Function at 0x40f8c0
Capabilities:
Encode data using xor
Extract resource via kernel32 functions
Hash data with crc32

Disassembly:
sub esp, 8
cmp byte [0x43ce18], 0
push ebx
push ebp
push esi
mov ebp, ecx
mov ebx, edx
push edi
mov dword [esp + 0x14], ebp
jne 0x40f9f5
push 0xa
push 3
push 0
call dword [sym.imp.KERNEL32.dll_FindResourceA]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_LoadResource]
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
mov dword [0x43c300], eax
or edx, 0xffffffff
xor edi, edi
mov ecx, dword [eax]
add eax, 4
mov dword [0x43c300], eax
mov dword [esp + 0x10], ecx
mov ebp, dword [eax]
lea esi, [eax + 4]
mov dword [0x43c300], esi
test ebp, ebp
je 0x40f9de
movzx eax, byte [esi + edi]
xor edx, eax
mov eax, edx
and al, 1
movzx ecx, al
neg ecx
sbb ecx, ecx
shr edx, 1
and ecx, 0xedb88320
xor ecx, edx
mov eax, ecx
and al, 1
movzx edx, al
neg edx
sbb edx, edx
shr ecx, 1
and edx, 0xedb88320
xor edx, ecx
mov eax, edx
and al, 1
movzx ecx, al
neg ecx
sbb ecx, ecx
shr edx, 1
and ecx, 0xedb88320
xor ecx, edx
mov eax, ecx
and al, 1
movzx edx, al
neg edx
sbb edx, edx
shr ecx, 1
and edx, 0xedb88320
xor edx, ecx
mov eax, edx
and al, 1
movzx ecx, al
neg ecx
sbb ecx, ecx
shr edx, 1
and ecx, 0xedb88320
xor ecx, edx
mov eax, ecx
and al, 1
movzx edx, al
neg edx
sbb edx, edx
shr ecx, 1
and edx, 0xedb88320
xor edx, ecx
mov eax, edx
and al, 1
movzx ecx, al
neg ecx
sbb ecx, ecx
shr edx, 1
and ecx, 0xedb88320
xor ecx, edx
mov eax, ecx
and al, 1
movzx edx, al
neg edx
sbb edx, edx
shr ecx, 1
and edx, 0xedb88320
inc edi
xor edx, ecx
cmp edi, ebp
jb 0x40f923
mov ecx, dword [esp + 0x10]
not edx
cmp edx, ecx
jne 0x40fb5e
mov ebp, dword [esp + 0x14]
mov byte [0x43ce18], 1
jmp 0x40f9fb
mov esi, dword [0x43c300]
mov ecx, 0x42e7c8
mov eax, ebx
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x40fa22
test dl, dl
je 0x40fa1e
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x40fa22
add eax, 2
add ecx, 2
test dl, dl
jne 0x40fa02
xor eax, eax
jmp 0x40fa27
sbb eax, eax
or eax, 1
test eax, eax
je 0x40faa5
cmp byte [0x43ce0c], 1
je 0x40faa5
mov esi, dword [sym.imp.python37.dll_PyDict_New]
call esi
mov dword [0x43cda8], eax
call esi
mov dword [0x43cdac], eax
call esi
mov dword [0x43cda0], eax
call esi
mov dword [0x43cd9c], eax
call esi
mov dword [0x43cdb8], eax
call esi
mov dword [0x43cda4], eax
call esi
mov dword [0x43cdb0], eax
call esi
mov edi, dword [sym.imp.python37.dll_PyLong_FromLong]
mov esi, 0xfffffffb
mov dword [0x43cdb4], eax
nop dword [eax]
push esi
call edi
mov dword [esi*4 + 0x43bee4], eax
add esp, 4
inc esi
inc dword [eax]
cmp esi, 0x101
jle 0x40fa80
mov esi, dword [0x43c300]
mov byte [0x43ce0c], 1
mov ecx, esi
mov eax, ebx
nop dword [eax]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x40fad0
test dl, dl
je 0x40facc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x40fad0
add eax, 2
add ecx, 2
test dl, dl
jne 0x40fab0
xor edx, edx
jmp 0x40fad5
sbb edx, edx
or edx, 1
mov ecx, esi
lea edi, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40fae0
sub ecx, edi
add esi, ecx
mov eax, dword [esi + 1]
add esi, 5
test edx, edx
je 0x40fb45
add esi, eax
mov ecx, ebx
mov eax, esi
nop dword [eax + eax]
mov dl, byte [ecx]
cmp dl, byte [eax]
jne 0x40fb20
test dl, dl
je 0x40fb1c
mov dl, byte [ecx + 1]
cmp dl, byte [eax + 1]
jne 0x40fb20
add ecx, 2
add eax, 2
test dl, dl
jne 0x40fb00
xor edx, edx
jmp 0x40fb25
sbb edx, edx
or edx, 1
mov ecx, esi
lea edi, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40fb30
sub ecx, edi
add esi, ecx
mov eax, dword [esi + 1]
add esi, 5
test edx, edx
jne 0x40faf5
movzx eax, word [esi]
lea edx, [esi + 2]
push eax
mov ecx, ebp
call fcn.0040ed50
add esp, 4
pop edi
pop esi
pop ebp
pop ebx
add esp, 8
ret
push str.Error__corrupted_constants_object
call fcn.00417d0c
add esp, 4
call fcn.00414cb0
int3