Function at 0x4160ec
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push edi
push esi
push ebp
push ebx
sub esp, 0xc8
mov ecx, dword [esp + 0xdc]
mov edx, dword [esp + 0xe0]
mov eax, dword [esp + 0xe4]
mov edi, dword [esp + 0xe8]
mov ebx, dword [esp + 0xec]
mov esi, dword [esp + 0xf0]
mov dword [esp + 0xbc], edx
mov dword [esp + 0xb8], eax
xor eax, eax
mov edx, 0x48e82c
mov byte [esp + 0xc4], al
mov dword [edx], eax
mov dword [edx + 4], eax
mov dword [edx + 8], eax
mov dword [edx + 0xc], eax
mov dword [edx + 0x10], eax
mov dword [edx + 0x14], eax
mov word [edx + 0x18], ax
mov byte [edx + 0x1a], al
xor eax, eax
mov dword [edi], eax
mov dword [esi], eax
xor eax, eax
movzx edx, byte [ecx + eax]
test edx, edx
je 0x416173
movzx edx, byte [ecx + eax + 1]
add eax, 2
test edx, edx
jne 0x41615c
add eax, 0xffffffff
cmp eax, 0x34
je 0x416188
mov eax, 0x14
add esp, 0xc8
pop ebx
pop ebp
pop esi
pop edi
ret
push 0x34
push 0x48e660
push ecx
call fcn.0041c41c
mov edx, 0x48e6c0
xor eax, eax
mov dword [edx], eax
mov dword [edx + 4], eax
mov dword [edx + 8], eax
mov dword [edx + 0xc], eax
mov dword [edx + 0x10], eax
mov dword [edx + 0x14], eax
mov dword [edx + 0x18], eax
mov dword [edx + 0x1c], eax
mov dword [edx + 0x20], eax
mov dword [edx + 0x24], eax
mov dword [edx + 0x28], eax
mov dword [edx + 0x2c], eax
mov dword [edx + 0x30], eax
mov dword [edx + 0x34], eax
mov dword [edx + 0x38], eax
mov dword [edx + 0x3c], eax
mov dword [edx + 0x40], eax
mov dword [edx + 0x44], eax
mov dword [edx + 0x48], eax
mov dword [edx + 0x4c], eax
push 0x2c
push 0x48e6c0
push 0x48e660
call fcn.0041c154
mov edx, 0x48e720
xor eax, eax
mov dword [edx], eax
mov dword [edx + 4], eax
mov dword [edx + 8], eax
mov dword [edx + 0xc], eax
mov dword [edx + 0x10], eax
mov dword [edx + 0x14], eax
mov dword [edx + 0x18], eax
mov dword [edx + 0x1c], eax
mov dword [edx + 0x20], eax
mov dword [edx + 0x24], eax
mov dword [edx + 0x28], eax
mov dword [edx + 0x2c], eax
mov dword [edx + 0x30], eax
mov dword [edx + 0x34], eax
mov dword [edx + 0x38], eax
mov dword [edx + 0x3c], eax
mov dword [edx + 0x40], eax
mov dword [edx + 0x44], eax
mov dword [edx + 0x48], eax
mov dword [edx + 0x4c], eax
push 0x2c
push 0x48e720
push 0x1b
push 0x48e6c0
call fcn.0041c028
add esp, 0x28
mov dword [0x43a900], 0x65
mov dword [esp + 0x9c], esi
xor ebp, ebp
mov dword [esp + 0x98], edi
lea eax, [esp + 0xa8]
push eax
call fcn.0041c25c
xor eax, eax
mov dword [esp + 0x80], eax
mov dword [esp + 0x84], eax
mov dword [esp + 0x88], eax
mov dword [esp + 0x8c], eax
mov dword [esp + 0x90], eax
mov dword [esp + 0x94], eax
mov byte [esp + 0x98], al
lea edx, [esp + 0xac]
lea eax, [esp + 0x80]
push 0x1b
push eax
push 0x48e720
push edx
call fcn.0041c398
mov edi, dword [esp + 0x90]
mov esi, 0x48e82c
mov dword [esi], edi
mov eax, dword [esp + 0x94]
mov dword [esi + 4], eax
mov edx, dword [esp + 0x98]
mov dword [esi + 8], edx
mov ecx, dword [esp + 0x9c]
mov dword [esi + 0xc], ecx
mov eax, dword [esp + 0xa0]
mov dword [esi + 0x10], eax
mov eax, dword [esp + 0xa4]
mov dword [esi + 0x14], eax
movzx eax, word [esp + 0xa8]
mov word [esi + 0x18], ax
movzx eax, byte [esp + 0xaa]
mov byte [esi + 0x1a], al
push 0x1a
push 0x48e82d
call fcn.0041bf04
mov dword [esp + 0xdc], eax
lea edx, [esp + 0xdc]
lea eax, [esp + 0xe0]
push 1
push eax
push 4
push edx
call fcn.0041be78
add esp, 0x2c
lea esi, [esp + 0xc4]
mov edi, 0x48e82c
mov ecx, 1
xor eax, eax
test ecx, ecx
je 0x416364
mov al, byte [esi]
sub al, byte [edi]
jne 0x416364
add esi, 1
add edi, 1
sub ecx, 1
jne 0x416353
seta al
setb cl
sub al, cl
movsx eax, al
test eax, eax
je 0x4163ca
mov eax, dword [0x43a900]
add eax, 0xffffffff
mov dword [0x43a900], eax
cmp eax, 0xffffffff
jne 0x41625a
mov esi, dword [esp + 0x9c]
test ebp, ebp
jne 0x4163a4
mov eax, 0x70
add esp, 0xc8
pop ebx
pop ebp
pop esi
pop edi
ret
mov eax, 0x48e82c
mov ebp, dword [eax]
mov dword [esi], ebp
mov edi, dword [eax + 4]
mov dword [esi + 4], edi
movzx edx, byte [eax + 8]
mov byte [esi + 8], dl
mov eax, 0x71
add esp, 0xc8
pop ebx
pop ebp
pop esi
pop edi
ret
mov ebp, dword [esp + 0xb8]
mov eax, dword [0x43a900]
mov dword [ebx], eax
xor edx, edx
mov dword [esp + 0x5c], edx
mov dword [esp + 0x60], edx
mov dword [esp + 0x64], edx
mov dword [esp + 0x68], edx
mov dword [esp + 0x6c], edx
mov dword [esp + 0x70], edx
mov dword [esp + 0x74], edx
mov word [esp + 0x78], dx
lea eax, [esp + 0x5c]
push 0x19
push 0x48e82e
push eax
call fcn.0040dec0
add esp, 0xc
xor eax, eax
mov dword [esp + 0xa0], eax
mov word [esp + 0xa4], ax
mov esi, dword [esp + 0xbc]
lea ecx, [esp]
call fcn.004138b4
lea edx, [esp]
push 0x30
mov eax, dword [esi + ebp*4 - 4]
push dword [eax + 0x10]
push edx
call fcn.00413798
lea eax, [esp + 0xc]
push eax
push 0x48e580
call fcn.00412f90
lea eax, [esp + 0xb4]
push 6
push eax
push 0x10
push 0x48e580
call fcn.0041be78
lea edx, [esp + 0x80]
lea eax, [esp + 0xc4]
push 6
push eax
push edx
call fcn.0041d828
add esp, 0x30
test eax, eax
je 0x416493
add ebp, 0xffffffff
jne 0x416427
mov ebp, 1
jmp 0x416373
mov esi, dword [esp + 0x9c]
mov edi, dword [esp + 0x98]
lea eax, [ebp - 1]
mov dword [edi], eax
mov ebx, 0x48e82e
mov edx, dword [esp + 0x5c]
mov dword [ebx], edx
movzx ecx, word [esp + 0x60]
mov word [ebx + 4], cx
mov edx, dword [esp + 0xbc]
mov ecx, dword [edx + ebp*4 - 4]
mov ecx, dword [ecx + 0x10]
mov ebx, dword [ecx]
mov eax, 0x48e7d4
mov dword [eax], ebx
mov edi, dword [ecx + 4]
mov dword [eax + 4], edi
mov edx, dword [ecx + 8]
mov dword [eax + 8], edx
mov edx, dword [ecx + 0xc]
mov dword [eax + 0xc], edx
mov eax, dword [esp + 0xbc]
mov edx, dword [eax + ebp*4 - 4]
mov eax, dword [edx + 0x10]
add eax, 0x10
xor edx, edx
movzx ecx, byte [eax]
xor byte [edx + 0x48e7d4], cl
add eax, 1
add edx, 1
cmp edx, 0x10
jb 0x4164f6
xor edx, edx
add eax, 1
movzx ecx, byte [eax - 1]
xor byte [edx + 0x48e7d4], cl
add edx, 1
cmp edx, 0x10
jb 0x41650c
mov edx, 0x48e834
xor eax, eax
mov dword [edx], eax
mov dword [edx + 4], eax
mov dword [edx + 8], eax
mov dword [edx + 0xc], eax
mov word [edx + 0x10], ax
mov byte [edx + 0x12], al
lea eax, [esp + 0x62]
push 0x13
push 0x48e834
push eax
push 0x48e7d4
call fcn.0041c398
add esp, 0x10
mov ebp, 0x48e82c
mov edi, dword [ebp]
mov dword [esi], edi
mov eax, dword [ebp + 4]
mov dword [esi + 4], eax
mov edx, dword [ebp + 8]
mov dword [esi + 8], edx
mov ecx, dword [ebp + 0xc]
mov dword [esi + 0xc], ecx
mov ebx, dword [ebp + 0x10]
mov dword [esi + 0x10], ebx
mov eax, dword [ebp + 0x14]
mov dword [esi + 0x14], eax
movzx eax, word [ebp + 0x18]
mov word [esi + 0x18], ax
movzx eax, byte [ebp + 0x1a]
mov byte [esi + 0x1a], al
mov eax, 1
add esp, 0xc8
pop ebx
pop ebp
pop esi
pop edi
ret