Function at 0x10002240
Capabilities:
Encode data using xor
Encrypt data using aes

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
mov ebx, dword [ebp + 8]
test ebx, ebx
je 0x10002745
mov edx, dword [ebp + 0x10]
test edx, edx
je 0x10002745
push edi
mov edi, dword [ebp + 0xc]
cmp edi, 0x80
je 0x1000228a
cmp edi, 0xc0
je 0x10002282
cmp edi, 0x100
je 0x10002282
pop edi
mov eax, 0xfffffffe
pop ebx
mov esp, ebp
pop ebp
ret
cmp edi, 0x80
jne 0x10002296
mov dword [edx + 0xf0], 0xa
jmp 0x100022ae
xor eax, eax
cmp edi, 0xc0
setne al
lea eax, [eax*2 + 0xc]
mov dword [edx + 0xf0], eax
mov ecx, dword [ebx]
mov eax, ecx
ror eax, 8
and eax, 0xff00ff00
push esi
rol ecx, 8
and ecx, 0xff00ff
or eax, ecx
mov dword [edx], eax
mov ecx, dword [ebx + 4]
mov eax, ecx
lea esi, [edx + 4]
ror eax, 8
and eax, 0xff00ff00
rol ecx, 8
and ecx, 0xff00ff
or eax, ecx
mov dword [esi], eax
mov ecx, dword [ebx + 8]
mov eax, ecx
ror eax, 8
and eax, 0xff00ff00
rol ecx, 8
and ecx, 0xff00ff
or eax, ecx
mov dword [edx + 8], eax
mov eax, dword [ebx + 0xc]
mov ecx, eax
ror ecx, 8
and ecx, 0xff00ff00
rol eax, 8
and eax, 0xff00ff
or ecx, eax
mov dword [ebp - 4], ecx
mov dword [edx + 0xc], ecx
cmp edi, 0x80
jne 0x1000242c
mov ebx, dword [ebp - 4]
mov eax, ecx
shr eax, 0x10
and eax, 0xff
mov edi, 0x10048784
mov ecx, dword [eax*4 + 0x10046b80]
xor ecx, 0x1000000
mov eax, ebx
shr eax, 8
and eax, 0xff
and ecx, 0xff000000
mov eax, dword [eax*4 + 0x10046f80]
and eax, 0xff0000
xor ecx, eax
mov eax, ebx
shr eax, 0x18
movzx eax, byte [eax*4 + 0x10046780]
xor ecx, eax
movzx eax, bl
mov eax, dword [eax*4 + 0x10046380]
and eax, 0xff00
xor ecx, eax
xor ecx, dword [edx]
mov eax, dword [esi]
xor eax, ecx
mov dword [edx + 0x10], ecx
mov ecx, dword [edx + 8]
xor ecx, eax
mov dword [edx + 0x14], eax
mov eax, dword [edx + 0xc]
xor eax, ecx
mov dword [edx + 0x18], ecx
mov dword [edx + 0x1c], eax
mov ecx, dword [esi + 0x18]
lea esi, [esi + 0x10]
mov eax, ecx
shr eax, 8
and eax, 0xff
add edi, 4
mov edx, dword [eax*4 + 0x10046f80]
mov eax, ecx
shr eax, 0x10
and eax, 0xff
and edx, 0xff0000
mov eax, dword [eax*4 + 0x10046b80]
and eax, 0xff000000
xor edx, eax
mov eax, ecx
shr eax, 0x18
movzx eax, byte [eax*4 + 0x10046780]
xor edx, eax
movzx eax, cl
mov eax, dword [eax*4 + 0x10046380]
and eax, 0xff00
xor edx, eax
xor edx, dword [esi - 4]
xor edx, dword [edi - 4]
mov dword [esi + 0xc], edx
mov eax, dword [esi]
xor eax, edx
mov dword [esi + 0x10], eax
mov ecx, dword [esi + 4]
xor ecx, eax
mov dword [esi + 0x14], ecx
mov eax, dword [esi + 8]
xor eax, ecx
mov dword [esi + 0x18], eax
cmp edi, 0x100487a8
jne 0x100023a3
pop esi
pop edi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebx + 0x10]
mov eax, ecx
ror eax, 8
and eax, 0xff00ff00
rol ecx, 8
and ecx, 0xff00ff
or eax, ecx
mov dword [edx + 0x10], eax
mov eax, dword [ebx + 0x14]
mov ebx, eax
ror ebx, 8
and ebx, 0xff00ff00
rol eax, 8
and eax, 0xff00ff
or ebx, eax
mov dword [edx + 0x14], ebx
cmp edi, 0xc0
jne 0x10002589
mov eax, ebx
shr eax, 0x10
and eax, 0xff
mov edi, 0x10048784
mov ecx, dword [eax*4 + 0x10046b80]
xor ecx, 0x1000000
mov eax, ebx
shr eax, 8
and eax, 0xff
and ecx, 0xff000000
mov eax, dword [eax*4 + 0x10046f80]
and eax, 0xff0000
xor ecx, eax
mov eax, ebx
shr eax, 0x18
movzx eax, byte [eax*4 + 0x10046780]
xor ecx, eax
movzx eax, bl
mov eax, dword [eax*4 + 0x10046380]
and eax, 0xff00
xor ecx, eax
xor ecx, dword [edx]
mov eax, dword [esi]
xor eax, ecx
mov dword [edx + 0x18], ecx
mov ecx, dword [edx + 8]
xor ecx, eax
mov dword [edx + 0x1c], eax
mov eax, dword [edx + 0xc]
xor eax, ecx
mov dword [edx + 0x24], eax
mov dword [edx + 0x20], ecx
lea eax, [edx + 0x28]
mov edx, dword [eax - 0x18]
xor edx, dword [eax - 4]
mov ecx, dword [eax - 0x14]
xor ecx, edx
mov dword [eax + 4], ecx
mov dword [eax], edx
mov edx, dword [eax + 4]
lea eax, [eax + 0x18]
mov ecx, edx
shr ecx, 8
and ecx, 0xff
add edi, 4
mov esi, dword [ecx*4 + 0x10046f80]
mov ecx, edx
shr ecx, 0x10
and ecx, 0xff
and esi, 0xff0000
mov ecx, dword [ecx*4 + 0x10046b80]
and ecx, 0xff000000
xor esi, ecx
mov ecx, edx
shr ecx, 0x18
movzx ecx, byte [ecx*4 + 0x10046780]
xor esi, ecx
movzx ecx, dl
mov ecx, dword [ecx*4 + 0x10046380]
and ecx, 0xff00
xor esi, ecx
xor esi, dword [eax - 0x28]
xor esi, dword [edi - 4]
mov dword [eax - 0x10], esi
mov ecx, dword [eax - 0x24]
xor ecx, esi
mov dword [eax - 0xc], ecx
mov edx, dword [eax - 0x20]
xor edx, ecx
mov dword [eax - 8], edx
mov ecx, dword [eax - 0x1c]
xor ecx, edx
mov dword [eax - 4], ecx
cmp edi, 0x100487a0
jne 0x100024e7
pop esi
pop edi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret
mov ebx, dword [ebp + 8]
mov ecx, dword [ebx + 0x18]
mov eax, ecx
ror eax, 8
and eax, 0xff00ff00
rol ecx, 8
and ecx, 0xff00ff
or eax, ecx
mov dword [edx + 0x18], eax
mov eax, dword [ebx + 0x1c]
mov ebx, eax
ror ebx, 8
and ebx, 0xff00ff00
rol eax, 8
and eax, 0xff00ff
or ebx, eax
mov dword [edx + 0x1c], ebx
cmp edi, 0x100
jne 0x10002423
mov eax, ebx
shr eax, 0x10
and eax, 0xff
mov edi, 0x10048784
mov ecx, dword [eax*4 + 0x10046b80]
xor ecx, 0x1000000
mov eax, ebx
shr eax, 8
and eax, 0xff
and ecx, 0xff000000
mov eax, dword [eax*4 + 0x10046f80]
and eax, 0xff0000
xor ecx, eax
mov eax, ebx
shr eax, 0x18
movzx eax, byte [eax*4 + 0x10046780]
xor ecx, eax
movzx eax, bl
mov eax, dword [eax*4 + 0x10046380]
and eax, 0xff00
xor ecx, eax
xor ecx, dword [edx]
mov eax, dword [esi]
xor eax, ecx
mov dword [edx + 0x20], ecx
mov ecx, dword [edx + 8]
xor ecx, eax
mov dword [edx + 0x24], eax
mov eax, dword [edx + 0xc]
xor eax, ecx
mov dword [edx + 0x28], ecx
mov dword [edx + 0x2c], eax
lea esi, [edx + 0x30]
mov ecx, dword [esi - 4]
mov eax, ecx
shr eax, 0x10
and eax, 0xff
lea esi, [esi + 0x20]
mov edx, dword [eax*4 + 0x10046f80]
mov eax, ecx
shr eax, 8
and eax, 0xff
and edx, 0xff0000
mov eax, dword [eax*4 + 0x10046380]
and eax, 0xff00
xor edx, eax
mov eax, ecx
shr eax, 0x18
add edi, 4
mov eax, dword [eax*4 + 0x10046b80]
and eax, 0xff000000
xor edx, eax
movzx eax, cl
mov ecx, dword [esi - 0x38]
movzx eax, byte [eax*4 + 0x10046780]
xor edx, eax
xor edx, dword [esi - 0x40]
mov eax, dword [esi - 0x3c]
xor eax, edx
mov dword [esi - 0x1c], eax
xor ecx, eax
mov eax, dword [esi - 0x34]
xor eax, ecx
mov dword [esi - 0x14], eax
mov dword [esi - 0x20], edx
mov dword [esi - 0x18], ecx
mov ecx, dword [esi - 0x14]
mov eax, ecx
shr eax, 8
and eax, 0xff
mov edx, dword [eax*4 + 0x10046f80]
mov eax, ecx
shr eax, 0x10
and eax, 0xff
and edx, 0xff0000
mov eax, dword [eax*4 + 0x10046b80]
and eax, 0xff000000
xor edx, eax
mov eax, ecx
shr eax, 0x18
movzx eax, byte [eax*4 + 0x10046780]
xor edx, eax
movzx eax, cl
mov eax, dword [eax*4 + 0x10046380]
and eax, 0xff00
xor edx, eax
xor edx, dword [esi - 0x30]
xor edx, dword [edi - 4]
mov dword [esi - 0x10], edx
mov eax, dword [esi - 0x2c]
xor eax, edx
mov dword [esi - 0xc], eax
mov ecx, dword [esi - 0x28]
xor ecx, eax
mov dword [esi - 8], ecx
mov eax, dword [esi - 0x24]
xor eax, ecx
mov dword [esi - 4], eax
cmp edi, 0x1004879c
jne 0x10002647
pop esi
pop edi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret
or eax, 0xffffffff
pop ebx
mov esp, ebp
pop ebp
ret