Function at 0x42eab0
Capabilities:
Encode data using xor
Encrypt data using speck
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x9f0
mov esi, esp
push 0x1000
call fcn.0040c720
add esp, 4
mov dword [esi + 0x14], eax
mov dword [esi + 0x7b0], 0x53027c1a
mov dword [esi + 0x7b4], 0x6dbeb145
mov dword [esi + 0x7b8], 0x5978
mov byte [esi + 0x7bc], 0
mov edx, 0xa2898537
mov eax, 0x5d767ac8
movzx edi, byte [esi + edx + 0x5d768279]
lea ebx, [edx + 1]
mov dword [esi + 4], ebx
and ebx, edi
lea ecx, [eax + ebx*2]
mov dword [esi + 8], ecx
add ebx, ebx
mov ecx, edx
sub ecx, ebx
and ecx, edi
not edi
and edi, dword [esi + 8]
sub ecx, edi
add cl, 0xe8
mov byte [esi + edx + 0x5d768279], cl
dec eax
mov ecx, dword [esi + 4]
mov edx, ecx
cmp ecx, 0xa2898544
jne 0x42eb00
mov eax, dword [0x448634]
mov dword [esi + 4], eax
mov dword [esi + 0x404], 0xd8fef416
mov dword [esi + 0x408], 0x4a48afaf
mov dword [esi + 0x40c], 0x4650544b
mov dword [esi + 0x410], 0x59594c50
mov word [esi + 0x414], 0x916
mov byte [esi + 0x416], 0xee
mov dword [esi + 0x417], 0
xor ecx, ecx
nop
nop
nop
nop
nop
nop
nop
mov edi, ecx
and edi, 0x15
xor edi, 0xacc95995
mov edx, ecx
and edx, 0xa
sub edx, edi
mov edi, edx
and edi, 0xd110807a
xor edx, 0xd510897a
lea ebx, [edx + edi*2]
mov eax, 0x5336a66a
sub eax, ebx
lea edi, [edx + edi*2]
add edi, 0x2cc95995
movzx edx, byte [esi + ecx + 0x404]
and eax, 0xd5603139
and edi, 0x2a9fcec6
or edi, eax
mov ebx, edx
xor ebx, 0x39
xor edx, 0xc6
or edx, edi
not edi
or edi, ebx
and edx, edi
mov al, 0x9d
sub al, dl
mov byte [esi + ecx + 0x404], al
inc ecx
cmp ecx, 0x17
jne 0x42eb90
mov ecx, dword [str.c2CoW0__PROVERKA]
mov dword [esi + 0xac], 0xae644759
mov dword [esi + 0xb0], 0x8c9443ab
mov dword [esi + 0xb4], 0x955e75b5
mov dword [esi + 0xb8], 0x817a5b61
mov dword [esi + 0xbc], 0x928180bb
mov dword [esi + 0xc0], 0xbcbb8286
mov dword [esi + 0xc4], 0x7414babe
mov dword [esi + 0xc8], 0x8e854968
mov dword [esi + 0xcc], 0xb5b9aa7a
mov dword [esi + 0xd0], 0xacb663b4
mov dword [esi + 0xd4], 0x795492a5
mov dword [esi + 0xd8], 0xa295af58
mov dword [esi + 0xdc], 0xb2a1b4a3
mov dword [esi + 0xe0], 0xe1ada6a2
mov dword [esi + 0xe4], 0x73e2dece
mov dword [esi + 0xe8], 0xea3e0b1f
mov dword [esi + 0xec], 0x3cc5d0d3
mov dword [esi + 0xf0], 0xf2200312
mov dword [esi + 0xf4], 0x33c2cbc7
mov dword [esi + 0xf8], 0xf9c72a18
mov dword [esi + 0xfc], 0x11050514
mov dword [esi + 0x100], 0x1000302
mov dword [esi + 0x104], 0x1d2e3856
mov dword [esi + 0x108], 0x25001713
mov byte [esi + 0x10c], 0x44
mov word [esi + 0x111], 0
mov dword [esi + 0x10d], 0
mov edx, 0x6f765909
mov edi, 0xf6
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx eax, byte [esi + edx - 0x6f76585d]
mov ebx, edi
xor ebx, edx
and ebx, eax
xor ebx, edx
mov eax, ebx
and eax, 0x52
xor ebx, 0xd2
lea eax, [ebx + eax*2]
inc al
mov byte [esi + edx - 0x6f76585d], al
inc edx
dec edi
cmp edx, 0x6f765970
jne 0x42ed20
movzx edx, byte [esi + 0xac]
mov eax, dword [esi + 0x14]
mov ebx, eax
test dl, dl
je 0x42ed7b
lea edi, [esi + 0xad]
mov ebx, eax
nop
nop
nop
nop
nop
nop
nop
mov byte [ebx], dl
inc ebx
movzx edx, byte [edi]
inc edi
test dl, dl
jne 0x42ed70
mov byte [ebx], 0
movzx edx, byte [ecx]
test dl, dl
je 0x42ed9d
inc ecx
mov eax, dword [esi + 4]
nop
nop
nop
nop
nop
nop
nop
mov byte [ebx], dl
inc ebx
movzx edx, byte [ecx]
inc ecx
test dl, dl
jne 0x42ed90
jmp 0x42eda0
mov eax, dword [esi + 4]
mov byte [ebx], 0
movzx ecx, byte [esi + 0x404]
test cl, cl
je 0x42edcb
lea edx, [esi + 0x405]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [ebx], cl
inc ebx
movzx ecx, byte [edx]
inc edx
test cl, cl
jne 0x42edc0
mov byte [ebx], 0
movzx ecx, byte [eax]
test cl, cl
je 0x42edeb
inc eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [ebx], cl
inc ebx
movzx ecx, byte [eax]
inc eax
test cl, cl
jne 0x42ede0
mov byte [ebx], 0
movzx eax, byte [esi + 0x7b0]
test al, al
je 0x42ee0b
lea ecx, [esi + 0x7b1]
nop
mov byte [ebx], al
inc ebx
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x42ee00
mov byte [ebx], 0
push 0
call fcn.00442920
add esp, 4
xor ecx, ecx
test eax, eax
setne cl
jmp dword [ecx*4 + 0x44c004]