Function at 0x409e80
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x110
cmp dword [ecx + 0x20], 0
je 0x40a5f6
mov esi, ecx
movzx eax, byte [ecx]
mov byte [esp + 0xf], 0
test eax, eax
je 0x409ed5
cmp al, 0x64
jb 0x409ee4
lea ecx, [eax + eax*4]
lea ecx, [eax + ecx*8]
movzx edx, cx
shr edx, 0xc
imul ecx, edx, 0x64
sub al, cl
movzx eax, al
movzx eax, word [eax + eax + 0x34d97f8]
mov word [esp + 0xd], ax
mov ecx, 1
mov eax, edx
jmp 0x409eed
lea eax, [esp + 0xe]
mov dword [esp + 0x3c], eax
mov byte [esp + 0xe], 0x30
jmp 0x409f2f
mov ecx, 3
cmp al, 9
ja 0x409f04
movzx eax, byte [eax + 0x34da597]
lea edx, [esp + ecx]
add edx, 0xb
mov dword [esp + 0x3c], edx
mov byte [esp + ecx + 0xb], al
jmp 0x409f2f
mov ecx, eax
and ecx, 0x7d
mov edx, eax
and edx, 2
or eax, 2
imul eax, edx
xor edx, 2
imul edx, ecx
movzx eax, word [edx + eax + 0x34d97f8]
lea ecx, [esp + 0xd]
mov dword [esp + 0x3c], ecx
mov word [esp + 0xd], ax
lea eax, [esi + 0x10]
push eax
call fcn.00406bc0
add esp, 4
mov edi, dword [esi + 0x10]
mov eax, dword [esi + 0x58]
mov eax, dword [eax + 0x48]
mov dword [esp + 0xe0], eax
lea ebx, [esp + 0xeb]
push ebx
call fcn.0042f900
add esp, 4
mov dword [esp + 0xe4], edi
lea eax, [edi + 0x800]
push eax
call fcn.00431360
add esp, 4
mov edi, eax
mov dword [esp + 0x44], 0
mov dword [esp + 0x5b], 0
mov dword [esp + 0x58], 0
mov dword [esp + 0x54], 0
mov dword [esp + 0x50], 0
mov dword [esp + 0x4c], 0
mov dword [esp + 0x48], 0
mov dword [esp + 0x40], 0x3f3b283e
mov byte [esp + 0x44], 0xa2
mov dword [esp + 0x10], 0
mov eax, dword [esp + 0x10]
cmp eax, 0x1e
ja 0x40a008
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x10]
movzx edx, byte [esp + eax + 0x40]
lea eax, [ecx + edx]
add eax, 0x75a4ce9b
add ecx, 0x75a4ce9b
and ecx, edx
add ecx, ecx
sub eax, ecx
add al, 0xc3
mov ecx, dword [esp + 0x10]
mov byte [esp + ecx + 0x40], al
inc dword [esp + 0x10]
mov eax, dword [esp + 0x10]
cmp eax, 0x1f
jb 0x409fd0
lea eax, [esp + 0x40]
mov ecx, esi
push ebx
push eax
push edi
call fcn.004096f0
mov dword [esp + 0x50], 0
mov dword [esp + 0x4c], 0
mov dword [esp + 0x48], 0
mov dword [esp + 0x44], 0
mov dword [esp + 0x40], 0x33a8a2a6
mov dword [esp + 0x10], 0
mov eax, dword [esp + 0x10]
cmp eax, 0x13
ja 0x40a090
nop
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x10]
movzx ecx, byte [esp + ecx + 0x40]
lea edx, [eax + ecx]
add edx, 0xed16a929
add eax, 0x29
and eax, ecx
add eax, eax
mov ecx, eax
xor ecx, edx
not eax
and eax, edx
add eax, eax
sub eax, ecx
add al, 0xe1
mov ecx, dword [esp + 0x10]
mov byte [esp + ecx + 0x40], al
inc dword [esp + 0x10]
mov eax, dword [esp + 0x10]
cmp eax, 0x14
jb 0x40a050
mov ecx, esi
push dword [esp + 0x3c]
lea eax, [esp + 0x44]
push eax
push edi
call fcn.004096f0
mov eax, dword [0x34db430]
mov dword [esp + 0x54], 0
mov dword [esp + 0x50], 0
mov dword [esp + 0x4c], 0
mov dword [esp + 0x48], 0
mov dword [esp + 0x44], 0
mov dword [esp + 0x40], 0x53fcfae2
mov dword [esp + 0x10], 0
mov ecx, dword [esp + 0x10]
cmp ecx, 0x17
ja 0x40a134
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x10]
movzx ebx, byte [esp + edx + 0x40]
lea edx, [ecx + ebx]
add edx, 0x72b014b3
add ecx, 0xb3
and ecx, ebx
add ecx, ecx
mov ebx, edx
not ebx
and ebx, ecx
not ecx
and ecx, edx
sub ecx, ebx
add cl, 0x1b
mov edx, dword [esp + 0x10]
mov byte [esp + edx + 0x40], cl
inc dword [esp + 0x10]
mov ecx, dword [esp + 0x10]
cmp ecx, 0x18
jb 0x40a0f0
mov ecx, esi
push eax
lea eax, [esp + 0x44]
push eax
push edi
call fcn.004096f0
mov dword [esp + 0x40], 0x170c1403
mov dword [esp + 0x44], 0x413081b
mov dword [esp + 0x48], 0x2e2d283b
mov byte [esp + 0x4c], 0x8c
mov dword [esp + 0x4d], 0
mov dword [esp + 0x51], 0
mov dword [esp + 0x55], 0
mov dword [esp + 0x59], 0
mov word [esp + 0x5d], 0
mov dword [esp + 0x10], 0
mov eax, dword [esp + 0x10]
cmp eax, 0x1e
ja 0x40a1e2
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x10]
movzx ecx, byte [esp + ecx + 0x40]
lea edx, [eax + ecx]
add edx, 0x36cb5498
add eax, 0x36cb5498
and eax, ecx
add eax, eax
mov ecx, eax
xor ecx, edx
not eax
and eax, edx
add eax, eax
sub eax, ecx
add al, 0xd8
mov ecx, dword [esp + 0x10]
mov byte [esp + ecx + 0x40], al
inc dword [esp + 0x10]
mov eax, dword [esp + 0x10]
cmp eax, 0x1f
jb 0x40a1a0
mov dword [esp + 0x10], 0xb3382829
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 8], 0
mov eax, dword [esp + 8]
cmp eax, 0xf
ja 0x40a25f
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 8]
mov ecx, dword [esp + 8]
movzx ecx, byte [esp + ecx + 0x10]
lea edx, [eax - 0x19621d37]
lea ebx, [eax + 0xc9]
and ebx, ecx
and edx, ebx
add eax, ecx
add eax, 0xe69de2c9
add edx, ebx
sub eax, edx
add al, 0x81
mov ecx, dword [esp + 8]
mov byte [esp + ecx + 0x10], al
inc dword [esp + 8]
mov eax, dword [esp + 8]
cmp eax, 0x10
jb 0x40a220
lea edx, [esp + 0x10]
mov ecx, esi
lea eax, [esp + 0x40]
push eax
push edx
push edi
call fcn.004096f0
mov dword [esp + 0x44], 0
mov dword [esp + 0x5c], 0
mov dword [esp + 0x58], 0
mov dword [esp + 0x54], 0
mov dword [esp + 0x50], 0
mov dword [esp + 0x4c], 0
mov dword [esp + 0x48], 0
mov dword [esp + 0x40], 0x263e2426
mov byte [esp + 0x44], 0x48
mov dword [esp + 0x10], 0
mov eax, dword [esp + 0x10]
cmp eax, 0x1f
ja 0x40a31f
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x10]
movzx edx, byte [esp + ecx + 0x40]
lea ecx, [eax + edx]
add ecx, 0xf9ddb54a
add eax, 0xf9ddb54a
and eax, edx
add eax, eax
mov edx, eax
not edx
and edx, ecx
not ecx
and ecx, eax
sub edx, ecx
mov eax, edx
xor eax, 0xf9
and edx, 0x79
lea eax, [eax + edx*2]
inc al
mov ecx, dword [esp + 0x10]
mov byte [esp + ecx + 0x40], al
inc dword [esp + 0x10]
mov eax, dword [esp + 0x10]
cmp eax, 0x20
jb 0x40a2d0
mov ecx, esi
push dword [esp + 0xe4]
push dword [esp + 0xe4]
lea eax, [esp + 0x48]
push eax
push edi
call fcn.00409a20
mov eax, dword [esi + 0x60]
mov dword [esp + 0x40], 0x13e111db
mov dword [esp + 0x44], 0x1fe01de4
mov dword [esp + 0x48], 0x1bee19f1
mov dword [esp + 0x4c], 0x271325e6
mov dword [esp + 0x50], 0x23db21fa
mov dword [esp + 0x54], 0x2fc32dd2
mov dword [esp + 0x58], 0x2b082914
mov dword [esp + 0x5c], 0x37cb35dd
mov dword [esp + 0x60], 0x33cc31c2
mov dword [esp + 0x64], 0x3fcc3dd9
mov dword [esp + 0x68], 0x3bca39dd
mov dword [esp + 0x6c], 0xc7f5c5c6
mov dword [esp + 0x70], 0xc331c128
mov dword [esp + 0x74], 0xcf3bcd30
mov dword [esp + 0x78], 0xcb24c9f9
mov dword [esp + 0x7c], 0xd728d529
mov dword [esp + 0x80], 0xd315d135
mov dword [esp + 0x84], 0xdf3eddf2
mov dword [esp + 0x88], 0xdb27d92f
mov dword [esp + 0x8c], 0xe708e52c
mov dword [esp + 0x90], 0xe312e105
mov dword [esp + 0x94], 0xef2bed19
mov dword [esp + 0x98], 0xeb07e90c
mov dword [esp + 0x9c], 0xf7cbf5d2
mov dword [esp + 0xa0], 0xf31ff11a
mov dword [esp + 0xa4], 0xff17fdcd
mov dword [esp + 0xa8], 0xfb14f90e
mov dword [esp + 0xac], 0x8769850b
mov dword [esp + 0xb0], 0x836f816d
mov dword [esp + 0xb4], 0x8f7e8d70
mov dword [esp + 0xb8], 0x8bbb8961
mov dword [esp + 0xbc], 0x979e959d
mov word [esp + 0xc0], 0x9196
mov word [esp + 0xde], 0
mov dword [esp + 0xda], 0
mov dword [esp + 0xd6], 0
mov dword [esp + 0xd2], 0
mov dword [esp + 0xce], 0
mov dword [esp + 0xca], 0
mov dword [esp + 0xc6], 0
mov dword [esp + 0xc2], 0
mov dword [esp + 0x10], 0
mov ecx, dword [esp + 0x10]
cmp ecx, 0x9f
ja 0x40a523
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x10]
movzx edx, byte [esp + edx + 0x40]
lea ebx, [ecx + 0x53]
and ebx, edx
add ecx, edx
add ebx, ebx
sub ecx, ebx
add cl, 0xe
mov edx, dword [esp + 0x10]
mov byte [esp + edx + 0x40], cl
inc dword [esp + 0x10]
mov ecx, dword [esp + 0x10]
cmp ecx, 0xa0
jb 0x40a4f0
mov dword [esp + 0x10], 0xd373d107
mov dword [esp + 0x14], 0xdf77dd42
mov word [esp + 0x18], 0xd9de
mov dword [esp + 0x1a], 0
mov dword [esp + 0x1e], 0
mov dword [esp + 0x22], 0
mov dword [esp + 0x26], 0
mov dword [esp + 0x2a], 0
mov byte [esp + 0x2e], 0
mov dword [esp + 8], 0
mov ecx, dword [esp + 8]
cmp ecx, 0x1e
ja 0x40a5c9
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, dword [esp + 8]
mov ecx, dword [esp + 8]
movzx ebx, byte [esp + ecx + 0x10]
lea ecx, [edx + ebx]
add ecx, 0x378042a3
add edx, 0x378042a3
and edx, ebx
add edx, edx
sub ecx, edx
mov edx, ecx
or edx, 0x8a
and ecx, 0x8a
add ecx, edx
inc cl
mov edx, dword [esp + 8]
mov byte [esp + edx + 0x10], cl
inc dword [esp + 8]
mov ecx, dword [esp + 8]
cmp ecx, 0x1f
jb 0x40a580
push 0x493e0
push eax
push edi
push 0
push 0
lea eax, [esp + 0x54]
push eax
lea eax, [esp + 0x28]
push eax
call fcn.0040e9a0
add esp, 0x1c
push edi
call fcn.00408cb0
add esp, 4
mov dword [esi + 0x60], 0
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret