Function at 0x418ba0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x4c
mov eax, dword [esp + 0x64]
mov esi, dword [eax + 4]
mov ecx, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, ecx
cmp word [esi + ecx + 2], 0
lea ecx, [ecx + 2]
jne 0x418bc0
mov eax, dword [esp + 0x68]
mov edi, dword [eax + 4]
mov edx, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
mov eax, edx
cmp word [edi + edx + 2], 0
lea edx, [edx + 2]
jne 0x418be0
sar ecx, 1
sar edx, 1
lea eax, [ecx + edx]
add eax, 0x1b
test eax, eax
mov dword [esp + 0x48], ecx
mov dword [esp + 0x44], edx
jns 0x418c0a
mov eax, 0xffffffff
jmp 0x418c14
lea eax, [ecx + edx]
lea eax, [eax*2 + 0x36]
push eax
call fcn.00408680
add esp, 4
mov dword [esp], eax
mov dword [esp + 8], 0x1520760
mov dword [esp + 0xc], 0xd6f0371
mov dword [esp + 0x10], 0x97a0f6f
mov dword [esp + 0x14], 0x15450b28
mov dword [esp + 0x18], 0x116a176c
mov dword [esp + 0x1c], 0x1d64137f
mov dword [esp + 0x20], 0x19751f61
mov dword [esp + 0x24], 0x256c1b69
mov dword [esp + 0x28], 0x217b2704
mov dword [esp + 0x2c], 0x2d5e234f
mov dword [esp + 0x30], 0x29452f50
mov dword [esp + 0x34], 0x35432b5e
mov dword [esp + 0x38], 0x31523749
mov word [esp + 0x3c], 0x3330
mov dword [esp + 0x3e], 0
mov edx, 0x1373f01
nop
nop
nop
nop
movzx ebp, byte [esp + edx - 0x1373ef9]
mov ebx, ebp
and ebx, edx
mov eax, ebx
or al, 0xfd
inc al
mov ecx, ebx
and cl, 0x7d
mul cl
mov ecx, eax
mov eax, ebp
add cl, al
mov eax, ebx
shr al, 1
and al, 1
or bl, 2
mul bl
add al, al
sub cl, al
movzx eax, cl
add eax, edx
add al, 0xfb
mov byte [esp + edx - 0x1373ef9], al
inc edx
cmp edx, 0x1373f3b
jne 0x418ca0
movzx ecx, word [esi]
mov eax, dword [esp]
test cx, cx
je 0x418d11
add esi, 2
mov eax, dword [esp]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [esi]
add esi, 2
test cx, cx
jne 0x418d00
mov word [eax], 0
movzx ecx, word [esp + 8]
test cx, cx
mov ebp, dword [esp + 0x64]
je 0x418d41
lea edx, [esp + 0xa]
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x418d30
mov word [eax], 0
movzx ecx, word [edi]
test cx, cx
je 0x418d71
add edi, 2
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edi]
add edi, 2
test cx, cx
jne 0x418d60
mov word [eax], 0
mov esi, dword [ebp]
mov eax, 0xfffffffe
nop
nop
cmp word [esi + eax + 2], 0
lea eax, [eax + 2]
jne 0x418d80
mov ebp, dword [ebp + 8]
mov ecx, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp word [ebp + ecx + 2], 0
lea ecx, [ecx + 2]
jne 0x418da0
sar eax, 1
add eax, 0xd
mov edx, dword [esp + 0x68]
mov ebx, dword [edx]
mov edx, 0xfffffffe
nop
nop
nop
nop
nop
cmp word [ebx + edx + 2], 0
lea edx, [edx + 2]
jne 0x418dc0
sar ecx, 1
add eax, ecx
sar edx, 1
mov ecx, edx
and ecx, eax
xor edx, eax
lea eax, [edx + ecx*2]
add eax, 6
test eax, eax
jns 0x418de8
mov eax, 0xffffffff
jmp 0x418df2
lea eax, [edx + ecx*2]
lea eax, [eax*2 + 0xc]
push eax
call fcn.00408680
add esp, 4
mov edi, eax
movzx eax, word [esi]
mov dword [esp + 4], edi
test ax, ax
je 0x418e21
add esi, 2
mov edi, dword [esp + 4]
mov word [edi], ax
add edi, 2
movzx eax, word [esi]
add esi, 2
test ax, ax
jne 0x418e10
mov word [edi], 0x2f
mov dword [esp + 8], 0x13df11c7
mov dword [esp + 0xc], 0x1f821d84
mov dword [esp + 0x10], 0x1b8c19f5
mov dword [esp + 0x14], 0x7ef0597
mov dword [esp + 0x18], 0x3940197
mov dword [esp + 0x1c], 0xfd90d9f
mov word [esp + 0x20], 0x908
mov dword [esp + 0x22], 0
mov byte [esp + 0x26], 0
mov eax, 0xe0dc3bc4
nop
movzx ecx, byte [esp + eax + 0x1f23c444]
mov edx, eax
and edx, ecx
lea esi, [eax + ecx]
add edx, edx
sub ecx, edx
add ecx, eax
add ecx, 0x2b
add esi, esi
or esi, 0xfd
xor ecx, 0xfe
add ecx, esi
mov dl, 0xfe
sub dl, cl
mov byte [esp + eax + 0x1f23c444], dl
inc eax
cmp eax, 0xe0dc3be3
jne 0x418e70
add edi, 2
movzx eax, word [ebp]
test ax, ax
je 0x418ed2
add ebp, 2
nop
nop
nop
nop
nop
nop
mov word [edi], ax
add edi, 2
movzx eax, word [ebp]
add ebp, 2
test ax, ax
jne 0x418ec0
mov word [edi], 0
movzx eax, word [esp + 8]
test ax, ax
je 0x418f01
lea ecx, [esp + 0xa]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [edi], ax
add edi, 2
movzx eax, word [ecx]
add ecx, 2
test ax, ax
jne 0x418ef0
mov word [edi], 0
movzx eax, word [ebx]
test ax, ax
je 0x418f31
add ebx, 2
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [edi], ax
add edi, 2
movzx eax, word [ebx]
add ebx, 2
test ax, ax
jne 0x418f20
mov word [edi], 0
mov dword [esp + 8], 0x9796994e
mov word [esp + 0xc], 0
mov byte [esp + 0xe], 0
mov eax, 0x66
mov ecx, 0xb78fe799
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx esi, byte [esp + eax - 0x5e]
mov edx, eax
xor edx, ecx
and edx, esi
xor edx, ecx
mov esi, edx
not esi
mov ebx, esi
and ebx, 1
lea ebx, [esi + ebx*2]
and edx, 1
or ebx, 1
add ebx, edx
mov byte [esp + eax - 0x5e], bl
inc eax
dec ecx
cmp eax, 0x6d
jne 0x418f60
lea eax, [esp + 8]
push 0
push 0
push 0xc00000
push eax
mov esi, dword [esp + 0x10]
push esi
push dword [esp + 0x18]
push dword [esp + 0x78]
call fcn.0041cac0
add esp, 0x1c
mov ebx, eax
jmp dword [0x440df8]