Function at 0x100206f5
Capabilities:
Clear file content
Encode data using xor

Disassembly:
mov eax, 0x1005d5ef
call fcn.1005cab0
sub esp, 0x28
push ebx
push esi
mov byte [ebp - 0x14], cl
xor ebx, ebx
mov dword [ebp - 0x24], 0x7a5a
cmp dword [ebp - 0x24], 0x7dab
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x28], edx
jle 0x10020798
mov esi, ebx
mov dword [ebp - 0x20], ebx
mov edi, ebx
mov ecx, ebx
mov dword [ebp - 0x1c], ebx
mov eax, edi
mov dword [ebp - 0x30], ebx
cdq
idiv ecx
lea eax, [edx + esi]
mov dword [ebp - 0x2c], eax
mov esi, eax
mov eax, esi
mov ecx, 0x10077fd8
xor eax, ebx
cdq
push edx
push eax
call fcn.10004c70
inc ebx
cmp ebx, 0x3c7c
jl 0x1002073c
mov ecx, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x20]
inc ecx
mov dword [ebp - 0x1c], ecx
push 0
pop ebx
cmp ecx, 0xb35
jl 0x1002072c
inc edi
cmp edi, 0x2ec8
jl 0x10020727
inc esi
mov dword [ebp - 0x20], esi
cmp esi, 0x441b
jl 0x10020725
push 0x309
push ebx
push 0x9e3
push ebx
push 0x18aa
push ebx
call dword [sym.imp.KERNEL32.dll_CompareStringW]
mov dword [ebp - 4], ebx
cmp dword [ebp - 0x24], 0x7941
jge 0x100207b3
mov edx, str.ekz_wvwug_ivpykmtea_ffkvgzhyz_nbbwgfqq_qhctuylv_qcvc_sbsmc_iglkwiche_dwl_kaokcky
mov ecx, 0x10077fd8
call fcn.10007021
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x30], 0x4f1b
cmp dword [ebp - 0x30], 0x506f
jle 0x10020802
mov esi, ebx
mov edi, ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x24], 0x4553
mov eax, ebx
mov ecx, 0x10077fd8
or eax, esi
cdq
push edx
push eax
call fcn.10004c70
add ebx, edi
dec dword [ebp - 0x24]
jne 0x100207d5
inc edi
push 0
pop ebx
cmp edi, 0x6b52
jl 0x100207cb
inc esi
cmp esi, 0x271c
jl 0x100207c9
cmp byte [ebp - 0x14], 0
je 0x1002098f
mov dword [ebp - 0x2c], 0x7893
cmp dword [ebp - 0x2c], 0x78a1
jle 0x10020879
mov edi, ebx
mov esi, ebx
mov dword [ebp - 0x1c], ebx
mov eax, esi
mov dword [ebp - 0x20], 0x42ac
mov dword [ebp - 0x24], eax
mov ebx, eax
mov esi, 0x1c21
mov eax, ebx
mov ecx, 0x10077fd8
and eax, edi
cdq
push edx
push eax
call fcn.10004c70
dec ebx
dec esi
jne 0x10020836
mov eax, dword [ebp - 0x24]
dec eax
dec dword [ebp - 0x20]
mov dword [ebp - 0x24], eax
jne 0x1002082f
mov esi, dword [ebp - 0x1c]
inc esi
mov dword [ebp - 0x1c], esi
cmp esi, 0x2f6e
jl 0x10020823
inc edi
push 0
pop ebx
cmp edi, 0x1f34
jl 0x1002081e
push ebx
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov edi, dword [ebp + 0x1c]
xor edx, edx
mov esi, dword [ebp + 0x10]
mov eax, dword [edi]
test eax, eax
mov eax, dword [esi]
setne dl
xor ecx, ecx
cmp edx, eax
setne cl
xor eax, eax
cmp ecx, 0xc015
setle al
xor edx, edx
cmp eax, 0xffffffff
mov eax, dword [edi]
setne dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x28]
setl cl
xor ebx, ebx
add ecx, 0xfffffff8
mov eax, dword [eax]
cmp eax, ecx
mov ecx, dword [ebp + 0x18]
sete bl
xor edx, edx
mov ecx, dword [ecx]
mov eax, dword [edi]
cmp ecx, eax
mov ecx, dword [ebp - 0x28]
setge dl
xor eax, eax
cmp edx, ebx
mov ebx, dword [ebp + 0x18]
setle al
mov dword [ecx], eax
mov edx, dword [ecx]
mov eax, dword [ebx]
imul edx, eax
mov eax, dword [esi]
mov ecx, dword [edi]
sub edx, eax
mov eax, dword [ebx]
add edx, 0x4f49
neg edx
sbb edx, edx
inc edx
imul ecx, edx
imul eax, ecx
test eax, eax
jne 0x10020903
xor ecx, ecx
cmp dword [ebx], ecx
je 0x10020906
xor ecx, ecx
inc ecx
xor eax, eax
push 2
pop esi
cmp ecx, esi
setne al
xor edx, edx
cmp eax, 0x54f738db
setg dl
sub edx, dword [ebx]
mov eax, dword [ebx]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
mov eax, dword [ebx]
setge cl
sub ecx, eax
mov eax, dword [ebp + 8]
mov dword [eax], ecx
mov dword [ebp - 4], esi
cmp dword [ebp - 0x2c], 0x786f
jge 0x1002094e
mov edx, str.bvef_fbvsifhfx_pwf_rwogt_icplrtf_wslhbfsg_bqzig_exvy_qxv_eoxb
mov ecx, 0x10077fd8
call fcn.10007021
jmp 0x100209ac
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x100209ac
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CloseEnhMetaFile]
mov dword [ebp - 4], 4
cmp dword [ebp - 0x30], 0x4b64
jge 0x100209cb
mov edx, str.gdnwmope_noh_wlglpf_kdcax
mov ecx, 0x10077fd8
call fcn.10007021
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret