Function at 0x571c80
Capabilities:
Authenticate hmac
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
mov eax, 0x354
call fcn.005ca540
mov eax, dword [0x6c6f60]
xor eax, esp
mov dword [esp + 0x350], eax
mov eax, dword [ebp + 8]
mov dword [esp + 0x4c], eax
mov eax, dword [ebp + 0xc]
mov dword [esp + 0x54], eax
mov eax, dword [ebp + 0x14]
push ebx
mov ebx, dword [ebp + 0x20]
mov dword [esp + 0x38], eax
mov eax, dword [ebp + 0x18]
mov dword [esp + 0x30], eax
mov eax, dword [ebp + 0x24]
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], 0x28
mov dword [esp + 0x14], 8
mov byte [esp + 0xf], 1
push esi
mov esi, dword [ebp + 0x10]
mov dword [esp + 0x6c], esi
push edi
mov edi, 0x40
cmp ebx, 0x100000
jb 0x571d07
push str.data_plus_mac_plus_padding_size___1024__1024
push 0x1c7
push str.._ssl_s3_cbc.c
call fcn.0053a450
add esp, 0xc
push dword [esp + 0x58]
call sym.Setup.exe_libssh2_sftp_get_channel
push eax
call fcn.00466150
add esp, 8
cmp eax, 0x2a0
jg 0x571ddc
je 0x571daa
cmp eax, 4
je 0x571d6a
cmp eax, 0x40
jne 0x571ded
lea eax, [esp + 0xb0]
push eax
call fcn.0057ba40
add esp, 4
test eax, eax
jle 0x572528
mov dword [esp + 0x30], 0x5728e0
mov eax, 0x14
mov dword [esp + 0x18], 0x57ba80
jmp 0x571eae
lea eax, [esp + 0xb0]
push eax
call fcn.00538b90
add esp, 4
test eax, eax
jle 0x572528
mov edx, 0x30
mov dword [esp + 0x30], 0x572860
mov dword [esp + 0x18], 0x538bd0
mov eax, 0x10
mov dword [esp + 0x54], edx
mov byte [esp + 0x17], 0
jmp 0x571eb3
lea eax, [esp + 0xb0]
push eax
call fcn.0057bec0
add esp, 4
test eax, eax
jle 0x572528
mov dword [esp + 0x30], 0x572980
mov eax, 0x20
mov dword [esp + 0x18], 0x57bf20
jmp 0x571eae
sub eax, 0x2a1
je 0x571e74
dec eax
je 0x571e58
dec eax
je 0x571e29
push 0x6a5ecc
push 0x209
push str.._ssl_s3_cbc.c
call fcn.0053a450
add esp, 0xc
test esi, esi
je 0x572528
mov dword [esi], 0
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x350]
xor ecx, esp
call fcn.005c950e
mov esp, ebp
pop ebp
ret
lea eax, [esp + 0xb0]
push eax
call fcn.0057bb80
add esp, 4
test eax, eax
jle 0x572528
mov dword [esp + 0x30], 0x572980
mov eax, 0x1c
mov dword [esp + 0x18], 0x57bf20
jmp 0x571eae
lea eax, [esp + 0xb0]
push eax
call fcn.0057c650
add esp, 4
test eax, eax
jle 0x572528
mov eax, edi
jmp 0x571e91
lea eax, [esp + 0xb0]
push eax
call fcn.0057c020
add esp, 4
test eax, eax
jle 0x572528
mov eax, 0x30
mov dword [esp + 0x1c], 0x10
mov edi, 0x80
mov dword [esp + 0x18], 0x57c700
mov dword [esp + 0x30], 0x572a70
mov edx, 0x28
cmp byte [ebp + 0x2c], 0
mov ecx, 0xd
mov dword [esp + 0x20], eax
mov dword [esp + 0x4c], ecx
je 0x571ed2
mov ecx, dword [ebp + 0x28]
add ecx, 0xb
add ecx, edx
mov dword [esp + 0x4c], ecx
xor edx, edx
mov esi, ecx
cmp byte [ebp + 0x2c], dl
sete dl
sub esi, eax
mov eax, dword [esp + 0x1c]
xor ecx, ecx
dec eax
add eax, esi
add esi, dword [ebp + 0x1c]
add eax, edi
lea edx, [edx*4 + 2]
add eax, ebx
mov dword [esp + 0x3c], edx
xor edx, edx
xor ebx, ebx
div edi
xor edx, edx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x34], eax
xor eax, eax
mov dword [esp + 0x44], eax
mov eax, esi
div edi
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x48], edx
add eax, esi
xor edx, edx
div edi
cmp byte [ebp + 0x2c], cl
mov edx, dword [esp + 0x3c]
setne cl
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x34]
add ecx, edx
cmp eax, ecx
jbe 0x571f4c
sub eax, edx
mov ebx, eax
mov dword [esp + 0x44], eax
imul ebx, edi
mov dword [esp + 0x24], ebx
cmp byte [ebp + 0x2c], 0
lea eax, [esi*8]
mov dword [esp + 0x28], eax
jne 0x572028
lea eax, [eax + edi*8]
push edi
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x1dc]
push 0
push eax
call fcn.005e2ec0
mov esi, dword [ebp + 0x28]
add esp, 0xc
cmp esi, 0x80
jbe 0x571f9d
push str.mac_secret_length___sizeof_hmac_pad_
push 0x271
push str.._ssl_s3_cbc.c
call fcn.0053a450
add esp, 0xc
push esi
push dword [esp + 0x54]
lea eax, [esp + 0x1e0]
push eax
call fcn.005e2940
add esp, 0xc
xor ecx, ecx
test edi, edi
je 0x57200d
cmp edi, 0x20
jb 0x571ffb
movdqa xmm1, xmmword [str.6666666666666666jjjjjjjjjjjjjjjj]
mov eax, edi
and eax, 0x1f
mov edx, edi
sub edx, eax
lea eax, [esp + 0x1e8]
movdqu xmm0, xmmword [eax - 0x10]
add ecx, 0x20
lea eax, [eax + 0x20]
pxor xmm0, xmm1
movdqu xmmword [eax - 0x30], xmm0
movdqu xmm0, xmmword [eax - 0x20]
pxor xmm0, xmm1
movdqu xmmword [eax - 0x20], xmm0
cmp ecx, edx
jb 0x571fd5
cmp ecx, edi
jae 0x57200d
nop
xor byte [esp + ecx + 0x1d8], 0x36
inc ecx
cmp ecx, edi
jb 0x572000
mov esi, dword [esp + 0x18]
lea eax, [esp + 0x1d8]
push eax
lea eax, [esp + 0xb4]
push eax
call esi
add esp, 8
jmp 0x57202c
mov esi, dword [esp + 0x18]
cmp byte [esp + 0x17], 0
je 0x572082
mov eax, dword [esp + 0x1c]
add eax, 0xfffffffc
push eax
lea eax, [esp + 0x18c]
push 0
push eax
call fcn.005e2ec0
mov ecx, dword [esp + 0x34]
add esp, 0xc
mov edx, dword [esp + 0x1c]
mov eax, ecx
shr eax, 0x18
mov byte [esp + edx + 0x184], al
mov eax, ecx
shr eax, 0x10
mov byte [esp + edx + 0x185], al
mov eax, ecx
shr eax, 8
mov byte [esp + edx + 0x186], al
mov byte [esp + edx + 0x187], cl
jmp 0x5720cb
push dword [esp + 0x1c]
lea eax, [esp + 0x18c]
push 0
push eax
call fcn.005e2ec0
mov ecx, dword [esp + 0x34]
add esp, 0xc
mov edx, dword [esp + 0x1c]
mov eax, ecx
shr eax, 0x18
mov byte [esp + edx + 0x183], al
mov eax, ecx
shr eax, 0x10
mov byte [esp + edx + 0x182], al
mov eax, ecx
shr eax, 8
mov byte [esp + edx + 0x181], al
mov byte [esp + edx + 0x180], cl
test ebx, ebx
je 0x5721f5
cmp byte [ebp + 0x2c], 0
je 0x57217a
mov esi, dword [esp + 0x4c]
cmp esi, edi
jbe 0x572528
push dword [esp + 0x40]
lea eax, [esp + 0xb4]
sub esi, edi
push eax
mov dword [esp + 0x3c], esi
call dword [esp + 0x20]
mov eax, dword [esp + 0x48]
add eax, edi
push esi
push eax
lea eax, [esp + 0x268]
push eax
call fcn.005e2940
mov eax, edi
sub eax, esi
push eax
push dword [esp + 0x50]
lea eax, [esp + 0x274]
add eax, esi
push eax
call fcn.005e2940
lea eax, [esp + 0x278]
push eax
lea eax, [esp + 0xd4]
push eax
call dword [esp + 0x40]
xor edx, edx
mov eax, ebx
div edi
add esp, 0x28
dec eax
cmp eax, 1
jbe 0x5721f5
mov esi, dword [esp + 0x38]
lea ebx, [eax - 1]
sub esi, dword [esp + 0x34]
add esi, edi
lea eax, [esp + 0xb0]
push esi
push eax
call dword [esp + 0x20]
add esp, 8
add esi, edi
dec ebx
jne 0x572160
jmp 0x5721f5
mov ecx, dword [esp + 0x40]
mov eax, dword [ecx + 8]
movq xmm0, qword [ecx]
mov dword [esp + 0x260], eax
mov al, byte [ecx + 0xc]
mov byte [esp + 0x264], al
lea eax, [edi - 0xd]
push eax
push dword [esp + 0x3c]
lea eax, [esp + 0x26d]
movq qword [esp + 0x260], xmm0
push eax
call fcn.005e2940
lea eax, [esp + 0x264]
push eax
lea eax, [esp + 0xc0]
push eax
call esi
xor edx, edx
mov eax, ebx
div edi
add esp, 0x14
cmp eax, 1
jbe 0x5721f5
mov esi, dword [esp + 0x38]
lea ebx, [eax - 1]
add esi, 0xfffffff3
add esi, edi
lea eax, [esp + 0xb0]
push esi
push eax
call dword [esp + 0x20]
add esp, 8
add esi, edi
dec ebx
jne 0x5721e0
push 0x40
lea eax, [esp + 0x19c]
push 0
push eax
call fcn.005e2ec0
mov eax, dword [esp + 0x48]
add esp, 0xc
mov edx, dword [esp + 0x44]
add eax, edx
mov esi, dword [esp + 0x20]
mov dword [esp + 0x7c], eax
cmp edx, eax
ja 0x572478
mov eax, edx
xor eax, dword [esp + 0x6c]
lea ecx, [eax - 1]
not eax
shr ecx, 0x1f
shr eax, 0x1f
and cl, al
mov eax, edx
xor eax, dword [esp + 0x68]
neg cl
mov dword [esp + 0x3c], ecx
xor edx, edx
mov dword [esp + 0x5c], edx
lea ecx, [eax - 1]
not eax
shr ecx, 0x1f
shr eax, 0x1f
and cl, al
neg cl
movsx eax, cl
mov dword [esp + 0x34], ecx
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
pshufd xmm0, xmm0, 0
movdqa xmmword [esp + 0xa0], xmm0
test edi, edi
je 0x57239c
mov eax, dword [esp + 0x48]
not cl
lea esi, [eax + 1]
shr eax, 0x1f
mov dword [esp + 0x78], eax
mov eax, dword [esp + 0x3c]
or cl, al
movzx ebx, al
mov eax, edi
sub eax, dword [esp + 0x1c]
shr esi, 0x1f
mov dword [esp + 0x84], eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x74], esi
sub eax, edi
mov esi, dword [esp + 0x48]
mov dword [esp + 0x80], ebx
neg esi
lea ebx, [esp + 0x188]
mov byte [esp + 0x2f], cl
add eax, ebx
mov ebx, dword [esp + 0x24]
mov dword [esp + 0x28], eax
mov ecx, dword [esp + 0x4c]
mov byte [esp + 0x17], 0
cmp ebx, ecx
jae 0x5722e8
mov eax, dword [esp + 0x40]
jmp 0x5722f7
mov eax, dword [ebp + 0x20]
add eax, ecx
cmp ebx, eax
jae 0x5722fe
mov eax, dword [esp + 0x38]
sub eax, ecx
mov al, byte [eax + ebx]
mov byte [esp + 0x17], al
mov eax, dword [esp + 0x78]
inc ebx
mov dword [esp + 0x24], ebx
mov ecx, esi
shr ecx, 0x1f
lea ebx, [esi - 1]
xor cl, al
shr edx, 0x1f
xor al, dl
shr ebx, 0x1f
or cl, al
mov eax, dword [esp + 0x74]
xor bl, al
xor cl, dl
xor al, dl
dec cl
or bl, al
movzx ecx, cl
and ecx, dword [esp + 0x80]
xor bl, dl
mov edx, dword [esp + 0x5c]
dec bl
and bl, byte [esp + 0x3c]
mov al, cl
not al
and cl, 0x80
and al, byte [esp + 0x17]
not bl
or al, cl
and bl, al
and bl, byte [esp + 0x2f]
cmp edx, dword [esp + 0x84]
jb 0x572374
mov eax, dword [esp + 0x34]
movzx ecx, al
mov al, cl
not al
and al, bl
mov ebx, dword [esp + 0x28]
and cl, byte [ebx]
or al, cl
mov bl, al
inc dword [esp + 0x28]
lea eax, [esp + 0x2d8]
add eax, dword [esp + 0x48]
inc edx
mov dword [esp + 0x5c], edx
mov byte [eax + esi], bl
inc esi
mov ebx, dword [esp + 0x24]
cmp edx, edi
jb 0x5722d5
mov esi, dword [esp + 0x20]
lea eax, [esp + 0x2d8]
push eax
lea eax, [esp + 0xb4]
push eax
call dword [esp + 0x20]
lea eax, [esp + 0x2e0]
push eax
lea eax, [esp + 0xbc]
push eax
call dword [esp + 0x40]
add esp, 0x10
xor eax, eax
test esi, esi
je 0x572465
cmp esi, 0x20
jb 0x57243d
movdqa xmm2, xmmword [esp + 0xa0]
mov ecx, esi
and ecx, 0x1f
mov edx, esi
sub edx, ecx
jmp 0x5723f0
movdqu xmm0, xmmword [esp + eax + 0x198]
movdqu xmm1, xmmword [esp + eax + 0x2d8]
pand xmm1, xmm2
por xmm1, xmm0
movdqu xmmword [esp + eax + 0x198], xmm1
movdqu xmm1, xmmword [esp + eax + 0x2e8]
movdqu xmm0, xmmword [esp + eax + 0x1a8]
pand xmm1, xmm2
por xmm1, xmm0
movdqu xmmword [esp + eax + 0x1a8], xmm1
add eax, 0x20
cmp eax, edx
jb 0x5723f0
cmp eax, esi
jae 0x572465
mov edx, dword [esp + 0x34]
jmp 0x572450
mov cl, byte [esp + eax + 0x2d8]
and cl, dl
or byte [esp + eax + 0x198], cl
inc eax
cmp eax, esi
jb 0x572450
mov edx, dword [esp + 0x44]
inc edx
mov dword [esp + 0x44], edx
cmp edx, dword [esp + 0x7c]
jbe 0x572223
lea eax, [esp + 0x88]
push eax
call fcn.0053ce20
mov eax, dword [esp + 0x5c]
push 0
push dword [eax]
lea eax, [esp + 0x94]
push eax
call fcn.0053ca00
add esp, 0x10
test eax, eax
jle 0x572518
cmp byte [ebp + 0x2c], 0
je 0x57253f
mov ebx, dword [esp + 0x54]
lea eax, [esp + 0x1d8]
push ebx
push 0x5c
push eax
call fcn.005e2ec0
push dword [ebp + 0x28]
lea eax, [esp + 0x98]
push dword [esp + 0x60]
push eax
call fcn.0053cbb0
add esp, 0x18
test eax, eax
jle 0x572518
push ebx
lea eax, [esp + 0x1dc]
push eax
lea eax, [esp + 0x90]
push eax
call fcn.0053cbb0
add esp, 0xc
test eax, eax
jle 0x572518
push esi
lea eax, [esp + 0x19c]
push eax
lea eax, [esp + 0x90]
push eax
call fcn.0053cbb0
add esp, 0xc
test eax, eax
jg 0x5725df
lea eax, [esp + 0x88]
push eax
call fcn.0053cbc0
add esp, 4
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x350]
xor ecx, esp
call fcn.005c950e
mov esp, ebp
pop ebp
ret
xor ecx, ecx
test edi, edi
je 0x57259d
cmp edi, 0x20
jb 0x572588
movdqa xmm1, xmmword [0x650a00]
mov eax, edi
and eax, 0x1f
mov edx, edi
sub edx, eax
lea eax, [esp + 0x1e8]
movdqu xmm0, xmmword [eax - 0x10]
add ecx, 0x20
lea eax, [eax + 0x20]
pxor xmm0, xmm1
movdqu xmmword [eax - 0x30], xmm0
movdqu xmm0, xmmword [eax - 0x20]
pxor xmm0, xmm1
movdqu xmmword [eax - 0x20], xmm0
cmp ecx, edx
jb 0x572562
cmp ecx, edi
jae 0x57259d
lea esp, [esp]
xor byte [esp + ecx + 0x1d8], 0x6a
inc ecx
cmp ecx, edi
jb 0x572590
push edi
lea eax, [esp + 0x1dc]
push eax
lea eax, [esp + 0x90]
push eax
call fcn.0053cbb0
add esp, 0xc
test eax, eax
jle 0x572518
push esi
lea eax, [esp + 0x19c]
push eax
lea eax, [esp + 0x90]
push eax
call fcn.0053cbb0
add esp, 0xc
test eax, eax
jle 0x572518
lea eax, [esp + 0x64]
push eax
push dword [esp + 0x64]
lea eax, [esp + 0x90]
push eax
call fcn.0053c930
mov ecx, dword [esp + 0x7c]
add esp, 0xc
test ecx, ecx
je 0x572606
mov eax, dword [esp + 0x64]
mov dword [ecx], eax
lea eax, [esp + 0x88]
push eax
call fcn.0053cbc0
mov ecx, dword [esp + 0x360]
add esp, 4
mov eax, 1
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.005c950e
mov esp, ebp
pop ebp
ret