Function at 0x40d870
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x446b50
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x60
push ebx
push ebp
mov ebp, ecx
xor ebx, ebx
lea ecx, [esp + 0x40]
mov dword [esp + 0x70], ebx
call fcn.00437c2f
mov eax, dword [esp + 0x78]
push ebx
push ebx
push eax
lea ecx, [esp + 0x4c]
mov byte [esp + 0x7c], 1
call fcn.00437d41
test eax, eax
jne 0x40d8e5
lea ecx, [esp + 0x40]
mov byte [esp + 0x70], al
call fcn.00437c84
lea ecx, [esp + 0x78]
mov dword [esp + 0x70], 0xffffffff
call fcn.00436752
pop ebp
pop ebx
mov ecx, dword [esp + 0x60]
mov dword fs:[0], ecx
add esp, 0x6c
ret 8
push esi
push edi
lea ecx, [esp + 0x48]
call fcn.0043803b
mov esi, eax
push esi
call fcn.00436493
add esp, 4
mov edi, eax
lea ecx, [esp + 0x48]
push esi
push edi
call fcn.00437e5e
lea ecx, [esp + 0x48]
call fcn.00437f5c
xor eax, eax
cmp esi, ebx
jle 0x40d925
mov cl, byte [eax + edi]
xor cl, 0x7b
mov byte [eax + edi], cl
inc eax
cmp eax, esi
jl 0x40d917
lea ecx, [esp + 0x10]
lea edx, [esp + 0x1c]
push ecx
push esi
push edi
push edx
mov ecx, ebp
mov dword [esp + 0x20], ebx
call fcn.0040b8c0
mov eax, dword [0x45ccac]
mov dword [esp + 0x14], eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x20], eax
push 0x76
lea ecx, [esp + 0x34]
mov byte [esp + 0x7c], 9
call fcn.00437774
push 0x8b
lea ecx, [esp + 0x2c]
call fcn.00437774
push 0x90
lea ecx, [esp + 0x28]
call fcn.00437774
push 0x91
lea ecx, [esp + 0x24]
call fcn.00437774
mov eax, dword [esp + 0x84]
lea ebx, [ebp + 0x2580]
test eax, eax
je 0x40d9ae
lea ebx, [ebp + 0x25c0]
mov eax, dword [ebx + 0x1c]
push 0
push 0
push 0x1004
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x10]
cmp eax, esi
mov dword [esp + 0x58], 2
jge 0x40db8a
mov ecx, dword [esp + 0x1c]
lea edx, [esp + 0x10]
push edx
push esi
lea eax, [esp + 0x40]
mov dword [esp + 0x64], ecx
push edi
push eax
mov ecx, ebp
call fcn.0040b8c0
push eax
lea ecx, [esp + 0x38]
mov byte [esp + 0x7c], 0xa
call fcn.0043688b
lea ecx, [esp + 0x38]
mov byte [esp + 0x78], 9
call fcn.00436752
lea ecx, [esp + 0x10]
lea edx, [esp + 0x3c]
push ecx
push esi
push edi
push edx
mov ecx, ebp
call fcn.0040b8c0
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x7c], 0xb
call fcn.0043688b
lea ecx, [esp + 0x3c]
mov byte [esp + 0x78], 9
call fcn.00436752
lea eax, [esp + 0x10]
lea ecx, [esp + 0x40]
push eax
push esi
push edi
push ecx
mov ecx, ebp
call fcn.0040b8c0
push eax
lea ecx, [esp + 0x30]
mov byte [esp + 0x7c], 0xc
call fcn.0043688b
lea ecx, [esp + 0x40]
mov byte [esp + 0x78], 9
call fcn.00436752
mov eax, dword [ebx + 0x1c]
lea edx, [esp + 0x58]
push edx
push 0xffffffffffffffff
push 0x100d
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
cmp eax, 0xffffffff
jne 0x40db50
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x14]
push ecx
push edx
mov dword [esp + 0x8c], 0
call fcn.00421df5
add esp, 8
test eax, eax
jne 0x40dabe
mov dword [esp + 0x84], 4
jmp 0x40db02
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x14]
push eax
push ecx
call fcn.00421df5
add esp, 8
test eax, eax
jne 0x40dae1
mov dword [esp + 0x84], 2
jmp 0x40db02
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 0x14]
push edx
push eax
call fcn.00421df5
add esp, 8
test eax, eax
jne 0x40db02
mov dword [esp + 0x84], 1
mov ecx, dword [esp + 0x84]
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x18]
push 0
push ecx
push 0
push 0
push edx
push eax
push 3
mov ecx, ebx
call fcn.004310f7
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
push ecx
push 2
push edx
mov ecx, ebx
call fcn.004311bc
mov ecx, dword [esp + 0x18]
mov eax, ecx
inc ecx
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0x2c]
push ecx
push 3
push eax
mov ecx, ebx
call fcn.004311bc
lea edx, [esp + 0x10]
lea eax, [esp + 0x44]
push edx
push esi
push edi
push eax
mov ecx, ebp
call fcn.0040b8c0
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x7c], 0xd
call fcn.0043688b
lea ecx, [esp + 0x44]
mov byte [esp + 0x78], 9
call fcn.00436752
cmp dword [esp + 0x10], esi
jl 0x40d9d9
push edi
call fcn.004364bc
add esp, 4
mov ecx, ebp
call fcn.0040ef30
lea ecx, [esp + 0x20]
mov byte [esp + 0x78], 8
call fcn.00436752
lea ecx, [esp + 0x24]
mov byte [esp + 0x78], 7
call fcn.00436752
lea ecx, [esp + 0x28]
mov byte [esp + 0x78], 6
call fcn.00436752
lea ecx, [esp + 0x30]
mov byte [esp + 0x78], 5
call fcn.00436752
lea ecx, [esp + 0x2c]
mov byte [esp + 0x78], 4
call fcn.00436752
lea ecx, [esp + 0x34]
mov byte [esp + 0x78], 3
call fcn.00436752
lea ecx, [esp + 0x14]
mov byte [esp + 0x78], 2
call fcn.00436752
lea ecx, [esp + 0x1c]
mov byte [esp + 0x78], 1
call fcn.00436752
lea ecx, [esp + 0x48]
mov byte [esp + 0x78], 0
call fcn.00437c84
lea ecx, [esp + 0x80]
mov dword [esp + 0x78], 0xffffffff
call fcn.00436752
mov ecx, dword [esp + 0x70]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x6c
ret 8