Function at 0x10029150
Capabilities:
Encode data using xor
Generate random numbers using the delphi lcg
Hash data with crc32

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x5b4
mov eax, dword [0x10048034]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
mov ebx, ecx
mov ecx, dword [ebp + 0xc]
cmp dword [ebx + 0x14], 0
push esi
push edi
mov dword [ebp - 0x5ac], ebx
mov dword [ebp - 0x5a0], ecx
je 0x10029198
mov eax, 0x40000
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1002f746
mov esp, ebp
pop ebp
ret 0x10
cmp byte [ebx + 0x2c], 0
je 0x100291b6
mov eax, 0x50000
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1002f746
mov esp, ebp
pop ebp
ret 0x10
xor edi, edi
cmp dword [ebx], edi
push eax
mov ecx, 0xc
lea eax, [ebp - 0x238]
cmovne edi, ecx
push 0x104
push eax
mov dword [ebp - 0x5a8], edi
call dword [sym.imp.MSVCR110.dll_wcscpy_s]
add esp, 0xc
cmp word [ebp - 0x238], 0
jne 0x10029200
mov eax, 0x10000
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1002f746
mov esp, ebp
pop ebp
ret 0x10
lea eax, [ebp - 0x238]
mov ecx, 0x2f
jmp 0x10029210
cmp word [eax], 0x5c
jne 0x10029219
mov word [eax], cx
add eax, 2
cmp word [eax], 0
jne 0x10029210
lea ecx, [ebp - 0x238]
mov esi, 8
call fcn.10028570
push dword [ebp - 0x5a0]
xor ecx, ecx
test al, al
cmovne esi, ecx
mov ecx, ebx
mov dword [ebp - 0x5b0], esi
call fcn.10028c20
test eax, eax
jne 0x10029829
push 0x10037b86
mov dword [ebp - 0x23c], eax
lea eax, [ebp - 0x560]
push 0x104
push eax
call dword [sym.imp.MSVCR110.dll_strcpy_s]
add esp, 0xc
lea eax, [ebp - 0x450]
push 0
push 0
push 0x104
push eax
push 0xffffffffffffffff
lea eax, [ebp - 0x238]
push eax
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
lea ecx, [ebp - 0x450]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100292a3
push 0x10037b86
lea eax, [ebp - 0x34c]
sub ecx, edx
push 0x104
push eax
mov dword [ebp - 0x580], ecx
call dword [sym.imp.MSVCR110.dll_strcpy_s]
xor eax, eax
mov word [ebp - 0x56e], ax
mov eax, dword [ebx + 0x68]
mov dword [ebp - 0x590], eax
add esp, 0xc
cmp dword [ebx], 0
mov eax, 8
mov dword [ebp - 0x454], 0
mov dword [ebp - 0x574], 0
mov dword [ebp - 0x248], 1
mov dword [ebp - 0x240], 0
mov dword [ebp - 0x598], 0x140b17
mov dword [ebp - 0x58c], 0
mov word [ebp - 0x594], ax
je 0x10029337
mov eax, 9
mov word [ebp - 0x594], ax
mov word [ebp - 0x56c], ax
mov word [ebp - 0x592], si
test esi, esi
jne 0x1002935a
mov eax, dword [ebx + 0x70]
test eax, eax
js 0x1002935a
add eax, edi
mov dword [ebp - 0x588], eax
jmp 0x10029364
mov dword [ebp - 0x588], 0
mov eax, dword [ebx + 0x70]
mov dword [ebp - 0x584], eax
xor eax, eax
mov word [ebp - 0x570], ax
mov eax, dword [ebx + 0x4c]
mov dword [ebp - 0x568], eax
mov eax, dword [ebx + 0x10]
add eax, dword [ebx + 0x18]
mov edx, dword [ebx + 0x5c]
mov dword [ebp - 0x564], eax
mov ecx, dword [ebx + 0x58]
mov esi, dword [ebx + 0x50]
lea eax, [ebp - 0x18]
mov dword [ebp - 0x45c], eax
lea eax, [ebp - 0x24]
mov dword [ebp - 0x458], eax
mov al, byte [ebx + 0x58]
mov byte [ebp - 0x13], al
mov eax, edx
shrd ecx, eax, 8
sar eax, 8
mov byte [ebp - 0x12], cl
mov ecx, dword [ebx + 0x58]
mov eax, edx
shrd ecx, eax, 0x10
sar eax, 0x10
mov eax, dword [ebx + 0x58]
shrd eax, edx, 0x18
mov dword [ebp - 0x5a0], eax
mov byte [ebp - 0x10], al
mov al, byte [ebx + 0x50]
mov byte [ebp - 0xf], al
mov byte [ebp - 0x11], cl
sar edx, 0x18
mov edx, dword [ebx + 0x54]
mov eax, edx
mov ecx, esi
shrd ecx, eax, 8
sar eax, 8
mov byte [ebp - 0xe], cl
mov eax, edx
mov ecx, esi
shrd ecx, eax, 0x10
sar eax, 0x10
mov eax, esi
mov esi, dword [ebx + 0x60]
shrd eax, edx, 0x18
mov byte [ebp - 0xc], al
mov al, byte [ebx + 0x60]
mov byte [ebp - 0xb], al
mov byte [ebp - 0xd], cl
sar edx, 0x18
mov edx, dword [ebx + 0x64]
mov eax, edx
mov ecx, esi
shrd ecx, eax, 8
sar eax, 8
mov byte [ebp - 0xa], cl
mov eax, edx
mov ecx, esi
shrd ecx, eax, 0x10
sar eax, 0x10
mov eax, esi
shrd eax, edx, 0x18
mov dword [ebp - 0x18], 0xd5455
mov byte [ebp - 0x14], 7
movq xmm0, qword [ebp - 0x18]
mov byte [ebp - 8], al
mov eax, dword [ebp - 0x5a0]
mov byte [ebp - 9], cl
movq qword [ebp - 0x24], xmm0
push ebx
lea ecx, [ebp - 0x598]
mov dword [ebp - 0x57c], 0x11
mov dword [ebp - 0x578], 9
sar edx, 0x18
mov byte [ebp - 0x1c], al
mov byte [ebp - 0x22], 5
call fcn.10027a00
add esp, 4
test eax, eax
je 0x100294a7
mov ecx, ebx
call fcn.10028f40
mov eax, 0x400
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1002f746
mov esp, ebp
pop ebp
ret 0x10
mov eax, dword [ebp - 0x57c]
add eax, 0x1e
add eax, dword [ebp - 0x580]
add dword [ebx + 0x18], eax
cmp dword [ebx + 0x14], 0
je 0x100294dc
mov ecx, ebx
call fcn.10028f40
mov eax, dword [ebx + 0x14]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1002f746
mov esp, ebp
pop ebp
ret 0x10
lea edi, [ebx + 0x30]
mov dword [ebx + 0x34], 0x23456789
mov dword [edi], 0x12345678
mov dword [ebx + 0x38], 0x34567890
mov esi, dword [ebx]
test esi, esi
je 0x10029510
lea esp, [esp]
mov dl, byte [esi]
test dl, dl
je 0x10029510
mov ecx, edi
call fcn.10028520
inc esi
jne 0x10029500
cmp byte [0x1004a80c], 0
jne 0x10029533
call dword [sym.imp.USER32.dll_GetDesktopWindow]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
xor esi, eax
push esi
call dword [sym.imp.MSVCR110.dll_srand]
add esp, 4
xor esi, esi
call dword [sym.imp.MSVCR110.dll_rand]
sar eax, 7
mov byte [ebp + esi - 0x30], al
inc esi
cmp esi, 0xc
jl 0x10029535
mov eax, dword [ebp - 0x590]
mov esi, dword [edi + 8]
mov ebx, dword [edi]
shr eax, 8
mov byte [ebp - 0x25], al
mov eax, dword [edi + 4]
xor ecx, ecx
mov dword [ebp - 0x5a0], ecx
mov dword [ebp - 0x5a4], eax
lea ebx, [ebx]
mov al, byte [ebp + ecx - 0x30]
movsx ecx, al
mov byte [ebp - 0x599], al
xor ecx, ebx
and ecx, 0xff
mov eax, ebx
mov ebx, dword [ecx*4 + 0x1003a610]
shr eax, 8
xor ebx, eax
movzx eax, bl
add eax, dword [ebp - 0x5a4]
mov ecx, dword [ebp - 0x5a0]
imul eax, eax, 0x8088405
inc eax
mov dword [edi + 4], eax
mov dword [ebp - 0x5a4], eax
shr eax, 0x18
xor eax, esi
and eax, 0xff
mov edx, esi
and edx, 0xfffd
or edx, 2
shr esi, 8
mov dword [edi], ebx
xor esi, dword [eax*4 + 0x1003a610]
mov eax, edx
xor eax, 1
imul eax, edx
shr eax, 8
xor al, byte [ebp - 0x599]
inc ecx
mov byte [ebp + ecx - 0x31], al
mov dword [edi + 8], esi
mov dword [ebp - 0x5a0], ecx
cmp ecx, 0xc
jl 0x10029570
mov ebx, dword [ebp - 0x5ac]
cmp dword [ebx], 0
je 0x10029617
push 0xc
lea eax, [ebp - 0x30]
push eax
mov ecx, ebx
call fcn.100289c0
add dword [ebx + 0x18], 0xc
mov esi, dword [ebp - 0x5b0]
xor eax, eax
xor edi, edi
cmp dword [ebx], eax
setne al
mov byte [ebx + 0x2d], al
cmp esi, 8
jne 0x1002963e
lea eax, [ebp - 0x598]
push eax
mov ecx, ebx
call fcn.10028fb0
jmp 0x10029649
test esi, esi
jne 0x1002964b
mov ecx, ebx
call fcn.100290e0
mov edi, eax
cmp byte [ebx + 0x80], 0
mov byte [ebx + 0x2d], 0
je 0x10029666
mov eax, dword [ebx + 0x7c]
test eax, eax
je 0x10029666
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebx + 0x90]
mov eax, dword [ebx + 0x14]
mov edx, dword [ebx + 0x74]
add dword [ebx + 0x18], ecx
mov dword [ebx + 0x7c], 0
mov dword [ebx + 0x70], edx
test eax, eax
jne 0x10029829
test edi, edi
jne 0x1002948f
add ecx, dword [ebp - 0x5a8]
mov eax, dword [ebx + 0x78]
cmp dword [ebp - 0x588], ecx
mov dword [ebp - 0x58c], eax
sete byte [ebp - 0x599]
cmp byte [ebx + 0x1c], 0
mov dword [ebp - 0x588], ecx
mov dword [ebp - 0x584], edx
je 0x1002973b
cmp dword [ebx], edi
jne 0x1002973b
mov ax, word [ebp - 0x594]
mov word [ebp - 0x592], si
test al, 1
jne 0x100296e2
mov ecx, 0xfff7
and ax, cx
mov word [ebp - 0x594], ax
mov word [ebp - 0x56c], ax
mov eax, dword [ebp - 0x564]
sub eax, dword [ebx + 0x10]
mov ecx, ebx
push eax
call fcn.10028b40
test al, al
je 0x10029723
push ebx
lea ecx, [ebp - 0x598]
call fcn.10027a00
add esp, 4
test eax, eax
jne 0x1002948f
push dword [ebx + 0x18]
mov ecx, ebx
call fcn.10028b40
test al, al
jne 0x10029792
mov eax, 0x2000000
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1002f746
mov esp, ebp
pop ebp
ret 0x10
cmp word [ebp - 0x592], si
je 0x1002975c
mov eax, 0x4000000
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1002f746
mov esp, ebp
pop ebp
ret 0x10
test esi, esi
jne 0x10029769
cmp byte [ebp - 0x599], 0
je 0x10029744
push ebx
lea ecx, [ebp - 0x598]
call fcn.10027cd0
add esp, 4
test eax, eax
jne 0x1002948f
mov ax, word [ebp - 0x56c]
add dword [ebx + 0x18], 0x10
mov word [ebp - 0x594], ax
mov eax, dword [ebx + 0x14]
test eax, eax
jne 0x10029829
push dword [ebp - 0x578]
call fcn.1002f4c2
add esp, 4
mov esi, eax
push dword [ebp - 0x578]
push dword [ebp - 0x458]
push esi
call sub.MSVCR110.dll_memcpy
add esp, 0xc
mov dword [ebp - 0x458], esi
push 0x360
call dword [sym.imp.MSVCR110.dll_void____cdecl_operator_new_unsigned_int_]
mov edx, eax
mov ecx, 0xd8
lea esi, [ebp - 0x598]
mov edi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebx + 0x44]
add esp, 4
test ecx, ecx
jne 0x100297f3
mov dword [ebx + 0x44], edx
jmp 0x10029827
cmp dword [ecx + 0x35c], 0
lea eax, [ecx + 0x35c]
je 0x10029821
jmp 0x10029810
mov ecx, dword [eax]
cmp dword [ecx + 0x35c], 0
lea eax, [ecx + 0x35c]
jne 0x10029810
mov dword [ecx + 0x35c], edx
xor eax, eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.1002f746
mov esp, ebp
pop ebp
ret 0x10