Function at 0x439e32
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Encrypt data using rc4 ksa

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x394
mov eax, dword [0x44a790]
push ebx
push esi
push edi
push 0xe
xor ebx, ebx
mov dword [ebp - 0xfc], edx
mov dword [ebp - 0x100], ecx
mov esi, ebx
pop edi
mov dword [ebp - 0x1c], 0x3d
mov dword [ebp - 0x18], 0xffffffb5
mov edx, 0x4039a0
mov cl, 0x61
sub cl, 0x30
cmp cl, 9
ja 0x439e7c
inc edx
mov cl, byte [edx]
test cl, cl
jne 0x439e6b
jmp 0x439e81
xor eax, 0x71aab04b
add eax, 0x5aaf3ed5
mov edx, 0x4039a0
push 0x4039b0
mov dword [ebp - 8], eax
call fcn.00438385
add edi, dword [ebp + esi*4 - 0x1c]
inc esi
mov eax, dword [ebp - 8]
pop ecx
cmp esi, 2
jl 0x439e64
mov dword [ebp - 0xf8], edi
mov esi, 0x4028d0
lea edi, [ebp - 0x1c]
mov dword [ebp - 0x74], 0x218d9eb1
push 6
pop ecx
movsd dword es:[edi], dword [esi]
mov eax, ebx
mov dword [ebp - 0x70], 0x72c207
mov byte [ebp - 0x6c], 0x1c
mov byte [ebp - 0x6b], cl
movsw word es:[edi], word [esi]
mov dword [ebp - 0x6a], 0x59ca8b85
mov dword [ebp - 0x66], 0x3af2f313
mov dword [ebp - 0x62], 0x43eea7f5
movsb byte es:[edi], byte [esi]
mov dword [ebp - 0x5e], 0x2cd6c8ed
mov edi, ebx
mov dword [ebp - 0x5a], 0x91aee8d0
mov dword [ebp - 0x56], 0xa3d5769
mov dword [ebp - 0x52], 0x7a42efc1
mov dword [ebp - 0x4e], 0x462a0902
mov dword [ebp - 0x4a], 0xf9919200
mov dword [ebp - 0x46], 0xd2930265
mov dword [ebp - 0x42], 0xaf44f108
mov dword [ebp - 0x3e], 0x28d3ff3d
mov dword [ebp - 0x3a], 0x7c8d755a
mov dword [ebp - 0x36], 0x6771ed46
mov dword [ebp - 0x32], 0x49e2515c
mov dword [ebp - 0x2e], 0xd6a57e62
mov dword [ebp - 0x2a], 0x951c3c9b
mov dword [ebp - 0x26], 0xbfbc925b
mov dword [ebp - 0x22], 0x9fc38b78
mov word [ebp - 0x1e], 0xcacb
mov byte [ebp + eax - 0x200], al
inc eax
cmp eax, 0x100
jb 0x439f5f
mov esi, ebx
xor edx, edx
mov bl, byte [ebp + esi - 0x200]
mov eax, esi
div ecx
movzx ecx, bl
push 6
movzx eax, byte [ebp + edx - 0x1c]
add eax, edi
add ecx, eax
movzx edi, cl
pop ecx
mov al, byte [ebp + edi - 0x200]
mov byte [ebp + esi - 0x200], al
inc esi
mov byte [ebp + edi - 0x200], bl
cmp esi, 0x100
jb 0x439f70
xor ebx, ebx
sub dword [ebp - 8], 0x2c2dcdd0
mov edi, ebx
mov esi, ebx
lea eax, [edi + 1]
movzx edi, al
mov cl, byte [ebp + edi - 0x200]
movzx edx, cl
lea eax, [edx + ebx]
movzx ebx, al
mov al, byte [ebp + ebx - 0x200]
mov byte [ebp + edi - 0x200], al
mov byte [ebp + ebx - 0x200], cl
movzx eax, byte [ebp + edi - 0x200]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x200]
xor al, byte [ebp + esi - 0x74]
mov byte [ebp + esi - 0x394], al
inc esi
cmp esi, 0x58
jb 0x439fba
push 5
pop eax
mov ecx, eax
mov dword [ebp - 0xd0], 0xced9e2ab
mov esi, 0x402eec
mov dword [ebp - 0xcc], 0xe6a03b09
lea edi, [ebp - 0xf4]
mov dword [ebp - 0xc8], 0x3ad2aa9d
rep movsd dword es:[edi], dword [esi]
xor ebx, ebx
mov dword [ebp - 0xc4], 0x3540a86a
mov byte [ebp - 0x33c], bl
mov eax, ebx
mov dword [ebp - 0xc0], 0x4b3e6db
movsb byte es:[edi], byte [esi]
mov dword [ebp - 0xbc], 0x64dc4cbc
mov edi, ebx
mov byte [ebp + eax - 0x200], al
inc eax
cmp eax, 0x100
jb 0x43a065
mov esi, ebx
xor edx, edx
mov bl, byte [ebp + esi - 0x200]
push 0x14
mov eax, esi
pop ecx
div ecx
movzx ecx, bl
movzx eax, byte [ebp + edx - 0xf4]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [ebp + edi - 0x200]
mov byte [ebp + esi - 0x200], al
inc esi
mov byte [ebp + edi - 0x200], bl
cmp esi, 0x100
jb 0x43a076
xor ebx, ebx
mov edi, ebx
mov esi, ebx
lea eax, [edi + 1]
movzx edi, al
mov cl, byte [ebp + edi - 0x200]
movzx edx, cl
lea eax, [edx + ebx]
movzx ebx, al
mov al, byte [ebp + ebx - 0x200]
mov byte [ebp + edi - 0x200], al
mov byte [ebp + ebx - 0x200], cl
movzx eax, byte [ebp + edi - 0x200]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x200]
xor al, byte [ebp + esi - 0xd0]
mov byte [ebp + esi - 0x21c], al
inc esi
cmp esi, 0x18
jb 0x43a0bc
mov esi, 0x403920
mov dword [ebp - 0xd0], 0xd911f0
lea edi, [ebp - 0x1c]
mov dword [ebp - 0xcc], 0xf3a71e54
xor ebx, ebx
mov dword [ebp - 0xc8], 0x5257df4a
mov byte [ebp - 0x204], bl
mov eax, ebx
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0xc4], 0x3c880791
mov dword [ebp - 0xc0], 0x3cf5f6f2
mov dword [ebp - 0xbc], 0xf2b87899
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov edi, ebx
mov byte [ebp + eax - 0x200], al
inc eax
cmp eax, 0x100
jb 0x43a163
mov esi, ebx
xor edx, edx
mov bl, byte [ebp + esi - 0x200]
push 6
mov eax, esi
pop ecx
div ecx
movzx ecx, bl
movzx eax, byte [ebp + edx - 0x1c]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [ebp + edi - 0x200]
mov byte [ebp + esi - 0x200], al
inc esi
mov byte [ebp + edi - 0x200], bl
cmp esi, 0x100
jb 0x43a174
xor ebx, ebx
mov eax, ebx
inc eax
cmp eax, 0x1e19
je 0x43a1ca
cmp byte [eax + 0x4039c0], bl
jne 0x43a1b5
mov esi, dword [ebp - 8]
jmp 0x43a1d1
imul esi, dword [ebp - 8], 0xeb1056de
and esi, 0xf8c2933e
mov edx, 0x4039a0
or esi, 0x8000124
push 0x4039b0
mov dword [ebp - 8], esi
call fcn.00438385
pop ecx
mov esi, ebx
mov edi, ebx
lea eax, [esi + 1]
movzx esi, al
mov cl, byte [ebp + esi - 0x200]
movzx edx, cl
lea eax, [edx + ebx]
movzx ebx, al
mov al, byte [ebp + ebx - 0x200]
mov byte [ebp + esi - 0x200], al
mov byte [ebp + ebx - 0x200], cl
movzx eax, byte [ebp + esi - 0x200]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x200]
xor al, byte [ebp + edi - 0xd0]
mov byte [ebp + edi - 0x238], al
inc edi
cmp edi, 0x18
jb 0x43a1f4
mov eax, dword [0x403928]
xor ebx, ebx
or dword [ebp - 8], 0xb03ad351
mov dword [ebp - 0x1c], eax
mov ax, word [0x40392c]
mov word [ebp - 0x18], ax
mov eax, ebx
mov byte [ebp - 0x220], bl
mov dword [ebp - 0xc], 0x183904e0
mov byte [ebp + eax - 0x200], al
inc eax
cmp eax, 0x100
jb 0x43a271
mov edi, ebx
mov esi, ebx
xor edx, edx
mov bl, byte [ebp + edi - 0x200]
push 5
mov eax, edi
pop ecx
div ecx
movzx ecx, bl
movzx eax, byte [ebp + edx - 0x1c]
add eax, esi
add ecx, eax
movzx esi, cl
mov al, byte [ebp + esi - 0x200]
mov byte [ebp + edi - 0x200], al
inc edi
mov byte [ebp + esi - 0x200], bl
cmp edi, 0x100
jb 0x43a284
mov esi, dword [ebp - 8]
xor ebx, ebx
mov dword [ebp - 4], ebx
mov edi, ebx
mov dword [ebp - 0x14], ebx
mov eax, ebx
inc eax
cmp eax, 0x7c4
jg 0x43a2e3
cmp byte [eax + 0x4039a0], 0
jne 0x43a2d0
jmp 0x43a2f9
push 0x4039b0
mov edx, 0x4039a0
call fcn.00438385
pop ecx
add esi, 0x3ce60802
mov eax, dword [ebp - 0x14]
add esi, 0x58c0a1a
inc eax
and esi, 0x3e200504
movzx eax, al
or esi, 0x1dbbaf9
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x14]
push 0
mov cl, byte [ebp + eax - 0x200]
mov eax, dword [ebp - 4]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [ebp - 4], eax
mov al, byte [ebp + eax - 0x200]
mov byte [ebp + ebx - 0x200], al
mov eax, dword [ebp - 4]
mov byte [ebp + eax - 0x200], cl
mov eax, ebx
pop ebx
movzx eax, byte [ebp + eax - 0x200]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x200]
xor al, byte [ebp + edi - 0xc]
mov byte [ebp + edi - 0x1c], al
inc edi
cmp edi, 4
jb 0x43a2ce
push 0x5a
pop eax
push 5
xor esi, 0xbb1758e7
mov byte [ebp - 0x83], al
pop ecx
mov dword [ebp - 8], esi
lea edi, [ebp - 0xdc]
mov byte [ebp - 0x7b], cl
mov esi, 0x403930
mov byte [ebp - 0x78], cl
push 9
pop ecx
rep movsd dword es:[edi], dword [esi]
mov byte [ebp - 0x4f], al
mov eax, ebx
mov byte [ebp - 0x18], bl
mov dword [ebp - 0xb4], 0x212aa4c6
movsw word es:[edi], word [esi]
mov dword [ebp - 0xb0], 0xce182332
mov dword [ebp - 0xac], 0x47c32204
mov dword [ebp - 0xa8], 0x3f93e381
movsb byte es:[edi], byte [esi]
mov dword [ebp - 0xa4], 0xb8c42bc3
mov edi, ebx
mov dword [ebp - 0xa0], 0xfebb34b3
mov dword [ebp - 0x9c], 0xc685f06c
mov dword [ebp - 0x98], 0xecaeb16a
mov dword [ebp - 0x94], 0xbeed81aa
mov dword [ebp - 0x90], 0xa65eac76
mov dword [ebp - 0x8c], 0x40cfcc85
mov dword [ebp - 0x88], 0xd17df6e5
mov byte [ebp - 0x84], 0xd4
mov dword [ebp - 0x82], 0xa693a820
mov word [ebp - 0x7e], 0x60f4
mov byte [ebp - 0x7c], 0x6d
mov word [ebp - 0x7a], 0x1e44
mov dword [ebp - 0x77], 0xa70e63e0
mov dword [ebp - 0x73], 0x9cd2c05d
mov dword [ebp - 0x6f], 0x21f7ff60
mov dword [ebp - 0x6b], 0xd8b67c32
mov dword [ebp - 0x67], 0x4b6a3f0b
mov dword [ebp - 0x63], 0x4dc466df
mov dword [ebp - 0x5f], 0x19d0519f
mov dword [ebp - 0x5b], 0xefba54b0
mov dword [ebp - 0x57], 0xa795c902
mov dword [ebp - 0x53], 0x317a7b66
mov dword [ebp - 0x4e], 0x6e42192e
mov dword [ebp - 0x4a], 0x7b073603
mov dword [ebp - 0x46], 0xf707ea91
mov dword [ebp - 0x42], 0xb115673
mov dword [ebp - 0x3e], 0xa35e4be6
mov dword [ebp - 0x3a], 0x82658851
mov dword [ebp - 0x36], 0x6fb6d8bb
mov dword [ebp - 0x32], 0xecf210ed
mov dword [ebp - 0x2e], 0xce9fc4d0
mov dword [ebp - 0x2a], 0x19ffa118
mov dword [ebp - 0x26], 0x72b1291c
mov dword [ebp - 0x22], 0x98ac4aaf
mov word [ebp - 0x1e], 0x3ecb
mov byte [ebp + eax - 0x338], al
inc eax
cmp eax, 0x100
jb 0x43a4e1
mov esi, ebx
xor edx, edx
mov bl, byte [ebp + esi - 0x338]
push 0x26
mov eax, esi
pop ecx
div ecx
movzx ecx, bl
movzx eax, byte [ebp + edx - 0xdc]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [ebp + edi - 0x338]
mov byte [ebp + esi - 0x338], al
inc esi
mov byte [ebp + edi - 0x338], bl
cmp esi, 0x100
jb 0x43a4f2
xor ebx, ebx
mov ecx, ebx
mov edi, ebx
mov esi, ebx
mov ebx, dword [ebp - 8]
lea eax, [edi + 1]
mov edx, 0x2432
movzx edi, al
push 0x63
mov al, byte [ebp + edi - 0x338]
mov byte [ebp - 0xd], al
movzx eax, al
mov dword [ebp - 0xc], eax
add eax, ecx
movzx eax, al
mov dword [ebp - 4], eax
pop ecx
mov al, byte [ebp + eax - 0x338]
mov byte [ebp + edi - 0x338], al
mov eax, 0x4039b0
add edx, ecx
lea eax, [eax + 2]
cmp edx, 0x17b4
ja 0x43a592
movzx ecx, word [eax]
test ecx, ecx
jne 0x43a576
and ebx, 0x5c71cf56
jmp 0x43a5b8
push ebx
push ecx
push ecx
call fcn.0043840e
push 0x4039b0
mov edx, 0x4039a0
and ebx, 0x1a5274db
call fcn.00438385
add esp, 0x10
xor ebx, 0x9e73d6ee
push 0x4039b0
mov edx, 0x4039c0
add ebx, 0x71d8ddbb
call fcn.00438385
mov al, byte [ebp - 0xd]
pop ecx
mov ecx, dword [ebp - 4]
mov byte [ebp + ecx - 0x338], al
movzx eax, byte [ebp + edi - 0x338]
add eax, dword [ebp - 0xc]
movzx eax, al
mov al, byte [ebp + eax - 0x338]
xor al, byte [ebp + esi - 0xb4]
mov byte [ebp + esi - 0x19c], al
inc esi
cmp esi, 0x98
jb 0x43a53d
xor eax, eax
mov dword [ebp - 0xf4], 0x23
mov byte [ebp - 0x104], al
mov edx, eax
mov dword [ebp - 0xf0], 0x17
mov ecx, eax
mov dword [ebp - 0xec], 8
mov dword [ebp - 0xe8], 0x3e
mov dword [ebp - 0xe4], 0xffffff80
sub edx, dword [ebp + ecx*4 - 0xf4]
inc ecx
cmp ecx, 5
jl 0x43a649
sub ebx, 0x6979365e
mov dword [ebp - 4], edx
mov dword [0x44a790], ebx
mov edx, eax
mov dword [ebp - 0xec], 0x3b
mov ecx, eax
mov dword [ebp - 0xe8], 0x3d
mov dword [ebp - 0xe4], 0xffffff88
sub edx, dword [ebp + ecx*4 - 0xec]
inc ecx
cmp ecx, 3
jl 0x43a687
push 0x5a
mov dword [ebp - 0xc], edx
mov ecx, eax
mov dword [ebp - 0xec], 0x4a
mov dword [ebp - 0xe8], 0x38
mov dword [ebp - 0xe4], 0xffffff24
pop edx
add edx, dword [ebp + ecx*4 - 0xec]
inc ecx
cmp ecx, 3
jl 0x43a6ba
mov ecx, dword [ebp - 0xf8]
mov dword [ebp - 0x14], edx
cmp dword [ebp + 8], ecx
jne 0x43a71c
inc eax
cmp eax, 0xbd0
jl 0x43a6f5
cmp byte [eax + 0x4039a0], 0
jne 0x43a6d5
cmp eax, 0x260e
jle 0x43a6fb
and ebx, 0xead66f6a
jmp 0x43a701
imul ebx, ebx, 0x65afa95c
add ebx, 0x6f449aa5
lea eax, [ebx + 0x1592be93]
push eax
push ecx
push ecx
mov dword [0x44a790], eax
call fcn.0043840e
add esp, 0xc
jmp 0x43a7f2
lea ecx, [ebp - 0x394]
call fcn.004342df
lea ecx, [ebp - 0x21c]
mov edi, eax
call fcn.004342df
push dword [ebp + 0x10]
mov esi, dword [ebp + 0x14]
lea ecx, [ebp - 0x1c]
push dword [ebp + 8]
mov ebx, eax
push dword [ebp - 0xfc]
push edi
push esi
call fcn.0041d4e5
mov edx, eax
lea ecx, [ebp - 0x238]
call fcn.0041d4c4
call eax
mov edx, dword [ebp + 0xc]
mov ecx, esi
and dword [0x44a790], 0xc3acc1a9
call fcn.00434d6a
mov edx, ebx
mov ecx, esi
call fcn.00434d6a
mov ecx, esi
call fcn.004348b9
mov edx, dword [ebp + 0x1c]
push eax
call fcn.0041b5fd
push dword [ebp - 4]
mov ecx, dword [ebp - 0x100]
lea edx, [ebp - 0x19c]
push dword [ebp + 0x1c]
push dword [ebp + 0x18]
push esi
call fcn.00438420
mov ecx, edi
call fcn.004348b9
push eax
push dword [ebp - 0xc]
push edi
call fcn.0043423a
mov ecx, ebx
call fcn.004348b9
push eax
push dword [ebp - 0x14]
push ebx
call fcn.0043423a
add esp, 0x40
mov ecx, edi
call fcn.0041d467
imul eax, dword [0x44a790], 0xfc35d2a8
mov ecx, ebx
mov dword [0x44a790], eax
call fcn.0041d467
sub dword [0x44a790], 0x2b88a98d
pop edi
pop esi
pop ebx
leave
ret