Function at 0x10028cc0
Capabilities:
Encode data using xor

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10069415
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x60
mov eax, dword [0x1007e040]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
cmp byte [edi + 0x20], 0
mov ecx, 0xe10
je 0x1002908d
mov esi, dword [edi + 0x24]
test esi, esi
jle 0x10028d1c
dec esi
mov dword [edi + 0x24], esi
test esi, esi
js 0x1002907c
mov eax, esi
mov dword [ebp - 0x1c], 0
cdq
xorps xmm0, xmm0
idiv ecx
mov eax, 0x88888889
mov dword [ebp - 0x18], 0xf
mov ecx, edx
imul ecx
movups xmmword [ebp - 0x2c], xmm0
mov eax, esi
mov esi, 0x3c
add edx, ecx
mov byte [ebp - 0x2c], 0
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
cdq
idiv esi
mov dword [ebp - 4], 0
push edx
push ecx
cmp ecx, 0xa
jae 0x10028ea4
cmp edx, 0xa
jae 0x10028e42
mov al, 0x59
mov byte [ebp - 0x38], 0x69
mov ch, al
mov byte [ebp - 0x30], 0
xor al, byte [ebp - 0x38]
mov cl, 0x4c
mov dl, 0xd
mov byte [ebp - 0x37], al
mov al, byte [ebp - 0x38]
mov dh, cl
xor cl, al
mov byte [ebp - 0x39], dl
xor dl, al
mov byte [ebp - 0x36], cl
xor ch, al
mov byte [ebp - 0x35], dl
xor dh, al
mov byte [ebp - 0x33], ch
mov ah, 0x53
mov byte [ebp - 0x32], dh
xor ah, al
mov byte [ebp - 0x30], 0
mov al, byte [ebp - 0x39]
lea ecx, [ebp - 0x37]
xor al, byte [ebp - 0x38]
lea esi, [ecx + 1]
sub esp, 0x18
mov byte [ebp - 0x34], ah
mov edx, esp
mov byte [ebp - 0x31], al
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10028de0
sub ecx, esi
lea eax, [ebp - 0x37]
push ecx
push eax
mov ecx, edx
call fcn.10005220
lea eax, [ebp - 0x58]
push eax
call fcn.10004db0
add esp, 0x24
lea ecx, [ebp - 0x2c]
push eax
call fcn.1000dbd0
mov ecx, dword [ebp - 0x44]
cmp ecx, 0xf
jbe 0x10028f6e
mov edx, dword [ebp - 0x58]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10028f64
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10028f64
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
mov byte [ebp - 0x38], 0x15
mov al, 0x25
xor al, byte [ebp - 0x38]
mov cl, 0x30
mov dl, 0x71
mov byte [ebp - 0x37], al
mov al, byte [ebp - 0x38]
mov ch, cl
mov dh, dl
mov byte [ebp - 0x31], 0
mov ah, 0x2f
mov byte [ebp - 0x31], 0
xor cl, al
xor dl, al
xor ch, al
mov byte [ebp - 0x35], dl
xor dh, al
mov byte [ebp - 0x36], cl
xor ah, al
mov byte [ebp - 0x32], dh
sub esp, 0x18
mov byte [ebp - 0x33], ch
mov edx, esp
mov byte [ebp - 0x34], ah
lea ecx, [ebp - 0x37]
lea esi, [ecx + 1]
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10028e98
jmp 0x10028de7
cmp edx, 0xa
jae 0x10028f0c
mov al, 0x6d
mov byte [ebp - 0x38], 0x48
mov ch, al
mov byte [ebp - 0x31], 0
xor al, byte [ebp - 0x38]
mov cl, 0x2c
mov dh, cl
mov byte [ebp - 0x37], al
mov al, byte [ebp - 0x38]
mov dl, 0x72
mov ah, 0x78
mov byte [ebp - 0x31], 0
xor cl, al
xor dl, al
xor ch, al
mov byte [ebp - 0x35], dl
xor dh, al
mov byte [ebp - 0x36], cl
xor ah, al
mov byte [ebp - 0x32], dh
sub esp, 0x18
mov byte [ebp - 0x33], ch
mov edx, esp
mov byte [ebp - 0x34], ah
lea ecx, [ebp - 0x37]
lea esi, [ecx + 1]
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10028f00
jmp 0x10028de7
mov dh, 0xf
mov byte [ebp - 0x32], 0
mov cl, 0x6b
mov byte [ebp - 0x38], dh
mov al, 0x2a
mov byte [ebp - 0x32], 0
mov ch, cl
mov dl, 0x35
mov ah, al
xor cl, dh
xor ch, dh
mov byte [ebp - 0x36], cl
xor al, dh
mov byte [ebp - 0x33], ch
xor dl, dh
mov byte [ebp - 0x37], al
xor ah, dh
mov byte [ebp - 0x35], dl
sub esp, 0x18
mov byte [ebp - 0x34], ah
mov edx, esp
lea ecx, [ebp - 0x37]
lea esi, [ecx + 1]
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10028f58
jmp 0x10028de7
push ecx
push edx
call fcn.100662c0
add esp, 8
cmp dword [ebp - 0x18], 0xf
lea eax, [ebp - 0x2c]
movaps xmm0, xmmword [0x10077810]
cmova eax, dword [ebp - 0x2c]
xor ecx, ecx
push eax
movups xmmword [ebp - 0x58], xmm0
mov dword [ebp - 0x48], 0x32d7b05
mov byte [ebp - 0x44], 0
mov al, byte [ebp - 0x58]
xor byte [ebp + ecx - 0x57], al
inc ecx
cmp ecx, 0x13
jb 0x10028f92
sub esp, 0x18
mov byte [ebp - 0x44], 0
mov edx, esp
lea ecx, [ebp - 0x57]
xorps xmm0, xmm0
lea esi, [ecx + 1]
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10028fc2
sub ecx, esi
lea eax, [ebp - 0x57]
push ecx
push eax
mov ecx, edx
call fcn.10005220
lea eax, [ebp - 0x70]
push eax
call fcn.10004db0
add esp, 0x20
mov dword [ebp - 0x40], eax
mov byte [ebp - 4], 1
mov esi, dword [edi + 8]
test esi, esi
je 0x10029009
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10029009
push dword [ebp - 0x40]
mov ecx, esi
call dword [0x10075274]
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x5c]
cmp ecx, 0xf
jbe 0x10029041
mov edx, dword [ebp - 0x70]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10029037
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10028e3c
push ecx
push edx
call fcn.100662c0
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x18]
cmp ecx, 0xf
jbe 0x1002907c
mov edx, dword [ebp - 0x2c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10029072
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10028e3c
push ecx
push edx
call fcn.100662c0
add esp, 8
cmp dword [edi + 0x24], 0
jg 0x1002908d
mov byte [edi + 0x20], 0
mov dword [edi + 0x24], 0
cmp byte [edi + 0x21], 0
je 0x100292f4
movzx eax, word [edi + 0x28]
mov ecx, eax
test ax, ax
jle 0x100290aa
dec eax
mov word [edi + 0x28], ax
movzx ecx, ax
test cx, cx
js 0x100292e3
movsx esi, cx
xorps xmm0, xmm0
mov eax, esi
mov dword [ebp - 0x1c], 0
cdq
mov ecx, 0xe10
idiv ecx
mov eax, 0x88888889
mov dword [ebp - 0x18], 0xf
mov ecx, edx
imul ecx
movups xmmword [ebp - 0x2c], xmm0
mov eax, esi
mov esi, 0x3c
add edx, ecx
mov byte [ebp - 0x2c], 0
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
cdq
idiv esi
movzx ecx, cx
movzx eax, dx
mov dword [ebp - 4], 2
cmp ecx, 0xa
jae 0x10029312
cmp eax, 0xa
jae 0x10029312
push eax
push ecx
mov al, 0x60
mov byte [ebp - 0x38], 0x50
mov ch, al
mov byte [ebp - 0x30], 0
xor al, byte [ebp - 0x38]
mov cl, 0x75
mov dl, 0x34
mov byte [ebp - 0x37], al
mov al, byte [ebp - 0x38]
mov dh, cl
xor cl, al
mov byte [ebp - 0x39], dl
xor dl, al
mov byte [ebp - 0x36], cl
xor ch, al
mov byte [ebp - 0x35], dl
xor dh, al
mov byte [ebp - 0x33], ch
mov ah, 0x6a
mov byte [ebp - 0x32], dh
xor ah, al
mov byte [ebp - 0x30], 0
mov al, byte [ebp - 0x39]
lea ecx, [ebp - 0x37]
xor al, byte [ebp - 0x38]
lea esi, [ecx + 1]
sub esp, 0x18
mov byte [ebp - 0x34], ah
mov edx, esp
mov byte [ebp - 0x31], al
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10029180
sub ecx, esi
lea eax, [ebp - 0x37]
push ecx
push eax
mov ecx, edx
call fcn.10005220
lea eax, [ebp - 0x70]
push eax
call fcn.10004db0
add esp, 0x24
lea ecx, [ebp - 0x2c]
push eax
call fcn.1000dbd0
mov ecx, dword [ebp - 0x5c]
cmp ecx, 0xf
jbe 0x100291de
mov edx, dword [ebp - 0x70]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100291d4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10028e3c
push ecx
push edx
call fcn.100662c0
add esp, 8
cmp dword [ebp - 0x18], 0xf
lea eax, [ebp - 0x2c]
movaps xmm0, xmmword [0x10076e10]
cmova eax, dword [ebp - 0x2c]
xor ecx, ecx
push eax
movups xmmword [ebp - 0x58], xmm0
mov dword [ebp - 0x48], 0x62344a31
mov word [ebp - 0x44], 0x4c
mov al, byte [ebp - 0x58]
xor byte [ebp + ecx - 0x57], al
inc ecx
cmp ecx, 0x14
jb 0x10029204
sub esp, 0x18
mov byte [ebp - 0x43], 0
mov edx, esp
lea ecx, [ebp - 0x57]
xorps xmm0, xmm0
lea esi, [ecx + 1]
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10029234
sub ecx, esi
lea eax, [ebp - 0x57]
push ecx
push eax
mov ecx, edx
call fcn.10005220
lea eax, [ebp - 0x70]
push eax
call fcn.10004db0
add esp, 0x20
mov dword [ebp - 0x40], eax
mov byte [ebp - 4], 3
mov esi, dword [edi + 0xc]
test esi, esi
je 0x1002927b
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1002927b
push dword [ebp - 0x40]
mov ecx, esi
call dword [0x10075274]
mov ecx, dword [ebp - 0x5c]
cmp ecx, 0xf
jbe 0x100292af
mov edx, dword [ebp - 0x70]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100292a5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10028e3c
push ecx
push edx
call fcn.100662c0
add esp, 8
mov ecx, dword [ebp - 0x18]
cmp ecx, 0xf
jbe 0x100292e3
mov edx, dword [ebp - 0x2c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100292d9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10028e3c
push ecx
push edx
call fcn.100662c0
add esp, 8
cmp word [edi + 0x28], 0
jg 0x100292f4
xor eax, eax
mov byte [edi + 0x21], 0
mov word [edi + 0x28], ax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.1006625f
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
mov edx, eax
mov esi, ecx
push edx
push esi
cmp ecx, 0xa
jae 0x1002937f
mov byte [ebp - 0x38], 0x7a
mov al, 0x4a
xor al, byte [ebp - 0x38]
mov cl, 0x5f
mov dl, 0x1e
mov byte [ebp - 0x37], al
mov al, byte [ebp - 0x38]
mov ch, cl
mov dh, dl
mov byte [ebp - 0x31], 0
mov ah, 0x40
mov byte [ebp - 0x31], 0
xor cl, al
xor dl, al
xor ch, al
mov byte [ebp - 0x35], dl
xor dh, al
mov byte [ebp - 0x36], cl
xor ah, al
mov byte [ebp - 0x32], dh
sub esp, 0x18
mov byte [ebp - 0x33], ch
mov edx, esp
mov byte [ebp - 0x34], ah
lea ecx, [ebp - 0x37]
lea esi, [ecx + 1]
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10029373
jmp 0x10029187
cmp eax, 0xa
jae 0x100293ec
mov al, 0x5b
mov byte [ebp - 0x38], 0x7e
mov ch, al
mov byte [ebp - 0x31], 0
xor al, byte [ebp - 0x38]
mov cl, 0x1a
mov dh, cl
mov byte [ebp - 0x37], al
mov al, byte [ebp - 0x38]
mov dl, 0x44
mov ah, 0x4e
mov byte [ebp - 0x31], 0
xor cl, al
xor dl, al
xor ch, al
mov byte [ebp - 0x35], dl
xor dh, al
mov byte [ebp - 0x36], cl
xor ah, al
mov byte [ebp - 0x32], dh
sub esp, 0x18
mov byte [ebp - 0x33], ch
mov edx, esp
mov byte [ebp - 0x34], ah
lea ecx, [ebp - 0x37]
lea esi, [ecx + 1]
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100293e0
jmp 0x10029187
mov dh, 0x22
mov byte [ebp - 0x32], 0
mov cl, 0x46
mov byte [ebp - 0x38], dh
mov al, 7
mov byte [ebp - 0x32], 0
mov ch, cl
mov dl, 0x18
mov ah, al
xor cl, dh
xor ch, dh
mov byte [ebp - 0x36], cl
xor al, dh
mov byte [ebp - 0x33], ch
xor dl, dh
mov byte [ebp - 0x37], al
xor ah, dh
mov byte [ebp - 0x35], dl
sub esp, 0x18
mov byte [ebp - 0x34], ah
mov edx, esp
lea ecx, [ebp - 0x37]
lea esi, [ecx + 1]
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10029438
jmp 0x10029187