Function at 0x41d130
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x88
mov edi, dword [esp + 0xa8]
mov ebp, dword [esp + 0xa4]
mov ebx, dword [esp + 0xa0]
mov ecx, dword [ebp + 4]
mov eax, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp word [ecx + eax + 2], 0
lea eax, [eax + 2]
jne 0x41d160
mov ecx, 0xfffffffe
cmp word [ebx + ecx + 2], 0
lea ecx, [ecx + 2]
jne 0x41d170
sar eax, 1
sar ecx, 1
lea edx, [eax + ecx]
add edx, 0x3f
test edx, edx
jns 0x41d190
mov eax, 0xffffffff
jmp 0x41d199
add eax, ecx
lea eax, [eax*2 + 0x7e]
push eax
call fcn.004082d0
add esp, 4
mov esi, eax
mov dword [esp + 0x4c], 0x99e19bfe
mov dword [esp + 0x50], 0xa5cda7e5
mov dword [esp + 0x54], 0xa1efa3da
mov dword [esp + 0x58], 0xaddcafd1
mov dword [esp + 0x5c], 0xa9c1abd0
mov dword [esp + 0x60], 0xb5cab7d0
mov dword [esp + 0x64], 0xb1deb3e3
mov dword [esp + 0x68], 0xbd82bff3
mov dword [esp + 0x6c], 0xb9fdbb82
mov dword [esp + 0x70], 0xc581c784
mov dword [esp + 0x74], 0xc1fbc3fe
mov dword [esp + 0x78], 0xcd89cffe
mov dword [esp + 0x7c], 0xc9aecbf7
mov dword [esp + 0x80], 0xd5bad7bf
mov dword [esp + 0x84], 0xd1d2d3ba
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, eax
and edx, 0x25
xor edx, 0xe5
mov ecx, eax
and ecx, 0x1a
sub ecx, edx
xor cl, byte [esp + eax + 0x4c]
add cl, 0x79
mov byte [esp + eax + 0x4c], cl
inc eax
cmp eax, 0x3c
jne 0x41d230
mov dword [esp + 4], 0x61eb67c0
mov dword [esp + 8], 0x5df363ec
mov dword [esp + 0xc], 0x59fd5fce
mov dword [esp + 0x10], 0x55c55bc1
mov dword [esp + 0x14], 0x51ca57f0
mov dword [esp + 0x18], 0x4dcc53cf
mov dword [esp + 0x1c], 0x49c14fef
mov dword [esp + 0x20], 0x45c64bdc
mov dword [esp + 0x24], 0x41d147e0
mov dword [esp + 0x28], 0x3dc843d1
mov dword [esp + 0x2c], 0x39a13feb
mov dword [esp + 0x30], 0x35b63bb0
mov dword [esp + 0x34], 0x31a037ab
mov dword [esp + 0x38], 0x2da933bd
mov dword [esp + 0x3c], 0x29b82fbd
mov dword [esp + 0x40], 0x25ff2bfd
mov dword [esp + 0x44], 0x212627f1
mov byte [esp + 0x4a], 0
mov word [esp + 0x48], 0
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
mov ecx, eax
add cl, 0x19
xor cl, byte [esp + eax + 4]
add cl, 0x83
mov byte [esp + eax + 4], cl
inc eax
cmp eax, 0x47
jne 0x41d2f0
mov ecx, dword [ebp + 4]
movzx edx, word [ecx]
mov eax, esi
test dx, dx
je 0x41d331
add ecx, 2
mov eax, esi
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], dx
add eax, 2
movzx edx, word [ecx]
add ecx, 2
test dx, dx
jne 0x41d320
mov word [eax], 0
movzx ecx, word [esp + 4]
test cx, cx
je 0x41d361
lea edx, [esp + 6]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x41d350
mov word [eax], 0
movzx ecx, word [ebx]
test cx, cx
je 0x41d391
add ebx, 2
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [ebx]
add ebx, 2
test cx, cx
jne 0x41d380
mov word [eax], 0
movzx ecx, word [esp + 0x4c]
test cx, cx
je 0x41d3c1
lea edx, [esp + 0x4e]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x41d3b0
mov word [eax], 0
mov ebx, dword [edi]
mov eax, 0xfffffffe
nop
nop
nop
cmp word [ebx + eax + 2], 0
lea eax, [eax + 2]
jne 0x41d3d0
mov edx, dword [ebp]
mov ecx, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp word [edx + ecx + 2], 0
lea ecx, [ecx + 2]
jne 0x41d3f0
mov edi, dword [ebp + 8]
mov edx, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp word [edi + edx + 2], 0
lea edx, [edx + 2]
jne 0x41d410
mov dword [esp], esi
sar eax, 1
sar ecx, 1
sar edx, 1
add ecx, eax
lea eax, [edx + ecx]
add eax, 0xb
mov esi, ebp
test eax, eax
jns 0x41d439
mov eax, 0xffffffff
jmp 0x41d442
add ecx, edx
lea eax, [ecx*2 + 0x16]
push eax
call fcn.004082d0
add esp, 4
mov edi, eax
mov dword [esp + 4], 0x315d3f55
mov dword [esp + 8], 0x354e334c
mov dword [esp + 0xc], 0x49423753
mov dword [esp + 0x10], 0x4d7b4b3d
mov word [esp + 0x14], 0x4f4c
mov dword [esp + 0x16], 0
xor eax, eax
nop
nop
lea ebp, [eax + eax]
mov ecx, ebp
and ecx, 0x2a
mov edx, eax
xor edx, 0xb5
add edx, ecx
xor dl, byte [esp + eax + 4]
add dl, 0x77
mov byte [esp + eax + 4], dl
and ebp, 2
xor eax, 1
add eax, ebp
cmp eax, 0x16
jb 0x41d480
movzx ecx, word [esp + 4]
mov eax, edi
test cx, cx
je 0x41d4d1
lea edx, [esp + 6]
mov eax, edi
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x41d4c0
mov word [eax], 0
movzx ecx, word [ebx]
test cx, cx
je 0x41d501
add ebx, 2
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [ebx]
add ebx, 2
test cx, cx
jne 0x41d4f0
mov word [eax], 0x5f
add eax, 2
mov ecx, dword [esi]
movzx edx, word [ecx]
test dx, dx
je 0x41d531
add ecx, 2
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], dx
add eax, 2
movzx edx, word [ecx]
add ecx, 2
test dx, dx
jne 0x41d520
mov word [eax], 0x5f
add eax, 2
mov ecx, dword [esi + 8]
movzx edx, word [ecx]
test dx, dx
je 0x41d563
add ecx, 2
mov esi, dword [esp]
nop
nop
nop
nop
nop
nop
mov word [eax], dx
add eax, 2
movzx edx, word [ecx]
add ecx, 2
test dx, dx
jne 0x41d550
jmp 0x41d566
mov esi, dword [esp]
mov word [eax], 0
mov dword [esp + 4], 0x5756493e
mov dword [esp + 8], 0
xor eax, eax
nop
nop
nop
mov ecx, eax
add cl, 0x6e
xor cl, byte [esp + eax + 4]
add cl, 0xda
mov byte [esp + eax + 4], cl
inc eax
cmp eax, 8
jne 0x41d580
lea eax, [esp + 4]
push 0
push 1
push 0
push eax
push esi
push edi
push dword [esp + 0xb4]
call fcn.0041d8a0
add esp, 0x1c
mov ebx, eax
jmp dword [0x442eb0]