Function at 0x40adc0
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x1a0
mov eax, dword [0x4481a4]
mov dword [esp + 0x18], 0x4beb45df
mov dword [esp + 0x1c], 0x4fe049d8
mov dword [esp + 0x20], 0x33d84dda
mov dword [esp + 0x24], 0x37e231a2
mov dword [esp + 0x28], 0x3b983592
mov dword [esp + 0x2c], 0x3f383996
mov dword [esp + 0x30], 0
mov word [esp + 0x34], 0
mov ecx, 0xc6134f35
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [esp + ecx + 0x39ecb0e3]
mov esi, ecx
and esi, edx
add esi, esi
sub edx, esi
add edx, ecx
mov dword [esp + 0x11c], edx
mov edx, dword [esp + 0x11c]
add dl, 0x8d
mov byte [esp + ecx + 0x39ecb0e3], dl
movzx edx, byte [esp + ecx + 0x39ecb0e4]
lea esi, [ecx + 1]
and esi, edx
add esi, esi
sub edx, esi
add edx, ecx
inc edx
mov dword [esp + 0x11c], edx
mov edx, dword [esp + 0x11c]
add dl, 0x8d
mov byte [esp + ecx + 0x39ecb0e4], dl
add ecx, 2
cmp ecx, 0xc6134f53
jne 0x40ae20
lea esi, [esp + 0x18]
push 0x800
push 0
push esi
call eax
mov ecx, 0x44816c
push eax
call fcn.0043a6e0
test al, al
je 0x40b352
push 0xd16c9e6b
push dword [0x44816c]
call fcn.0043c8f0
add esp, 8
mov dword [0x448174], eax
push 0x2b39326b
push dword [0x44816c]
call fcn.0043c8f0
add esp, 8
mov dword [0x448178], eax
push 0x20eddf4
push dword [0x44816c]
call fcn.0043c8f0
add esp, 8
mov dword [0x44817c], eax
push 0x6f420210
push dword [0x44816c]
call fcn.0043c8f0
add esp, 8
mov dword [0x448180], eax
push 0xbb4ac2a9
push dword [0x44816c]
call fcn.0043c8f0
add esp, 8
mov dword [0x448184], eax
push 0xe03c21ff
push dword [0x44816c]
call fcn.0043c8f0
add esp, 8
mov dword [0x448188], eax
push 0xb35fc6e6
push dword [0x44816c]
call fcn.0043c8f0
add esp, 8
mov dword [0x44818c], eax
push 0xe3a9b6db
push dword [0x44816c]
call fcn.0043c8f0
add esp, 8
mov dword [0x448190], eax
push 0xe81e9fc0
push dword [0x44816c]
call fcn.0043c8f0
add esp, 8
mov dword [0x448194], eax
push 0x70f53c13
push dword [0x44816c]
call fcn.0043c8f0
add esp, 8
mov dword [0x448198], eax
push 0xb54b293a
push dword [0x44816c]
call fcn.0043c8f0
add esp, 8
mov dword [0x44819c], eax
push 0x9b73555b
push dword [0x44816c]
call fcn.0043c8f0
add esp, 8
mov dword [0x4481a0], eax
mov eax, 0x4405f4
nop
nop
nop
nop
nop
nop
nop
nop
nop
lea ecx, [esp + 0x11c]
push ecx
mov dword [esp + 0x14], eax
push dword [eax]
call fcn.00436000
add esp, 8
mov eax, 0xffffffff
nop
nop
nop
nop
nop
cmp byte [esp + eax + 0x11d], 0
lea eax, [eax + 1]
jne 0x40aff0
mov dword [esp + 8], 0
mov edx, esi
test eax, eax
jle 0x40b070
lea ecx, [esp + eax]
add ecx, 0x11c
xor ebx, ebx
lea edx, [esp + 0x18]
lea edi, [esp + 0x11c]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp byte [edi], 0
je 0x40b070
lea eax, [esp + 8]
push eax
push ecx
push edi
mov esi, ecx
mov dword [esp + 0x10], edx
call fcn.0040d780
mov edx, dword [esp + 0x10]
add esp, 0xc
movzx ecx, word [esp + 8]
mov word [edx], cx
add edx, 2
cmp ebx, 0x7d
ja 0x40b070
add edi, eax
inc ebx
cmp edi, esi
mov ecx, esi
jb 0x40b030
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [edx], 0
lea esi, [esp + 0x18]
push esi
call fcn.0040b750
add esp, 4
test al, al
jne 0x40b222
mov eax, dword [esp + 0x10]
add eax, 4
cmp eax, 0x440618
jne 0x40afd0
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessVersion]
mov dword [esp + 0xc], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0x43cc41be
mov dword [esp + 0x1c], 0x5fac5dce
mov dword [esp + 0x20], 0x5b9259d3
mov dword [esp + 0x24], 0x5765556b
mov dword [esp + 0x28], 0x53dc51db
mov dword [esp + 0x2c], 0x6f8f6dad
mov dword [esp + 0x30], 0x6b956999
mov dword [esp + 0x34], 0x6793659b
mov dword [esp + 0x38], 0x63ef6191
mov dword [esp + 0x3c], 0x7f877d94
mov dword [esp + 0x40], 0x7bf379f2
mov dword [esp + 0x44], 0x7789754c
mov dword [esp + 0x48], 0x73877187
mov dword [esp + 0x4c], 0xffc0d43
mov dword [esp + 0x50], 0xbf909fc
mov dword [esp + 0x54], 0x7ff05f4
mov dword [esp + 0x58], 0x3ff01f2
mov dword [esp + 0x5c], 0x1f2d1d8f
mov dword [esp + 0x60], 0x1bd619d7
mov dword [esp + 0x64], 0x17da15d5
mov dword [esp + 0x68], 0x13231125
mov dword [esp + 0x6c], 0x2fe72dd9
mov dword [esp + 0x70], 0x2b1a29e7
mov dword [esp + 0x74], 0x27e925e6
mov dword [esp + 0x78], 0x231321eb
mov dword [esp + 0x7c], 0x3f0c3de9
mov dword [esp + 0x80], 0x3b38390e
mov dword [esp + 0x8b], 0
mov dword [esp + 0x88], 0
mov dword [esp + 0x84], 0
mov eax, 0x6064c30b
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ecx, byte [esp + eax - 0x6064c2f3]
mov edx, eax
and edx, ecx
add edx, edx
sub ecx, edx
add ecx, eax
mov dword [esp + 0x11c], ecx
mov ecx, dword [esp + 0x11c]
add cl, 0xb3
mov byte [esp + eax - 0x6064c2f3], cl
cmp eax, 0x6064c381
je 0x40b264
movzx ecx, byte [esp + eax - 0x6064c2f2]
lea edx, [eax + 1]
and edx, ecx
add edx, edx
sub ecx, edx
add ecx, eax
inc ecx
mov dword [esp + 0x11c], ecx
mov ecx, dword [esp + 0x11c]
add cl, 0xb3
mov byte [esp + eax - 0x6064c2f2], cl
add eax, 2
jmp 0x40b1c0
movzx eax, word [esp + 0x18]
test ax, ax
je 0x40b39e
mov ecx, 2
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [ecx + 0x4481a6], ax
movzx eax, word [esp + ecx + 0x18]
add ecx, 2
test ax, ax
jne 0x40b240
mov word [ecx + 0x4481a6], 0
mov bl, 1
jmp 0x40b354
lea eax, [esp + 0x14]
lea ecx, [esp + 0xc]
lea edi, [esp + 0x18]
push eax
push ecx
push edi
call fcn.0040bf90
add esp, 0xc
test al, al
je 0x40b352
mov dword [esp + 0x18], 0x6c747882
mov dword [esp + 0x1c], 0x7b6da170
mov dword [esp + 0x20], 0x88717061
mov dword [esp + 0x24], 0x6b6566a4
mov dword [esp + 0x28], 0x72607a6d
mov dword [esp + 0x2c], 0x626e7a62
mov dword [esp + 0x30], 0x7a736f6f
mov dword [esp + 0x34], 0x8c6b7668
mov word [esp + 0x38], 0x6748
mov byte [esp + 0x3a], 0x24
mov dword [esp + 0x3b], 0
mov dword [esp + 0x3f], 0
mov dword [esp + 0x43], 0
mov eax, 0x4dc791e1
nop
nop
nop
nop
movzx ecx, byte [esp + eax - 0x4dc791c9]
mov edx, eax
and edx, ecx
add edx, edx
sub ecx, edx
add ecx, eax
mov dword [esp + 0x11c], ecx
mov ecx, dword [esp + 0x11c]
add cl, 0xd9
mov byte [esp + eax - 0x4dc791c9], cl
cmp eax, 0x4dc7920f
je 0x40b35e
movzx ecx, byte [esp + eax - 0x4dc791c8]
lea edx, [eax + 1]
and edx, ecx
add edx, edx
sub ecx, edx
add ecx, eax
inc ecx
mov dword [esp + 0x11c], ecx
mov ecx, dword [esp + 0x11c]
add cl, 0xd9
mov byte [esp + eax - 0x4dc791c8], cl
add eax, 2
jmp 0x40b2f0
xor ebx, ebx
mov eax, ebx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov ecx, dword [esp + 0xc]
movzx ebx, byte [esp + 0x18]
test bl, bl
je 0x40b3ab
mov esi, ecx
mov edx, edi
jmp 0x40b38c
inc esi
mov edx, edi
mov ecx, esi
movzx ebx, byte [edx]
test bl, bl
je 0x40b3ad
mov bh, byte [ecx]
test bh, bh
je 0x40b73a
cmp bh, bl
jne 0x40b380
inc ecx
inc edx
jmp 0x40b385
mov word [0x4481a8], 0
mov bl, 1
jmp 0x40b354
mov esi, ecx
test esi, esi
je 0x40b73a
mov dword [esp + 0x18], 0x6b6da88a
mov dword [esp + 0x1c], 0xffb26399
mov dword [esp + 0x20], 0
mov dword [esp + 0x11c], 0x52949355
mov ecx, dword [esp + 0x11c]
add cl, 0xe7
mov byte [esp + 0x18], cl
movzx ecx, byte [esp + 0x19]
lea edx, [ecx + ecx]
and edx, 0xffffffc0
neg edx
add ecx, edx
add ecx, 0x529493e0
mov dword [esp + 0x11c], ecx
mov ecx, dword [esp + 0x11c]
add cl, 0xe7
mov byte [esp + 0x19], cl
movzx ecx, byte [esp + 0x1a]
lea edx, [ecx + ecx]
and edx, 0xffffffc2
neg edx
add ecx, edx
add ecx, 0x529493e1
mov dword [esp + 0x11c], ecx
mov ecx, dword [esp + 0x11c]
add cl, 0xe7
mov byte [esp + 0x1a], cl
movzx ecx, byte [esp + 0x1b]
lea edx, [ecx + ecx]
and edx, 0xffffffc4
neg edx
add ecx, edx
add ecx, 0x529493e2
mov dword [esp + 0x11c], ecx
mov ecx, dword [esp + 0x11c]
add cl, 0xe7
mov byte [esp + 0x1b], cl
movzx ecx, byte [esp + 0x1c]
lea edx, [ecx + ecx]
and edx, 0xffffffc6
neg edx
add ecx, edx
add ecx, 0x529493e3
mov dword [esp + 0x11c], ecx
mov ecx, dword [esp + 0x11c]
add cl, 0xe7
mov byte [esp + 0x1c], cl
movzx ecx, byte [esp + 0x1d]
lea edx, [ecx + ecx]
and edx, 0xffffffc8
neg edx
add ecx, edx
add ecx, 0x529493e4
mov dword [esp + 0x11c], ecx
mov ecx, dword [esp + 0x11c]
add cl, 0xe7
mov byte [esp + 0x1d], cl
movzx ecx, byte [esp + 0x1e]
lea edx, [ecx + ecx]
and edx, 0xffffffca
neg edx
add ecx, edx
add ecx, 0x529493e5
mov dword [esp + 0x11c], ecx
mov ecx, dword [esp + 0x11c]
add cl, 0xe7
mov byte [esp + 0x1e], cl
movzx ecx, byte [esp + 0x1f]
lea edx, [ecx + ecx]
and edx, 0xffffffcc
neg edx
add ecx, edx
add ecx, 0x529493e6
mov dword [esp + 0x11c], ecx
mov ecx, dword [esp + 0x11c]
add cl, 0xe7
mov byte [esp + 0x1f], cl
movzx ecx, byte [esp + 0x20]
lea edx, [ecx + ecx]
and edx, 0xffffffce
neg edx
add ecx, edx
add ecx, 0x529493e7
mov dword [esp + 0x11c], ecx
mov ecx, dword [esp + 0x11c]
add cl, 0xe7
mov byte [esp + 0x20], cl
movzx ecx, byte [esp + 0x21]
lea edx, [ecx + ecx]
and edx, 0xffffffd0
neg edx
add ecx, edx
add ecx, 0x529493e8
mov dword [esp + 0x11c], ecx
mov ecx, dword [esp + 0x11c]
add cl, 0xe7
mov byte [esp + 0x21], cl
movzx ecx, byte [esp + 0x22]
lea edx, [ecx + ecx]
and edx, 0xffffffd2
neg edx
add ecx, edx
add ecx, 0x529493e9
mov dword [esp + 0x11c], ecx
mov ecx, dword [esp + 0x11c]
add cl, 0xe7
mov byte [esp + 0x22], cl
movzx ecx, byte [esp + 0x23]
lea edx, [ecx + ecx]
and edx, 0xffffffd4
neg edx
add ecx, edx
add ecx, 0x529493ea
mov dword [esp + 0x11c], ecx
mov ecx, dword [esp + 0x11c]
add cl, 0xe7
mov byte [esp + 0x23], cl
movzx ebx, byte [esp + 0x18]
test bl, bl
mov dword [esp + 4], esi
je 0x40b5ee
lea edx, [esp + 0x18]
mov ecx, esi
mov edi, edx
jmp 0x40b5dc
inc ecx
mov edi, edx
mov esi, ecx
movzx ebx, byte [edi]
test bl, bl
je 0x40b5f2
mov bh, byte [esi]
test bh, bh
je 0x40b73a
cmp bh, bl
jne 0x40b5d0
inc esi
inc edi
jmp 0x40b5d5
mov ecx, esi
jmp 0x40b5fe
test ecx, ecx
mov esi, dword [esp + 4]
je 0x40b73a
mov byte [ecx], 0
mov ecx, 0xffffffff
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp byte [esi + ecx + 0x23], 0
lea ecx, [ecx + 1]
jne 0x40b610
test ecx, ecx
je 0x40b66a
xor edx, edx
jmp 0x40b64b
mov eax, esi
xor eax, 0x61
and esi, 0x61
lea ebx, [eax + esi*2]
mov esi, dword [esp + 4]
mov byte [esp + edx + 0x11c], bl
inc edx
cmp ecx, edx
je 0x40b66a
movzx ebx, byte [esi + edx + 0x22]
mov eax, ebx
add al, 0x9f
cmp al, 0x19
ja 0x40b63f
movzx edi, bl
lea esi, [edi - 0x52]
cmp esi, 0x1a
jb 0x40b630
add edi, 0xffffff94
mov esi, edi
jmp 0x40b630
mov byte [esp + ecx + 0x11c], 0
mov eax, 0xffffffff
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp byte [esp + eax + 0x11d], 0
lea eax, [eax + 1]
jne 0x40b680
mov dword [esp + 8], 0
lea edx, [esp + 0x18]
test eax, eax
jle 0x40b6f3
lea ebx, [esp + eax]
add ebx, 0x11c
xor edi, edi
lea esi, [esp + 0x11c]
lea edx, [esp + 0x18]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp byte [esi], 0
je 0x40b6f3
lea eax, [esp + 8]
push eax
push ebx
push esi
mov dword [esp + 0x10], edx
call fcn.0040d780
mov edx, dword [esp + 0x10]
add esp, 0xc
movzx ecx, word [esp + 8]
mov word [edx], cx
add edx, 2
cmp edi, 0x3d
ja 0x40b6f3
add esi, eax
inc edi
cmp esi, ebx
jb 0x40b6c0
mov word [edx], 0
lea eax, [esp + 0x18]
push eax
call fcn.0040b750
add esp, 4
test al, al
je 0x40b73a
movzx ecx, word [esp + 0x18]
mov eax, 0x4481a8
test cx, cx
je 0x40b731
lea edx, [esp + 0x1a]
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x40b720
mov word [eax], 0
mov bl, 1
jmp 0x40b73c
xor ebx, ebx
push dword [esp + 0xc]
call fcn.004390d0
add esp, 4
jmp 0x40b354