Function at 0x10022c47
Capabilities:
Encode data using xor

Disassembly:
mov eax, 0x100614cc
call fcn.10060508
sub esp, 0x7c
cmp byte [ebp + 0x28], 0
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x28], edx
mov byte [ebp - 0x14], cl
je 0x10022ca5
test cl, cl
je 0x10022c99
xor ebx, ebx
mov byte [ebp + 0x2b], bl
cmp byte [ebp + 0x2b], bl
je 0x10022c88
push ecx
push 0x7d93
push 0x77e1
push ebx
call fcn.1002240e
add esp, 0x10
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x30]
mov ecx, dword [eax]
mov eax, dword [ebp + 0x20]
add dword [eax], ecx
jmp 0x10022c88
mov dword [ebp - 0x30], 0x5810
xor ebx, ebx
cmp dword [ebp - 0x30], 0x5836
mov esi, 0x1007c858
mov dword [ebp - 0x44], str.wgnzp_jzqhxf_kcj_dtmqlwt_zxm_qhf_uwfjyov_biwolrqin_qxvgzwf_pndknwa_xeqnmv_rmy_awyzenrd_dnc
jle 0x10022d0a
mov dword [ebp + 0x28], ebx
mov edi, ebx
mov ebx, dword [ebp + 0x28]
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x2c], edi
mov dword [ebp + 0x28], 0x7e0a
mov eax, edi
mov ecx, esi
xor eax, ebx
cdq
push edx
push eax
call fcn.10004668
dec edi
dec dword [ebp + 0x28]
jne 0x10022cd8
mov edi, dword [ebp - 0x18]
inc edi
mov dword [ebp - 0x18], edi
cmp edi, 0x6f7c
jl 0x10022cce
inc ebx
push 0
mov dword [ebp + 0x28], ebx
cmp ebx, 0x4981
pop ebx
jl 0x10022cc6
mov dword [ebp - 0x2c], 0x5d6a
cmp dword [ebp - 0x2c], 0x5f70
mov dword [ebp - 0x40], str.jluhigdpl_ryqs_xkvywvop_evrrfmsej_qfor
jle 0x10022db4
push 0x1021
push 0x121b
push 0x1eac
push 0x2f0
push 0x1a62
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.USER32.dll_DrawStateW]
mov dword [ebp - 0x18], ebx
mov edi, ebx
mov eax, ebx
mov dword [ebp + 0x28], ebx
mov ecx, ebx
mov ebx, dword [ebp - 0x18]
mov dword [ebp - 0x1c], ecx
cdq
idiv ecx
mov ecx, edi
mov eax, ebx
sub ecx, edx
sar eax, cl
mov ecx, esi
cdq
push edx
push eax
call fcn.10004668
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp + 0x28]
inc ecx
mov dword [ebp - 0x1c], ecx
cmp ecx, 0x6a5b
jl 0x10022d68
inc eax
mov dword [ebp + 0x28], eax
push 0
pop ebx
cmp eax, 0x7a6a
jl 0x10022d60
inc edi
cmp edi, 0x5840
jl 0x10022d5b
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp eax, 0x1c2a
jl 0x10022d59
cmp byte [ebp + 0xc], 0
je 0x10022dd4
mov eax, dword [ebp + 0x1c]
mov ecx, dword [eax]
mov eax, dword [ebp + 0x24]
sub ecx, dword [eax]
sar ecx, 1
push ecx
mov ecx, dword [ebp + 8]
call fcn.1001f796
jmp 0x10023041
mov dword [ebp - 0x24], 0x5132
cmp dword [ebp - 0x24], 0x550b
jle 0x10022e48
mov edi, ebx
mov dword [ebp - 0x20], ebx
mov ecx, ebx
mov dword [ebp - 0x18], ebx
mov eax, edi
mov dword [ebp + 0x28], ebx
cdq
idiv ecx
mov ecx, edx
mov dword [ebp - 0x1c], ecx
mov edi, ebx
mov ebx, dword [ebp + 0x28]
lea eax, [edi + ebx]
and eax, ecx
mov ecx, esi
cdq
push edx
push eax
call fcn.10004668
mov ecx, dword [ebp - 0x1c]
inc edi
cmp edi, 0xf44
jl 0x10022e00
inc ebx
push 0
mov dword [ebp + 0x28], ebx
cmp ebx, 0x6d2e
pop ebx
jl 0x10022dfb
mov ecx, dword [ebp - 0x18]
mov edi, dword [ebp - 0x20]
inc ecx
mov dword [ebp - 0x18], ecx
cmp ecx, 0x2c4d
jl 0x10022dee
inc edi
mov dword [ebp - 0x20], edi
cmp edi, 0x1ae
jl 0x10022de9
mov dword [ebp - 4], ebx
cmp dword [ebp - 0x24], 0x4f79
jge 0x10022e60
mov edx, str.wzflde_pnkeoorf_xxg_ytue_amepklt_qoqbopbv_avndt_bfllaihp_zakbs_nthpwyge_rbd_akgo_rhjnuc_dmln
mov ecx, esi
call fcn.10006b3c
or dword [ebp - 4], 0xffffffff
mov esi, dword [ebp - 0x28]
mov dword [esi], ebx
cmp dword [esi], 0xc
jg 0x10022fb3
mov dword [ebp - 0x38], 4
mov dword [ebp - 0x20], 0x21d3
cmp dword [ebp - 0x20], 0x24b6
jle 0x10022ef4
mov esi, ebx
mov dword [ebp - 0x24], ebx
mov edi, ebx
mov dword [ebp + 0x28], ebx
mov eax, esi
mov dword [ebp - 0x1c], ebx
cdq
mov esi, ebx
idiv edi
mov edi, edx
mov eax, edi
lea ecx, [ebp - 0x6c]
or eax, esi
cdq
push edx
push eax
call fcn.10001a55
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10022eb8
mov eax, dword [eax]
push eax
call fcn.100483dc
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x6c]
call fcn.10004d74
inc esi
cmp esi, 0xaac
jl 0x10022e9f
mov edi, dword [ebp + 0x28]
mov esi, dword [ebp - 0x24]
inc edi
mov dword [ebp + 0x28], edi
cmp edi, 0x170d
jl 0x10022e93
inc esi
mov dword [ebp - 0x24], esi
cmp esi, 0x1885
jl 0x10022e8e
mov esi, dword [ebp - 0x28]
mov dword [ebp - 0x3c], 0xb1b2b150
cmp dword [ebp - 0x20], 0x20be
jge 0x10022f0f
push str.odlhjqq_gdqp_hdhytecw_zvcmmz_pwylclsu_cyu_osunoavpt_lxlopdu_hhazd_jgiakniox_rxw_tfnv_trwuqe_twlsfz
call fcn.100483dc
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x54]
push 2
call fcn.10004892
push 0x2603
lea eax, [ebp - 0x54]
mov dword [ebp - 4], 4
push eax
lea eax, [ebp - 0x48]
mov dword [ebp - 0x34], 0x7bf6b3da
push 0x1399
push eax
mov ecx, 0x827
call fcn.1001ff9a
mov edx, dword [ebp + 0x14]
lea eax, [ebp - 0x34]
push eax
push 1
push 0x68ff
push dword [ebp + 0x10]
lea eax, [ebp - 0x38]
mov ecx, 0x4830
push eax
push dword [ebp + 0x2c]
lea eax, [ebp - 0x54]
push 1
push eax
push ebx
lea eax, [ebp - 0x3c]
push eax
push esi
push dword [ebp + 0x18]
call fcn.10023f7c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x54]
add esp, 0x40
call fcn.100048f4
inc dword [esi]
jmp 0x10022e69
mov dword [ebp - 0x20], 0x46e8
mov esi, 0x1007c858
cmp dword [ebp - 0x20], 0x49c9
jle 0x1002302d
mov edi, ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x3c], edi
mov dword [ebp + 0x28], 0x3d5a
mov esi, ebx
mov eax, edi
lea ecx, [ebp - 0x84]
xor eax, esi
cdq
push edx
push eax
call fcn.10001a55
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10022ff5
mov eax, dword [eax]
push eax
call fcn.100483dc
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x84]
call fcn.10004d74
inc esi
cmp esi, 0x753b
jl 0x10022fd9
dec edi
dec dword [ebp + 0x28]
jne 0x10022fd7
mov edi, dword [ebp - 0x24]
inc edi
mov dword [ebp - 0x24], edi
cmp edi, 0x493d
jl 0x10022fcd
mov esi, 0x1007c858
cmp dword [ebp - 0x20], 0x43ed
jge 0x10023041
push str.xxltxwexv_bro_cjpfhwe_ahajwsn_mnjxb_dlkrrrx_zhnntaxe_wfvihr_dehb_yjilalicv_ikpov_snkv_kpj_vdpm
call fcn.100483dc
pop ecx
mov dword [ebp - 4], 7
cmp dword [ebp - 0x2c], 0x5d03
jge 0x1002307c
mov edx, dword [ebp - 0x40]
mov ecx, esi
call fcn.10006b3c
jmp 0x1002307c
mov dword [ebp - 4], 9
cmp dword [ebp - 0x30], 0x55c8
jge 0x10022c88
mov edx, dword [ebp - 0x44]
mov ecx, esi
call fcn.10006b3c
jmp 0x10022c88