Function at 0x10041aac
Capabilities:
Accept command line arguments
Encode data using xor

Disassembly:
mov eax, 0x1006326e
call fcn.10061f70
sub esp, 0x4c
push ebx
push esi
mov dword [ebp - 0x28], 0x111b
cmp dword [ebp - 0x28], 0x1483
push edi
mov dword [ebp - 0x10], esp
jle 0x10041b5e
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowTextLengthA]
xor esi, esi
mov dword [ebp - 0x18], esi
xor edi, edi
mov dword [ebp - 0x14], edi
mov eax, esi
xor ebx, ebx
cdq
idiv edi
mov edi, edx
xor esi, esi
mov eax, ebx
lea ecx, [ebp - 0x40]
cdq
idiv esi
mov eax, edi
sub eax, edx
cdq
push edx
push eax
call fcn.10001a31
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10041b13
mov eax, dword [eax]
push eax
call fcn.1004b2d6
pop ecx
push 0
push 1
lea ecx, [ebp - 0x40]
call fcn.10001f3a
inc esi
cmp esi, 0x1dd
jl 0x10041af5
inc ebx
cmp ebx, 0x721f
jl 0x10041af3
mov edi, dword [ebp - 0x14]
mov esi, dword [ebp - 0x18]
inc edi
mov dword [ebp - 0x14], edi
cmp edi, 0x69ed
jl 0x10041aea
inc esi
mov dword [ebp - 0x18], esi
cmp esi, 0x55de
jl 0x10041ae5
push 0
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x18], 0x6769
mov esi, 0x1007d9f8
cmp dword [ebp - 0x18], 0x68d9
jle 0x10041b9d
xor edi, edi
xor ebx, ebx
mov eax, ebx
mov ecx, esi
xor eax, edi
cdq
push edx
push eax
call fcn.10001bd6
inc ebx
cmp ebx, 0x359e
jl 0x10041b77
inc edi
cmp edi, 0xb49
jl 0x10041b75
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
and dword [ebp - 4], 0
cmp dword [ebp - 0x18], 0x65e4
jge 0x10041bd7
mov edx, str.uyio_vhalvxk_empt_llvglva_zsegs_rbxeblz_yoewoarr
mov ecx, esi
call fcn.1000358d
jmp 0x10041bd7
or dword [ebp - 4], 0xffffffff
cmp byte [ebp + 0x28], 0
je 0x10041c19
mov eax, dword [ebp + 0x14]
mov ecx, dword [eax]
sub ecx, dword [eax]
mov eax, dword [ebp + 0x1c]
dec ecx
neg ecx
sbb ecx, ecx
neg ecx
mov dword [eax], ecx
cmp dword [ebp - 0x28], 0xeb4
jge 0x10041c08
push str.gzwl_gwtgtgnh_krlo_jpvi_chsfatcw_gyfmvv_bwsh
call fcn.1004b2d6
pop ecx
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret
mov dword [ebp - 0x24], 0x324
cmp dword [ebp - 0x24], 0x599
jle 0x10041c89
xor eax, eax
mov dword [ebp - 0x14], eax
xor edi, edi
mov dword [ebp - 0x20], edi
xor ebx, ebx
mov dword [ebp - 0x1c], ebx
mov eax, edi
mov dword [ebp - 0x18], 0x2796
cdq
idiv ebx
mov edi, dword [ebp - 0x14]
mov ebx, edx
mov eax, ebx
mov ecx, esi
or eax, edi
cdq
push edx
push eax
call fcn.10001bd6
dec ebx
dec dword [ebp - 0x18]
jne 0x10041c49
mov ebx, dword [ebp - 0x1c]
mov edi, dword [ebp - 0x20]
inc ebx
mov dword [ebp - 0x1c], ebx
cmp ebx, 0x6cb7
jl 0x10041c38
inc edi
mov dword [ebp - 0x20], edi
cmp edi, 0x5ccd
jl 0x10041c33
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp eax, 0x3b19
jl 0x10041c2e
mov dword [ebp - 4], 2
cmp dword [ebp - 0x24], 0x2de
jge 0x10041cc6
mov edx, str.moiosq_nkcehuh_xvc_zayalc_dmtpwqju_fmovpr
mov ecx, esi
call fcn.1000358d
jmp 0x10041cc6
mov eax, dword [ebp + 0xc]
or dword [ebp - 4], 0xffffffff
cmp byte [eax], 0
je 0x10041bf4
mov dword [ebp - 0x24], 0x5dbe
cmp dword [ebp - 0x24], 0x5f09
jle 0x10041d2a
xor edi, edi
xor ebx, ebx
mov ecx, ebx
mov eax, edi
shl eax, cl
lea ecx, [ebp - 0x58]
cdq
push edx
push eax
call fcn.10001a31
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10041d05
mov eax, dword [eax]
push eax
call fcn.1004b2d6
pop ecx
push 0
push 1
lea ecx, [ebp - 0x58]
call fcn.10001f3a
inc ebx
cmp ebx, 0x3b14
jl 0x10041cea
inc edi
cmp edi, 0x4dbf
jl 0x10041ce8
push ecx
push ecx
push 0x67f3
xor dl, dl
call fcn.100420e8
add esp, 0xc
cmp dword [ebp - 0x24], 0x5a56
jge 0x10041d4f
push str.vfhnrd_zqc_bfh_lwso_pobet
call fcn.1004b2d6
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x20], 0x7076
cmp dword [ebp - 0x20], 0x7442
jle 0x10041db2
xor edi, edi
xor ebx, ebx
xor eax, eax
mov dword [ebp - 0x14], eax
xor ecx, ecx
mov dword [ebp - 0x24], ecx
cdq
idiv ecx
lea eax, [ebx + edi]
mov ecx, esi
or eax, edx
cdq
push edx
push eax
call fcn.10001bd6
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x14]
inc ecx
mov dword [ebp - 0x24], ecx
cmp ecx, 0x5cef
jl 0x10041d71
inc eax
mov dword [ebp - 0x14], eax
cmp eax, 0x22e7
jl 0x10041d6c
inc ebx
cmp ebx, 0x5af9
jl 0x10041d67
inc edi
cmp edi, 0x2f7
jl 0x10041d65
mov dword [ebp - 4], 6
cmp dword [ebp - 0x20], 0x6f1a
jge 0x10041bf4
mov edx, str.pidexnthj_ktkcgpwi_qfssx
mov ecx, esi
call fcn.1000358d
jmp 0x10041bf4