Function at 0x706a80
Capabilities:
Encode data using xor
Extract resource via kernel32 functions
Hash data with crc32

Disassembly:
push ebp
push edi
push esi
mov esi, ecx
push ebx
sub esp, 0x4c
cmp byte [0x7510e4], 0
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], edx
je 0x706b08
mov dword [esp + 4], 0x72b016
mov dword [esp], esi
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x707078
mov ebx, dword [0x7510e0]
jmp 0x706ac4
lea ebx, [eax + edx + 4]
mov dword [esp + 4], ebx
mov dword [esp], esi
call sub.msvcrt.dll_strcmp
mov dword [esp], ebx
mov edi, eax
call sub.msvcrt.dll_strlen
lea eax, [ebx + eax + 1]
mov edx, dword [eax]
test edi, edi
jne 0x706ac0
lea ecx, [eax + 6]
movzx eax, word [eax + 4]
mov edx, dword [esp + 0x24]
mov dword [esp], eax
mov eax, dword [esp + 0x20]
call fcn.00704c60
add esp, 0x4c
pop ebx
pop esi
pop edi
pop ebp
ret
mov dword [esp + 8], 0xa
mov dword [esp + 4], 3
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_FindResourceA]
sub esp, 0xc
mov dword [esp + 4], eax
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_LoadResource]
sub esp, 8
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_LockResource]
mov ecx, dword [eax]
mov ebx, dword [eax + 4]
lea ebp, [eax + 8]
sub esp, 4
mov dword [0x7510e0], ebp
mov eax, 0xffffffff
mov dword [esp + 0x2c], ecx
cmp ebx, 0x16
jbe 0x706e74
test ebp, 3
je 0x70713a
mov ecx, 0xffffffff
jmp 0x706b8c
test ebp, 3
je 0x7070f3
add ebp, 1
mov eax, ecx
xor cl, byte [ebp - 1]
shr eax, 8
movzx ecx, cl
xor eax, dword [ecx*4 + 0x72c8c0]
mov ecx, eax
sub ebx, 1
jne 0x706b80
mov dword [esp + 0x3c], ebp
mov edx, 0xffffffff
mov dword [esp + 0x28], 0xffffffff
mov dword [esp + 0x14], 0
xor eax, eax
xor edi, edi
mov dword [esp + 0x30], ebx
mov dword [esp + 0x18], ecx
mov dword [esp + 0x38], esi
mov dword [esp + 0x34], edx
mov edx, eax
lea esi, [esi]
nop
xor eax, dword [ebp + 0x10]
mov esi, dword [esp + 0x18]
add ebp, 0x14
xor esi, dword [ebp - 0x14]
mov ecx, dword [ebp - 0xc]
mov dword [esp + 0x1c], eax
mov eax, esi
mov ebx, dword [esp + 0x14]
xor ebx, dword [ebp - 0x10]
xor ecx, edi
movzx edi, al
mov eax, esi
xor edx, dword [ebp - 8]
shr eax, 0x18
mov edi, dword [edi*4 + 0x72b8c0]
xor edi, dword [eax*4 + 0x72c4c0]
mov eax, esi
shr esi, 0x10
movzx eax, ah
xor edi, dword [eax*4 + 0x72bcc0]
mov eax, esi
movzx esi, al
xor edi, dword [esi*4 + 0x72c0c0]
movzx esi, bl
mov dword [esp + 0x18], edi
mov edi, ebx
mov esi, dword [esi*4 + 0x72b8c0]
shr edi, 0x18
xor esi, dword [edi*4 + 0x72c4c0]
movzx edi, bh
shr ebx, 0x10
movzx ebx, bl
xor esi, dword [edi*4 + 0x72bcc0]
xor esi, dword [ebx*4 + 0x72c0c0]
mov ebx, ecx
shr ebx, 0x18
mov dword [esp + 0x14], esi
movzx esi, cl
mov edi, dword [esi*4 + 0x72b8c0]
xor edi, dword [ebx*4 + 0x72c4c0]
movzx ebx, ch
shr ecx, 0x10
xor edi, dword [ebx*4 + 0x72bcc0]
movzx ecx, cl
mov ebx, edx
mov esi, dword [esp + 0x1c]
shr ebx, 0x18
xor edi, dword [ecx*4 + 0x72c0c0]
movzx ecx, dl
mov ecx, dword [ecx*4 + 0x72b8c0]
xor ecx, dword [ebx*4 + 0x72c4c0]
mov eax, esi
movzx ebx, dh
shr edx, 0x10
xor ecx, dword [ebx*4 + 0x72bcc0]
movzx edx, dl
xor ecx, dword [edx*4 + 0x72c0c0]
mov edx, ecx
movzx ecx, al
mov eax, esi
shr eax, 0x18
mov ecx, dword [ecx*4 + 0x72b8c0]
xor ecx, dword [eax*4 + 0x72c4c0]
mov eax, esi
movzx ebx, ah
shr eax, 0x10
movzx eax, al
xor ecx, dword [ebx*4 + 0x72bcc0]
xor ecx, dword [eax*4 + 0x72c0c0]
sub dword [esp + 0x28], 1
mov eax, ecx
jne 0x706be0
mov ecx, dword [esp + 0x18]
mov ebx, dword [esp + 0x30]
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0x34]
mov esi, dword [esp + 0x38]
mov dword [esp + 0x1c], eax
lea eax, [edx + edx*4]
mov edx, dword [esp + 0x3c]
lea ebp, [edx + eax*4]
xor ecx, dword [ebp]
xor edi, dword [ebp + 8]
movzx eax, cl
shr ecx, 8
xor ecx, dword [eax*4 + 0x72c8c0]
mov eax, ecx
movzx ecx, cl
shr eax, 8
xor eax, dword [ecx*4 + 0x72c8c0]
mov ecx, dword [esp + 0x14]
mov edx, eax
movzx eax, al
xor ecx, dword [ebp + 4]
shr edx, 8
xor edx, dword [eax*4 + 0x72c8c0]
mov eax, edx
shr edx, 8
movzx eax, al
xor edx, ecx
xor edx, dword [eax*4 + 0x72c8c0]
movzx ecx, dl
mov eax, edx
shr eax, 8
xor eax, dword [ecx*4 + 0x72c8c0]
mov edx, eax
movzx eax, al
shr edx, 8
xor edx, dword [eax*4 + 0x72c8c0]
mov eax, edx
movzx edx, dl
shr eax, 8
xor eax, dword [edx*4 + 0x72c8c0]
mov edx, eax
movzx eax, al
shr edx, 8
xor edx, edi
xor edx, dword [eax*4 + 0x72c8c0]
movzx ecx, dl
mov eax, edx
shr eax, 8
xor eax, dword [ecx*4 + 0x72c8c0]
mov edx, eax
movzx eax, al
shr edx, 8
xor edx, dword [eax*4 + 0x72c8c0]
mov eax, edx
shr edx, 8
movzx eax, al
xor edx, dword [eax*4 + 0x72c8c0]
mov eax, dword [esp + 0x18]
mov ecx, edx
xor eax, dword [ebp + 0xc]
movzx edx, dl
shr ecx, 8
xor eax, ecx
xor eax, dword [edx*4 + 0x72c8c0]
movzx edx, al
shr eax, 8
xor eax, dword [edx*4 + 0x72c8c0]
add ebp, 0x14
mov edx, eax
movzx eax, al
shr edx, 8
xor edx, dword [eax*4 + 0x72c8c0]
mov eax, edx
shr edx, 8
movzx eax, al
xor edx, dword [eax*4 + 0x72c8c0]
mov eax, dword [esp + 0x1c]
mov ecx, edx
xor eax, dword [ebp - 4]
movzx edx, dl
shr ecx, 8
xor eax, ecx
xor eax, dword [edx*4 + 0x72c8c0]
movzx edx, al
shr eax, 8
xor eax, dword [edx*4 + 0x72c8c0]
mov edx, eax
movzx eax, al
shr edx, 8
xor edx, dword [eax*4 + 0x72c8c0]
mov eax, edx
movzx edx, dl
shr eax, 8
xor eax, dword [edx*4 + 0x72c8c0]
mov edx, eax
shr eax, 8
movzx edx, dl
xor eax, dword [edx*4 + 0x72c8c0]
cmp ebx, 7
jbe 0x706fb3
mov edx, eax
xor al, byte [ebp]
lea ecx, [ebx - 8]
movzx eax, al
shr edx, 8
xor edx, dword [eax*4 + 0x72c8c0]
mov eax, edx
xor dl, byte [ebp + 1]
movzx edx, dl
shr eax, 8
xor eax, dword [edx*4 + 0x72c8c0]
mov edx, eax
xor al, byte [ebp + 2]
movzx eax, al
shr edx, 8
xor edx, dword [eax*4 + 0x72c8c0]
mov eax, edx
xor dl, byte [ebp + 3]
movzx edx, dl
shr eax, 8
xor eax, dword [edx*4 + 0x72c8c0]
mov edx, eax
xor al, byte [ebp + 4]
movzx eax, al
shr edx, 8
xor edx, dword [eax*4 + 0x72c8c0]
mov eax, edx
xor dl, byte [ebp + 5]
movzx edx, dl
shr eax, 8
xor eax, dword [edx*4 + 0x72c8c0]
mov edx, eax
xor al, byte [ebp + 6]
movzx eax, al
shr edx, 8
xor edx, dword [eax*4 + 0x72c8c0]
mov eax, edx
xor dl, byte [ebp + 7]
movzx edx, dl
shr eax, 8
xor eax, dword [edx*4 + 0x72c8c0]
cmp ecx, 7
jbe 0x706fa9
mov edx, eax
xor al, byte [ebp + 8]
movzx eax, al
shr edx, 8
xor edx, dword [eax*4 + 0x72c8c0]
mov eax, edx
xor dl, byte [ebp + 9]
movzx edx, dl
shr eax, 8
xor eax, dword [edx*4 + 0x72c8c0]
mov edx, eax
xor al, byte [ebp + 0xa]
movzx eax, al
shr edx, 8
xor edx, dword [eax*4 + 0x72c8c0]
mov eax, edx
xor dl, byte [ebp + 0xb]
movzx edx, dl
shr eax, 8
xor eax, dword [edx*4 + 0x72c8c0]
mov edx, eax
xor al, byte [ebp + 0xc]
movzx eax, al
shr edx, 8
xor edx, dword [eax*4 + 0x72c8c0]
mov eax, edx
xor dl, byte [ebp + 0xd]
movzx edx, dl
shr eax, 8
xor eax, dword [edx*4 + 0x72c8c0]
mov edx, eax
xor al, byte [ebp + 0xe]
movzx eax, al
shr edx, 8
xor edx, dword [eax*4 + 0x72c8c0]
mov eax, edx
xor dl, byte [ebp + 0xf]
movzx edx, dl
shr eax, 8
xor eax, dword [edx*4 + 0x72c8c0]
shr ecx, 3
and ebx, 7
lea ebp, [ebp + ecx*8 + 8]
test ebx, ebx
je 0x70705d
mov edx, eax
xor al, byte [ebp]
movzx eax, al
shr edx, 8
xor edx, dword [eax*4 + 0x72c8c0]
mov eax, edx
cmp ebx, 1
je 0x70705d
xor al, byte [ebp + 1]
shr edx, 8
movzx eax, al
xor edx, dword [eax*4 + 0x72c8c0]
mov eax, edx
cmp ebx, 2
je 0x70705d
xor al, byte [ebp + 2]
shr edx, 8
movzx eax, al
xor edx, dword [eax*4 + 0x72c8c0]
mov eax, edx
cmp ebx, 3
je 0x70705d
xor al, byte [ebp + 3]
shr edx, 8
movzx eax, al
xor edx, dword [eax*4 + 0x72c8c0]
mov eax, edx
cmp ebx, 4
je 0x70705d
xor al, byte [ebp + 4]
shr edx, 8
movzx eax, al
xor edx, dword [eax*4 + 0x72c8c0]
mov eax, edx
cmp ebx, 5
je 0x70705d
xor al, byte [ebp + 5]
shr edx, 8
movzx eax, al
xor edx, dword [eax*4 + 0x72c8c0]
mov eax, edx
cmp ebx, 6
je 0x70705d
xor al, byte [ebp + 6]
shr edx, 8
movzx eax, al
xor edx, dword [eax*4 + 0x72c8c0]
mov eax, edx
not eax
cmp dword [esp + 0x2c], eax
jne 0x70715e
mov byte [0x7510e4], 1
jmp 0x706a9a
cmp byte [0x7510dc], 0
jne 0x706ab2
mov ebx, dword [sym.imp.python34.dll_PyDict_New]
mov edi, 0xfffffffb
call ebx
mov dword [0x751108], eax
call ebx
mov dword [0x751104], eax
call ebx
mov dword [0x751100], eax
call ebx
mov dword [0x751120], eax
call ebx
mov dword [0x75111c], eax
call ebx
mov dword [0x751118], eax
call ebx
mov dword [0x751110], eax
call ebx
mov ebx, dword [sym.imp.python34.dll_PyLong_FromLong]
mov dword [0x75110c], eax
nop
mov dword [esp], edi
call ebx
mov dword [edi*4 + 0x7479d4], eax
add edi, 1
cmp edi, 0x101
jne 0x7070d0
mov byte [0x7510dc], 1
jmp 0x706ab2
mov eax, 0xcccccccd
mul ebx
shr edx, 4
lea eax, [edx + edx*4]
shl eax, 2
sub ebx, eax
lea eax, [edx - 1]
mov dword [esp + 0x28], eax
mov edx, eax
test edx, edx
je 0x70711b
mov dword [esp + 0x3c], ebp
jmp 0x706bb9
mov dword [esp + 0x1c], 0
xor edi, edi
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
jmp 0x706d28
mov eax, 0xcccccccd
mov ecx, 0xffffffff
mul ebx
mov eax, edx
shr eax, 4
lea edx, [eax + eax*4]
sub eax, 1
shl edx, 2
mov dword [esp + 0x28], eax
sub ebx, edx
mov edx, eax
jmp 0x70710e
mov dword [esp], str.Error__corrupted_constants_object
call sub.msvcrt.dll_puts
call sub.msvcrt.dll_abort
nop