Function at 0x100ebdc0
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x198
mov eax, dword [0x10119540]
xor eax, esp
mov dword [esp + 0x194], eax
mov ecx, dword [ebp + 0x10]
mov eax, dword [ebp + 0xc]
push esi
mov esi, dword [ebp + 8]
mov dword [esp + 0x1c], ecx
mov ecx, dword [ebp + 0x14]
mov dword [esp + 0x74], ecx
mov ecx, dword [esi + 0x5c]
mov edx, dword [esi + 0xc]
mov dword [esp + 0x20], ecx
mov ecx, dword [esi + 0x28]
mov dword [esp + 0x24], ecx
mov ecx, dword [esi + 0x24]
push edi
mov dword [esp + 0x58], eax
mov edi, 1
mov dword [esp + 0x10], ecx
mov ecx, dword [esi + 4]
sub eax, ecx
mov dword [esp + 0x64], edx
add edx, ecx
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], ecx
mov ecx, dword [esi + 0xb8]
mov dword [esp + 0x7c], edx
mov edx, edi
shl edx, cl
mov ecx, dword [esi + 0x10]
sub eax, ecx
mov dword [esp + 0x2c], esi
mov esi, dword [esp + 0x18]
sub esi, edx
mov dword [esp + 0x1c], 3
cmp eax, edx
mov eax, esi
mov esi, dword [esp + 0x2c]
cmovbe eax, ecx
push 0xcf1bbcdc
push 0xbf9b0000
cmp dword [esi + 0x18], 0
mov edx, dword [esi + 0x54]
cmovne eax, ecx
mov dword [esp + 0x38], edx
mov dword [esp + 0x64], eax
mov ecx, 6
mov eax, dword [esi + 0xc4]
cmp eax, ecx
mov dword [esp + 0x54], edx
cmovb ecx, eax
mov eax, dword [esi + 0x50]
mov dword [esp + 0x48], eax
mov dword [esp + 0x50], eax
mov eax, dword [esi + 0xb4]
shl edi, cl
mov dword [esp + 0x5c], edi
mov dword [esp + 0x68], eax
mov edi, dword [eax + 0x5c]
mov esi, dword [eax + 0x28]
mov eax, dword [esp + 0x60]
mov dword [esp + 0x14], edi
push dword [eax + 4]
push dword [eax]
call fcn.10113fc0
mov edi, dword [esp + 0x60]
mov ecx, 0x38
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], edx
sub ecx, dword [edi + 0x24]
call fcn.10113f90
mov edi, dword [esp + 0xc]
mov dword [esp + 0x44], eax
shr eax, 2
and eax, 0x3fffffc0
mov dword [esp + 0x34], 0x3f
lea ecx, [eax + esi]
mov esi, dword [esp + 0x2c]
lea eax, [edi + eax*4]
mov dword [esp + 0x68], ecx
mov dword [esp + 0x6c], eax
cmp dword [esi + 0xdc], 0
jne 0x100ec147
mov eax, dword [esp + 0x18]
mov edi, dword [esi + 0x1c]
sub eax, edi
cmp eax, 0x180
jbe 0x100ec04f
lea eax, [edi + 0x60]
mov dword [esp + 0x3c], eax
cmp edi, eax
jae 0x100ebfbf
mov eax, 0x38
sub eax, dword [esp + 0x10]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x14]
add eax, 8
mov dword [esp + 0x48], eax
push 0xcf1bbcdc
push 0xbf9b0000
push dword [eax + edi + 4]
push dword [eax + edi]
call fcn.10113fc0
xor eax, dword [esi + 0x50]
xor edx, dword [esi + 0x54]
mov ecx, dword [esp + 0xc]
call fcn.10113f90
mov ecx, eax
mov eax, edi
and eax, 7
mov edx, dword [esi + eax*4 + 0x2c]
mov dword [esi + eax*4 + 0x2c], ecx
mov eax, edx
mov ecx, dword [esp + 0x24]
shr eax, 2
and eax, 0x3fffffc0
mov dword [esp + 0x38], edx
mov edx, dword [esp + 0x28]
add edx, eax
lea esi, [ecx + eax*4]
mov eax, 0
movzx ecx, byte [edx]
dec ecx
and ecx, 0x3f
cmove eax, dword [esp + 0x34]
add ecx, eax
mov eax, dword [esp + 0x38]
mov byte [edx], cl
mov byte [ecx + edx], al
mov eax, dword [esp + 0x48]
mov dword [esi + ecx*4], edi
inc edi
mov esi, dword [esp + 0x2c]
cmp edi, dword [esp + 0x3c]
jb 0x100ebf42
mov edi, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
add edi, 0xffffffe0
mov ecx, dword [esp + 0x58]
inc ecx
mov dword [esp + 0xc], edi
lea eax, [edx + edi]
cmp eax, ecx
jbe 0x100ebfde
xor ecx, ecx
jmp 0x100ebfe3
sub ecx, edx
sub ecx, edi
inc ecx
mov eax, 8
cmp ecx, eax
cmova ecx, eax
add ecx, edi
mov dword [esp + 0x38], ecx
cmp edi, ecx
jae 0x100ec04f
mov eax, 0x38
sub eax, dword [esi + 0x24]
mov dword [esp + 0x3c], eax
nop dword [eax]
nop word [eax + eax]
push 0xcf1bbcdc
push 0xbf9b0000
push dword [edi + edx + 4]
push dword [edi + edx]
call fcn.10113fc0
xor eax, dword [esi + 0x50]
xor edx, dword [esi + 0x54]
mov ecx, dword [esp + 0x3c]
call fcn.10113f90
mov edx, dword [esp + 0x14]
mov ecx, eax
mov eax, edi
inc edi
and eax, 7
mov dword [esi + eax*4 + 0x2c], ecx
cmp edi, dword [esp + 0x38]
jb 0x100ec010
mov edi, dword [esp + 0xc]
mov eax, dword [esi + 0x5c]
mov ecx, dword [esi + 4]
mov dword [esp + 0x3c], eax
mov eax, dword [esi + 0x28]
mov dword [esp + 0x38], eax
mov dword [esp + 0x70], ecx
cmp edi, dword [esp + 0x18]
jae 0x100ec0fe
mov eax, 0x38
sub eax, dword [esi + 0x24]
mov dword [esp + 0x48], eax
nop word [eax + eax]
push 0xcf1bbcdc
push 0xbf9b0000
push dword [edi + ecx + 0xc]
push dword [edi + ecx + 8]
call fcn.10113fc0
xor eax, dword [esi + 0x50]
xor edx, dword [esi + 0x54]
mov ecx, dword [esp + 0x48]
call fcn.10113f90
mov ecx, eax
mov eax, edi
and eax, 7
mov edx, dword [esi + eax*4 + 0x2c]
mov dword [esi + eax*4 + 0x2c], ecx
mov eax, edx
mov ecx, dword [esp + 0x3c]
shr eax, 2
and eax, 0x3fffffc0
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x38]
add edx, eax
lea esi, [ecx + eax*4]
mov eax, 0
movzx ecx, byte [edx]
dec ecx
and ecx, 0x3f
cmove eax, dword [esp + 0x34]
add ecx, eax
mov eax, dword [esp + 0xc]
mov byte [edx], cl
mov byte [ecx + edx], al
mov dword [esi + ecx*4], edi
inc edi
mov esi, dword [esp + 0x2c]
mov ecx, dword [esp + 0x70]
cmp edi, dword [esp + 0x18]
jb 0x100ec080
mov edi, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
push 0xcf1bbcdc
push 0xbf9b0000
mov dword [esi + 0x1c], edi
push dword [edi + eax + 0xc]
push dword [edi + eax + 8]
call fcn.10113fc0
xor eax, dword [esp + 0x40]
mov ecx, 0x38
xor edx, dword [esp + 0x30]
sub ecx, dword [esp + 0x10]
call fcn.10113f90
mov ecx, eax
mov eax, edi
and eax, 7
mov edx, dword [esi + eax*4 + 0x2c]
mov dword [esi + eax*4 + 0x2c], ecx
jmp 0x100ec172
movq xmm0, qword [esp + 0x48]
mov eax, 0x38
sub eax, dword [esp + 0x10]
movq xmm1, qword [esp + 0x70]
xorps xmm1, xmm0
movd xmm0, eax
mov eax, dword [esp + 0x18]
psrlq xmm1, xmm0
mov dword [esi + 0x1c], eax
movd edx, xmm1
add dword [esi + 0x58], edx
mov eax, edx
movzx ecx, dl
mov edx, dword [esp + 0x28]
shr eax, 2
and eax, 0x3fffffc0
mov dword [esp + 0x34], ecx
mov ecx, dword [esp + 0x24]
add edx, eax
mov dword [esp + 0x48], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
movzx esi, byte [edx]
lea ecx, [ecx + eax*4]
mov eax, dword [esp + 0x34]
movsx eax, al
mov dword [esp + 0x24], ecx
xor ecx, ecx
mov dword [esp + 0x70], esi
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
pshufd xmm1, xmm0, 0
xorps xmm0, xmm0
movaps xmmword [esp + 0x80], xmm0
nop word [eax + eax]
movups xmm0, xmmword [edx]
lea edx, [edx + 0x10]
pcmpeqb xmm0, xmm1
pmovmskb eax, xmm0
mov dword [esp + ecx*4 + 0x80], eax
inc ecx
cmp ecx, 4
jl 0x100ec1e0
mov eax, dword [esp + 0x8c]
and esi, 0x3f
cdq
mov edi, eax
mov ecx, edx
mov eax, dword [esp + 0x88]
shld ecx, edi, 0x10
cdq
or ecx, edx
shl edi, 0x10
or edi, eax
mov eax, dword [esp + 0x84]
shld ecx, edi, 0x10
cdq
or ecx, edx
shl edi, 0x10
or edi, eax
mov eax, dword [esp + 0x80]
shld ecx, edi, 0x10
cdq
or ecx, edx
shl edi, 0x10
mov dword [esp + 0x28], ecx
or edi, eax
mov edx, dword [esp + 0x28]
mov ecx, esi
neg ecx
mov eax, edi
and ecx, 0x3f
call fcn.10113f60
mov dword [esp + 0x30], eax
mov ecx, esi
mov dword [esp + 0x40], edx
mov eax, edi
mov edx, dword [esp + 0x28]
call fcn.10113f90
mov esi, dword [esp + 0x30]
mov edi, dword [esp + 0x40]
or esi, eax
or edi, edx
ja 0x100ec280
test esi, esi
je 0x100ec2d8
mov ecx, dword [esp + 0x54]
test ecx, ecx
je 0x100ec2d8
test esi, esi
jne 0x100ec294
bsf eax, edi
add eax, 0x20
jmp 0x100ec297
bsf eax, esi
add eax, dword [esp + 0x70]
mov edx, dword [esp + 0x24]
and eax, 0x3f
mov edx, dword [edx + eax*4]
je 0x100ec2c2
cmp edx, dword [esp + 0x5c]
jb 0x100ec2d8
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0x98], edx
inc eax
dec ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x54], ecx
mov ecx, esi
mov eax, edi
add ecx, 0xffffffff
adc eax, 0xffffffff
and esi, ecx
and edi, eax
ja 0x100ec280
jb 0x100ec2d8
test esi, esi
jne 0x100ec280
mov edx, dword [esp + 0x48]
mov esi, 0x3f
mov eax, 0
movzx ecx, byte [edx]
dec ecx
and ecx, 0x3f
cmove eax, esi
mov esi, dword [esp + 0x2c]
add ecx, eax
mov eax, dword [esp + 0x34]
mov byte [edx], cl
mov byte [ecx + edx], al
mov edx, dword [esp + 0x24]
mov eax, dword [esi + 0x1c]
mov dword [edx + ecx*4], eax
inc dword [esi + 0x1c]
cmp dword [esp + 0x10], 0
jbe 0x100ec3f4
mov esi, dword [esp + 0x58]
mov edi, 3
mov ecx, dword [esp + 0x10]
xor eax, eax
nop word [eax + eax]
mov eax, dword [esp + eax*4 + 0x98]
mov edx, dword [esp + 0x14]
add edx, eax
mov dword [esp + 0x30], eax
mov eax, dword [edx + edi - 3]
cmp eax, dword [edi + esi - 3]
jne 0x100ec3e3
mov edi, dword [esp + 0x20]
mov eax, esi
add edi, 0xfffffffd
cmp esi, edi
jae 0x100ec394
mov eax, dword [edx]
xor eax, dword [esi]
je 0x100ec36e
mov edi, dword [esp + 0x20]
bsf eax, eax
shr eax, 3
jmp 0x100ec3ba
lea eax, [esi + 4]
add edx, 4
cmp eax, edi
jae 0x100ec394
nop dword [eax + eax]
mov ecx, dword [edx]
xor ecx, dword [eax]
jne 0x100ec508
add eax, 4
add edx, 4
cmp eax, edi
jb 0x100ec380
mov edi, dword [esp + 0x20]
lea ecx, [edi - 1]
cmp eax, ecx
jae 0x100ec3ad
mov cx, word [edx]
cmp cx, word [eax]
jne 0x100ec3ad
add eax, 2
add edx, 2
cmp eax, edi
jae 0x100ec3b8
mov cl, byte [edx]
cmp cl, byte [eax]
jne 0x100ec3b8
inc eax
sub eax, esi
cmp eax, dword [esp + 0x1c]
jbe 0x100ec3db
mov ecx, dword [esp + 0x18]
sub ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x78]
add ecx, 3
mov dword [esp + 0x1c], eax
add eax, esi
mov dword [edx], ecx
cmp eax, edi
je 0x100ec3f4
mov ecx, dword [esp + 0x10]
mov edi, dword [esp + 0x1c]
mov eax, dword [esp + 0xc]
inc eax
mov dword [esp + 0xc], eax
cmp eax, ecx
jb 0x100ec330
mov edx, dword [esp + 0x60]
mov dword [esp + 0x14], 0
mov dword [esp + 0x24], 0
mov ecx, dword [edx + 4]
mov eax, dword [edx]
mov edx, dword [esp + 0x68]
mov dword [esp + 0x28], eax
sub eax, ecx
sub dword [esp + 0x64], eax
mov eax, dword [esp + 0x44]
movzx esi, byte [edx]
movsx eax, al
mov dword [esp + 0x40], ecx
xor ecx, ecx
mov dword [esp + 0x30], esi
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
pshufd xmm1, xmm0, 0
xorps xmm0, xmm0
movaps xmmword [esp + 0x80], xmm0
nop dword [eax + eax]
movups xmm0, xmmword [edx]
lea edx, [edx + 0x10]
pcmpeqb xmm0, xmm1
pmovmskb eax, xmm0
mov dword [esp + ecx*4 + 0x80], eax
inc ecx
cmp ecx, 4
jl 0x100ec450
mov eax, dword [esp + 0x8c]
and esi, 0x3f
cdq
mov edi, eax
mov ecx, edx
mov eax, dword [esp + 0x88]
shld ecx, edi, 0x10
cdq
or ecx, edx
shl edi, 0x10
or edi, eax
mov eax, dword [esp + 0x84]
shld ecx, edi, 0x10
cdq
or ecx, edx
shl edi, 0x10
or edi, eax
mov eax, dword [esp + 0x80]
shld ecx, edi, 0x10
cdq
or ecx, edx
shl edi, 0x10
mov dword [esp + 0xc], ecx
or edi, eax
mov edx, dword [esp + 0xc]
mov ecx, esi
neg ecx
mov eax, edi
and ecx, 0x3f
call fcn.10113f60
mov dword [esp + 0x44], eax
mov ecx, esi
mov dword [esp + 0x68], edx
mov eax, edi
mov edx, dword [esp + 0xc]
call fcn.10113f90
mov esi, dword [esp + 0x44]
mov edi, dword [esp + 0x68]
or esi, eax
or edi, edx
ja 0x100ec4f4
test esi, esi
je 0x100ec630
mov ecx, dword [esp + 0x54]
test ecx, ecx
je 0x100ec560
test esi, esi
jne 0x100ec519
bsf eax, edi
add eax, 0x20
jmp 0x100ec51c
mov edi, dword [esp + 0x20]
bsf ecx, ecx
shr ecx, 3
add eax, ecx
jmp 0x100ec3b8
bsf eax, esi
add eax, dword [esp + 0x30]
mov edx, dword [esp + 0x6c]
and eax, 0x3f
mov edx, dword [edx + eax*4]
je 0x100ec54a
mov eax, dword [esp + 0x60]
cmp edx, dword [eax + 0xc]
jb 0x100ec560
mov eax, dword [esp + 0x14]
mov dword [esp + eax*4 + 0x98], edx
inc eax
dec ecx
mov dword [esp + 0x14], eax
mov dword [esp + 0x54], ecx
mov ecx, esi
mov eax, edi
add ecx, 0xffffffff
adc eax, 0xffffffff
and esi, ecx
and edi, eax
ja 0x100ec4f4
jb 0x100ec560
test esi, esi
jne 0x100ec4f4
cmp dword [esp + 0x14], 0
jbe 0x100ec630
mov edi, dword [esp + 0x58]
xor eax, eax
mov eax, dword [esp + eax*4 + 0x98]
mov esi, dword [esp + 0x40]
add esi, eax
mov dword [esp + 0x44], eax
mov eax, dword [esi]
cmp eax, dword [edi]
jne 0x100ec601
mov ecx, dword [esp + 0x20]
lea eax, [edi + 4]
add esi, 4
sub eax, esi
add eax, dword [esp + 0x28]
cmp eax, ecx
cmovb ecx, eax
lea eax, [edi + 4]
push ecx
push esi
push eax
call fcn.100d9050
mov dword [esp + 0x6c], eax
lea ecx, [eax + esi]
cmp ecx, dword [esp + 0x28]
jne 0x100ec5d0
mov esi, dword [esp + 0x20]
add eax, 4
push esi
push dword [esp + 0x80]
add eax, edi
push eax
call fcn.100d9050
add eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x1c]
lea edx, [eax + 4]
cmp edx, ecx
jbe 0x100ec605
mov eax, dword [esp + 0x18]
mov ecx, edx
sub eax, dword [esp + 0x44]
sub eax, dword [esp + 0x64]
mov esi, dword [esp + 0x78]
add eax, 3
mov dword [esp + 0x1c], ecx
mov dword [esi], eax
lea eax, [edx + edi]
cmp eax, dword [esp + 0x20]
je 0x100ec618
jmp 0x100ec605
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x24]
inc eax
mov dword [esp + 0x24], eax
cmp eax, dword [esp + 0x14]
jb 0x100ec571
mov eax, ecx
pop edi
pop esi
mov ecx, dword [esp + 0x194]
xor ecx, esp
call fcn.100913c0
mov esp, ebp
pop ebp
ret 0x10
mov ecx, dword [esp + 0x19c]
mov eax, dword [esp + 0x1c]
pop edi
pop esi
xor ecx, esp
call fcn.100913c0
mov esp, ebp
pop ebp
ret 0x10