Function at 0x101882c0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x8c4
mov eax, dword [0x1020a0c0]
xor eax, esp
mov dword [esp + 0x8c0], eax
inc dword [0x104e47bc]
push ebx
push esi
push edi
push ecx
mov byte [esp + 0x1b], dl
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test eax, eax
je 0x10188480
push 0xc
lea ecx, [esp + 0x444]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_K32GetModuleInformation]
test eax, eax
je 0x10188480
mov eax, dword [esp + 0x440]
mov esi, dword [esp + 0x444]
test eax, eax
je 0x10188480
test esi, esi
je 0x10188480
mov edx, dword [ebp + 0xc]
mov ebx, eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x18], esi
lea edi, [edx - 1]
mov dword [esp + 0x24], edi
test edx, edx
je 0x1018837f
or ecx, 0xffffffff
mov dword [esp + 0x20], ebx
lea eax, [edx - 1]
mov dword [esp + 0x18], esi
cmp eax, ecx
cmovb ecx, eax
mov eax, dword [ebp + 8]
add ecx, eax
cmp byte [ecx], 0x3f
je 0x1018837b
mov dword [esp + 0x20], ebx
mov dword [esp + 0x18], esi
cmp ecx, eax
je 0x1018837f
dec ecx
cmp byte [ecx], 0x3f
jne 0x10188371
sub ecx, eax
jmp 0x10188382
or ecx, 0xffffffff
xor esi, esi
mov dword [esp + 0x2c], 0
cmp ecx, 0xffffffff
mov eax, edx
cmovne esi, ecx
mov ecx, 1
sub eax, esi
dec eax
cmp eax, ecx
cmova ecx, eax
lea eax, [esp + 0x28]
mov dword [esp + 0x28], ecx
mov eax, dword [eax]
mov dword [esp + 0x1c], ecx
lea ecx, [esp + 0x2c]
cmp eax, dword [ecx]
jne 0x101883d0
push 0x400
lea eax, [esp + 0x44]
push 0
push eax
call fcn.1019f050
mov edx, dword [ebp + 0xc]
add esp, 0xc
jmp 0x101883e3
mov eax, dword [esp + 0x1c]
lea edi, [esp + 0x40]
mov ecx, 0x100
rep stosd dword es:[edi], eax
mov edi, dword [esp + 0x24]
cmp esi, edi
jae 0x10188407
mov ebx, dword [ebp + 8]
nop word [eax + eax]
movzx eax, byte [ebx + esi]
sub edx, esi
dec edx
inc esi
mov dword [esp + eax*4 + 0x40], edx
mov edx, dword [ebp + 0xc]
cmp esi, edi
jb 0x101883f0
mov ebx, dword [esp + 0x20]
mov eax, dword [esp + 0x18]
lea esi, [esp + 0x40]
sub eax, dword [ebp + 0xc]
lea edi, [esp + 0x4c8]
add eax, ebx
mov ecx, 0x100
mov dword [esp + 0x18], eax
rep movsd dword es:[edi], dword [esi]
cmp ebx, eax
ja 0x10188480
mov edi, dword [esp + 0x24]
mov ecx, edi
test edi, edi
js 0x10188452
mov esi, dword [ebp + 8]
lea eax, [ebx + edi]
sub esi, ebx
nop dword [eax]
mov dl, byte [esi + eax]
cmp dl, 0x3f
je 0x1018844c
cmp byte [eax], dl
jne 0x1018846b
dec eax
sub ecx, 1
jns 0x10188440
mov eax, ebx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x8c0]
xor ecx, esp
call fcn.1019d163
mov esp, ebp
pop ebp
ret 8
movzx eax, byte [ebx + edi]
add ebx, dword [esp + eax*4 + 0x4c8]
cmp ebx, dword [esp + 0x18]
ja 0x10188480
mov ecx, edi
jmp 0x10188434
cmp byte [esp + 0x17], 0
je 0x1018886c
mov ax, word [0x101fdf08]
xor ebx, ebx
movq xmm0, qword [str.QQCDY]
mov word [esp + 0x448], ax
mov al, byte [0x101fdf0a]
movq qword [esp + 0x440], xmm0
mov byte [esp + 0x44a], al
nop dword [eax + eax]
mov eax, 0x3521cfb3
mov cl, bl
mul ebx
mov eax, ebx
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul eax, eax, 0x35
sub cl, al
add cl, 0x33
xor byte [esp + ebx + 0x440], cl
inc ebx
cmp ebx, 0xb
jl 0x101884c0
mov edx, dword [0x104e47bc]
lea ecx, [esp + 0x4b0]
call fcn.10003db0
movups xmm0, xmmword [0x101fdf2c]
mov cl, byte [0x101fdf44]
xor ebx, ebx
cmp dword [0x102296a0], 2
mov esi, eax
movups xmmword [esp + 0x44c], xmm0
mov byte [esp + 0x464], cl
movq xmm0, qword [0x101fdf3c]
movq qword [esp + 0x45c], xmm0
jl 0x10188680
movaps xmm0, xmmword [0x101ff800]
mov eax, 4
movaps xmm4, xmmword [0x101ff6c0]
movaps xmm3, xmmword [0x101ffb90]
movaps xmm6, xmmword [0x101ff740]
movd xmm5, eax
mov eax, 0x1f
movaps xmmword [esp + 0x30], xmm0
mov ecx, dword [esp + 0x30]
movd xmm7, eax
movd xmm0, ebx
lea eax, [ebx + 4]
pshufd xmm2, xmm0, 0
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm5
movaps xmm0, xmm1
psrld xmm0, xmm7
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x101ff7d0]
packuswb xmm1, xmm1
movd xmm0, ecx
paddb xmm1, xmm0
movd xmm0, dword [esp + ebx + 0x44c]
pxor xmm1, xmm0
movd xmm0, eax
pshufd xmm2, xmm0, 0
movd dword [esp + ebx + 0x44c], xmm1
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm5
movaps xmm0, xmm1
psrld xmm0, xmm7
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x101ff7d0]
packuswb xmm1, xmm1
movd xmm0, ecx
paddb xmm1, xmm0
movd xmm0, dword [esp + ebx + 0x450]
pxor xmm1, xmm0
movd dword [esp + ebx + 0x450], xmm1
add ebx, 8
cmp ebx, 0x18
jl 0x10188573
cmp ebx, 0x19
jge 0x101886ab
nop dword [eax + eax]
mov eax, 0x4d4873ed
mov cl, bl
imul ebx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
movsx eax, al
imul eax, eax, 0x35
sub cl, al
add cl, 0x33
xor byte [esp + ebx + 0x44c], cl
inc ebx
cmp ebx, 0x19
jl 0x10188680
xorps xmm0, xmm0
mov dword [esp + 0x4a8], 0
lea ecx, [esp + 0x44c]
mov dword [esp + 0x4ac], 0
movups xmmword [esp + 0x498], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x101886d6
sub ecx, edx
lea eax, [esp + 0x44c]
push ecx
push eax
lea ecx, [esp + 0x4a0]
call fcn.10027bd0
push esi
lea eax, [esp + 0x49c]
push eax
push dword [esp + 0x24]
lea ecx, [esp + 0x474]
call fcn.10029890
mov ecx, dword [esp + 0x478]
mov edx, dword [esp + 0x47c]
cmp ecx, edx
jae 0x10188743
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [esp + 0x478], eax
lea eax, [esp + 0x468]
cmovae eax, dword [esp + 0x468]
mov word [eax + ecx], 0x21
jmp 0x10188757
push 0x21
push dword [esp + 0x20]
lea ecx, [esp + 0x470]
push 1
call fcn.100281f0
movups xmm1, xmmword [esp + 0x468]
lea ecx, [esp + 0x480]
movq xmm0, qword [esp + 0x478]
movd eax, xmm1
movq qword [esp + 0x490], xmm0
cmp dword [esp + 0x494], 0x10
push 0x30
cmovae ecx, eax
lea eax, [esp + 0x444]
push eax
push ecx
push 0
movups xmmword [esp + 0x490], xmm1
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, dword [esp + 0x494]
cmp ecx, 0x10
jb 0x101887de
mov edx, dword [esp + 0x480]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x101887d4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10188885
push ecx
push edx
call fcn.1019d45c
add esp, 8
mov ecx, dword [esp + 0x4ac]
mov dword [esp + 0x490], 0
mov dword [esp + 0x494], 0xf
mov byte [esp + 0x480], 0
cmp ecx, 0x10
jb 0x10188834
mov edx, dword [esp + 0x498]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1018882a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10188885
push ecx
push edx
call fcn.1019d45c
add esp, 8
mov ecx, dword [esp + 0x4c4]
cmp ecx, 0x10
jb 0x1018886c
mov edx, dword [esp + 0x4b0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10188862
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10188885
push ecx
push edx
call fcn.1019d45c
add esp, 8
mov ecx, dword [esp + 0x8cc]
xor eax, eax
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.1019d163
mov esp, ebp
pop ebp
ret 8
call fcn.101a26e6
int3