Function at 0x40ad00
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x18c
mov eax, dword [0x43fbd0]
mov dword [esp + 0xc], 0x97d0b85
mov dword [esp + 0x10], 0x57e077a
mov dword [esp + 0x14], 0x18e0388
mov dword [esp + 0x18], 0x1d2c1f70
mov dword [esp + 0x1c], 0x196e1b60
mov dword [esp + 0x20], 0x1516176c
mov dword [esp + 0x24], 0
mov dword [esp], 0
mov ecx, dword [esp]
cmp ecx, 0x1b
ja 0x40ad96
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [esp]
mov edx, dword [esp]
movzx edx, byte [esp + edx + 0xc]
add ecx, 0xced2f783
xor ecx, edx
mov dword [esp + 0x10c], ecx
mov ecx, dword [esp + 0x10c]
add cl, 0x71
mov edx, dword [esp]
mov byte [esp + edx + 0xc], cl
inc dword [esp]
mov ecx, dword [esp]
cmp ecx, 0x1c
jb 0x40ad60
lea esi, [esp + 0xc]
push 0x800
push 0
push esi
call eax
mov ecx, 0x43fb98
push eax
call fcn.00432fa0
xor ebx, ebx
test al, al
je 0x40b46a
push 0xe2bceb04
push dword [0x43fb98]
call fcn.004350c0
add esp, 8
mov dword [0x43fba0], eax
push 0x248106fa
push dword [0x43fb98]
call fcn.004350c0
add esp, 8
mov dword [0x43fba4], eax
push 0x89b8457d
push dword [0x43fb98]
call fcn.004350c0
add esp, 8
mov dword [0x43fba8], eax
push 0x44f824fb
push dword [0x43fb98]
call fcn.004350c0
add esp, 8
mov dword [0x43fbac], eax
push 0xf072343c
push dword [0x43fb98]
call fcn.004350c0
add esp, 8
mov dword [0x43fbb0], eax
push 0x638f2392
push dword [0x43fb98]
call fcn.004350c0
add esp, 8
mov dword [0x43fbb4], eax
push 0xd711af57
push dword [0x43fb98]
call fcn.004350c0
add esp, 8
mov dword [0x43fbb8], eax
push 0x1ad145e2
push dword [0x43fb98]
call fcn.004350c0
add esp, 8
mov dword [0x43fbbc], eax
push 0xedb83653
push dword [0x43fb98]
call fcn.004350c0
add esp, 8
mov dword [0x43fbc0], eax
push 0xe9e47300
push dword [0x43fb98]
call fcn.004350c0
add esp, 8
mov dword [0x43fbc4], eax
push 0x6b702a5b
push dword [0x43fb98]
call fcn.004350c0
add esp, 8
mov dword [0x43fbc8], eax
push 0xc135ffae
push dword [0x43fb98]
call fcn.004350c0
add esp, 8
mov dword [0x43fbcc], eax
lea edi, [esp + 0x10b]
lea eax, [esp + 0x10c]
push eax
push dword [ebx + 0x4383e4]
call fcn.0042f000
add esp, 8
mov ebp, edi
nop
nop
nop
nop
nop
nop
nop
nop
cmp byte [ebp + 1], 0
lea ebp, [ebp + 1]
jne 0x40af00
mov dword [esp], 0
mov eax, esi
lea ecx, [esp + 0x10c]
cmp ecx, ebp
jae 0x40af81
xor esi, esi
lea edi, [esp + 0x10c]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp byte [edi], 0
je 0x40af70
mov eax, esp
push eax
push ebp
push edi
call fcn.0040d410
add esp, 0xc
movzx edx, word [esp]
lea ecx, [esi + 2]
mov word [esp + esi + 0xc], dx
cmp esi, 0xfb
ja 0x40af5e
add edi, eax
mov esi, ecx
cmp edi, ebp
jb 0x40af30
lea eax, [esp + ecx]
add eax, 0xc
jmp 0x40af76
lea eax, [esp + esi]
add eax, 0xc
lea esi, [esp + 0xc]
lea edi, [esp + 0x10b]
mov word [eax], 0
push esi
call fcn.0040b480
add esp, 4
test al, al
jne 0x40b1d8
add ebx, 4
cmp ebx, 0x24
jne 0x40aee0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0x49c64bd4
mov dword [esp + 0x10], 0x45d647c4
mov dword [esp + 0x14], 0x418443c9
mov dword [esp + 0x18], 0x7daf7f91
mov dword [esp + 0x1c], 0x79f67bf1
mov dword [esp + 0x20], 0x75e977e3
mov dword [esp + 0x24], 0x71ef73e7
mov dword [esp + 0x28], 0x6dfd6fe1
mov dword [esp + 0x2c], 0x69e16bff
mov dword [esp + 0x30], 0x65f167fa
mov dword [esp + 0x34], 0x61e563e8
mov dword [esp + 0x38], 0x1d831fb2
mov dword [esp + 0x3c], 0x19891b8d
mov dword [esp + 0x40], 0x158617c9
mov dword [esp + 0x44], 0x1183139a
mov dword [esp + 0x48], 0xd990f8a
mov dword [esp + 0x4c], 0x9910b98
mov dword [esp + 0x50], 0x5d70785
mov dword [esp + 0x54], 0x1c803cd
mov dword [esp + 0x58], 0x3df43fcb
mov dword [esp + 0x5c], 0x39f53bf3
mov dword [esp + 0x60], 0x35f137ff
mov dword [esp + 0x64], 0x31fc33fd
mov dword [esp + 0x68], 0x2de32ffc
mov dword [esp + 0x6c], 0x29e52be1
mov dword [esp + 0x70], 0x25f627ef
mov dword [esp + 0x74], 0x212223f4
mov dword [esp + 0x78], 0
mov dword [esp], 0
mov eax, dword [esp]
cmp eax, 0x6f
ja 0x40b0e4
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp]
mov ecx, dword [esp]
movzx ecx, byte [esp + ecx + 0xc]
add eax, 0x6cfe0593
xor eax, ecx
mov dword [esp + 0x10c], eax
mov eax, dword [esp + 0x10c]
add al, 0x21
mov ecx, dword [esp]
mov byte [esp + ecx + 0xc], al
inc dword [esp]
mov eax, dword [esp]
cmp eax, 0x70
jb 0x40b0b0
lea eax, [esp + 8]
lea ecx, [esp + 4]
lea edi, [esp + 0xc]
push eax
push ecx
push edi
call fcn.0040ba60
add esp, 0xc
test al, al
je 0x40b468
mov dword [esp + 0xc], 0x72828254
mov dword [esp + 0x10], 0x8b7d3d8a
mov dword [esp + 0x14], 0x5e898a79
mov dword [esp + 0x18], 0x9b656426
mov dword [esp + 0x1c], 0x6496609d
mov dword [esp + 0x20], 0x9c9c609c
mov dword [esp + 0x24], 0x6c6b9f9f
mov dword [esp + 0x28], 0x5aa354a2
mov dword [esp + 0x2c], 0x327712
mov dword [esp], 0
mov eax, dword [esp]
cmp eax, 0x23
ja 0x40b194
nop
nop
nop
nop
nop
nop
mov eax, dword [esp]
mov ecx, dword [esp]
movzx ecx, byte [esp + ecx + 0xc]
add eax, 0xf1e15184
xor eax, ecx
mov dword [esp + 0x10c], eax
mov eax, dword [esp + 0x10c]
add al, 0x6c
mov ecx, dword [esp]
mov byte [esp + ecx + 0xc], al
inc dword [esp]
mov eax, dword [esp]
cmp eax, 0x24
jb 0x40b160
mov ecx, dword [esp + 4]
movzx ebx, byte [esp + 0xc]
test bl, bl
je 0x40b25e
mov edx, edi
mov ebp, ecx
jmp 0x40b1bb
movzx ebx, byte [edx]
test bl, bl
je 0x40b260
mov bh, byte [ecx]
test bh, bh
je 0x40b45c
inc ecx
inc edx
lea esi, [ebp + 1]
cmp bh, bl
je 0x40b1d2
mov ebp, esi
mov ecx, esi
je 0x40b1b0
mov edx, edi
jmp 0x40b1b0
movzx eax, word [esp + 0xc]
test ax, ax
je 0x40b20f
mov ecx, 2
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [ecx + 0x43fbd2], ax
movzx eax, word [esp + ecx + 0xc]
add ecx, 2
test ax, ax
jne 0x40b1f0
mov word [ecx + 0x43fbd2], 0
jmp 0x40b218
mov word [0x43fbd4], 0
push 0
push 0
call dword [sym.imp.ole32.dll_CoInitializeEx]
test eax, eax
js 0x40b468
push 0
push 0
push 0
push 3
push 0
push 0
push 0
push 0xffffffffffffffff
push 0
call dword [sym.imp.ole32.dll_CoInitializeSecurity]
test eax, eax
js 0x40b468
push 0x43fb74
call fcn.0042e490
add esp, 4
mov bl, 1
jmp 0x40b46a
mov ebp, ecx
test ebp, ebp
je 0x40b45c
mov dword [esp + 0xc], 0x59471a08
mov dword [esp + 0x10], 0xc5045557
mov word [esp + 0x14], 0
mov byte [esp + 0x16], 0
mov dword [esp], 0
mov ecx, dword [esp]
cmp ecx, 0xa
ja 0x40b2d6
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [esp]
mov edx, dword [esp]
movzx edx, byte [esp + edx + 0xc]
add ecx, 0xfdd574b3
xor ecx, edx
mov dword [esp + 0x10c], ecx
mov ecx, dword [esp + 0x10c]
add cl, 0x81
mov edx, dword [esp]
mov byte [esp + edx + 0xc], cl
inc dword [esp]
mov ecx, dword [esp]
cmp ecx, 0xb
jb 0x40b2a0
movzx edx, byte [esp + 0xc]
mov ecx, ebp
test dl, dl
je 0x40b314
lea eax, [esp + 0xc]
mov edi, eax
mov ebx, ebp
mov ecx, ebp
jmp 0x40b2f7
movzx edx, byte [edi]
test dl, dl
je 0x40b314
mov dh, byte [ebx]
test dh, dh
je 0x40b45c
inc ebx
inc edi
lea esi, [ecx + 1]
cmp dh, dl
je 0x40b30e
mov ecx, esi
mov ebx, esi
je 0x40b2f0
mov edi, eax
jmp 0x40b2f0
test ecx, ecx
je 0x40b45c
mov byte [ecx], 0
mov ecx, 0xffffffff
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp byte [ebp + ecx + 0x23], 0
lea ecx, [ecx + 1]
jne 0x40b330
test ecx, ecx
je 0x40b385
xor edx, edx
jmp 0x40b366
mov eax, ebx
and eax, 1
or ebx, 0x61
add ebx, eax
mov byte [esp + edx + 0x10c], bl
inc edx
cmp ecx, edx
je 0x40b385
movzx ebx, byte [ebp + edx + 0x22]
mov eax, ebx
add al, 0x9f
cmp al, 0x19
ja 0x40b35a
movzx esi, bl
lea ebx, [esi - 0x52]
cmp ebx, 0x1a
jb 0x40b350
add esi, 0xffffff94
mov ebx, esi
jmp 0x40b350
mov byte [esp + ecx + 0x10c], 0
lea ebx, [esp + 0x10b]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp byte [ebx + 1], 0
lea ebx, [ebx + 1]
jne 0x40b3a0
mov dword [esp], 0
lea edi, [esp + 0xc]
lea ebp, [esp + 0x10c]
mov eax, edi
cmp ebp, ebx
jae 0x40b3fd
xor esi, esi
cmp byte [ebp], 0
je 0x40b3f7
mov eax, esp
push eax
push ebx
push ebp
call fcn.0040d410
add esp, 0xc
movzx edx, word [esp]
lea ecx, [esi + 2]
mov word [esp + esi + 0xc], dx
cmp esi, 0x7b
ja 0x40b3ef
add ebp, eax
mov esi, ecx
cmp ebp, ebx
jb 0x40b3c3
lea eax, [esp + ecx]
add eax, 0xc
jmp 0x40b3fd
lea eax, [esp + esi]
add eax, 0xc
mov word [eax], 0
push edi
call fcn.0040b480
add esp, 4
test al, al
je 0x40b45c
mov ebx, eax
movzx ecx, word [esp + 0xc]
mov eax, 0x43fbd4
test cx, cx
je 0x40b441
lea edx, [esp + 0xe]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x40b430
mov word [eax], 0
push dword [esp + 4]
call fcn.00431bc0
add esp, 4
test bl, bl
jne 0x40b218
jmp 0x40b468
push dword [esp + 4]
call fcn.00431bc0
add esp, 4
xor ebx, ebx
mov eax, ebx
add esp, 0x18c
pop esi
pop edi
pop ebx
pop ebp
ret