Function at 0x1000324b
Capabilities:
Encode data using xor

Disassembly:
push ebx
mov ebx, dword [esp + 8]
push ebp
push esi
mov esi, dword [esp + 0x1c]
add ebx, 0xffffff5a
push edi
mov edi, dword [esp + 0x24]
lea eax, [edi + 0x506]
push eax
lea eax, [ebx - 0xf7]
push eax
mov eax, edi
lea ebp, [edi + 0x671]
xor eax, 0x36a7
push eax
mov eax, ebx
xor eax, 0x3e22
push esi
push eax
mov eax, dword [esp + 0x2c]
xor eax, 0x556
sub eax, 0x2c1
push eax
call fcn.10004690
add esp, 0x18
mov dword [esp + 0x14], eax
cmp dword [0x10280b68], 0x7524
ja 0x100032b6
add dword [esi + 0x2c], 0xfffdaf68
jmp 0x100032c4
mov eax, dword [esi + 0x70]
add eax, 0x570
mov dword [esi + 0x118], eax
cmp dword [esi + 0xb0], 0x14fd7
jae 0x100032e2
imul eax, dword [esi + 0x88], 0x1254e
mov dword [esi + 0x88], eax
jmp 0x100032f8
mov eax, dword [esi + 0xdc]
sub eax, dword [esi + 0xe4]
add eax, 0x14bed3d7
mov dword [0x10280b0c], eax
mov eax, dword [esi + 0xbc]
cmp eax, dword [esi + 0xb0]
je 0x10003311
mov eax, 0xffffeee9
sub eax, dword [esi + 0x70]
add dword [esi + 0x44], eax
mov ecx, dword [0x10247e84]
cmp dword [ecx + 0xc8], 0x9d14
jae 0x10003333
mov dword [esi + 0x90], 0x1002da50
mov ecx, dword [0x10247e84]
xor ebp, ebp
mov eax, dword [ecx + 0x90]
mov edx, dword [eax + ebp]
add ebp, 4
mov eax, dword [ecx + 0x70]
sub eax, dword [esi + 0x88]
add eax, 0xd5bd5
add dword [ecx + 0x2c], eax
mov eax, dword [0x10247e84]
mov ecx, dword [esi + 0xf4]
mov eax, dword [eax + 0xfc]
sub eax, ecx
sub eax, 0x131267
add dword [esi + 0xec], eax
xor ecx, dword [0x10280bb4]
mov eax, dword [esi + 0xc8]
sub ecx, 0x28
xor dword [esi + 0x98], ecx
mov ecx, dword [esi + 0x84]
imul eax, ecx
mov dword [esi + 0xc8], eax
mov eax, dword [esi + 0x80]
sub eax, ecx
sub eax, 0x1362d2
add dword [esi + 0x98], eax
movzx eax, dl
movzx edx, byte [esi + 0x44]
imul edx, eax
mov eax, dword [0x10247e84]
mov ecx, dword [eax + 0x9c]
mov eax, dword [esi + 0x48]
mov byte [ecx + eax], dl
mov ecx, dword [esi + 0x110]
xor ecx, dword [esi + 0xec]
imul ecx, dword [esi + 0x124]
inc dword [esi + 0x48]
mov dword [esi + 0x124], ecx
mov eax, dword [0x10280b38]
sub dword [esi + 0xc8], eax
mov eax, dword [esi + 0xa0]
add ecx, eax
xor ecx, 0xfff6ce4a
add ecx, eax
mov dword [esi + 0xa0], ecx
cmp ebp, 0x1795b0
jge 0x10003412
mov ecx, dword [0x10247e84]
jmp 0x10003335
lea eax, [edi + 0x27]
lea ebp, [edi + 0x671]
cmp dword [esp + 0x14], eax
jg 0x100036a2
lea eax, [edi + 0xcf0]
cmp ebp, eax
je 0x10003639
cmp dword [esi + 0xc8], 0x175fd
ja 0x10003457
mov ecx, dword [0x10247e84]
mov eax, dword [ecx + 0x110]
xor eax, 0xda6c0965
mov dword [0x10280b0c], eax
jmp 0x1000346b
mov eax, dword [0x10280bd0]
sub eax, dword [0x10280bc4]
add dword [esi + 0x10], eax
mov ecx, dword [0x10247e84]
mov dword [ecx + 0x90], section..data
xor ebp, ebp
mov ebx, dword [esi + 0x64]
mov edx, dword [esi + 0xf4]
mov ecx, dword [esi + 0xac]
lea eax, [edx - 0x28]
add eax, ecx
sub ecx, dword [esi + 0x4c]
imul eax, dword [esi + 0xbc]
mov dword [esi + 0xbc], eax
sub ecx, dword [0x10280b00]
mov eax, dword [esi + 0x108]
add ecx, 0x374f2
xor eax, dword [esi + 0xec]
add eax, 0xfffffff7
mov dword [esi + 0xac], ecx
add eax, ebx
mov ebx, dword [esi + 0x44]
mov dword [esi + 0x64], eax
mov eax, dword [esi + 0x90]
mov ecx, dword [eax + ebp]
add ebp, 4
mov eax, dword [esi + 0x80]
xor eax, dword [esi + 0x124]
add eax, 0x1921fb
imul ebx, ecx
add dword [esi + 0xc4], eax
mov eax, dword [0x10280b50]
sub eax, dword [esi + 0x7c]
xor eax, 0xfff9d090
imul eax, edx
mov edx, ebx
shr edx, 8
mov dword [esi + 0xf4], eax
mov ecx, dword [0x10247e84]
mov eax, dword [esi + 0xa0]
sub eax, dword [ecx + 4]
add eax, 0x1e4e12
or dword [ecx + 0x88], eax
mov eax, dword [0x10280b50]
mov ecx, dword [esi + 0x9c]
xor eax, 0xd5bd5
or dword [esi + 0xec], eax
mov eax, dword [esi + 0x48]
mov byte [ecx + eax], dl
inc dword [esi + 0x48]
mov ecx, dword [esi + 0xac]
add ecx, dword [0x10280bc4]
xor ecx, dword [0x10280bc4]
mov edx, dword [0x10247e84]
xor ecx, 0x131290
mov eax, dword [0x10280b00]
mov dword [0x10280bc4], ecx
add eax, 0xfff2a402
mov ecx, dword [edx + 0x88]
add ecx, dword [0x10280bbc]
add eax, ecx
mov dword [0x10280b00], eax
mov eax, dword [esi + 0xec]
sub eax, dword [esi + 0xe4]
add eax, 0x12d9ec
add dword [edx + 0x98], eax
mov eax, dword [0x10280b64]
mov ecx, dword [esi + 0x48]
mov byte [eax + ecx], bl
inc dword [esi + 0x48]
mov eax, dword [esi + 0x10]
mov ebx, dword [esi + 0x64]
dec eax
xor dword [esi + 0xa0], eax
lea eax, [ebx - 0x51]
add dword [esi + 0x70], eax
cmp ebp, 0x8c808
jl 0x1000347a
mov eax, dword [esi + 0xb0]
mov ecx, dword [0x10247e84]
sub eax, 0x1035a4
mov dword [0x10280b0c], eax
mov eax, dword [esi + 0x38]
add eax, 0x1fa9b
add dword [ecx + 0x44], eax
mov eax, dword [esi + 0x84]
cmp eax, 0x43f1
jbe 0x10003615
mov eax, dword [0x10247e84]
mov ecx, dword [eax + 0xac]
mov eax, dword [esi + 0x38]
add eax, 0xffff8e81
add eax, ecx
imul eax, dword [esi + 0xb0]
mov dword [esi + 0xb0], eax
jmp 0x1000361d
add eax, 0xccb6f
xor dword [esi + 0x44], eax
mov edx, dword [0x10247e84]
mov eax, dword [esi + 0xf4]
add eax, 0xfff670dd
add eax, dword [edx + 0x88]
xor dword [edx + 0x44], eax
jmp 0x100036a2
mov eax, dword [esi + 0xf0]
and eax, dword [esi + 0x68]
add eax, dword [esi + 0xec]
xor dword [esi + 0xc4], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov ecx, dword [0x10247e84]
mov eax, edi
and eax, 0x1fa9
xor dword [ecx + 0x58], eax
mov eax, edi
or eax, 0x23d7
and eax, dword [esi + 0x8c]
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseActCtx]
mov eax, dword [esi + 0x24]
sub eax, dword [0x10280b8c]
xor eax, ebx
or dword [esi + 0x10], eax
mov ecx, dword [0x10280ba4]
imul ecx, dword [0x10280b68]
imul ecx, ebp
add dword [esi + 0x128], ecx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
xor edi, 0x3627
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
ret