Function at 0x424b38
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x88
mov ebp, dword [esp + 0xa4]
mov ebx, dword [esp + 0xa0]
mov ecx, dword [ebp + 4]
mov eax, 0xfffffffe
cmp word [ecx + eax + 2], 0
lea eax, [eax + 2]
jne 0x424b40
mov ecx, 0xfffffffe
cmp word [ebx + ecx + 2], 0
lea ecx, [ecx + 2]
jne 0x424b50
sar eax, 1
sar ecx, 1
lea edx, [eax + ecx]
add edx, 0x3f
test edx, edx
jns 0x424b70
mov eax, 0xffffffff
jmp 0x424b79
add eax, ecx
lea eax, [eax*2 + 0x7e]
push eax
call fcn.0040cbb0
add esp, 4
mov esi, eax
mov dword [esp + 0x48], 0x99619b7e
mov dword [esp + 0x4c], 0xa54da765
mov dword [esp + 0x50], 0xa16fa35a
mov dword [esp + 0x54], 0xad5caf51
mov dword [esp + 0x58], 0xa941ab50
mov dword [esp + 0x5c], 0xb54ab750
mov dword [esp + 0x60], 0xb15eb363
mov dword [esp + 0x64], 0xbd82bf73
mov dword [esp + 0x68], 0xb97dbb82
mov dword [esp + 0x6c], 0x45814784
mov dword [esp + 0x70], 0x417b437e
mov dword [esp + 0x74], 0x4d894f7e
mov dword [esp + 0x78], 0x49ae4b77
mov dword [esp + 0x7c], 0x55ba57bf
mov dword [esp + 0x80], 0x515253ba
mov word [esp + 0x84], 0
mov eax, 0x7aaff5b
nop
nop
movzx ecx, byte [esp + eax - 0x7aaff13]
xor ecx, eax
mov edx, 0x3ca12
sub edx, ecx
add ecx, 0xf03c35ed
and edx, 0x1002b5
and ecx, 0xe164054a
sub ecx, edx
mov edx, ecx
and edx, 1
xor ecx, 1
lea ecx, [ecx + edx*2]
mov byte [esp + eax - 0x7aaff13], cl
inc eax
cmp eax, 0x7aaff99
jne 0x424c10
mov dword [esp], 0xf341f154
mov dword [esp + 4], 0xff49fd40
mov dword [esp + 8], 0xfb5bf94a
mov dword [esp + 0xc], 0xc76bc56b
mov dword [esp + 0x10], 0xc36ec164
mov dword [esp + 0x14], 0xcf60cd61
mov dword [esp + 0x18], 0xcb77c969
mov dword [esp + 0x1c], 0xd76ad560
mov dword [esp + 0x20], 0xd367d174
mov dword [esp + 0x24], 0xdf64dd6b
mov dword [esp + 0x28], 0xdb77d9ad
mov dword [esp + 0x2c], 0x279a259c
mov dword [esp + 0x30], 0x2394218d
mov dword [esp + 0x34], 0x2f872d9f
mov dword [esp + 0x38], 0x2b9c299f
mov dword [esp + 0x3c], 0x375d355f
mov dword [esp + 0x40], 0x3332315b
mov byte [esp + 0x46], 0
mov word [esp + 0x44], 0
mov eax, esp
mov ecx, 0xa3d82b
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [eax]
xor edx, ecx
mov edi, edx
not edi
and edi, 0x5b
xor edx, 0x24
lea edx, [edx + edi*2]
inc dl
mov byte [eax], dl
inc eax
dec ecx
cmp ecx, 0xa3d7e4
jne 0x424cf0
mov ecx, dword [ebp + 4]
movzx edx, word [ecx]
mov eax, esi
test dx, dx
je 0x424d41
add ecx, 2
mov eax, esi
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], dx
add eax, 2
movzx edx, word [ecx]
add ecx, 2
test dx, dx
jne 0x424d30
mov word [eax], 0
movzx ecx, word [esp]
test cx, cx
je 0x424d71
lea edx, [esp + 2]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x424d60
mov word [eax], 0
movzx ecx, word [ebx]
test cx, cx
je 0x424da1
add ebx, 2
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [ebx]
add ebx, 2
test cx, cx
jne 0x424d90
mov word [eax], 0
movzx ecx, word [esp + 0x48]
test cx, cx
je 0x424dd1
lea edx, [esp + 0x4a]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x424dc0
mov word [eax], 0
mov eax, dword [esp + 0xa8]
mov ebx, dword [eax]
mov eax, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp word [ebx + eax + 2], 0
lea eax, [eax + 2]
jne 0x424df0
mov edx, dword [ebp]
mov ecx, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp word [edx + ecx + 2], 0
lea ecx, [ecx + 2]
jne 0x424e10
sar eax, 1
add eax, 0xb
mov edi, dword [ebp + 8]
mov edx, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
nop
cmp word [edi + edx + 2], 0
lea edx, [edx + 2]
jne 0x424e30
sar ecx, 1
add eax, ecx
sar edx, 1
mov ecx, edx
and ecx, eax
xor edx, eax
lea eax, [edx + ecx*2]
test eax, eax
jns 0x424e55
mov eax, 0xffffffff
jmp 0x424e57
add eax, eax
push eax
call fcn.0040cbb0
add esp, 4
mov edi, eax
mov dword [esp], 0x1e507dd
mov dword [esp + 4], 0xdf603f4
mov dword [esp + 8], 0x9f20fe3
mov dword [esp + 0xc], 0x153b0bf5
mov word [esp + 0x10], 0x1714
mov dword [esp + 0x12], 0
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, eax
add cl, 0x41
xor cl, byte [esp + eax]
add cl, 0xbb
mov byte [esp + eax], cl
inc eax
cmp eax, 0x16
jne 0x424ea0
movzx ecx, word [esp]
mov eax, edi
test cx, cx
je 0x424ee1
lea edx, [esp + 2]
mov eax, edi
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x424ed0
mov word [eax], 0
movzx ecx, word [ebx]
test cx, cx
je 0x424f11
add ebx, 2
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [ebx]
add ebx, 2
test cx, cx
jne 0x424f00
mov word [eax], 0x5f
add eax, 2
mov ecx, dword [ebp]
movzx edx, word [ecx]
test dx, dx
je 0x424f41
add ecx, 2
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], dx
add eax, 2
movzx edx, word [ecx]
add ecx, 2
test dx, dx
jne 0x424f30
mov word [eax], 0x5f
add eax, 2
mov ecx, dword [ebp + 8]
movzx edx, word [ecx]
test dx, dx
je 0x424f71
add ecx, 2
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], dx
add eax, 2
movzx edx, word [ecx]
add ecx, 2
test dx, dx
jne 0x424f60
mov word [eax], 0
mov dword [esp], 0x131211ea
mov eax, 0xb1b61bfc
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ecx, byte [esp + eax + 0x4e49e404]
mov edx, eax
and edx, ecx
add edx, edx
sub ecx, edx
add ecx, eax
mov edx, ecx
not edx
and edx, 0xed
and ecx, 0x12
sub ecx, edx
inc cl
mov byte [esp + eax + 0x4e49e404], cl
inc eax
cmp eax, 0xb1b61c00
jne 0x424f90
mov eax, esp
push 0
push 1
push 0
push eax
push esi
push edi
push dword [esp + 0xb4]
call fcn.004252c0
add esp, 0x1c
mov ebx, eax
jmp dword [0x44af50]