Function at 0x40caa0
Capabilities:
Check for peb beingdebugged flag
Encode data using xor

Disassembly:
push 0xffffffffffffffff
push 0x43e071
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x41c
push ebx
push ebp
mov ebp, ecx
push esi
push edi
lea ecx, [esp + 0x10]
call sub.MFC42.DLL_CString::CString_4
lea ecx, [esp + 0x18]
mov dword [esp + 0x434], 0
call sub.MFC42.DLL_CString::CString_4
mov edi, dword [esp + 0x444]
mov ebx, dword [0x45af6c]
push edi
lea eax, [esp + 0x14]
push str._03d
push eax
mov byte [esp + 0x440], 1
lea ebx, [ebx + ebx*4]
call sub.MFC42.DLL_CString::Format
mov eax, dword [esp + 0x1c]
add bl, byte [esp + 0x448]
mov esi, 7
add esp, 0xc
mov cl, byte [eax]
mov dl, byte [eax + 1]
mov al, byte [eax + 2]
add bl, 0x30
mov byte [esp + 0x24], dl
mov byte [esp + 0x28], al
mov byte [esp + 0x20], cl
mov byte [esp + 0x2e], bl
mov bl, byte [esp + 0x440]
mov byte [esp + 0x30], cl
mov ecx, dword [esp + 0x24]
mov byte [esp + 0x32], al
mov eax, dword [esp + 0x28]
mov byte [esp + 0x31], dl
mov edx, dword [esp + 0x20]
add bl, 0x30
and eax, 0xff
and ecx, 0xff
mov byte [esp + 0x2f], bl
xor eax, ecx
mov ecx, dword [esp + 0x2f]
and edx, 0xff
xor eax, edx
mov edx, dword [esp + 0x2e]
and ecx, 0xff
and edx, 0xff
xor eax, ecx
lea ecx, [edi + 7]
xor eax, edx
mov byte [esp + 0x2c], 2
xor eax, 0xb0
cmp ecx, esi
mov byte [esp + 0x2d], 0xb0
jle 0x40cbb7
mov edi, dword [esp + 0x448]
mov dl, byte [edi]
add edi, 4
mov byte [esp + esi + 0x2c], dl
mov ebx, dword [edi - 4]
xor eax, ebx
inc esi
cmp esi, ecx
jl 0x40cba4
mov byte [esp + esi + 0x2c], al
inc esi
lea edi, [ebp + 0x3c]
mov byte [esp + esi + 0x2c], 3
mov ecx, edi
inc esi
call fcn.0040c140
lea eax, [esp + 0x2c]
push esi
push eax
mov ecx, ebp
call fcn.0040c4e0
cmp esi, eax
je 0x40cc09
lea ecx, [esp + 0x18]
mov byte [esp + 0x434], 0
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x10]
mov dword [esp + 0x434], 0xffffffff
call sub.MFC42.DLL_CString::CString
xor eax, eax
jmp 0x40ccc6
lea ecx, [esp + 0x1c]
xor bl, bl
call sub.MFC42.DLL_CString::CString_4
mov esi, dword [sym.imp.MSVCRT.dll_clock]
call esi
mov ebp, eax
add ebp, 0x7d0
mov dword [esp + 0x20], ebp
call esi
cmp ebp, eax
jle 0x40cc84
mov ecx, edi
call fcn.0040c160
mov esi, eax
test esi, esi
je 0x40cc7a
xor ebp, ebp
test esi, esi
jle 0x40cc76
lea ecx, [esp + 0x17]
push ecx
mov ecx, edi
call fcn.0040c1e0
mov al, byte [esp + 0x17]
cmp al, 2
jne 0x40cc5d
test bl, bl
jne 0x40cc71
mov bl, 1
jmp 0x40cc71
test bl, bl
je 0x40cc71
cmp al, 6
je 0x40cce1
cmp al, 4
je 0x40cd1e
cmp al, 0x15
je 0x40cc8b
inc ebp
cmp ebp, esi
jl 0x40cc41
mov ebp, dword [esp + 0x20]
call dword [sym.imp.MSVCRT.dll_clock]
cmp ebp, eax
jg 0x40cc2e
mov ecx, edi
call fcn.0040c140
lea ecx, [esp + 0x1c]
mov byte [esp + 0x434], 1
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x18]
mov byte [esp + 0x434], 0
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x10]
mov dword [esp + 0x434], 0xffffffff
call sub.MFC42.DLL_CString::CString
mov eax, 0x15
mov ecx, dword [esp + 0x42c]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x428
ret 0x10
lea ecx, [esp + 0x1c]
mov byte [esp + 0x434], 1
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x18]
mov byte [esp + 0x434], 0
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x10]
mov dword [esp + 0x434], 0xffffffff
call sub.MFC42.DLL_CString::CString
mov eax, 6
jmp 0x40ccc6
lea ecx, [esp + 0x1c]
mov byte [esp + 0x434], 1
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x18]
mov byte [esp + 0x434], 0
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x10]
mov dword [esp + 0x434], 0xffffffff
call sub.MFC42.DLL_CString::CString
mov eax, 4
jmp 0x40ccc6