Function at 0x1018cfe0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x8c4
mov eax, dword [0x1020f0c0]
xor eax, esp
mov dword [esp + 0x8c0], eax
inc dword [0x1045935c]
push ebx
push esi
push edi
push ecx
mov byte [esp + 0x1b], dl
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test eax, eax
je 0x1018d1a0
push 0xc
lea ecx, [esp + 0x444]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_K32GetModuleInformation]
test eax, eax
je 0x1018d1a0
mov eax, dword [esp + 0x440]
mov esi, dword [esp + 0x444]
test eax, eax
je 0x1018d1a0
test esi, esi
je 0x1018d1a0
mov edx, dword [ebp + 0xc]
mov ebx, eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x18], esi
lea edi, [edx - 1]
mov dword [esp + 0x24], edi
test edx, edx
je 0x1018d09f
or ecx, 0xffffffff
mov dword [esp + 0x20], ebx
lea eax, [edx - 1]
mov dword [esp + 0x18], esi
cmp eax, ecx
cmovb ecx, eax
mov eax, dword [ebp + 8]
add ecx, eax
cmp byte [ecx], 0x3f
je 0x1018d09b
mov dword [esp + 0x20], ebx
mov dword [esp + 0x18], esi
cmp ecx, eax
je 0x1018d09f
dec ecx
cmp byte [ecx], 0x3f
jne 0x1018d091
sub ecx, eax
jmp 0x1018d0a2
or ecx, 0xffffffff
xor esi, esi
mov dword [esp + 0x2c], 0
cmp ecx, 0xffffffff
mov eax, edx
cmovne esi, ecx
mov ecx, 1
sub eax, esi
dec eax
cmp eax, ecx
cmova ecx, eax
lea eax, [esp + 0x28]
mov dword [esp + 0x28], ecx
mov eax, dword [eax]
mov dword [esp + 0x1c], ecx
lea ecx, [esp + 0x2c]
cmp eax, dword [ecx]
jne 0x1018d0f0
push 0x400
lea eax, [esp + 0x44]
push 0
push eax
call fcn.101a3ad0
mov edx, dword [ebp + 0xc]
add esp, 0xc
jmp 0x1018d103
mov eax, dword [esp + 0x1c]
lea edi, [esp + 0x40]
mov ecx, pe_nt_image_headers32
rep stosd dword es:[edi], eax
mov edi, dword [esp + 0x24]
cmp esi, edi
jae 0x1018d127
mov ebx, dword [ebp + 8]
nop word [eax + eax]
movzx eax, byte [ebx + esi]
sub edx, esi
dec edx
inc esi
mov dword [esp + eax*4 + 0x40], edx
mov edx, dword [ebp + 0xc]
cmp esi, edi
jb 0x1018d110
mov ebx, dword [esp + 0x20]
mov eax, dword [esp + 0x18]
lea esi, [esp + 0x40]
sub eax, dword [ebp + 0xc]
lea edi, [esp + 0x4c8]
add eax, ebx
mov ecx, pe_nt_image_headers32
mov dword [esp + 0x18], eax
rep movsd dword es:[edi], dword [esi]
cmp ebx, eax
ja 0x1018d1a0
mov edi, dword [esp + 0x24]
mov ecx, edi
test edi, edi
js 0x1018d172
mov esi, dword [ebp + 8]
lea eax, [ebx + edi]
sub esi, ebx
nop dword [eax]
mov dl, byte [esi + eax]
cmp dl, 0x3f
je 0x1018d16c
cmp byte [eax], dl
jne 0x1018d18b
dec eax
sub ecx, 1
jns 0x1018d160
mov eax, ebx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x8c0]
xor ecx, esp
call fcn.101a1d25
mov esp, ebp
pop ebp
ret 8
movzx eax, byte [ebx + edi]
add ebx, dword [esp + eax*4 + 0x4c8]
cmp ebx, dword [esp + 0x18]
ja 0x1018d1a0
mov ecx, edi
jmp 0x1018d154
cmp byte [esp + 0x17], 0
je 0x1018d57c
mov ax, word [0x101ffc30]
xor ebx, ebx
movq xmm0, qword [0x101ffc28]
mov word [esp + 0x448], ax
mov al, byte [0x101ffc32]
movq qword [esp + 0x440], xmm0
mov byte [esp + 0x44a], al
nop dword [eax + eax]
mov eax, 0x3521cfb3
mov cl, bl
mul ebx
mov eax, ebx
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul eax, eax, 0x35
sub cl, al
add cl, 0x33
xor byte [esp + ebx + 0x440], cl
inc ebx
cmp ebx, 0xb
jl 0x1018d1e0
mov edx, dword [0x1045935c]
lea ecx, [esp + 0x4b0]
call fcn.10003fe0
movups xmm0, xmmword [0x101ffc64]
mov cl, byte [0x101ffc7c]
xor ebx, ebx
cmp dword [0x1022e690], 2
mov esi, eax
movups xmmword [esp + 0x44c], xmm0
mov byte [esp + 0x464], cl
movq xmm0, qword [0x101ffc74]
movq qword [esp + 0x45c], xmm0
jl 0x1018d390
movaps xmm0, xmmword [str.333333333333333366666666666666668888888888888888]
lea edx, [esp + 0x450]
movaps xmm4, xmmword [0x10201400]
movaps xmm3, xmmword [0x102017e0]
movaps xmm5, xmmword [0x10201470]
movaps xmmword [esp + 0x30], xmm0
mov ecx, dword [esp + 0x30]
nop dword [eax + eax]
movd xmm0, ebx
lea eax, [ebx + 4]
pshufd xmm2, xmm0, 0
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
andps xmm1, xmmword [0x10201520]
packuswb xmm1, xmm1
movd xmm0, ecx
paddb xmm1, xmm0
movd xmm0, dword [esp + ebx + 0x44c]
xorps xmm1, xmm0
movd xmm0, eax
pshufd xmm2, xmm0, 0
movd dword [esp + ebx + 0x44c], xmm1
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
andps xmm1, xmmword [0x10201520]
packuswb xmm1, xmm1
movd xmm0, ecx
paddb xmm1, xmm0
movd xmm0, dword [ebx + edx]
xorps xmm1, xmm0
movd dword [ebx + edx], xmm1
add ebx, 8
cmp ebx, 0x18
jl 0x1018d290
cmp ebx, 0x19
jge 0x1018d3bb
mov eax, 0x4d4873ed
mov cl, bl
imul ebx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
movsx eax, al
imul eax, eax, 0x35
sub cl, al
add cl, 0x33
xor byte [esp + ebx + 0x44c], cl
inc ebx
cmp ebx, 0x19
jl 0x1018d390
xorps xmm0, xmm0
mov dword [esp + 0x4a8], 0
lea ecx, [esp + 0x44c]
mov dword [esp + 0x4ac], 0
movups xmmword [esp + 0x498], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1018d3e6
sub ecx, edx
lea eax, [esp + 0x44c]
push ecx
push eax
lea ecx, [esp + 0x4a0]
call fcn.10028880
push esi
lea eax, [esp + 0x49c]
push eax
push dword [esp + 0x24]
lea ecx, [esp + 0x474]
call fcn.1002a870
mov ecx, dword [esp + 0x478]
mov edx, dword [esp + 0x47c]
cmp ecx, edx
jae 0x1018d453
lea eax, [ecx + 1]
cmp edx, 0xf
mov dword [esp + 0x478], eax
lea eax, [esp + 0x468]
cmova eax, dword [esp + 0x468]
mov word [eax + ecx], 0x21
jmp 0x1018d467
push 0x21
push dword [esp + 0x20]
lea ecx, [esp + 0x470]
push 1
call fcn.10029360
movups xmm1, xmmword [esp + 0x468]
lea ecx, [esp + 0x480]
movq xmm0, qword [esp + 0x478]
movd eax, xmm1
movq qword [esp + 0x490], xmm0
cmp dword [esp + 0x494], 0xf
push 0x30
cmova ecx, eax
lea eax, [esp + 0x444]
push eax
push ecx
push 0
movups xmmword [esp + 0x490], xmm1
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, dword [esp + 0x494]
cmp ecx, 0xf
jbe 0x1018d4ee
mov edx, dword [esp + 0x480]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1018d4e4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1018d595
push ecx
push edx
call fcn.101a201e
add esp, 8
mov ecx, dword [esp + 0x4ac]
mov dword [esp + 0x490], 0
mov dword [esp + 0x494], 0xf
mov byte [esp + 0x480], 0
cmp ecx, 0xf
jbe 0x1018d544
mov edx, dword [esp + 0x498]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1018d53a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1018d595
push ecx
push edx
call fcn.101a201e
add esp, 8
mov ecx, dword [esp + 0x4c4]
cmp ecx, 0xf
jbe 0x1018d57c
mov edx, dword [esp + 0x4b0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1018d572
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1018d595
push ecx
push edx
call fcn.101a201e
add esp, 8
mov ecx, dword [esp + 0x8cc]
xor eax, eax
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.101a1d25
mov esp, ebp
pop ebp
ret 8
call fcn.101a7156
int3