Function at 0x41a8e0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Encrypt data using rc4 prga

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x50
mov ecx, dword [esp + 0x70]
mov eax, dword [esp + 0x6c]
mov ebp, dword [eax + 4]
mov edx, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, edx
cmp word [ebp + edx + 2], 0
lea edx, [edx + 2]
jne 0x41a900
mov ebx, dword [ecx + 4]
mov eax, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp word [ebx + eax + 2], 0
lea eax, [eax + 2]
jne 0x41a920
sar edx, 1
sar eax, 1
lea ecx, [edx + eax]
mov dword [esp + 0x48], eax
add eax, edx
add eax, 0x1b
test eax, eax
mov dword [esp + 0x4c], edx
mov dword [esp + 0x44], ecx
jns 0x41a94e
mov eax, 0xffffffff
jmp 0x41a955
lea eax, [ecx*2 + 0x36]
push eax
call fcn.004082a0
add esp, 4
mov dword [esp], eax
mov dword [esp + 6], 0xba05b86b
mov dword [esp + 0xa], 0xbe1ebc24
mov dword [esp + 0xe], 0xb22db01e
mov dword [esp + 0x12], 0xb670b453
mov dword [esp + 0x16], 0xaa3da83f
mov dword [esp + 0x1a], 0xae33ac0e
mov dword [esp + 0x1e], 0xa238a03c
mov dword [esp + 0x22], 0xa63ba43c
mov dword [esp + 0x26], 0x9a2a9847
mov dword [esp + 0x2a], 0x9e099c3e
mov dword [esp + 0x2e], 0x9208900b
mov dword [esp + 0x32], 0x9632940d
mov dword [esp + 0x36], 0x8a258804
mov word [esp + 0x3a], 0x8c8b
mov eax, 0x8bdc8d3f
mov edi, 0xc0
nop
nop
nop
nop
nop
nop
movzx edx, byte [esp + eax + 0x742372c7]
mov ecx, edi
and ecx, edx
mov esi, eax
xor esi, edx
add esi, edx
sub esi, ecx
and edx, eax
mov ecx, esi
not ecx
and ecx, edx
not edx
and edx, esi
sub edx, ecx
add dl, 8
mov byte [esp + eax + 0x742372c7], dl
inc eax
dec edi
cmp eax, 0x8bdc8d75
jne 0x41a9e0
movzx ecx, word [ebp]
mov eax, dword [esp]
test cx, cx
je 0x41aa42
add ebp, 2
mov eax, dword [esp]
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [ebp]
add ebp, 2
test cx, cx
jne 0x41aa30
mov word [eax], 0
movzx ecx, word [esp + 6]
test cx, cx
je 0x41aa71
lea edx, [esp + 8]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x41aa60
mov word [eax], 0
movzx ecx, word [ebx]
test cx, cx
je 0x41aaa1
add ebx, 2
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [ebx]
add ebx, 2
test cx, cx
jne 0x41aa90
mov word [eax], 0
mov eax, dword [esp + 0x68]
mov esi, dword [eax]
mov eax, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp word [esi + eax + 2], 0
lea eax, [eax + 2]
jne 0x41aac0
mov ecx, dword [esp + 0x6c]
mov ebp, dword [ecx]
mov ecx, 0xfffffffe
mov edx, dword [esp + 0x70]
nop
nop
nop
nop
nop
nop
cmp word [ebp + ecx + 2], 0
lea ecx, [ecx + 2]
jne 0x41aae0
mov edi, dword [edx]
mov edx, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp word [edi + edx + 2], 0
lea edx, [edx + 2]
jne 0x41ab00
sar eax, 1
sar ecx, 1
sar edx, 1
add ecx, eax
lea eax, [edx + ecx]
add eax, 0x13
test eax, eax
mov dword [esp + 0x3c], edi
jns 0x41ab28
mov eax, 0xffffffff
jmp 0x41ab31
add ecx, edx
lea eax, [ecx*2 + 0x26]
push eax
call fcn.004082a0
add esp, 4
movzx ecx, word [esi]
mov edi, eax
test cx, cx
je 0x41ab61
add esi, 2
mov edi, eax
nop
nop
nop
nop
nop
nop
nop
mov word [edi], cx
add edi, 2
movzx ecx, word [esi]
add esi, 2
test cx, cx
jne 0x41ab50
mov dword [esp + 0x40], eax
mov word [edi], 0x2f
mov dword [esp + 6], 0x541032d
mov dword [esp + 0xa], 0x99c079e
mov dword [esp + 0xe], 0xd620b6f
mov dword [esp + 0x12], 0x31590f9d
mov dword [esp + 0x16], 0x355a335d
mov dword [esp + 0x1a], 0x391737a5
mov word [esp + 0x1e], 0x3b3a
mov edx, 0x92
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx eax, byte [esp + edx - 0x8c]
mov ebx, eax
mov esi, eax
and ebx, edx
mov eax, ebx
or al, 0xfd
inc al
mov ecx, ebx
and cl, 0xbd
mul cl
mov ecx, eax
mov eax, esi
add cl, al
mov eax, ebx
shr al, 1
and al, 1
or bl, 2
mul bl
add al, al
sub cl, al
movzx eax, cl
add eax, edx
add al, 0x70
mov byte [esp + edx - 0x8c], al
inc edx
cmp edx, 0xac
jne 0x41abb0
add edi, 2
movzx eax, word [ebp]
test ax, ax
je 0x41ac22
add ebp, 2
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [edi], ax
add edi, 2
movzx eax, word [ebp]
add ebp, 2
test ax, ax
jne 0x41ac10
mov word [edi], 0
movzx eax, word [esp + 6]
test ax, ax
mov ebx, dword [esp + 0x70]
je 0x41ac53
lea ecx, [esp + 8]
mov esi, dword [esp + 0x40]
mov ebp, dword [esp]
mov word [edi], ax
add edi, 2
movzx eax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41ac40
jmp 0x41ac5a
mov esi, dword [esp + 0x40]
mov ebp, dword [esp]
mov word [edi], 0
mov ecx, dword [esp + 0x3c]
movzx eax, word [ecx]
test ax, ax
je 0x41ac81
add ecx, 2
nop
nop
mov word [edi], ax
add edi, 2
movzx eax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41ac70
mov word [edi], 0
mov dword [esp + 6], 0x2a
lea eax, [esp + 6]
push 0
push 0
push 0xc00000
push eax
push ebp
push esi
push dword [esp + 0x7c]
call fcn.0041ef40
add esp, 0x1c
mov byte [esp], al
jmp dword [0x440d18]