Function at 0x10011130
Capabilities:
Encode data using xor
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x84
mov eax, dword [0x10026018]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov dword [ebp - 0x84], 0
mov ecx, 0x2e
xor eax, eax
mov dl, byte [eax + str.__aDWAMfODLWrR_QM__6]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x40], dl
inc eax
and ecx, 0xff
cmp eax, 0x18
jb 0x10011157
mov ecx, 0x64b9d3be
lea eax, [ebp - 0x68]
mov byte [ebp - 0x28], 0
call fcn.10012cc0
mov ebx, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea ecx, [ebp - 0x40]
push ecx
push eax
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x11183b24], eax
mov ecx, 0x47
xor eax, eax
mov dl, byte [eax + str._b8__e____]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x14], dl
inc eax
and ecx, 0xff
cmp eax, 0xb
jb 0x100111a1
mov byte [ebp - 9], 0
mov ecx, 0x55
xor eax, eax
mov dl, byte [eax + 0x100213ec]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x24], dl
inc eax
and ecx, 0xff
cmp eax, 0xc
jb 0x100111c5
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 0x24]
push ecx
mov byte [ebp - 0x18], 0
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [0x11183be4]
mov dword [ecx*4 + 0x11183be8], eax
inc ecx
mov dword [0x11183be4], ecx
mov ecx, 0x81
xor eax, eax
mov edi, edi
mov dl, byte [eax + 0x100213fc]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x14], dl
inc eax
and ecx, 0xff
cmp eax, 0xb
jb 0x10011210
mov byte [ebp - 9], 0
mov ecx, 0x55
xor eax, eax
mov dl, byte [eax + 0x100213ec]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x24], dl
inc eax
and ecx, 0xff
cmp eax, 0xc
jb 0x10011234
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 0x24]
push ecx
mov byte [ebp - 0x18], 0
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [0x11183be4]
mov dword [ecx*4 + 0x11183be8], eax
inc ecx
mov dword [0x11183be4], ecx
mov ecx, 0x36
xor eax, eax
lea ecx, [ecx]
mov dl, byte [eax + str.bRJTSU_I_o2._76]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x38], dl
inc eax
and ecx, 0xff
cmp eax, 0x10
jb 0x10011280
mov byte [ebp - 0x28], 0
mov ecx, 0x55
xor eax, eax
mov dl, byte [eax + 0x100213ec]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x14], dl
inc eax
and ecx, 0xff
cmp eax, 0xc
jb 0x100112a4
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x14]
push ecx
mov byte [ebp - 8], 0
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [0x11183be4]
mov dword [ecx*4 + 0x11183be8], eax
inc ecx
mov dword [0x11183be4], ecx
mov ecx, 0x27
xor eax, eax
lea ecx, [ecx]
mov dl, byte [eax + str.dZLK_IyF_UPV]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x14], dl
inc eax
and ecx, 0xff
cmp eax, 0xc
jb 0x100112f0
mov byte [ebp - 8], 0
mov ecx, 0x55
xor eax, eax
mov dl, byte [eax + 0x100213ec]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x24], dl
inc eax
and ecx, 0xff
cmp eax, 0xc
jb 0x10011314
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 0x24]
push ecx
mov byte [ebp - 0x18], 0
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [0x11183be4]
mov dword [ecx*4 + 0x11183be8], eax
inc ecx
mov dword [0x11183be4], ecx
mov ecx, 0xcc
xor eax, eax
lea ecx, [ecx]
mov dl, byte [eax + 0x1002142c]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x40], dl
inc eax
and ecx, 0xff
cmp eax, 0x17
jb 0x10011360
mov byte [ebp - 0x29], 0
mov ecx, 0x55
xor eax, eax
mov dl, byte [eax + 0x100213ec]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x14], dl
inc eax
and ecx, 0xff
cmp eax, 0xc
jb 0x10011384
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x14]
push ecx
mov byte [ebp - 8], 0
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [0x11183be4]
mov dword [ecx*4 + 0x11183be8], eax
inc ecx
mov dword [0x11183be4], ecx
mov ecx, 0x7d
xor eax, eax
lea ecx, [ecx]
mov dl, byte [eax + 0x10021444]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x40], dl
inc eax
and ecx, 0xff
cmp eax, 0x19
jb 0x100113d0
mov byte [ebp - 0x27], 0
mov ecx, 0x55
xor eax, eax
mov dl, byte [eax + 0x100213ec]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x14], dl
inc eax
and ecx, 0xff
cmp eax, 0xc
jb 0x100113f4
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x14]
push ecx
mov byte [ebp - 8], 0
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [0x11183be4]
mov dword [ecx*4 + 0x11183be8], eax
inc ecx
mov dword [0x11183be4], ecx
mov ecx, 0xf9
xor eax, eax
lea ecx, [ecx]
mov dl, byte [eax + 0x10021460]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x14], dl
inc eax
and ecx, 0xff
cmp eax, 0xc
jb 0x10011440
mov byte [ebp - 8], 0
mov ecx, 0x55
xor eax, eax
mov dl, byte [eax + 0x100213ec]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x24], dl
inc eax
and ecx, 0xff
cmp eax, 0xc
jb 0x10011464
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 0x24]
push ecx
mov byte [ebp - 0x18], 0
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x10011539
mov ecx, 0xf9
xor eax, eax
mov dl, byte [eax + 0x10021460]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x68], dl
inc eax
and ecx, 0xff
cmp eax, 0xc
jb 0x100114a1
mov byte [ebp - 0x5c], 0
mov ecx, 0x55
xor eax, eax
mov dl, byte [eax + 0x100213ec]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x78], dl
inc eax
and ecx, 0xff
cmp eax, 0xc
jb 0x100114c5
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x78]
push ecx
mov byte [ebp - 0x6c], 0
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp byte [eax], 0xe9
jne 0x100114fc
xor eax, eax
jmp 0x10011539
mov edi, 0x10021460
sub edi, 0xb12c02e
lea esi, [ebp - 0x50]
call fcn.10012d70
mov edi, 0x100213ec
sub edi, 0x363dbeac
lea esi, [ebp - 0x34]
mov ebx, eax
call fcn.10012d40
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ebx, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov ecx, dword [0x11183be4]
mov dword [ecx*4 + 0x11183be8], eax
inc ecx
mov dword [0x11183be4], ecx
mov ecx, 0x32
xor eax, eax
mov dl, byte [eax + str.hDESYhKUXYNM]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x34], dl
inc eax
and ecx, 0xff
cmp eax, 0xd
jb 0x10011554
mov ecx, 0x64b9d3be
lea eax, [ebp - 0x68]
mov byte [ebp - 0x27], 0
call fcn.10012cc0
lea ecx, [ebp - 0x34]
push ecx
push eax
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x10011605
mov ecx, 0x32
xor eax, eax
mov dl, byte [eax + str.hDESYhKUXYNM]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x50], dl
inc eax
and ecx, 0xff
cmp eax, 0xd
jb 0x10011597
mov ecx, 0x64b9d3be
lea eax, [ebp - 0x24]
mov byte [ebp - 0x43], 0
call fcn.10012cc0
lea ecx, [ebp - 0x50]
push ecx
push eax
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp byte [eax], 0xe9
jne 0x100115d8
xor eax, eax
jmp 0x10011605
mov edi, str.hDESYhKUXYNM
sub edi, 0x3b0f89
lea esi, [ebp - 0x78]
call fcn.10012da0
mov esi, eax
mov ecx, 0x64b9d3be
lea eax, [ebp - 0x14]
call fcn.10012cc0
push esi
push eax
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [0x11183be4]
mov dword [ecx*4 + 0x11183be8], eax
inc ecx
mov dword [0x11183be4], ecx
mov ecx, 0x5b
xor eax, eax
mov dl, byte [eax + 0x10021480]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x3c], dl
inc eax
and ecx, 0xff
cmp eax, 0x12
jb 0x10011620
mov ecx, 0x64b9d3be
lea eax, [ebp - 0x14]
mov byte [ebp - 0x2a], 0
call fcn.10012cc0
lea ecx, [ebp - 0x3c]
push ecx
push eax
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x100116cb
mov ecx, 0x5b
xor eax, eax
mov dl, byte [eax + 0x10021480]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x58], dl
inc eax
and ecx, 0xff
cmp eax, 0x12
jb 0x10011663
mov ecx, 0x64b9d3be
lea eax, [ebp - 0x24]
mov byte [ebp - 0x46], 0
call fcn.10012cc0
lea ecx, [ebp - 0x58]
push ecx
push eax
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp byte [eax], 0xe9
jne 0x100116a4
xor eax, eax
jmp 0x100116cb
mov edi, 0x7bcd1e09
lea esi, [ebp - 0x80]
call fcn.10012dd0
mov esi, eax
mov ecx, 0x64b9d3be
lea eax, [ebp - 0x68]
call fcn.10012cc0
push esi
push eax
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [0x11183be4]
mov dword [ecx*4 + 0x11183be8], eax
inc ecx
mov dword [0x11183be4], ecx
mov ecx, 0x48
xor eax, eax
mov dl, byte [eax + 0x10021494]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x38], dl
inc eax
and ecx, 0xff
cmp eax, 0x10
jb 0x100116e6
mov ecx, 0x64b9d3be
lea eax, [ebp - 0x14]
mov byte [ebp - 0x28], 0
call fcn.10012cc0
lea ecx, [ebp - 0x38]
push ecx
push eax
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x1001179e
mov ecx, 0x48
xor eax, eax
lea ecx, [ecx]
mov dl, byte [eax + 0x10021494]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x54], dl
inc eax
and ecx, 0xff
cmp eax, 0x10
jb 0x10011730
mov ecx, 0x64b9d3be
lea eax, [ebp - 0x24]
mov byte [ebp - 0x44], 0
call fcn.10012cc0
lea ecx, [ebp - 0x54]
push ecx
push eax
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp byte [eax], 0xe9
jne 0x10011771
xor eax, eax
jmp 0x1001179e
mov edi, 0x10021494
sub edi, 0x4568d847
lea esi, [ebp - 0x7c]
call fcn.10012e00
mov esi, eax
mov ecx, 0x64b9d3be
lea eax, [ebp - 0x68]
call fcn.10012cc0
push esi
push eax
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [0x11183be4]
mov dword [ecx*4 + 0x11183be8], eax
inc ecx
mov dword [0x11183be4], ecx
mov ecx, 0xa9
xor eax, eax
lea esp, [esp]
mov dl, byte [eax + 0x100214a8]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x38], dl
inc eax
and ecx, 0xff
cmp eax, 0xf
jb 0x100117c0
mov ecx, 0x64b9d3be
lea eax, [ebp - 0x14]
mov byte [ebp - 0x29], 0
call fcn.10012cc0
lea ecx, [ebp - 0x38]
push ecx
push eax
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x1001186b
mov ecx, 0xa9
xor eax, eax
mov dl, byte [eax + 0x100214a8]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x54], dl
inc eax
and ecx, 0xff
cmp eax, 0xf
jb 0x10011803
mov ecx, 0x64b9d3be
lea eax, [ebp - 0x24]
mov byte [ebp - 0x45], 0
call fcn.10012cc0
lea ecx, [ebp - 0x54]
push ecx
push eax
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp byte [eax], 0xe9
jne 0x10011844
xor eax, eax
jmp 0x1001186b
mov edi, 0x38c162ff
lea esi, [ebp - 0x7c]
call fcn.10012e30
mov esi, eax
mov ecx, 0x64b9d3be
lea eax, [ebp - 0x68]
call fcn.10012cc0
push esi
push eax
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [0x11183be4]
mov dword [ecx*4 + 0x11183be8], eax
inc ecx
mov dword [0x11183be4], ecx
mov ecx, 0xbd
xor eax, eax
mov dl, byte [eax + 0x100214b8]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x3c], dl
inc eax
and ecx, 0xff
cmp eax, 0x15
jb 0x10011886
mov ebx, 0x100214d0
sub ebx, 0x7ae9cc4c
mov ecx, ebx
lea eax, [ebp - 0x14]
mov byte [ebp - 0x27], 0
call fcn.10012e60
lea ecx, [ebp - 0x3c]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x1001193f
mov ecx, 0xbd
xor eax, eax
mov dl, byte [eax + 0x100214b8]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x58], dl
inc eax
and ecx, 0xff
cmp eax, 0x15
jb 0x100118d5
mov ecx, ebx
lea eax, [ebp - 0x24]
mov byte [ebp - 0x43], 0
call fcn.10012e60
lea ecx, [ebp - 0x58]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp byte [eax], 0xe9
jne 0x10011917
xor eax, eax
jmp 0x1001193f
mov edi, 0x8341e8b2
lea esi, [ebp - 0x80]
call fcn.10012ef0
mov esi, eax
mov ecx, ebx
lea eax, [ebp - 0x68]
call fcn.10012e60
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [0x11183be4]
mov dword [ecx*4 + 0x11183be8], eax
inc ecx
mov dword [0x11183be4], ecx
mov ecx, 0x8c
xor eax, eax
lea ebx, [ebx]
mov dl, byte [eax + 0x100214dc]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x3c], dl
inc eax
and ecx, 0xff
cmp eax, 0x15
jb 0x10011960
mov ecx, ebx
lea eax, [ebp - 0x14]
mov byte [ebp - 0x27], 0
call fcn.10012e60
lea ecx, [ebp - 0x3c]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x10011a0e
mov ecx, 0x8c
xor eax, eax
mov dl, byte [eax + 0x100214dc]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x58], dl
inc eax
and ecx, 0xff
cmp eax, 0x15
jb 0x100119a4
mov ecx, ebx
lea eax, [ebp - 0x24]
mov byte [ebp - 0x43], 0
call fcn.10012e60
lea ecx, [ebp - 0x58]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp byte [eax], 0xe9
jne 0x100119e6
xor eax, eax
jmp 0x10011a0e
mov edi, 0x7a2ae350
lea esi, [ebp - 0x80]
call fcn.10012f20
mov esi, eax
mov ecx, ebx
lea eax, [ebp - 0x68]
call fcn.10012e60
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [0x11183be4]
mov dword [ecx*4 + 0x11183be8], eax
inc ecx
mov dword [0x11183be4], ecx
mov ecx, 0xb0
xor eax, eax
lea esp, [esp]
mov dl, byte [eax + 0x100214f4]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x38], dl
inc eax
and ecx, 0xff
cmp eax, 0x10
jb 0x10011a30
mov ecx, ebx
lea eax, [ebp - 0x14]
mov byte [ebp - 0x28], 0
call fcn.10012e60
lea ecx, [ebp - 0x38]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x10011ab2
mov ecx, 0xb0
xor eax, eax
mov dl, byte [eax + 0x100214f4]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x54], dl
inc eax
and ecx, 0xff
cmp eax, 0x10
jb 0x10011a74
mov ecx, ebx
lea eax, [ebp - 0x24]
mov byte [ebp - 0x44], 0
call fcn.10012e60
lea ecx, [ebp - 0x54]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp byte [eax], 0xe9
jne 0x10011ab6
xor eax, eax
jmp 0x10011ade
mov edi, 0x18df301c
lea esi, [ebp - 0x7c]
call fcn.10012f50
mov esi, eax
mov ecx, ebx
lea eax, [ebp - 0x68]
call fcn.10012e60
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [0x11183be4]
mov dword [ecx*4 + 0x11183be8], eax
inc ecx
mov dword [0x11183be4], ecx
call fcn.10011b10
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.100199c6
mov esp, ebp
pop ebp
ret