Function at 0x100d1df0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push esi
sub esp, 0x18
mov dword [ebp - 8], ecx
mov eax, dword [ebp - 8]
mov dword [ebp - 0x10], eax
lea ecx, vtable.ATL::CWin32Heap.0
mov dword [eax], ecx
test byte [eax + 8], 1
je 0x100d23c8
mov eax, dword [0x10145374]
add eax, dword [0x10145378]
add eax, 0x1d644edc
mov ecx, 0x4a08febb
xor edx, edx
div ecx
mov ecx, 0x1e394cd4
xor edx, edx
div ecx
mov ecx, 0xcf96da30
xor edx, edx
div ecx
imul eax, eax, 0xb07ece06
add eax, 0xc847e9c8
add eax, 0xac2030cc
xor eax, 0x7ebe2031
add eax, 0xe376426d
xor eax, 0xfdd431c5
mov ecx, 0xd8168adf
xor edx, edx
div ecx
and eax, 0xc715544a
mov ecx, 0xdc6900a1
xor edx, edx
div ecx
imul eax, eax, 0x9bbf96b0
imul eax, eax, 0xd0638cb0
add eax, 0x21579e82
imul eax, eax, 0x96b55a33
sub eax, 0xf7bdf917
imul eax, eax, 0x79682f02
mov ecx, 0x7fc53ec2
xor edx, edx
div ecx
cmp eax, 0xdfd0dd05
ja 0x100d270f
mov ecx, dword [ebp - 0x10]
mov eax, dword [0x1014537c]
sub eax, dword [0x10145380]
or eax, 0xc56bb633
mov esi, 0x1c362b5b
xor edx, edx
div esi
add eax, 0xa4c67326
xor eax, 0x71fb78a5
add eax, 0xe8256d0e
or eax, 0xf7fc2b43
or eax, 0x94617d64
xor eax, 0xa43b65ac
sub eax, 0x4ec349fd
mov esi, 0x51234d1b
xor edx, edx
div esi
or eax, 0x6ae0de79
sub eax, 0xec5361bc
imul eax, eax, 0xf5fb318f
add eax, 0x427ed372
mov esi, 0x3e306f53
xor edx, edx
div esi
add eax, 0x7d0792ed
imul eax, eax, 0x2c0952ed
or eax, 0x853a4b7a
add eax, 0x616f7c82
mov esi, 0x68d6d5c6
xor edx, edx
div esi
cmp dword [ecx + 4], 0
setne cl
mov byte [ebp - 0x11], cl
cmp eax, 0xe0d2a93a
jae 0x100d270f
mov al, byte [ebp - 0x11]
test al, 1
jne 0x100d1f52
jmp 0x100d23c8
mov eax, dword [0x10145384]
or eax, dword [0x10145388]
imul eax, eax, 0x5f04288e
and eax, 0x23e4aa6a
mov ecx, 0x894cd5ec
xor edx, edx
div ecx
sub eax, 0xfcac3141
and eax, 0x7e6f2c96
mov ecx, 0x1156e1f1
xor edx, edx
div ecx
and eax, 0x22434286
imul eax, eax, 0x68815a8f
and eax, 0x640f5e9a
xor eax, 0x1bea7078
sub eax, 0xf15ea3b6
and eax, 0x301404f5
and eax, 0x83abc010
add eax, 0x12a55384
sub eax, 0xda79fb2c
xor eax, 0x4185024d
mov ecx, 0x30ba8ade
xor edx, edx
div ecx
and eax, 0x8e38dae6
add eax, 0x895e7df9
xor eax, 0xe0d87ccf
cmp eax, 0xa17c8a8f
jae 0x100d2714
mov eax, dword [0x1014538c]
imul eax, dword [0x10145390]
and eax, 0x12192fee
imul eax, eax, 0xb8d7b304
mov ecx, 0xd3ee71e4
xor edx, edx
div ecx
sub eax, 0x9e0f1f41
mov ecx, 0xfa999d04
xor edx, edx
div ecx
mov ecx, 0x98bfd449
xor edx, edx
div ecx
xor eax, 0xa6b0d6d1
xor eax, 0xc8753496
or eax, 0x23cc58cb
imul eax, eax, 0x2c6f8760
imul eax, eax, 0xbc0768f7
add eax, 0x6f789cb7
and eax, 0x1ddc3613
xor eax, 0x3dab74e6
xor eax, 0xcaa2b0de
imul eax, eax, 0x496b7a4e
add eax, 0x712b0187
and eax, 0x798f662c
or eax, 0xd9cfe351
or eax, 0x8d6feb31
cmp eax, 0xc2f3fcf1
jb 0x100d1fda
mov eax, dword [0x10145394]
xor eax, dword [0x10145398]
sub eax, 0x85be3139
mov ecx, 0x216b7d8a
xor edx, edx
div ecx
sub eax, 0xe9594f7
sub eax, 0xa2bbc767
imul eax, eax, 0x9f5f89ce
and eax, 0x9adfde7b
and eax, 0x7afdc149
xor eax, 0x8abf5ffd
or eax, 0x41e3ff56
mov ecx, 0xfeb1c93d
xor edx, edx
div ecx
or eax, 0xaf43d182
imul eax, eax, 0xc782a361
add eax, 0x649e691f
add eax, 0x2aa7e966
sub eax, 0x273ef569
sub eax, 0xe3092c31
mov ecx, 0xb39e1d97
xor edx, edx
div ecx
add eax, 0x1e26c1e3
xor eax, 0x39ddb31
add eax, 0x9f1f02a7
cmp eax, 0xbb49d278
jbe 0x100d26f0
mov eax, dword [0x1014539c]
xor edx, edx
div dword [0x101453a0]
or eax, 0xa161bb9a
add eax, 0x2f2843e6
or eax, 0x135ae6fa
mov ecx, 0xae6008
xor edx, edx
div ecx
and eax, 0xd08490b8
or eax, 0xae691aaa
sub eax, 0x7d211be4
add eax, 0x36c5704c
imul eax, eax, 0xeef725d7
mov ecx, 0xefe1f05d
xor edx, edx
div ecx
mov ecx, 0xf843af5a
xor edx, edx
div ecx
sub eax, 0xf1a86490
mov ecx, 0x638d02de
xor edx, edx
div ecx
sub eax, 0x8dcbcfa2
add eax, 0x44de0946
and eax, 0xe95be6f7
and eax, 0xd9404610
imul eax, eax, 0x49af1fd7
mov ecx, 0x9fe1193
xor edx, edx
div ecx
and eax, 0xa7a9d458
cmp eax, 0x4b7258ab
ja 0x100d2719
mov eax, dword [0x101453a4]
xor edx, edx
div dword [0x101453a8]
add eax, 0xd8b4e732
sub eax, 0xbf2997cb
imul eax, eax, 0x5b7a8bc7
xor eax, 0x2fc89b45
and eax, 0x39df4683
mov ecx, 0x5eb805d7
xor edx, edx
div ecx
imul eax, eax, 0xc76a27bd
or eax, 0x6e905b9
add eax, 0x5eaacaeb
add eax, 0xa2f4f701
sub eax, 0x6b60d5a9
add eax, 0x80a9028d
or eax, 0x4b4d5ebd
add eax, 0xa5717456
add eax, 0x97cffcb1
mov ecx, 0x7c09ac8f
xor edx, edx
div ecx
mov ecx, eax
mov eax, dword [ebp - 0x10]
add ecx, 0x829a4ae7
add ecx, 0x59a192c8
xor ecx, 0xbcbf0d83
add ecx, 0xe3f2ad82
mov dword [ebp - 0x18], ecx
mov eax, dword [eax + 4]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_HeapDestroy]
sub esp, 4
mov ecx, eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xc], ecx
cmp eax, 0xe3ed6e17
je 0x100d217f
mov eax, dword [0x101453ac]
add eax, dword [0x101453b0]
xor eax, 0x57d867f9
and eax, 0x620fc02d
xor eax, 0x2762b25e
sub eax, 0xc277c97a
sub eax, 0x66502799
or eax, 0x89912015
imul eax, eax, 0xf0975aff
imul eax, eax, 0x5d99f55c
or eax, 0xb5a9eacb
add eax, 0xb60a6702
imul eax, eax, 0x9268cfa4
mov ecx, 0x8ad3209c
xor edx, edx
div ecx
mov ecx, 0x5a8e6e1b
xor edx, edx
div ecx
sub eax, 0x170e6033
or eax, 0xb73ee03
sub eax, 0x238589ba
and eax, 0xd49116dc
add eax, 0x8a8299
add eax, 0xe2cbfbda
imul eax, eax, 0x1087ce42
cmp eax, 0x6fb3ea1b
je 0x100d26f0
mov eax, dword [0x101453b4]
and eax, dword [0x101453b8]
add eax, 0x8deb119c
or eax, 0xbb33a815
and eax, 0x6e2cfd0d
mov ecx, 0xa7bd7dd9
xor edx, edx
div ecx
sub eax, 0x28b0b604
sub eax, 0xeef08a18
sub eax, 0x95d94675
or eax, 0x16c5d241
and eax, 0x64f4a3ab
mov ecx, 0x25b08925
xor edx, edx
div ecx
imul eax, eax, 0x77535965
xor eax, 0x720630ea
imul eax, eax, 0xd6a14610
imul eax, eax, 0x108cf5f1
xor eax, 0xac3c6b7b
or eax, 0xd84aab45
add eax, 0xf1db5ce5
sub eax, 0xa521cc1d
and eax, 0xeb559606
imul eax, eax, 0x3a9755d7
cmp eax, 0x5a48068b
jb 0x100d2733
mov eax, dword [0x101453bc]
and eax, dword [0x101453c0]
sub eax, 0x40f5b37b
add eax, 0xaecffc8b
mov ecx, 0x994722e2
xor edx, edx
div ecx
imul eax, eax, 0xaa816aa0
or eax, 0x5e772a33
xor eax, 0x6de4c8fe
xor eax, 0xb8d663f5
or eax, 0x4fe2a360
mov ecx, 0x8762d9c1
xor edx, edx
div ecx
or eax, 0x990b3eb8
mov ecx, 0xbea17ee0
xor edx, edx
div ecx
add eax, 0xf7a0df62
add eax, 0xfbfb14e4
xor eax, 0x6893043d
mov ecx, 0x598d7850
xor edx, edx
div ecx
xor eax, 0x198e676b
mov ecx, 0x172ab999
xor edx, edx
div ecx
add eax, 0xc1525e85
and eax, 0xeed8c4fd
sub eax, 0x77beb6b4
cmp eax, 0xc3601242
ja 0x100d2733
jmp 0x100d23c8
mov eax, dword [0x101453c4]
or eax, dword [0x101453c8]
sub eax, 0xdb7cd951
mov ecx, 0x76c1ccd3
xor edx, edx
div ecx
xor eax, 0x23bc7af
sub eax, 0x9125c4c7
or eax, 0x8f853eb4
and eax, 0xf7e8804e
add eax, 0x4be9261f
add eax, 0xa9699eae
add eax, 0x84c8f5a
imul eax, eax, 0xe579e08c
and eax, 0x9014c701
sub eax, 0xbc20bf62
and eax, 0xd6c7a41b
xor eax, 0xc794a062
add eax, 0x75395f01
imul eax, eax, 0x8d7e5bac
add eax, 0xf4ca70f3
sub eax, 0xf599e379
add eax, 0x30944c1
or eax, 0x9b11c37c
cmp eax, 0x8bd8efd2
jb 0x100d2738
mov eax, dword [0x101453cc]
sub eax, dword [0x101453d0]
xor eax, 0x119b11d9
and eax, 0x39300f5f
sub eax, 0x8311ae9f
and eax, 0xd9b5af4a
imul eax, eax, 0x4c915c7d
xor eax, 0x8d534d60
imul eax, eax, 0x12e90947
xor eax, 0xf49fe37
and eax, 0xdfbf756c
or eax, 0xeb433b68
add eax, 0x51576298
add eax, 0x9f432660
or eax, 0x7ff237b9
sub eax, 0x5964accd
or eax, 0x667aec9e
add eax, 0x9e6763b
and eax, 0x7f81f35b
and eax, 0x9b94e250
xor eax, 0xe51631ce
add eax, 0xde8115d9
cmp eax, 0xdde16322
je 0x100d2448
mov eax, dword [0x101453d4]
or eax, dword [0x101453d8]
and eax, 0x235f454e
add eax, 0x488ddc12
or eax, 0x58c85d25
sub eax, 0x6f65cedf
mov ecx, 0x2c43aa39
xor edx, edx
div ecx
mov ecx, 0xa5fa21a8
xor edx, edx
div ecx
imul eax, eax, 0xaef2edd7
mov ecx, 0xe0e2ff6c
xor edx, edx
div ecx
xor eax, 0x438b786e
xor eax, 0xb44a52ec
and eax, 0xb0a2f79c
sub eax, 0x6e65b5dc
mov ecx, 0x6b134793
xor edx, edx
div ecx
add eax, 0x83439af
or eax, 0x4c3b26ec
imul eax, eax, 0x6486fce4
add eax, 0x8bd5d2
sub eax, 0x916a0217
imul eax, eax, 0xc9ef6ea9
imul eax, eax, 0x12759bdd
cmp eax, 0xdb690da0
jae 0x100d270a
mov eax, dword [0x101453dc]
imul eax, dword [0x101453e0]
sub eax, 0x2ef7b5f5
sub eax, 0x5b6df27f
add eax, 0x8ce3283
and eax, 0x3d63cd58
and eax, 0x736d66ee
mov ecx, 0xe38d2913
xor edx, edx
div ecx
mov ecx, 0x4f7562a9
xor edx, edx
div ecx
imul eax, eax, 0x7367877e
add eax, 0x75219f4e
imul eax, eax, 0x2136f7b1
add eax, 0x435955d5
sub eax, 0xe1c310c2
imul eax, eax, 0x82e2b986
or eax, 0x41f26b5f
sub eax, 0x2e443eb0
or eax, 0x41b01076
and eax, 0x736b50e8
xor eax, 0x1feca605
add eax, 0x45099f73
or eax, 0x56433a56
cmp eax, 0xef02d7e9
jb 0x100d273d
mov eax, dword [0x101453e4]
xor edx, edx
div dword [0x101453e8]
imul eax, eax, 0x58a72b02
and eax, 0x3ee6ba8b
xor eax, 0x6ac3247c
mov ecx, 0xde33f853
xor edx, edx
div ecx
or eax, 0x700883c9
and eax, 0x1a8a35be
add eax, 0x1a03f610
imul eax, eax, 0x54115dba
xor eax, 0x24160364
or eax, 0x91bc9c58
imul eax, eax, 0x681062c0
and eax, 0xc3b3df0a
add eax, 0xf26fe491
or eax, 0xfbe06c71
and eax, 0xf7d51301
or eax, 0x415947d7
mov ecx, 0x166192fe
xor edx, edx
div ecx
add eax, 0x796feba1
or eax, 0x43f98a66
or eax, 0xd0ce474d
cmp eax, 0x5fb83874
je 0x100d25d8
mov eax, dword [0x101453ec]
and eax, dword [str.Ho__]
add eax, 0x10abc387
add eax, 0x4df38149
xor eax, 0x1c0efb4
xor eax, 0xe8264f30
add eax, 0xc27d3f50
and eax, 0xdf23dfb8
sub eax, 0xaa63bba0
xor eax, 0x54db65db
or eax, 0x27248f26
mov ecx, 0x6383d9ba
xor edx, edx
div ecx
imul eax, eax, 0x33afdb2c
sub eax, 0x96963442
mov ecx, 0x418d7c4
xor edx, edx
div ecx
mov ecx, 0xf85ff4a4
xor edx, edx
div ecx
and eax, 0x8b96ebe
sub eax, 0xa8941913
or eax, 0x5f0ea3fc
sub eax, 0x121d10ed
mov ecx, 0x1aa05627
xor edx, edx
div ecx
xor eax, 0xf9f515bf
cmp eax, 0x60815b99
jb 0x100d2552
add esp, 0x18
pop esi
pop ebp
ret
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 4]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_HeapDestroy]
sub esp, 4
mov dword [ebp - 0xc], eax
jmp 0x100d20ed
jmp 0x100d2552
jmp 0x100d1ea9
jmp 0x100d1fda
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 4]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_HeapDestroy]
sub esp, 4
mov dword [ebp - 0xc], eax
jmp 0x100d217f
jmp 0x100d2334
jmp 0x100d2448
jmp 0x100d25d8