Function at 0xeb8460
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x54
mov edi, dword [esp + 0x78]
push 0x4df40
call fcn.00ebc880
add esp, 4
mov dword [edi], 0
xor edi, edi
test eax, eax
je 0xeb8a1b
mov esi, eax
mov eax, dword [esp + 0x74]
imul eax, dword [esp + 0x6c]
mov dword [esp], 0
mov dword [esp + 0xc], 1
mov dword [esp + 0x24], eax
inc eax
imul eax, dword [esp + 0x70]
cmp eax, 0x41
jge 0xeb84b6
mov eax, 0x40
add eax, 0x39
mov dword [esp + 4], eax
mov ebp, eax
push eax
call fcn.00ebc880
add esp, 4
mov dword [esp + 8], eax
mov dword [esp + 0x14], eax
test eax, eax
je 0xeb883d
mov dword [esp + 0x10], esi
mov dword [esp + 0x1c], 0x29
xor edi, edi
mov byte [esp + 0x18], 0x29
mov ebx, 0x29
mov eax, dword [esp + 0x14]
mov ecx, ebp
jmp 0xeb8541
mov dword [esp + 0x20], ecx
push esi
push dword [esp + 0x18]
call fcn.00ebc8a0
add esp, 8
test eax, eax
je 0xeb8579
mov dword [esp + 8], eax
mov dword [esp + 4], esi
mov dword [esp + 0x14], eax
mov ecx, esi
movzx ebx, byte [esp + 0x18]
mov byte [eax + edi], bl
mov dword [esp], ebp
mov ebx, dword [esp + 0x1c]
mov edi, ebp
dec ebx
mov dword [esp + 0x1c], ebx
mov edx, ebx
mov byte [esp + 0x18], bl
je 0xeb8585
lea ebp, [edi + 1]
cmp ebp, ecx
jbe 0xeb8523
cmp dword [esp + 0xc], 0
je 0xeb8575
mov esi, ecx
jmp 0xeb8564
cmp ebp, esi
jbe 0xeb8500
add esi, esi
cmp esi, 0x81
jae 0xeb8560
mov esi, 0x80
jmp 0xeb8560
mov ebp, edi
jmp 0xeb8532
mov eax, dword [esp + 0x14]
mov ebp, edi
mov ecx, dword [esp + 0x20]
jmp 0xeb8532
mov eax, dword [esp + 0x7c]
cmp eax, 0xa
jb 0xeb8593
mov eax, 0xa
mov eax, dword [eax*4 + 0xef6c90]
mov ecx, eax
or ecx, 0x1000
mov edi, dword [esp + 0x10]
mov dword [edi], 0xeb83d0
mov edx, esp
mov dword [edi + 4], edx
mov dword [edi + 8], ecx
mov ecx, eax
and ecx, 0xfff
imul edx, ecx, 0x5556
add edx, 0xaaac
shr edx, 0x10
inc edx
mov dword [edi + 0xc], edx
shr eax, 0xe
and eax, 1
mov dword [edi + 0x14], eax
shr ecx, 2
imul eax, ecx, 0x5556
add eax, 0xaaac
shr eax, 0x10
inc eax
mov dword [edi + 0x10], eax
lea eax, [edi + 0x29272]
push 0x10000
push 0
push eax
call fcn.00ebc930
add esp, 0xc
mov dword [edi + 0x24], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x1c], 0
lea eax, [edi + 0x9272]
lea ecx, [edi + 0x9273]
mov dword [edi + 0x3c], 0
mov dword [edi + 0x40], 0
mov dword [edi + 0x44], 0
mov dword [edi + 0x48], 0
mov dword [edi + 0x58], 0
mov dword [edi + 0x5c], 0
mov dword [edi + 0x60], 0
mov dword [edi + 0x64], 0
mov dword [edi + 0x68], 0
mov dword [edi + 0x28], ecx
mov dword [edi + 0x2c], eax
mov byte [edi + 0x9272], 0
mov dword [edi + 0x38], 8
lea eax, [edi + 0x39272]
mov dword [edi + 0x30], eax
mov dword [edi + 0x34], eax
mov dword [edi + 0x6c], 0
mov dword [edi + 0x54], 0
mov dword [edi + 0x50], 0
mov dword [edi + 0x4c], 0
mov dword [edi + 0x18], 1
lea esi, [edi + 0x70]
mov eax, edi
add eax, 0x8192
push 0x280
push 0
push eax
call fcn.00ebc930
add esp, 0xc
push 0x8121
push 0
push esi
call fcn.00ebc930
add esp, 0xc
lea ecx, [esp + 0x28]
cmp dword [esp + 0x70], 0
jle 0xeb874b
mov eax, dword [esp + 0x70]
lea esi, [eax - 1]
xor ebx, ebx
jmp 0xeb871c
mov ecx, dword [esp + 0x24]
imul eax, ecx
add eax, dword [esp + 0x68]
mov dword [esp + 0x28], ecx
push 0
push 0
push 0
push ebp
push eax
mov edi, dword [esp + 0x24]
push edi
call fcn.00eb6e30
mov ecx, ebp
add esp, 0x18
inc ebx
add esi, 0xffffffff
jae 0xeb874b
mov dword [esp + 0x28], 1
push 0
push 0
push 0
mov ebp, ecx
push ecx
lea eax, [esp + 0x2c]
push eax
push edi
call fcn.00eb6e30
add esp, 0x18
mov eax, ebx
cmp dword [esp + 0x80], 0
je 0xeb86f0
mov eax, esi
jmp 0xeb86f0
mov dword [esp + 0x28], 0
push 4
push 0
push 0
push ecx
push 0
push edi
mov esi, ecx
call fcn.00eb6e30
add esp, 0x18
cmp eax, 1
jne 0xeb884b
mov ebp, dword [esp]
lea ebx, [ebp - 0x29]
mov eax, dword [esp + 0x78]
mov dword [eax], ebx
push 0x29
push 0xef6cc1
mov edi, esi
push esi
call fcn.00ebc8b0
add esp, 0xc
mov eax, dword [esp + 0x6c]
mov byte [esp + 0x3a], ah
mov byte [esp + 0x3b], al
mov eax, dword [esp + 0x70]
mov byte [esp + 0x3e], ah
mov byte [esp + 0x3f], al
mov eax, dword [esp + 0x74]
movzx eax, byte [eax + 0xef6cbc]
mov byte [esp + 0x41], al
mov eax, ebx
shr eax, 0x18
mov byte [esp + 0x49], al
mov eax, ebx
shr eax, 0x10
mov byte [esp + 0x4a], al
mov byte [esp + 0x4b], bh
mov byte [esp + 0x4c], bl
mov ecx, 0xffffffff
mov eax, 0xfffffff0
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [esp + eax + 0x44]
mov esi, ecx
shr esi, 4
xor ecx, edx
and ecx, 0xf
xor esi, dword [ecx*4 + 0xef6c50]
mov ecx, esi
shr ecx, 4
and esi, 0xf
shr edx, 4
xor edx, esi
xor ecx, dword [edx*4 + 0xef6c50]
test eax, eax
je 0xeb885d
movzx edx, byte [esp + eax + 0x45]
mov esi, ecx
shr esi, 4
xor ecx, edx
and ecx, 0xf
xor esi, dword [ecx*4 + 0xef6c50]
mov ecx, esi
shr ecx, 4
and esi, 0xf
shr edx, 4
xor edx, esi
xor ecx, dword [edx*4 + 0xef6c50]
add eax, 2
jmp 0xeb87e0
push esi
call fcn.00ebc890
add esp, 4
jmp 0xeb8a1b
push edi
call fcn.00ebc890
add esp, 4
push dword [esp + 8]
jmp 0xeb8a11
not ecx
bswap ecx
mov dword [esp + 0x45], ecx
mov ebx, dword [esp + 8]
push 0x29
push edi
push ebx
call fcn.00ebc8b0
add esp, 0xc
lea edi, [ebp + 0x10]
mov esi, dword [esp + 4]
cmp edi, esi
jbe 0xeb88c4
cmp dword [esp + 0xc], 0
jne 0xeb8894
jmp 0xeb89fa
cmp edi, esi
jbe 0xeb88a5
add esi, esi
cmp esi, 0x81
jae 0xeb8890
mov esi, 0x80
jmp 0xeb8890
push esi
push ebx
call fcn.00ebc8a0
add esp, 8
test eax, eax
je 0xeb89f6
mov ebx, eax
mov dword [esp + 8], eax
mov dword [esp + 4], esi
mov ebp, dword [esp]
mov dword [ebx + ebp + 0xc], 0x826042ae
mov dword [ebx + ebp + 8], 0x444e4549
mov dword [ebx + ebp + 4], 0
mov dword [ebx + ebp], 0
mov dword [esp], edi
mov ebp, dword [esp + 0x78]
mov edx, dword [ebp]
mov ebx, edx
mov esi, dword [esp + 8]
add ebx, 4
je 0xeb890b
mov dword [esp + 0x18], esi
add esi, 0x25
cmp edx, 0xfffffffd
jne 0xeb8916
mov ecx, 0xffffffff
jmp 0xeb897d
xor ecx, ecx
mov ebx, dword [esp + 0x10]
jmp 0xeb89b4
and ebx, 0xfffffffe
mov ecx, 0xffffffff
nop
nop
movzx ebp, byte [esi]
mov eax, ecx
shr eax, 4
xor ecx, ebp
and ecx, 0xf
xor eax, dword [ecx*4 + 0xef6c50]
mov ecx, eax
shr ecx, 4
and eax, 0xf
shr ebp, 4
xor ebp, eax
xor ecx, dword [ebp*4 + 0xef6c50]
movzx ebp, byte [esi + 1]
add esi, 2
mov eax, ecx
shr eax, 4
xor ecx, ebp
and ecx, 0xf
xor eax, dword [ecx*4 + 0xef6c50]
mov ecx, eax
shr ecx, 4
and eax, 0xf
shr ebp, 4
xor ebp, eax
xor ecx, dword [ebp*4 + 0xef6c50]
add ebx, 0xfffffffe
jne 0xeb8920
mov ebp, dword [esp + 0x78]
test dl, 1
mov ebx, dword [esp + 0x10]
je 0xeb89ae
movzx edx, byte [esi]
mov eax, ecx
shr eax, 4
xor ecx, edx
and ecx, 0xf
xor eax, dword [ecx*4 + 0xef6c50]
mov ecx, eax
shr ecx, 4
and eax, 0xf
shr edx, 4
xor edx, eax
xor ecx, dword [edx*4 + 0xef6c50]
not ecx
mov esi, dword [esp + 0x18]
mov eax, ecx
shr eax, 0x18
mov byte [esi + edi - 0x10], al
mov eax, ecx
shr eax, 0x10
mov edx, dword [esp]
mov esi, dword [esp + 8]
mov byte [esi + edx - 0xf], al
mov eax, dword [esp]
mov edx, dword [esp + 8]
mov byte [edx + eax - 0xe], ch
mov eax, dword [esp]
mov edx, dword [esp + 8]
mov byte [edx + eax - 0xd], cl
add dword [ebp], 0x39
push ebx
call fcn.00ebc890
add esp, 4
mov edi, dword [esp + 8]
jmp 0xeb8a1b
mov ebx, dword [esp + 8]
mov eax, dword [esp + 0x78]
mov dword [eax], 0
push dword [esp + 0x10]
call fcn.00ebc890
add esp, 4
push ebx
call fcn.00ebc890
add esp, 4
xor edi, edi
mov eax, edi
add esp, 0x54
pop esi
pop edi
pop ebx
pop ebp
ret