Function at 0x40eee0
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x54
mov eax, dword [esp + 0xa4]
mov esi, dword [ecx + 0x48]
mov edi, dword [esi + 4]
mov dword [esp + 0x50], edi
test eax, eax
je 0x40ef0e
cmp dword [esi + 0x34], 0
jne 0x40ef0e
mov dword [ecx + 0x1c], 3
jmp 0x40f570
mov dword [esp + 4], esi
mov dword [esp + 0x4c], edx
movzx edx, word [esp + 0x70]
movzx ebp, word [esp + 0x68]
movzx edx, dx
movzx ebx, word [esp + 0x78]
mov dword [esp + 0x44], edx
mov esi, ebp
mov dword [esp + 0x48], ebp
lea esi, [edx + ebp]
add esi, ebx
mov ebp, dword [esp + 0xb0]
xor edx, edx
add esi, ebp
setb dl
add esi, edi
adc edx, 0
add esi, 0x2e
adc edx, 0
cmp esi, 0xffffffff
sbb edx, 0
jb 0x40ef64
mov dword [ecx + 0x1c], 0xf
jmp 0x40f570
mov dword [esp + 0x3c], ebx
mov dword [esp], ecx
movzx edx, word [esp + 0x90]
xorps xmm0, xmm0
movups xmmword [esp + 0x10], xmm0
movups xmmword [esp + 0x20], xmm0
mov word [esp + 0x30], 0
mov dword [esp + 0xc], 0x2014b50
xor ecx, ecx
test dx, dx
mov dword [esp + 8], edi
mov ebx, 0x14
cmove ebx, ecx
mov byte [esp + 0x12], bl
movzx ebx, word [esp + 0x94]
mov byte [esp + 0x14], bl
mov byte [esp + 0x15], bh
movzx ebx, word [esp + 0x9c]
mov byte [esp + 0x16], dl
mov byte [esp + 0x17], dh
movzx edx, word [esp + 0x98]
mov byte [esp + 0x18], dl
mov byte [esp + 0x19], dh
mov edx, dword [esp + 0x8c]
mov byte [esp + 0x1a], bl
mov byte [esp + 0x1b], bh
mov byte [esp + 0x1c], dl
mov byte [esp + 0x1d], dh
mov ebx, edx
shr ebx, 0x10
mov byte [esp + 0x1e], bl
mov esi, dword [esp + 0x88]
shr edx, 0x18
mov byte [esp + 0x1f], dl
mov edi, dword [esp + 0x84]
neg esi
mov edx, 0
sbb edx, edx
or edx, edi
mov byte [esp + 0x20], dl
mov byte [esp + 0x21], dh
mov ebx, edx
shr ebx, 0x10
mov byte [esp + 0x22], bl
mov esi, dword [esp + 0x80]
shr edx, 0x18
mov byte [esp + 0x23], dl
mov edx, dword [esp + 0x7c]
neg esi
mov ebx, 0
sbb ebx, ebx
or ebx, edx
mov byte [esp + 0x24], bl
mov byte [esp + 0x25], bh
mov edx, ebx
shr edx, 0x10
mov byte [esp + 0x26], dl
mov edx, dword [esp + 0xa8]
shr ebx, 0x18
mov byte [esp + 0x27], bl
movzx esi, word [esp + 0x70]
lea ebx, [esi + ebp]
movzx esi, word [esp + 0x68]
mov edi, eax
mov eax, esi
mov byte [esp + 0x28], al
mov byte [esp + 0x29], ah
mov byte [esp + 0x2a], bl
mov byte [esp + 0x2b], bh
movzx ebx, word [esp + 0x78]
mov byte [esp + 0x2c], bl
mov byte [esp + 0x2d], bh
mov byte [esp + 0x32], dl
mov byte [esp + 0x33], dh
mov ebx, edx
shr ebx, 0x10
mov byte [esp + 0x34], bl
mov ebx, dword [esp + 8]
shr edx, 0x18
mov byte [esp + 0x35], dl
neg edi
sbb ecx, ecx
mov eax, dword [esp + 0xa0]
or ecx, eax
mov byte [esp + 0x36], cl
mov byte [esp + 0x37], ch
mov eax, ecx
shr eax, 0x10
mov byte [esp + 0x38], al
shr ecx, 0x18
mov byte [esp + 0x39], cl
lea esi, [ebx + 0x2e]
mov ebp, dword [esp + 4]
mov eax, dword [ebp + 8]
cmp eax, esi
jae 0x40f10e
test eax, eax
mov edi, 1
cmovne edi, eax
cmp edi, esi
jae 0x40f117
mov edx, dword [esp]
nop
mov eax, edi
and eax, 0xfffffffd
mov ecx, edi
and ecx, 2
or edi, 2
imul edi, ecx
xor ecx, 2
imul ecx, eax
add edi, ecx
cmp edi, esi
jb 0x40f0f0
jmp 0x40f11a
mov eax, dword [ebp]
mov dword [esp + 0x40], eax
jmp 0x40f143
mov edx, dword [esp]
push edi
push dword [ebp + 0xc]
push dword [ebp]
push dword [edx + 0x34]
call dword [edx + 0x30]
add esp, 0x10
test eax, eax
mov ecx, ebp
je 0x40f540
mov dword [esp + 0x40], eax
mov dword [ecx], eax
mov dword [ecx + 8], edi
mov ebp, ecx
mov ebx, dword [esp + 8]
mov dword [ebp + 4], esi
mov ecx, dword [ebp + 0xc]
mov edx, ecx
not edx
mov esi, ebx
and esi, edx
mov edi, ebx
not edi
and edi, ecx
imul edi, esi
mov eax, ebp
mov ebp, ebx
mov ebx, ecx
and ebx, ebp
mov esi, ecx
or esi, ebp
mov ebp, eax
imul esi, ebx
add esi, dword [esp + 0x40]
add esi, edi
mov eax, ecx
and eax, 0xffffffd1
and edx, 0x2e
imul edx, eax
mov eax, ecx
and eax, 0x2e
or ecx, 0x2e
imul ecx, eax
add ecx, edx
lea eax, [esp + 0xc]
push ecx
push eax
push esi
call fcn.00416900
add esp, 0xc
mov esi, dword [ebp + 4]
mov eax, dword [ebp + 8]
mov ecx, dword [esp + 0x48]
lea edi, [esi + ecx]
cmp eax, edi
jae 0x40f1de
test eax, eax
mov ebp, 1
cmovne ebp, eax
cmp ebp, edi
jae 0x40f1e4
mov edx, dword [esp]
nop word [eax + eax]
mov eax, ebp
and eax, 0xfffffffd
mov ecx, ebp
and ecx, 2
or ebp, 2
imul ebp, ecx
xor ecx, 2
imul ecx, eax
add ebp, ecx
cmp ebp, edi
jb 0x40f1c0
jmp 0x40f1e7
mov ecx, ebp
mov ebp, eax
jmp 0x40f209
mov edx, dword [esp]
push ebp
mov ebx, dword [esp + 8]
push dword [ebx + 0xc]
push dword [ebx]
push dword [edx + 0x34]
call dword [edx + 0x30]
mov ecx, ebx
add esp, 0x10
test eax, eax
je 0x40f540
mov dword [ecx], eax
mov dword [ecx + 8], ebp
movzx eax, word [esp + 0x68]
mov dword [ecx + 4], edi
test ax, ax
je 0x40f267
mov eax, dword [ecx + 0xc]
mov ebx, ecx
mov ecx, eax
not ecx
mov edx, esi
and edx, ecx
mov edi, esi
not edi
and edi, eax
imul edi, edx
mov edx, eax
and edx, esi
or esi, eax
imul esi, edx
add esi, edi
add esi, dword [ebx]
mov edi, dword [esp + 0x48]
mov edx, edi
not edx
and edx, eax
and ecx, edi
imul ecx, edx
mov edx, eax
and edx, edi
or eax, edi
imul eax, edx
add eax, ecx
push eax
push dword [esp + 0x50]
push esi
call fcn.00416900
add esp, 0xc
mov edi, dword [ebx + 4]
mov ebp, dword [ebx + 8]
mov eax, dword [esp + 0x44]
lea esi, [edi + eax]
cmp ebp, esi
jae 0x40f2ae
test ebp, ebp
mov ebx, 1
cmovne ebx, ebp
cmp ebx, esi
jae 0x40f2b6
mov ebp, dword [esp + 4]
nop word cs:[eax + eax]
mov eax, ebx
and eax, 0xfffffffd
mov ecx, ebx
and ecx, 2
or ebx, 2
imul ebx, ecx
xor ecx, 2
imul ecx, eax
add ebx, ecx
cmp ebx, esi
jb 0x40f290
jmp 0x40f2ba
mov ebx, ebp
mov ebp, dword [esp + 4]
jmp 0x40f2df
mov ebp, dword [esp + 4]
push ebx
push dword [ebp + 0xc]
push dword [ebp]
mov eax, dword [esp + 0xc]
push dword [eax + 0x34]
call dword [eax + 0x30]
add esp, 0x10
test eax, eax
mov ecx, ebp
je 0x40f540
mov dword [ecx], eax
mov dword [ecx + 8], ebx
mov ebp, ecx
movzx eax, word [esp + 0x70]
mov dword [ebp + 4], esi
test ax, ax
je 0x40f33c
mov eax, dword [ebp + 0xc]
mov ecx, eax
not ecx
mov edx, edi
and edx, ecx
mov esi, edi
not esi
and esi, eax
imul esi, edx
mov edx, eax
and edx, edi
or edi, eax
imul edi, edx
add edi, esi
add edi, dword [ebp]
mov esi, dword [esp + 0x44]
mov edx, esi
not edx
and edx, eax
and ecx, esi
imul ecx, edx
mov edx, eax
and edx, esi
or eax, esi
imul eax, edx
add eax, ecx
push eax
push dword [esp + 0x70]
push edi
call fcn.00416900
add esp, 0xc
mov esi, dword [ebp + 4]
mov ebx, dword [ebp + 8]
mov eax, dword [esp + 0xb0]
lea edi, [esi + eax]
cmp ebx, edi
jae 0x40f37e
test ebx, ebx
mov ebp, 1
cmovne ebp, ebx
cmp ebp, edi
jae 0x40f386
mov edx, dword [esp]
nop dword [eax + eax]
mov eax, ebp
and eax, 0xfffffffd
mov ecx, ebp
and ecx, 2
or ebp, 2
imul ebp, ecx
xor ecx, 2
imul ecx, eax
add ebp, ecx
cmp ebp, edi
jb 0x40f360
jmp 0x40f389
mov ebp, ebx
mov ecx, dword [esp + 4]
jmp 0x40f3ab
mov edx, dword [esp]
push ebp
mov ebx, dword [esp + 8]
push dword [ebx + 0xc]
push dword [ebx]
push dword [edx + 0x34]
call dword [edx + 0x30]
mov ecx, ebx
add esp, 0x10
test eax, eax
je 0x40f540
mov dword [ecx], eax
mov dword [ecx + 8], ebp
movzx eax, word [esp + 0x78]
mov dword [ecx + 4], edi
mov ebx, dword [esp + 0xb0]
test ebx, ebx
je 0x40f417
mov eax, dword [ecx + 0xc]
mov ebp, ecx
mov ecx, eax
not ecx
mov edx, esi
and edx, ecx
mov edi, esi
not edi
and edi, eax
imul edi, edx
mov edx, eax
and edx, esi
or esi, eax
imul esi, edx
add esi, edi
add esi, dword [ebp]
mov edx, ebx
not edx
and edx, eax
and ecx, ebx
imul ecx, edx
mov edx, eax
and edx, ebx
or eax, ebx
imul eax, edx
add eax, ecx
push eax
push dword [esp + 0xb0]
push esi
call fcn.00416900
movzx eax, word [esp + 0x84]
add esp, 0xc
mov edi, dword [ebp + 4]
mov ebp, dword [ebp + 8]
mov ebx, dword [esp + 0x3c]
lea esi, [edi + ebx]
cmp ebp, esi
jae 0x40f48e
test ebp, ebp
mov ebx, 1
cmovne ebx, ebp
cmp ebx, esi
jae 0x40f45e
mov ebp, dword [esp + 4]
nop word cs:[eax + eax]
mov eax, ebx
and eax, 0xfffffffd
mov ecx, ebx
and ecx, 2
or ebx, 2
imul ebx, ecx
xor ecx, 2
imul ecx, eax
add ebx, ecx
cmp ebx, esi
jb 0x40f440
jmp 0x40f462
mov ebp, dword [esp + 4]
push ebx
push dword [ebp + 0xc]
push dword [ebp]
mov eax, dword [esp + 0xc]
push dword [eax + 0x34]
call dword [eax + 0x30]
add esp, 0x10
test eax, eax
mov ecx, ebp
je 0x40f540
mov dword [ecx], eax
mov dword [ecx + 8], ebx
mov ebx, dword [esp + 0x3c]
movzx eax, word [esp + 0x78]
mov ebp, dword [esp + 4]
mov dword [ebp + 4], esi
test ax, ax
je 0x40f4e0
mov eax, dword [ebp + 0xc]
mov ecx, eax
not ecx
mov edx, edi
and edx, ecx
mov esi, edi
not esi
and esi, eax
imul esi, edx
mov edx, eax
and edx, edi
or edi, eax
imul edi, edx
add edi, esi
add edi, dword [ebp]
mov edx, ebx
not edx
and edx, eax
and ecx, ebx
imul ecx, edx
mov edx, eax
and edx, ebx
or eax, ebx
imul eax, edx
add eax, ecx
push eax
push dword [esp + 0x78]
push edi
call fcn.00416900
add esp, 0xc
mov esi, dword [ebp + 0x14]
mov eax, dword [ebp + 0x18]
lea edi, [esi + 1]
cmp eax, edi
jae 0x40f57a
test eax, eax
mov ebx, 1
cmovne ebx, eax
cmp ebx, edi
jae 0x40f51c
nop
mov eax, ebx
and eax, 0xfffffffd
mov ecx, ebx
and ecx, 2
or ebx, 2
imul ebx, ecx
xor ecx, 2
imul ecx, eax
add ebx, ecx
cmp ebx, edi
jb 0x40f500
push ebx
push dword [ebp + 0x1c]
push dword [ebp + 0x10]
mov eax, dword [esp + 0xc]
push dword [eax + 0x34]
call dword [eax + 0x30]
add esp, 0x10
test eax, eax
mov ecx, ebp
je 0x40f540
mov dword [ecx + 0x10], eax
mov dword [ecx + 0x18], ebx
mov ebp, ecx
jmp 0x40f57d
mov ebx, dword [esp + 8]
cmp dword [ecx + 8], ebx
mov esi, ecx
mov edi, dword [esp]
jae 0x40f566
push ebx
push dword [esi + 0xc]
push dword [esi]
push dword [edi + 0x34]
call dword [edi + 0x30]
add esp, 0x10
test eax, eax
je 0x40f569
mov dword [esi], eax
mov dword [esi + 8], ebx
mov dword [esi + 4], ebx
mov dword [edi + 0x1c], 0x10
xor eax, eax
add esp, 0x54
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov dword [ebp + 0x14], edi
mov ecx, dword [ebp + 0x1c]
mov edx, ecx
not edx
mov ebx, esi
and ebx, edx
mov edi, esi
not edi
and edi, ecx
imul edi, ebx
mov ebx, ecx
and ebx, esi
or esi, ecx
imul esi, ebx
add esi, eax
add esi, edi
and edx, 1
neg edx
and edx, ecx
and edx, 0xfffffffe
mov eax, ecx
or eax, 1
and ecx, 1
neg ecx
and ecx, eax
add ecx, edx
lea eax, [esp + 0x50]
push ecx
push eax
push esi
call fcn.00416900
add esp, 0xc
mov eax, 1
jmp 0x40f572