Function at 0x41e4c0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x48
mov edi, dword [esp + 0x64]
mov ebp, dword [esp + 0x60]
mov ecx, dword [ebp + 4]
mov eax, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp word [ecx + eax + 2], 0
lea eax, [eax + 2]
jne 0x41e4e0
sar eax, 1
mov ebx, dword [edi + 4]
mov ecx, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp word [ebx + ecx + 2], 0
lea ecx, [ecx + 2]
jne 0x41e500
sar ecx, 1
lea edx, [eax + ecx]
add edx, 0x1b
test edx, edx
jns 0x41e51e
mov eax, 0xffffffff
jmp 0x41e527
add eax, ecx
lea eax, [eax*2 + 0x36]
push eax
call fcn.0040c8e0
add esp, 4
mov esi, eax
mov dword [esp + 0xc], 0x61326700
mov dword [esp + 0x10], 0x7d1f6311
mov dword [esp + 0x14], 0x790a7f1f
mov dword [esp + 0x18], 0x75257b58
mov dword [esp + 0x1c], 0x71fa77fc
mov dword [esp + 0x20], 0x8d04730f
mov dword [esp + 0x24], 0x89f58f01
mov dword [esp + 0x28], 0x85fc8bf9
mov dword [esp + 0x2c], 0x81eb87a4
mov dword [esp + 0x30], 0x9d0e83ff
mov dword [esp + 0x34], 0x99e59f10
mov dword [esp + 0x38], 0x95e39bee
mov dword [esp + 0x3c], 0x91f29719
mov word [esp + 0x40], 0x9390
mov dword [esp + 0x42], 0
mov dword [esp], 0
mov eax, dword [esp]
cmp eax, 0x39
ja 0x41e606
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp]
mov ecx, dword [esp]
movzx ecx, byte [esp + ecx + 0xc]
mov edx, eax
xor edx, 0x110d44e9
and eax, 0x110d44e9
lea eax, [edx + eax*2]
xor eax, ecx
mov dword [esp + 4], eax
mov eax, dword [esp + 4]
mov ecx, eax
not ecx
and ecx, 0x8d
and eax, 0x72
sub eax, ecx
mov ecx, dword [esp]
mov byte [esp + ecx + 0xc], al
inc dword [esp]
mov eax, dword [esp]
cmp eax, 0x3a
jb 0x41e5c0
mov ecx, dword [ebp + 4]
movzx edx, word [ecx]
mov eax, esi
test dx, dx
je 0x41e631
add ecx, 2
mov eax, esi
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], dx
add eax, 2
movzx edx, word [ecx]
add ecx, 2
test dx, dx
jne 0x41e620
mov word [eax], 0
movzx ecx, word [esp + 0xc]
test cx, cx
je 0x41e661
lea edx, [esp + 0xe]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x41e650
mov word [eax], 0
movzx ecx, word [ebx]
test cx, cx
je 0x41e691
add ebx, 2
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [ebx]
add ebx, 2
test cx, cx
jne 0x41e680
mov word [eax], 0
mov ebp, dword [ebp]
mov eax, 0xfffffffe
nop
nop
cmp word [ebp + eax + 2], 0
lea eax, [eax + 2]
jne 0x41e6a0
mov ecx, dword [esp + 0x60]
mov edx, dword [ecx + 8]
mov ecx, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp word [edx + ecx + 2], 0
lea ecx, [ecx + 2]
jne 0x41e6c0
mov ebx, dword [edi]
mov edx, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp word [ebx + edx + 2], 0
lea edx, [edx + 2]
jne 0x41e6e0
sar eax, 1
sar ecx, 1
sar edx, 1
add ecx, eax
lea eax, [edx + ecx]
add eax, 0xe
mov edi, esi
test eax, eax
jns 0x41e706
mov eax, 0xffffffff
jmp 0x41e70f
add ecx, edx
lea eax, [ecx*2 + 0x1c]
push eax
call fcn.0040c8e0
add esp, 4
movzx ecx, word [ebp]
mov dword [esp + 8], eax
test cx, cx
je 0x41e742
add ebp, 2
mov eax, dword [esp + 8]
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [ebp]
add ebp, 2
test cx, cx
jne 0x41e730
mov word [eax], 0x2f
mov dword [esp + 0xc], 0x31793f0d
mov dword [esp + 0x10], 0x354633b8
mov dword [esp + 0x14], 0x49483753
mov dword [esp + 0x18], 0x4d314b3d
mov dword [esp + 0x1c], 0x41304f3d
mov dword [esp + 0x20], 0x45734335
mov dword [esp + 0x24], 0x4744
mov dword [esp], 0
mov ecx, dword [esp]
cmp ecx, 0x1b
ja 0x41e7e1
nop
nop
mov edx, dword [esp]
mov ecx, dword [esp]
movzx ecx, byte [esp + ecx + 0xc]
mov esi, edx
or esi, 0xfaedca4a
mov ebp, edx
not ebp
or ebp, 0x51235b5
and ebp, esi
not ebp
add edx, edx
and edx, 0xa246b6a
mov esi, edx
and esi, ebp
xor edx, ebp
lea edx, [edx + esi*2]
xor edx, ecx
mov dword [esp + 4], edx
mov ecx, dword [esp + 4]
add cl, 0x77
mov edx, dword [esp]
mov byte [esp + edx + 0xc], cl
inc dword [esp]
mov ecx, dword [esp]
cmp ecx, 0x1c
jb 0x41e790
add eax, 2
mov ecx, dword [esp + 0x60]
mov ecx, dword [ecx + 8]
movzx edx, word [ecx]
test dx, dx
je 0x41e811
add ecx, 2
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], dx
add eax, 2
movzx edx, word [ecx]
add ecx, 2
test dx, dx
jne 0x41e800
mov word [eax], 0
movzx ecx, word [esp + 0xc]
test cx, cx
je 0x41e841
lea edx, [esp + 0xe]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x41e830
mov word [eax], 0
movzx ecx, word [ebx]
test cx, cx
je 0x41e871
add ebx, 2
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [ebx]
add ebx, 2
test cx, cx
jne 0x41e860
mov word [eax], 0
mov dword [esp + 0xc], 0x131211ea
mov dword [esp + 0x10], 0
mov dword [esp], 0
mov eax, dword [esp]
cmp eax, 7
ja 0x41e8ea
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp]
mov ecx, dword [esp]
movzx ecx, byte [esp + ecx + 0xc]
mov edx, eax
xor edx, 0x4483267c
and eax, 0xc483267c
lea eax, [edx + eax*2]
lea edx, [eax + ecx]
and eax, ecx
mov ecx, edx
not ecx
and ecx, eax
add ecx, eax
not eax
and eax, edx
sub eax, ecx
mov dword [esp + 4], eax
mov eax, dword [esp + 4]
add al, 0x94
mov ecx, dword [esp]
mov byte [esp + ecx + 0xc], al
inc dword [esp]
mov eax, dword [esp]
cmp eax, 8
jb 0x41e8a0
lea eax, [esp + 0xc]
push 0
push 0
push 0
push 0xc00000
push eax
push edi
push dword [esp + 0x20]
push dword [esp + 0x78]
call fcn.00421720
add esp, 0x20
mov ebx, eax
jmp dword [0x4490e4]