Function at 0x40ab40
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x1a0
mov eax, dword [0x44993c]
mov dword [esp + 0x18], 0x8b0b951f
mov dword [esp + 0x1c], 0x8f108918
mov dword [esp + 0x20], 0x83188d1a
mov dword [esp + 0x24], 0x87528112
mov dword [esp + 0x28], 0x7b188522
mov dword [esp + 0x2c], 0x7f7879e6
mov dword [esp + 0x30], 0
mov byte [esp + 0x34], 0
mov ecx, 0xe6ff9bed
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [esp + ecx + 0x1900642b]
mov esi, ecx
and esi, edx
add esi, esi
sub edx, esi
add edx, ecx
mov dword [esp + 0x11c], edx
mov edx, dword [esp + 0x11c]
add dl, 0x85
mov byte [esp + ecx + 0x1900642b], dl
cmp ecx, 0xe6ff9c09
je 0x40ac03
movzx edx, byte [esp + ecx + 0x1900642c]
lea esi, [ecx + 1]
and esi, edx
add esi, esi
sub edx, esi
add edx, ecx
inc edx
mov dword [esp + 0x11c], edx
mov edx, dword [esp + 0x11c]
add dl, 0x85
mov byte [esp + ecx + 0x1900642c], dl
add ecx, 2
jmp 0x40aba0
lea esi, [esp + 0x18]
push 0x800
push 0
push esi
call eax
mov ecx, 0x449904
push eax
call fcn.0043aa00
test al, al
je 0x40b124
push 0xd16c9e6b
push dword [0x449904]
call fcn.0043d410
add esp, 8
mov dword [0x44990c], eax
push 0x2b39326b
push dword [0x449904]
call fcn.0043d410
add esp, 8
mov dword [0x449910], eax
push 0x20eddf4
push dword [0x449904]
call fcn.0043d410
add esp, 8
mov dword [0x449914], eax
push 0x6f420210
push dword [0x449904]
call fcn.0043d410
add esp, 8
mov dword [0x449918], eax
push 0xbb4ac2a9
push dword [0x449904]
call fcn.0043d410
add esp, 8
mov dword [0x44991c], eax
push 0xe03c21ff
push dword [0x449904]
call fcn.0043d410
add esp, 8
mov dword [0x449920], eax
push 0xb35fc6e6
push dword [0x449904]
call fcn.0043d410
add esp, 8
mov dword [0x449924], eax
push 0xe3a9b6db
push dword [0x449904]
call fcn.0043d410
add esp, 8
mov dword [0x449928], eax
push 0xe81e9fc0
push dword [0x449904]
call fcn.0043d410
add esp, 8
mov dword [0x44992c], eax
push 0x70f53c13
push dword [0x449904]
call fcn.0043d410
add esp, 8
mov dword [0x449930], eax
push 0xb54b293a
push dword [0x449904]
call fcn.0043d410
add esp, 8
mov dword [0x449934], eax
push 0x9b73555b
push dword [0x449904]
call fcn.0043d410
add esp, 8
mov dword [0x449938], eax
mov eax, 0x4415f4
nop
nop
nop
nop
nop
nop
nop
lea ecx, [esp + 0x11c]
push ecx
mov dword [esp + 0x14], eax
push dword [eax]
call fcn.00435d40
add esp, 8
mov eax, 0xffffffff
nop
nop
nop
nop
nop
cmp byte [esp + eax + 0x11d], 0
lea eax, [eax + 1]
jne 0x40ad70
mov dword [esp + 8], 0
mov edx, esi
test eax, eax
jle 0x40adf0
lea ecx, [esp + eax]
add ecx, 0x11c
xor ebx, ebx
lea edx, [esp + 0x18]
lea edi, [esp + 0x11c]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp byte [edi], 0
je 0x40adf0
lea eax, [esp + 8]
push eax
push ecx
push edi
mov esi, ecx
mov dword [esp + 0x10], edx
call fcn.0040d580
mov edx, dword [esp + 0x10]
add esp, 0xc
movzx ecx, word [esp + 8]
mov word [edx], cx
add edx, 2
cmp ebx, 0x7d
ja 0x40adf0
add edi, eax
inc ebx
cmp edi, esi
mov ecx, esi
jb 0x40adb0
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [edx], 0
lea esi, [esp + 0x18]
push esi
call fcn.0040b490
add esp, 4
test al, al
jne 0x40afa2
mov eax, dword [esp + 0x10]
add eax, 4
cmp eax, 0x441618
jne 0x40ad50
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessVersion]
mov dword [esp + 0xc], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0x63f66188
mov dword [esp + 0x1c], 0x67f665f0
mov dword [esp + 0x20], 0x6bb069fb
mov dword [esp + 0x24], 0x6f416d43
mov dword [esp + 0x28], 0x13861183
mov dword [esp + 0x2c], 0x17f715f1
mov dword [esp + 0x30], 0x1bf919f5
mov dword [esp + 0x34], 0x1ff31df3
mov dword [esp + 0x38], 0x39701ed
mov dword [esp + 0x3c], 0x7ef05ea
mov dword [esp + 0x40], 0xb93099c
mov dword [esp + 0x44], 0xfed0d22
mov dword [esp + 0x48], 0x33df31df
mov dword [esp + 0x4c], 0x37a6351b
mov dword [esp + 0x50], 0x3bd539aa
mov dword [esp + 0x54], 0x3fd73dda
mov dword [esp + 0x58], 0x23c721cc
mov dword [esp + 0x5c], 0x270925b7
mov dword [esp + 0x60], 0x2bfc29ff
mov dword [esp + 0x64], 0x2ff82df9
mov dword [esp + 0x68], 0xd303d101
mov dword [esp + 0x6c], 0xd70fd50d
mov dword [esp + 0x70], 0xdb08d90f
mov dword [esp + 0x74], 0xdf0ddd08
mov dword [esp + 0x78], 0xc313c113
mov dword [esp + 0x7c], 0xc716c51d
mov dword [esp + 0x80], 0xcbcac918
mov byte [esp + 0x8c], 0
mov dword [esp + 0x88], 0
mov dword [esp + 0x84], 0
mov eax, 0x27a3eb0
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ecx, byte [esp + eax - 0x27a3e98]
mov edx, eax
and edx, ecx
add edx, edx
sub ecx, edx
add ecx, eax
mov dword [esp + 0x11c], ecx
mov ecx, dword [esp + 0x11c]
add cl, 0x30
mov byte [esp + eax - 0x27a3e98], cl
cmp eax, 0x27a3f24
je 0x40afe4
movzx ecx, byte [esp + eax - 0x27a3e97]
lea edx, [eax + 1]
and edx, ecx
add edx, edx
sub ecx, edx
add ecx, eax
inc ecx
mov dword [esp + 0x11c], ecx
mov ecx, dword [esp + 0x11c]
add cl, 0x30
mov byte [esp + eax - 0x27a3e97], cl
add eax, 2
jmp 0x40af40
movzx eax, word [esp + 0x18]
test ax, ax
je 0x40b130
mov ecx, 2
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [ecx + 0x44993e], ax
movzx eax, word [esp + ecx + 0x18]
add ecx, 2
test ax, ax
jne 0x40afc0
mov word [ecx + 0x44993e], 0
mov bl, 1
jmp 0x40b126
lea eax, [esp + 0x14]
lea ecx, [esp + 0xc]
lea edi, [esp + 0x18]
push eax
push ecx
push edi
call fcn.0040be10
add esp, 0xc
test al, al
je 0x40b124
mov dword [esp + 0x18], 0xd2c2c2fc
mov dword [esp + 0x1c], 0xcbd515ca
mov dword [esp + 0x20], 0x6393a29
mov dword [esp + 0x24], 0x3b2d2cee
mov dword [esp + 0x28], 0x2c3e2035
mov dword [esp + 0x2c], 0x34342034
mov dword [esp + 0x30], 0x343b2727
mov dword [esp + 0x34], 0x3a233c22
mov word [esp + 0x38], 0x1ff2
mov byte [esp + 0x3a], 0xd2
mov dword [esp + 0x3b], 0
mov dword [esp + 0x3f], 0
mov dword [esp + 0x43], 0
mov byte [esp + 0x47], 0
mov eax, 0x4457cb79
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ecx, byte [esp + eax - 0x4457cb61]
lea edx, [eax - 1]
and edx, ecx
add edx, edx
sub ecx, edx
add ecx, eax
dec ecx
mov dword [esp + 0x11c], ecx
mov ecx, dword [esp + 0x11c]
add cl, 0xb8
mov byte [esp + eax - 0x4457cb61], cl
movzx ecx, byte [esp + eax - 0x4457cb60]
mov edx, eax
and edx, ecx
add edx, edx
sub ecx, edx
add ecx, eax
mov dword [esp + 0x11c], ecx
mov ecx, dword [esp + 0x11c]
add cl, 0xb8
mov byte [esp + eax - 0x4457cb60], cl
add eax, 2
cmp eax, 0x4457cba9
jne 0x40b080
mov ecx, dword [esp + 0xc]
movzx ebx, byte [esp + 0x18]
test bl, bl
je 0x40b13d
mov edx, edi
mov esi, ecx
jmp 0x40b107
movzx ebx, byte [edx]
test bl, bl
je 0x40b13f
mov bh, byte [ecx]
test bh, bh
je 0x40b47a
inc edx
inc ecx
lea eax, [esi + 1]
cmp bh, bl
je 0x40b11e
mov esi, eax
mov ecx, eax
je 0x40b100
mov edx, edi
jmp 0x40b100
xor ebx, ebx
mov eax, ebx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov word [0x449940], 0
mov bl, 1
jmp 0x40b126
mov esi, ecx
test esi, esi
je 0x40b47a
mov dword [esp + 0x18], 0xdbd1141a
mov dword [esp + 0x1c], 0x4f0adbed
mov word [esp + 0x20], 0
mov byte [esp + 0x22], 0
mov dword [esp + 0x11c], 0xe9b8e76f
mov eax, dword [esp + 0x11c]
add al, 0xcd
mov byte [esp + 0x18], al
movzx eax, byte [esp + 0x19]
mov ecx, eax
and ecx, 0x76
add ecx, ecx
neg ecx
add eax, ecx
add eax, 0xe9b8e776
mov dword [esp + 0x11c], eax
mov eax, dword [esp + 0x11c]
add al, 0xcd
mov byte [esp + 0x19], al
movzx eax, byte [esp + 0x1a]
mov ecx, eax
and ecx, 0x77
add ecx, ecx
neg ecx
add eax, ecx
add eax, 0xe9b8e777
mov dword [esp + 0x11c], eax
mov eax, dword [esp + 0x11c]
add al, 0xcd
mov byte [esp + 0x1a], al
movzx eax, byte [esp + 0x1b]
mov ecx, eax
and ecx, 0x78
add ecx, ecx
neg ecx
add eax, ecx
add eax, 0xe9b8e778
mov dword [esp + 0x11c], eax
mov eax, dword [esp + 0x11c]
add al, 0xcd
mov byte [esp + 0x1b], al
movzx eax, byte [esp + 0x1c]
mov ecx, eax
and ecx, 0x79
add ecx, ecx
neg ecx
add eax, ecx
add eax, 0xe9b8e779
mov dword [esp + 0x11c], eax
mov eax, dword [esp + 0x11c]
add al, 0xcd
mov byte [esp + 0x1c], al
movzx eax, byte [esp + 0x1d]
mov ecx, eax
and ecx, 0x7a
add ecx, ecx
neg ecx
add eax, ecx
add eax, 0xe9b8e77a
mov dword [esp + 0x11c], eax
mov eax, dword [esp + 0x11c]
add al, 0xcd
mov byte [esp + 0x1d], al
movzx eax, byte [esp + 0x1e]
mov ecx, eax
and ecx, 0x7b
add ecx, ecx
neg ecx
add eax, ecx
add eax, 0xe9b8e77b
mov dword [esp + 0x11c], eax
mov eax, dword [esp + 0x11c]
add al, 0xcd
mov byte [esp + 0x1e], al
movzx eax, byte [esp + 0x1f]
mov ecx, eax
and ecx, 0x7c
add ecx, ecx
neg ecx
add eax, ecx
add eax, 0xe9b8e77c
mov dword [esp + 0x11c], eax
mov eax, dword [esp + 0x11c]
add al, 0xcd
mov byte [esp + 0x1f], al
movzx eax, byte [esp + 0x20]
mov ecx, eax
and ecx, 0x7d
add ecx, ecx
neg ecx
add eax, ecx
add eax, 0xe9b8e77d
mov dword [esp + 0x11c], eax
mov eax, dword [esp + 0x11c]
add al, 0xcd
mov byte [esp + 0x20], al
movzx eax, byte [esp + 0x21]
mov ecx, eax
and ecx, 0x7e
add ecx, ecx
neg ecx
add eax, ecx
add eax, 0xe9b8e77e
mov dword [esp + 0x11c], eax
mov eax, dword [esp + 0x11c]
add al, 0xcd
mov byte [esp + 0x21], al
movzx eax, byte [esp + 0x22]
lea ecx, [eax + eax]
movzx ecx, cl
neg ecx
add eax, ecx
add eax, 0xe9b8e77f
mov dword [esp + 0x11c], eax
mov eax, dword [esp + 0x11c]
add al, 0xcd
mov byte [esp + 0x22], al
movzx ebx, byte [esp + 0x18]
test bl, bl
je 0x40b354
lea edx, [esp + 0x18]
mov ecx, esi
mov esi, edx
mov edi, ecx
mov dword [esp + 4], ecx
jmp 0x40b337
movzx ebx, byte [esi]
test bl, bl
je 0x40b358
mov bh, byte [edi]
test bh, bh
je 0x40b47a
inc esi
inc edi
lea eax, [ecx + 1]
cmp bh, bl
je 0x40b34e
mov ecx, eax
mov edi, eax
je 0x40b330
mov esi, edx
jmp 0x40b330
mov ecx, esi
jmp 0x40b364
test ecx, ecx
mov esi, dword [esp + 4]
je 0x40b47a
mov byte [ecx], 0
mov ecx, 0xffffffff
nop
nop
nop
nop
cmp byte [esi + ecx + 0x23], 0
lea ecx, [ecx + 1]
jne 0x40b370
test ecx, ecx
je 0x40b3b0
xor edx, edx
jmp 0x40b394
add bl, 0x94
add bl, 0x61
mov byte [esp + edx + 0x11c], bl
inc edx
cmp ecx, edx
je 0x40b3b0
movzx ebx, byte [esi + edx + 0x22]
mov eax, ebx
add al, 0x9f
cmp al, 0x19
ja 0x40b388
movzx eax, bl
add eax, 0xffffffae
cmp eax, 0x1a
jae 0x40b382
mov ebx, eax
jmp 0x40b385
mov byte [esp + ecx + 0x11c], 0
mov eax, 0xffffffff
nop
nop
nop
cmp byte [esp + eax + 0x11d], 0
lea eax, [eax + 1]
jne 0x40b3c0
mov dword [esp + 8], 0
lea edx, [esp + 0x18]
test eax, eax
jle 0x40b433
lea ebx, [esp + eax]
add ebx, 0x11c
xor edi, edi
lea esi, [esp + 0x11c]
lea edx, [esp + 0x18]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp byte [esi], 0
je 0x40b433
lea eax, [esp + 8]
push eax
push ebx
push esi
mov dword [esp + 0x10], edx
call fcn.0040d580
mov edx, dword [esp + 0x10]
add esp, 0xc
movzx ecx, word [esp + 8]
mov word [edx], cx
add edx, 2
cmp edi, 0x3d
ja 0x40b433
add esi, eax
inc edi
cmp esi, ebx
jb 0x40b400
mov word [edx], 0
lea eax, [esp + 0x18]
push eax
call fcn.0040b490
add esp, 4
test al, al
je 0x40b47a
movzx ecx, word [esp + 0x18]
mov eax, 0x449940
test cx, cx
je 0x40b471
lea edx, [esp + 0x1a]
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x40b460
mov word [eax], 0
mov bl, 1
jmp 0x40b47c
xor ebx, ebx
push dword [esp + 0xc]
call fcn.004393d0
add esp, 4
jmp 0x40b126