Function at 0x10002443
Capabilities:
Encode data using xor

Disassembly:
push ebp
lea ebp, [esp - 0xc8]
sub esp, 0x148
mov eax, dword [0x100271c0]
xor eax, ebp
mov dword [ebp + 0xc4], eax
push ebx
push esi
push edi
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov ebx, eax
push 0x400
mov dword [ebp - 0x70], ebx
call fcn.1001096c
mov esi, eax
pop ecx
lea eax, [ebp - 0x80]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov al, byte [ebp - 0x6e]
mov byte [esi + 2], al
mov al, byte [ebp - 0x6d]
mov byte [esi + 3], al
mov byte [esi], bl
mov byte [esi + 1], bh
mov al, byte [ebp - 0x80]
mov byte [esi + 4], al
mov al, byte [ebp - 0x7f]
mov byte [esi + 5], al
mov al, byte [ebp - 0x7e]
mov byte [esi + 6], al
mov al, byte [ebp - 0x7d]
mov byte [esi + 7], al
mov al, byte [ebp - 0x7a]
mov byte [esi + 8], al
mov al, byte [ebp - 0x79]
mov byte [esi + 9], al
mov al, byte [ebp - 0x78]
mov byte [esi + 0xa], al
mov al, byte [ebp - 0x77]
mov byte [esi + 0xb], al
mov al, byte [ebp - 0x76]
mov byte [esi + 0xc], al
mov al, byte [ebp - 0x75]
mov byte [esi + 0xd], al
mov al, byte [ebp - 0x74]
mov byte [esi + 0xe], al
mov al, byte [ebp - 0x73]
mov byte [esi + 0xf], al
mov al, byte [ebp - 0x72]
mov byte [esi + 0x10], al
mov al, byte [ebp - 0x71]
mov byte [esi + 0x11], al
push 0x10
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
call fcn.1001fa68
add esp, 0xc
lea eax, [ebp - 0x6c]
push eax
lea edi, [esi + 0x12]
push edi
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push edi
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenA]
call edi
add eax, 0x12
cmp eax, 0x30
jge 0x10002530
push 0x30
pop edx
sub edx, eax
push edx
lea ecx, [eax + esi]
push 0
push ecx
call fcn.100112c0
add esp, 0xc
xor eax, eax
mov cl, byte [esi + eax + 0x20]
xor cl, byte [eax + esi]
xor cl, byte [esi + eax + 0x10]
mov byte [eax + esi], cl
inc eax
cmp eax, 0x10
jl 0x10002532
push 0x10
lea eax, [ebp + 0xb8]
push eax
mov byte [ebp + 0x94], 0
push dword [esi]
call fcn.1001fa68
and dword [ebp - 0x70], 0
add esp, 0xc
lea eax, [ebp + 0xb8]
push eax
call edi
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcatA]
push 8
pop ecx
sub ecx, eax
test ecx, ecx
jle 0x100025a0
push 0x10021474
lea eax, [ebp + 0x94]
push eax
call ebx
inc dword [ebp - 0x70]
lea eax, [ebp + 0xb8]
push eax
call edi
push 8
pop ecx
sub ecx, eax
cmp dword [ebp - 0x70], ecx
jl 0x1000257c
lea eax, [ebp + 0xb8]
push eax
lea eax, [ebp + 0x94]
push eax
call ebx
push 0x10
lea eax, [ebp + 0xb8]
push eax
push dword [esi + 4]
call fcn.1001fa68
and dword [ebp - 0x70], 0
add esp, 0xc
lea eax, [ebp + 0xb8]
push eax
call edi
push 8
pop ecx
sub ecx, eax
test ecx, ecx
jle 0x100025fe
push 0x10021474
lea eax, [ebp + 0x94]
push eax
call ebx
inc dword [ebp - 0x70]
lea eax, [ebp + 0xb8]
push eax
call edi
push 8
pop ecx
sub ecx, eax
cmp dword [ebp - 0x70], ecx
jl 0x100025da
lea eax, [ebp + 0xb8]
push eax
lea eax, [ebp + 0x94]
push eax
call ebx
push 0x10
lea eax, [ebp + 0xb8]
push eax
push dword [esi + 8]
call fcn.1001fa68
and dword [ebp - 0x70], 0
add esp, 0xc
lea eax, [ebp + 0xb8]
push eax
call edi
push 8
pop ecx
sub ecx, eax
test ecx, ecx
jle 0x1000265c
push 0x10021474
lea eax, [ebp + 0x94]
push eax
call ebx
inc dword [ebp - 0x70]
lea eax, [ebp + 0xb8]
push eax
call edi
push 8
pop ecx
sub ecx, eax
cmp dword [ebp - 0x70], ecx
jl 0x10002638
lea eax, [ebp + 0xb8]
push eax
lea eax, [ebp + 0x94]
push eax
call ebx
push 0x10
lea eax, [ebp + 0xb8]
push eax
push dword [esi + 0xc]
call fcn.1001fa68
and dword [ebp - 0x70], 0
add esp, 0xc
lea eax, [ebp + 0xb8]
push eax
call edi
push 8
pop ecx
sub ecx, eax
test ecx, ecx
jle 0x100026ba
push 0x10021474
lea eax, [ebp + 0x94]
push eax
call ebx
inc dword [ebp - 0x70]
lea eax, [ebp + 0xb8]
push eax
call edi
push 8
pop ecx
sub ecx, eax
cmp dword [ebp - 0x70], ecx
jl 0x10002696
lea eax, [ebp + 0xb8]
push eax
lea eax, [ebp + 0x94]
push eax
call ebx
push esi
call fcn.10011153
pop ecx
lea eax, [ebp + 0x94]
push eax
call edi
inc eax
push eax
call fcn.1001096c
mov esi, eax
pop ecx
lea eax, [ebp + 0x94]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [ebp + 0xc4]
pop edi
mov eax, esi
pop esi
xor ecx, ebp
pop ebx
call fcn.10010fcb
add ebp, 0xc8
leave
ret