Function at 0x100b716d
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x286c
call fcn.1011f220
mov eax, dword [0x10170c30]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 8]
push esi
mov esi, ecx
int1
cmp byte [esi + 0x61], 0
pushfd
test byte [0x100b7248], 0xbc
jne 0x100b7249
sub dword es:[edx - 0x1f], 0x3f
inc eax
bound esp, qword [ebp + 0x2e]
fadd qword [edi + 0x2c]
or dword [edx], esi
sar dword [ecx], cl
scasd eax, dword es:[edi]
sub al, 0x5e
push edx
and dl, bh
sbb edx, eax
adc dword [ebx], esp
cmp dword [esi + ebp], esp
in eax, 0x4f
jecxz 0x100b718a
lodsb al, byte [esi]
pop esi
imul ecx, eax, 0x8b9d0ce0
in al, dx
popfd
mov ebp, esp
xchg esi, eax
dec ebp
sub al, 0x49
fsub dword [esi - 0x3d]
popal
aaa
adc al, 0x7a
xlatb
movsd dword es:[edi], dword [esi]
imul ebp, dword [eax + ecx*4 - 0x42], 0xfffffff9
test al, 0x10
dec esi
scasb al, byte es:[edi]
out 4, al
push ebx
shr dword [ecx - 0x15742a1f], 1
mov ecx, ebx
je 0x100b71c4
into
xor eax, 0xe58e511c
lea edx, [eax + edi*8 + 0x15]
cwde
jbe 0x100b71fb
and byte [esi + 0x4200ee1f], dh
xchg byte [ebx - 0xc], ah
out dx, al
add byte [edx - 0x7a], al
arpl sp, si
pop edi
dec ebx
insb byte es:[edi], dx
jae 0x100b71c0
scasb al, byte es:[edi]
test dword [edi + 0x6b], ebx
push esi
xchg ebp, eax
mov esp, 0x5597e0b5
sahf
mov bl, 0x10
pushfd
mov eax, dword [0x32b0a001]
lds esp, [eax + eax*4 - 0x31]
sbb eax, 0xf80c5d38
dec ecx
popal
sub edx, dword [edi - 0x48]
add dl, bl
lds esi, [esi]
aas
xor al, 0x9d
popal
leave
mov bl, 0x48
inc edi
das
lodsd eax, dword [esi]
or ah, byte [ecx + 0x38]
cmp byte [eax + 0x58f947f7], 0x9e
xchg esi, eax
pop ebp
push es
mov ch, 0xea
in al, dx
into
popfd
push edi
je 0x100b76c6
test ebx, ebx
je 0x100b76c6
mov edi, dword [ebp + 0xc]
test edi, edi
je 0x100b76c6
push edi
push str.SendMsg1:_d
push 0
push 3
call fcn.10049c0c
pushfd
test byte [0x100b7333], 0x9c
jne 0x100b7334
cdq
add ebp, 0x16
pop esi
sbb al, 0xf9
mov esi, edi
adc cl, bl
fisttp word [eax - 0x457620f3]
pop ss
pop ss
fsubr dword [edx - 0x40]
sbb bl, cl
mov cl, 0x78
movsb byte es:[edi], byte [esi]
pop ss
sub byte [ebx], cl
rol bl, 0x83
xchg edx, eax
loopne 0x100b72e2
push ecx
push ds
fldln2
inc esp
mov dh, bh
push eax
out 0xb2, al
sub eax, dword [edi - 0x5138e160]
fiadd dword [ebx]
mov al, byte [0x3886ff93]
fst dword [ecx + ebp*4 - 0x6ef7c6a6]
mov ebx, 0xb05ef7c2
adc dword [ebx + 0x3fbbeceb], ebp
xchg edx, eax
aaa
mov esp, 0x5647bfea
mov dword [0x8b22bf78], esp
mov edi, 0xae68cda6
salc
outsd dx, dword [esi]
movsd dword es:[di], dword [si]
aam 0xe9
mov eax, dword [0xc2e86e4f]
cmp byte [esi - 0x514bfce0], bh
or dh, byte [ecx + 0x6acfdc1d]
mov eax, 0x8b2f36c
js 0x100b736a
push ebx
rol dword [edx + esi*8 + 0x6cadb2d4], 1
cmpsd dword es:[esi], dword es:[edi]
imul ecx, dword [edi + 0x18], 0xe80dfb9e
xchg ebp, eax
pop dword [ebx]
adc dword [edx - 0x64], ebp
push ss
test dword [eax], edx
outsb dx, byte [esi]
adc dword [edi], ebx
les esi, [edi - 0x34be0d40]
mov ecx, dword [edi + ebp]
or bh, byte [esi - 0x532481d5]
push ds
mov ch, 0xa8
mov al, byte [0x90c0e5ea]
add ebp, ecx
popfd
push edi
lea eax, [ebp - 0x2868]
push ebx
push eax
mov dword [ebp - 0x286c], edi
pushfd
test byte [0x100b738f], 0x86
jne 0x100b7490
call [esi + esi*8 + 0xb738f05]
adc byte [esi + 0x13e850f], al
add byte [eax], al
sbb dword [eax - 0x42], eax
jle 0x100b7350
imul ebp, dword [ebx], 0xffffff9d
popfd
scasb al, byte es:[edi]
pop eax
jo 0x100b73c7
sbb edi, dword [0xc18a2bea]
cli
cmp al, ah
enter 0xffffffffffffc053, 0xd
test eax, 0x676b2232
or eax, 0x6b2232a9
xor ah, byte [bx]
xor ah, byte [edi]
sar al, cl
dec edi
cwde
mov eax, 0x41c17233
adc al, 0x29
test ch, cl
dec ecx
in al, 0x28
mov esp, 0x2373a743
sub eax, 0xd12d52e7
xchg ebp, eax
in al, dx
add dl, byte [ecx + ebp]
jecxz 0x100b7370
jbe 0x100b7359
inc dword [ecx]
jns 0x100b7343
add al, 0xa9
dec edi
shr eax, cl
pop esi
push eax
inc esi
outsd dx, dword [esi]
and byte [ebx + 0x3f], dh
call 0x229e94b3
shr byte [edi], cl
pop ss
or byte [ebp + 0x2a075428], 0x30
pop es
sub dh, byte [eax]
push eax
shl dword [eax + 0x41cbcfa8], cl
cld
adc ebp, esi
xor al, 0xdb
xor eax, 0x17bfb2c8
adc edx, dword [eax]
test al, 0xcf
retf
adc bh, ah
push ss
out 0x16, eax
pop ss
sahf
sahf
add dword [edx - 0x1f], eax
loopne 0x100b741d
mov word [esi], ss
cmpsd dword [esi], dword es:[edi]
inc edi
cmpsb byte [esi], byte es:[edi]
mov ah, 0xad
js 0x100b7406
xchg dword [ebx], edx
sbb al, 0xe3
cmc
mov dword [0xe43c143c], eax
mov ah, dl
lahf
or ch, byte [ecx]
xor dword [eax - 0x5a60baa3], ecx
imul eax, dword [eax], 0x455d8831
lahf
movsd dword es:[edi], dword [esi]
add eax, 0xcbc742e0
mov dword [0xa235c823], eax
jg 0x100b73b1
movsd dword es:[edi], dword [esi]
ja 0x100b73ea
xlatb
pop ebx
and byte [ecx + 0x1f8108e0], al
inc eax
xchg ebp, eax
leave
movsd dword es:[edi], dword [esi]
loopne 0x100b7410
sbb dword [edi], 0xa5c99540
mov word [ebx - 0x66b3e88b], fs
jne 0x100b7429
dec esp
cdq
jl 0x100b73c6
jg 0x100b73b9
mov ebp, 0xd1674b1d
cld
jno 0x100b73b7
daa
lodsd eax, dword [esi]
push esp
add eax, 0x496a8d30
sal dword [eax + edi*2], 1
xor al, 0x78
ja 0x100b7482
mov word [ebp - 0x17f0625], fs
sbb al, byte [ebp - 0x229d6db9]
shr edi, 1
scasb al, byte es:[edi]
sub eax, 0x114f1a69
fstp xword [ebp + edi*8 + 0x2236b96c]
into
sbb dh, cl
or byte [edi - 0x66a68aca], dh
in eax, 0x2f
and eax, 0x5835b22d
inc esi
cmp eax, 0xdf1a6853
sbb bl, bh
xchg edx, eax
push esi
stc
fbstp tbyte [esi + 0x7b15471b]
sub dword [edi - 0x16], esp
inc edi
jb 0x100b74a6
sbb ah, dl
jne 0x100b742d
mov edx, 0xca958d11
xchg edx, eax
int1
adc dword [ebp - 0xe6d356b], ecx
mov cl, 0x19
jnp 0x100b745e
mov esi, 0x7445b0f1
out dx, al
je 0x100b7472
sbb dword [eax + ebp*4 + 0x2e], esi
mov al, ch
xchg esp, eax
stosb byte es:[edi], al
push ebp
jb 0x100b74ca
popfd
call fcn.1011d7d0
add esp, 0x1c
lea edi, [esi + 0x1c]
push edi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea ecx, [esi + 0x14]
cmp dword [ecx], 0
lea eax, [ebp - 0x286c]
push eax
jne 0x100b7686
pushfd
test byte [0x100b7595], 0xd
jne 0x100b7596
and al, dl
leave
stosd dword es:[edi], eax
cmc
sar ah, 0x10
fistp qword [ecx - 0xc50d777]
cld
adc bh, bl
mov ecx, 0xf3af2889
cmc
int1
push ecx
adc eax, 0x7f39eeea
mov dl, 0x6c
mov ch, byte [esi - 0x49a1ec9b]
in eax, 0x13
or eax, 0x8128b410
out dx, al
imul esp, dword [eax + edx + 7], 0xbdb33a3f
call 0xe4a31df4
fcomp dword [esi + 0x52c2e83f]
frstor dword [edi - 0x15a423d4]
sbb byte [ebp - 0x63eb6fdf], al
out dx, eax
mov ecx, 0xc513c630
leave
mov edx, 0x424af943
mov eax, 0xf9c436bc
das
sbb dword [esi], esi
sub edi, dword [eax + 2]
dec edi
mov edx, 0xfffaea91
adc eax, 0xbe2cb9c5
sti
mov edx, dword [esi + 8]
nop
mov ecx, 0xb29c26f1
out 0xf3, eax
out dx, al
lahf
ror byte [edx + 0x5716ce6e], 1
push ds
out 0x50, al
pushfd
ja 0x100b7569
and ebx, dword [ebx - 0x3b419453]
adc al, 0xd4
cwde
mov esi, 0xa0efd6d3
cmpsb byte [esi], byte es:[edi]
les eax, [ecx]
mov dword [0xe307ca3f], eax
fisub dword [eax - 0x5a76a398]
jle 0x100b759f
mov ebp, 0x22503ecc
xchg ebx, eax
arpl word [ebp - 0x48], bp
add ebx, 0x485ca65e
cmp ebx, dword [ebx + 0x46]
insd dword es:[edi], dx
jbe 0x100b75f7
ror dword [edi + 0x654e8d4a], cl
inc ebp
cmp bl, byte [ecx]
cmp byte [edi + 2], 0x51
int 0x55
aas
movsd dword es:[di], dword [si]
outsd dx, dword [esi]
leave
add cl, byte [esi + ebx*4 + 0x78a524cf]
mul dword [eax + 0x44]
pushal
inc esp
popfd
call fcn.100b3481
pushfd
test byte [0x100b7613], 0x55
jne 0x100b7614
adc esi, dword [esi + 0xb]
adc byte [ebp + 0x75], dl
outsb dx, byte [esi]
add byte [eax], dh
push cs
nop
xchg ebx, eax
in eax, dx
call 0x84d46dc
fmul st(4)
pop esp
dec edi
in al, dx
pop ss
mov cl, 0x53
push ds
enter 0x1b52, 0xffffffffffffff9c
sub cl, dl
fcom dword [eax]
inc ax
add al, 0x5f
jnp 0x100b7569
sub al, byte [eax]
pop ecx
cwde
or dword [edx - 0x3c3b402b], esp
pop ss
push edx
sub dh, byte [edx]
pop ss
shr dword [esi - 0x55], 0x50
jae 0x100b7616
arpl word [edi + 0x3b6b1b10], bp
push 0xe7386f23
mov ah, 0xf7
jnp 0x100b760f
mov ecx, 0x58302b9
jl 0x100b7594
cmpsb byte [esi], byte es:[edi]
movsd dword es:[edi], dword [esi]
mov al, 0x71
in al, 0x77
not byte [esi + 0x7ecf6b56]
in al, 0xc6
and bh, byte [ebp + 0x1d6a666f]
mov al, 9
fdivr qword [edx - 0x7a758a2]
pop eax
clc
out dx, al
or ebx, dword [edx]
popfd
push edi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push dword [esi + 0x34]
call dword [sym.imp.KERNEL32.dll_SetEvent]
jmp 0x100b7692
call fcn.100b3481
push edi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov al, 1
pushfd
test byte [0x100b76c2], 0xb3
jne 0x100b76c3
and byte [ecx + 0x74a4ccd3], bh
cmpsb byte [esi], byte es:[edi]
cli
cwde
xor byte [ebp - 0x77], 0x11
insd dword es:[edi], dx
cli
xor byte [edx - 0x11], ah
jae 0x100b76bc
jne 0x100b7692
dec esp
cli
adc dword [ebp - 0x70], 0x68
sbb byte [esi], bh
sub bh, byte cs:[eax]
sub bh, byte cs:[eax]
rol byte [ecx], 1
push ebx
popfd
jmp 0x100b76c8
xor al, al
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.1011e48a
leave
ret 8