Function at 0x1000bbed
Capabilities:
Encode data using xor

Disassembly:
mov eax, 0x10058911
call fcn.10057d24
sub esp, 0x64
cmp byte [ebp + 0x10], 0
push ebx
push esi
push edi
mov edi, ecx
mov dword [ebp - 0x10], esp
mov esi, edx
mov dword [ebp - 0x1c], edi
je 0x1000bcdc
cmp byte [ebp + 8], 0
je 0x1000bcb4
mov dword [ebp + 0x10], 0xd9b
xor esi, esi
cmp dword [ebp + 0x10], 0xf8e
jle 0x1000bc68
mov ebx, esi
mov edi, esi
mov dword [ebp - 0x20], esi
mov eax, esi
mov ecx, 0x10073b38
and eax, edi
xor eax, ebx
cdq
push edx
push eax
call fcn.10004192
inc esi
cmp esi, 0x640a
jl 0x1000bc34
inc edi
push 0
pop esi
cmp edi, 0x5325
jl 0x1000bc31
inc ebx
cmp ebx, 0x579
jl 0x1000bc2f
mov edi, dword [ebp - 0x1c]
mov dword [ebp - 4], esi
cmp dword [ebp + 0x10], 0xb00
jge 0x1000bca2
mov edx, str.kieaif_rghu_hbl_aposiwc_elpehdgxn
mov ecx, 0x10073b38
call fcn.10005a51
jmp 0x1000bca2
mov ecx, dword [edi + 4]
sub ecx, dword [edi]
mov eax, dword [ebp + 0x28]
sar ecx, 2
mov dword [eax], ecx
jmp 0x1000befb
mov edx, dword [ebp + 0x20]
mov dword [edx], 0
cmp dword [edx], 3
jge 0x1000befb
xor edi, edi
inc edi
mov ecx, dword [edx]
mov eax, dword [esi]
mov dword [eax + ecx*4], edi
inc dword [edx]
cmp dword [edx], 3
jl 0x1000bcc9
jmp 0x1000befb
mov dword [ebp - 0x20], 0x4095
cmp dword [ebp - 0x20], 0x4341
jle 0x1000bd6b
call fcn.1001ccd9
xor esi, esi
xor edi, edi
mov ebx, esi
inc edi
mov ecx, esi
mov dword [ebp + 0x10], esi
mov eax, esi
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x14], esi
cdq
idiv dword [ebp - 0x14]
mov eax, ebx
sub ecx, edx
shl eax, cl
lea ecx, [ebp - 0x3c]
cdq
push edx
push eax
call fcn.10002811
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1000bd24
mov eax, dword [eax]
push eax
call fcn.100402ca
pop ecx
push esi
push edi
lea ecx, [ebp - 0x3c]
call fcn.10001571
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp + 0x10]
inc eax
mov dword [ebp - 0x14], eax
cmp eax, 0x77c1
mov eax, dword [ebp - 0x18]
jl 0x1000bd05
inc eax
mov dword [ebp - 0x18], eax
cmp eax, 0x4b38
jl 0x1000bd02
inc ecx
mov dword [ebp + 0x10], ecx
cmp ecx, 0x30c2
jl 0x1000bcfd
inc ebx
cmp ebx, 0x7b30
jl 0x1000bcf8
jmp 0x1000bd70
xor edi, edi
xor esi, esi
inc edi
cmp byte [ebp + 0xc], 0
je 0x1000bd9a
mov edx, dword [ebp + 0x38]
mov dword [edx], esi
cmp dword [edx], 4
jge 0x1000bee7
mov esi, dword [ebp + 0x34]
mov ecx, dword [edx]
mov eax, dword [esi]
mov dword [eax + ecx*4], edi
inc dword [edx]
cmp dword [edx], 4
jl 0x1000bd87
jmp 0x1000bee7
mov dword [ebp - 0x18], 0x5e62
cmp dword [ebp - 0x18], 0x5ecb
jle 0x1000be07
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CreateHalftonePalette]
mov ebx, esi
mov ecx, esi
mov dword [ebp + 0x10], esi
mov eax, ebx
sar eax, cl
lea ecx, [ebp - 0x54]
cdq
push edx
push eax
call fcn.10002811
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1000bdde
mov eax, dword [eax]
push eax
call fcn.100402ca
pop ecx
push esi
push edi
lea ecx, [ebp - 0x54]
call fcn.10001571
mov ecx, dword [ebp + 0x10]
inc ecx
mov dword [ebp + 0x10], ecx
cmp ecx, 0x12f5
jl 0x1000bdc5
inc ebx
cmp ebx, 0x337f
jl 0x1000bdc0
cmp dword [ebp - 0x18], 0x5de0
jge 0x1000be1b
push str.xkeu_laiilhpa_rwnrl_zgjqpu_pvuzdczku_bkqnadfm_dhhho_shxewpzqo_toqsrkbzn_jtqkpt_lrmff
call fcn.100402ca
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x14], 0x586c
cmp dword [ebp - 0x14], 0x5b03
jle 0x1000be7b
mov ebx, esi
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x24], ebx
mov dword [ebp + 0x10], 0x7752
mov eax, ebx
lea ecx, [ebp - 0x6c]
cdq
push edx
push eax
call fcn.10002811
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1000be55
mov eax, dword [eax]
push eax
call fcn.100402ca
pop ecx
push esi
push edi
lea ecx, [ebp - 0x6c]
call fcn.10001571
dec ebx
dec dword [ebp + 0x10]
jne 0x1000be3e
mov ebx, dword [ebp - 0x18]
inc ebx
mov dword [ebp - 0x18], ebx
cmp ebx, 0x6e16
jl 0x1000be34
mov ebx, dword [ebp + 0x24]
mov eax, dword [ebx]
mov eax, dword [ebx]
inc eax
cmp eax, 0xfffffffa
jl 0x1000be8f
mov eax, dword [ebp + 0x14]
cmp dword [eax], esi
je 0x1000be91
mov esi, edi
mov eax, dword [ebx]
mov ecx, dword [ebp + 0x30]
add eax, 0xe70
mov dword [ecx], eax
xor eax, eax
mov edx, dword [ebx]
imul edx, dword [ecx]
cmp esi, 0xca6c8490
sete al
lea ecx, [edx + eax]
mov eax, dword [ebx]
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp + 0x2c]
setl dl
xor ecx, ecx
mov dword [eax], edx
mov eax, dword [eax]
test eax, eax
mov eax, dword [ebp + 0x1c]
setne cl
mov eax, dword [eax]
mov dword [eax], ecx
mov eax, dword [ebp + 0x18]
mov dword [eax], ecx
cmp dword [ebp - 0x14], 0x552a
jge 0x1000bee7
push str.grtxlh_chujwsl_ypehxsg
call fcn.100402ca
pop ecx
cmp dword [ebp - 0x20], 0x3f92
jge 0x1000befb
push str.spkpmgpz_rprque_zgyyqbhc_yxgpfzlsi_svfmfcnrj_zusxlntr_zqhgzyp_cscxvgn_ktuoso_qwu_lxxjbkms_lwfflju_mimj_ogoyqyp
call fcn.100402ca
pop ecx
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret