Function at 0x442850
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x29c
mov ebx, dword [esp + 0x2bc]
mov dword [esp + 0x37], 0xe48040
mov dword [esp + 0x34], 0x4010ec83
mov dword [esp + 0x30], 0x48e78948
mov dword [esp + 0x2c], 0xce8948fc
mov dword [esp + 0x17], 0xc3fc8948
mov dword [esp + 0x14], 0x48d2ff41
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0xfffffff1
mov dword [esp + 8], 0xba49c031
lea ebp, [esp + 0x9c]
lea eax, [esp + 0x2c]
mov edi, ebp
mov ecx, 3
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
lea edi, [esp + 0xa8]
lea eax, [esp + 0x38]
mov ecx, 1
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
movzx eax, byte [esp + 0x3a]
mov byte [esp + 0xaa], al
mov esi, ebx
cmp ebx, 4
jb 0x4428ec
mov esi, 4
lea edx, [esp + 0xab]
test ebx, ebx
je 0x442aa9
xor ebp, ebp
jmp 0x44292a
mov eax, 0x44803b
mov ecx, 1
mov edi, edx
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
add edx, 4
mov eax, 0x44803f
mov edi, edx
xor ecx, ecx
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
inc ebp
cmp esi, ebp
je 0x4429a9
cmp ebp, 3
ja case.default.0x44292f
jmp dword [ebp*4 + 0x447b00]
mov eax, 0x448040
mov edi, edx
xor ecx, ecx
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
mov eax, 0x448040
mov edi, edx
mov ecx, 1
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
mov byte [edx + 2], 0xe
add edx, 3
jmp case.default.0x44292f
mov eax, 0x448036
mov ecx, 1
mov edi, edx
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
add edx, 4
mov eax, 0x44803a
mov edi, edx
xor ecx, ecx
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
jmp case.default.0x44292f
mov eax, 0x448044
mov edi, edx
mov ecx, 1
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
add edx, 4
mov eax, 0x448048
mov edi, edx
xor ecx, ecx
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
jmp case.default.0x44292f
cmp ebx, 3
lea ebp, [esp + 0x9c]
jbe 0x442aa9
test bl, 1
je 0x4429e1
mov eax, 0x44804d
mov esi, 0x44804d
mov edi, edx
xor ecx, ecx
xchg esi, esi
rep movsd dword es:[edi], dword [esi]
xchg esi, esi
mov edi, edx
mov ecx, 1
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
add edx, 2
mov word [esp + 4], 0x50
mov dword [esp], 0x20468b48
mov byte [esp + 0x44], 0
mov dword [esp + 0x40], 0x50000000
mov dword [esp + 0x3c], 0x80868b48
lea eax, [ebx*8]
cmp eax, 0x7ffffffe
ja 0x442a93
dec ebx
cmp ebx, 4
jb 0x442aa2
add eax, 0xfffffff8
lea ebp, [esp + 0x3c]
jmp 0x442a5e
mov dword [esp + 0x3f], eax
mov esi, ebp
mov edi, edx
mov ecx, 2
xchg esi, esi
rep movsd dword es:[edi], dword [esi]
xchg esi, esi
add edx, 8
lea esi, [esp + 0x44]
xor ecx, ecx
mov edi, edx
xchg esi, esi
rep movsw word es:[edi], word [esi]
xchg esi, esi
dec ebx
add eax, 0xfffffff8
cmp ebx, 3
jbe 0x442aa2
cmp eax, 0x7e
ja 0x442a30
mov byte [esp + 3], al
mov esi, esp
mov ecx, 1
mov edi, edx
xchg esi, esi
rep movsd dword es:[edi], dword [esi]
xchg esi, esi
lea edi, [edx + 4]
lea esi, [esp + 4]
xor ecx, ecx
xchg esi, esi
rep movsw word es:[edi], word [esi]
xchg esi, esi
movzx ecx, byte [esp + 4]
mov byte [edx + 4], cl
add edx, 5
jmp 0x442a55
mov eax, 0xffffffff
mov edx, 0xffffffff
jmp 0x442e97
lea ebp, [esp + 0x9c]
mov eax, dword [esp + 0x2b4]
mov esi, 0x448031
mov edi, edx
mov ecx, 1
xchg esi, esi
rep movsd dword es:[edi], dword [esi]
xchg esi, esi
lea esi, [edx + 4]
mov ebx, 0x448035
xor ecx, ecx
mov edi, esi
xchg esi, ebx
rep movsw word es:[edi], word [esi]
xchg esi, ebx
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x2b0]
mov dword [esp + 0xc], eax
lea eax, [esp + 8]
mov edi, esi
mov ecx, 4
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
lea edi, [edx + 0x14]
lea eax, [esp + 0x18]
mov ecx, 1
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
movzx eax, byte [esp + 0x1a]
mov byte [edx + 0x16], al
mov eax, ebp
neg eax
lea ebx, [edx + eax]
add ebx, 0x17
sub edx, ebp
mov dword [esp], 0
add edx, 0x71
mov dword [esp + 0x28], edx
mov dword [esp + 0x3c], 0x909f9e9d
mov eax, 0xc4e76de5
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [esp + eax + 0x3b189257]
mov ecx, eax
and ecx, edx
mov esi, ecx
and esi, 2
mov edi, ecx
or ecx, 2
imul ecx, esi
xor esi, 2
and edi, 0xffffffed
imul edi, esi
add ecx, edi
add edx, eax
mov esi, ecx
xor esi, edx
not ecx
and ecx, edx
add ecx, ecx
sub ecx, esi
mov edx, 1
sub edx, ecx
or edx, 0xfe
or ecx, 1
sub ecx, edx
add cl, 0x85
mov byte [esp + eax + 0x3b189257], cl
inc eax
cmp eax, 0xc4e76de9
jne 0x442b40
mov eax, dword [esp + 0x3c]
mov ecx, dword [0x4504d8]
test ecx, ecx
mov dword [esp + 0x20], ebx
je 0x442bec
xor edx, edx
mov esi, dword [0x4504dc]
cmp dword [esi + edx*8], 0x3e416e49
je 0x442bc0
inc edx
cmp ecx, edx
jne 0x442bb0
jmp 0x442bec
mov ecx, dword [esi + edx*8 + 4]
cmp ecx, eax
je 0x442bec
lea eax, [esp + 0x28]
mov edx, esp
push 0x40
push 0x3000
push eax
push 0
push edx
push 0xffffffffffffffff
push 6
push dword [0x4504e0]
push ecx
call fcn.00440d90
add esp, 0x24
test eax, eax
js 0x442e60
mov dword [esp + 0x3c], 0xa351fca7
mov dword [esp + 0x40], 0x7dcdf2a1
mov dword [esp + 0x44], 0x5976b0f1
mov dword [esp + 0x48], 0x7d7e7f40
mov dword [esp + 0x4c], 0xaf3ac694
mov dword [esp + 0x50], 0xc24e63c5
mov dword [esp + 0x54], 0x4d8c0a6a
mov dword [esp + 0x58], 0x6d6e6fbd
mov dword [esp + 0x5c], 0x5b7255db
mov dword [esp + 0x60], 0xff666768
mov dword [esp + 0x64], 0xed004d0
mov dword [esp + 0x68], 0xfc3263dd
mov dword [esp + 0x6c], 0x2164f8fe
mov dword [esp + 0x70], 0xc9d2a218
mov dword [esp + 0x74], 0xdeeac515
mov dword [esp + 0x78], 0x670fe650
mov dword [esp + 0x7c], 0xf573fbed
mov dword [esp + 0x80], 0x5db3bd4
mov dword [esp + 0x84], 0xc5b50304
mov dword [esp + 0x88], 0x4389c7dc
mov dword [esp + 0x8c], 0x46c27be3
mov dword [esp + 0x90], 0xe137172e
lea eax, [esp + 0x94]
mov dword [esp + 0x1c], eax
mov word [esp + 0x94], 0x33e8
mov word [esp + 0x9a], 0
mov dword [esp + 0x96], 0
mov eax, 0xe8621593
mov ecx, 0x179dea6e
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ebx, byte [esp + eax + 0x179deaa9]
mov edi, eax
and edi, ebx
add edi, edi
mov ebp, ebx
sub ebp, edi
add ebp, eax
lea esi, [ebp*2]
and esi, 2
sub edi, ebx
add edi, ecx
and edi, 1
mov ebx, esi
and ebx, ebp
and ebp, 0xfe
lea edx, [edi + ebp]
add edx, 0x20
or edx, esi
add edx, ebx
mov byte [esp + eax + 0x179deaa9], dl
inc eax
dec ecx
cmp eax, 0xe86215f3
jne 0x442cf0
mov eax, dword [esp]
lea edx, [esp + 0x3c]
mov edi, eax
mov ecx, 0x16
xchg esi, edx
rep movsd dword es:[edi], dword [esi]
xchg esi, edx
lea edi, [eax + 0x58]
xor ecx, ecx
mov edx, dword [esp + 0x1c]
xchg esi, edx
rep movsw word es:[edi], word [esi]
xchg esi, edx
movzx ecx, byte [esp + 0x94]
mov byte [eax + 0x58], cl
mov eax, dword [esp]
lea edi, [eax + 0x59]
mov ebx, dword [esp + 0x20]
mov ecx, ebx
shr ecx, 2
lea edx, [esp + 0x9c]
xchg esi, edx
rep movsd dword es:[edi], dword [esi]
xchg esi, edx
mov ecx, ebx
and ecx, 0xfffffffc
add eax, ecx
add eax, 0x59
lea edx, [esp + ecx]
add edx, 0x9c
mov ecx, ebx
shr ecx, 1
and ecx, 1
mov esi, edx
mov edi, eax
xchg esi, esi
rep movsw word es:[edi], word [esi]
xchg esi, esi
test bl, 1
je 0x442db8
and ebx, 2
movzx ecx, byte [edx + ebx]
mov byte [eax + ebx], cl
mov eax, dword [esp]
lea ecx, [eax + 0x59]
push dword [esp + 0x2b8]
push ecx
call eax
mov dword [esp + 0x24], 0
mov dword [esp + 0x3c], 0x909f9e9d
mov ecx, 0xc4e76de5
nop
nop
nop
movzx esi, byte [esp + ecx + 0x3b189257]
mov ebx, ecx
and ebx, esi
mov edi, ebx
and edi, 2
mov ebp, ebx
or ebx, 2
imul ebx, edi
xor edi, 2
and ebp, 0xffffffed
imul ebp, edi
add ebx, ebp
add esi, ecx
mov edi, ebx
xor edi, esi
not ebx
and ebx, esi
add ebx, ebx
sub ebx, edi
mov esi, 1
sub esi, ebx
or esi, 0xfe
or ebx, 1
sub ebx, esi
add bl, 0x85
mov byte [esp + ecx + 0x3b189257], bl
inc ecx
cmp ecx, 0xc4e76de9
jne 0x442de0
mov ecx, dword [0x4504d8]
test ecx, ecx
je 0x442e97
mov esi, dword [esp + 0x3c]
xor edi, edi
mov ebx, dword [0x4504dc]
nop
nop
nop
cmp dword [ebx + edi*8], 0x16194952
je 0x442e67
inc edi
cmp ecx, edi
jne 0x442e50
jmp 0x442e97
mov edx, eax
sar edx, 0x1f
jmp 0x442e97
mov ecx, dword [ebx + edi*8 + 4]
cmp ecx, esi
je 0x442e97
lea esi, [esp + 0x24]
mov edi, esp
push 0x8000
push esi
push edi
push 0xffffffffffffffff
push 4
push dword [0x4504e0]
push ecx
mov esi, eax
mov edi, edx
call fcn.00440d90
mov edx, edi
mov eax, esi
add esp, 0x1c
add esp, 0x29c
pop esi
pop edi
pop ebx
pop ebp
ret 0x10