Function at 0x43cfd0
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x290
mov edx, dword [esp + 0x2b0]
mov dword [esp + 0x77], 0xe48040
mov dword [esp + 0x74], 0x4010ec83
mov dword [esp + 0x70], 0x48e78948
mov dword [esp + 0x6c], 0xce8948fc
lea edi, [esp + 0x90]
lea eax, [esp + 0x6c]
mov ecx, 3
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
lea edi, [esp + 0x9c]
lea eax, [esp + 0x78]
mov ecx, 1
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
movzx eax, byte [esp + 0x7a]
mov byte [esp + 0x9e], al
mov eax, edx
mov esi, edx
cmp edx, 4
jb 0x43d044
mov esi, 4
lea edx, [esp + 0x9f]
test eax, eax
je 0x43d29e
xor eax, eax
lea ebp, [esp + 4]
jmp 0x43d069
inc eax
cmp eax, esi
je 0x43d23c
cmp eax, 3
ja case.default.0x43d06e
jmp dword [eax*4 + 0x441b00]
mov dword [esp + 4], 0xf7047ec0
lea ecx, [esp + 8]
mov byte [ecx + 2], 0
mov word [ecx], 0
xor ebp, ebp
xor edi, edi
nop
nop
mov ecx, ebp
and ecx, 0xc
mov ebx, edi
xor ebx, 0x7e
add ebx, ecx
xor bl, byte [esp + edi + 4]
add bl, 0x8a
mov byte [esp + edi + 4], bl
inc edi
add ebp, 2
cmp edi, 7
jne 0x43d090
lea ebp, [esp + 4]
mov ebx, ebp
mov edi, edx
xor ecx, ecx
xchg esi, ebx
rep movsd dword es:[edi], dword [esi]
xchg esi, ebx
mov ebx, ebp
mov edi, edx
mov ecx, 1
xchg esi, ebx
rep movsw word es:[edi], word [esi]
xchg esi, ebx
movzx ecx, byte [esp + 6]
mov byte [edx + 2], cl
add edx, 3
jmp case.default.0x43d06e
mov dword [esp + 4], 0x73cfebc
mov byte [esp + 8], 0x74
lea ecx, [esp + 8]
mov word [ecx + 5], 0
mov dword [ecx + 1], 0
xor ecx, ecx
xor edi, edi
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ebp, ecx
and ebp, 0x1c
mov ebx, edi
xor ebx, 0xbe
add ebx, ebp
xor bl, byte [esp + edi + 4]
add bl, 0x4a
mov byte [esp + edi + 4], bl
inc edi
add ecx, 2
cmp edi, 0xb
jne 0x43d110
lea ebp, [esp + 4]
mov ebx, ebp
mov ecx, 1
mov edi, edx
xchg esi, ebx
rep movsd dword es:[edi], dword [esi]
xchg esi, ebx
add edx, 4
lea ebx, [esp + 8]
xor ecx, ecx
mov edi, edx
xchg esi, ebx
rep movsw word es:[edi], word [esi]
xchg esi, ebx
jmp case.default.0x43d06e
mov dword [esp + 4], 0x7b8cca8c
mov byte [esp + 8], 0x44
lea ecx, [esp + 8]
mov dword [ecx + 4], 0
mov dword [ecx + 1], 0
mov ecx, 0x8fe90210
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edi, byte [esp + ecx + 0x7016fdf4]
mov ebx, ecx
and ebx, edi
add ebx, ebx
sub edi, ebx
add edi, ecx
mov ebx, edi
xor ebx, 0x50
or edi, 0xaf
and ebx, edi
add ebx, edi
inc bl
mov byte [esp + ecx + 0x7016fdf4], bl
inc ecx
cmp ecx, 0x8fe9021c
jne 0x43d190
mov ebx, ebp
mov edi, edx
mov ecx, 1
xchg esi, ebx
rep movsd dword es:[edi], dword [esi]
xchg esi, ebx
add edx, 4
lea ebx, [esp + 8]
xor ecx, ecx
mov edi, edx
xchg esi, ebx
rep movsw word es:[edi], word [esi]
xchg esi, ebx
jmp case.default.0x43d06e
mov dword [esp + 4], 0x3784b670
mov byte [esp + 8], 0x3c
mov dword [esp + 9], 0
xor ecx, ecx
mov ebx, ecx
add bl, 0xa
xor bl, byte [esp + ecx + 4]
add bl, 0xce
mov byte [esp + ecx + 4], bl
inc ecx
cmp ecx, 9
jne 0x43d200
mov ebx, ebp
mov edi, edx
mov ecx, 1
xchg esi, ebx
rep movsd dword es:[edi], dword [esi]
xchg esi, ebx
add edx, 4
lea ebx, [esp + 8]
xor ecx, ecx
mov edi, edx
xchg esi, ebx
rep movsw word es:[edi], word [esi]
xchg esi, ebx
jmp case.default.0x43d06e
mov eax, dword [esp + 0x2b0]
cmp eax, 3
jbe 0x43d29e
test al, 1
je 0x43d276
mov eax, 0x442035
mov esi, 0x442035
xor ecx, ecx
mov edi, edx
xchg esi, esi
rep movsd dword es:[edi], dword [esi]
xchg esi, esi
mov ecx, 1
mov edi, edx
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
mov eax, dword [esp + 0x2b0]
add edx, 2
mov ebp, eax
lea eax, [eax*8]
mov esi, 0xffffffff
mov edi, 0xffffffff
cmp eax, 0x7ffffffe
ja 0x43d83f
dec ebp
cmp ebp, 4
jae 0x43d43a
mov ebx, dword [esp + 0x2a4]
mov dword [esp + 4], 0x4906ae6c
lea ebp, [esp + 8]
mov byte [esp + 8], 0x28
mov dword [esp + 9], 0
mov dword [esp + 0xc], 0
xor esi, esi
nop
nop
nop
nop
nop
nop
nop
nop
movzx eax, byte [esp + esi + 4]
mov ecx, esi
xor ecx, 0xf9568678
mov edi, esi
or edi, 0x6a97987
and ecx, edi
add ecx, edi
mov edi, eax
and edi, ecx
add edi, edi
sub ecx, edi
add cl, al
add cl, 0x5d
mov byte [esp + esi + 4], cl
inc esi
cmp esi, 0xc
jne 0x43d2d0
lea eax, [esp + 4]
mov edi, edx
mov ecx, 1
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
lea esi, [edx + 4]
xor ecx, ecx
mov edi, esi
xchg esi, ebp
rep movsw word es:[edi], word [esi]
xchg esi, ebp
mov dword [esp + 0x8b], 0xc3fc8948
mov dword [esp + 0x88], 0x48d2ff41
mov dword [esp + 0x7c], 0xba49c031
mov dword [esp + 0x80], ebx
mov eax, dword [esp + 0x2a8]
mov dword [esp + 0x84], eax
lea eax, [esp + 0x7c]
mov ecx, 4
mov edi, esi
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
lea edi, [edx + 0x14]
lea eax, [esp + 0x8c]
mov ecx, 1
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
movzx eax, byte [esp + 0x8e]
mov byte [edx + 0x16], al
lea ecx, [esp + 0x90]
mov eax, ecx
neg eax
lea ebp, [edx + eax]
add ebp, 0x17
sub edx, ecx
xor eax, eax
mov dword [esp], 0
add edx, 0x71
mov dword [esp + 0x68], edx
mov dword [esp + 4], 0x20272625
mov byte [esp + 8], 0
mov ecx, 0xffffffff
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, ecx
or edx, 9
add edx, eax
mov esi, eax
xor esi, 0x89
lea edx, [esi + edx*2]
add dl, 2
xor dl, byte [esp + eax + 4]
add dl, 0x53
mov byte [esp + eax + 4], dl
lea edx, [eax + 1]
dec ecx
mov eax, edx
cmp edx, 5
jne 0x43d3c0
mov esi, dword [esp + 4]
mov eax, dword [0x449ea0]
test eax, eax
je 0x43d578
xor ecx, ecx
mov edx, dword [0x449ea4]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp dword [edx + ecx*8], 0x3e416e49
je 0x43d54a
inc ecx
cmp eax, ecx
jne 0x43d410
jmp 0x43d578
dec ebp
cmp ebp, 3
jbe 0x43d29e
mov ecx, ebp
and ecx, 8
mov ebx, ebp
or ebx, 8
imul ebx, ecx
xor ecx, 8
mov esi, ebp
and esi, 0xfffffff7
imul esi, ecx
add ebx, esi
cmp ebx, 0x7e
ja 0x43d4d0
mov dword [esp + 4], 0x2ff4b6f0
mov word [esp + 8], 0x4dfc
lea eax, [esp + 0xc]
mov byte [eax + 2], 0
mov dword [eax - 2], 0
xor ecx, ecx
nop
nop
nop
nop
nop
nop
nop
mov eax, ecx
add al, 0x72
xor al, byte [esp + ecx + 4]
add al, 0xc6
mov byte [esp + ecx + 4], al
inc ecx
cmp ecx, 0xb
jne 0x43d480
lea eax, [esp + 4]
mov edi, edx
mov ecx, 1
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
lea edi, [edx + 4]
lea eax, [esp + 8]
xor ecx, ecx
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
movzx eax, byte [esp + 8]
mov byte [edx + 4], al
mov byte [edx + 3], bl
add edx, 5
jmp 0x43d430
mov dword [esp + 4], 0x130c0a48
mov dword [esp + 8], 0x7faeadac
mov byte [esp + 0xc], 0xa8
mov dword [esp + 0xd], 0
mov edi, 0x5c
mov esi, 3
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, esi
and eax, 0x16
mov ecx, edi
and ecx, 0x69
or ecx, eax
xor cl, byte [esp + edi - 0x58]
xor cl, 0x96
add cl, 0xb4
mov byte [esp + edi - 0x58], cl
inc edi
dec esi
cmp edi, 0x69
jne 0x43d500
lea eax, [esp + 4]
mov edi, edx
mov ecx, 2
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
lea esi, [edx + 8]
lea eax, [esp + 0xc]
mov edi, esi
xor ecx, ecx
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
mov dword [edx + 3], ebx
mov edx, esi
jmp 0x43d430
mov eax, dword [edx + ecx*8 + 4]
cmp eax, esi
je 0x43d578
lea ecx, [esp + 0x68]
mov edx, esp
push 0x40
push 0x3000
push ecx
push 0
push edx
push 0xffffffffffffffff
push 6
push eax
push dword [0x449ea8]
call fcn.0043b0a0
add esp, 0x24
mov esi, eax
test esi, esi
js 0x43d810
mov dword [esp + 4], 0xfd6f08fd
mov dword [esp + 8], 0xb72336c3
mov dword [esp + 0xc], 0x53befc33
mov dword [esp + 0x10], 0xa7a6a5a4
mov dword [esp + 0x14], 0x996222c8
mov dword [esp + 0x18], 0x26a6493f
mov dword [esp + 0x1c], 0xa7f8665a
mov dword [esp + 0x20], 0xb7b6b587
mov dword [esp + 0x24], 0xa54ab329
mov dword [esp + 0x28], 0xb1cecdcc
mov dword [esp + 0x2c], 0x1a5c205c
mov dword [esp + 0x30], 0xa0ea1947
mov dword [esp + 0x34], 0xdb00a4a6
mov dword [esp + 0x38], 0xe39a46dc
mov dword [esp + 0x3c], 0xea82e3df
mov dword [esp + 0x40], 0x39d1ba14
mov dword [esp + 0x44], 0x8f0d81b7
mov dword [esp + 0x48], 0xefcdf1d0
mov dword [esp + 0x4c], 0xaf73e9e8
mov dword [esp + 0x50], 0x257fbdd8
mov dword [esp + 0x54], 0x22ba21c1
mov dword [esp + 0x58], 0xcbf9dd06
lea edx, [esp + 0x5c]
mov word [esp + 0x5c], 0xf9c4
mov word [esp + 0x62], 0
mov dword [esp + 0x5e], 0
mov eax, 0x11b62b1c
nop
movzx ecx, byte [esp + eax - 0x11b62b18]
mov esi, ecx
not esi
mov edi, esi
and edi, 0x3e
or esi, 0x4e783fc1
add ecx, esi
inc ecx
or ecx, edi
and ecx, 0x4e783fff
xor ecx, eax
mov ebx, ecx
xor ebx, 0x3e
xor ecx, 0xe5
and ebx, 0x24
add ebx, ebx
sub ebx, ecx
add bl, 0x4f
mov byte [esp + eax - 0x11b62b18], bl
inc eax
cmp eax, 0x11b62b7c
jne 0x43d650
mov eax, dword [esp]
lea esi, [esp + 4]
mov edi, eax
mov ecx, 0x16
xchg esi, esi
rep movsd dword es:[edi], dword [esi]
xchg esi, esi
lea edi, [eax + 0x58]
xor ebx, ebx
xor ecx, ecx
xchg esi, edx
rep movsw word es:[edi], word [esi]
xchg esi, edx
movzx ecx, byte [esp + 0x5c]
mov byte [eax + 0x58], cl
mov eax, dword [esp]
mov dword [esp + 4], 0xe1e6e70f
mov word [esp + 8], 0
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, ebx
add cl, 0x29
xor cl, byte [esp + ebx + 4]
add cl, 0x33
mov byte [esp + ebx + 4], cl
inc ebx
cmp ebx, 6
jne 0x43d6e0
add eax, dword [esp + 4]
mov ebx, ebp
mov ecx, ebp
shr ecx, 2
lea edx, [esp + 0x90]
mov edi, eax
xchg esi, edx
rep movsd dword es:[edi], dword [esi]
xchg esi, edx
mov ecx, ebp
and ecx, 0xfffffffc
add eax, ecx
lea edx, [esp + ecx]
add edx, 0x90
mov ecx, ebp
shr ecx, 1
and ecx, 1
mov esi, edx
mov edi, eax
xchg esi, esi
rep movsw word es:[edi], word [esi]
xchg esi, esi
test bl, 1
je 0x43d741
and ebx, 2
movzx ecx, byte [edx + ebx]
mov byte [eax + ebx], cl
mov edi, dword [esp]
mov dword [esp + 4], 0x57564911
mov word [esp + 8], 0
mov byte [esp + 0xa], 0
mov ecx, 0x6e
mov edx, 0x91
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ebx, byte [esp + ecx - 0x6a]
mov esi, ebx
not esi
or esi, edx
or ebx, ecx
xor ebx, esi
mov al, 0xd9
sub al, bl
mov byte [esp + ecx - 0x6a], al
inc ecx
dec edx
cmp ecx, 0x75
jne 0x43d770
mov eax, dword [esp + 4]
add eax, edi
push dword [esp + 0x2ac]
push eax
call edi
mov esi, eax
mov edi, edx
mov dword [esp + 0x64], 0
mov dword [esp + 4], 0x20272625
mov byte [esp + 8], 0
xor ecx, ecx
mov eax, 0xffffffff
nop
nop
mov edx, eax
or edx, 9
add edx, ecx
mov ebx, ecx
xor ebx, 0x89
lea edx, [ebx + edx*2]
add dl, 2
xor dl, byte [esp + ecx + 4]
add dl, 0x53
mov byte [esp + ecx + 4], dl
lea edx, [ecx + 1]
dec eax
mov ecx, edx
cmp edx, 5
jne 0x43d7c0
mov eax, dword [0x449ea0]
test eax, eax
je 0x43d83f
mov ecx, dword [esp + 4]
xor edx, edx
mov ebx, dword [0x449ea4]
cmp dword [ebx + edx*8], 0x16194952
je 0x43d817
inc edx
cmp eax, edx
jne 0x43d800
jmp 0x43d83f
mov edi, esi
sar edi, 0x1f
jmp 0x43d83f
mov eax, dword [ebx + edx*8 + 4]
cmp eax, ecx
je 0x43d83f
lea ecx, [esp + 0x64]
mov edx, esp
push 0x8000
push ecx
push edx
push 0xffffffffffffffff
push 4
push eax
push dword [0x449ea8]
call fcn.0043b0a0
add esp, 0x1c
mov eax, esi
mov edx, edi
add esp, 0x290
pop esi
pop edi
pop ebx
pop ebp
ret 0x10