Function at 0x41abbf
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x4cc
movzx eax, word [0x42ca28]
push ebx
push esi
mov dword [esp + 0x68], edx
xor ebx, ebx
mov edx, dword [0x42ca48]
movzx esi, dx
push edi
mov edi, ecx
imul eax, eax, 0x39cf32b2
lea ecx, [esi + 0x466f]
mov word [0x42ca38], cx
or ecx, 0xc40b
mov word [0x42ca28], cx
mov dword [0x42ca2c], eax
cmp dword [edi], ebx
jne 0x41ac42
movzx eax, cx
and esi, 0xfe7a
add eax, 0x1b399112
mov word [0x42ca38], si
mov dword [0x42ca4c], eax
or esi, 0x8328
lea eax, [edx - 0x15a09ad7]
mov word [0x42ca28], si
mov dword [0x42ca2c], eax
xor al, al
jmp 0x41b045
push ebp
push dword [edi + 8]
xor ecx, ecx
or eax, 0x2e7d0efd
mov edx, 0x9e7f4339
mov dword [0x42ca48], eax
inc ecx
call fcn.00415f33
call eax
mov ecx, dword [0x42ca4c]
mov edx, eax
mov eax, dword [edi + 4]
and ecx, 0x49f65005
add eax, 6
mov dword [0x42ca4c], ecx
add eax, edx
mov dword [esp + 0x6c], edx
push eax
push dword [edi]
or ecx, 0x3ac2
mov word [0x42ca28], cx
call fcn.0040688c
mov dx, word [0x42ca28]
mov ebp, eax
movzx esi, dx
mov eax, 0x8c0
pop ecx
sub dx, ax
mov dword [edi], ebp
xor esi, 0xe87e6aaf
mov word [0x42ca38], dx
mov dword [0x42ca2c], esi
pop ecx
movzx ecx, dx
test ebp, ebp
je 0x41b011
mov word [esp + 0x10], 0xdbdb
mov ecx, ebx
mov al, byte [esp + ecx + 0x10]
add al, 0x52
mov byte [esp + ecx + 0x58], al
inc ecx
cmp ecx, 2
jl 0x41acd3
mov byte [esp + 0x5a], bl
mov ecx, ebx
mov dword [esp + 0x10], 0x5082828
mov al, byte [esp + ecx + 0x10]
add al, 5
mov byte [esp + ecx + 0x5c], al
inc ecx
cmp ecx, 4
jl 0x41acf1
mov byte [esp + 0x60], bl
mov ecx, ebx
mov dword [esp + 0x14], 0xeff5f4d8
mov dword [esp + 0x18], 0xb6eff5fe
mov dword [esp + 0x1c], 0xfeebe2cf
mov dword [esp + 0x20], 0xeef6bba1
mov dword [esp + 0x24], 0xebf2eff7
mov dword [esp + 0x28], 0xb4efe9fa
mov dword [esp + 0x2c], 0xf6e9f4fd
mov dword [esp + 0x30], 0xeffaffb6
mov dword [esp + 0x34], 0xf9bba0fa
mov dword [esp + 0x38], 0xfff5eef4
mov dword [esp + 0x3c], 0xa6e2e9fa
mov dword [esp + 0x40], 0x9196e8be
mov dword [esp + 0x44], 0xeff5f4d8
mov dword [esp + 0x48], 0xb6eff5fe
mov dword [esp + 0x4c], 0xfcf5fed7
mov dword [esp + 0x50], 0xbba1f3ef
mov word [esp + 0x54], 0xffbe
mov al, byte [esp + ecx + 0x14]
xor al, 0x9b
mov byte [esp + ecx + 0x98], al
inc ecx
cmp ecx, 0x42
jl 0x41ad8e
mov byte [esp + 0xda], bl
mov ecx, ebx
mov dword [esp + 0x10], 0x49484445
mov al, byte [esp + ecx + 0x10]
add al, 0xb
mov byte [esp + ecx + 0x64], al
inc ecx
cmp ecx, 4
jl 0x41adb2
mov eax, 0x9184
movzx ecx, dx
imul ecx, eax
and esi, 0xee42ff50
mov eax, dword [0x42ca48]
xor eax, 0x11e0
mov byte [esp + 0x68], bl
mov word [0x42ca38], ax
movzx eax, ax
sub eax, 0x17d258c4
mov word [0x42ca28], cx
mov dword [0x42ca2c], eax
lea eax, [esp + 0x58]
push 2
push eax
mov eax, dword [edi + 4]
add eax, ebp
mov dword [0x42ca4c], esi
push eax
call fcn.00402970
mov ecx, dword [edi + 4]
mov eax, 0x6f12
add ax, word [0x42ca28]
add ecx, 2
mov esi, dword [esp + 0x78]
mov word [0x42ca38], ax
mov eax, dword [edi]
push esi
push dword [edi + 8]
add eax, ecx
push eax
call fcn.00402970
and dword [0x42ca2c], 0xe1233efd
lea eax, [esp + 0x74]
push 4
push eax
mov eax, dword [edi + 4]
add eax, 2
add eax, dword [edi]
add eax, esi
push eax
call fcn.00402970
add esp, 0x24
lea eax, [esi + 6]
add dword [edi + 4], eax
mov edx, 0x534fbfb6
mov eax, 0x63fb
xor ecx, ecx
add ax, word [0x42ca28]
push dword [edi + 4]
mov word [0x42ca38], ax
lea eax, [esp + 0x9c]
push dword [edi + 8]
push eax
lea eax, [esp + 0xe8]
push 0x400
push eax
call fcn.00415f33
call eax
mov si, word [0x42ca38]
lea ecx, [esp + 0xf0]
mov eax, 0x1636
mov dword [esp + 0x90], ecx
or si, ax
add esp, 0x14
mov eax, dword [0x42ca48]
xorps xmm0, xmm0
and eax, 0x6ab38566
mov word [0x42ca28], si
mov dword [0x42ca2c], eax
movzx eax, word [0x42ca38]
sub eax, 0x770356dd
movlpd qword [esp + 0x8c], xmm0
xor eax, 0x5a857ab
mov dword [0x42ca4c], eax
add eax, 0x18e80e3e
mov dword [0x42ca48], eax
lea eax, [esi + 0x1857]
mov word [0x42ca38], ax
mov eax, ecx
push eax
xor ecx, ecx
mov edx, 0x9e7f4339
inc ecx
call fcn.00415f33
call eax
mov edx, dword [0x42ca2c]
mov cx, word [0x42ca28]
or edx, 0xb46d9e0
mov dword [esp + 0x80], eax
lea eax, [esp + 0x64]
mov dword [esp + 0x78], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 0x74], eax
mov eax, dword [edi + 4]
mov dword [esp + 0x88], eax
mov eax, 0xb71a
and cx, ax
mov dword [0x42ca48], edx
mov eax, dword [edi]
and edx, 0x7bd1
mov dword [esp + 0x84], eax
add edx, 0x3747
mov eax, dword [esp + 0x4e0]
xor edx, 0xe3dc
mov dword [esp + 0x94], eax
movzx eax, cx
mov word [0x42ca28], cx
and eax, 0x70b7ccb6
mov word [0x42ca38], dx
lea ecx, [esp + 0x74]
mov edx, dword [esp + 0x4e4]
mov dword [0x42ca4c], eax
call fcn.0041b3fe
mov bl, al
mov eax, dword [0x42ca48]
xor eax, 0x160b
mov word [0x42ca38], ax
movzx ecx, ax
test bl, bl
je 0x41b011
mov esi, dword [esp + 0x4e8]
movzx ecx, ax
test esi, esi
je 0x41b011
mov eax, dword [0x42ca2c]
mov edx, dword [0x42ca4c]
or eax, 0xb2dae284
mov ecx, edx
mov dword [0x42ca48], eax
mov eax, dword [esp + 0x90]
xor ecx, 0x4a26
mov word [0x42ca38], cx
mov dword [esi], eax
movzx ecx, cx
jmp 0x41b017
mov edx, dword [0x42ca4c]
push dword [edi]
imul eax, edx, 0x36b
mov word [0x42ca28], ax
movzx eax, cx
xor eax, 0x641d0d63
mov dword [0x42ca4c], eax
call fcn.004062f0
or dword [0x42ca2c], 0x23f98e4b
mov al, bl
pop ecx
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x4cc
ret