Function at 0x422840
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x88
mov eax, dword [esp + 0xa4]
mov edx, dword [esp + 0xa0]
mov ecx, dword [eax + 4]
mov eax, 0xfffffffe
cmp word [ecx + eax + 2], 0
lea eax, [eax + 2]
jne 0x422860
mov ecx, 0xfffffffe
cmp word [edx + ecx + 2], 0
lea ecx, [ecx + 2]
jne 0x422870
sar eax, 1
sar ecx, 1
lea edx, [eax + ecx]
add edx, 0x3f
test edx, edx
jns 0x422890
mov eax, 0xffffffff
jmp 0x422899
add eax, ecx
lea eax, [eax*2 + 0x7e]
push eax
call fcn.004087e0
add esp, 4
mov dword [esp], eax
mov dword [esp + 0x48], 0x71990fb2
mov dword [esp + 0x4c], 0x75d573e5
mov dword [esp + 0x50], 0x793377e6
mov dword [esp + 0x54], 0x7dd47be9
mov dword [esp + 0x58], 0x61d97fe8
mov dword [esp + 0x5c], 0x65f663f8
mov dword [esp + 0x60], 0x69c2672f
mov dword [esp + 0x64], 0x6d3e6b37
mov dword [esp + 0x68], 0x51356f3e
mov dword [esp + 0x6c], 0x55095304
mov dword [esp + 0x70], 0x590f5702
mov dword [esp + 0x74], 0x5d015b0a
mov dword [esp + 0x78], 0x41e25f0b
mov dword [esp + 0x7c], 0x45e643eb
mov dword [esp + 0x80], 0x494647e6
mov byte [esp + 0x84], 0
xor eax, eax
mov ecx, 0x42
nop
movzx edx, byte [esp + eax + 0x48]
mov edi, edx
not edi
or edi, ecx
lea edi, [edx + edi*2]
lea ebp, [eax + edi]
lea ebx, [eax + edi]
add ebx, 0xa60635bf
mov edx, ebx
and edx, 0xc1e0f34c
and ebx, 2
mov esi, ebx
xor esi, 2
imul esi, edx
or edx, 2
imul edx, ebx
add edx, esi
lea esi, [ebp*2 + 0x4c0c6b7e]
and esi, 0x83c1e69c
sub edi, esi
lea esi, [eax + edi]
add esi, 0x67e7290d
mov edi, edx
and edi, esi
xor edx, esi
lea edx, [edx + edi*2]
inc dl
mov byte [esp + eax + 0x48], dl
inc eax
dec ecx
cmp eax, 0x3d
jne 0x422930
mov dword [esp + 4], 0xd1bbcf90
mov dword [esp + 8], 0xd5a3d3a4
mov dword [esp + 0xc], 0xd9b5d7a6
mov dword [esp + 0x10], 0xddbddbb1
mov dword [esp + 0x14], 0xe1badf80
mov dword [esp + 0x18], 0xe584e387
mov dword [esp + 0x1c], 0xe991e787
mov dword [esp + 0x20], 0xed9eeb84
mov dword [esp + 0x24], 0xf181efb0
mov dword [esp + 0x28], 0xf588f381
mov dword [esp + 0x2c], 0xf991f7db
mov dword [esp + 0x30], 0xfd8efb80
mov dword [esp + 0x34], 0x190ff9b
mov dword [esp + 0x38], 0x5690375
mov dword [esp + 0x3c], 0x9680775
mov dword [esp + 0x40], 0xd270b25
mov dword [esp + 0x44], 0x110e0f21
mov eax, 0x686286cd
mov ecx, 0x979d7933
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx esi, byte [esp + eax - 0x686286c9]
mov edx, eax
and edx, esi
lea edi, [ecx + edx*2]
add edx, edx
xor edi, esi
not edx
add edx, eax
and edx, esi
add edx, edx
sub edx, edi
dec dl
mov byte [esp + eax - 0x686286c9], dl
inc eax
dec ecx
cmp eax, 0x68628711
jne 0x422a30
mov edi, dword [esp + 0xa4]
mov ecx, dword [edi + 4]
movzx edx, word [ecx]
mov esi, dword [esp]
mov eax, esi
test dx, dx
je 0x422a91
add ecx, 2
mov eax, esi
nop
nop
nop
nop
nop
mov word [eax], dx
add eax, 2
movzx edx, word [ecx]
add ecx, 2
test dx, dx
jne 0x422a80
mov word [eax], 0
movzx ecx, word [esp + 4]
test cx, cx
je 0x422ac1
lea edx, [esp + 6]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x422ab0
mov word [eax], 0
mov edx, dword [esp + 0xa0]
movzx ecx, word [edx]
test cx, cx
je 0x422af1
add edx, 2
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x422ae0
mov word [eax], 0
movzx ecx, word [esp + 0x48]
test cx, cx
je 0x422b21
lea edx, [esp + 0x4a]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x422b10
mov word [eax], 0
mov eax, dword [esp + 0xa8]
mov ebx, dword [eax]
mov eax, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp word [ebx + eax + 2], 0
lea eax, [eax + 2]
jne 0x422b40
sar eax, 1
mov edx, dword [edi]
mov ecx, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp word [edx + ecx + 2], 0
lea ecx, [ecx + 2]
jne 0x422b60
sar ecx, 1
lea esi, [eax + ecx]
lea edx, [eax + ecx]
add edx, 0xa
lea ecx, [esi*2 + 0x14]
xor edx, 1
mov edi, dword [edi + 8]
mov eax, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
nop
cmp word [edi + eax + 2], 0
lea eax, [eax + 2]
jne 0x422b90
and ecx, 2
add ecx, edx
sar eax, 1
add eax, ecx
jns 0x422bad
mov eax, 0xffffffff
jmp 0x422baf
add eax, eax
push eax
call fcn.004087e0
add esp, 4
mov edi, eax
mov dword [esp + 4], 0x51ad4f95
mov dword [esp + 8], 0x55be53bc
mov dword [esp + 0xc], 0x59a257b3
mov dword [esp + 0x10], 0x5d6b5bad
mov dword [esp + 0x14], 0x5f5c
lea eax, [esp + 4]
mov ecx, 0x7766b7f2
nop
nop
nop
nop
nop
movzx edx, byte [eax]
mov esi, ecx
or esi, edx
lea ebp, [ecx - 0x7766b700]
and ebp, edx
xor ebp, esi
lea edx, [ebp*2]
not edx
add edx, ebp
add dl, 0xbf
mov byte [eax], dl
inc eax
dec ecx
cmp ecx, 0x7766b7de
jne 0x422bf0
movzx ecx, word [esp + 4]
mov eax, edi
test cx, cx
je 0x422c41
lea edx, [esp + 6]
mov eax, edi
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x422c30
mov word [eax], 0
movzx ecx, word [ebx]
test cx, cx
mov esi, dword [esp + 0xa4]
je 0x422c71
add ebx, 2
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [ebx]
add ebx, 2
test cx, cx
jne 0x422c60
mov word [eax], 0x5f
add eax, 2
mov ecx, dword [esi]
movzx edx, word [ecx]
test dx, dx
je 0x422ca1
add ecx, 2
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], dx
add eax, 2
movzx edx, word [ecx]
add ecx, 2
test dx, dx
jne 0x422c90
mov word [eax], 0x5f
add eax, 2
mov ecx, dword [esi + 8]
movzx edx, word [ecx]
test dx, dx
je 0x422cd1
add ecx, 2
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], dx
add eax, 2
movzx edx, word [ecx]
add ecx, 2
test dx, dx
jne 0x422cc0
mov word [eax], 0
mov dword [esp + 4], 0x5756497e
xor eax, eax
movzx edx, byte [esp + eax + 4]
lea ecx, [eax + 0x80f58e]
mov esi, 0x7f7f0a71
sub esi, eax
and esi, 0x580e0225
and ecx, 0x80f19a
or ecx, esi
xor ecx, edx
xor ecx, 0x580e0625
lea edx, [ecx + ecx]
mov esi, edx
not esi
and esi, 2
or edx, 0xfd
add edx, ecx
add edx, esi
add dl, 0x3b
mov byte [esp + eax + 4], dl
mov ecx, eax
xor ecx, 0xfffffffe
or eax, 1
and ecx, eax
add eax, ecx
cmp eax, 4
jb 0x422ce0
lea eax, [esp + 4]
push 0
push 1
push 0
push eax
mov esi, dword [esp + 0x10]
push esi
push edi
push dword [esp + 0xb4]
call fcn.00422ff0
add esp, 0x1c
mov ebx, eax
jmp dword [0x4480d4]