Function at 0x40cca0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x238
mov eax, dword [0x448a30]
mov dword [esp + 0x38], 0x2ede20f2
mov dword [esp + 0x3c], 0x2adc2cab
mov dword [esp + 0x40], 0x36c328dd
mov dword [esp + 0x44], 0x320234da
mov dword [esp + 0x48], 0x3e0d300a
mov dword [esp + 0x4c], 0x3a1b3c0d
mov dword [esp + 0x50], 0xc61e3811
mov dword [esp + 0x54], 0xc231c432
mov dword [esp + 0x58], 0xce3ec02d
mov dword [esp + 0x5c], 0xca36cc34
mov dword [esp + 0x60], 0xd605c8e9
mov dword [esp + 0x64], 0xd2f3d409
mov dword [esp + 0x68], 0xdeefd0ee
mov dword [esp + 0x6c], 0xdaebdcef
mov dword [esp + 0x70], 0xe6c7d81c
mov dword [esp + 0x74], 0xe214e43c
mov dword [esp + 0x78], 0xeed5e013
mov dword [esp + 0x7c], 0xea2eecd1
mov dword [esp + 0x80], 0xf60fe8c9
mov dword [esp + 0x84], 0xf2cff4cf
mov dword [esp + 0x88], 0xfedff0c6
mov dword [esp + 0x8c], 0xfa0bfc32
mov dword [esp + 0x90], 0x8673f809
mov dword [esp + 0x94], 0x825a846e
mov dword [esp + 0x98], 0x8e61806a
mov dword [esp + 0x9c], 0x8a7c8c58
mov dword [esp + 0xa0], 0x96a68875
mov dword [esp + 0xa4], 0x92ae94ae
mov dword [esp + 0xa8], 0x9ead90a8
mov dword [esp + 0xac], 0x9aa19ca0
mov dword [esp + 0xb0], 0xa68f98b9
mov dword [esp + 0xb4], 0xa26ba470
mov dword [esp + 0xb8], 0xae7ca07d
mov dword [esp + 0xbc], 0xaa9fac79
mov dword [esp + 0xc0], 0xb643a889
mov dword [esp + 0xc4], 0xb246b442
mov dword [esp + 0xc8], 0xbe9fb05a
mov dword [esp + 0xcc], 0xba50bc74
mov dword [esp + 0xd0], 0x46b2b854
mov dword [esp + 0xd4], 0x427444b4
mov dword [esp + 0xd8], 0x4e824061
mov dword [esp + 0xdc], 0x4ab54ca5
mov dword [esp + 0xe0], 0x56a448b8
mov dword [esp + 0xe4], 0x526254be
mov dword [esp + 0xe8], 0x5e60506e
mov dword [esp + 0xec], 0x5a695c9a
mov dword [esp + 0xf0], 0x66555869
mov dword [esp + 0xf4], 0x62516455
mov dword [esp + 0xf8], 0x6e4f6051
mov dword [esp + 0xfc], 0x6a846cb0
mov dword [esp + 0x100], 0x76986883
mov dword [esp + 0x104], 0x7284748b
mov dword [esp + 0x108], 0x7e447040
mov dword [esp + 0x10c], 0x7a427c40
mov dword [esp + 0x110], 0x63a784b
mov dword [esp + 0x114], 0x203043f
mov byte [esp + 0x11a], 0
mov word [esp + 0x118], 0
mov dword [esp], 0
mov ecx, dword [esp]
cmp ecx, 0xe2
ja 0x40cf43
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [esp]
mov edx, dword [esp]
movzx edx, byte [esp + edx + 0x38]
add ecx, 0x3e4f6ee6
xor ecx, edx
mov dword [esp + 8], ecx
mov ecx, dword [esp + 8]
add cl, 0x39
mov edx, dword [esp]
mov byte [esp + edx + 0x38], cl
inc dword [esp]
mov ecx, dword [esp]
cmp ecx, 0xe3
jb 0x40cf10
lea ebx, [esp + 0x38]
push 0
push 0
push 0
push 0
push ebx
call eax
mov esi, eax
xor eax, eax
test esi, esi
setne al
jmp dword [eax*4 + 0x443cd4]
xor ebx, ebx
jmp 0x40d303
mov eax, dword [0x448a34]
mov dword [esp + 0x38], 0xb6b7a7fc
mov word [esp + 0x3c], 0
mov byte [esp + 0x3e], 0
mov dword [esp], 0
mov ecx, dword [esp]
cmp ecx, 6
ja 0x40cfd0
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [esp]
mov edx, dword [esp]
movzx edx, byte [esp + edx + 0x38]
add ecx, 0x7ef2d976
xor ecx, edx
mov dword [esp + 8], ecx
mov ecx, dword [esp + 8]
add cl, 0x31
mov edx, dword [esp]
mov byte [esp + edx + 0x38], cl
inc dword [esp]
mov ecx, dword [esp]
cmp ecx, 7
jb 0x40cfa0
movzx ecx, word [esp + 0x38]
push 0
push ecx
push 0x448a64
push esi
call eax
mov edi, eax
xor eax, eax
test edi, edi
setne al
jmp dword [eax*4 + 0x443cdc]
xor ebx, ebx
jmp 0x40d2fc
mov dword [esp + 4], 0x7efd7c7b
mov eax, dword [0x448a38]
mov dword [esp + 8], 0
mov ecx, dword [esp + 8]
cmp ecx, 3
ja 0x40d055
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [esp + 8]
mov edx, dword [esp + 8]
movzx edx, byte [esp + edx + 4]
add ecx, 0xfa1b
xor ecx, edx
mov dword [esp + 0x38], ecx
mov ecx, dword [esp + 0x38]
add cl, 0xa0
mov edx, dword [esp + 8]
mov byte [esp + edx + 4], cl
inc dword [esp + 8]
mov ecx, dword [esp + 8]
cmp ecx, 4
jb 0x40d020
mov edx, dword [esp + 4]
mov dword [esp + 0x38], 0x45f343f0
mov dword [esp + 0x3c], 0x49f247f1
mov dword [esp + 0x40], 0x4b48
mov dword [esp], 0
mov ebp, dword [esp]
cmp ebp, 0xb
ja 0x40d0b0
mov ebp, dword [esp]
mov ecx, dword [esp]
movzx ecx, byte [esp + ecx + 0x38]
add ebp, 0x8965e071
xor ebp, ecx
mov dword [esp + 8], ebp
mov ecx, dword [esp + 8]
add cl, 0xcf
mov ebp, dword [esp]
mov byte [esp + ebp + 0x38], cl
inc dword [esp]
mov ecx, dword [esp]
cmp ecx, 0xc
jb case.default.0x40d0cb
push edx
push 0
push 0
push 0
push dword [esp + 0x25c]
push ebx
push edi
call eax
mov ebp, eax
xor eax, eax
test ebp, ebp
setne al
jmp dword [eax*4 + 0x443ce4]
xor ebx, ebx
jmp 0x40d2f5
xor eax, eax
mov ecx, dword [esp + 0x264]
test ecx, ecx
setg al
jmp dword [eax*4 + 0x443cec]
movzx eax, byte [0x448b68]
jmp dword [eax*4 + 0x443cf4]
push ecx
push ecx
push ecx
push ecx
push ebp
call dword [0x448a40]
movzx eax, byte [0x448b68]
jmp dword [eax*4 + 0x443cf4]
mov dword [esp + 8], 0x94049256
mov dword [esp + 0xc], 0x98749606
mov dword [esp + 0x10], 0x9c7a9a70
mov dword [esp + 0x14], 0x80a19e45
mov dword [esp + 0x18], 0x84648262
mov dword [esp + 0x1c], 0x886f8662
mov dword [esp + 0x20], 0x8c628a6a
mov dword [esp + 0x24], 0xb0508e16
mov dword [esp + 0x28], 0xb42eb251
mov dword [esp + 0x2c], 0xb866b627
mov word [esp + 0x30], 0xbabb
mov dword [esp + 0x32], 0
mov byte [esp + 0x36], 0
mov dword [esp], 0
mov eax, dword [esp]
cmp eax, 0x2e
ja 0x40d1be
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp]
mov ecx, dword [esp]
movzx ecx, byte [esp + ecx + 8]
add eax, 0x8c6f8ec2
xor eax, ecx
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x38]
add al, 0xaf
mov ecx, dword [esp]
mov byte [esp + ecx + 8], al
inc dword [esp]
mov eax, dword [esp]
cmp eax, 0x2f
jb 0x40d190
movzx eax, word [esp + 8]
test ax, ax
je 0x40d1e1
lea ebx, [esp + 0x38]
lea ecx, [esp + 0xa]
mov word [ebx], ax
add ebx, 2
movzx eax, word [ecx]
add ecx, 2
test ax, ax
jne 0x40d1d0
mov word [ebx], 0
movzx eax, word [0x448b6a]
test ax, ax
je 0x40d215
xor ecx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [ebx + ecx], ax
movzx eax, word [ecx + 0x448b6c]
add ecx, 2
test ax, ax
jne 0x40d200
add ebx, ecx
mov word [ebx], 0
mov eax, dword [0x448a44]
mov dword [esp + 8], 0xe4c5c6c7
mov word [esp + 0xc], 0
mov dword [esp + 4], 0
mov ecx, dword [esp + 4]
cmp ecx, 5
ja 0x40d273
nop
mov ecx, dword [esp + 4]
mov edx, dword [esp + 4]
movzx edx, byte [esp + edx + 8]
add ecx, 0xb88ea9d0
xor ecx, edx
mov dword [esp], ecx
mov ecx, dword [esp]
add cl, 0xe9
mov edx, dword [esp + 4]
mov byte [esp + edx + 8], cl
inc dword [esp + 4]
mov ecx, dword [esp + 4]
cmp ecx, 6
jb 0x40d240
lea ecx, [esp + 0x38]
push dword [esp + 8]
push 0xffffffffffffffff
push ecx
push ebp
call eax
xor eax, eax
mov edx, dword [esp + 0x250]
mov ecx, edx
neg ecx
sbb eax, eax
push 0
mov ebx, dword [esp + 0x264]
push ebx
push dword [esp + 0x260]
push dword [esp + 0x260]
push eax
push edx
push ebp
call dword [0x448a48]
xor ecx, ecx
test eax, eax
setne cl
jmp dword [ecx*4 + 0x443cfc]
xor ebx, ebx
jmp 0x40d324
mov dword [esp + 0x38], 0
lea eax, [esp + 0x38]
push eax
push ebx
push dword [esp + 0x264]
push ebp
call dword [0x448a58]
xor ecx, ecx
test eax, eax
setne cl
xor ebx, ebx
jmp dword [ecx*4 + 0x443d04]
jmp dword [0x443d10]
push edi
call dword [0x448a5c]
push esi
call dword [0x448a5c]
mov eax, ebx
add esp, 0x238
pop esi
pop edi
pop ebx
pop ebp
ret
xor ecx, ecx
test eax, eax
setne cl
xor ebx, ebx
jmp dword [ecx*4 + 0x443d1c]
jmp 0x40d324
mov bl, 1
push ebp
call dword [0x448a5c]
jmp 0x40d2f5
push 0
push ebp
call dword [0x448a4c]
push 0
push ebp
call dword [0x448a4c]
jmp dword [0x443d14]