Function at 0x10010be0
Capabilities:
Encode data using xor
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x84
mov eax, dword [0x10026018]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov dword [ebp - 0x84], 0
mov ecx, 0x2e
xor eax, eax
mov dl, byte [eax + str.__aDWAMfODLWrR_QM__6]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x40], dl
inc eax
and ecx, 0xff
cmp eax, 0x18
jb 0x10010c07
mov ecx, 0x64b9d34e
lea eax, [ebp - 0x68]
mov byte [ebp - 0x28], 0
call fcn.10012720
mov ebx, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea ecx, [ebp - 0x40]
push ecx
push eax
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x11183b30], eax
mov ecx, 0x47
xor eax, eax
mov dl, byte [eax + str._b8__e____]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x14], dl
inc eax
and ecx, 0xff
cmp eax, 0xb
jb 0x10010c51
mov byte [ebp - 9], 0
mov ecx, 0x55
xor eax, eax
mov dl, byte [eax + 0x1002137c]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x24], dl
inc eax
and ecx, 0xff
cmp eax, 0xc
jb 0x10010c75
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 0x24]
push ecx
mov byte [ebp - 0x18], 0
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [0x11183bf0]
mov dword [ecx*4 + 0x11183bf8], eax
inc ecx
mov dword [0x11183bf0], ecx
mov ecx, 0x81
xor eax, eax
mov edi, edi
mov dl, byte [eax + 0x1002138c]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x14], dl
inc eax
and ecx, 0xff
cmp eax, 0xb
jb 0x10010cc0
mov byte [ebp - 9], 0
mov ecx, 0x55
xor eax, eax
mov dl, byte [eax + 0x1002137c]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x24], dl
inc eax
and ecx, 0xff
cmp eax, 0xc
jb 0x10010ce4
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 0x24]
push ecx
mov byte [ebp - 0x18], 0
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [0x11183bf0]
mov dword [ecx*4 + 0x11183bf8], eax
inc ecx
mov dword [0x11183bf0], ecx
mov ecx, 0x36
xor eax, eax
lea ecx, [ecx]
mov dl, byte [eax + str.bRJTSU_I_o2._76]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x38], dl
inc eax
and ecx, 0xff
cmp eax, 0x10
jb 0x10010d30
mov byte [ebp - 0x28], 0
mov ecx, 0x55
xor eax, eax
mov dl, byte [eax + 0x1002137c]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x14], dl
inc eax
and ecx, 0xff
cmp eax, 0xc
jb 0x10010d54
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x14]
push ecx
mov byte [ebp - 8], 0
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [0x11183bf0]
mov dword [ecx*4 + 0x11183bf8], eax
inc ecx
mov dword [0x11183bf0], ecx
mov ecx, 0x27
xor eax, eax
lea ecx, [ecx]
mov dl, byte [eax + str.dZLK_IyF_UPV]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x14], dl
inc eax
and ecx, 0xff
cmp eax, 0xc
jb 0x10010da0
mov byte [ebp - 8], 0
mov ecx, 0x55
xor eax, eax
mov dl, byte [eax + 0x1002137c]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x24], dl
inc eax
and ecx, 0xff
cmp eax, 0xc
jb 0x10010dc4
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 0x24]
push ecx
mov byte [ebp - 0x18], 0
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [0x11183bf0]
mov dword [ecx*4 + 0x11183bf8], eax
inc ecx
mov dword [0x11183bf0], ecx
mov ecx, 0xcc
xor eax, eax
lea ecx, [ecx]
mov dl, byte [eax + 0x100213bc]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x40], dl
inc eax
and ecx, 0xff
cmp eax, 0x17
jb 0x10010e10
mov byte [ebp - 0x29], 0
mov ecx, 0x55
xor eax, eax
mov dl, byte [eax + 0x1002137c]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x14], dl
inc eax
and ecx, 0xff
cmp eax, 0xc
jb 0x10010e34
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x14]
push ecx
mov byte [ebp - 8], 0
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [0x11183bf0]
mov dword [ecx*4 + 0x11183bf8], eax
inc ecx
mov dword [0x11183bf0], ecx
mov ecx, 0x7d
xor eax, eax
lea ecx, [ecx]
mov dl, byte [eax + 0x100213d4]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x40], dl
inc eax
and ecx, 0xff
cmp eax, 0x19
jb 0x10010e80
mov byte [ebp - 0x27], 0
mov ecx, 0x55
xor eax, eax
mov dl, byte [eax + 0x1002137c]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x14], dl
inc eax
and ecx, 0xff
cmp eax, 0xc
jb 0x10010ea4
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x14]
push ecx
mov byte [ebp - 8], 0
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [0x11183bf0]
mov dword [ecx*4 + 0x11183bf8], eax
inc ecx
mov dword [0x11183bf0], ecx
mov ecx, 0xf9
xor eax, eax
lea ecx, [ecx]
mov dl, byte [eax + 0x100213f0]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x14], dl
inc eax
and ecx, 0xff
cmp eax, 0xc
jb 0x10010ef0
mov byte [ebp - 8], 0
mov ecx, 0x55
xor eax, eax
mov dl, byte [eax + 0x1002137c]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x24], dl
inc eax
and ecx, 0xff
cmp eax, 0xc
jb 0x10010f14
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 0x24]
push ecx
mov byte [ebp - 0x18], 0
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x10010fe9
mov ecx, 0xf9
xor eax, eax
mov dl, byte [eax + 0x100213f0]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x68], dl
inc eax
and ecx, 0xff
cmp eax, 0xc
jb 0x10010f51
mov byte [ebp - 0x5c], 0
mov ecx, 0x55
xor eax, eax
mov dl, byte [eax + 0x1002137c]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x78], dl
inc eax
and ecx, 0xff
cmp eax, 0xc
jb 0x10010f75
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x78]
push ecx
mov byte [ebp - 0x6c], 0
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp byte [eax], 0xe9
jne 0x10010fac
xor eax, eax
jmp 0x10010fe9
mov edi, 0x100213f0
sub edi, 0xb12c02e
lea esi, [ebp - 0x50]
call fcn.100127d0
mov edi, 0x1002137c
sub edi, 0x363dbeac
lea esi, [ebp - 0x34]
mov ebx, eax
call fcn.100127a0
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ebx, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov ecx, dword [0x11183bf0]
mov dword [ecx*4 + 0x11183bf8], eax
inc ecx
mov dword [0x11183bf0], ecx
mov ecx, 0x32
xor eax, eax
mov dl, byte [eax + str.hDESYhKUXYNM]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x34], dl
inc eax
and ecx, 0xff
cmp eax, 0xd
jb 0x10011004
mov ecx, 0x64b9d34e
lea eax, [ebp - 0x68]
mov byte [ebp - 0x27], 0
call fcn.10012720
lea ecx, [ebp - 0x34]
push ecx
push eax
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x100110b5
mov ecx, 0x32
xor eax, eax
mov dl, byte [eax + str.hDESYhKUXYNM]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x50], dl
inc eax
and ecx, 0xff
cmp eax, 0xd
jb 0x10011047
mov ecx, 0x64b9d34e
lea eax, [ebp - 0x24]
mov byte [ebp - 0x43], 0
call fcn.10012720
lea ecx, [ebp - 0x50]
push ecx
push eax
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp byte [eax], 0xe9
jne 0x10011088
xor eax, eax
jmp 0x100110b5
mov edi, str.hDESYhKUXYNM
sub edi, 0x3b0f89
lea esi, [ebp - 0x78]
call fcn.10012800
mov esi, eax
mov ecx, 0x64b9d34e
lea eax, [ebp - 0x14]
call fcn.10012720
push esi
push eax
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [0x11183bf0]
mov dword [ecx*4 + 0x11183bf8], eax
inc ecx
mov dword [0x11183bf0], ecx
mov ecx, 0x5b
xor eax, eax
mov dl, byte [eax + 0x10021410]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x3c], dl
inc eax
and ecx, 0xff
cmp eax, 0x12
jb 0x100110d0
mov ecx, 0x64b9d34e
lea eax, [ebp - 0x14]
mov byte [ebp - 0x2a], 0
call fcn.10012720
lea ecx, [ebp - 0x3c]
push ecx
push eax
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x1001117b
mov ecx, 0x5b
xor eax, eax
mov dl, byte [eax + 0x10021410]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x58], dl
inc eax
and ecx, 0xff
cmp eax, 0x12
jb 0x10011113
mov ecx, 0x64b9d34e
lea eax, [ebp - 0x24]
mov byte [ebp - 0x46], 0
call fcn.10012720
lea ecx, [ebp - 0x58]
push ecx
push eax
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp byte [eax], 0xe9
jne 0x10011154
xor eax, eax
jmp 0x1001117b
mov edi, 0x7bcd1d99
lea esi, [ebp - 0x80]
call fcn.10012830
mov esi, eax
mov ecx, 0x64b9d34e
lea eax, [ebp - 0x68]
call fcn.10012720
push esi
push eax
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [0x11183bf0]
mov dword [ecx*4 + 0x11183bf8], eax
inc ecx
mov dword [0x11183bf0], ecx
mov ecx, 0x48
xor eax, eax
mov dl, byte [eax + 0x10021424]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x38], dl
inc eax
and ecx, 0xff
cmp eax, 0x10
jb 0x10011196
mov ecx, 0x64b9d34e
lea eax, [ebp - 0x14]
mov byte [ebp - 0x28], 0
call fcn.10012720
lea ecx, [ebp - 0x38]
push ecx
push eax
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x1001124e
mov ecx, 0x48
xor eax, eax
lea ecx, [ecx]
mov dl, byte [eax + 0x10021424]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x54], dl
inc eax
and ecx, 0xff
cmp eax, 0x10
jb 0x100111e0
mov ecx, 0x64b9d34e
lea eax, [ebp - 0x24]
mov byte [ebp - 0x44], 0
call fcn.10012720
lea ecx, [ebp - 0x54]
push ecx
push eax
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp byte [eax], 0xe9
jne 0x10011221
xor eax, eax
jmp 0x1001124e
mov edi, 0x10021424
sub edi, 0x4568d847
lea esi, [ebp - 0x7c]
call fcn.10012860
mov esi, eax
mov ecx, 0x64b9d34e
lea eax, [ebp - 0x68]
call fcn.10012720
push esi
push eax
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [0x11183bf0]
mov dword [ecx*4 + 0x11183bf8], eax
inc ecx
mov dword [0x11183bf0], ecx
mov ecx, 0xa9
xor eax, eax
lea esp, [esp]
mov dl, byte [eax + 0x10021438]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x38], dl
inc eax
and ecx, 0xff
cmp eax, 0xf
jb 0x10011270
mov ecx, 0x64b9d34e
lea eax, [ebp - 0x14]
mov byte [ebp - 0x29], 0
call fcn.10012720
lea ecx, [ebp - 0x38]
push ecx
push eax
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x1001131b
mov ecx, 0xa9
xor eax, eax
mov dl, byte [eax + 0x10021438]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x54], dl
inc eax
and ecx, 0xff
cmp eax, 0xf
jb 0x100112b3
mov ecx, 0x64b9d34e
lea eax, [ebp - 0x24]
mov byte [ebp - 0x45], 0
call fcn.10012720
lea ecx, [ebp - 0x54]
push ecx
push eax
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp byte [eax], 0xe9
jne 0x100112f4
xor eax, eax
jmp 0x1001131b
mov edi, 0x38c1628f
lea esi, [ebp - 0x7c]
call fcn.10012890
mov esi, eax
mov ecx, 0x64b9d34e
lea eax, [ebp - 0x68]
call fcn.10012720
push esi
push eax
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [0x11183bf0]
mov dword [ecx*4 + 0x11183bf8], eax
inc ecx
mov dword [0x11183bf0], ecx
mov ecx, 0xbd
xor eax, eax
mov dl, byte [eax + 0x10021448]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x3c], dl
inc eax
and ecx, 0xff
cmp eax, 0x15
jb 0x10011336
mov ebx, 0x10021460
sub ebx, 0x7ae9cc4c
mov ecx, ebx
lea eax, [ebp - 0x14]
mov byte [ebp - 0x27], 0
call fcn.100128c0
lea ecx, [ebp - 0x3c]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x100113ef
mov ecx, 0xbd
xor eax, eax
mov dl, byte [eax + 0x10021448]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x58], dl
inc eax
and ecx, 0xff
cmp eax, 0x15
jb 0x10011385
mov ecx, ebx
lea eax, [ebp - 0x24]
mov byte [ebp - 0x43], 0
call fcn.100128c0
lea ecx, [ebp - 0x58]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp byte [eax], 0xe9
jne 0x100113c7
xor eax, eax
jmp 0x100113ef
mov edi, 0x8341e842
lea esi, [ebp - 0x80]
call fcn.10012950
mov esi, eax
mov ecx, ebx
lea eax, [ebp - 0x68]
call fcn.100128c0
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [0x11183bf0]
mov dword [ecx*4 + 0x11183bf8], eax
inc ecx
mov dword [0x11183bf0], ecx
mov ecx, 0x8c
xor eax, eax
lea ebx, [ebx]
mov dl, byte [eax + 0x1002146c]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x3c], dl
inc eax
and ecx, 0xff
cmp eax, 0x15
jb 0x10011410
mov ecx, ebx
lea eax, [ebp - 0x14]
mov byte [ebp - 0x27], 0
call fcn.100128c0
lea ecx, [ebp - 0x3c]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x100114be
mov ecx, 0x8c
xor eax, eax
mov dl, byte [eax + 0x1002146c]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x58], dl
inc eax
and ecx, 0xff
cmp eax, 0x15
jb 0x10011454
mov ecx, ebx
lea eax, [ebp - 0x24]
mov byte [ebp - 0x43], 0
call fcn.100128c0
lea ecx, [ebp - 0x58]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp byte [eax], 0xe9
jne 0x10011496
xor eax, eax
jmp 0x100114be
mov edi, 0x7a2ae2e0
lea esi, [ebp - 0x80]
call fcn.10012980
mov esi, eax
mov ecx, ebx
lea eax, [ebp - 0x68]
call fcn.100128c0
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [0x11183bf0]
mov dword [ecx*4 + 0x11183bf8], eax
inc ecx
mov dword [0x11183bf0], ecx
mov ecx, 0xb0
xor eax, eax
lea esp, [esp]
mov dl, byte [eax + 0x10021484]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x38], dl
inc eax
and ecx, 0xff
cmp eax, 0x10
jb 0x100114e0
mov ecx, ebx
lea eax, [ebp - 0x14]
mov byte [ebp - 0x28], 0
call fcn.100128c0
lea ecx, [ebp - 0x38]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x10011562
mov ecx, 0xb0
xor eax, eax
mov dl, byte [eax + 0x10021484]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x54], dl
inc eax
and ecx, 0xff
cmp eax, 0x10
jb 0x10011524
mov ecx, ebx
lea eax, [ebp - 0x24]
mov byte [ebp - 0x44], 0
call fcn.100128c0
lea ecx, [ebp - 0x54]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp byte [eax], 0xe9
jne 0x10011566
xor eax, eax
jmp 0x1001158e
mov edi, 0x18df2fac
lea esi, [ebp - 0x7c]
call fcn.100129b0
mov esi, eax
mov ecx, ebx
lea eax, [ebp - 0x68]
call fcn.100128c0
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [0x11183bf0]
mov dword [ecx*4 + 0x11183bf8], eax
inc ecx
mov dword [0x11183bf0], ecx
call fcn.100115c0
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.10019486
mov esp, ebp
pop ebp
ret