Function at 0x43a8f0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
mov edx, edx
sub esp, 0x28
mov eax, dword [0x4c0ac8]
xor eax, dword [0x4c0968]
push ebx
xchg ebp, ebp
mov ebx, ecx
push esi
push edi
mov dword [ebp - 0xc], ebx
mov dword [esp - 0x28], 0x7812c6b2
lea edi, [ebx + 0xa8]
push edi
call eax
sub esp, 4
mov ecx, ecx
mov dword [esp], 0x2be24bf8
add dword [esp], 0x450f1ec2
add dword [esp], 0x37ee652
mov esp, esp
sub dword [esp], 0x57599c3c
add dword [esp], 0x53c849d9
sub dword [esp], 0x70defd65
call fcn.00490c50
mov ebp, ebp
add esp, 4
test eax, eax
je 0x43a971
mov dword [esp - 0x3c], edx
mov ecx, eax
call fcn.0045fe80
mov esi, eax
mov dword [ebp - 4], eax
mov ebp, ebp
jmp 0x43a976
xor esi, esi
mov dword [ebp - 4], esi
lea ecx, [ebp - 8]
mov dword [ebp - 8], esi
mov edi, edi
push ecx
lea ecx, [ebx + 0x60]
call fcn.00439540
push dword [ebp + 0x14]
mov dword [esp - 0x24], ebx
mov ecx, esi
call fcn.00462550
push dword [ebp + 8]
mov ecx, esi
mov dword [esp - 0x28], 0x52ba2856
call fcn.00462060
mov eax, dword [ebx + 0x10]
mov dword [ebp + 0x14], 0x6ac5a6e5
xor dword [ebp + 0x14], 0x1db6695a
mov esp, esp
sub dword [ebp + 0x14], 0x4037304c
add dword [ebp + 0x14], 0x26d603b5
sub dword [ebp + 0x14], 0x1f160029
xchg edx, edx
sub dword [ebp + 0x14], 0x3efca2ff
mov dword [ebp - 0x18], 0x5e083a04
sub dword [ebp - 0x18], 0x38dbb956
add dword [ebp - 0x18], 0xfd5b108
mov ebx, ebx
add dword [ebp - 0x18], 0x46fceeac
xor dword [ebp - 0x18], 0x7bff2062
mov dword [ebp - 0x14], 0x54a8f8cb
sub dword [ebp - 0x14], 0x206e309c
mov dword [esp - 0x14], edx
add dword [ebp - 0x14], 0x274be074
sub dword [ebp - 0x14], 0x33cb2509
xor dword [ebp - 0x14], 0x7a48022f
xchg ebp, ebp
sub dword [ebp - 0x14], 0x3c209df5
sub dword [ebp - 0x14], 0x21d2e3c0
cmp eax, 1
mov esi, esi
jne 0x43ad56
mov eax, dword [ebp + 0x10]
cmp eax, 1
mov ebp, ebp
jne 0x43ab02
mov eax, dword [0x4c0cc8]
xor eax, dword [0x4c0968]
nop
mov dword [esp - 0x24], edx
sub esp, 4
mov dword [esp], 0x72199e1a
xor dword [esp], 0x489e1e1f
sub dword [esp], 0x16eb0678
mov dword [esp - 0x30], edi
add dword [esp], 0x2e083978
sub dword [esp], 0x4540a379
sub dword [esp], 0xc640f8c
call eax
mov dword [esp - 0x2c], 0x353fd3a4
mov esi, dword [ebp + 0xc]
nop
sub esp, 4
xchg edi, edi
mov dword [esp], 0xd421ca0
xor dword [esp], 0x2bd09f9b
add dword [esp], 0x44230f46
mov ebp, ebp
xor dword [esp], 0x3682173d
sub dword [esp], 0x5c3785bb
sub eax, dword [esi]
mov dword [esp - 0x40], 0x2183a191
cdq
sub eax, edx
sar eax, 1
mov dword [esp - 0x1c], edx
mov dword [ebp - 0x18], eax
mov eax, dword [0x4c0cc8]
xor eax, dword [0x4c0968]
call eax
mov dword [esp - 0x14], edx
sub eax, dword [esi + 4]
cdq
sub eax, edx
mov dword [esp - 0x38], 0x456d5f1
sar eax, 1
mov dword [ebp - 0x14], eax
jmp 0x43ab5f
test eax, eax
jne 0x43ab5f
mov dword [ebp - 0x18], 0x367c33af
sub dword [ebp - 0x18], 0x3024579e
mov dword [esp - 0x1c], esp
add dword [ebp - 0x18], 0x515c7820
sub dword [ebp - 0x18], 0x3eec491b
xor dword [ebp - 0x18], 0xef8d02b
xor dword [ebp - 0x18], 0x9630db3d
mov dword [esp - 0x3c], ebx
mov dword [ebp - 0x14], 0x6ff239c5
sub dword [ebp - 0x14], 0x59016962
xor dword [ebp - 0x14], 0x3ef6d87b
mov dword [esp - 0x40], edi
add dword [ebp - 0x14], 0x517115e9
add dword [ebp - 0x14], 0x688e1ff
mov ecx, dword [ebx + 0x54]
lea eax, [ebx + 0x50]
mov dword [esp - 0xc], ebx
mov dword [ebp + 0x10], eax
mov dword [ebp + 0x14], ecx
cmp ecx, 2
mov dword [esp - 0x2c], ebx
jbe 0x43ab7f
mov eax, dword [eax]
mov dword [ebp + 0x10], eax
xchg edx, edx
lea eax, [ecx + 1]
mov ecx, 0x13f20cc6
add ecx, 0x4386e0ad
mov dword [esp - 0xc], ebp
sub ecx, 0x466340a3
add ecx, 0x4b0db16
xor ecx, 0x15c687e4
mov dword [esp - 0x38], ebp
mul ecx
pushf
mov ecx, 0x710ab87
mov edx, edx
add ecx, 0x5f0e1b53
sub ecx, 0x9911319
sub ecx, 0x53d21d46
xchg edi, edi
xor ecx, 0x66ea89ad
add ecx, 0x91aee029
popf
cmovb eax, ecx
xchg ebp, ebp
push eax
call fcn.00490c90
mov esi, eax
xchg ecx, ecx
add esp, 4
mov eax, dword [ebp + 0x14]
mov dword [ebp + 8], esi
test eax, eax
mov dword [esp - 0x10], 0x438ada88
je 0x43ac65
sub dword [ebp + 0x10], esi
mov edx, esi
mov dword [esp - 0x30], ebp
mov ebx, dword [ebp + 0x10]
xor edi, edi
mov esi, eax
xchg ebx, ebx
mov ecx, edi
lea edx, [edx + 2]
and ecx, 3
mov eax, 0x362e0743
xchg ebp, ebp
sub eax, 0x1ae988c6
xor eax, 0x766ceb6d
sub eax, 0x1d13b70c
add eax, 0x2b9566ed
mov dword [esp - 0x20], 0x65ed3f38
shl ecx, 3
inc edi
sar eax, cl
mov dword [esp - 0xc], 0x52bd4399
cbw
xor ax, word [edx + ebx - 2]
mov word [edx - 2], ax
xchg ebp, ebp
cmp edi, esi
jb 0x43ac0a
mov ebx, dword [ebp - 0xc]
mov ebp, ebp
mov esi, dword [ebp + 8]
mov eax, dword [ebp + 0x14]
lea edi, [ebx + 0xa8]
xor ecx, ecx
mov edx, edx
push ecx
mov word [esi + eax*2], cx
push dword [ebx + 0x1c]
mov eax, dword [ebp + 0xc]
mov dword [esp - 0x20], esi
push ecx
push ecx
push dword [eax + 4]
mov dword [esp - 0x20], ebx
push dword [eax]
mov eax, dword [0x4c0cb8]
push dword [ebp - 0x14]
mov dword [esp - 0x38], ecx
xor eax, dword [0x4c0968]
push dword [ebp - 0x18]
sub esp, 4
mov dword [esp], 0x5fa5f8bb
mov ecx, ecx
add dword [esp], 0x1b74a25b
xor dword [esp], 0x307dfda7
sub dword [esp], 0x1317991d
mov dword [esp - 0x3c], 0x4679328d
xor dword [esp], 0x2bbfd32d
add dword [esp], 0x6c11e147
push ecx
mov esp, esp
push esi
nop
mov dword [esp - 4], 0x21ba781e
mov dword [esp - 0x30], 0x2bbc71cc
sub dword [esp - 4], 0x1541a261
xor dword [esp - 4], 0x4b14ad65
add dword [esp - 4], 0x21c97891
mov dword [esp - 0x2c], 0x2e3aa87f
xor dword [esp - 4], 0x3e9b1303
xor dword [esp - 4], 0x57a6e26a
sub esp, 4
call eax
mov ebp, ebp
push esi
mov dword [ebp + 0x14], eax
call fcn.00490c60
mov esp, esp
add esp, 4
cmp dword [ebp + 0x14], 0
jne 0x43ad42
mov eax, dword [ebp - 4]
xchg esp, esp
cmp dword [ebx + 0x98], eax
mov dword [ebp + 0xc], eax
jmp 0x43af2d
mov esi, dword [ebp - 4]
mov ecx, ebx
mov dword [esp - 0x38], esp
push esi
call fcn.0043a6f0
jmp 0x43aec8
cmp eax, 2
jne 0x43aec8
lea eax, [ebp - 0x28]
mov dword [esp - 0x14], ebp
push eax
mov eax, dword [0x4c0d20]
push dword [ebx + 0x18]
xor eax, dword [0x4c0968]
mov dword [esp - 0x40], edi
call eax
cmp dword [ebp + 0x10], 1
jne 0x43adb4
mov ecx, dword [ebp + 0xc]
xchg esp, esp
mov eax, dword [ebp - 0x20]
sub eax, dword [ecx]
sub eax, dword [ebp - 0x28]
cdq
xchg ebp, ebp
sub eax, edx
sar eax, 1
mov dword [ebp - 0x18], eax
xchg ebp, ebp
mov eax, dword [ebp - 0x1c]
sub eax, dword [ecx + 4]
sub eax, dword [ebp - 0x24]
mov edi, edi
cdq
sub eax, edx
sar eax, 1
mov dword [ebp - 0x14], eax
mov ebp, ebp
jmp 0x43ae7b
mov ecx, dword [ebx + 0x64]
mov eax, dword [ebx + 0x60]
mov dword [esp - 0x40], 0x40048b1b
mov eax, dword [eax + ecx*4 - 8]
mov dword [ebp + 0x10], eax
cmp eax, dword [ebx + 0xa0]
je 0x43ae09
mov ecx, ecx
lea ecx, [ebp - 0x10]
push ecx
mov ecx, eax
call fcn.0045e2a0
mov edx, edx
mov ecx, dword [ebp + 0x10]
mov eax, dword [eax]
add eax, 0x50
xchg edx, edx
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x10]
push eax
call fcn.0045e2a0
mov dword [esp - 0x38], esi
mov eax, dword [eax + 4]
add eax, 0x28
mov dword [ebp - 0x14], eax
mov dword [esp - 0x18], esi
jmp 0x43ae7b
mov dword [ebp - 0x18], 0x5ae0f298
add dword [ebp - 0x18], 0x142639e7
mov dword [esp - 0x10], 0x92ef553
sub dword [ebp - 0x18], 0x5a8242b8
add dword [ebp - 0x18], 0x81b4eb0
xor dword [ebp - 0x18], 0x55672021
sub dword [ebp - 0x18], 0x686ee38
xchg ecx, ecx
sub dword [ebp - 0x18], 0x43402a0a
mov dword [ebp - 0x14], 0x5edde023
sub dword [ebp - 0x14], 0xa87eab9
xor dword [ebp - 0x14], 0x3f682661
mov dword [esp - 0x40], esi
xor dword [ebp - 0x14], 0x98829c6
xor dword [ebp - 0x14], 0xd495087
sub dword [ebp - 0x14], 0x20122c7
mov ecx, ecx
xor dword [ebp - 0x14], 0x6dfb87ab
mov ecx, 0x4fcb5a5c
sub ecx, 0xd4939ed
add ecx, 0xcdf6b59
mov dword [esp - 0x44], 0x60c9859f
sub ecx, 0x2a52bd8b
xor ecx, 0x20570990
sub ecx, 0x559c749
xchg ebp, ebp
mov eax, ebx
mov eax, dword [eax + ecx]
mov ecx, esi
dec eax
mov dword [esp - 0x14], 0x75e90c22
push eax
call fcn.0045f4f0
push esi
xchg esp, esp
mov ecx, ebx
call fcn.0043b3f0
mov eax, dword [esi]
lea ecx, [ebp - 0x18]
xchg ebx, ebx
push ecx
mov ecx, esi
call dword [eax + 0x1c]
mov dword [esp - 0x10], edx
mov eax, dword [esi]
mov ecx, esi
push dword [ebp + 0xc]
call dword [eax + 0x20]
mov dword [esp - 0x14], ebx
mov eax, dword [ebx + 0x10]
cmp eax, 1
jne 0x43b1a1
xchg esp, esp
push dword [ebp + 0x14]
mov ecx, ebx
push esi
mov dword [esp - 0x40], 0x6a4436bd
call fcn.0043b200
test al, al
jne 0x43b00e
mov eax, dword [0x4c0cc0]
mov esi, esi
push dword [ebp + 0x14]
xor eax, dword [0x4c0968]
call eax
xchg esi, esi
cmp dword [ebx + 0x98], esi
mov dword [ebp + 0xc], esi
jne 0x43af7b
xchg ebp, ebp
mov dword [ebx + 0x98], 0x7c16b9ae
xor dword [ebx + 0x98], 0x7d1d1d52
xor dword [ebx + 0x98], 0x3205e094
xor dword [ebx + 0x98], 0x7fda9a72
xchg edx, edx
sub dword [ebx + 0x98], 0x635ddf2
xor dword [ebx + 0x98], 0x6a2b2426
sub dword [ebx + 0x98], 0x2cb4240e
mov edx, edx
lea eax, [ebp + 0xc]
push eax
lea ecx, [ebx + 0x60]
mov dword [esp - 0x34], ecx
call fcn.00439800
cmp dword [ebx + 0x10], 1
jne 0x43afa6
mov dword [esp - 0xc], edx
lea eax, [ebp + 0xc]
push eax
lea ecx, [ebx + 0x88]
call fcn.00439890
mov ebp, ebp
mov ecx, dword [ebx + 0xa0]
test ecx, ecx
je 0x43afba
mov esp, esp
push dword [ebp + 0xc]
call fcn.0045fb30
mov ecx, dword [ebp + 0xc]
test ecx, ecx
mov dword [esp - 0x38], 0x68e38079
je 0x43b007
mov eax, dword [ecx]
nop
xchg ebp, ebp
sub esp, 4
mov dword [esp], 0x343611d8
sub dword [esp], 0x1a29762e
add dword [esp], 0x2e084830
mov edi, edi
xor dword [esp], 0x2a89a48d
sub dword [esp], 0x3171b17e
xor dword [esp], 0x312b95d8
mov dword [esp - 0xc], 0x2a6832df
call dword [eax]
xor esi, esi
jmp 0x43b1d2
mov eax, dword [0x4c0d48]
mov ebx, dword [ebp + 0x14]
xor eax, dword [0x4c0968]
nop
mov dword [esp - 0x20], 0x7c6011d7
sub esp, 4
mov dword [esp], 0x5c785658
sub dword [esp], 0x1f47beb1
add dword [esp], 0x1490e1bd
mov dword [esp - 0x40], ebx
sub dword [esp], 0x140e5c01
sub dword [esp], 0x3db31d61
nop
mov dword [esp - 4], 0x163a6577
mov dword [esp - 0x1c], 0xd301cb1
add dword [esp - 4], 0x57ecb33
add dword [esp - 4], 0x514d273
xor dword [esp - 4], 0x456fcbd6
mov dword [esp - 0x28], ebx
sub dword [esp - 4], 0x65a1c7cc
sub esp, 4
nop
mov dword [esp - 0x2c], 0x5b5d6854
mov dword [esp - 4], 0x4c6437a0
sub dword [esp - 4], 0x151e7e54
sub dword [esp - 4], 0x2cbbef8e
mov dword [esp - 0x44], 0x30712435
add dword [esp - 4], 0xb8bc05
sub dword [esp - 4], 0xb4285c3
sub esp, 4
push ebx
mov dword [esp - 0x34], 0x18f105e4
call eax
mov ecx, dword [ebp + 0xc]
mov dword [ebp - 0x28], 0x14d5bf8
mov dword [esp - 0x34], edi
add dword [ebp - 0x28], 0x24861434
xor dword [ebp - 0x28], 0x1be8169
sub dword [ebp - 0x28], 0x1cac40d7
mov dword [esp - 0x44], ebx
sub dword [ebp - 0x28], 0x7c1b06e
mov dword [ebp - 0x24], 0x177d63f6
add dword [ebp - 0x24], 0x405bb12b
xor dword [ebp - 0x24], 0x5cfad60c
mov edi, edi
xor dword [ebp - 0x24], 0xc09bb9d
xor dword [ebp - 0x24], 0x72a78b0
mov eax, dword [ecx]
mov dword [esp - 0x44], esi
mov dword [ebp - 0x20], eax
mov eax, dword [ecx + 4]
mov dword [ebp - 0x1c], eax
mov dword [esp - 0x2c], 0x7a4d9ed9
lea eax, [ebp - 0x28]
push eax
mov eax, dword [0x4c1010]
mov edi, edi
xor eax, dword [0x4c0968]
push ebx
call eax
mov eax, dword [0x4c0d50]
xchg esi, esi
xor eax, dword [0x4c0968]
push ebx
call eax
mov eax, dword [0x4c0d58]
mov dword [esp - 0x44], 0x6416ca3e
xor eax, dword [0x4c0968]
nop
sub esp, 4
xchg esi, esi
mov dword [esp], 0x237c6381
sub dword [esp], 0x1af3c405
sub dword [esp], 0x58795ee
xchg ebp, ebp
add dword [esp], 0x19e1c43c
sub dword [esp], 0x1ce2cdc5
push ebx
xchg esi, esi
call eax
jmp 0x43b1d2
cmp eax, 2
jne 0x43b1d2
mov ebp, ebp
mov ecx, dword [ebx + 0x58]
test ecx, ecx
je 0x43b1bb
mov eax, dword [esi]
xchg edx, edx
push ecx
mov ecx, esi
call dword [eax + 0x10]
xchg ebp, ebp
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x18]
mov ecx, dword [ebx + 0xa0]
mov dword [esp - 0x38], edi
push esi
call fcn.0045f990
mov ecx, dword [0x4c0ad0]
xor ecx, dword [0x4c0968]
mov ecx, ecx
push edi
call ecx
pop edi
mov eax, esi
mov dword [esp - 0x24], ebx
pop esi
pop ebx
mov esp, ebp
pop ebp
mov dword [esp - 0x18], 0x47844692
ret 0x10