Function at 0x4096f0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0xb0
mov eax, dword [ebp + 8]
add eax, dword [ecx + 0x60]
mov dword [esp + 0x60], 0
mov dword [esp + 0x7b], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x74], 0
mov dword [esp + 0x70], 0
mov dword [esp + 0x6c], 0
mov dword [esp + 0x68], 0
mov dword [esp + 0x64], 0
mov word [esp + 0x60], 0x6b6d
mov byte [esp + 0x62], 0x62
mov dword [esp + 0x10], 0
mov edx, dword [esp + 0x10]
cmp edx, 0x1e
ja 0x4097aa
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov esi, dword [esp + 0x10]
mov edx, dword [esp + 0x10]
movzx edi, byte [esp + edx + 0x60]
lea edx, [esi + edi]
add edx, 0x88271b70
add esi, 0x88271b70
and esi, edi
add esi, esi
sub edx, esi
add dl, 0xf0
mov esi, dword [esp + 0x10]
mov byte [esp + esi + 0x60], dl
inc dword [esp + 0x10]
mov edx, dword [esp + 0x10]
cmp edx, 0x1f
jb 0x409770
mov dword [esp + 0x84], 0
mov dword [esp + 0x94], 0
mov dword [esp + 0x90], 0
mov dword [esp + 0x8c], 0
mov dword [esp + 0x88], 0
mov dword [esp + 0x80], 0x6e686c82
mov word [esp + 0x84], 0x656e
mov dword [esp + 0x10], 0
mov edx, dword [esp + 0x10]
cmp edx, 0x17
ja 0x409871
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, dword [esp + 0x10]
mov esi, dword [esp + 0x10]
movzx esi, byte [esp + esi + 0x80]
lea edi, [edx + 0x1119e710]
mov ebx, esi
not ebx
or ebx, edi
and edi, esi
add edi, ebx
neg edi
add edx, edi
add edx, 0x1119e70f
mov esi, edx
xor esi, 0x8f
and edx, 0xf
lea edx, [esi + edx*2]
inc dl
mov esi, dword [esp + 0x10]
mov byte [esp + esi + 0x80], dl
mov edx, dword [esp + 0x10]
mov esi, edx
and esi, 1
xor edx, 1
lea edx, [edx + esi*2]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x10]
cmp edx, 0x18
jb 0x409810
mov dword [esp + 0x10], 0x1610cccd
mov dword [esp + 0x14], 0x1212c0fc
mov dword [esp + 0x18], 0x2f3a30fd
mov dword [esp + 0x1c], 0x2a372e33
mov dword [esp + 0x20], 0xf2273332
mov dword [esp + 0x24], 0x38c59f99
mov dword [esp + 0x28], 0x253f2d26
mov dword [esp + 0x2c], 0x26dae028
mov dword [esp + 0x30], 0x202d2123
mov dword [esp + 0x34], 0x282f212d
mov dword [esp + 0x38], 0x4d8aa356
mov dword [esp + 0x3c], 0x92535f53
mov dword [esp + 0x40], 0x42564044
mov dword [esp + 0x44], 0x465885af
mov dword [esp + 0x48], 0x99b75c45
mov byte [esp + 0x4c], 0xfc
mov dword [esp + 0x4d], 0
mov dword [esp + 0x51], 0
mov word [esp + 0x55], 0
mov dword [esp + 0xc], 0
mov edx, dword [esp + 0xc]
cmp edx, 0x46
ja 0x40995a
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov esi, dword [esp + 0xc]
mov edx, dword [esp + 0xc]
movzx edi, byte [esp + edx + 0x10]
lea edx, [esi + edi]
add edx, 0x98a27398
add esi, 0x98a27398
and esi, edi
add esi, esi
sub edx, esi
add dl, 0xd8
mov esi, dword [esp + 0xc]
mov byte [esp + esi + 0x10], dl
inc dword [esp + 0xc]
mov edx, dword [esp + 0xc]
cmp edx, 0x47
jb 0x409920
mov esi, dword [ebp + 0xc]
movzx ebx, byte [esp + 0x10]
mov edx, eax
test bl, bl
je 0x40997b
lea edi, [esp + 0x11]
mov edx, eax
nop
nop
mov byte [edx], bl
inc edx
movzx ebx, byte [edi]
inc edi
test bl, bl
jne 0x409970
mov byte [edx], 0
movzx ebx, byte [esi]
test bl, bl
je 0x40999b
inc esi
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edx], bl
inc edx
movzx ebx, byte [esi]
inc esi
test bl, bl
jne 0x409990
mov esi, dword [ebp + 0x10]
mov byte [edx], 0
movzx ebx, byte [esp + 0x80]
test bl, bl
je 0x4099cb
lea edi, [esp + 0x81]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edx], bl
inc edx
movzx ebx, byte [edi]
inc edi
test bl, bl
jne 0x4099c0
mov byte [edx], 0
movzx ebx, byte [esi]
test bl, bl
je 0x4099eb
inc esi
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edx], bl
inc edx
movzx ebx, byte [esi]
inc esi
test bl, bl
jne 0x4099e0
mov byte [edx], 0
movzx ebx, byte [esp + 0x60]
test bl, bl
je 0x409a0b
lea esi, [esp + 0x61]
nop
nop
nop
nop
nop
mov byte [edx], bl
inc edx
movzx ebx, byte [esi]
inc esi
test bl, bl
jne 0x409a00
mov byte [edx], 0
sub edx, eax
add dword [ecx + 0x60], edx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret 0xc