Function at 0x100110c0
Capabilities:
Encode data using xor
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x84
mov eax, dword [0x10026018]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov dword [ebp - 0x84], 0
mov ecx, 0x2e
xor eax, eax
mov dl, byte [eax + str.__aDWAMfODLWrR_QM__6]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x40], dl
inc eax
and ecx, 0xff
cmp eax, 0x18
jb 0x100110e7
mov ecx, 0x64b9d3b6
lea eax, [ebp - 0x68]
mov byte [ebp - 0x28], 0
call fcn.10012c70
mov ebx, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea ecx, [ebp - 0x40]
push ecx
push eax
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x11183b24], eax
mov ecx, 0x47
xor eax, eax
mov dl, byte [eax + str._b8__e____]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x14], dl
inc eax
and ecx, 0xff
cmp eax, 0xb
jb 0x10011131
mov byte [ebp - 9], 0
mov ecx, 0x55
xor eax, eax
mov dl, byte [eax + 0x100213e4]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x24], dl
inc eax
and ecx, 0xff
cmp eax, 0xc
jb 0x10011155
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 0x24]
push ecx
mov byte [ebp - 0x18], 0
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [0x11183be4]
mov dword [ecx*4 + 0x11183be8], eax
inc ecx
mov dword [0x11183be4], ecx
mov ecx, 0x81
xor eax, eax
mov edi, edi
mov dl, byte [eax + 0x100213f4]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x14], dl
inc eax
and ecx, 0xff
cmp eax, 0xb
jb 0x100111a0
mov byte [ebp - 9], 0
mov ecx, 0x55
xor eax, eax
mov dl, byte [eax + 0x100213e4]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x24], dl
inc eax
and ecx, 0xff
cmp eax, 0xc
jb 0x100111c4
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 0x24]
push ecx
mov byte [ebp - 0x18], 0
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [0x11183be4]
mov dword [ecx*4 + 0x11183be8], eax
inc ecx
mov dword [0x11183be4], ecx
mov ecx, 0x36
xor eax, eax
lea ecx, [ecx]
mov dl, byte [eax + str.bRJTSU_I_o2._76]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x38], dl
inc eax
and ecx, 0xff
cmp eax, 0x10
jb 0x10011210
mov byte [ebp - 0x28], 0
mov ecx, 0x55
xor eax, eax
mov dl, byte [eax + 0x100213e4]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x14], dl
inc eax
and ecx, 0xff
cmp eax, 0xc
jb 0x10011234
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x14]
push ecx
mov byte [ebp - 8], 0
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [0x11183be4]
mov dword [ecx*4 + 0x11183be8], eax
inc ecx
mov dword [0x11183be4], ecx
mov ecx, 0x27
xor eax, eax
lea ecx, [ecx]
mov dl, byte [eax + str.dZLK_IyF_UPV]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x14], dl
inc eax
and ecx, 0xff
cmp eax, 0xc
jb 0x10011280
mov byte [ebp - 8], 0
mov ecx, 0x55
xor eax, eax
mov dl, byte [eax + 0x100213e4]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x24], dl
inc eax
and ecx, 0xff
cmp eax, 0xc
jb 0x100112a4
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 0x24]
push ecx
mov byte [ebp - 0x18], 0
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [0x11183be4]
mov dword [ecx*4 + 0x11183be8], eax
inc ecx
mov dword [0x11183be4], ecx
mov ecx, 0xcc
xor eax, eax
lea ecx, [ecx]
mov dl, byte [eax + 0x10021424]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x40], dl
inc eax
and ecx, 0xff
cmp eax, 0x17
jb 0x100112f0
mov byte [ebp - 0x29], 0
mov ecx, 0x55
xor eax, eax
mov dl, byte [eax + 0x100213e4]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x14], dl
inc eax
and ecx, 0xff
cmp eax, 0xc
jb 0x10011314
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x14]
push ecx
mov byte [ebp - 8], 0
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [0x11183be4]
mov dword [ecx*4 + 0x11183be8], eax
inc ecx
mov dword [0x11183be4], ecx
mov ecx, 0x7d
xor eax, eax
lea ecx, [ecx]
mov dl, byte [eax + 0x1002143c]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x40], dl
inc eax
and ecx, 0xff
cmp eax, 0x19
jb 0x10011360
mov byte [ebp - 0x27], 0
mov ecx, 0x55
xor eax, eax
mov dl, byte [eax + 0x100213e4]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x14], dl
inc eax
and ecx, 0xff
cmp eax, 0xc
jb 0x10011384
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x14]
push ecx
mov byte [ebp - 8], 0
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [0x11183be4]
mov dword [ecx*4 + 0x11183be8], eax
inc ecx
mov dword [0x11183be4], ecx
mov ecx, 0xf9
xor eax, eax
lea ecx, [ecx]
mov dl, byte [eax + 0x10021458]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x14], dl
inc eax
and ecx, 0xff
cmp eax, 0xc
jb 0x100113d0
mov byte [ebp - 8], 0
mov ecx, 0x55
xor eax, eax
mov dl, byte [eax + 0x100213e4]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x24], dl
inc eax
and ecx, 0xff
cmp eax, 0xc
jb 0x100113f4
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 0x24]
push ecx
mov byte [ebp - 0x18], 0
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x100114c9
mov ecx, 0xf9
xor eax, eax
mov dl, byte [eax + 0x10021458]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x68], dl
inc eax
and ecx, 0xff
cmp eax, 0xc
jb 0x10011431
mov byte [ebp - 0x5c], 0
mov ecx, 0x55
xor eax, eax
mov dl, byte [eax + 0x100213e4]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x78], dl
inc eax
and ecx, 0xff
cmp eax, 0xc
jb 0x10011455
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x78]
push ecx
mov byte [ebp - 0x6c], 0
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp byte [eax], 0xe9
jne 0x1001148c
xor eax, eax
jmp 0x100114c9
mov edi, 0x10021458
sub edi, 0xb12c02e
lea esi, [ebp - 0x50]
call fcn.10012d20
mov edi, 0x100213e4
sub edi, 0x363dbeac
lea esi, [ebp - 0x34]
mov ebx, eax
call fcn.10012cf0
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ebx, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov ecx, dword [0x11183be4]
mov dword [ecx*4 + 0x11183be8], eax
inc ecx
mov dword [0x11183be4], ecx
mov ecx, 0x32
xor eax, eax
mov dl, byte [eax + str.hDESYhKUXYNM]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x34], dl
inc eax
and ecx, 0xff
cmp eax, 0xd
jb 0x100114e4
mov ecx, 0x64b9d3b6
lea eax, [ebp - 0x68]
mov byte [ebp - 0x27], 0
call fcn.10012c70
lea ecx, [ebp - 0x34]
push ecx
push eax
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x10011595
mov ecx, 0x32
xor eax, eax
mov dl, byte [eax + str.hDESYhKUXYNM]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x50], dl
inc eax
and ecx, 0xff
cmp eax, 0xd
jb 0x10011527
mov ecx, 0x64b9d3b6
lea eax, [ebp - 0x24]
mov byte [ebp - 0x43], 0
call fcn.10012c70
lea ecx, [ebp - 0x50]
push ecx
push eax
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp byte [eax], 0xe9
jne 0x10011568
xor eax, eax
jmp 0x10011595
mov edi, str.hDESYhKUXYNM
sub edi, 0x3b0f89
lea esi, [ebp - 0x78]
call fcn.10012d50
mov esi, eax
mov ecx, 0x64b9d3b6
lea eax, [ebp - 0x14]
call fcn.10012c70
push esi
push eax
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [0x11183be4]
mov dword [ecx*4 + 0x11183be8], eax
inc ecx
mov dword [0x11183be4], ecx
mov ecx, 0x5b
xor eax, eax
mov dl, byte [eax + 0x10021478]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x3c], dl
inc eax
and ecx, 0xff
cmp eax, 0x12
jb 0x100115b0
mov ecx, 0x64b9d3b6
lea eax, [ebp - 0x14]
mov byte [ebp - 0x2a], 0
call fcn.10012c70
lea ecx, [ebp - 0x3c]
push ecx
push eax
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x1001165b
mov ecx, 0x5b
xor eax, eax
mov dl, byte [eax + 0x10021478]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x58], dl
inc eax
and ecx, 0xff
cmp eax, 0x12
jb 0x100115f3
mov ecx, 0x64b9d3b6
lea eax, [ebp - 0x24]
mov byte [ebp - 0x46], 0
call fcn.10012c70
lea ecx, [ebp - 0x58]
push ecx
push eax
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp byte [eax], 0xe9
jne 0x10011634
xor eax, eax
jmp 0x1001165b
mov edi, 0x7bcd1e01
lea esi, [ebp - 0x80]
call fcn.10012d80
mov esi, eax
mov ecx, 0x64b9d3b6
lea eax, [ebp - 0x68]
call fcn.10012c70
push esi
push eax
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [0x11183be4]
mov dword [ecx*4 + 0x11183be8], eax
inc ecx
mov dword [0x11183be4], ecx
mov ecx, 0x48
xor eax, eax
mov dl, byte [eax + 0x1002148c]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x38], dl
inc eax
and ecx, 0xff
cmp eax, 0x10
jb 0x10011676
mov ecx, 0x64b9d3b6
lea eax, [ebp - 0x14]
mov byte [ebp - 0x28], 0
call fcn.10012c70
lea ecx, [ebp - 0x38]
push ecx
push eax
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x1001172e
mov ecx, 0x48
xor eax, eax
lea ecx, [ecx]
mov dl, byte [eax + 0x1002148c]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x54], dl
inc eax
and ecx, 0xff
cmp eax, 0x10
jb 0x100116c0
mov ecx, 0x64b9d3b6
lea eax, [ebp - 0x24]
mov byte [ebp - 0x44], 0
call fcn.10012c70
lea ecx, [ebp - 0x54]
push ecx
push eax
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp byte [eax], 0xe9
jne 0x10011701
xor eax, eax
jmp 0x1001172e
mov edi, 0x1002148c
sub edi, 0x4568d847
lea esi, [ebp - 0x7c]
call fcn.10012db0
mov esi, eax
mov ecx, 0x64b9d3b6
lea eax, [ebp - 0x68]
call fcn.10012c70
push esi
push eax
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [0x11183be4]
mov dword [ecx*4 + 0x11183be8], eax
inc ecx
mov dword [0x11183be4], ecx
mov ecx, 0xa9
xor eax, eax
lea esp, [esp]
mov dl, byte [eax + 0x100214a0]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x38], dl
inc eax
and ecx, 0xff
cmp eax, 0xf
jb 0x10011750
mov ecx, 0x64b9d3b6
lea eax, [ebp - 0x14]
mov byte [ebp - 0x29], 0
call fcn.10012c70
lea ecx, [ebp - 0x38]
push ecx
push eax
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x100117fb
mov ecx, 0xa9
xor eax, eax
mov dl, byte [eax + 0x100214a0]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x54], dl
inc eax
and ecx, 0xff
cmp eax, 0xf
jb 0x10011793
mov ecx, 0x64b9d3b6
lea eax, [ebp - 0x24]
mov byte [ebp - 0x45], 0
call fcn.10012c70
lea ecx, [ebp - 0x54]
push ecx
push eax
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp byte [eax], 0xe9
jne 0x100117d4
xor eax, eax
jmp 0x100117fb
mov edi, 0x38c162f7
lea esi, [ebp - 0x7c]
call fcn.10012de0
mov esi, eax
mov ecx, 0x64b9d3b6
lea eax, [ebp - 0x68]
call fcn.10012c70
push esi
push eax
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [0x11183be4]
mov dword [ecx*4 + 0x11183be8], eax
inc ecx
mov dword [0x11183be4], ecx
mov ecx, 0xbd
xor eax, eax
mov dl, byte [eax + 0x100214b0]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x3c], dl
inc eax
and ecx, 0xff
cmp eax, 0x15
jb 0x10011816
mov ebx, 0x100214c8
sub ebx, 0x7ae9cc4c
mov ecx, ebx
lea eax, [ebp - 0x14]
mov byte [ebp - 0x27], 0
call fcn.10012e10
lea ecx, [ebp - 0x3c]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x100118cf
mov ecx, 0xbd
xor eax, eax
mov dl, byte [eax + 0x100214b0]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x58], dl
inc eax
and ecx, 0xff
cmp eax, 0x15
jb 0x10011865
mov ecx, ebx
lea eax, [ebp - 0x24]
mov byte [ebp - 0x43], 0
call fcn.10012e10
lea ecx, [ebp - 0x58]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp byte [eax], 0xe9
jne 0x100118a7
xor eax, eax
jmp 0x100118cf
mov edi, 0x8341e8aa
lea esi, [ebp - 0x80]
call fcn.10012ea0
mov esi, eax
mov ecx, ebx
lea eax, [ebp - 0x68]
call fcn.10012e10
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [0x11183be4]
mov dword [ecx*4 + 0x11183be8], eax
inc ecx
mov dword [0x11183be4], ecx
mov ecx, 0x8c
xor eax, eax
lea ebx, [ebx]
mov dl, byte [eax + 0x100214d4]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x3c], dl
inc eax
and ecx, 0xff
cmp eax, 0x15
jb 0x100118f0
mov ecx, ebx
lea eax, [ebp - 0x14]
mov byte [ebp - 0x27], 0
call fcn.10012e10
lea ecx, [ebp - 0x3c]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x1001199e
mov ecx, 0x8c
xor eax, eax
mov dl, byte [eax + 0x100214d4]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x58], dl
inc eax
and ecx, 0xff
cmp eax, 0x15
jb 0x10011934
mov ecx, ebx
lea eax, [ebp - 0x24]
mov byte [ebp - 0x43], 0
call fcn.10012e10
lea ecx, [ebp - 0x58]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp byte [eax], 0xe9
jne 0x10011976
xor eax, eax
jmp 0x1001199e
mov edi, 0x7a2ae348
lea esi, [ebp - 0x80]
call fcn.10012ed0
mov esi, eax
mov ecx, ebx
lea eax, [ebp - 0x68]
call fcn.10012e10
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [0x11183be4]
mov dword [ecx*4 + 0x11183be8], eax
inc ecx
mov dword [0x11183be4], ecx
mov ecx, 0xb0
xor eax, eax
lea esp, [esp]
mov dl, byte [eax + 0x100214ec]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x38], dl
inc eax
and ecx, 0xff
cmp eax, 0x10
jb 0x100119c0
mov ecx, ebx
lea eax, [ebp - 0x14]
mov byte [ebp - 0x28], 0
call fcn.10012e10
lea ecx, [ebp - 0x38]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x10011a42
mov ecx, 0xb0
xor eax, eax
mov dl, byte [eax + 0x100214ec]
xor dl, cl
inc ecx
mov byte [ebp + eax - 0x54], dl
inc eax
and ecx, 0xff
cmp eax, 0x10
jb 0x10011a04
mov ecx, ebx
lea eax, [ebp - 0x24]
mov byte [ebp - 0x44], 0
call fcn.10012e10
lea ecx, [ebp - 0x54]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp byte [eax], 0xe9
jne 0x10011a46
xor eax, eax
jmp 0x10011a6e
mov edi, 0x18df3014
lea esi, [ebp - 0x7c]
call fcn.10012f00
mov esi, eax
mov ecx, ebx
lea eax, [ebp - 0x68]
call fcn.10012e10
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [0x11183be4]
mov dword [ecx*4 + 0x11183be8], eax
inc ecx
mov dword [0x11183be4], ecx
call fcn.10011aa0
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.10019956
mov esp, ebp
pop ebp
ret