Function at 0x423674
Capabilities:
Encode data using xor
Get disk information

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x98
mov dword [esp + 4], 0x89de8bf7
mov dword [esp + 8], 0x853b8739
mov dword [esp + 0xc], 0x8136833b
mov dword [esp + 0x10], 0x9d2e9fdf
mov dword [esp + 0x14], 0x99c69b2c
mov dword [esp + 0x18], 0x951a9727
mov dword [esp + 0x1c], 0x91e9932b
lea eax, [esp + 0x20]
mov dword [esp + 0x20], 0xef90
xor ecx, ecx
movzx edx, byte [esp + ecx + 4]
lea esi, [ecx - 0x610c1a5d]
xor esi, edx
mov edx, 1
sub edx, esi
not edx
or edx, esi
and edx, 1
xor esi, 1
lea edx, [esi + edx*2]
add dl, 0xd0
mov byte [esp + ecx + 4], dl
mov edx, ecx
and edx, 1
xor ecx, 1
lea ecx, [ecx + edx*2]
cmp ecx, 0x20
jb 0x4235a0
lea ebp, [esp + 0x7a]
lea edx, [esp + 4]
mov ecx, 7
mov edi, ebp
xchg esi, edx
rep movsd dword es:[edi], dword [esi]
xchg esi, edx
lea edi, [esp + 0x96]
mov ecx, 1
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
mov eax, esp
push eax
push 0
push 0
push 0xe
push ebp
push 0
call dword [0x44c004]
mov dword [esp + 4], 0x33727193
mov byte [esp + 8], 0
xor ecx, ecx
nop
mov edx, ecx
and edx, 0xfffffffc
mov esi, ecx
and esi, 3
sub edx, esi
movzx ebx, byte [esp + ecx + 4]
mov esi, ecx
xor esi, 0x8321f414
add edx, ecx
lea edi, [edx + esi]
and edi, ebx
add edi, edi
add esi, ebx
sub esi, edi
add esi, edx
mov edx, esi
and edx, 0x1b
xor esi, 0x9b
lea edx, [esi + edx*2]
inc dl
mov byte [esp + ecx + 4], dl
inc ecx
cmp ecx, 5
jne case.default.0x42366d
xor ecx, ecx
cmp eax, dword [esp + 4]
setne cl
xor ebx, ebx
jmp dword [ecx*4 + 0x446638]
mov ebx, dword [esp]
test ebx, ebx
jns 0x423682
mov eax, 0xffffffff
jmp 0x423685
lea eax, [ebx + ebx]
push eax
call fcn.004095c0
add esp, 4
mov edi, eax
mov eax, esp
push eax
push ebx
push edi
push 0xe
push ebp
push 0
call dword [0x44c004]
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x446640]
jmp dword [0x446648]
push edi
call fcn.004095d0
add esp, 4
mov eax, dword [case.0x42366d.0]
xor ebx, ebx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
jmp eax
mov eax, dword [esp]
mov ecx, eax
add ecx, 9
jns 0x4236e3
mov eax, 0xffffffff
jmp 0x4236ea
lea eax, [eax*2 + 0x12]
push eax
call fcn.004095c0
add esp, 4
mov esi, eax
mov dword [esp + 4], 0x8fde8924
mov dword [esp + 8], 0x83258d2d
mov dword [esp + 0xc], 0x8727813f
mov dword [esp + 0x10], 0x9b3f853f
mov dword [esp + 0x14], 0x9f9e992f
mov word [esp + 0x18], 0
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, eax
add cl, 0xa2
xor cl, byte [esp + eax + 4]
add cl, 0xd6
mov byte [esp + eax + 4], cl
inc eax
cmp eax, 0x16
jne 0x423730
movzx ecx, word [edi]
mov eax, esi
test cx, cx
je 0x423771
lea edx, [edi + 2]
mov eax, esi
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x423760
mov word [eax], 0
movzx ecx, word [esp + 4]
test cx, cx
je 0x4237a1
lea edx, [esp + 6]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x423790
mov word [eax], 0
lea eax, [esp + 0x74]
push eax
push esi
call fcn.0043fbc0
add esp, 8
not eax
shr eax, 0x1f
mov dword [esp + 0x6c], esi
jmp dword [eax*4 + 0x446660]
mov eax, ebx
add esp, 0x98
pop esi
pop edi
pop ebx
pop ebp
ret