Function at 0x435d40
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x90
mov esi, dword [ebp + 0x1c]
mov eax, dword [ecx + 4]
test eax, eax
mov dword [esp + 0xc], ecx
je 0x435d6b
cmp eax, 2
je 0x435dea
jmp 0x435f1a
mov edi, ecx
push 0xbbf966b4
push dword [0x449638]
call fcn.0043bcb0
add esp, 8
test eax, eax
je 0x435dae
mov ecx, dword [edi]
test ecx, ecx
je 0x435dde
mov dword [esp + 0x10], 0
lea edx, [esp + 0x10]
push edx
push ecx
call eax
test eax, eax
je 0x435dba
cmp dword [esp + 0x10], 0
je 0x435dba
mov dword [edi + 4], 3
jmp 0x435dde
mov dword [edi + 4], 1
jmp 0x435f1a
lea eax, [esp + 0x50]
push eax
call fcn.0043c460
add esp, 4
test al, al
je 0x435dde
mov eax, dword [esp + 0x50]
mov ecx, 2
cmp eax, 3
je 0x435ddb
mov ecx, eax
mov dword [edi + 4], ecx
mov eax, dword [edi + 4]
cmp eax, 2
jne 0x435f1a
mov edi, dword [ebp + 0xc]
mov dword [esp + 0x10], 0xaacfadca
mov dword [esp + 0x14], 0x395babb9
mov dword [esp + 0x18], 0x52525749
mov dword [esp + 0x1c], 0x4e274945
mov dword [esp + 0x20], 0x56585a45
mov byte [esp + 0x24], 0xec
mov dword [esp + 0x25], 0
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ecx, byte [esp + eax + 0x10]
mov ebx, eax
and ebx, 6
xor ebx, 0xb3354406
mov edx, eax
and edx, 0x19
sub edx, ebx
mov ebx, ecx
and ebx, edx
add ebx, ebx
sub edx, ebx
add dl, cl
add dl, 0x1e
mov byte [esp + eax + 0x10], dl
inc eax
cmp eax, 0x19
jne 0x435e30
lea ebx, [esp + 0x10]
lea eax, [esp + 0x80]
push ebx
push eax
call fcn.0043add0
add esp, 8
mov eax, dword [esp + 0xc]
mov eax, dword [eax]
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], 0
mov dword [esp + 0x5c], edi
mov eax, dword [ebp + 8]
mov dword [esp + 0x58], eax
mov dword [esp + 0x64], 0
mov dword [esp + 0x60], 0
mov dword [esp + 0x68], ebx
mov dword [esp + 0x6c], 0
mov dword [esp + 0x74], 0
mov dword [esp + 0x70], 0x30
mov dword [esp + 0x7c], 0
mov dword [esp + 0x78], 0
lea eax, [esp + 0x50]
push 6
push eax
push dword [esp + 0x8c]
push dword [esp + 0x8c]
call fcn.0043aea0
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov edi, dword [ebp + 0x10]
mov dword [edi + 4], edx
mov dword [edi], ecx
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x28]
mov edi, dword [ebp + 0x14]
mov dword [edi], edx
mov dword [edi + 4], ecx
mov ecx, dword [esp + 0x30]
mov edx, dword [ebp + 0x18]
mov dword [edx], ecx
mov ecx, dword [esp + 0x34]
mov dword [esi], ecx
jmp 0x436030
mov dword [esp + 0x50], 0x111e1f30
xor eax, eax
xor ecx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edi, byte [esp + ecx + 0x50]
mov ebx, eax
and ebx, 2
mov edx, ecx
xor edx, 0x359e7405
add edx, ebx
mov esi, edx
and esi, edi
add esi, esi
add edx, edi
mov ebx, edx
sub ebx, esi
and edx, 1
or ebx, 1
add ebx, edx
add bl, 0xe6
mov byte [esp + ecx + 0x50], bl
inc ecx
add eax, 2
cmp ecx, 4
jne 0x435f30
mov eax, dword [esp + 0x50]
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0xc]
mov eax, dword [eax]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0xb8bbba85
mov dword [esp + 0x14], 0
xor esi, esi
mov edi, 0x65
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [esp + esi + 0x10]
mov ebx, esi
xor ebx, 0xca0f841f
lea ecx, [edi + ebx]
add ecx, 0xffffff9b
and ecx, edx
mov eax, ecx
or al, 0xfd
inc al
mov ah, cl
and ah, 0x3d
mul ah
add bl, dl
add bl, al
mov eax, ecx
shr al, 1
and al, 1
or cl, 2
mul cl
add al, al
sub bl, al
movzx eax, bl
add eax, edi
mov byte [esp + esi + 0x10], al
inc esi
add edi, 2
cmp esi, 8
jne 0x435fa0
mov eax, dword [esp + 0x10]
mov ecx, dword [0x449644]
test ecx, ecx
je 0x43600e
xor edx, edx
mov esi, dword [0x449648]
nop
nop
nop
cmp dword [esi + edx*8], 0xba50defc
je 0x43603a
inc edx
cmp ecx, edx
jne 0x436000
mov edx, dword [ebp + 0x10]
mov dword [edx], ecx
mov dword [edx + 4], 0
mov ecx, dword [ebp + 0x14]
mov dword [ecx], ebx
mov dword [ecx + 4], 0
mov ecx, dword [ebp + 0x18]
mov dword [ecx], edi
mov ecx, dword [ebp + 0x1c]
mov dword [ecx], esi
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret 0x18
mov edx, dword [esi + edx*8 + 4]
cmp edx, eax
je 0x43600e
lea eax, [esp + 0x10]
push 0
push dword [esp + 0x50]
push eax
push 0
push dword [ebp + 8]
push dword [esp + 0x20]
push 6
push edx
push dword [0x44964c]
call fcn.00438a80
add esp, 0x24
mov ecx, dword [esp + 0x10]
mov ebx, dword [esp + 0x1c]
mov edi, dword [esp + 0x20]
mov esi, dword [esp + 0x24]
jmp 0x43600e