Function at 0x40ee60
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x88
mov dword [esp + 8], 0xc2faeee9
mov dword [esp + 0xc], 0xe6f8f4f0
lea ebx, [esp + 0x10]
mov dword [esp + 0x10], 0
mov eax, 0xe11003c2
nop
nop
nop
nop
nop
movzx ecx, byte [esp + eax + 0x1eeffc46]
mov esi, eax
and esi, ecx
add esi, esi
sub ecx, esi
add ecx, eax
mov esi, ecx
and esi, 0x35
xor ecx, 0x35
lea ecx, [ecx + esi*2]
inc cl
mov byte [esp + eax + 0x1eeffc46], cl
inc eax
cmp eax, 0xe11003ce
jne 0x40ee90
lea eax, [esp + 0x7f]
lea esi, [esp + 8]
mov ebp, esi
mov ecx, 2
mov edi, eax
xchg esi, ebp
rep movsd dword es:[edi], dword [esi]
xchg esi, ebp
lea edi, [esp + 0x87]
xor ecx, ecx
xchg esi, ebx
rep movsw word es:[edi], word [esi]
xchg esi, ebx
movzx ecx, byte [esp + 0x10]
mov byte [esp + 0x87], cl
mov dword [esp + 8], 0x1fad195f
mov dword [esp + 0xc], 0x63d61dae
mov dword [esp + 0x10], 0x67d461c5
mov dword [esp + 0x14], 0x6b0765d0
mov dword [esp + 0x18], 0x6fd7693c
mov dword [esp + 0x1c], 0x73d76ddc
mov dword [esp + 0x20], 0x7716710e
mov dword [esp + 0x24], 0x7bca75d5
mov dword [esp + 0x28], 0x7fd279c8
mov dword [esp + 0x2c], 0x43e57dd5
mov dword [esp + 0x30], 0x47f241e1
mov dword [esp + 0x34], 0x4bf945ed
mov dword [esp + 0x38], 0x4f3d49fa
mov dword [esp + 0x3c], 0x533f4df4
mov dword [esp + 0x40], 0x57ed51eb
mov dword [esp + 0x44], 0x5b3755ef
mov dword [esp + 0x48], 0x5fed59f2
mov dword [esp + 0x4c], 0xa30f5dea
mov dword [esp + 0x50], 0xa713a1cd
mov dword [esp + 0x54], 0xab06a512
mov dword [esp + 0x58], 0xaf1ca90d
mov dword [esp + 0x5c], 0xb301ad0b
mov dword [esp + 0x60], 0xb713b114
mov dword [esp + 0x64], 0xbbb7b510
mov dword [esp + 0x68], 0xbfbeb9b6
mov dword [esp + 0x6c], 0
mov ecx, 0x7288180f
mov edi, 0xe510301e
nop
nop
nop
nop
nop
mov ebp, ecx
xor ebp, 0xd5
mov ebx, edi
and ebx, 0x54
sub ebx, ebp
xor bl, byte [esp + ecx - 0x72881807]
add bl, 0xde
mov byte [esp + ecx - 0x72881807], bl
inc ecx
add edi, 2
cmp ecx, 0x72881877
jne 0x40efd0
mov dword [esp + 0x70], 0x3f9f39eb
mov dword [esp + 0x74], 0x238b3dac
mov dword [esp + 0x78], 0x2120
mov ecx, 0x56c69dca
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [esp + ecx - 0x56c69d5a]
mov ebx, edx
and ebx, ecx
add bl, bl
sub dl, bl
movzx edx, dl
add edx, ecx
add dl, 0xe
mov byte [esp + ecx - 0x56c69d5a], dl
inc ecx
cmp ecx, 0x56c69dd6
jne 0x40f020
lea ecx, [esp + 4]
lea edx, [esp + 0x70]
push 0
push ecx
push 8
push eax
push esi
push edx
push dword [esp + 0xb4]
call int.0040fd50
add esp, 0x1c
test al, al
je 0x40f1a4
mov dword [esp + 8], 0x32aaa7
mov eax, 0x5b57494c
mov ecx, 0xb3
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [esp + eax - 0x5b574944]
lea ebx, [edx + edx]
not ebx
add ebx, edx
mov edi, ebx
xor edi, edx
not edi
add edi, ebx
and ebx, edx
sub edi, ebx
and edi, eax
mov ebp, ecx
and ebp, 1
mov ebx, eax
and ebx, 6
or ebx, ebp
xor ebx, 6
or ebx, ecx
and ebx, edx
or ebx, edi
mov edx, ebx
not edx
and edx, 0x7d
and ebx, 0x82
sub ebx, edx
inc bl
mov byte [esp + eax - 0x5b574944], bl
inc eax
dec ecx
cmp eax, 0x5b574950
jne 0x40f090
xor ecx, ecx
mov eax, dword [esp + 4]
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [eax + ecx]
mov dh, byte [esp + ecx + 8]
test dl, dl
je 0x40f101
inc ecx
cmp dl, dh
je 0x40f0f0
mov bl, 1
cmp dl, dh
je 0x40f390
mov dword [esp + 8], 0x65aba899
mov dword [esp + 0xc], 0xf55c625b
mov byte [esp + 0x10], 0
mov ecx, 0x9f452a02
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edi, byte [esi]
mov edx, ecx
or edx, edi
lea ebx, [ecx + 0x60bad600]
and ebx, edi
not edx
or edx, ebx
mov edi, edx
xor edi, 0xf2
and edx, 0xd
add edx, edx
sub edx, edi
inc dl
mov byte [esi], dl
inc esi
dec ecx
cmp ecx, 0x9f4529f9
jne 0x40f130
movzx ebx, byte [esp + 8]
mov ecx, eax
test bl, bl
je 0x40f1ab
lea edx, [esp + 8]
mov esi, edx
mov edi, eax
mov ecx, eax
jmp 0x40f187
movzx ebx, byte [esi]
test bl, bl
je 0x40f1ab
mov bh, byte [edi]
test bh, bh
je 0x40f38e
inc esi
inc edi
lea ebp, [ecx + 1]
cmp bh, bl
je 0x40f19e
mov ecx, ebp
mov edi, ebp
je 0x40f180
mov esi, edx
jmp 0x40f180
xor ebx, ebx
jmp 0x40f399
test ecx, ecx
je 0x40f38e
mov dword [esp + 8], 0x56a1aca2
mov dword [esp + 0xc], 0x6151112f
mov dword [esp + 0x10], 0x19145a65
mov dword [esp + 0x14], 0x6a56586e
mov dword [esp + 0x18], 0xe11c205b
mov ecx, 0x369809fd
mov edx, 2
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx esi, byte [esp + ecx - 0x369809f5]
mov edi, edx
xor edi, ecx
and edi, esi
xor edi, ecx
add edi, 0x8242d6eb
mov esi, edi
and esi, 0xef07ce0e
xor edi, 0xef07ce0e
lea esi, [edi + esi*2]
mov edi, esi
and edi, 0x15
xor esi, 0x15
lea ebx, [esi + edi*2]
inc bl
mov byte [esp + ecx - 0x369809f5], bl
inc ecx
dec edx
cmp ecx, 0x36980a11
jne 0x40f1f0
movzx ebx, byte [esp + 8]
mov ecx, eax
test bl, bl
je 0x40f274
lea edx, [esp + 8]
mov esi, edx
mov edi, eax
mov ecx, eax
jmp 0x40f257
movzx ebx, byte [esi]
test bl, bl
je 0x40f274
mov bh, byte [edi]
test bh, bh
je 0x40f38e
inc esi
inc edi
lea ebp, [ecx + 1]
cmp bh, bl
je 0x40f26e
mov ecx, ebp
mov edi, ebp
je 0x40f250
mov esi, edx
jmp 0x40f250
test ecx, ecx
je 0x40f38e
mov dword [esp], ecx
mov word [esp + 8], 0x2fc2
mov byte [esp + 0xa], 0xe2
mov dword [esp + 0xb], 0
mov edx, 0xbf7d2c87
mov esi, 0x7efa590e
nop
nop
nop
movzx ecx, byte [esp + edx + 0x4082d381]
mov edi, esi
and edi, 0x78021110
mov ebx, edx
xor ebx, 0xbc031ba8
lea ebp, [ebx + edi]
add edi, ebx
add edi, 0x4082d379
and edi, ecx
lea ebx, [ecx + ebp]
add ebx, 0x4082d379
add edi, edi
sub ebx, edi
add ebx, 0x53f075b7
mov ecx, ebx
xor ecx, 0xfffffffe
mov edi, ebx
or edi, 1
and edi, ecx
mov ecx, edi
and ecx, 0xfd
mov ebp, edi
and ebp, 2
or edi, 2
imul edi, ebp
xor ebp, 2
imul ebp, ecx
xor ebx, 1
add ebx, edi
add ebx, ebp
mov byte [esp + edx + 0x4082d381], bl
inc edx
add esi, 2
cmp edx, 0xbf7d2c8e
jne 0x40f2a0
mov ecx, dword [esp]
add ecx, 0x13
movzx ebx, byte [esp + 8]
test bl, bl
je 0x40f360
lea esi, [esp + 8]
mov edi, esi
mov edx, ecx
mov dword [esp], ecx
jmp 0x40f347
movzx ebx, byte [edi]
test bl, bl
je 0x40f364
mov bh, byte [ecx]
test bh, bh
je 0x40f38e
inc edi
inc ecx
lea ebp, [edx + 1]
cmp bh, bl
je 0x40f35a
mov edx, ebp
mov ecx, ebp
je 0x40f340
mov edi, esi
jmp 0x40f340
mov edx, ecx
jmp 0x40f36b
test edx, edx
mov ecx, dword [esp]
je 0x40f38e
mov byte [0x44fa08], 1
push edx
push ecx
push 0x100
push 0x44fa0a
call fcn.0040ebe0
add esp, 0x10
mov eax, dword [esp + 4]
mov bl, 1
jmp 0x40f390
xor ebx, ebx
push eax
call fcn.0043da70
add esp, 4
mov eax, ebx
add esp, 0x88
pop esi
pop edi
pop ebx
pop ebp
ret