Function at 0x401df0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x200
push ebx
push ebp
push esi
mov ebp, ecx
mov dword [esp + 0xc], 0xb22012ff
push edi
mov dword [esp + 0x14], 0x4798c43f
mov ecx, 0xff
mov dword [esp + 0x18], 0x4a70b12a
mov dword [esp + 0x1c], 0xa2814bdf
mov dword [esp + 0x20], 0x9c133f70
mov dword [esp + 0x24], 0xd106de5e
mov dword [esp + 0x28], 0x79ddff98
mov dword [esp + 0x2c], 0x7b84afcb
mov dword [esp + 0x30], 0xb03440f0
mov dword [esp + 0x34], 0xc9011eb2
mov dword [esp + 0x38], 0xcc2a032f
mov dword [esp + 0x3c], 0xf6e686b9
mov dword [esp + 0x40], 0x2f61273c
mov dword [esp + 0x44], 0x8ac42894
mov dword [esp + 0x48], 0x322b7320
mov dword [esp + 0x4c], 0x1a94d15
mov dword [esp + 0x50], 0x1ebbabb
mov dword [esp + 0x54], 0xbd6c064d
mov dword [esp + 0x58], 0x103a0f04
mov dword [esp + 0x5c], 0x852117cf
mov dword [esp + 0x60], 0x447fe0e8
mov dword [esp + 0x64], 0x32223dde
mov dword [esp + 0x68], 0xd22b36d
mov dword [esp + 0x6c], 0x4afde0da
mov dword [esp + 0x70], 0xf6c5c7f5
mov dword [esp + 0x74], 0x7cd5d7c7
mov dword [esp + 0x78], 0xca473b22
mov dword [esp + 0x7c], 0x77bcb6b6
mov dword [esp + 0x80], 0xf436da59
mov dword [esp + 0x84], 0xa8aabe8b
mov dword [esp + 0x88], 0x920c6536
mov dword [esp + 0x8c], 0xe4dfc022
mov dword [esp + 0x90], 0x21375589
mov dword [esp + 0x94], 0xa9ad0a8a
mov dword [esp + 0x98], 0x12d27978
mov dword [esp + 0x9c], 0xb09a30c6
mov dword [esp + 0xa0], 0x371f3610
mov dword [esp + 0xa4], 0x2c7bdae6
mov dword [esp + 0xa8], 0xb8f3b9a0
mov dword [esp + 0xac], 0x47473626
mov dword [esp + 0xb0], 0xc5767489
mov dword [esp + 0xb4], 0x72a0c1e0
mov dword [esp + 0xb8], 0xb3f85f91
mov dword [esp + 0xbc], 0xd1ed1a9c
mov dword [esp + 0xc0], 0x40fb825e
mov dword [esp + 0xc4], 0x3db448ec
mov dword [esp + 0xc8], 0xda1c62aa
mov dword [esp + 0xcc], 0xe1d2c9e6
mov dword [esp + 0xd0], 0x69044754
mov dword [esp + 0xd4], 0xde97416e
mov dword [esp + 0xd8], 0x609455f8
mov dword [esp + 0xdc], 0x262c6307
mov dword [esp + 0xe0], 0xfe1fe125
mov dword [esp + 0xe4], 0x4185e7b2
mov dword [esp + 0xe8], 0x3f33d960
mov dword [esp + 0xec], 0xd185d28f
mov dword [esp + 0xf0], 0x7eb3e664
mov dword [esp + 0xf4], 0xd3536b54
mov dword [esp + 0xf8], 0xdb81b7fe
mov dword [esp + 0xfc], 0xe407b0a7
mov dword [esp + 0x100], 0x1649373
mov dword [esp + 0x104], 0xe99d08eb
mov dword [esp + 0x108], 0x6e496ae2
mov dword [esp + 0x10c], 0xca3f7e00
lea ecx, [ecx]
mov al, byte [esp + ecx + 0xf]
xor byte [esp + ecx + 0x10], al
sub ecx, 1
jne 0x402070
mov al, byte [esp + 0x10f]
xor byte [esp + 0x10], al
lea eax, [esp + 0x110]
push 0x100
push ecx
push eax
call fcn.00401c00
add esp, 0xc
xor esi, esi
xor eax, eax
mov byte [esp + eax + 0x110], al
inc eax
cmp eax, 0x100
jb 0x4020a2
xor ebx, ebx
mov dl, byte [esp + ebx + 0x110]
movzx eax, bl
movzx ecx, dl
movzx eax, byte [esp + eax + 0x10]
add eax, esi
add ecx, eax
movzx esi, cl
mov al, byte [esp + esi + 0x110]
mov byte [esp + ebx + 0x110], al
inc ebx
mov byte [esp + esi + 0x110], dl
cmp ebx, 0x100
jb 0x4020b3
xor edi, edi
xor ebx, ebx
xor esi, esi
lea eax, [edi + 1]
movzx edi, al
mov cl, byte [esp + edi + 0x110]
movzx edx, cl
lea eax, [ebx + edx]
movzx ebx, al
movzx eax, byte [esp + ebx + 0x110]
mov byte [esp + edi + 0x110], al
mov byte [esp + ebx + 0x110], cl
movzx eax, byte [esp + edi + 0x110]
add eax, edx
movzx eax, al
movzx eax, byte [esp + eax + 0x110]
xor byte [esi + section..data], al
inc esi
cmp esi, 0x345200
jb 0x4020f0
pop edi
pop esi
mov dword [ebp], section..data
pop ebp
pop ebx
add esp, 0x200
ret