Function at 0x1000b470
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10050e4d
mov eax, dword fs:[0]
push eax
sub esp, 0x34
mov eax, dword [0x10066040]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor ecx, ecx
xor edx, edx
nop dword [eax]
mov al, byte [edx + str.Abvjrdrb_Zzdckk]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x24], al
and ecx, 0x800000ff
jns 0x1000b4bd
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x10
jl 0x1000b4a0
mov byte [ebp - 0x14], 0
mov edx, 0x10067438
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x24]
call fcn.10026630
mov dword [ebp - 4], 0xffffffff
cmp byte [0x10067438], 0
je 0x1000b692
call fcn.1004ea20
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push eax
call fcn.1004ef00
push 0x1000a0a0
push 0x100dc8b8
call fcn.1004e4a0
call fcn.1004ea80
mov dword [ebp - 0x1c], 0x30203532
mov dword [ebp - 0x18], 0x50483030
mov byte [ebp - 0x14], 0
mov edx, 0x100673de
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x1c]
call fcn.10026630
mov ecx, 0x7c
xor edx, edx
mov al, byte [edx + 0x1005b938]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x38], al
and ecx, 0x800000ff
jns 0x1000b55e
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x12
jl 0x1000b541
mov byte [ebp - 0x26], 0
mov edx, 0x10067451
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x38]
call fcn.10026630
mov ecx, 0x57
xor edx, edx
mov al, byte [edx + 0x1005b94c]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x38], al
and ecx, 0x800000ff
jns 0x1000b5a0
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x13
jl 0x1000b583
mov byte [ebp - 0x25], 0
mov edx, 0x1006743b
mov dword [ebp - 4], 3
lea ecx, [ebp - 0x38]
call fcn.10026630
mov ecx, 0xf0
xor edx, edx
mov al, byte [edx + 0x1005b960]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x24], al
and ecx, 0x800000ff
jns 0x1000b5e2
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xf
jl 0x1000b5c5
mov byte [ebp - 0x15], 0
mov edx, 0x10067439
mov dword [ebp - 4], 4
lea ecx, [ebp - 0x24]
call fcn.10026630
mov ecx, 0x27
xor edx, edx
mov al, byte [edx + str.fK_C_MYK]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x24], al
and ecx, 0x800000ff
jns 0x1000b624
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xd
jl 0x1000b607
mov byte [ebp - 0x17], 0
mov edx, 0x10067450
mov dword [ebp - 4], 5
lea ecx, [ebp - 0x24]
call fcn.10026630
mov ecx, 0xcf
xor edx, edx
nop dword [eax]
mov al, byte [edx + 0x1005b980]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x38], al
and ecx, 0x800000ff
jns 0x1000b66d
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x11
jl 0x1000b650
mov byte [ebp - 0x27], 0
mov edx, 0x1006743a
mov dword [ebp - 4], 6
lea ecx, [ebp - 0x38]
call fcn.10026630
mov dword [ebp - 4], 0xffffffff
movaps xmm0, xmmword [0x10062700]
xor ecx, ecx
movups xmmword [ebp - 0x38], xmm0
mov word [ebp - 0x28], 0x100
lea eax, [ecx - 0x7d]
xor byte [ebp + ecx - 0x38], al
inc ecx
cmp ecx, 0x10
jb 0x1000b6a5
mov edx, 0x100dc832
mov byte [ebp - 0x27], 0
lea ecx, [ebp - 0x38]
call fcn.10026630
cmp byte [0x100dc832], 0
je 0x1000b747
call fcn.1004ea20
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push eax
call fcn.1004ef00
push 0x10009650
push 0x100dc8cc
call fcn.1004e4a0
call fcn.1004ea80
mov dword [ebp - 0x20], 0xe3e1ebce
xor ecx, ecx
mov dword [ebp - 0x1c], 0xcec0a8eb
mov word [ebp - 0x18], 0x100
lea eax, [ecx - 0x7d]
xor byte [ebp + ecx - 0x20], al
inc ecx
cmp ecx, 8
jb 0x1000b707
push 0
push 0x1005b864
lea eax, [ebp - 0x3c]
mov byte [ebp - 0x17], 0
push eax
lea eax, [ebp - 0x40]
mov dword [ebp - 0x3c], 0x64
push eax
push 0x100dc888
xor edx, edx
mov dword [ebp - 0x40], 1
lea ecx, [ebp - 0x20]
call fcn.1002c0a0
add esp, 0x14
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1004c2e6
mov esp, ebp
pop ebp
ret