Function at 0x409b80
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0xb0
mov edi, dword [ebp + 8]
mov dword [esp + 0x74], ecx
add edi, dword [ecx + 0x60]
mov dword [esp + 0x78], 0xc7cccef3
mov dword [esp + 0x7c], 0xac2cbd1
mov dword [esp + 0x80], 0x2e3a401c
mov dword [esp + 0x84], 0x3b2fed06
mov dword [esp + 0x88], 0x3b212034
mov dword [esp + 0x8c], 0x33382039
mov dword [esp + 0x90], 0x24e751e7
mov dword [esp + 0x94], 0x3c3b273e
mov dword [esp + 0x98], 0xcec8cc24
mov word [esp + 0x9c], 0xd5ce
mov dword [esp + 0x9e], 0
mov word [esp + 0xa2], 0
mov dword [esp + 8], 0
mov eax, dword [esp + 8]
cmp eax, 0x2b
ja 0x409c6d
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 8]
mov ecx, dword [esp + 8]
movzx ecx, byte [esp + ecx + 0x78]
lea edx, [eax - 0x35578808]
add eax, 0xf8
and eax, ecx
or edx, ecx
sub edx, eax
mov dword [esp + 0x18], edx
mov eax, dword [esp + 0x18]
add al, 0x38
mov ecx, dword [esp + 8]
mov byte [esp + ecx + 0x78], al
inc dword [esp + 8]
mov eax, dword [esp + 8]
cmp eax, 0x2c
jb 0x409c30
mov dword [esp + 8], 0x1b202c3a
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x13], 0
mov dword [esp], 0
mov eax, dword [esp]
cmp eax, 0xe
ja 0x409ce1
nop
nop
nop
nop
mov eax, dword [esp]
mov ecx, dword [esp]
movzx ecx, byte [esp + ecx + 8]
lea edx, [eax + 0x46815a84]
mov esi, edx
and esi, ecx
xor edx, ecx
add eax, 0x84
and eax, ecx
lea ecx, [edx + esi*2]
add eax, eax
sub ecx, eax
mov dword [esp + 0x18], ecx
mov eax, dword [esp + 0x18]
add al, 0x64
mov ecx, dword [esp]
mov byte [esp + ecx + 8], al
inc dword [esp]
mov eax, dword [esp]
cmp eax, 0xf
jb 0x409ca0
mov dword [esp + 0x18], 0xfcf22621
mov dword [esp + 0x1c], 0xf0f0222a
mov dword [esp + 0x20], 0xf7e8f221
mov dword [esp + 0x24], 0x80f08eb
mov dword [esp + 0x28], 0xd00f1314
mov dword [esp + 0x2c], 0x1ee1a7b5
mov dword [esp + 0x30], 0x1d071518
mov dword [esp + 0x34], 0x1cf8c216
mov dword [esp + 0x38], 0xe01010b
mov dword [esp + 0x3c], 0xe170119
mov dword [esp + 0x40], 0x15d8c308
mov dword [esp + 0x44], 0xf033370b
mov dword [esp + 0x48], 0x203c222a
mov dword [esp + 0x4c], 0x2c3aedc7
mov dword [esp + 0x50], 0xe9cf2639
mov dword [esp + 0x54], 0x38203e24
mov dword [esp + 0x58], 0x3df0d4f4
mov dword [esp + 0x5c], 0x29332939
mov dword [esp + 0x60], 0xdc372e3d
mov word [esp + 0x64], 0xe5f8
mov byte [esp + 0x6e], 0
mov dword [esp + 0x6a], 0
mov dword [esp + 0x66], 0
mov dword [esp + 4], 0
mov eax, dword [esp + 4]
cmp eax, 0x56
ja 0x409dfa
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 4]
mov ecx, dword [esp + 4]
movzx ecx, byte [esp + ecx + 0x18]
mov edx, eax
and edx, 0xc3835b73
xor eax, 0xc3835b73
lea eax, [eax + edx*2]
xor eax, ecx
mov dword [esp], eax
mov eax, dword [esp]
mov ecx, eax
xor ecx, 0xda
and eax, 0x5a
lea eax, [ecx + eax*2]
inc al
mov ecx, dword [esp + 4]
mov byte [esp + ecx + 0x18], al
inc dword [esp + 4]
mov eax, dword [esp + 4]
cmp eax, 0x57
jb 0x409db0
mov eax, dword [ebp + 0xc]
movzx ecx, byte [esp + 0x18]
mov edx, edi
test cl, cl
je 0x409e1b
lea esi, [esp + 0x19]
mov edx, edi
nop
nop
mov byte [edx], cl
inc edx
movzx ecx, byte [esi]
inc esi
test cl, cl
jne 0x409e10
mov byte [edx], 0
movzx ecx, byte [eax]
test cl, cl
je 0x409e3b
inc eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edx], cl
inc edx
movzx ecx, byte [eax]
inc eax
test cl, cl
jne 0x409e30
mov byte [edx], 0
movzx eax, byte [esp + 8]
test al, al
je 0x409e5b
lea ecx, [esp + 9]
nop
nop
nop
nop
nop
mov byte [edx], al
inc edx
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x409e50
mov ebx, dword [ebp + 0x14]
mov esi, dword [ebp + 0x10]
mov byte [edx], 0
movzx eax, byte [esp + 0x78]
test al, al
mov dword [esp + 0x70], edi
je 0x409e8b
lea ecx, [esp + 0x79]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edx], al
inc edx
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x409e80
mov byte [edx], 0
mov ecx, ebx
shr ecx, 2
mov eax, esi
mov edi, edx
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
mov eax, ebx
and eax, 0xfffffffc
mov ecx, esi
lea esi, [edx + eax]
add eax, ecx
mov ecx, ebx
shr ecx, 1
and ecx, 1
mov ebx, eax
mov edi, esi
xchg esi, ebx
rep movsw word es:[edi], word [esi]
xchg esi, ebx
mov ebx, dword [ebp + 0x14]
test bl, 1
je 0x409ecd
mov ecx, ebx
and ecx, 2
movzx eax, byte [eax + ecx]
mov byte [esi + ecx], al
mov dword [esp + 0x18], 0xfeffdbd9
mov dword [esp + 0x1c], 0xcace0406
mov dword [esp + 0x20], 0x3acf3838
mov dword [esp + 0x24], 0x300d3d00
mov dword [esp + 0x28], 0x5043035
mov dword [esp + 0x2c], 0xf1f3c835
mov word [esp + 0x30], 0xf3f1
mov byte [esp + 0x32], 0x82
mov dword [esp + 0x37], 0
mov dword [esp + 0x33], 0
mov dword [esp + 8], 0
mov eax, dword [esp + 8]
cmp eax, 0x22
mov edi, dword [esp + 0x70]
ja 0x409f6d
nop
nop
mov eax, dword [esp + 8]
mov ecx, dword [esp + 8]
movzx ecx, byte [esp + ecx + 0x18]
lea esi, [eax + 0x13b25a9a]
add eax, 0x9a
and eax, ecx
or esi, ecx
sub esi, eax
mov dword [esp + 0x78], esi
mov eax, dword [esp + 0x78]
add al, 0xca
mov ecx, dword [esp + 8]
mov byte [esp + ecx + 0x18], al
inc dword [esp + 8]
mov eax, dword [esp + 8]
cmp eax, 0x23
jb 0x409f30
add edx, ebx
movzx eax, byte [esp + 0x18]
test al, al
je 0x409f8b
lea ecx, [esp + 0x19]
nop
nop
nop
nop
mov byte [edx], al
inc edx
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x409f80
mov byte [edx], 0
sub edx, edi
mov eax, dword [esp + 0x74]
add dword [eax + 0x60], edx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret 0x10