Function at 0x443a80
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x30
mov eax, dword [ebp + 0x10]
mov dword [esp + 0x1c], eax
mov dword [esp], 0xd2d1d0d7
mov dword [esp + 4], 0
mov byte [esp + 8], 0
mov eax, 0x4dcce63
mov edi, 0xfb23319c
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov dword [esp + 0x10], edi
movzx edx, byte [esp + eax - 0x4dcce63]
mov edi, edx
not edi
mov ebx, edi
and ebx, 0x498e514
mov esi, edx
and esi, 0xffffffeb
or esi, ebx
mov ebx, esi
xor ebx, 0x3671aeb
xor esi, 0x498e514
mov ecx, esi
xor edi, esi
add esi, ebx
add esi, edi
mov edi, dword [esp + 0x10]
and ecx, edx
sub esi, ecx
inc esi
or esi, edi
add esi, 0x8000000
or edx, eax
and edx, esi
mov dword [esp + 0x28], edx
mov ecx, dword [esp + 0x28]
add cl, 0x4b
mov byte [esp + eax - 0x4dcce63], cl
inc eax
dec edi
cmp eax, 0x4dcce6c
jne 0x443ac0
mov ebx, dword [esp]
mov eax, dword [0x44fb4c]
test eax, eax
je 0x443b7c
xor ecx, ecx
mov edx, dword [0x44fb50]
nop
nop
nop
nop
nop
nop
nop
cmp dword [edx + ecx*8], 0x5fb66e8c
je 0x443b50
inc ecx
cmp eax, ecx
jne 0x443b40
jmp 0x443b7c
mov eax, dword [edx + ecx*8 + 4]
cmp eax, ebx
je 0x443b7c
lea ecx, [esp + 0x24]
push ecx
push 0
push 0
push 0
push dword [ebp + 0xc]
push dword [ebp + 8]
push 6
push dword [0x44fb54]
push eax
call fcn.00440280
add esp, 0x24
mov ebx, eax
mov dword [esp], 0xb4d788d
mov eax, dword [esp]
mov ecx, eax
not ecx
and eax, 0x95
and ecx, 0x6a
sub eax, ecx
movzx ecx, al
mov dword [esp], 0xb4d786a
mov eax, dword [esp]
mov edx, eax
not edx
and eax, 0x95
and edx, 0x6a
sub eax, edx
shl eax, 8
movzx eax, ax
or eax, ecx
mov dword [esp], 0xb4d786a
mov ecx, dword [esp]
mov edx, ecx
not edx
and ecx, 0x95
and edx, 0x6a
sub ecx, edx
mov dword [esp], 0xb4d782a
mov edx, dword [esp]
mov edi, edx
not edi
and edx, 0x95
and edi, 0x6a
sub edx, edi
shl edx, 0x18
movzx ecx, cl
shl ecx, 0x10
or ecx, eax
or ecx, edx
mov dword [esp], 0xb4d78ca
mov eax, dword [esp]
mov dword [esp], 0xb4d78cb
mov eax, dword [esp]
mov dword [esp], 0xb4d78cc
mov eax, dword [esp]
mov dword [esp], 0xb4d78cd
mov eax, dword [esp]
mov dword [esp], 0xb4d78ce
mov eax, dword [esp]
cmp ebx, ecx
jne 0x443e5f
push dword [esp + 0x24]
call fcn.0043e5e0
add esp, 4
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 0x20], eax
mov dword [esp], 0xd2d1d0d7
mov dword [esp + 4], 0
mov byte [esp + 8], 0
mov edx, 0x4dcce63
mov edi, 0xfb23319c
nop
nop
nop
nop
nop
nop
mov dword [esp + 0x10], edi
movzx esi, byte [esp + edx - 0x4dcce63]
mov edi, esi
not edi
mov ebx, edi
and ebx, 0x498e514
mov ecx, esi
and ecx, 0xffffffeb
or ecx, ebx
mov ebx, ecx
xor ebx, 0x3671aeb
xor ecx, 0x498e514
mov eax, ecx
xor edi, ecx
add ecx, ebx
add ecx, edi
mov edi, dword [esp + 0x10]
and eax, esi
sub ecx, eax
inc ecx
or ecx, edi
add ecx, 0x8000000
or esi, edx
and esi, ecx
mov dword [esp + 0x28], esi
mov eax, dword [esp + 0x28]
add al, 0x4b
mov byte [esp + edx - 0x4dcce63], al
inc edx
dec edi
cmp edx, 0x4dcce6c
jne 0x443c70
mov ebx, dword [esp]
mov ecx, dword [0x44fb4c]
test ecx, ecx
je 0x443d00
xor edx, edx
mov edi, dword [0x44fb50]
mov esi, dword [ebp + 0x10]
nop
nop
nop
cmp dword [edi + edx*8], 0x5fb66e8c
je 0x443d05
inc edx
cmp ecx, edx
jne 0x443cf0
jmp 0x443d35
mov esi, dword [ebp + 0x10]
jmp 0x443d35
mov ecx, dword [edi + edx*8 + 4]
cmp ecx, ebx
je 0x443d35
lea eax, [esp + 0x24]
push eax
push dword [esp + 0x24]
push dword [esp + 0x20]
push 0
push dword [ebp + 0xc]
push dword [ebp + 8]
push 6
push dword [0x44fb54]
push ecx
call fcn.00440280
add esp, 0x24
mov ebx, eax
mov edi, dword [ebp + 0x14]
test edi, edi
mov edx, dword [esp + 0x18]
je 0x443e56
test ebx, ebx
js 0x443e56
test esi, esi
je 0x443e4f
mov ecx, dword [edx + 0xc]
shr ecx, 1
mov eax, dword [edi]
cmp eax, ecx
jb 0x443d61
mov eax, ecx
test eax, eax
je 0x443e46
add dword [esp + 0x14], 0x10
mov ecx, eax
and ecx, 3
mov dword [esp + 0x10], ebx
je 0x443dcf
mov dword [esp + 0x20], eax
xor edi, edi
mov esi, dword [ebp + 0x10]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 0x14]
movzx ebx, word [eax]
xor edx, edx
test bx, bx
setne dl
lea eax, [eax + edx*2]
mov dword [esp + 0x14], eax
mov word [esi], bx
add esi, 2
inc edi
cmp ecx, edi
jne 0x443d90
mov dword [esp + 0x1c], esi
mov eax, dword [esp + 0x20]
mov esi, eax
sub esi, edi
mov edi, dword [ebp + 0x14]
mov ebx, dword [esp + 0x10]
mov edx, dword [esp + 0x18]
cmp eax, 4
jae 0x443dd6
jmp 0x443e46
mov esi, eax
cmp eax, 4
jb 0x443e46
mov ebx, dword [esp + 0x1c]
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 0x14]
movzx edx, word [eax]
xor ecx, ecx
test dx, dx
setne cl
mov word [ebx], dx
lea edx, [eax + ecx*2]
movzx eax, word [eax + ecx*2]
xor ecx, ecx
test ax, ax
setne cl
mov word [ebx + 2], ax
lea eax, [edx + ecx*2]
movzx ecx, word [edx + ecx*2]
xor edx, edx
test cx, cx
setne dl
mov word [ebx + 4], cx
lea ecx, [eax + edx*2]
movzx edx, word [eax + edx*2]
xor eax, eax
test dx, dx
setne al
lea eax, [ecx + eax*2]
mov dword [esp + 0x14], eax
mov word [ebx + 6], dx
add ebx, 8
add esi, 0xfffffffc
jne 0x443de0
mov dword [esp + 0x1c], ebx
mov ebx, dword [esp + 0x10]
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov word [eax], 0
mov eax, dword [edx + 0xc]
shr eax, 1
mov dword [edi], eax
push edx
call fcn.0043e740
add esp, 4
mov eax, ebx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret