Function at 0x100189a8
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x70
xor ecx, ecx
mov eax, ecx
push ebx
mov ebx, dword [0x1003d3f8]
imul edx, ebx, 0x5a874c81
and edx, 0xc3b699ef
inc eax
cmp byte [eax + str.invalid_chunk_type], cl
jne 0x100189c5
push esi
mov esi, dword [ebp - 0x10]
push edi
cmp esi, eax
jae 0x100189f8
mov edi, dword [0x1003d588]
cmp esi, 0x2670
jne 0x100189eb
lea edx, [edi - 0x45f81d06]
mov edi, edx
and edi, 0x5bed5bab
inc esi
cmp esi, eax
jb 0x100189dd
or ebx, 0xb65793a1
mov eax, ecx
and edx, 0xd3213790
mov dword [0x1003d468], edx
inc eax
cmp byte [eax + str.pj.ufig.ekatim], cl
jne 0x10018a0c
cmp eax, 0x14a9
jne 0x10018a26
mov esi, edx
or esi, 0x95dfc4be
jmp 0x10018a2c
lea esi, [ebx - 0x6a8903c5]
lea eax, [edx + 0x35735776]
mov edi, ecx
mov dword [ebp - 0xc], eax
mov dword [0x1003d588], eax
inc edi
cmp byte [edi + str.dargahebrew], cl
jne 0x10018a3c
cmp edi, 0x1bfa
jbe 0x10018a5e
mov eax, esi
or eax, 0x741ef938
mov dword [ebp - 0xc], eax
mov dword [0x1003d588], eax
jmp 0x10018a6c
mov edx, eax
or edx, 0xa905898b
mov dword [0x1003d468], edx
mov ebx, edx
mov esi, ecx
xor ebx, 0xc1d54d43
mov dword [ebp - 4], ebx
mov dword [0x1003d3f8], ebx
inc esi
cmp byte [esi + str.RW_HARDENED_MODE_PROPERTY], cl
jne 0x10018a7f
mov edi, dword [ebp - 0x10]
cmp edi, esi
jae 0x10018aad
cmp edi, 0x1e6d
jne 0x10018aa5
mov ebx, eax
xor ebx, 0x9ccebf6a
mov dword [0x1003d3f8], ebx
inc edi
cmp edi, esi
jb 0x10018a8f
mov dword [ebp - 4], ebx
mov esi, ecx
inc esi
cmp word [esi*2 + str.Error:_unable_to_open_file_for_writing], cx
jne 0x10018aaf
mov edi, dword [ebp - 0x10]
cmp edi, esi
jae 0x10018aeb
mov ebx, eax
xor ebx, 0xb492c175
mov dword [ebp - 4], ebx
mov dword [0x1003d3f8], ebx
cmp edi, 0x179
jne 0x10018ae6
or edx, 0x357a6ce4
mov dword [0x1003d468], edx
inc edi
cmp edi, esi
jb 0x10018ad2
mov eax, ebx
lea edi, [ebp - 0x70]
and eax, 0x79f8050f
mov esi, str.._AVSynchContext_passwdmgr_avast_com__
push 0x13
mov dword [ebp - 0x10], eax
mov eax, ecx
pop ecx
rep movsd dword es:[edi], dword [esi]
push 0x61
pop ecx
movsw word es:[edi], word [esi]
xor esi, esi
cmp cx, word [ebp - 0x70]
jne 0x10018b3a
mov ebx, esi
test cx, cx
je 0x10018b31
cmp word [ebp + eax - 0x70], si
je 0x10018b31
inc ebx
lea eax, [ebx + ebx]
movzx ecx, word [eax + str.anyChange]
cmp cx, word [ebp + eax - 0x70]
je 0x10018b13
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 4]
mov eax, dword [ebp - 8]
movzx ecx, byte [eax*2 + str.anyChange]
movzx eax, byte [ebp + eax*2 - 0x70]
sub ecx, eax
cmp ecx, 0x1457
jbe 0x10018b62
mov ecx, dword [ebp - 0x10]
mov eax, ecx
xor eax, 0x610da75e
mov dword [0x1003d588], eax
jmp 0x10018b6d
mov eax, dword [ebp - 0xc]
mov ecx, edx
xor ecx, 0xac98f48f
xor ecx, 0x133c476c
inc esi
cmp byte [esi + str.WeakGuardianProvider_failed], 0
jne 0x10018b6d
mov edx, dword [ebp - 0x10]
cmp edx, esi
jae 0x10018baa
cmp edx, 0xc67
jne 0x10018b9a
mov ebx, eax
or ebx, 0x3ebe4218
mov dword [0x1003d3f8], ebx
imul eax, ebx, 0x6bb03c8e
inc edx
cmp edx, esi
jb 0x10018b84
mov dword [0x1003d588], eax
or ecx, 0xc3fcee5a
push 0x10b7
mov dword [0x1003d4ec], ecx
call dword [sym.imp.USER32.dll_GetLastActivePopup]
imul eax, dword [0x1003d4ec], 0xcf838e19
lea edi, [ebp - 0x20]
mov ebx, dword [0x1003d468]
mov esi, str.maxTileWidth
xor edx, edx
and ebx, 0x9f60e1af
movsd dword es:[edi], dword [esi]
mov dword [0x1003d588], eax
mov eax, edx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
cmp byte [ebp - 0x20], 0x64
pop edi
pop esi
jne 0x10018c0d
mov cl, 0x64
test cl, cl
je 0x10018c0d
cmp byte [ebp + eax - 0x20], dl
je 0x10018c0d
mov cl, byte [eax + 0x100330c1]
inc eax
cmp cl, byte [ebp + eax - 0x20]
je 0x10018bf6
movzx ecx, byte [eax + str.dargahebrew]
movzx eax, byte [ebp + eax - 0x20]
sub ecx, eax
cmp ecx, 0x5a0
jne 0x10018c2b
or ebx, 0xf1ad3258
jmp 0x10018c3a
imul eax, dword [0x1003d588], 0x97125c15
mov dword [0x1003d588], eax
mov eax, ebx
xor eax, 0x739c4a0f
sub ebx, 0x632ea44d
mov dword [0x1003d3f8], eax
mov dword [0x1003d468], ebx
inc edx
cmp byte [edx + str.pj.ufig.ekatim], 0
jne 0x10018c52
cmp edx, 0x17de
jbe 0x10018c70
or ebx, 0x3abd8b71
mov dword [0x1003d588], ebx
mov ecx, eax
xor ecx, 0x419ca360
mov dword [0x1003d4ec], ecx
pop ebx
leave
ret