Function at 0x41a170
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x50
mov eax, dword [esp + 0x6c]
mov ebp, dword [eax + 4]
mov ecx, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, ecx
cmp word [ebp + ecx + 2], 0
lea ecx, [ecx + 2]
jne 0x41a190
mov eax, dword [esp + 0x70]
mov edx, dword [eax + 4]
mov eax, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
cmp word [edx + eax + 2], 0
lea eax, [eax + 2]
jne 0x41a1b0
mov dword [esp + 4], edx
sar ecx, 1
sar eax, 1
lea edx, [ecx + eax]
mov dword [esp + 0x48], eax
add eax, ecx
add eax, 0x1b
test eax, eax
mov dword [esp + 0x4c], ecx
mov dword [esp + 0x44], edx
jns 0x41a1e2
mov eax, 0xffffffff
jmp 0x41a1e9
lea eax, [edx*2 + 0x36]
push eax
call fcn.00408310
add esp, 4
mov dword [esp + 0x40], eax
mov dword [esp + 0xa], 0xfa45f8ab
mov dword [esp + 0xe], 0xfe5efc64
mov dword [esp + 0x12], 0xf26df05e
mov dword [esp + 0x16], 0xf630f413
mov dword [esp + 0x1a], 0xea7de87f
mov dword [esp + 0x1e], 0xee73ec4e
mov dword [esp + 0x22], 0xe278e07c
mov dword [esp + 0x26], 0xe67be47c
mov dword [esp + 0x2a], 0xda6ad807
mov dword [esp + 0x2e], 0xde49dc7e
mov dword [esp + 0x32], 0xd248d04b
mov dword [esp + 0x36], 0xd672d44d
mov dword [esp + 0x3a], 0xca65c844
mov word [esp + 0x3e], 0xcccb
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ecx, byte [esp + eax + 0xa]
lea edx, [eax - 0x440e4101]
and edx, ecx
mov ebx, edx
and ebx, 2
mov esi, edx
or esi, 0xfd
inc esi
mov edi, edx
and edi, 0xfffffffd
imul edi, esi
or edx, 2
imul edx, ebx
sub edi, edx
add ecx, eax
add ecx, 0xbbf1beff
add ecx, edi
add cl, 8
mov byte [esp + eax + 0xa], cl
mov ecx, eax
and ecx, 1
xor eax, 1
lea eax, [eax + ecx*2]
cmp eax, 0x36
jb 0x41a270
movzx ecx, word [ebp]
mov edx, dword [esp + 0x40]
mov eax, edx
test cx, cx
je 0x41a2e2
add ebp, 2
mov eax, edx
mov word [eax], cx
add eax, 2
movzx ecx, word [ebp]
add ebp, 2
test cx, cx
jne 0x41a2d0
mov word [eax], 0
movzx ecx, word [esp + 0xa]
test cx, cx
je 0x41a311
lea edx, [esp + 0xc]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x41a300
mov word [eax], 0
mov edx, dword [esp + 4]
movzx ecx, word [edx]
test cx, cx
je 0x41a341
add edx, 2
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x41a330
mov word [eax], 0
mov eax, dword [esp + 0x68]
mov ebx, dword [eax]
mov eax, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp word [ebx + eax + 2], 0
lea eax, [eax + 2]
jne 0x41a360
mov ecx, dword [esp + 0x6c]
mov ebp, dword [ecx]
mov ecx, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp word [ebp + ecx + 2], 0
lea ecx, [ecx + 2]
jne 0x41a380
mov edx, dword [esp + 0x70]
mov edi, dword [edx]
mov edx, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp word [edi + edx + 2], 0
lea edx, [edx + 2]
jne 0x41a3a0
sar eax, 1
sar ecx, 1
sar edx, 1
add ecx, eax
lea eax, [edx + ecx]
add eax, 0x13
test eax, eax
jns 0x41a3c4
mov eax, 0xffffffff
jmp 0x41a3cd
add ecx, edx
lea eax, [ecx*2 + 0x26]
push eax
call fcn.00408310
add esp, 4
mov esi, eax
movzx eax, word [ebx]
mov dword [esp + 4], esi
test ax, ax
je 0x41a401
add ebx, 2
mov esi, dword [esp + 4]
nop
nop
nop
nop
nop
mov word [esi], ax
add esi, 2
movzx eax, word [ebx]
add ebx, 2
test ax, ax
jne 0x41a3f0
mov word [esi], 0x2f
mov dword [esp + 0xa], 0x4c0e4a76
mov dword [esp + 0xe], 0x403b4ec5
mov dword [esp + 0x12], 0x443d4224
mov dword [esp + 0x16], 0x583e4636
mov dword [esp + 0x1a], 0x5c255a26
mov dword [esp + 0x1e], 0x50605e2e
mov word [esp + 0x22], 0x5251
mov eax, 0x1f482441
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ecx, byte [esp + eax - 0x1f482437]
mov edx, eax
and edx, ecx
add edx, edx
sub ecx, edx
add ecx, eax
mov edx, ecx
and edx, 0x77
xor ecx, 0x5beddf7
lea edx, [ecx + edx*2]
and ecx, 1
or edx, 1
add edx, ecx
mov byte [esp + eax - 0x1f482437], dl
inc eax
cmp eax, 0x1f48245b
jne 0x41a450
add esi, 2
movzx eax, word [ebp]
test ax, ax
mov ebx, dword [esp + 0x40]
je 0x41a4b2
add ebp, 2
nop
nop
nop
nop
nop
nop
mov word [esi], ax
add esi, 2
movzx eax, word [ebp]
add ebp, 2
test ax, ax
jne 0x41a4a0
mov word [esi], 0
movzx eax, word [esp + 0xa]
test ax, ax
je 0x41a4e1
lea ecx, [esp + 0xc]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [esi], ax
add esi, 2
movzx eax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41a4d0
mov word [esi], 0
movzx eax, word [edi]
test ax, ax
je 0x41a511
add edi, 2
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [esi], ax
add esi, 2
movzx eax, word [edi]
add edi, 2
test ax, ax
jne 0x41a500
mov word [esi], 0
mov dword [esp + 0xa], 0x2a
lea eax, [esp + 0xa]
push 0
push 0
push 0xc00000
push eax
push ebx
mov edi, dword [esp + 0x18]
push edi
push dword [esp + 0x7c]
call fcn.0041e110
add esp, 0x1c
mov byte [esp + 3], al
jmp dword [0x43ec24]