Function at 0x2d09db0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0xb0
mov eax, dword [ebp + 8]
mov dword [esp + 0xc], ecx
add eax, dword [ecx + 0x60]
mov ecx, eax
mov dword [esp + 0x80], 0
mov byte [esp + 0x98], 0
mov dword [esp + 0x94], 0
mov dword [esp + 0x90], 0
mov dword [esp + 0x8c], 0
mov dword [esp + 0x88], 0
mov dword [esp + 0x84], 0
mov word [esp + 0x80], 0x3f9
mov byte [esp + 0x82], 0xf8
mov dword [esp + 0x10], 0
mov edx, dword [esp + 0x10]
cmp edx, 0x18
ja 0x2d09e9c
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, dword [esp + 0x10]
mov esi, dword [esp + 0x10]
movzx edi, byte [esp + esi + 0x80]
lea ebx, [edx + 0x76ddc77f]
lea esi, [edx + edi]
add esi, 0x76ddc77f
and ebx, edi
mov eax, 0x89223880
sub eax, edx
or eax, edi
add eax, edx
lea edx, [ebx + eax]
add edx, 0x76ddc780
mov eax, edx
xor eax, esi
not edx
and edx, esi
add edx, edx
sub edx, eax
add dl, 0x87
mov eax, dword [esp + 0x10]
mov byte [esp + eax + 0x80], dl
inc dword [esp + 0x10]
mov eax, dword [esp + 0x10]
cmp eax, 0x19
jb 0x2d09e40
mov dword [esp + 0x64], 0
mov word [esp + 0x7c], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x74], 0
mov dword [esp + 0x70], 0
mov dword [esp + 0x6c], 0
mov dword [esp + 0x68], 0
mov dword [esp + 0x60], 0xf8cac6f0
mov word [esp + 0x64], 0xe9f4
mov dword [esp + 0x10], 0
mov eax, dword [esp + 0x10]
cmp eax, 0x1d
ja 0x2d09f36
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x10]
movzx edx, byte [esp + edx + 0x60]
add eax, 0x42a74c1d
xor eax, edx
mov edx, eax
xor edx, 0x34
and eax, 0x34
lea eax, [edx + eax*2]
inc al
mov edx, dword [esp + 0x10]
mov byte [esp + edx + 0x60], al
inc dword [esp + 0x10]
mov eax, dword [esp + 0x10]
cmp eax, 0x1e
jb 0x2d09f00
mov dword [esp + 0x10], 0x90b2e6e5
mov dword [esp + 0x14], 0x948ca2a2
mov dword [esp + 0x18], 0x879c92a5
mov dword [esp + 0x1c], 0x9c9f8493
mov dword [esp + 0x20], 0xcc9f9390
mov dword [esp + 0x24], 0x8ebde7e9
mov dword [esp + 0x28], 0x8187898c
mov dword [esp + 0x2c], 0x88b4c286
mov dword [esp + 0x30], 0x7e858583
mov dword [esp + 0x34], 0x7e777d75
mov dword [esp + 0x38], 0x792c437c
mov dword [esp + 0x3c], 0x34737773
mov dword [esp + 0x40], 0x7c706262
mov dword [esp + 0x44], 0x786a3957
mov dword [esp + 0x48], 0x355f666d
mov byte [esp + 0x4c], 0x12
mov dword [esp + 0x4d], 0
mov dword [esp + 0x51], 0
mov dword [esp + 0x55], 0
mov dword [esp + 0x59], 0
mov byte [esp + 0x5d], 0
mov dword [esp + 8], 0
mov eax, dword [esp + 8]
cmp eax, 0x4d
ja 0x2d0a029
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 8]
mov edx, dword [esp + 8]
movzx esi, byte [esp + edx + 0x10]
lea edx, [eax + esi]
add edx, 0x885727dd
add eax, 0x885727dd
and eax, esi
add eax, eax
sub edx, eax
add dl, 0xf5
mov eax, dword [esp + 8]
mov byte [esp + eax + 0x10], dl
inc dword [esp + 8]
mov eax, dword [esp + 8]
cmp eax, 0x4e
jb 0x2d09ff0
mov esi, dword [ebp + 0xc]
movzx ebx, byte [esp + 0x10]
mov edx, ecx
test bl, bl
je 0x2d0a04b
lea edi, [esp + 0x11]
mov edx, ecx
nop
nop
nop
mov byte [edx], bl
inc edx
movzx ebx, byte [edi]
inc edi
test bl, bl
jne 0x2d0a040
mov byte [edx], 0
movzx ebx, byte [esi]
test bl, bl
je 0x2d0a06b
inc esi
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edx], bl
inc edx
movzx ebx, byte [esi]
inc esi
test bl, bl
jne 0x2d0a060
mov esi, dword [ebp + 0x10]
mov byte [edx], 0
movzx ebx, byte [esp + 0x60]
test bl, bl
je 0x2d0a08b
lea edi, [esp + 0x61]
nop
nop
mov byte [edx], bl
inc edx
movzx ebx, byte [edi]
inc edi
test bl, bl
jne 0x2d0a080
mov byte [edx], 0
movzx ebx, byte [esi]
test bl, bl
je 0x2d0a0ab
inc esi
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edx], bl
inc edx
movzx ebx, byte [esi]
inc esi
test bl, bl
jne 0x2d0a0a0
mov byte [edx], 0
movzx ebx, byte [esp + 0x80]
test bl, bl
je 0x2d0a0db
lea esi, [esp + 0x81]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edx], bl
inc edx
movzx ebx, byte [esi]
inc esi
test bl, bl
jne 0x2d0a0d0
mov byte [edx], 0
sub edx, ecx
mov eax, dword [esp + 0xc]
add dword [eax + 0x60], edx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret 0xc