Function at 0x437870
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0xa0
mov edi, dword [ebp + 8]
mov eax, dword [0x44b060]
mov dword [esp + 0x14], 0x89278b77
mov dword [esp + 0x18], 0x850b870f
mov dword [esp + 0x1c], 0x81398308
mov dword [esp + 0x20], 0x9d429f33
mov dword [esp + 0x24], 0x992d9b12
mov dword [esp + 0x28], 0x952d9712
mov dword [esp + 0x2c], 0x9192936f
mov byte [esp + 0x30], 0
xor ecx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, ecx
add dl, 0x63
xor dl, byte [esp + ecx + 0x14]
add dl, 0x11
mov byte [esp + ecx + 0x14], dl
inc ecx
cmp ecx, 0x1d
jne 0x4378d0
lea ecx, [esp + 0x60]
lea ebx, [esp + 0x8c]
lea esi, [esp + 0x14]
push ecx
push 8
push ebx
push 0xd
push esi
push 0
call eax
test eax, eax
jns 0x43790f
mov dword [esp + 0x8c], 0x3a0043
mov dword [esp + 0x90], 0x5c
mov dword [esp + 0x6c], 0xab5b3a8d
mov dword [esp + 0x68], 0xe5a0208
mov dword [esp + 0x64], 0x960340b8
mov dword [esp + 0x60], 0x1c511391
mov dword [esp + 0x10], 0
lea eax, [esp + 0x10]
push eax
push 0x441678
push 1
push 0
push 0x441688
call dword [0x441db8]
test eax, eax
js 0x437e84
mov dword [esp + 0x14], 0x519f4f9e
mov dword [esp + 0x18], 0x55865381
mov dword [esp + 0x1c], 0x59935788
mov dword [esp + 0x20], 0x5d955b93
mov dword [esp + 0x24], 0x616c5f8a
mov dword [esp + 0x28], 0x6360
mov byte [esp + 0x2c], 0
mov eax, 0x9097180d
mov ecx, 0x6f68e7f1
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx esi, byte [esp + eax + 0x6f68e807]
mov edx, eax
or edx, esi
lea edi, [ecx + 1]
or edi, esi
mov ebx, ecx
sub ebx, edi
lea esi, [eax + edi]
inc esi
and ebx, edx
not edx
and edx, esi
sub ebx, edx
add bl, 0xbf
mov byte [esp + eax + 0x6f68e807], bl
inc eax
dec ecx
cmp eax, 0x90971826
jne 0x4379b0
lea esi, [esp + 0x14]
push esi
call dword [0x441dd0]
mov edi, dword [esp + 0x10]
mov ecx, dword [edi]
lea edx, [esp + 0xc]
push edx
push 0
push 0
push 0
push 0
push 0
push 0
mov dword [esp + 0x90], eax
push eax
push edi
call dword [ecx + 0xc]
test eax, eax
mov edi, dword [ebp + 8]
lea ebx, [esp + 0x8c]
js 0x437e70
push 0
push 0
push 3
push 3
push 0
push 0
push 0xa
push dword [esp + 0x28]
call dword [0x441dc4]
test eax, eax
js 0x437e66
mov dword [esp + 0x14], 0xc373c177
mov dword [esp + 0x18], 0xc7c6c508
mov dword [esp + 0x1c], 0
mov eax, 0x5599a630
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [esp + eax - 0x5599a61c]
mov ecx, eax
or ecx, edx
and edx, eax
sub ecx, edx
add cl, 0x10
mov byte [esp + eax - 0x5599a61c], cl
inc eax
cmp eax, 0x5599a63c
jne 0x437a70
push esi
call dword [0x441dd0]
mov dword [esp + 0x50], eax
mov dword [esp + 0x14], 0x134f1143
mov dword [esp + 0x18], 0x6f336d38
mov dword [esp + 0x1c], 0x6bc6692b
mov dword [esp + 0x20], 0x671c6504
mov dword [esp + 0x24], 0x633c6100
mov dword [esp + 0x28], 0x7f297d2e
mov dword [esp + 0x2c], 0x7b1a792d
mov dword [esp + 0x30], 0x77cf75db
mov dword [esp + 0x34], 0x730171c6
mov dword [esp + 0x38], 0x4fe94d3e
mov dword [esp + 0x3c], 0x4b13490a
mov dword [esp + 0x40], 0x47154513
mov dword [esp + 0x44], 0x4140
mov byte [esp + 0x48], 0
xor eax, eax
nop
nop
nop
nop
mov ecx, eax
add cl, 0xbc
xor cl, byte [esp + eax + 0x14]
add cl, 0x54
mov byte [esp + eax + 0x14], cl
inc eax
cmp eax, 0x35
jne 0x437b10
push esi
call dword [0x441dd0]
mov esi, dword [esp + 0xc]
mov ecx, dword [esi]
lea edx, [esp + 0x5c]
push edx
push 0
push 0x30
mov dword [esp + 0x7c], eax
push eax
push dword [esp + 0x60]
push esi
call dword [ecx + 0x50]
test eax, eax
js 0x437e50
mov dword [esp + 0x54], 0
mov eax, dword [esp + 0x5c]
mov ecx, dword [eax]
lea edx, [esp + 0x54]
lea esi, [esp + 0x58]
push edx
push esi
push 1
push 0xffffffffffffffff
push eax
call dword [ecx + 0x10]
test eax, eax
js 0x437e46
cmp eax, 1
je 0x437e46
cmp dword [esp + 0x54], 0
je 0x437e46
lea eax, [esp + 0x78]
push eax
call dword [0x441ddc]
mov eax, dword [esp + 0x58]
mov dword [esp + 0x14], 0xcfabc9bf
mov dword [esp + 0x18], 0xc35bcd5a
mov dword [esp + 0x1c], 0xc75ac1a1
mov dword [esp + 0x20], 0xfb6fc5b6
mov dword [esp + 0x24], 0xff98f965
mov dword [esp + 0x28], 0xf364fd99
mov word [esp + 0x2c], 0xf1f0
mov dword [esp + 0x2e], 0
mov ecx, 0x52
mov edx, 5
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov esi, edx
and esi, 6
mov ebx, ecx
and ebx, 0x79
or ebx, esi
xor bl, byte [esp + ecx - 0x3e]
xor bl, 0x86
add bl, 0xe6
mov byte [esp + ecx - 0x3e], bl
inc ecx
dec edx
cmp ecx, 0x70
jne 0x437bf0
mov ecx, dword [eax]
push 0
push 0
lea esi, [esp + 0x80]
push esi
push 0
lea edx, [esp + 0x24]
push edx
push eax
call dword [ecx + 0x10]
test eax, eax
js 0x437e2e
cmp word [esp + 0x78], 8
jne 0x437e2e
mov eax, dword [esp + 0x80]
movzx ebx, word [eax]
test bx, bx
mov dword [esp + 8], eax
je 0x437c8d
add eax, 2
xor esi, esi
mov ecx, ebx
jmp 0x437c6c
inc esi
movzx ecx, word [eax]
add eax, 2
test cx, cx
je 0x437c8f
cmp cx, 0x7f
jbe 0x437c60
movzx edx, cx
cmp edx, 0x7ff
ja 0x437c82
add esi, 2
jmp 0x437c61
cmp cx, 0xffff
je 0x437c61
add esi, 3
jmp 0x437c61
xor esi, esi
lea eax, [esi + 1]
push eax
call fcn.00409c90
add esp, 4
mov dword [esp + 4], eax
mov dword [esp], eax
mov dword [esp + 0x4c], esi
test esi, esi
mov esi, dword [esp + 8]
je 0x437ddd
mov eax, dword [esp + 4]
mov dword [esp], eax
test bx, bx
je 0x437ddd
mov ecx, dword [esp + 0x4c]
mov eax, dword [esp + 4]
mov dword [esp], eax
nop
nop
nop
movzx ebx, bx
lea edx, [esi + 2]
cmp bx, 0x7f
ja 0x437cf0
mov eax, dword [esp]
mov byte [eax], bl
mov ebx, eax
inc eax
mov esi, edx
jmp 0x437d80
cmp ebx, 0x7ff
ja 0x437d1b
cmp ecx, 2
jb 0x437d1b
mov eax, ebx
shr eax, 6
add al, 0xc0
mov esi, dword [esp]
mov byte [esi], al
and bl, 0x3f
or bl, 0x80
lea eax, [esi + 2]
mov byte [esi + 1], bl
mov ebx, esi
mov esi, edx
jmp 0x437d80
mov eax, ebx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x437d99
cmp ecx, 4
jb 0x437d99
movzx eax, word [esi + 2]
mov dword [esp + 8], eax
add esi, 4
shl ebx, 0xa
add eax, ebx
add eax, 0xfca02400
mov ebx, eax
shr ebx, 0x12
add bl, 0xf0
mov edx, dword [esp]
mov byte [edx], bl
mov ebx, eax
shr ebx, 0xc
and bl, 0x3f
or bl, 0x80
mov byte [edx + 1], bl
mov ebx, edx
shr eax, 6
and al, 0x3f
or al, 0x80
mov byte [edx + 2], al
mov eax, dword [esp + 8]
and al, 0x3f
or al, 0x80
mov edx, eax
lea eax, [ebx + 4]
mov byte [ebx + 3], dl
nop
nop
nop
nop
nop
nop
add ecx, ebx
sub ecx, eax
mov dword [esp], eax
movzx ebx, word [esi]
test bx, bx
je 0x437ddd
test ecx, ecx
jne 0x437cd0
jmp 0x437ddd
movzx eax, ax
cmp eax, 0xdc00
jne 0x437da7
mov esi, edx
jmp 0x437d87
cmp ecx, 3
mov esi, edx
jb 0x437dd6
mov eax, ebx
shr eax, 0xc
or al, 0xe0
mov edx, dword [esp]
mov byte [edx], al
mov eax, ebx
shr eax, 6
and al, 0x3f
or al, 0x80
mov byte [edx + 1], al
and bl, 0x3f
or bl, 0x80
lea eax, [edx + 3]
mov byte [edx + 2], bl
mov ebx, edx
jmp 0x437d80
mov ebx, dword [esp]
mov eax, ebx
jmp 0x437d80
mov eax, dword [esp]
mov byte [eax], 0
mov eax, 3
mov ecx, dword [esp + 0x4c]
sub eax, ecx
cmp eax, 0xfffffffd
jae 0x437df8
mov eax, 0xfffffffc
add eax, ecx
shr eax, 2
cmp eax, 3
lea esi, [esp + 0x78]
jb 0x437e0b
mov eax, 3
lea eax, [eax*4 + 4]
push eax
mov ebx, dword [esp + 8]
push ebx
lea eax, [esp + 0x68]
push eax
call fcn.00409cc0
add esp, 0xc
push ebx
call fcn.00409ca0
add esp, 4
push esi
call dword [0x441dd8]
mov eax, dword [esp + 0x58]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ebx, [esp + 0x8c]
mov eax, dword [esp + 0x5c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov esi, dword [0x441dd4]
push dword [esp + 0x50]
call esi
push dword [esp + 0x70]
call esi
lea esi, [esp + 0x14]
mov eax, dword [esp + 0xc]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push dword [esp + 0x74]
call dword [0x441dd4]
mov eax, dword [esp + 0x10]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push 0xbeb8f1a1
push dword [0x44a058]
call fcn.0043e380
add esp, 8
push 0
push 0
push 0
push 0
push esi
push 0
push 0
push ebx
call eax
test eax, eax
je 0x437eb3
mov eax, dword [esp + 0x14]
mov dword [esp + 0x60], eax
xor esi, esi
jmp 0x437ecd
add edi, 8
inc esi
cmp esi, 4
je 0x437f53
mov eax, 0
test esi, esi
je 0x437ee0
cmp dword [esp + esi*4 + 0x60], 1
mov eax, esi
sbb eax, 0
mov eax, dword [esp + eax*4 + 0x60]
mov edx, eax
and edx, 0x1a5845
mov ecx, eax
or eax, 0x1a5845
imul eax, edx
xor edx, 0x1a5845
and ecx, 0xffe5a7ba
imul ecx, edx
add eax, ecx
mov ecx, eax
and ecx, 0xebde8a13
xor eax, 0xebde8a13
lea eax, [eax + ecx*2]
mov dword [esp + esi*4 + 0x60], eax
mov ebx, 0xfffffff7
push 0x10
push 9
push edi
push eax
call fcn.0041e9f0
add esp, 0x10
nop
nop
cmp byte [eax + ebx + 9], 0
lea ebx, [ebx + 1]
jne 0x437f30
test ebx, ebx
je 0x437ec0
add eax, ebx
neg ebx
push ebx
push 0x30
push eax
call fcn.00409d10
add esp, 0xc
jmp 0x437ec0
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret