Function at 0x410000
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x23c
mov eax, dword [0x44e40c]
mov dword [esp + 0x3c], 0x8f3d8955
mov dword [esp + 0x40], 0x833b8d02
mov dword [esp + 0x44], 0x873a813c
mov dword [esp + 0x48], 0x9b698525
mov dword [esp + 0x4c], 0x9f6c996d
mov dword [esp + 0x50], 0x93729d6c
mov dword [esp + 0x54], 0x973d9168
mov dword [esp + 0x58], 0x6bd8952d
mov dword [esp + 0x5c], 0x6fdd69cc
mov dword [esp + 0x60], 0x63d56de7
mov dword [esp + 0x64], 0x67b46180
mov dword [esp + 0x68], 0x7b9a65b0
mov dword [esp + 0x6c], 0x7f8e7989
mov dword [esp + 0x70], 0x73827d8e
mov dword [esp + 0x74], 0x779671bf
mov dword [esp + 0x78], 0x4bf375df
mov dword [esp + 0x7c], 0x4f8449fa
mov dword [esp + 0x80], 0x438d4db8
mov dword [esp + 0x84], 0x47ce41a0
mov dword [esp + 0x88], 0x5bae458e
mov dword [esp + 0x8c], 0x5fbe59a1
mov dword [esp + 0x90], 0x53e25d9d
mov dword [esp + 0x94], 0x57ea51e0
mov dword [esp + 0x98], 0x2b8155f1
mov dword [esp + 0x9c], 0x2f88298d
mov dword [esp + 0xa0], 0x239b2df3
mov dword [esp + 0xa4], 0x27d52194
mov dword [esp + 0xa8], 0x3bcd25d1
mov dword [esp + 0xac], 0x3fcc39f3
mov dword [esp + 0xb0], 0x33f83dcb
mov dword [esp + 0xb4], 0x37ce31d0
mov dword [esp + 0xb8], 0xbd235eb
mov dword [esp + 0xbc], 0xfd309dc
mov dword [esp + 0xc0], 0x3fe0dd0
mov dword [esp + 0xc4], 0x7ba01e0
mov dword [esp + 0xc8], 0x1ba505bd
mov dword [esp + 0xcc], 0x1ffe19bd
mov dword [esp + 0xd0], 0x13b71dc7
mov dword [esp + 0xd4], 0x17a911b7
mov dword [esp + 0xd8], 0xeb1315a7
mov dword [esp + 0xdc], 0xef29e908
mov dword [esp + 0xe0], 0xe354ed54
mov dword [esp + 0xe4], 0xe75be153
mov dword [esp + 0xe8], 0xfb09e541
mov dword [esp + 0xec], 0xff0ff909
mov dword [esp + 0xf0], 0xf300fd35
mov dword [esp + 0xf4], 0xf704f100
mov dword [esp + 0xf8], 0xcb38f504
mov dword [esp + 0xfc], 0xcf2ec938
mov dword [esp + 0x100], 0xc363cd1b
mov dword [esp + 0x104], 0xc767c17a
mov dword [esp + 0x108], 0xdb63c572
mov dword [esp + 0x10c], 0xdf2bd92b
mov dword [esp + 0x110], 0xd319dd2b
mov dword [esp + 0x114], 0xd721d122
mov dword [esp + 0x118], 0xabaad51e
mov word [esp + 0x11c], 0
mov dword [esp], 0
mov ecx, dword [esp]
cmp ecx, 0xe1
ja 0x4102af
mov edx, dword [esp]
mov ecx, dword [esp]
movzx ecx, byte [esp + ecx + 0x3c]
mov esi, edx
not esi
or esi, 0x419f4762
add esi, edx
xor edx, 0x419f4762
lea esi, [esi*2 + 2]
mov edi, esi
and edi, edx
xor edx, esi
lea edx, [edx + edi*2]
xor edx, ecx
mov dword [esp + 8], edx
mov ecx, dword [esp + 8]
add cl, 0x16
mov edx, dword [esp]
mov byte [esp + edx + 0x3c], cl
inc dword [esp]
mov ecx, dword [esp]
cmp ecx, 0xe2
jb case.default.0x4102c7
lea ecx, [esp + 0x3c]
push 0
push 0
push 0
push 0
push ecx
call eax
mov ebx, eax
xor eax, eax
test ebx, ebx
setne al
jmp dword [eax*4 + 0x448f1c]
xor eax, eax
mov ecx, dword [case.0x4102c7.42]
jmp case.0x4102c7.40
mov eax, dword [0x44e410]
mov dword [esp], 0xcfcec807
mov dword [esp + 8], 0
mov ecx, dword [esp + 8]
cmp ecx, 3
ja 0x41033e
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [esp + 8]
mov edx, dword [esp + 8]
movzx edx, byte [esp + edx]
mov esi, ecx
xor esi, 0xfbddbdd2
and ecx, 0xfbddbdd2
lea ecx, [esi + ecx*2]
xor ecx, edx
mov dword [esp + 0x3c], ecx
mov ecx, dword [esp + 0x3c]
add cl, 0xe6
mov edx, dword [esp + 8]
mov byte [esp + edx], cl
inc dword [esp + 8]
mov ecx, dword [esp + 8]
cmp ecx, 4
jb 0x410300
movzx ecx, word [esp]
push 0
push ecx
push 0x44e440
push ebx
call eax
mov edi, eax
xor eax, eax
test edi, edi
setne al
xor esi, esi
jmp dword [eax*4 + 0x448f24]
mov dword [esp + 0x38], ebx
mov esi, dword [esp + 0x250]
jmp dword [0x448f30]
mov eax, dword [0x44e414]
mov dword [esp + 8], 0x63e26160
mov word [esp + 0xc], 0
mov byte [esp + 0xe], 0
mov dword [esp], 0
mov ecx, dword [esp]
cmp ecx, 6
ja 0x4103db
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [esp]
mov edx, dword [esp]
movzx edx, byte [esp + edx + 8]
mov ebx, ecx
xor ebx, 0xac42dae8
and ecx, 0x2c42dae8
lea ecx, [ebx + ecx*2]
xor ecx, edx
mov dword [esp + 0x3c], ecx
mov ecx, dword [esp + 0x3c]
add cl, 0x78
mov edx, dword [esp]
mov byte [esp + edx + 8], cl
inc dword [esp]
mov ecx, dword [esp]
cmp ecx, 7
jb 0x4103a0
mov ecx, dword [esp + 8]
mov dword [esp + 0x3c], 0x1fcd19c8
mov dword [esp + 0x40], 0xe3361dcb
mov word [esp + 0x44], 0xe1e0
mov dword [esp + 0x46], 0
mov byte [esp + 0x4a], 0
mov dword [esp + 4], 0
mov edx, dword [esp + 4]
cmp edx, 0xe
ja 0x41046c
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, dword [esp + 4]
mov ebx, dword [esp + 4]
movzx ebx, byte [esp + ebx + 0x3c]
lea ebp, [edx + ebx]
add ebp, 0x7de081fa
add edx, 0x7de081fa
and edx, ebx
add edx, edx
sub ebp, edx
mov dword [esp], ebp
mov edx, dword [esp]
mov ebx, edx
xor ebx, 0xe2
and edx, 0x1d
add edx, edx
sub edx, ebx
mov ebx, dword [esp + 4]
mov byte [esp + ebx + 0x3c], dl
inc dword [esp + 4]
mov edx, dword [esp + 4]
cmp edx, 0xf
jb 0x410420
lea edx, [esp + 0x3c]
push ecx
push 0
push 0
push 0
push esi
push edx
push edi
call eax
jmp case.0x410358.3
push ecx
push 0
push 0
push 0
push esi
lea ecx, [esp + 0x50]
push ecx
push edi
call eax
jmp dword [0x448f34]
mov eax, dword [0x44e414]
mov dword [esp + 8], 0x63e26160
mov word [esp + 0xc], 0
mov byte [esp + 0xe], 0
mov dword [esp], 0
mov ecx, dword [esp]
cmp ecx, 6
ja 0x4104fb
nop
nop
mov ecx, dword [esp]
mov edx, dword [esp]
movzx edx, byte [esp + edx + 8]
mov ebx, ecx
xor ebx, 0xac42dae8
and ecx, 0x2c42dae8
lea ecx, [ebx + ecx*2]
xor ecx, edx
mov dword [esp + 0x3c], ecx
mov ecx, dword [esp + 0x3c]
add cl, 0x78
mov edx, dword [esp]
mov byte [esp + edx + 8], cl
inc dword [esp]
mov ecx, dword [esp]
cmp ecx, 7
jb 0x4104c0
lea edx, [esp + 0x46]
mov ecx, dword [esp + 8]
mov dword [esp + 0x3c], 0x1fcd19c8
mov dword [esp + 0x40], 0xe3361dcb
mov word [esp + 0x44], 0xe1e0
mov byte [edx + 4], 0
mov dword [edx], 0
mov dword [esp + 4], 0
mov edx, dword [esp + 4]
cmp edx, 0xe
ja 0x410480
nop
nop
nop
nop
nop
nop
nop
mov edx, dword [esp + 4]
mov ebx, dword [esp + 4]
movzx ebx, byte [esp + ebx + 0x3c]
lea ebp, [edx + ebx]
add ebp, 0x7de081fa
add edx, 0x7de081fa
and edx, ebx
add edx, edx
sub ebp, edx
mov dword [esp], ebp
mov edx, dword [esp]
mov ebx, edx
xor ebx, 0xe2
and edx, 0x1d
add edx, edx
sub edx, ebx
mov ebx, dword [esp + 4]
mov byte [esp + ebx + 0x3c], dl
inc dword [esp + 4]
mov edx, dword [esp + 4]
cmp edx, 0xf
jb 0x410540
jmp 0x410480
mov ebx, eax
xor eax, eax
test ebx, ebx
setne al
jmp dword [eax*4 + 0x448f3c]
xor esi, esi
mov ebx, dword [esp + 0x38]
jmp dword [0x448fac]
xor eax, eax
mov ecx, dword [esp + 0x268]
test ecx, ecx
setg al
jmp dword [eax*4 + 0x448f44]
push ecx
push ecx
push ecx
push ecx
push ebx
call dword [0x44e41c]
nop
nop
nop
jmp dword [0x448f54]
movzx eax, byte [0x44e544]
mov esi, dword [esp + 0x264]
jmp dword [eax*4 + 0x448f5c]
jmp dword [0x448f64]
mov esi, edx
jmp 0x410646
jmp ecx
add esp, 0x23c
pop esi
pop edi
pop ebx
pop ebp
ret
xor eax, eax
mov edx, dword [esp + 0x254]
mov ecx, edx
neg ecx
sbb eax, eax
push 0
push esi
push dword [esp + 0x264]
push dword [esp + 0x264]
push eax
push edx
push ebx
call dword [0x44e424]
xor ecx, ecx
test eax, eax
setne cl
jmp dword [ecx*4 + 0x448f74]
xor esi, esi
push ebx
call dword [0x44e438]
mov ebx, dword [esp + 0x38]
jmp dword [0x448fac]
push edi
call dword [0x44e438]
nop
nop
push edi
call dword [0x44e438]
jmp dword [0x448fb8]
push ebx
call dword [0x44e438]
mov ecx, dword [case.0x4102c7.42]
mov eax, esi
jmp case.0x4102c7.40
mov dword [esp + 0x3c], 0
lea eax, [esp + 0x3c]
push eax
push esi
push dword [esp + 0x268]
push ebx
call dword [0x44e434]
xor ecx, ecx
test eax, eax
setne cl
xor edx, edx
jmp dword [ecx*4 + 0x448f7c]
jmp dword [0x448f88]
push 0
push ebx
call dword [0x44e428]
nop
nop
nop
nop
nop
nop
nop
push 0
push ebx
call dword [0x44e428]
jmp dword [0x448f90]
xor ecx, ecx
test eax, eax
setne cl
xor edx, edx
jmp dword [ecx*4 + 0x448f94]
mov eax, dword [case.0x4102c7.24]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov dl, 1
jmp eax
mov dword [esp + 8], 0x19ab1bd1
mov dword [esp + 0xc], 0xe553e7a9
mov dword [esp + 0x10], 0xe149e353
mov dword [esp + 0x14], 0xed0eef26
mov dword [esp + 0x18], 0xe94beb4d
mov dword [esp + 0x1c], 0xf55cf745
mov dword [esp + 0x20], 0xf141f355
mov dword [esp + 0x24], 0xfd5fff49
mov dword [esp + 0x28], 0xf97dfb52
mov dword [esp + 0x2c], 0xc505c748
mov word [esp + 0x30], 0xc3c4
mov dword [esp + 0x32], 0
mov word [esp + 0x36], 0
mov dword [esp + 4], 0
mov eax, dword [esp + 4]
cmp eax, 0x2f
ja 0x4107b9
nop
nop
nop
nop
nop
mov eax, dword [esp + 4]
mov ecx, dword [esp + 4]
movzx ecx, byte [esp + ecx + 8]
mov edx, eax
xor edx, 0xb6c79fb
and eax, 0xb6c79fb
lea eax, [edx + eax*2]
xor eax, ecx
mov dword [esp], eax
mov eax, dword [esp]
mov ecx, eax
xor ecx, 0xe7
and eax, 0x18
add eax, eax
sub eax, ecx
mov ecx, dword [esp + 4]
mov byte [esp + ecx + 8], al
inc dword [esp + 4]
mov eax, dword [esp + 4]
cmp eax, 0x30
jb 0x410770
movzx ecx, word [esp + 8]
lea eax, [esp + 0x3c]
test cx, cx
je 0x4107e1
lea edx, [esp + 0xa]
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x4107d0
mov word [eax], 0
movzx ecx, word [0x44e546]
test cx, cx
je 0x410815
xor edx, edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax + edx], cx
movzx ecx, word [edx + 0x44e548]
add edx, 2
test cx, cx
jne 0x410800
add eax, edx
mov word [eax], 0
mov eax, dword [0x44e420]
mov dword [esp + 4], 0x13323130
mov dword [esp], 0
mov ecx, dword [esp]
cmp ecx, 3
ja 0x41088f
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, dword [esp]
mov ecx, dword [esp]
movzx ecx, byte [esp + ecx + 4]
mov esi, edx
or esi, 0xf59f14cb
mov ebp, edx
not ebp
or ebp, 0xa60eb34
and ebp, esi
not ebp
and edx, 0xa60eb34
lea edx, [edx*2]
add edx, ebp
xor edx, ecx
mov dword [esp + 8], edx
mov ecx, dword [esp + 8]
add cl, 0xfc
mov edx, dword [esp]
mov byte [esp + edx + 4], cl
inc dword [esp]
mov ecx, dword [esp]
cmp ecx, 4
jb 0x410840
lea ecx, [esp + 0x3c]
push dword [esp + 4]
push 0xffffffffffffffff
push ecx
push ebx
call eax
mov esi, dword [esp + 0x264]
jmp dword [0x448f6c]
mov dword [esp + 8], 0x19ab1bd1
mov dword [esp + 0xc], 0xe553e7a9
mov dword [esp + 0x10], 0xe149e353
mov dword [esp + 0x14], 0xed0eef26
mov dword [esp + 0x18], 0xe94beb4d
mov dword [esp + 0x1c], 0xf55cf745
mov dword [esp + 0x20], 0xf141f355
mov dword [esp + 0x24], 0xfd5fff49
mov dword [esp + 0x28], 0xf97dfb52
mov dword [esp + 0x2c], 0xc505c748
mov word [esp + 0x30], 0xc3c4
mov dword [esp + 0x32], 0
mov word [esp + 0x36], 0
mov dword [esp + 4], 0
mov eax, dword [esp + 4]
cmp eax, 0x2f
ja 0x410979
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 4]
mov ecx, dword [esp + 4]
movzx ecx, byte [esp + ecx + 8]
mov edx, eax
xor edx, 0xb6c79fb
and eax, 0xb6c79fb
lea eax, [edx + eax*2]
xor eax, ecx
mov dword [esp], eax
mov eax, dword [esp]
mov ecx, eax
xor ecx, 0xe7
and eax, 0x18
add eax, eax
sub eax, ecx
mov ecx, dword [esp + 4]
mov byte [esp + ecx + 8], al
inc dword [esp + 4]
mov eax, dword [esp + 4]
cmp eax, 0x30
jb 0x410930
movzx ecx, word [esp + 8]
lea eax, [esp + 0x3c]
test cx, cx
je 0x4109a1
lea edx, [esp + 0xa]
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x410990
mov word [eax], 0
movzx ecx, word [0x44e546]
test cx, cx
je 0x4109d5
xor edx, edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax + edx], cx
movzx ecx, word [edx + 0x44e548]
add edx, 2
test cx, cx
jne 0x4109c0
add eax, edx
mov word [eax], 0
mov eax, dword [0x44e420]
mov dword [esp + 4], 0x13323130
mov dword [esp], 0
mov ecx, dword [esp]
cmp ecx, 3
ja 0x410a4f
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, dword [esp]
mov ecx, dword [esp]
movzx ecx, byte [esp + ecx + 4]
mov esi, edx
or esi, 0xf59f14cb
mov ebp, edx
not ebp
or ebp, 0xa60eb34
and ebp, esi
not ebp
and edx, 0xa60eb34
lea edx, [edx*2]
add edx, ebp
xor edx, ecx
mov dword [esp + 8], edx
mov ecx, dword [esp + 8]
add cl, 0xfc
mov edx, dword [esp]
mov byte [esp + edx + 4], cl
inc dword [esp]
mov ecx, dword [esp]
cmp ecx, 4
jb 0x410a00
lea ecx, [esp + 0x3c]
push dword [esp + 4]
push 0xffffffffffffffff
push ecx
push ebx
call eax
jmp case.0x4102c7.18