Function at 0x431300
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0xc8
mov eax, dword [section..data]
xor eax, esp
mov dword [esp + 0xc4], eax
push esi
mov esi, dword [ebp + 8]
shr esi, 5
push edi
mov dword [esp + 0x40], ecx
push pe_nt_image_headers32
lea eax, [esi + 6]
mov dword [esp + 0x94], edx
mov dword [ecx + 0x2d0], eax
lea eax, [eax*4 + 4]
mov dword [esp + 0x58], eax
lea eax, [ecx + 0x1e0]
xor ecx, ecx
mov dword [ebp + 8], esi
push ecx
push eax
mov dword [esp + 0x88], eax
mov dword [esp + 0x8c], ecx
call sub.VCRUNTIME140.dll_memset
xor edi, edi
add esp, 0xc
xorps xmm0, xmm0
mov dword [esp + 0x50], edi
movaps xmmword [esp + 0xb0], xmm0
cmp dword [esp + 0x54], edi
jbe 0x431e23
mov eax, esi
mov dword [esp + 0x78], 0x443470
neg eax
lea ecx, [esi - 1]
mov dword [esp + 0x3c], eax
cmp edi, esi
jae 0x4316a1
mov eax, dword [esp + 0x90]
mov ecx, dword [eax + edi*4]
movzx eax, byte [esp + 0xb7]
cdq
mov esi, eax
mov edi, edx
shld edi, esi, 8
movzx eax, byte [esp + 0xb6]
cdq
or edi, edx
shl esi, 8
or esi, eax
movzx eax, byte [esp + 0xb5]
shld edi, esi, 8
cdq
or edi, edx
shl esi, 8
or esi, eax
movzx eax, byte [esp + 0xb4]
shld edi, esi, 8
cdq
or edi, edx
shl esi, 8
or esi, eax
mov eax, ecx
shld edi, esi, 8
shr eax, 0x18
shl esi, 8
or esi, eax
mov eax, ecx
shld edi, esi, 8
shr eax, 0x10
movzx eax, al
cdq
or edi, edx
shl esi, 8
or esi, eax
mov eax, ecx
shld edi, esi, 8
shr eax, 8
movzx eax, al
cdq
or edi, edx
shl esi, 8
or esi, eax
movzx eax, cl
shld edi, esi, 8
cdq
or edi, edx
shl esi, 8
or esi, eax
mov dword [esp + 0xc], edi
movzx eax, byte [esp + 0xbf]
cdq
mov edi, eax
mov dword [esp + 0x10], esi
movzx eax, byte [esp + 0xbe]
mov ecx, edx
shld ecx, edi, 8
cdq
shl edi, 8
or ecx, edx
or edi, eax
movzx eax, byte [esp + 0xbd]
shld ecx, edi, 8
cdq
shl edi, 8
or ecx, edx
or edi, eax
movzx eax, byte [esp + 0xbc]
shld ecx, edi, 8
cdq
shl edi, 8
or ecx, edx
or edi, eax
movzx eax, byte [esp + 0xbb]
shld ecx, edi, 8
cdq
shl edi, 8
or edi, eax
or ecx, edx
movzx eax, byte [esp + 0xba]
shld ecx, edi, 8
cdq
or ecx, edx
shl edi, 8
or edi, eax
movzx eax, byte [esp + 0xb9]
shld ecx, edi, 8
cdq
or ecx, edx
shl edi, 8
or edi, eax
movzx eax, byte [esp + 0xb8]
cdq
shld ecx, edi, 8
or ecx, edx
shl edi, 8
mov edx, esi
mov dword [esp + 0x14], ecx
mov esi, dword [esp + 0xc]
or edi, eax
shrd edx, esi, 7
xor edx, dword [esp + 0x10]
shr esi, 7
and edx, 0xaa00aa
xor esi, dword [esp + 0xc]
mov eax, edx
and esi, 0xaa00aa
mov ecx, esi
shld ecx, eax, 7
xor ecx, esi
shl eax, 7
xor dword [esp + 0xc], ecx
xor eax, edx
xor dword [esp + 0x10], eax
mov edx, edi
mov esi, dword [esp + 0x14]
shrd edx, esi, 7
shr esi, 7
xor edx, edi
xor esi, dword [esp + 0x14]
and edx, 0xaa00aa
and esi, 0xaa00aa
mov eax, edx
mov ecx, esi
shld ecx, eax, 7
xor ecx, esi
shl eax, 7
mov esi, dword [esp + 0xc]
xor eax, edx
mov edx, dword [esp + 0x10]
xor edi, eax
xor dword [esp + 0x14], ecx
shrd edx, esi, 0xe
xor edx, dword [esp + 0x10]
shr esi, 0xe
and edx, 0xcccc
xor esi, dword [esp + 0xc]
mov eax, edx
and esi, 0xcccc
mov ecx, esi
shld ecx, eax, 0xe
xor ecx, esi
shl eax, 0xe
mov esi, dword [esp + 0x14]
xor eax, edx
xor dword [esp + 0x10], eax
mov edx, edi
xor dword [esp + 0xc], ecx
shrd edx, esi, 0xe
shr esi, 0xe
xor edx, edi
xor esi, dword [esp + 0x14]
and edx, 0xcccc
and esi, 0xcccc
mov eax, edx
mov ecx, esi
shld ecx, eax, 0xe
shl eax, 0xe
xor eax, edx
xor ecx, esi
mov edx, dword [esp + 0x10]
xor edi, eax
mov eax, dword [esp + 0xc]
mov esi, dword [esp + 0x14]
shrd edx, eax, 0x1c
xor esi, ecx
xor ecx, ecx
xor edx, dword [esp + 0x10]
and edx, 0xf0f0f0f0
mov eax, edx
shld ecx, eax, 0x1c
shl eax, 0x1c
xor ecx, 0
xor dword [esp + 0xc], ecx
xor eax, edx
xor dword [esp + 0x10], eax
mov edx, edi
mov eax, esi
xor ecx, ecx
shrd edx, eax, 0x1c
xor edx, edi
and edx, 0xf0f0f0f0
mov eax, edx
shld ecx, eax, 0x1c
shl eax, 0x1c
xor ecx, 0
xor esi, ecx
xor eax, edx
mov edx, dword [esp + 0x10]
xor edi, eax
mov dword [esp + 0x14], esi
mov esi, dword [esp + 0xc]
shrd edx, esi, 8
shr esi, 8
xor edx, edi
xor esi, dword [esp + 0x14]
and edx, 0xff00ff
and esi, 0xff00ff
mov eax, edx
mov ecx, esi
xor edi, edx
shld ecx, eax, 8
mov word [esp + 0x9e], di
xor dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x14]
shl eax, 8
xor ecx, esi
xor dword [esp + 0x10], eax
mov esi, dword [esp + 0xc]
mov eax, esi
mov edx, dword [esp + 0x10]
mov word [esp + 0x9c], dx
shrd edx, eax, 0x10
mov eax, ecx
mov word [esp + 0xa4], si
shrd edi, eax, 0x10
shr esi, 0x10
mov word [esp + 0xa6], cx
mov word [esp + 0xa0], dx
mov word [esp + 0xa8], si
mov word [esp + 0xa2], di
shr ecx, 0x10
jmp 0x431d47
lea edx, [ecx + eax]
mov eax, edx
and edx, 3
shr eax, 2
add eax, 0x1e
shl edx, 2
shl eax, 4
mov cx, dx
add eax, dword [esp + 0x40]
xor edx, edx
mov si, word [eax]
shr si, cl
mov di, word [eax + 0xa]
mov dword [esp + 0x10], esi
mov word [esp + 0x9c], si
mov si, word [eax + 2]
shr si, cl
mov dword [esp + 0x1c], esi
mov word [esp + 0x9e], si
mov si, word [eax + 4]
shr si, cl
mov dword [esp + 0x14], esi
mov word [esp + 0xa0], si
mov si, word [eax + 6]
shr si, cl
mov dword [esp + 0x24], esi
mov word [esp + 0xa2], si
mov si, word [eax + 8]
shr si, cl
mov dword [esp + 0x20], esi
mov word [esp + 0xa4], si
mov si, word [eax + 0xc]
mov ax, word [eax + 0xe]
shr ax, cl
shr si, cl
shr di, cl
mov ecx, dword [esp + 0x50]
mov dword [esp + 0xc], eax
mov word [esp + 0xaa], ax
mov eax, ecx
mov dword [esp + 0x18], esi
mov word [esp + 0xa8], si
mov esi, dword [ebp + 8]
div esi
mov word [esp + 0xa6], di
mov dword [esp + 0x98], edx
test edx, edx
je 0x431780
cmp esi, 8
jne 0x431c76
mov eax, ecx
and al, 7
cmp al, 4
jne 0x431c76
test edx, edx
jne 0x4317a7
movups xmm0, xmmword [esp + 0x9c]
movaps xmm1, xmm0
psrlw xmm0, 1
psllw xmm1, 3
orps xmm1, xmm0
andps xmm1, xmmword [0x448fa0]
movups xmmword [esp + 0x9c], xmm1
mov ecx, dword [esp + 0xa4]
mov eax, ecx
mov edi, dword [esp + 0xa0]
xor eax, edi
movzx eax, ax
mov dword [esp + 0x44], eax
mov esi, dword [esp + 0xaa]
mov eax, esi
mov edx, dword [esp + 0x9e]
xor eax, edx
movzx eax, ax
mov dword [esp + 0x1c], eax
mov eax, esi
xor eax, ecx
xor esi, edi
movzx eax, ax
mov dword [esp + 0x48], eax
movzx eax, si
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0xa6]
mov esi, dword [esp + 0xa8]
xor eax, esi
movzx eax, ax
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x9c]
xor eax, dword [esp + 0x18]
movzx eax, ax
xor ecx, eax
mov dword [esp + 0x10], eax
xor edx, dword [esp + 0x10]
movzx eax, cx
mov dword [esp + 0x70], eax
mov eax, dword [esp + 0x1c]
xor eax, dword [esp + 0x44]
movzx eax, ax
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0xaa]
xor eax, dword [esp + 0x10]
movzx eax, ax
mov dword [esp + 0x8c], eax
movzx eax, dx
mov edx, dword [esp + 0x9c]
mov dword [esp + 0x74], eax
xor eax, dword [esp + 0x38]
movzx eax, ax
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0xa2]
xor eax, dword [esp + 0x4c]
movzx eax, ax
xor edi, eax
xor esi, eax
movzx ecx, di
mov eax, edx
xor eax, ecx
mov dword [esp + 0x84], ecx
xor ecx, dword [esp + 0x18]
movzx eax, ax
mov dword [esp + 0x68], eax
movzx eax, cx
mov dword [esp + 0xc], eax
movzx edi, si
mov eax, edi
xor eax, dword [esp + 0x48]
movzx esi, ax
xor edx, esi
mov dword [esp + 0x88], esi
movzx eax, dx
mov dword [esp + 0x30], eax
mov eax, esi
xor eax, dword [esp + 0xc]
movzx edx, ax
mov eax, esi
xor eax, dword [esp + 0x18]
movzx ecx, ax
mov eax, dword [esp + 0x84]
and eax, dword [esp + 0x4c]
mov dword [esp + 0x20], ecx
and ecx, dword [esp + 0x1c]
movzx esi, ax
mov dword [esp + 0x58], edx
movzx eax, cx
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x88]
and eax, dword [esp + 0x48]
movzx ecx, ax
and edx, dword [esp + 0x44]
mov eax, dword [esp + 0xc]
xor edx, ecx
and eax, dword [esp + 0x38]
xor eax, ecx
movzx edx, dx
movzx ecx, ax
mov eax, dword [esp + 0x68]
and eax, dword [esp + 0x34]
xor eax, edx
xor eax, esi
xor eax, edi
movzx edi, ax
mov eax, dword [esp + 0x9c]
and eax, dword [esp + 0x70]
xor eax, ecx
xor eax, esi
mov esi, dword [esp + 0x28]
xor eax, dword [esp + 0xc]
xor eax, dword [esp + 0x38]
movzx eax, ax
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x74]
and eax, dword [esp + 0x10]
xor eax, edx
xor eax, esi
xor eax, dword [esp + 0x20]
xor eax, dword [esp + 0x1c]
movzx edx, ax
mov eax, dword [esp + 0x30]
and eax, dword [esp + 0x8c]
xor eax, dword [esp + 0xaa]
xor eax, ecx
mov dword [esp + 0x28], edx
xor eax, esi
and edx, edi
xor eax, dword [esp + 0x20]
movzx esi, ax
mov eax, dword [esp + 0x18]
xor eax, edi
movzx ecx, dx
movzx eax, ax
mov dword [esp + 0x2c], eax
mov eax, ecx
xor ecx, dword [esp + 0x18]
xor eax, esi
movzx edx, ax
mov eax, edx
and eax, dword [esp + 0x2c]
xor eax, dword [esp + 0x18]
movzx eax, ax
mov dword [esp + 0x24], eax
mov eax, esi
xor eax, dword [esp + 0x28]
and ecx, eax
xor ecx, esi
movzx eax, cx
mov dword [esp + 0x14], eax
xor eax, edx
and eax, esi
movzx ecx, ax
mov eax, ecx
xor ecx, edx
xor eax, dword [esp + 0x14]
xor eax, dword [esp + 0x28]
mov edx, dword [esp + 0x24]
and ecx, edx
xor ecx, dword [esp + 0x2c]
movzx edi, ax
movzx esi, cx
mov eax, esi
mov dword [esp + 0x64], edi
xor eax, edi
mov dword [esp + 0x60], esi
movzx eax, ax
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x14]
xor eax, edx
xor edi, dword [esp + 0x14]
movzx ecx, ax
mov eax, esi
xor eax, edx
mov dword [esp + 0x5c], ecx
movzx edx, ax
xor ecx, dword [esp + 0x18]
movzx eax, di
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x9c]
and eax, dword [esp + 0x14]
movzx eax, ax
mov dword [esp + 0x6c], eax
mov eax, edx
and eax, dword [esp + 0x20]
movzx edi, ax
mov eax, esi
and eax, dword [esp + 0x10]
movzx eax, ax
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x24]
and eax, dword [esp + 0x30]
movzx eax, ax
mov dword [esp + 0x30], eax
and edx, dword [esp + 0x1c]
movzx ecx, cx
mov eax, ecx
mov dword [esp + 0x94], edi
and eax, dword [esp + 0x58]
movzx esi, ax
mov eax, dword [esp + 0x64]
and eax, dword [esp + 0x34]
and ecx, dword [esp + 0x44]
movzx eax, ax
mov dword [esp + 0x34], eax
movzx eax, dx
mov edx, dword [esp + 0x5c]
mov dword [esp + 0x28], eax
mov eax, edx
and eax, dword [esp + 0x48]
movzx ecx, cx
xor eax, ecx
mov dword [esp + 0x58], ecx
movzx ecx, ax
mov eax, dword [esp + 0x60]
and eax, dword [esp + 0x74]
xor eax, dword [esp + 0x30]
movzx eax, ax
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x2c]
and eax, dword [esp + 0x84]
xor eax, edi
and edx, dword [esp + 0x88]
movzx edi, ax
xor edx, esi
xor edx, dword [esp + 0x94]
mov eax, edi
xor eax, dword [esp + 0x28]
xor eax, dword [esp + 0x6c]
movzx eax, ax
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x18]
and eax, dword [esp + 0xc]
mov dword [esp + 0x5c], ecx
xor ecx, dword [esp + 0x20]
movzx ecx, cx
xor eax, ecx
movzx edx, dx
xor eax, esi
movzx eax, ax
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x2c]
and eax, dword [esp + 0x4c]
xor eax, ecx
xor eax, dword [esp + 0x34]
movzx eax, ax
mov dword [esp + 0xc], eax
mov eax, edx
xor eax, dword [esp + 0x20]
movzx ecx, ax
mov esi, dword [esp + 0x64]
and esi, dword [esp + 0x68]
xor esi, dword [esp + 0xc]
xor dword [esp + 0xc], edx
mov edx, dword [esp + 0xc]
mov eax, dword [esp + 0x24]
and eax, dword [esp + 0x8c]
xor eax, dword [esp + 0x1c]
xor eax, dword [esp + 0x10]
movzx esi, si
mov word [esp + 0xaa], dx
mov edx, esi
xor esi, dword [esp + 0x30]
xor edx, edi
xor esi, dword [esp + 0x6c]
mov edi, dword [esp + 0x18]
and edi, dword [esp + 0x38]
mov dword [esp + 0x24], esi
mov word [esp + 0xa2], si
mov esi, dword [esp + 0x10]
xor esi, dword [esp + 0x60]
xor esi, dword [esp + 0x5c]
mov dword [esp + 0x20], edx
not esi
mov word [esp + 0xa4], dx
mov edx, dword [esp + 0x14]
and edx, dword [esp + 0x70]
movzx eax, ax
xor edi, eax
mov dword [esp + 0x10], esi
mov word [esp + 0x9c], si
xor edx, eax
mov esi, dword [esp + 0x1c]
xor edi, ecx
xor esi, dword [esp + 0x60]
mov eax, dword [esp + 0x20]
xor esi, dword [esp + 0x28]
xor eax, ecx
xor edi, dword [esp + 0x58]
not esi
xor edx, dword [esp + 0x34]
not eax
cmp dword [esp + 0x98], 0
not edi
mov dword [esp + 0x14], edx
mov word [esp + 0xa0], dx
mov dword [esp + 0x1c], esi
mov word [esp + 0x9e], si
mov word [esp + 0xa6], di
mov dword [esp + 0x18], eax
mov word [esp + 0xa8], ax
jne 0x431c76
mov eax, dword [esp + 0x78]
mov dh, byte [eax]
inc eax
mov dword [esp + 0x78], eax
xor eax, eax
nop dword [eax]
mov cl, al
mov dl, dh
shr dl, cl
and dl, 1
movzx ecx, dl
xor word [esp + eax*2 + 0x9c], cx
inc eax
cmp eax, 8
jb 0x431c00
mov ax, word [esp + 0xaa]
mov di, word [esp + 0xa6]
mov dword [esp + 0xc], eax
mov ax, word [esp + 0xa8]
mov dword [esp + 0x18], eax
mov ax, word [esp + 0xa4]
mov dword [esp + 0x20], eax
mov ax, word [esp + 0xa2]
mov dword [esp + 0x24], eax
mov ax, word [esp + 0xa0]
mov dword [esp + 0x14], eax
mov ax, word [esp + 0x9e]
mov dword [esp + 0x1c], eax
mov ax, word [esp + 0x9c]
mov dword [esp + 0x10], eax
mov edx, dword [esp + 0x3c]
mov esi, edx
shr esi, 2
and edx, 3
add esi, 0x1e
shl edx, 2
shl esi, 4
mov cx, dx
add esi, dword [esp + 0x40]
movzx eax, word [esi]
shr ax, cl
mov ecx, dword [esp + 0x10]
xor cx, ax
movzx eax, word [esi + 2]
mov word [esp + 0x9c], cx
mov cx, dx
shr ax, cl
mov ecx, dword [esp + 0x1c]
xor cx, ax
movzx eax, word [esi + 4]
mov word [esp + 0x9e], cx
mov cx, dx
shr ax, cl
mov ecx, dword [esp + 0x14]
xor cx, ax
movzx eax, word [esi + 6]
mov word [esp + 0xa0], cx
mov cx, dx
shr ax, cl
mov ecx, dword [esp + 0x24]
xor cx, ax
movzx eax, word [esi + 8]
mov word [esp + 0xa2], cx
mov cx, dx
shr ax, cl
mov ecx, dword [esp + 0x20]
xor cx, ax
movzx eax, word [esi + 0xa]
mov word [esp + 0xa4], cx
mov cx, dx
shr ax, cl
xor di, ax
movzx eax, word [esi + 0xc]
shr ax, cl
mov ecx, dword [esp + 0x18]
xor cx, ax
mov word [esp + 0xa6], di
movzx eax, word [esi + 0xe]
mov word [esp + 0xa8], cx
mov cx, dx
shr ax, cl
mov ecx, dword [esp + 0xc]
xor cx, ax
mov esi, dword [esp + 0x7c]
mov edx, dword [esp + 0x80]
mov eax, dword [esp + 0x9c]
and eax, 0xf
mov word [esp + 0xaa], cx
mov ecx, edx
mov edi, dword [esp + 0x50]
shl ax, cl
inc edi
or word [esi], ax
mov eax, dword [esp + 0x9e]
and eax, 0xf
inc dword [esp + 0x3c]
shl ax, cl
or word [esi + 2], ax
mov eax, dword [esp + 0xa0]
and eax, 0xf
mov dword [esp + 0x50], edi
shl ax, cl
or word [esi + 4], ax
mov eax, dword [esp + 0xa2]
and eax, 0xf
shl ax, cl
or word [esi + 6], ax
mov eax, dword [esp + 0xa4]
and eax, 0xf
shl ax, cl
or word [esi + 8], ax
mov eax, dword [esp + 0xa6]
and eax, 0xf
shl ax, cl
or word [esi + 0xa], ax
mov eax, dword [esp + 0xa8]
and eax, 0xf
shl ax, cl
or word [esi + 0xc], ax
mov eax, dword [esp + 0xaa]
and eax, 0xf
shl ax, cl
or word [esi + 0xe], ax
cmp edx, 0xc
lea eax, [esi + 0x10]
cmovne eax, esi
mov esi, dword [ebp + 8]
xor ecx, ecx
mov dword [esp + 0x7c], eax
cmp edx, 0xc
lea eax, [edx + 4]
cmovne ecx, eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x80], ecx
lea ecx, [esi - 1]
cmp edi, dword [esp + 0x54]
jb 0x431397
lea eax, [esp + 0xb0]
push 0x10
push eax
mov eax, dword [fcn.0040ae20]
call eax
lea eax, [esp + 0xa4]
xorps xmm0, xmm0
push 0x10
push eax
mov eax, dword [fcn.0040ae20]
movups xmmword [esp + 0xac], xmm0
call eax
mov edx, dword [esp + 0x64]
add esp, 0x10
shr edx, 2
shl edx, 3
cmp edx, 8
jbe 0x431e8f
mov esi, dword [esp + 0x40]
lea edi, [edx - 9]
shr edi, 3
inc edi
lea ecx, [esi + 0x1f2]
not word [ecx - 2]
lea ecx, [ecx + 0x10]
not word [ecx - 0x10]
not word [ecx - 8]
not word [ecx - 6]
sub edi, 1
jne 0x431e73
xor ecx, ecx
jmp 0x431e99
xor ecx, ecx
test edx, edx
je 0x431eb4
mov esi, dword [esp + 0x40]
lea edi, [esi + 0x1e0]
nop
movzx eax, word [edi]
lea edi, [edi + 2]
imul eax, eax, 0x10001
mov dword [esi + ecx*4], eax
inc ecx
cmp ecx, edx
jb 0x431ea0
mov ecx, dword [esp + 0xcc]
pop edi
pop esi
xor ecx, esp
call fcn.0043505d
mov esp, ebp
pop ebp
ret