Function at 0x10186ed0
Capabilities:
Encode data using xor

Disassembly:
push 0xffffffffffffffff
push 0x101ab24b
mov eax, dword fs:[0]
push eax
sub esp, 0xf0
mov eax, dword [0x1026d48c]
xor eax, esp
mov dword [esp + 0xec], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x1026d48c]
xor eax, esp
push eax
lea eax, [esp + 0x104]
mov dword fs:[0], eax
mov eax, dword [esp + 0x120]
mov ebp, dword [esp + 0x12c]
mov ebx, dword [esp + 0x128]
mov esi, dword [esp + 0x114]
mov edi, dword [esp + 0x11c]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x130]
push str.bcryptPbkdf
mov dword [esp + 0x28], ecx
push eax
lea ecx, [esp + 0x3c]
mov dword [esp + 0x38], ebp
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], ebx
call fcn.10061630
mov ecx, ebp
mov dword [esp + 0x10c], 0
call fcn.10017ff0
cmp dword [esp + 0x124], 1
jb 0x101871b3
cmp dword [esp + 0x118], 0
je 0x101871b3
mov eax, dword [esp + 0x14]
test eax, eax
je 0x101871b3
test ebx, ebx
je 0x101871b3
cmp ebx, 0x400
ja 0x101871b3
cmp eax, 0x100000
ja 0x101871b3
add eax, 4
push eax
call fcn.10017110
mov ebp, eax
add esp, 4
test ebp, ebp
je 0x101871b3
push ebx
call fcn.10017110
add esp, 4
test eax, eax
mov dword [esp + 0x28], eax
je 0x101871b3
lea ecx, [ebx + 0x1f]
shr ecx, 5
lea eax, [ecx + ebx - 1]
xor edx, edx
div ecx
mov dword [esp + 0x2c], ecx
mov ecx, dword [esp + 0x14]
push ecx
push edi
push ebp
mov dword [esp + 0x24], eax
call sub.MSVCR80.dll_memcpy
mov eax, dword [esp + 0x124]
lea edx, [esp + 0xcc]
push edx
push eax
push esi
call fcn.100e66c0
add esp, 0x18
cmp dword [esp + 0x128], 0
mov ebx, 1
jbe 0x10187176
lea ebx, [ebx]
mov eax, dword [esp + 0x14]
mov ecx, ebx
shr ecx, 0x18
mov byte [eax + ebp], cl
mov edx, ebx
shr edx, 0x10
mov byte [eax + ebp + 1], dl
mov ecx, ebx
shr ecx, 8
lea edx, [esp + 0x80]
mov byte [eax + ebp + 2], cl
mov byte [eax + ebp + 3], bl
push edx
add eax, 4
push eax
push ebp
call fcn.100e66c0
mov eax, dword [esp + 0x28]
add esp, 0xc
push eax
lea ecx, [esp + 0x64]
push ecx
mov ecx, dword [esp + 0x2c]
lea edx, [esp + 0x88]
push edx
lea eax, [esp + 0xcc]
push eax
call fcn.10186d60
mov eax, dword [esp + 0x124]
cmp eax, 1
mov ecx, 8
lea esi, [esp + 0x60]
lea edi, [esp + 0x40]
rep movsd dword es:[edi], dword [esi]
jbe 0x10187121
lea esi, [eax - 1]
jmp 0x101870b0
lea ecx, [esp + 0x80]
push ecx
lea edx, [esp + 0x64]
push 0x20
push edx
call fcn.100e66c0
mov eax, dword [esp + 0x28]
add esp, 0xc
push eax
lea ecx, [esp + 0x64]
push ecx
mov ecx, dword [esp + 0x2c]
lea edx, [esp + 0x88]
push edx
lea eax, [esp + 0xcc]
push eax
call fcn.10186d60
xor eax, eax
lea esp, [esp]
movzx ecx, byte [esp + eax + 0x60]
movzx edx, byte [esp + eax + 0x61]
xor byte [esp + eax + 0x40], cl
xor byte [esp + eax + 0x41], dl
movzx ecx, byte [esp + eax + 0x62]
movzx edx, byte [esp + eax + 0x63]
xor byte [esp + eax + 0x42], cl
xor byte [esp + eax + 0x43], dl
add eax, 4
cmp eax, 0x20
jb 0x101870f0
sub esi, 1
jne 0x101870b0
mov esi, dword [esp + 0x18]
mov eax, dword [esp + 0x128]
cmp esi, eax
jb 0x10187136
mov dword [esp + 0x18], eax
mov esi, eax
xor eax, eax
test esi, esi
jbe 0x1018715b
lea ecx, [ebx - 1]
cmp ecx, dword [esp + 0x20]
jae 0x1018715b
mov dl, byte [esp + eax + 0x40]
mov edi, dword [esp + 0x28]
mov byte [ecx + edi], dl
add ecx, dword [esp + 0x2c]
add eax, 1
cmp eax, esi
jb 0x1018713f
mov ecx, dword [esp + 0x128]
sub ecx, eax
add ebx, 1
test ecx, ecx
mov dword [esp + 0x128], ecx
ja 0x10187030
push ebp
call sub.MSVCR80.dll_void___cdecl_operator_delete_void__
mov eax, dword [esp + 0x24]
mov esi, dword [esp + 0x2c]
mov ecx, dword [esp + 0x34]
add esp, 4
push eax
push esi
call fcn.10019380
push esi
call sub.MSVCR80.dll_void___cdecl_operator_delete_void__
add esp, 4
lea ecx, [esp + 0x34]
mov dword [esp + 0x10c], 0xffffffff
call fcn.100616a0
mov al, 1
jmp 0x101871c9
lea ecx, [esp + 0x34]
mov dword [esp + 0x10c], 0xffffffff
call fcn.100616a0
xor al, al
mov ecx, dword [esp + 0x104]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0xec]
xor ecx, esp
call fcn.1018f87e
add esp, 0xfc
ret 0x20