Function at 0x10067630
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
pop ebx
pop edi
ret
sub esp, 0x138
lea eax, [esp + 0x124]
push ebx
push esi
push edi
push eax
mov edi, edx
mov ebx, ecx
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
cmp byte [0x100c5b68], 0
mov esi, dword [sym.imp.KERNEL32.dll_Beep]
je 0x1006783e
add dword [eax], eax
add byte [ebx + 0x2da77b51], ah
mov dword [0x2da77b51], eax
rol byte [edx - 0x61], 0x39
xor bl, byte [ecx]
dec ebp
leave
in al, dx
fstp dword [ebx]
xlatb
mov ch, 0xf1
xlatb
jns 0x100676f2
cmp al, 0xb5
jbe 0x1006761a
and dword [esi + 0x3d], esp
mov ch, 0x1c
cmc
rcr byte [ebx - 0x30], 1
mov dword [0x84006dd6], eax
wait
mov cl, 0x98
xchg ebp, eax
and dl, 0x29
std
fcomp qword [ecx + 0x3e0d5065]
sub ch, al
pop esp
nop
cmp eax, 0xc4aac3e5
xchg ebx, eax
lodsb al, byte [esi]
loope 0x10067697
pop esp
mov dh, 0x4d
pop ebp
in al, dx
cwde
test ch, ch
mov eax, dword [0x53f26d2f]
push ss
fsub dword [edi - 0x78]
loope 0x1006765b
push es
dec esi
retf 0x1049
xchg edx, eax
pop ebx
sbb eax, 0xfe3c4b2a
les esi, [ecx + 0x45]
dec edi
shufps xmm1, xmmword [esi], 0xa4
jp 0x10067776
push ebx
cmp eax, 0xebfaa3b4
sbb byte [ebx], dh
mov word [ecx + 0x60d65211], gs
movsb byte es:[edi], byte [esi]
mov ah, 0xd2
fistp dword [eax + ecx - 0x28]
push 0x153c3e0
jo 0x10067725
dec esp
sbb eax, 0xf04686fc
adc al, 0x11
mov ds, word [edx + 0x12]
pushal
pushfd
inc esi
mov cl, 0x31
invalid
invalid
stosb byte es:[edi], al
adc bl, dl
adc eax, 0xb001ca77
push edx
xchg ebx, eax
add cl, byte [ecx]
sub eax, 0x9e4b9919
cmp byte [ebp - 0x53bd2f7d], bl
and esp, dword [ebp + 0x3333d64b]
movsd dword es:[edi], dword [esi]
dec ebx
salc
xor esi, dword [ebx]
test eax, 0xc19ea98b
out dx, eax
fdiv dword [ebx]
inc ebx
sub ah, dh
scasb al, byte es:[edi]
pushal
add eax, 0xccb4527a
call 0x3c55c442
lds esp, [ebp + 0x4bb670a9]
salc
loop 0x100677b2
in eax, 0xd4
inc ecx
enter 0xffffffffffff970a, 0
enter 0xffffffffffffdb3f, 0xfffffffffffffff1
and eax, 0x420d5e0d
mov ecx, 0x2b854c24
jp 0x1006775e
stosd dword es:[edi], eax
sti
invalid
movzx eax, word [esp + 0x130]
sub eax, 0x7e6
mov dword [edi + 0x17c], 0x100b0000
add eax, 0x10065b60
push ebx
call eax
mov edi, dword [sym.imp.KERNEL32.dll_GetProcessHeap]
add esp, 4
push 0xd
push 0
call edi
mov ebx, dword [sym.imp.KERNEL32.dll_HeapAlloc]
push eax
call ebx
mov dword [0x100c5b80], eax
mov dword [esp + 0xcc], 0x49bf9351
mov dword [esp + 0xd0], 0x15fe9a5f
mov dword [esp + 0xd4], 0x4ba19214
mov dword [esp + 0xd8], 0x27cdf63a
mov eax, dword [esp + 0xcc]
mov byte [esp + 0xdc], 0
cmp byte [esp + 0xdc], 0
jne 0x100678da
xor ecx, ecx
mov eax, dword [esp + ecx*4 + 0xcc]
xor eax, 0x27cdf63a
mov dword [esp + ecx*4 + 0xcc], eax
inc ecx
cmp ecx, 4
jb 0x100678c1
mov ecx, dword [0x100c5b80]
lea edx, [esp + 0xcc]
push 0xd
call fcn.1006eb70
add esp, 4
push 0xd
push 0
call edi
push eax
call ebx
mov dword [0x100c5b7c], eax
mov dword [esp + 0xe0], 0x23963db7
mov dword [esp + 0xe4], 0x70d330a6
mov dword [esp + 0xe8], 0x2e8c3df8
mov dword [esp + 0xec], 0x42e059d6
mov eax, dword [esp + 0xe0]
mov byte [esp + 0xf0], 0
cmp byte [esp + 0xf0], 0
jne 0x10067969
xor ecx, ecx
nop word [eax + eax]
mov eax, dword [esp + ecx*4 + 0xe0]
xor eax, 0x42e059d6
mov dword [esp + ecx*4 + 0xe0], eax
inc ecx
cmp ecx, 4
jb 0x10067950
mov ecx, dword [0x100c5b7c]
lea edx, [esp + 0xe0]
push 0xd
call fcn.1006eb70
add esp, 4
push 0xb
push 0
call edi
push eax
call ebx
mov dword [0x100c5bb4], eax
mov dword [esp + 0xc], 0x654c83ee
mov dword [esp + 0x10], 0x7307c2a8
mov dword [esp + 0x14], 0x17299cf7
mov eax, dword [esp + 0xc]
mov byte [esp + 0x18], 0
cmp byte [esp + 0x18], 0
jne 0x100679d3
xor ecx, ecx
nop dword [eax + eax]
mov eax, dword [esp + ecx*4 + 0xc]
xor eax, 0x1729f09b
mov dword [esp + ecx*4 + 0xc], eax
inc ecx
cmp ecx, 3
jb 0x100679c0
mov ecx, dword [0x100c5bb4]
lea edx, [esp + 0xc]
push 0xb
call fcn.1006eb70
add esp, 4
push 0xb
push 0
call edi
push eax
call ebx
mov dword [0x100c5ba8], eax
mov dword [esp + 0x1c], 0x1d412369
mov dword [esp + 0x20], 0x265d622d
mov dword [esp + 0x24], 0x42733c72
mov eax, dword [esp + 0x1c]
mov byte [esp + 0x28], 0
cmp byte [esp + 0x28], 0
jne 0x10067a33
xor ecx, ecx
nop
mov eax, dword [esp + ecx*4 + 0x1c]
xor eax, 0x4273501e
mov dword [esp + ecx*4 + 0x1c], eax
inc ecx
cmp ecx, 3
jb 0x10067a20
mov ecx, dword [0x100c5ba8]
lea edx, [esp + 0x1c]
push 0xb
call fcn.1006eb70
add esp, 4
push 0xa
push 0
call edi
push eax
call ebx
mov dword [0x100c5b78], eax
mov dword [esp + 0x2c], 0x4cf495fd
mov dword [esp + 0x30], 0x4cf4cfff
mov dword [esp + 0x34], 0x2090e1ff
mov eax, dword [esp + 0x2c]
mov byte [esp + 0x38], 0
cmp byte [esp + 0x38], 0
jne 0x10067a93
xor ecx, ecx
nop
mov eax, dword [esp + ecx*4 + 0x2c]
xor eax, 0x2090e193
mov dword [esp + ecx*4 + 0x2c], eax
inc ecx
cmp ecx, 3
jb 0x10067a80
mov ecx, dword [0x100c5b78]
lea edx, [esp + 0x2c]
push 0xa
call fcn.1006eb70
add esp, 4
push 0xc
push 0
call edi
push eax
call ebx
mov dword [0x100c5b88], eax
mov dword [esp + 0x3c], 0x6bac1196
mov dword [esp + 0x40], 0x29fb4a89
mov dword [esp + 0x44], 0x7a51581
mov eax, dword [esp + 0x3c]
mov byte [esp + 0x48], 0
cmp byte [esp + 0x48], 0
jne 0x10067af3
xor ecx, ecx
nop
mov eax, dword [esp + ecx*4 + 0x3c]
xor eax, 0x7c979e5
mov dword [esp + ecx*4 + 0x3c], eax
inc ecx
cmp ecx, 3
jb 0x10067ae0
mov ecx, dword [0x100c5b88]
lea edx, [esp + 0x3c]
push 0xc
call fcn.1006eb70
add esp, 4
push 0xc
push 0
call edi
push eax
call ebx
mov dword [0x100c5ba0], eax
mov dword [esp + 0x4c], 0x4c18db00
mov dword [esp + 0x50], 0x12539a17
mov dword [esp + 0x54], 0x3c0dc507
mov eax, dword [esp + 0x4c]
mov byte [esp + 0x58], 0
cmp byte [esp + 0x58], 0
jne 0x10067b53
xor ecx, ecx
nop
mov eax, dword [esp + ecx*4 + 0x4c]
xor eax, 0x3c61a963
mov dword [esp + ecx*4 + 0x4c], eax
inc ecx
cmp ecx, 3
jb 0x10067b40
mov ecx, dword [0x100c5ba0]
lea edx, [esp + 0x4c]
push 0xc
call fcn.1006eb70
add esp, 4
push 0xc
push 0
call edi
push eax
call ebx
mov dword [0x100c5b90], eax
mov dword [esp + 0x5c], 0x58dbcae6
mov dword [esp + 0x60], 0x1ded2f4
mov dword [esp + 0x64], 0x2fdbcef1
mov eax, dword [esp + 0x5c]
mov byte [esp + 0x68], 0
cmp byte [esp + 0x68], 0
jne 0x10067bb3
xor ecx, ecx
nop
mov eax, dword [esp + ecx*4 + 0x5c]
xor eax, 0x2fb7a295
mov dword [esp + ecx*4 + 0x5c], eax
inc ecx
cmp ecx, 3
jb 0x10067ba0
mov ecx, dword [0x100c5b90]
lea edx, [esp + 0x5c]
push 0xc
call fcn.1006eb70
add esp, 4
push 0xc
push 0
call edi
push eax
call ebx
mov dword [0x100c5b94], eax
mov dword [esp + 0x6c], 0x297c8d43
mov dword [esp + 0x70], 0x6f629040
mov dword [esp + 0x74], 0x417e8850
mov eax, dword [esp + 0x6c]
mov byte [esp + 0x78], 0
cmp byte [esp + 0x78], 0
jne 0x10067c13
xor ecx, ecx
nop
mov eax, dword [esp + ecx*4 + 0x6c]
xor eax, 0x4112e434
mov dword [esp + ecx*4 + 0x6c], eax
inc ecx
cmp ecx, 3
jb 0x10067c00
mov ecx, dword [0x100c5b94]
lea edx, [esp + 0x6c]
push 0xc
call fcn.1006eb70
add esp, 4
push 0xd
push 0
call edi
push eax
call ebx
mov dword [0x100c5ba4], eax
mov dword [esp + 0xf4], 0x5e307482
mov dword [esp + 0xf8], 0xd77789c
mov dword [esp + 0xfc], 0x532875c2
mov dword [esp + 0x100], 0x3f4411ec
mov eax, dword [esp + 0xf4]
mov byte [esp + 0x104], 0
cmp byte [esp + 0x104], 0
jne 0x10067c99
xor ecx, ecx
nop dword [eax]
mov eax, dword [esp + ecx*4 + 0xf4]
xor eax, 0x3f4411ec
mov dword [esp + ecx*4 + 0xf4], eax
inc ecx
cmp ecx, 4
jb 0x10067c80
mov ecx, dword [0x100c5ba4]
lea edx, [esp + 0xf4]
push 0xd
call fcn.1006eb70
add esp, 4
push 0xb
push 0
call edi
push eax
call ebx
mov dword [0x100c5bb0], eax
mov dword [esp + 0x7c], 0x7486ff97
mov dword [esp + 0x80], 0x69dae885
mov dword [esp + 0x84], 0xdf4f099
mov eax, dword [esp + 0x7c]
mov byte [esp + 0x88], 0
cmp byte [esp + 0x88], 0
jne 0x10067d13
xor ecx, ecx
nop dword [eax]
nop dword [eax + eax]
mov eax, dword [esp + ecx*4 + 0x7c]
xor eax, 0xdf49cf5
mov dword [esp + ecx*4 + 0x7c], eax
inc ecx
cmp ecx, 3
jb 0x10067d00
mov ecx, dword [0x100c5bb0]
lea edx, [esp + 0x7c]
push 0xb
call fcn.1006eb70
add esp, 4
push 0xc
push 0
call edi
push eax
call ebx
mov dword [0x100c5b8c], eax
mov dword [esp + 0x8c], 0x4409eba6
mov dword [esp + 0x90], 0x181af6b6
mov dword [esp + 0x94], 0x3600f4b7
mov eax, dword [esp + 0x8c]
mov byte [esp + 0x98], 0
cmp byte [esp + 0x98], 0
jne 0x10067d8a
xor ecx, ecx
mov eax, dword [esp + ecx*4 + 0x8c]
xor eax, 0x366c98d3
mov dword [esp + ecx*4 + 0x8c], eax
inc ecx
cmp ecx, 3
jb 0x10067d71
mov ecx, dword [0x100c5b8c]
lea edx, [esp + 0x8c]
push 0xc
call fcn.1006eb70
add esp, 4
push 0xb
push 0
call edi
push eax
call ebx
mov dword [0x100c5b84], eax
mov dword [esp + 0x9c], 0x64c830ce
mov dword [esp + 0xa0], 0x778b7696
mov dword [esp + 0xa4], 0x13a528c9
mov eax, dword [esp + 0x9c]
mov byte [esp + 0xa8], 0
cmp byte [esp + 0xa8], 0
jne 0x10067e09
xor ecx, ecx
nop dword [eax + eax]
mov eax, dword [esp + ecx*4 + 0x9c]
xor eax, 0x13a544a5
mov dword [esp + ecx*4 + 0x9c], eax
inc ecx
cmp ecx, 3
jb 0x10067df0
mov ecx, dword [0x100c5b84]
lea edx, [esp + 0x9c]
push 0xb
call fcn.1006eb70
add esp, 4
cmp byte [0x100c5b68], 0
je 0x10067fad
sub byte [ebx - 0x4b], ch
mov dh, byte [edx - 0x57]
mov al, 0x81
ja 0x10067eab
invalid
mov bh, 0x5f
jae 0x10067eea
scasb al, byte es:[edi]
psrad mm3, qword [esi + 0x4f]
push 0xfffffffffffffff4
and byte [ebp - 0x3c435164], al
mov dl, 0xfc
or edx, dword [edi - 0x345094e0]
adc dword [ecx - 0x6e], edi
mov ah, 0xeb
mov dword [0x5a0d754c], eax
pop ebp
bound ebp, qword [esi]
mov al, byte [0x9881b6be]
pop ebp
sbb byte [eax], bh
into
push eax
invalid
test byte [esi + 0x6d19826c], ch
xchg edx, eax
invalid
push 0xd
push 0
call edi
push eax
call ebx
mov dword [0x100c5bac], eax
mov dword [esp + 0x108], 0x2658c0cb
mov dword [esp + 0x10c], 0x750ed8d1
mov dword [esp + 0x110], 0x2b51c88a
mov dword [esp + 0x114], 0x473daca4
mov eax, dword [esp + 0x108]
mov byte [esp + 0x118], 0
cmp byte [esp + 0x118], 0
jne 0x1006801b
xor ecx, ecx
mov eax, dword [esp + ecx*4 + 0x108]
xor eax, 0x473daca4
mov dword [esp + ecx*4 + 0x108], eax
inc ecx
cmp ecx, 4
jb 0x10068002
mov ecx, dword [0x100c5bac]
lea edx, [esp + 0x108]
push 0xd
call fcn.1006eb70
add esp, 4
push 0xa
push 0
call edi
push eax
call ebx
mov dword [0x100c5b98], eax
mov dword [esp + 0xac], 0x11742e93
mov dword [esp + 0xb0], 0x4e756cce
mov dword [esp + 0xb4], 0x22114290
mov eax, dword [esp + 0xac]
mov byte [esp + 0xb8], 0
cmp byte [esp + 0xb8], 0
jne 0x10068099
xor ecx, ecx
nop dword [eax]
mov eax, dword [esp + ecx*4 + 0xac]
xor eax, 0x221142fc
mov dword [esp + ecx*4 + 0xac], eax
inc ecx
cmp ecx, 3
jb 0x10068080
mov ecx, dword [0x100c5b98]
lea edx, [esp + 0xac]
push 0xa
call fcn.1006eb70
add esp, 4
push 0xc
push 0
call edi
push eax
call ebx
mov dword [0x100c5b9c], eax
mov dword [esp + 0xbc], 0x722ac712
mov dword [esp + 0xc0], 0x3530cb0b
mov dword [esp + 0xc4], 0x1b28c201
mov eax, dword [esp + 0xbc]
mov byte [esp + 0xc8], 0
cmp byte [esp + 0xc8], 0
jne 0x10068119
xor ecx, ecx
nop word [eax + eax]
mov eax, dword [esp + ecx*4 + 0xbc]
xor eax, 0x1b44ae65
mov dword [esp + ecx*4 + 0xbc], eax
inc ecx
cmp ecx, 3
jb 0x10068100
mov ecx, dword [0x100c5b9c]
lea edx, [esp + 0xbc]
push 0xc
call fcn.1006eb70
add esp, 4
push 0xd
push 0
call edi
push eax
call ebx
mov dword [0x100c5bb8], eax
mov dword [esp + 0x11c], 0x4a6c1a80
mov dword [esp + 0x120], 0x56790c97
mov dword [esp + 0x124], 0x56790ccd
mov dword [esp + 0x128], 0x3a1568e3
mov eax, dword [esp + 0x11c]
mov byte [esp + 0x12c], 0
cmp byte [esp + 0x12c], 0
jne 0x100681a9
xor ecx, ecx
nop word [eax + eax]
mov eax, dword [esp + ecx*4 + 0x11c]
xor eax, 0x3a1568e3
mov dword [esp + ecx*4 + 0x11c], eax
inc ecx
cmp ecx, 4
jb 0x10068190
mov ecx, dword [0x100c5bb8]
lea edx, [esp + 0x11c]
push 0xd
call fcn.1006eb70
add esp, 4
pop edi
pop esi
pop ebx
add esp, 0x138
ret