Function at 0x40c1f0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x438
mov ebx, dword [esp + 0x44c]
mov eax, dword [0x440ad4]
mov dword [esp + 0x38], 0x1b8d196d
mov dword [esp + 0x3c], 0x178f159e
mov dword [esp + 0x40], 0x13861184
mov dword [esp + 0x44], 0xf590d6d
mov dword [esp + 0x48], 0xb5c0945
mov dword [esp + 0x4c], 0x7260554
mov dword [esp + 0x50], 0x36d0158
mov dword [esp + 0x54], 0x3fa83da5
mov dword [esp + 0x58], 0x3bad39a4
mov dword [esp + 0x5c], 0x37a535bb
mov dword [esp + 0x60], 0x33443110
mov dword [esp + 0x64], 0x2f0e2d40
mov dword [esp + 0x68], 0x2b7a2979
mov dword [esp + 0x6c], 0x27762572
mov dword [esp + 0x70], 0x2302216b
mov dword [esp + 0x74], 0x5fc75d33
mov dword [esp + 0x78], 0x5b1459ce
mov dword [esp + 0x7c], 0x571d5518
mov dword [esp + 0x80], 0x53da5170
mov dword [esp + 0x84], 0x4f024d02
mov dword [esp + 0x88], 0x4b6a4911
mov dword [esp + 0x8c], 0x47d64505
mov dword [esp + 0x90], 0x43d641d0
mov dword [esp + 0x94], 0x7f117de1
mov dword [esp + 0x98], 0x7b1879e5
mov dword [esp + 0x9c], 0x77ef750f
mov dword [esp + 0xa0], 0x732571fc
mov dword [esp + 0xa4], 0x6f3d6d21
mov dword [esp + 0xa8], 0x6b3c6927
mov dword [esp + 0xac], 0x67286537
mov dword [esp + 0xb0], 0x633a6140
mov dword [esp + 0xb4], 0x9fe69de7
mov dword [esp + 0xb8], 0x9bef99f4
mov dword [esp + 0xbc], 0x97c295e0
mov dword [esp + 0xc0], 0x930691b0
mov dword [esp + 0xc4], 0x8f158d15
mov dword [esp + 0xc8], 0x8baa8915
mov dword [esp + 0xcc], 0x871b85fb
mov dword [esp + 0xd0], 0x831981e3
mov dword [esp + 0xd4], 0xbfe7bd2b
mov dword [esp + 0xd8], 0xbbf9b998
mov dword [esp + 0xdc], 0xb724b52c
mov dword [esp + 0xe0], 0xb327b127
mov dword [esp + 0xe4], 0xaff9ad31
mov dword [esp + 0xe8], 0xabfba9f9
mov dword [esp + 0xec], 0xa7f0a5ed
mov dword [esp + 0xf0], 0xa3f4a1f0
mov dword [esp + 0xf4], 0xdf88dd8c
mov dword [esp + 0xf8], 0xdbfad988
mov dword [esp + 0xfc], 0xd7b7d5a7
mov dword [esp + 0x100], 0xd3b3d14e
mov dword [esp + 0x104], 0xcf57cd5e
mov dword [esp + 0x108], 0xcb87c99f
mov dword [esp + 0x10c], 0xc789c597
mov dword [esp + 0x110], 0xc391c196
mov dword [esp + 0x114], 0xfffefdb2
mov dword [esp], 0
mov ecx, dword [esp]
cmp ecx, 0xdf
ja 0x40c483
nop
nop
nop
nop
nop
nop
mov ecx, dword [esp]
mov edx, dword [esp]
movzx edx, byte [esp + edx + 0x38]
add ecx, 0xb44bfd84
xor ecx, edx
mov dword [esp + 8], ecx
mov ecx, dword [esp + 8]
add cl, 0x64
mov edx, dword [esp]
mov byte [esp + edx + 0x38], cl
inc dword [esp]
mov ecx, dword [esp]
cmp ecx, 0xe0
jb 0x40c450
lea ecx, [esp + 0x38]
push 0
push 0
push 0
push 0
push ecx
call eax
mov esi, eax
xor eax, eax
test esi, esi
setne al
xor edi, edi
xor ebp, ebp
jmp dword [eax*4 + 0x43bb9c]
mov eax, dword [0x440ad8]
mov dword [esp + 0x38], 0x6b6a6cab
mov word [esp + 0x3c], 0
mov byte [esp + 0x3e], 0
mov dword [esp], 0
mov ecx, dword [esp]
cmp ecx, 6
ja 0x40c500
nop
nop
mov ecx, dword [esp]
mov edx, dword [esp]
movzx edx, byte [esp + edx + 0x38]
add ecx, 0x1abe62f2
xor ecx, edx
mov dword [esp + 8], ecx
mov ecx, dword [esp + 8]
add cl, 0x62
mov edx, dword [esp]
mov byte [esp + edx + 0x38], cl
inc dword [esp]
mov ecx, dword [esp]
cmp ecx, 7
jb 0x40c4d0
movzx ecx, word [esp + 0x38]
push 0
push ecx
push ebx
push esi
call eax
xor ecx, ecx
test eax, eax
setne cl
jmp dword [ecx*4 + 0x43bba4]
xor ebp, ebp
xor edi, edi
jmp dword [0x43bc80]
mov ebx, dword [0x440adc]
mov dword [esp + 4], 0x5bda5958
mov dword [esp + 8], 0
mov ecx, dword [esp + 8]
cmp ecx, 3
ja 0x40c585
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [esp + 8]
mov edx, dword [esp + 8]
movzx edx, byte [esp + edx + 4]
add ecx, 0xee830a0c
xor ecx, edx
mov dword [esp + 0x38], ecx
mov ecx, dword [esp + 0x38]
add cl, 0xac
mov edx, dword [esp + 8]
mov byte [esp + edx + 4], cl
inc dword [esp + 8]
mov ecx, dword [esp + 8]
cmp ecx, 4
jb 0x40c550
mov ecx, dword [esp + 4]
mov dword [esp + 0x38], 0xfb49f936
mov dword [esp + 0x3c], 0xff48fd4f
mov dword [esp + 0x40], 0xf1fe
mov byte [esp + 0x44], 0
mov dword [esp], 0
mov edx, dword [esp]
cmp edx, 0xc
ja 0x40c5f0
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, dword [esp]
mov edi, dword [esp]
movzx edi, byte [esp + edi + 0x38]
add edx, 0x7f7154bf
xor edx, edi
mov dword [esp + 8], edx
mov edx, dword [esp + 8]
add dl, 0xc7
mov edi, dword [esp]
mov byte [esp + edi + 0x38], dl
inc dword [esp]
mov edx, dword [esp]
cmp edx, 0xd
jb 0x40c5c0
push ecx
push 0
push 0
push 0
push dword [esp + 0x460]
lea ecx, [esp + 0x4c]
push ecx
mov dword [esp + 0x4c], eax
push eax
call ebx
mov ebx, eax
xor eax, eax
test ebx, ebx
setne al
xor edi, edi
xor ebp, ebp
jmp dword [eax*4 + 0x43bbac]
movzx eax, byte [0x440c0c]
jmp dword [eax*4 + 0x43bbb4]
lea edi, [esp + 0x38]
jmp dword [0x43bbc0]
mov dword [esp + 8], 0x2bb92de3
mov dword [esp + 0xc], 0xd74129bb
mov dword [esp + 0x10], 0xd33fd53d
mov dword [esp + 0x14], 0xdffed116
mov dword [esp + 0x18], 0xdb39dd3f
mov dword [esp + 0x1c], 0xc72cd937
mov dword [esp + 0x20], 0xc357c527
mov dword [esp + 0x24], 0xcf2dc15b
mov dword [esp + 0x28], 0xcb53cd22
mov dword [esp + 0x2c], 0xf733c958
mov dword [esp + 0x30], 0xf5f4
mov dword [esp], 0
mov eax, dword [esp]
cmp eax, 0x2b
ja 0x40c6ce
nop
nop
nop
mov eax, dword [esp]
mov ecx, dword [esp]
movzx ecx, byte [esp + ecx + 8]
add eax, 0x86575fa
xor eax, ecx
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x38]
add al, 0x2a
mov ecx, dword [esp]
mov byte [esp + ecx + 8], al
inc dword [esp]
mov eax, dword [esp]
cmp eax, 0x2c
jb 0x40c6a0
movzx ecx, word [esp + 8]
lea eax, [esp + 0x38]
test cx, cx
je 0x40c6f1
lea edx, [esp + 0xa]
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x40c6e0
mov word [eax], 0
movzx ecx, word [0x440c0e]
test cx, cx
je 0x40c725
xor edx, edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax + edx], cx
movzx ecx, word [edx + 0x440c10]
add edx, 2
test cx, cx
jne 0x40c710
add eax, edx
mov word [eax], 0
jmp case.0x40c617.5
mov word [eax], 0
jmp dword [0x43bbc4]
mov dword [esp + 8], 0x2bb92de3
mov dword [esp + 0xc], 0xd74129bb
mov dword [esp + 0x10], 0xd33fd53d
mov dword [esp + 0x14], 0xdffed116
mov dword [esp + 0x18], 0xdb39dd3f
mov dword [esp + 0x1c], 0xc72cd937
mov dword [esp + 0x20], 0xc357c527
mov dword [esp + 0x24], 0xcf2dc15b
mov dword [esp + 0x28], 0xcb53cd22
mov dword [esp + 0x2c], 0xf733c958
mov dword [esp + 0x30], 0xf5f4
mov dword [esp + 4], 0
mov eax, dword [esp + 4]
cmp eax, 0x2b
ja 0x40c7e1
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 4]
mov ecx, dword [esp + 4]
movzx ecx, byte [esp + ecx + 8]
add eax, 0x86575fa
xor eax, ecx
mov dword [esp], eax
mov eax, dword [esp]
add al, 0x2a
mov ecx, dword [esp + 4]
mov byte [esp + ecx + 8], al
inc dword [esp + 4]
mov eax, dword [esp + 4]
cmp eax, 0x2c
jb 0x40c7b0
movzx ecx, word [esp + 8]
mov eax, edi
test cx, cx
je 0x40c811
lea edx, [esp + 0xa]
lea eax, [esp + 0x38]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x40c800
mov word [eax], 0
movzx ecx, word [0x440c0e]
test cx, cx
je 0x40c730
xor edx, edx
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax + edx], cx
movzx ecx, word [edx + 0x440c10]
add edx, 2
test cx, cx
jne 0x40c830
add eax, edx
jmp 0x40c730
lea eax, [esp + 0x38]
push 0x20000000
push 0xffffffffffffffff
push eax
push ebx
call dword [0x440ae8]
xor edi, edi
mov ecx, dword [esp + 0x454]
mov eax, ecx
neg eax
mov eax, 0
sbb eax, eax
push 0
mov edx, dword [esp + 0x460]
push edx
push edx
push dword [esp + 0x464]
push eax
push ecx
push ebx
call dword [0x440aec]
xor ecx, ecx
test eax, eax
setne cl
xor ebp, ebp
jmp dword [ecx*4 + 0x43bbcc]
mov edi, dword [0x440af0]
jmp dword [0x43bbd4]
jmp dword [0x43bc70]
push ebx
call dword [0x440b00]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
push ebx
call dword [0x440b00]
jmp dword [0x43bc78]
push dword [esp + 0x34]
call dword [0x440b00]
jmp dword [0x43bc80]
mov dword [ecx], edi
jmp dword [0x43bcb0]
xor eax, eax
test ebp, ebp
setne al
jmp dword [eax*4 + 0x43bc94]
xor eax, eax
mov ecx, dword [esp + 0x464]
test ecx, ecx
setne al
jmp dword [eax*4 + 0x43bc9c]
push ebp
call fcn.00432760
add esp, 4
xor eax, eax
mov ecx, dword [esp + 0x464]
test ecx, ecx
setne al
jmp dword [eax*4 + 0x43bc9c]
lea eax, [esp + 0x38]
push eax
push ebx
call dword [0x440af4]
lea eax, [esp + 0x38]
push eax
push ebx
call dword [0x440af4]
jmp dword [0x43bc04]
mov ecx, dword [esp + 0x38]
test eax, eax
setne al
test ecx, ecx
setne dl
and dl, al
movzx eax, dl
jmp dword [eax*4 + 0x43bc0c]
lea eax, [edi + ecx]
inc eax
push eax
push ebp
call fcn.004343c0
add esp, 8
xor ecx, ecx
test eax, eax
sete cl
jmp dword [ecx*4 + 0x43bc14]
mov dword [esp + 8], 0
mov ecx, eax
add ecx, edi
lea edx, [esp + 8]
push edx
push dword [esp + 0x3c]
push ecx
push ebx
mov ebp, eax
call dword [0x440af8]
add edi, dword [esp + 8]
xor eax, eax
jmp dword [eax*4 + 0x43bc2c]
mov eax, dword [case.0x40c49f.34]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
jmp eax
mov eax, 1
jmp dword [eax*4 + 0x43bc2c]
jmp dword [0x43bbfc]
xor eax, eax
test ebp, ebp
setne al
jmp dword [eax*4 + 0x43bc44]
mov byte [ebp + edi], 0
mov eax, dword [case.0x40c49f.42]
nop
nop
nop
nop
jmp eax
mov eax, dword [case.0x40c617.8]
nop
nop
nop
nop
nop
nop
nop
nop
nop
jmp eax
xor ecx, ecx
test eax, eax
setne cl
xor edi, edi
xor ebp, ebp
jmp dword [ecx*4 + 0x43bbf4]
mov dword [esp + 0x38], 0
xor ebp, ebp
xor edi, edi
jmp dword [0x43bbfc]
xor eax, eax
mov ecx, dword [esp + 0x460]
test ecx, ecx
setne al
jmp dword [eax*4 + 0x43bc8c]
mov dword [ecx], ebp
xor eax, eax
mov ecx, dword [esp + 0x464]
test ecx, ecx
setne al
jmp dword [eax*4 + 0x43bc9c]
test ebp, ebp
setne al
add esp, 0x438
pop esi
pop edi
pop ebx
pop ebp
ret
push esi
call dword [0x440b00]
push esi
call dword [0x440b00]
jmp dword [0x43bc84]
push 0
push ebx
call edi
push 0
push ebx
call edi
jmp dword [0x43bbe0]
retf 0x40