Function at 0xddbca0
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x18c
mov eax, dword [0x2b796bc]
mov dword [esp + 0xc], 0xdbb3d9a7
mov dword [esp + 0x10], 0xe78ee592
mov dword [esp + 0x14], 0xe39ee19c
mov dword [esp + 0x18], 0xefd8ed9c
mov dword [esp + 0x1c], 0xeb9ee984
mov dword [esp + 0x20], 0xf7f6f580
mov dword [esp + 0x24], 0
mov dword [esp], 0
mov ecx, dword [esp]
cmp ecx, 0x1b
ja 0xddbd36
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [esp]
mov edx, dword [esp]
movzx edx, byte [esp + edx + 0xc]
add ecx, 0x251c265c
xor ecx, edx
mov dword [esp + 0x10c], ecx
mov ecx, dword [esp + 0x10c]
add cl, 0x7c
mov edx, dword [esp]
mov byte [esp + edx + 0xc], cl
inc dword [esp]
mov ecx, dword [esp]
cmp ecx, 0x1c
jb 0xddbd00
lea esi, [esp + 0xc]
push 0x800
push 0
push esi
call eax
mov ecx, 0x2b79684
push eax
call fcn.00e0d720
xor ebx, ebx
test al, al
je 0xddc40a
push 0xe2bceb04
push dword [0x2b79684]
call fcn.00e0fc10
add esp, 8
mov dword [0x2b7968c], eax
push 0x248106fa
push dword [0x2b79684]
call fcn.00e0fc10
add esp, 8
mov dword [0x2b79690], eax
push 0x89b8457d
push dword [0x2b79684]
call fcn.00e0fc10
add esp, 8
mov dword [0x2b79694], eax
push 0x44f824fb
push dword [0x2b79684]
call fcn.00e0fc10
add esp, 8
mov dword [0x2b79698], eax
push 0xf072343c
push dword [0x2b79684]
call fcn.00e0fc10
add esp, 8
mov dword [0x2b7969c], eax
push 0x638f2392
push dword [0x2b79684]
call fcn.00e0fc10
add esp, 8
mov dword [0x2b796a0], eax
push 0xd711af57
push dword [0x2b79684]
call fcn.00e0fc10
add esp, 8
mov dword [0x2b796a4], eax
push 0x1ad145e2
push dword [0x2b79684]
call fcn.00e0fc10
add esp, 8
mov dword [0x2b796a8], eax
push 0xedb83653
push dword [0x2b79684]
call fcn.00e0fc10
add esp, 8
mov dword [0x2b796ac], eax
push 0xe9e47300
push dword [0x2b79684]
call fcn.00e0fc10
add esp, 8
mov dword [0x2b796b0], eax
push 0x6b702a5b
push dword [0x2b79684]
call fcn.00e0fc10
add esp, 8
mov dword [0x2b796b4], eax
push 0xc135ffae
push dword [0x2b79684]
call fcn.00e0fc10
add esp, 8
mov dword [0x2b796b8], eax
lea edi, [esp + 0x10b]
lea eax, [esp + 0x10c]
push eax
push dword [ebx + 0x2b723e4]
call fcn.00e09820
add esp, 8
mov ebp, edi
nop
nop
nop
nop
nop
nop
nop
nop
cmp byte [ebp + 1], 0
lea ebp, [ebp + 1]
jne 0xddbea0
mov dword [esp], 0
mov eax, esi
lea ecx, [esp + 0x10c]
cmp ecx, ebp
jae 0xddbf21
xor esi, esi
lea edi, [esp + 0x10c]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp byte [edi], 0
je 0xddbf10
mov eax, esp
push eax
push ebp
push edi
call fcn.00dddfa0
add esp, 0xc
movzx ecx, word [esp]
mov word [esp + esi + 0xc], cx
lea ecx, [esi + 2]
cmp esi, 0xfb
ja 0xddbefe
add edi, eax
mov esi, ecx
cmp edi, ebp
jb 0xddbed0
lea eax, [esp + ecx]
add eax, 0xc
jmp 0xddbf16
lea eax, [esp + esi]
add eax, 0xc
lea esi, [esp + 0xc]
lea edi, [esp + 0x10b]
mov word [eax], 0
push esi
call fcn.00ddc420
add esp, 4
test al, al
jne 0xddc188
add ebx, 4
cmp ebx, 0x24
jne 0xddbe80
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0xb704b10a
mov dword [esp + 0x10], 0x8b04b502
mov dword [esp + 0x14], 0x8fc6893f
mov dword [esp + 0x18], 0x83fd8dff
mov dword [esp + 0x1c], 0x87348137
mov dword [esp + 0x20], 0x9b23853d
mov dword [esp + 0x24], 0x9f3d9929
mov dword [esp + 0x28], 0x932f9d2f
mov dword [esp + 0x2c], 0x971b9121
mov dword [esp + 0x30], 0xeb2b9524
mov dword [esp + 0x34], 0xef67e95e
mov dword [esp + 0x38], 0xe349ed9c
mov dword [esp + 0x3c], 0xe753e153
mov dword [esp + 0x40], 0xfb54e597
mov dword [esp + 0x44], 0xff49f94c
mov dword [esp + 0x48], 0xf343fd44
mov dword [esp + 0x4c], 0xf74bf14e
mov dword [esp + 0x50], 0xcb85f543
mov dword [esp + 0x54], 0xcf82c983
mov dword [esp + 0x58], 0xc386cd85
mov dword [esp + 0x5c], 0xc7b7c1b5
mov dword [esp + 0x60], 0xdb8bc589
mov dword [esp + 0x64], 0xdfaed993
mov dword [esp + 0x68], 0xd3a9ddaa
mov dword [esp + 0x6c], 0xd7a7d1a7
mov dword [esp + 0x70], 0x2ba4d599
mov dword [esp + 0x74], 0x2f28295a
mov word [esp + 0x78], 0
mov dword [esp], 0
mov eax, dword [esp]
cmp eax, 0x6d
ja 0xddc084
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp]
mov ecx, dword [esp]
movzx ecx, byte [esp + ecx + 0xc]
add eax, 0x5d7f6799
xor eax, ecx
mov dword [esp + 0x10c], eax
mov eax, dword [esp + 0x10c]
add al, 0xd5
mov ecx, dword [esp]
mov byte [esp + ecx + 0xc], al
inc dword [esp]
mov eax, dword [esp]
cmp eax, 0x6e
jb 0xddc050
lea eax, [esp + 8]
lea ecx, [esp + 4]
lea edi, [esp + 0xc]
push eax
push ecx
push edi
call fcn.00ddc9f0
add esp, 0xc
test al, al
je 0xddc408
mov dword [esp + 0xc], 0x978587bf
mov dword [esp + 0x10], 0xf4ec5689
mov dword [esp + 0x14], 0xc3f8ffe8
mov dword [esp + 0x18], 0xf4e4ed2d
mov dword [esp + 0x1c], 0xe5f9e1f4
mov dword [esp + 0x20], 0xedebe1f7
mov dword [esp + 0x24], 0xfdfee4ea
mov dword [esp + 0x28], 0xf7eefde1
mov word [esp + 0x2c], 0xdc31
mov byte [esp + 0x2e], 0x15
mov dword [esp + 0x2f], 0
mov dword [esp], 0
mov eax, dword [esp]
cmp eax, 0x26
ja 0xddc144
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp]
mov ecx, dword [esp]
movzx ecx, byte [esp + ecx + 0xc]
add eax, 0x48f23f3a
xor eax, ecx
mov dword [esp + 0x10c], eax
mov eax, dword [esp + 0x10c]
add al, 0xb7
mov ecx, dword [esp]
mov byte [esp + ecx + 0xc], al
inc dword [esp]
mov eax, dword [esp]
cmp eax, 0x27
jb 0xddc110
mov ecx, dword [esp + 4]
movzx ebx, byte [esp + 0xc]
test bl, bl
je 0xddc20e
mov edx, edi
mov ebp, ecx
jmp 0xddc16b
movzx ebx, byte [edx]
test bl, bl
je 0xddc210
mov bh, byte [ecx]
test bh, bh
je 0xddc3fc
inc ecx
inc edx
lea esi, [ebp + 1]
cmp bh, bl
je 0xddc182
mov ebp, esi
mov ecx, esi
je 0xddc160
mov edx, edi
jmp 0xddc160
movzx eax, word [esp + 0xc]
test ax, ax
je 0xddc1bf
mov ecx, 2
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [ecx + 0x2b796be], ax
movzx eax, word [esp + ecx + 0xc]
add ecx, 2
test ax, ax
jne 0xddc1a0
mov word [ecx + 0x2b796be], 0
jmp 0xddc1c8
mov word [0x2b796c0], 0
push 0
push 0
call dword [0x2b735e4]
test eax, eax
js 0xddc408
push 0
push 0
push 0
push 3
push 0
push 0
push 0
push 0xffffffffffffffff
push 0
call dword [0x2b735e8]
test eax, eax
js 0xddc408
push 0x2b79660
call fcn.00e08c30
add esp, 4
mov bl, 1
jmp 0xddc40a
mov ebp, ecx
test ebp, ebp
je 0xddc3fc
mov dword [esp + 0xc], 0xc1c38092
mov dword [esp + 0x10], 0x4d8ac5b3
mov dword [esp], 0
mov ecx, dword [esp]
cmp ecx, 7
ja 0xddc276
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [esp]
mov edx, dword [esp]
movzx edx, byte [esp + edx + 0xc]
add ecx, 0xe51fb50a
xor ecx, edx
mov dword [esp + 0x10c], ecx
mov ecx, dword [esp + 0x10c]
add cl, 0xa4
mov edx, dword [esp]
mov byte [esp + edx + 0xc], cl
inc dword [esp]
mov ecx, dword [esp]
cmp ecx, 8
jb 0xddc240
movzx edx, byte [esp + 0xc]
mov ecx, ebp
test dl, dl
je 0xddc2b4
lea eax, [esp + 0xc]
mov edi, eax
mov ebx, ebp
mov ecx, ebp
jmp 0xddc297
movzx edx, byte [edi]
test dl, dl
je 0xddc2b4
mov dh, byte [ebx]
test dh, dh
je 0xddc3fc
inc ebx
inc edi
lea esi, [ecx + 1]
cmp dh, dl
je 0xddc2ae
mov ecx, esi
mov ebx, esi
je 0xddc290
mov edi, eax
jmp 0xddc290
test ecx, ecx
je 0xddc3fc
mov byte [ecx], 0
mov ecx, 0xffffffff
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp byte [ebp + ecx + 0x23], 0
lea ecx, [ecx + 1]
jne 0xddc2d0
test ecx, ecx
je 0xddc326
xor edx, edx
jmp 0xddc307
mov eax, esi
xor eax, 0x61
and esi, 1
lea ebx, [eax + esi*2]
mov byte [esp + edx + 0x10c], bl
inc edx
cmp ecx, edx
je 0xddc326
movzx ebx, byte [ebp + edx + 0x22]
mov eax, ebx
add al, 0x9f
cmp al, 0x19
ja 0xddc2fb
movzx edi, bl
lea esi, [edi - 0x52]
cmp esi, 0x1a
jb 0xddc2f0
add edi, 0xffffff94
mov esi, edi
jmp 0xddc2f0
mov byte [esp + ecx + 0x10c], 0
lea ebx, [esp + 0x10b]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp byte [ebx + 1], 0
lea ebx, [ebx + 1]
jne 0xddc340
mov dword [esp], 0
lea edi, [esp + 0xc]
lea ebp, [esp + 0x10c]
mov eax, edi
cmp ebp, ebx
jae 0xddc39d
xor esi, esi
cmp byte [ebp], 0
je 0xddc397
mov eax, esp
push eax
push ebx
push ebp
call fcn.00dddfa0
add esp, 0xc
movzx ecx, word [esp]
mov word [esp + esi + 0xc], cx
lea ecx, [esi + 2]
cmp esi, 0x7b
ja 0xddc38f
add ebp, eax
mov esi, ecx
cmp ebp, ebx
jb 0xddc363
lea eax, [esp + ecx]
add eax, 0xc
jmp 0xddc39d
lea eax, [esp + esi]
add eax, 0xc
mov word [eax], 0
push edi
call fcn.00ddc420
add esp, 4
test al, al
je 0xddc3fc
mov ebx, eax
movzx ecx, word [esp + 0xc]
mov eax, 0x2b796c0
test cx, cx
je 0xddc3e1
lea edx, [esp + 0xe]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0xddc3d0
mov word [eax], 0
push dword [esp + 4]
call fcn.00e0c4a0
add esp, 4
test bl, bl
jne 0xddc1c8
jmp 0xddc408
push dword [esp + 4]
call fcn.00e0c4a0
add esp, 4
xor ebx, ebx
mov eax, ebx
add esp, 0x18c
pop esi
pop edi
pop ebx
pop ebp
ret