Function at 0xe97e2a
Capabilities:
Encode data using xor

Disassembly:
inc ecx
call fcn.00b4603f
inc ecx
mov eax, 0x6ab86510
inc ebp
movzx edx, al
dec ebx
lea esi, [eax + edx*4 - 0x6fde0768]
inc esi
mov eax, dword [ebp + edx*4 - 0x40]
inc edi
movzx ecx, word [edi + edx*2 - 0x20]
inc esp
movsx esi, si
dec ecx
lea eax, [esi + esi*8 - 0x79d0a6ea]
inc bp
xor ecx, esp
dec eax
cdq
inc cx
rol ecx, 1
inc cx
neg ecx
dec esp
lea ebp, [eax*4 + 0x68350701]
mov ecx, 0x2ab48626
inc cx
rol ecx, 1
inc sp
add ecx, edx
dec eax
xadd edx, esi
inc cx
ror ecx, 1
inc cx
or esi, esi
dec ecx
rol ebp, cl
inc bp
xor esp, ecx
jmp 0xc96840
or edx, 0xa0fbdb6
inc eax
ror eax, 1
bswap eax
xor ebx, eax
call fcn.011bc39d
sbb dx, dx
xor al, bl
sub al, 0xa6
add edx, 0xd914861e
rol al, 1
inc dx
sub al, 0x9e
xchg dword [esp + 4], edx
not al
push edx
or dx, dx
sbb al, 0xaf
or dword [esp + edx - 0x1fff0], edx
sal word [esp + edx - 0x1ffe9], 0xad
xor bl, al
xadd byte [esp + edx*8 - 0xfff7e], dh
push edx
neg dl
mov dword [esp + edx - 0x10104], ebp
mov byte [esp + edx*4 - 0x40435], dl
jbe 0xc57cc2
jmp 0xc95c41
lea edi, gs:[ecx + edi - 4]
bts edx, ecx
pop eax
cwde
or ecx, dword [edi + ecx*4]
btr dx, 0x38
inc eax
adc dx, ax
xor ecx, ebx
call fcn.00b529f3
invalid
invalid
inc ecx
add al, cl
pop edx
ja fcn.011a3bd5
mov ecx, 0x7a6948a
call fcn.00c0a4d7
call fcn.00b49b6a
jnp 0xc1cb23
jp 0xc1cc06
int1
bound edi, qword [esi - 0x30]
je 0xc1cb6a
jo 0xc1cb2f
mov ah, cl
stosb byte es:[edi], al
xlatb
sbb bl, byte [eax]
dec edx
popal
stosb byte es:[edi], al
xlatb
sbb al, byte [eax - 0x2e]
mov ecx, 0x1ad7aa
dec edx
jno fcn.00c1cb56
xlatb
sbb dl, byte [eax - 0x2704939e]
sbb bh, byte [edx + ecx*4 + 0x53]
add eax, 0x7ee8ed8b
test byte [edx + eax*8], bh
in eax, 0x7e
invalid
or byte es:[ebp - 0x51], bl
dec ecx
call 0x8cc27687
sbb eax, 0x94dbb16b
mov byte [0xd0bc3610], al
sbb dword [eax + 0x71], ecx
xor byte [eax - 0x7b17631d], 0xf3
movsb byte es:[edi], byte [esi]
cmp dword [ecx - 0x41ea8242], edx
invalid
cmpsb byte [esi], byte es:[edi]
pop esi
loop 0xc1cbc7
mov esi, 0x1a00b0c
aam 0x78
mov fs, word [ebx + 1]
push 4
add dh, byte [esp + ebx*2 + 0x21d412eb]
dec esi
pushfd
adc dl, ah
and dword [esi - 0x64], ecx
add dword [eax + ebp - 0x69], esp
scasb al, byte es:[edi]
sub dh, 0xba
rcr byte [edi], cl
leave
fdiv qword [eax]
in eax, 0xed
jg 0xc1cc1a
invalid
bswap edx
mov dword [esp + edx - 0x100100f8], edi
sub dx, word [esp + edx*4 - 0x400403fc]
shl word [esp + edx*4 - 0x4004043d], 0x2c
mov dword [esp + edx - 0x1001010c], ebx
lea ebp, [edx + edx*8 + 0x5a1dabba]
btc bp, 0x86
mov ebp, esi
pop edx
mov ebx, eax
lea eax, [edx + edx*4 + 0x623a170e]
jb 0xbfa4d3
mov dword [ebp + ecx - 0x584de72b], eax
or cl, byte [esp + ecx - 0x584de72f]
lea eax, [ecx*4 - 0x5ce161f8]
lea esi, [esi + eax*2 - 0x8ac758c]
movzx edx, cx
mov eax, dword [esi + ecx - 0x584de72f]
imul ecx, dword [esp + ecx - 0x584de72f]
lea ecx, [edx + 0x2192953a]
xor eax, ebx
lea edx, [edx + 0x59a7d0b5]
ror byte [esp + ecx*2 - 0x4326f8d0], 0xa1
jb 0x117f595
or byte [edx + 0x78], 0x52
add byte [ecx - 0x5d], bl
inc esp
jae 0xc57d51
pop ecx
mov dword [0x3e017344], eax
test dword ds:[ecx], 0x6fa80a88
test dword [ecx], 0x6fa80a88
cli
mov cl, 0xd0
or ch, byte [eax - 0x53babc91]
or ch, byte [eax - 0x7b028c91]
or ch, byte [eax + 0x4dfabb6f]
dec eax
mov dh, 0x1e
mov edi, dword [0x17c39272]
mov byte [0xa3d6576], al
sbb dword [esi], esi
sbb eax, 0x6d27758c
les edi, [0x63b5cfce]
inc esp
inc ebp
cmp ecx, esp
dec ebx
jnp 0xc57d57
ja 0xc57d46
salc
push ds
sti
sar byte [esi - 0xbce2da], cl
aaa
mov ebp, 0xff27f0be
aaa
mov ebp, 0xff2b846e
aaa
mov ebp, 0x46835ec2
or dword [esi - 0x75], esp
mov ax, word [esi + ecx*2 - 0x7b0f7d5e]
push ecx
lea esi, [esi + ecx*2 - 0x7b0f7d5c]
mov dword [esp + ecx - 0x3d87beab], ecx
shr dword [esp + ecx*2 - 0x7b0f7d5a], cl
xor cl, 5
movzx ecx, byte [ecx + ebp - 0x3d87beaa]
mov edx, dword [esp + 4]
adc dword [esp + edx - 0x7b0c], edx
shl edx, 0x81
lea ebp, [ebp + edx - 0xf61d]
xor cl, bl
xor word [esp + edx - 0xf61d], 0x732b
pop edx
dec dword [esp]
inc cl
neg dx
lea edx, [edx + edx*8 - 0x15ffcf76]
xor edx, 0xf3ccb2b
rol cl, 1
dec cl
not cl
add cl, 7
push edx
sub dx, 0x7e2d
rol cl, 1
add word [esp + 5], 0x788a
sar word [esp + 3], 0xe4
adc cl, 0xa4
xchg word [esp], dx
rol cl, 1
bts edx, edx
xor bl, cl
pop edx
add dword [esp], 0xca97fe0b
sal word [esp + 1], 0xae
lea ecx, [esp + ecx + 4]
rol dx, 0x8a
mov byte [ecx], al
pop eax
mov ecx, dword [ebp]
adc ebp, 4
xor ecx, ebx
xor edx, edx
shl edx, 0xd5
jp 0x11bc0b7
dec esp
push esi
xor dword [esi + 0x78181db0], 0x1eef1bc5
add al, 0x5c
cmc
sbb ebp, edi
push ds
xor al, 0xc
lea ebx, [ebx]
out dx, eax
push ds
int3
mov ebx, dword [ebx*4 + 0xb4c5bc]
push 0xd9b0358d
push 0x661286b7
shr edx, 8
shr byte [esp + 1], 7
xor edx, ebx
jmp 0x11830bf
rol esi, 0xbf
inc ecx
dec dl
dec esp
add ecx, esp
dec dx
inc edi
mov dword [ecx + edx - 0xf], eax
inc ebp
movsx ebx, dl
cdq
inc ebx
mov edi, dword [esi + edi - 0x5de6]
inc ebp
add dh, ch
inc ecx
not dl
inc ecx
xor edi, esp
sub edi, esi
dec eax
xor esi, 0x1f2d8305
bswap edi
inc ebp
mov ecx, ebx
neg dx
bts eax, esi
xor edi, 0x5031e80f
dec dx
inc ebp
mov eax, edx
ror edi, 1
inc ecx
push esp
inc ecx
mul bl
inc edx
xor dword [esp + edx*2 - 0x1e0], edi
inc ecx
pop esp
dec esp
bt ecx, eax
dec eax
arpl di, di
jb 0xeb31af
dec eax
cdq
dec eax
adc ebx, edi
inc ecx
xchg dh, cl
inc di
mov ebx, dword [edi + esi*2 - 0xba46]
dec edi
lea edi, [edx + edi - 0xe8]
inc bp
xor ebx, esp
dec ecx
inc ebp
inc cx
not ebx
cmovge ecx, eax
inc ecx
not dl
inc ecx
not cl
inc cx
neg ebx
dec ecx
lea edi, [ecx + ecx*4 + 0x3e17e11d]
inc ecx
idiv cl
inc cx
add ebx, 0x48e88319
jbe 0xc9690e
add byte [ecx - 1], cl
mov byte [ecx - 0xa], 0xdd
inc ecx
pop esp
dec ebp
arpl dx, dx
adc esi, 0xac82d5a0
dec ecx
add ebx, edx
inc cx
shr eax, cl
inc esp
adc ebp, esi
inc cx
dec ebp
dec ecx
mov esi, dword [edi + edi*8]
dec ebp
lea edi, [edi + ecx*2 + 2]
xadd eax, edi
dec esp
dec dword [ebp - 0x73]
jl 0xc96962
add cl, byte [edi]
sar eax, 0x4c
sbb ecx, edi
inc ebp
movsx edx, dh
dec ecx
xor esi, esp
inc ecx
sal dl, 0xe5
sar edi, 0x81
inc esp
sub esi, eax
dec eax
rol esi, 4
dec eax
dec esi
dec ebp
imul ebp, edx
dec eax
bswap esi
add eax, edi
setne cl
dec eax
lea esi, [esi + edi*4 + 0x4d532afd]
inc esp
or cl, bh
dec esp
xor esp, esi
inc ecx
idiv bl
inc cx
sar edx, 0xeb
dec edx
lea edx, [ebx*8 - 0x28c4c65c]
dec eax
lea ebp, [edi + ebp - 0x4d86]
sbb eax, edi
jno 0x1194790
invalid
mov ebx, 0xba98d093
movzx ebx, byte [ecx]
xor ebx, edx
and ebx, 0xff
jmp 0xc11c19
lea ebp, [edx + ebp - 0x1dfafd01]
mov dword [esp + edx*4 - 0x77ebf400], edx
or edx, edx
movzx eax, byte [ebp + edx - 0x1dfafd00]
ja 0xc11bc8
div cl
pop ecx
pop eax
jmp fcn.00c09751
inc ecx
movzx edi, byte [edi + edx - 0x7be2c988]
call fcn.0116cfa9
inc edi
mov ebp, dword [edi + eax - 0x55b8dcc8]
dec ebp
lea edi, [edi + ecx*4 - 0x1e264]
movsx edi, si
inc ecx
mov edx, edx
inc ebp
xor ebp, esp
inc ecx
dec ebp
cwde
inc ecx
imul al
inc ecx
bswap ebp
dec eax
shl ecx, cl
dec esp
lea ecx, [ecx + 0x7fa32702]
inc ecx
ror ebp, 2
inc ecx
bts eax, edx
dec cl
inc edi
lea ebp, [eax + ebp - 0x7ce1fff3]
inc ecx
push eax
inc cx
sal ebx, 6
dec esp
mov dword [esp + eax*2 - 0x2ca0], esp
dec eax
xchg edi, eax
neg cl
inc esi
xor dword [esp + eax - 0x55b8dcc9], ebp
inc ecx
shr bl, cl
cwde
inc ecx
pop esp
dec eax
div esi
dec ebp
arpl bp, bp
dec eax
div ecx
dec ecx
add ebx, ebp
jmp 0x1178f88
xor edx, 0xc28a3087
sub word [esp + 2], 0xf32c
dec eax
lea esp, [esp + 8]
jne 0xe87fd1
mov ecx, 0x6c19d836
neg cx
pop ebx
call fcn.00e77d1f
xor ecx, ecx
dec dword [esp + 2]
call fcn.00e7a0fe
inc ecx
rol ecx, 0x4d
dec esi
mov ebx, dword [ebp + eax - 0x55b8dcc1]
inc dx
mul cl
inc ecx
mov cl, byte [eax + ebp - 0x55b8dcb9]
cbw
inc ebp
movsx esi, cx
dec ecx
sal ebx, cl
dec esp
mov dword [ebp + esi - 0x59017890], ebx
dec eax
lea ebp, [esi + ebp - 0x59017890]
movsx ecx, si
inc bp
sub ecx, esi
inc esi
jmp ebx
xor eax, 0x6c9ee404
dec dx
ror eax, 3
xadd byte [esp + ecx - 0x21937c67], cl
jno 0xb97ff3
jmp 0xedf990
inc ecx
jmp 0xed9b76
push eax
dec eax
mov dword [ebp + edi - 0x4d7e], esi
sub word [esp + edi*2 - 0x9afb], 0x9f09
jns 0xc1cb71
add byte [ecx + 0x60], ch
jnp 0x11947f1
fld dword [edx - 0x23]
dec esp
sbb ebp, dword [ebx + 0x438c3f61]
sbb ecx, dword [edi]
in eax, 0x95
or dword [edx], 0x79dfc177
and eax, 0x9e0e8a9e
jns 0x11947e8
sahf
mov cl, byte [esi]
sahf
mov ch, 0x5f
and dh, byte fs:[ebx - 0x2b80c21c]
and dh, byte [ebx - 0x48c0321c]
arpl word [edx - 0x1879171c], sp
lahf
pop edx
jne 0x1194823
jmp 0x119484d
sbb dword [edi + edi*4 - 1], edi
invalid
sbb edi, edi
mov edi, 0xffd03560
adc al, byte [esi + edi*2]
sub byte [ebp - 0x723bffc], dh
mov ecx, 0xbec00028
xor ebp, dword [edi]
pop ebp
sbb bl, bh
jl 0x11947f1
je 0x11947c1
xor eax, dword [ecx + 0x14]
dec eax
cmpsb byte [esi], byte es:[edi]
add byte [eax], al
add byte [eax], al
add byte [edi + 0x19], dl
push 0x7ce543ca
push cs
ret
test al, 0x77
invalid
rcl byte ds:[eax], cl
int 0xbe
imul ebx, dword [esi], 0x8c1adda0
invalid
not ecx
adc eax, 0xe62ba206
bswap ecx
inc edx
imul edx, edx
btc edx, eax
rol ecx, 1
bswap ecx
inc edx
inc edx
jne 0xb595b9