Function at 0x40cbf0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x23c
mov eax, dword [0x44bacc]
mov dword [esp + 0x3c], 0x4eda4806
mov dword [esp + 0x40], 0xb2e44cd1
mov dword [esp + 0x44], 0xb61db01f
mov dword [esp + 0x48], 0xbae6b416
mov dword [esp + 0x4c], 0xbeebb8ee
mov dword [esp + 0x50], 0xa2ddbcef
mov dword [esp + 0x54], 0xa61aa0cb
mov dword [esp + 0x58], 0xaa37a40e
mov dword [esp + 0x5c], 0xae3aa80f
mov dword [esp + 0x60], 0x923aac34
mov dword [esp + 0x64], 0x962390f3
mov dword [esp + 0x68], 0x9af59423
mov dword [esp + 0x6c], 0x9ec998ca
mov dword [esp + 0x70], 0x82cd9ccd
mov dword [esp + 0x74], 0x86e180dc
mov dword [esp + 0x78], 0x8a2c843c
mov dword [esp + 0x7c], 0x8ed38819
mov dword [esp + 0x80], 0xf2d28cdb
mov dword [esp + 0x84], 0xf669f093
mov dword [esp + 0x88], 0xfaa1f4ad
mov dword [esp + 0x8c], 0xfe99f892
mov dword [esp + 0x90], 0xe26dfcbe
mov dword [esp + 0x94], 0xe64de073
mov dword [esp + 0x98], 0xea5ee442
mov dword [esp + 0x9c], 0xee4fe84e
mov dword [esp + 0xa0], 0xd244eca0
mov dword [esp + 0xa4], 0xd682d047
mov dword [esp + 0xa8], 0xda82d482
mov dword [esp + 0xac], 0xde8bd880
mov dword [esp + 0xb0], 0xc287dc88
mov dword [esp + 0xb4], 0xc6a9c0a3
mov dword [esp + 0xb8], 0xca8dc488
mov dword [esp + 0xbc], 0xce84c87f
mov dword [esp + 0xc0], 0x32a1cc83
mov dword [esp + 0xc4], 0x369d3053
mov dword [esp + 0xc8], 0x3a9a349e
mov dword [esp + 0xcc], 0x3e59389e
mov dword [esp + 0xd0], 0x22983c74
mov dword [esp + 0xd4], 0x268e2084
mov dword [esp + 0xd8], 0x2a4c24b4
mov dword [esp + 0xdc], 0x2e6e284b
mov dword [esp + 0xe0], 0x12bb2c87
mov dword [esp + 0xe4], 0x16bc1080
mov dword [esp + 0xe8], 0x1a4614b2
mov dword [esp + 0xec], 0x1e48184a
mov dword [esp + 0xf0], 0x24f1c46
mov dword [esp + 0xf4], 0x6530053
mov dword [esp + 0xf8], 0xa570457
mov dword [esp + 0xfc], 0xe69085b
mov dword [esp + 0x100], 0x72ac0cb8
mov dword [esp + 0x104], 0x76d070d9
mov dword [esp + 0x108], 0x7adc74e1
mov dword [esp + 0x10c], 0x7e2c7828
mov dword [esp + 0x110], 0x62267c28
mov dword [esp + 0x114], 0x66366031
mov dword [esp + 0x118], 0x6a65643d
mov dword [esp + 0x11c], 0
mov dword [esp], 0
mov ecx, dword [esp]
cmp ecx, 0xe3
ja 0x40ce93
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [esp]
mov edx, dword [esp]
movzx edx, byte [esp + edx + 0x3c]
add ecx, 0x944edc79
xor ecx, edx
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0xc]
add cl, 0xce
mov edx, dword [esp]
mov byte [esp + edx + 0x3c], cl
inc dword [esp]
mov ecx, dword [esp]
cmp ecx, 0xe4
jb 0x40ce60
lea edi, [esp + 0x3c]
push 0
push 0
push 0
push 0
push edi
call eax
mov esi, eax
xor eax, eax
test esi, esi
setne al
xor ebx, ebx
jmp dword [eax*4 + 0x446d34]
mov eax, dword [0x44bad0]
mov dword [esp + 0x3c], 0x2f2c2e17
mov word [esp + 0x40], 0
mov dword [esp], 0
mov ecx, dword [esp]
cmp ecx, 5
ja 0x40cf10
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [esp]
mov edx, dword [esp]
movzx edx, byte [esp + edx + 0x3c]
add ecx, 0x6d8782bf
xor ecx, edx
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0xc]
add cl, 0x13
mov edx, dword [esp]
mov byte [esp + edx + 0x3c], cl
inc dword [esp]
mov ecx, dword [esp]
cmp ecx, 6
jb 0x40cee0
movzx ecx, word [esp + 0x3c]
push 0
push ecx
push 0x44bb00
push esi
call eax
xor ecx, ecx
test eax, eax
setne cl
xor ebx, ebx
jmp dword [ecx*4 + 0x446d3c]
mov dword [esp + 8], eax
mov eax, dword [0x44bad4]
mov dword [esp + 0xc], 0xe263eced
mov dword [esp + 0x10], 0
mov dword [esp], 0
mov ecx, dword [esp]
cmp ecx, 7
ja 0x40cf9a
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [esp]
mov edx, dword [esp]
movzx edx, byte [esp + edx + 0xc]
lea ebx, [ecx + edx]
add ecx, 0x36
and ecx, edx
add ecx, ecx
sub ebx, ecx
add ebx, 0xded7d636
mov dword [esp + 0x3c], ebx
mov ecx, dword [esp + 0x3c]
add cl, 0x25
mov edx, dword [esp]
mov byte [esp + edx + 0xc], cl
inc dword [esp]
mov ecx, dword [esp]
cmp ecx, 8
jb 0x40cf60
mov ecx, dword [esp + 0x250]
mov edx, dword [esp + 0xc]
mov dword [esp + 0x3c], 0x3e823083
mov dword [esp + 0x40], 0x3a813c80
mov word [esp + 0x44], 0x383b
mov dword [esp + 0x46], 0
mov byte [esp + 0x4a], 0
mov dword [esp + 4], 0
mov ebx, dword [esp + 4]
cmp ebx, 0xe
ja 0x40d013
nop
nop
nop
nop
nop
nop
mov ebx, dword [esp + 4]
mov ebp, dword [esp + 4]
movzx ebp, byte [esp + ebp + 0x3c]
add ebx, 0xb65f0e85
xor ebx, ebp
mov dword [esp], ebx
mov ebx, dword [esp]
add bl, 0x4a
mov ebp, dword [esp + 4]
mov byte [esp + ebp + 0x3c], bl
inc dword [esp + 4]
mov ebx, dword [esp + 4]
cmp ebx, 0xf
jb 0x40cfe0
push edx
push 0
push 0
push 0
push ecx
push edi
push dword [esp + 0x20]
call eax
mov ebp, eax
xor eax, eax
test ebp, ebp
setne al
xor ebx, ebx
jmp dword [eax*4 + 0x446d44]
mov ebx, dword [esp + 0x268]
xor eax, eax
test ebx, ebx
setg al
jmp dword [eax*4 + 0x446d4c]
jmp dword [0x446d58]
xor ecx, ecx
test eax, eax
setne cl
xor ebx, ebx
jmp dword [ecx*4 + 0x446d8c]
mov eax, dword [case.0x40d26f.2]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov bl, 1
jmp eax
push esi
call dword [0x44baf8]
nop
nop
nop
nop
nop
push esi
call dword [0x44baf8]
jmp dword [0x446dcc]
mov eax, ebx
add esp, 0x23c
pop esi
pop edi
pop ebx
pop ebp
ret
push edi
call dword [0x44baf8]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
push edi
call dword [0x44baf8]
jmp dword [0x446dc0]
jmp dword [0x446dc8]
jmp dword [0x446da8]
mov dword [esp + 0xc], 0x69ff6fad
mov dword [esp + 0x10], 0x15ff6bfd
mov dword [esp + 0x14], 0x11fd17ff
mov dword [esp + 0x18], 0x1d3c13c8
mov dword [esp + 0x1c], 0x19ff1ff9
mov dword [esp + 0x20], 0x5ea1bf9
mov dword [esp + 0x24], 0x19507e1
mov dword [esp + 0x28], 0xdeb039d
mov dword [esp + 0x2c], 0x9910fec
mov dword [esp + 0x30], 0x35f10b9a
mov word [esp + 0x34], 0x3736
mov dword [esp + 0x36], 0
mov dword [esp], 0
mov eax, dword [esp]
cmp eax, 0x2d
ja 0x40d16e
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp]
mov ecx, dword [esp]
movzx ecx, byte [esp + ecx + 0xc]
add eax, 0xa71c973a
xor eax, ecx
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x3c]
add al, 0xac
mov ecx, dword [esp]
mov byte [esp + ecx + 0xc], al
inc dword [esp]
mov eax, dword [esp]
cmp eax, 0x2e
jb 0x40d140
movzx eax, word [esp + 0xc]
test ax, ax
je 0x40d191
lea edi, [esp + 0x3c]
lea ecx, [esp + 0xe]
mov word [edi], ax
add edi, 2
movzx eax, word [ecx]
add ecx, 2
test ax, ax
jne 0x40d180
mov word [edi], 0
movzx eax, word [0x44bc06]
test ax, ax
je 0x40d1c5
xor ecx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [edi + ecx], ax
movzx eax, word [ecx + 0x44bc08]
add ecx, 2
test ax, ax
jne 0x40d1b0
add edi, ecx
mov word [edi], 0
mov eax, dword [0x44bae0]
mov dword [esp + 0xc], 0xf2959497
mov byte [esp + 0x10], 0
mov dword [esp + 4], 0
mov ecx, dword [esp + 4]
cmp ecx, 4
ja 0x40d230
nop
nop
nop
mov ecx, dword [esp + 4]
mov edx, dword [esp + 4]
movzx edx, byte [esp + edx + 0xc]
lea edi, [ecx + edx]
add edi, 0xf0d273a9
add ecx, 0xf0d273a9
and ecx, edx
add ecx, ecx
sub edi, ecx
mov dword [esp], edi
mov ecx, dword [esp]
add cl, 0xc2
mov edx, dword [esp + 4]
mov byte [esp + edx + 0xc], cl
inc dword [esp + 4]
mov ecx, dword [esp + 4]
cmp ecx, 5
jb 0x40d1f0
lea ecx, [esp + 0x3c]
push dword [esp + 0xc]
push 0xffffffffffffffff
push ecx
push ebp
call eax
mov edx, dword [esp + 0x258]
xor eax, eax
mov ecx, ebx
neg ecx
sbb eax, eax
push 0
mov edi, dword [esp + 0x268]
push edi
push dword [esp + 0x264]
push edx
push eax
push ebx
push ebp
call dword [0x44bae4]
xor ecx, ecx
test eax, eax
setne cl
jmp dword [ecx*4 + 0x446d6c]
xor ebx, ebx
jmp dword [0x446da8]
push ebp
call dword [0x44baf8]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
push ebp
call dword [0x44baf8]
jmp dword [0x446db0]
mov edi, dword [esp + 8]
jmp dword [0x446db8]
mov eax, dword [esp + 0x260]
mov dword [esp + 0x3c], 0
lea ecx, [esp + 0x3c]
push ecx
push edi
push eax
push ebp
call dword [0x44baf4]
xor ecx, ecx
test eax, eax
setne cl
xor ebx, ebx
jmp dword [ecx*4 + 0x446d74]
jmp dword [0x446d7c]
push 0
push ebp
call dword [0x44bae8]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
push 0
push ebp
call dword [0x44bae8]
jmp dword [0x446d88]
mov edx, dword [esp + 0x258]
mov ebx, dword [esp + 0x254]
movzx eax, byte [0x44bc04]
jmp dword [eax*4 + 0x446d64]
push ebx
push ebx
push ebx
push ebx
push ebp
call dword [0x44badc]
push ebx
push ebx
push ebx
push ebx
push ebp
call dword [0x44badc]
jmp dword [0x446d60]
rol byte [eax], 1
mov ah, 0xce
inc eax
add byte [ebp + 0x300040d0], bh
iretd