Function at 0x40d270
Capabilities:
Check for peb beingdebugged flag
Encode data using xor

Disassembly:
push 0xffffffffffffffff
push 0x43ef01
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x41c
push ebx
push ebp
mov ebp, ecx
push esi
push edi
lea ecx, [esp + 0x10]
call sub.MFC42.DLL_CString::CString_3
lea ecx, [esp + 0x18]
mov dword [esp + 0x434], 0
call sub.MFC42.DLL_CString::CString_3
mov edi, dword [esp + 0x444]
mov ebx, dword [0x45c1a4]
push edi
lea eax, [esp + 0x14]
push str._03d
push eax
mov byte [esp + 0x440], 1
lea ebx, [ebx + ebx*4]
call sub.MFC42.DLL_CString::Format
mov eax, dword [esp + 0x1c]
add bl, byte [esp + 0x448]
mov esi, 7
add esp, 0xc
mov cl, byte [eax]
mov dl, byte [eax + 1]
mov al, byte [eax + 2]
add bl, 0x30
mov byte [esp + 0x24], dl
mov byte [esp + 0x28], al
mov byte [esp + 0x20], cl
mov byte [esp + 0x2e], bl
mov bl, byte [esp + 0x440]
mov byte [esp + 0x30], cl
mov ecx, dword [esp + 0x24]
mov byte [esp + 0x32], al
mov eax, dword [esp + 0x28]
mov byte [esp + 0x31], dl
mov edx, dword [esp + 0x20]
add bl, 0x30
and eax, 0xff
and ecx, 0xff
mov byte [esp + 0x2f], bl
xor eax, ecx
mov ecx, dword [esp + 0x2f]
and edx, 0xff
xor eax, edx
mov edx, dword [esp + 0x2e]
and ecx, 0xff
and edx, 0xff
xor eax, ecx
lea ecx, [edi + 7]
xor eax, edx
mov byte [esp + 0x2c], 2
xor eax, 0xb0
cmp ecx, esi
mov byte [esp + 0x2d], 0xb0
jle 0x40d387
mov edi, dword [esp + 0x448]
mov dl, byte [edi]
add edi, 4
mov byte [esp + esi + 0x2c], dl
mov ebx, dword [edi - 4]
xor eax, ebx
inc esi
cmp esi, ecx
jl 0x40d374
mov byte [esp + esi + 0x2c], al
inc esi
lea edi, [ebp + 0x3c]
mov byte [esp + esi + 0x2c], 3
mov ecx, edi
inc esi
call fcn.0040c910
lea eax, [esp + 0x2c]
push esi
push eax
mov ecx, ebp
call fcn.0040ccb0
cmp esi, eax
je 0x40d3d9
lea ecx, [esp + 0x18]
mov byte [esp + 0x434], 0
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x10]
mov dword [esp + 0x434], 0xffffffff
call sub.MFC42.DLL_CString::CString
xor eax, eax
jmp 0x40d496
lea ecx, [esp + 0x1c]
xor bl, bl
call sub.MFC42.DLL_CString::CString_3
mov esi, dword [sym.imp.MSVCRT.dll_clock]
call esi
mov ebp, eax
add ebp, 0x7d0
mov dword [esp + 0x20], ebp
call esi
cmp ebp, eax
jle 0x40d454
mov ecx, edi
call fcn.0040c930
mov esi, eax
test esi, esi
je 0x40d44a
xor ebp, ebp
test esi, esi
jle 0x40d446
lea ecx, [esp + 0x17]
push ecx
mov ecx, edi
call fcn.0040c9b0
mov al, byte [esp + 0x17]
cmp al, 2
jne 0x40d42d
test bl, bl
jne 0x40d441
mov bl, 1
jmp 0x40d441
test bl, bl
je 0x40d441
cmp al, 6
je 0x40d4b1
cmp al, 4
je 0x40d4ee
cmp al, 0x15
je 0x40d45b
inc ebp
cmp ebp, esi
jl 0x40d411
mov ebp, dword [esp + 0x20]
call dword [sym.imp.MSVCRT.dll_clock]
cmp ebp, eax
jg 0x40d3fe
mov ecx, edi
call fcn.0040c910
lea ecx, [esp + 0x1c]
mov byte [esp + 0x434], 1
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x18]
mov byte [esp + 0x434], 0
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x10]
mov dword [esp + 0x434], 0xffffffff
call sub.MFC42.DLL_CString::CString
mov eax, 0x15
mov ecx, dword [esp + 0x42c]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x428
ret 0x10
lea ecx, [esp + 0x1c]
mov byte [esp + 0x434], 1
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x18]
mov byte [esp + 0x434], 0
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x10]
mov dword [esp + 0x434], 0xffffffff
call sub.MFC42.DLL_CString::CString
mov eax, 6
jmp 0x40d496
lea ecx, [esp + 0x1c]
mov byte [esp + 0x434], 1
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x18]
mov byte [esp + 0x434], 0
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x10]
mov dword [esp + 0x434], 0xffffffff
call sub.MFC42.DLL_CString::CString
mov eax, 4
jmp 0x40d496