Function at 0x41b7e0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0xa0
mov dword [esp + 0x10], 0x3bad394a
mov dword [esp + 0x14], 0x3fad3dae
mov dword [esp + 0x18], 0x234321ac
mov dword [esp + 0x1c], 0x2743254b
mov dword [esp + 0x20], 0x2b4c295a
mov dword [esp + 0x24], 0x2f4a2d4d
mov dword [esp + 0x28], 0x53c7514d
mov dword [esp + 0x2c], 0x57c0553e
lea eax, [esp + 0x30]
mov dword [esp + 8], eax
mov word [esp + 0x30], 0x5956
mov dword [esp + 0x32], 0
mov word [esp + 0x36], 0
mov eax, 0xbb6173b1
mov edx, 0x224f4627
mov esi, 0xddb0b9d8
nop
nop
nop
nop
mov dword [esp + 4], eax
movzx edi, byte [esp + edx - 0x224f4617]
lea ebx, [edi + edi]
not ebx
add ebx, edi
lea eax, [ebx + ebx]
not eax
add eax, ebx
or eax, esi
not edi
or edi, edx
and edi, eax
not edi
mov dword [esp + 0x78], edi
mov ebx, dword [esp + 0x78]
mov eax, ebx
and eax, 0xec
lea edi, [eax + 2]
mov ecx, ebx
and ecx, 2
imul edi, ecx
xor ecx, 2
imul ecx, eax
mov eax, dword [esp + 4]
xor ebx, 0xee
add ebx, ecx
add ebx, edi
inc bl
mov byte [esp + edx - 0x224f4617], bl
add eax, 0xfffffffe
inc edx
dec esi
cmp eax, 0xbb617361
jne 0x41b860
lea edi, [esp + 0x78]
lea eax, [esp + 0x10]
mov ecx, 8
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
lea edi, [esp + 0x98]
mov ecx, 1
mov eax, dword [esp + 8]
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
mov esi, dword [ebp + 0x10]
mov edi, dword [esi + 4]
mov eax, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
nop
cmp word [edi + eax + 2], 0
lea eax, [eax + 2]
jne 0x41b900
cmp eax, 0xffffffdd
jge 0x41b917
mov eax, 0xffffffff
jmp 0x41b91a
add eax, 0x22
push eax
call fcn.00408d90
add esp, 4
mov ebx, eax
movzx ecx, word [edi]
test cx, cx
je 0x41b951
add edi, 2
mov eax, ebx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edi]
add edi, 2
test cx, cx
jne 0x41b940
mov word [eax], 0
movzx ecx, word [esp + 0x78]
test cx, cx
je 0x41b981
lea edx, [esp + 0x7a]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x41b970
mov word [eax], 0
mov eax, dword [ebp + 8]
mov dword [esp + 0x64], eax
mov dword [esp + 4], ebx
mov dword [esp + 0x68], ebx
mov eax, dword [ebp + 0xc]
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], esi
mov eax, dword [ebp + 0x14]
mov dword [esp + 0x74], eax
mov dword [esp + 0x10], 0x7bc979d9
mov dword [esp + 0x14], 0x7f837df0
mov dword [esp + 0x18], 0x73f871d9
mov dword [esp + 0x1c], 0x77d375c6
mov dword [esp + 0x20], 0x4bfd49c8
mov dword [esp + 0x24], 0x4ffd4df1
mov dword [esp + 0x28], 0x43bd41f0
mov dword [esp + 0x2c], 0x47b945bf
mov dword [esp + 0x30], 0x5bf659bc
mov dword [esp + 0x34], 0x5fe95ded
mov dword [esp + 0x38], 0x53e251f9
mov dword [esp + 0x3c], 0x57e55597
mov dword [esp + 0x40], 0x2b9c29e8
mov dword [esp + 0x44], 0x2fa42d8d
mov dword [esp + 0x48], 0x23fb219a
mov dword [esp + 0x4c], 0x27eb2586
mov dword [esp + 0x50], 0x3b3839dc
mov word [esp + 0x5c], 0
mov dword [esp + 0x58], 0
mov dword [esp + 0x54], 0
mov eax, 0xed367f0
mov ecx, 0xd12c980f
movzx edx, byte [esp + ecx + 0x2ed36801]
mov edi, eax
and edi, 0xac20464
mov esi, ecx
and esi, 0x124089b
or esi, edi
mov edi, esi
xor edi, 0x25356b9b
xor esi, 0xdaca9464
or esi, edx
sub edi, edx
add edi, esi
mov esi, edi
and esi, 2
mov ebx, edi
or ebx, 2
inc ebx
imul ebx, esi
xor esi, 2
and edi, 0xfffffffd
inc edi
imul edi, esi
add edi, ebx
add edx, ecx
add edx, edi
mov dword [esp + 0xc], edx
mov esi, dword [esp + 0xc]
add esi, 0xd054562f
mov edx, esi
and edx, 0x67
add edx, edx
xor esi, 0x98
sub edx, esi
mov byte [esp + ecx + 0x2ed36801], dl
dec eax
inc ecx
cmp eax, 0xed367a2
jne 0x41ba50
lea eax, [esp + 0x64]
push eax
push 0x41be30
lea eax, [esp + 0x18]
push eax
mov esi, dword [esp + 0x10]
push esi
call fcn.0041c940
add esp, 0x10
jmp dword [0x448598]