Function at 0x41f860
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x60
mov ebx, dword [esp + 0x7c]
mov ebp, dword [esp + 0x78]
mov edi, dword [esp + 0x74]
mov eax, dword [ebx + 4]
mov ecx, 0xfffffffe
nop
nop
nop
nop
nop
cmp word [eax + ecx + 2], 0
lea ecx, [ecx + 2]
jne 0x41f880
mov eax, ecx
sar eax, 1
and ecx, 0x22
xor eax, 0x11
add eax, ecx
jns 0x41f8a0
mov eax, 0xffffffff
jmp 0x41f8a2
add eax, eax
push eax
call fcn.0040c470
add esp, 4
mov esi, eax
mov dword [esp + 8], 0x9719993c
mov dword [esp + 0xc], 0x93019518
mov dword [esp + 0x10], 0x8f2f911e
mov dword [esp + 0x14], 0x8b178d17
mov dword [esp + 0x18], 0x871a892c
mov dword [esp + 0x1c], 0x83188519
mov dword [esp + 0x20], 0xff738121
mov dword [esp + 0x24], 0xfb76fd68
mov dword [esp + 0x28], 0xf9f8
mov dword [esp], 0
mov eax, dword [esp]
cmp eax, 0x23
ja 0x41f950
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp]
mov ecx, dword [esp]
movzx ecx, byte [esp + ecx + 8]
mov edx, eax
not edx
or edx, 0x115b36a6
add edx, eax
xor eax, 0x915b36a6
lea eax, [eax + edx*2]
add eax, 2
xor eax, ecx
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x4c]
add al, 0xc2
mov ecx, dword [esp]
mov byte [esp + ecx + 8], al
inc dword [esp]
mov eax, dword [esp]
cmp eax, 0x24
jb 0x41f910
mov ecx, dword [ebx + 4]
movzx edx, word [ecx]
mov eax, esi
test dx, dx
je 0x41f981
add ecx, 2
mov eax, esi
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], dx
add eax, 2
movzx edx, word [ecx]
add ecx, 2
test dx, dx
jne 0x41f970
mov word [eax], 0
movzx ecx, word [esp + 8]
test cx, cx
je 0x41f9b1
lea edx, [esp + 0xa]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x41f9a0
mov word [eax], 0
mov dword [esp + 0x4c], edi
mov dword [esp + 0x50], esi
mov dword [esp + 0x54], ebp
mov dword [esp + 0x58], ebx
mov eax, dword [esp + 0x80]
mov dword [esp + 0x5c], eax
mov dword [esp + 8], 0x1f707f3
mov dword [esp + 0xc], 0xd3503fa
mov dword [esp + 0x10], 0x9f60fe3
mov dword [esp + 0x14], 0x15e50bf4
mov dword [esp + 0x18], 0x11eb17e2
mov dword [esp + 0x1c], 0x1de313fb
mov dword [esp + 0x20], 0x192b1fea
mov dword [esp + 0x24], 0x252f1b2d
mov dword [esp + 0x28], 0x21c0270e
mov dword [esp + 0x2c], 0x2ddf23df
mov dword [esp + 0x30], 0x29dc2fc3
mov dword [esp + 0x34], 0x35db2be5
mov dword [esp + 0x38], 0x31ca37c2
mov dword [esp + 0x3c], 0x3dca33df
mov dword [esp + 0x40], 0x39f53fc0
mov dword [esp + 0x44], 0xc5fd3bd4
mov dword [esp + 0x48], 0xc1c6c7ee
mov dword [esp + 4], 0
mov eax, dword [esp + 4]
cmp eax, 0x43
ja 0x41fabc
nop
nop
nop
nop
nop
nop
mov ecx, dword [esp + 4]
mov eax, dword [esp + 4]
movzx eax, byte [esp + eax + 8]
lea edx, [ecx + ecx]
and edx, 0x36930682
mov edi, ecx
not edi
or edi, 0x1b498341
add edi, ecx
sub ecx, edx
lea ecx, [ecx + edi*2]
add ecx, 0x9b498343
xor ecx, eax
mov dword [esp], ecx
mov eax, dword [esp]
add al, 0xbb
mov ecx, dword [esp + 4]
mov byte [esp + ecx + 8], al
inc dword [esp + 4]
mov eax, dword [esp + 4]
cmp eax, 0x44
jb 0x41fa70
lea eax, [esp + 0x4c]
lea ecx, [esp + 8]
push eax
push 0x41fd40
push ecx
push esi
call fcn.004204a0
add esp, 0x10
jmp dword [0x44944c]