Function at 0x1004ae90
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x38
mov eax, dword [0x101ae960]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 8]
lea eax, [ebp - 0x2c]
push esi
mov esi, ecx
mov dword [ebp - 0x30], ebx
push edi
mov ecx, 0x28
mov byte [eax], 0
lea eax, [eax + 1]
dec ecx
jne 0x1004aeb3
mov eax, dword [0x101b36d8]
inc eax
mov dword [0x101b36d8], eax
and eax, 0xfff
mov ecx, dword [esi + 0xa8]
shl ecx, 0xc
or ecx, eax
mov eax, dword [esi]
mov dword [ebp - 0x34], ecx
mov ecx, esi
call dword [eax + 0x28]
mov dword [ebp - 0x28], eax
mov eax, dword [ebx + 0x70]
cmp dword [eax + 0xa4], 0
jne 0x1004aefd
cmp dword [eax + 0xa8], 0
jne 0x1004aefd
xor eax, eax
jmp 0x1004af03
mov eax, dword [eax + 0xb0]
cmp dword [esi + 4], 0
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x10], 0
jne 0x1004af74
test dword [0x101b3164], 0x20000
mov ecx, dword [esi + 0x24]
je 0x1004af74
test byte [0x101b31ac], 1
je 0x1004af74
test byte [0x101b321c], 0x40
je 0x1004af74
cmp dword [0x101b0db4], 0
jne 0x1004af74
mov edx, dword [esi + 0xdc]
test edx, edx
je 0x1004af56
mov eax, ecx
sub eax, dword [esi + 0x78]
mov dword [edx + 4], eax
mov dword [ecx], 0xffff0001
mov dword [ecx + 4], 0
add dword [esi + 0xcc], 8
add dword [esi + 0x24], 8
mov dword [esi + 0xdc], ecx
test dword [0x101b31e8], 0x8000
mov ecx, esi
mov edi, dword [esi + 0x24]
push edi
push ebx
jne 0x1004b05c
call fcn.1004a850
push 1
lea eax, [edi + 0x78]
mov ecx, esi
push eax
push ebx
call fcn.1004ac90
push 1
lea eax, [edi + 0x84]
mov ecx, esi
push eax
push ebx
call fcn.1004ad90
push pe_nt_image_headers32
lea eax, [edi + 0x90]
mov ecx, esi
push eax
push ebx
call fcn.1004ab60
movq xmm0, qword [0x1009285c]
mov ecx, esi
mov eax, dword [ebp - 0x34]
movq qword [edi + 0xc0], xmm0
mov dword [edi + 0xc8], eax
mov eax, dword [esi + 0x24]
sub eax, dword [esi + 0x78]
add eax, 4
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x2c]
push eax
push ebx
mov dword [ebp - 0x18], 0
call fcn.100475f0
add dword [esi + 0x24], 0xc
mov ecx, esi
movdqu xmm0, xmmword [0x10092868]
add dword [esi + 0xcc], 0xc
mov eax, dword [0x10092878]
movdqu xmmword [edi + 0xcc], xmm0
mov dword [edi + 0xdc], eax
or dword [edi + 0xd0], 0xc000
mov eax, dword [esi + 0x24]
sub eax, dword [esi + 0x78]
add eax, 8
mov dword [ebp - 0x24], 0x3c0
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x2c]
push eax
push ebx
call fcn.100475f0
lea eax, [edi + 0xe0]
jmp 0x1004b294
mov dword [ebp - 0x38], edi
call fcn.1004a850
push 1
lea eax, [edi + 0x78]
mov ecx, esi
push eax
push ebx
call fcn.1004ac90
push 1
lea eax, [edi + 0x84]
mov ecx, esi
push eax
push ebx
call fcn.1004ad90
push pe_nt_image_headers32
lea eax, [edi + 0x90]
mov ecx, esi
push eax
push ebx
call fcn.1004ab60
movdqu xmm0, xmmword [0x1019ecf0]
mov eax, dword [ebp - 0x34]
mov ecx, esi
mov dword [ebp - 0x24], 0
movdqu xmmword [edi + 0xc0], xmm0
mov dword [edi + 0xcc], eax
mov eax, dword [esi + 0x24]
sub eax, dword [esi + 0x78]
add eax, 8
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x2c]
push eax
push ebx
call fcn.100475f0
add dword [esi + 0x24], 0x10
mov ecx, esi
add dword [esi + 0xcc], 0x10
movq xmm0, qword [0x1019ed00]
mov eax, dword [0x1019ed08]
movq qword [edi + 0xd0], xmm0
mov dword [edi + 0xd8], eax
mov eax, dword [edi + 0xd4]
and eax, 0xfc00235b
mov dword [ebp - 0x24], 4
or eax, 0x2358
mov dword [ebp - 0x18], 0
mov dword [edi + 0xd4], eax
mov eax, dword [esi + 0x24]
sub eax, dword [esi + 0x78]
add eax, 8
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x2c]
push eax
push ebx
call fcn.100475f0
add dword [esi + 0xcc], 0xc
add dword [esi + 0x24], 0xc
movq xmm0, qword [0x1019eacc]
mov eax, dword [0x1019ead4]
movq qword [edi + 0xdc], xmm0
mov dword [edi + 0xe4], eax
mov eax, dword [edi + 0xe0]
and eax, 3
mov dword [edi + 0xe4], 3
or eax, 0x23b0
mov dword [edi + 0xe0], eax
add edi, 0xec
add dword [esi + 0xcc], 0xc
add dword [esi + 0x24], 0xc
xor ebx, ebx
nop
movq xmm0, qword [0x1019ed00]
mov eax, dword [0x1019ed08]
mov ecx, dword [ebx + 0x1019ead8]
movq qword [edi - 4], xmm0
mov dword [edi + 4], eax
mov eax, dword [edi]
xor eax, ecx
mov dword [ebp - 0x18], 0
and eax, 0x3fffffc
xor dword [edi], eax
lea eax, [ecx - 0x27f4]
mov dword [ebp - 0x24], eax
mov ecx, esi
mov eax, dword [esi + 0x24]
sub eax, dword [esi + 0x78]
add eax, 8
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x2c]
push eax
push dword [ebp - 0x30]
call fcn.100475f0
add dword [esi + 0xcc], 0xc
lea edi, [edi + 0xc]
add dword [esi + 0x24], 0xc
add ebx, 4
cmp ebx, 0xc0
jb 0x1004b190
mov edi, dword [ebp - 0x38]
mov ecx, esi
movq xmm0, qword [0x1019eacc]
mov eax, dword [0x1019ead4]
mov ebx, dword [ebp - 0x30]
movq qword [edi + 0x328], xmm0
movdqu xmm0, xmmword [0x10092868]
mov dword [edi + 0x330], eax
mov eax, dword [edi + 0x32c]
and eax, 3
mov dword [edi + 0xe4], 2
or eax, 0x23b0
mov dword [ebp - 0x24], 0x3c0
mov dword [edi + 0x32c], eax
add dword [esi + 0x24], 0xc
add dword [esi + 0xcc], 0xc
mov eax, dword [0x10092878]
movdqu xmmword [edi + 0x334], xmm0
mov dword [edi + 0x344], eax
or dword [edi + 0x338], 0xc000
mov eax, dword [esi + 0x24]
sub eax, dword [esi + 0x78]
add eax, 8
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x2c]
push eax
push ebx
call fcn.100475f0
lea eax, [edi + 0x348]
add dword [esi + 0xcc], 0x14
mov ecx, esi
add dword [esi + 0x24], 0x14
push eax
push ebx
call fcn.1004aa70
mov ecx, dword [ebp - 4]
mov eax, 1
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.10072374
mov esp, ebp
pop ebp
ret 4