Function at 0x41b6e0
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x1d0
mov esi, esp
push eax
sub esp, 8
mov edx, esp
sub esp, 0x28
mov dword [esi + 0x7c], esp
sub esp, 0xc
mov dword [esi], esp
push eax
mov dword [esi + 0x14], esp
push eax
mov dword [esi + 0x3c], esp
push eax
mov dword [esi + 0x80], esp
sub esp, 0xc
mov dword [esi + 0x4c], esp
sub esp, 0xc
mov dword [esi + 0x78], esp
sub esp, 0xc
mov dword [esi + 4], esp
sub esp, 8
mov dword [esi + 0x48], esp
sub esp, 0x1c
mov dword [esi + 0x20], esp
sub esp, 8
mov dword [esi + 8], esp
sub esp, 0x10
mov dword [esi + 0x10], esp
sub esp, 0xc
mov dword [esi + 0x1c], esp
push eax
mov dword [esi + 0x64], esp
sub esp, 0xc
mov dword [esi + 0x68], esp
push eax
mov dword [esi + 0x44], esp
sub esp, 0x2c
mov dword [esi + 0x6c], esp
sub esp, 0xc
mov dword [esi + 0x70], esp
sub esp, 0x10
mov eax, esp
and eax, 0xfffffff8
mov dword [esi + 0xc], eax
mov esp, eax
push eax
sub esp, 8
mov eax, esp
mov dword [esi + 0x30], eax
mov dword [esi + 0x58], eax
sub esp, 8
mov eax, esp
mov dword [esi + 0x24], eax
mov dword [esi + 0x54], eax
sub esp, 0xc
mov eax, esp
mov dword [esi + 0x34], eax
mov dword [esi + 0x18], eax
sub esp, 0xc
mov dword [esi + 0x50], esp
sub esp, 0xc
mov dword [esi + 0x2c], esp
sub esp, 8
mov dword [esi + 0x60], esp
sub esp, 0xc
mov dword [esi + 0x28], esp
sub esp, 0x18
mov dword [esi + 0x38], esp
sub esp, 0xc
mov dword [esi + 0x5c], esp
sub esp, 0xc
mov dword [esi + 0x40], esp
sub esp, 0xc
mov dword [esi + 0x74], esp
mov dword [edx], 0x29842b55
mov dword [edx + 4], 0x2d9f2f9d
mov dword [edx + 8], 0x3132339e
xor ecx, ecx
movzx eax, byte [edx + ecx]
mov edi, edx
lea edx, [ecx + 0x1dd86187]
mov ebx, pe_nt_image_headers32
sub ebx, ecx
xor ebx, edx
and ebx, eax
xor ebx, edx
mov edx, ebx
xor edx, 0x1539e7a3
mov eax, ebx
or eax, 0x8c0005c
and eax, edx
add eax, eax
xor ebx, 0x6ac6185c
mov edx, eax
and edx, ebx
xor ebx, eax
lea eax, [ebx + edx*2]
mov edx, edi
inc al
mov byte [edi + ecx], al
mov eax, ecx
and eax, 1
xor ecx, 1
lea ecx, [ecx + eax*2]
cmp ecx, 0xc
jb 0x41b7d0
mov edi, dword [esi + 0x7c]
mov dword [edi], 0xe316e118
mov dword [edi + 4], 0xe716e510
mov dword [edi + 8], 0xfbc5f932
mov dword [edi + 0xc], 0xff02fdc3
mov dword [edi + 0x10], 0xf311f10f
mov dword [edi + 0x14], 0xf70af515
mov dword [edi + 0x18], 0x8b758970
mov dword [edi + 0x1c], 0x8f7a8d7f
mov dword [edi + 0x20], 0x8382814a
mov word [edi + 0x24], 0
xor ecx, ecx
nop
nop
nop
nop
nop
mov eax, ecx
add al, 0x28
xor al, byte [edi + ecx]
add al, 0x38
mov byte [edi + ecx], al
inc ecx
cmp ecx, 0x26
jne 0x41b870
movzx ebx, word [edi]
test bx, bx
je 0x41b8b3
add edi, 2
lea ecx, [esi + 0x84]
mov eax, dword [ebp + 0x10]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [ecx], bx
add ecx, 2
movzx ebx, word [edi]
add edi, 2
test bx, bx
jne 0x41b8a0
jmp 0x41b8bc
lea ecx, [esi + 0x84]
mov eax, dword [ebp + 0x10]
mov word [ecx], 0
movzx edi, word [eax]
test di, di
je 0x41b8e1
lea ebx, [eax + 2]
nop
nop
nop
nop
mov word [ecx], di
add ecx, 2
movzx edi, word [ebx]
add ebx, 2
test di, di
jne 0x41b8d0
mov word [ecx], 0
movzx edi, word [edx]
test di, di
je 0x41b911
add edx, 2
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [ecx], di
add ecx, 2
movzx edi, word [edx]
add edx, 2
test di, di
jne 0x41b900
mov word [ecx], 0
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov edi, dword [esi]
mov dword [edi], 0x6b746c16
mov byte [edi + 4], 0xc
mov dword [edi + 5], 0
xor ecx, ecx
mov eax, ecx
add al, 0x82
xor al, byte [edi + ecx]
add al, 0x76
mov byte [edi + ecx], al
inc ecx
cmp ecx, 9
jne 0x41b930
movzx ecx, byte [edi]
test cl, cl
je 0x41b95b
inc edi
nop
nop
nop
nop
nop
nop
mov byte [edx], cl
inc edx
movzx ecx, byte [edi]
inc edi
test cl, cl
jne 0x41b950
mov dword [esi], edx
mov byte [edx], 0
lea eax, [esi + 0x84]
push dword [esi + 0x14]
push dword [esi + 0x80]
push dword [esi + 0x3c]
push eax
call fcn.0040c4b0
add esp, 0x10
movzx eax, al
mov eax, dword [eax*4 + 0x445dac]
mov ecx, dword [0x445db4]
mov edx, ecx
and edx, 0xf6f85f51
add edx, edx
sub edx, ecx
add eax, edx
add eax, 0x907a0af
jmp eax