Function at 0x1000c0d0
Capabilities:
Encode data using xor
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x364
mov eax, dword [0x100a8080]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
push 0x103
lea eax, [ebp - 0x107]
mov dword [ebp - 0x32c], edx
mov ebx, ecx
mov byte [ebp - 0x108], 0
push 0
push eax
mov dword [ebp - 0x330], ebx
call fcn.1006ae00
mov edi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
add esp, 0xc
cmp dword [0x100a9e1c], 0xf
mov eax, 0x100a9e08
cmova eax, dword [0x100a9e08]
push eax
lea eax, [ebp - 0x108]
push eax
call edi
mov esi, dword [sym.imp.KERNEL32.dll_lstrcatA]
mov ah, 0xb
mov al, 0x5e
mov byte [ebp - 0x328], ah
xor al, ah
mov byte [ebp - 0x324], 0
mov cl, 0x42
mov byte [ebp - 0x327], al
mov dl, 0x57
mov byte [ebp - 0x324], 0
xor cl, ah
xor dl, ah
lea eax, [ebp - 0x327]
mov byte [ebp - 0x326], cl
push eax
lea eax, [ebp - 0x108]
mov byte [ebp - 0x325], dl
push eax
call esi
movaps xmm0, xmmword [0x1009f9b0]
xor ecx, ecx
movups xmmword [ebp - 0x31c], xmm0
mov word [ebp - 0x30c], 0x2d
nop word [eax + eax]
mov al, byte [ebp - 0x31c]
xor byte [ebp + ecx - 0x31b], al
inc ecx
cmp ecx, 0x10
jb 0x1000c1a0
lea eax, [ebp - 0x31b]
mov byte [ebp - 0x30b], 0
push eax
lea eax, [ebp - 0x108]
push eax
call esi
push 0x8010
push 0
push 0
push 1
lea eax, [ebp - 0x108]
push eax
push str.DreamSoftDreamSoft.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.USER32.dll_LoadImageA]
mov esi, eax
lea eax, [ebp - 0x2ec]
push 0x1e4
push 0
push eax
mov dword [0x100acf60], esi
call fcn.1006ae00
movaps xmm0, xmmword [0x1009ff90]
add esp, 0xc
mov eax, dword [ebp - 0x32c]
xor ecx, ecx
mov dword [ebp - 0x304], 0x1fc
mov dword [ebp - 0x300], ebx
mov dword [ebp - 0x2fc], eax
mov dword [ebp - 0x2f8], 0x17
mov dword [ebp - 0x2f4], 0x500
mov dword [ebp - 0x2f0], esi
movups xmmword [ebp - 0x320], xmm0
mov dword [ebp - 0x310], 0x79727e7b
mov word [ebp - 0x30c], 0x63
nop word [eax + eax]
mov al, byte [ebp - 0x320]
xor byte [ebp + ecx - 0x31f], al
inc ecx
cmp ecx, 0x14
jb 0x1000c270
lea eax, [ebp - 0x31f]
mov byte [ebp - 0x30b], 0
push eax
lea eax, [ebp - 0x2ec]
push eax
call edi
mov byte [ebp - 0x318], 0x7b
mov al, 0x3f
xor al, byte [ebp - 0x318]
mov cl, 9
mov byte [ebp - 0x317], al
mov dl, 0x1e
mov al, byte [ebp - 0x318]
mov ah, 0x16
xor cl, al
mov byte [ebp - 0x305], 0xf
xor dl, al
mov byte [ebp - 0x30e], 0
xor ah, al
mov byte [ebp - 0x316], cl
mov ch, 0x28
mov byte [ebp - 0x313], ah
xor ch, al
mov byte [ebp - 0x315], dl
mov dh, 0x14
mov byte [ebp - 0x312], ch
xor dh, al
mov byte [ebp - 0x30e], 0
mov bl, 0x1a
mov byte [ebp - 0x311], dh
xor bl, al
mov bh, 0x1d
xor bh, al
mov byte [ebp - 0x314], bl
mov al, byte [ebp - 0x305]
xor al, byte [ebp - 0x318]
mov byte [ebp - 0x30f], al
lea eax, [ebp - 0x317]
push eax
lea eax, [ebp - 0x160]
mov byte [ebp - 0x310], bh
push eax
call edi
movaps xmm0, xmmword [0x1009f8e0]
xor ecx, ecx
movups xmmword [ebp - 0x364], xmm0
mov dword [ebp - 0x334], 0x7a223a
movaps xmm0, xmmword [0x1009fb90]
movups xmmword [ebp - 0x354], xmm0
movaps xmm0, xmmword [0x1009fa90]
movups xmmword [ebp - 0x344], xmm0
nop dword [eax + eax]
mov al, byte [ebp - 0x364]
xor byte [ebp + ecx - 0x363], al
inc ecx
cmp ecx, 0x32
jb 0x1000c370
lea eax, [ebp - 0x363]
mov byte [ebp - 0x331], 0
push eax
lea eax, [ebp - 0x264]
push eax
call edi
lea eax, [ebp - 0x304]
push eax
push 0
call dword [sym.imp.SHELL32.dll_Shell_NotifyIconA]
push 0
push dword [ebp - 0x330]
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
mov byte [0x100acf3e], 1
mov byte [0x100acf3d], 1
pop ebx
call fcn.10067570
mov esp, ebp
pop ebp
ret