Function at 0x432d80
Capabilities:
Encode data using xor
Generate random numbers using the delphi lcg
Hash data with crc32
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push ebx
mov eax, edx
xor edx, edx
push esi
push edi
mov dword [ebp - 4], edx
xor edi, edi
mov edx, dword [ebp + 0xc]
mov dword [ebp - 8], edi
test edx, edx
je 0x432d9f
mov byte [edx], 0
test ecx, ecx
jne 0x432daf
mov eax, 0xffffff9a
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov esi, dword [ecx + 0x7c]
test esi, esi
je 0x432da3
cmp dword [esi], edi
jne 0x432dc6
mov eax, 0xffffff9c
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp + 8]
test ecx, ecx
jne 0x432dd6
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp ecx, dword [esi + 0x5c]
mov dword [esi + 0x10], eax
cmova ecx, dword [esi + 0x5c]
mov dword [esi + 0x14], ecx
cmp ecx, edi
jbe 0x433018
nop dword [eax + eax]
cmp dword [esi + 8], 0
jne 0x432eef
mov eax, dword [esi + 0x58]
test eax, eax
je 0x432eef
mov ecx, dword [esi + 0x60]
mov ebx, 0x4000
mov edx, dword [esi + 0x68]
cmp eax, ebx
cmovb ebx, eax
add edx, dword [esi + 0x3c]
cmp byte [ecx], 0
je 0x432e3c
cmp byte [ecx + 1], 0
je 0x432ff8
mov eax, dword [ecx + 0xc]
push 0
push 0
add eax, edx
push eax
push dword [ecx + 4]
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
jmp 0x432e3f
mov dword [ecx + 0x1c], edx
push dword [esi + 0x60]
mov ecx, dword [esi]
mov edx, ebx
push 1
call fcn.00431e50
add esp, 8
cmp eax, 1
jne 0x432ff8
add dword [esi + 0x3c], ebx
sub dword [esi + 0x58], ebx
cmp byte [esi + 0x6c], 0
mov eax, dword [esi]
mov dword [ebp - 0xc], eax
mov dword [esi + 4], eax
mov dword [esi + 8], ebx
je 0x432eef
xor ecx, ecx
mov dword [ebp - 0x10], ecx
test ebx, ebx
je 0x432eef
nop dword [eax]
mov edi, dword [esi + 0x78]
mov eax, edi
and eax, 0xfffd
or eax, 2
mov edx, eax
xor edx, 1
imul edx, eax
mov eax, dword [ebp - 0xc]
shr edx, 8
xor dl, byte [ecx + eax]
mov ecx, dword [esi + 0x70]
movsx eax, dl
xor eax, dword [esi + 0x70]
movzx eax, al
shr ecx, 8
mov eax, dword [eax*4 + 0x619d20]
xor eax, ecx
mov ecx, dword [ebp - 0x10]
mov dword [esi + 0x70], eax
movzx eax, al
add eax, dword [esi + 0x74]
imul eax, eax, 0x8088405
inc eax
mov dword [esi + 0x74], eax
shr eax, 0x18
xor eax, edi
shr edi, 8
movzx eax, al
xor edi, dword [eax*4 + 0x619d20]
mov eax, dword [ebp - 0xc]
mov dword [esi + 0x78], edi
mov byte [ecx + eax], dl
inc ecx
mov dword [ebp - 0x10], ecx
cmp ecx, ebx
jb 0x432e80
mov ecx, dword [esi + 0x7c]
mov edx, dword [esi + 8]
cmp ecx, edx
cmova ecx, edx
test ecx, ecx
je 0x432f22
mov eax, dword [esi + 4]
sub edx, ecx
add eax, ecx
mov bl, byte [eax - 1]
sub dword [esi + 0x5c], ecx
sub dword [esi + 0x7c], ecx
mov dword [esi + 8], edx
mov dword [esi + 4], eax
jne 0x432f22
cmp bl, byte [esi + 0x80]
jne 0x433002
cmp dword [esi + 0x64], 0
jne 0x432f97
mov ebx, dword [esi + 8]
cmp dword [esi + 0x14], ebx
cmovb ebx, dword [esi + 0x14]
xor edx, edx
test ebx, ebx
je 0x432f51
nop dword [eax + eax]
mov eax, dword [esi + 4]
mov ecx, dword [esi + 0x10]
mov al, byte [edx + eax]
mov byte [edx + ecx], al
inc edx
cmp edx, ebx
jb 0x432f40
mov edi, dword [esi + 0x10]
mov edx, edi
mov ecx, dword [esi + 0x50]
push ebx
call fcn.00431650
sub dword [esi + 0x5c], ebx
add esp, 4
sub dword [esi + 8], ebx
sub dword [esi + 0x14], ebx
add dword [esi + 4], ebx
add dword [esi + 0x18], ebx
mov dword [esi + 0x50], eax
lea eax, [edi + ebx]
mov edi, dword [ebp - 8]
add edi, ebx
mov dword [esi + 0x10], eax
cmp dword [esi + 0x5c], 0
mov ebx, dword [ebp - 4]
mov dword [ebp - 8], edi
jne 0x432fe1
mov edx, dword [ebp + 0xc]
test edx, edx
je 0x432fe1
mov byte [edx], 1
jmp 0x432fe1
mov edi, dword [esi + 0x18]
lea ecx, [esi + 4]
mov ebx, dword [esi + 0x10]
call fcn.00431a00
mov ecx, dword [esi + 0x50]
mov edx, ebx
mov dword [ebp - 4], eax
mov eax, dword [esi + 0x18]
sub eax, edi
push eax
mov dword [ebp - 0x10], eax
call fcn.00431650
mov edi, dword [ebp - 8]
add esp, 4
mov ebx, dword [ebp - 4]
mov dword [esi + 0x50], eax
mov eax, dword [ebp - 0x10]
add edi, eax
sub dword [esi + 0x5c], eax
mov dword [ebp - 8], edi
cmp ebx, 1
je 0x43300e
cmp dword [esi + 0x5c], 0
je 0x43300e
test ebx, ebx
jne 0x432fef
cmp dword [esi + 0x14], 0
ja 0x432df0
test ebx, ebx
je 0x433018
mov eax, ebx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
or eax, 0xffffffff
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, 0xffffff96
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp + 0xc]
test ecx, ecx
je 0x433018
mov byte [ecx], 1
mov eax, edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret