Function at 0x4badf0
Capabilities:
Authenticate hmac
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
mov eax, 0x32c
call fcn.0053a250
mov eax, dword [0x5b46a4]
xor eax, esp
mov dword [esp + 0x328], eax
mov eax, dword [esp + 0x334]
mov ecx, dword [esp + 0x33c]
mov edx, dword [esp + 0x340]
push ebx
mov ebx, dword [esp + 0x334]
push ebp
mov ebp, dword [esp + 0x340]
push esi
mov esi, dword [esp + 0x354]
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x358]
push edi
mov dword [esp + 0x70], ebx
mov dword [esp + 0x54], ebp
mov dword [esp + 0x44], ecx
mov dword [esp + 0x40], edx
mov dword [esp + 0x4c], eax
mov edi, 0x40
mov dword [esp + 0x38], 0x28
mov dword [esp + 0x1c], 8
mov byte [esp + 0x12], 1
cmp esi, 0x100000
jb 0x4bae8e
push str.data_plus_mac_plus_padding_size___1024__1024
push 0x1c6
push str.._ssl_s3_cbc.c
call fcn.00447740
add esp, 0xc
push ebx
call fcn.0043bd60
push eax
call fcn.004a3730
add esp, 8
cmp eax, 0x2a0
jg 0x4baf43
je 0x4baf19
cmp eax, 4
je 0x4baee2
cmp eax, 0x40
jne 0x4baf50
lea ecx, [esp + 0x90]
push ecx
call fcn.004837e0
mov dword [esp + 0x28], 0x4babd0
mov dword [esp + 0x1c], 0x4661a0
mov dword [esp + 0x18], 0x14
jmp 0x4bafe7
lea edx, [esp + 0x90]
push edx
call fcn.00441de0
mov dword [esp + 0x28], 0x4bab50
mov dword [esp + 0x1c], 0x441ca0
mov dword [esp + 0x18], 0x10
mov dword [esp + 0x3c], 0x30
mov byte [esp + 0x16], 0
jmp 0x4bafe7
lea eax, [esp + 0x90]
push eax
call fcn.00441e80
mov dword [esp + 0x28], 0x4bac70
mov dword [esp + 0x1c], 0x441fc0
mov dword [esp + 0x18], 0x20
jmp 0x4bafe7
sub eax, 0x2a1
je 0x4bafb5
dec eax
je 0x4bafa2
dec eax
je 0x4baf7b
push 0x5adefc
push 0x202
push str.._ssl_s3_cbc.c
call fcn.00447740
add esp, 0xc
test ebp, ebp
je 0x4bb5b5
mov dword [ebp], 0xffffffff
jmp 0x4bb5b5
lea ecx, [esp + 0x90]
push ecx
call fcn.00441e20
mov dword [esp + 0x28], 0x4bac70
mov dword [esp + 0x1c], 0x441fc0
mov dword [esp + 0x18], 0x1c
jmp 0x4bafe7
lea edx, [esp + 0x90]
push edx
call fcn.004663a0
mov dword [esp + 0x18], edi
jmp 0x4bafca
lea eax, [esp + 0x90]
push eax
call fcn.00466300
mov dword [esp + 0x18], 0x30
mov dword [esp + 0x20], 0x10
mov edi, 0x80
mov dword [esp + 0x1c], 0x4669c0
mov dword [esp + 0x28], 0x4bad60
mov bl, byte [esp + 0x368]
add esp, 4
mov dword [esp + 0x30], 0xd
test bl, bl
je 0x4bb010
mov ecx, dword [esp + 0x360]
mov edx, dword [esp + 0x38]
lea eax, [edx + ecx + 0xb]
mov dword [esp + 0x30], eax
mov edx, dword [esp + 0x1c]
xor ecx, ecx
test bl, bl
sete cl
lea ebp, [ecx*4 + 2]
mov ecx, dword [esp + 0x30]
sub ecx, dword [esp + 0x14]
mov dword [esp + 0x34], ebp
lea eax, [ecx + edx]
add eax, edi
xor edx, edx
lea eax, [eax + esi - 1]
div edi
add ecx, dword [esp + 0x354]
xor edx, edx
mov esi, eax
xor eax, eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
mov eax, ecx
div edi
mov dword [esp + 0x3c], edx
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x1c]
xor edx, edx
add eax, ecx
div edi
xor edx, edx
test bl, bl
setne dl
add edx, ebp
mov dword [esp + 0x64], eax
cmp esi, edx
jbe 0x4bb086
sub esi, ebp
mov eax, esi
mov dword [esp + 0x28], eax
imul eax, edi
mov dword [esp + 0x2c], eax
cmp byte [esp + 0x364], 0
lea ebx, [ecx*8]
jne 0x4bb11b
push edi
lea eax, [esp + 0x1bc]
push 0
push eax
lea ebx, [ebx + edi*8]
call fcn.0053bcd0
mov esi, dword [esp + 0x36c]
add esp, 0xc
cmp esi, 0x80
jbe 0x4bb0d7
push str.mac_secret_length___sizeof_hmac_pad_
push 0x26a
push str.._ssl_s3_cbc.c
call fcn.00447740
add esp, 0xc
mov ecx, dword [esp + 0x4c]
push esi
push ecx
lea edx, [esp + 0x1c0]
push edx
call fcn.0053b750
add esp, 0xc
xor eax, eax
test edi, edi
je 0x4bb100
xor byte [esp + eax + 0x1b8], 0x36
inc eax
cmp eax, edi
jb 0x4bb0f3
mov ebp, dword [esp + 0x18]
lea eax, [esp + 0x1b8]
push eax
lea ecx, [esp + 0x94]
push ecx
call ebp
add esp, 8
jmp 0x4bb11f
mov ebp, dword [esp + 0x18]
cmp byte [esp + 0x12], 0
mov esi, dword [esp + 0x1c]
je 0x4bb164
lea edx, [esi - 4]
push edx
lea eax, [esp + 0x16c]
push 0
push eax
call fcn.0053bcd0
lea eax, [esp + esi + 0x174]
mov ecx, ebx
shr ecx, 0x18
mov byte [eax - 4], cl
mov edx, ebx
shr edx, 0x10
mov ecx, ebx
add esp, 0xc
shr ecx, 8
mov byte [eax - 3], dl
mov byte [eax - 2], cl
mov byte [eax - 1], bl
jmp 0x4bb199
push esi
lea edx, [esp + 0x16c]
push 0
push edx
call fcn.0053bcd0
lea eax, [esp + esi + 0x174]
mov ecx, ebx
shr ecx, 0x18
mov byte [eax - 5], cl
mov edx, ebx
shr edx, 0x10
mov ecx, ebx
add esp, 0xc
shr ecx, 8
mov byte [eax - 6], dl
mov byte [eax - 7], cl
mov byte [eax - 8], bl
mov ebx, dword [esp + 0x2c]
test ebx, ebx
je 0x4bb2c3
cmp byte [esp + 0x364], 0
je 0x4bb240
mov esi, dword [esp + 0x30]
cmp esi, edi
jbe 0x4bb5b5
mov ebx, dword [esp + 0x44]
lea edx, [esp + 0x90]
push ebx
push edx
sub esi, edi
call ebp
push esi
add ebx, edi
lea eax, [esp + 0x244]
push ebx
push eax
call fcn.0053b750
mov ebx, dword [esp + 0x54]
mov ecx, edi
sub ecx, esi
push ecx
lea edx, [esp + esi + 0x250]
push ebx
push edx
call fcn.0053b750
lea eax, [esp + 0x258]
push eax
lea ecx, [esp + 0xb4]
push ecx
call ebp
mov eax, dword [esp + 0x54]
xor edx, edx
div edi
add esp, 0x28
dec eax
cmp eax, 1
jbe 0x4bb2c3
sub ebx, esi
add ebx, edi
lea esi, [eax - 1]
lea edx, [esp + 0x90]
push ebx
push edx
call dword [esp + 0x20]
add esp, 8
add ebx, edi
dec esi
jne 0x4bb226
jmp 0x4bb2c3
mov eax, dword [esp + 0x44]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov esi, dword [esp + 0x40]
mov dword [esp + 0x238], ecx
mov ecx, dword [eax + 8]
mov dword [esp + 0x23c], edx
mov dl, byte [eax + 0xc]
lea eax, [edi - 0xd]
push eax
mov dword [esp + 0x244], ecx
lea ecx, [esp + 0x249]
push esi
push ecx
mov byte [esp + 0x250], dl
call fcn.0053b750
lea edx, [esp + 0x244]
push edx
lea eax, [esp + 0xa0]
push eax
call ebp
xor edx, edx
mov eax, ebx
div edi
add esp, 0x14
cmp eax, 1
jbe 0x4bb2c3
lea esi, [esi + edi - 0xd]
lea ebx, [eax - 1]
jmp 0x4bb2b0
lea ecx, [esp + 0x90]
push esi
push ecx
call ebp
add esp, 8
add esi, edi
dec ebx
jne 0x4bb2b0
push 0x40
lea edx, [esp + 0x17c]
push 0
push edx
call fcn.0053bcd0
mov ebp, dword [esp + 0x34]
mov eax, dword [esp + 0x40]
add eax, ebp
add esp, 0xc
mov dword [esp + 0x48], ebp
mov dword [esp + 0x50], eax
cmp ebp, eax
ja 0x4bb4a4
mov eax, ebp
xor eax, dword [esp + 0x68]
xor esi, esi
lea edx, [eax - 1]
not eax
shr eax, 0x1f
shr edx, 0x1f
and dl, al
mov eax, ebp
xor eax, dword [esp + 0x64]
neg dl
lea ebx, [eax - 1]
shr ebx, 0x1f
not eax
shr eax, 0x1f
and bl, al
neg bl
mov byte [esp + 0x22], dl
mov byte [esp + 0x13], bl
test edi, edi
je 0x4bb444
mov eax, dword [esp + 0x3c]
lea ecx, [eax + 1]
shr ecx, 0x1f
mov dword [esp + 0x6c], ecx
mov cl, bl
not cl
or cl, dl
mov byte [esp + 0x23], cl
movzx ebp, dl
mov ecx, edi
sub ecx, dword [esp + 0x1c]
mov dword [esp + 0x5c], ebp
mov ebp, dword [esp + 0x3c]
mov dword [esp + 0x74], ecx
mov ecx, dword [esp + 0x1c]
shr eax, 0x1f
neg ebp
sub ecx, edi
lea edx, [esp + ecx + 0x168]
mov dword [esp + 0x34], eax
mov dword [esp + 0x28], edx
jmp 0x4bb384
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x30]
mov byte [esp + 0x12], 0
cmp ecx, edx
jae 0x4bb39e
mov edx, dword [esp + 0x44]
mov dl, byte [edx + ecx]
jmp 0x4bb3b4
mov ebx, dword [esp + 0x358]
add ebx, edx
cmp ecx, ebx
jae 0x4bb3b8
mov ebx, dword [esp + 0x40]
sub ebx, edx
mov dl, byte [ebx + ecx]
mov byte [esp + 0x12], dl
inc ecx
mov dword [esp + 0x2c], ecx
mov ecx, esi
shr ecx, 0x1f
mov bl, cl
xor bl, al
mov edx, ebp
shr edx, 0x1f
xor dl, al
or dl, bl
xor dl, cl
dec dl
movzx eax, dl
mov edx, dword [esp + 0x3c]
and eax, dword [esp + 0x5c]
inc edx
mov ebx, esi
sub ebx, edx
mov dl, byte [esp + 0x6c]
shr ebx, 0x1f
xor bl, dl
xor dl, cl
or bl, dl
xor bl, cl
dec bl
and bl, byte [esp + 0x22]
mov cl, al
not cl
and cl, byte [esp + 0x12]
and al, 0x80
not bl
or cl, al
and bl, cl
and bl, byte [esp + 0x23]
mov al, bl
mov bl, byte [esp + 0x13]
cmp esi, dword [esp + 0x74]
jb 0x4bb42b
movzx ecx, bl
mov dl, cl
not dl
and dl, al
mov eax, dword [esp + 0x28]
mov al, byte [eax]
and al, cl
or al, dl
inc dword [esp + 0x28]
mov byte [esp + esi + 0x2b8], al
inc esi
inc ebp
cmp esi, edi
jb 0x4bb380
mov ebp, dword [esp + 0x48]
lea ecx, [esp + 0x2b8]
push ecx
lea edx, [esp + 0x94]
push edx
call dword [esp + 0x20]
lea eax, [esp + 0x2c0]
push eax
lea ecx, [esp + 0x9c]
push ecx
call dword [esp + 0x34]
mov esi, dword [esp + 0x24]
add esp, 0x10
xor eax, eax
test esi, esi
je 0x4bb495
lea esp, [esp]
mov dl, byte [esp + eax + 0x2b8]
and dl, bl
or byte [esp + eax + 0x178], dl
inc eax
cmp eax, esi
jb 0x4bb480
inc ebp
mov dword [esp + 0x48], ebp
cmp ebp, dword [esp + 0x50]
jbe 0x4bb2f1
lea eax, [esp + 0x78]
push eax
call fcn.00447870
mov ecx, dword [esp + 0x74]
mov edx, dword [ecx]
push 0
push edx
lea eax, [esp + 0x84]
push eax
call fcn.004478c0
add esp, 0x10
cmp byte [esp + 0x364], 0
je 0x4bb534
mov esi, dword [esp + 0x38]
push esi
lea ecx, [esp + 0x1bc]
push 0x5c
push ecx
call fcn.0053bcd0
mov edx, dword [esp + 0x36c]
mov eax, dword [esp + 0x58]
push edx
push eax
lea ecx, [esp + 0x8c]
push ecx
call fcn.00447a70
push esi
lea edx, [esp + 0x1d4]
push edx
lea eax, [esp + 0x98]
push eax
call fcn.00447a70
mov ecx, dword [esp + 0x38]
push ecx
lea edx, [esp + 0x1a0]
push edx
lea eax, [esp + 0xa4]
push eax
call fcn.00447a70
add esp, 0x30
jmp 0x4bb580
xor eax, eax
test edi, edi
je 0x4bb54d
lea ebx, [ebx]
xor byte [esp + eax + 0x1b8], 0x6a
inc eax
cmp eax, edi
jb 0x4bb540
push edi
lea ecx, [esp + 0x1bc]
push ecx
lea edx, [esp + 0x80]
push edx
call fcn.00447a70
mov eax, dword [esp + 0x20]
push eax
lea ecx, [esp + 0x188]
push ecx
lea edx, [esp + 0x8c]
push edx
call fcn.00447a70
add esp, 0x18
mov ecx, dword [esp + 0x60]
lea eax, [esp + 0x58]
push eax
push ecx
lea edx, [esp + 0x80]
push edx
call fcn.00447be0
mov eax, dword [esp + 0x60]
add esp, 0xc
test eax, eax
je 0x4bb5a8
mov ecx, dword [esp + 0x58]
mov dword [eax], ecx
lea edx, [esp + 0x78]
push edx
call fcn.00447b00
add esp, 4
mov ecx, dword [esp + 0x338]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.0053a230
add esp, 0x32c
ret