Function at 0x409250
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0xf0
mov esi, dword [ebp + 8]
mov dword [esp + 0x7c], ecx
add esi, dword [ecx + 0x60]
mov dword [esp + 0x80], 0xbf8684eb
mov dword [esp + 0x84], 0xfcbc8389
mov dword [esp + 0x88], 0xb0bc8aa2
mov dword [esp + 0x8c], 0x8bb7e9cc
mov dword [esp + 0x90], 0xbbb9ba8a
mov dword [esp + 0x94], 0x93b2bab1
mov dword [esp + 0x98], 0xaaef95ef
mov dword [esp + 0x9c], 0xaaa3afa4
mov dword [esp + 0xa0], 0x2069a
mov word [esp + 0xa4], 0x1104
mov dword [esp + 0xa6], 0
mov dword [esp + 0xaa], 0
mov dword [esp + 0xae], 0
mov dword [esp + 0xb2], 0
mov dword [esp + 0x10], 0
mov eax, dword [esp + 0x10]
cmp eax, 0x35
ja 0x40934b
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x10]
add al, 0xd9
xor al, byte [esp + ecx + 0x80]
add al, 0x11
mov ecx, dword [esp + 0x10]
mov byte [esp + ecx + 0x80], al
inc dword [esp + 0x10]
mov eax, dword [esp + 0x10]
cmp eax, 0x36
jb 0x409320
mov dword [esp + 0xd0], 0
mov dword [esp + 0xcc], 0
mov dword [esp + 0xc8], 0
mov dword [esp + 0xc4], 0
mov dword [esp + 0xc0], 0x7b626644
mov dword [esp + 0x10], 0
mov eax, dword [esp + 0x10]
cmp eax, 0x13
ja 0x4093d5
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x10]
movzx ecx, byte [esp + ecx + 0xc0]
lea edx, [eax + 0x6f]
and edx, ecx
add eax, ecx
add edx, edx
sub eax, edx
add al, 0x66
mov ecx, dword [esp + 0x10]
mov byte [esp + ecx + 0xc0], al
inc dword [esp + 0x10]
mov eax, dword [esp + 0x10]
cmp eax, 0x14
jb 0x4093a0
mov dword [esp + 0x10], 0xfcf22621
mov dword [esp + 0x14], 0xf0f0222a
mov dword [esp + 0x18], 0xf7e8f221
mov dword [esp + 0x1c], 0xc8cfc8eb
mov dword [esp + 0x20], 0x10cfd3d4
mov dword [esp + 0x24], 0xdee12735
mov dword [esp + 0x28], 0xddc7d5d8
mov dword [esp + 0x2c], 0xdcf802d6
mov dword [esp + 0x30], 0xcec1c1cb
mov dword [esp + 0x34], 0xced7c1d9
mov dword [esp + 0x38], 0xd51803c8
mov dword [esp + 0x3c], 0xf03337cb
mov dword [esp + 0x40], 0x203c222a
mov dword [esp + 0x44], 0x2c3aed07
mov dword [esp + 0x48], 0xe90f2639
mov dword [esp + 0x4c], 0x38203e24
mov dword [esp + 0x50], 0x3df014f4
mov dword [esp + 0x54], 0x29332939
mov dword [esp + 0x58], 0x1c372e3d
mov word [esp + 0x5c], 0xe5f8
mov dword [esp + 0x65], 0
mov dword [esp + 0x62], 0
mov dword [esp + 0x5e], 0
mov dword [esp + 8], 0
mov eax, dword [esp + 8]
cmp eax, 0x58
ja 0x4094dd
nop
nop
nop
mov eax, dword [esp + 8]
mov ecx, dword [esp + 8]
movzx ecx, byte [esp + ecx + 0x10]
add eax, 0x52f12653
mov edx, eax
and edx, ecx
mov edi, eax
xor edi, ecx
or eax, ecx
xor eax, edi
lea ecx, [edi + edx*2]
add eax, edx
sub ecx, eax
add cl, 0xbb
mov eax, dword [esp + 8]
mov byte [esp + eax + 0x10], cl
inc dword [esp + 8]
mov eax, dword [esp + 8]
cmp eax, 0x59
jb 0x4094a0
mov eax, dword [ebp + 0xc]
movzx ecx, byte [esp + 0x10]
mov edx, esi
test cl, cl
je 0x40950b
lea edi, [esp + 0x11]
mov edx, esi
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edx], cl
inc edx
movzx ecx, byte [edi]
inc edi
test cl, cl
jne 0x409500
mov byte [edx], 0
movzx ecx, byte [eax]
test cl, cl
je 0x40952b
inc eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edx], cl
inc edx
movzx ecx, byte [eax]
inc eax
test cl, cl
jne 0x409520
mov byte [edx], 0
movzx eax, byte [esp + 0xc0]
test al, al
je 0x40955b
lea ecx, [esp + 0xc1]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edx], al
inc edx
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x409550
mov edi, dword [ebp + 0x14]
mov byte [edx], 0
movzx eax, byte [esp + 0x80]
test al, al
mov dword [esp + 0xc], esi
je 0x40958b
lea ecx, [esp + 0x81]
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edx], al
inc edx
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x409580
mov esi, dword [ebp + 0x10]
mov byte [edx], 0
mov ecx, edi
and ecx, 3
je 0x4095af
cmp ecx, 2
jne 0x4095c1
mov ecx, edi
shr ecx, 1
mov edi, edx
xchg esi, esi
rep movsw word es:[edi], word [esi]
xchg esi, esi
jmp 0x40965d
mov ecx, edi
shr ecx, 2
mov edi, edx
xchg esi, esi
rep movsd dword es:[edi], dword [esi]
xchg esi, esi
jmp 0x40965d
test edi, edi
je 0x40965d
mov eax, dword [ebp + 0x14]
mov edi, eax
and edi, 7
je 0x4095fe
xor ecx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ebx, byte [esi + ecx]
mov byte [edx + ecx], bl
inc ecx
cmp edi, ecx
jne 0x4095e0
mov eax, dword [ebp + 0x14]
mov edi, eax
sub edi, ecx
add esi, ecx
add ecx, edx
cmp eax, 8
jae 0x409607
jmp 0x40965d
mov edi, eax
mov ecx, edx
cmp eax, 8
jb 0x40965d
xor ebx, ebx
nop
nop
nop
nop
nop
nop
nop
movzx eax, byte [esi + ebx]
mov byte [ecx + ebx], al
movzx eax, byte [esi + ebx + 1]
mov byte [ecx + ebx + 1], al
movzx eax, byte [esi + ebx + 2]
mov byte [ecx + ebx + 2], al
movzx eax, byte [esi + ebx + 3]
mov byte [ecx + ebx + 3], al
movzx eax, byte [esi + ebx + 4]
mov byte [ecx + ebx + 4], al
movzx eax, byte [esi + ebx + 5]
mov byte [ecx + ebx + 5], al
movzx eax, byte [esi + ebx + 6]
mov byte [ecx + ebx + 6], al
movzx eax, byte [esi + ebx + 7]
mov byte [ecx + ebx + 7], al
add ebx, 8
cmp edi, ebx
jne 0x409610
mov dword [esp + 0x10], 0x18e70b05
mov dword [esp + 0x14], 0x2420524c
mov dword [esp + 0x18], 0x5c27564a
mov dword [esp + 0x1c], 0x42514552
mov dword [esp + 0x20], 0x4d525e59
mov dword [esp + 0x24], 0xe1eb0e41
mov word [esp + 0x28], 0xe3ed
mov byte [esp + 0x2a], 0xfc
mov dword [esp + 0x2b], 0
mov dword [esp + 0x2f], 0
mov word [esp + 0x33], 0
mov dword [esp + 0x80], 0
mov eax, dword [esp + 0x80]
cmp eax, 0x24
ja 0x409717
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [esp + 0x80]
mov eax, dword [esp + 0x80]
movzx esi, byte [esp + eax + 0x10]
lea eax, [ecx + esi]
add eax, 0x9a5ff97d
add ecx, 0x9a5ff97d
and ecx, esi
add ecx, ecx
sub eax, ecx
add al, 0x95
mov ecx, dword [esp + 0x80]
mov byte [esp + ecx + 0x10], al
inc dword [esp + 0x80]
mov eax, dword [esp + 0x80]
cmp eax, 0x25
jb 0x4096d0
add edx, dword [ebp + 0x14]
movzx eax, byte [esp + 0x10]
test al, al
je 0x40973d
lea ecx, [esp + 0x11]
mov esi, dword [esp + 0xc]
nop
nop
nop
nop
nop
mov byte [edx], al
inc edx
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x409730
jmp 0x409741
mov esi, dword [esp + 0xc]
mov byte [edx], 0
sub edx, esi
mov esi, dword [esp + 0x7c]
mov eax, dword [esi + 0x60]
mov ecx, eax
and ecx, edx
xor edx, eax
lea eax, [edx + ecx*2]
mov dword [esi + 0x60], eax
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret 0x10