Function at 0x41a6d0
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x118
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp + 8]
mov dword [esp + 0xfc], 0
mov dword [esp + 0xf8], 0x7af1
mov word [esp + 0xf6], 0x1761
mov byte [esp + 0xf5], 0x34
mov byte [esp + 0xf4], 0
mov dword [esp + 0xf0], 0x8b5
mov word [esp + 0xd6], 0x10c3
mov edx, dword [esp + 0x108]
mov esi, dword [esp + 0x10c]
mov edi, edx
not edi
mov ebx, esi
not ebx
mov dword [esp + 0x64], eax
movzx eax, word [esp + 0xf6]
mov dword [esp + 0x60], esi
mov si, ax
mov dword [esp + 0x5c], eax
mov eax, 0x3704
mov dword [esp + 0x58], ecx
mov ecx, dword [esp + 0x5c]
sub eax, ecx
mov dword [esp + 0x10c], ebx
mov dword [esp + 0x108], edi
mov word [esp + 0xb6], ax
mov edi, dword [esp + 0xf8]
mov ebx, dword [esp + 0xfc]
xor edi, 0x336a
mov dword [esp + 0xc4], ebx
mov dword [esp + 0xc0], edi
mov dword [esp + 0xe4], 0
mov dword [esp + 0xe0], 0x1a11
mov edi, dword [esp + 0xf8]
mov ebx, dword [esp + 0xfc]
xor edi, 0x2db2
mov dword [esp + 0x6c], ebx
mov dword [esp + 0x68], edi
mov edi, dword [esp + 0xf8]
mov ebx, dword [esp + 0xfc]
add edi, 0xfffff54b
adc ebx, 0xffffffff
mov dword [esp + 0x98], edi
mov dword [esp + 0x9c], ebx
mov al, byte [esp + 0x105]
mov edi, dword [esp + 0xf8]
mov ebx, dword [esp + 0xfc]
mov byte [esp + 0x105], al
add edi, 0xffff8f90
adc ebx, 0xffffffff
mov dword [esp + 0x88], edi
mov dword [esp + 0x8c], ebx
mov ecx, dword [esp + 0xf8]
mov byte [esp + 0x57], al
mov eax, dword [esp + 0xfc]
add ecx, 0xffffb7b3
adc eax, 0xffffffff
mov dword [esp + 0x10c], 0
mov dword [esp + 0x108], 0x3ea1
sub edi, ecx
setae cl
sub ebx, eax
setae ch
mov word [esp + 0x54], si
mov byte [esp + 0x53], ch
mov dword [esp + 0x4c], edx
mov dword [esp + 0x48], edi
mov dword [esp + 0x44], ebx
mov byte [esp + 0x43], cl
je 0x41a886
mov al, byte [esp + 0x53]
mov byte [esp + 0x43], al
mov al, byte [esp + 0x43]
test al, al
jne 0x41ae22
jmp 0x41a894
mov eax, dword [esp + 0x64]
mov dword [esp + 0xc8], eax
mov ecx, dword [esp + 0x58]
mov dword [esp + 0x90], ecx
mov edx, dword [esp + 0x90]
mov dword [esp], edx
call fcn.0041bee0
mov dword [esp + 0x7c], eax
cmp dword [esp + 0x7c], 0
jne 0x41a989
mov al, byte [esp + 0x57]
or al, al
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0x6c]
mov byte [esp + 0x105], al
mov esi, dword [esp + 0xf8]
mov edi, dword [esp + 0xfc]
add esi, 0xfffff138
adc edi, 0xffffffff
mov dword [esp + 0xa4], edx
mov dword [esp + 0xa0], ecx
mov ecx, dword [esp + 0xc0]
mov edx, dword [esp + 0xc4]
sub esi, ecx
setb al
sub edx, edi
seta ah
mov dword [esp + 0x3c], edx
mov byte [esp + 0x3b], ah
mov dword [esp + 0x34], esi
mov byte [esp + 0x33], al
je 0x41a934
mov al, byte [esp + 0x3b]
mov byte [esp + 0x33], al
mov al, byte [esp + 0x33]
test al, al
jne 0x41abf2
jmp 0x41a942
mov eax, dword [esp + 0xa0]
mov ecx, dword [esp + 0xa4]
mov edx, dword [esp + 0xf8]
mov esi, dword [esp + 0xfc]
add edx, 0xffff988a
adc esi, 0xffffffff
xor eax, edx
xor ecx, esi
or eax, ecx
mov dword [esp + 0x2c], eax
je 0x41a9cf
jmp 0x41a975
mov al, byte [esp + 0xf4]
xor al, 0
and al, 1
mov byte [esp + 0x77], al
jmp 0x41ae6c
mov al, 0x1a
sub al, byte [esp + 0xf5]
mov byte [esp + 0xcf], al
cmp byte [esp + 0xcf], 0xf2
ja 0x41aaa9
mov eax, dword [esp + 0xc8]
mov ecx, dword [esp + 0x4c]
and ecx, 0x6c01
mov dword [esp + 0x108], ecx
mov dword [esp + 0x10c], 0
cmp eax, 0
jne 0x41aa03
mov ax, 0x5b4b
mov cx, word [esp + 0xf6]
mov dx, word [esp + 0xd6]
sub ax, cx
cmp ax, dx
jb 0x41ae22
mov al, byte [esp + 0xf4]
inc al
and al, 1
mov byte [esp + 0x77], al
jmp 0x41ae6c
mov eax, dword [esp + 0x7c]
mov cl, byte [esp + 0x57]
or cl, 0xef
mov byte [esp + 0x105], cl
mov eax, dword [eax + 0xa0]
mov dword [esp + 0xd0], eax
movzx eax, word [esp + 0xf6]
add eax, 0x1d2b
mov dx, ax
mov si, word [esp + 0xb6]
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x10c], 0
mov dword [esp + 0x108], 0
mov byte [esp + 0x105], 0x32
mov eax, dword [eax + 0xa4]
mov dword [esp + 0xac], eax
cmp dx, si
jb 0x41ad21
mov eax, 0x8b5
mov ecx, dword [esp + 0xac]
sub eax, dword [esp + 0xf0]
mov dword [esp + 0x84], ecx
cmp dword [esp + 0x84], eax
jne 0x41aaa9
mov al, byte [esp + 0xf4]
xor al, 0
and al, 1
mov byte [esp + 0x77], al
jmp 0x41ae6c
mov eax, dword [esp + 0x90]
mov ecx, dword [esp + 0xd0]
mov edx, dword [esp + 0x4c]
mov dword [esp + 0x108], edx
mov esi, dword [esp + 0x60]
mov dword [esp + 0x10c], esi
mov edi, dword [esp + 0x98]
mov ebx, dword [esp + 0x9c]
add eax, ecx
mov dword [esp + 0x100], 0x5847
mov ecx, dword [esp + 0xf8]
mov edx, dword [esp + 0xfc]
xor ecx, 0x64b4
mov dword [esp + 0x70], eax
sub ecx, edi
setae al
sub edx, ebx
setae ah
mov dword [esp + 0x28], edx
mov dword [esp + 0x24], ecx
mov byte [esp + 0x23], ah
mov byte [esp + 0x22], al
je 0x41ab24
mov al, byte [esp + 0x23]
mov byte [esp + 0x22], al
mov al, byte [esp + 0x22]
test al, al
jne 0x41acdd
jmp 0x41ab32
mov eax, dword [esp + 0x70]
mov dword [esp + 0x78], eax
mov eax, dword [esp + 0x78]
mov eax, dword [eax + 4]
mov ecx, dword [esp + 0xf0]
add ecx, 0xfffff74b
sub ecx, eax
sbb eax, eax
and eax, 1
mov edx, dword [esp + 0x4c]
add edx, 0xffffa7bd
mov esi, dword [esp + 0x60]
adc esi, 0xffffffff
mov edi, dword [esp + 0x84]
mov dword [esp + 0x108], edx
mov dword [esp + 0x10c], esi
cmp edi, 0
setg bl
and bl, 1
movzx edx, bl
and eax, edx
cmp eax, 0
mov dword [esp + 0x1c], ecx
je 0x41ae22
mov cx, word [esp + 0x54]
mov ax, cx
xor eax, 0x4036
mov dx, ax
mov eax, dword [esp + 0x78]
mov esi, dword [esp + 0xf8]
mov edi, dword [esp + 0xfc]
mov word [esp + 0x106], dx
add esi, 0xffffdd46
adc edi, 0xffffffff
mov ebx, dword [esp + 0xe0]
mov ecx, dword [esp + 0xe4]
mov eax, dword [eax]
mov dword [esp + 0x94], eax
xor edi, ecx
xor esi, ebx
or esi, edi
mov dword [esp + 0x18], esi
je 0x41ab32
jmp 0x41abf2
mov eax, 0x8bd
mov ecx, dword [esp + 0x78]
add ecx, 8
mov dword [esp + 0x80], ecx
mov dl, byte [esp + 0x57]
xor dl, 0xff
mov byte [esp + 0x105], dl
sub eax, dword [esp + 0xf0]
mov ecx, dword [esp + 0xf0]
mov esi, dword [esp + 0x78]
mov esi, dword [esi + 4]
sub esi, eax
xor ecx, 0x8b7
mov eax, esi
xor edx, edx
div ecx
mov dword [esp + 0xd8], eax
mov eax, dword [esp + 0xf0]
mov ecx, dword [esp + 0xf0]
add ecx, 0xfffff74b
mov edx, dword [esp + 0xd8]
add eax, 0xfffff74a
mov esi, edx
add esi, eax
mov dword [esp + 0xd8], esi
cmp edx, ecx
je 0x41ad4c
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0xf0]
movzx eax, word [eax]
add ecx, 0xfffff757
mov dl, cl
mov cl, dl
shr eax, cl
mov dword [esp + 0xa8], eax
mov eax, dword [esp + 0xf0]
mov esi, dword [esp + 0x80]
mov cl, byte [esp + 0x57]
mov byte [esp + 0x105], cl
movzx esi, word [esi]
mov edi, 0x18b4
sub edi, eax
mov dword [esp + 0x100], 0x7abb
and esi, edi
mov dword [esp + 0xe8], esi
mov eax, dword [esp + 0xa8]
sub eax, 3
mov dword [esp + 0x14], eax
jne 0x41ad1f
jmp 0x41acdd
mov eax, dword [esp + 0x90]
mov ecx, dword [esp + 0xe8]
add ecx, dword [esp + 0x94]
add eax, ecx
mov dx, word [esp + 0x54]
and dx, dx
mov word [esp + 0x106], dx
mov dword [esp + 0xb0], eax
mov eax, dword [esp + 0xb0]
mov ecx, dword [eax]
add ecx, dword [esp + 0xc8]
mov dword [eax], ecx
jmp 0x41ad21
jmp 0x41ad21
mov eax, dword [esp + 0x100]
add eax, dword [esp + 0x100]
mov dword [esp + 0x100], eax
mov eax, dword [esp + 0x80]
add eax, 2
mov dword [esp + 0x80], eax
jmp 0x41ac3d
mov eax, dword [esp + 0x100]
mov ecx, dword [esp + 0x78]
mov ecx, dword [ecx + 4]
mov dword [esp + 0x100], eax
mov eax, dword [esp + 0xf8]
mov edx, dword [esp + 0xfc]
mov dword [esp + 0x10c], 0
mov dword [esp + 0x108], 0
mov esi, dword [esp + 0x84]
add eax, 0xffffa604
adc edx, 0xffffffff
sub esi, ecx
mov dword [esp + 0x84], esi
mov ecx, dword [esp + 0xf8]
mov esi, dword [esp + 0xfc]
add ecx, 0xffffb533
adc esi, 0xffffffff
mov edi, dword [esp + 0x78]
mov ebx, dword [edi + 4]
mov dword [esp + 0xbc], edx
mov dword [esp + 0xb8], eax
add edi, ebx
mov dword [esp + 0xdc], edi
mov bl, byte [esp + 0x57]
and bl, 0x8b
mov byte [esp + 0x105], bl
sub ecx, eax
setbe bl
sub esi, edx
setbe bh
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc], esi
mov byte [esp + 0xb], bh
mov byte [esp + 0xa], bl
je 0x41ae04
mov al, byte [esp + 0xb]
mov byte [esp + 0xa], al
mov al, byte [esp + 0xa]
test al, al
jne 0x41ad21
jmp 0x41ae12
mov eax, dword [esp + 0xdc]
mov dword [esp + 0x78], eax
jmp 0x41ab3a
mov ax, word [esp + 0x54]
and ax, 0x60fc
mov ecx, dword [esp + 0xf0]
mov word [esp + 0x106], ax
mov edx, dword [esp + 0xf0]
xor edx, 0xe38
xor ecx, 0x4714
mov dword [esp + 0xec], ecx
cmp edx, dword [esp + 0xec]
jae 0x41ae22
mov al, byte [esp + 0xf4]
xor al, 1
and al, 1
mov byte [esp + 0x77], al
mov ax, word [esp + 0x54]
or ax, 0x2038
mov word [esp + 0x106], ax
mov cl, byte [esp + 0x77]
and cl, 1
movzx eax, cl
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret