Function at 0x409bd0
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0xf0
cmp dword [ecx + 0x20], 0
je 0x409c21
mov esi, ecx
movzx eax, byte [ecx]
mov byte [esp + 0xb], 0
test eax, eax
je 0x409c28
cmp al, 0x64
jb 0x409c37
lea ecx, [eax + eax*4]
lea ecx, [eax + ecx*8]
movzx edx, cx
shr edx, 0xc
imul ecx, edx, 0x64
sub al, cl
movzx eax, al
movzx eax, word [eax + eax + 0x43e528]
mov word [esp + 9], ax
mov ecx, 1
mov eax, edx
jmp 0x409c40
mov bl, 1
jmp 0x40a289
lea eax, [esp + 0xa]
mov dword [esp + 0xc], eax
mov byte [esp + 0xa], 0x30
jmp 0x409c82
mov ecx, 3
cmp al, 9
ja 0x409c57
movzx eax, byte [eax + str.0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ]
lea edx, [esp + ecx]
add edx, 7
mov dword [esp + 0xc], edx
mov byte [esp + ecx + 7], al
jmp 0x409c82
mov ecx, eax
and ecx, 0x7d
mov edx, eax
and edx, 2
or eax, 2
imul eax, edx
xor edx, 2
imul edx, ecx
movzx eax, word [edx + eax + 0x43e528]
lea ecx, [esp + 9]
mov dword [esp + 0xc], ecx
mov word [esp + 9], ax
lea eax, [esi + 0x10]
push eax
call fcn.00406c90
add esp, 4
mov edi, dword [esi + 0x10]
mov eax, dword [esi + 0x58]
mov eax, dword [eax + 0x48]
mov dword [esp + 0xc4], eax
lea ebx, [esp + 0xcb]
push ebx
call fcn.00434300
add esp, 4
mov dword [esp + 0x2c], edi
lea eax, [edi + 0x400]
push eax
call fcn.00408c60
add esp, 4
mov edi, eax
mov dword [esp + 0x30], 0x27233624
mov byte [esp + 0x34], 0x48
mov dword [esp + 0x35], 0
mov dword [esp + 0x39], 0
mov dword [esp + 0x3c], 0
mov dword [esp], 0
mov eax, dword [esp]
cmp eax, 0xf
ja 0x409d43
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp]
mov ecx, dword [esp]
movzx ecx, byte [esp + ecx + 0x30]
lea edx, [eax + ecx]
add edx, 0xaa006f4a
add eax, 0x4a
and eax, ecx
add eax, eax
mov ecx, eax
xor ecx, edx
not eax
and eax, edx
add eax, eax
sub eax, ecx
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x10]
add al, 0xfa
mov ecx, dword [esp]
mov byte [esp + ecx + 0x30], al
inc dword [esp]
mov eax, dword [esp]
cmp eax, 0x10
jb 0x409d00
lea eax, [esp + 0x30]
mov ecx, esi
push ebx
push eax
push edi
call fcn.00409500
mov dword [esp + 0x30], 0xfb5c6296
mov dword [esp + 0x38], 0
mov dword [esp + 0x34], 0
mov dword [esp], 0
mov eax, dword [esp]
cmp eax, 0xb
ja 0x409dc9
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, dword [esp]
mov eax, dword [esp]
movzx ebx, byte [esp + eax + 0x30]
lea eax, [edx + 0x307ef9ff]
lea ecx, [edx + ebx]
add ecx, 0x307ef9ff
dec edx
and edx, ebx
and eax, ebx
add eax, edx
mov edx, eax
xor edx, ecx
not eax
and eax, ecx
add eax, eax
sub eax, edx
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x10]
add al, 7
mov ecx, dword [esp]
mov byte [esp + ecx + 0x30], al
inc dword [esp]
mov eax, dword [esp]
cmp eax, 0xc
jb 0x409d80
mov ecx, esi
push dword [esp + 0xc]
lea eax, [esp + 0x34]
push eax
push edi
call fcn.00409500
mov eax, dword [str.MhMcwl__Vicky]
mov dword [esp + 0x30], 0x83687272
mov dword [esp + 0x34], 0
mov dword [esp + 0x38], 0
mov dword [esp + 0x3b], 0
mov dword [esp], 0
mov ecx, dword [esp]
cmp ecx, 0xe
ja 0x409e40
nop
nop
mov ecx, dword [esp]
mov edx, dword [esp]
movzx edx, byte [esp + edx + 0x30]
add ecx, 0x8737f441
xor ecx, edx
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x10]
add cl, 0x39
mov edx, dword [esp]
mov byte [esp + edx + 0x30], cl
inc dword [esp]
mov ecx, dword [esp]
cmp ecx, 0xf
jb 0x409e10
mov ecx, esi
push eax
lea eax, [esp + 0x34]
push eax
push edi
call fcn.00409500
mov dword [esp + 0x30], 0xc7b8c0b3
mov dword [esp + 0x34], 0x483bbccb
mov dword [esp + 0x38], 0x3e39344b
mov byte [esp + 0x3c], 0xd0
mov dword [esp + 0x3d], 0
mov dword [esp], 0
mov eax, dword [esp]
cmp eax, 0x10
ja 0x409edd
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp]
mov ecx, dword [esp]
movzx edx, byte [esp + ecx + 0x30]
lea ecx, [eax + 0x9f75a7a]
mov ebx, ecx
and ebx, edx
xor ecx, edx
add eax, 0x7a
and eax, edx
add eax, ebx
sub ecx, eax
lea eax, [ecx + ebx*2]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x10]
mov ecx, eax
xor ecx, 0xa9
and eax, 0x29
lea eax, [ecx + eax*2]
inc al
mov ecx, dword [esp]
mov byte [esp + ecx + 0x30], al
inc dword [esp]
mov eax, dword [esp]
cmp eax, 0x11
jb 0x409e90
mov dword [esp + 0x10], 0x63f8c8c9
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
mov word [esp + 0x1c], 0
mov dword [esp + 4], 0
mov eax, dword [esp + 4]
cmp eax, 0xd
ja 0x409f51
nop
nop
nop
mov eax, dword [esp + 4]
mov ecx, dword [esp + 4]
movzx ecx, byte [esp + ecx + 0x10]
lea edx, [eax + 0x91]
and edx, ecx
mov ebx, 0xe91a0c6e
sub ebx, eax
or ebx, ecx
not ebx
add ebx, ecx
sub ebx, edx
mov dword [esp], ebx
mov eax, dword [esp]
add al, 9
mov ecx, dword [esp + 4]
mov byte [esp + ecx + 0x10], al
inc dword [esp + 4]
mov eax, dword [esp + 4]
cmp eax, 0xe
jb 0x409f10
lea edx, [esp + 0x10]
mov ecx, esi
lea eax, [esp + 0x30]
push eax
push edx
mov dword [esp + 0x14], edi
push edi
call fcn.00409500
mov dword [esp + 0x30], 0x50282a2c
mov byte [esp + 0x34], 0xea
mov dword [esp + 0x35], 0
mov byte [esp + 0x39], 0
mov dword [esp], 0
mov eax, dword [esp]
cmp eax, 9
ja 0x409fda
mov edx, dword [esp]
mov eax, dword [esp]
movzx ebx, byte [esp + eax + 0x30]
lea eax, [edx + 0xbd]
mov ecx, 0x142
sub ecx, edx
sub ecx, ebx
add edx, ebx
add edx, 0x2a84d8bd
and eax, ebx
add eax, eax
and ecx, eax
not eax
and eax, edx
sub eax, ecx
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x10]
add al, 0xd5
mov ecx, dword [esp]
mov byte [esp + ecx + 0x30], al
inc dword [esp]
mov eax, dword [esp]
cmp eax, 0xa
jb 0x409f90
mov ecx, esi
push dword [esp + 0x2c]
push dword [esp + 0xc8]
lea eax, [esp + 0x38]
push eax
push dword [esp + 0x18]
call fcn.004097a0
mov eax, dword [esi + 0x60]
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], 0x5bcd591b
mov dword [esp + 0x34], 0x47da45d2
mov dword [esp + 0x38], 0x43d4412d
mov dword [esp + 0x3c], 0x4f1b4dd0
mov dword [esp + 0x40], 0x4bd34934
mov dword [esp + 0x44], 0x771b75e4
mov dword [esp + 0x48], 0x7352712a
mov dword [esp + 0x4c], 0x7fe37de9
mov dword [esp + 0x50], 0x7be679ec
mov dword [esp + 0x54], 0x67f6650d
mov dword [esp + 0x58], 0x63f06101
mov dword [esp + 0x5c], 0x6f396df0
mov dword [esp + 0x60], 0x6bfd6906
mov dword [esp + 0x64], 0x97039506
mov dword [esp + 0x68], 0x93fe91c5
mov dword [esp + 0x6c], 0x9f029dfd
mov dword [esp + 0x70], 0x9bc199f9
mov dword [esp + 0x74], 0x87e485a4
mov dword [esp + 0x78], 0x831f8117
mov dword [esp + 0x7c], 0x8fe28d1a
mov dword [esp + 0x80], 0x8b1889e9
mov dword [esp + 0x84], 0xb7f3b52d
mov dword [esp + 0x88], 0xb3dfb1d2
mov dword [esp + 0x8c], 0xbfe3bde4
mov dword [esp + 0x90], 0xbbd7b9d4
mov dword [esp + 0x94], 0xa7cfa5f9
mov dword [esp + 0x98], 0xa3cea130
mov dword [esp + 0x9c], 0xafcdad3b
mov dword [esp + 0xa0], 0xabc7a9c1
mov dword [esp + 0xa4], 0xd744d546
mov dword [esp + 0xa8], 0xd383d1bd
mov dword [esp + 0xac], 0xdfd4dde9
mov word [esp + 0xb0], 0xd9d8
mov dword [esp + 0xb5], 0
mov dword [esp + 0xb2], 0
mov dword [esp], 0
mov ecx, dword [esp]
cmp ecx, 0x88
ja 0x40a1b4
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ebx, dword [esp]
mov ecx, dword [esp]
movzx edi, byte [esp + ecx + 0x30]
lea ecx, [ebx + 0x12f45ccc]
mov edx, ecx
and edx, edi
mov eax, ecx
xor eax, edi
lea edx, [eax + edx*2]
add ebx, 0xcc
and ebx, edi
or ecx, edi
xor ecx, eax
add ecx, ebx
mov eax, edx
not eax
and eax, ecx
not ecx
and ecx, edx
sub ecx, eax
mov dword [esp + 0x10], ecx
mov eax, dword [esp + 0x10]
add al, 0x6c
mov ecx, dword [esp]
mov byte [esp + ecx + 0x30], al
inc dword [esp]
mov eax, dword [esp]
cmp eax, 0x89
jb 0x40a160
mov dword [esp + 0x10], 0x8b2b8d7f
mov dword [esp + 0x14], 0x973f8938
mov word [esp + 0x18], 0x9594
mov dword [esp + 0x1a], 0
mov dword [esp + 0x1e], 0
mov word [esp + 0x22], 0
mov dword [esp + 4], 0
mov eax, dword [esp + 4]
cmp eax, 0x13
ja 0x40a24d
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 4]
mov ecx, dword [esp + 4]
movzx ecx, byte [esp + ecx + 0x10]
lea edx, [eax + ecx]
add edx, 0xe1ac1bea
add eax, 0xe1ac1bea
and eax, ecx
add eax, eax
sub edx, eax
mov dword [esp], edx
mov ecx, dword [esp]
mov eax, ecx
or eax, 0x99
and ecx, 0x99
add ecx, eax
inc cl
mov eax, dword [esp + 4]
mov byte [esp + eax + 0x10], cl
inc dword [esp + 4]
mov eax, dword [esp + 4]
cmp eax, 0x14
jb 0x40a200
push 0x493e0
push dword [esp + 0x30]
mov edi, dword [esp + 0x14]
push edi
push 0
push 0
lea eax, [esp + 0x44]
push eax
lea eax, [esp + 0x28]
push eax
call fcn.0040d3b0
add esp, 0x1c
mov ebx, eax
push edi
call fcn.00408c70
add esp, 4
mov eax, dword [esi + 0x60]
add dword [esi + 4], eax
mov dword [esi + 0x60], 0
mov eax, ebx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret