Function at 0x40c1a0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x440
mov eax, dword [0x4489ec]
mov dword [esp + 0x40], 0xacdcaefc
mov dword [esp + 0x44], 0xb0deb2cd
mov dword [esp + 0x48], 0xb4d9b6db
mov dword [esp + 0x4c], 0xb888badc
mov dword [esp + 0x50], 0xbc8fbe84
mov dword [esp + 0x54], 0xc0e1c2f3
mov dword [esp + 0x58], 0xc49cc6ef
mov dword [esp + 0x5c], 0xc8bbcaa4
mov dword [esp + 0x60], 0xccbcceab
mov dword [esp + 0x64], 0xd0a4d2aa
mov dword [esp + 0x68], 0xd487d6f7
mov dword [esp + 0x6c], 0xd8f9da8f
mov dword [esp + 0x70], 0xdceddee8
mov dword [esp + 0x74], 0xe0d1e2d1
mov dword [esp + 0x78], 0xe4c5e6da
mov dword [esp + 0x7c], 0xe886eab2
mov dword [esp + 0x80], 0xecd7ee9d
mov dword [esp + 0x84], 0xf0ccf2c7
mov dword [esp + 0x88], 0xf48df6d7
mov dword [esp + 0x8c], 0xf8cdfac1
mov dword [esp + 0x90], 0xfcddfed0
mov dword [esp + 0x94], 0x710244
mov dword [esp + 0x98], 0x4690677
mov dword [esp + 0x9c], 0x8500a60
mov dword [esp + 0xa0], 0xc6b0e64
mov dword [esp + 0xa4], 0x107e125e
mov dword [esp + 0xa8], 0x14241663
mov dword [esp + 0xac], 0x182c1a20
mov dword [esp + 0xb0], 0x1c2f1e26
mov dword [esp + 0xb4], 0x201b2216
mov dword [esp + 0xb8], 0x240d2607
mov dword [esp + 0xbc], 0x28612a66
mov dword [esp + 0xc0], 0x2c7e2e7b
mov dword [esp + 0xc4], 0x301d327f
mov dword [esp + 0xc8], 0x34593617
mov dword [esp + 0xcc], 0x38543a54
mov dword [esp + 0xd0], 0x3c1d3e54
mov dword [esp + 0xd4], 0x402a420a
mov dword [esp + 0xd8], 0x44284622
mov dword [esp + 0xdc], 0x48664a3a
mov dword [esp + 0xe0], 0x4c084e6f
mov dword [esp + 0xe4], 0x5027523b
mov dword [esp + 0xe8], 0x54265626
mov dword [esp + 0xec], 0x58685a30
mov dword [esp + 0xf0], 0x5c6a5e68
mov dword [esp + 0xf4], 0x6053625c
mov dword [esp + 0xf8], 0x64576657
mov dword [esp + 0xfc], 0x685b6a5b
mov dword [esp + 0x100], 0x6c4d6e5f
mov dword [esp + 0x104], 0x70167226
mov dword [esp + 0x108], 0x7412761d
mov dword [esp + 0x10c], 0x78167a0d
mov dword [esp + 0x110], 0x7c467e4e
mov dword [esp + 0x114], 0x80b882b6
mov dword [esp + 0x118], 0x84b086b5
mov dword [esp + 0x11c], 0x88898ab1
mov dword [esp], 0
mov ecx, dword [esp]
cmp ecx, 0xdf
ja 0x40c433
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [esp]
mov edx, dword [esp]
movzx edx, byte [esp + edx + 0x40]
add ecx, 0x19db672c
xor ecx, edx
mov dword [esp + 8], ecx
mov ecx, dword [esp + 8]
add cl, 0x7d
mov edx, dword [esp]
mov byte [esp + edx + 0x40], cl
inc dword [esp]
mov ecx, dword [esp]
cmp ecx, 0xe0
jb 0x40c400
mov ebx, dword [esp + 0x468]
lea ebp, [esp + 0x40]
push 0
push 0
push 0
push 0
push ebp
call eax
mov edi, eax
xor eax, eax
test edi, edi
setne al
jmp dword [eax*4 + 0x443ce8]
xor esi, esi
xor eax, eax
test ebx, ebx
setne al
xor edi, edi
mov ebp, dword [esp + 0x46c]
jmp dword [eax*4 + 0x443d58]
xor eax, eax
test esi, esi
setne al
jmp dword [eax*4 + 0x443d60]
push esi
call fcn.0043a100
add esp, 4
xor eax, eax
test ebp, ebp
setne al
jmp dword [eax*4 + 0x443d68]
mov ecx, dword [esp + 0x454]
mov eax, dword [0x4489f0]
mov dword [esp + 0x40], 0xcfcec087
mov word [esp + 0x44], 0
mov byte [esp + 0x46], 0
mov dword [esp], 0
mov edx, dword [esp]
cmp edx, 6
ja 0x40c500
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, dword [esp]
mov esi, dword [esp]
movzx esi, byte [esp + esi + 0x40]
add edx, 0xb219c216
xor edx, esi
mov dword [esp + 8], edx
mov edx, dword [esp + 8]
add dl, 0x2a
mov esi, dword [esp]
mov byte [esp + esi + 0x40], dl
inc dword [esp]
mov edx, dword [esp]
cmp edx, 7
jb 0x40c4d0
movzx edx, word [esp + 0x40]
push 0
push edx
push ecx
push edi
call eax
xor ecx, ecx
mov dword [esp + 0x38], eax
test eax, eax
setne cl
mov dword [esp + 0x3c], edi
jmp dword [ecx*4 + 0x443cf0]
xor edi, edi
xor esi, esi
jmp 0x40c9fd
mov eax, dword [0x4489f4]
mov dword [esp + 8], 0xf677f4f5
mov word [esp + 0xc], 0
mov dword [esp], 0
mov ecx, dword [esp]
cmp ecx, 5
ja 0x40c580
nop
nop
mov ecx, dword [esp]
mov edx, dword [esp]
movzx edx, byte [esp + edx + 8]
add ecx, 0x2c52d6f0
xor ecx, edx
mov dword [esp + 0x40], ecx
mov ecx, dword [esp + 0x40]
add cl, 0xfb
mov edx, dword [esp]
mov byte [esp + edx + 8], cl
inc dword [esp]
mov ecx, dword [esp]
cmp ecx, 6
jb 0x40c550
mov ecx, dword [esp + 0x458]
mov edx, dword [esp + 8]
mov dword [esp + 0x40], 0x7da37baa
mov dword [esp + 0x44], 0x71a47fad
mov word [esp + 0x48], 0x7372
mov dword [esp + 0x4a], 0
mov byte [esp + 0x4e], 0
mov dword [esp + 4], 0
mov esi, dword [esp + 4]
cmp esi, 0xe
ja 0x40c5f3
mov esi, dword [esp + 4]
mov edi, dword [esp + 4]
movzx edi, byte [esp + edi + 0x40]
add esi, 0x453c4232
xor esi, edi
mov dword [esp], esi
mov ebx, dword [esp]
add bl, 0xb8
mov esi, dword [esp + 4]
mov byte [esp + esi + 0x40], bl
inc dword [esp + 4]
mov esi, dword [esp + 4]
cmp esi, 0xf
jb case.default.0x40c60b
push edx
push 0
push 0
push 0
push ecx
push ebp
push dword [esp + 0x50]
call eax
mov ebx, eax
xor eax, eax
test ebx, ebx
setne al
jmp dword [eax*4 + 0x443cf8]
xor edi, edi
xor esi, esi
jmp 0x40c9f3
mov esi, dword [esp + 0x45c]
movzx eax, byte [0x448b24]
jmp dword [eax*4 + 0x443d00]
xor edi, edi
mov eax, esi
neg eax
mov eax, 0
sbb eax, eax
push 0
mov ecx, dword [esp + 0x468]
push ecx
push ecx
push dword [esp + 0x46c]
push eax
push esi
push ebx
call dword [0x448a04]
xor ecx, ecx
test eax, eax
setne cl
xor esi, esi
jmp dword [ecx*4 + 0x443d18]
push 0
push ebx
call dword [0x448a08]
xor ecx, ecx
test eax, eax
setne cl
xor edi, edi
xor esi, esi
jmp dword [ecx*4 + 0x443d20]
mov dword [esp + 0x40], 0
xor edi, edi
xor esi, esi
jmp case.0x40c452.24
add edi, dword [esp + 8]
mov esi, ebp
xor eax, eax
jmp dword [eax*4 + 0x443d48]
lea eax, [esp + 0x40]
push eax
push ebx
call dword [0x448a0c]
test eax, eax
setne cl
mov eax, dword [esp + 0x40]
test eax, eax
setne dl
and dl, cl
movzx ecx, dl
jmp dword [ecx*4 + 0x443d28]
add eax, edi
inc eax
push eax
push esi
call fcn.0043c3e0
add esp, 8
mov ebp, eax
xor eax, eax
test ebp, ebp
sete al
jmp dword [eax*4 + 0x443d30]
lea esi, [esp + 8]
jmp dword [0x443d38]
mov eax, 1
jmp dword [eax*4 + 0x443d48]
mov dword [esp + 8], 0
lea eax, [edi + ebp]
push esi
push dword [esp + 0x44]
push eax
push ebx
call dword [0x448a10]
mov dword [esp + 8], 0
lea eax, [edi + ebp]
push esi
push dword [esp + 0x44]
push eax
push ebx
call dword [0x448a10]
jmp dword [0x443d40]
jmp dword [0x443d08]
mov dword [esp + 8], 0x42ee409c
mov dword [esp + 0xc], 0x46ee44ec
mov dword [esp + 0x10], 0x4aec48ee
mov dword [esp + 0x14], 0x4ead4c91
mov dword [esp + 0x18], 0x328e30f0
mov dword [esp + 0x1c], 0x36933490
mov dword [esp + 0x20], 0x3a943888
mov dword [esp + 0x24], 0x3e823cac
mov dword [esp + 0x28], 0x22b8209d
mov dword [esp + 0x2c], 0x26f824b3
mov word [esp + 0x30], 0x2827
mov dword [esp + 0x32], 0
mov word [esp + 0x36], 0
mov dword [esp + 4], 0
mov eax, dword [esp + 4]
cmp eax, 0x2f
ja 0x40c801
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 4]
mov ecx, dword [esp + 4]
movzx ecx, byte [esp + ecx + 8]
add eax, 0x812753af
xor eax, ecx
mov dword [esp], eax
mov eax, dword [esp]
add al, 0x10
mov ecx, dword [esp + 4]
mov byte [esp + ecx + 8], al
inc dword [esp + 4]
mov eax, dword [esp + 4]
cmp eax, 0x30
jb 0x40c7d0
movzx eax, word [esp + 8]
test ax, ax
je 0x40c832
lea ebp, [esp + 0x40]
lea ecx, [esp + 0xa]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [ebp], ax
add ebp, 2
movzx eax, word [ecx]
add ecx, 2
test ax, ax
jne 0x40c820
mov word [ebp], 0
movzx eax, word [0x448b26]
test ax, ax
je 0x40c866
xor ecx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [ebp + ecx], ax
movzx eax, word [ecx + 0x448b28]
add ecx, 2
test ax, ax
jne 0x40c850
add ebp, ecx
mov word [ebp], 0
lea eax, [esp + 0x40]
push 0x20000000
push 0xffffffffffffffff
push eax
push ebx
call dword [0x448a00]
jmp case.0x40c60b.4
mov word [eax], 0
lea eax, [esp + 0x40]
push 0x20000000
push 0xffffffffffffffff
push eax
push ebx
call dword [0x448a00]
jmp dword [0x443d14]
mov dword [esp + 8], 0x42ee409c
mov dword [esp + 0xc], 0x46ee44ec
mov dword [esp + 0x10], 0x4aec48ee
mov dword [esp + 0x14], 0x4ead4c91
mov dword [esp + 0x18], 0x328e30f0
mov dword [esp + 0x1c], 0x36933490
mov dword [esp + 0x20], 0x3a943888
mov dword [esp + 0x24], 0x3e823cac
mov dword [esp + 0x28], 0x22b8209d
mov dword [esp + 0x2c], 0x26f824b3
mov word [esp + 0x30], 0x2827
mov dword [esp + 0x32], 0
mov word [esp + 0x36], 0
mov dword [esp + 4], 0
mov eax, dword [esp + 4]
cmp eax, 0x2f
ja 0x40c961
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 4]
mov ecx, dword [esp + 4]
movzx ecx, byte [esp + ecx + 8]
add eax, 0x812753af
xor eax, ecx
mov dword [esp], eax
mov eax, dword [esp]
add al, 0x10
mov ecx, dword [esp + 4]
mov byte [esp + ecx + 8], al
inc dword [esp + 4]
mov eax, dword [esp + 4]
cmp eax, 0x30
jb 0x40c930
movzx ecx, word [esp + 8]
test cx, cx
je 0x40c9a0
lea edx, [esp + 0xa]
lea eax, [esp + 0x40]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x40c980
jmp 0x40c9a4
lea eax, [esp + 0x40]
mov word [eax], 0
movzx ecx, word [0x448b26]
test cx, cx
je 0x40c890
xor edx, edx
nop
nop
nop
nop
nop
mov word [eax + edx], cx
movzx ecx, word [edx + 0x448b28]
add edx, 2
test cx, cx
jne 0x40c9c0
add eax, edx
jmp 0x40c890
xor eax, eax
test esi, esi
setne al
jmp dword [eax*4 + 0x443d50]
mov byte [esi + edi], 0
push ebx
call dword [0x448a18]
push dword [esp + 0x38]
call dword [0x448a18]
mov ebp, dword [esp + 0x46c]
push dword [esp + 0x3c]
call dword [0x448a18]
xor eax, eax
mov ebx, dword [esp + 0x468]
test ebx, ebx
setne al
jmp dword [eax*4 + 0x443d58]
mov dword [ebx], esi
xor eax, eax
test ebp, ebp
setne al
jmp dword [eax*4 + 0x443d68]
mov dword [ebp], edi
test esi, esi
setne al
add esp, 0x440
pop esi
pop edi
pop ebx
pop ebp
ret
les eax, [eax]
xchg edi, eax
les eax, [eax]
and al, ch
inc eax
add byte [ebx], ch
lds eax, [eax]
adc al, dh
inc eax
add byte [ebx], bl
mov byte [eax], 0x30
mov byte [eax], 0x46
mov dword [eax], case.0x40c60b.4
dec esp
mov dword [eax], case.0x40c60b.4
xor dh, al
inc eax
add ah, ch
leave
inc eax
add byte [eax - 0x3a], ch
inc eax
add ah, ch
leave
inc eax
add byte [ebx - 0x25ffbf3a], al
leave
inc eax
add ch, dl
mov byte [eax], 0xf2
mov byte [eax], 0
mov dword [eax], case.0x40c452.20
adc bh, al
inc eax
add byte [eax + 0x100040c6], ah
mov dword [eax], case.0x40c452.24
fcmove st(0), st(1)
inc eax
add ah, ch
leave
inc eax
add al, ch
leave
inc eax
add byte [edx - 0x3c], dh
inc eax
add byte [ebx], ah
retf 0x40