Function at 0x409c80
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x78
mov eax, dword [ebp + 8]
add eax, dword [ecx + 0x60]
mov word [esp + 0x18], 0x4b4d
mov byte [esp + 0x1a], 0x32
mov dword [esp + 0x1b], 0
mov dword [esp + 0x1e], 0
mov dword [esp + 8], 0
mov edx, dword [esp + 8]
cmp edx, 9
ja 0x409d07
nop
mov edx, dword [esp + 8]
mov esi, dword [esp + 8]
movzx esi, byte [esp + esi + 0x18]
mov edi, edx
and edi, 0x423f888
xor edx, 0x8423f888
lea edx, [edx + edi*2]
lea edi, [edx + esi]
and edx, esi
add edx, edx
sub edi, edx
mov dword [esp + 0x28], edi
mov edx, dword [esp + 0x28]
add dl, 0x48
mov esi, dword [esp + 8]
mov byte [esp + esi + 0x18], dl
inc dword [esp + 8]
mov edx, dword [esp + 8]
cmp edx, 0xa
jb 0x409cc0
mov dword [esp + 8], 0xd4dad6c4
mov word [esp + 0xc], 0x9dd8
mov dword [esp + 0xe], 0
mov byte [esp + 0x12], 0
mov dword [esp], 0
mov edx, dword [esp]
cmp edx, 0xa
ja 0x409d83
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, dword [esp]
mov esi, dword [esp]
movzx esi, byte [esp + esi + 8]
mov edi, edx
and edi, 0xec1fe49b
xor edx, 0x6c1fe49b
lea edx, [edx + edi*2]
mov edi, edx
and edi, esi
add edx, esi
add edi, edi
sub edx, edi
mov dword [esp + 0x28], edx
mov edx, dword [esp + 0x28]
add dl, 0xc3
mov esi, dword [esp]
mov byte [esp + esi + 8], dl
inc dword [esp]
mov edx, dword [esp]
cmp edx, 0xb
jb 0x409d40
mov dword [esp + 0x28], 0x5c5aa6d9
mov dword [esp + 0x2c], 0x5858aab2
mov dword [esp + 0x30], 0x57606aa9
mov dword [esp + 0x34], 0x506f5063
mov dword [esp + 0x38], 0xb84f7b64
mov dword [esp + 0x3c], 0x7ea99795
mov dword [esp + 0x40], 0x7d477570
mov dword [esp + 0x44], 0x7ca0ba76
mov dword [esp + 0x48], 0x4e494973
mov dword [esp + 0x4c], 0x4e474941
mov dword [esp + 0x50], 0x75b09b40
mov dword [esp + 0x54], 0x884b4743
mov dword [esp + 0x58], 0x685c6a72
mov dword [esp + 0x5c], 0x6c52ad87
mov dword [esp + 0x60], 0xa18f6651
mov byte [esp + 0x64], 0xc2
mov dword [esp + 0x65], 0
mov dword [esp + 0x69], 0
mov word [esp + 0x6d], 0
mov dword [esp + 4], 0
mov edx, dword [esp + 4]
cmp edx, 0x46
ja 0x409e6f
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, dword [esp + 4]
mov esi, dword [esp + 4]
movzx esi, byte [esp + esi + 0x28]
lea edi, [edx + 0x3f]
and edi, esi
mov ebx, 0xe20ff6c0
sub ebx, edx
or ebx, esi
not ebx
add ebx, esi
sub ebx, edi
mov dword [esp], ebx
mov edx, dword [esp]
add dl, 0x47
mov esi, dword [esp + 4]
mov byte [esp + esi + 0x28], dl
inc dword [esp + 4]
mov edx, dword [esp + 4]
cmp edx, 0x47
jb 0x409e30
mov esi, dword [ebp + 0xc]
movzx ebx, byte [esp + 0x28]
mov edx, eax
test bl, bl
je 0x409e9b
lea edi, [esp + 0x29]
mov edx, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edx], bl
inc edx
movzx ebx, byte [edi]
inc edi
test bl, bl
jne 0x409e90
mov byte [edx], 0
movzx ebx, byte [esi]
test bl, bl
je 0x409ebb
inc esi
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edx], bl
inc edx
movzx ebx, byte [esi]
inc esi
test bl, bl
jne 0x409eb0
mov esi, dword [ebp + 0x10]
mov byte [edx], 0
movzx ebx, byte [esp + 8]
test bl, bl
je 0x409edb
lea edi, [esp + 9]
nop
nop
mov byte [edx], bl
inc edx
movzx ebx, byte [edi]
inc edi
test bl, bl
jne 0x409ed0
mov byte [edx], 0
movzx ebx, byte [esi]
test bl, bl
je 0x409efb
inc esi
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edx], bl
inc edx
movzx ebx, byte [esi]
inc esi
test bl, bl
jne 0x409ef0
mov byte [edx], 0
movzx ebx, byte [esp + 0x18]
test bl, bl
je 0x409f1b
lea esi, [esp + 0x19]
nop
nop
nop
nop
nop
mov byte [edx], bl
inc edx
movzx ebx, byte [esi]
inc esi
test bl, bl
jne 0x409f10
mov byte [edx], 0
sub edx, eax
add dword [ecx + 0x60], edx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret 0xc