Function at 0x40cee0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x244
mov eax, dword [0x44bd60]
mov dword [esp + 0x44], 0x74dc723c
mov dword [esp + 0x48], 0x78de76cf
mov dword [esp + 0x4c], 0x7cd77ad5
mov dword [esp + 0x50], 0x40107edc
mov dword [esp + 0x54], 0x442d4234
mov dword [esp + 0x58], 0x48274635
mov dword [esp + 0x5c], 0x4c1c4a21
mov dword [esp + 0x60], 0x50e14ee4
mov dword [esp + 0x64], 0x54fc52f5
mov dword [esp + 0x68], 0x58e456e2
mov dword [esp + 0x6c], 0x5c155a39
mov dword [esp + 0x70], 0xa03f5e09
mov dword [esp + 0x74], 0xa4d3a2d0
mov dword [esp + 0x78], 0xa8d7a6cb
mov dword [esp + 0x7c], 0xaccbaad2
mov dword [esp + 0x80], 0xb006aefa
mov dword [esp + 0x84], 0xb4c5b21f
mov dword [esp + 0x88], 0xb8ccb6c1
mov dword [esp + 0x8c], 0xbc03bad9
mov dword [esp + 0x90], 0x80cbbecb
mov dword [esp + 0x94], 0x84e382e8
mov dword [esp + 0x98], 0x883786c4
mov dword [esp + 0x9c], 0x8c278a39
mov dword [esp + 0xa0], 0x90d88e28
mov dword [esp + 0xa4], 0x94319234
mov dword [esp + 0xa8], 0x983e96de
mov dword [esp + 0xac], 0x9cf49a2d
mov dword [esp + 0xb0], 0xe0ec9ee8
mov dword [esp + 0xb4], 0xe48de296
mov dword [esp + 0xb8], 0xe891e696
mov dword [esp + 0xbc], 0xec83ea89
mov dword [esp + 0xc0], 0xf0a7eea6
mov dword [esp + 0xc4], 0xf4bef2a5
mov dword [esp + 0xc8], 0xf89bf6b9
mov dword [esp + 0xcc], 0xfc57fa99
mov dword [esp + 0xd0], 0xc054fe54
mov dword [esp + 0xd4], 0xc4a3c264
mov dword [esp + 0xd8], 0xc862c682
mov dword [esp + 0xdc], 0xcc60ca6a
mov dword [esp + 0xe0], 0xd0a6ce62
mov dword [esp + 0xe4], 0xd490d2b1
mov dword [esp + 0xe8], 0xd865d67d
mov dword [esp + 0xec], 0xdc76da76
mov dword [esp + 0xf0], 0x20b0de78
mov dword [esp + 0xf4], 0x24522250
mov dword [esp + 0xf8], 0x2849265c
mov dword [esp + 0xfc], 0x2c452a59
mov dword [esp + 0x100], 0x30412e5d
mov dword [esp + 0x104], 0x34533241
mov dword [esp + 0x108], 0x38963666
mov dword [esp + 0x10c], 0x3c9a3a9f
mov dword [esp + 0x110], 0x963e8f
mov dword [esp + 0x114], 0x476026e
mov dword [esp + 0x118], 0x8700676
mov dword [esp + 0x11c], 0xc780a67
mov dword [esp + 0x120], 0x100f0e7b
mov byte [esp + 0x124], 0
mov dword [esp], 0
mov ecx, dword [esp]
cmp ecx, 0xe0
ja 0x40d183
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [esp]
mov edx, dword [esp]
movzx edx, byte [esp + edx + 0x44]
add ecx, 0x28b8151
xor ecx, edx
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0x14]
add cl, 0xe0
mov edx, dword [esp]
mov byte [esp + edx + 0x44], cl
inc dword [esp]
mov ecx, dword [esp]
cmp ecx, 0xe1
jb 0x40d150
lea ebp, [esp + 0x44]
push 0
push 0
push 0
push 0
push ebp
call eax
mov esi, eax
xor eax, eax
test esi, esi
setne al
jmp dword [eax*4 + 0x446c38]
xor ebx, ebx
jmp 0x40d5a8
mov eax, dword [0x44bd64]
mov dword [esp + 0x44], 0xb1aeac51
mov byte [esp + 0x48], 0
mov dword [esp], 0
mov ecx, dword [esp]
cmp ecx, 4
ja 0x40d200
nop
nop
nop
nop
nop
nop
mov ecx, dword [esp]
mov edx, dword [esp]
movzx edx, byte [esp + edx + 0x44]
add ecx, 0xd4de40d
xor ecx, edx
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0x14]
add cl, 0x5f
mov edx, dword [esp]
mov byte [esp + edx + 0x44], cl
inc dword [esp]
mov ecx, dword [esp]
cmp ecx, 5
jb 0x40d1d0
movzx ecx, word [esp + 0x44]
push 0
push ecx
push 0x44bd94
push esi
call eax
xor ecx, ecx
test eax, eax
setne cl
jmp dword [ecx*4 + 0x446c40]
xor ebx, ebx
jmp 0x40d5a1
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], esi
mov eax, dword [0x44bd68]
mov dword [esp + 0x14], 0x60e76665
mov byte [esp + 0x18], 0
mov dword [esp], 0
mov ecx, dword [esp]
cmp ecx, 4
ja 0x40d280
nop
nop
mov ecx, dword [esp]
mov edx, dword [esp]
movzx edx, byte [esp + edx + 0x14]
add ecx, 0xa074fa51
xor ecx, edx
mov dword [esp + 0x44], ecx
mov ecx, dword [esp + 0x44]
add cl, 0xcc
mov edx, dword [esp]
mov byte [esp + edx + 0x14], cl
inc dword [esp]
mov ecx, dword [esp]
cmp ecx, 5
jb 0x40d250
mov ecx, dword [esp + 0x258]
mov edx, dword [esp + 0x14]
mov dword [esp + 0x44], 0x34e432e3
mov dword [esp + 0x48], 0x38ed36e2
mov word [esp + 0x4c], 0x3a3b
mov dword [esp + 0x4e], 0
mov byte [esp + 0x52], 0
mov dword [esp + 4], 0
mov esi, dword [esp + 4]
cmp esi, 0xe
ja 0x40d2ff
mov esi, dword [esp + 4]
mov edi, dword [esp + 4]
movzx edi, byte [esp + edi + 0x44]
add esi, 0xbc20872
xor esi, edi
mov dword [esp], esi
mov ebx, dword [esp]
mov esi, ebx
not esi
and esi, 0x41
and ebx, 0xbe
sub ebx, esi
mov esi, dword [esp + 4]
mov byte [esp + esi + 0x44], bl
inc dword [esp + 4]
mov esi, dword [esp + 4]
cmp esi, 0xf
jb case.default.0x40d318
push edx
push 0
push 0
push 0
push ecx
push ebp
mov edi, dword [esp + 0x28]
push edi
call eax
mov ebx, eax
xor eax, eax
test ebx, ebx
setne al
jmp dword [eax*4 + 0x446c48]
xor ebx, ebx
mov esi, dword [esp + 0xc]
jmp 0x40d59a
mov eax, dword [esp + 0x270]
mov edx, dword [esp + 0x264]
mov edi, dword [esp + 0x260]
mov esi, dword [esp + 0x25c]
xor ecx, ecx
test eax, eax
setg cl
mov dword [esp + 8], ebx
jmp dword [ecx*4 + 0x446c50]
push eax
push eax
push eax
push eax
push ebx
mov ebx, edi
mov edi, edx
call dword [0x44bd70]
mov edx, edi
mov edi, ebx
mov ebx, dword [esp + 8]
nop
jmp dword [0x446c64]
movzx eax, byte [0x44be98]
jmp dword [eax*4 + 0x446c68]
mov eax, dword [esp + 0x26c]
mov ebp, esi
mov ebx, edx
mov esi, eax
jmp dword [0x446c74]
mov dword [esp + 0x14], 0x7ac67430
mov dword [esp + 0x18], 0x7ed678c8
mov dword [esp + 0x1c], 0x42d87cd6
mov dword [esp + 0x20], 0x4621403d
mov dword [esp + 0x24], 0x4ae644e4
mov dword [esp + 0x28], 0x4ee348ec
mov dword [esp + 0x2c], 0x52e04cec
mov dword [esp + 0x30], 0x56f250e8
mov dword [esp + 0x34], 0x5aec54f1
mov dword [esp + 0x38], 0x5e2458eb
mov word [esp + 0x3c], 0x5c5f
mov dword [esp + 0x3e], 0
mov dword [esp], 0
mov eax, dword [esp]
cmp eax, 0x2d
ja 0x40d43e
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp]
mov ecx, dword [esp]
movzx ecx, byte [esp + ecx + 0x14]
add eax, 0x17e44dd5
xor eax, ecx
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x44]
add al, 0x5e
mov ecx, dword [esp]
mov byte [esp + ecx + 0x14], al
inc dword [esp]
mov eax, dword [esp]
cmp eax, 0x2e
jb 0x40d410
movzx eax, word [esp + 0x14]
test ax, ax
je 0x40d462
lea ebp, [esp + 0x44]
lea ecx, [esp + 0x16]
mov word [ebp], ax
add ebp, 2
movzx eax, word [ecx]
add ecx, 2
test ax, ax
jne 0x40d450
mov word [ebp], 0
movzx eax, word [0x44be9a]
test ax, ax
je 0x40d496
xor ecx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [ebp + ecx], ax
movzx eax, word [ecx + 0x44be9c]
add ecx, 2
test ax, ax
jne 0x40d480
add ebp, ecx
mov edi, edx
mov word [ebp], 0
mov eax, dword [0x44bd74]
mov dword [esp + 0x14], 0x4252627
mov word [esp + 0x18], 0
mov byte [esp + 0x1a], 0
mov dword [esp + 4], 0
mov ecx, dword [esp + 4]
cmp ecx, 6
ja 0x40d503
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [esp + 4]
mov edx, dword [esp + 4]
movzx edx, byte [esp + edx + 0x14]
add ecx, 0x3b628220
xor ecx, edx
mov dword [esp], ecx
mov ecx, dword [esp]
add cl, 0xf9
mov edx, dword [esp + 4]
mov byte [esp + edx + 0x14], cl
inc dword [esp + 4]
mov ecx, dword [esp + 4]
cmp ecx, 7
jb 0x40d4d0
lea ecx, [esp + 0x44]
push dword [esp + 0x14]
push 0xffffffffffffffff
push ecx
push ebx
call eax
mov esi, dword [esp + 0x26c]
mov ebx, edi
mov edi, dword [esp + 0x260]
mov ebp, dword [esp + 0x25c]
jmp dword [0x446c74]
mov dword [esp + 0x44], 0
lea eax, [esp + 0x44]
push eax
push esi
push dword [esp + 0x270]
mov ebp, dword [esp + 0x14]
push ebp
call dword [0x44bd88]
xor ecx, ecx
test eax, eax
setne cl
xor ebx, ebx
mov esi, dword [esp + 0xc]
mov edi, dword [esp + 0x10]
jmp dword [ecx*4 + 0x446c88]
push 0
push ebp
call dword [0x44bd7c]
xor ecx, ecx
test eax, eax
setne cl
xor ebx, ebx
jmp dword [ecx*4 + 0x446c90]
jmp 0x40d593
mov bl, 1
jmp 0x40d593
xor ebx, ebx
mov esi, dword [esp + 0xc]
mov edi, dword [esp + 0x10]
mov ebp, dword [esp + 8]
push ebp
call dword [0x44bd8c]
push edi
call dword [0x44bd8c]
push esi
call dword [0x44bd8c]
mov eax, ebx
add esp, 0x244
pop esi
pop edi
pop ebx
pop ebp
ret
xor ecx, ecx
test eax, eax
setne cl
jmp dword [ecx*4 + 0x446c80]
xor eax, eax
mov ecx, ebp
neg ecx
sbb eax, eax
push 0
push esi
push ebx
push edi
push eax
push ebp
push dword [esp + 0x20]
call dword [0x44bd78]
xor eax, eax
mov ecx, ebp
neg ecx
sbb eax, eax
push 0
push esi
push ebx
push edi
push eax
push ebp
push dword [esp + 0x20]
call dword [0x44bd78]
jmp dword [0x446c7c]