Function at 0x422cf0
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0xa08
mov dword [esp + 0x60], 0x33073105
mov dword [esp + 0x64], 0x3fc23dc1
mov dword [esp + 0x68], 0x3bce39d1
mov dword [esp + 0x6c], 0xc73ac52d
mov dword [esp + 0x70], 0xc3f7c139
mov dword [esp + 0x74], 0xcf33cd3f
mov dword [esp + 0x78], 0xcbffc92a
mov dword [esp + 0x7c], 0xd72fd528
mov dword [esp + 0x80], 0xd33fd120
mov dword [esp + 0x84], 0xdf28dd19
mov dword [esp + 0x88], 0xdb26d935
mov dword [esp + 0x8c], 0xe711e51b
mov dword [esp + 0x90], 0xe309e112
mov dword [esp + 0x94], 0xef1bedda
mov dword [esp + 0x98], 0xeb00e91f
mov dword [esp + 0x9c], 0xf703f503
mov dword [esp + 0xa0], 0xf324f1c6
mov dword [esp + 0xa4], 0xff02fd11
mov dword [esp + 0xa8], 0xfb0df907
mov dword [esp + 0xac], 0x876d8576
mov dword [esp + 0xb0], 0x836f8153
mov dword [esp + 0xb4], 0x8f708d7e
mov dword [esp + 0xb8], 0x8b698961
mov dword [esp + 0xbc], 0x97969579
mov byte [esp + 0xc2], 0
mov word [esp + 0xc0], 0
mov ebx, dword [ebp + 8]
lea esi, [esp + 0xc0]
mov ecx, 0x72685874
movzx eax, byte [esp + ecx - 0x72685814]
mov edx, eax
and edx, ecx
add dl, dl
sub al, dl
movzx eax, al
add eax, ecx
add al, 0xbc
mov byte [esp + ecx - 0x72685814], al
inc ecx
cmp ecx, 0x726858d7
jne 0x422e10
lea edi, [esp + 0x4a0]
lea eax, [esp + 0x60]
mov ecx, 0x18
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
lea edi, [esp + 0x500]
xor edx, edx
xor ecx, ecx
xchg esi, esi
rep movsw word es:[edi], word [esi]
xchg esi, esi
mov dword [esp + 0x28], 0
mov dword [esp + 0x60], 0x101f1e1d
mov word [esp + 0x64], 0
mov byte [esp + 0x66], 0
nop
nop
nop
nop
nop
nop
nop
mov eax, edx
add al, 0x45
xor al, byte [esp + edx + 0x60]
add al, 0xa7
mov byte [esp + edx + 0x60], al
inc edx
cmp edx, 7
jne 0x422e80
mov eax, dword [esp + 0x60]
mov ecx, dword [0x452e1c]
test ecx, ecx
mov edi, dword [ebp + 0x14]
je 0x422ee4
xor edx, edx
mov esi, dword [0x452e20]
nop
nop
nop
cmp dword [esi + edx*8], 0xc85f7986
je 0x422ec0
inc edx
cmp ecx, edx
jne 0x422eb0
jmp 0x422ee4
mov ecx, dword [esi + edx*8 + 4]
cmp ecx, eax
je 0x422ee4
lea eax, [esp + 0x28]
push eax
push 0
push 0
push 5
push 4
push dword [0x452e24]
push ecx
call fcn.00443a10
add esp, 0x1c
cmp eax, 0xc0000004
jne 0x422f63
push dword [esp + 0x28]
call fcn.00440940
add esp, 4
mov dword [esp + 0x1c], eax
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x60], 0x101f1e1d
mov word [esp + 0x64], 0
mov byte [esp + 0x66], 0
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, eax
add dl, 0x45
xor dl, byte [esp + eax + 0x60]
add dl, 0xa7
mov byte [esp + eax + 0x60], dl
inc eax
cmp eax, 7
jne 0x422f20
mov eax, dword [esp + 0x60]
mov edx, dword [0x452e1c]
test edx, edx
je 0x422f93
xor esi, esi
mov edi, dword [0x452e20]
nop
nop
nop
nop
cmp dword [edi + esi*8], 0xc85f7986
je 0x422f6e
inc esi
cmp edx, esi
jne 0x422f50
mov edi, dword [ebp + 0x14]
jmp 0x422f93
xor ecx, ecx
xor edx, edx
xor esi, esi
jmp 0x4234ce
mov edx, dword [edi + esi*8 + 4]
cmp edx, eax
mov edi, dword [ebp + 0x14]
je 0x422f93
push 0
push ecx
push dword [esp + 0x24]
push 5
push 4
push dword [0x452e24]
push edx
call fcn.00443a10
add esp, 0x1c
test eax, eax
js 0x42349e
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx]
mov dword [esp + 0xc], 0
mov edx, ecx
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
jmp 0x422fd5
mov ecx, edi
call fcn.00440e20
mov edx, dword [esp + 0x18]
mov eax, dword [edx]
test eax, eax
je 0x4234b6
mov ecx, dword [edx + eax + 0x3c]
add eax, edx
mov dword [esp + 0x18], eax
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, word [ecx + eax]
movzx esi, word [ebx + eax]
test dx, dx
je 0x423005
add eax, 2
cmp dx, si
je 0x422ff0
cmp dx, si
jne 0x422fc7
mov ecx, dword [esp + 0x18]
mov eax, dword [ecx + 0x44]
mov dword [edi + 8], eax
mov eax, dword [ecx + 0xdc]
mov dword [edi + 0xc], eax
mov ecx, edi
push 0x410
call fcn.00440cc0
test eax, eax
js 0x422fc7
mov dword [esp + 0x24], 0
mov esi, dword [edi]
mov dword [esp + 0x60], 0x101f1e1d
lea eax, [esp + 0x64]
mov byte [eax + 2], 0
mov word [eax], 0
xor eax, eax
nop
nop
mov ecx, eax
add cl, 0x45
xor cl, byte [esp + eax + 0x60]
add cl, 0xa7
mov byte [esp + eax + 0x60], cl
inc eax
cmp eax, 7
jne 0x423050
mov eax, dword [esp + 0x60]
mov edx, dword [0x452e1c]
test edx, edx
je 0x4230c0
xor edi, edi
mov ecx, dword [0x452e20]
nop
nop
nop
nop
cmp dword [ecx + edi*8], 0x62429966
je 0x423093
inc edi
cmp edx, edi
jne 0x423080
mov edi, dword [ebp + 0x14]
jmp 0x4230c0
mov ecx, dword [ecx + edi*8 + 4]
cmp ecx, eax
mov edi, dword [ebp + 0x14]
je 0x4230c0
lea eax, [esp + 0x24]
push eax
push 0
push 0
push 0x2b
push esi
push 5
push dword [0x452e24]
push ecx
call fcn.00443a10
add esp, 0x20
nop
nop
nop
nop
nop
cmp eax, 0xc0000004
jne 0x4232ab
mov eax, dword [esp + 0x24]
add eax, 2
push eax
call fcn.00440940
add esp, 4
mov dword [esp + 0x20], eax
mov edx, dword [esp + 0x24]
mov esi, dword [edi]
mov dword [esp + 0x60], 0x101f1e1d
lea eax, [esp + 0x64]
mov byte [eax + 2], 0
mov word [eax], 0
xor eax, eax
nop
nop
nop
nop
mov ecx, eax
add cl, 0x45
xor cl, byte [esp + eax + 0x60]
add cl, 0xa7
mov byte [esp + eax + 0x60], cl
inc eax
cmp eax, 7
jne 0x423100
mov eax, dword [esp + 0x60]
mov edi, dword [0x452e1c]
test edi, edi
je 0x423176
mov dword [esp + 4], esi
add edx, 2
mov esi, edx
xor ecx, ecx
mov edx, dword [0x452e20]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp dword [edx + ecx*8], 0x62429966
je 0x423150
inc ecx
cmp edi, ecx
jne 0x423140
jmp 0x423176
mov ecx, dword [edx + ecx*8 + 4]
cmp ecx, eax
je 0x423176
push 0
push esi
push dword [esp + 0x28]
push 0x2b
push dword [esp + 0x14]
push 5
push dword [0x452e24]
push ecx
call fcn.00443a10
add esp, 0x20
test eax, eax
js 0x42329c
mov ecx, dword [esp + 0x20]
movzx eax, word [ecx]
shr eax, 1
mov ecx, dword [ecx + 4]
xor edx, edx
nop
nop
nop
nop
cmp eax, edx
je 0x4231bd
mov esi, dword [ebp + 0xc]
movzx edi, word [esi + edx*2]
movzx esi, word [ecx + edx*2]
cmp di, si
jne 0x4231ab
inc edx
test edi, edi
jne 0x423190
jmp 0x4231bd
mov eax, esi
not eax
and eax, edi
not edi
and edi, esi
cmp eax, edi
jne 0x42329c
mov edi, dword [ebp + 0x14]
mov ecx, edi
call fcn.00441310
cmp eax, 2
jne 0x42329f
mov ecx, edi
push 0
push 0x30
lea eax, [esp + 0x38]
push eax
push 0
call fcn.00441130
test eax, eax
js 0x42329f
mov ecx, edi
push 0
push 0
push 0x28
lea eax, [esp + 0x684]
push eax
push dword [esp + 0x4c]
push dword [esp + 0x4c]
call fcn.00441650
test eax, eax
js 0x42329f
mov ecx, edi
push 0
push 0
push 0x80
lea eax, [esp + 0x6c]
push eax
push dword [esp + 0x6ac]
push dword [esp + 0x6ac]
call fcn.00441650
test eax, eax
js 0x42329f
movzx eax, word [esp + 0xd2]
push eax
call fcn.00440940
add esp, 4
mov esi, eax
movzx eax, word [esp + 0xd2]
mov ecx, edi
push 0
push 0
push eax
push esi
push dword [esp + 0xec]
push dword [esp + 0xec]
call fcn.00441650
test eax, eax
js 0x423490
movzx edi, word [esp + 0x4a0]
mov dword [esp + 8], esi
mov dword [esp + 4], esi
test di, di
je 0x423307
lea ecx, [esp + 0x4a0]
mov edx, dword [esp + 8]
mov eax, edx
mov dword [esp + 4], edx
jmp 0x4232d8
mov edi, dword [ebp + 0x14]
push dword [esp + 0x20]
call fcn.004409c0
add esp, 4
mov eax, dword [esp + 0x14]
or eax, dword [esp + 0x10]
je 0x422fc0
cmp dword [esp + 0xc], 0
je 0x422fc0
jmp 0x4234b6
movzx edi, word [ecx]
test di, di
je 0x423307
movzx esi, word [eax]
test si, si
je 0x423489
add eax, 2
add ecx, 2
mov edx, dword [esp + 4]
add edx, 2
cmp si, di
je 0x4232fc
mov dword [esp + 4], edx
mov eax, edx
je 0x4232d0
lea ecx, [esp + 0x4a0]
jmp 0x4232d0
cmp dword [esp + 4], 0
je 0x423489
mov edi, dword [ebp + 0x14]
mov ecx, edi
push 0
push 0
push 0x20
lea eax, [esp + 0x62c]
push eax
push dword [esp + 0x6a4]
push dword [esp + 0x6a4]
call fcn.00441650
test eax, eax
js 0x42348c
mov eax, dword [esp + 0x690]
mov ecx, dword [esp + 0x694]
add eax, 0x10
mov dword [esp + 4], eax
adc ecx, 0
mov dword [esp + 0x2c], ecx
mov eax, dword [esp + 0x630]
mov edx, dword [esp + 0x634]
mov dword [esp + 0x504], edx
mov dword [esp + 0x500], eax
jmp 0x4233b1
cmp cx, dx
je 0x42345f
push edi
call fcn.004409c0
add esp, 4
mov eax, dword [esp + 0x500]
mov edx, dword [esp + 0x504]
mov ecx, edx
xor ecx, dword [esp + 0x2c]
mov esi, eax
xor esi, dword [esp + 4]
or esi, ecx
mov edi, dword [ebp + 0x14]
je 0x42348c
mov ecx, edi
push 0
push 0
push 0x68
lea esi, [esp + 0x50c]
push esi
push edx
push eax
call fcn.00441650
test eax, eax
js 0x42348c
movzx eax, word [esp + 0x55a]
push eax
call fcn.00440940
add esp, 4
mov ecx, edi
mov edi, eax
movzx eax, word [esp + 0x55a]
push 0
push 0
push eax
push edi
push dword [esp + 0x574]
push dword [esp + 0x574]
call fcn.00441650
test eax, eax
js 0x423383
xor eax, eax
mov ecx, dword [ebp + 0x10]
movzx ecx, word [ecx + eax]
lea edx, [ecx - 0x41]
cmp dx, 0x1a
jae 0x42342e
mov edx, ecx
xor edx, 0x20
add edx, ecx
and ecx, 0xffffffdf
sub edx, ecx
mov ecx, edx
movzx edx, word [edi + eax]
lea esi, [edx - 0x41]
cmp si, 0x1a
jae 0x423449
mov esi, edx
xor esi, 0x20
add esi, edx
and edx, 0xffffffdf
sub esi, edx
mov edx, esi
test cx, cx
je 0x42337a
add eax, 2
cmp cx, dx
je 0x423410
jmp 0x42337a
mov eax, dword [esp + 0x530]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x534]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x540]
mov dword [esp + 0xc], eax
push edi
call fcn.004409c0
add esp, 4
mov edi, dword [ebp + 0x14]
mov esi, dword [esp + 8]
push esi
call fcn.004409c0
add esp, 4
jmp 0x42329f
mov dword [esp + 0xc], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
push dword [esp + 0x1c]
call fcn.004409c0
add esp, 4
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov eax, dword [ebp + 0x18]
mov dword [eax], edx
mov dword [eax + 4], esi
mov eax, dword [ebp + 0x1c]
mov dword [eax], ecx
mov ecx, edi
call fcn.00440e10
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret