Function at 0x43c370
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x2c
mov eax, dword [esp + 0x40]
movzx eax, word [eax]
mov dword [esp], 0x919e3523
mov word [esp + 4], 0
mov byte [esp + 6], 0
mov ecx, 0x65
mov edx, 0x9a
nop
nop
nop
nop
nop
movzx esi, byte [esp + ecx - 0x65]
mov ebx, edx
xor ebx, ecx
and ebx, esi
xor ebx, ecx
add bl, 7
mov byte [esp + ecx - 0x65], bl
inc ecx
dec edx
cmp ecx, 0x6c
jne case.default.0x43c3c5
xor ecx, ecx
cmp dword [esp], eax
setne cl
xor eax, eax
jmp dword [ecx*4 + 0x44803c]
mov eax, dword [esp + 0x40]
mov edx, dword [eax + 0x3c]
mov eax, dword [eax + edx]
mov dword [esp], 0x7776a4a8
mov word [esp + 4], 0
mov byte [esp + 6], 0
xor ecx, ecx
xor esi, esi
nop
nop
nop
mov edi, esi
xor edi, 0xea
mov ebx, ecx
and ebx, 0xa
sub ebx, edi
xor bl, byte [esp + esi]
add bl, 0x92
mov byte [esp + esi], bl
inc esi
add ecx, 2
cmp esi, 7
jne case.default.0x43c41b
xor ecx, ecx
cmp eax, dword [esp]
setne cl
xor eax, eax
jmp dword [ecx*4 + 0x448044]
mov ecx, dword [esp + 0x40]
mov edi, dword [ecx + edx + 0x78]
mov esi, dword [ecx + edx + 0x7c]
test esi, esi
sete cl
test edi, edi
sete dl
or dl, cl
movzx ecx, dl
mov dword [esp + 0x20], edi
jmp dword [ecx*4 + 0x44804c]
mov dword [esp + 0x14], esi
mov eax, dword [esp + 0x40]
mov ecx, dword [eax + edi + 0x20]
add ecx, eax
mov dword [esp + 0x28], ecx
mov ecx, dword [eax + edi + 0x24]
add ecx, eax
mov dword [esp + 0x1c], ecx
mov ecx, dword [eax + edi + 0x1c]
add ecx, eax
mov dword [esp + 0x18], ecx
mov edx, dword [eax + edi + 0x18]
xor ecx, ecx
xor eax, eax
cmp ecx, edx
setb al
mov dword [esp + 0x24], edx
jmp dword [eax*4 + 0x448054]
mov eax, dword [esp + 0x28]
mov dword [esp + 0x10], ecx
mov ecx, dword [eax + ecx*4]
add ecx, dword [esp + 0x40]
mov eax, 0xffffffff
xor esi, esi
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, esi
cmp byte [ecx + eax + 1], 0
lea eax, [eax + 1]
lea esi, [esi + 1]
jne 0x43c4b0
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov dword [esp], 0x727270e3
lea ecx, [esp + 4]
mov byte [ecx + 2], 0
mov word [ecx], 0
mov esi, 0xeb
mov ebp, esp
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edi, byte [ebp]
lea ebx, [esi - 0x2f57ef00]
or ebx, edi
and edi, esi
not ebx
or ebx, edi
mov edi, ebx
and edi, 0x99
mov ecx, ebx
and ecx, 2
mov edx, ecx
xor edx, 2
imul edx, edi
or edi, 2
imul edi, ecx
xor ebx, 0x9b
add ebx, edx
add ebx, edi
inc bl
mov byte [ebp], bl
dec esi
inc ebp
cmp esi, 0xe4
jne 0x43c4f0
test eax, eax
je 0x43c550
mov ebp, dword [esp]
cmp eax, 4
jae 0x43c560
mov esi, 0x36c0b43e
mov ebx, dword [esp + 0xc]
jmp 0x43c59b
mov edi, 0x36c0b43e
jmp 0x43c5c0
mov edi, dword [esp + 8]
and edi, 0xfffffffc
mov esi, 0x36c0b43e
mov ebx, dword [esp + 0xc]
movsx ecx, byte [ebx]
xor ecx, esi
imul ecx, ebp
movsx edx, byte [ebx + 1]
xor edx, ecx
imul edx, ebp
movsx ecx, byte [ebx + 2]
xor ecx, edx
imul ecx, ebp
movsx esi, byte [ebx + 3]
add ebx, 4
xor esi, ecx
imul esi, ebp
add edi, 0xfffffffc
jne 0x43c570
mov ecx, dword [esp + 8]
mov edi, esi
test al, 3
je 0x43c5c0
and ecx, 3
xor eax, eax
nop
nop
nop
nop
nop
nop
movsx edi, byte [ebx + eax]
xor edi, esi
imul edi, ebp
inc eax
mov esi, edi
cmp ecx, eax
jne 0x43c5b0
xor eax, eax
cmp edi, dword [esp + 0x44]
setne al
jmp dword [eax*4 + 0x44806c]
mov ecx, dword [esp + 0x10]
inc ecx
xor eax, eax
mov edx, dword [esp + 0x24]
cmp ecx, edx
setb al
jmp dword [eax*4 + 0x448054]
mov ecx, 1
jmp dword [0x448064]
jmp dword [ecx*4 + 0x448084]
xor eax, eax
add esp, 0x2c
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x10]
movzx eax, word [eax + ecx*2]
mov ecx, dword [esp + 0x18]
mov eax, dword [ecx + eax*4]
xor edx, edx
mov esi, dword [esp + 0x20]
mov ecx, esi
sub ecx, eax
setbe dl
jmp dword [edx*4 + 0x448074]
not esi
add esi, eax
mov edx, esi
and edx, 1
and ecx, 1
and esi, 0xfffffffe
or esi, ecx
lea ecx, [esi + edx*2]
xor edx, edx
cmp ecx, dword [esp + 0x14]
setb dl
mov ecx, 1
jmp dword [edx*4 + 0x44807c]
mov edx, dword [esp + 0x40]
add edx, eax
xor ecx, ecx
mov eax, edx
jmp dword [ecx*4 + 0x448084]
mov eax, dword [esp + 0x34]
mov ecx, dword [eax + 0x3c]
mov eax, dword [eax + ecx]
mov dword [esp], 0x7372bca0
mov byte [esp + 4], 0
xor edx, edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx esi, byte [esp + edx]
lea edi, [edx + 0x34194814]
and edi, esi
lea ebx, [edx + esi]
add ebx, 0x34194814
add edi, edi
sub ebx, edi
add bl, 0x9c
mov byte [esp + edx], bl
mov esi, edx
and esi, 1
and edx, 6
mov edi, edx
xor edi, 6
xor edx, 0xfffffffe
or edx, edi
not edx
add edx, esi
cmp edx, 5
jb case.default.0x43c774
xor edx, edx
cmp eax, dword [esp]
setne dl
xor eax, eax
jmp dword [edx*4 + 0x448094]
mov esi, dword [esp + 0x34]
mov edx, dword [esi + ecx + 0x80]
cmp dword [esi + ecx + 0x84], 0
sete cl
test edx, edx
sete ch
or ch, cl
movzx ecx, ch
jmp dword [ecx*4 + 0x44809c]
mov ecx, dword [esp + 0x34]
mov esi, dword [ecx + edx]
add esi, ecx
mov edx, dword [ecx + edx + 0x10]
add edx, ecx
mov dword [esp + 8], edx
add ecx, 2
mov dword [esp + 0x14], ecx
mov edi, dword [esi]
mov edx, edi
shr edx, 0x1f
jmp dword [edx*4 + 0x4480a4]
mov eax, dword [esp + 8]
mov eax, dword [eax]
xor ecx, ecx
mov dword [esp + 0x10], eax
jmp dword [ecx*4 + 0x4480bc]
mov edi, dword [esi]
mov ecx, edi
shr ecx, 0x1f
xor eax, eax
jmp dword [ecx*4 + 0x4480a4]
xor edx, edx
test edi, edi
setne dl
xor eax, eax
jmp dword [edx*4 + 0x4480ac]
mov dword [esp + 0x1c], esi
add edi, dword [esp + 0x14]
mov ebx, 0xffffffff
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, eax
cmp byte [edi + ebx + 1], 0
lea ebx, [ebx + 1]
lea eax, [eax + 1]
jne 0x43c820
mov dword [esp + 0xc], ecx
mov dword [esp + 0x18], edi
mov dword [esp], 0x727270e3
lea eax, [esp + 4]
mov byte [eax + 2], 0
mov word [eax], 0
mov edx, 0xeb
mov ebp, esp
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx esi, byte [ebp]
lea eax, [edx - 0x2f57ef00]
or eax, esi
and esi, edx
not eax
or eax, esi
mov esi, eax
and esi, 0x99
mov edi, eax
and edi, 2
mov ecx, edi
xor ecx, 2
imul ecx, esi
or esi, 2
imul esi, edi
xor eax, 0x9b
add eax, ecx
add eax, esi
inc al
mov byte [ebp], al
dec edx
inc ebp
cmp edx, 0xe4
jne 0x43c860
mov eax, 0x36c0b43e
test ebx, ebx
mov esi, dword [esp + 0x1c]
mov edi, dword [esp + 0x18]
mov ecx, dword [esp + 0xc]
je 0x43c920
mov ebp, dword [esp]
mov edx, 0x36c0b43e
cmp ebx, 4
jb 0x43c8ff
mov eax, ecx
and eax, 0xfffffffc
nop
nop
nop
nop
movsx ecx, byte [edi]
xor ecx, edx
imul ecx, ebp
movsx edx, byte [edi + 1]
xor edx, ecx
imul edx, ebp
movsx ecx, byte [edi + 2]
xor ecx, edx
imul ecx, ebp
movsx edx, byte [edi + 3]
add edi, 4
xor edx, ecx
imul edx, ebp
add eax, 0xfffffffc
jne 0x43c8d0
mov ecx, dword [esp + 0xc]
mov eax, edx
test bl, 3
je 0x43c920
and ecx, 3
xor ebx, ebx
nop
nop
nop
nop
nop
movsx eax, byte [edi + ebx]
xor eax, edx
imul eax, ebp
inc ebx
mov edx, eax
cmp ecx, ebx
jne 0x43c910
xor ecx, ecx
cmp eax, dword [esp + 0x38]
sete cl
jmp dword [ecx*4 + 0x4480b4]
add esi, 4
add dword [esp + 8], 4
mov ecx, 1
mov eax, dword [esp + 0x10]
jmp dword [ecx*4 + 0x4480bc]
add esp, 0x20
pop esi
pop edi
pop ebx
pop ebp
ret
push eax
push eax
mov eax, esp
sub esp, 8
mov ebx, esp
jmp ecx
movzx ecx, word [edx]
mov dword [ebp - 0x10], ecx
mov dword [eax], 0x33329b85
mov byte [eax + 4], 0
xor edx, edx
nop
nop
nop
mov esi, edx
and esi, 4
mov edi, edx
xor edi, 0xc
lea ecx, [edi + esi*2]
xor cl, byte [eax + edx]
add cl, 0xc4
mov byte [eax + edx], cl
add edx, 0x368419cc
mov ecx, edx
and ecx, 0x15
or edx, 0xc97be635
add edx, ecx
cmp edx, 5
jb case.default.0x43c9ca
mov eax, dword [eax]
xor ecx, ecx
cmp eax, dword [ebp - 0x10]
setne cl
xor eax, eax
jmp dword [ecx*4 + 0x4480f4]
mov esi, dword [ebp + 8]
mov edx, dword [esi + 0x3c]
lea ecx, [esi + edx]
mov edi, dword [esi + edx]
mov dword [ebx], 0xc9ca707c
mov byte [ebx + 4], 0
mov esi, eax
nop
nop
nop
nop
nop
nop
nop
mov edx, eax
add dl, 0xb3
xor dl, byte [ebx + eax]
add dl, 0x81
mov byte [ebx + eax], dl
and esi, 1
not eax
or eax, 1
sub esi, eax
mov eax, esi
cmp esi, 5
jb case.default.0x43ca18
xor edx, edx
cmp edi, dword [ebx]
setne dl
xor eax, eax
jmp dword [edx*4 + 0x4480fc]
jmp dword [0x448110]
mov eax, ecx
xor eax, 0x18
mov edx, ecx
and edx, 0x18
lea eax, [eax + edx*2]
movzx ebx, word [ecx + 0x14]
add ebx, eax
movzx ecx, word [ecx + 6]
xor esi, esi
xor eax, eax
mov word [ebp - 0x12], cx
cmp si, cx
setb al
mov dword [ebp - 0x18], 1
jmp dword [eax*4 + 0x448114]
xor eax, eax
xor ecx, ecx
test eax, 0
sete cl
jmp dword [ecx*4 + 0x44812c]
inc esi
mov ebx, dword [ebp - 0x10]
add ebx, 0x28
xor eax, eax
cmp si, word [ebp - 0x12]
setb al
jmp dword [eax*4 + 0x448114]
mov edx, 8
mov edi, dword [ebp + 0xc]
mov dword [ebp - 0x10], ebx
mov eax, ebx
nop
nop
nop
nop
nop
nop
nop
nop
nop
test edx, edx
je case.0x43c3c5.58
mov ecx, edx
not ecx
lea edx, [ecx + edx*2]
movzx ebx, byte [edi]
inc edi
movzx ecx, byte [eax]
inc eax
cmp bl, cl
je case.default.0x43cabe
xor eax, eax
sub ebx, ecx
sete al
jmp dword [eax*4 + 0x44812c]
xor eax, eax
mov ecx, dword [ebp + 0x10]
test ecx, ecx
setne al
mov edx, dword [ebp + 8]
mov esi, dword [ebp - 0x10]
jmp dword [eax*4 + 0x448134]
add edx, dword [esi + 0xc]
jmp dword [0x44813c]
mov dword [ecx], edx
jmp dword [0x448144]
mov dword [ecx], edx
mov dword [ecx], edx
jmp dword [0x448144]
xor eax, eax
cmp dword [ebp + 0x14], 0
setne al
mov dword [ebp - 0x18], 0
jmp dword [eax*4 + 0x44814c]
mov al, 1
mov ecx, dword [ebp - 0x18]
jmp dword [ecx*4 + 0x448164]
xor eax, eax
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [esi + 0x10]
mov ecx, dword [ebp + 0x14]
mov dword [ecx], eax
xor ecx, ecx
mov al, 1
jmp dword [ecx*4 + 0x448164]
ret
retf 0x43