Function at 0x1001a6e8
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xb4
mov edx, dword [0x10040f84]
mov eax, ecx
push ebx
mov ebx, dword [0x10040fa0]
push esi
push edi
push 0xb
pop ecx
mov esi, str.._AVwxActivateEvent__
mov dword [ebp - 0xc], eax
movzx eax, word [eax]
lea edi, [ebp - 0x4c]
rep movsd dword es:[edi], dword [esi]
or ebx, 0xc8dd5852
mov esi, eax
mov dword [ebp - 4], ebx
mov dword [ebp - 8], esi
cmp ax, word [ebp - 0x4c]
jne 0x1001a775
mov edi, dword [ebp - 0xc]
xor eax, eax
movzx esi, si
mov ecx, eax
xor ebx, ebx
test si, si
je 0x1001a750
cmp word [ebp + eax - 0x4c], bx
je 0x1001a750
inc ecx
lea eax, [ecx + ecx]
movzx esi, word [eax + edi]
cmp si, word [ebp + eax - 0x4c]
je 0x1001a735
mov eax, dword [ebp - 4]
mov ebx, dword [ebp - 4]
cmp eax, ecx
jae 0x1001a772
cmp eax, 0x918
jne 0x1001a769
mov ebx, edx
or ebx, 0xc3bc195b
add ebx, 0x7628d1ff
inc eax
jmp 0x1001a756
mov esi, dword [ebp - 8]
xor edi, edi
lea ebx, [edx - 0x5f9da5bb]
mov eax, edi
inc eax
cmp byte [eax + str.iCCP:_invalid_keyword], 0
jne 0x1001a77f
mov ecx, dword [ebp - 4]
cmp ecx, eax
jae 0x1001a7af
cmp ecx, 0x6b6
jne 0x1001a79e
or edx, 0xc205e6f9
and edx, 0x50f117ea
inc ecx
cmp ecx, eax
jb 0x1001a790
mov dword [0x10040f84], edx
test si, si
je 0x1001a7bc
mov ebx, edx
or ebx, 0x795937f9
mov eax, edi
mov esi, str.MapDialogRect
lea edi, [ebp - 0x1c]
and ebx, 0x91377bac
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
cmp byte [ebp - 0x1c], 0x72
jne 0x1001a7f1
mov cl, 0x72
test cl, cl
je 0x1001a7f1
cmp byte [ebp + eax - 0x1c], 0
je 0x1001a7f1
mov cl, byte [eax + 0x100395c5]
inc eax
cmp cl, byte [ebp + eax - 0x1c]
je 0x1001a7d9
movzx ecx, byte [eax + 0x100395c4]
movzx eax, byte [ebp + eax - 0x1c]
sub ecx, eax
cmp ecx, 0x15fe
jae 0x1001a815
lea edx, [ebx + 0x46b78946]
mov dword [0x10040f84], edx
jmp 0x1001a81b
add ebx, 0x77e3f955
xor esi, esi
mov eax, esi
cmp word [ebp - 8], ax
je 0x1001a83c
mov ecx, dword [ebp - 0xc]
lea ebx, [edx + 0xc7e372]
inc eax
cmp word [ecx + eax*2], si
jne 0x1001a82e
cmp eax, 0xe95
je 0x1001a84a
mov edx, ebx
and edx, 0x2cf69686
mov dword [0x10040f84], edx
mov ecx, esi
imul eax, edx, 0x374e844b
mov esi, str.SetWindowTextW
lea edi, [ebp - 0x1c]
movsd dword es:[edi], dword [esi]
mov dword [0x10040fa0], eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
cmp byte [ebp - 0x1c], 0x35
jne 0x1001a8aa
mov bl, 0x35
test bl, bl
je 0x1001a885
cmp byte [ebp + ecx - 0x1c], 0
je 0x1001a885
mov bl, byte [ecx + 0x100398d5]
inc ecx
cmp bl, byte [ebp + ecx - 0x1c]
je 0x1001a86d
mov esi, dword [ebp - 4]
cmp esi, ecx
jae 0x1001a8aa
cmp esi, 0x270e
jne 0x1001a89b
mov eax, edx
or eax, 0xde8be697
or eax, 0x49705b39
inc esi
cmp esi, ecx
jb 0x1001a88c
mov dword [0x10040fa0], eax
xor ebx, ebx
mov esi, ebx
cmp word [ebp - 8], bx
je 0x1001a8f6
mov ecx, dword [ebp - 0xc]
xor eax, 0x95aaed4
inc esi
cmp word [ecx + esi*2], bx
jne 0x1001a8b7
mov ecx, dword [ebp - 4]
mov dword [0x10040fa0], eax
cmp ecx, esi
jae 0x1001a8f6
cmp ecx, 0x16b8
jne 0x1001a8e5
mov edx, eax
or edx, 0xbc9a97c6
mov dword [0x10040f84], edx
mov eax, edx
or eax, 0x6d61a34b
inc ecx
cmp ecx, esi
jb 0x1001a8cf
mov dword [0x10040fa0], eax
push edx
call dword [sym.imp.USER32.dll_GetLastActivePopup]
mov edx, dword [0x10040fa0]
lea edi, [ebp - 0xb4]
push 0x1a
pop ecx
mov esi, str.2DigiCert_Trusted_G4_RSA4096_SHA256_TimeStamping_CA
add edx, 0xffac2be7
rep movsd dword es:[edi], dword [esi]
mov esi, dword [ebp - 0xc]
movzx eax, word [esi]
mov ecx, eax
cmp ax, word [ebp - 0xb4]
jne 0x1001a974
xor edi, edi
mov eax, edi
test cx, cx
je 0x1001a94f
cmp word [ebp + eax - 0xb4], di
je 0x1001a94f
inc ebx
lea eax, [ebx + ebx]
movzx ecx, word [eax + esi]
cmp cx, word [ebp + eax - 0xb4]
je 0x1001a92e
mov eax, dword [ebp - 4]
cmp eax, ebx
jae 0x1001a974
mov ecx, dword [0x10040fa0]
cmp eax, 0x1ce4
jne 0x1001a969
imul edx, ecx, 0xea2616b
sub edx, 0x32a7c502
inc eax
cmp eax, ebx
jb 0x1001a95c
pop edi
or edx, 0xb8d0ee55
pop esi
mov dword [0x10040f84], edx
mov eax, edx
pop ebx
leave
ret