Function at 0x4430b0
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x294
mov ebx, dword [esp + 0x2b4]
mov dword [esp + 0x7b], 0xe48040
mov dword [esp + 0x78], 0x4010ec83
mov dword [esp + 0x74], 0x48e78948
mov dword [esp + 0x70], 0xce8948fc
lea edi, [esp + 0x94]
lea eax, [esp + 0x70]
mov ecx, 3
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
lea edi, [esp + 0xa0]
lea eax, [esp + 0x7c]
mov ecx, 1
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
movzx eax, byte [esp + 0x7e]
mov byte [esp + 0xa2], al
mov dword [esp + 4], ebx
cmp ebx, 4
jb 0x443127
mov dword [esp + 4], 4
lea eax, [esp + 0xa3]
test ebx, ebx
je 0x4435a9
xor ebp, ebp
jmp 0x443152
mov ebx, dword [esp + 0x2b4]
inc ebp
cmp ebp, dword [esp + 4]
je 0x4433bb
cmp ebp, 3
ja case.default.0x443157
jmp dword [ebp*4 + 0x447af0]
mov dword [esp + 8], 0x4f7cf6b0
lea ecx, [esp + 0xc]
mov byte [ecx + 2], 0
mov word [ecx], 0
mov ecx, 0x1e61687c
mov edi, 0xc19e9783
nop
nop
nop
movzx esi, byte [esp + ecx - 0x1e616874]
mov ebx, edi
and ebx, 0xc092026a
mov edx, ecx
and edx, 0x14410895
sub edx, ebx
xor edx, esi
add edx, 0x5d94e1a5
mov esi, edx
xor esi, 0x7e
mov ebx, edx
or ebx, 1
and ebx, esi
xor edx, 1
lea edx, [edx + ebx*2]
mov byte [esp + ecx - 0x1e616874], dl
inc ecx
dec edi
cmp ecx, 0x1e616883
jne 0x443180
lea esi, [esp + 8]
mov edx, esi
mov edi, eax
xor ecx, ecx
xchg esi, edx
rep movsd dword es:[edi], dword [esi]
xchg esi, edx
mov edx, esi
mov ecx, 1
mov edi, eax
xchg esi, edx
rep movsw word es:[edi], word [esi]
xchg esi, edx
movzx ecx, byte [esp + 0xa]
mov byte [eax + 2], cl
add eax, 3
jmp 0x443140
mov dword [esp + 8], 0xf3844a8c
mov byte [esp + 0xc], 0xc4
lea ecx, [esp + 0xc]
mov byte [ecx + 3], 0
mov word [ecx + 1], 0
xor ecx, ecx
mov edi, 0xb27e96af
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [esp + ecx + 8]
mov esi, edi
and esi, 0x925e060c
mov ebx, ecx
and ebx, 3
or ebx, esi
xor ebx, edx
xor ebx, 0xdfdf6f5c
add ebx, 0xd9d0a454
mov edx, ebx
and edx, 0x1c
xor ebx, 0x1c
lea edx, [ebx + edx*2]
mov byte [esp + ecx + 8], dl
inc ecx
dec edi
cmp ecx, 8
jne 0x443230
lea edx, [esp + 8]
mov ecx, 1
mov edi, eax
xchg esi, edx
rep movsd dword es:[edi], dword [esi]
xchg esi, edx
add eax, 4
lea edx, [esp + 0xc]
mov edi, eax
xor ecx, ecx
xchg esi, edx
rep movsw word es:[edi], word [esi]
xchg esi, edx
jmp 0x443140
mov dword [esp + 8], 0x4980c280
mov byte [esp + 0xc], 0x50
mov dword [esp + 0xd], 0
mov esi, 0x4d6e863d
mov edi, 0x9add0c7a
nop
movzx ebx, byte [esp + esi - 0x4d6e8635]
mov edx, edi
and edx, 0x90940c1a
mov ecx, esi
xor ecx, 0x6a5b5e8d
add ecx, edx
mov edx, ecx
xor edx, 0x4d6e863d
and ecx, 0x329179c2
add ecx, ecx
sub ecx, edx
lea edx, [ebx + ebx]
not edx
add edx, ebx
xor edx, ebx
and edx, ecx
xor edx, ebx
mov ecx, edx
and ecx, 1
or edx, 1
add edx, ecx
add dl, 0x3e
mov byte [esp + esi - 0x4d6e8635], dl
inc esi
add edi, 2
cmp esi, 0x4d6e8646
jne 0x4432b0
lea edx, [esp + 8]
mov ecx, 1
mov edi, eax
xchg esi, edx
rep movsd dword es:[edi], dword [esi]
xchg esi, edx
add eax, 4
lea edx, [esp + 0xc]
mov edi, eax
xor ecx, ecx
xchg esi, edx
rep movsw word es:[edi], word [esi]
xchg esi, edx
jmp 0x443140
mov dword [esp + 8], 0x11e09ed4
mov byte [esp + 0xc], 8
lea ecx, [esp + 0xc]
mov byte [ecx + 3], 0
mov word [ecx + 1], 0
mov ecx, 0x750291c3
mov edi, 0x3c
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [esp + ecx - 0x750291bb]
mov esi, ecx
and esi, edx
add esi, esi
mov ebx, edx
sub ebx, esi
add ebx, ecx
or ebx, edi
add bl, bl
add bl, dl
movzx edx, bl
add edx, ecx
add dl, 0x33
mov byte [esp + ecx - 0x750291bb], dl
inc ecx
dec edi
cmp ecx, 0x750291cb
jne 0x443360
lea edx, [esp + 8]
mov ecx, 1
mov edi, eax
xchg esi, edx
rep movsd dword es:[edi], dword [esi]
xchg esi, edx
add eax, 4
lea edx, [esp + 0xc]
mov edi, eax
xor ecx, ecx
xchg esi, edx
rep movsw word es:[edi], word [esi]
xchg esi, edx
jmp 0x443140
cmp ebx, 3
jbe 0x4435a9
test bl, 1
je 0x4433ee
mov edx, 0x448025
mov esi, 0x448025
mov edi, eax
xor ecx, ecx
xchg esi, esi
rep movsd dword es:[edi], dword [esi]
xchg esi, esi
mov ecx, 1
mov edi, eax
xchg esi, edx
rep movsw word es:[edi], word [esi]
xchg esi, edx
add eax, 2
mov ecx, ebx
and ecx, 0xfffffff7
mov edx, ebx
and edx, 8
mov edi, ebx
or edi, 8
imul edi, edx
xor edx, 8
imul edx, ecx
add edi, edx
mov esi, 0xffffffff
mov edx, 0xffffffff
cmp edi, 0x7ffffffe
ja 0x443a13
dec ebx
cmp ebx, 4
jb 0x4435a9
lea ebp, [esp + 8]
jmp 0x44343e
mov ebx, dword [esp + 4]
dec ebx
cmp ebx, 3
jbe 0x4435a9
lea ecx, [ebx*8]
mov esi, ecx
cmp ecx, 0x7e
mov dword [esp + 4], ebx
ja 0x4434f0
mov dword [esp + 8], 0x4960a66c
mov dword [esp + 0xc], 0x2f78
mov ecx, 0x82a1ff07
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [esp + ecx + 0x7d5e0101]
xor edx, ecx
mov edi, edx
not edi
or edi, 0x72d604dc
add edi, edx
mov ebx, edx
xor ebx, 0xdc
lea ebx, [ebx + edi*2]
add ebx, 2
and edx, 1
xor ebx, 1
or ebx, edx
add ebx, edx
mov byte [esp + ecx + 0x7d5e0101], bl
inc ecx
cmp ecx, 0x82a1ff0f
jne 0x443470
mov edx, ebp
mov edi, eax
mov ecx, 1
xchg esi, edx
rep movsd dword es:[edi], dword [esi]
xchg esi, edx
lea edi, [eax + 4]
lea edx, [esp + 0xc]
xor ecx, ecx
xchg esi, edx
rep movsw word es:[edi], word [esi]
xchg esi, edx
movzx ecx, byte [esp + 0xc]
mov byte [eax + 4], cl
mov ecx, esi
mov byte [eax + 3], cl
add eax, 5
jmp 0x443430
mov dword [esp + 8], 0x63641a58
mov dword [esp + 0xc], 0x57e6e5e4
mov byte [esp + 0x10], 0xd8
mov dword [esp + 0x11], 0
mov ecx, 0x203ab5d8
mov edi, 0x9fc54a27
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ebp, byte [esp + ecx - 0x203ab5d0]
lea ebx, [ebp*2]
not ebx
add ebx, ebp
and ebx, 0x21bbb54a
mov edx, ebp
not edx
or edx, 0xde444ab5
add ebp, edx
inc ebp
or ebp, ebx
mov ebx, ecx
and ebx, 0x203ab54a
mov edx, edi
and edx, 0x9e444a35
or edx, ebx
not edx
mov ebx, ebp
and ebx, edx
add edx, ebp
add ebx, ebx
sub edx, ebx
add dl, 0xc8
mov byte [esp + ecx - 0x203ab5d0], dl
inc ecx
dec edi
cmp ecx, 0x203ab5e5
jne 0x443520
lea ebp, [esp + 8]
mov edx, ebp
mov edi, eax
mov ecx, 2
xchg esi, edx
rep movsd dword es:[edi], dword [esi]
xchg esi, edx
lea edx, [eax + 8]
lea ebx, [esp + 0x10]
mov edi, edx
xor ecx, ecx
xchg esi, ebx
rep movsw word es:[edi], word [esi]
xchg esi, ebx
mov dword [eax + 3], esi
mov eax, edx
jmp 0x443430
mov dword [esp + 8], 0xb96e16d4
lea ebx, [esp + 0xc]
mov byte [esp + 0xc], 0x98
mov word [esp + 0xd], 0
mov byte [esp + 0xf], 0
lea ecx, [esp + 8]
mov esi, 0x7701164
nop
movzx edi, byte [ecx]
mov edx, esi
or edx, edi
lea ebp, [esi - 0x7701100]
and ebp, edi
not edx
or edx, ebp
mov edi, edx
and edi, 1
xor edx, 1
lea edx, [edx + edi*2]
add dl, 0xf8
mov byte [ecx], dl
inc ecx
dec esi
cmp esi, 0x770115c
jne 0x4435d0
lea edx, [esp + 8]
mov edi, eax
mov ecx, 1
xchg esi, edx
rep movsd dword es:[edi], dword [esi]
xchg esi, edx
lea edx, [eax + 4]
mov edi, edx
xor ecx, ecx
xchg esi, ebx
rep movsw word es:[edi], word [esi]
xchg esi, ebx
mov dword [esp + 0x8f], 0xc3fc8948
mov dword [esp + 0x8c], 0x48d2ff41
mov dword [esp + 0x80], 0xba49c031
mov ecx, dword [esp + 0x2a8]
mov dword [esp + 0x84], ecx
mov ecx, dword [esp + 0x2ac]
mov dword [esp + 0x88], ecx
lea esi, [esp + 0x80]
mov edi, edx
mov ecx, 4
xchg esi, esi
rep movsd dword es:[edi], dword [esi]
xchg esi, esi
lea edi, [eax + 0x14]
lea edx, [esp + 0x90]
mov ecx, 1
xchg esi, edx
rep movsw word es:[edi], word [esi]
xchg esi, edx
movzx ecx, byte [esp + 0x92]
mov byte [eax + 0x16], cl
add eax, 0x17
mov ecx, eax
not ecx
lea edx, [esp + 0x94]
and ecx, edx
not edx
and edx, eax
sub edx, ecx
mov dword [esp], 0
mov ebp, edx
lea eax, [edx + 0x5a]
mov dword [esp + 0x6c], eax
mov dword [esp + 8], 0x383b3a3d
mov word [esp + 0xc], 0
mov byte [esp + 0xe], 0
mov eax, 0x598bd3cb
mov ecx, 0x34
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx esi, byte [esp + eax - 0x598bd3c3]
mov edx, ecx
xor edx, eax
and edx, esi
xor edx, eax
mov esi, 0x77
sub esi, edx
add edx, 8
and esi, 0x53
and edx, 0xac
sub edx, esi
add dl, 0x54
mov byte [esp + eax - 0x598bd3c3], dl
inc eax
dec ecx
cmp eax, 0x598bd3d2
jne 0x4436e0
mov esi, dword [esp + 8]
mov eax, dword [0x450710]
test eax, eax
je 0x44376e
xor ecx, ecx
mov edx, dword [0x450714]
nop
nop
nop
cmp dword [edx + ecx*8], 0x3e416e49
je 0x443740
inc ecx
cmp eax, ecx
jne 0x443730
jmp 0x44376e
mov eax, dword [edx + ecx*8 + 4]
cmp eax, esi
je 0x44376e
lea ecx, [esp + 0x6c]
mov edx, esp
push 0x40
push 0x3000
push ecx
push 0
push edx
push 0xffffffffffffffff
push 6
push dword [0x450718]
push eax
call fcn.00441310
add esp, 0x24
mov esi, eax
test esi, esi
js 0x4439e0
mov dword [esp + 8], 0x8d3b4095
mov dword [esp + 0xc], 0xdbaf428f
mov dword [esp + 0x10], 0x37ca8447
mov dword [esp + 0x14], 0xdbdadddc
mov dword [esp + 0x18], 0xd1265680
mov dword [esp + 0x1c], 0x6aea116b
mov dword [esp + 0x20], 0xe3a02a0e
mov dword [esp + 0x24], 0xebeaedd3
mov dword [esp + 0x28], 0xe51ee761
mov dword [esp + 0x2c], 0x99f2f5f4
mov dword [esp + 0x30], 0x2e6c2864
mov dword [esp + 0x34], 0x98e63173
mov dword [esp + 0x38], 0xfc89c9a
mov dword [esp + 0x3c], 0x2f469204
mov dword [esp + 0x40], 0x3e463703
mov dword [esp + 0x44], 0xd10956cc
mov dword [esp + 0x48], 0x5bdd596b
mov dword [esp + 0x4c], 0x133d1938
mov dword [esp + 0x50], 0x5b971110
mov dword [esp + 0x54], 0xd5935530
mov dword [esp + 0x58], 0xe66ed939
mov dword [esp + 0x5c], 0x172105d2
lea edx, [esp + 0x60]
mov word [esp + 0x60], 0x210c
mov byte [esp + 0x66], 0
mov dword [esp + 0x62], 0
xor eax, eax
mov ecx, eax
add cl, 0x4e
xor cl, byte [esp + eax + 8]
add cl, 0x7a
mov byte [esp + eax + 8], cl
inc eax
cmp eax, 0x5f
jne 0x443840
mov eax, dword [esp]
lea esi, [esp + 8]
mov ecx, 0x16
mov edi, eax
xchg esi, esi
rep movsd dword es:[edi], dword [esi]
xchg esi, esi
lea edi, [eax + 0x58]
xor ebx, ebx
xor ecx, ecx
xchg esi, edx
rep movsw word es:[edi], word [esi]
xchg esi, edx
movzx ecx, byte [esp + 0x60]
mov byte [eax + 0x58], cl
mov eax, dword [esp]
mov dword [esp + 8], 0xd7d6c911
nop
nop
nop
nop
nop
mov ecx, ebx
add cl, 0xae
xor cl, byte [esp + ebx + 8]
add cl, 0x9a
mov byte [esp + ebx + 8], cl
mov ecx, ebx
and ecx, 1
xor ebx, 1
lea ebx, [ebx + ecx*2]
cmp ebx, 4
jb 0x443890
add eax, dword [esp + 8]
mov ebx, ebp
mov ecx, ebp
shr ecx, 2
lea edx, [esp + 0x94]
mov edi, eax
xchg esi, edx
rep movsd dword es:[edi], dword [esi]
xchg esi, edx
mov ecx, ebp
and ecx, 0xfffffffc
add eax, ecx
lea edx, [esp + ecx]
add edx, 0x94
mov ecx, ebp
shr ecx, 1
and ecx, 1
mov esi, edx
mov edi, eax
xchg esi, esi
rep movsw word es:[edi], word [esi]
xchg esi, esi
test bl, 1
je 0x4438fb
and ebx, 2
movzx ecx, byte [edx + ebx]
mov byte [eax + ebx], cl
mov eax, dword [esp]
mov dword [esp + 8], 0xf3f2f1a9
mov dword [esp + 0xc], 0
xor ecx, ecx
xor edx, edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov esi, edx
xor esi, 0x2c
mov ebx, ecx
and ebx, 6
sub ebx, esi
xor bl, byte [esp + edx + 8]
add bl, 0xdc
mov byte [esp + edx + 8], bl
inc edx
add ecx, 2
cmp edx, 8
jne 0x443920
mov ecx, dword [esp + 8]
add ecx, eax
push dword [esp + 0x2b0]
push ecx
call eax
mov esi, eax
mov dword [esp + 0x68], 0
mov dword [esp + 8], 0x383b3a3d
mov word [esp + 0xc], 0
mov byte [esp + 0xe], 0
mov eax, 0x598bd3cb
mov ecx, 0x34
nop
nop
nop
nop
nop
nop
nop
nop
movzx edi, byte [esp + eax - 0x598bd3c3]
mov ebx, ecx
xor ebx, eax
and ebx, edi
xor ebx, eax
mov edi, 0x77
sub edi, ebx
add ebx, 8
and edi, 0x53
and ebx, 0xac
sub ebx, edi
add bl, 0x54
mov byte [esp + eax - 0x598bd3c3], bl
inc eax
dec ecx
cmp eax, 0x598bd3d2
jne 0x443980
mov eax, dword [0x450710]
test eax, eax
je 0x443a13
mov ecx, dword [esp + 8]
xor edi, edi
mov ebx, dword [0x450714]
nop
nop
nop
cmp dword [ebx + edi*8], 0x16194952
je 0x4439e7
inc edi
cmp eax, edi
jne 0x4439d0
jmp 0x443a13
mov edx, esi
sar edx, 0x1f
jmp 0x443a13
mov eax, dword [ebx + edi*8 + 4]
cmp eax, ecx
je 0x443a13
lea ecx, [esp + 0x68]
mov edi, esp
push 0x8000
push ecx
push edi
push 0xffffffffffffffff
push 4
push dword [0x450718]
push eax
mov edi, edx
call fcn.00441310
mov edx, edi
add esp, 0x1c
mov eax, esi
add esp, 0x294
pop esi
pop edi
pop ebx
pop ebp
ret 0x10