Function at 0x10032a80
Capabilities:
Encode data using xor
Identify system language via api

Disassembly:
mov eax, 0x1005ba14
call fcn.1005a1d8
sub esp, 0x48
cmp byte [ebp + 0x38], 0
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x38], edx
mov dword [ebp - 0x3c], ecx
je 0x10032b78
cmp byte [ebp + 0x28], 0
je 0x10032ac8
mov eax, dword [ebp + 0xc]
cmp byte [eax], 0
je 0x10032ab7
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLangID]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret
mov dword [ebp + 0x38], 0x412e
cmp dword [ebp + 0x38], 0x4139
jle 0x10032b38
xor esi, esi
xor edi, edi
xor ebx, ebx
mov eax, edi
lea ecx, [ebp - 0x54]
cdq
idiv ebx
mov eax, esi
sub eax, edx
cdq
push edx
push eax
call fcn.100026cb
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10032afc
mov eax, dword [eax]
push eax
call fcn.10041403
pop ecx
push 0
push 1
lea ecx, [ebp - 0x54]
call fcn.1000e4ee
inc ebx
cmp ebx, 0x65bf
jl 0x10032ade
inc edi
cmp edi, 0x2ddc
jl 0x10032adc
inc esi
cmp esi, 0x7b83
jl 0x10032ada
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumResourceNamesW]
cmp dword [ebp + 0x38], 0x3e00
jge 0x10032b4c
push str.ysyv_vnznri_sgot_nsyqnqe_wxdrxh_qkcnkx
call fcn.10041403
pop ecx
mov edx, dword [ebp + 0x3c]
mov dword [edx], 0
cmp dword [edx], 3
jge 0x10032ab7
mov esi, dword [ebp + 0x10]
mov ecx, dword [edx]
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x965b818e
inc dword [edx]
cmp dword [edx], 3
jl 0x10032b61
jmp 0x10032ab7
mov dword [ebp - 0x28], 0x1c90
mov edi, 0x10075958
cmp dword [ebp - 0x28], 0x204d
jle 0x10032be8
xor ebx, ebx
xor esi, esi
mov dword [ebp - 0x24], esi
xor eax, eax
mov dword [ebp - 0x20], 0x27b9
mov dword [ebp + 0x38], eax
mov esi, dword [ebp + 0x38]
xor eax, eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1c], 0x1a87
xor eax, ebx
mov ecx, edi
cdq
push edx
push eax
call fcn.1000daa1
mov eax, dword [ebp - 0x18]
add eax, esi
dec dword [ebp - 0x1c]
mov dword [ebp - 0x18], eax
jne 0x10032baf
mov esi, dword [ebp - 0x24]
add dword [ebp + 0x38], esi
dec dword [ebp - 0x20]
jne 0x10032ba0
inc esi
mov dword [ebp - 0x24], esi
cmp esi, 0x534a
jl 0x10032b94
inc ebx
cmp ebx, 0x7889
jl 0x10032b8f
cmp byte [ebp + 0x14], 0
je 0x10032c58
mov eax, dword [ebp + 0x30]
push dword [ebp + 8]
mov ebx, dword [ebp + 0x2c]
mov ecx, ebx
mov eax, dword [eax]
mov dword [ebp + 0x38], eax
mov eax, dword [ebp + 0x1c]
mov eax, dword [eax]
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x2c]
push eax
call fcn.1003a3d5
mov esi, dword [ebp - 0x2c]
cmp esi, dword [ebx]
je 0x10032c20
mov eax, dword [ebp + 8]
mov eax, dword [eax]
cmp eax, dword [esi + 0x10]
jge 0x10032c47
mov eax, dword [ebp + 8]
push ecx
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
push ecx
mov ecx, ebx
call fcn.1003a77b
push eax
add eax, 0x10
mov ecx, ebx
push eax
push esi
lea eax, [ebp - 0x34]
push eax
call fcn.1003a7ab
mov esi, dword [ebp - 0x34]
mov eax, dword [ebp + 0x38]
mov dword [esi + 0x14], eax
mov eax, dword [ebp - 0x24]
mov dword [esi + 0x18], eax
jmp 0x10032d69
mov dword [ebp + 0x38], 0x7290
cmp dword [ebp + 0x38], 0x762d
jle 0x10032c8b
xor esi, esi
xor ebx, ebx
lea eax, [ebx + esi]
mov ecx, edi
cdq
push edx
push eax
call fcn.1000daa1
inc ebx
cmp ebx, 0x59f
jl 0x10032c6c
inc esi
cmp esi, 0x4e28
jl 0x10032c6a
mov dword [ebp - 4], 2
cmp dword [ebp + 0x38], 0x6f96
jge 0x10032cc8
mov edx, str.xnkxft_nrq_ovyljvu
mov ecx, edi
call fcn.1001082c
jmp 0x10032cc8
or dword [ebp - 4], 0xffffffff
mov dword [ebp + 0x38], 0x2fd1
cmp dword [ebp + 0x38], 0x31f7
jle 0x10032d00
xor esi, esi
xor ebx, ebx
mov eax, ebx
mov ecx, edi
or eax, esi
cdq
push edx
push eax
call fcn.1000daa1
inc ebx
cmp ebx, 0x266
jl 0x10032ce0
inc esi
cmp esi, 0x7a2e
jl 0x10032cde
mov dword [ebp - 4], 4
cmp dword [ebp + 0x38], 0x2efd
jge 0x10032d3d
mov edx, str.jpjcrykn_ukbfbf_moqb_txebr_acpqwmxo
mov ecx, edi
call fcn.1001082c
jmp 0x10032d3d
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp + 0x20]
mov edx, dword [ebp + 0x18]
mov ecx, dword [ebp + 0x34]
push dword [eax]
mov eax, dword [ebp - 0x38]
mov edx, dword [edx]
mov ecx, dword [ecx]
push dword [eax]
mov eax, dword [ebp + 0x24]
movzx eax, byte [eax]
push eax
mov eax, dword [ebp - 0x3c]
push dword [eax]
call fcn.10031733
add esp, 0x10
mov dword [ebp - 4], 6
cmp dword [ebp - 0x28], 0x19c9
jge 0x10032ab7
mov edx, str.ekn_xyjipz_ohcyc_bnnjda_ihldh_cshbvg_qffhm
mov ecx, edi
call fcn.1001082c
jmp 0x10032ab7