Function at 0x414dbb
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xb4
push ebx
push esi
push edi
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x2c]
push eax
xor ebx, ebx
push 1
push ebx
push ebx
push dword [0x41d274]
mov dword [esp + 0x40], ebx
call fcn.00414da2
pop ecx
push eax
push dword [0x41d278]
call fcn.00414da2
mov esi, dword [0x41701c]
pop ecx
push eax
call esi
mov edi, dword [0x417018]
push eax
call edi
call eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], ebx
cmp dword [esp + 0x30], ebx
jbe 0x41517d
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x58]
push eax
mov eax, dword [esp + 0x28]
push 5
push dword [eax]
mov dword [esp + 0x64], ebx
push ebx
push dword [0x41d2a4]
call fcn.00414da2
pop ecx
push eax
push dword [0x41d2a8]
call fcn.00414da2
pop ecx
push eax
call esi
push eax
call edi
call eax
cmp dword [esp + 0x2c], 2
jbe 0x415166
lea eax, [esp + 0x1c]
push eax
mov eax, dword [esp + 0x24]
push dword [eax]
mov dword [esp + 0x24], ebx
push dword [0x41d27c]
mov dword [esp + 0x20], ebx
call fcn.00414da2
pop ecx
push eax
push dword [0x41d280]
call fcn.00414da2
pop ecx
push eax
call esi
push eax
call edi
call eax
lea eax, [esp + 0x14]
push eax
push 1
push 1
push ebx
push 0x2000000
push dword [esp + 0x30]
push dword [0x41d284]
call fcn.00414da2
pop ecx
push eax
push dword [0x41d288]
call fcn.00414da2
pop ecx
push eax
call esi
push eax
call edi
call eax
push dword [esp + 0x1c]
push dword [0x41d28c]
call fcn.00414da2
pop ecx
push eax
push dword [0x41d290]
call fcn.00414da2
pop ecx
push eax
call esi
push eax
call edi
call eax
mov eax, dword [esp + 0x14]
lea ecx, [esp + 0x2c]
push ecx
push 4
lea ecx, [esp + 0x60]
push ecx
push 0x13
push eax
push dword [0x41d294]
mov dword [esp + 0x34], eax
mov dword [esp + 0x2c], ebx
call fcn.00414da2
pop ecx
push eax
push dword [0x41d298]
call fcn.00414da2
pop ecx
push eax
call esi
push eax
call edi
call eax
test eax, eax
je 0x414f37
mov eax, dword [esp + 0x58]
jmp 0x414f3f
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x1c], ebx
push ebx
push eax
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x20]
push eax
push dword [0x41d264]
mov dword [esp + 0x28], ebx
call fcn.00414da2
pop ecx
push eax
push dword [0x41d268]
call fcn.00414da2
pop ecx
push eax
call esi
push eax
call edi
call eax
test eax, eax
jne 0x414f77
mov dword [esp + 0x18], ebx
push 0x44
lea eax, [esp + 0x7c]
push ebx
push eax
call fcn.00403170
add esp, 0xc
push 0x7c
pop eax
push 0x62
mov word [esp + 0x38], ax
pop eax
push 0x65
mov word [esp + 0x3a], ax
pop eax
push 0x78
mov word [esp + 0x3c], ax
pop eax
push 0x7f
mov word [esp + 0x3e], ax
pop eax
push 0x6a
mov word [esp + 0x40], ax
pop eax
push 0x3b
mov word [esp + 0x42], ax
pop eax
push 0x57
mov word [esp + 0x44], ax
pop eax
push 0x6f
mov word [esp + 0x46], ax
pop eax
push 0x6e
mov word [esp + 0x48], ax
pop eax
push 0x6d
mov word [esp + 0x4a], ax
pop eax
push 0x6a
mov word [esp + 0x4c], ax
pop eax
mov word [esp + 0x4a], ax
push 0x7e
pop eax
mov word [esp + 0x4c], ax
push 0x67
pop eax
mov word [esp + 0x4e], ax
push 0x7f
pop eax
mov word [esp + 0x50], ax
xor eax, eax
mov word [esp + 0x52], ax
lea eax, [esp + 0x34]
mov dword [esp + 0x80], eax
mov dword [esp + 0x10], 0x44
mov ecx, dword [esp + 0x10]
and ecx, 0x80000001
jns 0x41502a
dec ecx
or ecx, 0xfffffffe
inc ecx
mov eax, dword [esp + 0x10]
cdq
sub eax, edx
sar eax, 1
add ecx, eax
mov eax, dword [esp + 0x10]
cdq
sub eax, edx
sar eax, 1
add ecx, eax
mov dword [esp + 0x78], ecx
xor eax, eax
xor word [esp + eax*2 + 0x34], 0xb
inc eax
cmp eax, 0xf
jb 0x415046
lea eax, [esp + 0x68]
push eax
lea eax, [esp + 0x7c]
push eax
push ebx
push dword [esp + 0x24]
push 0x420
push 1
push ebx
push ebx
push dword [ebp + 8]
push ebx
push dword [esp + 0x3c]
push dword [0x41d29c]
call fcn.00414da2
pop ecx
push eax
push dword [0x41d2a0]
call fcn.00414da2
pop ecx
push eax
call esi
push eax
call edi
call eax
test eax, eax
jne 0x4150eb
push 0x4e20
call dword [0x417014]
lea eax, [esp + 0x68]
push eax
lea eax, [esp + 0x7c]
push eax
push ebx
push dword [esp + 0x24]
push 0x420
push 1
push ebx
push ebx
push dword [ebp + 8]
push ebx
push dword [esp + 0x3c]
push dword [0x41d29c]
call fcn.00414da2
pop ecx
push eax
push dword [0x41d2a0]
call fcn.00414da2
pop ecx
push eax
call esi
push eax
call edi
call eax
test eax, eax
je 0x4151a9
cmp dword [esp + 0x18], ebx
je 0x415116
push dword [esp + 0x18]
push dword [0x41d26c]
call fcn.00414da2
pop ecx
push eax
push dword [0x41d270]
call fcn.00414da2
pop ecx
push eax
call esi
push eax
call edi
call eax
mov eax, dword [esp + 0x14]
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x64], eax
mov dword [esp + 0x10], ebx
mov eax, dword [esp + 0x10]
push dword [esp + eax*4 + 0x5c]
push dword [0x41d28c]
call fcn.00414da2
pop ecx
push eax
push dword [0x41d290]
call fcn.00414da2
pop ecx
push eax
call esi
push eax
call edi
call eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 3
jb 0x415132
add dword [esp + 0x20], 0xc
inc dword [esp + 0x24]
mov eax, dword [esp + 0x24]
cmp eax, dword [esp + 0x30]
jb 0x414e21
push dword [esp + 0x28]
push dword [0x41d2ac]
call fcn.00414da2
pop ecx
push eax
push dword [0x41d2b0]
call fcn.00414da2
pop ecx
push eax
call esi
push eax
call edi
call eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 1
call fcn.0040346d
int3