Function at 0x4410a0
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x298
mov edx, dword [esp + 0x2b8]
mov dword [esp + 0x7f], 0xe48040
mov dword [esp + 0x7c], 0x4010ec83
mov dword [esp + 0x78], 0x48e78948
mov dword [esp + 0x74], 0xce8948fc
lea edi, [esp + 0x98]
lea eax, [esp + 0x74]
mov ecx, 3
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
lea edi, [esp + 0xa4]
lea eax, [esp + 0x80]
mov ecx, 1
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
movzx eax, byte [esp + 0x82]
mov byte [esp + 0xa6], al
mov ebp, edx
cmp edx, 4
jb 0x441118
mov ebp, 4
lea esi, [esp + 0xa7]
test edx, edx
je 0x441554
xor edx, edx
mov dword [esp], ebp
jmp 0x441143
mov eax, edx
and eax, 1
xor edx, 1
lea edx, [edx + eax*2]
cmp edx, ebp
jae 0x44134b
cmp edx, 3
ja case.default.0x441148
jmp dword [edx*4 + 0x446af0]
mov dword [esp + 8], 0x3324ba78
mov ecx, 0x21962db4
mov edi, 0x4b
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ebx, byte [esp + ecx - 0x21962dac]
lea eax, [ebx + ebx]
not eax
add eax, ebx
and eax, ecx
and ebx, edi
or ebx, eax
mov eax, ebx
and eax, 0x7b
and ebx, 0x84
xor ebx, 0x85
sub eax, ebx
inc al
mov byte [esp + ecx - 0x21962dac], al
inc ecx
dec edi
cmp ecx, 0x21962db8
jne 0x441170
lea ebx, [esp + 8]
mov eax, ebx
xor ecx, ecx
mov edi, esi
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
mov eax, ebx
mov ecx, 1
mov edi, esi
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
movzx eax, byte [esp + 0xa]
mov byte [esi + 2], al
add esi, 3
jmp case.default.0x441148
mov dword [esp + 8], 0x1c882c0
mov byte [esp + 0xc], 0xf0
lea eax, [esp + 0xc]
mov dword [eax + 4], 0
mov dword [eax + 1], 0
xor ecx, ecx
xor edi, edi
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ebp, byte [esp + edi + 8]
mov eax, ecx
and eax, 0x1a
mov ebx, edi
xor ebx, 0x15e1167d
add ebx, eax
lea eax, [ebp*2]
not eax
add eax, ebp
and eax, 0xec18fc1e
and ebp, 0xffffffe1
or ebp, eax
xor ebx, 0xec18fc1e
mov eax, ebp
and eax, ebx
add ebx, ebp
add eax, eax
sub ebx, eax
add bl, 0x8f
mov byte [esp + edi + 8], bl
inc edi
add ecx, 2
cmp edi, 0xc
jne 0x441210
lea eax, [esp + 8]
mov edi, esi
mov ecx, 1
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
add esi, 4
lea eax, [esp + 0xc]
xor ecx, ecx
mov edi, esi
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
mov ebp, dword [esp]
jmp case.default.0x441148
mov dword [esp + 8], 0x9d092d0
mov byte [esp + 0xc], 0x20
mov dword [esp + 0xd], 0
xor ecx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, ecx
add al, 0xf9
xor al, byte [esp + ecx + 8]
add al, 0x23
mov byte [esp + ecx + 8], al
inc ecx
cmp ecx, 9
jne 0x4412a0
lea eax, [esp + 8]
mov edi, esi
mov ecx, 1
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
add esi, 4
lea eax, [esp + 0xc]
xor ecx, ecx
mov edi, esi
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
jmp case.default.0x441148
mov dword [esp + 8], 0x2f5cae60
mov byte [esp + 0xc], 0x34
mov dword [esp + 0xd], 0
mov ecx, 0x4363adb6
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx eax, byte [esp + ecx - 0x4363adae]
mov ebx, eax
and ebx, ecx
add bl, bl
sub al, bl
movzx eax, al
add eax, ecx
add al, 0x72
mov byte [esp + ecx - 0x4363adae], al
inc ecx
cmp ecx, 0x4363adbf
jne 0x441300
lea eax, [esp + 8]
mov ecx, 1
mov edi, esi
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
add esi, 4
lea eax, [esp + 0xc]
xor ecx, ecx
mov edi, esi
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
jmp case.default.0x441148
mov ebx, dword [esp + 0x2b8]
cmp ebx, 3
jbe 0x441554
test bl, 1
je 0x441383
mov eax, 0x447025
mov edx, 0x447025
xor ecx, ecx
mov edi, esi
xchg esi, edx
rep movsd dword es:[edi], dword [esi]
xchg esi, edx
mov ecx, 1
mov edi, esi
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
add esi, 2
mov eax, ebx
and eax, 8
mov ecx, ebx
or ecx, 8
imul ecx, eax
xor eax, 8
mov edx, ebx
and edx, 0xfffffff7
imul edx, eax
add ecx, edx
mov eax, 0xffffffff
mov edi, 0xffffffff
cmp ecx, 0x7ffffffe
ja 0x441a75
dec ebx
cmp ebx, 4
jb 0x441554
lea ebp, [esp + 0x10]
jmp 0x4413e3
mov ebx, dword [esp]
mov eax, ebx
not eax
lea ebx, [eax + ebx*2]
cmp ebx, 3
jbe 0x441554
mov eax, ebx
and eax, 8
mov edx, ebx
or edx, 8
imul edx, eax
xor eax, 8
mov ecx, ebx
and ecx, 0xfffffff7
imul ecx, eax
add edx, ecx
mov dword [esp + 0x68], edx
cmp edx, 0x7e
mov dword [esp], ebx
ja 0x4414d0
mov dword [esp + 8], 0x173c7ec0
mov word [esp + 0xc], 0xf544
mov byte [ebp + 2], 0
mov dword [ebp - 2], 0
mov edi, 0x4ca3707e
mov ebp, 0xb35c8f81
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ebx, byte [esp + edi - 0x4ca37076]
mov edx, edi
and edx, ebx
add edx, edx
sub edx, ebx
add edx, ebp
and edx, edi
mov eax, edx
or al, 0xfd
inc al
mov ecx, edx
and cl, 0xfd
mul cl
mov ecx, eax
add cl, bl
mov eax, edx
shr al, 1
and al, 1
or dl, 2
mul dl
add al, al
sub cl, al
movzx eax, cl
add eax, edi
add al, 0x8a
mov byte [esp + edi - 0x4ca37076], al
inc edi
dec ebp
cmp edi, 0x4ca37089
jne 0x441440
lea eax, [esp + 8]
mov edi, esi
mov ecx, 1
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
lea edi, [esi + 4]
lea eax, [esp + 0xc]
xor ecx, ecx
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
movzx eax, byte [esp + 0xc]
mov byte [esi + 4], al
mov eax, dword [esp + 0x68]
mov byte [esi + 3], al
add esi, 5
lea ebp, [esp + 0x10]
jmp 0x4413d0
mov dword [esp + 8], 0xc9b0bef4
mov dword [esp + 0xc], 0xf5464748
mov byte [esp + 0x10], 0x44
mov dword [esp + 0x11], 0
mov eax, 0x1548c873
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ecx, byte [esp + eax - 0x1548c86b]
mov edx, ecx
and edx, eax
add dl, dl
sub cl, dl
movzx ecx, cl
add ecx, eax
add cl, 0xc1
mov byte [esp + eax - 0x1548c86b], cl
inc eax
cmp eax, 0x1548c880
jne 0x441500
lea eax, [esp + 8]
mov edi, esi
mov ecx, 2
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
lea eax, [esi + 8]
mov edx, ebp
xor ecx, ecx
mov edi, eax
xchg esi, edx
rep movsw word es:[edi], word [esi]
xchg esi, edx
mov ecx, dword [esp + 0x68]
mov dword [esi + 3], ecx
mov esi, eax
jmp 0x4413d0
mov edx, dword [esp + 0x2b0]
mov ebp, dword [esp + 0x2ac]
mov dword [esp + 8], 0x83fe6258
lea ebx, [esp + 0xc]
mov byte [esp + 0xc], 0xe4
mov word [esp + 0xd], 0
mov byte [esp + 0xf], 0
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, eax
add cl, 0x58
xor cl, byte [esp + eax + 8]
add cl, 0x48
mov byte [esp + eax + 8], cl
inc eax
cmp eax, 8
jne 0x441590
lea eax, [esp + 8]
mov edi, esi
mov ecx, 1
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
lea eax, [esi + 4]
mov edi, eax
xor ecx, ecx
xchg esi, ebx
rep movsw word es:[edi], word [esi]
xchg esi, ebx
mov dword [esp + 0x93], 0xc3fc8948
mov dword [esp + 0x90], 0x48d2ff41
mov dword [esp + 0x84], 0xba49c031
mov dword [esp + 0x88], ebp
mov dword [esp + 0x8c], edx
lea edx, [esp + 0x84]
mov ecx, 4
mov edi, eax
xchg esi, edx
rep movsd dword es:[edi], dword [esi]
xchg esi, edx
lea edi, [esi + 0x14]
lea eax, [esp + 0x94]
mov ecx, 1
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
movzx eax, byte [esp + 0x96]
mov byte [esi + 0x16], al
lea ecx, [esp + 0x98]
mov eax, ecx
neg eax
lea edi, [esi + eax]
add edi, 0x17
sub esi, ecx
add esi, 0x71
mov dword [esp + 0x70], esi
xor eax, eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x54554a4b
mov byte [esp + 0xc], 0
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [esp + eax + 8]
lea ecx, [edx + edx]
not ecx
add ecx, edx
lea esi, [eax + 0x65177c0e]
or esi, edx
not edx
and ecx, edx
mov edx, 0x9ae883f1
sub edx, eax
or edx, ecx
xor esi, edx
mov ecx, 0x68a93b8
sub ecx, esi
mov edx, ecx
and edx, 1
xor ecx, 1
lea ecx, [ecx + edx*2]
mov byte [esp + eax + 8], cl
mov ecx, eax
and ecx, 1
xor eax, 1
lea eax, [eax + ecx*2]
cmp eax, 5
jb 0x441660
mov eax, dword [esp + 8]
mov ecx, dword [0x44f6fc]
test ecx, ecx
je 0x4416fe
xor edx, edx
mov esi, dword [0x44f700]
nop
cmp dword [esi + edx*8], 0x3e416e49
je 0x4416d0
inc edx
cmp ecx, edx
jne 0x4416c0
jmp 0x4416fe
mov ecx, dword [esi + edx*8 + 4]
cmp ecx, eax
je 0x4416fe
lea eax, [esp + 0x70]
lea edx, [esp + 4]
push 0x40
push 0x3000
push eax
push 0
push edx
push 0xffffffffffffffff
push 6
push dword [0x44f704]
push ecx
call fcn.0043f170
add esp, 0x24
test eax, eax
js 0x441a40
mov dword [esp], edi
mov dword [esp + 8], 0xd54718d5
mov dword [esp + 0xc], 0x9ff31ed3
mov dword [esp + 0x10], 0x43a6e423
mov dword [esp + 0x14], 0x5f5e5d5c
mov dword [esp + 0x18], 0x8912d2f8
mov dword [esp + 0x1c], 0x2eae49d7
mov dword [esp + 0x20], 0x4f880e6a
mov dword [esp + 0x24], 0x4f4e4d9f
mov dword [esp + 0x28], 0xbd5a4339
mov dword [esp + 0x2c], 0xe1464544
mov dword [esp + 0x30], 0xa441044
mov dword [esp + 0x34], 0x90ca79bf
mov dword [esp + 0x38], 0xcb709c9e
mov dword [esp + 0x3c], 0xd3fa4e34
mov dword [esp + 0x40], 0xfa92f327
mov dword [esp + 0x44], 0x19219a6c
mov dword [esp + 0x48], 0xe765918f
mov dword [esp + 0x4c], 0x27c521c0
mov dword [esp + 0x50], 0xd7631918
mov dword [esp + 0x54], 0x5d67a5f8
mov dword [esp + 0x58], 0x52aa51f1
mov dword [esp + 0x5c], 0xcb19f50e
lea edx, [esp + 0x60]
mov word [esp + 0x60], 0x9ec
mov dword [esp + 0x62], 0
mov eax, 0x7244818
mov ecx, 0xe7
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx esi, byte [esp + eax - 0x7244810]
mov edi, eax
and edi, 0x33
mov ebx, ecx
and ebx, 0xcc
or ebx, edi
xor ebx, eax
xor ebx, 0x33
and ebx, esi
xor ebx, eax
mov esi, ebx
and esi, 0x85
mov ebp, ebx
and ebp, 2
mov edi, ebp
xor edi, 2
imul edi, esi
or esi, 2
imul esi, ebp
xor ebx, 0x87
add ebx, edi
add ebx, esi
inc bl
mov byte [esp + eax - 0x7244810], bl
inc eax
dec ecx
cmp eax, 0x7244876
jne 0x4417e0
mov eax, dword [esp + 4]
lea esi, [esp + 8]
mov edi, eax
mov ecx, 0x16
xchg esi, esi
rep movsd dword es:[edi], dword [esi]
xchg esi, esi
lea edi, [eax + 0x58]
xor ebx, ebx
xor ecx, ecx
xchg esi, edx
rep movsw word es:[edi], word [esi]
xchg esi, edx
movzx ecx, byte [esp + 0x60]
mov byte [eax + 0x58], cl
mov eax, dword [esp + 4]
mov dword [esp + 8], 0x33323169
mov byte [esp + 0xc], 0
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, ebx
add cl, 0xb4
xor cl, byte [esp + ebx + 8]
add cl, 0x7c
mov byte [esp + ebx + 8], cl
inc ebx
cmp ebx, 5
jne 0x441880
add eax, dword [esp + 8]
mov esi, dword [esp]
mov ecx, esi
shr ecx, 2
lea edx, [esp + 0x98]
mov edi, eax
xchg esi, edx
rep movsd dword es:[edi], dword [esi]
xchg esi, edx
mov ecx, esi
and ecx, 0xfffffffc
add eax, ecx
lea edx, [esp + ecx]
add edx, 0x98
mov ecx, esi
and ecx, 3
mov esi, ecx
not esi
or esi, 1
add esi, ecx
shr ecx, 1
mov ebx, edx
mov edi, eax
xchg esi, ebx
rep movsw word es:[edi], word [esi]
xchg esi, ebx
mov ebp, esi
inc ebp
je 0x44196d
mov ecx, dword [esp]
and ecx, 2
add edx, ecx
add eax, ecx
mov ebx, ebp
and ebx, 7
je 0x441912
xor edi, edi
nop
nop
nop
nop
nop
nop
nop
nop
movzx ecx, byte [edx + edi]
mov byte [eax + edi], cl
inc edi
cmp ebx, edi
jne 0x441900
add edx, edi
add eax, edi
sub ebp, edi
cmp esi, 7
jb 0x44196d
xor esi, esi
nop
nop
nop
nop
nop
nop
nop
movzx ecx, byte [edx + esi]
mov byte [eax + esi], cl
movzx ecx, byte [edx + esi + 1]
mov byte [eax + esi + 1], cl
movzx ecx, byte [edx + esi + 2]
mov byte [eax + esi + 2], cl
movzx ecx, byte [edx + esi + 3]
mov byte [eax + esi + 3], cl
movzx ecx, byte [edx + esi + 4]
mov byte [eax + esi + 4], cl
movzx ecx, byte [edx + esi + 5]
mov byte [eax + esi + 5], cl
movzx ecx, byte [edx + esi + 6]
mov byte [eax + esi + 6], cl
movzx ecx, byte [edx + esi + 7]
mov byte [eax + esi + 7], cl
add esi, 8
cmp ebp, esi
jne 0x441920
mov eax, dword [esp + 4]
mov dword [esp + 8], 0x898a8b2b
mov word [esp + 0xc], 0
mov byte [esp + 0xe], 0
xor ecx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, ecx
add dl, 0xe3
xor dl, byte [esp + ecx + 8]
add dl, 0x91
mov byte [esp + ecx + 8], dl
inc ecx
cmp ecx, 7
jne 0x441990
mov ecx, dword [esp + 8]
add ecx, eax
push dword [esp + 0x2b4]
push ecx
call eax
mov edi, edx
mov dword [esp + 0x6c], 0
mov dword [esp + 8], 0x54554a4b
mov byte [esp + 0xc], 0
xor ecx, ecx
nop
movzx esi, byte [esp + ecx + 8]
lea edx, [esi + esi]
not edx
add edx, esi
lea ebx, [ecx + 0x65177c0e]
or ebx, esi
not esi
and edx, esi
mov esi, 0x9ae883f1
sub esi, ecx
or esi, edx
xor ebx, esi
mov edx, 0x68a93b8
sub edx, ebx
mov esi, edx
and esi, 1
xor edx, 1
lea edx, [edx + esi*2]
mov byte [esp + ecx + 8], dl
mov edx, ecx
and edx, 1
xor ecx, 1
lea ecx, [ecx + edx*2]
cmp ecx, 5
jb 0x4419d0
mov ecx, dword [0x44f6fc]
test ecx, ecx
je 0x441a75
mov edx, dword [esp + 8]
xor esi, esi
mov ebx, dword [0x44f700]
nop
cmp dword [ebx + esi*8], 0x16194952
je 0x441a47
inc esi
cmp ecx, esi
jne 0x441a30
jmp 0x441a75
mov edi, eax
sar edi, 0x1f
jmp 0x441a75
mov ecx, dword [ebx + esi*8 + 4]
cmp ecx, edx
je 0x441a75
lea edx, [esp + 0x6c]
lea esi, [esp + 4]
push 0x8000
push edx
push esi
push 0xffffffffffffffff
push 4
push dword [0x44f704]
push ecx
mov esi, eax
call fcn.0043f170
mov eax, esi
add esp, 0x1c
mov edx, edi
add esp, 0x298
pop esi
pop edi
pop ebx
pop ebp
ret 0x10