Function at 0x10006240
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x10014d50
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push ebx
push esi
push edi
mov eax, dword [0x1001b030]
xor eax, esp
push eax
lea eax, [esp + 0x28]
mov dword fs:[0], eax
mov eax, dword [ebp + 0xc]
push 0x14
push eax
mov dword [esp + 0x28], 1
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1000654d
mov ecx, dword [ebp + 0xc]
mov eax, dword [ecx + 0xc]
test eax, eax
je 0x1000654d
mov ebx, dword [ebp + 8]
mov ecx, dword [ebx + 0x18]
lea edx, [esp + 0x10]
add ecx, eax
push edx
call fcn.10006830
mov dword [esp + 0x30], 0
mov eax, dword [esp + 0x10]
cmp dword [eax - 4], 1
jle 0x100062cc
mov eax, dword [eax - 0xc]
push eax
lea ecx, [esp + 0x14]
push ecx
call fcn.10006a60
mov eax, dword [esp + 0x10]
cmp byte [eax], 0
mov ecx, 1
je 0x100062e3
xor byte [eax], cl
inc eax
inc ecx
cmp byte [eax], 0
jne 0x100062d6
mov eax, dword [esp + 0x10]
mov ecx, dword [eax - 8]
push ecx
push eax
call fcn.10009ce4
add esp, 8
test eax, eax
jl 0x100065ca
mov ecx, dword [esp + 0x10]
cmp eax, dword [ecx - 8]
jg 0x100065ca
mov dword [ecx - 0xc], eax
mov edx, dword [esp + 0x10]
mov byte [eax + edx], 0
mov ecx, dword [esp + 0x10]
lea eax, [esp + 0x14]
push eax
call fcn.100068d0
mov byte [esp + 0x30], 1
mov ecx, dword [esp + 0x14]
push ecx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov dword [esp + 0x18], eax
test eax, eax
jne 0x1000634d
mov edx, dword [esp + 0x14]
push edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [esp + 0x18], eax
test eax, eax
je 0x10006566
mov eax, dword [ebx + 0x30]
mov esi, dword [eax]
mov ecx, dword [esi + 4]
add ebx, 0x1c
lea eax, [esp + 0x18]
push eax
push ecx
push esi
call fcn.10004990
mov ecx, ebx
mov edi, eax
call fcn.100049d0
mov edx, dword [ebp + 8]
mov dword [esi + 4], edi
mov eax, dword [edi + 4]
mov esi, dword [ebp + 0xc]
mov dword [eax], edi
mov eax, dword [esi]
test eax, eax
je 0x10006391
mov ecx, dword [edx + 0x18]
mov ebx, dword [esi + 0x10]
add eax, ecx
mov dword [esp + 0x1c], eax
add ebx, ecx
jmp 0x1000639e
mov ecx, dword [esi + 0x10]
mov eax, dword [edx + 0x18]
lea ebx, [ecx + eax]
mov dword [esp + 0x1c], ebx
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx]
test eax, eax
je 0x10006492
jns 0x100063be
mov edx, dword [esp + 0x18]
and eax, 0xffff
push eax
push edx
jmp 0x10006467
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x18]
add ecx, eax
add ecx, 2
jne 0x100063cf
xor eax, eax
jmp 0x100063dd
mov eax, ecx
lea esi, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x100063d4
sub eax, esi
mov edi, eax
push ecx
lea eax, [esp + 0x14]
call fcn.10006df0
mov eax, dword [esp + 0x10]
cmp dword [eax - 4], 1
jle 0x10006405
mov edx, dword [eax - 0xc]
push edx
lea eax, [esp + 0x14]
push eax
call fcn.10006a60
mov eax, dword [esp + 0x10]
cmp byte [eax], 0
mov ecx, 1
je 0x1000641d
nop
xor byte [eax], cl
inc eax
inc ecx
cmp byte [eax], 0
jne 0x10006410
mov eax, dword [esp + 0x10]
mov ecx, dword [eax - 8]
push ecx
push eax
call fcn.10009ce4
add esp, 8
test eax, eax
jl 0x100065ca
mov ecx, dword [esp + 0x10]
cmp eax, dword [ecx - 8]
jg 0x100065ca
mov dword [ecx - 0xc], eax
mov ecx, dword [esp + 0x10]
mov byte [eax + ecx], 0
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [esp + 0x10]
mov edx, dword [edx + 0x10]
push eax
call edx
test eax, eax
jne 0x1000646d
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x18]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebx], eax
test eax, eax
je 0x100064f8
mov eax, dword [esp + 0x1c]
add eax, 4
mov dword [esp + 0x1c], eax
mov eax, dword [eax]
add ebx, 4
test eax, eax
jne 0x100063ac
mov esi, dword [ebp + 0xc]
mov byte [esp + 0x30], 0
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x100064b7
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [esp + 0x30], 0xffffffff
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x100064df
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
add esi, 0x14
push 0x14
push esi
mov dword [ebp + 0xc], esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
je 0x10006288
jmp 0x1000654d
mov byte [esp + 0x30], 0
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
mov dword [esp + 0x20], 0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x10006525
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [esp + 0x30], 0xffffffff
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x1000654d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
mov byte [esp + 0x30], 0
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x1000658b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [esp + 0x30], 0xffffffff
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x100065b3
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
xor eax, eax
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
push 0x80070057
call fcn.100013f0
int3