Function at 0x439ce9
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push ebx
push esi
push edi
cmp dword [0x431ba0], 1
je 0x439d1e
js 0x439cfd
jae 0x439cff
dec edi
inc edi
push edi
add edi, 0x1f09
ror edi, 8
pop edi
jno 0x439d14
lea edi, [edi]
jo 0x439d14
mov esp, 0x1ba0a149
inc ebx
add byte [ecx + 0x2febfc45], cl
mov eax, dword [0x431ba0]
mov dword [ebp - 4], eax
jmp 0x439d4d
add eax, dword [esp]
sub eax, dword [esp]
test dword [esp], ecx
lea ebx, [ebx + 0xabc]
lea ebx, [ebx - 0xabc]
jg 0x439d46
pushf
cmp esp, 0x6ec1
shl ebx, 0
popf
nop
jle 0x439d46
mov eax, 0xf5e9c033
add dword [eax], eax
add byte [ebp + 0x5441bf], cl
add byte [ecx + 0x5441ef], al
add byte [eax + eax + 0x78], bh
or dword [eax + eax + 0x7d], esi
add byte [ebx + 0x50179ff], cl
xor eax, eax
jmp 0x439f42
lea edi, [edi + 0x5441]
sub edi, 0x5441
jl 0x439d5b
js 0x439d66
je 0x439d5f
jge 0x439d61
mov edi, edi
jns 0x439d66
add eax, 0x51fc4d8b
mov ecx, dword [ebp - 4]
push ecx
call fcn.00443a02
add esp, 4
push 0xd
push 0
lea edx, [ebp - 0x18]
push edx
call fcn.00453cf9
add esp, 0xc
shr esp, 0
or ebx, ebx
and esp, 0xffffffff
jbe 0x439da9
pushf
xor eax, 0x37e7
xor eax, 0x37e7
inc esi
dec esi
add eax, 0
clc
popf
jg 0x439da2
jae 0x439da4
jge 0x439da6
ja 0x439da9
mov ecx, 0x4de845c6
mov byte [ebp - 0x18], 0x4d
mov byte [ebp - 0x13], 0x6a
mov byte [ebp - 0xe], 0x7a
mov byte [ebp - 0x17], 0x70
mov byte [ebp - 0x12], 0x63
mov byte [ebp - 0x16], 0x62
mov byte [ebp - 0x11], 0x73
mov byte [ebp - 0x15], 0x65
mov byte [ebp - 0x10], 0x62
mov byte [ebp - 0x14], 0x4d
mov byte [ebp - 0xf], 0x73
mov byte [ebp - 0xd], 0x58
mov byte [ebp - 0xc], 0
jmp 0x439ddf
jo 0x439de6
xchg edx, edx
jno 0x439de6
or dword [edx + 0x12ce845], 0x8ae84588
dec ebp
in eax, dx
mov al, byte [ebp - 0x18]
sub al, 1
mov byte [ebp - 0x18], al
mov cl, byte [ebp - 0x13]
sub cl, 1
mov byte [ebp - 0x13], cl
mov dl, byte [ebp - 0x17]
sub dl, 1
mov byte [ebp - 0x17], dl
mov al, byte [ebp - 0x12]
sub al, 1
mov byte [ebp - 0x12], al
mov cl, byte [ebp - 0x16]
sub cl, 1
mov byte [ebp - 0x16], cl
mov dl, byte [ebp - 0x11]
sub dl, 1
mov byte [ebp - 0x11], dl
mov al, byte [ebp - 0x15]
sub al, 1
mov byte [ebp - 0x15], al
mov cl, byte [ebp - 0x10]
sub cl, 1
mov byte [ebp - 0x10], cl
mov dl, byte [ebp - 0x14]
sub dl, 1
mov byte [ebp - 0x14], dl
mov al, byte [ebp - 0xf]
sub al, 1
mov byte [ebp - 0xf], al
mov cl, byte [ebp - 0xd]
sub cl, 1
mov byte [ebp - 0xd], cl
mov dl, byte [ebp - 0xe]
sub dl, 1
mov byte [ebp - 0xe], dl
cmp ecx, edx
dec ebx
inc ebx
test esp, 0x361d
and esp, 0xffffffff
je 0x439e65
jbe 0x439e5f
jmp 0x439e61
jne 0x439e65
mov ebp, 0xa83d8333
sbb eax, dword [ebx]
add byte [esp + 0x7f], dh
add bh, dh
sal edi, 1
sar dword [eax + 9], 1
cmp dword [0x431ba8], 0
je 0x439e92
jg 0x439e70
not ecx
not ecx
js 0x439e7f
nop
xchg esp, esp
jae 0x439e7b
jns 0x439e7f
jmp 0xe8892c66
lea eax, [ebp - 0x18]
push eax
mov ecx, dword [0x431ba8]
push ecx
call fcn.0044dbc2
mov dword [ebp - 8], eax
jge 0x439e94
je 0x439e9c
js 0x439e98
jne 0x439e9c
sub eax, 0x6a0d6a85
add byte [ebp - 0x17ad17ab], cl
push eax
sahf
add dword [eax], eax
push 0xd
push 0
lea edx, [ebp - 0x18]
push edx
call fcn.00453cf9
add esp, 0xc
ror esi, 0x12
ror esi, 0xe
or esp, 0
xor edi, dword [esp]
xor edi, dword [esp]
call 0x439ec0
lea esp, [esp + 4]
jl 0x439edf
pushf
std
cld
popf
mov esi, esi
lea esi, [esi + 0x70ef]
lea esi, [esi - 0x70ef]
jns 0x439edc
jge 0x439edf
mov eax, 0xf87d83
cmp dword [ebp - 8], 0
je 0x439f08
nop
shl esp, 0
js 0x439efc
pushf
dec eax
inc eax
je 0x439ef1
cmp esi, edi
popf
jne 0x439ef7
xchg edi, eax
xchg edi, eax
jns 0x439efc
or dword [ebx - 0x17af07bb], 0x9afd
mov eax, dword [ebp - 8]
push eax
call fcn.00443a02
add esp, 4
add esi, 0x15db
sub esi, 0x15db
xchg esi, edx
xchg esi, edx
xor edi, 0x401d
xor edi, 0x401d
jae 0x439f3b
jns 0x439f28
lea eax, [eax + 0x5096]
lea eax, [eax - 0x5096]
xchg esp, esp
jnp 0x439f38
jb 0x439f3b
mov esp, 0x51084d8b
mov ecx, dword [ebp + 8]
push ecx
call dword [ebp - 4]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4