Function at 0x429860
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0xc8
mov eax, dword [section..data]
xor eax, esp
mov dword [esp + 0xc4], eax
push esi
push edi
mov edi, dword [ebp + 8]
shr edi, 5
mov dword [esp + 0x3c], ecx
push 0xf0
mov dword [esp + 0x94], edx
lea eax, [edi + 6]
mov dword [ebp + 8], edi
mov dword [ecx + 0x2d0], eax
lea esi, [eax*4 + 4]
lea eax, [ecx + 0x1e0]
mov dword [esp + 0x84], esi
xor ecx, ecx
mov dword [esp + 0x78], 0
push ecx
push eax
mov dword [esp + 0x84], eax
mov dword [esp + 0x88], ecx
call fcn.00434ed0
xor edx, edx
add esp, 0xc
mov dword [esp + 0x4c], edx
xorps xmm0, xmm0
movaps xmmword [esp + 0xb0], xmm0
test esi, esi
je 0x42a3a6
mov esi, edi
lea eax, [edi - 1]
neg esi
mov dword [esp + 0x50], esi
cmp edx, edi
jae 0x429c09
mov eax, dword [esp + 0x90]
mov ecx, dword [eax + edx*4]
movzx eax, byte [esp + 0xb7]
cdq
mov esi, eax
mov dword [esp + 0xb0], ecx
movzx eax, byte [esp + 0xb6]
mov edi, edx
shld edi, esi, 8
cdq
or edi, edx
shl esi, 8
or esi, eax
movzx eax, byte [esp + 0xb5]
shld edi, esi, 8
cdq
or edi, edx
shl esi, 8
or esi, eax
movzx eax, byte [esp + 0xb4]
shld edi, esi, 8
cdq
or edi, edx
shl esi, 8
or esi, eax
mov eax, ecx
shld edi, esi, 8
shr eax, 0x18
shl esi, 8
or esi, eax
mov eax, ecx
shld edi, esi, 8
shr eax, 0x10
movzx eax, al
cdq
or edi, edx
shl esi, 8
or esi, eax
mov eax, ecx
shld edi, esi, 8
shr eax, 8
movzx eax, al
cdq
or edi, edx
shl esi, 8
or esi, eax
movzx eax, cl
shld edi, esi, 8
cdq
or edi, edx
shl esi, 8
or esi, eax
mov dword [esp + 0xc], edi
movzx eax, byte [esp + 0xbf]
cdq
mov edi, eax
mov dword [esp + 0x10], esi
movzx eax, byte [esp + 0xbe]
mov ecx, edx
shld ecx, edi, 8
cdq
shl edi, 8
or ecx, edx
or edi, eax
movzx eax, byte [esp + 0xbd]
shld ecx, edi, 8
cdq
shl edi, 8
or ecx, edx
or edi, eax
movzx eax, byte [esp + 0xbc]
shld ecx, edi, 8
cdq
shl edi, 8
or ecx, edx
or edi, eax
movzx eax, byte [esp + 0xbb]
shld ecx, edi, 8
cdq
shl edi, 8
or edi, eax
or ecx, edx
movzx eax, byte [esp + 0xba]
shld ecx, edi, 8
cdq
or ecx, edx
shl edi, 8
or edi, eax
movzx eax, byte [esp + 0xb9]
shld ecx, edi, 8
cdq
or ecx, edx
shl edi, 8
or edi, eax
movzx eax, byte [esp + 0xb8]
cdq
shld ecx, edi, 8
or ecx, edx
shl edi, 8
mov edx, esi
mov dword [esp + 0x14], ecx
mov esi, dword [esp + 0xc]
or edi, eax
shrd edx, esi, 7
xor edx, dword [esp + 0x10]
shr esi, 7
and edx, 0xaa00aa
xor esi, dword [esp + 0xc]
mov eax, edx
and esi, 0xaa00aa
mov ecx, esi
shld ecx, eax, 7
xor ecx, esi
shl eax, 7
xor dword [esp + 0xc], ecx
xor eax, edx
xor dword [esp + 0x10], eax
mov edx, edi
mov esi, dword [esp + 0x14]
shrd edx, esi, 7
shr esi, 7
xor edx, edi
xor esi, dword [esp + 0x14]
and edx, 0xaa00aa
and esi, 0xaa00aa
mov eax, edx
mov ecx, esi
shld ecx, eax, 7
xor ecx, esi
shl eax, 7
mov esi, dword [esp + 0xc]
xor eax, edx
mov edx, dword [esp + 0x10]
xor edi, eax
xor dword [esp + 0x14], ecx
shrd edx, esi, 0xe
xor edx, dword [esp + 0x10]
shr esi, 0xe
and edx, 0xcccc
xor esi, dword [esp + 0xc]
mov eax, edx
and esi, 0xcccc
mov ecx, esi
shld ecx, eax, 0xe
xor ecx, esi
shl eax, 0xe
mov esi, dword [esp + 0x14]
xor eax, edx
xor dword [esp + 0x10], eax
mov edx, edi
xor dword [esp + 0xc], ecx
shrd edx, esi, 0xe
shr esi, 0xe
xor edx, edi
xor esi, dword [esp + 0x14]
and edx, 0xcccc
and esi, 0xcccc
mov eax, edx
mov ecx, esi
shld ecx, eax, 0xe
shl eax, 0xe
xor eax, edx
mov edx, dword [esp + 0x10]
xor edi, eax
mov eax, dword [esp + 0xc]
xor ecx, esi
mov esi, dword [esp + 0x14]
shrd edx, eax, 0x1c
xor esi, ecx
xor ecx, ecx
xor edx, dword [esp + 0x10]
and edx, 0xf0f0f0f0
mov eax, edx
shld ecx, eax, 0x1c
shl eax, 0x1c
xor ecx, 0
xor dword [esp + 0xc], ecx
xor eax, edx
xor dword [esp + 0x10], eax
mov edx, edi
mov eax, esi
xor ecx, ecx
shrd edx, eax, 0x1c
xor edx, edi
and edx, 0xf0f0f0f0
mov eax, edx
shld ecx, eax, 0x1c
shl eax, 0x1c
xor ecx, 0
xor esi, ecx
xor eax, edx
mov edx, dword [esp + 0x10]
xor edi, eax
mov dword [esp + 0x14], esi
mov esi, dword [esp + 0xc]
shrd edx, esi, 8
shr esi, 8
xor edx, edi
xor esi, dword [esp + 0x14]
and edx, 0xff00ff
and esi, 0xff00ff
mov eax, edx
mov ecx, esi
xor edi, edx
shld ecx, eax, 8
mov word [esp + 0x9e], di
xor dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x14]
shl eax, 8
xor ecx, esi
xor dword [esp + 0x10], eax
mov esi, dword [esp + 0xc]
mov eax, esi
mov edx, dword [esp + 0x10]
mov word [esp + 0x9c], dx
shrd edx, eax, 0x10
mov eax, ecx
mov word [esp + 0xa4], si
shrd edi, eax, 0x10
shr esi, 0x10
mov word [esp + 0xa6], cx
mov word [esp + 0xa0], dx
mov word [esp + 0xa8], si
mov word [esp + 0xa2], di
shr ecx, 0x10
jmp 0x42a2c8
lea edx, [eax + esi]
mov eax, edx
and edx, 3
shr eax, 2
add eax, 0x1e
shl edx, 2
shl eax, 4
mov cx, dx
add eax, dword [esp + 0x3c]
xor edx, edx
mov si, word [eax]
shr si, cl
mov di, word [eax + 0xa]
mov dword [esp + 0x10], esi
mov word [esp + 0x9c], si
mov si, word [eax + 2]
shr si, cl
mov dword [esp + 0x1c], esi
mov word [esp + 0x9e], si
mov si, word [eax + 4]
shr si, cl
mov dword [esp + 0x14], esi
mov word [esp + 0xa0], si
mov si, word [eax + 6]
shr si, cl
mov dword [esp + 0x24], esi
mov word [esp + 0xa2], si
mov si, word [eax + 8]
shr si, cl
mov dword [esp + 0x20], esi
mov word [esp + 0xa4], si
mov si, word [eax + 0xc]
mov ax, word [eax + 0xe]
shr ax, cl
shr si, cl
shr di, cl
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0xc], eax
mov word [esp + 0xaa], ax
mov eax, ecx
mov dword [esp + 0x18], esi
mov word [esp + 0xa8], si
mov esi, dword [ebp + 8]
div esi
mov word [esp + 0xa6], di
mov dword [esp + 0x98], edx
test edx, edx
je 0x429ce8
cmp esi, 8
jne 0x42a1f7
mov eax, ecx
and al, 7
cmp al, 4
jne 0x42a1f7
test edx, edx
jne 0x429d0f
movups xmm0, xmmword [esp + 0x9c]
movaps xmm1, xmm0
psrlw xmm0, 1
psllw xmm1, 3
orps xmm1, xmm0
andps xmm1, xmmword [0x464470]
movups xmmword [esp + 0x9c], xmm1
mov ecx, dword [esp + 0xa4]
mov eax, ecx
mov edi, dword [esp + 0xa0]
xor eax, edi
movzx eax, ax
mov dword [esp + 0x40], eax
mov esi, dword [esp + 0xaa]
mov eax, esi
mov edx, dword [esp + 0x9e]
xor eax, edx
movzx eax, ax
mov dword [esp + 0x1c], eax
mov eax, esi
xor eax, ecx
xor esi, edi
movzx eax, ax
mov dword [esp + 0x44], eax
movzx eax, si
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0xa6]
mov esi, dword [esp + 0xa8]
xor eax, esi
movzx eax, ax
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x9c]
xor eax, dword [esp + 0x18]
movzx eax, ax
xor ecx, eax
mov dword [esp + 0x10], eax
xor edx, dword [esp + 0x10]
movzx eax, cx
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0x1c]
xor eax, dword [esp + 0x40]
movzx eax, ax
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0xaa]
xor eax, dword [esp + 0x10]
movzx eax, ax
mov dword [esp + 0x8c], eax
movzx eax, dx
mov edx, dword [esp + 0x9c]
mov dword [esp + 0x70], eax
xor eax, dword [esp + 0x38]
movzx eax, ax
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0xa2]
xor eax, dword [esp + 0x48]
movzx eax, ax
xor edi, eax
xor esi, eax
movzx ecx, di
mov eax, edx
xor eax, ecx
mov dword [esp + 0x84], ecx
xor ecx, dword [esp + 0x18]
movzx eax, ax
mov dword [esp + 0x64], eax
movzx eax, cx
mov dword [esp + 0xc], eax
movzx edi, si
mov eax, edi
xor eax, dword [esp + 0x44]
movzx esi, ax
xor edx, esi
mov dword [esp + 0x88], esi
movzx eax, dx
mov dword [esp + 0x30], eax
mov eax, esi
xor eax, dword [esp + 0xc]
movzx edx, ax
mov eax, esi
xor eax, dword [esp + 0x18]
movzx ecx, ax
mov eax, dword [esp + 0x84]
and eax, dword [esp + 0x48]
mov dword [esp + 0x20], ecx
and ecx, dword [esp + 0x1c]
movzx esi, ax
mov dword [esp + 0x54], edx
movzx eax, cx
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x88]
and eax, dword [esp + 0x44]
movzx ecx, ax
and edx, dword [esp + 0x40]
mov eax, dword [esp + 0xc]
xor edx, ecx
and eax, dword [esp + 0x38]
xor eax, ecx
movzx edx, dx
movzx ecx, ax
mov eax, dword [esp + 0x64]
and eax, dword [esp + 0x34]
xor eax, edx
xor eax, esi
xor eax, edi
movzx edi, ax
mov eax, dword [esp + 0x9c]
and eax, dword [esp + 0x6c]
xor eax, ecx
xor eax, esi
mov esi, dword [esp + 0x28]
xor eax, dword [esp + 0xc]
xor eax, dword [esp + 0x38]
movzx eax, ax
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x70]
and eax, dword [esp + 0x10]
xor eax, edx
xor eax, esi
xor eax, dword [esp + 0x20]
xor eax, dword [esp + 0x1c]
movzx edx, ax
mov eax, dword [esp + 0x30]
and eax, dword [esp + 0x8c]
xor eax, dword [esp + 0xaa]
xor eax, ecx
mov dword [esp + 0x28], edx
xor eax, esi
and edx, edi
xor eax, dword [esp + 0x20]
movzx esi, ax
mov eax, dword [esp + 0x18]
xor eax, edi
movzx ecx, dx
movzx eax, ax
mov dword [esp + 0x2c], eax
mov eax, ecx
xor ecx, dword [esp + 0x18]
xor eax, esi
movzx edx, ax
mov eax, edx
and eax, dword [esp + 0x2c]
xor eax, dword [esp + 0x18]
movzx eax, ax
mov dword [esp + 0x24], eax
mov eax, esi
xor eax, dword [esp + 0x28]
and ecx, eax
xor ecx, esi
movzx eax, cx
mov dword [esp + 0x14], eax
xor eax, edx
and eax, esi
movzx ecx, ax
mov eax, ecx
xor ecx, edx
xor eax, dword [esp + 0x14]
xor eax, dword [esp + 0x28]
mov edx, dword [esp + 0x24]
and ecx, edx
xor ecx, dword [esp + 0x2c]
movzx edi, ax
movzx esi, cx
mov eax, esi
mov dword [esp + 0x60], edi
xor eax, edi
mov dword [esp + 0x5c], esi
movzx eax, ax
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x14]
xor eax, edx
xor edi, dword [esp + 0x14]
movzx ecx, ax
mov eax, esi
xor eax, edx
mov dword [esp + 0x58], ecx
movzx edx, ax
xor ecx, dword [esp + 0x18]
movzx eax, di
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x9c]
and eax, dword [esp + 0x14]
movzx eax, ax
mov dword [esp + 0x68], eax
mov eax, edx
and eax, dword [esp + 0x20]
movzx edi, ax
mov eax, esi
and eax, dword [esp + 0x10]
movzx eax, ax
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x24]
and eax, dword [esp + 0x30]
movzx eax, ax
mov dword [esp + 0x30], eax
and edx, dword [esp + 0x1c]
movzx ecx, cx
mov eax, ecx
mov dword [esp + 0x94], edi
and eax, dword [esp + 0x54]
movzx esi, ax
mov eax, dword [esp + 0x60]
and eax, dword [esp + 0x34]
and ecx, dword [esp + 0x40]
movzx eax, ax
mov dword [esp + 0x34], eax
movzx eax, dx
mov edx, dword [esp + 0x58]
mov dword [esp + 0x28], eax
mov eax, edx
and eax, dword [esp + 0x44]
movzx ecx, cx
xor eax, ecx
mov dword [esp + 0x54], ecx
movzx ecx, ax
mov eax, dword [esp + 0x5c]
and eax, dword [esp + 0x70]
xor eax, dword [esp + 0x30]
movzx eax, ax
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x2c]
and eax, dword [esp + 0x84]
xor eax, edi
and edx, dword [esp + 0x88]
movzx edi, ax
xor edx, esi
xor edx, dword [esp + 0x94]
mov eax, edi
xor eax, dword [esp + 0x28]
xor eax, dword [esp + 0x68]
movzx eax, ax
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x18]
and eax, dword [esp + 0xc]
mov dword [esp + 0x58], ecx
xor ecx, dword [esp + 0x20]
movzx ecx, cx
xor eax, ecx
movzx edx, dx
xor eax, esi
movzx eax, ax
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x2c]
and eax, dword [esp + 0x48]
xor eax, ecx
xor eax, dword [esp + 0x34]
movzx eax, ax
mov dword [esp + 0xc], eax
mov eax, edx
xor eax, dword [esp + 0x20]
movzx ecx, ax
mov esi, dword [esp + 0x60]
and esi, dword [esp + 0x64]
xor esi, dword [esp + 0xc]
xor dword [esp + 0xc], edx
mov edx, dword [esp + 0xc]
mov eax, dword [esp + 0x24]
and eax, dword [esp + 0x8c]
xor eax, dword [esp + 0x1c]
xor eax, dword [esp + 0x10]
movzx esi, si
mov word [esp + 0xaa], dx
mov edx, esi
xor esi, dword [esp + 0x30]
xor edx, edi
xor esi, dword [esp + 0x68]
mov edi, dword [esp + 0x18]
and edi, dword [esp + 0x38]
mov dword [esp + 0x24], esi
mov word [esp + 0xa2], si
mov esi, dword [esp + 0x10]
xor esi, dword [esp + 0x5c]
xor esi, dword [esp + 0x58]
mov dword [esp + 0x20], edx
not esi
mov word [esp + 0xa4], dx
mov edx, dword [esp + 0x14]
and edx, dword [esp + 0x6c]
movzx eax, ax
xor edi, eax
mov dword [esp + 0x10], esi
mov word [esp + 0x9c], si
xor edx, eax
mov esi, dword [esp + 0x1c]
xor edi, ecx
xor esi, dword [esp + 0x5c]
mov eax, dword [esp + 0x20]
xor esi, dword [esp + 0x28]
xor eax, ecx
xor edi, dword [esp + 0x54]
not esi
xor edx, dword [esp + 0x34]
not eax
cmp dword [esp + 0x98], 0
not edi
mov dword [esp + 0x14], edx
mov word [esp + 0xa0], dx
mov dword [esp + 0x1c], esi
mov word [esp + 0x9e], si
mov word [esp + 0xa6], di
mov dword [esp + 0x18], eax
mov word [esp + 0xa8], ax
jne 0x42a1f7
mov esi, dword [esp + 0x74]
cmp esi, 0xa
jb 0x42a174
push 0x2b4
push str.C:Usersomahr_source_reposputty_caccodecrypto_aes_sw.c
push str.rconpos___lenof_aes_key_setup_round_constants_
call fcn.004384d4
add esp, 0xc
mov dh, byte [esi + 0x45b640]
inc esi
mov dword [esp + 0x74], esi
xor eax, eax
mov cl, al
mov dl, dh
shr dl, cl
and dl, 1
movzx ecx, dl
xor word [esp + eax*2 + 0x9c], cx
inc eax
cmp eax, 8
jb 0x42a181
mov ax, word [esp + 0xaa]
mov di, word [esp + 0xa6]
mov dword [esp + 0xc], eax
mov ax, word [esp + 0xa8]
mov dword [esp + 0x18], eax
mov ax, word [esp + 0xa4]
mov dword [esp + 0x20], eax
mov ax, word [esp + 0xa2]
mov dword [esp + 0x24], eax
mov ax, word [esp + 0xa0]
mov dword [esp + 0x14], eax
mov ax, word [esp + 0x9e]
mov dword [esp + 0x1c], eax
mov ax, word [esp + 0x9c]
mov dword [esp + 0x10], eax
mov edx, dword [esp + 0x50]
mov esi, edx
shr esi, 2
and edx, 3
add esi, 0x1e
shl edx, 2
shl esi, 4
mov cx, dx
add esi, dword [esp + 0x3c]
movzx eax, word [esi]
shr ax, cl
mov ecx, dword [esp + 0x10]
xor cx, ax
movzx eax, word [esi + 2]
mov word [esp + 0x9c], cx
mov cx, dx
shr ax, cl
mov ecx, dword [esp + 0x1c]
xor cx, ax
movzx eax, word [esi + 4]
mov word [esp + 0x9e], cx
mov cx, dx
shr ax, cl
mov ecx, dword [esp + 0x14]
xor cx, ax
movzx eax, word [esi + 6]
mov word [esp + 0xa0], cx
mov cx, dx
shr ax, cl
mov ecx, dword [esp + 0x24]
xor cx, ax
movzx eax, word [esi + 8]
mov word [esp + 0xa2], cx
mov cx, dx
shr ax, cl
mov ecx, dword [esp + 0x20]
xor cx, ax
movzx eax, word [esi + 0xa]
mov word [esp + 0xa4], cx
mov cx, dx
shr ax, cl
xor di, ax
movzx eax, word [esi + 0xc]
shr ax, cl
mov ecx, dword [esp + 0x18]
xor cx, ax
mov word [esp + 0xa6], di
movzx eax, word [esi + 0xe]
mov word [esp + 0xa8], cx
mov cx, dx
shr ax, cl
mov ecx, dword [esp + 0xc]
xor cx, ax
mov esi, dword [esp + 0x78]
mov eax, dword [esp + 0x9c]
and eax, 0xf
mov word [esp + 0xaa], cx
mov ecx, dword [esp + 0x7c]
shl ax, cl
or word [esi], ax
mov eax, dword [esp + 0x9e]
and eax, 0xf
lea edi, [ecx + 4]
shl ax, cl
or word [esi + 2], ax
mov eax, dword [esp + 0xa0]
and eax, 0xf
shl ax, cl
or word [esi + 4], ax
mov eax, dword [esp + 0xa2]
and eax, 0xf
shl ax, cl
or word [esi + 6], ax
mov eax, dword [esp + 0xa4]
and eax, 0xf
shl ax, cl
or word [esi + 8], ax
mov eax, dword [esp + 0xa6]
and eax, 0xf
shl ax, cl
or word [esi + 0xa], ax
mov eax, dword [esp + 0xa8]
and eax, 0xf
shl ax, cl
or word [esi + 0xc], ax
mov eax, dword [esp + 0xaa]
and eax, 0xf
shl ax, cl
or word [esi + 0xe], ax
cmp ecx, 0xc
jne 0x42a36e
add esi, 0x10
mov dword [esp + 0x78], esi
mov edx, dword [esp + 0x4c]
xor eax, eax
mov esi, dword [esp + 0x50]
inc edx
inc esi
mov dword [esp + 0x4c], edx
cmp ecx, 0xc
mov dword [esp + 0x50], esi
cmovne eax, edi
mov edi, dword [ebp + 8]
mov dword [esp + 0x7c], eax
lea eax, [edi - 1]
cmp edx, dword [esp + 0x80]
jb 0x4298f8
mov esi, dword [esp + 0x80]
mov edx, 0x10
lea ecx, [esp + 0xb0]
call fcn.00432d20
mov edx, 0x10
lea ecx, [esp + 0x9c]
call fcn.00432d20
shr esi, 2
shl esi, 3
cmp esi, 8
jbe 0x42a400
mov edx, dword [esp + 0x3c]
lea edi, [esi - 9]
shr edi, 3
inc edi
lea ecx, [edx + 0x1f2]
not word [ecx - 2]
lea ecx, [ecx + 0x10]
not word [ecx - 0x10]
not word [ecx - 8]
not word [ecx - 6]
sub edi, 1
jne 0x42a3e4
xor ecx, ecx
jmp 0x42a40a
xor ecx, ecx
test esi, esi
je 0x42a424
mov edx, dword [esp + 0x3c]
lea edi, [edx + 0x1e0]
movzx eax, word [edi]
lea edi, [edi + 2]
imul eax, eax, 0x10001
mov dword [edx + ecx*4], eax
inc ecx
cmp ecx, esi
jb 0x42a410
mov ecx, dword [esp + 0xcc]
pop edi
pop esi
xor ecx, esp
call fcn.004339c8
mov esp, ebp
pop ebp
ret