Function at 0x1000ce80
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x10
push esi
mov esi, dword [esp + 0x1c]
push edi
mov edi, dword [esi + 0x38]
mov eax, dword [esi + 0x78]
mov ecx, dword [edi + 0x1c4]
xor ecx, 0x31b0
cmp dword [eax + ecx*8 + 0x78], 0
je 0x1000d31e
mov eax, dword [edi + 0x60]
add eax, dword [esp + 0x1c]
mov edx, dword [esi + 0x2c]
mov dword [esi + 0x60], eax
mov eax, dword [esi + 0x78]
push ebx
mov ecx, dword [edx + 0x1c4]
push ebp
mov ebp, dword [eax + ecx*8 - 0x18d08]
mov ecx, dword [edx + 0x58]
mov eax, dword [edi + 0x1c4]
sub ecx, 0x6b4
add ebp, dword [esi + 0x48]
xor eax, 0x1c2f
cmp ecx, eax
ja 0x1000cf0f
mov ebx, dword [esi + 0xc]
mov edx, dword [esi + 0x128]
nop dword [eax]
mov eax, ebx
inc ecx
or eax, 0x3233
or edx, eax
mov dword [esi + 0x128], edx
mov eax, dword [edi + 0x1c4]
xor eax, 0x1c2f
cmp ecx, eax
jbe 0x1000cef0
cmp dword [ebp + 0xc], 0
lea ebx, [ebp + 0xc]
mov dword [esp + 0x10], ebx
mov edx, 0x2d8a
je 0x1000d2c5
mov ebp, dword [esp + 0x24]
mov eax, ebp
or eax, 0x3372
mov dword [esp + 0x1c], eax
mov eax, dword [esi + 0x38]
mov eax, dword [eax + 0x30]
or eax, 0x34dd
sub dword [esi + 0x14c], eax
cmp dword [esi + 0x1e8], 0x310f
jb 0x1000cf62
mov eax, dword [esi + 0x1c4]
sub eax, 0x2d9d
or dword [esi + 0x194], eax
mov eax, dword [esi + 0x1b4]
or eax, 0x31b0
or dword [esi + 0xf0], eax
mov eax, dword [esi + 0x48]
add eax, dword [ebx]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
cmp dword [esi + 0x84], 0x2a22
mov dword [esp + 0x28], eax
jne 0x1000cf9f
mov ecx, dword [esi + 0x178]
xor dword [ecx + 0x120], 0x44d
mov ecx, dword [esi + 0x38]
mov edi, dword [ecx + 0x1c4]
xor edi, 0x7f
cmp edi, 0x31d0
je 0x1000cfda
mov eax, dword [esi + 0x1b4]
mov ecx, 0x31d0
mov edx, dword [esi + 0x8c]
sub ecx, edi
xor edx, eax
inc eax
sub ecx, 1
jne 0x1000cfc6
mov dword [esi + 0x1b4], eax
mov dword [esi + 0x8c], edx
mov edi, dword [esp + 0x28]
test edi, edi
je 0x1000d2a6
mov edx, dword [ebx + 4]
lea eax, [esi + 0x70]
add edx, dword [esi + 0x48]
add dword [esi + 0x128], eax
mov ecx, dword [esi + 0x178]
mov eax, dword [esi + 0xc]
add eax, 0x2f82
or dword [ecx + 0xf0], eax
mov ecx, dword [esi + 0x1b4]
mov eax, dword [esi + 0x60]
imul eax, ecx
mov dword [esi + 0x60], eax
lea eax, [ecx - 1]
mov dword [esi + 0x1b4], eax
cmp dword [ebx - 0xc], 0
jne 0x1000d02f
mov ebx, edx
mov dword [esp + 0x14], edx
jmp 0x1000d049
mov eax, dword [esi + 0x1a4]
imul eax, ebp
sub dword [esi + 0x44], eax
mov eax, dword [esp + 0x10]
mov ebx, dword [esi + 0x48]
add ebx, dword [eax - 0xc]
mov dword [esp + 0x14], ebx
mov eax, dword [ebx]
test eax, eax
je 0x1000d2a2
sub edx, ebx
test eax, eax
mov dword [esp + 0x18], edx
jns 0x1000d189
mov eax, dword [esi + 0x38]
imul ecx, dword [eax + 0x1c4], 0x62f888b0
mov eax, dword [esi + 0x10c]
mov eax, dword [eax + 0x84]
add eax, 0x25a
cmp eax, ecx
je 0x1000d093
imul eax, dword [esi + 0x90], 0x1fae
mov dword [esi + 0x90], eax
mov eax, dword [esi + 0x2c]
imul edx, dword [eax + 0x1e8], 0x6bc434cb
mov eax, dword [esi + 0x84]
xor eax, 0x1940
cmp edx, eax
je 0x1000d0d5
nop
mov ecx, dword [esi + 0x2c]
inc edx
mov eax, dword [esi + 0x124]
sub dword [ecx + 0xe8], eax
inc dword [esi + 0x124]
mov eax, dword [esi + 0x84]
xor eax, 0x1940
cmp edx, eax
jne 0x1000d0b0
mov edx, dword [edi + 0x3c]
mov eax, dword [esi + 0x38]
add edx, edi
mov edi, dword [esi + 0x108]
imul eax, dword [eax + 0x1e8], 0x8faaf00e
imul ecx, dword [edi + 0x1c4], 0x13ae74ed
cmp eax, ecx
jbe 0x1000d106
mov eax, dword [esi + 0x60]
xor eax, ebp
add dword [esi + 0x160], eax
imul eax, dword [edi + 0x1e8], 0x85c3bf7
cmp eax, 0x3239
jb 0x1000d122
mov eax, ebp
imul eax, ebp
or dword [esi + 0xf0], eax
mov ecx, dword [esi + 0x10c]
mov eax, dword [ecx + 0x1c]
xor eax, 0x2ff7
mov dword [esi + 0xa4], eax
mov edx, dword [edx + 0x78]
add edx, dword [esp + 0x28]
cmp ecx, 0x31ce
jne 0x1000d15a
mov eax, dword [esi + 0x178]
mov eax, dword [eax + 0x14]
mov dword [edi + 0x20], eax
mov eax, dword [esi + 0x178]
dec dword [eax + 0x14]
mov eax, dword [esi + 0x2c]
movzx ecx, word [ebx]
sub ecx, dword [edx + 0x10]
mov edi, dword [esp + 0x28]
mov eax, dword [eax + 0x1e8]
sub eax, 0x2ff3
imul ecx, eax
add ecx, dword [edx + 0x1c]
mov eax, dword [ecx + edi]
mov ecx, dword [esp + 0x18]
add eax, edi
mov dword [ecx + ebx], eax
jmp 0x1000d290
imul eax, dword [esi + 0x1c4], 0xfa62a61c
cmp eax, 0x31ce
jbe 0x1000d1ab
mov eax, dword [esi + 0x1a4]
or eax, 0x3233
add dword [esi + 0xe8], eax
lea eax, [ebp + 0x3372]
mov dword [esi + 0xc], eax
mov eax, dword [esi + 0x38]
mov eax, dword [eax + 0x1c4]
xor eax, 0x388
cmp eax, 0x3239
jge 0x1000d1ec
mov edi, 0x3239
sub edi, eax
mov eax, dword [esi + 0x2c]
mov ecx, 0x3372
mov edx, dword [esi + 0x108]
sub ecx, dword [eax + 0x40]
add dword [edx + 0x14c], ecx
sub edi, 1
jne 0x1000d1d0
mov edi, dword [esi + 0x108]
mov edx, 0x2d9d
mov ebp, dword [esi + 0x48]
add ebp, dword [ebx]
cmp dword [edi + 0x1c4], 0x31af
je 0x1000d23c
mov ebx, dword [esi + 0x120]
mov ecx, dword [esi + 0x134]
add ebx, 0x2f82
nop word [eax + eax]
or ecx, ebx
inc edx
mov dword [esi + 0x134], ecx
mov eax, dword [edi + 0x1c4]
sub eax, 0x412
cmp edx, eax
jne 0x1000d220
mov ebx, dword [esp + 0x14]
mov ecx, dword [edi + 0x1c4]
sub ecx, 0x428
cmp ecx, 0x2d8a
jge 0x1000d26b
mov edx, 0x2f82
mov eax, 0x2d8a
sub edx, dword [esp + 0x24]
sub eax, ecx
sub eax, 1
jne 0x1000d260
mov dword [esi + 0x1b8], edx
mov edi, dword [esp + 0x28]
lea eax, [ebp + 2]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [esp + 0x18]
mov ebp, dword [esp + 0x24]
mov dword [ecx + ebx], eax
mov eax, dword [esi + 0x134]
sub eax, ebp
xor dword [esi + 8], eax
mov eax, dword [ebx + 4]
add ebx, 4
mov dword [esp + 0x14], ebx
test eax, eax
jne 0x1000d05b
mov ebx, dword [esp + 0x10]
mov eax, dword [esp + 0x1c]
add ebx, 0x14
add dword [esi + 0x134], eax
mov dword [esp + 0x10], ebx
cmp dword [ebx], 0
jne 0x1000cf34
mov edx, 0x2d8a
mov eax, dword [esi + 0x2c]
pop ebp
pop ebx
mov ecx, dword [eax + 0x84]
sub ecx, 0x14
cmp ecx, 0x2d89
jg 0x1000d2f3
mov eax, dword [esi + 0xac]
sub edx, ecx
or eax, 0x3451
sub edx, 1
jne 0x1000d2e3
mov dword [esi + 0xac], eax
mov eax, dword [esi + 0xac]
add eax, 0x31ce
add dword [esi + 0x134], eax
movzx ecx, byte [0x1001d73d]
mov eax, dword [esi + 0x124]
or ecx, dword [esp + 0x1c]
imul eax, ecx
mov dword [esi + 0x124], eax
pop edi
xor eax, eax
pop esi
add esp, 0x10
ret