Function at 0x43ebc0
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x294
mov edx, dword [esp + 0x2b4]
mov dword [esp + 0x7b], 0xe48040
mov dword [esp + 0x78], 0x4010ec83
mov dword [esp + 0x74], 0x48e78948
mov dword [esp + 0x70], 0xce8948fc
lea edi, [esp + 0x94]
lea eax, [esp + 0x70]
mov ecx, 3
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
lea edi, [esp + 0xa0]
lea eax, [esp + 0x7c]
mov ecx, 1
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
movzx eax, byte [esp + 0x7e]
mov byte [esp + 0xa2], al
mov eax, edx
mov ebp, edx
cmp edx, 4
jb 0x43ec34
mov ebp, 4
lea edx, [esp + 0xa3]
test eax, eax
je 0x43f055
xor eax, eax
mov dword [esp + 4], ebp
jmp 0x43ec5d
mov ebp, dword [esp + 4]
inc eax
cmp eax, ebp
je 0x43eea8
cmp eax, 3
ja case.default.0x43ec62
jmp dword [eax*4 + 0x443b00]
mov dword [esp + 8], 0x233cbaf8
mov byte [esp + 0xc], 0
xor ecx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
mov ebx, ecx
add bl, 0xc8
xor bl, byte [esp + ecx + 8]
add bl, 0x18
mov byte [esp + ecx + 8], bl
inc ecx
cmp ecx, 5
jne 0x43ec80
lea ebx, [esp + 8]
mov esi, ebx
mov edi, edx
xor ecx, ecx
xchg esi, esi
rep movsd dword es:[edi], dword [esi]
xchg esi, esi
mov esi, ebx
mov ecx, 1
mov edi, edx
xchg esi, esi
rep movsw word es:[edi], word [esi]
xchg esi, esi
movzx ecx, byte [esp + 0xa]
mov byte [edx + 2], cl
add edx, 3
jmp case.default.0x43ec62
mov dword [esp + 8], 0x877c3e7c
mov byte [esp + 0xc], 0xb4
lea ecx, [esp + 0xc]
mov dword [ecx + 4], 0
mov dword [ecx + 1], 0
mov ecx, 0x178f565e
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ebp, byte [esp + ecx - 0x178f5656]
lea edi, [ecx - 0x10000000]
mov esi, ebp
and esi, 0x7b
xor esi, 0xf18b207b
mov ebx, ebp
xor ebx, 0xf18b207b
or ebp, 0x84
and ebp, ebx
or ebp, esi
mov esi, ecx
and esi, 0x118b007b
and edi, 0x6045604
or edi, esi
xor edi, ebp
mov esi, edi
not esi
and esi, 0x29
xor edi, 0x52
lea ebx, [edi + esi*2]
inc bl
mov byte [esp + ecx - 0x178f5656], bl
inc ecx
cmp ecx, 0x178f566a
jne 0x43ed00
lea esi, [esp + 8]
mov ecx, 1
mov edi, edx
xchg esi, esi
rep movsd dword es:[edi], dword [esi]
xchg esi, esi
add edx, 4
lea esi, [esp + 0xc]
mov edi, edx
xor ecx, ecx
xchg esi, esi
rep movsw word es:[edi], word [esi]
xchg esi, esi
jmp 0x43ec50
mov dword [esp + 8], 0x9408240
mov byte [esp + 0xc], 0x70
lea ecx, [esp + 0xc]
mov word [ecx + 5], 0
mov dword [ecx + 1], 0
xor edi, edi
mov ecx, edi
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ebp, byte [esp + edi + 8]
mov esi, edi
xor esi, 0xd16691c3
mov ebx, edi
and ebx, 0xc
add ebx, ebx
sub ebx, esi
mov esi, ebx
xor esi, 0xea2ef9ea
xor ebx, ebp
xor ebp, 0xea2ef9ea
not ebx
and ebx, esi
add ebx, ebx
sub esi, ebx
add esi, ebp
mov ebx, esi
and ebx, 0x4e
xor esi, 0xce
lea ebx, [esi + ebx*2]
inc bl
mov byte [esp + edi + 8], bl
mov esi, edi
xor esi, 0xfffffffe
or ecx, 1
and ecx, esi
not edi
or edi, 1
sub ecx, edi
mov edi, ecx
cmp ecx, 0xb
jb 0x43edc0
lea esi, [esp + 8]
mov ecx, 1
mov edi, edx
xchg esi, esi
rep movsd dword es:[edi], dword [esi]
xchg esi, esi
add edx, 4
lea esi, [esp + 0xc]
mov edi, edx
xor ecx, ecx
xchg esi, esi
rep movsw word es:[edi], word [esi]
xchg esi, esi
jmp 0x43ec50
mov dword [esp + 8], 0x9d892cc
lea ecx, [esp + 0xc]
mov dword [ecx + 3], 0
mov dword [ecx], 0
xor ecx, ecx
nop
mov ebx, ecx
add bl, 0x41
xor bl, byte [esp + ecx + 8]
add bl, 0xbb
mov byte [esp + ecx + 8], bl
mov esi, ecx
and esi, 1
xor ecx, 1
lea ecx, [ecx + esi*2]
cmp ecx, 0xb
jb 0x43ee60
lea esi, [esp + 8]
mov edi, edx
mov ecx, 1
xchg esi, esi
rep movsd dword es:[edi], dword [esi]
xchg esi, esi
add edx, 4
lea esi, [esp + 0xc]
mov edi, edx
xor ecx, ecx
xchg esi, esi
rep movsw word es:[edi], word [esi]
xchg esi, esi
jmp case.default.0x43ec62
mov eax, dword [esp + 0x2b4]
cmp eax, 3
jbe 0x43f055
test al, 1
je 0x43eee6
mov eax, 0x444035
mov esi, 0x444035
mov edi, edx
xor ecx, ecx
xchg esi, esi
rep movsd dword es:[edi], dword [esi]
xchg esi, esi
mov ecx, 1
mov edi, edx
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
mov eax, dword [esp + 0x2b4]
add edx, 2
mov ecx, eax
lea eax, [eax*8]
mov esi, 0xffffffff
mov edi, 0xffffffff
cmp eax, 0x7ffffffe
ja 0x43f4bf
dec ecx
cmp ecx, 4
jb 0x43f055
mov eax, ecx
jmp 0x43ef2c
mov eax, ebp
dec eax
cmp eax, 3
jbe 0x43f055
mov ebp, eax
lea eax, [eax*8]
cmp eax, 0x7e
ja 0x43efd0
mov dword [esp + 8], 0x3900c61c
mov word [esp + 0xc], 0x5f08
mov dword [esp + 0xe], 0
xor ecx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx esi, byte [esp + ecx + 8]
lea ebx, [ecx + 0xbbdb86f]
xor ebx, esi
mov esi, ebx
not esi
and esi, 0x2c
mov edi, ebx
and edi, 0xd2
sub edi, esi
and ebx, 1
or ebx, edi
inc bl
mov byte [esp + ecx + 8], bl
mov esi, ecx
and esi, 1
xor ecx, 1
lea ecx, [ecx + esi*2]
cmp ecx, 0xa
jb 0x43ef60
lea esi, [esp + 8]
mov edi, edx
mov ecx, 1
xchg esi, esi
rep movsd dword es:[edi], dword [esi]
xchg esi, esi
lea edi, [edx + 4]
lea esi, [esp + 0xc]
xor ecx, ecx
xchg esi, esi
rep movsw word es:[edi], word [esi]
xchg esi, esi
movzx ecx, byte [esp + 0xc]
mov byte [edx + 4], cl
mov byte [edx + 3], al
add edx, 5
jmp 0x43ef20
mov dword [esp + 8], 0x99908e54
mov dword [esp + 0xc], 0x35666718
mov byte [esp + 0x10], 0x64
lea ecx, [esp + 0x10]
mov dword [ecx + 4], 0
mov dword [ecx + 1], 0
mov ecx, 0x8ed4793b
nop
nop
nop
nop
movzx esi, byte [esp + ecx + 0x712b86cd]
xor esi, ecx
mov edi, esi
and edi, 1
xor esi, 1
lea ebx, [esi + edi*2]
add bl, 0xd8
mov byte [esp + ecx + 0x712b86cd], bl
inc ecx
cmp ecx, 0x8ed4794b
jne 0x43f000
lea esi, [esp + 8]
mov edi, edx
mov ecx, 2
xchg esi, esi
rep movsd dword es:[edi], dword [esi]
xchg esi, esi
lea esi, [edx + 8]
lea ebx, [esp + 0x10]
xor ecx, ecx
mov edi, esi
xchg esi, ebx
rep movsw word es:[edi], word [esi]
xchg esi, ebx
mov dword [edx + 3], eax
mov edx, esi
jmp 0x43ef20
mov ebx, dword [esp + 0x2a8]
mov dword [esp + 8], 0xf38612d8
lea ebp, [esp + 0xc]
mov byte [esp + 0xc], 0x9c
mov dword [esp + 0xd], 0
mov ecx, 0xba86ec24
mov esi, 0xdb
nop
movzx edi, byte [esp + ecx + 0x457913e4]
mov eax, esi
xor eax, ecx
and eax, edi
xor eax, ecx
mov edi, eax
not edi
and edi, 1
add eax, 0x4b
or eax, 1
add eax, edi
mov byte [esp + ecx + 0x457913e4], al
inc ecx
dec esi
cmp ecx, 0xba86ec2d
jne 0x43f080
lea eax, [esp + 8]
mov edi, edx
mov ecx, 1
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
lea esi, [edx + 4]
xor ecx, ecx
mov edi, esi
xchg esi, ebp
rep movsw word es:[edi], word [esi]
xchg esi, ebp
mov dword [esp + 0x8f], 0xc3fc8948
mov dword [esp + 0x8c], 0x48d2ff41
mov dword [esp + 0x80], 0xba49c031
mov dword [esp + 0x84], ebx
mov eax, dword [esp + 0x2ac]
mov dword [esp + 0x88], eax
lea eax, [esp + 0x80]
mov edi, esi
mov ecx, 4
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
lea edi, [edx + 0x14]
lea eax, [esp + 0x90]
mov ecx, 1
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
movzx eax, byte [esp + 0x92]
mov byte [edx + 0x16], al
lea ecx, [esp + 0x94]
mov eax, ecx
neg eax
lea edi, [edx + eax]
add edi, 0x17
sub edx, ecx
add edx, 0x71
mov dword [esp + 0x6c], edx
xor eax, eax
mov dword [esp], 0
mov dword [esp + 8], 0x80878685
mov word [esp + 0xc], 0
mov byte [esp + 0xe], 0
nop
nop
nop
nop
nop
mov ecx, eax
add cl, 0x61
xor cl, byte [esp + eax + 8]
add cl, 0x1b
mov byte [esp + eax + 8], cl
inc eax
cmp eax, 7
jne 0x43f170
mov esi, dword [esp + 8]
mov eax, dword [0x44c2b0]
test eax, eax
je 0x43f1de
xor ecx, ecx
mov edx, dword [0x44c2b4]
nop
nop
nop
nop
nop
cmp dword [edx + ecx*8], 0x3e416e49
je 0x43f1b0
inc ecx
cmp eax, ecx
jne 0x43f1a0
jmp 0x43f1de
mov eax, dword [edx + ecx*8 + 4]
cmp eax, esi
je 0x43f1de
lea ecx, [esp + 0x6c]
mov edx, esp
push 0x40
push 0x3000
push ecx
push 0
push edx
push 0xffffffffffffffff
push 6
push eax
push dword [0x44c2b8]
call fcn.0043ca30
add esp, 0x24
mov esi, eax
test esi, esi
js 0x43f490
mov dword [esp + 4], edi
mov dword [esp + 8], 0x3d8be035
mov dword [esp + 0xc], 0x6b1fe23f
mov dword [esp + 0x10], 0x977a24e7
mov dword [esp + 0x14], 0x8b8a8d8c
mov dword [esp + 0x18], 0x51c6f620
mov dword [esp + 0x1c], 0xfa7a91fb
mov dword [esp + 0x20], 0x83c0ba9e
mov dword [esp + 0x24], 0x7b7a7db3
mov dword [esp + 0x28], 0x856e8701
mov dword [esp + 0x2c], 0xe9727574
mov dword [esp + 0x30], 0x5e1c5804
mov dword [esp + 0x34], 0xc8865113
mov dword [esp + 0x38], 0x9f58ccca
mov dword [esp + 0x3c], 0xbfa61264
mov dword [esp + 0x40], 0x8ee6b763
mov dword [esp + 0x44], 0x7159f61c
mov dword [esp + 0x48], 0xeb6de9fb
mov dword [esp + 0x4c], 0x538da988
mov dword [esp + 0x50], 0x8b375150
mov dword [esp + 0x54], 0x7533f590
mov dword [esp + 0x58], 0x6fe09a9
mov dword [esp + 0x5c], 0x9741a552
lea edx, [esp + 0x60]
mov word [esp + 0x60], 0x419c
mov word [esp + 0x66], 0
mov dword [esp + 0x62], 0
mov eax, 0xe6
mov ecx, 0x3140c119
nop
nop
movzx esi, byte [esp + eax - 0xde]
mov ebx, eax
and ebx, esi
mov edi, ebx
and edi, 2
mov ebp, ebx
or ebx, 2
imul ebx, edi
xor edi, 2
and ebp, 0xfffffffd
imul ebp, edi
add ebx, ebp
lea edi, [eax + esi]
add edi, 0xcebf3e00
mov ebp, ecx
sub ebp, esi
and ebp, ebx
not ebx
and ebx, edi
sub ebx, ebp
add bl, 0x82
mov byte [esp + eax - 0xde], bl
inc eax
dec ecx
cmp eax, 0x146
jne 0x43f2c0
mov eax, dword [esp]
lea esi, [esp + 8]
mov edi, eax
mov ecx, 0x16
xchg esi, esi
rep movsd dword es:[edi], dword [esi]
xchg esi, esi
lea edi, [eax + 0x58]
xor ebx, ebx
xor ecx, ecx
xchg esi, edx
rep movsw word es:[edi], word [esi]
xchg esi, edx
movzx ecx, byte [esp + 0x60]
mov byte [eax + 0x58], cl
mov eax, dword [esp]
mov dword [esp + 8], 0x8f8e8921
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, ebx
add cl, 0x62
xor cl, byte [esp + ebx + 8]
add cl, 0x16
mov byte [esp + ebx + 8], cl
add ebx, 0x1416d577
mov ecx, ebx
xor ecx, 1
and ebx, 1
lea ecx, [ecx + ebx*2]
mov ebx, ecx
and ebx, 0x88
add ebx, ebx
xor ecx, 0x1416d577
sub ebx, ecx
cmp ebx, 4
jb 0x43f350
add eax, dword [esp + 8]
mov ebx, dword [esp + 4]
mov ecx, ebx
shr ecx, 2
lea edx, [esp + 0x94]
mov edi, eax
xchg esi, edx
rep movsd dword es:[edi], dword [esi]
xchg esi, edx
mov ecx, ebx
and ecx, 0xfffffffc
add eax, ecx
lea edx, [esp + ecx]
add edx, 0x94
mov ecx, ebx
shr ecx, 1
and ecx, 1
mov esi, edx
mov edi, eax
xchg esi, esi
rep movsw word es:[edi], word [esi]
xchg esi, esi
test bl, 1
je 0x43f3d5
and ebx, 2
movzx ecx, byte [edx + ebx]
mov byte [eax + ebx], cl
mov eax, dword [esp]
mov dword [esp + 8], 0x636261c9
mov ecx, 0x5049d898
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [esp + ecx - 0x5049d890]
xor edx, ecx
mov esi, edx
xor esi, 0xf9
and edx, 6
add edx, edx
sub edx, esi
inc dl
mov byte [esp + ecx - 0x5049d890], dl
inc ecx
cmp ecx, 0x5049d89c
jne 0x43f3f0
mov ecx, dword [esp + 8]
add ecx, eax
push dword [esp + 0x2b0]
push ecx
call eax
mov esi, eax
mov edi, edx
mov dword [esp + 0x68], 0
mov dword [esp + 8], 0x80878685
mov word [esp + 0xc], 0
mov byte [esp + 0xe], 0
xor eax, eax
nop
nop
nop
mov ecx, eax
add cl, 0x61
xor cl, byte [esp + eax + 8]
add cl, 0x1b
mov byte [esp + eax + 8], cl
inc eax
cmp eax, 7
jne 0x43f450
mov eax, dword [0x44c2b0]
test eax, eax
je 0x43f4bf
mov ecx, dword [esp + 8]
xor edx, edx
mov ebx, dword [0x44c2b4]
nop
nop
nop
nop
nop
cmp dword [ebx + edx*8], 0x16194952
je 0x43f497
inc edx
cmp eax, edx
jne 0x43f480
jmp 0x43f4bf
mov edi, esi
sar edi, 0x1f
jmp 0x43f4bf
mov eax, dword [ebx + edx*8 + 4]
cmp eax, ecx
je 0x43f4bf
lea ecx, [esp + 0x68]
mov edx, esp
push 0x8000
push ecx
push edx
push 0xffffffffffffffff
push 4
push eax
push dword [0x44c2b8]
call fcn.0043ca30
add esp, 0x1c
mov eax, esi
mov edx, edi
add esp, 0x294
pop esi
pop edi
pop ebx
pop ebp
ret 0x10