Function at 0x1001a240
Capabilities:
Encode data using xor
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x3c
mov eax, dword [0x100571c4]
xor eax, esp
mov dword [esp + 0x38], eax
push ebx
push esi
push edi
mov edx, 0xdc
xor ecx, ecx
nop
mov al, byte [ecx + 0x10050ff4]
xor al, dl
mov byte [esp + ecx + 0xc], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0x18
jb 0x1001a260
lea eax, [esp + 0xc]
mov byte [esp + 0x24], 0
mov ebx, 0x10050c18
lea ecx, [esp + 0x28]
push eax
sub ebx, 0x477f543b
push ebx
call fcn.100131e0
mov esi, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call esi
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
call edi
mov ecx, dword [0x1019fe34]
mov edx, 0x31
mov dword [ecx*4 + 0x1019ff60], eax
inc ecx
mov dword [0x1019fe34], ecx
xor ecx, ecx
mov al, byte [ecx + str.tJZ_eDX_IH]
xor al, dl
mov byte [esp + ecx + 0x28], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0xb
jb 0x1001a2c4
mov byte [esp + 0x33], 0
mov edx, 0xf3
xor ecx, ecx
nop dword [eax + eax]
mov al, byte [ecx + 0x10050bf8]
xor al, dl
mov byte [esp + ecx + 0xc], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0xc
jb 0x1001a2f0
lea eax, [esp + 0x28]
mov byte [esp + 0x18], 0
push eax
lea eax, [esp + 0x10]
push eax
call esi
push eax
call edi
mov ecx, dword [0x1019fe34]
mov edx, 0x98
mov dword [ecx*4 + 0x1019ff60], eax
inc ecx
mov dword [0x1019fe34], ecx
xor ecx, ecx
nop word [eax + eax]
mov al, byte [ecx + 0x1005101c]
xor al, dl
mov byte [esp + ecx + 0x28], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0x17
jb 0x1001a340
mov byte [esp + 0x3f], 0
mov edx, 0xf3
xor ecx, ecx
mov al, byte [ecx + 0x10050bf8]
xor al, dl
mov byte [esp + ecx + 0xc], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0xc
jb 0x1001a364
lea eax, [esp + 0x28]
mov byte [esp + 0x18], 0
push eax
lea eax, [esp + 0x10]
push eax
call esi
push eax
call edi
mov ecx, dword [0x1019fe34]
mov edx, 0xa
mov dword [ecx*4 + 0x1019ff60], eax
inc ecx
mov dword [0x1019fe34], ecx
xor ecx, ecx
nop dword [eax + eax]
mov al, byte [ecx + 0x10051034]
xor al, dl
mov byte [esp + ecx + 0x28], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0x19
jb 0x1001a3b0
mov byte [esp + 0x41], 0
mov edx, 0xf3
xor ecx, ecx
mov al, byte [ecx + 0x10050bf8]
xor al, dl
mov byte [esp + ecx + 0xc], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0xc
jb 0x1001a3d4
lea eax, [esp + 0x28]
mov byte [esp + 0x18], 0
push eax
lea eax, [esp + 0x10]
push eax
call esi
push eax
call edi
mov ecx, dword [0x1019fe34]
mov edx, 0xff
mov dword [ecx*4 + 0x1019ff60], eax
inc ecx
mov dword [0x1019fe34], ecx
xor ecx, ecx
nop dword [eax + eax]
mov al, byte [ecx + 0x10051050]
xor al, dl
mov byte [esp + ecx + 0xc], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0xc
jb 0x1001a420
mov byte [esp + 0x18], 0
mov edx, 0xf3
xor ecx, ecx
mov al, byte [ecx + 0x10050bf8]
xor al, dl
mov byte [esp + ecx + 0x28], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0xc
jb 0x1001a444
lea eax, [esp + 0xc]
mov byte [esp + 0x34], 0
push eax
lea eax, [esp + 0x2c]
push eax
call esi
push eax
call edi
mov ecx, dword [0x1019fe34]
mov edx, 0x61
mov dword [ecx*4 + 0x1019ff60], eax
inc ecx
mov dword [0x1019fe34], ecx
xor ecx, ecx
nop dword [eax + eax]
mov al, byte [ecx + 0x10051060]
xor al, dl
mov byte [esp + ecx + 0xc], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0xd
jb 0x1001a490
lea eax, [esp + 0xc]
mov byte [esp + 0x19], 0
push eax
push ebx
lea ecx, [esp + 0x30]
call fcn.100131e0
push eax
call esi
push eax
call edi
mov ecx, dword [0x1019fe34]
mov edx, 0x71
mov dword [ecx*4 + 0x1019ff60], eax
inc ecx
mov dword [0x1019fe34], ecx
xor ecx, ecx
nop dword [eax]
mov al, byte [ecx + 0x10051070]
xor al, dl
mov byte [esp + ecx + 0x28], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0xb
jb 0x1001a4e0
mov byte [esp + 0x33], 0
mov edx, 0xf3
xor ecx, ecx
mov al, byte [ecx + 0x10050bf8]
xor al, dl
mov byte [esp + ecx + 0xc], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0xc
jb 0x1001a504
lea eax, [esp + 0x28]
mov byte [esp + 0x18], 0
push eax
lea eax, [esp + 0x10]
push eax
call esi
push eax
call edi
mov ecx, dword [0x1019fe34]
mov edx, 0xbd
mov dword [ecx*4 + 0x1019ff60], eax
inc ecx
mov dword [0x1019fe34], ecx
xor ecx, ecx
nop dword [eax + eax]
mov al, byte [ecx + 0x1005107c]
xor al, dl
mov byte [esp + ecx + 0xc], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0x12
jb 0x1001a550
lea eax, [esp + 0xc]
mov byte [esp + 0x1e], 0
push eax
push ebx
lea ecx, [esp + 0x30]
call fcn.100131e0
push eax
call esi
push eax
call edi
mov ecx, dword [0x1019fe34]
mov edx, 0x5d
mov dword [ecx*4 + 0x1019ff60], eax
inc ecx
mov dword [0x1019fe34], ecx
xor ecx, ecx
nop dword [eax]
mov al, byte [ecx + str._t___r_b_f]
xor al, dl
mov byte [esp + ecx + 0x28], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0x10
jb 0x1001a5a0
mov byte [esp + 0x38], 0
mov edx, 0xf3
xor ecx, ecx
mov al, byte [ecx + 0x10050bf8]
xor al, dl
mov byte [esp + ecx + 0xc], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0xc
jb 0x1001a5c4
lea eax, [esp + 0x28]
mov byte [esp + 0x18], 0
push eax
lea eax, [esp + 0x10]
push eax
call esi
push eax
call edi
mov ecx, dword [0x1019fe34]
mov edx, 0x73
mov dword [ecx*4 + 0x1019ff60], eax
inc ecx
mov dword [0x1019fe34], ecx
xor ecx, ecx
nop dword [eax + eax]
mov al, byte [ecx + 0x100510a4]
xor al, dl
mov byte [esp + ecx + 0xc], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0x10
jb 0x1001a610
lea eax, [esp + 0xc]
mov byte [esp + 0x1c], 0
push eax
push ebx
lea ecx, [esp + 0x30]
call fcn.100131e0
push eax
call esi
push eax
call edi
mov ecx, dword [0x1019fe34]
mov edx, 0x59
mov dword [ecx*4 + 0x1019ff60], eax
inc ecx
mov dword [0x1019fe34], ecx
xor ecx, ecx
nop dword [eax]
mov al, byte [ecx + 0x100510b8]
xor al, dl
mov byte [esp + ecx + 0xc], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0xf
jb 0x1001a660
lea eax, [esp + 0xc]
mov byte [esp + 0x1b], 0
push eax
push ebx
lea ecx, [esp + 0x30]
call fcn.100131e0
push eax
call esi
push eax
call edi
mov ecx, dword [0x1019fe34]
mov edx, 0x30
mov dword [ecx*4 + 0x1019ff60], eax
inc ecx
mov dword [0x1019fe34], ecx
xor ecx, ecx
nop dword [eax]
mov al, byte [ecx + 0x100510c8]
xor al, dl
mov byte [esp + ecx + 0x28], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0x1b
jb 0x1001a6b0
mov byte [esp + 0x43], 0
mov edx, 0xae
xor ecx, ecx
mov al, byte [ecx + 0x10050c08]
xor al, dl
mov byte [esp + ecx + 0xc], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0xe
jb 0x1001a6d4
lea eax, [esp + 0x28]
mov byte [esp + 0x1a], 0
push eax
lea eax, [esp + 0x10]
push eax
call esi
push eax
call edi
mov ecx, dword [0x1019fe34]
mov dword [ecx*4 + 0x1019ff60], eax
inc ecx
mov dword [0x1019fe34], ecx
call fcn.1001a730
mov ecx, dword [esp + 0x44]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.10027e1f
mov esp, ebp
pop ebp
ret