Function at 0x10f0d29
Capabilities:
Encode data using base64
Encode data using xor
Parse pe header

Disassembly:
test ecx, ecx
call fcn.01161ec0
mov eax, 0x9dbc1197
cbw
lea edx, [eax + 0x3410899d]
mov edx, dword [esi]
add esi, 4
neg eax
movsx ecx, ax
xor edx, ebx
lea ecx, [eax + ecx - 0x7ac5fece]
not eax
dec edx
or cx, cx
add ecx, ecx
ror edx, 2
sal ecx, 0xf9
lea edx, [edx + ecx - 0x2421f039]
cwde
neg edx
btc eax, eax
xor ebx, edx
neg al
je 0xd5860c
btc eax, eax
add edi, edx
movzx edx, ax
mov ax, word [ebp + ecx*2 - 0x20000000]
push edx
sar dx, 0x68
setnp dl
mov dx, word [ebp + ecx*2 - 0x1ffffffe]
sbb ecx, ecx
adc cl, byte [ebp + ecx + 4]
call fcn.00e1892a
das
adc eax, 0xd88c1642
lodsd eax, dword [esi]
wait
pop esp
mov word [ebp - 0x6f], gs
xchg esi, eax
xchg esp, eax
jae 0xd4acba
mov dh, byte cs:[ebx - 0x1f]
stc
inc ecx
sbb bh, byte [ebp - 0x60436e73]
jb 0xd4ad33
fadd qword [eax]
retf
sbb byte [edx], 0x62
outsd dx, dword [esi]
xor ecx, dword [ebx + ebp*2 - 0x73ddd37f]
xchg ebx, eax
test al, 3
mov word [edi - 0x11], es
cwde
sal byte [ebx + 0x31], 9
jne 0xd4ad37
pop edi
invalid
movzx eax, dl
lea edi, [edi + eax*4 - 0x2d0]
mov ecx, eax
imul eax, edx
xchg ah, dl
mov ecx, dword [edi + ecx*2 - 0x166]
not ax
xor ecx, ebx
sub ax, dx
sbb ecx, 0x130461a3
lea edx, [eax + eax + 0x12986fb4]
imul edx
jb 0xefdb54
neg eax
neg edx
add cx, ax
xchg ecx, eax
jp 0xfac352
rol edx, 1
dec eax
xor edx, 0x81a74525
push ecx
xor eax, eax
jno 0x1015d16
mov ecx, 0xc2fa715
call fcn.00d84099
enter 0x6ff7, 0x37
pop es
dec dword [edx + 0x3d]
aaa
adc dword [ecx], eax
in eax, dx
mov byte ds:[0xb6197cc8], al
xchg edi, eax
enter 0xffffffffffff8d29, 0xffffffffffffffbb
pop edi
aaa
test dword [ebx], eax
inc ecx
aaa
lea edi, [0xc976374d]
popfd
xchg ecx, eax
push esp
or byte ss:[eax - 0x1c8ffd3], dh
mov es, word [esi - 0x603707be]
cmp eax, 0x2fc8e901
test eax, ecx
enter 0xffffffffffffa3fb, 0xffffffffffffffb5
or esi, dword [edi]
insd dword es:[edi], dx
or eax, 0xc894c131
adc byte [0xd5c8a149], 0x49
inc esp
imul esi, dword [edi], 0x3777fc41
cmp dword [ecx - 0x47], edx
enter 0xffffffffffffc940, 0xffffffffffffff9e
sahf
jo 0xd61e3d
mov dl, dl
fmul qword [eax + ecx*2 + 0x61]
xor ecx, ebx
push edi
arpl word [0xc32348a0], bx
adc eax, 0x5d49cb2
sahf
shr dword [edi + esi*2 - 0xa], 1
fcom qword [edi]
sub ebp, dword [edi + 0x54]
cmp byte [eax - 0x6b8399bd], dh
push 0x14
xor ecx, 0x5ceb817e
aam 0x9d
mov ch, bl
or ecx, 0x147241e9
xchg ebp, eax
or esi, dword [esi]
adc al, 0xd9
rol dword [ecx], 0xe6
jmp 0xd61dda
fldpi
and byte [eax], dh
xchg edi, eax
shr bl, cl
in eax, 0x15
dec ebx
sub dl, byte [ecx + ebp*2]
add dword [esi + 0x14], ebp
and eax, 0xabec7ded
jmp 0xd61ec2
fcmovnu st(0), st(3)
invalid
cmp dword [edi - 0x69b5414], esi
or ah, 6
enter 0x406, 0x6c
jb 0xd61eac
lahf
sbb dword [edx + ebp*2 - 0xb], 0x363f2c80
adc al, 0x31
or ecx, ebx
jns 0xd61f04
adc al, 0x68
mov al, byte [0x5debd12e]
push esi
and dword [edx + edx*4], edx
or bh, byte [ebp - 0x48ebfb]
out dx, eax
in al, 0xeb
push edx
pop edx
or al, 0xef
jmp 0xd61f09
pop edi
div dword [edi - 0x6a]
jmp 0xd61f54
dec edx
sbb bl, byte [ebx + ebx*4 - 0x15]
xchg ecx, eax
add al, 0x96
jmp 0xd61f28
in eax, 0xbc
jmp 0xd61ed2
pop ds
and esp, ebx
inc ebp
or eax, 0xd945fda5
mov eax, dword [0x4fba3e95]
invalid
neg word [esp + eax - 0x16]
dec esp
mov dword [esp + ebx*2 - 0x868e5be], edi
ret 8
sar byte [esp + 1], 0xc1
rol eax, 3
add ecx, dword [esp + 4]
jns 0x19ad004
mov ecx, 0x8a03280a
mov eax, dword [ebp]
add ebp, 4
mov edx, ecx
xor eax, ebx
add cx, 0xf5b4
jns 0xf9b41b
jmp dword [edi - 0x117eb721]
lea edx, [eax - 0x345b8cc]
jb 0xcf31c4
xor ecx, ebx
btc edx, 0x89
rol edx, 9
dec eax
bswap ecx
and byte [esp + edx - 0x748a69f3], dl
cwde
sbb ecx, eax
cdq
bswap ecx
sar edx, 0x6f
sub ecx, eax
push eax
shr edx, 0x59
jnp 0xfae79b
mov edx, dword [esi]
mov ecx, 0x10d3324
bt cx, cx
imul ecx, ecx
adc esi, 3
lea eax, [ecx + ecx*4 + 0x243aa7a8]
cwde
xor edx, ebx
rol edx, 1
rol cx, 0xe3
inc edx
bswap edx
xadd ecx, eax
add ecx, eax
dec ax
xor edx, 0x70b8a8b9
xor cl, 0xa3
jg 0x1a2927c
shr cx, 0xa2
bswap eax
xadd ecx, edx
neg edx
not edx
ror eax, 1
dec ecx
bswap eax
imul ecx, ecx
lea eax, [ecx + eax - 0x26fc345d]
or dl, ch
ror edx, 0x5a
xor ebx, eax
rol dl, 0xa3
add esi, eax
btr cx, cx
setb cl
mov ax, word [ecx + edi - 0x26d4800]
push ecx
mov cx, word [edi + ecx*8 - 0x136a3ffe]
push edx
adc dl, dl
jns 0x10e11ef
inc esp
xor al, byte [esp + ebx - 0x43472d6]
mov byte ss:[ecx + ebx*2 - 0x868e5be], dl
jns 0x119dea0
jle 0xe3e0b3
xor ebx, ecx
div eax
cwde
xor ax, dx
adc esi, ecx
mov dword [esp + eax - 0xff], esi
ret 8
ror edx, 1
xadd dword [esp + eax*2], ecx
xor al, byte [esp + eax + 3]
or cx, ax
lea edx, [edx + eax*2 + 0x35996ca3]
xor ebx, edx
not word [esp + eax*2 - 0x10e]
xchg word [esp + eax*8 - 0x43f], cx
add ebp, edx
mov dword [esp + eax*2 - 0x110], ebp
ret
add edi, 4
xor edx, ebx
ror word [esp + 2], 0x22
rol edx, 1
sub word [esp], 0xb130
neg edx
call fcn.010e98a4
mov edx, 0xdf8e8f2d
movsx ecx, dx
dec dl
mov eax, dword [esi]
sub dx, cx
mov ecx, dword [esi + 4]
inc edx
xor dx, 0x328f
adc esi, 4
add eax, ecx
lea edx, [edx*8 - 0x62e505e5]
movsx ecx, dl
mov dword [esi], eax
lea eax, [edx + ecx*8 - 0x72c58b64]
jmp 0x1a3d5c6
adc edi, 2
imul edx, edx
bswap edx
and dl, 0xa7
adc ax, cx
btc edx, edx
pop ecx
mov word [edi], ax
sbb dx, dx
sar byte [esp + 3], 0xe1
jl 0x1114378
pop ecx
jmp esi
neg eax
xor eax, 0xc23e44b3
pop ecx
jmp 0x1a0c27a
inc ecx
xor eax, ebp
rol ebx, 0x21
neg eax
dec eax
btc esi, ebx
bswap eax
inc cx
xadd ecx, edi
mov ebp, 0x6e25eca1
pop ebx
ror eax, 1
dec edx
rol dword [esp + ebx - 0x3b80f118], 0x28
inc ecx
neg ecx
inc dx
xadd dword [esp - 0xf114], ebp
xor eax, 0x40855d33
inc esi
sub dword [esp - 0xf114], eax
dec ecx
dec esi
mov dword [esp + ebx*2 - 0x7701e230], ebp
inc edx
xor dword [esp + ebx - 0x3b80f118], eax
inc ebp
movzx ebp, al
inc ecx
pop ebp
dec eax
arpl ax, ax
bt esi, esi
dec esp
add edi, eax
and di, bp
inc ecx
push eax
dec esi
mov dword [esp + ebx - 0x3b80f118], edi
ret
jmp 0x1045fd0
lea edi, [eax + edi + 7]
sal ax, 0x29
call fcn.00d95a58
mov dword [ebp + edx*4 - 0x28b07cd8], eax
lea edi, [edx + edi - 0xa2c1f3a]
dec word [esp + edx*2 - 0x14583e66]
mov eax, dword [edx + edi - 0xa2c1f36]
not ecx
bswap ecx
xor eax, ebx
bt ecx, 0xbb
ror dword [esp + edx*4 - 0x28b07cd6], cl
sbb eax, 0x9c3a0512
rol byte [esp + edx - 0xa2c1f31], 0xa3
bswap eax
setb byte [esp + edx*2 - 0x14583e6b]
dec eax
sar dl, 0x66
imul edx, dword [esp + edx - 0xa2c1efc]
sar cx, 0xc1
ror eax, 3
dec dword [esp + 2]
neg cx
bswap eax
dec dword [esp + 3]
neg edx
xor eax, 0x9cbb5a1b
rol eax, cl
not dl
neg edx
lea eax, [eax + edx - 0x1ec152d4]
jl 0xe73c0d
dec eax
add edx, dword [esp + ebx - 0x12a]
dec esp
mov dword [esp + ebx - 0x12a], edi
ret
pop edx
dec eax
or edx, ecx
shr cx, 0x89
bswap eax
xadd dword [esp + ecx - 0x64b1001e], edx
jb 0xf785a1
ror cx, 0x25
xor ebx, eax
add esi, eax
pop ecx
jmp fcn.019b7feb
not eax
ror dl, 0x81
movsx ecx, dx
xor ebx, eax
sal cx, 0xe4
dec edx
adc esi, eax
lea edx, [ecx + edx - 0x2c56ade3]
and dx, cx
or ecx, dword [ecx + edi]
bts edx, edx
movzx eax, dx
sar dx, 0x82
mov edx, dword [edi + eax*2 + 2]
jbe 0x121fd98
mov edx, dword [edi]
push 0xcbb5a07
jmp 0x11a4050
rol edx, 3
bt cx, ax
sar cx, 0x4b
shr cx, cl
lea edx, [edx + eax + 0x70c9c925]
sub al, 0x8e
btr eax, eax
jb 0x1a36ca5
xor ebx, edx
and eax, eax
xor ecx, ecx
div al
add edi, edx
shr ecx, 0xf5
adc ecx, ebp
lea edx, [eax*2 + 0x93d8632]
div eax
lea ebp, [eax + ebp - 0x20dc2b7a]
cwde
inc al
bswap edx
mov word [ebp + eax - 0x2b79], cx
inc edx
jno fcn.010128d4
mov edx, dword [eax + edi - 0x26ceffc7]
ror eax, 0x76
lea edi, [edi + eax - 0x3bff1c97]
jb 0xd4ac96
not cx
xor edx, ebx
inc eax
and ecx, eax
sbb edx, 0xd4ad299a
jmp 0xd61d56