Function at 0x440080
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x80
mov esi, ecx
mov eax, dword [ecx + 4]
test eax, eax
je 0x4400a2
cmp eax, 2
je 0x44011b
jmp 0x44024b
push 0xf8eb88df
push dword [0x451f54]
call fcn.00445020
add esp, 8
test eax, eax
je 0x4400df
mov ecx, dword [esi]
test ecx, ecx
je 0x44010f
mov dword [esp], 0
mov edx, esp
push edx
push ecx
call eax
test eax, eax
je 0x4400eb
cmp dword [esp], 0
je 0x4400eb
mov dword [esi + 4], 3
jmp 0x44010f
mov dword [esi + 4], 1
jmp 0x44024b
lea eax, [esp + 0x48]
push eax
call fcn.00445800
add esp, 4
test al, al
je 0x44010f
mov eax, dword [esp + 0x48]
mov ecx, 2
cmp eax, 3
je 0x44010c
mov ecx, eax
mov dword [esi + 4], ecx
mov eax, dword [esi + 4]
cmp eax, 2
jne 0x44024b
mov dword [esp], 0x6a4f6d4a
mov dword [esp + 4], 0x795b6b79
mov dword [esp + 8], 0x52525749
mov dword [esp + 0xc], 0x4e674945
mov dword [esp + 0x10], 0x56585a45
mov byte [esp + 0x14], 0xac
mov dword [esp + 0x15], 0
mov word [esp + 0x19], 0
xor edi, edi
xor ecx, ecx
nop
nop
nop
nop
nop
nop
movzx ebx, byte [esp + ecx]
mov eax, edi
and eax, 0x34
mov edx, ecx
xor edx, 0xc08cd3da
add edx, eax
xor edx, ebx
add edx, 0x3d3fdcbd
mov eax, edx
xor eax, 0x7e
mov ebx, edx
or ebx, 1
and ebx, eax
xor edx, 1
lea eax, [edx + ebx*2]
mov byte [esp + ecx], al
inc ecx
add edi, 2
cmp ecx, 0x1b
jne 0x440160
mov ebx, esp
lea eax, [esp + 0x40]
push ebx
push eax
call fcn.004444e0
add esp, 8
mov eax, dword [esi]
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], 0
mov eax, dword [ebp + 0xc]
mov dword [esp + 0x54], eax
mov eax, dword [ebp + 8]
mov dword [esp + 0x50], eax
mov dword [esp + 0x5c], 0
mov dword [esp + 0x58], 0
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], 0
mov dword [esp + 0x6c], 0
mov dword [esp + 0x68], 0x30
mov dword [esp + 0x74], 0
mov dword [esp + 0x70], 0
lea eax, [esp + 0x48]
push 6
push eax
push dword [esp + 0x4c]
push dword [esp + 0x4c]
call fcn.004445b0
mov ecx, dword [esp]
mov edx, dword [esp + 4]
mov esi, dword [ebp + 0x10]
mov dword [esi + 4], edx
mov dword [esi], ecx
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov esi, dword [ebp + 0x14]
mov dword [esi], edx
mov dword [esi + 4], ecx
mov ecx, dword [esp + 0x20]
mov edx, dword [ebp + 0x18]
mov dword [edx], ecx
mov ecx, dword [esp + 0x24]
mov edx, dword [ebp + 0x1c]
mov dword [edx], ecx
jmp 0x4402f0
mov edi, dword [esi]
mov dword [esp], 0x34353637
mov word [esp + 4], 0
mov byte [esp + 6], 0
mov eax, 0x74
mov edx, 0x4fc6570b
nop
nop
nop
nop
nop
nop
movzx ecx, byte [esp + eax - 0x74]
mov esi, edx
or esi, ecx
lea ebx, [edx - 0x4fc65700]
and ebx, ecx
xor ebx, esi
and ebx, eax
add bl, bl
sub cl, bl
movzx ecx, cl
add ecx, eax
add cl, 0xbc
mov byte [esp + eax - 0x74], cl
inc eax
dec edx
cmp eax, 0x7b
jne 0x440270
mov eax, dword [esp]
mov ecx, dword [0x451f60]
test ecx, ecx
je 0x4402ce
xor edx, edx
mov esi, dword [0x451f64]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp dword [esi + edx*8], 0x7b3afdab
je 0x4402fa
inc edx
cmp ecx, edx
jne 0x4402c0
mov ecx, dword [ebp + 0x10]
mov dword [ecx], ebx
mov dword [ecx + 4], 0
mov ecx, dword [ebp + 0x14]
mov dword [ecx], edi
mov dword [ecx + 4], 0
mov ecx, dword [ebp + 0x18]
mov dword [ecx], esi
mov ecx, dword [ebp + 0x1c]
mov dword [ecx], edx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret 0x18
mov dword [esp + 0x3c], edi
mov ecx, dword [esi + edx*8 + 4]
cmp ecx, eax
je 0x4402ce
mov eax, esp
push 0
push 0x1c
push eax
push 0
push dword [ebp + 8]
push dword [esp + 0x50]
push 6
push dword [0x451f68]
push ecx
call fcn.004426c0
add esp, 0x24
mov ebx, dword [esp]
mov edi, dword [esp + 0xc]
mov esi, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
jmp 0x4402ce