Function at 0x1002eb47
Capabilities:
Encode data using xor

Disassembly:
mov eax, 0x1006064a
call fcn.1005f0d0
sub esp, 0x50
cmp byte [ebp + 0x18], 0
push ebx
push esi
push edi
mov ebx, edx
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x20], ecx
je 0x1002ecd3
cmp byte [ebp + 0x14], 0
je 0x1002ebf7
mov dword [ebp + 0x18], 0xca0
cmp dword [ebp + 0x18], 0xf4a
jle 0x1002ebad
xor esi, esi
xor edi, edi
mov eax, edi
mov ecx, 0x10079cd8
xor eax, esi
cdq
push edx
push eax
call fcn.10015096
inc edi
cmp edi, 0x5fbd
jl 0x1002eb8a
inc esi
cmp esi, 0x5ae0
jl 0x1002eb88
and dword [ebp - 4], 0
cmp dword [ebp + 0x18], 0xb4c
jge 0x1002ebc9
mov edx, str.uawiipq_altqws_aojbsc_hxkl_yapwgm_ubrqlodg_gcivvobjy_vnzz_oqk_xzdzsqx_ywhnpny
mov ecx, 0x10079cd8
call fcn.1001996e
mov eax, dword [ebp + 0xc]
or dword [ebp - 4], 0xffffffff
movzx eax, word [eax]
push eax
push ecx
mov ecx, dword [ebp + 0x2c]
jmp 0x1002ecc9
mov dword [ebp - 0x18], 0x4e4f
cmp dword [ebp - 0x18], 0x5120
jle 0x1002ec67
xor esi, esi
xor edi, edi
xor ebx, ebx
xor eax, eax
mov dword [ebp - 0x14], 0x20dd
mov dword [ebp + 0x18], eax
or eax, edi
mov ecx, 0x10079cd8
or eax, esi
cdq
push edx
push eax
call fcn.10015096
mov eax, dword [ebp + 0x18]
add eax, ebx
dec dword [ebp - 0x14]
mov dword [ebp + 0x18], eax
jne 0x1002ec19
inc ebx
cmp ebx, 0x1ccc
jl 0x1002ec0d
inc edi
cmp edi, 0x705f
jl 0x1002ec0b
inc esi
cmp esi, 0x50a4
jl 0x1002ec09
push 0xbf
push 0x4e6
push 0x1455
call dword [sym.imp.USER32.dll_SetClassLongA]
mov dword [ebp - 4], 2
cmp dword [ebp - 0x18], 0x4b83
jge 0x1002ec86
mov edx, str.gyii_wytmqz_gipgoydv
mov ecx, 0x10079cd8
call fcn.1001996e
mov ecx, dword [ebp + 0x28]
or dword [ebp - 4], 0xffffffff
cmp dword [ecx + 0x14], 8
jb 0x1002ecb1
mov edx, dword [ecx]
jmp 0x1002ecb3
mov edx, ecx
mov eax, dword [ebp - 0x20]
movzx esi, word [eax]
mov eax, dword [ecx + 0x10]
cmp word [edx + eax*2 - 2], si
je 0x1002ee98
push esi
push ecx
call fcn.1001aa46
jmp 0x1002ee98
mov dword [ebp - 0x18], 0x632c
cmp dword [ebp - 0x18], 0x6353
jle 0x1002ed39
xor esi, esi
xor edi, edi
xor ebx, ebx
mov dword [ebp + 0x18], 0x6616
mov eax, ebx
mov ecx, 0x10079cd8
xor eax, esi
cdq
push edx
push eax
call fcn.10015096
add ebx, edi
dec dword [ebp + 0x18]
jne 0x1002ecf0
inc edi
cmp edi, 0x224f
jl 0x1002ece7
inc esi
cmp esi, 0x4458
jl 0x1002ece5
push 0x20f8
push 0
push 0x2352
push 0x172a
push 0x1b69
call dword [sym.imp.GDI32.dll_ExtFloodFill]
mov ebx, dword [ebp - 0x1c]
mov dword [ebp - 4], 4
cmp dword [ebp - 0x18], 0x608c
jge 0x1002ed77
mov edx, str.pydnhvk_nkffxcu_coftdq_tjehra_fzam_vseaue
mov ecx, 0x10079cd8
call fcn.1001996e
jmp 0x1002ed77
or dword [ebp - 4], 0xffffffff
cmp byte [ebp + 0x20], 0
je 0x1002ee0a
sub esp, 0x18
mov ecx, esp
push dword [ebp + 0x24]
call fcn.100151ab
lea ecx, [ebp - 0x2c]
call fcn.1002d968
add esp, 0x18
mov dword [ebp - 4], 6
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x2c], eax
je 0x1002ee02
push dword [ebp + 0x18]
and dword [ebp - 0x34], 0
xor ecx, ecx
push eax
push dword [ebp - 0x2c]
mov word [ebp - 0x44], cx
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x30], 7
call fcn.1001a779
lea edx, [ebp - 0x44]
mov byte [ebp - 4], 7
mov ecx, ebx
call fcn.1002e597
lea ecx, [ebp - 0x44]
push 0
push 1
test eax, eax
jns 0x1002edfd
mov eax, dword [ebp + 8]
mov byte [eax], 1
call fcn.10015c21
lea ecx, [ebp - 0x2c]
call fcn.10021c79
jmp 0x1002ee98
call fcn.10015c21
mov eax, dword [ebp + 8]
mov byte [eax], 0
jmp 0x1002edf0
mov dword [ebp - 0x14], 0x66c2
cmp dword [ebp - 0x14], 0x6a6f
jle 0x1002ee74
xor esi, esi
mov dword [ebp - 0x18], esi
xor edi, edi
mov dword [ebp + 0x18], 0xe45
xor ebx, ebx
mov esi, 0x1fd3
mov eax, ebx
lea ecx, [ebp - 0x5c]
cdq
push edx
push eax
call fcn.10001ac3
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002ee46
mov eax, dword [eax]
push eax
call fcn.1004881f
pop ecx
push 0
push 1
lea ecx, [ebp - 0x5c]
call fcn.10015918
add ebx, edi
dec esi
jne 0x1002ee2f
mov esi, dword [ebp - 0x18]
add edi, esi
dec dword [ebp + 0x18]
jne 0x1002ee28
inc esi
mov dword [ebp - 0x18], esi
cmp esi, 0x2b36
jl 0x1002ee1f
cmp dword [ebp - 0x14], 0x6374
jge 0x1002ee88
push str.mfjq_umbarzft_qyovxqsy_xfjpyxhnv_hzr_sqxiuksjb_icncqil_gvscvol_usw_mezjj_fshtpvskx
call fcn.1004881f
pop ecx
mov eax, dword [ebp + 0x1c]
mov ecx, dword [eax + 4]
sub ecx, dword [eax]
mov eax, dword [ebp + 0x10]
sar ecx, 2
mov dword [eax], ecx
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret