Function at 0x41bf9b
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
sub esp, 0x90
push ebx
mov dword [esp + 0x34], ecx
mov cx, word [0x42ca90]
push ebp
mov al, cl
mov dword [esp + 0x3c], edx
and al, 0xaa
mov edx, 0xe062
mov byte [0x42ca96], al
xor eax, eax
push esi
push edi
lea edi, [esp + 0x50]
mov esi, 0x800
stosd dword es:[edi], eax
push esi
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov ax, cx
xor ax, dx
mov word [0x42ca98], ax
xor eax, 0x532f
mov word [0x42ca90], ax
call fcn.0040570b
mov cx, word [0x42ca98]
mov ebx, eax
mov eax, 0xec31
xor cx, ax
mov word [0x42ca98], cx
movzx ecx, cx
and ecx, 0x903c
push esi
mov word [0x42ca90], cx
call fcn.0040570b
movzx edx, word [0x42ca98]
mov ebp, eax
pop ecx
pop ecx
mov ecx, 0x1639
mov dword [esp + 0x4c], ebp
imul edx, ecx
xor esi, esi
mov word [0x42ca90], dx
test ebx, ebx
je 0x41c4ae
test ebp, ebp
je 0x41c4ae
mov al, byte [0x42ca96]
and edx, 0x55c
add al, 0xe9
xor edx, 0x4445
push 0x400
movzx ecx, al
sub edx, 0x48fe
push ebx
mov byte [0x42ca96], al
mov edi, esi
mov eax, 0x6acc
mov word [0x42ca90], dx
imul ecx, eax
mov edx, 0x1bdd7fb
push esi
push dword [esp + 0x4c]
mov dword [esp + 0x44], edi
push 4
mov word [0x42ca98], cx
pop ecx
call fcn.00415333
call eax
mov dx, word [0x42ca90]
mov ecx, 0x95f2
xor dx, cx
mov cl, byte [0x42ca98]
or cl, 0xbc
mov word [0x42ca90], dx
add cl, 0x44
mov byte [0x42ca96], cl
test eax, eax
jne 0x41c4ae
push 0x5c
pop eax
push dword [esp + 0x44]
mov word [esp + 0x3c], ax
or dl, 0xb6
xor eax, eax
movzx ecx, cl
mov word [esp + 0x3e], ax
sub dl, 0x45
mov eax, 0x6b03
and dl, 0x84
imul ecx, eax
sub dl, 0x7e
movzx eax, dl
push ebp
mov byte [0x42ca96], dl
mov word [0x42ca98], cx
mov ecx, 0x6697
add ax, cx
mov word [0x42ca90], ax
call fcn.00405dde
or byte [0x42ca96], 0x4d
lea eax, [esp + 0x40]
push eax
push ebp
call fcn.00405bcb
movzx eax, byte [0x42ca96]
mov ecx, 0xded3
imul eax, eax, 0xfd
push ebx
push ebp
mov byte [0x42ca96], al
movzx eax, al
and ax, cx
mov word [0x42ca90], ax
call fcn.00405bcb
mov ax, word [0x42ca90]
mov ecx, 0x14f7
sub ax, cx
add esp, 0x18
mov ecx, 0x9efa
mov edx, 0x68407afb
and ax, cx
mov word [0x42ca98], ax
lea eax, [esp + 0x30]
push eax
push ebp
push 0x80000001
push 4
pop ecx
call fcn.00415333
call eax
test eax, eax
jne 0x41c42f
mov dword [esp + 0x10], 0x85878389
mov eax, esi
mov dword [esp + 0x14], 0x80f6f6f3
mov dword [esp + 0x18], 0x81838184
mov dword [esp + 0x1c], 0x83d48181
mov dword [esp + 0x20], 0xf18888f2
mov dword [esp + 0x24], 0x80818080
mov dword [esp + 0x28], 0xf182f284
mov dword [esp + 0x2c], 0x86878686
movq xmm1, qword [esp + eax + 0x10]
movq xmm0, qword [0x42a000]
pxor xmm1, xmm0
xorps xmm0, xmm0
punpcklbw xmm1, xmm0
movups xmmword [esp + eax*2 + 0x5c], xmm1
add eax, 8
cmp eax, 0x20
jl 0x41c1df
mov cl, byte [0x42ca96]
xor eax, eax
mov word [esp + 0x9c], ax
mov edx, 0x4299
movzx eax, cl
add cl, 0x12
or ax, dx
mov byte [0x42ca96], cl
mov word [0x42ca98], ax
lea eax, [esp + 0x5c]
push eax
push ebx
call fcn.00405af6
pop ecx
pop ecx
test eax, eax
jne 0x41c483
mov eax, 0x9703
and word [0x42ca98], ax
mov al, byte [0x42ca90]
or al, 0x1e
push 0x200
mov byte [0x42ca96], al
call fcn.0040570b
mov edi, eax
mov eax, 0x953c
and word [0x42ca98], ax
pop ecx
test edi, edi
je 0x41c40c
mov dl, byte [0x42ca90]
mov ecx, 0x7035
push 0x100
or dl, 0x51
movzx eax, dl
add dl, 0x32
push edi
and ax, cx
mov byte [0x42ca96], dl
push esi
push dword [esp + 0x3c]
mov word [0x42ca90], ax
mov edx, 0x1bdd7fb
xor eax, 0xf9bd
and eax, 0x4f42
push 4
pop ecx
mov word [0x42ca98], ax
call fcn.00415333
call eax
movzx ecx, byte [0x42ca96]
mov edx, 0xe5c4
xor cx, dx
mov word [0x42ca98], cx
test eax, eax
jne 0x41c3f0
mov ebp, esi
or cl, 0xc7
mov eax, 0x40a6
or word [0x42ca90], ax
mov edx, 0x68407afb
movzx eax, cl
mov byte [0x42ca96], cl
mov ecx, 0x5f40
sub ax, cx
mov word [0x42ca98], ax
lea eax, [esp + 0x3c]
push eax
push edi
push dword [esp + 0x38]
push 4
pop ecx
call fcn.00415333
call eax
test eax, eax
jne 0x41c391
mov cx, word [0x42ca90]
mov edx, 0x7411
mov ax, cx
and cl, 0x39
sub ax, dx
mov byte [0x42ca96], cl
mov word [0x42ca98], ax
lea edx, [esp + 0x50]
movzx eax, cl
mov ecx, 0x68cd
add ax, cx
mov ecx, dword [esp + 0x3c]
mov word [0x42ca90], ax
call fcn.0041c586
movzx eax, byte [0x42ca96]
mov edx, 0x76485fc5
push dword [esp + 0x3c]
imul eax, eax, 0x81
push 4
pop ecx
mov byte [0x42ca96], al
call fcn.00415333
call eax
movzx eax, byte [0x42ca96]
mov ecx, 0x2ff6
imul eax, eax, 0x16
mov edx, 0x1bdd7fb
push 0x100
push edi
and al, 0x2f
inc ebp
mov byte [0x42ca96], al
mov ax, word [0x42ca90]
add ax, cx
push ebp
push dword [esp + 0x3c]
mov word [0x42ca90], ax
imul eax, eax, 0xc74a
push 4
pop ecx
mov word [0x42ca98], ax
call fcn.00415333
call eax
mov cx, word [0x42ca98]
test eax, eax
je 0x41c2ea
mov ebp, dword [esp + 0x4c]
mov eax, 0x67ad
sub cl, 8
and word [0x42ca90], ax
push edi
mov byte [0x42ca96], cl
call fcn.004056f0
pop ecx
mov edi, dword [esp + 0x34]
push dword [esp + 0x30]
mov al, byte [0x42ca98]
mov edx, 0x76485fc5
add al, 0x2b
push 4
pop ecx
mov byte [0x42ca96], al
call fcn.00415333
call eax
mov al, byte [0x42ca96]
mov ecx, 0x8814
or al, 0x6c
mov edx, 0x1bdd7fb
push 0x400
movzx eax, al
or ax, cx
inc edi
push ebx
push edi
push dword [esp + 0x4c]
mov word [0x42ca98], ax
sub al, 0x4d
push 4
pop ecx
mov dword [esp + 0x44], edi
mov byte [0x42ca96], al
call fcn.00415333
call eax
mov dx, word [0x42ca90]
test eax, eax
jne 0x41c4ae
mov cl, byte [0x42ca96]
jmp 0x41c0d2
mov ax, word [0x42ca98]
mov ecx, 0x86c
sub ax, cx
mov edx, ebp
mov ecx, dword [esp + 0x30]
mov word [0x42ca90], ax
sub al, 0xf
mov byte [0x42ca96], al
call fcn.0041bf9b
jmp 0x41c410
mov eax, 0x9235
or ax, dx
push ebp
mov word [0x42ca98], ax
call fcn.004056f0
mov cx, word [0x42ca98]
movzx eax, cl
imul eax, eax, 0xde
push ebx
mov byte [0x42ca96], al
mov eax, 0x263a
add ax, cx
mov word [0x42ca90], ax
call fcn.004056f0
mov dl, byte [0x42ca90]
pop ecx
pop ecx
mov ecx, dword [esp + 0x50]
or dl, 0x3d
mov byte [0x42ca96], dl
test ecx, ecx
je 0x41c57b
mov dword [esp + 0x10], 0x6f676b43
mov dword [esp + 0x14], 0x7445296a
mov dword [esp + 0x18], 0x68636263
mov dword [esp + 0x1c], 0x6a676f72
mov dword [esp + 0x20], 0x7e722875
mov byte [esp + 0x24], 0x72
mov al, byte [esp + esi + 0x10]
xor al, 6
movzx eax, al
mov word [esp + esi*2 + 0x5c], ax
inc esi
cmp esi, 0x15
jl 0x41c531
xor eax, eax
xor dl, 0x1b
sub dl, 0x42
mov word [esp + 0x86], ax
movzx eax, dl
mov byte [0x42ca96], dl
mov edx, 0xa312
xor ax, dx
mov edx, dword [esp + 0x58]
mov word [0x42ca90], ax
lea eax, [esp + 0x5c]
push eax
call fcn.0041ea51
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x90
ret