Function at 0x41d0f4
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0xc8
mov esi, esp
mov eax, dword [ebp + 0xc]
push eax
mov dword [esi + 8], esp
push eax
mov dword [esi + 0x18], esp
sub esp, 0x1c
mov dword [esi + 4], esp
sub esp, 8
mov dword [esi + 0xa8], esp
sub esp, 8
mov dword [esi + 0x74], esp
sub esp, 0x14
mov dword [esi + 0xc], esp
sub esp, 0x24
mov dword [esi + 0xb8], esp
sub esp, 0x18
mov dword [esi + 0xa0], esp
sub esp, 0x94
mov dword [esi + 0x68], esp
sub esp, 0x24
mov dword [esi + 0x9c], esp
sub esp, 0x34
mov ecx, esp
mov dword [esi + 0x88], ecx
mov edi, ecx
sub esp, 0x44
mov ecx, esp
mov dword [esi + 0x8c], ecx
mov dword [esi + 0xa4], ecx
sub esp, 0x10
mov ebx, esp
sub esp, 8
mov ecx, esp
and ecx, 0xfffffff8
mov dword [esi + 0x84], ecx
mov esp, ecx
push eax
sub esp, 0x64
mov ecx, esp
and ecx, 0xfffffff8
mov dword [esi + 0x80], ecx
mov esp, ecx
push eax
sub esp, 0x18
mov dword [esi + 0x78], esp
push eax
sub esp, 0xffc
mov edx, esp
push eax
mov dword [esi + 0x5c], esp
sub esp, 8
mov ecx, esp
and ecx, 0xfffffff8
mov dword [esi + 0x64], ecx
mov esp, ecx
push eax
sub esp, 0x14
mov ecx, esp
push eax
mov dword [esi + 0x90], esp
mov dword [esi + 0x70], ebx
mov dword [esi + 0x10], edi
mov dword [esi + 0x7c], edx
mov dword [esi + 0x14], ecx
sub esp, 0xc
mov dword [esi + 0xbc], esp
sub esp, 0x10
mov dword [esi + 0xb4], esp
sub esp, 0x10
mov dword [esi + 0xac], esp
sub esp, 0xc
mov dword [esi + 0xb0], esp
mov eax, dword [eax + 4]
mov edi, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp word [eax + edi + 2], 0
lea edi, [edi + 2]
jne 0x41d1f0
sar edi, 1
lea ecx, [esi + 0x60]
push ecx
push 0
push 0
push edi
push eax
push 0
call dword [0x44fd5c]
mov ebx, dword [esi + 0x60]
test ebx, ebx
jns 0x41d21d
mov eax, 0xffffffff
jmp 0x41d220
lea eax, [ebx + ebx]
push eax
call fcn.0040c730
add esp, 4
lea ecx, [esi + 0x60]
push ecx
push ebx
mov dword [esi + 0x20], eax
push eax
push edi
mov eax, dword [ebp + 0xc]
push dword [eax + 4]
push 0
call dword [0x44fd5c]
mov eax, dword [esi + 0x60]
mov ecx, eax
add ecx, 0xd
jns 0x41d252
mov eax, 0xffffffff
jmp 0x41d259
lea eax, [eax*2 + 0x1a]
push eax
call fcn.0040c730
add esp, 4
mov ebx, eax
mov dword [esi + 0x2c], 0x9722993c
mov dword [esi + 0x30], 0x931d9535
mov dword [esi + 0x34], 0x8f6e911c
mov dword [esi + 0x38], 0x8b178d26
mov dword [esi + 0x3c], 0x87098906
mov dword [esi + 0x40], 0x8311851d
mov dword [esi + 0x44], 0x7f7e8112
mov word [esi + 0x48], 0
mov byte [esi + 0x4a], 0
mov eax, 0x8526cfe6
mov ecx, 0x7ad93019
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [esi + eax + 0x7ad93046]
mov edi, edx
not edi
lea edi, [edx + edi*2]
inc edi
or edi, ecx
or edx, eax
and edx, edi
mov edi, edx
and edi, 1
xor edx, 0x81
lea edx, [edx + edi*2]
inc dl
mov byte [esi + eax + 0x7ad93046], dl
inc eax
dec ecx
cmp eax, 0x8526d005
jne 0x41d2b0
mov eax, dword [esi + 0x20]
movzx ecx, word [eax]
mov eax, ebx
test cx, cx
je 0x41d311
mov eax, dword [esi + 0x20]
lea edx, [eax + 2]
mov eax, ebx
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x41d300
mov word [eax], 0
movzx ecx, word [esi + 0x2c]
test cx, cx
je 0x41d341
lea edx, [esi + 0x2e]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x41d330
mov word [eax], 0
lea eax, [esi + 0x6c]
push 0x60
push 3
push 0x120089
push eax
mov dword [esi + 0x1c], ebx
push ebx
call fcn.00443b30
add esp, 0x14
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x44a998]