Function at 0x1011fb10
Capabilities:
Encode data using xor
Encrypt data using aes
Reference aes constants
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x6ec
mov eax, dword [0x103c4120]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 8]
mov ecx, 0x20
push esi
push edi
lea edi, [ebp - 0x234]
lea esi, [ebx + 8]
mov dword [ebp - 0x6ec], esi
rep movsd dword es:[edi], dword [esi]
mov edi, dword [ebp + 0xc]
mov esi, dword [edi + 0x1e0]
add esi, dword [edi + 0x1c0]
add esi, dword [edi + 0x1a0]
add esi, dword [edi + 0x180]
add esi, dword [edi + 0x160]
add esi, dword [edi + 0x140]
add esi, dword [edi + 0x120]
add esi, dword [edi + 0x100]
add esi, dword [ebp - 0x1f4]
add esi, dword [ebp - 0x1d4]
mov edx, dword [edi + 0xe0]
mov ecx, esi
add edx, dword [edi + 0xc0]
mov eax, esi
add edx, dword [edi + 0xa0]
add edx, dword [edi + 0x80]
add edx, dword [edi + 0x60]
add edx, dword [edi + 0x40]
add edx, dword [edi + 0x20]
add edx, dword [edi]
add edx, dword [ebp - 0x234]
add edx, dword [ebp - 0x214]
ror ecx, 0xd
rol esi, 5
ror eax, 5
xor ecx, eax
mov eax, edx
xor ecx, esi
ror eax, 3
mov esi, dword [edi + 0x1e4]
add esi, dword [edi + 0x1c4]
add esi, dword [edi + 0x1a4]
add esi, dword [edi + 0x184]
add esi, dword [edi + 0x164]
add esi, dword [edi + 0x144]
add esi, dword [edi + 0x124]
add esi, dword [edi + 0x104]
add esi, dword [ebp - 0x1f0]
add esi, dword [ebp - 0x1d0]
mov dword [ebp - 0x6d8], ecx
mov ecx, edx
rol edx, 3
rol ecx, 0xd
xor ecx, eax
mov eax, esi
xor ecx, edx
ror eax, 5
mov edx, dword [edi + 0xe4]
add edx, dword [edi + 0xc4]
add edx, dword [edi + 0xa4]
add edx, dword [edi + 0x84]
add edx, dword [edi + 0x64]
add dword [ebp - 0x6d8], ecx
mov ecx, esi
add edx, dword [edi + 0x44]
add edx, dword [edi + 0x24]
add edx, dword [edi + 4]
add edx, dword [ebp - 0x230]
add edx, dword [ebp - 0x210]
ror ecx, 0xd
xor ecx, eax
rol esi, 5
xor ecx, esi
mov eax, edx
mov dword [ebp - 0x6c8], ecx
mov ecx, edx
rol ecx, 0xd
ror eax, 3
xor ecx, eax
rol edx, 3
xor ecx, edx
mov esi, dword [edi + 0xe8]
add esi, dword [edi + 0xc8]
add esi, dword [edi + 0xa8]
add esi, dword [edi + 0x88]
add esi, dword [edi + 0x68]
add esi, dword [edi + 0x48]
add esi, dword [edi + 0x28]
add esi, dword [edi + 8]
add esi, dword [ebp - 0x22c]
add esi, dword [ebp - 0x20c]
add dword [ebp - 0x6c8], ecx
mov eax, esi
mov edx, dword [edi + 0x1e8]
mov ecx, esi
add edx, dword [edi + 0x1c8]
add edx, dword [edi + 0x1a8]
add edx, dword [edi + 0x188]
add edx, dword [edi + 0x168]
add edx, dword [edi + 0x148]
add edx, dword [edi + 0x128]
add edx, dword [edi + 0x108]
add edx, dword [ebp - 0x1ec]
add edx, dword [ebp - 0x1cc]
rol esi, 3
rol ecx, 0xd
ror eax, 3
xor ecx, eax
mov eax, edx
xor ecx, esi
ror eax, 5
mov esi, dword [edi + 0xec]
add esi, dword [edi + 0xcc]
add esi, dword [edi + 0xac]
add esi, dword [edi + 0x8c]
add esi, dword [edi + 0x6c]
add esi, dword [edi + 0x4c]
add esi, dword [edi + 0x2c]
add esi, dword [edi + 0xc]
add esi, dword [ebp - 0x228]
add esi, dword [ebp - 0x208]
mov dword [ebp - 0x6cc], ecx
mov ecx, edx
ror ecx, 0xd
xor ecx, eax
rol edx, 5
xor ecx, edx
mov eax, esi
add dword [ebp - 0x6cc], ecx
mov ecx, esi
mov edx, dword [edi + 0x1ec]
add edx, dword [edi + 0x1cc]
add edx, dword [edi + 0x1ac]
add edx, dword [edi + 0x18c]
add edx, dword [edi + 0x16c]
add edx, dword [edi + 0x14c]
add edx, dword [edi + 0x12c]
add edx, dword [edi + 0x10c]
add edx, dword [ebp - 0x1e8]
add edx, dword [ebp - 0x1c8]
rol ecx, 0xd
rol esi, 3
ror eax, 3
xor ecx, eax
mov eax, edx
xor ecx, esi
ror eax, 5
mov esi, dword [edi + 0xf0]
add esi, dword [edi + 0xd0]
add esi, dword [edi + 0xb0]
add esi, dword [edi + 0x90]
add esi, dword [edi + 0x70]
add esi, dword [edi + 0x50]
add esi, dword [edi + 0x30]
mov dword [ebp - 0x6b8], ecx
mov ecx, edx
ror ecx, 0xd
xor ecx, eax
rol edx, 5
xor ecx, edx
add dword [ebp - 0x6b8], ecx
add esi, dword [edi + 0x10]
add esi, dword [ebp - 0x224]
add esi, dword [ebp - 0x204]
mov edx, dword [edi + 0x1f0]
mov ecx, esi
add edx, dword [edi + 0x1d0]
mov eax, esi
add edx, dword [edi + 0x1b0]
add edx, dword [edi + 0x190]
add edx, dword [edi + 0x170]
add edx, dword [edi + 0x150]
add edx, dword [edi + 0x130]
add edx, dword [edi + 0x110]
add edx, dword [ebp - 0x1e4]
add edx, dword [ebp - 0x1c4]
rol esi, 3
rol ecx, 0xd
ror eax, 3
xor ecx, eax
mov eax, edx
xor ecx, esi
ror eax, 5
mov esi, dword [edi + 0xf4]
add esi, dword [edi + 0xd4]
add esi, dword [edi + 0xb4]
add esi, dword [edi + 0x94]
add esi, dword [edi + 0x74]
add esi, dword [edi + 0x54]
add esi, dword [edi + 0x34]
add esi, dword [edi + 0x14]
add esi, dword [ebp - 0x220]
add esi, dword [ebp - 0x200]
mov dword [ebp - 0x6c4], ecx
mov ecx, edx
rol edx, 5
ror ecx, 0xd
xor ecx, eax
mov eax, esi
xor ecx, edx
ror eax, 3
mov edx, dword [edi + 0x1f4]
add edx, dword [edi + 0x1d4]
add edx, dword [edi + 0x1b4]
add edx, dword [edi + 0x194]
add edx, dword [edi + 0x174]
add edx, dword [edi + 0x154]
add dword [ebp - 0x6c4], ecx
mov ecx, esi
add edx, dword [edi + 0x134]
add edx, dword [edi + 0x114]
add edx, dword [ebp - 0x1e0]
add edx, dword [ebp - 0x1c0]
rol esi, 3
rol ecx, 0xd
xor ecx, eax
mov eax, edx
xor ecx, esi
ror eax, 5
mov esi, dword [edi + 0xf8]
add esi, dword [edi + 0xd8]
add esi, dword [edi + 0xb8]
add esi, dword [edi + 0x98]
add esi, dword [edi + 0x78]
add esi, dword [edi + 0x58]
add esi, dword [edi + 0x38]
add esi, dword [edi + 0x18]
add esi, dword [ebp - 0x21c]
add esi, dword [ebp - 0x1fc]
mov dword [ebp - 0x6c0], ecx
mov ecx, edx
rol edx, 5
ror ecx, 0xd
xor ecx, eax
xor ecx, edx
mov edx, dword [edi + 0x1f8]
add edx, dword [edi + 0x1d8]
add edx, dword [edi + 0x1b8]
add edx, dword [edi + 0x198]
add edx, dword [edi + 0x178]
add edx, dword [edi + 0x158]
add dword [ebp - 0x6c0], ecx
add edx, dword [edi + 0x138]
add edx, dword [edi + 0x118]
mov ecx, esi
add edx, dword [ebp - 0x1dc]
mov eax, esi
add edx, dword [ebp - 0x1bc]
rol ecx, 0xd
ror eax, 3
xor ecx, eax
rol esi, 3
xor ecx, esi
mov dword [ebp - 0x6e4], 0
mov esi, dword [edi + 0xfc]
mov eax, edx
add esi, dword [edi + 0xdc]
add esi, dword [edi + 0xbc]
add esi, dword [edi + 0x9c]
add esi, dword [edi + 0x7c]
add esi, dword [edi + 0x5c]
add esi, dword [edi + 0x3c]
add esi, dword [edi + 0x1c]
add esi, dword [ebp - 0x218]
add esi, dword [ebp - 0x1f8]
mov dword [ebp - 0x6bc], ecx
mov ecx, edx
rol edx, 5
ror eax, 5
ror ecx, 0xd
xor ecx, eax
mov eax, esi
xor ecx, edx
ror eax, 3
mov edx, dword [edi + 0x1fc]
add edx, dword [edi + 0x1dc]
add edx, dword [edi + 0x1bc]
add edx, dword [edi + 0x19c]
add edx, dword [edi + 0x17c]
add edx, dword [edi + 0x15c]
add edx, dword [edi + 0x13c]
add edx, dword [edi + 0x11c]
mov edi, esi
add edx, dword [ebp - 0x1d8]
add dword [ebp - 0x6bc], ecx
add edx, dword [ebp - 0x1b8]
rol edi, 0xd
mov ecx, edx
xor edi, eax
ror ecx, 0xd
mov eax, edx
rol esi, 3
ror eax, 5
xor edi, esi
xor ecx, eax
rol edx, 5
mov al, byte [ebx + 4]
xor ecx, edx
mov byte [ebp - 0x6cd], al
add edi, ecx
movzx eax, al
add eax, eax
mov dword [ebp - 0x6d4], edi
mov dword [ebp - 0x6dc], eax
test eax, eax
jle 0x10120345
mov eax, dword [ebp - 0x6bc]
xor ebx, ebx
mov dword [ebp - 0x6e0], ebx
mov ecx, dword [ebp - 0x6c0]
mov edx, edi
xor ecx, dword [ebp - 0x6c4]
xor edx, eax
mov esi, dword [ebp - 0x6b8]
mov eax, ecx
xor eax, edx
xor esi, dword [ebp - 0x6c8]
mov edi, dword [ebp - 0x6d8]
xor esi, edi
mov dword [ebp - 0x6e8], eax
xor ecx, esi
mov eax, dword [ebp - 0x6d4]
xor eax, dword [ebp - 0x6cc]
xor edi, eax
xor esi, dword [ebp - 0x6bc]
mov eax, edx
mov dword [ebp - 0x6d4], ecx
xor eax, dword [ebp - 0x6c0]
xor eax, dword [ebp - 0x6cc]
mov dword [ebp - 0x6c0], eax
mov eax, edx
xor eax, dword [ebp - 0x6c4]
xor eax, dword [ebp - 0x6b8]
xor eax, dword [ebp - 0x6cc]
xor edx, dword [ebp - 0x6b8]
xor edx, dword [ebp - 0x6d8]
mov dword [ebp - 0x6c8], eax
mov eax, dword [ebp - 0x6bc]
xor eax, dword [ebp - 0x6c4]
xor eax, dword [ebp - 0x6d8]
mov dword [ebp - 0x6c4], eax
movzx eax, bl
mov dword [ebp - 0x6d8], edx
mov eax, dword [eax*4 + 0x101fb320]
mov ecx, eax
and eax, esi
or ecx, esi
and ecx, edx
mov edx, dword [ebp + 0xc]
or ecx, eax
mov eax, ebx
and eax, 0x7f
add ecx, dword [edx + eax*4]
mov dword [ebp + ebx*4 - 0x6b4], ecx
inc ebx
movzx eax, bl
and ebx, 0x7f
mov ecx, dword [eax*4 + 0x101fb320]
mov edx, ecx
or edx, dword [ebp - 0x6d4]
and ecx, dword [ebp - 0x6d4]
mov eax, dword [ebp - 0x6e8]
not eax
and edx, eax
mov eax, dword [ebp + 0xc]
or edx, ecx
add edx, dword [eax + ebx*4]
mov ebx, dword [ebp - 0x6e0]
mov dword [ebp + ebx*4 - 0x6b0], edx
lea edx, [ebx + 2]
movzx eax, dl
and edx, 0x7f
mov eax, dword [eax*4 + 0x101fb320]
mov ecx, eax
or ecx, dword [ebp - 0x6c0]
and eax, dword [ebp - 0x6c0]
and ecx, edi
or ecx, eax
mov eax, dword [ebp + 0xc]
add ecx, dword [eax + edx*4]
mov dword [ebp + ebx*4 - 0x6ac], ecx
add ebx, 3
movzx eax, bl
mov ecx, dword [eax*4 + 0x101fb320]
mov edx, ecx
mov eax, dword [ebp - 0x6c4]
or edx, dword [ebp - 0x6c8]
not eax
and edx, eax
mov eax, dword [ebp - 0x6c8]
and ecx, eax
mov dword [ebp - 0x6bc], edi
or edx, ecx
and ebx, 0x7f
mov ecx, dword [ebp + 0xc]
add edx, dword [ecx + ebx*4]
mov ecx, dword [ebp - 0x6e0]
mov ebx, dword [ebp - 0x6c4]
xor ebx, eax
mov dword [ebp + ecx*4 - 0x6a8], edx
mov edx, dword [ebp - 0x6e8]
mov ecx, edx
xor dword [ebp - 0x6bc], edx
xor ecx, esi
mov esi, dword [ebp - 0x6d8]
xor ecx, esi
mov dword [ebp - 0x6c8], ecx
xor edx, esi
mov ecx, dword [ebp - 0x6c0]
xor ecx, edi
mov dword [ebp - 0x6cc], ecx
xor ecx, ebx
mov dword [ebp - 0x6b8], ecx
mov ecx, dword [ebp - 0x6d4]
xor dword [ebp - 0x6c4], ecx
xor dword [ebp - 0x6c0], ecx
xor dword [ebp - 0x6bc], ecx
mov ecx, eax
xor dword [ebp - 0x6c0], ebx
xor ecx, edi
mov edi, dword [ebp - 0x6e0]
xor ecx, esi
xor dword [ebp - 0x6c4], esi
xor dword [ebp - 0x6bc], ebx
xor ebx, edx
mov esi, dword [ebp - 0x6c8]
xor esi, eax
mov dword [ebp - 0x6d4], ecx
mov ecx, dword [ebp - 0x6cc]
lea edx, [edi + 4]
xor ecx, dword [ebp - 0x6c8]
movzx eax, dl
and edx, 0x7f
mov dword [ebp - 0x6cc], ecx
mov dword [ebp - 0x6d8], ebx
mov dword [ebp - 0x6c8], esi
mov eax, dword [eax*4 + 0x101fb320]
mov ecx, eax
or ecx, esi
and eax, esi
mov esi, dword [ebp + 0xc]
and ecx, ebx
or ecx, eax
lea ebx, [edi + 5]
movzx eax, bl
and ebx, 0x7f
add ecx, dword [esi + edx*4]
mov dword [ebp + edi*4 - 0x6a4], ecx
mov ecx, dword [eax*4 + 0x101fb320]
mov edx, ecx
or edx, dword [ebp - 0x6cc]
and ecx, dword [ebp - 0x6cc]
mov eax, dword [ebp - 0x6b8]
not eax
and edx, eax
or edx, ecx
add edx, dword [esi + ebx*4]
lea ebx, [edi + 7]
mov dword [ebp + edi*4 - 0x6a0], edx
lea edx, [edi + 6]
movzx eax, dl
and edx, 0x7f
mov eax, dword [eax*4 + 0x101fb320]
mov ecx, eax
or ecx, dword [ebp - 0x6c0]
and eax, dword [ebp - 0x6c0]
and ecx, dword [ebp - 0x6c4]
or ecx, eax
movzx eax, bl
add ecx, dword [esi + edx*4]
mov dword [ebp + edi*4 - 0x69c], ecx
mov ecx, dword [eax*4 + 0x101fb320]
and ebx, 0x7f
mov eax, dword [ebp - 0x6d4]
mov edx, ecx
or edx, dword [ebp - 0x6bc]
not eax
and edx, eax
mov eax, dword [ebp - 0x6bc]
and ecx, eax
or edx, ecx
mov ecx, dword [ebp - 0x6e4]
add edx, dword [esi + ebx*4]
add ecx, 8
movzx ebx, cx
mov dword [ebp + edi*4 - 0x698], edx
mov edi, dword [ebp - 0x6d4]
mov dword [ebp - 0x6e4], ecx
mov dword [ebp - 0x6e0], ebx
cmp ebx, dword [ebp - 0x6dc]
jl 0x10120041
mov edx, dword [ebp - 0x6b4]
add edx, dword [ebp - 0x6b0]
mov eax, edx
shr eax, 0x10
xor edx, eax
mov eax, edx
shr eax, 8
movzx ecx, al
movzx eax, dl
mov edx, 1
xor ecx, eax
mov cl, byte [ecx + 0x101fb220]
mov al, cl
mov byte [ebp - 0x94], cl
and al, 0xf
shr cl, 4
mov byte [ebp - 0x1b4], al
mov al, byte [ebp - 0x6cd]
movzx eax, al
mov byte [ebp - 0x124], cl
movzx ecx, ax
mov word [ebp - 0x6ce], ax
cmp dx, cx
jae 0x10120402
xor eax, eax
lea esi, [ebp - 0x6ac]
dec ecx
movzx edi, cx
lea ecx, [ecx]
mov ebx, dword [esi + 4]
lea esi, [esi + 8]
add ebx, dword [esi - 8]
mov ecx, ebx
shr ecx, 0x10
xor ebx, ecx
mov ecx, ebx
shr ecx, 8
movzx edx, cl
movzx ecx, bl
xor edx, ecx
mov dl, byte [edx + 0x101fb220]
xor dl, byte [ebp + eax - 0x94]
mov cl, dl
mov byte [ebp + eax - 0x93], dl
and cl, 0xf
shr dl, 4
mov byte [ebp + eax - 0x1b3], cl
mov byte [ebp + eax - 0x123], dl
inc eax
dec edi
jne 0x101203b0
mov ax, word [ebp - 0x6ce]
xor ebx, ebx
movzx eax, ax
xor ecx, ecx
mov dword [ebp - 0x6b8], ebx
cmp cx, ax
jae 0x101205ff
jmp 0x10120420
movzx edi, bx
movzx eax, byte [ebp + edi - 0x1b4]
shl eax, 2
movzx edx, byte [ebp + edi - 0x124]
mov dword [ebp - 0x6dc], eax
mov ecx, dword [ebp + eax - 0x1f4]
mov esi, ecx
mov ebx, dword [ebp + edx*4 - 0x234]
mov eax, ecx
ror eax, 5
rol ecx, 5
ror esi, 0xd
xor esi, eax
lea eax, [edi + 8]
and eax, 0x1f
xor esi, ecx
mov ecx, dword [ebp + eax*4 - 0x234]
mov eax, ecx
or eax, esi
and ecx, esi
and ebx, eax
lea esi, [ebp - 0x234]
or ebx, ecx
mov ecx, dword [ebp + edx*4 - 0x1f4]
add ebx, dword [ebp + edi*8 - 0x6b0]
mov eax, ecx
ror eax, 3
mov dword [ebp - 0x6e4], ebx
mov ebx, ecx
rol ebx, 0xd
xor ebx, eax
rol ecx, 3
xor ebx, ecx
mov eax, edi
mov ecx, dword [ebp - 0x6b8]
lea edi, [ebp - 0x234]
and eax, 0x1f
mov edx, dword [edi + eax*4]
lea edi, [edi + eax*4]
movzx eax, cx
mov ecx, dword [ebp - 0x6dc]
add eax, 0xfffffff0
and eax, 0x1f
lea esi, [esi + eax*4]
mov eax, edx
or eax, ebx
and edx, ebx
mov ecx, dword [ebp + ecx - 0x234]
mov ebx, dword [ebp - 0x6b8]
and ecx, eax
or ecx, edx
movzx edx, bx
inc ebx
mov dword [ebp - 0x6b8], ebx
movzx ebx, bx
movzx eax, byte [ebp + edx - 0x94]
add ecx, dword [eax*4 + 0x101fb320]
add ecx, dword [ebp + edx*8 - 0x6b4]
mov eax, dword [ebp - 0x6e4]
add ecx, eax
xor dword [esi], ecx
add dword [edi], eax
movzx edi, byte [ebp + ebx - 0x1b4]
movzx edx, byte [ebp + ebx - 0x124]
mov ecx, dword [ebp + edi*4 - 0x1f4]
mov esi, ecx
mov eax, ecx
ror esi, 0xd
ror eax, 5
xor esi, eax
rol ecx, 5
lea eax, [ebx + 8]
xor esi, ecx
mov ecx, dword [ebp + edx*4 - 0x234]
and eax, 0x1f
mov ebx, dword [ebp + eax*4 - 0x234]
mov eax, ecx
or eax, esi
not ebx
and ebx, eax
and ecx, esi
or ebx, ecx
mov ecx, dword [ebp - 0x6b8]
movzx esi, cx
mov ecx, dword [ebp + edx*4 - 0x1f4]
mov eax, ecx
ror eax, 3
lea edx, [ebp - 0x234]
add ebx, dword [ebp + esi*8 - 0x6b0]
mov esi, dword [ebp + edi*4 - 0x234]
lea edi, [ebp - 0x234]
mov dword [ebp - 0x6dc], ebx
mov ebx, ecx
rol ecx, 3
rol ebx, 0xd
xor ebx, eax
mov eax, dword [ebp - 0x6b8]
xor ebx, ecx
movzx ecx, ax
mov eax, ecx
and eax, 0x1f
lea edi, [edi + eax*4]
lea eax, [ecx - 0x10]
mov ecx, esi
and eax, 0x1f
or ecx, ebx
lea edx, [edx + eax*4]
and esi, ebx
mov eax, dword [edi]
mov ebx, dword [ebp - 0x6b8]
not eax
and ecx, eax
or ecx, esi
movzx esi, bx
inc ebx
mov dword [ebp - 0x6b8], ebx
movzx eax, byte [ebp + esi - 0x94]
add ecx, dword [eax*4 + 0x101fb320]
add ecx, dword [ebp + esi*8 - 0x6b4]
mov eax, dword [ebp - 0x6dc]
add ecx, eax
xor dword [edx], ecx
add dword [edi], eax
movzx eax, word [ebp - 0x6ce]
cmp bx, ax
jb 0x10120420
mov ecx, dword [ebp - 0x6ec]
lea edx, [ebp - 0x234]
mov esi, 0x20
mov eax, dword [edx]
lea edx, [edx + 4]
add dword [ecx], eax
lea ecx, [ecx + 4]
dec esi
jne 0x10120610
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.101c6a5b
mov esp, ebp
pop ebp
ret 8