Function at 0x1001af70
Capabilities:
Encode data using xor
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x3c
mov eax, dword [0x1005c1c4]
xor eax, esp
mov dword [esp + 0x38], eax
push ebx
push esi
push edi
mov edx, 0xdc
xor ecx, ecx
nop
mov al, byte [ecx + 0x10055690]
xor al, dl
mov byte [esp + ecx + 0xc], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0x18
jb 0x1001af90
lea eax, [esp + 0xc]
mov byte [esp + 0x24], 0
mov ebx, 0x10055324
lea ecx, [esp + 0x28]
push eax
sub ebx, 0x477f543b
push ebx
call fcn.100148d0
mov esi, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call esi
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
call edi
mov ecx, dword [0x101aaca4]
mov edx, 0x31
mov dword [ecx*4 + 0x101aada8], eax
inc ecx
mov dword [0x101aaca4], ecx
xor ecx, ecx
mov al, byte [ecx + str.tJZ_eDX_IH]
xor al, dl
mov byte [esp + ecx + 0x28], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0xb
jb 0x1001aff4
mov byte [esp + 0x33], 0
mov edx, 0xf3
xor ecx, ecx
nop dword [eax + eax]
mov al, byte [ecx + 0x10055304]
xor al, dl
mov byte [esp + ecx + 0xc], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0xc
jb 0x1001b020
lea eax, [esp + 0x28]
mov byte [esp + 0x18], 0
push eax
lea eax, [esp + 0x10]
push eax
call esi
push eax
call edi
mov ecx, dword [0x101aaca4]
mov edx, 0xc8
mov dword [ecx*4 + 0x101aada8], eax
inc ecx
mov dword [0x101aaca4], ecx
xor ecx, ecx
nop word [eax + eax]
mov al, byte [ecx + 0x100556ac]
xor al, dl
mov byte [esp + ecx + 0xc], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0xc
jb 0x1001b070
mov byte [esp + 0x18], 0
mov edx, 0xf3
xor ecx, ecx
mov al, byte [ecx + 0x10055304]
xor al, dl
mov byte [esp + ecx + 0x28], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0xc
jb 0x1001b094
lea eax, [esp + 0xc]
mov byte [esp + 0x34], 0
push eax
lea eax, [esp + 0x2c]
push eax
call esi
push eax
call edi
mov ecx, dword [0x101aaca4]
mov edx, 0x98
mov dword [ecx*4 + 0x101aada8], eax
inc ecx
mov dword [0x101aaca4], ecx
xor ecx, ecx
nop dword [eax + eax]
mov al, byte [ecx + 0x100556e4]
xor al, dl
mov byte [esp + ecx + 0x28], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0x17
jb 0x1001b0e0
mov byte [esp + 0x3f], 0
mov edx, 0xf3
xor ecx, ecx
mov al, byte [ecx + 0x10055304]
xor al, dl
mov byte [esp + ecx + 0xc], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0xc
jb 0x1001b104
lea eax, [esp + 0x28]
mov byte [esp + 0x18], 0
push eax
lea eax, [esp + 0x10]
push eax
call esi
push eax
call edi
mov ecx, dword [0x101aaca4]
mov edx, 0xa
mov dword [ecx*4 + 0x101aada8], eax
inc ecx
mov dword [0x101aaca4], ecx
xor ecx, ecx
nop dword [eax + eax]
mov al, byte [ecx + 0x100556c8]
xor al, dl
mov byte [esp + ecx + 0x28], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0x19
jb 0x1001b150
mov byte [esp + 0x41], 0
mov edx, 0xf3
xor ecx, ecx
mov al, byte [ecx + 0x10055304]
xor al, dl
mov byte [esp + ecx + 0xc], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0xc
jb 0x1001b174
lea eax, [esp + 0x28]
mov byte [esp + 0x18], 0
push eax
lea eax, [esp + 0x10]
push eax
call esi
push eax
call edi
mov ecx, dword [0x101aaca4]
mov edx, 0xff
mov dword [ecx*4 + 0x101aada8], eax
inc ecx
mov dword [0x101aaca4], ecx
xor ecx, ecx
nop dword [eax + eax]
mov al, byte [ecx + 0x1005570c]
xor al, dl
mov byte [esp + ecx + 0xc], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0xc
jb 0x1001b1c0
mov byte [esp + 0x18], 0
mov edx, 0xf3
xor ecx, ecx
mov al, byte [ecx + 0x10055304]
xor al, dl
mov byte [esp + ecx + 0x28], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0xc
jb 0x1001b1e4
lea eax, [esp + 0xc]
mov byte [esp + 0x34], 0
push eax
lea eax, [esp + 0x2c]
push eax
call esi
push eax
call edi
mov ecx, dword [0x101aaca4]
mov edx, 0x61
mov dword [ecx*4 + 0x101aada8], eax
inc ecx
mov dword [0x101aaca4], ecx
xor ecx, ecx
nop dword [eax + eax]
mov al, byte [ecx + 0x100556fc]
xor al, dl
mov byte [esp + ecx + 0xc], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0xd
jb 0x1001b230
lea eax, [esp + 0xc]
mov byte [esp + 0x19], 0
push eax
push ebx
lea ecx, [esp + 0x30]
call fcn.100148d0
push eax
call esi
push eax
call edi
mov ecx, dword [0x101aaca4]
mov edx, 0x71
mov dword [ecx*4 + 0x101aada8], eax
inc ecx
mov dword [0x101aaca4], ecx
xor ecx, ecx
nop dword [eax]
mov al, byte [ecx + 0x10055730]
xor al, dl
mov byte [esp + ecx + 0x28], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0xb
jb 0x1001b280
mov byte [esp + 0x33], 0
mov edx, 0xf3
xor ecx, ecx
mov al, byte [ecx + 0x10055304]
xor al, dl
mov byte [esp + ecx + 0xc], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0xc
jb 0x1001b2a4
lea eax, [esp + 0x28]
mov byte [esp + 0x18], 0
push eax
lea eax, [esp + 0x10]
push eax
call esi
push eax
call edi
mov ecx, dword [0x101aaca4]
mov edx, 0xbd
mov dword [ecx*4 + 0x101aada8], eax
inc ecx
mov dword [0x101aaca4], ecx
xor ecx, ecx
nop dword [eax + eax]
mov al, byte [ecx + 0x1005571c]
xor al, dl
mov byte [esp + ecx + 0xc], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0x12
jb 0x1001b2f0
lea eax, [esp + 0xc]
mov byte [esp + 0x1e], 0
push eax
push ebx
lea ecx, [esp + 0x30]
call fcn.100148d0
push eax
call esi
push eax
call edi
mov ecx, dword [0x101aaca4]
mov edx, 0x5d
mov dword [ecx*4 + 0x101aada8], eax
inc ecx
mov dword [0x101aaca4], ecx
xor ecx, ecx
nop dword [eax]
mov al, byte [ecx + str._t___r_b_f]
xor al, dl
mov byte [esp + ecx + 0x28], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0x10
jb 0x1001b340
mov byte [esp + 0x38], 0
mov edx, 0xf3
xor ecx, ecx
mov al, byte [ecx + 0x10055304]
xor al, dl
mov byte [esp + ecx + 0xc], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0xc
jb 0x1001b364
lea eax, [esp + 0x28]
mov byte [esp + 0x18], 0
push eax
lea eax, [esp + 0x10]
push eax
call esi
push eax
call edi
mov ecx, dword [0x101aaca4]
mov edx, 0x73
mov dword [ecx*4 + 0x101aada8], eax
inc ecx
mov dword [0x101aaca4], ecx
xor ecx, ecx
nop dword [eax + eax]
mov al, byte [ecx + 0x1005573c]
xor al, dl
mov byte [esp + ecx + 0xc], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0x10
jb 0x1001b3b0
lea eax, [esp + 0xc]
mov byte [esp + 0x1c], 0
push eax
push ebx
lea ecx, [esp + 0x30]
call fcn.100148d0
push eax
call esi
push eax
call edi
mov ecx, dword [0x101aaca4]
mov edx, 0x59
mov dword [ecx*4 + 0x101aada8], eax
inc ecx
mov dword [0x101aaca4], ecx
xor ecx, ecx
nop dword [eax]
mov al, byte [ecx + 0x10055780]
xor al, dl
mov byte [esp + ecx + 0xc], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0xf
jb 0x1001b400
lea eax, [esp + 0xc]
mov byte [esp + 0x1b], 0
push eax
push ebx
lea ecx, [esp + 0x30]
call fcn.100148d0
push eax
call esi
push eax
call edi
mov ecx, dword [0x101aaca4]
mov edx, 0x30
mov dword [ecx*4 + 0x101aada8], eax
inc ecx
mov dword [0x101aaca4], ecx
xor ecx, ecx
nop dword [eax]
mov al, byte [ecx + 0x10055764]
xor al, dl
mov byte [esp + ecx + 0x28], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0x1b
jb 0x1001b450
mov byte [esp + 0x43], 0
mov edx, 0xae
xor ecx, ecx
mov al, byte [ecx + 0x10055314]
xor al, dl
mov byte [esp + ecx + 0xc], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0xe
jb 0x1001b474
lea eax, [esp + 0x28]
mov byte [esp + 0x1a], 0
push eax
lea eax, [esp + 0x10]
push eax
call esi
push eax
call edi
mov ecx, dword [0x101aaca4]
mov dword [ecx*4 + 0x101aada8], eax
inc ecx
mov dword [0x101aaca4], ecx
call fcn.1001b4d0
mov ecx, dword [esp + 0x44]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.10027a55
mov esp, ebp
pop ebp
ret