Function at 0x40ee40
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x9c
mov eax, dword [section..data]
xor eax, esp
mov dword [esp + 0x98], eax
push ebx
push esi
push edi
call fcn.00401ea0
call section..text
mov dword [0x42bc24], 0x42bc20
lea eax, [esp + 0x70]
mov dword [esp + 0x74], eax
xor edi, edi
mov dword [0x42bc20], edi
lea eax, [esp + 0x78]
mov dword [esp + 0x7c], eax
mov dword [esp + 0x70], edi
mov dword [esp + 0x78], edi
lea ebx, [edi + 0x7f]
mov dword [0x42bc10], edi
mov dword [0x42bc14], 0x42bc10
mov dword [0x42bc18], edi
mov dword [0x42bc1c], 0x42bc18
mov byte [esp + 0x5c], 0
mov byte [esp + 0x5d], 0x71
mov byte [esp + 0x5e], 4
mov byte [esp + 0x5f], 0x60
mov byte [esp + 0x60], 0x16
mov byte [esp + 0x61], 0x70
mov byte [esp + 0x62], 0x3c
mov byte [esp + 0x63], 0x3a
mov byte [esp + 0x64], 0x16
mov byte [esp + 0x65], 0x70
mov byte [esp + 0x66], 0x4c
mov byte [esp + 0x67], 0x7c
mov byte [esp + 0x68], 0x7c
mov byte [esp + 0x69], 0x57
mov byte [esp + 0x6a], 0x69
mov byte [esp + 0x6b], 0x7c
mov byte [esp + 0x6c], 7
mov al, byte [esp + 0x5d]
cmp byte [esp + 0x5c], 0
jne 0x40ef3c
xor esi, esi
mov al, byte [esp + esi + 0x5d]
movzx ecx, al
sub ecx, 7
lea eax, [ecx*8]
sub eax, ecx
cdq
idiv ebx
lea eax, [edx + 0x7f]
cdq
idiv ebx
mov byte [esp + esi + 0x5d], dl
inc esi
cmp esi, 0x10
jb 0x40ef16
mov eax, dword [0x42bbe8]
mov ecx, dword [eax + 0x64]
test ecx, ecx
jne 0x40ef5e
push 0xf701962c
xor edx, edx
call fcn.00401820
mov ecx, eax
mov eax, dword [0x42bbe8]
mov dword [eax + 0x64], ecx
lea eax, [esp + 0x5d]
push eax
push 1
push 0
call ecx
mov esi, eax
mov eax, dword [0x42bbe8]
mov ecx, dword [eax + 0x2c]
test ecx, ecx
jne 0x40ef8d
push 0x6a095e21
xor edx, edx
call fcn.00401820
mov ecx, eax
mov eax, dword [0x42bbe8]
mov dword [eax + 0x2c], ecx
push 0
push esi
call ecx
test eax, eax
jne 0x40f1a4
mov eax, dword [0x42bbe8]
mov ecx, dword [eax + 0x60]
test ecx, ecx
jne 0x40efbc
push 0xd52132a3
xor edx, edx
call fcn.00401820
mov ecx, eax
mov eax, dword [0x42bbe8]
mov dword [eax + 0x60], ecx
call ecx
mov ecx, eax
call fcn.0040e4f0
mov eax, dword [0x42bbe8]
mov ecx, dword [eax + 0x4c]
test ecx, ecx
jne 0x40efe7
push 0xdf1af05e
xor edx, edx
call fcn.00401820
mov ecx, eax
mov eax, dword [0x42bbe8]
mov dword [eax + 0x4c], ecx
lea eax, [esp + 0x80]
push eax
call ecx
mov eax, dword [0x42a0d8]
mov esi, dword [esp + 0x94]
cmp eax, 0xb
jne 0x40f1c0
lea edx, [esi + esi]
cmp eax, 0xb
je 0x40f017
cmp eax, 0xa
jne 0x40f372
xor ecx, ecx
call fcn.00414ea0
test eax, eax
jne 0x40f1d3
mov byte [esp + 0x10], al
mov byte [esp + 0x11], 0x52
mov byte [esp + 0x12], 0x10
mov byte [esp + 0x13], 0x31
mov byte [esp + 0x14], 0x10
mov byte [esp + 0x15], 0x16
mov byte [esp + 0x16], 0x10
mov byte [esp + 0x17], 0x3e
mov byte [esp + 0x18], 0x10
mov byte [esp + 0x19], 0x75
mov byte [esp + 0x1a], 0x10
mov byte [esp + 0x1b], 0x39
mov byte [esp + 0x1c], 0x10
mov byte [esp + 0x1d], 0x7b
mov byte [esp + 0x1e], 0x10
mov byte [esp + 0x1f], 0x2b
mov byte [esp + 0x20], 0x10
mov byte [esp + 0x21], 0x46
mov byte [esp + 0x22], 0x10
mov byte [esp + 0x23], 0x31
mov byte [esp + 0x24], 0x10
mov byte [esp + 0x25], 0x75
mov byte [esp + 0x26], 0x10
mov byte [esp + 0x27], 0x46
mov byte [esp + 0x28], 0x10
mov byte [esp + 0x29], 0x39
mov byte [esp + 0x2a], 0x10
mov byte [esp + 0x2b], 0x4b
mov byte [esp + 0x2c], 0x10
mov byte [esp + 0x2d], 0x3b
mov byte [esp + 0x2e], 0x10
mov byte [esp + 0x2f], 0x7b
mov byte [esp + 0x30], 0x10
mov byte [esp + 0x31], 0x31
mov byte [esp + 0x32], 0x10
mov byte [esp + 0x33], 0x4b
mov byte [esp + 0x34], 0x10
mov byte [esp + 0x35], 0x39
mov byte [esp + 0x36], 0x10
mov byte [esp + 0x37], 0x75
mov byte [esp + 0x38], 0x10
mov byte [esp + 0x39], 0x36
mov byte [esp + 0x3a], 0x10
mov byte [esp + 0x3b], 0x2b
mov byte [esp + 0x3c], 0x10
mov byte [esp + 0x3d], 0x46
mov byte [esp + 0x3e], 0x10
mov byte [esp + 0x3f], 0x31
mov byte [esp + 0x40], 0x10
mov byte [esp + 0x41], 0x21
mov byte [esp + 0x42], 0x10
mov byte [esp + 0x43], 0x60
mov byte [esp + 0x44], 0x10
mov byte [esp + 0x45], 0x3b
mov byte [esp + 0x46], 0x10
mov byte [esp + 0x47], 0x3b
mov byte [esp + 0x48], 0x10
mov byte [esp + 0x49], 0x4b
mov byte [esp + 0x4a], 0x10
mov byte [esp + 0x4b], 0x43
mov byte [esp + 0x4c], 0x10
mov byte [esp + 0x4d], 0x10
mov byte [esp + 0x4e], 0x10
mov al, byte [esp + 0x11]
cmp byte [esp + 0x10], 0
jne 0x40f197
xor esi, esi
nop dword [eax]
mov al, byte [esp + esi + 0x11]
mov ecx, 0x10
movzx eax, al
sub ecx, eax
lea eax, [ecx + ecx*2]
shl eax, 3
cdq
idiv ebx
lea eax, [edx + 0x7f]
cdq
idiv ebx
mov byte [esp + esi + 0x11], dl
inc esi
cmp esi, 0x3e
jb 0x40f170
lea eax, [esp + 0x11]
push eax
call fcn.0040de00
add esp, 4
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x98]
xor ecx, esp
call fcn.00415287
mov esp, ebp
pop ebp
ret 0x10
mov edx, esi
cmp eax, 0xc
jne 0x40f009
lea esi, [edx + edx]
jmp 0x40f380
xor ecx, ecx
call fcn.00414f80
test eax, eax
jne 0x40f36d
mov byte [esp + 0x10], al
mov byte [esp + 0x11], 0x1c
mov byte [esp + 0x12], 0x35
mov byte [esp + 0x13], 0x68
mov byte [esp + 0x14], 0x35
mov byte [esp + 0x15], 0x78
mov byte [esp + 0x16], 0x35
mov byte [esp + 0x17], 0x65
mov byte [esp + 0x18], 0x35
mov byte [esp + 0x19], 0x3b
mov byte [esp + 0x1a], 0x35
mov byte [esp + 0x1b], 0x18
mov byte [esp + 0x1c], 0x35
mov byte [esp + 0x1d], 0x30
mov byte [esp + 0x1e], 0x35
mov byte [esp + 0x1f], 0x3b
mov byte [esp + 0x20], 0x35
mov byte [esp + 0x21], 0x68
mov byte [esp + 0x22], 0x35
mov byte [esp + 0x23], 0x25
mov byte [esp + 0x24], 0x35
mov byte [esp + 0x25], 0x3b
mov byte [esp + 0x26], 0x35
mov byte [esp + 0x27], 0x18
mov byte [esp + 0x28], 0x35
mov byte [esp + 0x29], 0x62
mov byte [esp + 0x2a], 0x35
mov byte [esp + 0x2b], 4
mov byte [esp + 0x2c], 0x35
mov byte [esp + 0x2d], 0x7e
mov byte [esp + 0x2e], 0x35
mov byte [esp + 0x2f], 0x68
mov byte [esp + 0x30], 0x35
mov byte [esp + 0x31], 0x62
mov byte [esp + 0x32], 0x35
mov byte [esp + 0x33], 0x18
mov byte [esp + 0x34], 0x35
mov byte [esp + 0x35], 0x3b
mov byte [esp + 0x36], 0x35
mov byte [esp + 0x37], 0x36
mov byte [esp + 0x38], 0x35
mov byte [esp + 0x39], 0x25
mov byte [esp + 0x3a], 0x35
mov byte [esp + 0x3b], 0x15
mov byte [esp + 0x3c], 0x35
mov byte [esp + 0x3d], 0x68
mov byte [esp + 0x3e], 0x35
mov byte [esp + 0x3f], 0xa
mov byte [esp + 0x40], 0x35
mov byte [esp + 0x41], 0xf
mov byte [esp + 0x42], 0x35
mov byte [esp + 0x43], 4
mov byte [esp + 0x44], 0x35
mov byte [esp + 0x45], 4
mov byte [esp + 0x46], 0x35
mov byte [esp + 0x47], 0x62
mov byte [esp + 0x48], 0x35
mov byte [esp + 0x49], 0x33
mov byte [esp + 0x4a], 0x35
mov byte [esp + 0x4b], 0x35
mov byte [esp + 0x4c], 0x35
mov al, byte [esp + 0x11]
cmp byte [esp + 0x10], 0
jne 0x40f344
xor esi, esi
nop
mov al, byte [esp + esi + 0x11]
mov ecx, 0x35
movzx eax, al
sub ecx, eax
imul eax, ecx, 0x17
cdq
idiv ebx
lea eax, [edx + 0x7f]
cdq
idiv ebx
mov byte [esp + esi + 0x11], dl
inc esi
cmp esi, 0x3c
jb 0x40f320
lea eax, [esp + 0x11]
push eax
call fcn.0040de00
add esp, 4
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x98]
xor ecx, esp
call fcn.00415287
mov esp, ebp
pop ebp
ret 0x10
mov eax, dword [0x42a0d8]
cmp eax, 0xc
je 0x40f380
cmp eax, 0xa
jne 0x40f59e
mov edx, esi
mov ecx, 1
call fcn.00414ea0
test eax, eax
jne 0x40f540
mov byte [esp + 0x10], al
mov byte [esp + 0x11], 0x25
mov byte [esp + 0x12], 0x22
mov byte [esp + 0x13], 0x63
mov byte [esp + 0x14], 0x22
mov byte [esp + 0x15], 0x5c
mov byte [esp + 0x16], 0x22
mov byte [esp + 0x17], 0xd
mov byte [esp + 0x18], 0x22
mov byte [esp + 0x19], 0x4f
mov byte [esp + 0x1a], 0x22
mov byte [esp + 0x1b], 7
mov byte [esp + 0x1c], 0x22
mov byte [esp + 0x1d], 0xa
mov byte [esp + 0x1e], 0x22
mov byte [esp + 0x1f], 0x29
mov byte [esp + 0x20], 0x22
mov byte [esp + 0x21], 0x30
mov byte [esp + 0x22], 0x22
mov byte [esp + 0x23], 0x63
mov byte [esp + 0x24], 0x22
mov byte [esp + 0x25], 0x4f
mov byte [esp + 0x26], 0x22
mov byte [esp + 0x27], 0x30
mov byte [esp + 0x28], 0x22
mov byte [esp + 0x29], 7
mov byte [esp + 0x2a], 0x22
mov byte [esp + 0x2b], 0x5c
mov byte [esp + 0x2c], 0x22
mov byte [esp + 0x2d], 0x30
mov byte [esp + 0x2e], 0x22
mov byte [esp + 0x2f], 0x4f
mov byte [esp + 0x30], 0x22
mov byte [esp + 0x31], 9
mov byte [esp + 0x32], 0x22
mov byte [esp + 0x33], 0x6f
mov byte [esp + 0x34], 0x22
mov byte [esp + 0x35], 0x29
mov byte [esp + 0x36], 0x22
mov byte [esp + 0x37], 0x23
mov byte [esp + 0x38], 0x22
mov byte [esp + 0x39], 7
mov byte [esp + 0x3a], 0x22
mov byte [esp + 0x3b], 0x4f
mov byte [esp + 0x3c], 0x22
mov byte [esp + 0x3d], 0x69
mov byte [esp + 0x3e], 0x22
mov byte [esp + 0x3f], 0x29
mov byte [esp + 0x40], 0x22
mov byte [esp + 0x41], 0x30
mov byte [esp + 0x42], 0x22
mov byte [esp + 0x43], 0x63
mov byte [esp + 0x44], 0x22
mov byte [esp + 0x45], 0x1d
mov byte [esp + 0x46], 0x22
mov byte [esp + 0x47], 3
mov byte [esp + 0x48], 0x22
mov byte [esp + 0x49], 0x6f
mov byte [esp + 0x4a], 0x22
mov byte [esp + 0x4b], 0x6f
mov byte [esp + 0x4c], 0x22
mov byte [esp + 0x4d], 0x36
mov byte [esp + 0x4e], 0x22
mov byte [esp + 0x4f], 0x13
mov byte [esp + 0x50], 0x22
mov byte [esp + 0x51], 0x22
mov byte [esp + 0x52], 0x22
mov al, byte [esp + 0x11]
cmp byte [esp + 0x10], 0
jne 0x40f517
xor esi, esi
nop
mov al, byte [esp + esi + 0x11]
mov ecx, 0x22
movzx eax, al
sub ecx, eax
lea eax, [ecx + ecx*4]
shl eax, 2
cdq
idiv ebx
lea eax, [edx + 0x7f]
cdq
idiv ebx
mov byte [esp + esi + 0x11], dl
inc esi
cmp esi, 0x42
jb 0x40f4f0
lea ecx, [esp + 0x11]
push ecx
call fcn.0040de00
add esp, 4
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x98]
xor ecx, esp
call fcn.00415287
mov esp, ebp
pop ebp
ret 0x10
xor esi, esi
cmp dword [0x42bcd4], esi
jbe 0x40f599
nop word [eax + eax]
mov eax, dword [0x42bbe8]
mov ecx, dword [eax + 0x6c]
test ecx, ecx
jne 0x40f572
push 0x3a4532be
xor edx, edx
call fcn.00401820
mov ecx, eax
mov eax, dword [0x42bbe8]
mov dword [eax + 0x6c], ecx
push 0
push 0
push 0x42bcd0
push 0x414930
push 0
push 0
call ecx
mov ecx, eax
mov eax, dword [0x42bcd0]
mov dword [eax + esi*4], ecx
inc esi
cmp esi, dword [0x42bcd4]
jb 0x40f550
mov eax, dword [0x42a0d8]
mov dword [0x42bbf4], 0x42bc20
cmp eax, 0xb
je 0x40f5e1
cmp eax, 0xa
je 0x40f5e1
mov esi, dword [0x42bc10]
test esi, esi
je 0x40f611
nop dword [eax]
sub esp, 0x18
mov ecx, esp
push esi
call fcn.0040f800
mov ecx, 1
call fcn.00413280
mov esi, dword [esi + 0x8000]
test esi, esi
jne 0x40f5c0
jmp 0x40f60c
mov esi, dword [0x42bc10]
test esi, esi
je 0x40f611
nop dword [eax + eax]
sub esp, 0x18
mov ecx, esp
push esi
call fcn.0040f800
xor ecx, ecx
call fcn.00413280
mov esi, dword [esi + 0x8000]
test esi, esi
jne 0x40f5f0
mov eax, dword [0x42a0d8]
cmp eax, 0xb
je 0x40f61b
cmp eax, 0xa
jne 0x40f665
lea ecx, [esp + 0x70]
call fcn.004027e0
test eax, eax
je 0x40f660
mov eax, dword [0x42bbe8]
mov ecx, dword [eax + 0x6c]
test ecx, ecx
jne 0x40f64a
push 0x3a4532be
xor edx, edx
call fcn.00401820
mov ecx, eax
mov eax, dword [0x42bbe8]
mov dword [eax + 0x6c], ecx
push 0
push 0
lea eax, [esp + 0x78]
push eax
push 0x413d50
push 0
push 0
call ecx
mov edi, eax
mov eax, dword [0x42a0d8]
cmp eax, 0xc
je 0x40f66f
cmp eax, 0xa
jne 0x40f6c9
mov esi, dword [0x42bc18]
test esi, esi
je 0x40f695
nop dword [eax]
lea edx, [esp + 0x78]
mov ecx, esi
call fcn.00410100
mov esi, dword [esi + 0x8000]
test esi, esi
jne 0x40f680
mov esi, dword [esp + 0x78]
test esi, esi
je 0x40f6bf
nop dword [eax]
sub esp, 0x18
mov ecx, esp
push esi
call fcn.0040f800
mov ecx, 1
call fcn.00413280
mov esi, dword [esi + 0x7d00]
test esi, esi
jne 0x40f6a0
call fcn.00411390
mov eax, dword [0x42a0d8]
cmp eax, 0xb
je 0x40f6d7
cmp eax, 0xa
jne 0x40f76d
test edi, edi
je 0x40f703
mov eax, dword [0x42bbe8]
mov eax, dword [eax + 0x2c]
test eax, eax
jne 0x40f6fe
push 0x6a095e21
xor edx, edx
xor ecx, ecx
call fcn.00401820
mov ecx, dword [0x42bbe8]
mov dword [ecx + 0x2c], eax
push 0xffffffffffffffff
push edi
call eax
mov edi, dword [0x42bc6c]
xor esi, esi
test edi, edi
je 0x40f731
nop
sub esp, 0x18
mov ecx, esp
push str.stopmarker
call fcn.0040f800
xor ecx, ecx
call fcn.00414ff0
mov edi, dword [0x42bc6c]
inc esi
cmp esi, edi
jb 0x40f710
mov eax, dword [0x42bbe8]
mov esi, dword [0x42bc68]
mov eax, dword [eax + 0xcc]
test eax, eax
jne 0x40f760
push 0x1d7ab241
xor edx, edx
xor ecx, ecx
call fcn.00401820
mov ecx, dword [0x42bbe8]
mov dword [ecx + 0xcc], eax
push 0xffffffffffffffff
push 1
push esi
push edi
call eax
mov eax, dword [0x42a0d8]
cmp eax, 0xc
je 0x40f777
cmp eax, 0xa
jne 0x40f7e0
xor esi, esi
cmp dword [0x42bcd4], esi
jbe 0x40f7a3
sub esp, 0x18
mov ecx, esp
push str.stopmarker
call fcn.0040f800
mov ecx, 1
call fcn.00414ff0
inc esi
cmp esi, dword [0x42bcd4]
jb 0x40f781
mov eax, dword [0x42bbe8]
mov esi, dword [0x42bcd0]
mov edi, dword [0x42bcd4]
mov eax, dword [eax + 0xcc]
test eax, eax
jne 0x40f7d8
push 0x1d7ab241
xor edx, edx
xor ecx, ecx
call fcn.00401820
mov ecx, dword [0x42bbe8]
mov dword [ecx + 0xcc], eax
push 0xffffffffffffffff
push 1
push esi
push edi
call eax
mov ecx, dword [esp + 0xa4]
xor eax, eax
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.00415287
mov esp, ebp
pop ebp
ret 0x10