Function at 0x41d25b
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
sub esp, 0x7c
push ebx
push ebp
push esi
xor ebx, ebx
mov dword [esp + 0x4c], edx
push edi
mov esi, ecx
mov dword [esp + 0x10], 0xe5eaf8e9
mov edx, ebx
mov al, byte [esp + edx + 0x10]
add al, 0x7f
mov byte [esp + edx + 0x6c], al
inc edx
cmp edx, 4
jl 0x41d274
mov byte [esp + 0x70], bl
mov ecx, ebx
mov dword [esp + 0x14], 0xe1deead7
mov byte [esp + 0x18], 0xd9
mov al, byte [esp + ecx + 0x14]
sub al, 0x75
mov byte [esp + ecx + 0x74], al
inc ecx
cmp ecx, 5
jl 0x41d297
mov ecx, dword [0x42cb10]
movzx eax, byte [0x42caa8]
xor ecx, 0xac95bf4f
or eax, 0xa4087b1d
mov dword [0x42cb44], ecx
sub eax, 0x7d70d1ce
mov byte [esp + 0x79], bl
and ecx, 0x2db5dbb5
mov dword [0x42cb10], eax
push esi
mov dword [0x42cb00], ecx
call fcn.00405b40
pop ecx
mov ecx, ebx
cmp byte [eax + esi - 1], 0x2f
jne 0x41d385
mov dword [esp + 0x10], 0x2ee02ee0
mov al, byte [esp + ecx + 0x10]
add al, 0x45
mov byte [esp + ecx + 0x14], al
inc ecx
cmp ecx, 4
jl 0x41d2fb
mov byte [esp + 0x18], bl
mov ecx, ebx
mov dword [esp + 0x20], 0x5a59615e
mov dword [esp + 0x24], 0x5f215467
mov dword [esp + 0x28], 0x57666553
mov byte [esp + 0x2c], 0x64
mov al, byte [esp + ecx + 0x20]
add al, 0xe
mov byte [esp + ecx + 0x54], al
inc ecx
cmp ecx, 0xd
jl 0x41d32e
mov eax, dword [0x42cb10]
mov ecx, eax
xor al, 0x85
mov byte [esp + 0x61], bl
or ecx, 0xd6cdee88
mov byte [0x42caa8], al
mov eax, dword [0x42cb44]
mov dword [0x42cadc], ecx
xor ecx, 0xe4ffc53e
or eax, 0xee8f6372
mov dword [0x42cac4], ecx
mov dword [0x42cb10], eax
lea eax, [esp + 0x54]
push eax
lea eax, [esp + 0x18]
jmp 0x41d40f
mov dword [esp + 0x14], 0x33396533
mov byte [esp + 0x18], 0x65
mov al, byte [esp + ecx + 0x14]
xor al, 0x16
mov byte [esp + ecx + 0x20], al
inc ecx
cmp ecx, 5
jl 0x41d392
mov byte [esp + 0x25], bl
mov ecx, ebx
mov dword [esp + 0x54], 0xa09fa7a4
mov dword [esp + 0x58], 0xa5679aad
mov dword [esp + 0x5c], 0x9dacab99
mov byte [esp + 0x60], 0xaa
mov al, byte [esp + ecx + 0x54]
sub al, 0x38
mov byte [esp + ecx + 0x7c], al
inc ecx
cmp ecx, 0xd
jl 0x41d3c5
movzx eax, byte [0x42caa8]
sub dword [0x42cadc], 0x57b3e21e
add eax, 0x4525bbd1
mov dword [0x42cac4], eax
mov eax, dword [0x42cb44]
or eax, 0x6aa79813
mov byte [esp + 0x89], bl
mov dword [0x42cb00], eax
lea eax, [esp + 0x7c]
push eax
lea eax, [esp + 0x24]
push esi
push eax
push 0x104
push 0x42dff8
mov edx, 0x534fbfb6
xor ecx, ecx
call fcn.00415333
call eax
mov eax, dword [0x42cb10]
lea edi, [esp + 0x34]
mov edx, dword [0x42cadc]
add eax, 0x16748b3e
mov dword [0x42cb00], eax
add esp, 0x14
xor eax, eax
imul ecx, edx, 0x856759a4
stosd dword es:[edi], eax
and edx, 0xaeabcb45
mov dword [0x42cadc], edx
xor edx, 0x78aab67
mov dword [0x42e200], 0x1f4
mov dword [0x42cac4], edx
stosd dword es:[edi], eax
mov dword [0x42cb44], ecx
xor cl, 0x1c
mov byte [0x42caa8], cl
stosd dword es:[edi], eax
lea eax, [edx - 0x5334bb04]
mov dword [0x42cb10], eax
call fcn.00420aa3
mov esi, dword [0x42cb10]
mov edi, eax
add dword [0x42cb44], 0x50c9327
lea ebx, [esi - 0x7de283f4]
mov dword [0x42cadc], ebx
call fcn.00420a7d
mov ecx, esi
add bl, 0x38
and ecx, 0xf4ebf23a
mov byte [0x42caa8], bl
or esi, 0xfde5efdc
mov dword [0x42cac4], ecx
mov dword [0x42cb10], esi
xor ecx, ecx
mov esi, 0x9e7f4339
inc ecx
push edi
mov edx, esi
mov ebp, eax
call fcn.00415333
call eax
push eax
push edi
lea edx, [esp + 0x74]
lea ecx, [esp + 0x28]
call fcn.0041d179
mov al, byte [0x42cadc]
mov edx, esi
pop ecx
pop ecx
xor ecx, ecx
or al, 0xa
push ebp
inc ecx
mov byte [0x42caa8], al
call fcn.00415333
call eax
push eax
push ebp
lea edx, [esp + 0x7c]
lea ecx, [esp + 0x28]
call fcn.0041d179
mov eax, dword [0x42cb10]
xor ebx, ebx
and dword [0x42cac4], 0x3b1a76ad
xor eax, 0x4ed1f07f
mov dword [0x42cb44], eax
and eax, 0x35f6b9ee
mov dword [0x42cb00], eax
imul eax, dword [0x42cadc], 0x8278086b
mov dword [esp + 0x6c], ebx
mov dword [0x42cb10], eax
lea edx, [esp + 0x6c]
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x2c]
call fcn.0041ce48
add esp, 0xc
test al, al
je 0x41d913
mov ebp, dword [esp + 0x64]
test ebp, ebp
je 0x41d913
mov dword [esp + 0x10], 0x2d306e72
mov ecx, ebx
mov al, byte [esp + ecx + 0x10]
sub al, 0x23
mov byte [esp + ecx + 0x20], al
inc ecx
cmp ecx, 4
jl 0x41d58f
movzx eax, byte [0x42caa8]
mov edx, dword [0x42cb10]
or eax, 0xdaea13e2
mov ecx, edx
mov dword [0x42cac4], eax
and ecx, 0x63447fa2
mov byte [esp + 0x24], bl
push 4
lea eax, [esp + 0x24]
mov dword [0x42cb44], ecx
push eax
xor cl, 0xef
xor edx, 0x5f97e967
push ebp
mov byte [0x42caa8], cl
mov dword [0x42cadc], edx
call fcn.004022e4
add esp, 0xc
test eax, eax
jne 0x41d8f1
mov eax, dword [0x42cac4]
mov ecx, dword [0x42cb00]
xor eax, 0xb20d2709
mov dword [0x42cb00], eax
add ecx, 0x643ec748
add eax, 0x5f0777a8
mov dword [0x42cb44], ecx
and eax, 0xfe740603
mov word [esp + 0x1c], 0x7c
mov dword [0x42cadc], eax
mov eax, ecx
or eax, 0xe0b2dd2
or ecx, 0x3b06f92a
imul eax, eax, 0xf5b6954d
mov dword [0x42cac4], ecx
mov dword [0x42cb10], eax
lea eax, [esp + 0x14]
push eax
lea eax, [esp + 0x20]
push eax
lea eax, [ebp + 4]
push eax
call fcn.00405d9c
mov edi, dword [0x42cb10]
mov edx, eax
mov eax, dword [0x42cadc]
add esp, 0xc
xor eax, 0x9ce8aa3b
mov dword [0x42cac4], eax
lea ecx, [edi + 0x63b1272]
or ecx, 0xb3bb935e
mov dword [0x42cb00], ecx
mov ecx, ebx
mov dword [esp + 0x68], ecx
test edx, edx
je 0x41d8e5
mov esi, dword [esp + 0x50]
mov eax, dword [0x42cadc]
or edi, 0xd54513da
add eax, 0xfc2487d9
mov word [esp + 0x30], 0x31
mov word [esp + 0x34], 0x31
mov word [esp + 0x38], 0x31
mov word [esp + 0x3c], 0x31
mov word [esp + 0x40], 0x31
mov word [esp + 0x44], 0x31
mov word [esp + 0x48], 0x31
mov word [esp + 0x4c], 0x31
mov word [esp + 0x50], 0x31
mov word [esp + 0x10], 0x31
mov dword [0x42cac4], eax
mov dword [0x42cb44], edi
cmp ecx, 0xa
ja case.default.0x41d705
jmp dword [ecx*4 + 0x41d93b]
push edx
xor ecx, ecx
mov edx, 0xf89245dd
push 0x42e0fc
inc ecx
call fcn.00415333
call eax
jmp case.default.0x41d705
lea eax, [esp + 0x30]
xor ecx, ecx
push eax
push edx
mov edx, 0xbf77ea11
inc ecx
call fcn.00415333
call eax
neg eax
sbb al, al
inc al
mov byte [esi], al
jmp case.default.0x41d705
lea eax, [esp + 0x34]
xor ecx, ecx
push eax
push edx
mov edx, 0xbf77ea11
inc ecx
call fcn.00415333
call eax
neg eax
sbb al, al
inc al
mov byte [esi + 1], al
jmp case.default.0x41d705
lea eax, [esp + 0x38]
xor ecx, ecx
push eax
push edx
mov edx, 0xbf77ea11
inc ecx
call fcn.00415333
call eax
neg eax
sbb al, al
inc al
mov byte [esi + 2], al
jmp case.default.0x41d705
lea eax, [esp + 0x3c]
xor ecx, ecx
push eax
push edx
mov edx, 0xbf77ea11
inc ecx
call fcn.00415333
call eax
neg eax
sbb al, al
inc al
mov byte [esi + 3], al
jmp case.default.0x41d705
lea eax, [esp + 0x40]
xor ecx, ecx
push eax
push edx
mov edx, 0xbf77ea11
inc ecx
call fcn.00415333
call eax
neg eax
sbb al, al
inc al
mov byte [esi + 4], al
jmp case.default.0x41d705
lea eax, [esp + 0x44]
xor ecx, ecx
push eax
push edx
mov edx, 0xbf77ea11
inc ecx
call fcn.00415333
call eax
neg eax
sbb al, al
inc al
mov byte [esi + 5], al
jmp case.default.0x41d705
lea eax, [esp + 0x48]
xor ecx, ecx
push eax
push edx
mov edx, 0xbf77ea11
inc ecx
call fcn.00415333
call eax
neg eax
sbb al, al
inc al
mov byte [esi + 6], al
jmp case.default.0x41d705
lea eax, [esp + 0x4c]
xor ecx, ecx
push eax
push edx
mov edx, 0xbf77ea11
inc ecx
call fcn.00415333
call eax
neg eax
sbb al, al
inc al
mov byte [esi + 7], al
jmp case.default.0x41d705
lea eax, [esp + 0x50]
xor ecx, ecx
push eax
push edx
mov edx, 0xbf77ea11
inc ecx
call fcn.00415333
call eax
neg eax
sbb al, al
inc al
mov byte [esi + 8], al
jmp case.default.0x41d705
lea eax, [esp + 0x10]
xor ecx, ecx
push eax
push edx
mov edx, 0xbf77ea11
inc ecx
call fcn.00415333
call eax
neg eax
sbb al, al
inc al
mov byte [esi + 9], al
mov eax, dword [0x42cac4]
or eax, 0x1dba8f89
mov dword [0x42cb00], eax
imul eax, dword [0x42cb44], 0x1f3fe527
add dword [0x42cb44], 0xee97701
mov dword [0x42cadc], eax
lea eax, [esp + 0x14]
push eax
lea eax, [esp + 0x20]
push eax
push ebx
call fcn.00405d9c
mov edi, dword [0x42cb44]
mov edx, eax
mov eax, dword [0x42cac4]
add edi, 0x4fb0431f
mov ecx, dword [esp + 0x74]
sub eax, 0x30f9232d
add esp, 0xc
mov dword [0x42cb10], edi
inc ecx
mov dword [0x42cac4], eax
mov dword [esp + 0x68], ecx
test edx, edx
jne 0x41d69b
mov ebp, dword [esp + 0x64]
xor eax, 0xfc5b3ac9
mov bl, 1
mov dword [0x42cadc], eax
mov al, byte [0x42cb44]
sub al, 9
mov byte [0x42caa8], al
imul eax, dword [0x42cb00], 0xb0b2853e
push ebp
mov dword [0x42cb44], eax
call fcn.004056f0
pop ecx
mov ecx, dword [0x42cb44]
mov al, bl
pop edi
pop esi
add ecx, 0x3fe024a3
sub dword [0x42cadc], 0x17bce265
pop ebp
mov dword [0x42cb00], ecx
pop ebx
add esp, 0x7c
ret