Function at 0x1001dce0
Capabilities:
Encode data using xor

Disassembly:
mov eax, 0x10058e62
call fcn.100580f4
sub esp, 0x40
cmp byte [ebp + 8], 0
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov byte [ebp - 0x14], dl
mov byte [ebp - 0x18], cl
je 0x1001ddaa
test cl, cl
je 0x1001dda0
mov dword [ebp - 0x1c], 0x7a80
xor ebx, ebx
cmp dword [ebp - 0x1c], 0x7aaf
jle 0x1001dd5e
mov esi, ebx
mov edi, ebx
mov eax, edi
lea ecx, [ebp - 0x4c]
and eax, esi
cdq
push edx
push eax
call fcn.10001a95
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001dd3a
mov eax, dword [eax]
push eax
call fcn.1003fffd
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x4c]
call fcn.10004e55
inc edi
cmp edi, 0x2534
jl 0x1001dd21
inc esi
cmp esi, 0x10b6
jl 0x1001dd1f
mov byte [ebp + 0xb], bl
cmp byte [ebp + 0xb], 0
je 0x1001dd7b
push 0x2234
push ebx
mov dl, 1
mov ecx, 0x6989
call fcn.1001c923
pop ecx
pop ecx
cmp dword [ebp - 0x1c], 0x7966
jge 0x1001dd8f
push str.zcfrn_mslyfqs_ibpzk
call fcn.1003fffd
pop ecx
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
jmp 0x1001dd8f
test dl, dl
je 0x1001de50
xor ebx, ebx
mov byte [ebp + 0xb], bl
cmp byte [ebp + 0xb], bl
je 0x1001de31
mov dword [ebp + 8], 0xaf6
cmp dword [ebp + 8], 0xbff
jle 0x1001de04
mov esi, ebx
mov edi, ebx
mov dword [ebp - 0x1c], ebx
mov eax, ebx
mov ecx, 0x10071a98
xor eax, edi
xor eax, esi
cdq
push edx
push eax
call fcn.100046a4
inc ebx
cmp ebx, 0x4ee1
jl 0x1001ddd3
inc edi
push 0
pop ebx
cmp edi, 0x19bb
jl 0x1001ddd0
inc esi
cmp esi, 0x6a64
jl 0x1001ddce
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov dword [ebp - 4], 2
cmp dword [ebp + 8], 0xa71
jge 0x1001de31
mov edx, str.hicei_hgszzwdm_gywqnvsaz_zix_idvwdxw_hgtdzod_kcjpqoxeu
mov ecx, 0x10071a98
call fcn.10006c80
jmp 0x1001dd8f
mov dword [ebp - 0x1c], 0x19f0
cmp dword [ebp - 0x1c], 0x1b28
jle 0x1001dec0
xor ebx, ebx
mov esi, ebx
mov dword [ebp + 8], ebx
mov edi, ebx
mov dword [ebp - 0x20], ebx
mov ecx, edi
mov ebx, esi
mov esi, dword [ebp - 0x20]
shl ebx, cl
mov eax, ebx
mov ecx, 0x10071a98
or eax, esi
cdq
push edx
push eax
call fcn.100046a4
inc esi
cmp esi, 0x6986
jl 0x1001de75
mov esi, dword [ebp + 8]
inc edi
push 0
pop ebx
cmp edi, 0xa57
jl 0x1001de69
inc esi
mov dword [ebp + 8], esi
cmp esi, 0x1844
jl 0x1001de67
push 0x907
push 0x2081
push 0x1422
push ebx
call dword [sym.imp.USER32.dll_GetMessageA]
mov dword [ebp + 8], 0x7fb0
mov eax, 0xcd509978
mov dword [ebp + 8], 0xc1ec2db2
xor dl, dl
mov dword [ebp + 8], 3
mov dword [ebp + 8], 0xaa39ed0
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], eax
push 4
mov dword [ebp - 0x2c], eax
pop esi
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x24]
push 0x52ad
mov dword [ebp + 8], 0xb64fda7e
push ecx
mov dword [ebp + 8], esi
push eax
mov dword [ebp + 8], 0xef99
mov dword [ebp + 8], 0x5169ff4c
mov dword [ebp - 0x24], 0xab83
push ecx
call fcn.1001b333
add esp, 0x10
mov dword [ebp - 4], esi
cmp dword [ebp - 0x1c], 0x1946
jge 0x1001dd8f
mov edx, str.pfwkyc_ffmodytc_tjuh_uwta_yijbazcb_xoccmuwpg_pvqrz
mov ecx, 0x10071a98
call fcn.10006c80
jmp 0x1001dd8f