Function at 0x10008b30
Capabilities:
Encode data using xor
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x3c
mov eax, dword [0x10028014]
xor eax, esp
mov dword [esp + 0x38], eax
push ebx
push esi
push edi
mov edx, 0xdc
xor ecx, ecx
nop
mov al, byte [ecx + 0x10021ccc]
xor al, dl
mov byte [esp + ecx + 0xc], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0x18
jb 0x10008b50
mov ebx, 0x10021ce8
mov byte [esp + 0x24], 0
sub ebx, 0x477f543b
lea ecx, [esp + 0x28]
push ebx
call fcn.10018940
mov esi, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea ecx, [esp + 0xc]
push ecx
push eax
call esi
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
call edi
mov ecx, dword [0x10188728]
mov edx, 0x31
mov dword [ecx*4 + 0x10188468], eax
inc ecx
mov dword [0x10188728], ecx
xor ecx, ecx
mov al, byte [ecx + str.tJZ_eDX_IH]
xor al, dl
mov byte [esp + ecx + 0x28], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0xb
jb 0x10008bb4
mov byte [esp + 0x33], 0
mov edx, 0xf3
xor ecx, ecx
nop dword [eax + eax]
mov al, byte [ecx + 0x10021d00]
xor al, dl
mov byte [esp + ecx + 0xc], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0xc
jb 0x10008be0
lea eax, [esp + 0x28]
mov byte [esp + 0x18], 0
push eax
lea eax, [esp + 0x10]
push eax
call esi
push eax
call edi
mov ecx, dword [0x10188728]
mov edx, 0xc8
mov dword [ecx*4 + 0x10188468], eax
inc ecx
mov dword [0x10188728], ecx
xor ecx, ecx
nop word [eax + eax]
mov al, byte [ecx + 0x10021d10]
xor al, dl
mov byte [esp + ecx + 0xc], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0xc
jb 0x10008c30
mov byte [esp + 0x18], 0
mov edx, 0xf3
xor ecx, ecx
mov al, byte [ecx + 0x10021d00]
xor al, dl
mov byte [esp + ecx + 0x28], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0xc
jb 0x10008c54
lea eax, [esp + 0xc]
mov byte [esp + 0x34], 0
push eax
lea eax, [esp + 0x2c]
push eax
call esi
push eax
call edi
mov ecx, dword [0x10188728]
mov edx, 0x98
mov dword [ecx*4 + 0x10188468], eax
inc ecx
mov dword [0x10188728], ecx
xor ecx, ecx
nop dword [eax + eax]
mov al, byte [ecx + 0x10021d20]
xor al, dl
mov byte [esp + ecx + 0x28], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0x17
jb 0x10008ca0
mov byte [esp + 0x3f], 0
mov edx, 0xf3
xor ecx, ecx
mov al, byte [ecx + 0x10021d00]
xor al, dl
mov byte [esp + ecx + 0xc], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0xc
jb 0x10008cc4
lea eax, [esp + 0x28]
mov byte [esp + 0x18], 0
push eax
lea eax, [esp + 0x10]
push eax
call esi
push eax
call edi
mov ecx, dword [0x10188728]
mov edx, 0xa
mov dword [ecx*4 + 0x10188468], eax
inc ecx
mov dword [0x10188728], ecx
xor ecx, ecx
nop dword [eax + eax]
mov al, byte [ecx + 0x10021d38]
xor al, dl
mov byte [esp + ecx + 0x28], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0x19
jb 0x10008d10
mov byte [esp + 0x41], 0
mov edx, 0xf3
xor ecx, ecx
mov al, byte [ecx + 0x10021d00]
xor al, dl
mov byte [esp + ecx + 0xc], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0xc
jb 0x10008d34
lea eax, [esp + 0x28]
mov byte [esp + 0x18], 0
push eax
lea eax, [esp + 0x10]
push eax
call esi
push eax
call edi
mov ecx, dword [0x10188728]
mov edx, 0xff
mov dword [ecx*4 + 0x10188468], eax
inc ecx
mov dword [0x10188728], ecx
xor ecx, ecx
nop dword [eax + eax]
mov al, byte [ecx + 0x10021d54]
xor al, dl
mov byte [esp + ecx + 0xc], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0xc
jb 0x10008d80
mov byte [esp + 0x18], 0
mov edx, 0xf3
xor ecx, ecx
mov al, byte [ecx + 0x10021d00]
xor al, dl
mov byte [esp + ecx + 0x28], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0xc
jb 0x10008da4
lea eax, [esp + 0xc]
mov byte [esp + 0x34], 0
push eax
lea eax, [esp + 0x2c]
push eax
call esi
push eax
call edi
mov ecx, dword [0x10188728]
mov edx, 0x80
mov dword [ecx*4 + 0x10188468], eax
inc ecx
mov dword [0x10188728], ecx
xor ecx, ecx
nop dword [eax + eax]
mov al, byte [ecx + 0x10021d64]
xor al, dl
mov byte [esp + ecx + 0x28], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0xe
jb 0x10008df0
mov byte [esp + 0x36], 0
mov edx, 0xf3
xor ecx, ecx
mov al, byte [ecx + 0x10021d00]
xor al, dl
mov byte [esp + ecx + 0xc], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0xc
jb 0x10008e14
lea eax, [esp + 0x28]
mov byte [esp + 0x18], 0
push eax
lea eax, [esp + 0x10]
push eax
call esi
push eax
call edi
mov ecx, dword [0x10188728]
mov edx, 0x61
mov dword [ecx*4 + 0x10188468], eax
inc ecx
mov dword [0x10188728], ecx
xor ecx, ecx
nop dword [eax + eax]
mov al, byte [ecx + 0x10021d74]
xor al, dl
mov byte [esp + ecx + 0xc], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0xd
jb 0x10008e60
push ebx
lea ecx, [esp + 0x2c]
mov byte [esp + 0x1d], 0
call fcn.10018940
lea ecx, [esp + 0xc]
push ecx
push eax
call esi
push eax
call edi
mov ecx, dword [0x10188728]
mov edx, 0x71
mov dword [ecx*4 + 0x10188468], eax
inc ecx
mov dword [0x10188728], ecx
xor ecx, ecx
nop dword [eax]
mov al, byte [ecx + 0x10021d84]
xor al, dl
mov byte [esp + ecx + 0x28], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0xb
jb 0x10008eb0
mov byte [esp + 0x33], 0
mov edx, 0xf3
xor ecx, ecx
mov al, byte [ecx + 0x10021d00]
xor al, dl
mov byte [esp + ecx + 0xc], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0xc
jb 0x10008ed4
lea eax, [esp + 0x28]
mov byte [esp + 0x18], 0
push eax
lea eax, [esp + 0x10]
push eax
call esi
push eax
call edi
mov ecx, dword [0x10188728]
mov edx, 0xbd
mov dword [ecx*4 + 0x10188468], eax
inc ecx
mov dword [0x10188728], ecx
xor ecx, ecx
nop dword [eax + eax]
mov al, byte [ecx + 0x10021d90]
xor al, dl
mov byte [esp + ecx + 0xc], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0x12
jb 0x10008f20
push ebx
lea ecx, [esp + 0x2c]
mov byte [esp + 0x22], 0
call fcn.10018940
lea ecx, [esp + 0xc]
push ecx
push eax
call esi
push eax
call edi
mov ecx, dword [0x10188728]
mov edx, 0x5d
mov dword [ecx*4 + 0x10188468], eax
inc ecx
mov dword [0x10188728], ecx
xor ecx, ecx
nop dword [eax]
mov al, byte [ecx + str._t___r_b_f]
xor al, dl
mov byte [esp + ecx + 0x28], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0x10
jb 0x10008f70
mov byte [esp + 0x38], 0
mov edx, 0xf3
xor ecx, ecx
mov al, byte [ecx + 0x10021d00]
xor al, dl
mov byte [esp + ecx + 0xc], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0xc
jb 0x10008f94
lea eax, [esp + 0x28]
mov byte [esp + 0x18], 0
push eax
lea eax, [esp + 0x10]
push eax
call esi
push eax
call edi
mov ecx, dword [0x10188728]
mov edx, 0x73
mov dword [ecx*4 + 0x10188468], eax
inc ecx
mov dword [0x10188728], ecx
xor ecx, ecx
nop dword [eax + eax]
mov al, byte [ecx + 0x10021db8]
xor al, dl
mov byte [esp + ecx + 0xc], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0x10
jb 0x10008fe0
push ebx
lea ecx, [esp + 0x2c]
mov byte [esp + 0x20], 0
call fcn.10018940
lea ecx, [esp + 0xc]
push ecx
push eax
call esi
push eax
call edi
mov ecx, dword [0x10188728]
mov edx, 0x59
mov dword [ecx*4 + 0x10188468], eax
inc ecx
mov dword [0x10188728], ecx
xor ecx, ecx
nop dword [eax]
mov al, byte [ecx + 0x10021dcc]
xor al, dl
mov byte [esp + ecx + 0xc], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0xf
jb 0x10009030
push ebx
lea ecx, [esp + 0x2c]
mov byte [esp + 0x1f], 0
call fcn.10018940
lea ecx, [esp + 0xc]
push ecx
push eax
call esi
push eax
call edi
mov ecx, dword [0x10188728]
mov edx, 0x30
mov dword [ecx*4 + 0x10188468], eax
inc ecx
mov dword [0x10188728], ecx
xor ecx, ecx
nop dword [eax]
mov al, byte [ecx + 0x10021ddc]
xor al, dl
mov byte [esp + ecx + 0x28], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0x1b
jb 0x10009080
mov byte [esp + 0x43], 0
mov edx, 0xae
xor ecx, ecx
mov al, byte [ecx + 0x10021df8]
xor al, dl
mov byte [esp + ecx + 0xc], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0xe
jb 0x100090a4
lea eax, [esp + 0x28]
mov byte [esp + 0x1a], 0
push eax
lea eax, [esp + 0x10]
push eax
call esi
push eax
call edi
mov ecx, dword [0x10188728]
mov dword [ecx*4 + 0x10188468], eax
inc ecx
mov dword [0x10188728], ecx
call fcn.10009100
mov ecx, dword [esp + 0x44]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.1001e905
mov esp, ebp
pop ebp
ret