Function at 0x1001b428
Capabilities:
Encode data using xor

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x698
lea ecx, [esp + 0x6c]
call fcn.10013ddc
lea ecx, [esp + 0x18]
call fcn.10013ddc
lea esi, [esp + 0x3fc]
push 0x9c
push str.SystemCurrentControlSetControlClass4d36e972_e325_11ce_bfc1_08002be10318
push esi
call fcn.100318d0
add esp, 0xc
mov eax, esp
push eax
push 0x20019
push 0
push esi
push 0x80000002
call fcn.10019d56
xor esi, esi
test eax, eax
jne 0x1001ba79
xor ebp, ebp
lea esi, [esp + 4]
lea ebx, [esp + 0x498]
lea edi, [esp + 8]
mov dword [esp + 4], 0x100
mov eax, dword [esp]
sub esp, 0x20
pxor xmm0, xmm0
movdqu xmmword [esp + 0x10], xmm0
mov dword [esp + 0xc], esi
mov dword [esp + 8], ebx
mov dword [esp + 4], ebp
inc ebp
mov dword [esp], eax
call fcn.1001ba98
test eax, eax
je 0x1001b4cb
cmp eax, 0x103
jne 0x1001b4e1
jmp 0x1001b848
push edi
push 0x20019
push 0
push ebx
push dword [esp + 0x10]
call fcn.10019d56
test eax, eax
je 0x1001b4eb
mov dword [esp + 4], 0x100
jmp 0x1001b48e
mov dword [esp + 0x84], 0x1b3e1b21
mov word [esp + 0x88], 0x1b4e
mov word [esp + 0x9e], 0
movdqa xmm0, xmmword [0x1003fff0]
movdqu xmmword [esp + 0x74], xmm0
xor eax, eax
inc eax
lea ecx, [eax + 0x1b44]
xor word [esp + eax*2 + 0x74], cx
inc eax
cmp eax, 0x15
jne 0x1001b51b
mov word [esp + 0x9e], 0
lea eax, [esp + 0x14]
push eax
push 0x20019
push 0
lea eax, [esp + 0x80]
push eax
push dword [esp + 0x18]
call fcn.10019d56
test eax, eax
je 0x1001b56e
push dword [esp + 8]
call fcn.10019b56
push dword [esp + 0x14]
call fcn.10019b56
jmp 0x1001b48e
push dword [esp + 0x14]
call fcn.10019b56
mov dword [esp + 0x84], 0x1b2b1b3e
mov dword [esp + 0x88], 0x1b2c1b2f
mov dword [esp + 0x8c], 0x1b221b35
mov word [esp + 0x90], 0x1b52
mov word [esp + 0xae], 0
movdqa xmm0, xmmword [0x10040000]
movdqu xmmword [esp + 0x74], xmm0
xor eax, eax
inc eax
lea ecx, [eax + 0x1b44]
xor word [esp + eax*2 + 0x74], cx
inc eax
cmp eax, 0x1d
jne 0x1001b5bd
mov word [esp + 0xae], 0
lea eax, [esp + 0x10]
push eax
push 0x20019
push 0
lea eax, [esp + 0x80]
push eax
push dword [esp + 0x18]
call fcn.10019d56
test eax, eax
jne 0x1001b67e
mov dword [esp + 4], 0x100
mov dword [esp + 0x84], 0x1b281b2b
mov word [esp + 0x88], 0x1b4e
mov word [esp + 0x9e], 0
movdqa xmm0, xmmword [0x10040010]
movdqu xmmword [esp + 0x74], xmm0
xor eax, eax
inc eax
lea ecx, [eax + 0x1b44]
xor word [esp + eax*2 + 0x74], cx
inc eax
cmp eax, 0x15
jne 0x1001b635
mov word [esp + 0x9e], 0
push esi
lea eax, [esp + 0x282]
push eax
lea eax, [esp + 0x14]
push eax
push 0
lea eax, [esp + 0x84]
push eax
push dword [esp + 0x24]
call fcn.10019c26
test eax, eax
je 0x1001b68c
push dword [esp + 0x10]
call fcn.10019b56
push dword [esp + 8]
call fcn.10019b56
jmp 0x1001b4e1
mov word [esp + 0x84], 0x1b4c
mov word [esp + 0x96], 0
movaps xmm0, xmmword [0x10040020]
movups xmmword [esp + 0x74], xmm0
movups xmm0, xmmword [esp + 0x76]
xorps xmm0, xmmword [0x10040030]
movups xmmword [esp + 0x76], xmm0
movdqu xmm0, xmmword [esp + 0x86]
pxor xmm0, xmmword [0x10040040]
movdqu xmmword [esp + 0x86], xmm0
lea eax, [esp + 0x74]
push eax
lea eax, [esp + 0x282]
push eax
call fcn.10032128
add esp, 8
test eax, eax
je 0x1001b675
mov dword [esp + 4], 0x100
mov dword [esp + 0x84], 0x1b2e1b3f
mov word [esp + 0x88], 0x1b4e
mov word [esp + 0x9e], 0
movdqa xmm0, xmmword [0x10040050]
movdqu xmmword [esp + 0x74], xmm0
xor eax, eax
inc eax
lea ecx, [eax + 0x1b44]
xor word [esp + eax*2 + 0x74], cx
inc eax
cmp eax, 0x15
jne 0x1001b728
mov word [esp + 0x9e], 0
push esi
lea eax, [esp + 0x282]
push eax
lea eax, [esp + 0x14]
push eax
push 0
lea eax, [esp + 0x84]
push eax
push dword [esp + 0x1c]
call fcn.10019c26
test eax, eax
jne 0x1001b675
lea ecx, [esp + 0x6c]
lea eax, [esp + 0x27e]
push eax
call fcn.10013e6e
mov dword [esp + 4], 0x100
movaps xmm0, xmmword [0x10040060]
movups xmmword [esp + 0x84], xmm0
mov word [esp + 0x94], 0x1b54
mov word [esp + 0xb6], 0
movaps xmm0, xmmword [0x10040070]
movups xmmword [esp + 0x74], xmm0
xor eax, eax
movdqa xmm0, xmmword [0x1003fbc0]
movdqa xmm3, xmmword [0x10040080]
movdqa xmm4, xmmword [str._b_b_b_b_b_b_b_bS]
movdqu xmm1, xmmword [esp + eax*2 + 0x76]
movdqa xmm2, xmm0
paddw xmm2, xmm3
pxor xmm2, xmm1
movdqu xmmword [esp + eax*2 + 0x76], xmm2
add eax, 8
paddw xmm0, xmm4
cmp eax, 0x20
jne 0x1001b7ce
mov word [esp + 0xb6], 0
push esi
lea eax, [esp + 0x282]
push eax
lea eax, [esp + 0x14]
push eax
push 0
lea eax, [esp + 0x84]
push eax
push dword [esp + 0x1c]
call fcn.10019c26
test eax, eax
jne 0x1001b675
lea ecx, [esp + 0x18]
lea eax, [esp + 0x27e]
push eax
call fcn.10013e6e
push dword [esp + 0x10]
call fcn.10019b56
push dword [esp + 8]
call fcn.10019b56
push dword [esp]
call fcn.10019b56
cmp dword [esp + 0x1c], 0
je 0x1001b8af
lea edi, [esp + 0x37e]
push 0x7e
push str.SYSTEMCurrentControlSetServicesTcpipParametersInterfaces_
push edi
call fcn.100318d0
add esp, 0xc
xor ebx, ebx
push 0x208
push ebx
lea ebp, [esp + 0x7c]
push ebp
call fcn.10031f20
add esp, 0xc
push dword [esp + 0x18]
push edi
push str._ws_ws
push ebp
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov eax, esp
push eax
push 0x20019
push ebx
push ebp
push 0x80000002
call fcn.10019d56
test eax, eax
je 0x1001b8b7
xor esi, esi
inc esi
jmp 0x1001ba79
mov dword [esp + 4], 0x100
mov dword [esp + 0x30], 0x1b281b1f
mov dword [esp + 0x34], 0x1b391b3c
mov dword [esp + 0x38], 0x1b231b35
mov word [esp + 0x3c], 0x1b52
mov word [esp + 0x5a], 0
movdqa xmm0, xmmword [0x10040090]
movdqu xmmword [esp + 0x20], xmm0
xor eax, eax
inc eax
lea ecx, [eax + 0x1b44]
xor word [esp + eax*2 + 0x20], cx
inc eax
cmp eax, 0x1d
jne 0x1001b8f6
lea edi, [esp + 0x20]
mov word [edi + 0x3a], 0
push esi
lea ebx, [esp + 0x282]
push ebx
lea eax, [esp + 0x14]
push eax
push 0
push edi
push dword [esp + 0x14]
call fcn.10019c26
test eax, eax
je 0x1001b985
mov dword [esp + 0x30], 0x1b3f1b29
mov word [esp + 0x34], 0x1b4e
mov word [esp + 0x4a], 0
movdqa xmm0, xmmword [0x100400a0]
movdqu xmmword [esp + 0x20], xmm0
xor eax, eax
inc eax
lea ecx, [eax + 0x1b44]
xor word [esp + eax*2 + 0x20], cx
inc eax
cmp eax, 0x15
jne 0x1001b956
mov word [esp + 0x4a], 0
push esi
push ebx
lea eax, [esp + 0x14]
push eax
push 0
push edi
push dword [esp + 0x14]
call fcn.10019c26
test eax, eax
jne 0x1001b992
mov ecx, dword [esp + 0x6ac]
push ebx
call fcn.10013e6e
mov dword [esp + 4], 0x100
movaps xmm0, xmmword [0x100400b0]
movups xmmword [esp + 0x30], xmm0
mov dword [esp + 0x40], 0x1b2c1b35
mov word [esp + 0x44], 0x1b56
mov word [esp + 0x6a], 0
movdqa xmm0, xmmword [0x100400c0]
movdqu xmmword [esp + 0x20], xmm0
xor eax, eax
inc eax
lea ecx, [eax + 0x1b44]
xor word [esp + eax*2 + 0x20], cx
inc eax
cmp eax, 0x25
jne 0x1001b9cd
mov word [esp + 0x6a], 0
push esi
push ebx
lea eax, [esp + 0x14]
push eax
push 0
push edi
push dword [esp + 0x14]
call fcn.10019c26
test eax, eax
je 0x1001ba62
mov dword [esp + 0x30], 0x1b391b2d
mov dword [esp + 0x34], 0x1b381b2b
mov dword [esp + 0x38], 0x1b281b31
mov word [esp + 0x3c], 0x1b52
mov word [esp + 0x5a], 0
movdqa xmm0, xmmword [0x100400d0]
movdqu xmmword [esp + 0x20], xmm0
xor eax, eax
inc eax
lea ecx, [eax + 0x1b44]
xor word [esp + eax*2 + 0x20], cx
inc eax
cmp eax, 0x1d
jne 0x1001ba33
mov word [esp + 0x5a], 0
push esi
push ebx
lea eax, [esp + 0x14]
push eax
push 0
push edi
push dword [esp + 0x14]
call fcn.10019c26
test eax, eax
jne 0x1001ba6f
mov ecx, dword [esp + 0x6b0]
push ebx
call fcn.10013e6e
push dword [esp]
call fcn.10019b56
xor esi, esi
lea ecx, [esp + 0x18]
call fcn.10013eba
lea ecx, [esp + 0x6c]
call fcn.10013eba
mov eax, esi
add esp, 0x698
pop esi
pop edi
pop ebx
pop ebp
ret