Function at 0x100b3a40
Capabilities:
Encode data using xor

Disassembly:
mov eax, 0xd4
call fcn.101cf170
mov eax, dword [0x10263fdc]
xor eax, esp
mov dword [esp + 0xd0], eax
mov eax, dword [esp + 0xd8]
mov ecx, dword [esp + 0xf0]
mov edx, dword [esp + 0xf4]
push ebp
push esi
mov esi, dword [esp + 0xe8]
xor ebp, ebp
push edi
mov edi, dword [esp + 0xf4]
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0xf0]
mov dword [esp + 0x48], ecx
mov ecx, dword [esp + 0x104]
mov dword [esp + 0x44], edx
mov edx, dword [esp + 0x108]
shr esi, 3
mov dword [esp + 0x14], eax
mov dword [esp + 0x3c], edi
mov dword [esp + 0x50], ecx
mov dword [esp + 0x10], edx
mov dword [esp + 0x34], ebp
mov dword [esp + 0x38], ebp
mov dword [esp + 0x30], 2
cmp esi, 0x14
je 0x100b3ad3
cmp esi, 0x1c
je 0x100b3ad3
cmp esi, 0x20
jne 0x100b3b51
cmp eax, ebp
jne 0x100b3b02
cmp esi, 0x14
jne 0x100b3ae7
call fcn.10034210
mov dword [esp + 0x14], eax
jmp 0x100b3b0d
cmp esi, 0x1c
jne 0x100b3af7
call fcn.10034300
mov dword [esp + 0x14], eax
jmp 0x100b3b0d
call fcn.10034310
mov dword [esp + 0x14], eax
jmp 0x100b3b0d
push eax
call fcn.100470e0
add esp, 4
mov esi, eax
mov eax, dword [esp + 0xe8]
cmp eax, 0x200
jae 0x100b3b20
mov eax, 0x200
add eax, 0x3f
and eax, 0xffffffc0
mov dword [esp + 0xe8], eax
cmp edi, ebp
je 0x100b3b81
mov eax, dword [esp + 0xf8]
cmp eax, esi
jae 0x100b3b6b
push 0x55
push 0x1020876c
push 0x6e
push 0x7d
push 0xa
call fcn.1003c300
add esp, 0x14
pop edi
pop esi
xor eax, eax
pop ebp
mov ecx, dword [esp + 0xd0]
xor ecx, esp
call fcn.101ce9e2
add esp, 0xd4
ret
jbe 0x100b3b6f
mov eax, esi
push eax
lea eax, [esp + 0xa0]
push edi
push eax
call sub.MSVCR100.dll_memcpy
add esp, 0xc
call fcn.10070b90
mov dword [esp + 0x20], eax
cmp eax, ebp
je 0x100b414e
call fcn.10088210
mov ebp, eax
test ebp, ebp
je 0x100b414e
push ebp
call fcn.10088300
push ebp
call fcn.10088390
push ebp
mov dword [esp + 0x18], eax
call fcn.10088390
push ebp
mov dword [esp + 0x2c], eax
call fcn.10088390
push ebp
mov dword [esp + 0x40], eax
call fcn.10088390
push ebp
mov dword [esp + 0x30], eax
call fcn.10088390
push ebp
mov dword [esp + 0x70], eax
call fcn.10088390
push ebp
mov dword [esp + 0x60], eax
call fcn.10088390
push ebp
mov dword [esp + 0x70], eax
call fcn.10088390
add esp, 0x24
mov dword [esp + 0x28], eax
test eax, eax
je 0x100b414e
mov eax, dword [esp + 0xe8]
dec eax
push eax
call fcn.1004a650
mov ecx, dword [esp + 0x2c]
push eax
push ecx
call fcn.1004a5b0
add esp, 0xc
test eax, eax
je 0x100b414e
push ebx
jmp 0x100b3c30
mov ebx, dword [esp + 0x3c]
mov eax, dword [esp + 0x14]
xor edx, edx
cmp dword [esp + 0x40], edx
push ebx
sete dl
push 0
push eax
mov edi, edx
call fcn.100fcd60
inc ebx
add esp, 0xc
mov dword [esp + 0x3c], ebx
test eax, eax
je 0x100b414d
test edi, edi
je 0x100b3c7b
lea ecx, [esp + 0xa0]
push esi
push ecx
call fcn.100587a0
add esp, 8
test eax, eax
jle 0x100b414d
jmp 0x100b3c83
mov dword [esp + 0x40], 0
push esi
lea edx, [esp + 0xa4]
push edx
lea eax, [esp + 0x88]
push eax
call sub.MSVCR100.dll_memcpy
push esi
lea ecx, [esp + 0xb0]
push ecx
lea edx, [esp + 0xd4]
push edx
call sub.MSVCR100.dll_memcpy
lea eax, [esi - 1]
add esp, 0x18
test eax, eax
js 0x100b3ccc
lea esp, [esp]
inc byte [esp + eax + 0x80]
jne 0x100b3ccc
dec eax
jns 0x100b3cc0
mov eax, dword [esp + 0x18]
push 0
push eax
push 0
lea ecx, [esp + 0x6c]
push ecx
lea edx, [esp + 0xb0]
push esi
push edx
call fcn.1004c230
add esp, 0x18
test eax, eax
je 0x100b414d
mov eax, dword [esp + 0x18]
push 0
push eax
push 0
lea ecx, [esp + 0xcc]
push ecx
lea edx, [esp + 0x90]
push esi
push edx
call fcn.1004c230
add esp, 0x18
test eax, eax
je 0x100b414d
xor eax, eax
test esi, esi
jle 0x100b3d33
mov cl, byte [esp + eax + 0xc0]
xor byte [esp + eax + 0x60], cl
inc eax
cmp eax, esi
jl 0x100b3d23
mov edx, dword [esp + 0x1c]
or byte [esp + 0x60], 0x80
or byte [esp + esi + 0x5f], 1
push edx
lea eax, [esp + 0x64]
push esi
push eax
call fcn.1004b5b0
add esp, 0xc
test eax, eax
je 0x100b414d
mov ebx, dword [esp + 0x14]
mov ecx, dword [esp + 0x1c]
push ebx
push edi
push ebp
push 0x40
push ecx
call fcn.100fd1c0
add esp, 0x14
test eax, eax
jg 0x100b3d7d
je 0x100b3c30
jmp 0x100b414d
push 0
push 2
push ebx
call fcn.100fcd60
add esp, 0xc
test eax, eax
je 0x100b414d
push 0
mov edx, ebx
push 3
push edx
call fcn.100fcd60
add esp, 0xc
test eax, eax
je 0x100b414d
mov ecx, dword [esp + 0xec]
lea ecx, [ecx - 1]
mov eax, 0xcccccccd
mul ecx
mov ebx, edx
mov dword [esp + 0x28], 0
shr ebx, 7
mov eax, dword [esp + 0x28]
test eax, eax
je 0x100b3de7
mov edx, dword [esp + 0x14]
push eax
push 0
push edx
call fcn.100fcd60
add esp, 0xc
test eax, eax
je 0x100b414d
mov eax, dword [esp + 0x30]
push 0
push eax
call fcn.1004b570
add esp, 8
xor edi, edi
test ebx, ebx
js 0x100b3e9a
lea eax, [esi - 1]
test eax, eax
js 0x100b3e13
inc byte [esp + eax + 0x80]
jne 0x100b3e13
dec eax
jns 0x100b3e07
mov ecx, dword [esp + 0x18]
push 0
push ecx
push 0
lea edx, [esp + 0x6c]
push edx
lea eax, [esp + 0x90]
push esi
push eax
call fcn.1004c230
add esp, 0x18
test eax, eax
je 0x100b414d
mov ecx, dword [esp + 0x10]
push ecx
lea edx, [esp + 0x64]
push esi
push edx
call fcn.1004b5b0
add esp, 0xc
test eax, eax
je 0x100b414d
lea eax, [esi*8]
imul eax, edi
push eax
mov eax, dword [esp + 0x14]
push eax
push eax
call fcn.1004a5b0
add esp, 0xc
test eax, eax
je 0x100b414d
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x30]
push ecx
push eax
push eax
call fcn.100889e0
add esp, 0xc
test eax, eax
je 0x100b414d
inc edi
cmp edi, ebx
jle 0x100b3e00
mov eax, dword [esp + 0xec]
mov edi, dword [esp + 0x30]
dec eax
push eax
push edi
call fcn.1004b440
add esp, 8
test eax, eax
je 0x100b414d
push edi
mov edi, dword [esp + 0x5c]
push edi
call fcn.1004b500
add esp, 8
test eax, eax
je 0x100b414d
mov edx, dword [esp + 0x2c]
push edx
push edi
push edi
call fcn.100889e0
add esp, 0xc
test eax, eax
je 0x100b414d
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x10]
push eax
push ecx
call fcn.1004a210
add esp, 8
test eax, eax
je 0x100b414d
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x44]
push ebp
push edx
push edi
push eax
push 0
call fcn.100887b0
add esp, 0x14
test eax, eax
je 0x100b414d
call fcn.1004a650
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x10]
push eax
push ecx
push edx
call fcn.10088a70
add esp, 0xc
test eax, eax
je 0x100b414d
mov eax, dword [esp + 0x10]
push eax
push edi
mov edi, dword [esp + 0x58]
push edi
call fcn.10088a70
add esp, 0xc
test eax, eax
je 0x100b414d
mov ecx, dword [esp + 0x2c]
push ecx
push edi
call fcn.1004aad0
add esp, 8
test eax, eax
js 0x100b3f87
mov edx, dword [esp + 0x14]
push edx
push 1
push ebp
push 0x40
push edi
call fcn.100fd1c0
add esp, 0x14
test eax, eax
jg 0x100b3fa0
jne 0x100b414d
mov eax, dword [esp + 0x28]
inc eax
mov dword [esp + 0x28], eax
cmp eax, 0x1000
jl 0x100b3dc7
jmp 0x100b3c30
mov eax, dword [esp + 0x14]
push 1
push 2
push eax
call fcn.100fcd60
add esp, 0xc
test eax, eax
je 0x100b414d
call fcn.1004a650
mov ebx, dword [esp + 0x2c]
push eax
push edi
push ebx
call fcn.10088a70
add esp, 0xc
test eax, eax
je 0x100b414d
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x10]
push ebp
push ecx
push ebx
push 0
push edx
call fcn.100887b0
add esp, 0x14
test eax, eax
je 0x100b414d
push 2
push ebx
call fcn.1004b570
add esp, 8
test eax, eax
je 0x100b414d
mov eax, dword [esp + 0x24]
push ebp
push edi
push eax
call fcn.10070700
add esp, 0xc
test eax, eax
je 0x100b414d
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x20]
push ecx
push ebp
push edi
push edx
push ebx
push eax
call fcn.10089a30
add esp, 0x18
test eax, eax
je 0x100b414d
nop
mov ecx, dword [esp + 0x20]
push ecx
call fcn.1004add0
add esp, 4
test eax, eax
je 0x100b4090
call fcn.1004a650
push eax
push ebx
push ebx
call fcn.100889e0
add esp, 0xc
test eax, eax
je 0x100b414d
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x20]
inc dword [esp + 0x34]
push edx
push ebp
push edi
push eax
push ebx
push ecx
call fcn.10089a30
add esp, 0x18
test eax, eax
jne 0x100b4040
jmp 0x100b414d
mov edx, dword [esp + 0x14]
push 1
push 3
push edx
call fcn.100fcd60
add esp, 0xc
test eax, eax
je 0x100b414d
mov ebx, dword [esp + 0x5c]
mov eax, dword [ebx + 8]
push eax
mov dword [esp + 0x3c], 1
lea esp, [esp]
call fcn.1004b060
mov ecx, dword [ebx + 0xc]
push ecx
call fcn.1004b060
mov edx, dword [ebx + 0x10]
push edx
call fcn.1004b060
push edi
call fcn.1004b780
mov dword [ebx + 8], eax
mov eax, dword [esp + 0x2c]
push eax
call fcn.1004b780
mov ecx, dword [esp + 0x34]
push ecx
mov dword [ebx + 0xc], eax
call fcn.1004b780
add esp, 0x18
cmp dword [ebx + 8], 0
mov dword [ebx + 0x10], eax
je 0x100b410d
cmp dword [ebx + 0xc], 0
je 0x100b410d
test eax, eax
jne 0x100b4117
mov dword [esp + 0x38], 0
jmp 0x100b414d
mov eax, dword [esp + 0x48]
test eax, eax
je 0x100b4125
mov edx, dword [esp + 0x28]
mov dword [eax], edx
mov eax, dword [esp + 0x54]
test eax, eax
je 0x100b4133
mov ecx, dword [esp + 0x34]
mov dword [eax], ecx
mov eax, dword [esp + 0x4c]
test eax, eax
je 0x100b414d
push esi
lea edx, [esp + 0xa4]
push edx
push eax
call sub.MSVCR100.dll_memcpy
add esp, 0xc
pop ebx
push ebp
call fcn.10088350
push ebp
call fcn.100882c0
mov eax, dword [esp + 0x28]
push eax
call fcn.100706b0
mov ecx, dword [esp + 0xe8]
mov eax, dword [esp + 0x40]
add esp, 0xc
pop edi
pop esi
pop ebp
xor ecx, esp
call fcn.101ce9e2
add esp, 0xd4
ret