Function at 0x41f1b0
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x8c
mov ebp, dword [esp + 0xa8]
mov ebx, dword [esp + 0xa4]
mov ecx, dword [ebp + 4]
mov eax, 0xfffffffe
cmp word [ecx + eax + 2], 0
lea eax, [eax + 2]
jne 0x41f1d0
mov ecx, 0xfffffffe
cmp word [ebx + ecx + 2], 0
lea ecx, [ecx + 2]
jne 0x41f1e0
sar eax, 1
sar ecx, 1
lea edx, [eax + ecx]
add edx, 0x3f
test edx, edx
jns 0x41f200
mov eax, 0xffffffff
jmp 0x41f209
add eax, ecx
lea eax, [eax*2 + 0x7e]
push eax
call fcn.0040cc80
add esp, 4
mov esi, eax
mov dword [esp + 0x4c], 0x21a927c2
mov dword [esp + 0x50], 0xddbd23ad
mov dword [esp + 0x54], 0xd923df4e
mov dword [esp + 0x58], 0xd54cdb49
mov dword [esp + 0x5c], 0xd149d758
mov dword [esp + 0x60], 0xcd5ed358
mov dword [esp + 0x64], 0xc952cf37
mov dword [esp + 0x68], 0xc506cb0f
mov dword [esp + 0x6c], 0xc10dc716
mov dword [esp + 0x70], 0xfd09c30c
mov dword [esp + 0x74], 0xf937ff32
mov dword [esp + 0x78], 0xf531fb2a
mov dword [esp + 0x7c], 0xf112f73b
mov dword [esp + 0x80], 0xed6ef36b
mov dword [esp + 0x84], 0xe9eeef0e
mov word [esp + 0x88], 0
mov eax, 0x79
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ecx, byte [esp + eax - 0x2d]
lea edx, [eax - 0x78]
mov edi, eax
and edi, 0xfa
and edx, 5
or edx, edi
mov edi, ecx
and edi, 0xfffffffa
or edi, 1
and ecx, 5
xor ecx, edx
xor ecx, edi
xor cl, 1
add cl, 0xa3
mov byte [esp + eax - 0x2d], cl
inc eax
cmp eax, 0xb7
jne 0x41f2b0
mov dword [esp], 0x7fe97904
mov dword [esp + 4], 0x63f17de8
mov dword [esp + 8], 0x670761f6
mov dword [esp + 0xc], 0x6b0f650f
mov dword [esp + 0x10], 0x6f0a6914
mov dword [esp + 0x14], 0x93f86d09
mov dword [esp + 0x18], 0x970391f1
mov dword [esp + 0x1c], 0x9b0e95f8
mov dword [esp + 0x20], 0x9ff399e4
mov dword [esp + 0x24], 0x831c9d0f
mov dword [esp + 0x28], 0x87e381ad
mov dword [esp + 0x2c], 0x8b1e851c
mov dword [esp + 0x30], 0x8f1c89ed
mov dword [esp + 0x34], 0xb3db8d1b
mov dword [esp + 0x38], 0xb724b123
mov dword [esp + 0x3c], 0xbb95b59b
mov dword [esp + 0x40], 0xbfbeb997
mov byte [esp + 0x44], 0
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, eax
add cl, 0x6a
xor cl, byte [esp + eax]
add cl, 0xee
mov byte [esp + eax], cl
inc eax
cmp eax, 0x45
jne 0x41f380
mov ecx, dword [ebp + 4]
movzx edx, word [ecx]
mov eax, esi
test dx, dx
je 0x41f3c1
add ecx, 2
mov eax, esi
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], dx
add eax, 2
movzx edx, word [ecx]
add ecx, 2
test dx, dx
jne 0x41f3b0
mov word [eax], 0
movzx ecx, word [esp]
test cx, cx
je 0x41f3f1
lea edx, [esp + 2]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x41f3e0
mov word [eax], 0
movzx ecx, word [ebx]
test cx, cx
je 0x41f421
add ebx, 2
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [ebx]
add ebx, 2
test cx, cx
jne 0x41f410
mov word [eax], 0
movzx ecx, word [esp + 0x4c]
test cx, cx
je 0x41f451
lea edx, [esp + 0x4e]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x41f440
mov word [eax], 0
mov eax, dword [esp + 0xac]
mov ebx, dword [eax]
mov eax, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp word [ebx + eax + 2], 0
lea eax, [eax + 2]
jne 0x41f470
mov edx, dword [ebp]
mov ecx, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp word [edx + ecx + 2], 0
lea ecx, [ecx + 2]
jne 0x41f490
mov edi, dword [ebp + 8]
mov edx, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp word [edi + edx + 2], 0
lea edx, [edx + 2]
jne 0x41f4b0
mov dword [esp + 0x48], esi
sar eax, 1
sar ecx, 1
sar edx, 1
add ecx, eax
lea eax, [edx + ecx]
add eax, 0xb
mov esi, ebp
test eax, eax
jns 0x41f4da
mov eax, 0xffffffff
jmp 0x41f4e3
add ecx, edx
lea eax, [ecx*2 + 0x16]
push eax
call fcn.0040cc80
add esp, 4
mov edi, eax
mov dword [esp], 0x99f59bc5
mov dword [esp + 4], 0xa5d2a7ec
mov dword [esp + 8], 0xa1dea3cf
mov dword [esp + 0xc], 0xad9fafdd
mov dword [esp + 0x10], 0xabac
mov byte [esp + 0x14], 0
mov eax, 0xebc239b
mov ecx, 0x64
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [esp + eax - 0xebc239b]
mov ebp, edx
not ebp
or ebp, ecx
or edx, eax
and edx, ebp
mov ebp, edx
and ebp, 0x61001f8
xor edx, 0xb6534df8
lea ebp, [edx + ebp*2]
mov edx, ebp
xor edx, 0xfe
or ebp, 1
and edx, ebp
add edx, ebp
mov byte [esp + eax - 0xebc239b], dl
inc eax
dec ecx
cmp eax, 0xebc23b0
jne 0x41f530
movzx ecx, word [esp]
mov eax, edi
test cx, cx
je 0x41f5a1
lea edx, [esp + 2]
mov eax, edi
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x41f590
mov word [eax], 0
movzx ecx, word [ebx]
test cx, cx
je 0x41f5d1
add ebx, 2
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [ebx]
add ebx, 2
test cx, cx
jne 0x41f5c0
mov word [eax], 0x5f
add eax, 2
mov ecx, dword [esi]
movzx edx, word [ecx]
test dx, dx
je 0x41f601
add ecx, 2
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], dx
add eax, 2
movzx edx, word [ecx]
add ecx, 2
test dx, dx
jne 0x41f5f0
mov word [eax], 0x5f
add eax, 2
mov ecx, dword [esi + 8]
movzx edx, word [ecx]
test dx, dx
je 0x41f631
add ecx, 2
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], dx
add eax, 2
movzx edx, word [ecx]
add ecx, 2
test dx, dx
jne 0x41f620
mov word [eax], 0
mov dword [esp], 0x696a6b8a
mov word [esp + 4], 0
mov byte [esp + 6], 0
mov eax, 0x26c08d97
mov ecx, 0x593f7268
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [esp + eax - 0x26c08d97]
mov ebx, ecx
or ebx, edx
mov ebp, edx
not ebp
lea esi, [eax - 0x26c08d00]
or esi, ebp
and ebx, eax
and ebx, esi
mov esi, ebx
and esi, 2
mov ebp, ebx
or ebx, 2
imul ebx, esi
xor esi, 2
and ebp, 0x9d
imul ebp, esi
add ebx, ebp
lea esi, [ecx - 0x593f7200]
and esi, ebx
xor ebx, eax
add ebx, edx
add esi, esi
sub ebx, esi
add bl, 0xd
mov byte [esp + eax - 0x26c08d97], bl
inc eax
dec ecx
cmp eax, 0x26c08d9e
jne 0x41f660
mov eax, esp
push 0
push 1
push 0
push eax
mov esi, dword [esp + 0x58]
push esi
push edi
push dword [esp + 0xb8]
call fcn.0041f9c0
add esp, 0x1c
mov ebx, eax
jmp dword [0x445ed4]