Function at 0x409950
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
push ebx
push esi
push edi
mov byte [ebp - 0x18], 0x50
mov byte [ebp - 0x17], 0x76
mov byte [ebp - 0x16], 0x25
mov byte [ebp - 0x15], 0x14
mov byte [ebp - 0x14], 0x4b
mov byte [ebp - 0x13], 0xb2
mov byte [ebp - 0x12], 0x59
mov byte [ebp - 0x11], 0x39
mov byte [ebp - 0x10], 0x27
mov byte [ebp - 0xf], 0x3e
mov byte [ebp - 0xe], 0xd
mov byte [ebp - 0xd], 0xc3
mov byte [ebp - 0xc], 0x93
mov byte [ebp - 0xb], 0x12
mov byte [ebp - 0xa], 0xb4
mov dword [ebp - 0x24], 0
jmp 0x4099a7
mov eax, dword [ebp - 0x24]
add eax, 1
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xf
jae 0x409aeb
mov ecx, dword [ebp - 0x24]
mov dl, byte [ebp + ecx - 0x18]
mov byte [ebp - 0x25], dl
movzx eax, byte [ebp - 0x25]
add eax, dword [ebp - 0x24]
mov byte [ebp - 0x25], al
movzx ecx, byte [ebp - 0x25]
neg ecx
mov byte [ebp - 0x25], cl
movzx edx, byte [ebp - 0x25]
not edx
mov byte [ebp - 0x25], dl
movzx eax, byte [ebp - 0x25]
add eax, dword [ebp - 0x24]
mov byte [ebp - 0x25], al
movzx ecx, byte [ebp - 0x25]
not ecx
mov byte [ebp - 0x25], cl
movzx edx, byte [ebp - 0x25]
sar edx, 2
movzx eax, byte [ebp - 0x25]
shl eax, 6
or edx, eax
mov byte [ebp - 0x25], dl
movzx ecx, byte [ebp - 0x25]
not ecx
mov byte [ebp - 0x25], cl
movzx edx, byte [ebp - 0x25]
sar edx, 1
movzx eax, byte [ebp - 0x25]
shl eax, 7
or edx, eax
mov byte [ebp - 0x25], dl
movzx ecx, byte [ebp - 0x25]
add ecx, 0x2b
mov byte [ebp - 0x25], cl
movzx edx, byte [ebp - 0x25]
not edx
mov byte [ebp - 0x25], dl
movzx eax, byte [ebp - 0x25]
sub eax, 3
mov byte [ebp - 0x25], al
movzx ecx, byte [ebp - 0x25]
not ecx
mov byte [ebp - 0x25], cl
movzx edx, byte [ebp - 0x25]
sub edx, 0x88
mov byte [ebp - 0x25], dl
movzx eax, byte [ebp - 0x25]
neg eax
mov byte [ebp - 0x25], al
movzx ecx, byte [ebp - 0x25]
sar ecx, 5
movzx edx, byte [ebp - 0x25]
shl edx, 3
or ecx, edx
mov byte [ebp - 0x25], cl
movzx eax, byte [ebp - 0x25]
add eax, dword [ebp - 0x24]
mov byte [ebp - 0x25], al
movzx ecx, byte [ebp - 0x25]
not ecx
mov byte [ebp - 0x25], cl
movzx edx, byte [ebp - 0x25]
sar edx, 6
movzx eax, byte [ebp - 0x25]
shl eax, 2
or edx, eax
mov byte [ebp - 0x25], dl
movzx ecx, byte [ebp - 0x25]
add ecx, 0xf8
mov byte [ebp - 0x25], cl
movzx edx, byte [ebp - 0x25]
not edx
mov byte [ebp - 0x25], dl
movzx eax, byte [ebp - 0x25]
neg eax
mov byte [ebp - 0x25], al
movzx ecx, byte [ebp - 0x25]
add ecx, 0x3b
mov byte [ebp - 0x25], cl
movzx edx, byte [ebp - 0x25]
not edx
mov byte [ebp - 0x25], dl
movzx eax, byte [ebp - 0x25]
sar eax, 5
movzx ecx, byte [ebp - 0x25]
shl ecx, 3
or eax, ecx
mov byte [ebp - 0x25], al
movzx edx, byte [ebp - 0x25]
add edx, 0x7f
mov byte [ebp - 0x25], dl
mov eax, dword [ebp - 0x24]
mov cl, byte [ebp - 0x25]
mov byte [ebp + eax - 0x18], cl
jmp 0x40999e
lea edx, [ebp - 0x18]
push edx
mov eax, dword [str.kernel32.dll]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 8], eax
rol ebx, 0xac
inc eax
dec eax
dec edi
not eax
not edx
sub esi, 0xde
inc edx
and edi, 0x53
sub edx, 0x16
not eax
bswap eax
ror edx, 0x12
imul eax
dec eax
dec eax
sub ebx, 7
rol esi, 0x54
dec eax
dec edx
not esi
bswap edi
and edx, 0xa4
neg ebx
inc eax
not eax
not eax
and ebx, 0x22
neg edi
sub edx, 0x24
dec ebx
rcl edx, 0x3a
inc ebx
inc eax
bswap eax
not eax
imul esi
inc esi
sbb esi, 0x8b
rcr esi, 0x84
neg esi
bswap ebx
inc eax
neg edi
rcl edi, 0x35
ror eax, 0xc7
bswap eax
imul edx
ror edi, 0xc8
rol ebx, 0x5d
lea ecx, [ebp - 0x1c]
push ecx
push 0x40
mov edx, dword [0x40d00c]
push edx
push fcn.00408000
call dword [ebp - 8]
mov dword [ebp - 0x20], eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret