Function at 0x448200
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x84
push ebp
mov ebp, ecx
mov eax, dword [ebp + 0x228]
test eax, eax
mov dword [esp + 0x1c], ebp
jne 0x448250
mov eax, dword [esp + 0x9c]
mov ecx, dword [esp + 0x98]
mov edx, dword [esp + 0x94]
push eax
mov eax, dword [esp + 0x94]
push ecx
mov ecx, dword [esp + 0x94]
push edx
push eax
push ecx
mov ecx, ebp
call fcn.0045a9e0
pop ebp
add esp, 0x84
ret 0x14
mov ecx, dword [esp + 0x9c]
mov edx, dword [ecx + 0x228]
test edx, edx
jne 0x448266
mov eax, dword [ecx + 0x78]
jmp 0x44826c
mov eax, dword [ecx + 0x1c0]
test edx, edx
push esi
jne 0x448276
mov esi, dword [ecx + 0x7c]
jmp 0x44827c
mov esi, dword [ecx + 0x1bc]
mov ecx, dword [esp + 0x98]
shl eax, 0x10
xor edx, edx
div ecx
push ebx
xor edx, edx
push edi
mov edi, dword [ebp + 0x1c0]
mov dword [esp + 0x4c], edi
mov edi, dword [ebp + 0x1bc]
mov dword [esp + 0x54], ecx
mov dword [esp + 0x7c], ecx
mov dword [esp + 0x8c], ecx
mov ecx, ebp
mov dword [esp + 0x50], edi
mov ebx, eax
mov eax, esi
mov esi, dword [esp + 0xa4]
shl eax, 0x10
div esi
mov edx, dword [esp + 0x9c]
mov dword [esp + 0x48], edx
mov dword [esp + 0x78], edx
lea edx, [esp + 0x44]
push edx
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x5c], esi
mov dword [esp + 0x84], esi
mov dword [esp + 0x94], esi
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x9c]
mov dword [esp + 0x48], eax
mov dword [esp + 0x78], eax
xor eax, eax
mov dword [esp + 0x88], eax
mov dword [esp + 0x8c], eax
call fcn.004469b0
test eax, eax
jne 0x44832b
pop edi
pop ebx
pop esi
mov eax, 3
pop ebp
add esp, 0x84
ret 0x14
mov eax, dword [esp + 0x64]
mov esi, dword [esp + 0x68]
imul eax, ebx
imul esi, dword [esp + 0x2c]
mov ecx, ebp
mov dword [esp + 0x30], eax
call fcn.00446eb0
mov edi, dword [esp + 0xa8]
mov ecx, edi
mov ebx, eax
call fcn.00446eb0
test ebx, ebx
mov dword [esp + 0x34], eax
jne 0x448370
pop edi
pop ebx
pop esi
mov eax, 1
pop ebp
add esp, 0x84
ret 0x14
test eax, eax
jne 0x448386
pop edi
pop ebx
pop esi
mov eax, 2
pop ebp
add esp, 0x84
ret 0x14
mov eax, dword [ebp + 0x228]
cmp eax, 0x378
ja 0x4486dc
je 0x4485b2
sub eax, 0x22b
je 0x4484b9
sub eax, 0xa
jne 0x4487e8
mov ecx, ebp
call fcn.004424e0
mov ecx, dword [esp + 0xa8]
cdq
sub eax, edx
mov edi, eax
sar edi, 1
call fcn.004424e0
mov ebp, dword [esp + 0x60]
mov ecx, dword [esp + 0x70]
cdq
sub eax, edx
sar eax, 1
mov dword [esp + 0x14], eax
mov eax, edi
imul eax, ebp
add ecx, ebp
cmp ebp, ecx
lea eax, [ebx + eax*2]
jge 0x4487e4
mov ebx, dword [esp + 0x5c]
mov edx, dword [esp + 0x6c]
add edx, ebx
add edi, edi
sub ecx, ebp
mov dword [esp + 0x24], edx
mov dword [esp + 0x20], edi
mov dword [esp + 0x10], esi
mov dword [esp + 0x18], ecx
lea esp, [esp]
mov ecx, dword [esp + 0x34]
shr esi, 0x10
imul esi, dword [esp + 0x14]
cmp ebx, edx
lea ecx, [ecx + esi*2]
mov dword [esp + 0x1c], ecx
mov esi, ebx
jge 0x448491
mov ebx, dword [esp + 0x30]
lea ecx, [ecx]
movzx edx, word [eax + esi*2]
mov edi, dword [esp + 0x1c]
mov ecx, ebx
shr ecx, 0x10
movzx edi, word [edi + ecx*2]
mov ecx, edi
xor ecx, edx
shr ecx, 1
and ecx, 0x7bef
mov ebp, edi
and ebp, edx
add ecx, ebp
shr ecx, 4
and ecx, 0x841
add ecx, 0x801
shr ecx, 1
and ecx, 0x821
add ecx, 0x7bef
xor ecx, 0x7bef
sub edx, ecx
add edx, edi
or edx, ecx
mov word [eax + esi*2], dx
add ebx, dword [esp + 0x38]
mov edx, dword [esp + 0x24]
inc esi
cmp esi, edx
jl 0x448430
mov ebx, dword [esp + 0x5c]
mov esi, dword [esp + 0x10]
mov ebp, dword [esp + 0x2c]
mov edi, dword [esp + 0x20]
mov ecx, dword [esp + 0x18]
add esi, ebp
add eax, edi
dec ecx
mov dword [esp + 0x10], esi
mov dword [esp + 0x18], ecx
jne 0x448410
jmp 0x4487e4
mov ecx, ebp
call fcn.004424e0
mov ecx, dword [esp + 0xa8]
cdq
sub eax, edx
mov edi, eax
sar edi, 1
call fcn.004424e0
cdq
sub eax, edx
mov edx, dword [esp + 0x70]
sar eax, 1
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x60]
lea ecx, [edx + eax]
cmp eax, ecx
jge 0x4487e8
mov ebp, dword [esp + 0x5c]
mov edx, dword [esp + 0x6c]
mov dword [esp + 0x10], esi
lea esi, [edi + edi]
imul edi, eax
add edx, ebp
sub ecx, eax
mov dword [esp + 0x1c], edx
mov dword [esp + 0x24], esi
lea ebx, [ebx + edi*2]
mov dword [esp + 0x18], ecx
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x34]
shr eax, 0x10
imul eax, dword [esp + 0x20]
cmp ebp, edx
lea eax, [ecx + eax*2]
mov dword [esp + 0x14], eax
mov esi, ebp
jge 0x44858a
mov eax, dword [esp + 0x30]
mov edx, dword [esp + 0x14]
xor edi, edi
mov di, word [ebx + esi*2]
mov ecx, eax
shr ecx, 0x10
movzx ecx, word [edx + ecx*2]
mov ebp, ecx
mov edx, ecx
and edx, edi
xor ebp, edi
and ebp, 0x7bde
lea edx, [ebp + edx*2]
shr edx, 5
and edx, 0x421
add edx, 0x3def
xor edx, 0x3def
sub ecx, edx
add ecx, edi
or ecx, edx
add eax, dword [esp + 0x38]
mov edx, dword [esp + 0x1c]
mov word [ebx + esi*2], cx
inc esi
cmp esi, edx
jl 0x448535
mov ebp, dword [esp + 0x5c]
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x10]
mov esi, dword [esp + 0x24]
add ecx, eax
mov eax, dword [esp + 0x18]
add ebx, esi
dec eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x18], eax
jne 0x448514
jmp 0x4487e4
mov ecx, ebp
call fcn.004424e0
mov ecx, edi
mov dword [esp + 0x24], eax
call fcn.004424e0
mov edi, dword [esp + 0x60]
mov ecx, dword [esp + 0x70]
add ecx, edi
cmp edi, ecx
mov dword [esp + 0x20], eax
jge 0x4487e8
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0x5c]
add eax, edx
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x24]
imul eax, edi
add eax, ebx
sub ecx, edi
mov dword [esp + 0x10], esi
mov dword [esp + 0x1c], eax
mov dword [esp + 0x14], ecx
nop
mov esi, dword [esp + 0x10]
mov edi, dword [esp + 0x34]
shr esi, 0x10
imul esi, dword [esp + 0x20]
add esi, edi
mov edi, dword [esp + 0x3c]
cmp edx, edi
jge 0x4486b0
mov ebp, dword [esp + 0x30]
lea ecx, [eax + edx*2]
mov eax, edi
sub eax, edx
lea ecx, [edx + ecx + 2]
mov dword [esp + 0x18], eax
movzx edi, byte [ecx - 2]
movzx ebx, byte [ecx - 1]
mov edx, ebp
shr edx, 0x10
lea eax, [edx + edx*2]
movzx edx, byte [eax + esi]
add edx, edi
movzx edi, byte [esi + eax + 1]
movzx eax, byte [esi + eax + 2]
add edi, ebx
movzx ebx, byte [ecx]
add eax, ebx
cmp edx, 0xff
mov dword [esp + 0x40], edi
jl 0x448669
mov edx, 0xff
cmp edi, 0xff
jl 0x448678
mov ebx, 0xff
jmp 0x44867c
mov bl, byte [esp + 0x40]
cmp eax, 0xff
jl 0x448688
mov eax, 0xff
mov byte [ecx - 2], dl
mov edx, dword [esp + 0x38]
mov byte [ecx], al
mov eax, dword [esp + 0x18]
mov byte [ecx - 1], bl
add ecx, 3
add ebp, edx
dec eax
mov dword [esp + 0x18], eax
jne 0x448631
mov eax, dword [esp + 0x1c]
mov edx, dword [esp + 0x5c]
mov ebp, dword [esp + 0x28]
mov ecx, dword [esp + 0x2c]
mov esi, dword [esp + 0x10]
mov edi, dword [esp + 0x24]
add esi, ecx
mov ecx, dword [esp + 0x14]
add eax, edi
dec ecx
mov dword [esp + 0x1c], eax
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], ecx
jne 0x448600
jmp 0x4487e8
cmp eax, 0x22b8
jne 0x4487e8
mov ecx, ebp
call fcn.004424e0
mov ecx, dword [esp + 0xa8]
cdq
and edx, 3
add eax, edx
mov edi, eax
sar edi, 2
call fcn.004424e0
cdq
and edx, 3
add eax, edx
mov edx, dword [esp + 0x70]
sar eax, 2
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x60]
lea ecx, [edx + eax]
cmp eax, ecx
jge 0x4487e8
mov ebp, dword [esp + 0x5c]
mov edx, dword [esp + 0x6c]
mov dword [esp + 0x10], esi
lea esi, [edi*4]
imul edi, eax
add edx, ebp
sub ecx, eax
mov dword [esp + 0x20], edx
mov dword [esp + 0x1c], esi
lea ebx, [ebx + edi*4]
mov dword [esp + 0x14], ecx
mov edi, edi
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x34]
shr eax, 0x10
imul eax, dword [esp + 0x40]
cmp ebp, edx
lea eax, [ecx + eax*4]
mov dword [esp + 0x3c], eax
mov esi, ebp
jge 0x4487c1
mov eax, dword [esp + 0x30]
mov edi, dword [ebx + esi*4]
mov edx, dword [esp + 0x3c]
mov ecx, eax
shr ecx, 0x10
mov edx, dword [edx + ecx*4]
mov ecx, edx
xor ecx, edi
shr ecx, 1
mov ebp, edx
and ecx, 0x7f7f7f7f
and ebp, edi
add ecx, ebp
shr ecx, 7
and ecx, 0x1010101
add ecx, 0x7f7f7f7f
xor ecx, 0x7f7f7f7f
sub edx, ecx
add edx, edi
or edx, ecx
mov dword [ebx + esi*4], edx
add eax, dword [esp + 0x38]
mov edx, dword [esp + 0x20]
inc esi
cmp esi, edx
jl 0x448771
mov ebp, dword [esp + 0x5c]
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x10]
mov esi, dword [esp + 0x1c]
add ecx, eax
mov eax, dword [esp + 0x14]
add ebx, esi
dec eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], eax
jne 0x448750
mov ebp, dword [esp + 0x28]
mov eax, dword [ebp + 0x228]
test eax, eax
mov esi, 0x4000
jne 0x448800
mov ecx, ebp
call fcn.0045a3d0
jmp 0x44881a
cmp dword [ebp + 0x1ac], esi
jne 0x44881a
mov ebp, dword [ebp + 0x18c]
mov ecx, dword [ebp]
push 0
push ebp
call dword [ecx + 0x80]
mov ecx, dword [esp + 0xa8]
mov eax, dword [ecx + 0x228]
test eax, eax
jne 0x44883f
call fcn.0045a3d0
pop edi
pop ebx
pop esi
xor eax, eax
pop ebp
add esp, 0x84
ret 0x14
cmp dword [ecx + 0x1ac], esi
jne 0x448858
mov eax, dword [ecx + 0x18c]
mov edx, dword [eax]
push 0
push eax
call dword [edx + 0x80]
pop edi
pop ebx
pop esi
xor eax, eax
pop ebp
add esp, 0x84
ret 0x14