Function at 0x10005468
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xa8
mov eax, dword [0x1003eba0]
xor eax, 0xfbf51982
mov dword [ebp - 0xc], ecx
push ebx
add eax, 0xa1988e52
push esi
mov dword [0x1003eba0], eax
and eax, 0xcaf4ad27
push edi
mov dword [0x1003ece0], eax
call dword [sym.imp.USER32.dll_GetDoubleClickTime]
mov edx, dword [0x1003eba0]
lea edi, [ebp - 0xa8]
push 0x1b
pop ecx
mov esi, str.setup_Avast_ID_account_to_use_with_email_and_password
xor eax, eax
rep movsd dword es:[edi], dword [esi]
mov esi, dword [ebp - 0xc]
mov ebx, eax
and edx, 0xd2002896
xor edi, edi
mov dword [0x1003eba0], edx
movzx eax, word [esi]
mov ecx, eax
mov dword [ebp - 4], ecx
cmp ax, word [ebp - 0xa8]
jne 0x10005531
movzx ecx, cx
mov eax, edi
test cx, cx
je 0x100054fd
cmp word [ebp + eax - 0xa8], di
je 0x100054fd
inc ebx
lea eax, [ebx + ebx]
movzx ecx, word [eax + esi]
cmp cx, word [ebp + eax - 0xa8]
je 0x100054dc
mov ecx, dword [ebp - 8]
cmp ecx, ebx
jae 0x10005531
mov esi, dword [0x1003ed04]
mov eax, esi
and eax, 0xc58a5cc4
mov dword [ebp - 0x10], eax
cmp ecx, 0x7ba
jne 0x1000552a
mov edx, esi
or edx, 0xf59620ae
mov dword [0x1003eba0], edx
inc ecx
cmp ecx, ebx
jb 0x10005514
jmp 0x10005539
mov eax, dword [0x1003ece0]
mov dword [ebp - 0x10], eax
mov ebx, edi
mov esi, str..asw.pam.proto.Error
push 0xa
pop ecx
lea edi, [ebp - 0x3c]
rep movsd dword es:[edi], dword [esi]
push 0x70
movsw word es:[edi], word [esi]
pop esi
xor edi, edi
cmp si, word [ebp - 0x3c]
jne 0x1000559d
mov ecx, edi
test si, si
je 0x10005575
cmp word [ebp + ecx - 0x3c], di
je 0x10005575
inc ebx
lea ecx, [ebx + ebx]
movzx esi, word [ecx + str.parenleft]
cmp si, word [ebp + ecx - 0x3c]
je 0x10005557
mov ecx, dword [ebp - 8]
jmp 0x10005599
cmp ecx, 0x8c
jne 0x1000558e
sub edx, 0x5b55166e
mov dword [0x1003eba0], edx
mov eax, edx
xor eax, 0xbc7a31b3
inc ecx
mov dword [ebp - 0x10], eax
cmp ecx, ebx
jb 0x1000557a
imul ecx, edx, 0x8e9a6663
mov ebx, edi
push 8
mov esi, str.muesum.llimdniw
lea edi, [ebp - 0x34]
mov dword [ebp - 8], ecx
pop ecx
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 4]
mov edi, dword [ebp - 0xc]
cmp cx, word [ebp - 0x34]
jne 0x1000560f
movzx esi, cx
xor ecx, ecx
xor eax, eax
test si, si
je 0x100055e3
cmp word [ebp + ecx - 0x34], ax
je 0x100055e3
inc ebx
lea ecx, [ebx + ebx]
movzx esi, word [ecx + edi]
cmp si, word [ebp + ecx - 0x34]
je 0x100055c8
mov ecx, dword [ebp - 8]
mov eax, dword [ebp - 0x10]
cmp ecx, ebx
jae 0x1000560f
mov esi, dword [ebp - 8]
cmp ecx, 0x21c0
jne 0x10005604
imul edx, esi, 0x66156e5c
mov dword [0x1003eba0], edx
xor esi, 0x7f9a3f64
inc ecx
cmp ecx, ebx
jb 0x100055f0
xor esi, esi
xor edx, 0x28f2d3f1
mov ecx, esi
mov dword [0x1003ed04], edx
cmp word [ebp - 4], cx
je 0x1000564a
xor eax, 0xb7e1c1c4
inc ecx
cmp word [edi + ecx*2], si
jne 0x10005625
mov dword [0x1003ece0], eax
cmp ecx, 0xa2
jne 0x1000564a
or eax, 0x38984a03
mov dword [0x1003eba0], eax
jmp 0x10005655
lea eax, [edx + 0x27ca2fb1]
mov dword [0x1003ece0], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov ecx, esi
lea edi, [ebp - 0x24]
mov esi, str.nextPage
mov ebx, eax
xor ebx, 0x105cd3ba
mov dword [0x1003eba0], ebx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov esi, dword [ebp - 0xc]
movzx eax, word [esi]
mov edx, eax
cmp ax, word [ebp - 0x24]
jne 0x100056e1
xor edi, edi
mov eax, edi
test dx, dx
je 0x100056a6
cmp word [ebp + eax - 0x24], di
je 0x100056a6
inc ecx
lea eax, [ecx + ecx]
movzx edx, word [eax + esi]
cmp dx, word [ebp + eax - 0x24]
je 0x1000568b
mov edx, dword [ebp - 8]
mov dword [ebp - 4], ecx
cmp edx, ecx
jae 0x100056e1
mov eax, dword [0x1003ed04]
mov ebx, eax
and ebx, 0xa6af1e6f
mov dword [0x1003eba0], ebx
cmp edx, 0x225a
jne 0x100056dc
mov ecx, eax
or ecx, 0xdcd8926f
mov dword [0x1003ece0], ecx
mov ecx, dword [ebp - 4]
inc edx
cmp edx, ecx
jb 0x100056c3
pop edi
pop esi
mov eax, ebx
pop ebx
leave
ret