Function at 0x4dc980
Capabilities:
Encode data using xor
Encrypt data using aes

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push ebx
mov ebx, dword [ebp + 8]
test ebx, ebx
je 0x4dce75
mov edx, dword [ebp + 0x10]
test edx, edx
je 0x4dce75
push edi
mov edi, dword [ebp + 0xc]
cmp edi, 0x80
je 0x4dc9cc
cmp edi, 0xc0
je 0x4dc9c4
cmp edi, 0x100
je 0x4dc9c4
pop edi
mov eax, 0xfffffffe
pop ebx
mov esp, ebp
pop ebp
ret
cmp edi, 0x80
jne 0x4dc9d8
mov dword [edx + 0xf0], 0xa
jmp 0x4dc9f0
xor eax, eax
cmp edi, 0xc0
setne al
lea eax, [eax*2 + 0xc]
mov dword [edx + 0xf0], eax
mov eax, dword [ebx]
mov ecx, eax
ror ecx, 8
rol eax, 8
and ecx, 0xff00ff00
and eax, 0xff00ff
or ecx, eax
mov dword [edx], ecx
mov dword [ebp - 4], ecx
mov ecx, dword [ebx + 4]
mov eax, ecx
ror eax, 8
rol ecx, 8
and eax, 0xff00ff00
and ecx, 0xff00ff
or eax, ecx
mov dword [edx + 4], eax
mov ecx, dword [ebx + 8]
mov eax, ecx
push esi
lea esi, [edx + 4]
ror eax, 8
rol ecx, 8
and eax, 0xff00ff00
and ecx, 0xff00ff
or eax, ecx
mov dword [edx + 8], eax
mov eax, dword [ebx + 0xc]
mov ecx, eax
ror ecx, 8
rol eax, 8
and ecx, 0xff00ff00
and eax, 0xff00ff
or ecx, eax
mov dword [ebp - 8], ecx
mov dword [edx + 0xc], ecx
cmp edi, 0x80
jne 0x4dcb6a
mov ebx, dword [ebp - 8]
mov eax, ecx
shr eax, 0x10
mov edi, 0x5bed24
movzx eax, al
mov ecx, dword [eax*4 + 0x5bd420]
mov eax, ebx
shr eax, 8
xor ecx, 0x1000000
movzx eax, al
and ecx, 0xff000000
mov eax, dword [eax*4 + 0x5bd820]
and eax, 0xff0000
xor ecx, eax
mov eax, ebx
shr eax, 0x18
movzx eax, byte [eax*4 + 0x5bd020]
xor ecx, eax
movzx eax, bl
mov eax, dword [eax*4 + 0x5bcc20]
and eax, 0xff00
xor ecx, eax
mov eax, dword [esi]
xor ecx, dword [ebp - 4]
xor eax, ecx
mov dword [edx + 0x10], ecx
mov ecx, dword [edx + 8]
xor ecx, eax
mov dword [edx + 0x14], eax
mov eax, dword [edx + 0xc]
xor eax, ecx
mov dword [edx + 0x18], ecx
mov dword [edx + 0x1c], eax
mov ecx, dword [esi + 0x18]
lea esi, [esi + 0x10]
mov eax, ecx
shr eax, 8
movzx eax, al
mov edx, dword [eax*4 + 0x5bd820]
mov eax, ecx
shr eax, 0x10
and edx, 0xff0000
movzx eax, al
mov eax, dword [eax*4 + 0x5bd420]
and eax, 0xff000000
xor edx, eax
mov eax, ecx
shr eax, 0x18
movzx eax, byte [eax*4 + 0x5bd020]
xor edx, eax
movzx eax, cl
mov eax, dword [eax*4 + 0x5bcc20]
and eax, 0xff00
xor edx, eax
xor edx, dword [esi - 4]
xor edx, dword [edi]
add edi, 4
mov dword [esi + 0xc], edx
mov eax, dword [esi]
xor eax, edx
mov dword [esi + 0x10], eax
mov ecx, dword [esi + 4]
xor ecx, eax
mov dword [esi + 0x14], ecx
mov eax, dword [esi + 8]
xor eax, ecx
mov dword [esi + 0x18], eax
cmp edi, str.c:_cygwin_home_shachar_zon_new_pkg_lib_openssl_crypto_aes_aes_core.c
jne 0x4dcae6
pop esi
pop edi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebx + 0x10]
mov eax, ecx
ror eax, 8
and eax, 0xff00ff00
rol ecx, 8
and ecx, 0xff00ff
or eax, ecx
mov dword [edx + 0x10], eax
mov eax, dword [ebx + 0x14]
mov ebx, eax
ror ebx, 8
rol eax, 8
and ebx, 0xff00ff00
and eax, 0xff00ff
or ebx, eax
mov dword [edx + 0x14], ebx
cmp edi, 0xc0
jne 0x4dccbe
mov eax, ebx
mov edi, 0x5bed24
shr eax, 0x10
movzx eax, al
mov ecx, dword [eax*4 + 0x5bd420]
mov eax, ebx
shr eax, 8
xor ecx, 0x1000000
movzx eax, al
and ecx, 0xff000000
mov eax, dword [eax*4 + 0x5bd820]
and eax, 0xff0000
xor ecx, eax
mov eax, ebx
shr eax, 0x18
movzx eax, byte [eax*4 + 0x5bd020]
xor ecx, eax
movzx eax, bl
mov eax, dword [eax*4 + 0x5bcc20]
and eax, 0xff00
xor ecx, eax
mov eax, dword [esi]
xor ecx, dword [ebp - 4]
xor eax, ecx
mov dword [edx + 0x18], ecx
mov ecx, dword [edx + 8]
xor ecx, eax
mov dword [edx + 0x1c], eax
mov eax, dword [edx + 0xc]
xor eax, ecx
mov dword [edx + 0x20], ecx
mov dword [edx + 0x24], eax
lea eax, [edx + 0x28]
mov edx, dword [eax - 0x18]
lea eax, [eax + 0x18]
xor edx, dword [eax - 0x1c]
mov ecx, dword [eax - 0x2c]
xor ecx, edx
mov dword [eax - 0x18], edx
mov dword [eax - 0x14], ecx
mov edx, dword [eax - 0x14]
mov ecx, edx
shr ecx, 8
movzx ecx, cl
mov esi, dword [ecx*4 + 0x5bd820]
mov ecx, edx
shr ecx, 0x10
and esi, 0xff0000
movzx ecx, cl
mov ecx, dword [ecx*4 + 0x5bd420]
and ecx, 0xff000000
xor esi, ecx
mov ecx, edx
shr ecx, 0x18
movzx ecx, byte [ecx*4 + 0x5bd020]
xor esi, ecx
movzx ecx, dl
mov ecx, dword [ecx*4 + 0x5bcc20]
and ecx, 0xff00
xor esi, ecx
xor esi, dword [eax - 0x28]
xor esi, dword [edi]
add edi, 4
mov dword [eax - 0x10], esi
mov ecx, dword [eax - 0x24]
xor ecx, esi
mov dword [eax - 0xc], ecx
mov edx, dword [eax - 0x20]
xor edx, ecx
mov dword [eax - 8], edx
mov ecx, dword [eax - 0x1c]
xor ecx, edx
mov dword [eax - 4], ecx
cmp edi, 0x5bed40
jne 0x4dcc22
pop esi
pop edi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret
mov ebx, dword [ebp + 8]
mov ecx, dword [ebx + 0x18]
mov eax, ecx
ror eax, 8
and eax, 0xff00ff00
rol ecx, 8
and ecx, 0xff00ff
or eax, ecx
mov dword [edx + 0x18], eax
mov eax, dword [ebx + 0x1c]
mov ebx, eax
ror ebx, 8
rol eax, 8
and ebx, 0xff00ff00
and eax, 0xff00ff
or ebx, eax
mov dword [edx + 0x1c], ebx
cmp edi, 0x100
jne 0x4dcb61
mov eax, ebx
mov edi, 0x5bed24
shr eax, 0x10
movzx eax, al
mov ecx, dword [eax*4 + 0x5bd420]
mov eax, ebx
shr eax, 8
xor ecx, 0x1000000
movzx eax, al
and ecx, 0xff000000
mov eax, dword [eax*4 + 0x5bd820]
and eax, 0xff0000
xor ecx, eax
mov eax, ebx
shr eax, 0x18
movzx eax, byte [eax*4 + 0x5bd020]
xor ecx, eax
movzx eax, bl
mov eax, dword [eax*4 + 0x5bcc20]
and eax, 0xff00
xor ecx, eax
mov eax, dword [esi]
xor ecx, dword [ebp - 4]
lea esi, [edx + 0x30]
xor eax, ecx
mov dword [edx + 0x20], ecx
mov ecx, dword [edx + 8]
xor ecx, eax
mov dword [edx + 0x24], eax
mov eax, dword [edx + 0xc]
xor eax, ecx
mov dword [edx + 0x28], ecx
mov dword [edx + 0x2c], eax
nop dword [eax]
mov ecx, dword [esi - 4]
lea esi, [esi + 0x20]
mov eax, ecx
shr eax, 0x10
movzx eax, al
mov edx, dword [eax*4 + 0x5bd820]
mov eax, ecx
shr eax, 8
and edx, 0xff0000
movzx eax, al
mov eax, dword [eax*4 + 0x5bcc20]
and eax, 0xff00
xor edx, eax
mov eax, ecx
shr eax, 0x18
mov eax, dword [eax*4 + 0x5bd420]
and eax, 0xff000000
xor edx, eax
movzx eax, cl
mov ecx, dword [esi - 0x38]
movzx eax, byte [eax*4 + 0x5bd020]
xor edx, eax
mov eax, dword [esi - 0x3c]
xor edx, dword [esi - 0x40]
xor eax, edx
mov dword [esi - 0x20], edx
mov dword [esi - 0x1c], eax
xor ecx, eax
mov eax, dword [esi - 0x34]
xor eax, ecx
mov dword [esi - 0x18], ecx
mov dword [esi - 0x14], eax
mov ecx, dword [esi - 0x14]
mov eax, ecx
shr eax, 8
movzx eax, al
mov edx, dword [eax*4 + 0x5bd820]
mov eax, ecx
shr eax, 0x10
and edx, 0xff0000
movzx eax, al
mov eax, dword [eax*4 + 0x5bd420]
and eax, 0xff000000
xor edx, eax
mov eax, ecx
shr eax, 0x18
movzx eax, byte [eax*4 + 0x5bd020]
xor edx, eax
movzx eax, cl
mov eax, dword [eax*4 + 0x5bcc20]
and eax, 0xff00
xor edx, eax
xor edx, dword [esi - 0x30]
xor edx, dword [edi]
add edi, 4
mov dword [esi - 0x10], edx
mov eax, dword [esi - 0x2c]
xor eax, edx
mov dword [esi - 0xc], eax
mov ecx, dword [esi - 0x28]
xor ecx, eax
mov dword [esi - 8], ecx
mov eax, dword [esi - 0x24]
xor eax, ecx
mov dword [esi - 4], eax
cmp edi, 0x5bed3c
jne 0x4dcd80
pop esi
pop edi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret
or eax, 0xffffffff
pop ebx
mov esp, ebp
pop ebp
ret