Function at 0x41b2cf
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x128
push ebx
push ebp
push esi
push 0xa
pop ebp
mov dword [esp + 0x70], ecx
mov esi, 0x64428bda
xor bl, bl
mov edx, esi
mov ecx, ebp
mov dword [esp + 0x6c], ebx
call fcn.00412cbc
test eax, eax
jne 0x41b3ce
mov dword [esp + 0x18], 0x18515e7c
xor ecx, ecx
mov dword [esp + 0x1c], 0x5d501f4b
mov dword [esp + 0x20], 0x51565e4b
mov dword [esp + 0x24], 0x6c526d1f
mov dword [esp + 0x28], 0x4b4d5e4b
mov dword [esp + 0x2c], 0x4c4c5a6c
mov dword [esp + 0x30], 0x18515056
mov dword [esp + 0x34], 0x5b5e1f4c
mov dword [esp + 0x38], 0x4c5a4d5b
mov dword [esp + 0x3c], 0x521f134c
mov dword [esp + 0x40], 0x5a5d465e
mov dword [esp + 0x44], 0x5156481f
mov dword [esp + 0x48], 0x4c48505b
mov dword [esp + 0x4c], 0x51505b1f
mov dword [esp + 0x50], 0x4c1f4b18
mov dword [esp + 0x54], 0x504f4f4a
mov dword [esp + 0x58], 0x6d1f4b4d
mov dword [esp + 0x5c], 0x5e4b4c5a
mov dword [esp + 0x60], 0x5e724b4d
mov dword [esp + 0x64], 0x5a585e51
mov word [esp + 0x68], 0x354d
mov al, byte [esp + ecx + 0x18]
xor al, 0x3f
mov byte [esp + ecx + 0x7c], al
inc ecx
cmp ecx, 0x52
jl 0x41b3a4
lea eax, [esp + 0x7c]
mov byte [esp + 0xce], 0
push eax
call fcn.00412606
pop ecx
xor al, al
jmp 0x41b552
and dword [esp + 0xc], 0
lea eax, [esp + 0xd0]
push eax
lea eax, [esp + 0x10]
mov edx, esi
push 0
push eax
mov ecx, ebp
call fcn.00412cbc
call eax
test eax, eax
jne 0x41b550
push eax
push eax
push eax
push eax
lea eax, [esp + 0x80]
mov edx, 0x9b21078f
push eax
xor eax, eax
mov ecx, ebp
inc eax
push eax
push dword [esp + 0x24]
call fcn.00412cbc
call eax
test eax, eax
jne 0x41b53e
and dword [esp + 0x10], eax
mov ecx, ebp
push edi
lea eax, [esp + 0x78]
mov edi, 0x796e89f0
push eax
push 0
lea eax, [esp + 0x1c]
mov edx, edi
push eax
lea eax, [esp + 0x24]
push eax
push dword [esp + 0x20]
call fcn.00412cbc
call eax
cmp eax, 0xea
jne 0x41b527
imul eax, dword [esp + 0x18], 0x29c
push eax
call fcn.0040570b
mov esi, eax
mov dword [esp + 0x80], esi
pop ecx
test esi, esi
je 0x41b527
imul ecx, dword [esp + 0x18], 0x29c
push ecx
push 0
push esi
call fcn.00403960
mov eax, dword [esp + 0x24]
add esp, 0xc
mov dword [esp + 0x14], eax
mov edx, edi
lea eax, [esp + 0x78]
mov ecx, ebp
push eax
push esi
lea eax, [esp + 0x1c]
push eax
lea eax, [esp + 0x24]
push eax
push dword [esp + 0x20]
call fcn.00412cbc
call eax
test eax, eax
jne 0x41b520
xor edi, edi
cmp dword [esp + 0x14], edi
jbe 0x41b520
mov ebx, esi
xor esi, esi
inc esi
push dword [ebx]
mov edx, 0x4fbfe977
mov ecx, esi
push 0
push esi
call fcn.00412cbc
call eax
mov ebp, eax
test ebp, ebp
je 0x41b508
push esi
push ebp
mov edx, 0x670a2977
mov ecx, esi
call fcn.00412cbc
call eax
mov ecx, dword [esp + 0x70]
test eax, eax
movzx ecx, cl
mov edx, 0x251af175
cmovne ecx, esi
mov dword [esp + 0x70], ecx
mov ecx, esi
push ebp
call fcn.00412cbc
call eax
inc edi
add ebx, 0x29c
cmp edi, dword [esp + 0x14]
jb 0x41b4c0
mov esi, dword [esp + 0x7c]
mov ebx, dword [esp + 0x70]
push 0xa
pop ebp
push esi
call fcn.004056f0
pop ecx
push 0
push 0
push dword [esp + 0x18]
mov edx, 0xfce5641a
mov ecx, ebp
call fcn.00412cbc
call eax
pop edi
push dword [esp + 0xc]
mov edx, 0x831a8bda
mov ecx, ebp
call fcn.00412cbc
call eax
mov al, bl
pop esi
pop ebp
pop ebx
add esp, 0x128
ret