Function at 0x41d180
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x54
mov ecx, dword [esp + 0x70]
mov eax, dword [esp + 0x6c]
mov edi, dword [eax + 4]
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp word [edi + eax], 0
lea eax, [eax + 2]
jne 0x41d1a0
add eax, edi
add eax, 0xfffffffe
mov edx, edi
not edx
and edx, eax
add edx, edx
xor eax, edi
sub edx, eax
mov esi, dword [ecx + 4]
xor eax, eax
cmp word [esi + eax], 0
lea eax, [eax + 2]
jne 0x41d1c0
sar edx, 1
add eax, esi
add eax, 0xfffffffe
mov ecx, esi
not ecx
and ecx, eax
add ecx, ecx
xor eax, esi
sub ecx, eax
sar ecx, 1
lea eax, [edx + ecx]
add eax, 0x1b
test eax, eax
mov dword [esp + 0x4c], edx
mov dword [esp + 0x48], ecx
jns 0x41d1f8
mov eax, 0xffffffff
jmp 0x41d202
lea eax, [edx + ecx]
lea eax, [eax*2 + 0x36]
push eax
call fcn.0040cdc0
add esp, 4
mov dword [esp + 4], 0x33663154
mov dword [esp + 8], 0x3f5d3d4b
mov dword [esp + 0xc], 0x3b4e3959
mov dword [esp + 0x10], 0x470b4564
mov dword [esp + 0x14], 0x433e4138
mov dword [esp + 0x18], 0x4f384d21
mov dword [esp + 0x1c], 0x4b23493b
mov dword [esp + 0x20], 0x57205523
mov dword [esp + 0x24], 0x53015170
mov dword [esp + 0x28], 0x5f225d31
mov dword [esp + 0x2c], 0x5b335924
mov dword [esp + 0x30], 0x67096512
mov dword [esp + 0x34], 0x63066113
mov word [esp + 0x38], 0x6d6c
mov dword [esp + 0x3a], 0
mov byte [esp + 0x3e], 0
mov ebp, 0xe40ba43e
mov ecx, 0xc817487c
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ebx, ecx
and ebx, 0x68
mov edx, ebp
xor edx, 0xb4
add edx, ebx
add dl, 0xc2
xor dl, byte [esp + ebp + 0x1bf45bc6]
add dl, 0x7c
mov byte [esp + ebp + 0x1bf45bc6], dl
inc ebp
add ecx, 2
cmp ebp, 0xe40ba479
jne 0x41d2a0
movzx ecx, word [edi]
mov ebx, eax
test cx, cx
je 0x41d2f1
add edi, 2
mov ebx, eax
nop
nop
mov word [ebx], cx
add ebx, 2
movzx ecx, word [edi]
add edi, 2
test cx, cx
jne 0x41d2e0
mov word [ebx], 0
movzx ecx, word [esp + 4]
test cx, cx
je 0x41d321
lea edx, [esp + 6]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [ebx], cx
add ebx, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x41d310
mov word [ebx], 0
movzx ecx, word [esi]
test cx, cx
mov dword [esp + 0x44], eax
je 0x41d351
add esi, 2
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [ebx], cx
add ebx, 2
movzx ecx, word [esi]
add esi, 2
test cx, cx
jne 0x41d340
mov word [ebx], 0
mov eax, dword [esp + 0x6c]
mov ebp, dword [eax]
xor eax, eax
nop
nop
cmp word [ebp + eax], 0
lea eax, [eax + 2]
jne 0x41d360
lea ecx, [eax + ebp]
add ecx, 0xfffffffe
mov eax, ebp
not eax
and eax, ecx
add eax, eax
xor ecx, ebp
sub eax, ecx
mov ecx, dword [esp + 0x6c]
mov ebx, dword [ecx + 8]
xor ecx, ecx
mov esi, dword [esp + 0x70]
nop
nop
nop
nop
nop
nop
cmp word [ebx + ecx], 0
lea ecx, [ecx + 2]
jne 0x41d390
lea edx, [ebx + ecx]
add edx, 0xfffffffe
mov ecx, ebx
not ecx
and ecx, edx
add ecx, ecx
xor edx, ebx
sub ecx, edx
mov esi, dword [esi]
xor edx, edx
cmp word [esi + edx], 0
lea edx, [edx + 2]
jne 0x41d3b0
sar eax, 1
sar ecx, 1
add edx, esi
add edx, 0xfffffffe
mov edi, esi
not edi
and edi, edx
add edi, edi
xor edx, esi
sub edi, edx
sar edi, 1
add ecx, eax
lea eax, [edi + ecx]
add eax, 0xd
mov ecx, eax
and ecx, 6
xor eax, 6
lea eax, [eax + ecx*2]
test eax, eax
mov dword [esp + 0x50], ebx
jns 0x41d3f3
mov eax, 0xffffffff
jmp 0x41d3f5
add eax, eax
mov dword [esp], esi
push eax
call fcn.0040cdc0
add esp, 4
movzx ecx, word [ebp]
mov edi, eax
test cx, cx
je 0x41d432
add ebp, 2
mov edi, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [edi], cx
add edi, 2
movzx ecx, word [ebp]
add ebp, 2
test cx, cx
jne 0x41d420
mov dword [esp + 0x40], eax
mov word [edi], 0x2f
mov dword [esp + 4], 0x17eb19cb
mov dword [esp + 8], 0x139e159c
mov dword [esp + 0xc], 0xf9c118d
mov dword [esp + 0x10], 0xb930d83
mov dword [esp + 0x14], 0x794099b
mov dword [esp + 0x18], 0x3d1058b
mov word [esp + 0x1c], 0x100
mov dword [esp + 0x1e], 0
mov byte [esp + 0x22], 0
lea eax, [esp + 4]
xor esi, esi
xor edx, edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ebx, byte [eax]
mov ecx, esi
and ecx, 0xb5749c74
mov ebp, edx
xor ebp, 0x2545b1c5
sub ebp, ecx
inc ebp
xor ebp, ebx
mov ebx, ebp
and ebx, 0x21
add ebx, ebx
xor ebp, 0xde
sub ebx, ebp
mov byte [eax], bl
inc eax
dec edx
add esi, 0xfffffffe
cmp edx, 0xffffffe1
jne 0x41d490
add edi, 2
mov ecx, dword [esp + 0x50]
movzx eax, word [ecx]
test ax, ax
je 0x41d4f3
add ecx, 2
mov esi, dword [esp + 0x70]
mov ebp, dword [esp + 0x44]
nop
nop
nop
mov word [edi], ax
add edi, 2
movzx eax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41d4e0
jmp 0x41d4fb
mov esi, dword [esp + 0x70]
mov ebp, dword [esp + 0x44]
mov word [edi], 0
movzx eax, word [esp + 4]
test ax, ax
je 0x41d533
lea ecx, [esp + 6]
mov ebx, dword [esp + 0x40]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [edi], ax
add edi, 2
movzx eax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41d520
jmp 0x41d537
mov ebx, dword [esp + 0x40]
mov word [edi], 0
mov ecx, dword [esp]
movzx eax, word [ecx]
test ax, ax
je 0x41d561
add ecx, 2
nop
nop
nop
nop
nop
nop
mov word [edi], ax
add edi, 2
movzx eax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41d550
mov word [edi], 0
mov dword [esp + 4], 0x4f4e4996
mov word [esp + 8], 0
mov eax, 0x7789f292
nop
nop
nop
nop
nop
nop
movzx ecx, byte [esp + eax - 0x7789f28e]
mov edx, ecx
and edx, eax
add dl, dl
sub cl, dl
movzx ecx, cl
add ecx, eax
add cl, 0x26
mov byte [esp + eax - 0x7789f28e], cl
inc eax
cmp eax, 0x7789f298
jne 0x41d580
lea eax, [esp + 4]
push 0
push 0
push 0xc00000
push eax
push ebp
push ebx
push dword [esp + 0x80]
call fcn.00420c10
add esp, 0x1c
mov byte [esp], al
jmp dword [0x446c08]