Function at 0x1000b410
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10051d5d
mov eax, dword fs:[0]
push eax
sub esp, 0x34
mov eax, dword [0x10067040]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor ecx, ecx
xor edx, edx
nop dword [eax]
mov al, byte [edx + str.Abvjrdrb_Zzdckk]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x24], al
and ecx, 0x800000ff
jns 0x1000b45d
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x10
jl 0x1000b440
mov byte [ebp - 0x14], 0
mov edx, 0x100683df
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x24]
call fcn.10027650
mov dword [ebp - 4], 0xffffffff
cmp byte [0x100683df], 0
je 0x1000b632
call fcn.1004f970
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push eax
call fcn.1004fe50
push 0x1000a390
push 0x100dd8b0
call fcn.1004f3f0
call fcn.1004f9d0
mov dword [ebp - 0x1c], 0x30203532
mov dword [ebp - 0x18], 0x50483030
mov byte [ebp - 0x14], 0
mov edx, 0x100683dd
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x1c]
call fcn.10027650
mov ecx, 0x7c
xor edx, edx
mov al, byte [edx + 0x1005c938]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x38], al
and ecx, 0x800000ff
jns 0x1000b4fe
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x12
jl 0x1000b4e1
mov byte [ebp - 0x26], 0
mov edx, 0x10068450
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x38]
call fcn.10027650
mov ecx, 0x57
xor edx, edx
mov al, byte [edx + 0x1005c94c]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x38], al
and ecx, 0x800000ff
jns 0x1000b540
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x13
jl 0x1000b523
mov byte [ebp - 0x25], 0
mov edx, 0x1006843a
mov dword [ebp - 4], 3
lea ecx, [ebp - 0x38]
call fcn.10027650
mov ecx, 0xf0
xor edx, edx
mov al, byte [edx + 0x1005c960]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x24], al
and ecx, 0x800000ff
jns 0x1000b582
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xf
jl 0x1000b565
mov byte [ebp - 0x15], 0
mov edx, 0x10068438
mov dword [ebp - 4], 4
lea ecx, [ebp - 0x24]
call fcn.10027650
mov ecx, 0x27
xor edx, edx
mov al, byte [edx + str.fK_C_MYK]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x24], al
and ecx, 0x800000ff
jns 0x1000b5c4
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xd
jl 0x1000b5a7
mov byte [ebp - 0x17], 0
mov edx, 0x1006843b
mov dword [ebp - 4], 5
lea ecx, [ebp - 0x24]
call fcn.10027650
mov ecx, 0xcf
xor edx, edx
nop dword [eax]
mov al, byte [edx + 0x1005c980]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x38], al
and ecx, 0x800000ff
jns 0x1000b60d
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x11
jl 0x1000b5f0
mov byte [ebp - 0x27], 0
mov edx, 0x10068439
mov dword [ebp - 4], 6
lea ecx, [ebp - 0x38]
call fcn.10027650
mov dword [ebp - 4], 0xffffffff
movaps xmm0, xmmword [0x100634d0]
xor ecx, ecx
movups xmmword [ebp - 0x38], xmm0
mov word [ebp - 0x28], 0x100
lea eax, [ecx + 0xd]
xor byte [ebp + ecx - 0x38], al
inc ecx
cmp ecx, 0x10
jb 0x1000b645
mov edx, 0x100dd881
mov byte [ebp - 0x27], 0
lea ecx, [ebp - 0x38]
call fcn.10027650
cmp byte [0x100dd881], 0
je 0x1000b6e7
call fcn.1004f970
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push eax
call fcn.1004fe50
push 0x10009950
push 0x100dd8c4
call fcn.1004f3f0
call fcn.1004f9d0
mov dword [ebp - 0x20], 0x756b6140
xor ecx, ecx
mov dword [ebp - 0x1c], 0x505a327d
mov word [ebp - 0x18], 0x100
lea eax, [ecx + 0xd]
xor byte [ebp + ecx - 0x20], al
inc ecx
cmp ecx, 8
jb 0x1000b6a7
push 0
push 0x1005c864
lea eax, [ebp - 0x3c]
mov byte [ebp - 0x17], 0
push eax
lea eax, [ebp - 0x40]
mov dword [ebp - 0x3c], 0x64
push eax
push 0x100dd884
xor edx, edx
mov dword [ebp - 0x40], 1
lea ecx, [ebp - 0x20]
call fcn.1002d0b0
add esp, 0x14
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1004d226
mov esp, ebp
pop ebp
ret