Function at 0x409d20
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4516ed
mov eax, dword fs:[0]
push eax
sub esp, 0x524
mov eax, dword [0x46b008]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x310], 0x7ba17bbb
mov dword [ebp - 0x30c], 0x7bb97bb1
mov dword [ebp - 0x308], 0x7bfb7bb9
mov dword [ebp - 0x304], 0x7bb97bb1
mov dword [ebp - 0x300], 0x7bd57bb9
mov dword [ebp - 0x2fc], 0xa
mov dword [ebp - 0x2f8], 0x1157bd5
mov dword [ebp - 0x2a8], 0x74006e
mov dword [ebp - 0x2a4], 0x6c0064
mov dword [ebp - 0x2a0], 0x2e006c
mov dword [ebp - 0x29c], 0x6c0064
mov dword [ebp - 0x298], 0x6c
mov dword [ebp - 4], 0
mov edx, 0xff23
mov dword [ebp - 0x2d0], 0xff46ff48
xor ecx, ecx
mov dword [ebp - 0x2cc], 0xff4dff51
mov dword [ebp - 0x2c8], 0xff4fff46
mov dword [ebp - 0x2c4], 0xff42ff41
mov dword [ebp - 0x2c0], 0xff46ff50
mov dword [ebp - 0x2bc], 0xff47ff0d
mov dword [ebp - 0x2b8], 0xff4fff4f
mov dword [ebp - 0x2b4], edx
mov dword [ebp - 0x2b0], 0xf
mov dword [ebp - 0x2ac], 0x115ff23
mov eax, edx
xor ax, word [ebp + ecx - 0x2d0]
mov word [ebp + ecx - 0x4ec], ax
add ecx, 2
cmp ecx, 0x1e
jb 0x409e36
mov edx, 0x8271
mov dword [ebp - 0x2f4], 0x8214821a
mov dword [ebp - 0x2f0], 0x821f8203
xor ecx, ecx
mov dword [ebp - 0x2ec], 0x821d8214
mov dword [ebp - 0x2e8], 0x82438242
mov dword [ebp - 0x2e4], 0x8215825f
mov dword [ebp - 0x2e0], 0x821d821d
mov dword [ebp - 0x2dc], edx
mov dword [ebp - 0x2d8], 0xd
mov dword [ebp - 0x2d4], 0x1168271
lea ecx, [ecx]
mov eax, edx
xor ax, word [ebp + ecx - 0x2f4]
mov word [ebp + ecx - 0x494], ax
add ecx, 2
cmp ecx, 0x1a
jb 0x409eb0
lea ecx, [ebp - 0x2a8]
mov byte [ebp - 4], 2
call fcn.00409790
mov edi, eax
test edi, edi
je 0x40aad1
lea ecx, [ebp - 0x4ec]
call fcn.00409790
mov esi, eax
test esi, esi
jne 0x409f09
lea ecx, [ebp - 0x494]
call fcn.00409790
mov esi, eax
test esi, esi
je 0x40aad1
mov dword [ebp - 0x38], 0xad8098be
xor ecx, ecx
mov dword [ebp - 0x34], 0x89ba8888
mov dword [ebp - 0x30], 0x9e83988f
mov dword [ebp - 0x2c], 0x94a98889
mov dword [ebp - 0x28], 0x989c898f
mov dword [ebp - 0x24], 0xa4828385
mov dword [ebp - 0x20], 0x8088828d
mov dword [ebp - 0x1c], 0xec9e89
mov dword [ebp - 0x18], 0x1f
mov dword [ebp - 0x14], 0x119d7ec
mov al, byte [ebp + ecx - 0x38]
xor al, 0xec
mov byte [ebp + ecx - 0x50c], al
inc ecx
cmp ecx, 0x1f
jb 0x409f51
mov dword [ebp - 0x64], 0x68564e68
xor ecx, ecx
mov dword [ebp - 0x60], 0x4c55575f
mov dword [ebp - 0x5c], 0x595f6c5f
mov dword [ebp - 0x58], 0x5f48554e
mov dword [ebp - 0x54], 0x59427f5e
mov dword [ebp - 0x50], 0x534e4a5f
mov dword [ebp - 0x4c], 0x5b725455
mov dword [ebp - 0x48], 0x5f565e54
mov dword [ebp - 0x44], 0x3a48
mov dword [ebp - 0x40], 0x22
mov dword [ebp - 0x3c], 0x11a5b3a
mov al, byte [ebp + ecx - 0x64]
xor al, 0x3a
mov byte [ebp + ecx - 0x530], al
inc ecx
cmp ecx, 0x22
jb 0x409fb3
mov dword [ebp - 0x294], 0xcbe4fcda
xor ecx, ecx
mov dword [ebp - 0x290], 0xfdfcf8e9
mov dword [ebp - 0x28c], 0xe7cbedfa
mov dword [ebp - 0x288], 0xf0edfce6
mov dword [ebp - 0x284], 0x88fc
mov dword [ebp - 0x280], 0x12
mov dword [ebp - 0x27c], 0x11ade88
mov edi, edi
mov al, byte [ebp + ecx - 0x294]
xor al, 0x88
mov byte [ebp + ecx - 0x324], al
inc ecx
cmp ecx, 0x12
jb 0x40a010
mov dword [ebp - 0x108], 0x90baa284
xor ecx, ecx
mov dword [ebp - 0x104], 0xbea5a3ba
mov dword [ebp - 0x100], 0xa3b5b385
mov dword [ebp - 0xfc], 0xb39bb3a4
mov dword [ebp - 0xf8], 0xafa4b9bb
mov dword [ebp - 0xf4], 0xbeb5b795
mov dword [ebp - 0xf0], 0xd6b3
mov dword [ebp - 0xec], 0x1a
mov dword [ebp - 0xe8], 0x11b61d6
jmp 0x40a090
mov al, byte [ebp + ecx - 0x108]
xor al, 0xd6
mov byte [ebp + ecx - 0x4b0], al
inc ecx
cmp ecx, 0x1a
jb 0x40a090
mov dword [ebp - 0x238], 0x6a485076
xor ecx, ecx
mov dword [ebp - 0x234], 0x45507750
mov dword [ebp - 0x230], 0x70575150
mov dword [ebp - 0x22c], 0x574b604b
mov dword [ebp - 0x228], 0x4b565661
mov dword [ebp - 0x224], 0x2456
mov dword [ebp - 0x220], 0x16
mov dword [ebp - 0x21c], 0x11be524
jmp 0x40a100
mov al, byte [ebp + ecx - 0x238]
xor al, 0x24
mov byte [ebp + ecx - 0x400], al
inc ecx
cmp ecx, 0x16
jb 0x40a100
xor eax, eax
mov dword [ebp - 0x218], 0x211e0620
mov dword [ebp - 0x214], 0x133e0617
xor ecx, ecx
mov dword [ebp - 0x210], 0x1b250601
mov dword [ebp - 0x20c], 0x3740411c
mov dword [ebp - 0x208], 0x1d0000
mov byte [ebp - 0x204], 0x72
mov word [ebp - 0x203], ax
mov byte [ebp - 0x201], al
mov dword [ebp - 0x200], 0x15
mov dword [ebp - 0x1fc], 0x11c6872
jmp 0x40a180
mov al, byte [ebp + ecx - 0x218]
xor al, 0x72
mov byte [ebp + ecx - 0x3a0], al
inc ecx
cmp ecx, 0x15
jb 0x40a180
mov dword [ebp - 0xe4], 0xac81b79a
xor ecx, ecx
mov dword [ebp - 0xe0], 0xa1a3afac
mov dword [ebp - 0xdc], 0xa996a5b4
mov dword [ebp - 0xd8], 0xa1b5b4b2
mov dword [ebp - 0xd4], 0xada58dac
mov dword [ebp - 0xd0], 0xc0b9b2af
mov dword [ebp - 0xcc], 0x18
mov dword [ebp - 0xc8], 0x11cebc0
jmp 0x40a1f0
mov al, byte [ebp + ecx - 0xe4]
xor al, 0xc0
mov byte [ebp + ecx - 0x460], al
inc ecx
cmp ecx, 0x18
jb 0x40a1f0
mov dword [ebp - 0x1b8], 0x7c487954
xor ecx, ecx
mov dword [ebp - 0x1b4], 0x67586b6b
mov dword [ebp - 0x1b0], 0x6f7b7a7c
mov dword [ebp - 0x1ac], 0x636b4362
mov dword [ebp - 0x1a8], 0xe777c61
mov dword [ebp - 0x1a4], 0x14
mov dword [ebp - 0x1a0], 0x11d6f0e
mov edi, edi
mov al, byte [ebp + ecx - 0x1b8]
xor al, 0xe
mov byte [ebp + ecx - 0x374], al
inc ecx
cmp ecx, 0x14
jb 0x40a250
mov dword [ebp - 0xc4], 0x301a2b06
xor ecx, ecx
mov dword [ebp - 0xc0], 0x15342f29
mov dword [ebp - 0xbc], 0x2e282f32
mov dword [ebp - 0xb8], 0x35283f29
mov dword [ebp - 0xb4], 0x3d1f3233
mov dword [ebp - 0xb0], 0x5c39343f
mov dword [ebp - 0xac], 0x18
mov dword [ebp - 0xa8], 0x11df25c
jmp 0x40a2c0
mov al, byte [ebp + ecx - 0xc4]
xor al, 0x5c
mov byte [ebp + ecx - 0x478], al
inc ecx
cmp ecx, 0x18
jb 0x40a2c0
mov dword [ebp - 0x148], 0xc5e6ddf0
xor ecx, ecx
mov dword [ebp - 0x144], 0xc3fcc1c9
mov dword [ebp - 0x140], 0xcbdfded8
mov dword [ebp - 0x13c], 0xc7cfe7c6
mov dword [ebp - 0x138], 0xaad3d8c5
mov dword [ebp - 0x134], 0x14
mov dword [ebp - 0x130], 0x11e75aa
mov edi, edi
mov al, byte [ebp + ecx - 0x148]
xor al, 0xaa
mov byte [ebp + ecx - 0x388], al
inc ecx
cmp ecx, 0x14
jb 0x40a320
mov dword [ebp - 0xa4], 0x8aa88fa2
xor ecx, ecx
mov dword [ebp - 0xa0], 0x9b9d8c97
mov dword [ebp - 0x9c], 0x8a91ae8c
mov dword [ebp - 0x98], 0x94998d8c
mov dword [ebp - 0x94], 0x97959db5
mov dword [ebp - 0x90], 0xf8818a
mov dword [ebp - 0x8c], 0x17
mov dword [ebp - 0x88], 0x11ef8f8
jmp 0x40a390
mov al, byte [ebp + ecx - 0xa4]
xor al, 0xf8
mov byte [ebp + ecx - 0x430], al
inc ecx
cmp ecx, 0x17
jb 0x40a390
mov dword [ebp - 0x12c], 0x3317311c
xor ecx, ecx
mov dword [ebp - 0x128], 0xf3f3423
mov dword [ebp - 0x124], 0x34292028
mov dword [ebp - 0x120], 0x2f32272b
mov dword [ebp - 0x11c], 0x34162829
mov dword [ebp - 0x118], 0x35232529
mov dword [ebp - 0x114], 0x4635
mov dword [ebp - 0x110], 0x1a
mov dword [ebp - 0x10c], 0x11f7c46
jmp 0x40a410
mov al, byte [ebp + ecx - 0x12c]
xor al, 0x46
mov byte [ebp + ecx - 0x4cc], al
inc ecx
cmp ecx, 0x1a
jb 0x40a410
mov dword [ebp - 0x84], 0xf1c7e3ce
xor ecx, ecx
mov dword [ebp - 0x80], 0xf2fadde0
mov dword [ebp - 0x7c], 0xf5f9e6fb
mov dword [ebp - 0x78], 0xfafbfde0
mov dword [ebp - 0x74], 0xf7fbe6c4
mov dword [ebp - 0x70], 0x94e7e7f1
mov dword [ebp - 0x6c], 0x18
mov dword [ebp - 0x68], 0x11fff94
jmp 0x40a470
mov al, byte [ebp + ecx - 0x84]
xor al, 0x94
mov byte [ebp + ecx - 0x448], al
inc ecx
cmp ecx, 0x18
jb 0x40a470
xor eax, eax
mov dword [ebp - 0x278], 0x97b395b8
mov dword [ebp - 0x274], 0xb49b9087
xor ecx, ecx
mov dword [ebp - 0x270], 0x9796908b
mov dword [ebp - 0x26c], 0x87af8e83
mov dword [ebp - 0x268], 0x9b908d8f
mov byte [ebp - 0x264], 0xe2
mov word [ebp - 0x263], ax
mov byte [ebp - 0x261], al
mov dword [ebp - 0x260], 0x15
mov dword [ebp - 0x25c], 0x12082e2
jmp 0x40a4f0
mov al, byte [ebp + ecx - 0x278]
xor al, 0xe2
mov byte [ebp + ecx - 0x3b8], al
inc ecx
cmp ecx, 0x15
jb 0x40a4f0
mov dword [ebp - 0x164], 0x5562476a
xor ecx, ecx
mov dword [ebp - 0x160], 0x59665451
mov dword [ebp - 0x15c], 0x51454442
mov dword [ebp - 0x158], 0x5d557d5c
mov dword [ebp - 0x154], 0x3049425f
mov dword [ebp - 0x150], 0x14
mov dword [ebp - 0x14c], 0x1210630
mov edi, edi
mov al, byte [ebp + ecx - 0x164]
xor al, 0x30
mov byte [ebp + ecx - 0x360], al
inc ecx
cmp ecx, 0x14
jb 0x40a550
mov dword [ebp - 0x180], 0x1b2a0924
xor ecx, ecx
mov dword [ebp - 0x17c], 0x1017130c
mov dword [ebp - 0x178], 0x2e1b0a1f
mov dword [ebp - 0x174], 0x1b1d110c
mov dword [ebp - 0x170], 0x7e0d0d
mov dword [ebp - 0x16c], 0x13
mov dword [ebp - 0x168], 0x121897e
mov edi, edi
mov al, byte [ebp + ecx - 0x180]
xor al, 0x7e
mov byte [ebp + ecx - 0x338], al
inc ecx
cmp ecx, 0x13
jb 0x40a5b0
mov dword [ebp - 0x1f8], 0xa299bb96
xor ecx, ecx
mov dword [ebp - 0x1f4], 0xa7afa3a0
mov dword [ebp - 0x1f0], 0xb8bea59a
mov dword [ebp - 0x1ec], 0x81a0adb9
mov dword [ebp - 0x1e8], 0xbea3a1a9
mov dword [ebp - 0x1e4], 0xccb5
mov dword [ebp - 0x1e0], 0x16
mov dword [ebp - 0x1dc], 0x1220ccc
jmp 0x40a620
mov al, byte [ebp + ecx - 0x1f8]
xor al, 0xcc
mov byte [ebp + ecx - 0x418], al
inc ecx
cmp ecx, 0x16
jb 0x40a620
xor eax, eax
mov dword [ebp - 0x1d8], 0x744f6d40
mov dword [ebp - 0x1d4], 0x4c6a7b77
xor ecx, ecx
mov dword [ebp - 0x1d0], 0x556d7f73
mov dword [ebp - 0x1cc], 0x797f497c
mov dword [ebp - 0x1c8], 0x7475736e
mov byte [ebp - 0x1c4], 0x1a
mov word [ebp - 0x1c3], ax
mov byte [ebp - 0x1c1], al
mov dword [ebp - 0x1c0], 0x15
mov dword [ebp - 0x1bc], 0x122901a
jmp 0x40a6a0
mov al, byte [ebp + ecx - 0x1d8]
xor al, 0x1a
mov byte [ebp + ecx - 0x3d0], al
inc ecx
cmp ecx, 0x15
jb 0x40a6a0
xor eax, eax
mov dword [ebp - 0x258], 0x1a3f1f32
mov dword [ebp - 0x254], 0x3e0d1c01
xor ecx, ecx
mov dword [ebp - 0x250], 0x1d1c1a01
mov dword [ebp - 0x24c], 0xd250409
mov dword [ebp - 0x248], 0x111a0705
mov byte [ebp - 0x244], 0x68
mov word [ebp - 0x243], ax
mov byte [ebp - 0x241], al
mov dword [ebp - 0x240], 0x15
mov dword [ebp - 0x23c], 0x1231368
jmp 0x40a720
mov al, byte [ebp + ecx - 0x258]
xor al, 0x68
mov byte [ebp + ecx - 0x3e8], al
inc ecx
cmp ecx, 0x15
jb 0x40a720
push ecx
lea edx, [ebp - 0x50c]
mov byte [ebp - 4], 0x15
mov ecx, edi
call fcn.00409820
push ecx
lea edx, [ebp - 0x530]
mov dword [ebx + 0x14], eax
mov ecx, edi
call fcn.00409820
push ecx
lea edx, [ebp - 0x324]
mov dword [ebx + 0x18], eax
mov ecx, edi
call fcn.00409820
push ecx
lea edx, [ebp - 0x4b0]
mov dword [ebx + 0x1c], eax
mov ecx, edi
call fcn.00409820
push ecx
lea edx, [ebp - 0x400]
mov dword [ebx + 0x20], eax
mov ecx, edi
call fcn.00409820
push ecx
lea edx, [ebp - 0x3a0]
mov dword [ebx + 0x24], eax
mov ecx, edi
call fcn.00409820
push ecx
lea edx, [ebp - 0x460]
mov dword [ebx + 0x28], eax
mov ecx, edi
call fcn.00409820
push ecx
lea edx, [ebp - 0x374]
mov dword [ebx + 0x2c], eax
mov ecx, edi
call fcn.00409820
push ecx
lea edx, [ebp - 0x478]
mov dword [ebx + 0x30], eax
mov ecx, edi
call fcn.00409820
push ecx
lea edx, [ebp - 0x388]
mov dword [ebx + 0x34], eax
mov ecx, edi
call fcn.00409820
push ecx
lea edx, [ebp - 0x430]
mov dword [ebx + 0x38], eax
mov ecx, edi
call fcn.00409820
push ecx
lea edx, [ebp - 0x4cc]
mov dword [ebx + 0x3c], eax
mov ecx, edi
call fcn.00409820
push ecx
lea edx, [ebp - 0x448]
mov dword [ebx], eax
mov ecx, edi
call fcn.00409820
push ecx
lea edx, [ebp - 0x3b8]
mov dword [ebx + 4], eax
mov ecx, edi
call fcn.00409820
push ecx
lea edx, [ebp - 0x360]
mov dword [ebx + 8], eax
mov ecx, edi
call fcn.00409820
push ecx
lea edx, [ebp - 0x338]
mov dword [ebx + 0x40], eax
mov ecx, edi
call fcn.00409820
push ecx
lea edx, [ebp - 0x418]
mov dword [ebx + 0x44], eax
mov ecx, edi
call fcn.00409820
push ecx
lea edx, [ebp - 0x3d0]
mov dword [ebx + 0x48], eax
mov ecx, edi
call fcn.00409820
push ecx
lea edx, [ebp - 0x3e8]
mov dword [ebx + 0xc], eax
mov ecx, edi
call fcn.00409820
mov dword [ebx + 0x4c], eax
mov ecx, 0x15
lea eax, [ebp - 0x3e8]
mov byte [eax], 0
lea eax, [eax + 1]
sub ecx, 1
jne 0x40a887
mov ecx, 0x15
lea eax, [ebp - 0x3d0]
lea ecx, [ecx]
mov byte [eax], 0
lea eax, [eax + 1]
sub ecx, 1
jne 0x40a8a0
mov ecx, 0x16
lea eax, [ebp - 0x418]
mov byte [eax], 0
lea eax, [eax + 1]
sub ecx, 1
jne 0x40a8b6
mov ecx, 0x13
lea eax, [ebp - 0x338]
lea esp, [esp]
mov byte [eax], 0
lea eax, [eax + 1]
sub ecx, 1
jne 0x40a8d0
mov ecx, 0x14
lea eax, [ebp - 0x360]
mov byte [eax], 0
lea eax, [eax + 1]
sub ecx, 1
jne 0x40a8e6
mov ecx, 0x15
lea eax, [ebp - 0x3b8]
lea esp, [esp]
mov byte [eax], 0
lea eax, [eax + 1]
sub ecx, 1
jne 0x40a900
mov ecx, 0x18
lea eax, [ebp - 0x448]
mov byte [eax], 0
lea eax, [eax + 1]
sub ecx, 1
jne 0x40a916
mov ecx, 0x1a
lea eax, [ebp - 0x4cc]
lea esp, [esp]
mov byte [eax], 0
lea eax, [eax + 1]
sub ecx, 1
jne 0x40a930
mov ecx, 0x17
lea eax, [ebp - 0x430]
mov byte [eax], 0
lea eax, [eax + 1]
sub ecx, 1
jne 0x40a946
mov ecx, 0x14
lea eax, [ebp - 0x388]
lea esp, [esp]
mov byte [eax], 0
lea eax, [eax + 1]
sub ecx, 1
jne 0x40a960
mov ecx, 0x18
lea eax, [ebp - 0x478]
mov byte [eax], 0
lea eax, [eax + 1]
sub ecx, 1
jne 0x40a976
mov ecx, 0x14
lea eax, [ebp - 0x374]
lea esp, [esp]
mov byte [eax], 0
lea eax, [eax + 1]
sub ecx, 1
jne 0x40a990
mov ecx, 0x18
lea eax, [ebp - 0x460]
mov byte [eax], 0
lea eax, [eax + 1]
sub ecx, 1
jne 0x40a9a6
mov ecx, 0x15
lea eax, [ebp - 0x3a0]
lea esp, [esp]
mov byte [eax], 0
lea eax, [eax + 1]
sub ecx, 1
jne 0x40a9c0
mov ecx, 0x16
lea eax, [ebp - 0x400]
mov byte [eax], 0
lea eax, [eax + 1]
sub ecx, 1
jne 0x40a9d6
mov ecx, 0x1a
lea eax, [ebp - 0x4b0]
lea esp, [esp]
mov byte [eax], 0
lea eax, [eax + 1]
sub ecx, 1
jne 0x40a9f0
mov ecx, 0x12
lea eax, [ebp - 0x324]
mov byte [eax], 0
lea eax, [eax + 1]
sub ecx, 1
jne 0x40aa06
mov ecx, 0x22
lea eax, [ebp - 0x530]
lea esp, [esp]
mov byte [eax], 0
lea eax, [eax + 1]
sub ecx, 1
jne 0x40aa20
mov ecx, 0x1f
lea eax, [ebp - 0x50c]
mov byte [eax], 0
lea eax, [eax + 1]
sub ecx, 1
jne 0x40aa36
mov dword [ebp - 0x19c], 0x132a3b19
mov dword [ebp - 0x198], 0x322b3a31
mov dword [ebp - 0x194], 0x303f163b
mov dword [ebp - 0x190], 0x1b3b323a
mov dword [ebp - 0x18c], 0x5e0926
mov dword [ebp - 0x188], 0x13
mov dword [ebp - 0x184], 0x129be5e
jmp 0x40aa90
mov al, byte [ebp + ecx - 0x19c]
xor al, 0x5e
mov byte [ebp + ecx - 0x34c], al
inc ecx
cmp ecx, 0x13
jb 0x40aa90
push ecx
lea edx, [ebp - 0x34c]
mov byte [ebp - 4], 0x16
mov ecx, esi
call fcn.00409820
mov dword [ebx + 0x10], eax
mov ecx, 0x13
lea eax, [ebp - 0x34c]
mov byte [eax], 0
lea eax, [eax + 1]
sub ecx, 1
jne 0x40aac6
mov ecx, 0x1a
lea eax, [ebp - 0x494]
lea esp, [esp]
mov byte [eax], 0
lea eax, [eax + 1]
sub ecx, 1
jne 0x40aae0
mov ecx, 0x1e
lea eax, [ebp - 0x4ec]
mov byte [eax], 0
lea eax, [eax + 1]
sub ecx, 1
jne 0x40aaf6
mov ecx, 0x14
lea eax, [ebp - 0x2a8]
lea esp, [esp]
mov byte [eax], 0
lea eax, [eax + 1]
sub ecx, 1
jne 0x40ab10
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0041b616
mov esp, ebp
pop ebp