Function at 0x410170
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x50
mov eax, dword [esp + 0xa0]
mov esi, dword [ecx + 0x48]
mov edi, dword [esi + 4]
mov dword [esp + 0x4c], edi
test eax, eax
je 0x41019e
cmp dword [esi + 0x34], 0
jne 0x41019e
mov dword [ecx + 0x1c], 3
jmp 0x410780
mov dword [esp], ecx
mov dword [esp + 0x48], edx
movzx ecx, word [esp + 0x6c]
movzx ebp, word [esp + 0x64]
movzx ecx, cx
movzx ebx, word [esp + 0x74]
mov dword [esp + 0x40], ecx
mov edx, ebp
mov dword [esp + 0x44], ebp
add ecx, ebp
add ecx, ebx
xor edx, edx
add ecx, dword [esp + 0xac]
setb dl
add ecx, edi
adc edx, 0
add ecx, 0x2e
adc edx, 0
cmp ecx, 0xffffffff
sbb edx, 0
jb 0x4101f3
mov eax, dword [esp]
mov dword [eax + 0x1c], 0xf
jmp 0x410780
mov dword [esp + 0x38], ebx
movzx edx, word [esp + 0x8c]
xorps xmm0, xmm0
movups xmmword [esp + 0xc], xmm0
movups xmmword [esp + 0x1c], xmm0
mov word [esp + 0x2c], 0
mov dword [esp + 8], 0x2014b50
xor ecx, ecx
test dx, dx
mov dword [esp + 4], esi
mov ebp, edi
mov ebx, 0x14
cmove ebx, ecx
mov byte [esp + 0xe], bl
movzx ebx, word [esp + 0x90]
mov byte [esp + 0x10], bl
mov byte [esp + 0x11], bh
movzx ebx, word [esp + 0x98]
mov byte [esp + 0x12], dl
mov byte [esp + 0x13], dh
movzx edx, word [esp + 0x94]
mov byte [esp + 0x14], dl
mov byte [esp + 0x15], dh
mov edx, dword [esp + 0x88]
mov byte [esp + 0x16], bl
mov byte [esp + 0x17], bh
mov byte [esp + 0x18], dl
mov byte [esp + 0x19], dh
mov ebx, edx
shr ebx, 0x10
mov byte [esp + 0x1a], bl
mov esi, dword [esp + 0x84]
shr edx, 0x18
mov byte [esp + 0x1b], dl
mov edi, dword [esp + 0x80]
neg esi
mov edx, 0
sbb edx, edx
or edx, edi
mov byte [esp + 0x1c], dl
mov byte [esp + 0x1d], dh
mov ebx, edx
shr ebx, 0x10
mov byte [esp + 0x1e], bl
mov esi, dword [esp + 0x7c]
shr edx, 0x18
mov byte [esp + 0x1f], dl
mov edx, dword [esp + 0x78]
neg esi
mov ebx, 0
sbb ebx, ebx
or ebx, edx
mov byte [esp + 0x20], bl
mov byte [esp + 0x21], bh
mov edx, ebx
shr edx, 0x10
mov byte [esp + 0x22], dl
mov edx, dword [esp + 0xa4]
shr ebx, 0x18
mov byte [esp + 0x23], bl
movzx esi, word [esp + 0x6c]
mov edi, dword [esp + 0xac]
lea ebx, [edi + esi]
movzx esi, word [esp + 0x64]
mov edi, eax
mov eax, esi
mov byte [esp + 0x24], al
mov byte [esp + 0x25], ah
mov byte [esp + 0x26], bl
mov byte [esp + 0x27], bh
movzx ebx, word [esp + 0x74]
mov byte [esp + 0x28], bl
mov byte [esp + 0x29], bh
mov byte [esp + 0x2e], dl
mov byte [esp + 0x2f], dh
mov ebx, edx
shr ebx, 0x10
mov byte [esp + 0x30], bl
mov ebx, dword [esp + 4]
shr edx, 0x18
mov byte [esp + 0x31], dl
neg edi
sbb ecx, ecx
mov eax, dword [esp + 0x9c]
or ecx, eax
mov byte [esp + 0x32], cl
mov byte [esp + 0x33], ch
mov eax, ecx
shr eax, 0x10
mov byte [esp + 0x34], al
shr ecx, 0x18
mov byte [esp + 0x35], cl
mov dword [esp + 0x3c], ebp
lea esi, [ebp + 0x2e]
mov eax, dword [ebx + 8]
cmp eax, esi
mov edx, dword [esp]
jae 0x4103ce
test eax, eax
mov edi, 1
cmovne edi, eax
cmp edi, esi
jae 0x4103ac
nop word cs:[eax + eax]
mov eax, edi
and eax, 0xfffffffd
mov ecx, edi
and ecx, 2
or edi, 2
imul edi, ecx
xor ecx, 2
imul ecx, eax
add edi, ecx
cmp edi, esi
jb 0x410390
push edi
push dword [ebx + 0xc]
push dword [ebx]
push dword [edx + 0x34]
call dword [edx + 0x30]
add esp, 0x10
test eax, eax
mov ecx, ebx
je 0x410750
mov dword [ecx], eax
mov dword [ecx + 8], edi
mov ebx, ecx
jmp 0x4103d0
mov eax, dword [ebx]
mov dword [ebx + 4], esi
mov ecx, dword [ebx + 0xc]
mov esi, ecx
not esi
mov ebp, dword [esp + 0x3c]
and esi, ebp
mov edx, ebp
not edx
and edx, ecx
imul edx, esi
mov esi, ecx
and esi, ebp
imul edi, ecx, 0x2e
or ecx, ebp
imul ecx, esi
add ecx, eax
add ecx, edx
lea eax, [esp + 8]
push edi
push eax
push ecx
call fcn.004177b0
add esp, 0xc
mov esi, dword [ebx + 4]
mov eax, dword [ebx + 8]
mov ecx, dword [esp + 0x44]
lea edi, [esi + ecx]
cmp eax, edi
jae 0x410472
test eax, eax
mov ebp, 1
cmovne ebp, eax
cmp ebp, edi
jae 0x41044c
nop word [eax + eax]
mov eax, ebp
and eax, 0xfffffffd
mov ecx, ebp
and ecx, 2
or ebp, 2
imul ebp, ecx
xor ecx, 2
imul ecx, eax
add ebp, ecx
cmp ebp, edi
jb 0x410430
push ebp
push dword [ebx + 0xc]
push dword [ebx]
mov eax, dword [esp + 0xc]
push dword [eax + 0x34]
call dword [eax + 0x30]
add esp, 0x10
test eax, eax
mov ecx, ebx
je 0x410750
mov dword [ecx], eax
mov dword [ecx + 8], ebp
mov ebx, ecx
jmp 0x410474
mov ebp, eax
movzx eax, word [esp + 0x64]
mov dword [ebx + 4], edi
test ax, ax
je 0x4104bb
mov eax, dword [ebx + 0xc]
mov ecx, eax
not ecx
and ecx, esi
mov edx, esi
not edx
and edx, eax
imul edx, ecx
mov ecx, eax
and ecx, esi
or esi, eax
imul esi, ecx
add esi, edx
add esi, dword [ebx]
mov ecx, dword [esp + 0x44]
imul ecx, eax
push ecx
push dword [esp + 0x4c]
push esi
call fcn.004177b0
add esp, 0xc
mov edi, dword [ebx + 4]
mov ebp, dword [ebx + 8]
mov eax, dword [esp + 0x40]
lea esi, [edi + eax]
cmp ebp, esi
jae 0x4104fe
test ebp, ebp
mov ebx, 1
cmovne ebx, ebp
cmp ebx, esi
jae 0x410504
mov edx, dword [esp]
nop word [eax + eax]
mov eax, ebx
and eax, 0xfffffffd
mov ecx, ebx
and ecx, 2
or ebx, 2
imul ebx, ecx
xor ecx, 2
imul ecx, eax
add ebx, ecx
cmp ebx, esi
jb 0x4104e0
jmp 0x410507
mov ecx, ebx
mov ebx, ebp
jmp 0x41052a
mov edx, dword [esp]
push ebx
mov ebp, dword [esp + 8]
push dword [ebp + 0xc]
push dword [ebp]
push dword [edx + 0x34]
call dword [edx + 0x30]
mov ecx, ebp
add esp, 0x10
test eax, eax
je 0x410750
mov dword [ecx], eax
mov dword [ecx + 8], ebx
mov ebp, dword [esp + 0xac]
movzx eax, word [esp + 0x6c]
mov dword [ecx + 4], esi
test ax, ax
je 0x41057a
mov eax, dword [ecx + 0xc]
mov ebx, ecx
mov ecx, eax
not ecx
and ecx, edi
mov edx, edi
not edx
and edx, eax
imul edx, ecx
mov ecx, eax
and ecx, edi
or edi, eax
imul edi, ecx
add edi, edx
add edi, dword [ebx]
mov ecx, dword [esp + 0x40]
imul ecx, eax
push ecx
push dword [esp + 0x6c]
push edi
call fcn.004177b0
add esp, 0xc
mov esi, dword [ebx + 4]
mov ebx, dword [ebx + 8]
lea edi, [esi + ebp]
cmp ebx, edi
jae 0x4105be
test ebx, ebx
mov ebp, 1
cmovne ebp, ebx
cmp ebp, edi
jae 0x4105c6
mov ebx, dword [esp + 4]
nop word cs:[eax + eax]
mov eax, ebp
and eax, 0xfffffffd
mov ecx, ebp
and ecx, 2
or ebp, 2
imul ebp, ecx
xor ecx, 2
imul ecx, eax
add ebp, ecx
cmp ebp, edi
jb 0x4105a0
jmp 0x4105ca
mov ebp, ebx
mov ebx, dword [esp + 4]
jmp 0x4105ee
mov ebx, dword [esp + 4]
push ebp
push dword [ebx + 0xc]
push dword [ebx]
mov eax, dword [esp + 0xc]
push dword [eax + 0x34]
call dword [eax + 0x30]
add esp, 0x10
test eax, eax
mov ecx, ebx
je 0x410750
mov dword [ecx], eax
mov dword [ecx + 8], ebp
mov ebx, ecx
movzx ecx, word [esp + 0x74]
mov dword [ebx + 4], edi
mov eax, dword [esp + 0xac]
test eax, eax
je 0x410644
mov edi, eax
mov eax, dword [ebx + 0xc]
mov ecx, eax
not ecx
and ecx, esi
mov edx, esi
not edx
and edx, eax
imul edx, ecx
mov ecx, eax
and ecx, esi
or esi, eax
imul esi, ecx
add esi, edx
add esi, dword [ebx]
imul edi, eax
push edi
push dword [esp + 0xac]
push esi
call fcn.004177b0
movzx ecx, word [esp + 0x80]
add esp, 0xc
mov edi, dword [ebx + 4]
mov ebp, dword [ebx + 8]
mov eax, dword [esp + 0x38]
lea esi, [edi + eax]
cmp ebp, esi
jae 0x4106ab
test ebp, ebp
mov ebx, 1
cmovne ebx, ebp
cmp ebx, esi
jae 0x41067e
mov edx, dword [esp]
mov eax, ebx
and eax, 0xfffffffd
mov ecx, ebx
and ecx, 2
or ebx, 2
imul ebx, ecx
xor ecx, 2
imul ecx, eax
add ebx, ecx
cmp ebx, esi
jb 0x410660
jmp 0x410681
mov edx, dword [esp]
push ebx
mov ebp, dword [esp + 8]
push dword [ebp + 0xc]
push dword [ebp]
push dword [edx + 0x34]
call dword [edx + 0x30]
mov ecx, ebp
add esp, 0x10
test eax, eax
je 0x410750
mov dword [ecx], eax
mov dword [ecx + 8], ebx
mov ebx, ecx
movzx ecx, word [esp + 0x74]
mov dword [ebx + 4], esi
test cx, cx
je 0x4106e7
mov eax, dword [ebx + 0xc]
mov ecx, eax
not ecx
and ecx, edi
mov edx, edi
not edx
and edx, eax
imul edx, ecx
mov ecx, eax
and ecx, edi
or edi, eax
imul edi, ecx
add edi, edx
add edi, dword [ebx]
mov ecx, dword [esp + 0x38]
imul ecx, eax
push ecx
push dword [esp + 0x74]
push edi
call fcn.004177b0
add esp, 0xc
mov esi, dword [ebx + 0x14]
mov eax, dword [ebx + 0x18]
lea edi, [esi + 1]
cmp eax, edi
mov edx, dword [esp]
jae 0x41078a
test eax, eax
mov ebx, 1
cmovne ebx, eax
cmp ebx, edi
jae 0x41072c
nop dword [eax]
mov eax, ebx
and eax, 0xfffffffd
mov ecx, ebx
and ecx, 2
or ebx, 2
imul ebx, ecx
xor ecx, 2
imul ecx, eax
add ebx, ecx
cmp ebx, edi
jb 0x410710
push ebx
mov ebp, dword [esp + 8]
push dword [ebp + 0x1c]
push dword [ebp + 0x10]
push dword [edx + 0x34]
call dword [edx + 0x30]
mov ecx, ebp
add esp, 0x10
test eax, eax
je 0x410750
mov dword [ecx + 0x10], eax
mov dword [ecx + 0x18], ebx
mov ebx, ecx
jmp 0x41078d
mov ebx, dword [esp + 0x3c]
cmp dword [ecx + 8], ebx
mov esi, ecx
mov edi, dword [esp]
jae 0x410776
push ebx
push dword [esi + 0xc]
push dword [esi]
push dword [edi + 0x34]
call dword [edi + 0x30]
add esp, 0x10
test eax, eax
je 0x410779
mov dword [esi], eax
mov dword [esi + 8], ebx
mov dword [esi + 4], ebx
mov dword [edi + 0x1c], 0x10
xor eax, eax
add esp, 0x50
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [ebx + 0x10]
mov dword [ebx + 0x14], edi
mov ecx, dword [ebx + 0x1c]
mov edi, ecx
not edi
and edi, esi
mov edx, esi
not edx
and edx, ecx
imul edx, edi
mov edi, ecx
and edi, esi
or esi, ecx
imul esi, edi
add esi, eax
add esi, edx
lea eax, [esp + 0x4c]
push ecx
push eax
push esi
call fcn.004177b0
add esp, 0xc
mov eax, 1
jmp 0x410782