Function at 0x40ee10
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0xc10
mov ecx, dword [str.default]
mov dword [esp + 0xb0], 0x63bf8b46
mov dword [esp + 0xb4], 0
mov dword [esp + 0xb8], 0
mov byte [esp + 0xbc], 0
mov dword [esp + 0xb20], 0
mov eax, dword [esp + 0xb20]
cmp eax, 0xc
ja 0x40eecb
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 0xb20]
mov edx, dword [esp + 0xb20]
movzx edx, byte [esp + edx + 0xb0]
lea esi, [eax + edx]
add esi, 0x53db6db0
add eax, 0x53db6db0
and eax, edx
add eax, eax
sub esi, eax
mov dword [esp + 0x320], esi
mov eax, dword [esp + 0x320]
add al, 0x30
mov edx, dword [esp + 0xb20]
mov byte [esp + edx + 0xb0], al
inc dword [esp + 0xb20]
mov eax, dword [esp + 0xb20]
cmp eax, 0xd
jb 0x40ee70
mov edx, dword [str.VXGDR__l6]
mov dword [esp + 0x320], 0x2e662a2d
mov dword [esp + 0x324], 0x1e111466
mov dword [esp + 0x328], 0x1619106e
mov dword [esp + 0x32c], 0x1e696e1d
mov dword [esp + 0x330], 0x79c81817
mov dword [esp + 0x334], 0x333b7705
mov dword [esp + 0x338], 0x7c03536
mov dword [esp + 0x33c], 0xef330d01
mov dword [esp + 0x344], 0
mov dword [esp + 0x340], 0
mov dword [esp + 0x38], 0
mov eax, dword [esp + 0x38]
cmp eax, 0x27
ja 0x40ef98
mov eax, dword [esp + 0x38]
mov esi, dword [esp + 0x38]
movzx esi, byte [esp + esi + 0x320]
lea edi, [eax + 0x1e]
add eax, esi
and edi, esi
add edi, edi
sub eax, edi
add eax, 0x1082ab1e
mov dword [esp + 0xb20], eax
mov eax, dword [esp + 0xb20]
add al, 0x2e
mov esi, dword [esp + 0x38]
mov byte [esp + esi + 0x320], al
inc dword [esp + 0x38]
mov eax, dword [esp + 0x38]
cmp eax, 0x28
jb 0x40ef50
movzx ebx, byte [esp + 0x320]
lea eax, [esp + 0xb20]
test bl, bl
je 0x40efcb
lea esi, [esp + 0x321]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [eax], bl
inc eax
movzx ebx, byte [esi]
inc esi
test bl, bl
jne 0x40efc0
mov byte [eax], 0
movzx ebx, byte [edx]
test bl, bl
je 0x40efeb
inc edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [eax], bl
inc eax
movzx ebx, byte [edx]
inc edx
test bl, bl
jne 0x40efe0
mov byte [eax], 0
movzx edx, byte [esp + 0xb0]
test dl, dl
je 0x40f01b
lea esi, [esp + 0xb1]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [eax], dl
inc eax
movzx edx, byte [esi]
inc esi
test dl, dl
jne 0x40f010
mov byte [eax], 0
movzx edx, byte [ecx]
test dl, dl
je 0x40f03b
inc ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [eax], dl
inc eax
movzx edx, byte [ecx]
inc ecx
test dl, dl
jne 0x40f030
mov byte [eax], 0
lea ecx, [esp + 0xb20]
mov dword [esp + 0x320], 0x23b121db
mov dword [esp + 0x324], 0xdf50ddb4
mov dword [esp + 0x328], 0xdb4ed941
mov dword [esp + 0x32c], 0xd703d556
mov dword [esp + 0x330], 0xd35bd13a
mov dword [esp + 0x334], 0xcf53cd42
mov dword [esp + 0x338], 0xcbe8c904
mov dword [esp + 0x33c], 0xc754c529
mov dword [esp + 0x340], 0xc354c156
mov dword [esp + 0x344], 0xff61fd59
mov dword [esp + 0x348], 0xfb74f91d
mov dword [esp + 0x34c], 0xf765f561
mov dword [esp + 0x350], 0xf321f160
mov dword [esp + 0x354], 0xef3bed7a
mov dword [esp + 0x358], 0xeb61e967
mov dword [esp + 0x35c], 0xe733e563
mov dword [esp + 0x360], 0xe371e178
mov dword [esp + 0x364], 0x9f0b9d70
mov dword [esp + 0x368], 0x9b179949
mov dword [esp + 0x36c], 0x97009508
mov dword [esp + 0x370], 0x93069109
mov dword [esp + 0x374], 0x8f1d8d0f
mov dword [esp + 0x378], 0x8b178912
mov dword [esp + 0x37c], 0x87b38516
mov dword [esp + 0x380], 0x838081bc
mov dword [esp + 0x384], 0
mov dword [esp + 0x38], 0
mov edx, dword [esp + 0x38]
cmp edx, 0x67
ja 0x40f1ca
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, dword [esp + 0x38]
mov esi, dword [esp + 0x38]
movzx esi, byte [esp + esi + 0x320]
lea edi, [edx + 0x7b]
and edi, esi
add edx, esi
add edi, edi
sub edx, edi
add edx, 0x478eb57b
mov dword [esp + 0xb0], edx
mov edx, dword [esp + 0xb0]
add dl, 0xa3
mov esi, dword [esp + 0x38]
mov byte [esp + esi + 0x320], dl
inc dword [esp + 0x38]
mov edx, dword [esp + 0x38]
cmp edx, 0x68
jb 0x40f180
sub eax, ecx
mov dword [esp + 0xb0], 0x43234177
mov dword [esp + 0xb4], 0x5f275d32
mov word [esp + 0xb8], 0x595e
mov dword [esp + 0xba], 0
mov word [esp + 0xbe], 0
mov dword [esp + 0x1e8], 0
mov edx, dword [esp + 0x1e8]
cmp edx, 0xf
ja 0x40f27e
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, dword [esp + 0x1e8]
mov esi, dword [esp + 0x1e8]
movzx esi, byte [esp + esi + 0xb0]
lea edi, [edx - 0x60eadb5]
add edx, 0x4b
and edx, esi
or edi, esi
sub edi, edx
mov dword [esp + 0x38], edi
mov edx, dword [esp + 0x38]
mov esi, edx
xor esi, 0xf2
and edx, 0x72
lea edx, [esi + edx*2]
inc dl
mov esi, dword [esp + 0x1e8]
mov byte [esp + esi + 0xb0], dl
inc dword [esp + 0x1e8]
mov edx, dword [esp + 0x1e8]
cmp edx, 0x10
jb 0x40f220
lea edx, [esp + 0x178]
lea esi, [esp + 0x150]
lea ebx, [esp + 0x320]
lea edi, [esp + 0xb0]
push edx
push esi
mov esi, ebx
push eax
push ecx
push ebx
push edi
push 0x447090
call fcn.0040b440
add esp, 0x1c
movzx eax, al
mov eax, dword [eax*4 + 0x440848]
mov ecx, 0x7b03bba6
xor ecx, dword [0x440850]
add eax, ecx
inc eax
jmp eax
mov eax, dword [esp + 0x8c]
mov ecx, dword [esp + 0x8c]
movzx ecx, byte [esp + ecx + 0xa8]
lea edx, [eax + ecx]
add edx, 0xab377f8f
add eax, 0xab377f8f
and eax, ecx
add eax, eax
sub edx, eax
mov dword [esp + 0x68], edx
mov eax, dword [esp + 0x68]
add al, 0x17
mov ecx, dword [esp + 0x8c]
mov byte [esp + ecx + 0xa8], al
inc dword [esp + 0x8c]
mov word [eax], es
add byte [eax], al
mov word [eax], es
add byte [eax], al
mov eax, dword [esp + 0x8c]
cmp eax, 0x1b
jb 0x417080
movzx eax, byte [esp + 0x17]
or al, byte [esp + 0x16]
mov dword [esp], eax
lea ecx, [0x44749b]
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp byte [ecx + 1], 0
lea ecx, [ecx + 1]
jne 0x4170f0
movzx eax, byte [esp + 0xa8]
test al, al
mov esi, ebx
je 0x417122
xor edx, edx
nop
nop
nop
nop
nop
nop
nop
mov byte [ecx + edx], al
movzx eax, byte [esp + edx + 0xa9]
inc edx
test al, al
jne 0x417110
add ecx, edx
mov byte [ecx], 0
movzx eax, byte [esi]
test al, al
je 0x41713b
lea edx, [esi + 1]
nop
mov byte [ecx], al
inc ecx
movzx eax, byte [edx]
inc edx
test al, al
jne 0x417130
mov byte [ecx], 0
movzx eax, byte [esp + 0x18]
test al, al
je 0x41715b
mov edx, dword [esp + 0xdc]
nop
nop
mov byte [ecx], al
inc ecx
movzx eax, byte [edx]
inc edx
test al, al
jne 0x417150
mov byte [ecx], 0
mov ebx, dword [esp + 0xe0]
movzx eax, byte [esp + 7]
jmp dword [0x441b78]