Function at 0x1010c800
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x34
mov esi, edx
mov edx, dword [ebp + 8]
mov edi, ecx
cmp edx, 0xe
jne 0x1010c911
push 0xe
push str.Decimal_NumberenclosingmarkEnclosing_MarkfinalpunctuationFinal_PunctuationformatinitialpunctuationInitial_PunctuationlLetterletterletternumberLetter_NumberlineseparatorLine_SeparatorllLowercase_LetterlmModifier_LetterloOther_LetterlowercaseletterltTitlecase_LetterluUppercase_LettermarkmathsymbolMath_SymbolmcSpacing_MarkmemnNonspacing_MarkmodifierlettermodifiersymbolModifier_SymbolnNumberndnlnoOther_NumbernonspacingmarknumberopenpunctuationOpen_PunctuationotherotherletterothernumberotherpunctuationOther_PunctuationothersymbolOther_SymbolpPunctuationparagraphseparatorParagraph_SeparatorpcpdpepfpipoprivateusepspunctuationSymbolseparatorSeparatorsksmsospaceseparatorSpace_SeparatorspacingmarksurrogatesymboltitlecaseletteruppercaseletterzzlzpzsX
push esi
call sub.msvcrt.dll_memcmp
mov edx, dword [ebp + 8]
add esp, 0xc
test eax, eax
jne 0x1010ca35
mov eax, dword [0x103564a0]
mov esi, dword [0x1035648c]
movzx eax, byte [eax]
mov eax, dword [esi]
test eax, eax
jne 0x1010c857
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x1010cb99
mov dword [esi], eax
push 0x200
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
je 0x1010cb99
movdqa xmm0, xmmword [0x1024d750]
mov ecx, 0xfffffe00
nop dword [eax]
movdqu xmm1, xmmword [ecx + 0x1025d0e4]
pshufd xmm3, xmm1, 0xed
pshufd xmm2, xmm1, 0xe8
movdqa xmm5, xmm3
movdqa xmm1, xmm2
movdqa xmm6, xmm2
pxor xmm5, xmm0
pxor xmm1, xmm0
movdqa xmm4, xmm5
pcmpgtd xmm4, xmm1
pcmpgtd xmm1, xmm5
pand xmm6, xmm4
pandn xmm4, xmm3
pand xmm2, xmm1
pandn xmm1, xmm3
por xmm4, xmm6
por xmm1, xmm2
punpckldq xmm4, xmm1
movdqu xmmword [eax + ecx + 0x200], xmm4
add ecx, 0x10
jne 0x1010c880
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], 0x40
mov dword [ebp - 0x14], 0x40
mov byte [ebp - 0x10], 0
lea ecx, [ebp - 0x1c]
call fcn.100f8e20
movsd xmm0, qword [ebp - 0x1c]
movsd xmm1, qword [ebp - 0x14]
movsd qword [edi + 8], xmm1
movsd qword [edi], xmm0
jmp 0x1010cb06
cmp edx, 3
je 0x1010c9a6
cmp edx, 8
je 0x1010ca1e
cmp edx, 5
jne 0x1010ca35
mov eax, 0x49435341
movzx ecx, byte [esi + 4]
xor eax, dword [esi]
xor ecx, 0x49
or ecx, eax
jne 0x1010ca35
mov eax, dword [0x103564a0]
mov esi, dword [0x1035648c]
movzx eax, byte [eax]
mov eax, dword [esi]
test eax, eax
jne 0x1010c965
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x1010cba0
mov dword [esi], eax
push 8
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
je 0x1010cba0
mov dword [eax], 0
mov dword [eax + 4], 0x7f
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], 1
mov dword [ebp - 0x14], 1
mov byte [ebp - 0x10], 0
lea ecx, [ebp - 0x1c]
call fcn.100f8e20
jmp 0x1010c8f9
movzx eax, word [esi]
movzx ecx, byte [esi + 2]
xor eax, 0x6e41
xor ecx, 0x79
or cx, ax
jne 0x1010ca35
mov eax, dword [0x103564a0]
mov esi, dword [0x1035648c]
movzx eax, byte [eax]
mov eax, dword [esi]
test eax, eax
jne 0x1010c9dd
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x1010cba2
mov dword [esi], eax
push 8
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
je 0x1010cba2
mov dword [eax], 0
mov dword [eax + 4], 0x10ffff
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], 1
mov dword [ebp - 0x14], 1
mov byte [ebp - 0x10], 0
lea ecx, [ebp - 0x1c]
call fcn.100f8e20
jmp 0x1010c8f9
mov eax, 0x69737341
mov ecx, 0x64656e67
xor eax, dword [esi]
xor ecx, dword [esi + 4]
or ecx, eax
je 0x1010cb33
mov dword [ebp - 0x3c], esi
xor eax, eax
mov esi, 0x25
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x38], 0x25
jmp 0x1010ca61
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x38], esi
mov edx, dword [ebp + 8]
sub esi, eax
jbe 0x1010cafc
shr esi, 1
mov dword [ebp - 0x40], eax
add esi, eax
mov ebx, esi
shl ebx, 4
mov eax, dword [ebx + 0x10272560]
mov edi, eax
sub edi, edx
jb 0x1010ca7b
mov eax, edx
push eax
push dword [ebp - 0x3c]
push dword [ebx + 0x1027255c]
call sub.msvcrt.dll_memcmp
add esp, 0xc
test eax, eax
mov ecx, 0xff
cmovne edi, eax
xor eax, eax
test edi, edi
setne al
cmovs eax, ecx
cmp al, 1
je 0x1010ca50
movzx eax, al
cmp eax, 0xff
jne 0x1010cabe
inc esi
mov eax, esi
mov esi, dword [ebp - 0x38]
mov edx, dword [ebp + 8]
sub esi, eax
ja 0x1010ca61
jmp 0x1010cafc
mov edx, dword [ebx + 0x10272564]
lea ecx, [ebp - 0x1c]
push dword [ebx + 0x10272568]
call fcn.1010c320
add esp, 4
mov eax, dword [ebp - 0x14]
movsd xmm0, qword [ebp - 0x1c]
movzx ecx, word [ebp - 0xf]
movzx edx, byte [ebp - 0xd]
mov dword [ebp - 0x28], eax
movzx eax, byte [ebp - 0x10]
movsd qword [ebp - 0x30], xmm0
mov word [ebp - 0x20], cx
mov byte [ebp - 0x1e], dl
cmp al, 2
jne 0x1010cb0e
mov eax, dword [ebp - 0x34]
mov byte [eax], 1
mov byte [eax + 0xc], 2
add esp, 0x34
pop esi
pop edi
pop ebx
pop ebp
ret
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x34]
movsd xmm0, qword [ebp - 0x30]
movzx esi, word [ebp - 0x20]
mov ah, byte [ebp - 0x1e]
mov dword [edx + 8], ecx
movsd qword [edx], xmm0
mov word [edx + 0xd], si
mov byte [edx + 0xf], ah
mov byte [edx + 0xc], al
jmp 0x1010cb06
lea ecx, [ebp - 0x1c]
mov edx, 0x1025f2b1
push 0xa
call fcn.1010c800
add esp, 4
movzx ecx, byte [ebp - 0x10]
movzx eax, byte [ebp - 0x1c]
cmp cl, 2
jne 0x1010cb5a
mov byte [edi], al
mov byte [edi + 0xc], 2
jmp 0x1010cb06
mov edx, dword [ebp - 0x14]
movq xmm0, qword [ebp - 0x1b]
movzx esi, word [ebp - 0xf]
mov ch, byte [ebp - 0xd]
mov dword [ebp - 0x28], edx
movq qword [ebp - 0x2f], xmm0
mov word [ebp - 0x23], si
mov byte [ebp - 0x21], ch
mov byte [ebp - 0x30], al
mov byte [ebp - 0x24], cl
lea eax, [ebp - 0x30]
push eax
call fcn.10109950
add esp, 4
movsd xmm0, qword [ebp - 0x30]
movsd xmm1, qword [ebp - 0x28]
jmp 0x1010c903
push 0x200
jmp 0x1010cba4
jmp 0x1010cba2
push 8
push 4
call fcn.1001a7e0
add esp, 8
ud2