Function at 0x40f800
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x8c
mov dword [esp + 0x18], 0x2e7a6a6f
mov dword [esp + 0x1c], 0x7274787c
lea ebx, [esp + 0x20]
mov byte [esp + 0x20], 0xd4
mov dword [esp + 0x21], 0
mov word [esp + 0x25], 0
mov dword [esp], 0
mov eax, dword [esp]
cmp eax, 0xe
ja 0x40f876
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp]
movzx eax, byte [esp + eax + 0x18]
push dword [esp]
push eax
call fcn.00411800
add esp, 8
mov ecx, dword [esp]
mov byte [esp + ecx + 0x18], al
inc dword [esp]
mov eax, dword [esp]
cmp eax, 0xf
jb 0x40f850
lea esi, [esp + 0x83]
lea ebp, [esp + 0x18]
mov eax, ebp
mov ecx, 2
mov edi, esi
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
lea edi, [esp + 0x8b]
xor ecx, ecx
xchg esi, ebx
rep movsw word es:[edi], word [esi]
xchg esi, ebx
movzx eax, byte [esp + 0x20]
mov byte [esp + 0x8b], al
mov dword [esp + 0x18], 0xc3adc183
mov dword [esp + 0x1c], 0xc752c5aa
mov dword [esp + 0x20], 0xcba4c9ad
mov dword [esp + 0x24], 0xcfe3cd58
mov dword [esp + 0x28], 0xf36bf184
mov dword [esp + 0x2c], 0xf793f564
mov dword [esp + 0x30], 0xfbdaf9a2
mov dword [esp + 0x34], 0xff6efd9d
mov dword [esp + 0x38], 0xe38ee170
mov dword [esp + 0x3c], 0xe785e58d
mov dword [esp + 0x40], 0xeb7ee989
mov dword [esp + 0x44], 0xef81ed85
mov dword [esp + 0x48], 0x133d117e
mov dword [esp + 0x4c], 0x173b158c
mov dword [esp + 0x50], 0x1b8d198f
mov dword [esp + 0x54], 0x1f331d8b
mov dword [esp + 0x58], 0x36d0166
mov dword [esp + 0x5c], 0x76b0596
mov dword [esp + 0x60], 0xb9f0925
mov dword [esp + 0x64], 0xf620d9e
mov dword [esp + 0x68], 0x335c3155
mov dword [esp + 0x6c], 0x37593557
mov dword [esp + 0x70], 0x3b5f395c
mov dword [esp + 0x74], 0x3f333d58
mov dword [esp + 0x78], 0x2322212a
mov word [esp + 0x7c], 0
mov dword [esp], 0
mov eax, dword [esp]
cmp eax, 0x65
ja 0x40f9b6
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp]
movzx eax, byte [esp + eax + 0x18]
push dword [esp]
push eax
call fcn.004118e0
add esp, 8
mov ecx, dword [esp]
mov byte [esp + ecx + 0x18], al
inc dword [esp]
mov eax, dword [esp]
cmp eax, 0x66
jb 0x40f990
mov edi, dword [esp + 0xa0]
mov dword [esp], 0xe303e1df
mov dword [esp + 4], 0xe71fe514
mov word [esp + 8], 0xf9f8
mov dword [esp + 0xa], 0
mov word [esp + 0xe], 0
mov dword [esp + 0x10], 0
mov eax, dword [esp + 0x10]
cmp eax, 0xf
ja 0x40fa29
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 0x10]
movzx eax, byte [esp + eax]
push dword [esp + 0x10]
push eax
call fcn.00411870
add esp, 8
mov ecx, dword [esp + 0x10]
mov byte [esp + ecx], al
inc dword [esp + 0x10]
mov eax, dword [esp + 0x10]
cmp eax, 0x10
jb 0x40fa00
lea eax, [esp + 0x10]
mov ecx, esp
push 0
push eax
push 8
push esi
push ebp
push ecx
push edi
call fcn.00410440
add esp, 0x1c
test al, al
je 0x40fb54
mov word [esp + 0x18], 0x6675
mov byte [esp + 0x1a], 0xda
mov dword [esp + 0x1b], 0
mov dword [esp], 0
mov eax, dword [esp]
cmp eax, 6
ja 0x40fa96
nop
nop
nop
nop
nop
mov eax, dword [esp]
movzx eax, byte [esp + eax + 0x18]
push dword [esp]
push eax
call fcn.00411980
add esp, 8
mov ecx, dword [esp]
mov byte [esp + ecx + 0x18], al
inc dword [esp]
mov eax, dword [esp]
cmp eax, 7
jb 0x40fa70
xor eax, eax
mov ecx, dword [esp + 0x10]
nop
nop
nop
nop
movzx edx, byte [ecx + eax]
mov dh, byte [esp + eax + 0x18]
test dl, dl
je 0x40fab1
inc eax
cmp dl, dh
je 0x40faa0
mov al, 1
mov dword [esp + 0x14], eax
cmp dl, dh
je 0x40fd22
mov dword [esp + 0x18], 0x857b7889
mov dword [esp + 0x1c], 0x158c828b
mov dword [esp + 0x20], 0
mov dword [esp], 0
mov eax, dword [esp]
cmp eax, 0xb
ja 0x40fb16
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp]
movzx eax, byte [esp + eax + 0x18]
push dword [esp]
push eax
call fcn.00411a00
add esp, 8
mov ecx, dword [esp]
mov byte [esp + ecx + 0x18], al
inc dword [esp]
mov eax, dword [esp]
cmp eax, 0xc
jb 0x40faf0
mov eax, dword [esp + 0x10]
movzx ebx, byte [esp + 0x18]
test bl, bl
je 0x40fb5b
mov edx, ebp
mov ecx, eax
jmp 0x40fb37
movzx ebx, byte [edx]
test bl, bl
je 0x40fb5d
mov bh, byte [eax]
test bh, bh
je 0x40fd1a
inc eax
inc edx
lea esi, [ecx + 1]
cmp bh, bl
je 0x40fb4e
mov ecx, esi
mov eax, esi
je 0x40fb30
mov edx, ebp
jmp 0x40fb30
xor eax, eax
jmp 0x40fd32
mov ecx, eax
test ecx, ecx
je 0x40fd1a
mov dword [esp + 0x18], 0xda23e81a
mov dword [esp + 0x1c], 0x2fd39bf1
mov dword [esp + 0x20], 0x9f902623
mov dword [esp + 0x24], 0x262edc26
mov dword [esp + 0x28], 0xa788fcd5
mov word [esp + 0x2c], 0
mov byte [esp + 0x2e], 0
mov dword [esp], 0
mov eax, dword [esp]
cmp eax, 0x16
ja 0x40fbd6
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp]
movzx eax, byte [esp + eax + 0x18]
push dword [esp]
push eax
call fcn.00411a80
add esp, 8
mov ecx, dword [esp]
mov byte [esp + ecx + 0x18], al
inc dword [esp]
mov eax, dword [esp]
cmp eax, 0x17
jb 0x40fbb0
mov eax, dword [esp + 0x10]
movzx ecx, byte [esp + 0x18]
test cl, cl
je 0x40fc14
lea edi, [esp + 0x18]
mov edx, edi
mov esi, eax
jmp 0x40fbf7
movzx ecx, byte [edx]
test cl, cl
je 0x40fc16
mov ch, byte [eax]
test ch, ch
je 0x40fd1a
inc eax
inc edx
lea ebx, [esi + 1]
cmp ch, cl
je 0x40fc0e
mov esi, ebx
mov eax, ebx
je 0x40fbf0
mov edx, edi
jmp 0x40fbf0
mov esi, eax
test esi, esi
je 0x40fd1a
mov word [esp + 0x18], 0xe106
mov byte [esp + 0x1a], 0x26
mov dword [esp + 0x1b], 0
mov byte [esp + 0x1f], 0
mov dword [esp], 0
mov eax, dword [esp]
cmp eax, 7
ja 0x40fc76
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp]
movzx eax, byte [esp + eax + 0x18]
push dword [esp]
push eax
call fcn.00411ae0
add esp, 8
mov ecx, dword [esp]
mov byte [esp + ecx + 0x18], al
inc dword [esp]
mov eax, dword [esp]
cmp eax, 8
jb 0x40fc50
movzx eax, byte [esp + 0x18]
test al, al
je 0x40fcb0
add esi, 0x13
lea ebp, [esp + 0x18]
mov ecx, ebp
mov edx, esi
mov edi, esi
jmp 0x40fc97
movzx eax, byte [ecx]
test al, al
je 0x40fcc1
mov ah, byte [edx]
test ah, ah
je 0x40fd1a
inc edx
inc ecx
lea ebx, [edi + 1]
cmp ah, al
je 0x40fcaa
mov edi, ebx
mov edx, ebx
je 0x40fc90
mov ecx, ebp
jmp 0x40fc90
mov byte [0x456248], 1
mov eax, 0x45624a
jmp 0x40fd43
test edi, edi
je 0x40fd1a
mov byte [0x456248], 1
mov dword [esp + 0x18], 0
mov eax, 0x45624a
cmp esi, edi
jae 0x40fd43
xor ebx, ebx
lea ebp, [esp + 0x18]
cmp byte [esi], 0
je 0x40fd3d
push ebp
push edi
push esi
call fcn.00411420
add esp, 0xc
movzx edx, word [esp + 0x18]
lea ecx, [ebx + 2]
mov word [ebx + 0x45624a], dx
cmp ebx, 0x1fb
ja 0x40fd12
add esi, eax
mov ebx, ecx
cmp esi, edi
jb 0x40fce3
lea eax, [ecx + 0x45624a]
jmp 0x40fd43
mov dword [esp + 0x14], 0
push dword [esp + 0x10]
call fcn.004446b0
add esp, 4
mov eax, dword [esp + 0x14]
add esp, 0x8c
pop esi
pop edi
pop ebx
pop ebp
ret
lea eax, [ebx + 0x45624a]
mov word [eax], 0
jmp 0x40fd22