Function at 0x1003ac0a
Capabilities:
Encode data using xor

Disassembly:
mov eax, 0x10061f6c
call fcn.10060598
sub esp, 0x78
cmp byte [ebp + 0x34], 0
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x2c], edx
je 0x1003b09a
mov dword [ebp - 0x1c], 0x7cd4
xor esi, esi
cmp dword [ebp - 0x1c], 0x7d6f
jle 0x1003ac98
push 0x780
push esi
push 0xc3b
push 0x10e
call dword [sym.imp.USER32.dll_MapWindowPoints]
mov edi, esi
mov dword [ebp - 0x18], esi
mov ebx, esi
mov ecx, ebx
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x24], esi
sar edi, cl
mov eax, edi
mov ecx, 0x1007c0d8
xor eax, esi
cdq
push edx
push eax
call fcn.100042cb
inc esi
cmp esi, 0x3437
jl 0x1003ac63
mov edi, dword [ebp - 0x18]
inc ebx
push 0
pop esi
cmp ebx, 0x2cb5
jl 0x1003ac59
inc edi
mov dword [ebp - 0x18], edi
cmp edi, 0x4f90
jl 0x1003ac57
mov dword [ebp - 4], esi
cmp dword [ebp - 0x1c], 0x7986
jge 0x1003acb3
mov edx, str.dsmua_fnbkxtsff_pswglrokm_qwntjxfme
mov ecx, 0x1007c0d8
call fcn.10006d07
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x20], 0x4d16
cmp dword [ebp - 0x20], 0x4d8c
jle 0x1003ad56
push esi
push esi
push esi
call dword [sym.imp.ADVAPI32.dll_RegSetKeySecurity]
mov edi, esi
mov dword [ebp - 0x18], esi
mov ebx, esi
mov dword [ebp - 0x1c], esi
mov eax, edi
mov dword [ebp - 0x28], esi
mov ecx, ebx
mov edi, esi
shl eax, cl
mov dword [ebp - 0x24], eax
mov ebx, esi
mov eax, edi
lea ecx, [ebp - 0x50]
cdq
idiv ebx
and edx, dword [ebp - 0x24]
mov eax, edx
cdq
push edx
push eax
call fcn.10001a65
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003ad0d
mov eax, dword [eax]
push eax
call fcn.10049ba3
pop ecx
push esi
push 1
lea ecx, [ebp - 0x50]
call fcn.10004a46
inc ebx
cmp ebx, 0x3a5c
jl 0x1003acee
inc edi
cmp edi, 0x49e
jl 0x1003acec
mov ebx, dword [ebp - 0x1c]
mov edi, dword [ebp - 0x18]
inc ebx
mov dword [ebp - 0x1c], ebx
cmp ebx, 0x547a
jl 0x1003acde
inc edi
mov dword [ebp - 0x18], edi
cmp edi, 0x60b0
jl 0x1003acd9
push esi
call dword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
cmp dword [ebp - 0x20], 0x4b03
jge 0x1003ad6a
push str.ilfz_ceqc_aethporv_mmi_csb_exc_fpapr_touv
call fcn.10049ba3
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x28], 0x382b
cmp dword [ebp - 0x28], 0x3a00
jle 0x1003ae09
mov edi, esi
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x18], esi
mov eax, edi
mov dword [ebp - 0x1c], 0x1ef9
mov dword [ebp - 0x20], eax
mov edi, eax
mov ebx, 0x4b3e
mov eax, edi
lea ecx, [ebp - 0x68]
cdq
push edx
push eax
call fcn.10001a65
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003adb4
mov eax, dword [eax]
push eax
call fcn.10049ba3
pop ecx
push esi
push 1
lea ecx, [ebp - 0x68]
call fcn.10004a46
dec edi
dec ebx
jne 0x1003ad9d
mov eax, dword [ebp - 0x20]
mov ebx, dword [ebp - 0x18]
add eax, ebx
dec dword [ebp - 0x1c]
mov dword [ebp - 0x20], eax
jne 0x1003ad96
mov edi, dword [ebp - 0x24]
dec ebx
mov dword [ebp - 0x18], ebx
cmp ebx, 0xfffffc92
jg 0x1003ad8a
inc edi
mov dword [ebp - 0x24], edi
cmp edi, 0x723
jl 0x1003ad87
push 0x584
push esi
push esi
push esi
push esi
push 0x1cf3
call dword [sym.imp.GDI32.dll_CreateDIBitmap]
cmp dword [ebp - 0x28], 0x3574
jge 0x1003ae1d
push str.tmcujl_qhtthf_sxylfjz_ascqjl_cvce_gschoaohi
call fcn.10049ba3
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x28], 0x19fc
cmp dword [ebp - 0x28], 0x1ba9
jle 0x1003ae69
mov edi, esi
mov ebx, esi
mov dword [ebp - 0x24], esi
mov eax, esi
mov ecx, 0x1007c0d8
and eax, ebx
or eax, edi
cdq
push edx
push eax
call fcn.100042cb
inc esi
cmp esi, 0x44d
jl 0x1003ae38
inc ebx
push 0
pop esi
cmp ebx, 0x7f4d
jl 0x1003ae35
inc edi
cmp edi, 0x7572
jl 0x1003ae33
mov dword [ebp - 4], 6
cmp dword [ebp - 0x28], 0x192c
jge 0x1003ae88
mov edx, str.twrrwr_owtvbyctg_tzmoa_ywhuuv_qcuprr_tdn_toifg_lafxphi_rjsj_sikklphv
mov ecx, 0x1007c0d8
call fcn.10006d07
or dword [ebp - 4], 0xffffffff
mov ebx, dword [ebp - 0x2c]
mov edi, dword [ebp + 8]
mov eax, dword [ebx]
mov eax, dword [ebx]
cmp dword [edi], eax
jge 0x1003aeea
cmp dword [ebx], esi
je 0x1003aeea
xor ecx, ecx
inc ecx
jmp 0x1003aeec
mov ecx, esi
mov eax, dword [ebp + 0x28]
mov edx, dword [ebp + 0xc]
dec dword [eax]
xor eax, eax
cmp ecx, 0x47aa2967
setge al
mov dword [edx], eax
mov ecx, dword [edi]
mov eax, dword [edx]
xor edx, edx
cmp eax, ecx
mov eax, dword [ebx]
setle dl
xor ecx, ecx
cmp edx, eax
mov edx, dword [ebp + 0x18]
mov eax, dword [ebp + 0x28]
sete cl
mov dword [edx], ecx
mov eax, dword [eax]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x20]
mov eax, dword [edi]
mov eax, dword [edi]
cmp dword [ecx], esi
jl 0x1003af2e
mov eax, dword [ecx]
mov eax, dword [ebp + 0x3c]
xor edx, edx
mov eax, dword [eax]
mov eax, dword [edi]
mov eax, dword [ebp + 0xc]
mov eax, dword [eax]
mov eax, dword [edi]
mov eax, dword [ecx]
cmp eax, 0x28ae
mov eax, dword [ebp + 0x38]
setne dl
xor ecx, ecx
mov eax, dword [eax]
cmp edx, eax
mov eax, dword [ebx]
mov ebx, dword [ebp + 0x2c]
setle cl
add ecx, 0xe871d976
xor edx, edx
cmp ecx, eax
mov eax, dword [ebx]
setle dl
sub edx, dword [eax + 4]
je 0x1003afd2
mov dword [ebp - 0x38], 0x7779e46e
xor dl, dl
mov dword [ebp - 0x30], 0xef5ead4a
mov cl, 1
push 1
mov dword [ebp - 0x34], 0x5082
call fcn.100387ff
pop ecx
lea eax, [ebp - 0x30]
mov dl, 1
push eax
push 0x7680
push 0x3fa6
push esi
push dword [ebp + 0x28]
lea eax, [ebp - 0x34]
push dword [ebp + 0x10]
lea ecx, [ebp - 0x38]
push eax
push 0x164f
push 0x21c
push dword [ebp + 0x38]
push ebx
push 0x4226
push esi
push 0x7b93
call fcn.1003b99d
add esp, 0x38
jmp 0x1003b09f
mov dword [ebp - 0x20], 0x4171
cmp dword [ebp - 0x20], 0x43a9
jle 0x1003b072
push esi
push 0x1835
push esi
push esi
call dword [sym.imp.KERNEL32.dll_GetStringTypeW]
mov edi, esi
mov dword [ebp - 0x24], esi
mov ebx, esi
mov dword [ebp - 0x28], esi
mov eax, edi
mov dword [ebp - 0x38], esi
mov ecx, ebx
mov edi, esi
shl eax, cl
mov dword [ebp - 0x34], eax
mov ebx, esi
mov eax, edi
lea ecx, [ebp - 0x80]
cdq
idiv ebx
or edx, dword [ebp - 0x34]
mov eax, edx
cdq
push edx
push eax
call fcn.10001a65
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003b02d
mov eax, dword [eax]
push eax
call fcn.10049ba3
pop ecx
push esi
push 1
lea ecx, [ebp - 0x80]
call fcn.10004a46
inc ebx
cmp ebx, 0x77fa
jl 0x1003b00e
inc edi
cmp edi, 0x487c
jl 0x1003b00c
mov ebx, dword [ebp - 0x28]
mov edi, dword [ebp - 0x24]
inc ebx
mov dword [ebp - 0x28], ebx
cmp ebx, 0x1064
jl 0x1003affe
inc edi
mov dword [ebp - 0x24], edi
cmp edi, 0x38e7
jl 0x1003aff9
mov edi, dword [ebp + 8]
mov edx, dword [ebp + 0x1c]
mov ecx, edi
push 0x2b40
push esi
call fcn.1003be34
cmp dword [ebp - 0x20], 0x4147
pop ecx
pop ecx
jge 0x1003b09f
push str.dbzjzpnvn_ikurjlf_sfxocjv_zzywbokha_aaxtkdlsg_jriukdeut_bomw_esmqyi_ejrdubxqt_gte_eoth_phafkpes
call fcn.10049ba3
pop ecx
jmp 0x1003b09f
mov eax, dword [ecx]
dec dword [eax + 8]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret