Function at 0x1008b418
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x34
push ebx
push esi
mov esi, ecx
mov ebx, edx
push edi
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0xc], esi
mov eax, dword [esi]
mov eax, dword [eax + 0x378]
call eax
mov edi, eax
test edi, edi
je 0x1008b770
mov ecx, dword [0x10113a14]
mov edx, dword [ecx]
call dword [edx + 0x120]
mov ecx, dword fs:[0x2c]
mov edx, dword [0x10113814]
mov dword [ebp - 0x14], eax
mov edx, dword [ecx + edx*4]
mov ecx, dword [0x1013f2e8]
cmp ecx, dword [edx + 4]
jle 0x1008b495
push 0x1013f2e8
call fcn.1009cfcc
cmp dword [0x1013f2e8], 0xffffffff
pop ecx
jne 0x1008b495
mov eax, dword [ebx + 0x2c]
push 0x1013f2e8
mov dword [0x1013f170], eax
call fcn.1009cf82
pop ecx
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x5b4]
mov ecx, dword [0x10113830]
cmp eax, 0x1c
sete byte [ebp - 1]
mov ecx, dword [ecx + 0x24]
shr ecx, 0xd
and ecx, 0xffffff01
mov dword [ebp - 8], ecx
cmp eax, 0x1c
je 0x1008b4f5
lea esi, [edi + 8]
mov eax, dword [esi]
mov ecx, esi
mov eax, dword [eax + 0x24]
call eax
test eax, eax
je 0x1008b4ef
mov eax, dword [esi]
mov ecx, esi
mov eax, dword [eax + 0x24]
call eax
cmp byte [0x1013b64d], al
je 0x1008b4ef
mov eax, dword [esi]
mov ecx, esi
mov eax, dword [eax + 0x24]
call eax
mov byte [0x1013b64d], al
mov ecx, dword [ebp - 8]
mov esi, dword [ebp - 0xc]
xor ebx, ebx
cmp byte [0x10112a0c], bl
je 0x1008b650
test cl, cl
jne 0x1008b515
cmp byte [0x1013f2d8], bl
jne 0x1008b515
mov byte [0x1013f14c], bl
cmp byte [0x1013b635], bl
je 0x1008b538
mov ecx, edi
call fcn.100075fe
movzx ecx, byte [0x1013b635]
xor edx, edx
cmp dword [eax], ebx
cmovg ecx, edx
mov byte [0x1013b635], cl
mov ecx, edi
call fcn.100075fe
mov cl, byte [0x1013b635]
cmp dword [eax], ebx
jne 0x1008b54f
mov dl, 1
test cl, cl
je 0x1008b551
mov dl, bl
mov al, byte [0x1013f14c]
cmp byte [ebp - 8], bl
je 0x1008b55f
test al, al
je 0x1008b565
test dl, dl
mov dl, bl
je 0x1008b567
mov dl, 1
cmp byte [0x1013f2d8], bl
jne 0x1008b5e9
cmp byte [ebp - 1], bl
jne 0x1008b605
test dl, dl
je 0x1008b605
mov ecx, dword [0x10113a14]
mov edx, ebx
movaps xmm0, xmmword [0x10100240]
mov dword [0x1013b67c], ebx
mov dword [0x1013b644], ebx
mov eax, dword [ecx]
mov byte [0x1013f14c], 1
mov byte [0x1013f2d8], 1
mov byte [0x1013b635], 1
mov edi, dword [eax + 0x1a8]
movups xmmword [ebp - 0x34], xmm0
mov word [ebp - 0x24], 0x74
mov al, byte [ebp - 0x34]
xor byte [ebp + edx - 0x33], al
inc edx
cmp edx, 0x10
jb 0x1008b5c2
lea eax, [ebp - 0x33]
mov byte [ebp - 0x23], bl
push eax
call edi
mov eax, dword [0x10113830]
and dword [eax + 0x24], 0xfffff7fe
jmp 0x1008b690
cmp byte [ebp - 1], bl
je 0x1008b605
test al, al
jne 0x1008b5f6
test cl, cl
je 0x1008b605
mov byte [0x1013b634], 1
mov byte [0x1013f2d8], bl
jmp 0x1008b660
cmp byte [0x1013b634], bl
je 0x1008b65b
mov edx, dword [0x10113a14]
mov cl, 8
mov dword [ebp - 0x20], 0x7b696408
mov dword [ebp - 0x1c], 0x7e66617c
mov byte [ebp - 0x18], bl
mov eax, dword [edx]
mov edi, dword [eax + 0x1a8]
mov eax, ebx
xor byte [ebp + eax - 0x1f], cl
inc eax
cmp eax, 7
jae 0x1008b63f
mov cl, byte [ebp - 0x20]
jmp 0x1008b630
lea eax, [ebp - 0x1f]
mov byte [ebp - 0x18], bl
push eax
mov ecx, edx
call edi
mov byte [0x1013b634], bl
mov cl, byte [0x1013b635]
mov al, byte [0x1013f14c]
cmp byte [ebp - 1], bl
je 0x1008b690
test al, al
jne 0x1008b668
test cl, cl
je 0x1008b690
cmp byte [0x10112a0c], bl
je 0x1008b690
mov al, byte [0x1013b64d]
cmp byte [esi + 0xcc4], al
je 0x1008b685
cmp byte [esi + 0xcc8], al
jne 0x1008b690
call dword [sym.imp.kErnel32.dlL_GetTickCount]
mov dword [0x1013b65c], eax
cmp byte [0x10112a0d], bl
je 0x1008b6ae
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x2c]
test eax, eax
je 0x1008b6ae
mov byte [ebp - 1], 1
cmp dword [0x1013f170], eax
jne 0x1008b6b1
mov byte [ebp - 1], bl
mov eax, dword [0x10113830]
test byte [eax + 0x24], 0x20
je 0x1008b6f6
mov ecx, esi
call fcn.100074d8
cmp dword [eax], 3
jne 0x1008b6f6
mov ecx, dword [0x10113a18]
mov eax, dword [ecx]
mov eax, dword [eax + 0x20]
call eax
mov edi, eax
call fcn.1008af6e
mov esi, eax
call fcn.1008ad6a
push edi
mov edx, esi
mov ecx, eax
call fcn.1008dde1
pop ecx
mov ecx, dword [ebp - 0xc]
cmp byte [eax + ecx], bl
jne 0x1008b71a
cmp byte [ebp - 1], bl
jne 0x1008b71a
call dword [sym.imp.kErnel32.dlL_GetTickCount]
mov ecx, dword [0x1013b65c]
add ecx, 0x258
cmp eax, ecx
jae 0x1008b770
cmp dword [0x1013b67c], 4
jge 0x1008b770
mov ecx, dword [ebp - 0x10]
mov eax, dword [0x1013f170]
mov edx, dword [0x1013b644]
cmp dword [ecx + 0x2c], ebx
cmovne eax, dword [ecx + 0x2c]
mov ecx, dword [0x10113830]
mov dword [0x1013f170], eax
mov eax, dword [ecx + 0x24]
and eax, 0xfffff7fe
or eax, 0x2000
cmp edx, 1
mov dword [ecx + 0x24], eax
mov eax, dword [ebp + 8]
setg cl
mov byte [eax], cl
jg 0x1008b764
mov eax, dword [ebp - 0x14]
lea ebx, [edx + 1]
add dword [eax + 8], 0x10e
inc dword [0x1013b67c]
mov dword [0x1013b644], ebx
pop edi
pop esi
pop ebx
leave
ret