Function at 0x41e4f0
Capabilities:
Check if file exists
Encode data using xor
Get file attributes
Hash data using fnv

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4f1ad5
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0xf0
mov eax, dword [0x53ac84]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, ecx
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xcc], eax
mov ecx, dword [ebx + 0xc]
mov edi, dword [ebx + 8]
mov dword [ebp - 0xdc], ecx
mov ecx, dword [ebx + 0x10]
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0xe0], edi
mov dword [ebp - 0xd8], ecx
mov dword [ebp - 0xe4], 0
test edx, edx
jne 0x41e578
mov dword [eax], edx
mov dword [eax + 4], edx
jmp 0x41ee88
lea ecx, [ebp - 0x2c]
call fcn.004043d0
mov dword [ebp - 4], 1
cmp dword [0x544f88], 0
je 0x41e61b
cmp dword [ebp - 0x18], 8
lea edx, [ebp - 0x2c]
lea ecx, [ebp - 0x8c]
cmovae edx, dword [ebp - 0x2c]
call fcn.00403f80
mov esi, eax
lea eax, [ebp - 0x2c]
cmp eax, esi
je 0x41e5de
mov ecx, eax
call fcn.004072c0
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0x2c], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x1c], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
mov edx, dword [ebp - 0x78]
cmp edx, 8
jb 0x41e61b
mov ecx, dword [ebp - 0x8c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41e611
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41eea6
push edx
push ecx
call fcn.004c1d47
add esp, 8
cmp edi, 0x64
jbe 0x41e7d7
push edi
lea edx, [ebp - 0x2c]
lea ecx, [ebp - 0x44]
call fcn.0041dd80
add esp, 4
mov byte [ebp - 4], 2
cmp dword [0x544f88], 0
je 0x41e6de
cmp dword [ebp - 0x30], 8
lea ecx, [ebp - 0x44]
cmovae ecx, dword [ebp - 0x44]
call fcn.00404800
test eax, eax
jne 0x41e6f7
cmp edi, 0xc8
je 0x41e799
push 0xc8
lea edx, [ebp - 0x2c]
lea ecx, [ebp - 0xa4]
call fcn.0041dd80
add esp, 4
lea ecx, [ebp - 0x44]
push eax
call fcn.00406050
mov edx, dword [ebp - 0x90]
cmp edx, 8
jb 0x41e6c7
mov ecx, dword [ebp - 0xa4]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41e6bd
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41eeab
push edx
push ecx
call fcn.004c1d47
add esp, 8
cmp dword [ebp - 0x30], 8
lea ecx, [ebp - 0x44]
cmovae ecx, dword [ebp - 0x44]
call fcn.00404800
test eax, eax
jmp 0x41e78b
cmp dword [ebp - 0x30], 8
lea eax, [ebp - 0x44]
mov esi, dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmovae eax, dword [ebp - 0x44]
push eax
call esi
cmp eax, 0xffffffff
je 0x41e713
cmp dword [ebp - 0x30], 8
lea eax, [ebp - 0x44]
push dword [ebp - 0x34]
cmovae eax, dword [ebp - 0x44]
lea ecx, [ebp - 0x2c]
push eax
call fcn.00407020
jmp 0x41e799
cmp edi, 0xc8
je 0x41e799
push 0xc8
lea edx, [ebp - 0x2c]
lea ecx, [ebp - 0xbc]
call fcn.0041dd80
add esp, 4
lea ecx, [ebp - 0x44]
push eax
call fcn.00406050
mov edx, dword [ebp - 0xa8]
cmp edx, 8
jb 0x41e77a
mov ecx, dword [ebp - 0xbc]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41e770
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41eeb0
push edx
push ecx
call fcn.004c1d47
add esp, 8
cmp dword [ebp - 0x30], 8
lea eax, [ebp - 0x44]
cmovae eax, dword [ebp - 0x44]
push eax
call esi
cmp eax, 0xffffffff
je 0x41e799
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x2c]
call fcn.00406fa0
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x30]
cmp edx, 8
jb 0x41e7d7
mov ecx, dword [ebp - 0x44]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41e7cd
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41eeb5
push edx
push ecx
call fcn.004c1d47
add esp, 8
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xc4], 0
push dword [ebp - 0xd8]
mov byte [ebp - 4], 3
lea eax, [ebp - 0x2c]
push dword [ebp - 0xdc]
cmp dword [ebp - 0x18], 8
push edi
cmovae eax, dword [ebp - 0x2c]
push eax
lea eax, [ebp - 0x5c]
push str._s_factor__d_color__s_scale__s
push eax
call fcn.00416170
add esp, 0x18
mov byte [ebp - 4], 4
lea edx, [ebp - 0x5c]
cmp dword [ebp - 0x48], 8
mov dword [ebp - 0x64], 0
cmovae edx, dword [ebp - 0x5c]
xor eax, eax
mov ecx, edx
mov dword [ebp - 0x60], 7
mov word [ebp - 0x74], ax
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41e841
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x74]
call fcn.00407020
cmp dword [ebp - 0x60], 8
lea edi, [ebp - 0x74]
mov esi, dword [ebp - 0x74]
mov edx, 0x811c9dc5
mov eax, dword [ebp - 0x64]
cmovae edi, esi
xor ecx, ecx
add eax, eax
je 0x41e88b
mov esi, eax
movzx eax, byte [ecx + edi]
inc ecx
xor eax, edx
imul edx, eax, 0x1000193
cmp ecx, esi
jb 0x41e877
mov esi, dword [ebp - 0x74]
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0xc0], edx
cmp eax, 8
jb 0x41e8ce
lea ecx, [eax*2 + 2]
mov eax, esi
cmp ecx, 0x1000
jb 0x41e8be
mov esi, dword [esi - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41eeba
push ecx
push esi
call fcn.004c1d47
mov edx, dword [ebp - 0xc0]
add esp, 8
mov esi, dword [0x544f6c]
or edi, 0xffffffff
mov ecx, esi
mov eax, dword [ecx + 4]
cmp byte [eax + 0xd], 0
jne 0x41ea97
cmp dword [eax + 0x10], edx
jae 0x41e8f0
mov eax, dword [eax + 8]
jmp 0x41e8f4
mov ecx, eax
mov eax, dword [eax]
cmp byte [eax + 0xd], 0
je 0x41e8e6
cmp ecx, esi
je 0x41ea97
cmp edx, dword [ecx + 0x10]
jb 0x41ea97
lea eax, [ebp - 0xc0]
push eax
call fcn.0041ff80
mov edi, eax
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0xcc], 0
mov esi, dword [edi + 4]
test esi, esi
je 0x41e966
mov edx, dword [esi + 4]
add esi, 4
test edx, edx
je 0x41e966
nop
lea ecx, [edx + 1]
mov eax, edx
lock cmpxchg dword [esi], ecx
cmp eax, edx
je 0x41e955
mov edx, dword [esi]
test edx, edx
jne 0x41e940
jmp 0x41e966
mov eax, dword [edi]
mov dword [ebp - 0xd0], eax
mov eax, dword [edi + 4]
mov dword [ebp - 0xcc], eax
lea eax, [ebp - 0xd0]
push eax
lea ecx, [ebp - 0xc8]
call fcn.004200d0
mov byte [ebp - 4], 5
mov esi, dword [ebp - 0xcc]
test esi, esi
je 0x41e9a8
or edi, 0xffffffff
mov eax, edi
lock xadd dword [esi + 4], eax
jne 0x41e9a8
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
mov eax, edi
lock xadd dword [esi + 8], eax
jne 0x41e9a8
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
mov byte [ebp - 4], 4
mov edi, dword [ebp - 0xc8]
test edi, edi
jne 0x41eba1
mov edi, dword [0x544f6c]
mov ecx, edi
mov edx, dword [ebp - 0xc0]
mov esi, edi
mov dword [ebp - 0xcc], ecx
mov eax, dword [edi + 4]
cmp byte [eax + 0xd], 0
jne 0x41ea0d
nop dword [eax]
mov ecx, dword [eax + 0x10]
cmp ecx, edx
jae 0x41e9f2
mov eax, dword [eax + 8]
mov ecx, dword [ebp - 0xcc]
jmp 0x41ea07
cmp byte [esi + 0xd], 0
je 0x41e9fd
cmp edx, ecx
cmovb esi, eax
mov ecx, eax
mov eax, dword [eax]
mov dword [ebp - 0xcc], ecx
cmp byte [eax + 0xd], 0
je 0x41e9e0
cmp byte [esi + 0xd], 0
lea eax, [edi + 4]
jne 0x41ea18
mov eax, esi
mov eax, dword [eax]
cmp byte [eax + 0xd], 0
jne 0x41ea34
cmp edx, dword [eax + 0x10]
jae 0x41ea2b
mov esi, eax
mov eax, dword [eax]
jmp 0x41ea2e
mov eax, dword [eax + 8]
cmp byte [eax + 0xd], 0
je 0x41ea20
mov eax, ecx
cmp ecx, esi
je 0x41ea86
nop word [eax + eax]
mov ecx, dword [eax + 8]
cmp byte [ecx + 0xd], 0
je 0x41ea66
mov ecx, dword [eax + 4]
cmp byte [ecx + 0xd], 0
jne 0x41ea62
cmp eax, dword [ecx + 8]
jne 0x41ea62
mov eax, ecx
mov ecx, dword [ecx + 4]
cmp byte [ecx + 0xd], 0
je 0x41ea52
mov eax, ecx
jmp 0x41ea7c
mov eax, ecx
mov edx, dword [eax]
cmp byte [edx + 0xd], 0
jne 0x41ea7c
mov ecx, dword [edx]
mov eax, edx
mov edx, ecx
cmp byte [ecx + 0xd], 0
je 0x41ea70
cmp eax, esi
jne 0x41ea40
mov ecx, dword [ebp - 0xcc]
push esi
push ecx
lea eax, [ebp - 0xec]
push eax
call fcn.004203f0
or edi, 0xffffffff
cmp dword [0x544f88], 0
je 0x41ecd4
cmp dword [ebp - 0x18], 8
lea ecx, [ebp - 0x2c]
cmovae ecx, dword [ebp - 0x2c]
call fcn.00404690
test eax, eax
je 0x41ecd4
push dword [ebp - 0xd8]
cmp dword [ebp - 0x18], 8
lea ecx, [ebp - 0x2c]
push dword [ebp - 0xdc]
cmovae ecx, dword [ebp - 0x2c]
mov edx, eax
push dword [ebp - 0xe0]
push ecx
lea ecx, [ebp - 0xf4]
call fcn.0041db60
add esp, 0x10
lea ecx, [ebp - 0xc8]
push eax
call fcn.004200d0
mov byte [ebp - 4], 8
mov esi, dword [ebp - 0xf0]
test esi, esi
je 0x41eb23
mov eax, edi
lock xadd dword [esi + 4], eax
jne 0x41eb23
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
mov eax, edi
lock xadd dword [esi + 8], eax
jne 0x41eb23
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
mov byte [ebp - 4], 4
mov esi, dword [ebp - 0xc8]
test esi, esi
je 0x41ecd4
lea eax, [ebp - 0xc8]
push eax
push ecx
lea eax, [ebp - 0xc0]
push eax
call fcn.0041ff80
add esp, 4
mov ecx, eax
call fcn.004209e0
mov edi, dword [ebp - 0xd4]
mov edx, dword [ebp - 0x48]
mov eax, dword [ebp - 0xc4]
mov dword [edi], esi
mov dword [edi + 4], eax
cmp edx, 8
jb 0x41ec83
mov ecx, dword [ebp - 0x5c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41ec79
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41eebf
jmp 0x41ec79
lea eax, [ebp - 0xc0]
push eax
call fcn.0041ff80
mov esi, dword [ebp - 0xc4]
test esi, esi
je 0x41ebbb
lock inc dword [esi + 8]
mov dword [eax], edi
mov ecx, dword [eax + 4]
mov dword [eax + 4], esi
mov byte [ebp - 4], 6
test ecx, ecx
je 0x41ebdb
or eax, 0xffffffff
lock xadd dword [ecx + 8], eax
dec eax
jne 0x41ebdb
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0xd4]
mov edx, dword [ebp - 0x48]
mov dword [eax], edi
mov dword [eax + 4], esi
cmp edx, 8
jb 0x41ec20
mov ecx, dword [ebp - 0x5c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41ec16
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41eec4
push edx
push ecx
call fcn.004c1d47
add esp, 8
xor eax, eax
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 7
mov word [ebp - 0x5c], ax
mov edx, dword [ebp - 0x18]
cmp edx, 8
jb 0x41ec6e
mov ecx, dword [ebp - 0x2c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41ec64
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41eec9
push edx
push ecx
call fcn.004c1d47
add esp, 8
mov eax, dword [ebp - 0xd4]
jmp 0x41ee88
push edx
push ecx
call fcn.004c1d47
add esp, 8
xor eax, eax
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 7
mov word [ebp - 0x5c], ax
mov edx, dword [ebp - 0x18]
cmp edx, 8
jb 0x41ee86
mov ecx, dword [ebp - 0x2c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41ee7c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41eece
jmp 0x41ee7c
push dword [ebp - 0xd8]
cmp dword [ebp - 0x18], 8
lea edx, [ebp - 0x2c]
push dword [ebp - 0xdc]
cmovae edx, dword [ebp - 0x2c]
lea ecx, [ebp - 0xfc]
push dword [ebp - 0xe0]
call fcn.0041d9a0
add esp, 0xc
lea ecx, [ebp - 0xc8]
push eax
call fcn.004200d0
mov byte [ebp - 4], 0xa
mov esi, dword [ebp - 0xf8]
test esi, esi
je 0x41ed38
mov eax, edi
lock xadd dword [esi + 4], eax
jne 0x41ed38
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
mov eax, edi
lock xadd dword [esi + 8], eax
jne 0x41ed38
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
mov byte [ebp - 4], 4
mov esi, dword [ebp - 0xc8]
test esi, esi
je 0x41edcc
lea eax, [ebp - 0xc8]
push eax
push ecx
lea eax, [ebp - 0xc0]
push eax
call fcn.0041ff80
add esp, 4
mov ecx, eax
call fcn.004209e0
mov edi, dword [ebp - 0xd4]
mov edx, dword [ebp - 0x48]
mov eax, dword [ebp - 0xc4]
mov dword [edi], esi
mov dword [edi + 4], eax
cmp edx, 8
jb 0x41edb3
mov ecx, dword [ebp - 0x5c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41eda9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41eed3
push edx
push ecx
call fcn.004c1d47
add esp, 8
xor eax, eax
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 7
mov word [ebp - 0x5c], ax
jmp 0x41ec97
mov edi, dword [ebp - 0xd4]
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0xe4], 1
mov dword [edi], 0
mov dword [edi + 4], 0
cmp edx, 8
jb 0x41ee27
mov ecx, dword [ebp - 0x5c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41ee1d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41eece
push edx
push ecx
call fcn.004c1d47
add esp, 8
xor eax, eax
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 7
mov word [ebp - 0x5c], ax
mov byte [ebp - 4], 0xc
mov esi, dword [ebp - 0xc4]
test esi, esi
je 0x41ec97
or eax, 0xffffffff
lock xadd dword [esi + 4], eax
jne 0x41ec97
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
or eax, 0xffffffff
lock xadd dword [esi + 8], eax
dec eax
jne 0x41ec97
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
jmp 0x41ec97
push edx
push ecx
call fcn.004c1d47
add esp, 8
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004c1fe9
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.004c7ca1
call fcn.004c7ca1
call fcn.004c7ca1
call fcn.004c7ca1
call fcn.004c7ca1
call fcn.004c7ca1
call fcn.004c7ca1
call fcn.004c7ca1
call fcn.004c7ca1
call fcn.004c7ca1
int3