Function at 0x41b1f0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0xd0
mov esi, dword [ebp + 0xc]
mov edi, dword [ebp + 8]
mov dword [esp + 0x38], 0x91399f01
mov dword [esp + 0x3c], 0x95c6931b
mov dword [esp + 0x40], 0x893297ca
mov dword [esp + 0x44], 0x8d8a8b2a
mov word [esp + 0x48], 0
mov byte [esp + 0x4a], 0
mov eax, 0x6719fa5
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ecx, byte [esp + eax - 0x6719f6d]
xor ecx, eax
add ecx, 0xdfc7e1c6
mov edx, ecx
xor edx, 0xea
and ecx, 0x6a
lea ecx, [edx + ecx*2]
add cl, 0x17
mov byte [esp + eax - 0x6719f6d], cl
inc eax
cmp eax, 0x6719fb8
jne 0x41b240
lea eax, [esp + 0x38]
push eax
push esi
push edi
call fcn.00413c30
add esp, 0xc
mov byte [esp + 4], al
mov dword [esp + 0x38], 0xc169c769
mov dword [esp + 0x3c], 0xcd5ec352
mov dword [esp + 0x40], 0xc918cf17
mov dword [esp + 0x44], 0xb568cb64
mov word [esp + 0x48], 0xb7b4
mov dword [esp + 0x4a], 0
mov byte [esp + 0x4e], 0
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
mov ecx, eax
add cl, 0xb1
xor cl, byte [esp + eax + 0x38]
add cl, 0x8b
mov byte [esp + eax + 0x38], cl
inc eax
cmp eax, 0x17
jne 0x41b2c0
lea eax, [esp + 0x38]
push eax
push esi
push edi
call fcn.00413c30
add esp, 0xc
mov byte [esp + 3], al
mov dword [esp + 0x38], 0x36d0166
mov dword [esp + 0x3c], 0x76b0576
mov dword [esp + 0x40], 0xb630960
mov dword [esp + 0x44], 0xf7a0d7f
mov dword [esp + 0x48], 0x1360117f
mov dword [esp + 0x4c], 0x1738156d
mov dword [esp + 0x50], 0x1b6b196b
mov dword [esp + 0x54], 0x1f771d70
mov dword [esp + 0x58], 0x23472154
mov word [esp + 0x5c], 0x2524
mov dword [esp + 0x5e], 0
mov word [esp + 0x62], 0
mov eax, 0x2dbbd700
nop
nop
nop
nop
movzx ecx, byte [esp + eax - 0x2dbbd6c8]
xor ecx, eax
lea edx, [ecx + 0x1b54ccff]
mov edi, ecx
neg edi
or edi, 1
mov ebx, edx
and ebx, 0xfe
xor edx, 1
add edi, ecx
add ecx, edi
add ecx, 0x1b54ccff
add ecx, edx
sub ecx, ebx
mov byte [esp + eax - 0x2dbbd6c8], cl
inc eax
cmp eax, 0x2dbbd72c
jne 0x41b350
lea eax, [esp + 0x38]
push eax
push esi
mov edi, dword [ebp + 8]
push edi
call fcn.00413c30
add esp, 0xc
mov ebx, eax
mov dword [esp + 0x38], 0x77e509a7
mov dword [esp + 0x3c], 0x73e575e7
mov dword [esp + 0x40], 0x7fd371d9
mov dword [esp + 0x44], 0x7b287de3
mov dword [esp + 0x48], 0x67f779e7
mov dword [esp + 0x4c], 0x63cb65f0
mov dword [esp + 0x50], 0x6fc361fc
mov dword [esp + 0x54], 0x6d6c
mov byte [esp + 0x58], 0
mov bh, byte [esp + 4]
or bh, byte [esp + 3]
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, eax
add cl, 0x3e
xor cl, byte [esp + eax + 0x38]
add cl, 0xca
mov byte [esp + eax + 0x38], cl
inc eax
cmp eax, 0x21
jne 0x41b400
lea eax, [esp + 0x38]
push eax
push esi
push edi
call fcn.00413c30
add esp, 0xc
mov byte [esp + 4], al
mov dword [esp + 0x38], 0x73c571c4
mov dword [esp + 0x3c], 0x7fd77dd3
mov dword [esp + 0x40], 0x7bc979ce
mov dword [esp + 0x44], 0x47ec45b2
mov dword [esp + 0x48], 0x43f541f3
mov dword [esp + 0x4c], 0x4f4e4dfa
mov word [esp + 0x50], 0
or bh, bl
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ecx, byte [esp + eax + 0x38]
mov edx, 0x2c6f8eb
sub edx, eax
mov edi, edx
and edi, 0x19
or edx, 0x7c3711e6
add edx, eax
add edx, 0x49390715
or edx, edi
and edx, 0x4d3917ff
xor edx, ecx
mov ecx, edx
and ecx, 4
xor edx, 0x108061d
lea ecx, [edx + ecx*2]
add cl, 0x98
mov byte [esp + eax + 0x38], cl
mov ecx, eax
and ecx, 1
xor eax, 1
lea eax, [eax + ecx*2]
cmp eax, 0x1a
jb 0x41b470
lea eax, [esp + 0x38]
push eax
push esi
push dword [ebp + 8]
call fcn.00413c30
add esp, 0xc
mov dword [esp + 0x38], 0x29862b94
mov dword [esp + 0x3c], 0x2d8b2f8f
mov dword [esp + 0x40], 0x31873387
mov dword [esp + 0x44], 0x35833742
mov dword [esp + 0x48], 0x39963b83
mov dword [esp + 0x4c], 0x3d8a3f97
mov dword [esp + 0x50], 0x1020397
mov word [esp + 0x54], 0
mov byte [esp + 0x56], 0
or bh, byte [esp + 4]
mov ah, bh
mov edi, 0xff07
mov esi, 0x2aa00f8
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ebx, byte [esp + edi - 0xfecf]
mov edx, esi
and edx, 0x2a000e0
mov ecx, edi
and ecx, 0xb11f
or ecx, edx
xor ecx, ebx
mov edx, ecx
xor edx, 0x33f54ee0
mov ebx, ecx
xor ebx, 0x150b5c3
and ebx, edx
mov edx, ecx
xor edx, 0x3c
lea ebx, [edx + ebx*2]
and ecx, 1
or ebx, 1
add ebx, ecx
mov byte [esp + edi - 0xfecf], bl
inc edi
dec esi
cmp edi, 0xff26
jne 0x41b530
mov bh, ah
or bh, al
lea eax, [esp + 0x38]
push eax
mov esi, dword [ebp + 0xc]
push esi
push dword [ebp + 8]
call fcn.00413c30
add esp, 0xc
mov bl, al
or bl, bh
xor eax, eax
cmp dword [ebp + 0x10], 0
sete al
jmp dword [eax*4 + 0x442fdc]