Function at 0x4415c0
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x294
mov ebx, dword [esp + 0x2b4]
mov dword [esp + 0x8f], 0xe48040
mov dword [esp + 0x8c], 0x4010ec83
mov dword [esp + 0x88], 0x48e78948
mov dword [esp + 0x84], 0xce8948fc
mov dword [esp + 0x17], 0xc3fc8948
mov dword [esp + 0x14], 0x48d2ff41
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0xfffffff1
mov dword [esp + 8], 0xba49c031
lea ebp, [esp + 0x94]
lea eax, [esp + 0x84]
mov edi, ebp
mov ecx, 3
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
lea edi, [esp + 0xa0]
lea eax, [esp + 0x90]
mov ecx, 1
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
movzx eax, byte [esp + 0x92]
mov byte [esp + 0xa2], al
mov esi, ebx
cmp ebx, 4
jb 0x441671
mov esi, 4
lea edx, [esp + 0xa3]
test ebx, ebx
je 0x441839
xor ebp, ebp
jmp 0x4416ba
mov eax, 0x44603b
mov ecx, 1
mov edi, edx
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
add edx, 4
mov eax, 0x44603f
mov edi, edx
xor ecx, ecx
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
inc ebp
cmp esi, ebp
je 0x441739
cmp ebp, 3
ja case.default.0x4416bf
jmp dword [ebp*4 + 0x445b00]
mov eax, 0x446040
mov edi, edx
xor ecx, ecx
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
mov eax, 0x446040
mov edi, edx
mov ecx, 1
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
mov byte [edx + 2], 0xe
add edx, 3
jmp case.default.0x4416bf
mov eax, 0x446036
mov ecx, 1
mov edi, edx
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
add edx, 4
mov eax, 0x44603a
mov edi, edx
xor ecx, ecx
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
jmp case.default.0x4416bf
mov eax, 0x446044
mov edi, edx
mov ecx, 1
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
add edx, 4
mov eax, 0x446048
mov edi, edx
xor ecx, ecx
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
jmp case.default.0x4416bf
cmp ebx, 3
lea ebp, [esp + 0x94]
jbe 0x441839
test bl, 1
je 0x441771
mov eax, 0x44604d
mov esi, 0x44604d
mov edi, edx
xor ecx, ecx
xchg esi, esi
rep movsd dword es:[edi], dword [esi]
xchg esi, esi
mov edi, edx
mov ecx, 1
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
add edx, 2
mov word [esp + 4], 0x50
mov dword [esp], 0x20468b48
mov byte [esp + 0x28], 0
mov dword [esp + 0x24], 0x50000000
mov dword [esp + 0x20], 0x80868b48
lea eax, [ebx*8]
cmp eax, 0x7ffffffe
ja 0x441823
dec ebx
cmp ebx, 4
jb 0x441832
add eax, 0xfffffff8
lea ebp, [esp + 0x20]
jmp 0x4417ee
mov dword [esp + 0x23], eax
mov esi, ebp
mov edi, edx
mov ecx, 2
xchg esi, esi
rep movsd dword es:[edi], dword [esi]
xchg esi, esi
add edx, 8
lea esi, [esp + 0x28]
xor ecx, ecx
mov edi, edx
xchg esi, esi
rep movsw word es:[edi], word [esi]
xchg esi, esi
dec ebx
add eax, 0xfffffff8
cmp ebx, 3
jbe 0x441832
cmp eax, 0x7e
ja 0x4417c0
mov byte [esp + 3], al
mov esi, esp
mov ecx, 1
mov edi, edx
xchg esi, esi
rep movsd dword es:[edi], dword [esi]
xchg esi, esi
lea edi, [edx + 4]
lea esi, [esp + 4]
xor ecx, ecx
xchg esi, esi
rep movsw word es:[edi], word [esi]
xchg esi, esi
movzx ecx, byte [esp + 4]
mov byte [edx + 4], cl
add edx, 5
jmp 0x4417e5
mov eax, 0xffffffff
mov edx, 0xffffffff
jmp 0x441b77
lea ebp, [esp + 0x94]
mov eax, dword [esp + 0x2ac]
mov esi, 0x446031
mov edi, edx
mov ecx, 1
xchg esi, esi
rep movsd dword es:[edi], dword [esi]
xchg esi, esi
lea esi, [edx + 4]
mov ebx, 0x446035
xor ecx, ecx
mov edi, esi
xchg esi, ebx
rep movsw word es:[edi], word [esi]
xchg esi, ebx
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x2a8]
mov dword [esp + 0xc], eax
lea eax, [esp + 8]
mov edi, esi
mov ecx, 4
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
lea edi, [edx + 0x14]
lea eax, [esp + 0x18]
mov ecx, 1
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
movzx eax, byte [esp + 0x1a]
mov byte [edx + 0x16], al
mov eax, ebp
neg eax
lea esi, [edx + eax]
add esi, 0x17
sub edx, ebp
add edx, 0x71
mov dword [esp + 0x80], edx
xor eax, eax
mov dword [esp], 0
mov dword [esp + 0x20], 0xc0d0a0b
mov word [esp + 0x24], 0
mov byte [esp + 0x26], 0
nop
mov ecx, eax
add cl, 0x42
xor cl, byte [esp + eax + 0x20]
add cl, 0xb6
mov byte [esp + eax + 0x20], cl
inc eax
cmp eax, 7
jne 0x4418d0
mov eax, dword [esp + 0x20]
mov ecx, dword [0x44e478]
test ecx, ecx
je 0x44193f
xor edx, edx
mov edi, dword [0x44e47c]
nop
nop
nop
nop
cmp dword [edi + edx*8], 0x3e416e49
je 0x441910
inc edx
cmp ecx, edx
jne 0x441900
jmp 0x44193f
mov ecx, dword [edi + edx*8 + 4]
cmp ecx, eax
je 0x44193f
lea eax, [esp + 0x80]
mov edx, esp
push 0x40
push 0x3000
push eax
push 0
push edx
push 0xffffffffffffffff
push 6
push dword [0x44e480]
push ecx
call fcn.0043fae0
add esp, 0x24
test eax, eax
js 0x441b40
mov dword [esp + 0x20], 0x5dcb6055
mov dword [esp + 0x24], 0xeb7f625f
mov dword [esp + 0x28], 0xf7daa467
mov dword [esp + 0x2c], 0xcbcacdcc
mov dword [esp + 0x30], 0xb1065660
mov dword [esp + 0x34], 0x5adaf15b
mov dword [esp + 0x38], 0xc3801afe
mov dword [esp + 0x3c], 0xdbdadd93
mov dword [esp + 0x40], 0xc5eec741
mov dword [esp + 0x44], 0x69d2d5d4
mov dword [esp + 0x48], 0xfebcf844
mov dword [esp + 0x4c], 0x8846f1b3
mov dword [esp + 0x50], 0x3ff88c8a
mov dword [esp + 0x54], 0x5f66b224
mov dword [esp + 0x58], 0x4e665723
mov dword [esp + 0x5c], 0x113996fc
mov dword [esp + 0x60], 0x6bed699b
mov dword [esp + 0x64], 0x334d2948
mov dword [esp + 0x68], 0x4b973130
mov dword [esp + 0x6c], 0xd5935570
mov dword [esp + 0x70], 0xc65ec969
mov dword [esp + 0x74], 0x77016532
lea edx, [esp + 0x78]
mov word [esp + 0x78], 0x17c
mov byte [esp + 0x7c], 0
mov word [esp + 0x7a], 0
mov eax, 9
mov ecx, 0xd6
nop
nop
nop
nop
nop
nop
nop
nop
mov edi, eax
and edi, 0x1e
mov ebx, ecx
and ebx, 0xe1
or ebx, edi
xor bl, byte [esp + ecx - 0xb6]
xor bl, 0x1e
add bl, 0xd2
mov byte [esp + ecx - 0xb6], bl
dec eax
inc ecx
cmp ecx, 0x133
jne 0x441a20
mov eax, dword [esp]
lea ebx, [esp + 0x20]
mov ecx, 0x16
mov edi, eax
xchg esi, ebx
rep movsd dword es:[edi], dword [esi]
xchg esi, ebx
lea edi, [eax + 0x58]
xor ebx, ebx
xor ecx, ecx
xchg esi, edx
rep movsw word es:[edi], word [esi]
xchg esi, edx
movzx ecx, byte [esp + 0x78]
mov byte [eax + 0x58], cl
mov ebp, dword [esp]
lea edi, [ebp + 0x59]
mov eax, esi
mov ecx, esi
shr ecx, 2
lea edx, [esp + 0x94]
xchg esi, edx
rep movsd dword es:[edi], dword [esi]
xchg esi, edx
mov ecx, esi
and ecx, 0xfffffffc
lea esi, [ecx + ebp]
add esi, 0x59
lea edx, [esp + ecx]
add edx, 0x94
mov ecx, eax
shr ecx, 1
and ecx, 1
mov ebp, edx
mov edi, esi
xchg esi, ebp
rep movsw word es:[edi], word [esi]
xchg esi, ebp
test al, 1
je 0x441ac5
and eax, 2
movzx ecx, byte [edx + eax]
mov byte [esi + eax], cl
mov eax, dword [esp]
lea ecx, [eax + 0x59]
push dword [esp + 0x2b0]
push ecx
call eax
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], 0xc0d0a0b
mov word [esp + 0x24], 0
mov byte [esp + 0x26], 0
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, ebx
add cl, 0x42
xor cl, byte [esp + ebx + 0x20]
add cl, 0xb6
mov byte [esp + ebx + 0x20], cl
inc ebx
cmp ebx, 7
jne 0x441b00
mov ecx, dword [0x44e478]
test ecx, ecx
je 0x441b77
mov esi, dword [esp + 0x20]
xor edi, edi
mov ebx, dword [0x44e47c]
nop
nop
nop
nop
cmp dword [ebx + edi*8], 0x16194952
je 0x441b47
inc edi
cmp ecx, edi
jne 0x441b30
jmp 0x441b77
mov edx, eax
sar edx, 0x1f
jmp 0x441b77
mov ecx, dword [ebx + edi*8 + 4]
cmp ecx, esi
je 0x441b77
lea esi, [esp + 0x1c]
mov edi, esp
push 0x8000
push esi
push edi
push 0xffffffffffffffff
push 4
push dword [0x44e480]
push ecx
mov esi, eax
mov edi, edx
call fcn.0043fae0
mov edx, edi
mov eax, esi
add esp, 0x1c
add esp, 0x294
pop esi
pop edi
pop ebx
pop ebp
ret 0x10