Function at 0x443630
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x290
mov ebx, dword [esp + 0x2b0]
mov dword [esp + 0x8b], 0xe48040
mov dword [esp + 0x88], 0x4010ec83
mov dword [esp + 0x84], 0x48e78948
mov dword [esp + 0x80], 0xce8948fc
mov dword [esp + 0x17], 0xc3fc8948
mov dword [esp + 0x14], 0x48d2ff41
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0xfffffff1
mov dword [esp + 8], 0xba49c031
lea ebp, [esp + 0x90]
lea eax, [esp + 0x80]
mov edi, ebp
mov ecx, 3
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
lea edi, [esp + 0x9c]
lea eax, [esp + 0x8c]
mov ecx, 1
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
movzx eax, byte [esp + 0x8e]
mov byte [esp + 0x9e], al
mov esi, ebx
cmp ebx, 4
jb 0x4436e1
mov esi, 4
lea edx, [esp + 0x9f]
test ebx, ebx
je 0x4438a9
xor ebp, ebp
jmp 0x44372a
mov eax, 0x44803b
mov ecx, 1
mov edi, edx
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
add edx, 4
mov eax, 0x44803f
mov edi, edx
xor ecx, ecx
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
inc ebp
cmp esi, ebp
je 0x4437a9
cmp ebp, 3
ja case.default.0x44372f
jmp dword [ebp*4 + 0x447b00]
mov eax, 0x448040
mov edi, edx
xor ecx, ecx
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
mov eax, 0x448040
mov edi, edx
mov ecx, 1
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
mov byte [edx + 2], 0xe
add edx, 3
jmp case.default.0x44372f
mov eax, 0x448036
mov ecx, 1
mov edi, edx
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
add edx, 4
mov eax, 0x44803a
mov edi, edx
xor ecx, ecx
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
jmp case.default.0x44372f
mov eax, 0x448044
mov edi, edx
mov ecx, 1
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
add edx, 4
mov eax, 0x448048
mov edi, edx
xor ecx, ecx
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
jmp case.default.0x44372f
cmp ebx, 3
lea ebp, [esp + 0x90]
jbe 0x4438a9
test bl, 1
je 0x4437e1
mov eax, 0x44804d
mov esi, 0x44804d
mov edi, edx
xor ecx, ecx
xchg esi, esi
rep movsd dword es:[edi], dword [esi]
xchg esi, esi
mov edi, edx
mov ecx, 1
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
add edx, 2
mov word [esp + 4], 0x50
mov dword [esp], 0x20468b48
mov byte [esp + 0x2c], 0
mov dword [esp + 0x28], 0x50000000
mov dword [esp + 0x24], 0x80868b48
lea eax, [ebx*8]
cmp eax, 0x7ffffffe
ja 0x443893
dec ebx
cmp ebx, 4
jb 0x4438a2
add eax, 0xfffffff8
lea ebp, [esp + 0x24]
jmp 0x44385e
mov dword [esp + 0x27], eax
mov esi, ebp
mov edi, edx
mov ecx, 2
xchg esi, esi
rep movsd dword es:[edi], dword [esi]
xchg esi, esi
add edx, 8
lea esi, [esp + 0x2c]
xor ecx, ecx
mov edi, edx
xchg esi, esi
rep movsw word es:[edi], word [esi]
xchg esi, esi
dec ebx
add eax, 0xfffffff8
cmp ebx, 3
jbe 0x4438a2
cmp eax, 0x7e
ja 0x443830
mov byte [esp + 3], al
mov esi, esp
mov ecx, 1
mov edi, edx
xchg esi, esi
rep movsd dword es:[edi], dword [esi]
xchg esi, esi
lea edi, [edx + 4]
lea esi, [esp + 4]
xor ecx, ecx
xchg esi, esi
rep movsw word es:[edi], word [esi]
xchg esi, esi
movzx ecx, byte [esp + 4]
mov byte [edx + 4], cl
add edx, 5
jmp 0x443855
mov eax, 0xffffffff
mov edx, 0xffffffff
jmp 0x443c17
lea ebp, [esp + 0x90]
mov eax, dword [esp + 0x2a8]
mov esi, 0x448031
mov edi, edx
mov ecx, 1
xchg esi, esi
rep movsd dword es:[edi], dword [esi]
xchg esi, esi
lea esi, [edx + 4]
mov ebx, 0x448035
xor ecx, ecx
mov edi, esi
xchg esi, ebx
rep movsw word es:[edi], word [esi]
xchg esi, ebx
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x2a4]
mov dword [esp + 0xc], eax
lea eax, [esp + 8]
mov edi, esi
mov ecx, 4
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
lea edi, [edx + 0x14]
lea eax, [esp + 0x18]
mov ecx, 1
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
movzx eax, byte [esp + 0x1a]
mov byte [edx + 0x16], al
mov eax, ebp
neg eax
lea ebx, [edx + eax]
add ebx, 0x17
sub edx, ebp
mov esi, dword [esp + 0x2ac]
mov dword [esp], 0
add edx, 0x71
mov dword [esp + 0x20], edx
mov dword [esp + 0x24], 0x14151a1b
mov dword [esp + 0x28], 0
mov eax, 0x1675bf86
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ecx, byte [esp + eax - 0x1675bf62]
mov edx, eax
and edx, ecx
add edx, edx
sub ecx, edx
add ecx, eax
mov edx, ecx
xor edx, 0x1e
mov edi, ecx
or edi, 0x61
and edi, edx
xor ecx, 0x61
lea ecx, [ecx + edi*2]
inc cl
mov byte [esp + eax - 0x1675bf62], cl
inc eax
cmp eax, 0x1675bf8e
jne 0x443950
mov eax, dword [esp + 0x24]
mov ecx, dword [0x45064c]
test ecx, ecx
je 0x4439dc
xor edx, edx
mov edi, dword [0x450650]
nop
nop
nop
nop
nop
cmp dword [edi + edx*8], 0x3e416e49
je 0x4439b0
inc edx
cmp ecx, edx
jne 0x4439a0
jmp 0x4439dc
mov ecx, dword [edi + edx*8 + 4]
cmp ecx, eax
je 0x4439dc
lea eax, [esp + 0x20]
mov edx, esp
push 0x40
push 0x3000
push eax
push 0
push edx
push 0xffffffffffffffff
push 6
push dword [0x450654]
push ecx
call fcn.00441b40
add esp, 0x24
test eax, eax
js 0x443be0
mov dword [esp + 0x24], 0xf507b8f5
mov dword [esp + 0x28], 0x3f93bef3
mov dword [esp + 0x2c], 0x326e4a3
mov dword [esp + 0x30], 0x3f3e3d3c
mov dword [esp + 0x34], 0xc972b298
mov dword [esp + 0x38], 0xae2e09b7
mov dword [esp + 0x3c], 0xfc84e2a
mov dword [esp + 0x40], 0xf0e0dff
mov dword [esp + 0x44], 0x1d3a0399
mov dword [esp + 0x48], 0xa1060504
mov dword [esp + 0x4c], 0x4a843084
mov dword [esp + 0x50], 0xb00a599f
mov dword [esp + 0x54], 0xb50bcbe
mov dword [esp + 0x58], 0xf3da8e14
mov dword [esp + 0x5c], 0x1a3213e7
mov dword [esp + 0x60], 0xb9e13aac
mov dword [esp + 0x64], 0x27a5314f
mov dword [esp + 0x68], 0xe705e100
mov dword [esp + 0x6c], 0x3763f9f8
mov dword [esp + 0x70], 0xbd672518
mov dword [esp + 0x74], 0xb22ab111
mov dword [esp + 0x78], 0xbf915ce
lea edx, [esp + 0x7c]
mov dword [esp + 0x7c], 0xc92c
xor eax, eax
xor edi, edi
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ebp, eax
and ebp, 0x90
mov ecx, edi
xor ecx, 0xc8
add ecx, ebp
xor cl, byte [esp + edi + 0x24]
add cl, 0x18
mov byte [esp + edi + 0x24], cl
inc edi
add eax, 2
cmp edi, 0x5c
jne 0x443ab0
mov eax, dword [esp]
lea ebp, [esp + 0x24]
mov edi, eax
mov ecx, 0x16
xchg esi, ebp
rep movsd dword es:[edi], dword [esi]
xchg esi, ebp
lea edi, [eax + 0x58]
xor ecx, ecx
xchg esi, edx
rep movsw word es:[edi], word [esi]
xchg esi, edx
movzx ecx, byte [esp + 0x7c]
mov byte [eax + 0x58], cl
mov eax, dword [esp]
lea edi, [eax + 0x59]
mov ecx, ebx
shr ecx, 2
lea edx, [esp + 0x90]
xchg esi, edx
rep movsd dword es:[edi], dword [esi]
xchg esi, edx
mov ecx, ebx
and ecx, 0xfffffffc
add eax, ecx
add eax, 0x59
lea edx, [esp + ecx]
add edx, 0x90
mov ecx, ebx
shr ecx, 1
and ecx, 1
mov ebp, edx
mov edi, eax
xchg esi, ebp
rep movsw word es:[edi], word [esi]
xchg esi, ebp
test bl, 1
je 0x443b4a
and ebx, 2
movzx ecx, byte [edx + ebx]
mov byte [eax + ebx], cl
mov eax, dword [esp]
lea ecx, [eax + 0x59]
push esi
push ecx
call eax
mov dword [esp + 0x1c], 0
mov dword [esp + 0x24], 0x14151a1b
mov dword [esp + 0x28], 0
mov ecx, 0x1675bf86
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx esi, byte [esp + ecx - 0x1675bf62]
mov edi, ecx
and edi, esi
add edi, edi
sub esi, edi
add esi, ecx
mov edi, esi
xor edi, 0x1e
mov ebx, esi
or ebx, 0x61
and ebx, edi
xor esi, 0x61
lea ebx, [esi + ebx*2]
inc bl
mov byte [esp + ecx - 0x1675bf62], bl
inc ecx
cmp ecx, 0x1675bf8e
jne 0x443b80
mov ecx, dword [0x45064c]
test ecx, ecx
je 0x443c17
mov esi, dword [esp + 0x24]
xor edi, edi
mov ebx, dword [0x450650]
nop
nop
nop
nop
cmp dword [ebx + edi*8], 0x16194952
je 0x443be7
inc edi
cmp ecx, edi
jne 0x443bd0
jmp 0x443c17
mov edx, eax
sar edx, 0x1f
jmp 0x443c17
mov ecx, dword [ebx + edi*8 + 4]
cmp ecx, esi
je 0x443c17
lea esi, [esp + 0x1c]
mov edi, esp
push 0x8000
push esi
push edi
push 0xffffffffffffffff
push 4
push dword [0x450654]
push ecx
mov esi, eax
mov edi, edx
call fcn.00441b40
mov edx, edi
mov eax, esi
add esp, 0x1c
add esp, 0x290
pop esi
pop edi
pop ebx
pop ebp
ret 0x10