Function at 0x1001d00d
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push ebx
push esi
push edi
mov esi, str.LastChar
lea edi, [ebp - 0x10]
push 0x69
xor ebx, ebx
pop edx
movsd dword es:[edi], dword [esi]
mov eax, ebx
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
cmp byte [ebp - 0x10], dl
jne 0x1001d046
mov cl, dl
test cl, cl
je 0x1001d046
cmp byte [ebp + eax - 0x10], bl
je 0x1001d046
mov cl, byte [eax + 0x10035231]
inc eax
cmp cl, byte [ebp + eax - 0x10]
je 0x1001d02f
movzx ecx, byte [eax + str.is_setting_proxy_with_antispam__]
movzx eax, byte [ebp + eax - 0x10]
sub ecx, eax
cmp ecx, 0x281
jne 0x1001d072
imul eax, dword [str.b9_], 0xa5ca81b2
mov dword [0x1003f3bc], eax
mov eax, dword [0x100405a4]
jmp 0x1001d07c
imul eax, dword [0x1003f3bc], 0x1af187d7
mov esi, str.ProductBuildNumber
imul ecx, eax, 0xaeeb0ce3
lea edi, [ebp - 0x18]
mov eax, ebx
movsd dword es:[edi], dword [esi]
mov dword [0x100405a4], ecx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
cmp byte [ebp - 0x18], dl
jne 0x1001d0cc
test dl, dl
je 0x1001d0b5
cmp byte [ebp + eax - 0x18], bl
je 0x1001d0b5
mov dl, byte [eax + 0x10035231]
inc eax
cmp dl, byte [ebp + eax - 0x18]
je 0x1001d09e
cmp dword [ebp - 4], eax
jae 0x1001d0cc
mov ecx, dword [0x1003f3bc]
and ecx, 0x157e9eed
mov dword [0x100405a4], ecx
lea eax, [ecx - 0xaa6c274]
mov esi, str.is_setting_proxy_with_antispam__
push eax
mov dword [str.b9_], eax
call dword [sym.imp.USER32.dll_IsIconic]
imul ecx, dword [0x1003f3bc], 0xf74f664f
mov eax, dword [0x100405a4]
xor eax, 0x728472bd
inc esi
cmp byte [esi], bl
jne 0x1001d0f2
imul edx, ecx, 0x3cb4dbcb
mov eax, ebx
mov dword [ebp - 4], edx
inc eax
cmp word [eax*2 + str.GlobalAvast_cleanup_license], bx
jne 0x1001d107
mov ecx, dword [ebp - 4]
cmp ecx, eax
jae 0x1001d132
mov esi, dword [str.b9_]
cmp ecx, 0xebc
jne 0x1001d12d
and esi, 0x4bdac14c
inc ecx
cmp ecx, eax
jb 0x1001d11f
mov esi, str.addRequestHandler
lea edi, [ebp - 0x18]
push 0x69
pop ecx
add edx, 0x2f75118e
mov eax, ebx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
cmp byte [ebp - 0x18], cl
jne 0x1001d167
test cl, cl
je 0x1001d167
cmp byte [ebp + eax - 0x18], bl
je 0x1001d167
mov cl, byte [eax + 0x10035231]
inc eax
cmp cl, byte [ebp + eax - 0x18]
je 0x1001d150
movzx ecx, byte [eax + str.is_setting_proxy_with_antispam__]
movzx eax, byte [ebp + eax - 0x18]
sub ecx, eax
cmp ecx, 0x7ed
mov ecx, dword [ebp - 4]
je 0x1001d188
mov edx, ecx
xor edx, 0x133fe1fd
sub ecx, 0x3ec61825
mov eax, ebx
mov esi, ecx
mov dword [0x1003f3bc], ecx
xor esi, 0x3492127f
mov dword [str.b9_], esi
inc eax
cmp byte [eax + str.window_url], bl
jne 0x1001d1a4
cmp dword [ebp - 4], eax
jae 0x1001d1ba
mov edx, ecx
or edx, 0x3f5900ad
mov eax, str.is_setting_proxy_with_antispam__
inc eax
lea edx, [edx - 0x4836775b]
cmp byte [eax], bl
jne 0x1001d1bf
lea eax, [esi - 0x791488f7]
mov dword [0x100405a4], eax
inc ebx
cmp byte [ebx + str.is_setting_proxy_with_antispam__], 0
jne 0x1001d1d5
cmp ebx, 0x23ff
jbe 0x1001d1f4
lea eax, [ecx + 0x6b1e9e5b]
mov dword [str.b9_], eax
jmp 0x1001d1ff
lea eax, [esi - 0x3479edd1]
mov dword [0x1003f3bc], eax
pop edi
pop esi
pop ebx
leave
ret