Function at 0x40f200
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x8c
mov dword [esp + 4], 0x3a661613
mov dword [esp + 8], 0xe0c706c
lea ebx, [esp + 0xc]
mov byte [esp + 0xc], 0xe4
mov dword [esp + 0xd], 0
mov word [esp + 0x11], 0
xor esi, esi
mov eax, 0xffffffff
nop
nop
nop
nop
nop
nop
nop
mov edx, eax
or edx, 0x2b
mov ecx, esi
or ecx, 0x2b
add ecx, edx
add ecx, esi
inc cl
xor cl, byte [esp + esi + 4]
add cl, 0x29
mov byte [esp + esi + 4], cl
lea ecx, [esi + 1]
dec eax
mov esi, ecx
cmp ecx, 0xf
jne 0x40f240
lea eax, [esp + 0x83]
lea esi, [esp + 4]
mov edx, esi
mov edi, eax
mov ecx, 2
xchg esi, edx
rep movsd dword es:[edi], dword [esi]
xchg esi, edx
lea edi, [esp + 0x8b]
xor ecx, ecx
xchg esi, ebx
rep movsw word es:[edi], word [esi]
xchg esi, ebx
movzx ecx, byte [esp + 0xc]
mov byte [esp + 0x8b], cl
mov dword [esp + 4], 0xc95bcbb1
mov dword [esp + 8], 0xc54ac75a
mov dword [esp + 0xc], 0xc150c35f
mov dword [esp + 0x10], 0xfdadff4c
mov dword [esp + 0x14], 0xf97dfb90
mov dword [esp + 0x18], 0xf56df768
mov dword [esp + 0x1c], 0xf1d2f3b2
mov dword [esp + 0x20], 0xed7eef6f
mov dword [esp + 0x24], 0xe97eeb7c
mov dword [esp + 0x28], 0xe57be77f
mov dword [esp + 0x2c], 0xe16ee37b
mov dword [esp + 0x30], 0x1d8f1f77
mov dword [esp + 0x34], 0x194b1b8e
mov dword [esp + 0x38], 0x15451790
mov dword [esp + 0x3c], 0x119b139d
mov dword [esp + 0x40], 0xd5d0f99
mov dword [esp + 0x44], 0x99b0b96
mov dword [esp + 0x48], 0x5950786
mov dword [esp + 0x4c], 0x1890357
mov dword [esp + 0x50], 0x3daa3f8e
mov dword [esp + 0x54], 0x39a83ba7
mov dword [esp + 0x58], 0x35a737a5
mov dword [esp + 0x5c], 0x31a933a8
mov dword [esp + 0x60], 0x2d1d2fac
mov dword [esp + 0x64], 0x292a2b1a
mov dword [esp + 0x68], 0
mov ecx, 0xd48f8ad3
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edi, byte [esp + ecx + 0x2b707531]
xor edi, ecx
mov edx, edi
xor edx, 0x26cdb620
and edi, 0xd00209df
add edi, edi
sub edi, edx
mov edx, edi
and edx, 1
xor edi, 1
lea edx, [edi + edx*2]
mov byte [esp + ecx + 0x2b707531], dl
inc ecx
cmp ecx, 0xd48f8b3b
jne 0x40f380
mov dword [esp + 0x70], 0x937391a7
mov dword [esp + 0x74], 0xaf57ad5c
mov dword [esp + 0x78], 0xa9a8
mov byte [esp + 0x7c], 0
lea ecx, [esp + 0x70]
mov edi, 0x79eda0a3
nop
nop
nop
movzx ebx, byte [ecx]
mov edx, ebx
xor edx, 0x5679206b
mov ebp, ebx
or ebp, 0x94
and ebp, edx
and ebx, 0x6b
xor ebx, 0x5679206b
or ebx, ebp
mov edx, edi
xor edx, 0xa986df94
mov ebp, ebx
and ebp, edx
add edx, ebx
add ebp, ebp
sub edx, ebp
add dl, 0x34
mov byte [ecx], dl
inc ecx
dec edi
cmp edi, 0x79eda096
jne 0x40f3e0
mov ecx, esp
lea edx, [esp + 0x70]
push 0
push ecx
push 8
push eax
push esi
push edx
push dword [esp + 0xb8]
call fcn.0040ffd0
add esp, 0x1c
test al, al
je 0x40f564
mov word [esp + 4], 0x5e5d
mov byte [esp + 6], 0xca
mov dword [esp + 7], 0
mov eax, 0x507f2933
nop
movzx ecx, byte [esp + eax - 0x507f292f]
mov edi, ecx
xor edi, eax
lea edx, [edi + edi]
not edx
add edx, edi
and edx, eax
add dl, dl
sub cl, dl
movzx ecx, cl
add ecx, eax
inc cl
mov byte [esp + eax - 0x507f292f], cl
inc eax
cmp eax, 0x507f293a
jne 0x40f460
xor ecx, ecx
mov eax, dword [esp]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [eax + ecx]
mov dh, byte [esp + ecx + 4]
test dl, dl
je 0x40f4b1
inc ecx
cmp dl, dh
je 0x40f4a0
mov bl, 1
cmp dl, dh
je 0x40f6e1
mov dword [esp + 4], 0x1b090417
mov dword [esp + 8], 0x9300060d
mov byte [esp + 0xc], 0
mov ecx, 0x7144ab19
mov edx, 0x8ebb54e6
nop
nop
nop
nop
nop
nop
movzx edi, byte [esp + edx + 0x7144ab1e]
lea ebx, [edi + edi]
not ebx
add ebx, edi
lea ebp, [ecx - 0x7144ab00]
or ebp, edx
add ebp, ecx
add ebp, 0x8ebb5501
or ebp, ebx
not edi
and edi, ecx
lea ebx, [edi + edi]
not ebx
add ebx, edi
and ebx, ebp
add bl, 0x82
mov byte [esp + edx + 0x7144ab1e], bl
dec ecx
inc edx
cmp ecx, 0x7144ab10
jne 0x40f4e0
movzx ebx, byte [esp + 4]
mov ecx, eax
test bl, bl
je 0x40f56b
mov edx, esi
mov edi, eax
mov ecx, eax
jmp 0x40f547
movzx ebx, byte [edx]
test bl, bl
je 0x40f56b
mov bh, byte [edi]
test bh, bh
je 0x40f6df
inc edx
inc edi
lea ebp, [ecx + 1]
cmp bh, bl
je 0x40f55e
mov ecx, ebp
mov edi, ebp
je 0x40f540
mov edx, esi
jmp 0x40f540
xor ebx, ebx
jmp 0x40f6ea
xor edx, edx
test ecx, ecx
je 0x40f6df
mov dword [esp + 4], 0x3e073006
mov dword [esp + 8], 0x33fffd9
mov dword [esp + 0xc], 0xfbf8320f
mov dword [esp + 0x10], 0x1a12241a
mov dword [esp + 0x14], 0x83e0c42d
mov word [esp + 0x18], 0
mov byte [esp + 0x1a], 0
nop
nop
nop
nop
nop
nop
nop
mov ecx, edx
add cl, 0x24
xor cl, byte [esp + edx + 4]
add cl, 0x4c
mov byte [esp + edx + 4], cl
inc edx
cmp edx, 0x17
jne 0x40f5b0
movzx edx, byte [esp + 4]
mov ebx, eax
test dl, dl
je 0x40f604
lea ebp, [esp + 4]
mov esi, ebp
mov edi, eax
mov ebx, eax
jmp 0x40f5e7
movzx edx, byte [esi]
test dl, dl
je 0x40f604
mov dh, byte [edi]
test dh, dh
je 0x40f6df
inc esi
inc edi
lea ecx, [ebx + 1]
cmp dh, dl
je 0x40f5fe
mov ebx, ecx
mov edi, ecx
je 0x40f5e0
mov esi, ebp
jmp 0x40f5e0
xor edx, edx
test ebx, ebx
je 0x40f6df
mov edi, ebx
mov word [esp + 4], 0xd9f2
mov byte [esp + 6], 0x1a
mov word [esp + 7], 0
mov byte [esp + 9], 0
xor ebx, ebx
nop
nop
nop
nop
nop
nop
mov ecx, ebx
xor ecx, 0xf6be4ffc
mov esi, edx
and esi, 6
sub esi, ecx
mov ecx, esi
and ecx, 0xb
xor esi, 0xfb
lea ecx, [esi + ecx*2]
add cl, 0xfc
xor cl, byte [esp + ebx + 4]
add cl, 0x19
mov byte [esp + ebx + 4], cl
inc ebx
add edx, 2
cmp ebx, 6
jne 0x40f630
mov ecx, edi
add ecx, 0x13
movzx ebx, byte [esp + 4]
test bl, bl
je 0x40f6b1
lea esi, [esp + 4]
mov edi, esi
mov ebp, ecx
mov dword [esp + 0x6c], ecx
mov edx, ecx
jmp 0x40f697
movzx ebx, byte [edi]
test bl, bl
je 0x40f6b5
mov bh, byte [ebp]
test bh, bh
je 0x40f6df
inc edi
inc ebp
lea ecx, [edx + 1]
cmp bh, bl
je 0x40f6ab
mov edx, ecx
mov ebp, ecx
je 0x40f690
mov edi, esi
jmp 0x40f690
mov edx, ecx
jmp 0x40f6bd
test edx, edx
mov ecx, dword [esp + 0x6c]
je 0x40f6df
mov byte [0x44e8ac], 1
push edx
push ecx
push 0x100
push 0x44e8ae
call fcn.0040ef90
add esp, 0x10
mov eax, dword [esp]
mov bl, 1
jmp 0x40f6e1
xor ebx, ebx
push eax
call fcn.0043e100
add esp, 4
mov eax, ebx
add esp, 0x8c
pop esi
pop edi
pop ebx
pop ebp
ret