Function at 0x41e540
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x110
mov dword [esp + 8], 0x33e0350d
mov dword [esp + 0xc], 0xcfcd31c3
mov dword [esp + 0x10], 0xcb38cd31
mov dword [esp + 0x14], 0xc738c915
mov dword [esp + 0x18], 0xc318c536
mov dword [esp + 0x1c], 0xdf4cc13d
mov dword [esp + 0x20], 0xdbe7dd21
lea eax, [esp + 0x24]
mov dword [esp + 0x24], 0xd9da
mov byte [esp + 0x28], 0
mov dword [esp + 0x8c], 0
mov ecx, dword [esp + 0x8c]
cmp ecx, 0x20
ja 0x41e601
nop
mov ecx, dword [esp + 0x8c]
mov edx, dword [esp + 0x8c]
movzx edx, byte [esp + edx + 8]
lea esi, [ecx + 0x5aa01d79]
add ecx, 0x79
and ecx, edx
or esi, edx
sub esi, ecx
mov dword [esp + 0xc0], esi
mov ecx, dword [esp + 0xc0]
add cl, 0xb1
mov edx, dword [esp + 0x8c]
mov byte [esp + edx + 8], cl
inc dword [esp + 0x8c]
mov ecx, dword [esp + 0x8c]
cmp ecx, 0x21
jb 0x41e5b0
lea esi, [esp + 0x8c]
lea edx, [esp + 8]
mov ecx, 7
mov edi, esi
xchg esi, edx
rep movsd dword es:[edi], dword [esi]
xchg esi, edx
lea edi, [esp + 0xa8]
mov ecx, 1
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
lea ebx, [esp + 0x64]
push ebx
push 0
push 0
push 0xe
push esi
push 0
call dword [0x448a2c]
mov edi, dword [esp + 0x64]
test edi, edi
jns 0x41e64d
mov eax, 0xffffffff
jmp 0x41e650
lea eax, [edi + edi]
push eax
call fcn.00409310
add esp, 4
mov esi, eax
push ebx
push edi
push eax
push 0xe
lea eax, [esp + 0x9c]
push eax
push 0
call dword [0x448a2c]
mov dword [esp + 8], 0x33443552
mov dword [esp + 0xc], 0x2fad31ad
mov dword [esp + 0x10], 0x2bb32dbb
mov dword [esp + 0x14], 0x27b329b3
mov dword [esp + 0x18], 0x232425ab
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], 0
mov dword [esp + 0x24], 0
mov dword [esp + 0x68], 0
mov ecx, dword [esp + 0x68]
cmp ecx, 0x1f
ja 0x41e71f
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0x68]
movzx edx, byte [esp + edx + 8]
lea edi, [ecx + edx]
add edi, 0x50636129
add ecx, 0x29
and ecx, edx
add ecx, ecx
mov edx, ecx
xor edx, edi
not ecx
and ecx, edi
add ecx, ecx
sub ecx, edx
mov dword [esp + 0xc0], ecx
mov ecx, dword [esp + 0xc0]
add cl, 0xe1
mov edx, dword [esp + 0x68]
mov byte [esp + edx + 8], cl
inc dword [esp + 0x68]
mov ecx, dword [esp + 0x68]
cmp ecx, 0x20
jb 0x41e6d0
lea edi, [esp + 0xac]
lea edx, [esp + 8]
mov ecx, 5
xchg esi, edx
rep movsd dword es:[edi], dword [esi]
xchg esi, edx
lea edi, [esp + 0xc0]
xor ecx, ecx
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
mov eax, dword [esp + 0x64]
mov ecx, eax
add ecx, 9
jns 0x41e755
mov eax, 0xffffffff
jmp 0x41e75a
add eax, eax
add eax, 0x12
push eax
call fcn.00409310
add esp, 4
mov ebx, eax
movzx ecx, word [esi]
test cx, cx
je 0x41e791
lea edx, [esi + 2]
mov eax, ebx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x41e780
mov word [eax], 0
movzx ecx, word [esp + 0xac]
test cx, cx
je 0x41e7c1
lea edx, [esp + 0xae]
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x41e7b0
mov edi, dword [ebp + 8]
mov word [eax], 0
lea eax, [esp + 0x88]
push eax
push ebx
call fcn.0043be60
add esp, 8
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x443d6c]