Function at 0x41eaa0
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x41eef8
sub esp, 0x68
mov ebx, dword [0x4c0ec0]
xor ebp, ebp
cmp ebx, ebp
jne 0x41eb1a
mov dword [esp], 0xafc7c
mov ebx, 0x4d28a0
mov dword [esp + 4], ebx
add dword [esp + 4], 0x90
call fcn.0040ffc0
mov ebx, dword [esp + 8]
cmp byte [0x4d1078], 0
jne 0x41eee2
mov dword [0x4c0ec0], ebx
mov ebx, dword [0x4c0ec0]
xor ebp, ebp
cmp ebx, ebp
jne 0x41eb1a
mov ebx, 0x487b88
mov dword [esp], ebx
mov dword [esp + 4], 0x1f
call fcn.00424fa0
xor edi, edi
mov ebp, dword [esp + 0x74]
mov ecx, dword [esp + 0x78]
mov ebx, dword [esp + 0x7c]
xor esi, esi
mov dword [esp + 0x2c], ecx
mov ecx, ebp
mov ebp, dword [esp + 0x2c]
cmp esi, ebp
jge 0x41eb66
mov ebp, dword [ecx]
mov dword [esp + 0x28], ebp
mov ebx, dword [esp + 0x28]
mov dword [esp + 0x1c], ebx
add edi, dword [esp + 0x1c]
mov ebx, edi
shl ebx, 0xa
add ebx, edi
mov edi, ebx
shr ebx, 6
xor ebx, edi
mov edi, ebx
add ecx, 4
inc esi
mov ebp, dword [esp + 0x2c]
cmp esi, ebp
jl 0x41eb38
add edi, dword [esp + 0x70]
mov ebp, edi
shl edi, 0xa
add edi, ebp
mov ebp, edi
shr edi, 6
xor edi, ebp
mov ebp, edi
shl edi, 3
add edi, ebp
mov ebp, edi
shr edi, 0xb
xor edi, ebp
mov eax, 0xba6a1fbd
mul edi
mov ebx, edx
shr ebx, 0x11
imul ebx, ebx, 0x2bf1f
mov ebp, edi
mov dword [esp + 0x24], edi
sub ebp, ebx
mov esi, dword [0x4c0ec0]
cmp esi, 0
je 0x41eedb
mov dword [esp + 0x20], ebp
cmp ebp, 0x2bf1f
jae 0x41eed4
shl ebp, 2
add esi, ebp
mov eax, dword [esi]
xor ebp, ebp
cmp eax, ebp
je 0x41ec85
mov ebp, dword [eax + 8]
mov ebx, dword [esp + 0x6c]
cmp ebp, ebx
jne 0x41ec79
mov ebp, dword [eax + 0xc]
cmp ebp, edi
jne 0x41ec79
mov ebp, dword [eax + 0x10]
mov ebx, dword [esp + 0x70]
cmp ebp, ebx
jne 0x41ec79
mov dword [esp + 0x34], eax
xor ebx, ebx
mov ecx, 0x18
mov edx, eax
add edx, ecx
mov ecx, dword [eax + 0x14]
mov eax, dword [eax + 0x14]
cmp eax, 0x20
ja 0x41eecd
cmp ecx, eax
ja 0x41eecd
cmp edx, 0
je 0x41eec6
mov dword [esp + 0x44], edx
mov dword [esp], edx
mov dword [esp + 0x48], ecx
mov dword [esp + 4], ecx
mov dword [esp + 0x4c], eax
mov dword [esp + 8], eax
mov ebx, dword [esp + 0x74]
mov dword [esp + 0xc], ebx
mov ebx, dword [esp + 0x78]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x7c]
mov dword [esp + 0x14], ebx
call fcn.0041ef10
mov edi, dword [esp + 0x24]
mov eax, dword [esp + 0x34]
movzx ebx, byte [esp + 0x18]
cmp bl, 0
je 0x41ec79
mov dword [esp + 0x84], eax
add esp, 0x68
ret
mov eax, dword [eax]
xor ebp, ebp
cmp eax, ebp
jne 0x41ebd0
cmp byte [esp + 0x80], 0
jne 0x41ec9e
mov dword [esp + 0x84], 0
add esp, 0x68
ret
mov eax, dword [esp + 0x78]
mov ebx, dword [esp + 0x6c]
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0041e920
mov edx, dword [esp + 8]
mov dword [esp + 0x30], edx
xor ebx, ebx
mov ecx, 0x18
mov eax, edx
add edx, ecx
mov ecx, dword [eax + 0x14]
mov eax, dword [eax + 0x14]
cmp eax, 0x20
ja 0x41eebf
cmp ecx, eax
ja 0x41eebf
cmp edx, 0
je 0x41eeb8
mov dword [esp + 0x38], edx
mov esi, edx
mov dword [esp + 0x3c], ecx
mov edx, ecx
mov dword [esp + 0x40], eax
mov dword [esp + 0x64], eax
mov ebp, dword [esp + 0x74]
mov ecx, dword [esp + 0x78]
mov ebx, dword [esp + 0x7c]
mov dword [esp + 0x58], ebx
mov dword [esp + 0x60], edx
mov eax, edx
mov dword [esp + 0x54], ecx
cmp ecx, edx
jge 0x41ed19
mov eax, ecx
mov dword [esp + 0x5c], esi
mov dword [esp], esi
mov dword [esp + 0x50], ebp
mov dword [esp + 4], ebp
mov ebx, eax
shl ebx, 2
mov dword [esp + 8], ebx
call fcn.0044aea0
mov ecx, dword [esp + 0x30]
mov eax, dword [esp + 0x24]
mov dword [ecx + 0xc], eax
mov eax, dword [esp + 0x70]
mov dword [ecx + 0x10], eax
mov esi, dword [0x4c0ec0]
cmp esi, 0
je 0x41eeb1
mov ebp, dword [esp + 0x20]
cmp ebp, 0x2bf1f
jae 0x41eeaa
shl ebp, 2
add esi, ebp
mov eax, dword [esi]
cmp byte [0x4d1078], 0
jne 0x41ee95
mov dword [ecx], eax
mov esi, dword [0x4c0ec0]
cmp esi, 0
je 0x41ee8e
mov ebp, dword [esp + 0x20]
cmp ebp, 0x2bf1f
jae 0x41ee87
shl ebp, 2
add esi, ebp
cmp byte [0x4d1078], 0
jne 0x41ee72
mov dword [esi], ecx
mov ebx, dword [esp + 0x6c]
cmp ebx, 1
jne 0x41ee1a
mov eax, dword [0x4c0ee4]
cmp ecx, 0
je 0x41ee16
cmp byte [0x4d1078], 0
jne 0x41ee01
mov dword [ecx + 4], eax
cmp byte [0x4d1078], 0
jne 0x41edea
mov dword [0x4c0ee4], ecx
mov dword [esp + 0x84], ecx
add esp, 0x68
ret
mov ebp, 0x4c0ee4
mov dword [esp], ebp
mov dword [esp + 4], ecx
call fcn.0040c2a0
mov ecx, dword [esp + 0x30]
jmp 0x41eddf
lea esi, [ecx + 4]
mov dword [esp], esi
mov dword [esp + 4], eax
call fcn.0040c2a0
mov ecx, dword [esp + 0x30]
jmp 0x41edd0
mov dword [ecx], eax
jmp 0x41edc4
mov eax, dword [0x4c0ebc]
cmp ecx, 0
je 0x41ee6e
cmp byte [0x4d1078], 0
jne 0x41ee59
mov dword [ecx + 4], eax
cmp byte [0x4d1078], 0
jne 0x41ee42
mov dword [0x4c0ebc], ecx
jmp 0x41eddf
mov ebp, 0x4c0ebc
mov dword [esp], ebp
mov dword [esp + 4], ecx
call fcn.0040c2a0
mov ecx, dword [esp + 0x30]
jmp 0x41eddf
lea esi, [ecx + 4]
mov dword [esp], esi
mov dword [esp + 4], eax
call fcn.0040c2a0
mov ecx, dword [esp + 0x30]
jmp 0x41ee31
mov dword [ecx], eax
jmp 0x41ee25
mov dword [esp], esi
mov dword [esp + 4], ecx
call fcn.0040c2a0
mov ecx, dword [esp + 0x30]
jmp 0x41edb0
call fcn.00423330
ud2
mov dword [esi], eax
jmp 0x41ed8c
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040c2a0
mov ecx, dword [esp + 0x30]
jmp 0x41ed7d
call fcn.00423330
ud2
mov dword [esi], eax
jmp 0x41ed57
mov dword [edx], eax
jmp 0x41ece5
call fcn.004233a0
ud2
mov dword [edx], eax
jmp 0x41ec28
call fcn.004233a0
ud2
call fcn.00423330
ud2
mov dword [esi], eax
jmp 0x41ebaf
mov ebp, 0x4c0ec0
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040c2a0
jmp 0x41eaf9
call fcn.00448770
jmp fcn.0041eaa0