Function at 0x1000323c
Capabilities:
Encode data using xor

Disassembly:
push ebx
mov ebx, dword [esp + 8]
mov ecx, 0x1ccb
push ebp
mov ebp, dword [esp + 0x1c]
add ebx, 0xa1d
push esi
mov esi, dword [esp + 0x1c]
push edi
lea edi, [ebp - 0x24b5]
lea eax, [edi + 0x2096]
push eax
lea eax, [ebx - 0x14c]
push eax
mov eax, ebp
xor eax, 0x3da0
push eax
mov eax, ebx
xor eax, 0x3a36
push esi
push eax
mov eax, dword [esp + 0x2c]
xor eax, ecx
add eax, ecx
push eax
call fcn.10004689
add esp, 0x18
mov dword [esp + 0x14], eax
cmp dword [0x11010348], 0x7524
ja 0x100032a6
add dword [esi + 0x2c], 0xfffdaf68
jmp 0x100032b4
mov eax, dword [esi + 0x70]
add eax, 0x570
mov dword [esi + 0x118], eax
cmp dword [esi + 0xb0], 0x14fd7
jae 0x100032d2
imul eax, dword [esi + 0x88], 0x1254e
mov dword [esi + 0x88], eax
jmp 0x100032e8
mov eax, dword [esi + 0xdc]
sub eax, dword [esi + 0xe4]
add eax, 0x14bed3d7
mov dword [0x110102ec], eax
mov eax, dword [esi + 0xbc]
cmp eax, dword [esi + 0xb0]
je 0x10003301
mov eax, 0xffffeee9
sub eax, dword [esi + 0x70]
add dword [esi + 0x44], eax
mov ecx, dword [0x110102a4]
cmp dword [ecx + 0xc8], 0x9d14
jae 0x10003323
mov dword [esi + 0x90], 0x1010c320
mov ecx, dword [0x110102a4]
xor ebp, ebp
mov eax, dword [ecx + 0x90]
mov edx, dword [eax + ebp]
add ebp, 4
mov eax, dword [ecx + 0x70]
sub eax, dword [esi + 0x88]
add eax, 0xd5bd5
add dword [ecx + 0x2c], eax
mov eax, dword [0x110102a4]
mov ecx, dword [esi + 0xf4]
mov eax, dword [eax + 0xfc]
sub eax, ecx
sub eax, 0x131267
add dword [esi + 0xec], eax
xor ecx, dword [0x11010394]
mov eax, dword [esi + 0xc8]
sub ecx, 0x28
xor dword [esi + 0x98], ecx
mov ecx, dword [esi + 0x84]
imul eax, ecx
mov dword [esi + 0xc8], eax
mov eax, dword [esi + 0x80]
sub eax, ecx
sub eax, 0x1362d2
add dword [esi + 0x98], eax
movzx eax, dl
movzx edx, byte [esi + 0x44]
imul edx, eax
mov eax, dword [0x110102a4]
mov ecx, dword [eax + 0x9c]
mov eax, dword [esi + 0x48]
mov byte [ecx + eax], dl
mov ecx, dword [esi + 0x110]
xor ecx, dword [esi + 0xec]
imul ecx, dword [esi + 0x124]
inc dword [esi + 0x48]
mov dword [esi + 0x124], ecx
mov eax, dword [0x11010318]
sub dword [esi + 0xc8], eax
mov eax, dword [esi + 0xa0]
add ecx, eax
xor ecx, 0xfff6ce4a
add ecx, eax
mov dword [esi + 0xa0], ecx
cmp ebp, 0x990990
jge 0x10003402
mov ecx, dword [0x110102a4]
jmp 0x10003325
mov ebp, dword [esp + 0x24]
lea eax, [edi + 0x1ee7]
cmp dword [esp + 0x14], eax
jg 0x10003699
lea eax, [ebp - 0x8e1]
cmp edi, eax
je 0x10003630
cmp dword [esi + 0xc8], 0x175fd
ja 0x10003448
mov ecx, dword [0x110102a4]
mov eax, dword [ecx + 0x110]
xor eax, 0xda6c0965
mov dword [0x110102ec], eax
jmp 0x1000345c
mov eax, dword [0x110103b0]
sub eax, dword [0x110103a4]
add dword [esi + 0x10], eax
mov ecx, dword [0x110102a4]
mov dword [ecx + 0x90], section..data
xor ebp, ebp
mov ebx, dword [esi + 0x64]
mov edx, dword [esi + 0xf4]
mov ecx, dword [esi + 0xac]
lea eax, [edx - 0x28]
add eax, ecx
sub ecx, dword [esi + 0x4c]
imul eax, dword [esi + 0xbc]
mov dword [esi + 0xbc], eax
sub ecx, dword [0x110102e0]
mov eax, dword [esi + 0x108]
add ecx, 0x374f2
xor eax, dword [esi + 0xec]
add eax, 0xfffffff7
mov dword [esi + 0xac], ecx
add eax, ebx
mov ebx, dword [esi + 0x44]
mov dword [esi + 0x64], eax
mov eax, dword [esi + 0x90]
mov ecx, dword [eax + ebp]
add ebp, 4
mov eax, dword [esi + 0x124]
xor eax, dword [esi + 0x80]
add eax, 0x1921fb
imul ebx, ecx
add dword [esi + 0xc4], eax
mov eax, dword [0x11010330]
sub eax, dword [esi + 0x7c]
xor eax, 0xfff9d090
imul eax, edx
mov edx, ebx
shr edx, 8
mov dword [esi + 0xf4], eax
mov ecx, dword [0x110102a4]
mov eax, dword [esi + 0xa0]
sub eax, dword [ecx + 4]
add eax, 0x1e4e12
or dword [ecx + 0x88], eax
mov eax, dword [0x11010330]
mov ecx, dword [esi + 0x9c]
xor eax, 0xd5bd5
or dword [esi + 0xec], eax
mov eax, dword [esi + 0x48]
mov byte [ecx + eax], dl
inc dword [esi + 0x48]
mov ecx, dword [esi + 0xac]
add ecx, dword [0x110103a4]
xor ecx, dword [0x110103a4]
mov edx, dword [0x110102a4]
xor ecx, 0x131290
mov eax, dword [0x110102e0]
mov dword [0x110103a4], ecx
add eax, 0xfff2a402
mov ecx, dword [edx + 0x88]
add ecx, dword [0x1101039c]
add eax, ecx
mov dword [0x110102e0], eax
mov eax, dword [esi + 0xec]
sub eax, dword [esi + 0xe4]
add eax, 0x12d9ec
add dword [edx + 0x98], eax
mov eax, dword [0x11010344]
mov ecx, dword [esi + 0x48]
mov byte [eax + ecx], bl
inc dword [esi + 0x48]
mov eax, dword [esi + 0x10]
mov ebx, dword [esi + 0x64]
dec eax
xor dword [esi + 0xa0], eax
lea eax, [ebx - 0x51]
add dword [esi + 0x70], eax
cmp ebp, 0x38fb68
jl 0x1000346b
mov eax, dword [esi + 0xb0]
mov ecx, dword [0x110102a4]
sub eax, 0x1035a4
mov dword [0x110102ec], eax
mov eax, dword [esi + 0x38]
add eax, 0x1fa9b
add dword [ecx + 0x44], eax
mov eax, dword [esi + 0x84]
cmp eax, 0x43f1
jbe 0x10003606
mov eax, dword [0x110102a4]
mov ecx, dword [eax + 0xac]
mov eax, dword [esi + 0x38]
add eax, 0xffff8e81
add eax, ecx
imul eax, dword [esi + 0xb0]
mov dword [esi + 0xb0], eax
jmp 0x1000360e
add eax, 0xccb6f
xor dword [esi + 0x44], eax
mov edx, dword [0x110102a4]
mov eax, dword [esi + 0xf4]
add eax, 0xfff670dd
add eax, dword [edx + 0x88]
xor dword [edx + 0x44], eax
xor edi, 0x2114
jmp 0x10003699
mov eax, dword [esi + 0xf0]
and eax, dword [esi + 0x68]
add eax, dword [esi + 0xec]
xor dword [esi + 0xc4], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov ecx, dword [0x110102a4]
mov eax, edi
and eax, 0x19d2
xor dword [ecx + 0x58], eax
mov eax, edi
or eax, 0x1784
and eax, dword [esi + 0x8c]
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseActCtx]
mov eax, dword [esi + 0x24]
sub eax, dword [0x1101036c]
xor eax, ebx
or dword [esi + 0x10], eax
mov ecx, dword [0x11010384]
imul ecx, dword [0x11010348]
imul ecx, edi
add dword [esi + 0x128], ecx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
xor edi, 0x3690
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
ret