Function at 0x40cba0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x250
mov dword [esp + 0x48], 0xa311ad71
mov dword [esp + 0x4c], 0xa71fa12e
mov dword [esp + 0x50], 0xbb06a518
mov dword [esp + 0x54], 0xbf4db919
mov dword [esp + 0x58], 0xb340bd49
mov dword [esp + 0x5c], 0xb756b140
mov dword [esp + 0x60], 0x8b21b54c
mov dword [esp + 0x64], 0x8f3c8931
mov dword [esp + 0x68], 0x83318d28
mov dword [esp + 0x6c], 0x8731810b
mov dword [esp + 0x70], 0x9b488564
mov dword [esp + 0x74], 0x9f7e994c
mov dword [esp + 0x78], 0x93629d6d
mov dword [esp + 0x7c], 0x97669162
mov dword [esp + 0x80], 0x6b8a955b
mov dword [esp + 0x84], 0x6fd769c3
mov dword [esp + 0x88], 0x63a86dde
mov dword [esp + 0x8c], 0x67a96194
mov dword [esp + 0x90], 0x7bf26584
mov dword [esp + 0x94], 0x7f8a79b2
mov dword [esp + 0x98], 0x73927d85
mov dword [esp + 0x9c], 0x77c671b1
mov dword [esp + 0xa0], 0x4bf675c4
mov dword [esp + 0xa4], 0x4fe549ed
mov dword [esp + 0xa8], 0x43e44de9
mov dword [esp + 0xac], 0x47ff419f
mov dword [esp + 0xb0], 0x5ba945f0
mov dword [esp + 0xb4], 0x5fa959ad
mov dword [esp + 0xb8], 0x53a05d97
mov dword [esp + 0xbc], 0x579c51a7
mov dword [esp + 0xc0], 0x2bd255b4
mov dword [esp + 0xc4], 0x2ff629f7
mov dword [esp + 0xc8], 0x23ff2df8
mov dword [esp + 0xcc], 0x27da21fc
mov dword [esp + 0xd0], 0x3b8625c4
mov dword [esp + 0xd4], 0x3f813981
mov dword [esp + 0xd8], 0x33d23d99
mov dword [esp + 0xdc], 0x379331eb
mov dword [esp + 0xe0], 0xbb53593
mov dword [esp + 0xe4], 0xff709bb
mov dword [esp + 0xe8], 0x3c50dec
mov dword [esp + 0xec], 0x7b001b8
mov dword [esp + 0xf0], 0x1ba705b7
mov dword [esp + 0xf4], 0x1fed19bd
mov dword [esp + 0xf8], 0x13e31ded
mov dword [esp + 0xfc], 0x17e411d9
mov dword [esp + 0x100], 0xeb1815e4
mov dword [esp + 0x104], 0xef1ce918
mov dword [esp + 0x108], 0xe302ed1c
mov dword [esp + 0x10c], 0xe747e137
mov dword [esp + 0x110], 0xfb5be55e
mov dword [esp + 0x114], 0xff47f94e
mov dword [esp + 0x118], 0xf307fd0f
mov dword [esp + 0x11c], 0xf73df107
mov dword [esp + 0x120], 0xcb3df506
mov dword [esp + 0x124], 0xcfcec902
mov word [esp + 0x12c], 0
mov dword [esp + 0x128], 0
mov eax, dword [0x44af80]
mov ecx, 0x437e0447
nop
nop
nop
nop
movzx edx, byte [esp + ecx - 0x437e03ff]
lea esi, [ecx - 1]
xor esi, edx
mov dword [esp + 0x10], esi
mov edx, dword [esp + 0x10]
mov esi, edx
and esi, 0x16
xor edx, 0x16
lea edx, [edx + esi*2]
mov byte [esp + ecx - 0x437e03ff], dl
movzx edx, byte [esp + ecx - 0x437e03fe]
xor edx, ecx
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x10]
mov esi, edx
and esi, 0x16
xor edx, 0x16
lea edx, [edx + esi*2]
mov byte [esp + ecx - 0x437e03fe], dl
add ecx, 2
cmp ecx, 0x437e052d
jne 0x40ce10
lea ecx, [esp + 0x48]
push 0
push 0
push 0
push 0
push ecx
call eax
test eax, eax
je 0x40d112
mov esi, eax
push 0
push 0x1bb
push 0x44afb4
push eax
call dword [0x44af84]
mov dword [esp + 4], eax
test eax, eax
je 0x40d116
mov dword [esp], esi
mov eax, dword [0x44af88]
mov dword [esp + 8], eax
mov dword [esp + 0x48], 0x5b2d5928
mov dword [esp + 0x4c], 0x473a4537
mov word [esp + 0x50], 0x4140
mov dword [esp + 0x52], 0
mov dword [esp + 0x55], 0
mov eax, 0xd4281667
mov edx, 0x6a140b33
mov edi, 0x95ebf4cc
mov dword [esp + 0xc], eax
movzx ecx, byte [esp + edi + 0x6a140b7c]
lea eax, [ecx + ecx]
mov ebx, eax
and ebx, 2
mov esi, ecx
xor esi, 1
add esi, ebx
not eax
add eax, ecx
and ecx, 0xffffff8a
xor ecx, 0xb496f08a
or eax, 0x4b690f75
add eax, esi
or eax, ecx
mov ecx, edx
and ecx, 0xb496f08a
mov esi, edi
and esi, 0x4b690f75
or esi, ecx
xor esi, eax
mov dword [esp + 0x10], esi
mov eax, dword [esp + 0x10]
add al, 0x6c
mov byte [esp + edi + 0x6a140b7c], al
mov eax, dword [esp + 0xc]
add eax, 0xfffffffe
dec edx
inc edi
cmp eax, 0xd4281645
jne 0x40cee0
push 0x800000
push 0
push 0
push 0
push dword [ebp + 8]
lea eax, [esp + 0x5c]
push eax
push dword [esp + 0x1c]
call dword [esp + 0x24]
test eax, eax
je 0x40d11a
mov edi, eax
mov eax, dword [ebp + 0x20]
test eax, eax
jle 0x40cf7d
push eax
push eax
push eax
push eax
push edi
call dword [0x44af90]
cmp byte [0x44b0b8], 0
je 0x40d0bd
mov dword [esp + 0x10], 0x33ad3173
mov dword [esp + 0x14], 0x37ad35ab
mov dword [esp + 0x18], 0x2b4f29b1
mov dword [esp + 0x1c], 0x2f0e2d66
mov dword [esp + 0x20], 0x234d214f
mov dword [esp + 0x24], 0x27402547
mov dword [esp + 0x28], 0x5bc75937
mov dword [esp + 0x2c], 0x5f315dcb
mov dword [esp + 0x30], 0x53db5132
mov dword [esp + 0x34], 0x571b55c4
mov word [esp + 0x38], 0x4948
mov dword [esp + 0x3e], 0
mov dword [esp + 0x3a], 0
mov eax, 0x77faeb28
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ecx, byte [esp + eax - 0x77faeb18]
xor ecx, eax
mov dword [esp + 0x48], ecx
mov ecx, dword [esp + 0x48]
mov edx, ecx
xor edx, 0x47dc6e18
and ecx, edx
mov esi, ecx
and esi, 2
mov ebx, ecx
or ecx, 2
imul ecx, esi
xor esi, 2
and ebx, 0xfd
imul ebx, esi
sub ecx, edx
add ecx, ebx
mov byte [esp + eax - 0x77faeb18], cl
inc eax
cmp eax, 0x77faeb5a
jne 0x40d000
movzx eax, word [esp + 0x10]
test ax, ax
lea edx, [esp + 0x48]
je 0x40d071
lea edx, [esp + 0x48]
lea ecx, [esp + 0x12]
nop
nop
mov word [edx], ax
add edx, 2
movzx eax, word [ecx]
add ecx, 2
test ax, ax
jne 0x40d060
mov word [edx], 0
movzx eax, word [0x44b0ba]
test ax, ax
je 0x40d0a5
xor ecx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [edx + ecx], ax
movzx eax, word [ecx + 0x44b0bc]
add ecx, 2
test ax, ax
jne 0x40d090
add edx, ecx
mov word [edx], 0
lea eax, [esp + 0x48]
push 0x20000000
push 0xffffffffffffffff
push eax
push edi
call dword [0x44af94]
xor ebx, ebx
mov ecx, dword [ebp + 0xc]
mov eax, ecx
neg eax
mov eax, 0
sbb eax, eax
push 0
mov esi, dword [ebp + 0x1c]
push esi
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push eax
push ecx
push edi
call dword [0x44af98]
test eax, eax
je 0x40d123
mov dword [esp + 0x48], 0
lea eax, [esp + 0x48]
push eax
push esi
push dword [ebp + 0x18]
push edi
call dword [0x44afa8]
test eax, eax
je 0x40d121
push 0
push edi
call dword [0x44af9c]
test eax, eax
setne bl
jmp 0x40d123
xor ebx, ebx
jmp 0x40d13e
xor ebx, ebx
jmp 0x40d137
xor ebx, ebx
mov esi, dword [esp]
jmp 0x40d12d
xor ebx, ebx
mov esi, dword [esp]
push edi
call dword [0x44afac]
push dword [esp + 4]
call dword [0x44afac]
push esi
call dword [0x44afac]
mov eax, ebx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret