Function at 0xdf9d60
Capabilities:
Contain obfuscated stackstrings
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0xb0
mov dword [esp + 0x10], 0xa32da102
mov dword [esp + 0x14], 0x9f0d9d2e
mov dword [esp + 0x18], 0x9b3b990c
mov dword [esp + 0x1c], 0x970b9503
mov dword [esp + 0x20], 0x930c9132
mov dword [esp + 0x24], 0x8f128d0d
mov dword [esp + 0x28], 0x8b07892d
mov dword [esp + 0x2c], 0x8708851e
lea eax, [esp + 0x30]
mov word [esp + 0x30], 0x8186
mov dword [esp + 0x32], 0
mov dword [esp + 0x36], 0
mov dword [esp + 0x3a], 0
mov dword [esp + 0x3e], 0
mov dword [esp + 0x42], 0
mov byte [esp + 0x46], 0
mov dword [esp + 0x74], 0
mov ecx, dword [esp + 0x74]
cmp ecx, 0x36
ja 0xdf9e3a
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, dword [esp + 0x74]
mov ecx, dword [esp + 0x74]
movzx esi, byte [esp + ecx + 0x10]
lea ecx, [edx + esi]
add ecx, 0xf716171b
add edx, 0xf716171b
and edx, esi
add edx, edx
sub ecx, edx
add cl, 0x43
mov edx, dword [esp + 0x74]
mov byte [esp + edx + 0x10], cl
inc dword [esp + 0x74]
mov ecx, dword [esp + 0x74]
cmp ecx, 0x37
jb 0xdf9e00
mov ebx, dword [ebp + 8]
lea edi, [esp + 0x74]
lea edx, [esp + 0x10]
mov ecx, 8
xchg esi, edx
rep movsd dword es:[edi], dword [esi]
xchg esi, edx
lea edi, [esp + 0x94]
mov ecx, 1
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
mov eax, dword [ebp + 0x10]
mov edi, dword [eax + 4]
mov eax, 0xfffffffe
nop
nop
nop
nop
cmp word [edi + eax + 2], 0
lea eax, [eax + 2]
jne 0xdf9e70
cmp eax, 0xffffffdd
jge 0xdf9e87
mov eax, 0xffffffff
jmp 0xdf9e8a
add eax, 0x22
push eax
call fcn.00e14fa0
add esp, 4
mov esi, eax
movzx ecx, word [edi]
test cx, cx
je 0xdf9ec1
add edi, 2
mov eax, esi
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edi]
add edi, 2
test cx, cx
jne 0xdf9eb0
mov word [eax], 0
movzx ecx, word [esp + 0x74]
test cx, cx
je 0xdf9ef1
lea edx, [esp + 0x76]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0xdf9ee0
mov word [eax], 0
mov dword [esp + 0x98], ebx
mov dword [esp + 0x9c], esi
mov eax, dword [ebp + 0xc]
mov dword [esp + 0xa0], eax
mov eax, dword [ebp + 0x10]
mov dword [esp + 0xa4], eax
mov eax, dword [ebp + 0x14]
mov dword [esp + 0xa8], eax
mov dword [esp + 0x10], 0x36d016d
mov dword [esp + 0x14], 0x72b057e
mov dword [esp + 0x18], 0xb72096d
mov dword [esp + 0x1c], 0xf6b0d78
mov dword [esp + 0x20], 0x1361117e
mov dword [esp + 0x24], 0x1779157d
mov dword [esp + 0x28], 0x1b311976
mov dword [esp + 0x2c], 0x1f351d37
mov dword [esp + 0x30], 0x237c210a
mov dword [esp + 0x34], 0x27552551
mov dword [esp + 0x38], 0x2b58294d
mov dword [esp + 0x3c], 0x2f412d6f
mov dword [esp + 0x40], 0x3346315e
mov dword [esp + 0x44], 0x374e3551
mov dword [esp + 0x48], 0x3b73394c
mov dword [esp + 0x4c], 0x3f033d58
mov dword [esp + 0x50], 0x4342416a
mov dword [esp + 0x63], 0
mov dword [esp + 0x60], 0
mov dword [esp + 0x5c], 0
mov dword [esp + 0x58], 0
mov dword [esp + 0x54], 0
mov dword [esp + 0xc], 0
mov eax, dword [esp + 0xc]
cmp eax, 0x56
ja 0xdfa01b
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0xc]
movzx edx, byte [esp + eax + 0x10]
lea eax, [ecx + edx]
and ecx, edx
add ecx, ecx
sub eax, ecx
mov ecx, dword [esp + 0xc]
mov byte [esp + ecx + 0x10], al
inc dword [esp + 0xc]
mov eax, dword [esp + 0xc]
cmp eax, 0x57
jb 0xdf9ff0
lea eax, [esp + 0x98]
push eax
push 0xdfafa0
lea eax, [esp + 0x18]
push eax
push esi
call fcn.00dfad90
add esp, 0x10
mov ebx, eax
mov eax, dword [0xe22538]
mov ecx, 0xde410bad
xor ecx, dword [0xe22540]
add eax, ecx
inc eax
jmp eax