Function at 0x29a5b80
Capabilities:
Encode data using xor

Disassembly:
add byte [eax], al
add byte [eax], al
add byte [ebx - 0x74f7dbbc], cl
dec esp
and al, 8
mov eax, dword [esp + 8]
mov ecx, dword [esp + 8]
movzx ecx, byte [esp + ecx + 0x30]
lea edx, [eax + 0x76]
and edx, ecx
add eax, ecx
add edx, edx
sub eax, edx
add eax, 0x6eb5f176
mov dword [esp + 4], eax
mov eax, dword [esp + 4]
add al, 0xc6
mov ecx, dword [esp + 8]
dec esp
and al, 8
dec esp
and al, 8
mov byte [esp + ecx + 0x30], al
inc dword [esp + 8]
mov eax, dword [esp + 8]
cmp eax, 0xa
jb 0x29a0990
mov ecx, dword [0x29ca800]
test ecx, ecx
je 0x29a0a20
mov edx, dword [esp + 0x30]
xor esi, esi
mov eax, dword [0x29ca804]
nop word cs:[eax + eax]
cmp dword [eax + esi*8], 0x11081610
je 0x29a0a00
inc esi
cmp ecx, esi
jne 0x29a09f0
jmp 0x29a0a20
mov eax, dword [eax + esi*8 + 4]
cmp eax, edx
je 0x29a0a20
push dword [esp + 0x18]
push 1
push dword [0x29ca808]
push eax
call fcn.029b7d60
add esp, 0x10
nop dword [eax]
jmp dword [0x29c4548]
add bh, byte [ecx - 1]
cmovns ecx, eax
push ecx
call fcn.02989550
inc dword [ebx - 0x3876fb3c]
enter 0xffffffffffffe851, 0xffffffffffffffb7
mov bh, dh
inc dword [ebx - 0x3876fb3c]
mov dword [esp + 0x1c], esi
lea eax, [esp + 0x1c]
push eax
push edi
push ebx
push dword [esp + 0x1c]
call fcn.029bb640
add dword [eax], eax
add dword [eax], eax
add esp, 0x10
jmp dword [0x29c4518]
jmp dword [eax*4 + 0x29c4520]
test dword [eax], esp
inc ebp
pushfd
add bh, bh
and eax, 0x29c4548
push edi
call fcn.02989560
add esp, 4
mov eax, dword [0x29c455c]
nop dword [eax + eax]
inc esp
add byte [eax], al
inc esp
add byte [eax], al
jmp eax
or al, 0x66
mov dword [edi], 0x7c2b0000
and al, 0x14
sar edi, 1
lea ebx, [esp + 0xe4]
mov eax, dword [esp + 0x10]
mov dword [esp + 0x58], 0x40414e4f
mov word [ebx - 0x84], 0
mov dword [ebx - 0x88], 0
mov dword [esp + 4], 0
mov ecx, dword [esp + 4]
cmp ecx, 9
ja 0x29a0b8e
nop word cs:[eax + eax]
add byte [eax], al
add byte [eax], al
add byte [ebx - 0x74fbdbb4], cl
push esp
and al, 4
mov ecx, dword [esp + 4]
mov edx, dword [esp + 4]
movzx edx, byte [esp + edx + 0x58]
pop eax
lea esi, [ecx + 0x76]
and esi, edx
add ecx, edx
add esi, esi
sub ecx, esi
add ecx, 0x6eb5f176
mov dword [esp + 0x30], ecx
and al, 0x30
and al, 0x30
mov ecx, dword [esp + 0x30]
add cl, 0xc6
mov edx, dword [esp + 4]
and al, 4
and al, 4
mov byte [esp + edx + 0x58], cl
inc dword [esp + 4]
mov ecx, dword [esp + 4]
cmp ecx, 0xa
jb 0x29a0b50
mov ecx, dword [0x29ca800]
test ecx, ecx
je 0x29a0be0
mov edx, dword [esp + 0x58]
xor esi, esi
mov ebx, dword [0x29ca804]
nop word cs:[eax + eax]
cmp dword [ebx + esi*8], 0x11081610
je 0x29a0bc0
pop es
pop es
inc esi
cmp ecx, esi
jne 0x29a0bb0
jmp 0x29a0be0
mov ecx, dword [ebx + esi*8 + 4]
cmp ecx, edx
je 0x29a0be0
push eax
push 1
push dword [0x29ca808]
push ecx
call fcn.029b7d60
add esp, 0x10
nop word [eax + eax]
lea eax, [esp + 0x58]
push eax
call fcn.029ba9b0
add esp, 4
movzx eax, al
jmp dword [eax*4 + 0x29c4560]
mov byte [edi], cl
mov esi, 1
add edx, 2
add edi, esi
cmp edi, dword [esp + 0x50]
mov esi, dword [esp + 0x18]
jae 0x29a0dc6
mov eax, dword [esp + 0xc]
test eax, eax
je 0x29a0d3a
cmp edx, eax
jae 0x29a0dc6
movzx ecx, word [edx]
test cx, cx
je 0x29a0dc6
cmp cx, 0x7f
jbe 0x29a0d10
mov eax, edi
not eax
add eax, esi
cmp eax, 2
jb 0x29a0d80
movzx esi, cx
cmp esi, 0x7ff
ja 0x29a0d80
mov eax, ecx
shr eax, 6
add al, 0xc0
mov byte [edi], al
mov eax, ecx
not eax
or eax, 0x3f
add eax, ecx
add al, 0x81
mov byte [edi + 1], al
mov esi, 2
add bl, ch
xchg edi, eax
add bl, ch
xchg edi, eax
xor esi, esi
cmp eax, 3
jb 0x29a0d17
movzx esi, cx
mov eax, esi
shr eax, 0xc
or al, 0xe0
mov byte [edi], al
mov eax, esi
invalid
shr eax, 6
and al, 0x3f
or al, 0x80
mov byte [edi + 1], al
add dword [eax - 0x367fc01f], eax
or byte [eax + 0x3be024f], 0
add byte [eax], al
invalid
add dword [eax - 0x367fc01f], eax
or byte [eax + 0x3be024f], 0
add byte [eax], al
jmp 0x29a0d17
mov byte [edi], 0
movsd xmm0, qword [0x29be9f0]
movsd qword [esp + 0x58], xmm0
mov dword [esp + 0x60], 0xafb291d6
mov byte [esp + 0x64], 0x38
mov dword [esp + 0x69], 0
mov dword [esp + 0x65], 0
mov dword [esp + 4], 0
mov eax, dword [esp + 4]
cmp eax, 0x14
ja 0x29a0e5b
nop word cs:[eax + eax]
mov eax, dword [esp + 4]
mov ecx, dword [esp + 4]
movzx ecx, byte [esp + ecx + 0x58]
lea edx, [eax + 0x5a5ad656]
add eax, 0x56
or eax, edx
and eax, ecx
or edx, ecx
sub edx, eax
mov dword [esp + 0x30], edx
mov eax, dword [esp + 0x30]
mov ecx, eax
xor ecx, 0xa5
and eax, 0x25
lea eax, [ecx + eax*2]
inc al
mov ecx, dword [esp + 4]
mov byte [esp + ecx + 0x58], al
inc dword [esp + 4]
mov eax, dword [esp + 4]
cmp eax, 0x15
jb 0x29a0e10
lea eax, [esp + 0x58]
mov ecx, dword [ebp + 8]
push ebx
mov esi, dword [esp + 0x28]
push esi
push eax
call fcn.02989e60
mov ebx, eax
mov edi, dword [esp + 0x14]
adc al, 0xff
and eax, 0x29c45b8
adc al, 0xff
and eax, 0x29c45b8
push esi
call fcn.02989560
add esp, 4
push edi
call fcn.029b5f10
add esp, 4
mov eax, ebx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
int3
adc al, 0
add byte [eax], al
add bh, al
inc esp
and al, 0x18
dec edi
dec esi
inc ecx
inc eax
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
and al, 4
and al, 0x18
adc byte [ecx], bh
iretd
add byte [eax], al
add byte [eax], al
xchg edx, eax
ret 0xf283
add byte [eax], al
add byte [ebx - 0x74f3dbbc], cl
dec esp
and al, 0xc
dec esp
or al, 0x60
enter 0x4e05, 0x43
and eax, 0xf7c189c7
shl dword [ecx], 1
sal edi, 1
shl byte [ecx], cl
ret 0xca29
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xc]
movzx edx, byte [esp + ecx + 0x60]
mov ecx, 0xaeeb565e
sub ecx, eax
add eax, 0xa1
and eax, edx
or ecx, edx
not ecx
add ecx, edx
sub ecx, eax
mov dword [esp + 0x30], ecx
mov eax, dword [esp + 0x30]
mov ecx, eax
or ecx, 0x98
and eax, 0x98
add eax, ecx
inc al
mov ecx, dword [esp + 0xc]
mov byte [esp + ecx + 0x60], al
inc dword [esp + 0xc]
mov eax, dword [esp + 0xc]
cmp eax, 0x35
jb 0x29a14b0
lea eax, [esp + 0xc]
lea ecx, [esp + 0x48]
push 0
push 0x2b
push ebx
push eax
call fcn.029b6800
mov edi, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
xor eax, eax
sar byte [ecx], 0xcf
sar byte [ecx], 0xcf
sete al
xor edx, edx
jmp dword [eax*4 + 0x29c45d0]
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0xb10
mov esi, esp
push 0x1000
call fcn.02989550
add esp, 4
mov dword [esi + 0x88], eax
movsd xmm0, qword [0x29beca0]
movsd qword [esi + 0x900], xmm0
mov word [esi + 0x908], 0x59be
mov dword [esi + 0x90e], 0
mov dword [esi + 0x90a], 0
mov word [esi + 0x912], 0
mov dword [esi + 0x5f8], 0
mov eax, dword [esi + 0x5f8]
cmp eax, 0x13
ja 0x29a5c40
nop
mov eax, dword [esi + 0x5f8]
mov ecx, dword [esi + 0x5f8]
movzx ecx, byte [esi + ecx + 0x900]
lea edx, [eax + 0x33]
and edx, ecx
add eax, ecx
add edx, edx
sub eax, edx
add eax, 0xebdced33
mov dword [esi + 0x200], eax
mov eax, dword [esi + 0x200]
add al, 0x9b
mov ecx, dword [esi + 0x5f8]
mov byte [esi + ecx + 0x900], al
inc dword [esi + 0x5f8]
mov eax, dword [esi + 0x5f8]
cmp eax, 0x14
jb 0x29a5bf0
mov eax, dword [0x29c0434]
mov dword [esi], eax
movaps xmm0, xmmword [0x29becb0]
movups xmmword [esi + 0x5f8], xmm0
mov word [esi + 0x608], 0xdd22
mov byte [esi + 0x60a], 0xe2
mov dword [esi + 0x60b], 0
mov dword [esi + 0x60e], 0
mov dword [esi + 0x7fc], 0
mov ecx, dword [esi + 0x7fc]
cmp ecx, 0x19
ja 0x29a5d03
nop
mov ecx, dword [esi + 0x7fc]
lea edx, [ecx - 0x5de5af62]
lea edi, [ecx + 0x9e]
mov ebx, edx
and ebx, edi
xor edx, edi
mov edi, dword [esi + 0x7fc]
movzx edi, byte [esi + edi + 0x5f8]
and ebx, edi
and edx, edi
add ecx, edi
add ecx, 0xa21a509e
lea edx, [edx + ebx*2]
sub ecx, edx
mov dword [esi + 0x200], ecx
mov ecx, dword [esi + 0x200]
mov edx, ecx
or edx, 0xad
and ecx, 0xad
add ecx, edx
inc cl
mov edx, dword [esi + 0x7fc]
mov byte [esi + edx + 0x5f8], cl
inc dword [esi + 0x7fc]
mov ecx, dword [esi + 0x7fc]
cmp ecx, 0x1a
jb 0x29a5c90
mov ecx, dword [0x29c0430]
movaps xmm0, xmmword [0x29becc0]
movups xmmword [esi + 0x200], xmm0
movaps xmm0, xmmword [0x29becd0]
movups xmmword [esi + 0x210], xmm0
movaps xmm0, xmmword [0x29bece0]
movups xmmword [esi + 0x220], xmm0
movaps xmm0, xmmword [0x29becf0]
movups xmmword [esi + 0x230], xmm0
mov dword [esi + 0x240], 0
mov byte [esi + 0x244], 0
mov dword [esi + 0xf0], 0
mov edx, dword [esi + 0xf0]
cmp edx, 0x44
ja 0x29a5dcc
nop word [eax + eax]
mov edx, dword [esi + 0xf0]
mov edi, dword [esi + 0xf0]
movzx edi, byte [esi + edi + 0x200]
lea ebx, [edx - 0x42259958]
lea eax, [edx + 0xa8]
and eax, edi
and ebx, eax
add edx, edi
add edx, 0xbdda66a8
add ebx, eax
sub edx, ebx
mov dword [esi + 0x7fc], edx
mov eax, dword [esi + 0x7fc]
add al, 0x68
mov edx, dword [esi + 0xf0]
mov byte [esi + edx + 0x200], al
inc dword [esi + 0xf0]
mov eax, dword [esi + 0xf0]
cmp eax, 0x45
jb 0x29a5d70
movzx edx, byte [esi + 0x200]
mov eax, dword [esi + 0x88]
mov ebx, eax
test dl, dl
je 0x29a5dfb
lea edi, [esi + 0x201]
mov ebx, eax
nop word [eax + eax]
mov byte [ebx], dl
inc ebx
movzx edx, byte [edi]
inc edi
test dl, dl
jne 0x29a5df0
mov byte [ebx], 0
movzx edx, byte [ecx]
test dl, dl
je 0x29a5e1d
inc ecx
mov eax, dword [esi]
nop dword [eax + eax]
mov byte [ebx], dl
inc ebx
movzx edx, byte [ecx]
inc ecx
test dl, dl
jne 0x29a5e10
jmp 0x29a5e1f
mov eax, dword [esi]
mov byte [ebx], 0
movzx ecx, byte [esi + 0x5f8]
test cl, cl
je 0x29a5e4b
lea edx, [esi + 0x5f9]
nop word cs:[eax + eax]
mov byte [ebx], cl
inc ebx
movzx ecx, byte [edx]
inc edx
test cl, cl
jne 0x29a5e40
mov byte [ebx], 0
movzx ecx, byte [eax]
test cl, cl
je 0x29a5e6b
inc eax
nop word cs:[eax + eax]
mov byte [ebx], cl
inc ebx
movzx ecx, byte [eax]
inc eax
test cl, cl
jne 0x29a5e60
mov byte [ebx], 0
movzx eax, byte [esi + 0x900]
test al, al
je 0x29a5e8b
lea ecx, [esi + 0x901]
nop
mov byte [ebx], al
inc ebx
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x29a5e80
mov byte [ebx], 0
push 0
call fcn.029b9e70
add esp, 4
xor ecx, ecx
test eax, eax
setne cl
mov edx, dword [ecx*4 + 0x29c53b4]
mov ecx, 0xacef29bd
xor ecx, dword [case.0x29a5eb4.2]
add ecx, edx
inc ecx
jmp ecx