Function at 0x41e652
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x2cc
push ebx
push ebp
push esi
push edi
mov dword [esp + 0x38], edx
xor esi, esi
mov dword [esp + 0x1c], ecx
mov edi, 0xff
mov dword [esp + 0x10], 0x3d544d06
mov byte [esp + 0x14], 0xb
movzx eax, byte [esp + esi + 0x10]
add ax, 0x1f
and ax, di
mov word [esp + esi*2 + 0x4c], ax
inc esi
cmp esi, 5
jl 0x41e678
xor eax, eax
mov word [esp + 0x56], ax
mov al, byte [0x42bb9e]
add al, 0x3c
movzx eax, al
imul eax, eax, 0xa5
push ecx
mov byte [0x42bb97], al
lea eax, [esp + 0x50]
push eax
call fcn.00422d73
or dword [0x42bb34], 0xbe430e6a
mov ebp, eax
mov dword [esp + 0x18], ebp
pop ecx
pop ecx
test ebp, ebp
je 0x41eb1e
mov dl, byte [0x42bb97]
sub dl, 0x50
movzx eax, dl
and eax, 0x45
imul eax, eax, 0x684a14
lea ecx, [edx + 0x62]
mov edx, 0x54e1cc7b
mov byte [0x42bb97], cl
xor ecx, ecx
inc ecx
mov dword [0x42bb34], eax
or al, 0xc0
mov byte [0x42bb9e], al
lea eax, [esp + 0x88]
push eax
push ebp
call fcn.004155a6
call eax
mov cl, byte [0x42bb34]
mov esi, eax
sub cl, 0x71
mov dword [esp + 0x3c], esi
movzx ecx, cl
mov edx, 0x17299c7b
and ecx, 0x8d3ab72d
mov dword [0x42bb34], ecx
mov cl, byte [0x42bb9e]
sub cl, 0x17
mov byte [0x42bb97], cl
xor ecx, ecx
inc ecx
call fcn.004155a6
mov dl, byte [0x42bb97]
mov cl, byte [0x42bb34]
add dl, 0x25
and cl, 0xbc
mov dword [esp + 0x40], eax
mov byte [0x42bb97], cl
cmp esi, 0xffffffff
je 0x41eb09
mov ebp, dword [esp + 0x1c]
movzx edx, dl
add edx, 0x9135adcd
mov word [esp + 0x18], 0x5656
mov dword [esp + 0x20], 0xd3eae39c
mov word [esp + 0x24], 0xe39c
mov byte [esp + 0x26], 0xea
lea ebx, [edx + 0x20]
mov byte [0x42bb97], bl
push 0x2e
pop eax
mov word [esp + 0x1c], ax
xor eax, eax
mov word [esp + 0x1e], ax
xor ecx, ecx
mov al, byte [esp + ecx + 0x18]
xor al, 0x78
movzx eax, al
mov word [esp + ecx*2 + 0x44], ax
inc ecx
cmp ecx, 2
jl 0x41e7b3
xor eax, eax
xor ecx, ecx
mov word [esp + 0x48], ax
movzx eax, byte [esp + ecx + 0x20]
sub ax, 0x77
and ax, di
mov word [esp + ecx*2 + 0x58], ax
inc ecx
cmp ecx, 7
jl 0x41e7d0
xor eax, eax
add dl, 0x40
mov word [esp + 0x66], ax
movzx eax, bl
or eax, 0x2c1b7f3b
mov byte [0x42bb9e], dl
mov dword [0x42bb34], eax
lea eax, [esp + 0x1c]
push eax
lea eax, [esp + 0xb8]
push eax
call fcn.00405af6
pop ecx
pop ecx
test eax, eax
je 0x41eaba
lea eax, [esp + 0x44]
push eax
lea eax, [esp + 0xb8]
push eax
call fcn.00405af6
pop ecx
pop ecx
test eax, eax
je 0x41eaba
mov al, byte [0x42bb9e]
xor dword [0x42bb34], 0xe5ad28e7
and al, 0x4b
mov byte [0x42bb97], al
lea eax, [esp + 0xb4]
push eax
lea eax, [esp + 0x5c]
push ebp
push eax
call fcn.00422d73
mov edx, dword [0x42bb34]
mov edi, eax
add esp, 0xc
lea ecx, [edx + 0x78]
mov byte [0x42bb97], cl
add cl, 0x1b
mov byte [0x42bb9e], cl
test edi, edi
je 0x41ea93
and edx, 0x95bd519b
movzx eax, dl
imul ebx, eax, 0xfe
test byte [esp + 0x88], 0x10
je 0x41e975
mov dword [esp + 0x28], 0x59051a53
xor ecx, ecx
mov word [esp + 0x2c], 0x1a53
mov byte [esp + 0x2e], 5
mov al, byte [esp + ecx + 0x28]
xor al, 0x76
movzx eax, al
mov word [esp + ecx*2 + 0x68], ax
inc ecx
cmp ecx, 7
jl 0x41e8bd
xor eax, eax
xor bl, 0x1d
mov word [esp + 0x76], ax
movzx eax, bl
or eax, 0x61fe95b7
mov byte [0x42bb9e], bl
mov dword [0x42bb34], eax
add bl, 0x57
lea eax, [esp + 0xb4]
mov byte [0x42bb97], bl
push eax
push dword [esp + 0x3c]
lea eax, [esp + 0x70]
push eax
call fcn.00422d73
mov edx, dword [0x42bb34]
mov esi, eax
mov al, byte [0x42bb9e]
or edx, 0x1a875d00
mov cl, al
add esp, 0xc
or cl, 0x36
xor edx, 0xb9afb2d5
test esi, esi
je 0x41e978
add cl, 9
movzx eax, al
and cl, 0xef
and eax, 0xf41e99a4
mov byte [0x42bb97], cl
mov edx, esi
mov ecx, edi
mov dword [0x42bb34], eax
call fcn.0041e652
mov al, byte [0x42bb34]
and al, 0x61
push esi
mov byte [0x42bb97], al
call fcn.004056f0
mov edx, dword [0x42bb34]
pop ecx
mov cl, byte [0x42bb97]
jmp 0x41e978
sub cl, 0x32
test byte [esp + 0x88], 0xa7
lea ebx, [ecx - 0x76]
mov byte [0x42bb9e], bl
je 0x41ea6e
mov dword [esp + 0x30], 0xb1f5eea7
xor ecx, ecx
mov word [esp + 0x34], 0xeea7
mov edx, 0xff
mov byte [esp + 0x36], 0xf5
movzx eax, byte [esp + ecx + 0x30]
add ax, 0x7e
and ax, dx
mov word [esp + ecx*2 + 0x78], ax
inc ecx
cmp ecx, 7
jl 0x41e9aa
xor eax, eax
sub bl, 0x47
mov word [esp + 0x86], ax
movzx eax, bl
sub bl, 0x7d
and eax, 0xd4198734
mov byte [0x42bb9e], bl
mov dword [0x42bb34], eax
add bl, 0x32
lea eax, [esp + 0xb4]
mov byte [0x42bb97], bl
push eax
push dword [esp + 0x3c]
lea eax, [esp + 0x80]
push eax
call fcn.00422d73
mov cl, byte [0x42bb97]
mov esi, eax
mov dl, cl
add esp, 0xc
or dl, 0x32
or cl, 0xe7
mov byte [0x42bb9e], dl
test esi, esi
je 0x41ea68
mov eax, dword [0x42bb34]
add dl, 0x51
xor eax, 0xdf58d59a
mov byte [0x42bb97], dl
add eax, 0x409e31d7
mov edx, esi
mov ecx, edi
mov dword [0x42bb34], eax
call fcn.0041e59c
movzx eax, byte [0x42bb9e]
imul eax, eax, 0x85
push esi
mov byte [0x42bb97], al
call fcn.004056f0
pop ecx
mov cl, byte [0x42bb97]
mov edx, dword [0x42bb34]
movzx eax, cl
xor edx, 0xfb63ae48
imul eax, eax, 0xe8
push edi
mov dword [0x42bb34], edx
mov byte [0x42bb97], al
call fcn.004056f0
mov esi, dword [esp + 0x40]
pop ecx
mov edi, 0xff
lea eax, [esp + 0x88]
push eax
push esi
call dword [esp + 0x48]
test eax, eax
je 0x41eae3
mov bl, byte [0x42bb97]
mov edx, dword [0x42bb34]
jmp 0x41e7a2
mov cl, byte [0x42bb97]
xor dword [0x42bb34], 0xe7c9ea97
movzx eax, cl
imul eax, eax, 0x9d
add cl, 0x52
mov byte [0x42bb97], cl
mov byte [0x42bb9e], al
jmp 0x41ea98
mov al, byte [0x42bb34]
xor ecx, ecx
xor al, 0x74
mov edx, 0x83fbc401
push esi
inc ecx
mov byte [0x42bb97], al
call fcn.004155a6
call eax
mov cl, byte [0x42bb97]
mov ebp, dword [esp + 0x10]
movzx eax, cl
imul eax, eax, 0xb2
push ebp
mov byte [0x42bb9e], al
call fcn.004056f0
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2cc
ret