Function at 0x10007ec0
Capabilities:
Encode data using xor
Extract resource via kernel32 functions

Disassembly:
pushfd
test byte [0x10007f0a], 0x63
jne 0x10007f0b
dec edx
sar cl, 1
scasd eax, dword es:[edi]
out 0x1c, al
sub dword [edx], ecx
dec eax
movsb byte es:[edi], byte [esi]
push ecx
xchg esi, eax
mov fs, word [eax - 0x40]
scasd eax, dword es:[edi]
xchg edi, eax
bound ebp, qword [eax + eax + 0x7c]
adc byte [ebx], dl
add dl, byte [ebx]
sbb eax, dword [edx]
insd dword es:[edi], dx
adc dh, byte [eax + 0x21]
push ds
into
dec esi
adc esi, 0x16
or dword [eax + 0x6d59fbc8], edx
pop gs
xchg edi, eax
mov ebx, 0xe4833b34
pop esp
aad 0x4d
and byte [ecx - 0x7d], ah
dec esi
pop ebx
les edi, [edx + ecx + 0x20]
inc ecx
into
popfd
push ebp
mov ebp, esp
pushfd
test byte [0x10008004], 0x16
jne 0x10008005
popfd
sbb byte [eax - 0x2db1679c], dl
mov esi, 0xe075948e
xlatb
js 0x10007f6a
test dword [edx + 0x36], 0x277ecea9
cmpsb byte [esi], byte es:[edi]
mov bl, 0xb5
rol dword [ebp + ecx*8 - 0x79], 0x35
push 0xca031265
add bl, byte [edx]
push esp
lodsb al, byte [esi]
or esi, dword [edx]
dec ebx
push esp
fldcw word [edx]
dec ebx
in eax, 0xa4
add byte [edi], bh
xor byte [bx + si], ah
mov edx, 0xf095ede3
les esi, [edx]
scasd eax, dword es:[edi]
inc ebp
sbb dword [0x72666aae], edx
or byte [edi + 0x26], cl
xchg ecx, eax
dec edi
xchg ecx, eax
mov ebp, gs
mov al, 0xd2
mov ch, 0x27
push ds
fimul word [ebx + ebp*4 - 0x23]
bound esp, qword [ebx]
enter 0xffffffffffffe297, 0x69
xchg dword [esi + edi*4], ebx
shr dword [eax], 0xe2
sbb bh, ch
and byte [edx], dl
into
jne 0x10007f63
sbb al, 0xe0
int3
loopne 0x10007f53
xchg ecx, eax
lea edi, [ebx]
cmp eax, 0x77d19d84
xlatb
cwde
aas
mov al, 0x47
ja 0x10007fa2
mov edi, 0x60978ff4
mov dword [0x74a0eeae], eax
jl 0x10007fb8
adc eax, 0xa8624ca8
insd dword es:[edi], dx
les eax, [ebp + 0x438131b6]
sti
mov ds, ecx
test al, 0x4c
bound ebp, qword [eax - 0x497a3b93]
xor dword [ecx - 0x267104bd], eax
popfd
mov bl, 0x25
push ebx
sal dword [esi], 1
adc cl, bl
or dword [ebx + ebp*8], esi
adc al, 9
sbb al, 0xa3
div edi
daa
xor dword [ecx + 0x5fab04ee], edx
push cs
lea esi, [edi - 0x79f52c46]
fild word [eax - 0x2a]
push ecx
rcr byte [ebp + 0x29], cl
xchg dword [ebx - 0x1609875a], edi
and eax, ebx
push ebx
imul esi, dword [edx], 0xb8e87c14
mov ebx, 0x3564e949
stc
jle 0x10008060
retf
mov ebp, 0xa7f0161d
sub eax, 0x29989a1b
mov dh, 0x59
xchg ebp, eax
xchg edx, eax
mov ecx, 0x34704347
jb 0x10007f85
xchg esp, eax
popfd
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp + 0xc]
pushfd
test byte [0x100080aa], 0xd9
jne 0x100080ab
push ebp
js 0x1000807b
push ds
idiv dword [ebp + 0x7804a088]
sbb al, 0xb
sub byte [ecx], bl
mov dh, 0xcc
ja 0x10008024
enter 0xffffffffffff9920, 0x53
pop es
adc byte [eax - 0x1641f627], 0xa8
xchg ebx, eax
mov ds, word [esi - 0x15]
push 0x18960ed0
test byte [ecx + edi + 0x1ffbca6d], ch
out 0x46, al
or ch, byte [edi + 0x6c70c64b]
jb 0x10007ff4
int 0xac
or eax, 0x97e1aa6
test byte [esi + 0x783e3813], al
test byte [eax + 0x68], bh
js 0x100080ca
pop ebx
stc
std
push cs
push esp
lds ecx, [edx + ebp]
out dx, eax
int3
and bl, byte [eax + 0x60]
pop ecx
or byte [ecx], ch
or al, 0x83
fstp qword [eax - 0x3df137cc]
or bh, byte [bp + si - 0x3bff]
movsd dword es:[edi], dword [esi]
push edi
sbb byte [ebx - 0x218c7b6d], 0xd8
xor ch, byte [ecx + eax*4 - 0x48]
xchg edi, eax
pop eax
mov bh, byte [ebp + 0x66]
jbe 0x100080bb
les edx, [esi]
scasb al, byte es:[edi]
sbb byte [esi], al
and al, 0xb6
jo 0x1000809d
popfd
push esi
push edi
mov edi, dword [ebp + 8]
pushfd
test byte [0x100080bb], 0xf4
jne 0x100080bc
movsb byte es:[edi], byte [esi]
popfd
push eax
pushfd
test byte [0x100080ec], 0xd3
jne 0x100081ed
add byte [eax], al
inc eax
xchg byte [ecx + ecx*8 - 0xc], al
pop es
or ebx, dword [esi + edx*4 + 0x5c]
cmpsb byte [esi], byte es:[edi]
push edx
insb byte es:[edi], dx
mov edi, 0x9156acc5
call 0x7a272fa7
arpl word [edx + 0xd], dx
pop edi
movsd dword es:[edi], dword [esi]
mov eax, 0x4834a9e7
xor bh, cl
test eax, 0xcf304834
and edi, dword [esi + 0x14ed6157]
inc edi
adc dword [eax], ebx
mov bl, 0xcb
mov ebx, 0x6cb3c4d4
or eax, 0x2dbf97b
inc esi
jl 0x1000813a
in eax, 0x2a
push ecx
dec edi
mov edx, 0x5653d6e4
push esi
lock adc byte [edi], ah
outsd dx, dword [esi]
xor dword [edx], edx
rol byte [ecx], 1
jne 0x10008177
movsd dword es:[edi], dword [esi]
sub dh, byte [ebx]
cwde
add al, 0xa0
lea ebp, [ecx]
stc
inc eax
aad 0x68
and esi, dword [ebx + 0x7f147f97]
jns 0x10008147
dec esp
jg 0x100080ea
sbb eax, 0xd018306c
insd dword es:[edi], dx
sub eax, 0xf91f22df
pop ds
stc
mov dl, 0xaa
dec ebx
mov edi, ebx
sbb bl, byte [eax - 0x17]
sbb dword [edx - 0x24], 0xd
fld xword [edx - 0x3a]
shl byte [esi + 0x30], 0x86
rcr byte [eax], 0x46
fcom qword [ecx + 0x61]
or eax, 0xc0c66adb
xor byte [esi - 0x23b9e740], al
push ecx
popal
adc byte [ecx + 0x19], ch
or eax, 0x5b1bbbc5
push ecx
xor byte [ecx - 0x5199bf7f], bh
test dword [edi], esi
xor dword [ecx], ebx
cmp eax, 0xd938e2d0
into
aas
dec ecx
neg byte [eax + 0x20651985]
push eax
xor dword [esi - 0x3c], ecx
jo 0x1000810f
test dh, 0xa6
js 0x100081d2
cld
lodsb al, byte [esi]
dec esi
stc
push ecx
sbb al, dh
mov ebx, 0x9efaffde
or eax, 0x9b37c05
push edi
push ds
xlatb
mov al, 0xb4
or byte [edi], 0x8d
push edi
pop esp
adc byte [edi + 0x27e04e42], al
cmp eax, 0xd157d047
rcl byte [edi - 0x2f]
mov ebx, 0x1d723f2d
and eax, 0x6d216a25
insd dword es:[edi], dx
bound ecx, qword [edi + 0x10]
sar byte [0x13bbe680], 1
fimul dword [ecx + 0x1e2e6e82]
mov esi, dword [edx - 0x16bbc906]
jg 0x1000814c
nop
out 0x55, eax
bswap edx
imul edi, dword [eax - 0x78], 0x6d
insd dword es:[edi], dx
scasd eax, dword es:[edi]
xor cl, byte [ebp - 0x291423b7]
push edi
jo 0x100081b1
std
push 0xffffffffffffffbe
sbb edx, dword [ecx - 0x1d21b7e8]
dec dword [edi - 0x65]
ja 0x10008252
push ecx
pop es
popfd
push ecx
push edi
call dword [sym.imp.KERNEL32.dll_FindResourceA]
mov esi, eax
test esi, esi
jne 0x10008361
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.FindResource_Failed:__d_n
call fcn.10001e80
add esp, 8
pop edi
xor eax, eax
pushfd
test byte [0x1000826b], 0x9b
jne 0x1000826c
loopne 0x100081a5
insd dword es:[edi], dx
xchg edx, eax
jns 0x1000826e
sbb eax, dword [esp + ebx*4 - 0x3207c4cf]
mov ebp, 0xfdd23b4a
stc
sbb eax, 0xb159a6e3
sbb ecx, ecx
mov dh, 0x75
leave
pop esi
inc ecx
outsd dx, dword [esi]
movsd dword es:[edi], dword [esi]
outsd dx, dword [esi]
test al, 0xda
pushfd
sub dword [ebx], ebp
rcl dword [ebx - 0x1c556adf], cl
stosd dword es:[edi], eax
cdq
fiadd word [eax + 0x6c95245d]
pop ebp
and al, 0x95
insb byte es:[edi], dx
mov ah, 0x14
inc esi
aas
and dword [edx + 0x523b6cf5], edx
xor byte [esi - 0x189adaea], ch
mov eax, dword [0x440fa02]
cmpsd dword [esi], dword es:[edi]
popfd
pop esi
pop ebp
ret
push ebx
pushfd
test byte [0x100083e2], 0xc0
jne 0x100083e3
insd dword es:[edi], dx
inc ebx
xchg ebp, eax
xchg ebx, eax
push 0x999e9a41
cld
clc
sub al, 0xc4
inc ecx
lcall 0xc42c, 0xf8fc999e
adc al, 0xe4
xchg ebp, eax
aaa
fcomp dword [esi + 0x764b359f]
push ecx
push ebx
push cs
ror dh, 1
dec ebx
rcl dword [edi]
fucomp st(7)
xchg dword [0x34b04556], eax
mov al, 0xf
pop ebx
lodsb al, byte [esi]
sal byte [edx + esi*2], cl
les ebp, [bp + di]
inc edx
loopne 0x1000836c
pop esi
jle 0x100083b4
and ebp, dword [esi - 0x21]
adc eax, eax
sbb byte [ecx - 0x374cc728], al
mov dword [0x356a8e31], eax
test byte [ebp + 0x78], 0xcc
inc ebp
js 0x10008383
pop es
pop ss
mov ah, dh
cli
test al, 0x49
aam 0x54
jne 0x10008407
jns 0x100083c4
jmp [esi]
adc eax, 0x8dfdeb2e
dec esi
pop ss
je 0x10008371
add ah, 0x54
pushfd
xchg edi, eax
enter 0xfffffffffffffdac, 0xe
int1
aam 0xc3
call 0xda9d4bbb
jge 0x10008386
dec ebp
popfd
push esi
push edi
call dword [sym.imp.KERNEL32.dll_LoadResource]
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
mov ebx, eax
test ebx, ebx
pushfd
test byte [0x10008485], 0xb2
jne 0x10008486
add ebp, dword [esi - 0x16b48a01]
mov cl, 0xe4
mov dl, 0x3c
pop ebx
jno 0x100083cc
push dword [ebp + 0x4b]
jmp 0x4cb368c0
out 0x79, eax
rcl byte [ebp + 0x78]
jo 0x10008453
pop ebx
push edi
mov al, 0x54
cmp dword [esi], ecx
xor byte [esi + 0x1a11b5da], ch
push edx
add dh, byte [edi]
rcl ecx, 0x52
shl dword [esi], 1
or esp, dword [edx + 0x500dbfa4]
sub eax, 0xd22072b4
mov eax, dword [0xf581c3f3]
imul esi, esp, 0x2bc57c7a
fisub dword cs:[ebx]
inc ebx
and bl, bh
push cs
pop edx
fisub word [esp + 0x51]
rol dword [ecx], 1
paddsb mm6, mm2
add eax, 0xc6a7ff5
in al, dx
add eax, 0xc6a7ff5
pop esi
mov esi, 0x4ed5532a
and dword [edx], ebp
xor al, 0xca
or byte [esp + edi*4 + 0x3c85f7c0], cl
scasb al, byte es:[edi]
mov ebp, cs
pop es
out 0x21, al
fnstsw word [esi + 0x4b9fab86]
neg ch
insb byte es:[edi], dx
scasd eax, dword es:[edi]
pop esi
inc ebp
mov dh, byte [edi + 0x2e5dccac]
pop edi
in eax, dx
clc
popfd
jne 0x100086df
pushfd
test byte [0x1000849e], 0
je 0x1000859f
fstp xword [ecx - 0x57]
arpl word [esi - 0x2d14f0a3], cx
imul esp, dword [edx + 0x67], 0x7208b649
pushfd
push ss
dec esp
cmp ebp, dword [ecx + 0x46ba463f]
mov eax, 0x68b72abe
mov ebx, 0x4af6096b
adc byte [ecx], dh
xor bh, byte [edx + esi*2]
mov ebx, 0xcfab643a
cmpsb byte [esi], byte es:[edi]
jno 0x10008513
stosd dword es:[edi], eax
iretd
mov eax, 0xd023a14d
test cl, dl
adc byte [ecx + edi*2 + 0x2f], 0xc2
dec ebp
mov eax, dword [0x84f2d023]
rol dword [edx - 0x3dd086ac], 1
test cl, dh
loop 0x100084cc
leave
mov al, byte [0xdc457032]
xlatb
outsb dx, byte [esi]
sub edx, edx
enter 0x537e, 0x6a
cwde
cmp dword [ecx - 0x62], ecx
test al, 0x66
jnp 0x100084c6
cmp al, dl
insb byte es:[edi], dx
sbb ebp, dword [ebp + 0x6c66d989]
mov word [edx], cs
xlatb
inc eax
add bl, byte [eax + 0x33]
add al, 0x5c
dec ebx
das
add byte [esi], 0xaf
inc edi
inc ebx
int 0xbf
xchg edi, eax
in eax, 0xc7
into
cld
into
pop ss
shr dword [ecx], 1
sal al, cl
inc esi
or dword [ebx + 0x4a], edx
popfd
lds esp, [ecx + esi*8 + 0x61]
int3
mov ebx, 0x6c177356
insb byte es:[edi], dx
std
cmp al, 0xe0
inc edi
inc esi
popfd
mov ch, 0x45
mov esi, 0xf3b0369e
dec esp
and eax, 0xf8507397
xchg edi, eax
jae 0x100085de
clc
enter 0x4857, 0x39
add ch, ch
ror dword [ebx - 0x7a], 1
imul ecx, dword [edx], 0xaa7605d5
popfd
call dword [sym.imp.KERNEL32.dll_GetLastError]
pushfd
test byte [0x100085c8], 0xbe
jne 0x100086c9
int 0x8f
adc byte [edx], ch
cwde
stosd dword es:[edi], eax
adc eax, 0x7644127e
sub ebx, eax
call 0x45fea178
pop esi
ficomp word [ecx]
imul ebp, dword [0xc3f27c26], 0x5e
mov word [edx], gs
sahf
jns 0x100085bc
adc al, byte [esi + esi*2 + 0x2b]
fsubr st(0)
mov dl, 0x1b
invalid
aad 0xe6
xchg edx, eax
mov ecx, fs
or eax, 0x59419e3d
pop ecx
sbb al, 0x62
imul edx, dword [ecx], 0xabe9f8a5
jae 0x10008577
scasb al, byte es:[edi]
popal
add al, 0xdb
sub byte [edx - 0xb], dh
fimul word [esi]
xchg edx, eax
jo 0x1000857b
cmpsb byte [esi], byte es:[edi]
xchg ebp, eax
mov esi, 0x46f4ed15
and ch, 0x23
or al, 0x16
cmpsd dword [esi], dword es:[edi]
in eax, dx
aas
jnp 0x1000858b
test dword [edi], esp
daa
mov dl, 7
jg 0x10008624
dec ebx
xchg ecx, eax
cmp byte [ecx - 0x163bdbf0], ch
aam 0xd2
rol byte [ebx], 1
pop edi
mov edx, 0xaaf80803
mov ch, 0xf4
inc eax
adc eax, 0xb5bcac76
pop eax
dec ebx
push cs
mov esp, 0xe4b58b5
push ebp
dec edi
pop ecx
and eax, dword [ecx]
out dx, al
inc esi
pop esp
cld
jbe 0x10008621
xchg esp, edx
test al, 0x79
mov ecx, 0x740d9193
salc
jge 0x10008605
fild word [eax + 0x57]
movsb byte es:[edi], byte [esi]
sbb esi, dword fs:[esi - 0x66bda0ef]
cli
inc esi
aas
imul edi, dword [ebx - 0x38fa636c], 0x38
out 0x1e, al
push 0x20
push esp
cmpsb byte [esi], byte es:[edi]
outsb dx, byte es:[esi]
sub dword [eax - 0x1e], 0x15
push esp
cmp esi, ebp
inc edi
adc al, 0x33
jae 0x10008699
xchg byte [edx - 0xb], cl
fidivr dword [ebx*8 - 0x1b220319]
xlatb
jl 0x10008683
add dh, byte [ecx]
insd dword es:[edi], dx
rol dword [esp + eax*4 - 0x43], 1
daa
jno 0x100086b6
inc esi
imul ecx, dword [edx], 0xa8f2a2aa
mov dl, 0x2b
pop ss
or ch, byte [edx - 0x4d570d5e]
sub edx, dword [edi]
jb 0x10008645
adc byte [ecx], al
or dl, byte [esi - 0x5ddff8af]
xor byte [ecx + 0x36616acc], ah
dec ebp
popal
dec ebp
push eax
mov bl, 0x78
push 0x4eae118f
pop ss
xor eax, 0xa126b18c
jle 0x100086f4
in al, 0x47
test dword [0xc0526c51], ebx
mov ch, 7
pop es
aaa
cld
inc dword [0x350942ed]
stc
and ah, byte [ebx + edx - 0x39]
ja 0x10008715
xchg esp, eax
popfd
popfd
push eax
push str.LockResource_Failed:__d_n
call fcn.10001e80
add esp, 8
pop ebx
pop edi
xor eax, eax
pop esi
pop ebp
ret
push esi
push edi
call dword [sym.imp.KERNEL32.dll_SizeofResource]
test eax, eax
pushfd
test byte [0x10008751], 0x30
je 0x10008752
pop ds
pop eax
in eax, 0x8c
sub ebp, dword [0xae32ee46]
xlatb
dec eax
imul edi, dword [eax], 0xffffffaa
or byte [edi + eax*8 + 0x21f7ae4d], bl
daa
inc esi
jne 0x10008789
jl 0x10008773
je 0x10008715
je 0x10008715
xchg edi, eax
mov ecx, 0x514809ca
push ecx
popal
fldcw word [ecx + 0x40e2627b]
dec edx
dec ebx
pop ecx
mov al, byte [0x4987ff6e]
cmc
lds ebp, [ecx]
adc eax, 0x66e41ba4
pop ss
pop eax
jb 0x1000870c
inc eax
push 0x6d
int3
popfd
jne 0x10008821
add byte [eax], al
add bh, bh
adc eax, sym.imp.KERNEL32.dll_GetLastError
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.SizeofResource_Failed:__d_n
call fcn.10001e80
add esp, 8
pop ebx
pop edi
xor eax, eax
pop esi
pushfd
test byte [0x1000881d], 0x20
je 0x1000881e
popfd
add al, 0x94
dec edi
dec edi
cmp bh, byte [edx + ebp*8 - 0x397e9f5c]
in eax, dx
xor al, 0xab
aas
pushal
add esi, 0x3fab34ed
fcomp dword [ebp*4 + 0x65860aff]
add bl, byte [edx + ecx]
sbb dword [eax], 0x75
dec esp
cmpsb byte [esi], byte es:[edi]
dec edi
sal dword [eax], 1
jno 0x100087ff
daa
pop es
push edi
push edx
cli
dec ebp
cmp dh, byte [ebx + 0x9307383]
pushal
jno 0x10008756
lodsd eax, dword [esi]
adc dword gs:[edi + 0x38b7dfa1], ebx
out 0xc6, eax
adc esi, edi
les ebx, ss:[eax + 0x44]
mov edi, 0xb4abce94
cmp dword [edx - 0x5c6c7393], 0xffffffd8
mov ebx, 0xaaef830a
push ebp
xor al, 0x21
loop 0x10008783
xchg edx, eax
pop ebp
xchg edi, eax
lodsd eax, dword [esi]
xor dword [edx + 0x61], 0xffffffd0
cmp dword [edi + 0x6d], esi
popal
push ebp
xor dh, bl
rol dword [eax + 0x7b], 0x91
pop ebx
push 0xc4454cb8
ficomp dword [ecx]
les ebx, fs:[eax - 0x73bf9672]
mov dh, byte [eax - 0x1e987d38]
enter 0x6782, 0xffffffffffffffe1
and byte [edi - 0x1f], 0x30
mov al, 0xf0
invalid
xor byte [eax + 0x38b80ff0], dh
push ecx
mov dh, 0x55
out dx, al
cmp byte [eax + 0x5a2815b1], 0x53
sahf
xchg ecx, eax
mov ecx, esi
scasd eax, dword es:[edi]
cmp al, 0xca
pushal
jbe 0x10008838
popfd
pop ebp
ret
mov edx, dword [ebp + 0x14]
mov ecx, dword [ebp + 0x18]
mov dword [edx], ebx
pop ebx
pop edi
mov dword [ecx], eax
mov eax, 1
pop esi
pushfd
test byte [0x1000888d], 0x54
add byte [eax], dl
push esp
adc byte [ebp + esi*2 + 0x51], dl
jne 0x1000888e
cmc
mov al, 0xe6
jnp 0x10008839
push esp
xchg ebp, eax
mov edx, 0xac7569f4
xchg edi, eax
and al, 0x84
jb 0x100087fe
pop edx
inc ebx
ja 0x100088c6
lahf
dec ecx
cmp ch, dh
push cs
popfd
push eax
movsd dword es:[edi], dword [esi]
mov al, byte [0x59e926ad]
adc bh, byte [edx - 0x42]
mov ch, ah
xor eax, 0x8723dff5
sbb byte [esi + 0x494b7a42], bh