Function at 0x100043a0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub esp, 0x34
push ebx
push ebp
mov ebp, ecx
mov eax, edx
push esi
xor esi, esi
mov dword [esp + 0x1c], eax
push edi
mov dword [esp + 0x1c], ebp
cmp word [ebp], si
je 0x100043c9
nop dword [eax + eax]
inc esi
cmp word [ebp + esi*2], 0
jne 0x100043c0
xor ebx, ebx
cmp word [eax], bx
je 0x100043d8
inc ebx
cmp word [eax + ebx*2], 0
jne 0x100043d0
xor ecx, ecx
lea eax, [ebx + 0x14]
add eax, esi
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.1000b130
add esp, 4
mov dword [esp + 0x14], eax
test eax, eax
jne 0x10004406
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x34
ret
mov edi, eax
lea ecx, [esi + 0x14]
xor al, al
add ecx, ebx
rep stosb byte es:[edi], al
cmp word [ebp], 0x5c
jne 0x1000454a
cmp word [ebp + 2], 0x5c
lea eax, [ebp + 2]
mov dword [esp + 0x18], eax
jne 0x1000454a
cmp word [ebp + 4], 0x3f
je 0x10004523
mov byte [esp + 0x31], 0x64
mov byte [esp + 0x32], 0x32
mov byte [esp + 0x33], 0x64
mov byte [esp + 0x34], 0x32
mov byte [esp + 0x35], 0x57
mov byte [esp + 0x36], 0x32
mov byte [esp + 0x37], 0x64
mov byte [esp + 0x38], 0x32
mov byte [esp + 0x39], 0x6e
mov byte [esp + 0x3a], 0x32
mov byte [esp + 0x3b], 0x78
mov byte [esp + 0x3c], 0x32
mov byte [esp + 0x3d], 0x2d
mov byte [esp + 0x3e], 0x32
mov byte [esp + 0x3f], 0x64
mov byte [esp + 0x40], 0x32
mov byte [esp + 0x41], 0x32
mov byte [esp + 0x42], 0x32
mov al, byte [esp + 0x31]
mov byte [esp + 0x43], 0
cmp byte [esp + 0x43], 0
jne 0x100044d3
xor ecx, ecx
lea edi, [ecx + 0x7f]
nop dword [eax + eax]
mov al, byte [esp + ecx + 0x31]
movzx eax, al
sub eax, 0x32
lea eax, [eax + eax*2]
shl eax, 2
cdq
idiv edi
lea eax, [edx + 0x7f]
cdq
idiv edi
mov byte [esp + ecx + 0x31], dl
inc ecx
cmp ecx, 0x12
jb 0x100044b0
push 0x5741
push 0x4c9b576c
mov edx, 0x83
mov ecx, 1
call fcn.100027f0
mov edi, dword [esp + 0x1c]
lea ecx, [esp + 0x39]
add esp, 8
push ecx
push edi
call eax
push 0x5741
push 0x4c9b576c
mov edx, 0x83
mov ecx, 1
call fcn.100027f0
add esp, 8
lea ecx, [edi + 0xe]
push dword [esp + 0x18]
jmp 0x10004604
push 0x5741
push 0x4c9b576c
mov edx, 0x83
mov ecx, 1
call fcn.100027f0
mov edi, dword [esp + 0x1c]
add esp, 8
push ebp
push edi
jmp 0x10004605
mov byte [esp + 0x26], 6
mov byte [esp + 0x27], 0x41
mov byte [esp + 0x28], 6
mov byte [esp + 0x29], 0x41
mov byte [esp + 0x2a], 0x5f
mov byte [esp + 0x2b], 0x41
mov byte [esp + 0x2c], 6
mov byte [esp + 0x2d], 0x41
mov byte [esp + 0x2e], 0x41
mov byte [esp + 0x2f], 0x41
mov al, byte [esp + 0x26]
mov byte [esp + 0x30], 0
cmp byte [esp + 0x30], 0
jne 0x100045bc
xor ebp, ebp
lea edi, [ebp + 0x7f]
mov al, byte [esp + ebp + 0x26]
mov ecx, 0x41
movzx eax, al
sub ecx, eax
lea eax, [ecx + ecx*8]
shl eax, 2
cdq
idiv edi
lea eax, [edx + 0x7f]
cdq
idiv edi
mov byte [esp + ebp + 0x26], dl
inc ebp
cmp ebp, 0xa
jb 0x10004591
mov ebp, dword [esp + 0x1c]
push 0x5741
push 0x4c9b576c
mov edx, 0x83
mov ecx, 1
call fcn.100027f0
mov edi, dword [esp + 0x1c]
lea ecx, [esp + 0x2e]
add esp, 8
push ecx
push edi
call eax
push 0x5741
push 0x4c9b576c
mov edx, 0x83
mov ecx, 1
call fcn.100027f0
add esp, 8
lea ecx, [edi + 8]
push ebp
push ecx
call eax
test ebx, ebx
jle 0x1000464b
movzx eax, word [edi + esi*2 - 2]
cmp eax, 0x5c
je 0x1000462a
cmp eax, 0x2a
jne 0x10004623
xor eax, eax
mov word [edi + esi*2 - 2], ax
jmp 0x1000462a
mov dword [edi + esi*2], 0x5c
mov edx, 0x3b
push 0x5745
push 0xa1b576c
lea ecx, [edx - 0x3a]
call fcn.100027f0
add esp, 8
push dword [esp + 0x20]
push edi
call eax
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x34
ret