Function at 0x410690
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x23c
mov eax, dword [0x44d024]
mov dword [esp + 0x3c], 0xe31de13d
mov dword [esp + 0x40], 0xe71fe56e
mov dword [esp + 0x44], 0xfb06f904
mov dword [esp + 0x48], 0xffc1fd1d
mov dword [esp + 0x4c], 0xf3ccf1c5
mov dword [esp + 0x50], 0xf7d6f5c4
mov dword [esp + 0x54], 0x8b5d89b0
mov dword [esp + 0x58], 0x8f708d75
mov dword [esp + 0x5c], 0x837d8164
mov dword [esp + 0x60], 0x87758573
mov dword [esp + 0x64], 0x9b4499b8
mov dword [esp + 0x68], 0x9fbe9d48
mov dword [esp + 0x6c], 0x93a291a1
mov dword [esp + 0x70], 0x97a695aa
mov dword [esp + 0x74], 0xab8aa963
mov dword [esp + 0x78], 0xaf57ad7b
mov dword [esp + 0x7c], 0xa394a15e
mov dword [esp + 0x80], 0xa76da590
mov dword [esp + 0x84], 0xbb32b998
mov dword [esp + 0x88], 0xbf8abd8a
mov dword [esp + 0x8c], 0xb392b189
mov dword [esp + 0x90], 0xb746b575
mov dword [esp + 0x94], 0x4bb649b8
mov dword [esp + 0x98], 0x4f994da9
mov dword [esp + 0x9c], 0x43a041a5
mov dword [esp + 0xa0], 0x47bf459f
mov dword [esp + 0xa4], 0x5b6559ac
mov dword [esp + 0xa8], 0x5f6d5d69
mov dword [esp + 0xac], 0x536c5167
mov dword [esp + 0xb0], 0x57605567
mov dword [esp + 0xb4], 0x6b526948
mov dword [esp + 0xb8], 0x6fb66db7
mov dword [esp + 0xbc], 0x63bf61b4
mov dword [esp + 0xc0], 0x675a65b8
mov dword [esp + 0xc4], 0x7b867958
mov dword [esp + 0xc8], 0x7f857d85
mov dword [esp + 0xcc], 0x73527195
mov dword [esp + 0xd0], 0x779375b3
mov dword [esp + 0xd4], 0xbf109eb
mov dword [esp + 0xd8], 0xf370df3
mov dword [esp + 0xdc], 0x3c10120
mov dword [esp + 0xe0], 0x7f405fc
mov dword [esp + 0xe4], 0x1be719e7
mov dword [esp + 0xe8], 0x1f211df9
mov dword [esp + 0xec], 0x13231121
mov dword [esp + 0xf0], 0x172815dd
mov dword [esp + 0xf4], 0x2b142918
mov dword [esp + 0xf8], 0x2f102d1c
mov dword [esp + 0xfc], 0x23022110
mov dword [esp + 0x100], 0x27c725f7
mov dword [esp + 0x104], 0x3bdb39de
mov dword [esp + 0x108], 0x3fc73dce
mov dword [esp + 0x10c], 0x3307310f
mov dword [esp + 0x110], 0x37013507
mov dword [esp + 0x114], 0xcbf9c9f6
mov dword [esp + 0x118], 0xcfcecdfa
mov byte [esp + 0x11c], 0
mov dword [esp], 0
mov ecx, dword [esp]
cmp ecx, 0xe0
ja 0x41092e
nop
nop
mov ecx, dword [esp]
mov edx, dword [esp]
movzx edx, byte [esp + edx + 0x3c]
mov esi, ecx
xor esi, 0x8d2b8028
and ecx, 0xd2b8028
lea ecx, [esi + ecx*2]
xor ecx, edx
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0xc]
add cl, 0x38
mov edx, dword [esp]
mov byte [esp + edx + 0x3c], cl
inc dword [esp]
mov ecx, dword [esp]
cmp ecx, 0xe1
jb 0x4108f0
lea ebx, [esp + 0x3c]
push 0
push 0
push 0
push 0
push ebx
call eax
mov esi, eax
xor eax, eax
test esi, esi
setne al
jmp dword [eax*4 + 0x447ea4]
xor ebx, ebx
jmp 0x410d7b
mov eax, dword [0x44d028]
mov dword [esp + 0x3c], 0x9392904b
mov word [esp + 0x40], 0
mov byte [esp + 0x42], 0
mov dword [esp], 0
mov ecx, dword [esp]
cmp ecx, 6
ja 0x4109c2
nop
nop
nop
nop
mov ecx, dword [esp]
mov edx, dword [esp]
movzx edx, byte [esp + edx + 0x3c]
mov edi, ecx
xor edi, 0x5fc7e024
and ecx, 0xdfc7e024
lea ecx, [edi + ecx*2]
lea edi, [ecx + edx]
and ecx, edx
add ecx, ecx
sub edi, ecx
mov dword [esp + 0xc], edi
mov ecx, dword [esp + 0xc]
add cl, 0x4c
mov edx, dword [esp]
mov byte [esp + edx + 0x3c], cl
inc dword [esp]
mov ecx, dword [esp]
cmp ecx, 7
jb 0x410980
movzx ecx, word [esp + 0x3c]
push 0
push ecx
push 0x44d058
push esi
call eax
xor ecx, ecx
test eax, eax
setne cl
jmp dword [ecx*4 + 0x447eac]
xor ebx, ebx
jmp 0x410d74
mov dword [esp + 8], eax
mov eax, dword [0x44d02c]
mov dword [esp + 0xc], 0x83028180
mov dword [esp + 0x10], 0
mov dword [esp], 0
mov ecx, dword [esp]
cmp ecx, 7
ja 0x410a40
nop
mov ecx, dword [esp]
mov edx, dword [esp]
movzx edx, byte [esp + edx + 0xc]
add ecx, 0x10953f60
xor ecx, edx
mov dword [esp + 0x3c], ecx
mov ecx, dword [esp + 0x3c]
add cl, 0x20
mov edx, dword [esp]
mov byte [esp + edx + 0xc], cl
inc dword [esp]
mov ecx, dword [esp]
cmp ecx, 8
jb 0x410a10
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x3c], 0xe95beb54
mov dword [esp + 0x40], 0xed5aef5d
mov word [esp + 0x44], 0xd3ec
mov dword [esp + 0x46], 0
mov byte [esp + 0x4a], 0
mov dword [esp + 4], 0
mov edx, dword [esp + 4]
cmp edx, 0xe
ja 0x410ac5
nop
nop
nop
nop
nop
nop
nop
mov edi, dword [esp + 4]
mov ebp, dword [esp + 4]
movzx ebp, byte [esp + ebp + 0x3c]
mov edx, edi
not edx
or edx, 0x2384ded7
add edx, edi
xor edi, 0xa384ded7
lea edx, [edi + edx*2]
add edx, 2
xor edx, ebp
mov dword [esp], edx
mov edx, dword [esp]
add dl, 0xcd
mov edi, dword [esp + 4]
mov byte [esp + edi + 0x3c], dl
inc dword [esp + 4]
mov edx, dword [esp + 4]
cmp edx, 0xf
jb 0x410a80
push ecx
push 0
push 0
push 0
push dword [esp + 0x260]
push ebx
mov edi, dword [esp + 0x20]
push edi
call eax
mov ebp, eax
xor eax, eax
test ebp, ebp
setne al
jmp dword [eax*4 + 0x447eb4]
xor ebx, ebx
jmp 0x410d6d
xor eax, eax
mov ecx, dword [esp + 0x268]
test ecx, ecx
setg al
jmp dword [eax*4 + 0x447ebc]
movzx eax, byte [0x44d15c]
jmp dword [eax*4 + 0x447ec4]
push ecx
push ecx
push ecx
push ecx
push ebp
call dword [0x44d034]
movzx eax, byte [0x44d15c]
jmp dword [eax*4 + 0x447ec4]
mov dword [esp + 0xc], 0xe177e759
mov dword [esp + 0x10], 0xdd77e371
mov dword [esp + 0x14], 0xd941df47
mov dword [esp + 0x18], 0xd5badb92
mov dword [esp + 0x1c], 0xd177d775
mov dword [esp + 0x20], 0xcd4cd34d
mov dword [esp + 0x24], 0xc959cf6d
mov dword [esp + 0x28], 0xc56bcb41
mov dword [esp + 0x2c], 0xc14dc766
mov dword [esp + 0x30], 0x3d85c350
mov dword [esp + 0x34], 0x3f3c
mov byte [esp + 0x38], 0
mov dword [esp], 0
mov eax, dword [esp]
cmp eax, 0x2c
ja 0x410be3
nop
nop
nop
nop
nop
nop
mov eax, dword [esp]
mov ecx, dword [esp]
movzx ecx, byte [esp + ecx + 0xc]
mov edx, eax
xor edx, 0x3ff5f0d9
and eax, 0x3ff5f0d9
lea eax, [edx + eax*2]
xor eax, ecx
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x3c]
mov ecx, eax
xor ecx, 0x3d
and eax, 0x42
add eax, eax
sub eax, ecx
mov ecx, dword [esp]
mov byte [esp + ecx + 0xc], al
inc dword [esp]
mov eax, dword [esp]
cmp eax, 0x2d
jb 0x410ba0
movzx eax, word [esp + 0xc]
test ax, ax
je 0x410c11
lea ebx, [esp + 0x3c]
lea ecx, [esp + 0xe]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [ebx], ax
add ebx, 2
movzx eax, word [ecx]
add ecx, 2
test ax, ax
jne 0x410c00
mov word [ebx], 0
movzx eax, word [0x44d15e]
test ax, ax
je 0x410c45
xor ecx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [ebx + ecx], ax
movzx eax, word [ecx + 0x44d160]
add ecx, 2
test ax, ax
jne 0x410c30
add ebx, ecx
mov word [ebx], 0
mov eax, dword [0x44d038]
mov dword [esp + 0xc], 0x918e8f8c
mov word [esp + 0x10], 0
mov dword [esp + 4], 0
mov ecx, dword [esp + 4]
cmp ecx, 5
ja 0x410cb8
nop
mov ecx, dword [esp + 4]
mov edx, dword [esp + 4]
movzx edx, byte [esp + edx + 0xc]
mov edi, ecx
xor edi, 0xf8000a1d
mov ebx, ecx
xor ebx, 0x7fff5e2
or ecx, 0x78000a1d
and ecx, ebx
lea ecx, [edi + ecx*2]
xor ecx, edx
mov dword [esp], ecx
mov ecx, dword [esp]
add cl, 0x6f
mov edx, dword [esp + 4]
mov byte [esp + edx + 0xc], cl
inc dword [esp + 4]
mov ecx, dword [esp + 4]
cmp ecx, 6
jb 0x410c70
lea ecx, [esp + 0x3c]
push dword [esp + 0xc]
push 0xffffffffffffffff
push ecx
push ebp
call eax
mov edi, dword [esp + 8]
xor eax, eax
mov edx, dword [esp + 0x254]
mov ecx, edx
neg ecx
sbb eax, eax
push 0
mov ebx, dword [esp + 0x268]
push ebx
push dword [esp + 0x264]
push dword [esp + 0x264]
push eax
push edx
push ebp
call dword [0x44d03c]
xor ecx, ecx
test eax, eax
setne cl
jmp dword [ecx*4 + 0x447ecc]
xor ebx, ebx
jmp 0x410d66
mov dword [esp + 0x3c], 0
lea eax, [esp + 0x3c]
push eax
push ebx
push dword [esp + 0x268]
push ebp
call dword [0x44d04c]
xor ecx, ecx
test eax, eax
setne cl
xor ebx, ebx
jmp dword [ecx*4 + 0x447ed4]
push 0
push ebp
call dword [0x44d040]
mov ecx, dword [case.0x410ae4.13]
nop
nop
nop
nop
nop
nop
nop
nop
nop
jmp ecx
xor ecx, ecx
test eax, eax
setne cl
xor ebx, ebx
jmp dword [ecx*4 + 0x447eec]
jmp 0x410d66
mov bl, 1
push ebp
call dword [0x44d050]
push edi
call dword [0x44d050]
push esi
call dword [0x44d050]
mov eax, ebx
add esp, 0x23c
pop esi
pop edi
pop ebx
pop ebp
ret