Function at 0x100221c0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10056018
mov eax, dword fs:[0]
push eax
sub esp, 0x104
mov eax, dword [0x1006a018]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
movzx ecx, word [ebp + 0xc]
movzx eax, word [ebp + 8]
movzx edx, word [ebp + 0x14]
mov dword [ebp - 0x60], ecx
movzx ecx, word [ebp + 0x10]
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x64], edx
mov dword [ebp - 0x44], 0
mov dword [ebp - 4], 1
test ax, ax
je 0x100225d7
test cx, cx
je 0x100225d7
cmp dword [esi + 0x2c], 0
ja 0x100225d7
cmp dword [ebp + 0x2c], 0x10
lea eax, [ebp + 0x18]
lea ecx, [ebp - 0x28]
cmovae eax, dword [ebp + 0x18]
push eax
call fcn.100053b0
mov byte [ebp - 4], 2
mov edi, dword [esi + 4]
mov ebx, dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test edi, edi
je 0x10022273
push 4
push edi
call ebx
test eax, eax
jne 0x10022273
lea eax, [ebp - 0x28]
mov ecx, edi
push eax
call dword [0x1006254c]
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x14]
cmp eax, 0x10
jb 0x10022289
inc eax
push eax
push dword [ebp - 0x28]
call fcn.10005180
cmp dword [ebp + 0x44], 0x10
lea eax, [ebp + 0x30]
lea ecx, [ebp - 0x28]
cmovae eax, dword [ebp + 0x30]
push eax
call fcn.100053b0
mov byte [ebp - 4], 3
mov edi, dword [esi + 8]
test edi, edi
je 0x100222bd
push 4
push edi
call ebx
test eax, eax
jne 0x100222bd
lea eax, [ebp - 0x28]
mov ecx, edi
push eax
call dword [0x1006254c]
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x14]
cmp eax, 0x10
jb 0x100222d3
inc eax
push eax
push dword [ebp - 0x28]
call fcn.10005180
mov edi, dword [esi + 0xc]
test edi, edi
je 0x100222ec
push 4
push edi
call ebx
test eax, eax
jne 0x100222ec
push eax
mov ecx, edi
call dword [0x10062550]
mov edi, dword [esi + 0x10]
test edi, edi
je 0x10022305
push 4
push edi
call ebx
test eax, eax
jne 0x10022305
push eax
mov ecx, edi
call dword [0x10062550]
mov edi, dword [ebp - 0x98]
cmp di, 0xffff
je 0x100225bd
cmp word [ebp - 0x5c], 0xffff
je 0x100225bd
mov bh, 0x30
mov byte [ebp - 0x48], 0
mov al, 0x43
mov byte [ebp - 0x50], bh
mov ah, 0x5f
mov byte [ebp - 0x48], 0
xor al, bh
xor ah, bh
mov cl, 0x49
mov byte [ebp - 0x4f], al
mov dl, 0x5d
mov byte [ebp - 0x4b], ah
mov ch, 0x5c
lea eax, [ebp - 0x4f]
mov dh, 0x6c
xor cl, bh
xor dl, bh
mov byte [ebp - 0x4e], cl
xor ch, bh
mov byte [ebp - 0x4d], dl
xor dh, bh
mov byte [ebp - 0x4a], ch
mov bl, 0x52
mov byte [ebp - 0x49], dh
xor bl, bh
lea ecx, [ebp - 0x40]
push eax
mov edx, 0x100706a8
mov byte [ebp - 0x4c], bl
call fcn.10011700
add esp, 4
mov eax, dword [ebp - 0x60]
mov byte [ebp - 4], 4
test ax, ax
jne 0x100223c7
movaps xmm0, xmmword [0x10063090]
xor ecx, ecx
movups xmmword [ebp - 0x7c], xmm0
mov dword [ebp - 0x6c], 0x1953160f
mov word [ebp - 0x68], 0x905
mov byte [ebp - 0x66], al
nop dword [eax + eax]
mov al, byte [ebp - 0x7c]
xor byte [ebp + ecx - 0x7b], al
inc ecx
cmp ecx, 0x15
jb 0x100223a0
lea eax, [ebp - 0x7b]
mov byte [ebp - 0x66], 0
push eax
lea ecx, [ebp - 0xdc]
call fcn.100053b0
mov ebx, 1
jmp 0x1002243f
cmp dword [ebp - 0x2c], 0x10
movaps xmm0, xmmword [0x10063280]
cwde
push eax
movsx eax, di
push eax
lea eax, [ebp - 0x40]
mov word [ebp - 0x9c], 0x23
cmovae eax, dword [ebp - 0x40]
xor ecx, ecx
push 1
push eax
movups xmmword [ebp - 0xac], xmm0
nop dword [eax]
nop dword [eax + eax]
mov al, byte [ebp - 0xac]
xor byte [ebp + ecx - 0xab], al
inc ecx
cmp ecx, 0x10
jb 0x10022400
sub esp, 0x18
mov byte [ebp - 0x9b], 0
lea eax, [ebp - 0xab]
mov ecx, esp
push eax
call fcn.100053b0
lea eax, [ebp - 0xc4]
push eax
call fcn.1000be20
add esp, 0x2c
mov ebx, 2
push eax
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x44], ebx
call fcn.10004b50
mov dword [ebp - 4], 6
test bl, 2
je 0x10022468
and ebx, 0xfffffffd
lea ecx, [ebp - 0xc4]
mov dword [ebp - 0x44], ebx
call fcn.10004d70
mov byte [ebp - 4], 7
test bl, 1
je 0x10022482
and ebx, 0xfffffffe
lea ecx, [ebp - 0xdc]
mov dword [ebp - 0x44], ebx
call fcn.10004d70
mov ecx, dword [esi + 0x14]
lea edx, [ebp - 0x28]
call fcn.10011fb0
mov ecx, dword [esi + 0x14]
sub esp, 0x1c
call fcn.10011fe0
mov eax, dword [ebp - 0x64]
add esp, 0x1c
test ax, ax
jne 0x100224fe
movaps xmm0, xmmword [0x10062ef0]
xor ecx, ecx
movups xmmword [ebp - 0x94], xmm0
mov dword [ebp - 0x84], 0x165c1900
mov word [ebp - 0x80], 0x60a
mov byte [ebp - 0x7e], al
nop word [eax + eax]
mov al, byte [ebp - 0x94]
xor byte [ebp + ecx - 0x93], al
inc ecx
cmp ecx, 0x15
jb 0x100224d0
lea eax, [ebp - 0x93]
mov byte [ebp - 0x7e], 0
push eax
lea ecx, [ebp - 0x10c]
call fcn.100053b0
or ebx, 4
jmp 0x10022557
cmp dword [ebp - 0x2c], 0x10
movaps xmm0, xmmword [0x10062df0]
cwde
push eax
mov eax, dword [ebp - 0x5c]
cwde
push eax
lea eax, [ebp - 0x40]
mov word [ebp - 0x48], 1
cmovae eax, dword [ebp - 0x40]
xor ecx, ecx
push 1
push eax
movups xmmword [ebp - 0x58], xmm0
mov al, byte [ebp - 0x58]
xor byte [ebp + ecx - 0x57], al
inc ecx
cmp ecx, 0x10
jb 0x10022526
sub esp, 0x18
mov byte [ebp - 0x47], 0
lea eax, [ebp - 0x57]
mov ecx, esp
push eax
call fcn.100053b0
lea eax, [ebp - 0xf4]
push eax
call fcn.1000be20
add esp, 0x2c
or ebx, 8
push eax
lea ecx, [ebp - 0x28]
call fcn.1000ce20
test bl, 8
je 0x10022573
lea ecx, [ebp - 0xf4]
and ebx, 0xfffffff7
call fcn.10004d70
mov dword [ebp - 4], 7
test bl, 4
je 0x1002258a
lea ecx, [ebp - 0x10c]
call fcn.10004d70
mov ecx, dword [esi + 0x18]
lea edx, [ebp - 0x28]
call fcn.10011fb0
mov ecx, dword [esi + 0x18]
sub esp, 0x1c
call fcn.10011fe0
add esp, 0x1c
lea ecx, [ebp - 0x28]
call fcn.10004d70
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 1
call fcn.10004d70
mov ebx, dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
mov esi, dword [esi + 0x34]
test esi, esi
je 0x100225d7
push 4
push esi
call ebx
test eax, eax
jne 0x100225d7
push 1
mov ecx, esi
call dword [0x100624e8]
mov eax, dword [ebp + 0x2c]
cmp eax, 0x10
jb 0x100225e9
inc eax
push eax
push dword [ebp + 0x18]
call fcn.10005180
mov eax, dword [ebp + 0x44]
mov dword [ebp + 0x2c], 0xf
mov dword [ebp + 0x28], 0
mov byte [ebp + 0x18], 0
cmp eax, 0x10
jb 0x1002260d
inc eax
push eax
push dword [ebp + 0x30]
call fcn.10005180
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10052ee0
mov esp, ebp
pop ebp
ret 0x40