Function at 0x4331a3
Capabilities:
Encode data using xor

Disassembly:
pushal
out dx, eax
js 0x432e02
invalid
sub byte [esi], 0x2e
mov edi, 0x60256074
or bl, byte [eax]
dec ecx
sub eax, 0x3e952e2e
dec esi
jae 0x432e09
das
out 0x2f, eax
das
das
scasd eax, dword es:[edi]
sbb byte [esi + 0x2c], dl
jo 0x432d96
sub esi, dword [edx]
mov dword [0x2e60744e], eax
je 0x432e50
and eax, 0x2f30eb70
das
das
pushal
and eax, 0x4a180a60
out 0x30, eax
das
das
das
sbb byte [ecx], dh
sub al, 0x2e
out 0x2e, eax
sbb byte cs:[edi], ah
sbb byte cs:[edi], ah
sub ebp, dword [esi]
jnp 0x432e6e
add bl, byte [eax]
into
sub ch, byte [esi]
mov eax, 0x2b181807
pushal
out dx, eax
je 0x432e87
pushal
sbb byte cs:[edx], cl
sbb byte [edx], cl
sub eax, 0xbfbf2e2e
mov edi, 0xbfbfbfbf
mov edi, 0xbfbfbfbf
mov edi, 0x708670bf
test dword [eax - 0x7c], esi
jo 0x432dc6
test byte [esi - 0x4d887d7b], al
sbb esi, dword [edi + 0x77]
mov edx, 0x59ba7730
pop ecx
jnp 0x432e0d
test al, 0x37
ja 0x432e11
test eax, 0x73b87737
push ebx
pop edi
js 0x432e18
cld
js 0x432ecb
push ds
mov bl, 0xb0
mov bl, 0xb0
xor dword [edi], ebp
das
jl 0x432e26
movsb byte es:[edi], byte [esi]
dec edi
je 0x432e28
and esi, dword [eax - 0x4e]
adc esi, dword [edx]
jo 0x432e26
sub esi, dword [eax]
mov bl, 0xcb
xor dword [edi], ebp
das
je 0x432e34
adc edi, dword [esi]
mov bl, 0xf2
xor byte [edi], ch
das
scasd eax, dword es:[edi]
outsb dx, byte [esi]
pop esi
mov bl, 0xe9
xor dword [edi], ebp
das
cmc
jae 0x432ee7
push edi
das
pushal
and eax, 0x600a6074
out dx, eax
pushal
or dh, byte [edi + 0x6c]
das
das
das
scasd eax, dword es:[edi]
mov ebx, 0x2f2f34cf
jo 0x432e65
pop es
mov ah, 0xa
mov ah, 0x4c
xor dword [edi], ebp
das
jnp 0x432e70
sbb byte [eax + 0x1767538b], bh
call 0x73715ce1
mov edx, 0x70675373
scasd eax, dword es:[edi]
sub dh, byte [ecx]
mov bl, 0x69
xor dword [edi], ebp
das
das
scasd eax, dword es:[edi]
stosd dword es:[edi], eax
push ebx
push edi
xor dword [esi], edi
mov bl, 0x5e
xor dword [edi], ebp
das
mov bl, 0xef
mov ah, 0x46
xor ch, byte [edi]
das
mov eax, 0x2baf7021
xor bh, byte [esi]
mov bl, 0x1a
scasd eax, dword es:[edi]
sub esi, dword [edx]
mov bl, 0x1a
xor ch, byte [edi]
das
je 0x432ea5
adc edi, dword [esi]
mov bl, 0xa1
xor byte [edi], ch
das
je 0x432f5b
je 0x432f5e
and eax, 0x2e2db277
mov bl, 0xf9
xor byte [edi], ch
das
ja 0x432f73
and al, 0xa6
dec ecx
sbb bh, cl
xor ch, byte [edi]
das
dec esi
mov bl, 0x2f
das
das
das
das
ja 0x432ecf
cmc
xor byte [edi + 0x68], dh
sbb eax, 0x32bab23e
das
das
scasd eax, dword es:[edi]
imul esp, dword [esi + 0x5e], 0x7b
mov esp, 0x18a3663b
ja 0x432f2a
pop si
jnp 0x432eea
cmp esp, dword [esi - 0x5d]
sbb byte [edi - 0xa], dh
bnd ja 0x432fa3
ja 0x432fa3
and al, 0xa5
pushal
js 0x432ef8
pop ss
jnp 0x432efb
clc
jmp 0x2f725ea7
pop esi
das
das
das
jnp 0x432f03
jnp 0x432fa0
push edi
js 0x432fa8
pop ds
pop ss
or byte fs:[0x7bba7b2e], ch
push ebx
push edi
ja 0x432f15
mov eax, 0x2a5877f2
ja 0x432f17
bnd ja 0x432fb8
ja 0x432fb8
sub dh, byte [edi - 0x4c]
out dx, eax
ja 0x432f5c
out dx, eax
ja 0x432fab
jae 0x432f76
ja 0x432f29
pop es
ja 0x432fcc
pop eax
pop ds
ja 0x432fdf
push 0xccb13e24
and al, 0x3e
mov cl, 0xcc
xor al, 0x2f
das
das
js 0x432f38
sbb dword [eax + 0x58], edi
and dword [eax + 0x68], edi
int1
js 0x432fc7
jne 0x432f7c
js 0x432f45
hlt
pop esi
ja 0x432f5b
jae 0x432ff8
pop edi
dec esi
jae 0x432fd9
das
js 0x432f67
movsd dword es:[edi], dword [esi]
aaa
js 0x433019
and al, 0x78
mov eax, 0x753e7c1f
pop ds
jl 0x432ff5
jne 0x432fad
hlt
jl 0x432f6f
out dx, eax
mov dword [0x3dba7845], eax
jnp 0x432f7b
stc
pop ss
add dword [edi], eax
sub eax, 0xefb8702e
mov ah, 0xef
mov ah, 0x2e
das
das
das
jnp 0x43302e
pop eax
sbb eax, 0x2f2f2fe7
das
das
scasd eax, dword es:[edi]
ja 0x433046
cmc
mov esp, 0x2f2f308c
das
das
ja 0x432fce
scasb al, byte es:[edi]
ja 0x433059
cmc
mov ebp, 0x2f2f3382
xor ebp, dword [edi]
das
mov ah, 0x25
mov ah, 0x38
xor al, 0x2f
das
js 0x432fb4
cmc
pop edi
ja 0x432fb8
sub ch, byte [esi]
movsb byte es:[edi], byte [esi]
dec edx
sbb byte [ebx], ch
xor byte [edi], ch
das
dec esi
outsd dx, dword [esi]
das
scasd eax, dword es:[edi]
imul ecx, dword [esi + 0x5e], 0x7b
mov esp, 0xb43e4e3b
cmp dword [ecx], esi
jnp 0x432fd5
cmp ecx, dword [esi + 0x3e]
mov ah, 0x39
mov ah, 0x39
xor dword [edi], ebp
das
das
ja 0x432fd5
xor byte [edi + 0x68], dh
sbb ah, byte [ecx + 0x7bba7b18]
push ebx
pop edi
jo 0x432fe3
xor byte [eax + ebp*2 + 0x2d], bh
mov bl, 0x4e
push 0x4eb33e2d
xor ebp, dword [edi]
das
das
ja 0x433034
bnd je 0x4330a5
sbb al, 0x18
invalid
sbb byte [edi + 0x702e2e2e], cl
in eax, 0x75
push edi
mov dl, 0xf
xor ch, byte [ebx + 0x30]
mov ah, 0x5c
sub eax, 0xba782e2e
js 0x433017
lea edi, [edi]
js 0x43301b
jge 0x43309a
sbb dl, ch
das
das
das
dec esi
das
js 0x43301f
adc eax, 0xb3b33e2b
sub edi, dword [esi]
mov bl, 0xb3
mov bl, 0x2d
js 0x433009
sub eax, 0x92782e2e
js 0x433009
xor eax, 0x37adbc7c
ja 0x43303a
xor ebp, dword [edi + 0x77]
invalid
push 0x1849a42d
wait
sub eax, 0x4e3e2e2e
dec ecx
sbb byte [ebx + 0x3e2e2e2d], bl
dec esi
mov bl, 0x2f
das
das
das
das
js 0x43304f
neg byte [edi + 0x7c]
push 0x86b33e26
mov bl, 0x86
sub eax, 0x3e702e2e
in eax, 0x76
dec edi
mov dl, 0xf
xor ch, byte [ebx + 0x32]
movsb byte es:[edi], byte [esi]
push ss
jnp 0x43306e
pop ds
jl 0x433071
sub eax, 0x77f6b878
mov dl, 0x2d
mov ah, 0x71
mov ah, 0x71
sub eax, 0x687c2e2e
out 0x30, eax
das
das
das
jae 0x43310f
je 0x4330c2
jae 0x43308d
out dx, eax
ja 0x43308a
mov dl, 0xf3
ja 0x433065
ja 0x433065
mov cl, byte [ebp - 0x748f7372]
jo 0x43306e
lea ecx, [esi + 0x708b708c]
invalid
jo 0x433071
jo 0x433074
dec esi
outsd dx, dword [esi]
das
jl 0x4330a1
mov dword cs:[0x27b87c45], eax
ja 0x4330ad
sub dword [edi - 0x48], esi
invalid
sub eax, 0x3eefb42e
mov ah, 0x93
sub al, 0x2e
je 0x433168
out dx, eax
sbb dh, bh
mov bl, 0xef
mov ah, 0
sub al, 0x2e
add byte [esi + ebp], ch
jo 0x4330fc
sbb ah, bh
ja 0x4330d7
jnp 0x433172
pop edi
jnp 0x4330da
sub ch, byte [edi + 0x56a35e6e]
cmc
jae 0x43317e
push edi
das
pushal
and eax, 0x770a6074
mov eax, 0x2ab07707
scasb al, byte es:[edi]
mov ebp, 0x2e2e2c8c
jo 0x43312b
sub al, 0x2e
jo 0x43312b
scasb al, byte es:[edi]
sbb bh, byte [eax + 0x600a60bf]
clc
ja 0x433103
sub al, 0x31
mov ch, 0xc1
das
das
das
scasd eax, dword es:[edi]
scasb al, byte es:[edi]
das
out 0x31, eax
das
das
das
in eax, dx
xor byte [edi], ch
das
das
ja 0x4331dd
sbb eax, 0x32c4b23e
das
xor ch, byte [edi]
das
cmc
jae 0x4331d2
push ebx
push edi
das
sbb al, byte [eax + 0x3e]
dec esi
dec esi
mov bl, 0x2f
das
das
das
das
ja 0x43313f
cmc
xor byte [edi + 0x68], dh
sbb eax, 0x6baf35a2
pop si
mov dword [0x53abaf20], eax
push edi
das
push 0xaf35a21d
imul esp, dword [esi + 0x5e], 0xffffffa3
and byte [edi + 0x2f5753ab], ch
mov bl, 0x9b
xor ch, byte [edi]
das
das
imul esi, dword [eax], 0x3e
mov ah, 0x25
das
das
das
js 0x433217
and eax, 0x782f2f2f
push 0x7b8780a
or bh, byte [eax - 0x48]
pop es
jl 0x4331f3
jne 0x4331a9
jl 0x43316d
out dx, eax
mov dword [0x29b8774c], eax
jnp 0x433179
mov edx, dword [ebx + 0x67]
pop ss
add dword [0xb8702e2d], eax
jo 0x433183
out dx, eax
mov ah, 0xef
mov ah, 0x2e
sub eax, 0xba7b2e2e
jnp 0x433190
mov edx, 0x7b67538b
pop eax
mov edx, dword [ebx + 0x67]
jnp 0x433233
or dh, byte [eax - 0x16]
xor byte [edi], ch
das
das
sbb byte [edx + 0x2e], bh
dec esi
ljmp 0x7a18:0x2f2f2f30
dec esi
outsd dx, dword [esi]
das
je 0x43324d
or dh, byte [edi - 0x4c]
sbb al, 0x70
invalid
jo 0x433231
invalid
sbb byte [esi - 0x40d1d1d2], bl
jo 0x4331e4
xor byte [edi], ch
das
das
sbb ah, bh
sub eax, 0x4e3e2e2e
jae 0x433239
das
jo 0x4331c9
mov dword [0x687c3053], eax
jl 0x43327a
sub eax, 0x2f2f2fe7
das
das
das
je 0x433210
jo 0x4331d5
out dx, eax
sbb bh, bl
sub eax, 0x4e3e2e2e
dec esi
dec esi
mov bl, 0x2f
das
das
das
das
ja 0x433223
out dx, eax
ja 0x43329c
ja 0x43329c
push 0x7860a50c
or al, 0xa5
pushal
js 0x4331f1
mov eax, 0xf8b87b17
pop ss
jnp 0x4331f4
clc
jmp 0x2f7261a0
js 0x4332a1
pop es
pop ss
imul eax, dword [0xf6772e2d], 0xfffffff0
sub eax, 0xf0f6772e
ja 0x433247
invalid
jnp 0x433212
jnp 0x4332ad
push edi
ja 0x433215
int1
ja 0x4332b8
daa
ja 0x433217
add dword [edi + 0x3e], esi
jae 0x433258
ja 0x433222
int1
ja 0x4332c5
or dword [edi + 0x68], esi
or al, 0x3e
mov cl, 0x8f
xor dword [edi], ebp
das
js 0x433231
sbb dword [eax + 0x58], edi
js 0x4332d4
or dword [eax + 0x68], edi
add dword [eax + 0x3e], edi
jne 0x433285
jo 0x433238
mov dl, 0xf3
xor byte [eax - 0x48], bh
xor byte [eax - 0x48], bh
add al, 0x7c
push 0xf6b33e2d
mov bl, 0xf6
xor byte [edi], ch
das
ja 0x43324e
sbb byte [esi], bh
sub al, 0x2e
dec esi
dec esi
scasd eax, dword es:[edi]
das
das
das
das
jo 0x43328f
xor dword [edi], ebp
das
das
sbb byte [ebx + 0x3e2e2e2d], dh
dec esi
dec esi
jae 0x4332e1
das
mov ah, 1
mov ah, 0x3b
sub eax, 0xb4772e2e
sbb al, 0x3e
mov bl, 0x32
sub eax, 0xbc7b2e2e
cmp ebx, dword [esi + 0x74]
pushal
jnp 0x433282
mov esp, 0x60745e3b
sbb al, 0x77
div dl
sbb dh, ah
sbb dh, ah
sub ebp, dword [esi]
dec esi
outsd dx, dword [esi]
das
ja 0x43328f
sub eax, 0x45b33e2e
inc ebp
ja 0x43334f
ja 0x43334f
and al, 0xa6
inc ebp
sbb byte [esi + 0x3e2f2f30], ah
dec esi
outsd dx, dword [esi]
das
ja 0x4332a7
cmc
xor byte [edi + 0x68], dh
ja 0x433361
sbb eax, 0x3095b23e
das
das
scasd eax, dword es:[edi]
imul esp, dword [esi + 0x5e], 0x7b
mov esp, 0x18a3665b
ja 0x433302
pop si
jnp 0x4332c2
pop ebx
mov word [0xf2f67718], ax
ja 0x43337b
bnd ja 0x43337b
sbb eax, 0xb87856a2
js 0x4332d0
pop ss
jmp 0x2f72627c
sub eax, 0xf2b8772e
ja 0x433386
mov eax, 0x2a5877f2
sub dh, byte [edi - 0x4c]
ja 0x4332e5
out dx, eax
ja 0x43332a
out dx, eax
ja 0x433379
ja 0x433379
jae 0x433344
jae 0x433344
ja 0x4332f7
pop es
ja 0x43339a
pop ds
ja 0x4333ad
push 0xd3b63e1d
xor byte [edi], ch
sbb eax, 0x30d3b63e
das
das
js 0x433306
sbb eax, 0x78255878
push 0x763e7bf5
pop ds
js 0x4333a9
and eax, 0x7bf56878
jbe 0x433378
jl 0x4333c3
push 0x1fb87c26
jl 0x433316
pop ds
jl 0x43339f
jne 0x433359
jne 0x433359
jl 0x433319
out dx, eax
mov dword [0x7bba7747], eax
push ebx
pop edi
jnp 0x433327
sbb dword [edi], edx
push ebp
add al, 0x2d
jo 0x43332f
out dx, eax
mov ah, 0xef
out dx, eax
mov ah, 0x82
mov ah, 0x82
sub al, 0x2e
jl 0x43333a
sub byte [eax + ebx*2 + 0x20], bh
js 0x433338
sub byte [esi], ch
scasb al, byte es:[edi]
mov esi, 0x2e2e2cde
js 0x433345
sub byte [edi], ch
das
das
scasd eax, dword es:[edi]
mov ebx, 0x2f2f2fda
das
das
je 0x43335a
div dword [esp + esi*4 - 8]
mov ah, 0x56
sub al, 0x2e
ja 0x433360
mov dl, 0x2a
movsb byte es:[edi], byte cs:[esi]
sub ch, byte [esi]
movsb byte es:[edi], byte [esi]
inc esi
sbb byte [ebx + 0x2c], cl
dec esi
outsd dx, dword [esi]
das
scasd eax, dword es:[edi]
imul ecx, dword [esi + 0x5e], 0x3e
mov ah, 4
mov ah, 4
das
das
das
ja 0x433379
xor byte [edi + 0x68], dh
sbb ah, byte [ecx + 0x2c6f181c]
dec esi
mov bl, 0x2f
das
das
das
das
scasd eax, dword es:[edi]
scasb al, byte es:[edi]
xor dword [esi + 0x3e], ebx
mov bl, 0xd0
pop esi
mov bl, 0xd0
das
das
das
in eax, dx
xor ch, byte [edi]
das
das
ja 0x43339e
sub al, 0x32
movsb byte es:[edi], byte [esi]
push ebx
ja 0x43345a
sbb eax, 0xe71ab878
xor byte [edi], ch
das
das
jnp 0x43343b
jne 0x43340c
sbb byte [esi + 0x3e2e2e2c], bl
dec esi
scasd eax, dword es:[edi]
das
das
das
das
ja 0x4333bf
mov dl, 0xf5
cmc
xor byte [edi + 0x68], dh
sbb eax, 0x6baf0ba3
pop si
movsb byte es:[edi], byte [esi]
imul esp, dword [esi + 0x5e], 0xffffffa4
and byte [edi + 0x68], dh
and al, 0x78
mov eax, 0x753e7b22
or al, 0x3e
mov ch, 0xc8
das
das
das
ja 0x4333de
cmc
xor byte [edi + 0x68], dh
sbb eax, 0x2fc5b23e
das
das
cmc
jae 0x43348d
push edi
xor edi, esp
xor byte [edi], ch
das
das
sbb byte [ebp + 0x2c], bh
dec esi
jae 0x433479
das
je 0x433415
pshufw mm4, qword [esi], 7
sbb byte [ebx + ebp - 0x4b88d1d2], bl
sbb al, 0x3e
mov bl, 0xbb
sub al, 0x2e
mov ah, 1
mov ah, 1
mov ah, 0xb3
sub al, 0x2e
ja 0x43346f
bnd je 0x4334e0
das
das
das
in eax, dx
xor dword [edi], ebp
das
das
sbb byte [ecx], ch
sub ebp, dword [esi]
ja 0x433504