Function at 0x10007e40
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x208
push ebx
push ebp
push esi
push edi
push 0x38
lea eax, [esp + 0x54]
mov dword [esp + 0x8c], edx
mov esi, ecx
mov dword [esp + 0x3c], 0
push 0
push eax
mov dword [esp + 0x98], esi
mov dword [esp + 0x48], 0
call fcn.1002cd70
push 0x38
lea eax, [esp + 0x110]
push 0
push eax
call fcn.1002cd70
xor eax, eax
push 0x70
push eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], eax
lea eax, [esp + 0xb0]
push eax
call fcn.1002cd70
push 0x70
lea eax, [esp + 0x160]
push 0
push eax
call fcn.1002cd70
xor eax, eax
add esp, 0x30
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], eax
cmp dword [esp + 0x220], eax
je 0x10008710
mov eax, dword [esp + 0x224]
test eax, eax
je 0x10008710
mov ebp, dword [esp + 0x238]
cmp ebp, 0x14c
je 0x10007f20
cmp ebp, 0x8664
jne 0x10008710
mov edi, dword [esp + 0x21c]
lea ecx, [esp + 0x20]
push ecx
push ecx
push eax
push edi
mov edx, ebp
mov ecx, esi
call fcn.10007cf0
add esp, 0x10
test eax, eax
je 0x10008710
mov eax, dword [esp + 0x34]
test eax, eax
je 0x10008710
mov ebx, dword [esp + 0x244]
mov ecx, ebx
push ebx
push eax
call fcn.10009760
mov edx, dword [ebx + 4]
mov ecx, dword [ebx]
sub edx, ecx
call fcn.100074e0
xor eax, eax
cmp ebp, 0x8664
jg 0x10007f96
je 0x10007f8f
mov ecx, ebp
sub ecx, 0x14c
je 0x10007f8b
sub ecx, 0x78
jne 0x10007fa3
lea eax, [ecx + 1]
jmp 0x10007fa3
xor eax, eax
jmp 0x10007fa3
mov eax, 2
jmp 0x10007fa3
cmp ebp, 0xaa64
jne 0x10007fa3
mov eax, 3
mov edx, dword [esi + eax*8]
test edx, edx
je 0x10008710
mov eax, dword [esi + eax*8 + 4]
test eax, eax
je 0x10008710
mov ecx, dword [ebx]
push eax
push edx
mov edx, dword [ebx + 4]
sub edx, ecx
call fcn.10007c50
mov esi, dword [esp + 0x2c]
add esp, 8
test esi, esi
je 0x10007ff5
mov eax, dword [ebx]
mov edx, dword [ebx + 4]
push edi
mov edi, dword [esp + 0x24]
sub edx, eax
push dword [esp + 0x8c]
sub edx, edi
lea ecx, [eax + edi]
call fcn.10007c50
add esp, 8
jmp 0x10007ff9
mov edi, dword [esp + 0x20]
xor eax, eax
cmp ebp, 0x8664
jg 0x10008027
je 0x10008020
mov ecx, ebp
sub ecx, 0x14c
je 0x10008019
sub ecx, 0x78
jne 0x10008034
lea eax, [ecx + 5]
jmp 0x10008034
mov eax, 4
jmp 0x10008034
mov eax, 6
jmp 0x10008034
cmp ebp, 0xaa64
jne 0x10008034
mov eax, 7
mov ecx, dword [esp + 0x8c]
mov edx, dword [ecx + eax*8]
test edx, edx
je 0x10008710
mov ecx, dword [ecx + eax*8 + 4]
test ecx, ecx
je 0x10008710
push ecx
push edx
mov edx, dword [ebx + 4]
lea ecx, [edi + esi]
sub edx, dword [ebx]
sub edx, ecx
add ecx, dword [ebx]
call fcn.10007c50
mov eax, dword [esp + 0x30]
lea ecx, [esi + 0x40]
mov edx, dword [ebx + 4]
add eax, edi
push dword [esp + 0x22c]
sub edx, dword [ebx]
add ecx, eax
push dword [esp + 0x22c]
sub edx, ecx
add ecx, dword [ebx]
call fcn.10007c50
mov eax, dword [esp + 0x38]
lea ecx, [esi + 0x40]
add eax, dword [esp + 0x3c]
mov edx, dword [ebx + 4]
add eax, edi
sub edx, dword [ebx]
add ecx, eax
push 0x100
sub edx, ecx
add ecx, dword [ebx]
push 0x10118570
call fcn.10007c50
add esp, 0x18
cmp ebp, 0x8664
jg 0x10008259
je 0x10008265
mov eax, ebp
sub eax, 0x14c
je 0x100080da
sub eax, 0x78
jne 0x1000849e
mov edi, dword [esp + 0x230]
lea eax, [esp + 0x38]
mov esi, dword [esp + 0x234]
lea ecx, [esp + 0x50]
mov edx, 0x38
mov dword [esp + 0x38], edi
mov dword [esp + 0x3c], esi
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], 8
call fcn.100074e0
mov eax, dword [esp + 0x23c]
mov dword [esp + 0x64], eax
add eax, dword [esp + 0x20]
mov dword [esp + 0x68], eax
mov eax, dword [ebx + 4]
sub eax, dword [ebx]
sub eax, dword [esp + 0x20]
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 0x78], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x7c], eax
mov eax, dword [esp + 0x2c]
push 0x38
mov dword [esp + 0x84], eax
lea eax, [esp + 0x1ac]
push 0
push eax
mov dword [esp + 0x60], 0x259bb8b1
mov dword [esp + 0x64], edi
mov dword [esp + 0x68], esi
mov dword [esp + 0x7c], 1
call fcn.1002cd70
lea eax, [esp + 0x1b4]
mov edx, 0x38
push eax
lea eax, [esp + 0x48]
push 8
push eax
lea ecx, [esp + 0x68]
call fcn.10007600
mov eax, dword [esp + 0x1c8]
lea esi, [esp + 0x68]
mov dword [esp + 0x70], eax
lea edi, [esp + 0x118]
mov eax, dword [esp + 0x1cc]
mov ecx, 0xe
mov dword [esp + 0x74], eax
add esp, 0x18
rep movsd dword es:[edi], dword [esi]
lea eax, [esp + 0x100]
mov dword [esp + 0x18], 0x38
mov dword [esp + 0x1c], eax
mov esi, 2
jmp 0x100081e0
mov cl, byte [esp + esi + 0xfe]
mov al, byte [esp + esi + 0xff]
add cl, al
xor cl, byte [esp + esi + 0x100]
mov byte [esp + esi + 0x100], cl
lea edx, [eax + ecx]
xor dl, byte [esp + esi + 0x101]
mov byte [esp + esi + 0x101], dl
lea ebx, [ecx + edx]
xor bl, byte [esp + esi + 0x102]
mov byte [esp + esi + 0x102], bl
lea ecx, [edx + ebx]
xor cl, byte [esp + esi + 0x103]
mov byte [esp + esi + 0x103], cl
lea eax, [ebx + ecx]
xor byte [esp + esi + 0x104], al
movzx eax, byte [esp + esi + 0x104]
add al, cl
xor byte [esp + esi + 0x105], al
add esi, 6
cmp esi, 0x38
jb 0x100081e0
jmp 0x10008493
cmp ebp, 0xaa64
jne 0x1000849e
mov edi, dword [esp + 0x230]
lea eax, [esp + 0x40]
mov esi, dword [esp + 0x234]
lea ecx, [esp + 0x90]
mov edx, 0x70
mov dword [esp + 0x40], edi
mov dword [esp + 0x44], 0
mov dword [esp + 0x48], esi
mov dword [esp + 0x4c], 0
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], 0x10
call fcn.100074e0
mov eax, dword [esp + 0x20]
xor ecx, ecx
mov edx, dword [esp + 0x240]
mov dword [esp + 0xa8], esi
mov esi, dword [esp + 0x23c]
add eax, esi
mov dword [esp + 0xc0], eax
mov eax, dword [ebx + 4]
adc ecx, edx
sub eax, dword [ebx]
sub eax, dword [esp + 0x20]
mov dword [esp + 0xc8], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 0xe0], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0xe8], eax
mov eax, dword [esp + 0x2c]
push 0x70
mov dword [esp + 0xf4], eax
lea eax, [esp + 0x1ac]
push 0
push eax
mov dword [esp + 0xa4], 0xa46a34ff
mov dword [esp + 0xa8], 0x79f12946
mov dword [esp + 0xac], edi
mov dword [esp + 0xb0], 0
mov dword [esp + 0xb8], 0
mov dword [esp + 0xc4], esi
mov dword [esp + 0xc8], edx
mov dword [esp + 0xd0], ecx
mov dword [esp + 0xd8], 0
mov dword [esp + 0xf0], 0
mov dword [esp + 0xf8], 0
mov dword [esp + 0x100], 0
mov dword [esp + 0xdc], 1
mov dword [esp + 0xe0], 0
call fcn.1002cd70
lea eax, [esp + 0x1b4]
mov edx, 0x70
push eax
lea eax, [esp + 0x50]
push 0x10
push eax
lea ecx, [esp + 0xa8]
call fcn.10007600
mov eax, dword [esp + 0x1d0]
lea esi, [esp + 0xa8]
mov dword [esp + 0xb8], eax
lea edi, [esp + 0x150]
mov eax, dword [esp + 0x1d4]
mov ecx, 0x1c
mov dword [esp + 0xbc], eax
add esp, 0x18
mov eax, dword [esp + 0x1c0]
mov dword [esp + 0xa8], eax
mov eax, dword [esp + 0x1c4]
mov dword [esp + 0xac], eax
lea eax, [esp + 0x138]
rep movsd dword es:[edi], dword [esi]
mov dword [esp + 0x1c], eax
mov esi, 2
mov dword [esp + 0x18], 0x70
jmp 0x10008430
mov al, byte [esp + esi + 0x137]
mov dl, byte [esp + esi + 0x136]
add dl, al
xor dl, byte [esp + esi + 0x138]
mov byte [esp + esi + 0x138], dl
lea ebx, [eax + edx]
xor bl, byte [esp + esi + 0x139]
mov byte [esp + esi + 0x139], bl
lea ecx, [edx + ebx]
xor cl, byte [esp + esi + 0x13a]
mov byte [esp + esi + 0x13a], cl
lea eax, [ebx + ecx]
xor byte [esp + esi + 0x13b], al
movzx eax, byte [esp + esi + 0x13b]
add al, cl
xor byte [esp + esi + 0x13c], al
add esi, 5
cmp esi, 0x70
jb 0x10008430
mov edi, dword [esp + 0x20]
mov ebx, dword [esp + 0x244]
mov ecx, dword [ebx]
mov eax, dword [ebx + 4]
mov edx, eax
sub edx, ecx
sub edx, edi
lea esi, [ecx + edi]
mov ecx, 2
cmp edx, ecx
jbe 0x100084c8
mov al, byte [ecx + esi - 2]
add al, byte [ecx + esi - 1]
xor byte [ecx + esi], al
inc ecx
cmp ecx, edx
jb 0x100084b5
mov eax, dword [ebx + 4]
mov ecx, dword [ebx]
sub eax, ecx
push esi
push dword [esp + 0x1c]
sub eax, edi
mov ecx, esi
push dword [esp + 0x24]
mov edx, eax
call fcn.10007600
add esp, 0xc
cmp ebp, 0x14c
je 0x10008664
cmp ebp, 0x8664
jne 0x10008700
lea eax, [esp + 0x90]
mov edx, 0x70
push eax
push dword [esp + 0x14]
mov ecx, eax
push dword [esp + 0x1c]
call fcn.10007600
mov ecx, dword [ebx]
add esp, 0xc
mov eax, dword [esp + 0xf8]
mov dword [ecx + 0x1c6], eax
mov eax, dword [esp + 0xfc]
mov dword [ecx + 0x1ca], eax
mov eax, dword [esp + 0xd0]
mov dword [ecx + 0x1e2], eax
mov eax, dword [esp + 0xd4]
mov dword [ecx + 0x1e6], eax
mov eax, dword [esp + 0xc8]
mov dword [ecx + 0x1fe], eax
mov eax, dword [esp + 0xcc]
mov dword [ecx + 0x202], eax
mov eax, dword [esp + 0xb8]
mov dword [ecx + 0x1b2], eax
mov eax, dword [esp + 0xbc]
mov dword [ecx + 0x1b6], eax
mov eax, dword [esp + 0xe8]
mov dword [ecx + 0x1d4], eax
mov eax, dword [esp + 0xec]
mov dword [ecx + 0x1d8], eax
mov eax, dword [esp + 0xd8]
mov dword [ecx + 0x1f0], eax
mov eax, dword [esp + 0xdc]
mov dword [ecx + 0x1f4], eax
mov eax, dword [esp + 0x90]
mov dword [ecx + 0x20d], eax
mov eax, dword [esp + 0x94]
mov dword [ecx + 0x211], eax
mov eax, dword [esp + 0xc0]
mov dword [ecx + 0x227], eax
mov eax, dword [esp + 0xc4]
mov dword [ecx + 0x22b], eax
mov eax, dword [esp + 0xf0]
mov dword [ecx + 0x236], eax
mov eax, dword [esp + 0xf4]
mov dword [ecx + 0x23a], eax
mov eax, dword [esp + 0xb0]
mov dword [ecx + 0x244], eax
mov eax, dword [esp + 0xb4]
mov dword [ecx + 0x248], eax
mov eax, dword [esp + 0x98]
mov dword [ecx + 0x253], eax
mov eax, dword [esp + 0x9c]
mov dword [ecx + 0x257], eax
mov eax, dword [esp + 0xe0]
mov dword [ecx + 0x262], eax
mov eax, dword [esp + 0xe4]
mov dword [ecx + 0x266], eax
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x208
ret
lea eax, [esp + 0x50]
mov edx, 0x38
push eax
push dword [esp + 0x14]
mov ecx, eax
push dword [esp + 0x1c]
call fcn.10007600
mov ecx, dword [ebx]
add esp, 0xc
mov eax, dword [esp + 0x6c]
mov dword [ecx + 0x1ab], eax
mov eax, dword [esp + 0x84]
mov dword [ecx + 0x1b3], eax
mov eax, dword [esp + 0x68]
mov dword [ecx + 0x1bb], eax
mov eax, dword [esp + 0x60]
mov dword [ecx + 0x1c3], eax
mov eax, dword [esp + 0x80]
mov dword [ecx + 0x1cb], eax
mov eax, dword [esp + 0x78]
mov dword [ecx + 0x1d3], eax
mov eax, dword [esp + 0x7c]
mov dword [ecx + 0x1db], eax
mov eax, dword [esp + 0x70]
mov dword [ecx + 0x1e3], eax
mov eax, dword [esp + 0x50]
mov dword [ecx + 0x1eb], eax
mov eax, dword [esp + 0x54]
mov dword [ecx + 0x1f3], eax
mov eax, dword [esp + 0x64]
mov dword [ecx + 0x1fb], eax
mov eax, dword [esp + 0x74]
mov dword [ecx + 0x203], eax
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x208
ret
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x208
ret