Function at 0x1000ad89
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
mov edx, 0x21
sub esp, 4
mov dword [esp], 0
dec edx
jne 0x1000ad91
mov edx, dword [esp + 0x9c]
lea ecx, [esp]
call fcn.10032000
lea edx, [0x1003c384]
lea ecx, [esp + 4]
call fcn.10032008
mov ebx, dword [esp + 0x94]
and ebx, ebx
jle 0x1000add4
mov ebx, dword [esp + 0x98]
and ebx, ebx
jle 0x1000add4
jmp 0x1000addb
mov eax, 1
jmp 0x1000addd
xor eax, eax
and eax, eax
jne 0x1000adf4
push dword [esp]
lea edx, [0x1003c03e]
pop ecx
call fcn.100321d0
jne 0x1000adf4
jmp 0x1000adfb
mov eax, 1
jmp 0x1000adfd
xor eax, eax
and eax, eax
je 0x1000ae1e
jmp 0x1000ae17
xor eax, eax
jmp 0x1000b576
mov word [esp + 0x2c], 9
movzx ebx, word [esp + 0x2c]
mov eax, 5
cmp ebx, eax
jl 0x1000ae42
movzx ebx, word [esp + 0x2c]
dec ebx
push ebx
pop eax
mov word [esp + 0x30], ax
jmp 0x1000ae4f
movzx ebx, word [esp + 0x2c]
inc ebx
push ebx
pop eax
mov word [esp + 0x30], ax
movzx ebx, word [esp + 0x30]
push ebx
mov ebx, 0x10
cmp ebx, dword [esp]
jne 0x1000ae69
add esp, 4
jmp 0x1000b576
mov ebx, 8
cmp ebx, dword [esp]
jne 0x1000ae81
movzx eax, word [esp + 0x34]
push eax
pop eax
mov word [esp + 0x30], ax
jmp 0x1000ae98
mov ebx, 2
cmp ebx, dword [esp]
jne 0x1000ae98
movzx ebx, word [esp + 0x34]
inc ebx
push ebx
pop eax
mov word [esp + 0x30], ax
pop eax
mov dword [esp + 0x28], 0x1f4
mov word [esp + 0x34], 0xa
movzx ebx, word [esp + 0x34]
mov eax, 4
cmp ebx, eax
jl 0x1000aec5
movzx ebx, word [esp + 0x34]
dec ebx
push ebx
pop eax
mov word [esp + 0x38], ax
jmp 0x1000aed2
movzx ebx, word [esp + 0x34]
inc ebx
push ebx
pop eax
mov word [esp + 0x38], ax
movzx ebx, word [esp + 0x38]
push ebx
mov ebx, 0xe
cmp ebx, dword [esp]
jne 0x1000aeec
add esp, 4
jmp 0x1000b576
mov ebx, 4
cmp ebx, dword [esp]
jne 0x1000af04
movzx eax, word [esp + 0x3c]
push eax
pop eax
mov word [esp + 0x38], ax
jmp 0x1000af1b
mov ebx, 5
cmp ebx, dword [esp]
jne 0x1000af1b
movzx ebx, word [esp + 0x3c]
inc ebx
push ebx
pop eax
mov word [esp + 0x38], ax
pop eax
mov ebx, dword [esp + 0x28]
mov eax, ebx
mov ecx, 2
cdq
idiv ecx
mov ebx, eax
add ebx, 5
mov dword [esp + 0x28], ebx
push 0
push 0
call sub.USER32.dll_CopyRect
mov word [esp + 0x3c], 8
movzx ebx, word [esp + 0x3c]
mov eax, 3
cmp ebx, eax
jl 0x1000af66
movzx ebx, word [esp + 0x3c]
dec ebx
push ebx
pop eax
mov word [esp + 0x40], ax
jmp 0x1000af73
movzx ebx, word [esp + 0x3c]
inc ebx
push ebx
pop eax
mov word [esp + 0x40], ax
movzx ebx, word [esp + 0x40]
push ebx
mov ebx, 0xb
cmp ebx, dword [esp]
jne 0x1000af8d
add esp, 4
jmp 0x1000b576
mov ebx, 6
cmp ebx, dword [esp]
jne 0x1000afa5
movzx eax, word [esp + 0x44]
push eax
pop eax
mov word [esp + 0x40], ax
jmp 0x1000afbc
mov ebx, 3
cmp ebx, dword [esp]
jne 0x1000afbc
movzx ebx, word [esp + 0x44]
inc ebx
push ebx
pop eax
mov word [esp + 0x40], ax
pop eax
mov eax, dword [esp + 0x28]
inc eax
lea edx, [esp + 0x44]
push edx
push 0
push 3
push eax
push 2
call fcn.10038ec5
mov eax, dword [esp + 0x28]
inc eax
lea edx, [esp + 0x4c]
push edx
push 0
push 3
push eax
push 2
call fcn.10038ec5
mov word [esp + 0x54], 4
movzx ebx, word [esp + 0x54]
mov eax, 5
cmp ebx, eax
jl 0x1000b01f
movzx ebx, word [esp + 0x54]
dec ebx
push ebx
pop eax
mov word [esp + 0x58], ax
jmp 0x1000b02c
movzx ebx, word [esp + 0x54]
inc ebx
push ebx
pop eax
mov word [esp + 0x58], ax
movzx ebx, word [esp + 0x58]
push ebx
mov ebx, 0xc
cmp ebx, dword [esp]
jne 0x1000b046
add esp, 4
jmp 0x1000b576
mov ebx, 6
cmp ebx, dword [esp]
jne 0x1000b05e
movzx eax, word [esp + 0x5c]
push eax
pop eax
mov word [esp + 0x58], ax
jmp 0x1000b075
mov ebx, 2
cmp ebx, dword [esp]
jne 0x1000b075
movzx ebx, word [esp + 0x5c]
inc ebx
push ebx
pop eax
mov word [esp + 0x58], ax
pop eax
push dword [esp + 8]
mov ebx, dword [esp + 0xc]
mov ebp, dword [esp + 0x48]
add ebx, ebx
pop eax
mov word [ebp + ebx], ax
mov ebx, dword [esp + 8]
inc ebx
mov dword [esp + 8], ebx
mov ebx, dword [esp + 8]
cmp ebx, dword [esp + 0x28]
jle 0x1000b076
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0
lea edx, str.infants
lea ecx, [esp + 0x5c]
call fcn.10032008
push dword [esp]
call fcn.10032630
mov dword [esp + 0x20], eax
lea edx, str.causes
lea ecx, [esp + 0x60]
call fcn.10032008
mov ebx, dword [esp + 0x20]
add ebx, 2
push ebx
call fcn.100392a0
mov dword [esp + 0x24], eax
mov word [esp + 0x64], 6
movzx ebx, word [esp + 0x64]
mov eax, 2
cmp ebx, eax
jl 0x1000b10c
movzx ebx, word [esp + 0x64]
dec ebx
push ebx
pop eax
mov word [esp + 0x68], ax
jmp 0x1000b119
movzx ebx, word [esp + 0x64]
inc ebx
push ebx
pop eax
mov word [esp + 0x68], ax
movzx ebx, word [esp + 0x68]
push ebx
mov ebx, 0x11
cmp ebx, dword [esp]
jne 0x1000b133
add esp, 4
jmp 0x1000b576
mov ebx, 5
cmp ebx, dword [esp]
jne 0x1000b14b
movzx eax, word [esp + 0x6c]
push eax
pop eax
mov word [esp + 0x68], ax
jmp 0x1000b162
mov ebx, 3
cmp ebx, dword [esp]
jne 0x1000b162
movzx ebx, word [esp + 0x6c]
inc ebx
push ebx
pop eax
mov word [esp + 0x68], ax
pop eax
mov ebx, dword [esp + 0x24]
and ebx, ebx
jne 0x1000b172
xor eax, eax
jmp 0x1000b576
mov word [esp + 0x6c], 1
movzx ebx, word [esp + 0x6c]
mov eax, 2
cmp ebx, eax
jl 0x1000b196
movzx ebx, word [esp + 0x6c]
dec ebx
push ebx
pop eax
mov word [esp + 0x70], ax
jmp 0x1000b1a3
movzx ebx, word [esp + 0x6c]
inc ebx
push ebx
pop eax
mov word [esp + 0x70], ax
movzx ebx, word [esp + 0x70]
push ebx
mov ebx, 0x11
cmp ebx, dword [esp]
jne 0x1000b1bd
add esp, 4
jmp 0x1000b576
mov ebx, 5
cmp ebx, dword [esp]
jne 0x1000b1d5
movzx eax, word [esp + 0x74]
push eax
pop eax
mov word [esp + 0x70], ax
jmp 0x1000b1ec
mov ebx, 3
cmp ebx, dword [esp]
jne 0x1000b1ec
movzx ebx, word [esp + 0x74]
inc ebx
push ebx
pop eax
mov word [esp + 0x70], ax
pop eax
jmp 0x1000b208
push 0x18
push 0xffffffff
push dword [esp + 8]
push dword [esp + 0x30]
call fcn.100392c0
mov ebx, eax
and ebx, ebx
jne 0x1000b235
push dword [esp + 0x24]
call fcn.10039410
xor eax, eax
jmp 0x1000b576
mov word [esp + 0x74], 9
movzx ebx, word [esp + 0x74]
mov eax, 3
cmp ebx, eax
jl 0x1000b259
movzx ebx, word [esp + 0x74]
dec ebx
push ebx
pop eax
mov word [esp + 0x78], ax
jmp 0x1000b266
movzx ebx, word [esp + 0x74]
inc ebx
push ebx
pop eax
mov word [esp + 0x78], ax
movzx ebx, word [esp + 0x78]
push ebx
mov ebx, 0xc
cmp ebx, dword [esp]
jne 0x1000b280
add esp, 4
jmp 0x1000b576
mov ebx, 7
cmp ebx, dword [esp]
jne 0x1000b298
movzx eax, word [esp + 0x7c]
push eax
pop eax
mov word [esp + 0x78], ax
jmp 0x1000b2af
mov ebx, 5
cmp ebx, dword [esp]
jne 0x1000b2af
movzx ebx, word [esp + 0x7c]
inc ebx
push ebx
pop eax
mov word [esp + 0x78], ax
pop eax
mov ebx, dword [esp + 0xc]
cmp ebx, dword [esp + 0x20]
jle 0x1000b2c2
mov dword [esp + 0xc], 1
mov ebx, dword [esp + 0x24]
add ebx, dword [esp + 0xc]
dec ebx
push ebx
call fcn.10039550
push eax
mov ebx, dword [esp + 0xc]
mov ebp, dword [esp + 0x50]
add ebx, ebx
pop eax
mov word [ebp + ebx], ax
mov ebx, dword [esp + 0xc]
inc ebx
mov dword [esp + 0xc], ebx
mov ebx, dword [esp + 8]
inc ebx
mov dword [esp + 8], ebx
mov ebx, dword [esp + 8]
cmp ebx, dword [esp + 0x28]
jle 0x1000b2b0
push dword [esp + 0x24]
call fcn.10039410
mov dword [esp + 0x24], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov ebx, dword [esp + 0xc]
mov edi, dword [esp + 8]
mov ebp, dword [esp + 0x44]
add edi, edi
movsx ecx, word [ebp + edi]
add ebx, ecx
mov edi, dword [esp + 8]
mov ebp, dword [esp + 0x4c]
add edi, edi
movsx ecx, word [ebp + edi]
add ebx, ecx
and ebx, dword [esp + 0x28]
mov dword [esp + 0xc], ebx
mov ebx, dword [esp + 8]
mov ebp, dword [esp + 0x44]
add ebx, ebx
movsx eax, word [ebp + ebx]
push eax
pop eax
mov word [esp + 0x18], ax
mov ebx, dword [esp + 0xc]
add ebx, ebx
movsx eax, word [ebp + ebx]
push eax
mov ebx, dword [esp + 0xc]
add ebx, ebx
pop eax
mov word [ebp + ebx], ax
movsx eax, word [esp + 0x18]
push eax
mov ebx, dword [esp + 0x10]
add ebx, ebx
pop eax
mov word [ebp + ebx], ax
mov ebx, dword [esp + 8]
inc ebx
mov dword [esp + 8], ebx
mov ebx, dword [esp + 8]
cmp ebx, dword [esp + 0x28]
jle 0x1000b31f
jmp 0x1000b3ce
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov word [esp + 0x18], 0
mov ebx, dword [esp + 8]
inc ebx
and ebx, dword [esp + 0x28]
mov dword [esp + 8], ebx
mov ebx, dword [esp + 0xc]
mov edi, dword [esp + 8]
mov ebp, dword [esp + 0x44]
add edi, edi
movsx ecx, word [ebp + edi]
add ebx, ecx
and ebx, dword [esp + 0x28]
mov dword [esp + 0xc], ebx
mov ebx, dword [esp + 8]
add ebx, ebx
movsx eax, word [ebp + ebx]
push eax
pop eax
mov word [esp + 0x18], ax
mov ebx, dword [esp + 0xc]
add ebx, ebx
movsx eax, word [ebp + ebx]
push eax
mov ebx, dword [esp + 0xc]
add ebx, ebx
pop eax
mov word [ebp + ebx], ax
movsx eax, word [esp + 0x18]
push eax
mov ebx, dword [esp + 0x10]
add ebx, ebx
pop eax
mov word [ebp + ebx], ax
mov ebx, dword [esp + 8]
add ebx, ebx
movsx ebx, word [ebp + ebx]
mov edi, dword [esp + 0xc]
add edi, edi
movsx edi, word [ebp + edi]
and edi, dword [esp + 0x28]
add ebx, edi
and ebx, dword [esp + 0x28]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x10]
add ebx, ebx
movsx eax, word [ebp + ebx]
push eax
pop eax
mov word [esp + 0x1c], ax
mov ebx, dword [esp + 0x94]
add ebx, dword [esp + 0x14]
push ebx
pop eax
call fcn.100321a0
mov ebx, eax
xor bx, word [esp + 0x1c]
push ebx
mov ebx, dword [esp + 0x98]
add ebx, dword [esp + 0x18]
push ebx
pop eax
call fcn.100321c0
mov ebx, dword [esp + 0x14]
inc ebx
mov dword [esp + 0x14], ebx
mov ebx, dword [esp + 0x14]
cmp ebx, dword [esp + 0x98]
jne 0x1000b3e5
mov word [esp + 0x7c], 4
movzx ebx, word [esp + 0x7c]
mov eax, 3
cmp ebx, eax
jl 0x1000b4ee
movzx ebx, word [esp + 0x7c]
dec ebx
push ebx
pop eax
mov word [esp + 0x80], ax
jmp 0x1000b4fe
movzx ebx, word [esp + 0x7c]
inc ebx
push ebx
pop eax
mov word [esp + 0x80], ax
movzx ebx, word [esp + 0x80]
push ebx
mov ebx, 0x12
cmp ebx, dword [esp]
jne 0x1000b518
add esp, 4
jmp 0x1000b576
mov ebx, 4
cmp ebx, dword [esp]
jne 0x1000b536
movzx eax, word [esp + 0x84]
push eax
pop eax
mov word [esp + 0x80], ax
jmp 0x1000b553
mov ebx, 2
cmp ebx, dword [esp]
jne 0x1000b553
movzx ebx, word [esp + 0x84]
inc ebx
push ebx
pop eax
mov word [esp + 0x80], ax
pop eax
push dword [esp + 0x44]
call fcn.1003907b
call sub.USER32.dll_CountClipboardFormats
push dword [esp + 0x4c]
call fcn.1003907b
mov eax, dword [esp + 0x94]
jmp 0x1000b576
push dword [esp + 4]
call fcn.100397f0
push dword [esp + 0x60]
call fcn.100397f0
push dword [esp + 0x5c]
call fcn.100397f0
push dword [esp]
call fcn.100397f0
push eax
push dword [esp + 0x48]
call fcn.10039080
push dword [esp + 0x50]
call fcn.10039080
pop eax
add esp, 0x84
pop edi
pop ebx
pop ebp
ret 0xc