Function at 0x43c230
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push ebx
push esi
push edi
ror edx, 0x1a
rol edx, 0x1a
lea ecx, [ecx]
not edx
not edx
jae 0x43c258
pushf
lea esi, [esi]
jbe 0x43c24d
popf
jo 0x43c251
mov esp, esp
lea ebx, [ebx]
jb 0x43c258
add dword [ebx + 0x4332d43d], 0x850f0100
sub al, byte [ecx]
add byte [eax], al
cmp dword [0x4332d4], 1
jne 0x43c38f
push 0xc
push 0
lea eax, [ebp - 0x10]
push eax
call fcn.004379d6
add esp, 0xc
mov byte [ebp - 0x10], 0x44
mov byte [ebp - 0xb], 0x66
mov byte [ebp - 6], 0x42
mov byte [ebp - 0xf], 0x73
mov byte [ebp - 0xa], 0x47
mov byte [ebp - 5], 0
mov byte [ebp - 0xe], 0x66
mov byte [ebp - 9], 0x6a
mov byte [ebp - 0xd], 0x62
mov byte [ebp - 8], 0x6d
mov byte [ebp - 0xc], 0x75
mov byte [ebp - 7], 0x66
mov esp, esp
jg 0x43c2ae
mov esp, esp
jle 0x43c2ae
add eax, 0x80f04d8a
jmp 0xf0914ab8
mov cl, byte [ebp - 0x10]
sub cl, 1
mov byte [ebp - 0x10], cl
mov dl, byte [ebp - 0xb]
sub dl, 1
mov byte [ebp - 0xb], dl
mov al, byte [ebp - 6]
sub al, 1
mov byte [ebp - 6], al
mov cl, byte [ebp - 0xf]
sub cl, 1
mov byte [ebp - 0xf], cl
mov dl, byte [ebp - 0xa]
sub dl, 1
mov byte [ebp - 0xa], dl
mov al, byte [ebp - 0xe]
sub al, 1
mov byte [ebp - 0xe], al
mov cl, byte [ebp - 9]
sub cl, 1
mov byte [ebp - 9], cl
mov dl, byte [ebp - 0xd]
sub dl, 1
mov byte [ebp - 0xd], dl
mov al, byte [ebp - 8]
sub al, 1
mov byte [ebp - 8], al
mov cl, byte [ebp - 0xc]
sub cl, 1
mov byte [ebp - 0xc], cl
mov dl, byte [ebp - 7]
sub dl, 1
mov byte [ebp - 7], dl
shl edi, 0
lea esp, [esp]
xor eax, 0
jbe 0x43c32b
pushf
jge 0x43c31d
jno 0x43c31f
test dword [esp], ecx
popf
mov esp, esp
lea esi, [esi]
ja 0x43c32b
mov ebx, 0x33083d83
inc ebx
add byte [eax], al
cmp dword [0x433308], 0
jne 0x43c33c
or eax, 0xffffffff
jmp 0x43c556
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [0x433308]
push ecx
call fcn.0043b989
mov dword [ebp - 4], eax
or ebx, ebx
xchg edx, ebx
xchg edx, ebx
jno 0x43c357
test dword [esp], ecx
jne 0x43c365
lea esp, [esp]
jae 0x43c361
je 0x43c365
mov edx, 0x6a0c6a10
add byte [ebp - 0x17ad0fab], cl
mov dh, 0xff
inc dword [ebx + 0x7d830cc4]
cld
add byte [edx + ecx - 0x75], dh
inc ebp
cld
push 0xc
push 0
lea edx, [ebp - 0x10]
push edx
call fcn.004379d6
add esp, 0xc
cmp dword [ebp - 4], 0
je 0x43c385
mov eax, dword [ebp - 4]
mov dword [0x4332d4], eax
jmp 0x43c38d
or eax, 0xffffffff
jmp 0x43c556
jmp 0x43c398
mov ecx, dword [0x4332d4]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
mov dword [ebp - 0x14], edx
cmp eax, 0x3356
je 0x43c3a5
jo 0x43c3a7
jle 0x43c3bf
pushf
rol ebx, 0
mov esp, esp
jmp 0x43c3b2
ja 0x43c3b4
popf
jo 0x43c3b8
lea ecx, [ecx]
jb 0x43c3bc
jg 0x43c3bf
lcall 0x2ce8, 0x50ec458b
sub al, byte [eax]
add byte [ebx + 0xc6a04c4], al
mov eax, dword [ebp - 0x14]
push eax
call fcn.0043edf4
add esp, 4
push 0xc
push 0
lea ecx, [ebp - 0x10]
push ecx
call fcn.004379d6
add esp, 0xc
mov byte [ebp - 0x10], 0x44
mov byte [ebp - 0xb], 0x66
mov byte [ebp - 6], 0x58
mov byte [ebp - 0xf], 0x73
mov byte [ebp - 0xa], 0x47
mov byte [ebp - 5], 0
mov byte [ebp - 0xe], 0x66
mov byte [ebp - 9], 0x6a
mov byte [ebp - 0xd], 0x62
mov byte [ebp - 8], 0x6d
mov byte [ebp - 0xc], 0x75
mov byte [ebp - 7], 0x66
shr esp, 0
jo 0x43c418
jnp 0x43c412
xchg edi, edi
jno 0x43c418
mov eax, 0xf0558a17
mov dl, byte [ebp - 0x10]
sub dl, 1
mov byte [ebp - 0x10], dl
mov al, byte [ebp - 0xb]
sub al, 1
mov byte [ebp - 0xb], al
mov cl, byte [ebp - 6]
sub cl, 1
mov byte [ebp - 6], cl
mov dl, byte [ebp - 0xf]
sub dl, 1
mov byte [ebp - 0xf], dl
mov al, byte [ebp - 0xa]
sub al, 1
mov byte [ebp - 0xa], al
mov cl, byte [ebp - 0xe]
sub cl, 1
mov byte [ebp - 0xe], cl
mov dl, byte [ebp - 9]
sub dl, 1
mov byte [ebp - 9], dl
mov al, byte [ebp - 0xd]
sub al, 1
mov byte [ebp - 0xd], al
mov cl, byte [ebp - 8]
sub cl, 1
mov byte [ebp - 8], cl
mov dl, byte [ebp - 0xc]
sub dl, 1
mov byte [ebp - 0xc], dl
mov al, byte [ebp - 7]
sub al, 1
mov byte [ebp - 7], al
cmc
shr ecx, 0
jl 0x43c488
lea eax, [eax]
jnp 0x43c481
xchg ebx, eax
xchg ebx, eax
jb 0x43c485
jge 0x43c488
add eax, 0x33083d83
inc ebx
add byte [eax], al
cmp dword [0x433308], 0
je 0x43c4bc
or esp, 0
js 0x43c4a9
pushf
test ecx, 0x48f8
rol esp, 0
popf
nop
jge 0x43c4a6
jns 0x43c4a9
add eax, 0x51f04d8d
lea ecx, [ebp - 0x10]
push ecx
mov edx, dword [0x433308]
push edx
call fcn.0043b989
mov dword [ebp - 4], eax
rol esi, 0
jnp 0x43c4ce
pushf
jo 0x43c4c5
jp 0x43c4c7
popf
jg 0x43c4cb
jp 0x43c4ce
ljmp 0x458d:0x6a0c6a
push 0xc
push 0
lea eax, [ebp - 0x10]
push eax
call fcn.004379d6
add esp, 0xc
or ecx, 0
jge 0x43c500
pushf
lea edx, [edx + 0x3080]
sub edx, 0x3080
jae 0x43c4f3
js 0x43c4f5
popf
jmp 0x43c4f9
ja 0x43c4fb
ja 0x43c4fd
jl 0x43c500
add eax, 0xfc7d83
cmp dword [ebp - 4], 0
je 0x43c521
xchg edx, edx
je 0x43c515
mov ebx, ebx
jge 0x43c50e
js 0x43c510
jne 0x43c515
mov ebp, 0x4d8b7e79
cld
mov ecx, dword [ebp - 4]
push ecx
call fcn.0043edf4
add esp, 4
jnp 0x43c523
jge 0x43c537
xchg esp, esp
lea edi, [edi + 0x4f29]
lea edi, [edi - 0x4f29]
jl 0x43c537
mov edx, 0x20558b94
mov edx, dword [ebp + 0x20]
push edx
mov eax, dword [ebp + 0x1c]
push eax
mov ecx, dword [ebp + 0x18]
push ecx
mov edx, dword [ebp + 0x14]
push edx
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [ebp - 0x14]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x1c
push ds
adc eax, dword [edx - 0x16]
lds ecx, [edi + 0x4ea4cf1c]
mov dl, 0x54
dec ebx
sbb ah, cl
push ss
scasb al, byte es:[edi]
fstp qword [eax]
dec edi
inc edi
or dword [ebp + ecx*2 + 0x13], ecx
mov bh, 0x7e
out 0xb3, al
cmpsd dword [esi], dword es:[edi]
and eax, 0x9bb7ebd9
jns 0x6e656e
mov bl, 0xe9
clc
test eax, 0x3c6824b1
xor cl, byte [eax + 0x4f]
mov ebp, 0xcc131156
adc ecx, esp
in eax, dx
cmpsb byte [esi], byte es:[edi]
bswap esp
push 0xdeab3080
push ebx
aad 0x8b
xor cl, bl
sub dword [edx - 0x1ba9f1d5], ebp
cld
in al, dx
dec edx
nop
aaa
push esp
invalid