Function at 0x40dd20
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0xb0
cmp dword [ecx + 0x20], 0
je 0x40e227
movzx eax, byte [ecx]
mov esi, ecx
lea ecx, [esp + 0xac]
push 0xa
push 4
push ecx
push eax
call fcn.0040e240
add esp, 0x10
mov ebx, eax
lea eax, [esi + 0x10]
push eax
call fcn.0040a660
add esp, 4
mov ecx, dword [esi + 0x10]
mov dword [esp + 0x1c], esi
mov eax, dword [esi + 0x58]
mov eax, dword [eax + 0x48]
mov dword [esp + 8], eax
mov dword [esp], ecx
lea eax, [ecx + 0x400]
push eax
call fcn.0040c7f0
add esp, 4
mov dword [esp + 4], eax
mov dword [esp + 0x20], 0x15ede214
mov byte [esp + 0x24], pe_nt_image_headers32
mov dword [esp + 0x25], 0
mov byte [esp + 0x29], 0
mov eax, 0xc651606b
mov ecx, 0x94
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [esp + eax + 0x39ae9fb5]
mov esi, ecx
xor esi, eax
and esi, edx
xor esi, eax
mov edx, esi
not edx
lea edi, [esi + 0x20691de8]
mov ebp, edi
xor ebp, 0xfe
or edi, 1
and edi, ebp
or edx, 0xfe
add edx, esi
add edx, edi
add dl, 0xea
mov byte [esp + eax + 0x39ae9fb5], dl
inc eax
dec ecx
cmp eax, 0xc6516075
jne 0x40ddb0
lea eax, [esp + 0x20]
mov ebp, dword [esp + 0x1c]
mov ecx, ebp
push 0x451a80
push eax
mov edi, dword [esp + 0xc]
push edi
call fcn.0040d6b0
mov dword [esp + 0x20], 0x57baa0b8
mov eax, 0xe
mov ecx, 0x71
mov esi, ecx
and esi, 0x75
mov edx, eax
and edx, 0xa
or edx, esi
xor dl, byte [esp + eax + 0x12]
xor dl, 0xf5
add dl, 0x3a
mov byte [esp + eax + 0x12], dl
inc eax
dec ecx
cmp eax, 0x12
jne 0x40de20
mov ecx, ebp
push ebx
lea eax, [esp + 0x24]
push eax
push edi
call fcn.0040d6b0
mov esi, dword [str.h5NCZH__trafforme]
mov dword [esp + 0x20], 0x335e5844
mov dword [esp + 0x24], 0
mov ecx, 0xcd5e01b4
mov edx, 0x32a1fe4b
nop
movzx eax, byte [esp + ecx + 0x32a1fe6c]
mov ebx, eax
xor ebx, ecx
or ebx, edx
add bl, bl
add bl, al
movzx eax, bl
add eax, ecx
add al, 0x7e
mov byte [esp + ecx + 0x32a1fe6c], al
inc ecx
dec edx
cmp ecx, 0xcd5e01bc
jne 0x40de70
mov ecx, ebp
push esi
lea eax, [esp + 0x24]
push eax
push edi
call fcn.0040d6b0
mov dword [esp + 0x20], 0x7b646477
mov dword [esp + 0x24], 0x6c7f6077
mov dword [esp + 0x28], 0x7275706f
mov byte [esp + 0x2c], 0xdc
mov dword [esp + 0x2d], 0
mov dword [esp + 0x30], 0
mov eax, 0x53e81ae
mov ecx, 0xb2c17e51
nop
movzx edx, byte [esp + eax - 0x53e818e]
mov esi, ecx
and esi, 0xa0c02e50
mov edi, eax
and edi, 0x50000af
or edi, esi
xor edi, edx
xor edi, 0xe8feaf50
add edi, 0x7dc77799
mov edx, edi
and edx, 1
xor edi, 1
lea edx, [edi + edx*2]
mov byte [esp + eax - 0x53e818e], dl
inc eax
dec ecx
cmp eax, 0x53e81c2
jne 0x40dee0
mov dword [esp + 0xc], 0xc9465653
mov word [esp + 0x10], 0
mov byte [esp + 0x12], 0
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
mov ecx, eax
add cl, 0xd3
xor cl, byte [esp + eax + 0xc]
add cl, 0xe1
mov byte [esp + eax + 0xc], cl
inc eax
cmp eax, 7
jne 0x40df40
lea edx, [esp + 0xc]
mov ecx, ebp
lea eax, [esp + 0x20]
push eax
push edx
mov edi, dword [esp + 0xc]
push edi
call fcn.0040d6b0
mov dword [esp + 0x20], 0x525e5c56
mov byte [esp + 0x24], 0xc8
mov word [esp + 0x25], 0
mov byte [esp + 0x27], 0
mov eax, 0xd3
mov ecx, 0x2c
nop
movzx esi, byte [esp + eax - 0xb3]
mov edx, ecx
xor edx, eax
and edx, esi
xor edx, eax
add dl, 0xe1
mov byte [esp + eax - 0xb3], dl
inc eax
dec ecx
cmp eax, 0xdb
jne 0x40df90
mov ecx, ebp
push dword [esp]
push dword [esp + 0xc]
lea eax, [esp + 0x28]
push eax
push edi
call fcn.0040d930
mov eax, dword [ebp + 0x60]
mov dword [esp + 0xa8], eax
mov dword [esp + 0x20], 0x49db4bb1
mov dword [esp + 0x24], 0x45ca47da
mov dword [esp + 0x28], 0x41d043df
mov dword [esp + 0x2c], 0x7dad7fcc
mov dword [esp + 0x30], 0x79fd7b90
mov dword [esp + 0x34], 0x75ed77e8
mov dword [esp + 0x38], 0x715273b2
mov dword [esp + 0x3c], 0x6de56fe3
mov dword [esp + 0x40], 0x69e66bf8
mov dword [esp + 0x44], 0x65f667ff
mov dword [esp + 0x48], 0x61ec63fb
mov dword [esp + 0x4c], 0x1dcf1fec
mov dword [esp + 0x50], 0x198b1b86
mov dword [esp + 0x54], 0x15851796
mov dword [esp + 0x58], 0x118e13c7
mov dword [esp + 0x5c], 0xd820f8f
mov dword [esp + 0x60], 0x9cf0b93
mov dword [esp + 0x64], 0x5980728
mov dword [esp + 0x68], 0x1890395
mov dword [esp + 0x6c], 0x3da23f92
mov dword [esp + 0x70], 0x39b43ba3
mov dword [esp + 0x74], 0x35f537bf
mov dword [esp + 0x78], 0x31a933aa
mov dword [esp + 0x7c], 0x2de52ff8
mov dword [esp + 0x80], 0x29b12bb0
mov dword [esp + 0x84], 0x25b127e3
mov dword [esp + 0x88], 0x21be23b4
mov dword [esp + 0x8c], 0xdd43dfb1
mov dword [esp + 0x90], 0xd941db4b
mov dword [esp + 0x94], 0xd558d756
mov dword [esp + 0x98], 0xd11dd34f
mov dword [esp + 0x9c], 0xcdf8cfe3
mov word [esp + 0xa0], 0xcbcc
mov byte [esp + 0xa6], 0
mov dword [esp + 0xa2], 0
mov ecx, 1
mov edx, 0xffffffff
xor ebp, ebp
mov esi, 2
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov dword [esp], edx
mov edx, dword [esp]
or edx, 0x1b9c0613
mov eax, ebp
and eax, 0x26
mov dword [esp + 8], eax
lea ebx, [edx + edx]
sub ebx, eax
lea edi, [ecx + esi]
add ebx, edi
add ebx, 0x9b9c0612
movzx eax, byte [esp + ecx + 0x1f]
and ebx, eax
add dl, dl
add dl, al
sub dl, byte [esp + 8]
add bl, bl
sub dl, bl
movzx eax, dl
add eax, ecx
add eax, ebp
mov edx, dword [esp]
add al, 0xb5
mov byte [esp + ecx + 0x1f], al
inc ecx
dec edx
add ebp, 2
add esi, 2
cmp ecx, 0x88
jne 0x40e120
mov dword [esp + 0xc], 0x8f2f897b
mov dword [esp + 0x10], 0x833b8d3c
mov word [esp + 0x14], 0x8180
mov dword [esp + 0x16], 0
mov word [esp + 0x1a], 0
mov eax, 0xdaa38f62
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ecx, byte [esp + eax + 0x255c70aa]
xor ecx, eax
lea edx, [ecx - 0x4531cceb]
mov esi, edx
and esi, 1
and ecx, 1
and edx, 0xfe
or edx, ecx
lea ecx, [edx + esi*2]
mov byte [esp + eax + 0x255c70aa], cl
inc eax
cmp eax, 0xdaa38f72
jne 0x40e1b0
push 0x493e0
push dword [esp + 0xac]
mov esi, dword [esp + 0xc]
push esi
push 0
push 0
lea eax, [esp + 0x34]
push eax
lea eax, [esp + 0x24]
push eax
call fcn.00410740
add esp, 0x1c
mov ebx, eax
push esi
call fcn.0040c800
add esp, 4
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx + 0x60]
add dword [ecx + 4], eax
mov dword [ecx + 0x60], 0
jmp 0x40e229
mov bl, 1
mov eax, ebx
add esp, 0xb0
pop esi
pop edi
pop ebx
pop ebp
ret