Function at 0x409c50
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0xb0
mov edi, dword [ebp + 8]
mov dword [esp + 0x7c], ecx
add edi, dword [ecx + 0x60]
mov dword [esp + 0x80], 0x776c6e43
mov dword [esp + 0x84], 0x2a726b61
mov dword [esp + 0x88], 0x6e7a705c
mov dword [esp + 0x8c], 0x7b6f2d36
mov dword [esp + 0x90], 0x7b717064
mov dword [esp + 0x94], 0x63787079
mov dword [esp + 0x98], 0x74376137
mov dword [esp + 0x9c], 0x7c7b777e
mov dword [esp + 0xa0], 0x2e282c54
mov dword [esp + 0xa4], 0x252e
mov dword [esp], 0
mov eax, dword [esp]
cmp eax, 0x27
ja 0x409d22
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp]
mov ecx, dword [esp]
movzx ecx, byte [esp + ecx + 0x80]
add eax, 0xcdd27800
xor eax, ecx
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x18]
mov ecx, dword [esp]
mov byte [esp + ecx + 0x80], al
inc dword [esp]
mov eax, dword [esp]
cmp eax, 0x28
jb 0x409cf0
mov dword [esp], 0x332226c8
mov dword [esp + 4], 0
mov dword [esp + 0xc], 0
mov eax, dword [esp + 0xc]
cmp eax, 7
ja 0x409da3
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xc]
movzx edx, byte [esp + ecx]
lea ecx, [eax - 0x606c6227]
mov esi, ecx
and esi, edx
xor ecx, edx
add eax, 0xd9
and eax, edx
add eax, esi
sub ecx, eax
lea eax, [ecx + esi*2]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x18]
add al, 0x11
mov ecx, dword [esp + 0xc]
mov byte [esp + ecx], al
mov eax, dword [esp + 0xc]
mov ecx, eax
and ecx, 1
xor eax, 1
lea eax, [eax + ecx*2]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0xc]
cmp eax, 8
jb 0x409d50
mov dword [esp + 0x18], 0xe6e4d0d1
mov dword [esp + 0x1c], 0xe2e2d4c8
mov dword [esp + 0x20], 0xdfaa9cd1
mov dword [esp + 0x24], 0xdaa7deab
mov dword [esp + 0x28], 0xe2d7abaa
mov dword [esp + 0x2c], 0xa4f10f0d
mov dword [esp + 0x30], 0xb9cfa1a6
mov dword [esp + 0x34], 0xb6eaf4bc
mov dword [esp + 0x38], 0xb4b1bdbb
mov dword [esp + 0x3c], 0xb4bfb5b9
mov dword [esp + 0x40], 0x41faebb6
mov dword [esp + 0x44], 0x2434f4b
mov dword [esp + 0x48], 0x32463c38
mov dword [esp + 0x4c], 0x3644f11f
mov dword [esp + 0x50], 0xed073049
mov dword [esp + 0x54], 0x2a525052
mov dword [esp + 0x58], 0x59e202ea
mov dword [esp + 0x5c], 0x55235d59
mov dword [esp + 0x60], 0x361f5825
mov word [esp + 0x64], 0xf9de
mov byte [esp + 0x6e], 0
mov dword [esp + 0x6a], 0
mov dword [esp + 0x66], 0
mov dword [esp + 0x10], 0
mov eax, dword [esp + 0x10]
cmp eax, 0x56
ja 0x409eb0
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x10]
movzx ecx, byte [esp + ecx + 0x18]
lea edx, [eax + ecx]
add edx, 0xd3b614d6
add eax, 0xd3b614d6
and eax, ecx
add eax, eax
sub edx, eax
mov dword [esp + 0xc], edx
mov eax, dword [esp + 0xc]
add al, 0x26
mov ecx, dword [esp + 0x10]
mov byte [esp + ecx + 0x18], al
inc dword [esp + 0x10]
mov eax, dword [esp + 0x10]
cmp eax, 0x57
jb 0x409e70
mov eax, dword [ebp + 0xc]
movzx ecx, byte [esp + 0x18]
mov edx, edi
test cl, cl
je 0x409edb
lea esi, [esp + 0x19]
mov edx, edi
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edx], cl
inc edx
movzx ecx, byte [esi]
inc esi
test cl, cl
jne 0x409ed0
mov byte [edx], 0
movzx ecx, byte [eax]
test cl, cl
je 0x409efb
inc eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edx], cl
inc edx
movzx ecx, byte [eax]
inc eax
test cl, cl
jne 0x409ef0
mov byte [edx], 0
movzx eax, byte [esp]
test al, al
je 0x409f1b
lea ecx, [esp + 1]
nop
nop
nop
nop
nop
nop
mov byte [edx], al
inc edx
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x409f10
mov esi, dword [ebp + 0x14]
mov ebx, dword [ebp + 0x10]
mov byte [edx], 0
movzx eax, byte [esp + 0x80]
test al, al
mov dword [esp + 0x78], edi
je 0x409f4b
lea ecx, [esp + 0x81]
nop
nop
nop
nop
nop
mov byte [edx], al
inc edx
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x409f40
mov byte [edx], 0
mov ecx, esi
shr ecx, 2
mov eax, ebx
mov edi, edx
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
mov eax, esi
and eax, 0xfffffffc
lea edi, [edx + eax]
add eax, ebx
mov ecx, esi
not ecx
or ecx, 3
lea ebx, [esi + ecx]
inc ebx
mov ecx, ebx
shr ecx, 1
mov esi, eax
mov dword [esp + 0x74], edi
xchg esi, esi
rep movsw word es:[edi], word [esi]
xchg esi, esi
test bl, 1
je 0x409fab
mov ecx, ebx
not ecx
or ecx, 0xfffffffe
add ecx, ebx
mov dword [esp + 0x14], ebx
or dword [esp + 0x14], 0xfffffffe
xor ebx, 1
and ebx, dword [esp + 0x14]
movzx eax, byte [eax + ecx + 1]
mov ecx, dword [esp + 0x74]
mov byte [ecx + ebx], al
mov dword [esp + 0x18], 0x84876379
mov dword [esp + 0x1c], 0x88b4dad8
mov dword [esp + 0x20], 0xc887d6da
mov dword [esp + 0x24], 0xd2c5d1c2
mov dword [esp + 0x28], 0xf9faeecd
mov dword [esp + 0x2c], 0x5553beed
mov word [esp + 0x30], 0x5b51
mov byte [esp + 0x32], 0x40
mov dword [esp + 0x33], 0
mov dword [esp + 0x37], 0
mov byte [esp + 0x3b], 0
mov dword [esp], 0
mov eax, dword [esp]
cmp eax, 0x23
mov edi, dword [esp + 0x78]
ja 0x40a04e
nop
mov eax, dword [esp]
mov ecx, dword [esp]
movzx ecx, byte [esp + ecx + 0x18]
lea esi, [eax - 0x2a11eaf1]
add eax, 0xf
xor eax, esi
xor esi, ecx
and eax, ecx
sub esi, eax
mov dword [esp + 0x80], esi
mov eax, dword [esp + 0x80]
add al, 0x97
mov ecx, dword [esp]
mov byte [esp + ecx + 0x18], al
inc dword [esp]
mov eax, dword [esp]
cmp eax, 0x24
jb 0x40a010
add edx, dword [ebp + 0x14]
movzx eax, byte [esp + 0x18]
test al, al
je 0x40a06b
lea ecx, [esp + 0x19]
nop
nop
mov byte [edx], al
inc edx
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x40a060
mov byte [edx], 0
sub edx, edi
mov eax, dword [esp + 0x7c]
add dword [eax + 0x60], edx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret 0x10