eax, dword [ebp - 0x54]
cmp eax, 0x10
jb 0x100184c0
inc eax
push eax
push dword [ebp - 0x68]
call fcn.10004bb0
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14]
cmp eax, 0x10
jb 0x100184d9
inc eax
push eax
push dword [ebp - 0x28]
call fcn.10004bb0
cmp dword [esi + 0x24], 0
jg 0x100184ea
mov byte [esi + 0x20], 0
mov dword [esi + 0x24], 0
mov al, byte [esi + 0x21]
test al, al
je 0x100186f9
movzx eax, word [esi + 0x28]
test ax, ax
jle 0x10018503
dec eax
mov word [esi + 0x28], ax
movzx edi, word [esi + 0x28]
mov eax, edi
test ax, ax
js 0x100186e8
movsx eax, di
mov ecx, 0xe10
cdq
idiv ecx
mov eax, 0x88888889
mov dword [ebp - 0x14], 0xf
mov ecx, edx
mov dword [ebp - 0x18], 0
imul ecx
mov byte [ebp - 0x28], 0
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
movzx ecx, ax
mov eax, edi
cwde
mov edi, 0x3c
cdq
idiv edi
movzx eax, dx
mov dword [ebp - 4], 2
push eax
push ecx
cmp ecx, 0xa
jae 0x100185c6
sub esp, 0x18
cmp eax, 0xa
jae 0x1001859c
mov bh, 0x42
mov byte [ebp - 0x2c], 0
mov al, 0x72
mov byte [ebp - 0x34], bh
mov cl, 0x67
mov byte [ebp - 0x2c], 0
mov dl, 0x26
mov ah, al
mov ch, cl
mov bl, 0x78
mov dh, dl
xor ch, bh
xor al, bh
mov byte [ebp - 0x2e], ch
xor cl, bh
xor dl, bh
xor bl, bh
xor ah, bh
xor dh, bh
mov byte [ebp - 0x2d], dh
jmp 0x10018619
mov dh, 0x1f
mov byte [ebp - 0x2d], 0
mov cl, 0x3a
mov byte [ebp - 0x34], dh
mov dl, 0x7b
mov byte [ebp - 0x2d], 0
mov ah, cl
mov al, 0x2f
mov bl, 0x25
mov ch, dl
xor al, dh
xor cl, dh
xor dl, dh
xor bl, dh
xor ah, dh
xor ch, dh
mov byte [ebp - 0x2e], ch
jmp 0x10018619
cmp eax, 0xa
jae 0x100185f5
mov dh, 0x66
mov byte [ebp - 0x2d], 0
mov al, 0x43
mov byte [ebp - 0x34], dh
mov cl, 2
mov byte [ebp - 0x2d], 0
mov ah, al
mov dl, 0x5c
mov bl, 0x56
mov ch, cl
xor al, dh
xor cl, dh
xor dl, dh
xor bl, dh
xor ah, dh
xor ch, dh
mov byte [ebp - 0x2e], ch
jmp 0x10018616
mov ch, 0x1e
mov byte [ebp - 0x2e], 0
mov al, 0x3b
mov byte [ebp - 0x34], ch
mov cl, 0x7a
mov byte [ebp - 0x2e], 0
mov bl, al
mov dl, 0x24
mov ah, cl
xor al, ch
xor cl, ch
xor dl, ch
xor bl, ch
xor ah, ch
sub esp, 0x18
mov byte [ebp - 0x33], al
mov byte [ebp - 0x2f], ah
lea eax, [ebp - 0x33]
mov byte [ebp - 0x32], cl
mov ecx, esp
push eax
mov byte [ebp - 0x31], dl
mov byte [ebp - 0x30], bl
call fcn.10003b10
lea eax, [ebp - 0x68]
push eax
call fcn.10009250
add esp, 0x24
lea ecx, [ebp - 0x28]
push eax
call fcn.10009330
lea ecx, [ebp - 0x68]
call fcn.10003a50
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
movaps xmm0, xmmword [0x10049a90]
cmovae eax, dword [ebp - 0x28]
xor ecx, ecx
push eax
movups xmmword [ebp - 0x50], xmm0
mov dword [ebp - 0x40], 0x10463843
mov word [ebp - 0x3c], 0x3e
mov al, byte [ebp - 0x50]
xor byte [ebp + ecx - 0x4f], al
inc ecx
cmp ecx, 0x14
jb 0x10018676
sub esp, 0x18
mov byte [ebp - 0x3b], 0
lea eax, [ebp - 0x4f]
mov ecx, esp
push eax
call fcn.10003b10
lea eax, [ebp - 0x68]
push eax
call fcn.10009250
add esp, 0x20
mov ebx, eax
mov byte [ebp - 4], 3
mov edi, dword [esi + 0xc]
test edi, edi
je 0x100186c4
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x100186c4
push ebx
mov ecx, edi
call dword [0x10049058]
mov eax, dword [ebp - 0x54]
cmp eax, 0x10
jb 0x100186d6
inc eax
push eax
push dword [ebp - 0x68]
call fcn.10004bb0
mov eax, dword [ebp - 0x14]
cmp eax, 0x10
jb 0x100186e8
inc eax
push eax
push dword [ebp - 0x28]
call fcn.10004bb0
cmp word [esi + 0x28], 0
jg 0x100186f9
xor eax, eax
mov byte [esi + 0x21], 0
mov word [esi + 0x28], ax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1003eb30
mov esp, ebp
pop ebp
ret