Function at 0x412ca7
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x170
push ebx
push ebp
push esi
xor ebx, ebx
mov dword [esp + 0xc], 0xb4bcac96
push edi
mov ebp, ecx
mov dword [esp + 0x14], 0xb4bcf6b4
mov edi, edx
mov byte [esp + 0x18], 0xb4
mov ecx, ebx
mov al, byte [esp + ecx + 0x10]
xor al, 0xd8
mov byte [esp + ecx + 0xa8], al
inc ecx
cmp ecx, 9
jl 0x412cce
mov byte [esp + 0xb1], bl
mov ecx, ebx
mov dword [esp + 0x2c], 0xaab6a18f
mov dword [esp + 0x30], 0xf6f7a8a1
mov dword [esp + 0x34], 0xa8a8a0ea
mov al, byte [esp + ecx + 0x2c]
xor al, 0xc4
mov byte [esp + ecx + 0xf0], al
inc ecx
cmp ecx, 0xc
jl 0x412d02
push 0xb
mov byte [esp + 0x100], bl
mov ecx, ebx
mov dword [esp + 0x24], 0x40904f2
mov dword [esp + 0x28], 0xc90f0009
mov word [esp + 0x2c], 0x7ff
mov byte [esp + 0x2e], 7
pop edx
mov al, byte [esp + ecx + 0x20]
add al, 0x65
mov byte [esp + ecx + 0xc0], al
inc ecx
cmp ecx, edx
jl 0x412d3d
mov byte [esp + 0xcb], bl
mov ecx, ebx
mov dword [esp + 0x20], 0x919a9364
mov dword [esp + 0x24], 0x4f535495
mov word [esp + 0x28], 0x8d85
mov byte [esp + 0x2a], 0x8d
mov al, byte [esp + ecx + 0x20]
sub al, 0x21
mov byte [esp + ecx + 0xcc], al
inc ecx
cmp ecx, edx
jl 0x412d74
mov byte [esp + 0xd7], bl
mov ecx, ebx
mov dword [esp + 0x2c], 0x9bb09e7b
mov dword [esp + 0x30], 0x6c6da3aa
mov dword [esp + 0x34], 0xa6a69e68
mov al, byte [esp + ecx + 0x2c]
sub al, 0x3a
mov byte [esp + ecx + 0x100], al
inc ecx
cmp ecx, 0xc
jl 0x412da7
mov byte [esp + 0x10c], bl
mov ecx, ebx
mov dword [esp + 0x10], 0x27302600
mov dword [esp + 0x14], 0x317b6766
mov word [esp + 0x18], 0x3939
mov al, byte [esp + ecx + 0x10]
xor al, 0x55
mov byte [esp + ecx + 0x2c], al
inc ecx
cmp ecx, 0xa
jl 0x412dda
mov byte [esp + 0x36], bl
mov ecx, ebx
mov dword [esp + 0x20], 0xb8b1ac8f
mov dword [esp + 0x24], 0x76bbbdb4
mov word [esp + 0x28], 0xb4ac
mov byte [esp + 0x2a], 0xb4
mov al, byte [esp + ecx + 0x20]
sub al, 0x48
mov byte [esp + ecx + 0xd8], al
inc ecx
cmp ecx, edx
jl 0x412e0c
mov byte [esp + 0xe3], bl
mov ecx, ebx
mov dword [esp + 0x10], 0x92c8c3a6
mov dword [esp + 0x14], 0xcbc38d91
mov byte [esp + 0x18], 0xcb
mov al, byte [esp + ecx + 0x10]
sub al, 0x5f
mov byte [esp + ecx + 0xb4], al
inc ecx
cmp ecx, 9
jl 0x412e3c
mov byte [esp + 0xbd], bl
mov ecx, ebx
mov dword [esp + 0x10], 0xacdee5c8
mov dword [esp + 0x14], 0xe5dda7ab
mov byte [esp + 0x18], 0xe5
mov al, byte [esp + ecx + 0x10]
sub al, 0x79
mov byte [esp + ecx + 0x20], al
inc ecx
cmp ecx, 9
jl 0x412e6d
mov byte [esp + 0x29], bl
mov ecx, ebx
mov dword [esp + 0x10], 0xc3d8dce7
mov dword [esp + 0x14], 0x9addc4d5
mov word [esp + 0x18], 0xd8d0
mov byte [esp + 0x1a], 0xd8
mov al, byte [esp + ecx + 0x10]
xor al, 0xb4
mov byte [esp + ecx + 0xe4], al
inc ecx
cmp ecx, edx
jl 0x412e9f
mov byte [esp + 0xef], bl
mov ecx, ebx
mov dword [esp + 0x10], 0xe7e9e8c7
mov dword [esp + 0x14], 0xe7dce2e9
mov dword [esp + 0x18], 0xe1e1d9a3
mov al, byte [esp + ecx + 0x10]
sub al, 0x75
mov byte [esp + ecx + 0x110], al
inc ecx
cmp ecx, 0xc
jl 0x412ed2
mov esi, 0x42475c
mov byte [esp + 0x11c], bl
cmp byte [0x424754], bl
jne 0x41314e
push 0x57
mov dword [esp + 0x14], 0x171b0e14
mov ecx, ebx
mov dword [esp + 0x18], 0xdbdc150e
mov esi, 0xff
mov dword [esp + 0x1c], 0x15150dd7
pop edx
movzx eax, byte [esp + ecx + 0x10]
add ax, dx
and ax, si
mov word [esp + ecx*2 + 0x164], ax
inc ecx
cmp ecx, 0xc
jl 0x412f1f
xor eax, eax
mov dword [esp + 0x38], 0x53425873
mov word [esp + 0x17c], ax
mov ecx, ebx
mov dword [esp + 0x3c], 0x5f447544
mov word [esp + 0x40], 0x5f42
mov byte [esp + 0x42], 0x55
mov byte [esp + 0x43], dl
mov dword [esp + 0x44], 0x5553655a
mov dword [esp + 0x48], 0x58595f42
mov al, byte [esp + ecx + 0x38]
xor al, 0x36
mov byte [esp + ecx + 0x134], al
inc ecx
cmp ecx, 0x14
jl 0x412f74
mov byte [esp + 0x148], bl
mov ecx, ebx
mov dword [esp + 0x4c], 0x5e494d34
mov dword [esp + 0x50], 0x515a2b4d
mov dword [esp + 0x54], 0x494b515c
mov dword [esp + 0x58], 0x4b4d3b54
mov word [esp + 0x5c], 0x515c
mov byte [esp + 0x5e], dl
mov byte [esp + 0x5f], 0x56
mov al, byte [esp + ecx + 0x4c]
add al, 0x18
mov byte [esp + ecx + 0x14c], al
inc ecx
cmp ecx, 0x14
jl 0x412fc0
mov byte [esp + 0x160], bl
mov ecx, ebx
mov dword [esp + 0x10], 0x181d1330
mov dword [esp + 0x14], 0xe1e1530
mov dword [esp + 0x18], 0x3d050e1d
mov al, byte [esp + ecx + 0x10]
xor al, 0x7c
mov byte [esp + ecx + 0x38], al
inc ecx
cmp ecx, 0xc
jl 0x412ff4
movaps xmm1, xmmword [0x420f70]
mov ecx, ebx
mov dword [esp + 0x10], 0x3e655638
mov dword [esp + 0x14], 0x5d665560
mov dword [esp + 0x18], 0x5f523956
mov dword [esp + 0x1c], 0x32565d55
movups xmm0, xmmword [esp + 0x10]
mov byte [esp + 0x44], bl
mov byte [esp + 0x130], bl
paddb xmm1, xmm0
mov dword [esp + 0x60], 0xd0cdcaed
movups xmmword [esp + 0x120], xmm1
mov dword [esp + 0x64], 0xcdc8c5cd
mov dword [esp + 0x68], 0xd6e7c1de
mov dword [esp + 0x6c], 0xc7cdd0cd
mov dword [esp + 0x70], 0xc1f7c8c5
mov dword [esp + 0x74], 0xcbcdd0c7
mov byte [esp + 0x78], 0xca
mov al, byte [esp + ecx + 0x60]
xor al, 0xa4
mov byte [esp + ecx + 0x7c], al
inc ecx
cmp ecx, 0x19
jl 0x41307e
lea ecx, [esp + 0x164]
mov byte [esp + 0x95], bl
call fcn.00412bca
mov esi, eax
lea edx, [esp + 0x134]
push ebx
mov ecx, esi
call fcn.004129a3
push ebx
lea edx, [esp + 0x154]
mov dword [0x424b80], eax
mov ecx, esi
call fcn.004129a3
push ebx
lea edx, [esp + 0x44]
mov dword [0x424778], eax
mov ecx, esi
call fcn.004129a3
push ebx
lea edx, [esp + 0x130]
mov dword [0x424b84], eax
mov ecx, esi
call fcn.004129a3
push ebx
lea edx, [esp + 0x90]
mov dword [0x424774], eax
mov ecx, esi
call fcn.004129a3
add esp, 0x14
mov dword [0x424750], eax
cmp dword [0x424b80], ebx
je 0x413202
cmp dword [0x424778], ebx
je 0x413202
cmp dword [0x424b84], ebx
je 0x413202
cmp dword [0x424774], ebx
je 0x413202
test eax, eax
je 0x413202
mov esi, 0x42475c
mov byte [0x424754], 1
push esi
call eax
push esi
call dword [0x424b80]
lea eax, [esp + 0xa8]
mov ecx, dword [0x424758]
mov dword [esp + 0x7c], eax
lea eax, [esp + 0xf0]
mov dword [esp + 0x80], eax
lea eax, [esp + 0xc0]
mov dword [esp + 0x84], eax
lea eax, [esp + 0xcc]
mov dword [esp + 0x88], eax
lea eax, [esp + 0x100]
mov dword [esp + 0x8c], eax
lea eax, [esp + 0x2c]
mov dword [esp + 0x90], eax
lea eax, [esp + 0xd8]
mov dword [esp + 0x94], eax
lea eax, [esp + 0xb4]
mov dword [esp + 0x98], eax
lea eax, [esp + 0x20]
mov dword [esp + 0x9c], eax
lea eax, [esp + 0xe4]
mov dword [esp + 0xa0], eax
lea eax, [esp + 0x110]
mov dword [esp + 0xa4], eax
mov eax, ebx
test ecx, ecx
je 0x413211
cmp dword [eax*4 + 0x424780], edi
je 0x413206
inc eax
cmp eax, ecx
jb 0x4131f2
jmp 0x413211
xor eax, eax
jmp 0x413272
mov ebx, dword [eax*4 + 0x424350]
test ebx, ebx
jne 0x413269
mov eax, dword [ebp*4 + 0x424324]
test eax, eax
jne 0x41323f
push dword [esp + ebp*4 + 0x7c]
call dword [0x424774]
test eax, eax
jne 0x413234
push dword [esp + ebp*4 + 0x7c]
call dword [0x424b84]
mov dword [ebp*4 + 0x424324], eax
test eax, eax
je 0x413269
mov edx, edi
mov ecx, eax
call fcn.00412872
mov ebx, eax
test ebx, ebx
je 0x413269
mov ecx, dword [0x424758]
mov dword [ecx*4 + 0x424780], edi
mov dword [ecx*4 + 0x424350], ebx
inc ecx
mov dword [0x424758], ecx
push esi
call dword [0x424778]
mov eax, ebx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x170
ret