Function at 0x1001d790
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10055040
mov eax, dword fs:[0]
push eax
sub esp, 0x5c
mov eax, dword [0x10069018]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov al, byte [esi + 0x20]
test al, al
je 0x1001d9ea
mov eax, dword [esi + 0x24]
test eax, eax
jle 0x1001d7d3
dec eax
mov dword [esi + 0x24], eax
mov edi, dword [esi + 0x24]
test edi, edi
js 0x1001d9d9
mov eax, 0x91a2b3c5
mov dword [ebp - 0x14], 0xf
imul edi
mov ecx, edi
mov dword [ebp - 0x18], 0
add edx, edi
mov byte [ebp - 0x28], 0
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0xe10
sub ecx, eax
mov eax, 0x88888889
imul ecx
mov eax, 0x88888889
add edx, ecx
sar edx, 5
mov ebx, edx
shr ebx, 0x1f
add ebx, edx
imul edi
add edx, edi
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, ecx
shl eax, 4
sub eax, ecx
shl eax, 2
sub edi, eax
mov dword [ebp - 4], 0
push edi
push ebx
cmp ebx, 0xa
jae 0x1001d8b0
sub esp, 0x18
cmp edi, 0xa
jae 0x1001d886
mov bh, 0x78
mov byte [ebp - 0x2c], 0
mov al, 0x48
mov byte [ebp - 0x34], bh
mov cl, 0x5d
mov byte [ebp - 0x2c], 0
mov dl, 0x1c
mov ah, al
mov ch, cl
mov bl, 0x42
mov dh, dl
xor ch, bh
xor al, bh
mov byte [ebp - 0x2e], ch
xor cl, bh
xor dl, bh
xor bl, bh
xor ah, bh
xor dh, bh
mov byte [ebp - 0x2d], dh
jmp 0x1001d903
mov dh, 0x21
mov byte [ebp - 0x2d], 0
mov cl, 4
mov byte [ebp - 0x34], dh
mov dl, 0x45
mov byte [ebp - 0x2d], 0
mov ah, cl
mov al, 0x11
mov bl, 0x1b
mov ch, dl
xor al, dh
xor cl, dh
xor dl, dh
xor bl, dh
xor ah, dh
xor ch, dh
mov byte [ebp - 0x2e], ch
jmp 0x1001d903
cmp edi, 0xa
jae 0x1001d8df
mov dh, 0x6b
mov byte [ebp - 0x2d], 0
mov al, 0x4e
mov byte [ebp - 0x34], dh
mov cl, 0xf
mov byte [ebp - 0x2d], 0
mov ah, al
mov dl, 0x51
mov bl, 0x5b
mov ch, cl
xor al, dh
xor cl, dh
xor dl, dh
xor bl, dh
xor ah, dh
xor ch, dh
mov byte [ebp - 0x2e], ch
jmp 0x1001d900
mov ch, 0xb
mov byte [ebp - 0x2e], 0
mov al, 0x2e
mov byte [ebp - 0x34], ch
mov cl, 0x6f
mov byte [ebp - 0x2e], 0
mov bl, al
mov dl, 0x31
mov ah, cl
xor al, ch
xor cl, ch
xor dl, ch
xor bl, ch
xor ah, ch
sub esp, 0x18
mov byte [ebp - 0x33], al
mov byte [ebp - 0x2f], ah
lea eax, [ebp - 0x33]
mov byte [ebp - 0x32], cl
mov ecx, esp
push eax
mov byte [ebp - 0x31], dl
mov byte [ebp - 0x30], bl
call fcn.100049e0
lea eax, [ebp - 0x68]
push eax
call fcn.1000b410
add esp, 0x24
lea ecx, [ebp - 0x28]
push eax
call fcn.1000c410
lea ecx, [ebp - 0x68]
call fcn.100043a0
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
movaps xmm0, xmmword [0x100628c0]
cmovae eax, dword [ebp - 0x28]
xor ecx, ecx
push eax
movups xmmword [ebp - 0x50], xmm0
mov dword [ebp - 0x40], 0xe207608
mov byte [ebp - 0x3c], 0
nop
mov al, byte [ebp - 0x50]
xor byte [ebp + ecx - 0x4f], al
inc ecx
cmp ecx, 0x13
jb 0x1001d960
sub esp, 0x18
mov byte [ebp - 0x3c], 0
lea eax, [ebp - 0x4f]
mov ecx, esp
push eax
call fcn.100049e0
lea eax, [ebp - 0x68]
push eax
call fcn.1000b410
add esp, 0x20
mov ebx, eax
mov byte [ebp - 4], 1
mov edi, dword [esi + 8]
test edi, edi
je 0x1001d9ae
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1001d9ae
push ebx
mov ecx, edi
call dword [0x10061534]
mov eax, dword [ebp - 0x54]
cmp eax, 0x10
jb 0x1001d9c0
inc eax
push eax
push dword [ebp - 0x68]
call fcn.100047b0
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14]
cmp eax, 0x10
jb 0x1001d9d9
inc eax
push eax
push dword [ebp - 0x28]
call fcn.100047b0
cmp dword [esi + 0x24], 0
jg 0x1001d9ea
mov byte [esi + 0x20], 0
mov dword [esi + 0x24], 0
mov al, byte [esi + 0x21]
test al, al
je 0x1001dbf9
movzx eax, word [esi + 0x28]
test ax, ax
jle 0x1001da03
dec eax
mov word [esi + 0x28], ax
movzx edi, word [esi + 0x28]
mov eax, edi
test ax, ax
js 0x1001dbe8
movsx eax, di
mov ecx, 0xe10
cdq
idiv ecx
mov eax, 0x88888889
mov dword [ebp - 0x14], 0xf
mov ecx, edx
mov dword [ebp - 0x18], 0
imul ecx
mov byte [ebp - 0x28], 0
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
movzx ecx, ax
mov eax, edi
cwde
mov edi, 0x3c
cdq
idiv edi
movzx eax, dx
mov dword [ebp - 4], 2
push eax
push ecx
cmp ecx, 0xa
jae 0x1001dac6
sub esp, 0x18
cmp eax, 0xa
jae 0x1001da9c
mov bh, 0x14
mov byte [ebp - 0x2c], 0
mov al, 0x24
mov byte [ebp - 0x34], bh
mov cl, 0x31
mov byte [ebp - 0x2c], 0
mov dl, 0x70
mov ah, al
mov ch, cl
mov bl, 0x2e
mov dh, dl
xor ch, bh
xor al, bh
mov byte [ebp - 0x2e], ch
xor cl, bh
xor dl, bh
xor bl, bh
xor ah, bh
xor dh, bh
mov byte [ebp - 0x2d], dh
jmp 0x1001db19
mov dh, 0x1a
mov byte [ebp - 0x2d], 0
mov cl, 0x3f
mov byte [ebp - 0x34], dh
mov dl, 0x7e
mov byte [ebp - 0x2d], 0
mov ah, cl
mov al, 0x2a
mov bl, 0x20
mov ch, dl
xor al, dh
xor cl, dh
xor dl, dh
xor bl, dh
xor ah, dh
xor ch, dh
mov byte [ebp - 0x2e], ch
jmp 0x1001db19
cmp eax, 0xa
jae 0x1001daf5
mov dh, 0x32
mov byte [ebp - 0x2d], 0
mov al, 0x17
mov byte [ebp - 0x34], dh
mov cl, 0x56
mov byte [ebp - 0x2d], 0
mov ah, al
mov dl, 8
mov bl, 2
mov ch, cl
xor al, dh
xor cl, dh
xor dl, dh
xor bl, dh
xor ah, dh
xor ch, dh
mov byte [ebp - 0x2e], ch
jmp 0x1001db16
mov ch, 0x22
mov byte [ebp - 0x2e], 0
mov al, 7
mov byte [ebp - 0x34], ch
mov cl, 0x46
mov byte [ebp - 0x2e], 0
mov bl, al
mov dl, 0x18
mov ah, cl
xor al, ch
xor cl, ch
xor dl, ch
xor bl, ch
xor ah, ch
sub esp, 0x18
mov byte [ebp - 0x33], al
mov byte [ebp - 0x2f], ah
lea eax, [ebp - 0x33]
mov byte [ebp - 0x32], cl
mov ecx, esp
push eax
mov byte [ebp - 0x31], dl
mov byte [ebp - 0x30], bl
call fcn.100049e0
lea eax, [ebp - 0x68]
push eax
call fcn.1000b410
add esp, 0x24
lea ecx, [ebp - 0x28]
push eax
call fcn.1000c410
lea ecx, [ebp - 0x68]
call fcn.100043a0
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
movaps xmm0, xmmword [0x100628a0]
cmovae eax, dword [ebp - 0x28]
xor ecx, ecx
push eax
movups xmmword [ebp - 0x50], xmm0
mov dword [ebp - 0x40], 0x3a6c1269
mov word [ebp - 0x3c], 0x14
mov al, byte [ebp - 0x50]
xor byte [ebp + ecx - 0x4f], al
inc ecx
cmp ecx, 0x14
jb 0x1001db76
sub esp, 0x18
mov byte [ebp - 0x3b], 0
lea eax, [ebp - 0x4f]
mov ecx, esp
push eax
call fcn.100049e0
lea eax, [ebp - 0x68]
push eax
call fcn.1000b410
add esp, 0x20
mov ebx, eax
mov byte [ebp - 4], 3
mov edi, dword [esi + 0xc]
test edi, edi
je 0x1001dbc4
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1001dbc4
push ebx
mov ecx, edi
call dword [0x10061534]
mov eax, dword [ebp - 0x54]
cmp eax, 0x10
jb 0x1001dbd6
inc eax
push eax
push dword [ebp - 0x68]
call fcn.100047b0
mov eax, dword [ebp - 0x14]
cmp eax, 0x10
jb 0x1001dbe8
inc eax
push eax
push dword [ebp - 0x28]
call fcn.100047b0
cmp word [esi + 0x28], 0
jg 0x1001dbf9
xor eax, eax
mov byte [esi + 0x21], 0
mov word [esi + 0x28], ax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100523a0
mov esp, ebp
pop ebp
ret