Function at 0x1000e398
Capabilities:
Encode data using xor

Disassembly:
mov eax, 0x1006781b
call fcn.10067390
sub esp, 0x50
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
lea ecx, [ebp - 0x40]
push 3
call fcn.10013363
xor ebx, ebx
mov dword [ebp - 0x24], 0x39beb064
mov dword [ebp - 0x24], ebx
jmp 0x1000e3d3
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x40]
mov dword [eax + ecx*4], 0xbbca6318
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jl 0x1000e3c3
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], bl
je 0x1000e3ed
push ebx
push 0x22a
call dword [sym.imp.USER32.dll_RemovePropA]
push 2
pop esi
mov dword [ebp - 0x24], esi
cmp dword [ebp - 0x24], ebx
jl 0x1000e42f
mov dword [ebp - 0x20], 6
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x40]
cmp dword [eax + ecx*4], ebx
jne 0x1000e42f
mov dword [ebp - 0x20], esi
cmp dword [ebp - 0x20], ebx
jl 0x1000e42a
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], bl
je 0x1000e425
push 0x1722
call dword [sym.imp.GDI32.dll_DeleteDC]
dec dword [ebp - 0x20]
jns 0x1000e412
dec dword [ebp - 0x24]
jns 0x1000e3f8
lea ecx, [ebp - 0x40]
call fcn.100133e5
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], bl
je 0x1000e4cd
mov dword [ebp - 0x24], 0x6a17
cmp dword [ebp - 0x24], 0x6b5a
jle 0x1000e4a3
push ebx
push 0x1294
push ebx
call dword [sym.imp.GDI32.dll_GetRegionData]
mov esi, ebx
mov edi, ebx
lea eax, [edi + esi]
cdq
lea ecx, [ebp - 0x58]
push edx
push eax
call fcn.1000de7e
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1000e47c
mov eax, dword [eax]
push eax
call fcn.100520df
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x58]
call fcn.100138e3
inc edi
cmp edi, 0x48c7
jl 0x1000e464
inc esi
cmp esi, 0xac0
jl 0x1000e462
push 2
pop esi
push ebx
push ebx
push 0x58a
push 0x23bb
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [ebp - 0x24], 0x6939
jge 0x1000e4c9
push 0x100076f4
call fcn.100520df
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x1c], 0x15912491
mov dword [ebp - 0x2c], 0x6a47cded
mov dword [ebp - 0x2c], 0xfffffffc
mov dword [ebp - 0x24], ebx
jmp 0x1000e4f5
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x34], 0xfa32
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x1000e4e7
mov dword [ebp - 0x2c], 0x62c2
cmp dword [ebp - 0x2c], 0x63d3
jle 0x1000e562
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x20], 0x4d36
mov edi, ebx
mov esi, ebx
mov ebx, dword [ebp - 0x24]
mov ecx, esi
mov eax, edi
sar eax, cl
mov ecx, 0x10611478
xor eax, ebx
cdq
push edx
push eax
call fcn.10013138
inc esi
cmp esi, 0x5abc
jl 0x1000e51e
inc edi
push 0
pop ebx
cmp edi, 0x54e1
jl 0x1000e519
mov esi, dword [ebp - 0x28]
add dword [ebp - 0x24], esi
dec dword [ebp - 0x20]
jne 0x1000e517
inc esi
mov dword [ebp - 0x28], esi
cmp esi, 0x6ad0
jl 0x1000e50d
push 2
pop esi
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
neg edx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
sbb edx, edx
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
mov eax, dword [ebp - 0x1c]
neg edx
cmp edx, eax
setge cl
imul ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x1c]
je 0x1000e5cf
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1000e62a
push 0x1e62
push 0x1d5d
push 0x226d
push 0xc6
push 0x26f3
push 0x2385
push 0x17c0
push 0xb98
push 0x1ab1
call dword [sym.imp.GDI32.dll_BitBlt]
jmp 0x1000e62a
mov dword [ebp - 0x1c], ebx
jmp 0x1000e624
mov dword [ebp - 0x20], 0xb6478c38
mov dword [ebp - 0x20], 1
cmp dword [ebp - 0x20], ebx
jl 0x1000e607
mov dword [ebp - 0x24], 0x6aeba4d3
mov dword [ebp - 0x24], ebx
jmp 0x1000e5fd
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x34], ebx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x1000e5f3
dec dword [ebp - 0x20]
jns 0x1000e5e7
mov dword [ebp - 0x20], 1
cmp dword [ebp - 0x20], ebx
jl 0x1000e621
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x34], ebx
jne 0x1000e621
dec dword [ebp - 0x20]
jns 0x1000e613
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jle 0x1000e5d4
mov dword [ebp - 4], esi
cmp dword [ebp - 0x2c], 0x62ad
jge 0x1000e645
mov edx, 0x10007784
mov ecx, 0x10611478
call fcn.10015a5f
mov ecx, dword [ebp - 0xc]
pop edi
mov dword [ebp - 0x2c], 4
mov eax, dword [ebp - 0x2c]
pop esi
mov dword [ebp - 0x2c], eax
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret