Function at 0x4100ac
Capabilities:
Encode data using xor
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2c
push ebx
push esi
push edi
mov esi, str.RRHUOH
lea edi, [ebp - 0x2c]
xor ebx, ebx
push 0x32
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
pop esi
cmp byte [0x442557], bl
je 0x4100e2
mov ecx, ebx
xor edx, edx
mov eax, ecx
div esi
add dl, 0x35
xor byte [ebp + ecx - 0x2c], dl
inc ecx
cmp ecx, 0xc
jl 0x4100cf
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ecx, eax
mov dword [ebp - 4], ecx
test ecx, ecx
je 0x410399
mov esi, str.rRHUOHoI_M442C
lea edi, [ebp - 0x14]
push 0x32
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, ebx
pop edi
xor edx, edx
mov eax, esi
div edi
add dl, 0x35
xor byte [ebp + esi - 0x14], dl
inc esi
cmp esi, 0xf
jl 0x41010c
lea eax, [ebp - 0x14]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
lea edi, [ebp - 0x18]
mov esi, str.rRHUOHoUKK_.5_DrSCIPHRNh___3E
mov dword [0x44a810], eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
cmp byte [0x4426bb], bl
je 0x41015b
push 0x32
mov ecx, ebx
pop esi
xor edx, edx
mov eax, ecx
div esi
add dl, 0x35
xor byte [ebp + ecx - 0x18], dl
inc ecx
cmp ecx, 0x10
jl 0x410148
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
lea edi, [ebp - 0x1c]
mov esi, str.rRHj_MYtS_
push 5
pop ecx
rep movsd dword es:[edi], dword [esi]
mov dword [0x44a814], eax
movsw word es:[edi], word [esi]
cmp byte [0x4425d9], bl
je 0x41019c
push 0x32
mov ecx, ebx
pop esi
xor edx, edx
mov eax, ecx
div esi
add dl, 0x35
xor byte [ebp + ecx - 0x1c], dl
inc ecx
cmp ecx, 0x16
jl 0x410189
lea eax, [ebp - 0x1c]
push eax
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 6
pop ecx
mov esi, str.rRH_OuP_X_
mov dword [0x44a808], eax
lea edi, [ebp - 0x20]
rep movsd dword es:[edi], dword [esi]
push 0x32
pop ecx
movsb byte es:[edi], byte [esi]
mov esi, ebx
xor edx, edx
mov eax, esi
div ecx
add dl, 0x35
xor byte [ebp + esi - 0x20], dl
inc esi
cmp esi, 0x19
jl 0x4101c1
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 5
pop ecx
mov esi, 0x4425dc
mov dword [0x44a804], eax
lea edi, [ebp - 0x1c]
rep movsd dword es:[edi], dword [esi]
push 0x32
mov ecx, ebx
movsb byte es:[edi], byte [esi]
pop esi
xor edx, edx
mov eax, ecx
div esi
add dl, 0x35
xor byte [ebp + ecx - 0x1c], dl
inc ecx
cmp ecx, 0x15
jl 0x4101f9
lea eax, [ebp - 0x1c]
push eax
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, str.rRHzVTRXwR_C
mov dword [0x44a81c], eax
lea edi, [ebp - 0x14]
mov ecx, ebx
push 0x32
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
pop esi
xor edx, edx
mov eax, ecx
div esi
add dl, 0x35
xor byte [ebp + ecx - 0x14], dl
inc ecx
cmp ecx, 0xf
jl 0x410231
lea eax, [ebp - 0x14]
push eax
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
lea edi, [ebp - 0x10]
mov esi, str.rRHxVWS_
mov dword [0x44a800], eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
cmp byte [0x44256d], bl
je 0x410282
push 0x32
mov ecx, ebx
pop esi
xor edx, edx
mov eax, ecx
div esi
add dl, 0x35
xor byte [ebp + ecx - 0x10], dl
inc ecx
cmp ecx, 0xa
jl 0x41026f
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, str.rRH
mov dword [0x44a7fc], eax
lea edi, [ebp - 0x10]
push 0x32
pop ecx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov esi, ebx
xor edx, edx
mov eax, esi
div ecx
add dl, 0x35
xor byte [ebp + esi - 0x10], dl
inc esi
cmp esi, 9
jl 0x4102a4
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 6
pop ecx
mov esi, str.rRHzH_I__5__4
mov dword [0x44a7f8], eax
lea edi, [ebp - 0x20]
rep movsd dword es:[edi], dword [esi]
push 0x32
mov ecx, ebx
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
pop esi
xor edx, edx
mov eax, ecx
div esi
add dl, 0x35
xor byte [ebp + ecx - 0x20], dl
inc ecx
cmp ecx, 0x1b
jl 0x4102de
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, str.rRHSHLRMZ_t___E
mov dword [0x44a80c], eax
lea edi, [ebp - 0x18]
push 0x32
pop ecx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
xor edx, edx
mov eax, ebx
div ecx
add dl, 0x35
xor byte [ebp + ebx - 0x18], dl
inc ebx
cmp ebx, 0x11
jl 0x410313
mov ebx, dword [ebp - 4]
lea eax, [ebp - 0x18]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp dword [0x44a810], 0
mov dword [0x44a818], eax
je 0x410392
cmp dword [0x44a814], 0
je 0x410392
cmp dword [0x44a808], 0
je 0x410392
cmp dword [0x44a804], 0
je 0x410392
cmp dword [0x44a81c], 0
je 0x410392
cmp dword [0x44a800], 0
je 0x410392
cmp dword [0x44a7fc], 0
je 0x410392
cmp dword [0x44a7f8], 0
je 0x410392
cmp dword [0x44a80c], 0
je 0x410392
test eax, eax
je 0x410392
mov al, 1
jmp 0x41039b
push ebx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
xor al, al
pop edi
pop esi
pop ebx
leave
ret