Function at 0x409950
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x10c
cmp dword [ecx + 0x20], 0
je 0x409dc3
mov esi, ecx
lea eax, [ecx + 0x10]
push eax
call fcn.00406140
add esp, 4
mov edx, dword [esi + 0x10]
mov eax, dword [esi + 0x58]
mov eax, dword [eax + 0x48]
mov dword [esp + 8], eax
movzx eax, byte [esi]
imul ecx, eax, 0xcd
shr ecx, 0xa
and ecx, 0xfffffffe
lea ecx, [ecx + ecx*4]
sub al, cl
movzx eax, al
movzx eax, byte [eax + str.0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ]
mov byte [esp + 2], al
mov byte [esp + 3], 0
mov dword [esp + 0xc], edx
lea eax, [edx + 0x400]
push eax
call fcn.00408230
add esp, 4
mov edi, eax
mov dword [esp + 0x70], 0xa7ab56a8
mov byte [esp + 0x74], 0xc4
mov dword [esp + 0x75], 0
mov dword [esp + 0x78], 0
xor eax, eax
nop
nop
nop
nop
nop
nop
mov ecx, eax
or cl, 0xd0
xor cl, byte [esp + eax + 0x70]
add cl, 0xf0
mov byte [esp + eax + 0x70], cl
mov ecx, eax
and ecx, 1
xor eax, 1
lea eax, [eax + ecx*2]
cmp eax, 0xc
jb 0x4099e0
lea ebx, [esp + 0x70]
mov ecx, esi
push 0x449478
push ebx
push edi
call fcn.00409210
mov dword [esp + 0x70], 0x137e7880
mov dword [esp + 0x74], 0
mov eax, 0x991a6b04
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ecx, byte [esp + eax + 0x66e5956c]
mov edx, ecx
and edx, eax
add dl, dl
sub cl, dl
movzx ecx, cl
add ecx, eax
add cl, 0xec
mov byte [esp + eax + 0x66e5956c], cl
inc eax
cmp eax, 0x991a6b0c
jne 0x409a30
lea eax, [esp + 2]
mov ecx, esi
push eax
push ebx
mov dword [esp + 0xc], edi
push edi
call fcn.00409210
mov eax, dword [str.HpOoIh__2a727a032c4d]
mov dword [esp + 0x70], 0x9ffaf0f4
mov word [esp + 0x74], 0
mov ecx, 0x740aac65
mov ebp, 0x8bf5539a
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edi, byte [esp + ebp + 0x740aacd6]
mov edx, ebp
or edx, edi
or edi, ecx
sub edx, edi
add edx, ecx
mov edi, edx
xor edi, 3
and edx, 0x7c
add edx, edx
sub edx, edi
inc dl
mov byte [esp + ebp + 0x740aacd6], dl
dec ecx
inc ebp
cmp ecx, 0x740aac5f
jne 0x409a90
mov ecx, esi
push eax
push ebx
mov ebp, dword [esp + 0xc]
push ebp
call fcn.00409210
mov dword [esp + 0x70], 0xbba4a4b7
mov dword [esp + 0x74], 0xacbfa0b7
mov dword [esp + 0x78], 0xb2b5b0af
mov byte [esp + 0x7c], 0xdc
mov word [esp + 0x7d], 0
mov byte [esp + 0x7f], 0
xor eax, eax
nop
nop
nop
nop
nop
nop
mov ecx, eax
add cl, 0xce
xor cl, byte [esp + eax + 0x70]
add cl, 0xfa
mov byte [esp + eax + 0x70], cl
inc eax
cmp eax, 0x10
jne 0x409b00
mov dword [esp + 0x10], 0xf37e1211
mov word [esp + 0x14], 0
mov byte [esp + 0x16], 0
xor eax, eax
nop
nop
nop
nop
movzx edx, byte [esp + eax + 0x10]
mov edi, eax
and edi, 4
xor edi, 0x42a7e6d4
mov ecx, eax
and ecx, 3
sub ecx, edi
mov edi, ecx
and edi, edx
add ecx, edx
add edi, edi
sub ecx, edi
add cl, 0x24
mov byte [esp + eax + 0x10], cl
inc eax
cmp eax, 7
jne 0x409b30
lea eax, [esp + 0x10]
mov ecx, esi
push ebx
push eax
push ebp
call fcn.00409210
mov dword [esp + 0x70], 0xe6eee8e6
mov byte [esp + 0x74], 0x44
mov dword [esp + 0x75], 0
mov dword [esp + 0x78], 0
mov eax, 0xef
mov ecx, 0xcb7bb90f
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
lea edx, [eax - 0xef]
movzx edi, byte [esp + eax - 0x7f]
lea ebp, [eax - 0x65bddcff]
xor edx, 0xf
or edx, ecx
xor edx, ebp
and edx, edi
xor edx, ebp
add dl, 0x50
mov byte [esp + eax - 0x7f], dl
inc eax
dec ecx
cmp eax, 0xfb
jne 0x409ba0
mov ecx, esi
push dword [esp + 0xc]
push dword [esp + 0xc]
push ebx
mov edi, dword [esp + 0x10]
push edi
call fcn.00409520
mov dword [esp + 0x10], 0xe117e739
mov dword [esp + 0x14], 0xfd6ee316
mov dword [esp + 0x18], 0xf908ff03
mov dword [esp + 0x1c], 0xf5cdfb74
mov dword [esp + 0x20], 0xf17df718
mov dword [esp + 0x24], 0x8d0df300
mov dword [esp + 0x28], 0x89ae8f46
mov dword [esp + 0x2c], 0x85058b7f
mov dword [esp + 0x30], 0x810a8770
mov dword [esp + 0x34], 0x9d72837b
mov dword [esp + 0x38], 0x996c9f7f
mov dword [esp + 0x3c], 0x95ab9b14
mov dword [esp + 0x40], 0x9167976a
mov dword [esp + 0x44], 0xad659362
mov dword [esp + 0x48], 0xa952af9b
mov dword [esp + 0x4c], 0xa526ab4b
mov dword [esp + 0x50], 0xa163a747
mov dword [esp + 0x54], 0xbd40a380
mov dword [esp + 0x58], 0xb931bf4d
mov dword [esp + 0x5c], 0xb546bb4e
mov dword [esp + 0x60], 0xb144b757
mov dword [esp + 0x64], 0x4d75b33b
mov word [esp + 0x68], 0x4f4c
mov word [esp + 0x6e], 0
mov dword [esp + 0x6a], 0
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
mov ecx, eax
add cl, 0xa9
xor cl, byte [esp + eax + 0x10]
add cl, 0xb3
mov byte [esp + eax + 0x10], cl
inc eax
cmp eax, 0x60
jne 0x409cb0
movzx eax, word [esp + 0x10]
test ax, ax
je 0x409cf1
lea ebx, [esp + 0x70]
lea ecx, [esp + 0x12]
nop
nop
nop
nop
nop
nop
nop
nop
mov word [ebx], ax
add ebx, 2
movzx eax, word [ecx]
add ecx, 2
test ax, ax
jne 0x409ce0
mov word [ebx], 0
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, 0xffffffff
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp byte [esi + ecx + 0x61], 0
lea ecx, [ecx + 1]
jne 0x409d10
cmp eax, ecx
jae 0x409d2c
movsx ecx, byte [esi + eax + 0x60]
mov word [ebx], cx
add ebx, 2
inc eax
jmp 0x409d00
mov dword [ebx], 0xa000d
mov word [ebx + 4], 0
mov eax, dword [esi + 0x80]
mov dword [esp + 0x10], 0xc955cb9d
mov dword [esp + 0x14], 0xc551c758
mov word [esp + 0x18], 0xc3c4
mov dword [esp + 0x1a], 0
mov word [esp + 0x1e], 0
xor ecx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, ecx
add dl, 0x53
xor dl, byte [esp + ecx + 0x10]
add dl, 0x61
mov byte [esp + ecx + 0x10], dl
inc ecx
cmp ecx, 0x10
jne 0x409d70
lea ecx, [esp + 0x70]
push 0x493e0
push eax
push edi
push 0
push 0
push ecx
lea eax, [esp + 0x28]
push eax
call fcn.0040c220
add esp, 0x1c
mov ebx, eax
push edi
call fcn.00408240
add esp, 4
mov eax, dword [esi + 0x80]
add dword [esi + 4], eax
mov dword [esi + 0x80], 0
jmp 0x409dc5
mov bl, 1
mov eax, ebx
add esp, 0x10c
pop esi
pop edi
pop ebx
pop ebp
ret