Function at 0x41fb00
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x50
mov dword [esp + 0x38], 0
mov ecx, dword [0x441654]
test ecx, ecx
je 0x41fc46
mov eax, dword [0x441658]
add eax, 8
nop
nop
nop
nop
nop
nop
cmp dword [eax - 8], 0x18dc7455
je 0x41fb44
add eax, 0xc
dec ecx
jne 0x41fb30
jmp 0x41fc46
mov byte [esp + 0x20], 0
mov dword [esp + 0x1c], 0x900000c2
mov dword [esp + 0x18], 0xd2ff0000
mov dword [esp + 0x14], 0xba00
mov dword [esp + 0x10], 0xb8
mov eax, dword [eax]
mov dword [esp + 0x11], eax
mov eax, dword [0x44165c]
mov dword [esp + 0x16], eax
mov word [esp + 0x1d], 0x10
mov dword [esp + 8], 0
mov dword [esp + 0x40], 0x10
lea eax, [esp + 0x40]
lea ebx, [esp + 8]
push 0x40
push 0x3000
push eax
push 0
push ebx
push 0xffffffffffffffff
call dword [0x441660]
mov edi, dword [esp + 8]
lea eax, [esp + 0x10]
mov ecx, 4
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
lea eax, [esp + 0x38]
push eax
push 0
push 0
push 5
call dword [esp + 0x18]
mov esi, eax
mov dword [esp + 0x3c], 0
lea eax, [esp + 0x3c]
push 0x8000
push eax
push ebx
push 0xffffffffffffffff
call dword [0x441664]
cmp esi, 0xc0000004
jne 0x41fc46
mov esi, ebx
lea ebx, [esp + 0x40]
push dword [esp + 0x38]
call fcn.0042eb60
add esp, 4
mov edi, eax
mov ecx, dword [0x441654]
test ecx, ecx
je 0x41fc3f
mov eax, dword [esp + 0x38]
mov dword [esp + 0x28], eax
mov eax, dword [0x441658]
add eax, 8
mov edx, ebx
mov ebx, esi
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp dword [eax - 8], 0x18dc7455
je 0x41fc52
add eax, 0xc
dec ecx
jne 0x41fc30
xor ebx, ebx
jmp 0x41ffbc
xor ebx, ebx
mov eax, ebx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov byte [esp + 0x20], 0
mov dword [esp + 0x1c], 0x900000c2
mov dword [esp + 0x18], 0xd2ff0000
mov dword [esp + 0x14], 0xba00
mov dword [esp + 0x10], 0xb8
mov eax, dword [eax]
mov dword [esp + 0x11], eax
mov eax, dword [0x44165c]
mov dword [esp + 0x16], eax
mov word [esp + 0x1d], 0x10
mov dword [esp + 8], 0
mov dword [esp + 0x40], 0x10
push 0x40
push 0x3000
push edx
push 0
push ebx
push 0xffffffffffffffff
call dword [0x441660]
mov esi, edi
mov edi, dword [esp + 8]
lea eax, [esp + 0x10]
mov ecx, 4
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
push 0
push dword [esp + 0x2c]
push esi
push 5
call dword [esp + 0x18]
mov edi, eax
mov dword [esp + 0x3c], 0
push 0x8000
lea eax, [esp + 0x40]
push eax
push ebx
push 0xffffffffffffffff
call dword [0x441664]
xor ebx, ebx
test edi, edi
js 0x41fd3d
mov eax, dword [esi]
mov ecx, esi
nop
nop
nop
nop
nop
nop
nop
nop
nop
lea edx, [ecx + eax]
mov eax, dword [ecx + eax]
dec ebx
mov ecx, edx
test eax, eax
jne 0x41fd00
lea eax, [ebx - 1]
and eax, 0x104
neg ebx
mov ecx, ebx
and ecx, 0xfffffefb
imul ecx, eax
mov eax, ebx
and eax, 0x104
or ebx, 0x104
imul ebx, eax
add ebx, ecx
jns 0x41fd44
mov ebx, 0xffffffff
jmp 0x41fd46
mov edi, esi
jmp 0x41ffbc
add ebx, ebx
push ebx
call fcn.0042eb60
add esp, 4
mov edi, eax
mov edx, dword [esi]
mov dword [esp + 0xc], esi
mov eax, esi
mov dword [esp + 0x34], edi
lea ebx, [esp + 0x10]
jmp 0x41fd7e
mov word [edi], 0xa
add edi, 2
mov edx, dword [eax]
test edx, edx
je 0x41fda3
mov ecx, dword [eax + edx + 0x3c]
add eax, edx
movzx edx, word [ecx]
test dx, dx
je 0x41fd70
add ecx, 2
nop
mov word [edi], dx
add edi, 2
movzx edx, word [ecx]
add ecx, 2
test dx, dx
jne 0x41fd90
jmp 0x41fd70
mov eax, dword [esp + 0x34]
cmp edi, eax
je 0x41ff0a
mov word [edi], 0
movzx ecx, word [eax]
test cx, cx
je 0x41ff15
xor esi, esi
jmp 0x41fdd8
add edx, esi
mov esi, edx
movzx ecx, word [eax + 2]
add eax, 2
test cx, cx
lea ebx, [esp + 0x10]
je 0x41fe09
cmp eax, edi
jae 0x41fe09
mov edx, esi
movzx ebx, cx
xor ecx, ecx
cmp ebx, 0x800
setb byte [esp + 0x28]
mov esi, 1
cmp ebx, 0x80
jb 0x41fdc4
movzx ebx, byte [esp + 0x28]
mov cl, bl
xor ecx, 3
mov esi, ecx
jmp 0x41fdc4
lea eax, [esi + 1]
mov dword [esp + 0x30], eax
push eax
call fcn.0042eb60
add esp, 4
test esi, esi
mov dword [esp + 0x48], esi
mov dword [esp + 0x44], eax
jle 0x41ff2f
lea ecx, [eax + esi]
mov dword [esp + 0x28], ecx
mov ecx, dword [esp + 0x30]
add ecx, eax
mov edx, dword [esp + 0x34]
mov esi, eax
mov eax, ecx
mov dword [esp + 0x30], ecx
jmp 0x41fe5a
mov byte [esi], cl
mov eax, 1
add edx, 2
add esi, eax
cmp esi, dword [esp + 0x28]
jae 0x41ff31
cmp edx, edi
jae 0x41ff31
movzx ecx, word [edx]
test cx, cx
je 0x41ff31
cmp cx, 0x7f
jbe 0x41fe44
mov eax, dword [esp + 0x30]
sub eax, esi
mov ebx, eax
or ebx, 0xfffffffe
and eax, 0xfffffffe
add ebx, eax
inc ebx
cmp ebx, 2
jb 0x41feba
movzx eax, cx
cmp eax, 0x7ff
ja 0x41feba
mov eax, ecx
shr eax, 6
add al, 0xc0
mov byte [esi], al
mov eax, ecx
xor eax, 0xc0
or ecx, 0x3f
and ecx, eax
add cl, 0x80
mov byte [esi + 1], cl
mov eax, 2
lea ebx, [esp + 0x10]
jmp 0x41fe4b
xor eax, eax
cmp ebx, 3
lea ebx, [esp + 0x10]
jb 0x41fe4b
movzx eax, cx
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x2c]
shr eax, 0xc
or al, 0xe0
mov byte [esi], al
shr dword [esp + 0x2c], 6
mov eax, dword [esp + 0x2c]
not eax
or eax, 0x3f
add eax, dword [esp + 0x2c]
add al, 0x81
mov byte [esi + 1], al
mov eax, ecx
xor eax, 0xc0
or ecx, 0x3f
and ecx, eax
add cl, 0x80
mov byte [esi + 2], cl
mov eax, 3
jmp 0x41fe4b
xor ebx, ebx
mov edi, dword [esp + 0xc]
jmp 0x41ffb3
mov dword [esp + 0x48], 0
push 1
call fcn.0042eb60
add esp, 4
mov esi, eax
mov dword [esp + 0x44], eax
jmp 0x41ff31
mov esi, eax
mov ecx, dword [ebp + 8]
mov edi, dword [esp + 0xc]
mov byte [esi], 0
mov dword [esp + 0x10], 0xcec5bbe6
mov dword [esp + 0x14], 0x34bdbcc9
mov dword [esp + 0x18], 0x4340ff43
mov dword [esp + 0x1c], 0xc946
mov dword [esp + 8], 0
mov eax, dword [esp + 8]
cmp eax, 0xf
ja 0x41ff95
nop
nop
nop
nop
mov eax, dword [esp + 8]
mov edx, dword [esp + 8]
add al, 0xf9
xor al, byte [esp + edx + 0x10]
add al, 0x31
mov edx, dword [esp + 8]
mov byte [esp + edx + 0x10], al
inc dword [esp + 8]
mov eax, dword [esp + 8]
cmp eax, 0x10
jb 0x41ff70
push dword [esp + 0x48]
mov esi, dword [esp + 0x48]
push esi
push ebx
call fcn.004095b0
mov ebx, eax
push esi
call fcn.00408c90
add esp, 4
mov eax, dword [esp + 0x34]
push eax
call fcn.00408c90
add esp, 4
push edi
call fcn.0042ebb0
add esp, 4
jmp 0x41fc48