Function at 0x441e30
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x294
mov ebx, dword [esp + 0x2b4]
mov dword [esp + 0x8f], 0xe48040
mov dword [esp + 0x8c], 0x4010ec83
mov dword [esp + 0x88], 0x48e78948
mov dword [esp + 0x84], 0xce8948fc
mov dword [esp + 0x17], 0xc3fc8948
mov dword [esp + 0x14], 0x48d2ff41
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0xfffffff1
mov dword [esp + 8], 0xba49c031
lea edi, [esp + 0x94]
lea eax, [esp + 0x84]
mov ecx, 3
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
lea edi, [esp + 0xa0]
lea eax, [esp + 0x90]
mov ecx, 1
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
movzx eax, byte [esp + 0x92]
mov byte [esp + 0xa2], al
mov esi, ebx
cmp ebx, 4
jb 0x441edf
mov esi, 4
lea edx, [esp + 0xa3]
test ebx, ebx
je 0x442083
xor ebp, ebp
jmp 0x441f2a
mov eax, 0x44703b
mov edi, edx
mov ecx, 1
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
add edx, 4
mov eax, 0x44703f
xor ecx, ecx
mov edi, edx
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
inc ebp
cmp esi, ebp
je 0x441fa9
cmp ebp, 3
ja case.default.0x441f2f
jmp dword [ebp*4 + 0x446b00]
mov eax, 0x447040
xor ecx, ecx
mov edi, edx
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
mov eax, 0x447040
mov edi, edx
mov ecx, 1
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
mov byte [edx + 2], 0xe
add edx, 3
jmp case.default.0x441f2f
mov eax, 0x447036
mov edi, edx
mov ecx, 1
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
add edx, 4
mov eax, 0x44703a
xor ecx, ecx
mov edi, edx
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
jmp case.default.0x441f2f
mov eax, 0x447044
mov edi, edx
mov ecx, 1
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
add edx, 4
mov eax, 0x447048
xor ecx, ecx
mov edi, edx
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
jmp case.default.0x441f2f
cmp ebx, 3
jbe 0x442083
test bl, 1
je 0x441fda
mov eax, 0x44704d
mov esi, 0x44704d
mov edi, edx
xor ecx, ecx
xchg esi, esi
rep movsd dword es:[edi], dword [esi]
xchg esi, esi
mov ecx, 1
mov edi, edx
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
add edx, 2
mov word [esp + 4], 0x50
mov dword [esp], 0x20468b48
mov byte [esp + 0x2c], 0
mov dword [esp + 0x28], 0x50000000
mov dword [esp + 0x24], 0x80868b48
lea eax, [ebx*8]
cmp eax, 0x7ffffffe
ja 0x442459
dec ebx
cmp ebx, 4
jb 0x442083
add eax, 0xfffffff8
lea ebp, [esp + 0x24]
jmp 0x44204e
mov dword [esp + 0x27], eax
mov esi, ebp
mov edi, edx
mov ecx, 2
xchg esi, esi
rep movsd dword es:[edi], dword [esi]
xchg esi, esi
add edx, 8
lea esi, [esp + 0x2c]
xor ecx, ecx
mov edi, edx
xchg esi, esi
rep movsw word es:[edi], word [esi]
xchg esi, esi
dec ebx
add eax, 0xfffffff8
cmp ebx, 3
jbe 0x442083
cmp eax, 0x7e
ja 0x442020
mov byte [esp + 3], al
mov esi, esp
mov edi, edx
mov ecx, 1
xchg esi, esi
rep movsd dword es:[edi], dword [esi]
xchg esi, esi
lea edi, [edx + 4]
lea esi, [esp + 4]
xor ecx, ecx
xchg esi, esi
rep movsw word es:[edi], word [esi]
xchg esi, esi
movzx ecx, byte [esp + 4]
mov byte [edx + 4], cl
add edx, 5
jmp 0x442045
mov ebx, dword [esp + 0x2ac]
mov eax, dword [esp + 0x2a8]
mov esi, 0x447031
mov edi, edx
mov ecx, 1
xchg esi, esi
rep movsd dword es:[edi], dword [esi]
xchg esi, esi
lea esi, [edx + 4]
mov ebp, 0x447035
mov edi, esi
xor ecx, ecx
xchg esi, ebp
rep movsw word es:[edi], word [esi]
xchg esi, ebp
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], eax
lea eax, [esp + 8]
mov edi, esi
mov ecx, 4
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
lea edi, [edx + 0x14]
lea eax, [esp + 0x18]
mov ecx, 1
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
movzx eax, byte [esp + 0x1a]
mov byte [edx + 0x16], al
lea ecx, [esp + 0x94]
mov eax, ecx
neg eax
lea ebx, [edx + eax]
add ebx, 0x17
sub edx, ecx
mov dword [esp], 0
add edx, 0x71
mov dword [esp + 0x80], edx
mov dword [esp + 0x24], 0x787b7a05
mov word [esp + 0x28], 0
mov byte [esp + 0x2a], 0
mov eax, 0x6ce591bf
mov ecx, 0x40
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [esp + eax - 0x6ce5919b]
mov esi, ecx
and esi, 0x6e
mov edi, eax
xor edi, 0xafaef46e
or edi, esi
xor edi, edx
mov edx, edi
and edx, 1
xor edi, 0x6f
lea edx, [edi + edx*2]
add dl, 0x44
mov byte [esp + eax - 0x6ce5919b], dl
inc eax
dec ecx
cmp eax, 0x6ce591c6
jne 0x442130
mov eax, dword [esp + 0x24]
mov ecx, dword [0x44f228]
test ecx, ecx
mov dword [esp + 0x1c], ebx
je 0x4421d9
xor edx, edx
mov esi, dword [0x44f22c]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp dword [esi + edx*8], 0x3e416e49
je 0x4421aa
mov edi, edx
and edi, 1
xor edx, 1
lea edx, [edx + edi*2]
cmp edx, ecx
jb 0x442190
jmp 0x4421d9
mov ecx, dword [esi + edx*8 + 4]
cmp ecx, eax
je 0x4421d9
lea eax, [esp + 0x80]
mov edx, esp
push 0x40
push 0x3000
push eax
push 0
push edx
push 0xffffffffffffffff
push 6
push dword [0x44f230]
push ecx
call fcn.004400f0
add esp, 0x24
test eax, eax
js 0x442420
mov dword [esp + 0x24], 0xcf791ccb
mov dword [esp + 0x28], 0xa5ed16c9
mov dword [esp + 0x2c], 0x41aae829
mov dword [esp + 0x30], 0x555a5b58
mov dword [esp + 0x34], 0x8b162afc
mov dword [esp + 0x38], 0x36aa472d
mov dword [esp + 0x3c], 0xb58c766e
mov dword [esp + 0x40], 0x454a4b85
mov dword [esp + 0x44], 0xb75e453f
mov dword [esp + 0x48], 0xa3424340
mov dword [esp + 0x4c], 0xa481448
mov dword [esp + 0x50], 0x94d60745
mov dword [esp + 0x54], 0xc9749092
mov dword [esp + 0x58], 0xf1f64630
mov dword [esp + 0x5c], 0xfa96f52d
mov dword [esp + 0x60], 0xb2b8268
mov dword [esp + 0x64], 0x9d1f9785
mov dword [esp + 0x68], 0x1dffdffc
mov dword [esp + 0x6c], 0xdd651f1c
mov dword [esp + 0x70], 0x5761a3c4
mov dword [esp + 0x74], 0x52ae57f7
mov dword [esp + 0x78], 0xd913f30a
lea edx, [esp + 0x7c]
mov dword [esp + 0x7c], 0xfd0
mov eax, 0xbd536019
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ecx, byte [esp + eax + 0x42aca00b]
lea edi, [eax + 0x42aca000]
and edi, ecx
mov ebp, edi
and ebp, 2
mov ebx, edi
or ebx, 0xfffffffd
inc ebx
mov esi, edi
and esi, 0xfffffffd
imul esi, ebx
or edi, 2
imul edi, ebp
sub esi, edi
add ecx, eax
add esi, ecx
lea edi, [esi + esi]
and edi, 4
and ecx, 1
xor esi, 0x7c
sub esi, edi
or esi, 1
sub ecx, esi
mov byte [esp + eax + 0x42aca00b], cl
inc eax
cmp eax, 0xbd536075
jne 0x4422b0
mov eax, dword [esp]
lea esi, [esp + 0x24]
mov edi, eax
mov ecx, 0x16
xchg esi, esi
rep movsd dword es:[edi], dword [esi]
xchg esi, esi
lea edi, [eax + 0x58]
xor ecx, ecx
xchg esi, edx
rep movsw word es:[edi], word [esi]
xchg esi, edx
movzx ecx, byte [esp + 0x7c]
mov byte [eax + 0x58], cl
mov eax, dword [esp]
lea edi, [eax + 0x59]
mov ebx, dword [esp + 0x1c]
mov ecx, ebx
shr ecx, 2
lea edx, [esp + 0x94]
xchg esi, edx
rep movsd dword es:[edi], dword [esi]
xchg esi, edx
mov ecx, ebx
and ecx, 0xfffffffc
add eax, ecx
add eax, 0x59
lea edx, [esp + ecx]
add edx, 0x94
mov ecx, ebx
shr ecx, 1
and ecx, 1
mov esi, edx
mov edi, eax
xchg esi, esi
rep movsw word es:[edi], word [esi]
xchg esi, esi
test bl, 1
je 0x442379
and ebx, 2
movzx ecx, byte [edx + ebx]
mov byte [eax + ebx], cl
mov eax, dword [esp]
lea ecx, [eax + 0x59]
push dword [esp + 0x2b0]
push ecx
call eax
mov dword [esp + 0x20], 0
mov dword [esp + 0x24], 0x787b7a05
mov word [esp + 0x28], 0
mov byte [esp + 0x2a], 0
mov ecx, 0x6ce591bf
mov esi, 0x40
nop
movzx edi, byte [esp + ecx - 0x6ce5919b]
mov ebx, esi
and ebx, 0x6e
mov ebp, ecx
xor ebp, 0xafaef46e
or ebp, ebx
xor ebp, edi
mov edi, ebp
and edi, 1
xor ebp, 0x6f
lea ebx, [edi*2]
add ebx, ebp
add bl, 0x44
mov byte [esp + ecx - 0x6ce5919b], bl
inc ecx
dec esi
cmp ecx, 0x6ce591c6
jne 0x4423b0
mov ecx, dword [0x44f228]
test ecx, ecx
je 0x442463
mov esi, dword [esp + 0x24]
xor edi, edi
mov ebx, dword [0x44f22c]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp dword [ebx + edi*8], 0x16194952
je 0x442427
inc edi
cmp ecx, edi
jne 0x442410
jmp 0x442463
mov edx, eax
sar edx, 0x1f
jmp 0x442463
mov ecx, dword [ebx + edi*8 + 4]
cmp ecx, esi
je 0x442463
lea esi, [esp + 0x20]
mov edi, esp
push 0x8000
push esi
push edi
push 0xffffffffffffffff
push 4
push dword [0x44f230]
push ecx
mov esi, eax
mov edi, edx
call fcn.004400f0
mov edx, edi
mov eax, esi
add esp, 0x1c
jmp 0x442463
mov eax, 0xffffffff
mov edx, 0xffffffff
add esp, 0x294
pop esi
pop edi
pop ebx
pop ebp
ret 0x10