Function at 0x424b10
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x84
mov eax, dword [esp + 0xa0]
mov ebx, dword [esp + 0x9c]
mov ecx, dword [eax + 4]
mov eax, 0xfffffffe
cmp word [ecx + eax + 2], 0
lea eax, [eax + 2]
jne 0x424b30
mov ecx, 0xfffffffe
cmp word [ebx + ecx + 2], 0
lea ecx, [ecx + 2]
jne 0x424b40
sar eax, 1
sar ecx, 1
lea edx, [eax + ecx]
add edx, 0x3f
test edx, edx
jns 0x424b60
mov eax, 0xffffffff
jmp 0x424b69
add eax, ecx
lea eax, [eax*2 + 0x7e]
push eax
call fcn.0040c8d0
add esp, 4
mov esi, eax
mov dword [esp + 0x44], 0x99619b7e
mov dword [esp + 0x48], 0xa54da765
mov dword [esp + 0x4c], 0xa16fa35a
mov dword [esp + 0x50], 0xad5caf51
mov dword [esp + 0x54], 0xa941ab50
mov dword [esp + 0x58], 0xb54ab750
mov dword [esp + 0x5c], 0xb15eb363
mov dword [esp + 0x60], 0xbd82bf73
mov dword [esp + 0x64], 0xb97dbb82
mov dword [esp + 0x68], 0x45814784
mov dword [esp + 0x6c], 0x417b437e
mov dword [esp + 0x70], 0x4d894f7e
mov dword [esp + 0x74], 0x49ae4b77
mov dword [esp + 0x78], 0x55ba57bf
mov dword [esp + 0x7c], 0x515253ba
mov word [esp + 0x80], 0
mov eax, 0x1474fc5c
mov ebp, 0xeb8b03a4
movzx edi, byte [esp + eax - 0x1474fc18]
mov ecx, ebp
and ecx, 7
mov edx, ebp
or edx, 0x52c22f8
add edx, eax
or edx, ecx
and edx, 0x157cfeff
xor edx, edi
xor edx, 0x1050dc07
add edx, 0x99b71238
mov ecx, edx
xor ecx, 0x70
and edx, 0xf
add edx, edx
sub edx, ecx
add dl, 0x71
mov byte [esp + eax - 0x1474fc18], dl
inc eax
dec ebp
cmp eax, 0x1474fc9a
jne 0x424c00
mov dword [esp], 0xc947cb68
mov dword [esp + 4], 0xc557c744
mov dword [esp + 8], 0xc15dc34a
mov dword [esp + 0xc], 0xbd25bf59
mov dword [esp + 0x10], 0xb926bb18
mov dword [esp + 0x14], 0xb52cb723
mov dword [esp + 0x18], 0xb139b32b
mov dword [esp + 0x1c], 0xad22af24
mov dword [esp + 0x20], 0xa939ab08
mov dword [esp + 0x24], 0xa520a739
mov dword [esp + 0x28], 0xa139a377
mov dword [esp + 0x2c], 0x9d129f28
mov dword [esp + 0x30], 0x99089b07
mov dword [esp + 0x34], 0x95019715
mov dword [esp + 0x38], 0x91009305
mov dword [esp + 0x3c], 0x8d5b8f45
mov dword [esp + 0x40], 0x898a8b59
mov eax, 0x2762633
nop
nop
nop
nop
nop
nop
nop
nop
movzx ecx, byte [esp + eax - 0x2762633]
mov edx, ecx
not edx
mov edi, eax
or edi, edx
sub edx, edi
mov edi, eax
and edi, ecx
xor ecx, eax
add edi, edx
lea edx, [ecx + edi*2]
and ecx, 1
xor edx, 1
lea ecx, [edx + ecx*2]
mov byte [esp + eax - 0x2762633], cl
inc eax
cmp eax, 0x2762677
jne 0x424ce0
mov edi, dword [esp + 0xa0]
mov ecx, dword [edi + 4]
movzx edx, word [ecx]
mov eax, esi
test dx, dx
je 0x424d41
add ecx, 2
mov eax, esi
nop
nop
mov word [eax], dx
add eax, 2
movzx edx, word [ecx]
add ecx, 2
test dx, dx
jne 0x424d30
mov word [eax], 0
movzx ecx, word [esp]
test cx, cx
je 0x424d71
lea edx, [esp + 2]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x424d60
mov word [eax], 0
movzx ecx, word [ebx]
test cx, cx
je 0x424da1
add ebx, 2
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [ebx]
add ebx, 2
test cx, cx
jne 0x424d90
mov word [eax], 0
movzx ecx, word [esp + 0x44]
test cx, cx
je 0x424dd1
lea edx, [esp + 0x46]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x424dc0
mov word [eax], 0
mov eax, dword [esp + 0xa4]
mov ebx, dword [eax]
mov eax, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp word [ebx + eax + 2], 0
lea eax, [eax + 2]
jne 0x424df0
mov edx, dword [edi]
mov ecx, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp word [edx + ecx + 2], 0
lea ecx, [ecx + 2]
jne 0x424e10
mov edi, dword [edi + 8]
mov edx, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp word [edi + edx + 2], 0
lea edx, [edx + 2]
jne 0x424e30
sar eax, 1
sar ecx, 1
sar edx, 1
add ecx, eax
lea eax, [edx + ecx]
add eax, 0xb
test eax, eax
jns 0x424e54
mov eax, 0xffffffff
jmp 0x424e5d
add ecx, edx
lea eax, [ecx*2 + 0x16]
push eax
call fcn.0040c8d0
add esp, 4
mov edi, eax
mov dword [esp], 0x73d371af
mov dword [esp + 4], 0x7fca7dc8
mov dword [esp + 8], 0x7bc679d5
mov dword [esp + 0xc], 0x47b145f7
mov dword [esp + 0x10], 0x4140
mov byte [esp + 0x14], 0
mov eax, 0x51b9d882
mov ecx, 0xa373b104
nop
nop
mov ebp, ecx
and ebp, 0x28
mov edx, eax
xor edx, 0x14
add edx, ebp
add dl, 0x7e
xor dl, byte [esp + eax - 0x51b9d882]
add dl, 0x9c
mov byte [esp + eax - 0x51b9d882], dl
inc eax
add ecx, 2
cmp eax, 0x51b9d897
jne 0x424ea0
movzx ecx, word [esp]
mov eax, edi
test cx, cx
je 0x424ef1
lea edx, [esp + 2]
mov eax, edi
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x424ee0
mov word [eax], 0
movzx ecx, word [ebx]
test cx, cx
mov ebp, dword [esp + 0xa0]
je 0x424f21
add ebx, 2
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [ebx]
add ebx, 2
test cx, cx
jne 0x424f10
mov word [eax], 0x5f
add eax, 2
mov ecx, dword [ebp]
movzx edx, word [ecx]
test dx, dx
je 0x424f51
add ecx, 2
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], dx
add eax, 2
movzx edx, word [ecx]
add ecx, 2
test dx, dx
jne 0x424f40
mov word [eax], 0x5f
add eax, 2
mov ecx, dword [ebp + 8]
movzx edx, word [ecx]
test dx, dx
je 0x424f81
add ecx, 2
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], dx
add eax, 2
movzx edx, word [ecx]
add ecx, 2
test dx, dx
jne 0x424f70
mov word [eax], 0
mov dword [esp], 0x494a4b1a
mov byte [esp + 4], 0
mov eax, 0x5aa781f3
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ecx, byte [esp + eax - 0x5aa781f3]
lea edx, [eax - 0x5aa78100]
and edx, ecx
add ecx, eax
add edx, edx
mov ebx, ecx
sub ebx, edx
and ecx, 1
xor ebx, 1
lea ecx, [ebx + ecx*2]
add cl, 0x40
mov byte [esp + eax - 0x5aa781f3], cl
inc eax
cmp eax, 0x5aa781f8
jne 0x424fa0
mov eax, esp
push 0
push 1
push 0
push eax
push esi
push edi
push dword [esp + 0xb0]
call fcn.00425270
add esp, 0x1c
mov ebx, eax
jmp dword [0x44b870]