Function at 0x100ac650
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x10161028
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x60
push ebx
push ebp
mov ebp, dword [esp + 0x7c]
mov byte [0x1018caa0], 0xa0
push esi
push edi
mov eax, dword [ebp + 8]
mov ecx, dword [ebp + 4]
push eax
push ecx
mov ecx, ebp
call fcn.10061b50
mov al, byte [0x1018caa5]
xor edi, edi
mov byte [0x1018caa4], al
dec al
mov byte [0x1018caa5], al
mov al, byte [esp + 0x84]
push edi
lea ecx, [esp + 0x34]
mov byte [esp + 0x34], al
call fcn.1000bc70
push 0x101913e8
call fcn.1013c2c2
add esp, 4
lea ecx, [esp + 0x30]
push eax
push 0x101913e8
call fcn.1000bf40
mov eax, 0xffdd
mov edx, 0xfff0
mov word [esp + 0x60], ax
mov word [esp + 0x68], ax
mov al, byte [0x10196dec]
mov ecx, 0xfff1
test al, 1
mov dword [esp + 0x78], edi
mov word [esp + 0x50], 0xffe9
mov word [esp + 0x52], 0xffe3
mov word [esp + 0x54], 0xfff7
mov word [esp + 0x56], 0xfff5
mov word [esp + 0x58], 0xffed
mov word [esp + 0x5a], dx
mov word [esp + 0x5c], 0xffe2
mov word [esp + 0x5e], cx
mov word [esp + 0x62], cx
mov word [esp + 0x64], 0xfff4
mov word [esp + 0x66], 0xffe1
mov word [esp + 0x6a], 0xfff3
mov word [esp + 0x6c], dx
mov word [esp + 0x6e], 0xffea
jne 0x100ac771
mov bl, al
lea ecx, [esp + 0x50]
or bl, 1
push ecx
mov ecx, 0x10196df0
mov byte [0x10196dec], bl
call fcn.100ad110
push 0x100ad1c0
call fcn.1013c36b
add esp, 4
mov dl, byte [esp + 0x84]
mov esi, dword [0x10196df0]
push edi
lea ecx, [esp + 0x44]
mov byte [esp + 0x44], dl
call fcn.1000bc70
push esi
call fcn.1013c2c2
add esp, 4
lea ecx, [esp + 0x40]
push eax
push esi
call fcn.1000bf40
lea eax, [esp + 0x30]
lea ecx, [esp + 0x40]
push eax
lea edx, [esp + 0x14]
push ecx
mov ecx, dword [0x10191a54]
push edx
mov byte [esp + 0x84], 1
call fcn.10058e60
mov ecx, eax
call fcn.10067fe0
push 1
lea ecx, [esp + 0x44]
mov byte [esp + 0x7c], 4
call fcn.1000bc70
push 1
lea ecx, [esp + 0x34]
mov byte [esp + 0x7c], 3
call fcn.1000bc70
mov al, byte [0x1018ca9d]
mov cl, 0x89
imul cl
mov byte [0x1018ca9f], al
mov eax, dword [esp + 0x18]
cmp eax, edi
je 0x100acba3
mov dl, byte [esp + 0x84]
push edi
lea ecx, [esp + 0x44]
mov byte [esp + 0x44], dl
call fcn.1000bc70
push 0x101913e8
call fcn.1013c2c2
add esp, 4
lea ecx, [esp + 0x40]
push eax
push 0x101913e8
call fcn.1000bf40
mov eax, 0xe
mov ebx, 5
mov word [esp + 0x5c], ax
mov word [esp + 0x60], ax
mov al, byte [0x10196dd4]
mov byte [esp + 0x78], bl
test al, 1
mov word [esp + 0x50], 0x4b
mov word [esp + 0x52], 8
mov word [esp + 0x54], bx
mov word [esp + 0x56], 0x15
mov word [esp + 0x58], 0x3c
mov word [esp + 0x5a], 0x34
mov word [esp + 0x5e], 0x1c
mov word [esp + 0x62], 0x18
mov word [esp + 0x64], 0x1d
mov word [esp + 0x66], 0x16
mov word [esp + 0x68], 0x19
jne 0x100ac8c3
or al, 1
mov ecx, 0x10196dd8
mov byte [0x10196dd4], al
lea eax, [esp + 0x50]
push eax
call fcn.10043bf0
push 0x100ace00
call fcn.1013c36b
add esp, 4
mov cl, byte [esp + 0x84]
mov esi, dword [0x10196dd8]
mov byte [esp + 0x30], cl
push edi
lea ecx, [esp + 0x34]
call fcn.1000bc70
push esi
call fcn.1013c2c2
add esp, 4
lea ecx, [esp + 0x30]
push eax
push esi
call fcn.1000bf40
mov eax, dword [esp + 0x18]
xor esi, esi
test eax, eax
mov byte [esp + 0x78], 6
jbe 0x100ac94d
cmp edi, 0xffffffff
jae 0x100ac94d
mov eax, dword [esp + 0x34]
test eax, eax
jne 0x100ac913
mov eax, 0x1016a1d8
mov edx, dword [esp + 0x38]
lea ecx, [esp + 0x10]
push edx
push esi
push eax
call fcn.10023f20
mov esi, eax
cmp esi, 0xffffffff
je 0x100ac94d
mov ecx, dword [esp + 0x38]
lea eax, [esp + 0x40]
push eax
push ecx
push esi
lea ecx, [esp + 0x1c]
inc edi
call fcn.10067360
mov ecx, dword [esp + 0x48]
mov eax, dword [esp + 0x18]
add esi, ecx
cmp esi, eax
jb 0x100ac901
push 1
lea ecx, [esp + 0x34]
mov byte [esp + 0x7c], bl
call fcn.1000bc70
push 1
lea ecx, [esp + 0x44]
mov byte [esp + 0x7c], 3
call fcn.1000bc70
mov dl, byte [esp + 0x84]
push 0
lea ecx, [esp + 0x34]
mov byte [esp + 0x34], dl
call fcn.1000bc70
push 0x101913e8
call fcn.1013c2c2
add esp, 4
lea ecx, [esp + 0x30]
push eax
push 0x101913e8
call fcn.1000bf40
mov al, byte [esp + 0x84]
mov ebx, 7
mov byte [esp + 0x78], bl
push 0
lea ecx, [esp + 0x44]
mov byte [esp + 0x44], al
call fcn.1000bc70
push 0x101913e8
call fcn.1013c2c2
add esp, 4
lea ecx, [esp + 0x40]
push eax
push 0x101913e8
call fcn.1000bf40
mov eax, dword [esp + 0x80]
lea ecx, [esp + 0x30]
lea edx, [esp + 0x40]
push ecx
push edx
lea ecx, [esp + 0x18]
push eax
push ecx
mov byte [esp + 0x88], 8
call fcn.100eaf50
add esp, 0x10
lea ecx, [esp + 0x40]
mov byte [esp + 0x78], bl
push 1
call fcn.1000bc70
push 1
lea ecx, [esp + 0x34]
mov byte [esp + 0x7c], 3
call fcn.1000bc70
mov dl, byte [esp + 0x84]
push 0
lea ecx, [esp + 0x24]
mov byte [esp + 0x24], dl
call fcn.1000bc70
mov eax, 0xf8
mov byte [esp + 0x78], 9
mov word [esp + 0x52], ax
mov word [esp + 0x62], ax
mov al, byte [0x10196ddc]
mov word [esp + 0x50], 0xd6
test al, 1
mov word [esp + 0x54], 0xe4
mov word [esp + 0x56], 0xea
mov word [esp + 0x58], 0xf2
mov word [esp + 0x5a], 0xef
mov word [esp + 0x5c], 0xf9
mov word [esp + 0x5e], 0xee
mov word [esp + 0x60], 0xca
mov word [esp + 0x64], 0xff
mov word [esp + 0x66], 0xce
mov word [esp + 0x68], 0xeb
mov word [esp + 0x6a], 0xfe
jne 0x100acace
or al, 1
push 0x9d
mov byte [0x10196ddc], al
lea eax, [esp + 0x54]
push eax
mov ecx, 0x10196de0
call fcn.10018600
push 0x100ace10
call fcn.1013c36b
add esp, 4
mov cl, byte [esp + 0x84]
mov edi, dword [0x10196de0]
mov byte [esp + 0x30], cl
push 0
lea ecx, [esp + 0x34]
call fcn.1000bc70
push edi
call fcn.1013c2c2
add esp, 4
mov esi, eax
lea ecx, [esp + 0x30]
push 1
push esi
call fcn.1000c010
test al, al
je 0x100acb1e
mov edx, dword [esp + 0x34]
push esi
push edi
push edx
call fcn.100017d0
add esp, 0xc
lea ecx, [esp + 0x30]
push esi
call fcn.1000bff0
lea eax, [esp + 0x20]
lea ecx, [esp + 0x10]
push eax
lea edx, [esp + 0x34]
push ecx
mov ecx, dword [0x10191a54]
push edx
mov byte [esp + 0x84], 0xa
call fcn.10058e70
mov ecx, eax
call fcn.1006dbb0
test al, al
push 1
lea ecx, [esp + 0x34]
sete byte [esp + 0x84]
mov byte [esp + 0x7c], 9
call fcn.1000bc70
mov al, byte [esp + 0x80]
test al, al
je 0x100acd37
call fcn.100acde0
lea eax, [esp + 0x20]
lea ecx, [esp + 0x10]
push eax
push ecx
call fcn.1008c780
add esp, 8
test al, al
je 0x100acb93
mov eax, dword [esp + 0x28]
test eax, eax
jne 0x100acbcb
push 1
lea ecx, [esp + 0x24]
mov byte [esp + 0x7c], 3
call fcn.1000bc70
push 1
lea ecx, [esp + 0x14]
mov dword [esp + 0x7c], 0xffffffff
call fcn.1000bc70
xor al, al
mov ecx, dword [esp + 0x70]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x6c
ret
mov al, byte [0x10196de4]
mov word [esp + 0x50], 0x7b
test al, 1
mov word [esp + 0x52], 0x2e
mov word [esp + 0x54], 0x1c
mov word [esp + 0x56], 0xe
mov word [esp + 0x58], 0x18
mov word [esp + 0x5a], 0x1d
mov word [esp + 0x5c], 0x16
mov word [esp + 0x5e], 0x17
mov word [esp + 0x60], 0x24
mov word [esp + 0x62], 0x32
mov word [esp + 0x64], bx
mov word [esp + 0x66], 0x31
mov word [esp + 0x68], 0x25
mov word [esp + 0x6a], 0x15
jne 0x100acca9
mov bl, al
push 0x1e
or bl, 1
mov byte [0x10196de4], bl
call fcn.1013c2df
add esp, 4
mov dword [0x10196de8], eax
mov edi, 0x30
xor esi, esi
mov bp, word [esp + esi + 0x50]
push edi
mov edx, ebp
mov ecx, 0x10196de8
and edx, 0xffff
push edx
call fcn.1004a650
mov ecx, dword [0x10196de8]
xor eax, edi
xor eax, ebp
xor edi, edi
mov word [esi + ecx], ax
mov eax, dword [0x10196de8]
mov di, word [esi + eax]
add esi, 2
cmp esi, 0x1c
jb 0x100acc55
push 0x100ace20
mov word [eax + 0x1c], 0
call fcn.1013c36b
mov ebp, dword [esp + 0x88]
add esp, 4
mov esi, dword [0x10196de8]
mov dl, byte [esp + 0x84]
xor edi, edi
push esi
mov byte [esp + 0x34], dl
mov dword [esp + 0x38], edi
mov dword [esp + 0x3c], edi
mov dword [esp + 0x40], edi
call fcn.1013c2c2
add esp, 4
lea ecx, [esp + 0x30]
push eax
push esi
call fcn.1000bf40
lea eax, [esp + 0x20]
push 0x2a300
lea ecx, [esp + 0x14]
push eax
lea edx, [esp + 0x38]
push ecx
mov ecx, dword [0x10191a54]
push edx
mov byte [esp + 0x88], 0xb
call fcn.10058e70
mov ecx, eax
call fcn.1006dde0
mov ecx, dword [esp + 0x34]
mov byte [esp + 0x78], 9
cmp ecx, edi
je 0x100acd39
mov al, byte [ecx - 1]
test al, al
je 0x100acd29
cmp al, 0xff
je 0x100acd29
dec al
mov byte [ecx - 1], al
jmp 0x100acd39
add ecx, 0xfffffffe
push ecx
call fcn.101307a0
add esp, 4
jmp 0x100acd39
xor edi, edi
push ebp
lea eax, [esp + 0x24]
sub esp, 0x10
mov ecx, esp
mov dword [esp + 0x98], esp
push eax
call fcn.10023d70
mov byte [esp + 0x8c], 9
call fcn.100221a0
mov ecx, dword [esp + 0x38]
add esp, 0x14
cmp ecx, edi
mov byte [esp + 0x78], 3
je 0x100acd8b
mov al, byte [ecx - 1]
test al, al
je 0x100acd7f
cmp al, 0xff
je 0x100acd7f
dec al
mov byte [ecx - 1], al
jmp 0x100acd8b
add ecx, 0xfffffffe
push ecx
call fcn.101307a0
add esp, 4
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x24], edi
mov dword [esp + 0x28], edi
mov dword [esp + 0x2c], edi
cmp ecx, edi
mov dword [esp + 0x78], 0xffffffff
je 0x100acdc5
mov al, byte [ecx - 1]
test al, al
je 0x100acdb9
cmp al, 0xff
je 0x100acdb9
dec al
mov byte [ecx - 1], al
jmp 0x100acdc5
add ecx, 0xfffffffe
push ecx
call fcn.101307a0
add esp, 4
mov ecx, dword [esp + 0x70]
pop edi
pop esi
pop ebp
mov al, 1
mov dword fs:[0], ecx
pop ebx
add esp, 0x6c
ret