Function at 0x41d630
Capabilities:
Encode data using xor
Encrypt data using rc4 prga
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x270
mov esi, esp
push eax
mov edi, esp
push eax
mov dword [esi + 0xc], esp
push eax
mov eax, esp
push eax
mov dword [esi + 0x18], esp
push eax
mov dword [esi + 0x120], esp
push eax
mov dword [esi + 0x2c], esp
mov dword [esi + 4], edi
mov dword [esi + 0x4c], eax
sub esp, 0x800
mov eax, esp
mov dword [esi + 0x28], eax
mov dword [esi + 0x11c], eax
push eax
mov dword [esi + 0x48], esp
sub esp, 0x30
mov eax, esp
and eax, 0xfffffff0
mov dword [esi + 0x44], eax
mov esp, eax
push eax
mov dword [esi + 0x3c], esp
push eax
mov dword [esi + 0x24], esp
sub esp, 0x20
mov ebx, esp
and ebx, 0xfffffff0
mov esp, ebx
mov dword [esi + 0x50], 0x23d221c2
mov dword [esi + 0x54], 0xdf25dddd
mov dword [esi + 0x58], 0xdb35d925
mov dword [esi + 0x5c], 0xd726d536
mov dword [esi + 0x60], 0xd334d13d
mov dword [esi + 0x64], 0xcf0fcd25
mov dword [esi + 0x68], 0xcb30c933
mov dword [esi + 0x6c], 0xc732c531
mov dword [esi + 0x70], 0xc324c139
mov dword [esi + 0x74], 0xff0dfd2f
mov dword [esi + 0x78], 0xfb14f900
mov dword [esi + 0x7c], 0xf737f513
mov dword [esi + 0x80], 0xf30ff104
mov dword [esi + 0x84], 0xef1bed16
mov dword [esi + 0x88], 0xeb75e975
mov dword [esi + 0x8c], 0xe775e578
mov dword [esi + 0x90], 0xe371e16b
mov dword [esi + 0x94], 0x9f109d7c
mov dword [esi + 0x98], 0x9b71997a
mov dword [esi + 0x9c], 0x97029501
mov dword [esi + 0xa0], 0x9301910a
mov dword [esi + 0xa4], 0x8f018d1b
mov dword [esi + 0xa8], 0x8b75896a
mov dword [esi + 0xac], 0x87168505
mov dword [esi + 0xb0], 0x831f8114
mov dword [esi + 0xb4], 0xbf30bd14
mov dword [esi + 0xb8], 0xbb27b950
mov dword [esi + 0xbc], 0xb739b528
mov dword [esi + 0xc0], 0xb321b12d
mov dword [esi + 0xc4], 0xaf48ad24
mov dword [esi + 0xc8], 0xab3ea941
mov dword [esi + 0xcc], 0xa732a531
mov dword [esi + 0xd0], 0xa32ca12b
mov dword [esi + 0xd4], 0x5fc85d41
mov dword [esi + 0xd8], 0x5b5859ca
mov dword [esi + 0xe7], 0
mov dword [esi + 0xe4], 0
mov dword [esi + 0xe0], 0
mov dword [esi + 0xdc], 0
mov dword [esi + 0x130], 0
mov eax, dword [esi + 0x130]
cmp eax, 0x9a
ja 0x41d85f
nop
nop
nop
mov eax, dword [esi + 0x130]
mov ecx, dword [esi + 0x130]
movzx ecx, byte [esi + ecx + 0x50]
lea edx, [eax + ecx]
add edx, 0x5f6be8fb
add eax, 0x5f6be8fb
and eax, ecx
add eax, eax
mov ecx, eax
not ecx
and ecx, edx
add ecx, ecx
xor eax, edx
sub ecx, eax
add cl, 0x23
mov eax, dword [esi + 0x130]
mov byte [esi + eax + 0x50], cl
inc dword [esi + 0x130]
mov eax, dword [esi + 0x130]
cmp eax, 0x9b
jb 0x41d810
movzx ecx, word [esi + 0x50]
lea eax, [esi + 0x1d4]
test cx, cx
je 0x41d891
lea edx, [esi + 0x52]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x41d880
mov word [eax], 0
mov dword [esi + 0x50], 0x3380319c
mov dword [esi + 0x54], 0x37713571
mov dword [esi + 0x58], 0x2b992991
mov dword [esi + 0x5c], 0x2f9c2d98
mov dword [esi + 0x60], 0x238e2189
mov dword [esi + 0x64], 0x27672599
mov dword [esi + 0x68], 0x1ba2195b
mov dword [esi + 0x6c], 0x1fa01da5
mov dword [esi + 0x70], 0x13be1155
mov dword [esi + 0x74], 0x17a915a7
mov dword [esi + 0x78], 0xbbe094e
mov dword [esi + 0x7c], 0xf4f0dbb
mov dword [esi + 0x80], 0x34701b2
mov dword [esi + 0x84], 0x7b105a8
mov dword [esi + 0x88], 0x7bcd79c7
mov dword [esi + 0x8c], 0x7f2a7d2a
mov dword [esi + 0x90], 0x73207123
mov dword [esi + 0x94], 0x77e975ca
mov dword [esi + 0x98], 0x6bcf69cc
mov dword [esi + 0x9c], 0x6fd36dc0
mov dword [esi + 0xa0], 0x63c161f9
mov dword [esi + 0xa4], 0x67f965f6
mov dword [esi + 0xa8], 0x5bc559cb
mov dword [esi + 0xac], 0x5fca5dfa
mov dword [esi + 0xb0], 0x53e551fc
mov dword [esi + 0xb4], 0x57c855cd
mov dword [esi + 0xb8], 0x4bd549ec
mov dword [esi + 0xbc], 0x4fdd4ddb
mov dword [esi + 0xc0], 0x430141ec
mov dword [esi + 0xc4], 0x47d445d1
mov dword [esi + 0xc8], 0xbb1fb92a
mov dword [esi + 0xcc], 0xbf2abd22
mov dword [esi + 0xd0], 0xb317b106
mov dword [esi + 0xd4], 0xb725b526
mov dword [esi + 0xd8], 0xab35a931
mov dword [esi + 0xdc], 0xaf02ad32
mov dword [esi + 0xe0], 0xa33ca115
mov dword [esi + 0xe4], 0xa738a53d
mov dword [esi + 0xe8], 0x9b0e990b
mov dword [esi + 0xec], 0x9f029d3d
mov dword [esi + 0xf0], 0x9392910c
mov dword [esi + 0x104], 0
mov dword [esi + 0x100], 0
mov dword [esi + 0xfc], 0
mov dword [esi + 0xf8], 0
mov dword [esi + 0xf4], 0
mov dword [esi + 0x130], 0
mov eax, dword [esi + 0x130]
cmp eax, 0xb7
ja 0x41daa5
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [esi + 0x130]
mov eax, dword [esi + 0x130]
movzx eax, byte [esi + eax + 0x50]
lea edx, [ecx + 0x88]
and edx, eax
mov edi, 0x77
sub edi, ecx
or edi, eax
add edi, edx
sub eax, edi
add al, 0x47
mov ecx, dword [esi + 0x130]
mov byte [esi + ecx + 0x50], al
inc dword [esi + 0x130]
mov eax, dword [esi + 0x130]
cmp eax, 0xb8
jb 0x41da60
mov dword [esi + 0x40], ebx
movzx edx, word [esi + 0x50]
lea eax, [esi + 0x130]
mov ecx, eax
test dx, dx
je 0x41dae1
lea ecx, [esi + 0x130]
lea edi, [esi + 0x52]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [ecx], dx
add ecx, 2
movzx edx, word [edi]
add edi, 2
test dx, dx
jne 0x41dad0
mov word [ecx], 0
lea ecx, [esi + 0x1d4]
mov dword [esi + 0x128], ecx
mov dword [esi + 0x12c], eax
mov eax, dword [esi + 0x44]
add eax, 0x18
mov dword [esi + 0x118], eax
mov edi, dword [esi + 0x28]
add edi, 2
xor ebx, ebx
mov eax, dword [0x43e188]
xor ecx, ecx
mov dword [esi], 0
mov dword [esi + 0x14], 0
mov edx, dword [esi + 4]
mov dword [esi + 0x28], edi
jmp 0x41db30
jmp eax