Function at 0x4096e0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x78
mov eax, dword [ebp + 8]
add eax, dword [ecx + 0x60]
mov word [esp + 0x18], 0x4b4d
mov byte [esp + 0x1a], 0x32
mov dword [esp + 0x1b], 0
mov dword [esp + 0x1f], 0
mov dword [esp + 0x22], 0
mov dword [esp + 8], 0
mov edx, dword [esp + 8]
cmp edx, 0xd
ja 0x409790
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edi, dword [esp + 8]
mov edx, dword [esp + 8]
movzx ebx, byte [esp + edx + 0x18]
lea edx, [edi - 0x279fadf8]
lea esi, [edi + ebx]
add esi, 0xd8605208
add edi, 8
and edi, ebx
and edx, ebx
add edx, edi
mov edi, edx
xor edi, esi
not edx
and edx, esi
add edx, edx
sub edx, edi
mov dword [esp + 0x28], edx
mov edx, dword [esp + 0x28]
mov esi, edx
or esi, 0xc7
and edx, 0xc7
add edx, esi
inc dl
mov esi, dword [esp + 8]
mov byte [esp + esi + 0x18], dl
inc dword [esp + 8]
mov edx, dword [esp + 8]
cmp edx, 0xe
jb 0x409730
mov dword [esp + 8], 0xc4c2c6e4
mov word [esp + 0xc], 0xfdc0
mov dword [esp + 0xe], 0
mov word [esp + 0x12], 0
mov dword [esp], 0
mov edx, dword [esp]
cmp edx, 0xb
ja 0x4097fa
nop
nop
nop
mov edx, dword [esp]
mov esi, dword [esp]
movzx esi, byte [esp + esi + 8]
lea edi, [edx + 0x7f21d49f]
add edx, 0x9f
and edx, esi
or edi, esi
sub edi, edx
mov dword [esp + 0x28], edi
mov edx, dword [esp + 0x28]
add dl, 0xa7
mov esi, dword [esp]
mov byte [esp + esi + 8], dl
inc dword [esp]
mov edx, dword [esp]
cmp edx, 0xc
jb 0x4097c0
mov dword [esp + 0x28], 0x282a6665
mov dword [esp + 0x2c], 0x342c7a7a
mov dword [esp + 0x30], 0x373c3a65
mov dword [esp + 0x34], 0x3c3f343b
mov dword [esp + 0x38], 0x6c3f2b28
mov dword [esp + 0x3c], 0xce5d9791
mov dword [esp + 0x40], 0xc9c7d1cc
mov dword [esp + 0x44], 0xc0a48ad6
mov dword [esp + 0x48], 0xdec5c5db
mov dword [esp + 0x4c], 0xdec7ddc5
mov dword [esp + 0x50], 0xd16c8bdc
mov dword [esp + 0x54], 0x94dbc7db
mov dword [esp + 0x58], 0xdcc8dada
mov dword [esp + 0x5c], 0xe0d26187
mov dword [esp + 0x60], 0xa5bfe6ed
mov byte [esp + 0x64], 0x7a
mov dword [esp + 0x65], 0
mov dword [esp + 0x69], 0
mov dword [esp + 0x6c], 0
mov dword [esp + 4], 0
mov edx, dword [esp + 4]
cmp edx, 0x47
ja 0x4098df
mov edx, dword [esp + 4]
mov esi, dword [esp + 4]
movzx esi, byte [esp + esi + 0x28]
lea edi, [edx - 0x1b8a6497]
and edi, esi
add edx, esi
add edx, 0xe4759b69
add edi, edi
sub edx, edi
mov dword [esp], edx
mov edx, dword [esp]
add dl, 0x21
mov esi, dword [esp + 4]
mov byte [esp + esi + 0x28], dl
inc dword [esp + 4]
mov edx, dword [esp + 4]
cmp edx, 0x48
jb 0x4098a0
mov esi, dword [ebp + 0xc]
movzx ebx, byte [esp + 0x28]
mov edx, eax
test bl, bl
je 0x40990b
lea edi, [esp + 0x29]
mov edx, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edx], bl
inc edx
movzx ebx, byte [edi]
inc edi
test bl, bl
jne 0x409900
mov byte [edx], 0
movzx ebx, byte [esi]
test bl, bl
je 0x40992b
inc esi
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edx], bl
inc edx
movzx ebx, byte [esi]
inc esi
test bl, bl
jne 0x409920
mov esi, dword [ebp + 0x10]
mov byte [edx], 0
movzx ebx, byte [esp + 8]
test bl, bl
je 0x40994b
lea edi, [esp + 9]
nop
nop
mov byte [edx], bl
inc edx
movzx ebx, byte [edi]
inc edi
test bl, bl
jne 0x409940
mov byte [edx], 0
movzx ebx, byte [esi]
test bl, bl
je 0x40996b
inc esi
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edx], bl
inc edx
movzx ebx, byte [esi]
inc esi
test bl, bl
jne 0x409960
mov byte [edx], 0
movzx ebx, byte [esp + 0x18]
test bl, bl
je 0x40998b
lea esi, [esp + 0x19]
nop
nop
nop
nop
nop
mov byte [edx], bl
inc edx
movzx ebx, byte [esi]
inc esi
test bl, bl
jne 0x409980
mov byte [edx], 0
mov esi, edx
xor esi, eax
not eax
and eax, edx
add eax, eax
sub eax, esi
mov edx, dword [ecx + 0x60]
mov esi, edx
and esi, eax
xor eax, edx
lea eax, [eax + esi*2]
mov dword [ecx + 0x60], eax
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret 0xc