Function at 0x41ba10
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x50
mov ebp, dword [esp + 0x68]
mov edi, dword [ebp + 4]
mov ecx, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, ecx
cmp word [edi + ecx + 2], 0
lea ecx, [ecx + 2]
jne 0x41ba30
mov eax, dword [esp + 0x6c]
mov esi, dword [eax + 4]
mov eax, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
cmp word [esi + eax + 2], 0
lea eax, [eax + 2]
jne 0x41ba50
sar ecx, 1
sar eax, 1
lea edx, [ecx + eax]
mov dword [esp + 0x48], eax
add eax, ecx
add eax, 0x1b
test eax, eax
mov dword [esp + 0x4c], ecx
mov dword [esp + 0x44], edx
jns 0x41ba7e
mov eax, 0xffffffff
jmp 0x41ba85
lea eax, [edx*2 + 0x36]
push eax
call fcn.0040c880
add esp, 4
mov dword [esp], eax
mov dword [esp + 4], 0x33663154
mov dword [esp + 8], 0x3f5d3d4b
mov dword [esp + 0xc], 0x3b4e3959
mov dword [esp + 0x10], 0x470b4564
mov dword [esp + 0x14], 0x433e4138
mov dword [esp + 0x18], 0x4f384d21
mov dword [esp + 0x1c], 0x4b23493b
mov dword [esp + 0x20], 0x57205523
mov dword [esp + 0x24], 0x53015170
mov dword [esp + 0x28], 0x5f225d31
mov dword [esp + 0x2c], 0x5b335924
mov dword [esp + 0x30], 0x67096512
mov dword [esp + 0x34], 0x63066113
mov word [esp + 0x38], 0x6d6c
mov dword [esp + 0x3a], 0
mov word [esp + 0x3e], 0
xor eax, eax
mov ecx, 0x4b
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ebx, ecx
and ebx, 0x78
mov edx, eax
and edx, 7
or edx, ebx
xor dl, byte [esp + eax + 4]
xor dl, 0xfc
add dl, 0x7c
mov byte [esp + eax + 4], dl
inc eax
dec ecx
cmp eax, 0x3c
jne 0x41bb20
movzx ecx, word [edi]
mov edx, dword [esp]
mov eax, edx
test cx, cx
je 0x41bb71
add edi, 2
mov eax, edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edi]
add edi, 2
test cx, cx
jne 0x41bb60
mov word [eax], 0
movzx ecx, word [esp + 4]
test cx, cx
je 0x41bba1
lea edx, [esp + 6]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x41bb90
mov word [eax], 0
movzx ecx, word [esi]
test cx, cx
je 0x41bbd1
add esi, 2
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [esi]
add esi, 2
test cx, cx
jne 0x41bbc0
mov word [eax], 0
mov ebx, dword [ebp]
mov eax, 0xfffffffe
nop
nop
cmp word [ebx + eax + 2], 0
lea eax, [eax + 2]
jne 0x41bbe0
sar eax, 1
mov ebp, dword [ebp + 8]
mov ecx, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp word [ebp + ecx + 2], 0
lea ecx, [ecx + 2]
jne 0x41bc00
inc eax
sar ecx, 1
mov edx, ecx
and edx, eax
add edx, edx
mov esi, dword [esp + 0x6c]
mov edi, dword [esi]
mov esi, 0xfffffffe
nop
cmp word [edi + esi + 2], 0
lea esi, [esi + 2]
jne 0x41bc20
xor ecx, eax
sar esi, 1
add ecx, edx
lea eax, [esi + ecx]
add eax, 0x12
test eax, eax
jns 0x41bc42
mov eax, 0xffffffff
jmp 0x41bc4b
add ecx, esi
lea eax, [ecx*2 + 0x24]
push eax
call fcn.0040c880
add esp, 4
movzx ecx, word [ebx]
mov esi, eax
test cx, cx
je 0x41bc81
add ebx, 2
mov esi, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [esi], cx
add esi, 2
movzx ecx, word [ebx]
add ebx, 2
test cx, cx
jne 0x41bc70
mov word [esi], 0x2f
mov dword [esp + 5], 0x64ff3bf9
mov dword [esp + 9], 0x5e376fd
mov dword [esp + 0xd], 0x73e774e1
mov dword [esp + 0x11], 0x7beb03e5
mov dword [esp + 0x15], 0x7bef7ce9
mov dword [esp + 0x19], 0x909341ed
mov byte [esp + 0x1d], 0x91
mov word [esp + 0x1e], 0
mov byte [esp + 4], 0x21
add esi, 2
movzx ecx, word [ebp]
test cx, cx
je 0x41bcf4
add ebp, 2
mov ebx, dword [esp]
nop
nop
nop
nop
nop
nop
nop
mov word [esi], cx
add esi, 2
movzx ecx, word [ebp]
add ebp, 2
test cx, cx
jne 0x41bce0
jmp 0x41bcf7
mov ebx, dword [esp]
mov word [esi], 0
movzx edx, word [esp + 4]
test dx, dx
je 0x41bd21
lea ecx, [esp + 6]
nop
nop
nop
nop
nop
nop
mov word [esi], dx
add esi, 2
movzx edx, word [ecx]
add ecx, 2
test dx, dx
jne 0x41bd10
mov word [esi], 0
movzx ecx, word [edi]
test cx, cx
je 0x41bd51
add edi, 2
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [esi], cx
add esi, 2
movzx ecx, word [edi]
add edi, 2
test cx, cx
jne 0x41bd40
mov word [esi], 0
mov dword [esp + 4], 0x717e7f86
mov dword [esp + 8], 0
xor edx, edx
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, edx
add cl, 0x95
xor cl, byte [esp + edx + 4]
add cl, 0x17
mov byte [esp + edx + 4], cl
inc edx
cmp edx, 8
jne 0x41bd70
lea edi, [esp + 4]
push 0
push 0
push 0xc00000
push edi
push ebx
mov dword [esp + 0x54], eax
push eax
push dword [esp + 0x7c]
call fcn.0041f0a0
add esp, 0x1c
mov byte [esp], al
jmp dword [0x443d60]