Function at 0x428c6c
Capabilities:
Encode data using xor
Get disk information
Hash data with crc32

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4426d4
mov eax, dword fs:[0]
push eax
mov eax, 0x28cc
call fcn.00439160
mov eax, dword [0x458264]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor ebx, ebx
push 0x10
lea eax, [ebp - 0x34]
mov dword [ebp - 4], ebx
mov esi, ecx
push ebx
push eax
mov dword [ebp - 0x28cc], esi
mov dword [ebp - 0x28d4], ebx
call fcn.0042ded0
add esp, 0xc
push ebx
push ebx
push ebx
push ebx
lea eax, [ebp - 0x28c8]
push eax
push ebx
push ebx
push str.WJ
push 4
push 0x1790
mov dword [ebp - 0x28c8], ebx
call fcn.004262bf
add esp, 0xc
push eax
call dword [sym.imp.KERNEL32.DLL_GetVolumeInformationA]
mov eax, dword [ebp - 0x28c8]
push str.IPHLPAPI.dll
mov dword [ebp - 0x34], eax
call dword [sym.imp.KERNEL32.DLL_LoadLibraryA]
mov dword [ebp - 0x28c4], eax
cmp eax, ebx
je 0x428de3
mov eax, 0x2880
push eax
mov dword [ebp - 0x28d0], eax
lea eax, [ebp - 0x28b8]
push ebx
push eax
call fcn.0042ded0
add esp, 0xc
push str.GetAdaptersInfo
push dword [ebp - 0x28c4]
call dword [sym.imp.KERNEL32.DLL_GetProcAddress]
cmp eax, ebx
je 0x428dd7
lea ecx, [ebp - 0x28d0]
push ecx
lea ecx, [ebp - 0x28b8]
push ecx
call eax
cmp eax, ebx
jne 0x428dd7
mov eax, dword [ebp - 0x2728]
xor edi, edi
cmp eax, ebx
mov dword [ebp - 0x28c0], eax
jle 0x428dd7
push 0x45a964
lea ecx, [ebp - 0x28bc]
call fcn.004021e1
mov dword [ebp - 4], 1
lea esi, [ebp + edi - 0x2724]
movzx eax, byte [esi]
push eax
push 0x44d64c
push 5
push 0x2adf
call fcn.004262bf
add esp, 0xc
push eax
lea eax, [ebp - 0x28bc]
push eax
call fcn.00403f05
mov al, byte [esi]
mov byte [ebp - 4], bl
mov ecx, dword [ebp - 0x28bc]
add esp, 0xc
add ecx, 0xfffffff0
mov byte [ebp + edi - 0x2a], al
call fcn.0040113c
inc edi
cmp edi, dword [ebp - 0x28c0]
jl 0x428d6b
mov esi, dword [ebp - 0x28cc]
push dword [ebp - 0x28c4]
call dword [sym.imp.KERNEL32.DLL_FreeLibrary]
push 0x10
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x24]
push eax
call fcn.0042dfc0
add esp, 0xc
or edi, 0xffffffff
xor eax, eax
mov cl, byte [ebp + eax - 0x24]
mov edx, edi
and edx, 0xff
movzx ecx, cl
xor edx, ecx
shr edi, 8
xor edi, dword [edx*4 + 0x459598]
inc eax
cmp eax, 0x10
jb 0x428dfa
push 4
lea eax, [ebp - 0x28c0]
push eax
lea eax, [ebp - 0x14]
not edi
push eax
mov dword [ebp - 0x28c0], edi
call fcn.0042dfc0
add esp, 0xc
push 0x45a964
mov ecx, esi
mov dword [ebp - 4], ebx
call fcn.004021e1
mov dword [ebp - 4], ebx
mov dword [ebp - 0x28d4], 1
lea edi, [ebp + ebx - 0x24]
mov al, byte [edi]
shr al, 4
cmp al, 9
jbe 0x428e65
add al, 0x37
jmp 0x428e67
add al, 0x30
mov byte [ebp - 0x28bc], al
push dword [ebp - 0x28bc]
mov ecx, esi
call fcn.004069ee
movzx eax, byte [edi]
and eax, 0x8000000f
jns 0x428e89
dec eax
or eax, 0xfffffff0
inc eax
cmp al, 9
jbe 0x428e91
add al, 0x37
jmp 0x428e93
add al, 0x30
mov byte [ebp - 0x28bc], al
push dword [ebp - 0x28bc]
mov ecx, esi
call fcn.004069ee
inc ebx
cmp ebx, 0x14
jl 0x428e54
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0042cc45
leave
ret