Function at 0x10010e70
Capabilities:
Encode data using xor
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x84
mov eax, dword [0x10026018]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov dword [ebp - 0x84], 0
mov ecx, 0x2e
xor eax, eax
mov dl, byte [eax + str.__aDWAMfODLWrR_QM__6]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x40], dl
inc eax
and ecx, 0xff
cmp eax, 0x18
jb 0x10010e97
mov ecx, 0x64b9d3b6
lea eax, [ebp - 0x68]
mov byte [ebp - 0x28], 0
call fcn.10012ac0
mov ebx, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea ecx, [ebp - 0x40]
push ecx
push eax
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x11183b24], eax
mov ecx, 0x47
xor eax, eax
mov dl, byte [eax + str._b8__e____]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x14], dl
inc eax
and ecx, 0xff
cmp eax, 0xb
jb 0x10010ee1
mov byte [ebp - 9], 0
mov ecx, 0x55
xor eax, eax
mov dl, byte [eax + 0x100213e4]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x24], dl
inc eax
and ecx, 0xff
cmp eax, 0xc
jb 0x10010f05
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 0x24]
push ecx
mov byte [ebp - 0x18], 0
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [0x11183be4]
mov dword [ecx*4 + 0x11183be8], eax
inc ecx
mov dword [0x11183be4], ecx
mov ecx, 0x81
xor eax, eax
mov edi, edi
mov dl, byte [eax + 0x100213f4]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x14], dl
inc eax
and ecx, 0xff
cmp eax, 0xb
jb 0x10010f50
mov byte [ebp - 9], 0
mov ecx, 0x55
xor eax, eax
mov dl, byte [eax + 0x100213e4]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x24], dl
inc eax
and ecx, 0xff
cmp eax, 0xc
jb 0x10010f74
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 0x24]
push ecx
mov byte [ebp - 0x18], 0
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [0x11183be4]
mov dword [ecx*4 + 0x11183be8], eax
inc ecx
mov dword [0x11183be4], ecx
mov ecx, 0x36
xor eax, eax
lea ecx, [ecx]
mov dl, byte [eax + str.bRJTSU_I_o2._76]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x38], dl
inc eax
and ecx, 0xff
cmp eax, 0x10
jb 0x10010fc0
mov byte [ebp - 0x28], 0
mov ecx, 0x55
xor eax, eax
mov dl, byte [eax + 0x100213e4]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x14], dl
inc eax
and ecx, 0xff
cmp eax, 0xc
jb 0x10010fe4
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x14]
push ecx
mov byte [ebp - 8], 0
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [0x11183be4]
mov dword [ecx*4 + 0x11183be8], eax
inc ecx
mov dword [0x11183be4], ecx
mov ecx, 0x27
xor eax, eax
lea ecx, [ecx]
mov dl, byte [eax + str.dZLK_IyF_UPV]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x14], dl
inc eax
and ecx, 0xff
cmp eax, 0xc
jb 0x10011030
mov byte [ebp - 8], 0
mov ecx, 0x55
xor eax, eax
mov dl, byte [eax + 0x100213e4]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x24], dl
inc eax
and ecx, 0xff
cmp eax, 0xc
jb 0x10011054
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 0x24]
push ecx
mov byte [ebp - 0x18], 0
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [0x11183be4]
mov dword [ecx*4 + 0x11183be8], eax
inc ecx
mov dword [0x11183be4], ecx
mov ecx, 0xcc
xor eax, eax
lea ecx, [ecx]
mov dl, byte [eax + 0x10021424]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x40], dl
inc eax
and ecx, 0xff
cmp eax, 0x17
jb 0x100110a0
mov byte [ebp - 0x29], 0
mov ecx, 0x55
xor eax, eax
mov dl, byte [eax + 0x100213e4]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x14], dl
inc eax
and ecx, 0xff
cmp eax, 0xc
jb 0x100110c4
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x14]
push ecx
mov byte [ebp - 8], 0
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [0x11183be4]
mov dword [ecx*4 + 0x11183be8], eax
inc ecx
mov dword [0x11183be4], ecx
mov ecx, 0x7d
xor eax, eax
lea ecx, [ecx]
mov dl, byte [eax + 0x1002143c]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x40], dl
inc eax
and ecx, 0xff
cmp eax, 0x19
jb 0x10011110
mov byte [ebp - 0x27], 0
mov ecx, 0x55
xor eax, eax
mov dl, byte [eax + 0x100213e4]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x14], dl
inc eax
and ecx, 0xff
cmp eax, 0xc
jb 0x10011134
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x14]
push ecx
mov byte [ebp - 8], 0
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [0x11183be4]
mov dword [ecx*4 + 0x11183be8], eax
inc ecx
mov dword [0x11183be4], ecx
mov ecx, 0xf9
xor eax, eax
lea ecx, [ecx]
mov dl, byte [eax + 0x10021458]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x14], dl
inc eax
and ecx, 0xff
cmp eax, 0xc
jb 0x10011180
mov byte [ebp - 8], 0
mov ecx, 0x55
xor eax, eax
mov dl, byte [eax + 0x100213e4]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x24], dl
inc eax
and ecx, 0xff
cmp eax, 0xc
jb 0x100111a4
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 0x24]
push ecx
mov byte [ebp - 0x18], 0
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x10011279
mov ecx, 0xf9
xor eax, eax
mov dl, byte [eax + 0x10021458]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x68], dl
inc eax
and ecx, 0xff
cmp eax, 0xc
jb 0x100111e1
mov byte [ebp - 0x5c], 0
mov ecx, 0x55
xor eax, eax
mov dl, byte [eax + 0x100213e4]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x78], dl
inc eax
and ecx, 0xff
cmp eax, 0xc
jb 0x10011205
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x78]
push ecx
mov byte [ebp - 0x6c], 0
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp byte [eax], 0xe9
jne 0x1001123c
xor eax, eax
jmp 0x10011279
mov edi, 0x10021458
sub edi, 0xb12c02e
lea esi, [ebp - 0x50]
call fcn.10012b70
mov edi, 0x100213e4
sub edi, 0x363dbeac
lea esi, [ebp - 0x34]
mov ebx, eax
call fcn.10012b40
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ebx, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov ecx, dword [0x11183be4]
mov dword [ecx*4 + 0x11183be8], eax
inc ecx
mov dword [0x11183be4], ecx
mov ecx, 0x32
xor eax, eax
mov dl, byte [eax + str.hDESYhKUXYNM]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x34], dl
inc eax
and ecx, 0xff
cmp eax, 0xd
jb 0x10011294
mov ecx, 0x64b9d3b6
lea eax, [ebp - 0x68]
mov byte [ebp - 0x27], 0
call fcn.10012ac0
lea ecx, [ebp - 0x34]
push ecx
push eax
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x10011345
mov ecx, 0x32
xor eax, eax
mov dl, byte [eax + str.hDESYhKUXYNM]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x50], dl
inc eax
and ecx, 0xff
cmp eax, 0xd
jb 0x100112d7
mov ecx, 0x64b9d3b6
lea eax, [ebp - 0x24]
mov byte [ebp - 0x43], 0
call fcn.10012ac0
lea ecx, [ebp - 0x50]
push ecx
push eax
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp byte [eax], 0xe9
jne 0x10011318
xor eax, eax
jmp 0x10011345
mov edi, str.hDESYhKUXYNM
sub edi, 0x3b0f89
lea esi, [ebp - 0x78]
call fcn.10012ba0
mov esi, eax
mov ecx, 0x64b9d3b6
lea eax, [ebp - 0x14]
call fcn.10012ac0
push esi
push eax
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [0x11183be4]
mov dword [ecx*4 + 0x11183be8], eax
inc ecx
mov dword [0x11183be4], ecx
mov ecx, 0x5b
xor eax, eax
mov dl, byte [eax + 0x10021478]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x3c], dl
inc eax
and ecx, 0xff
cmp eax, 0x12
jb 0x10011360
mov ecx, 0x64b9d3b6
lea eax, [ebp - 0x14]
mov byte [ebp - 0x2a], 0
call fcn.10012ac0
lea ecx, [ebp - 0x3c]
push ecx
push eax
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x1001140b
mov ecx, 0x5b
xor eax, eax
mov dl, byte [eax + 0x10021478]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x58], dl
inc eax
and ecx, 0xff
cmp eax, 0x12
jb 0x100113a3
mov ecx, 0x64b9d3b6
lea eax, [ebp - 0x24]
mov byte [ebp - 0x46], 0
call fcn.10012ac0
lea ecx, [ebp - 0x58]
push ecx
push eax
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp byte [eax], 0xe9
jne 0x100113e4
xor eax, eax
jmp 0x1001140b
mov edi, 0x7bcd1e01
lea esi, [ebp - 0x80]
call fcn.10012bd0
mov esi, eax
mov ecx, 0x64b9d3b6
lea eax, [ebp - 0x68]
call fcn.10012ac0
push esi
push eax
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [0x11183be4]
mov dword [ecx*4 + 0x11183be8], eax
inc ecx
mov dword [0x11183be4], ecx
mov ecx, 0x48
xor eax, eax
mov dl, byte [eax + 0x1002148c]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x38], dl
inc eax
and ecx, 0xff
cmp eax, 0x10
jb 0x10011426
mov ecx, 0x64b9d3b6
lea eax, [ebp - 0x14]
mov byte [ebp - 0x28], 0
call fcn.10012ac0
lea ecx, [ebp - 0x38]
push ecx
push eax
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x100114de
mov ecx, 0x48
xor eax, eax
lea ecx, [ecx]
mov dl, byte [eax + 0x1002148c]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x54], dl
inc eax
and ecx, 0xff
cmp eax, 0x10
jb 0x10011470
mov ecx, 0x64b9d3b6
lea eax, [ebp - 0x24]
mov byte [ebp - 0x44], 0
call fcn.10012ac0
lea ecx, [ebp - 0x54]
push ecx
push eax
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp byte [eax], 0xe9
jne 0x100114b1
xor eax, eax
jmp 0x100114de
mov edi, 0x1002148c
sub edi, 0x4568d847
lea esi, [ebp - 0x7c]
call fcn.10012c00
mov esi, eax
mov ecx, 0x64b9d3b6
lea eax, [ebp - 0x68]
call fcn.10012ac0
push esi
push eax
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [0x11183be4]
mov dword [ecx*4 + 0x11183be8], eax
inc ecx
mov dword [0x11183be4], ecx
mov ecx, 0xa9
xor eax, eax
lea esp, [esp]
mov dl, byte [eax + 0x100214a0]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x38], dl
inc eax
and ecx, 0xff
cmp eax, 0xf
jb 0x10011500
mov ecx, 0x64b9d3b6
lea eax, [ebp - 0x14]
mov byte [ebp - 0x29], 0
call fcn.10012ac0
lea ecx, [ebp - 0x38]
push ecx
push eax
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x100115ab
mov ecx, 0xa9
xor eax, eax
mov dl, byte [eax + 0x100214a0]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x54], dl
inc eax
and ecx, 0xff
cmp eax, 0xf
jb 0x10011543
mov ecx, 0x64b9d3b6
lea eax, [ebp - 0x24]
mov byte [ebp - 0x45], 0
call fcn.10012ac0
lea ecx, [ebp - 0x54]
push ecx
push eax
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp byte [eax], 0xe9
jne 0x10011584
xor eax, eax
jmp 0x100115ab
mov edi, 0x38c162f7
lea esi, [ebp - 0x7c]
call fcn.10012c30
mov esi, eax
mov ecx, 0x64b9d3b6
lea eax, [ebp - 0x68]
call fcn.10012ac0
push esi
push eax
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [0x11183be4]
mov dword [ecx*4 + 0x11183be8], eax
inc ecx
mov dword [0x11183be4], ecx
mov ecx, 0xbd
xor eax, eax
mov dl, byte [eax + 0x100214b0]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x3c], dl
inc eax
and ecx, 0xff
cmp eax, 0x15
jb 0x100115c6
mov ebx, 0x100214c8
sub ebx, 0x7ae9cc4c
mov ecx, ebx
lea eax, [ebp - 0x14]
mov byte [ebp - 0x27], 0
call fcn.10012c60
lea ecx, [ebp - 0x3c]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x1001167f
mov ecx, 0xbd
xor eax, eax
mov dl, byte [eax + 0x100214b0]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x58], dl
inc eax
and ecx, 0xff
cmp eax, 0x15
jb 0x10011615
mov ecx, ebx
lea eax, [ebp - 0x24]
mov byte [ebp - 0x43], 0
call fcn.10012c60
lea ecx, [ebp - 0x58]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp byte [eax], 0xe9
jne 0x10011657
xor eax, eax
jmp 0x1001167f
mov edi, 0x8341e8aa
lea esi, [ebp - 0x80]
call fcn.10012cf0
mov esi, eax
mov ecx, ebx
lea eax, [ebp - 0x68]
call fcn.10012c60
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [0x11183be4]
mov dword [ecx*4 + 0x11183be8], eax
inc ecx
mov dword [0x11183be4], ecx
mov ecx, 0x8c
xor eax, eax
lea ebx, [ebx]
mov dl, byte [eax + 0x100214d4]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x3c], dl
inc eax
and ecx, 0xff
cmp eax, 0x15
jb 0x100116a0
mov ecx, ebx
lea eax, [ebp - 0x14]
mov byte [ebp - 0x27], 0
call fcn.10012c60
lea ecx, [ebp - 0x3c]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x1001174e
mov ecx, 0x8c
xor eax, eax
mov dl, byte [eax + 0x100214d4]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x58], dl
inc eax
and ecx, 0xff
cmp eax, 0x15
jb 0x100116e4
mov ecx, ebx
lea eax, [ebp - 0x24]
mov byte [ebp - 0x43], 0
call fcn.10012c60
lea ecx, [ebp - 0x58]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp byte [eax], 0xe9
jne 0x10011726
xor eax, eax
jmp 0x1001174e
mov edi, 0x7a2ae348
lea esi, [ebp - 0x80]
call fcn.10012d20
mov esi, eax
mov ecx, ebx
lea eax, [ebp - 0x68]
call fcn.10012c60
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [0x11183be4]
mov dword [ecx*4 + 0x11183be8], eax
inc ecx
mov dword [0x11183be4], ecx
mov ecx, 0xb0
xor eax, eax
lea esp, [esp]
mov dl, byte [eax + 0x100214ec]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x38], dl
inc eax
and ecx, 0xff
cmp eax, 0x10
jb 0x10011770
mov ecx, ebx
lea eax, [ebp - 0x14]
mov byte [ebp - 0x28], 0
call fcn.10012c60
lea ecx, [ebp - 0x38]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x100117f2
mov ecx, 0xb0
xor eax, eax
mov dl, byte [eax + 0x100214ec]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x54], dl
inc eax
and ecx, 0xff
cmp eax, 0x10
jb 0x100117b4
mov ecx, ebx
lea eax, [ebp - 0x24]
mov byte [ebp - 0x44], 0
call fcn.10012c60
lea ecx, [ebp - 0x54]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp byte [eax], 0xe9
jne 0x100117f6
xor eax, eax
jmp 0x1001181e
mov edi, 0x18df3014
lea esi, [ebp - 0x7c]
call fcn.10012d50
mov esi, eax
mov ecx, ebx
lea eax, [ebp - 0x68]
call fcn.10012c60
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [0x11183be4]
mov dword [ecx*4 + 0x11183be8], eax
inc ecx
mov dword [0x11183be4], ecx
call fcn.10011850
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.10019756
mov esp, ebp
pop ebp
ret