Function at 0x100b07e4
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebx
push esi
mov esi, ecx
push edi
lea ecx, [esi + 4]
mov dword [esi], vtable.CNetClient.0
call fcn.100acc1e
mov edi, dword [sym.imp.KERNEL32.dll_CreateEventA]
xor ebx, ebx
push ebx
pushfd
test byte [0x100b08bc], 0x20
je 0x100b08bd
pop edi
int1
jae 0x100b0863
xor cl, byte [ebx + 0x539a2acf]
xchg edi, eax
jae 0x100b07ae
into
call 0xc2f75615
jae 0x100b07b1
mov word [esi - 0x3542cc75], fs
int 0x7e
enter 0x35fa, 0x4d
pop ds
xor byte [ebx + 0x393fbd93], al
jl 0x100b086c
xchg ebx, eax
sub dword [edx], edx
xchg ebp, eax
aaa
dec eax
dec edi
jne 0x100b07c7
out dx, al
idiv dword [esi + 0x29ec0e04]
pop esp
popfd
xor esi, ecx
and cl, ah
in al, 0x2d
xchg ebp, eax
xor dh, byte [0x4d0e67ab]
cmp ecx, eax
push esp
lea edx, [esi + 0x38]
out 0xac, eax
dec esp
mov bl, 0xff
pushal
sub ebp, ebp
dec ebp
inc edi
test al, 0x6c
idiv esi
push 0xfffffffffffffff9
ja 0x100b0878
jmp dword [eax + 0x2b]
invalid
dec ebp
pushfd
aam 0x2d
cmp eax, 0x55305524
pop ss
xor byte [ebp + 0x17], dl
pushal
pushal
and ecx, dword [ebp - 0x14fc781b]
inc ecx
enter 0x36a8, 0x6e
insb byte es:[edi], dx
stosd dword es:[edi], eax
in eax, dx
mov ebx, 0x9a2813a1
and dl, dh
push 0x1e
push 0xffffffffffffffc3
fild word [eax + 0x19]
sbb byte [eax + 0x284f4313], 0x63
mov ecx, 0x3f58124e
pop dword [ebp + ecx + 0x28]
int 0x8f
lodsb al, byte [esi]
outsd dx, dword fs:[esi]
pop esi
sub al, 0x30
sub eax, 0x5c70f779
jns 0x100b08ab
jo 0x100b0912
out 0x28, al
mov cl, 0xbd
push cs
pop esi
popfd
push ebx
mov dword [esi + 0x14], ebx
mov dword [esi + 0x18], ebx
push ebx
mov dword [esi + 0x38], ebx
mov dword [esi + 0x3c], ebx
pushfd
test byte [0x100b090a], 0xa4
jne 0x100b0a0b
push ss
jno 0x100b08dd
mov eax, 0x5cbb8d6c
cmp esp, dword [ecx + 0x41a617b6]
daa
xchg edx, eax
xchg ecx, eax
ja 0x100b08f1
mov ecx, 0xff5f462d
and byte [edi], ch
lodsb al, byte [esi]
jmp dword [eax]
lea ecx, [ebp - 0x31]
jo 0x100b08b2
les esp, [edi + 0x4e]
xchg esi, eax
adc dword [ecx], 0xfc2c4794
sub al, 0xfc
dec edx
xchg edx, eax
imul edx, esp, 0x8dac0d44
rcl byte [ebx + 0x24]
xor esp, dword [ebp + 0x21]
and dh, dl
or eax, 0x7d16d1c4
inc ebx
imul edi, esi, 0xffffffc9
enter 0x1d1c, 0xfffffffffffffffd
jns 0x100b0902
xchg ecx, eax
mov byte [edx - 0x3c], dl
sub ch, byte [ecx + esi*2 + 0x7f94873f]
and al, byte [ebx + edi*8 + 0x12]
sub edx, dword [esi - 0x40b652e]
push cs
mov ebp, 0x74bb91d6
loopne 0x100b099f
inc edx
or esi, dword [esi - 0x21]
xchg ebp, eax
arpl word [esi + 0x53], bp
dec eax
scasd eax, dword es:[edi]
out 0xbc, eax
push edx
fsubr qword [eax - 0x70]
mov ecx, dword [eax]
jne 0x100b08f5
movsb byte es:[edi], byte [esi]
dec edx
push eax
pop esi
daa
dec esp
adc dword [edi], ebx
pop ebp
call 0x73ea7c54
dec dword [edx - 0x51]
clc
cmp al, 0x21
or byte [ebp + 0x2e], al
mov edx, 0x7dbeb1a9
pop ds
shl edi, cl
dec ebp
mov bh, 4
loop 0x100b09d5
mov al, byte [0xb3eeb0fb]
das
cmc
inc edi
add eax, 0x3850716f
sbb al, 0x3c
dec ebp
bound ebx, qword [ecx + 0x44]
inc esp
lodsd eax, dword [esi]
mov eax, 0x2ee19771
sub byte [edi], bh
daa
adc byte [ecx - 0x70bd9ded], cl
cmp dword [ecx - 0x74ee2475], ebp
adc eax, dword [eax - 0x10baafd3]
mov ebx, ebx
adc dword [ebx + 0x502d8013], ecx
inc ebp
out dx, eax
sub eax, 0x4aef4550
dec edx
scasb al, byte es:[edi]
cmp byte [edx - 0x23], 0x40
adc byte [0x74d7489d], bl
mov ch, byte [ecx]
push esi
fbstp tbyte [ecx + ecx*8]
jnp 0x100b09a5
pushal
xor al, 0x46
push ecx
mov dh, 0x62
test byte [edx], dl
xor al, byte [ebx]
js 0x100b098d
or eax, edx
mov bh, 0xbe
and ah, byte [edi + 0x68f65709]
sub esp, 0
ror dword [edx], 1
lodsd eax, dword [esi]
xchg edx, eax
lodsd eax, dword [esi]
mov esi, 0x5f2cfae6
in al, dx
add cl, dl
or ch, byte [ebp - 0x1941526e]
cli
sub al, 0x5f
xor byte [edx], ah
salc
push ebp
mov esp, 0x8ffd6035
cmc
mov eax, eax
fmul dword [edi - 0x4785dd7b]
push ebx
add ebp, edx
mov cl, 0x2d
mov al, 0xf3
jnp 0x100b0a44
imul ecx, dword [ebx - 0x18], 0xf3c4c11e
dec ebx
ffree st(6)
and eax, 0x19209e6c
popfd
push ebx
mov word [esi + 0x60], bx
mov dword [esi + 0x10], ebx
call edi
push ebx
push ebx
push ebx
pushfd
test byte [0x100b0ad2], 0x9b
jne 0x100b0ad3
push ebx
dec ecx
mov ebp, 0x8b1f090f
push edx
and esp, dword [edx]
adc eax, edx
push ebp
out dx, al
and dl, byte [ecx]
rcl byte [ebp - 0x12]
into
test eax, 0x4bf8ac78
cmpsb byte [esi], byte es:[edi]
rcr byte [eax + 0x79f55078], cl
call 0x21e6dbf5
or ecx, eax
loop 0x100b0a76
shl edx, 1
xchg esp, eax
fmul qword [0xc6a2fe7e]
cwde
in al, 0x1d
or eax, 0x34142967
or al, 0x5c
or dword [esi + 0xc498f0c], 0xffffff98
pop es
sub dl, byte [edx - 0xc6d72c9]
push ss
jo 0x100b0a2e
out dx, al
sbb edx, dword [edi + 0x69]
xor byte [esi + 0x7a236e08], cl
add dword [ecx], ebp
adc al, 0xd1
mov cs, word [eax]
outsb dx, byte [esi]
and edi, dword [edx + 1]
sub dword [ecx + edx*8], edx
jl 0x100b0a31
js 0x100b0aa3
and byte [ebx], bh
aaa
inc esp
pop esi
popal
push ebp
sbb edi, esi
fadd qword [edi + eax*2]
cmp ecx, dword [ecx - 0x17]
arpl word [edi], ax
pop edi
and al, 0x4a
and byte [edi - 0x7448ca1e], dl
push ecx
adc bh, byte [edx - 0xd]
lodsd eax, dword [esi]
test al, 0x62
push ebp
adc eax, 0x25af7dca
pop edi
inc ecx
test dword [esi + 0x4d2c5c86], 0x93046694
int1
inc edx
jge 0x100b0a3e
int1
in eax, dx
je 0x100b0a75
adc edi, dword [ebp - 0x28da54c6]
leave
pushfd
mov bh, 0x62
adc esp, dword [ebx - 0x9296357]
stosb byte es:[edi], al
pop ecx
lahf
popfd
push ebx
mov dword [esi + 0x34], eax
pushfd
test byte [0x100b0b21], 0xad
jne 0x100b0c22
bound esp, qword [eax - 0x8abaedf]
sbb dword [edx + 0x7adef9c0], edx
adc edi, dword [esi - 0x80]
push esp
neg dword [ecx]
xchg edx, eax
sar cl, 0xde
jp 0x100b0b06
jle 0x100b0a75
jg 0x100b0b25
mov al, byte [0xcc103012]
sahf
fisttp dword [eax]
in al, 0x9c
jno 0x100b0b45
push ss
and dword [0xdca7c6ba], esi
sub eax, 0x63bb9f8e
pushal
push edx
mov edx, 0x2ddca7c6
mov ds, word [edi + 0x526063bb]
adc al, 9
jne 0x100b0b40
int3
cmp ch, dl
arpl word [eax - 0x27], dx
sbb byte [ecx], 1
mov ebp, 0x32ba3288
xchg ebx, eax
pop es
cmc
mov byte [edx], dh
mov edx, 0xf5079332
std
mov dword [0x8341af3], eax
push ecx
xchg dl, al
add eax, 0xbe5a976f
outsb dx, byte [esi]
mov bh, 0xad
jb 0x100b0bbe
lodsb al, byte [esi]
inc eax
or bh, byte [edi + 0x36]
jne 0x100b0aea
movsb byte es:[edi], byte [esi]
cld
mov dl, 0x53
mov bl, bl
or ebx, dword [edi]
mov dl, 0x9d
lodsd eax, dword [esi]
cmovno eax, dword [eax - 0x6634f20e]
cmp dl, byte [eax]
jecxz 0x100b0b1c
loopne 0x100b0bb2
push ss
mov al, 0xde
popal
sbb byte [eax + 0x20f65df], bh
pop ebx
fidivr dword [esi - 0x28]
and al, 0x4d
pushfd
loopne 0x100b0b85
mov esp, 0x31edad2a
repne cmpsd dword [esi], dword es:[edi]
xor edx, esi
cmpsd dword [esi], dword es:[edi]
and byte [0x8ef431fe], bl
outsb dx, byte [esi]
cmp dh, bl
fsub st(3), st(0)
fsub st(3), st(0)
add eax, 0xd4a504d0
fucom st(4)
mov bx, 0xcd86
push ss
xchg dword [ebx + ebp + 0x668f5fd], ebp
jo 0x100b0b80
add al, 0xa5
aam 0xdd
in al, 0x66
mov ebx, 0x8716cd86
lodsb al, byte [esi]
sub edi, ebp
cmc
push 0x5ee87006
call 0x122574fa
dec eax
movsb byte es:[edi], byte [esi]
cmpsd dword [esi], dword es:[edi]
pop esi
imul ebx, dword [edx], 0xa7a44802
out dx, al
push ecx
fld dword [edi]
xlatb
mov bh, bl
les eax, [edx + 0x7e]
mov esi, 0x952fffd8
jbe 0x100b0c21
mov ecx, 0x4f187741
ja 0x100b0bcc
dec edi
pop ebp
pop esp
add dword [eax], 0x3aaf4edb
mov dh, 0xa4
movsb byte es:[edi], byte [esi]
ja 0x100b0b97
scasd eax, dword es:[edi]
sub al, 0x99
cmp cl, byte [ebp - 0x59]
add al, 0xfd
dec edx
cdq
mov ecx, 0x905a9b85
mov ecx, 0x905a9b85
cmp bh, byte [eax - 0x41]
add ch, byte [esi - 0x5326e599]
das
push edx
xchg dword [0x8b03b711], edx
xor ch, bh
adc byte [ebx - 0x80], 0xdc
or dh, cl
into
popfd
inc ebx
leave
or dword [ebp + 0x3e], edx
je 0x100b0b77
jae 0x100b0b75
in al, 0xdb
cmp al, byte [edi - 0x3bcb1078]
push eax
push esp
test al, 0xaf
cmp byte [ebx - 0x614d9446], cl
rcr byte [esi - 0x5709d65d], 0x2a
push edx
inc esp
dec edi
aad 0xb5
das
jge 0x100b0bf0
dec ecx
jl 0x100b0be9
sti
push es
stosd dword es:[edi], eax
inc ebp
stosb byte es:[edi], al
scasd eax, dword es:[edi]
and bl, al
sahf
popfd
call edi
push ebx
push ebx
push 1
push ebx
mov dword [esi + 0x58], eax
call edi
pushfd
test byte [0x100b0c9d], 0xd7
jne 0x100b0c9e
insd dword es:[edi], dx
dec ebp
mov esp, edx
mov ah, 0x35
and dword [edi], edx
movsd dword es:[edi], dword [esi]
pushal
mov dl, 0x4a
pop ebx
in al, 0x3b
cld
fsubrp st(2)
rol ch, 0xc8
pop edi
mov esi, 0xe9b06a00
jle 0x100b0bf2
add dword [eax + 0x2ed9af37], edi
push esi
cwde
inc eax
sal byte [ebp - 0x659e06bb], 1
dec ecx
out dx, al
pop es
sub ebp, dword [edx]
int1
mov eax, 0xf406226b
movsb byte es:[edi], byte [esi]
pop esp
arpl word [ebx + esi + 0x6a], sp
and dh, ch
insb byte es:[edi], dx
sub al, 0xf9
stosb byte es:[edi], al
sbb bh, byte [ebp + 0x5e]
cld
push edi
aaa
salc
imul dh
scasb al, byte es:[edi]
lds esi, [esi + ecx]
das
xor eax, 0x24b4cf4
sbb byte [ecx], 0xd2
inc eax
pop es
sbb bl, byte [0xe01e32f1]
ja 0x100b0cbf
popfd
mov edi, dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov dword [esi + 0x5c], eax
lea eax, [esi + 0x1c]
push eax
call edi
lea eax, [esi + 0x40]
push eax
call edi
pop edi
mov dword [esi + 0x74], ebx
mov dword [esi + 0x78], ebx
mov dword [esi + 0x7c], ebx
mov eax, esi
pop esi
pop ebx
ret
invalid