Function at 0x43a7b7
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x298
mov edx, dword [esp + 0x2b8]
mov dword [esp + 0x7f], 0xe48040
mov dword [esp + 0x7c], 0x4010ec83
mov dword [esp + 0x78], 0x48e78948
mov dword [esp + 0x74], 0xce8948fc
lea edi, [esp + 0x98]
lea eax, [esp + 0x74]
mov ecx, 3
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
lea edi, [esp + 0xa4]
lea eax, [esp + 0x80]
mov ecx, 1
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
movzx eax, byte [esp + 0x82]
mov byte [esp + 0xa6], al
mov dword [esp + 4], edx
cmp edx, 4
jb 0x43a77d
mov dword [esp + 4], 4
lea ebx, [esp + 0xa7]
cmp dword [esp + 0x2b8], 0
je 0x43ac36
xor ebp, ebp
jmp 0x43a7ab
inc ebp
cmp ebp, dword [esp + 4]
je 0x43aa1c
cmp ebp, 3
ja case.default.0x43a7b0
jmp dword [ebp*4 + 0x43f6c8]
mov eax, ebx
mov dword [esp + 0xc], 0x1724aee0
mov dword [esp + 0x10], 0
xor ecx, ecx
nop
nop
nop
nop
nop
movzx esi, byte [esp + ecx + 0xc]
lea edi, [ecx + 0xc6]
mov ebx, 0x39
sub ebx, ecx
xor ebx, edi
and ebx, esi
xor ebx, edi
add bl, 0x22
mov byte [esp + ecx + 0xc], bl
add ecx, 0x9aaf90d9
mov esi, ecx
and esi, 0x28
xor ecx, 0x65506f28
lea ecx, [ecx + esi*2]
cmp ecx, 8
jb 0x43a7d0
lea edx, [esp + 0xc]
mov esi, edx
xor ecx, ecx
mov ebx, eax
mov edi, eax
xchg esi, esi
rep movsd dword es:[edi], dword [esi]
xchg esi, esi
mov esi, edx
mov ecx, 1
mov edi, eax
xchg esi, esi
rep movsw word es:[edi], word [esi]
xchg esi, esi
movzx ecx, byte [esp + 0xe]
mov byte [eax + 2], cl
add ebx, 3
jmp case.default.0x43a7b0
mov dword [esp], ebx
mov dword [esp + 0xc], 0x81480240
mov byte [esp + 0x10], 0xb0
lea eax, [esp + 0x10]
mov byte [eax + 3], 0
mov word [eax + 1], 0
mov ecx, 0xbbb9908b
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [esp + ecx + 0x44466f81]
lea esi, [ecx + 0x44467052]
and esi, edx
add esi, esi
mov edi, edx
sub edi, esi
add edi, ecx
add edi, 0x15580b52
mov ebx, edi
and ebx, 0xae
mov eax, edi
and eax, 0xeaa7f4ae
add ebx, edx
sub ebx, eax
sub ebx, esi
add ebx, ecx
and edi, 1
or ebx, 1
add ebx, edi
mov byte [esp + ecx + 0x44466f81], bl
inc ecx
cmp ecx, 0xbbb99093
jne 0x43a870
lea eax, [esp + 0xc]
mov ebx, dword [esp]
mov edi, ebx
mov ecx, 1
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
add ebx, 4
lea eax, [esp + 0x10]
xor ecx, ecx
mov edi, ebx
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
jmp case.default.0x43a7b0
mov dword [esp + 0xc], 0x915866a8
mov byte [esp + 0x10], 0xe8
lea eax, [esp + 0x10]
mov word [eax + 5], 0
mov dword [eax + 1], 0
mov ecx, 0x57
mov edi, 0x285382a8
nop
nop
nop
nop
nop
nop
nop
nop
movzx eax, byte [esp + ecx - 0x4b]
mov edx, ecx
xor edx, edi
and edx, eax
xor edx, edi
mov eax, edx
not eax
and eax, 0x4c
xor edx, 0xb3
lea eax, [edx + eax*2]
inc al
mov byte [esp + ecx - 0x4b], al
inc ecx
dec edi
cmp ecx, 0x62
jne 0x43a920
lea eax, [esp + 0xc]
mov ecx, 1
mov edi, ebx
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
add ebx, 4
lea eax, [esp + 0x10]
xor ecx, ecx
mov edi, ebx
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
jmp case.default.0x43a7b0
mov eax, ebx
mov dword [esp + 0xc], 0xe130662c
mov byte [esp + 0x10], 0xe8
lea ecx, [esp + 0x10]
mov word [ecx + 5], 0
mov dword [ecx + 1], 0
xor edx, edx
xor edi, edi
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ebx, byte [esp + edi + 0xc]
mov esi, edi
xor esi, 0x2dd8b691
mov ecx, edx
and ecx, 0x1c
sub ecx, esi
mov esi, ecx
and esi, 0xc0044827
xor ecx, 0x4894fa27
lea esi, [ecx + esi*2]
add esi, 0x2dd8b691
mov ecx, esi
and ecx, ebx
add ecx, ecx
sub esi, ecx
add esi, ebx
mov ecx, esi
or ecx, 1
and esi, 1
sub ecx, esi
lea ecx, [ecx + esi*2]
add cl, 0x3c
mov byte [esp + edi + 0xc], cl
inc edi
add edx, 2
cmp edi, 0xb
jne 0x43a9a0
lea edx, [esp + 0xc]
mov ebx, eax
mov edi, eax
mov ecx, 1
xchg esi, edx
rep movsd dword es:[edi], dword [esi]
xchg esi, edx
add ebx, 4
lea edx, [esp + 0x10]
xor ecx, ecx
mov edi, ebx
xchg esi, edx
rep movsw word es:[edi], word [esi]
xchg esi, edx
jmp case.default.0x43a7b0
mov eax, dword [esp + 0x2b8]
cmp eax, 3
jbe 0x43ac36
test al, 1
je 0x43aa53
mov eax, 0x43fbe2
mov edx, 0x43fbe2
mov edi, ebx
xor ecx, ecx
xchg esi, edx
rep movsd dword es:[edi], dword [esi]
xchg esi, edx
mov ecx, 1
mov edi, ebx
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
add ebx, 2
mov ecx, dword [esp + 0x2b8]
lea eax, [ecx*8]
mov esi, 0xffffffff
mov edx, 0xffffffff
cmp eax, 0x7ffffffe
ja 0x43b075
dec ecx
cmp ecx, 4
mov dword [esp], ebx
jb 0x43ac39
lea ebp, [esp + 0x14]
mov eax, dword [esp + 0x2b8]
jmp 0x43aaa3
mov dword [esp], edx
mov eax, dword [esp + 4]
lea ecx, [eax - 1]
cmp ecx, 3
jbe 0x43ac39
mov ebx, ecx
neg eax
and eax, 8
and ecx, 0xfffffff7
imul ecx, eax
mov eax, ebx
and eax, 8
mov dword [esp + 4], ebx
or ebx, 8
imul ebx, eax
add ebx, ecx
cmp ebx, 0x7e
ja 0x43abc0
mov dword [esp + 0xc], 0xf1884284
mov word [esp + 0x10], 0xd380
mov word [ebp + 2], 0
mov dword [ebp - 2], 0
xor ecx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
movzx ebp, byte [esp + ecx + 0xc]
lea edi, [ecx + 0x40a7eacd]
mov eax, 0x1f581532
sub eax, ecx
lea esi, [ecx + 0xcd]
and esi, ebp
and eax, 0x1650152c
and edi, 0x40246813
or edi, eax
xor edi, 0x692c6813
lea edx, [ebp*2]
not edx
add edx, ebp
and edx, edi
or edx, esi
mov edi, edx
and edi, 0x3c3869fe
xor edi, 0x3cb869fe
mov eax, edx
and eax, 2
mov esi, edi
and esi, 0xfc
imul esi, eax
mov eax, edi
and eax, 2
or edi, 2
imul edi, eax
xor edx, 1
add edx, esi
add edx, edi
inc dl
mov byte [esp + ecx + 0xc], dl
mov eax, ecx
not eax
or eax, 1
mov edx, ecx
and edx, 0xe
mov esi, ecx
xor esi, 1
add esi, eax
sub esi, edx
lea ecx, [esi + ecx*2]
inc ecx
cmp ecx, 0xc
jb 0x43aaf0
lea eax, [esp + 0xc]
mov ecx, 1
mov edx, dword [esp]
mov edi, edx
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
lea edi, [edx + 4]
lea eax, [esp + 0x10]
xor ecx, ecx
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
movzx eax, byte [esp + 0x10]
mov byte [edx + 4], al
mov byte [edx + 3], bl
add edx, 5
lea ebp, [esp + 0x14]
jmp 0x43aa90
mov dword [esp + 0xc], 0xc1c8f28c
mov dword [esp + 0x10], 0xbd424340
mov byte [esp + 0x14], 0x4c
mov dword [ebp + 4], 0
mov dword [ebp + 1], 0
xor ecx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, ecx
add al, 0x11
xor al, byte [esp + ecx + 0xc]
add al, 0xab
mov byte [esp + ecx + 0xc], al
mov eax, ecx
and eax, 1
xor ecx, 1
lea ecx, [ecx + eax*2]
cmp ecx, 0x10
jb 0x43abf0
lea eax, [esp + 0xc]
mov ecx, 2
mov esi, dword [esp]
mov edi, esi
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
lea edx, [esi + 8]
mov eax, ebp
mov edi, edx
xor ecx, ecx
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
mov dword [esi + 3], ebx
jmp 0x43aa90
mov dword [esp], ebx
mov ebp, dword [esp + 0x2ac]
mov dword [esp + 0xc], 0xf7224680
lea ebx, [esp + 0x10]
mov byte [esp + 0x10], 0xd4
mov dword [esp + 0x11], 0
mov word [esp + 0x15], 0
xor ecx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, ecx
add al, 0xce
xor al, byte [esp + ecx + 0xc]
add al, 0xfa
mov byte [esp + ecx + 0xc], al
inc ecx
cmp ecx, 0xb
jne 0x43ac70
lea eax, [esp + 0xc]
mov esi, dword [esp]
mov edi, esi
mov ecx, 1
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
lea edx, [esi + 4]
mov edi, edx
xor ecx, ecx
xchg esi, ebx
rep movsw word es:[edi], word [esi]
xchg esi, ebx
mov dword [esp + 0x93], 0xc3fc8948
mov dword [esp + 0x90], 0x48d2ff41
mov dword [esp + 0x84], 0xba49c031
mov dword [esp + 0x88], ebp
mov eax, dword [esp + 0x2b0]
mov dword [esp + 0x8c], eax
lea eax, [esp + 0x84]
mov edi, edx
mov ecx, 4
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
lea edi, [esi + 0x14]
lea eax, [esp + 0x94]
mov ecx, 1
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
movzx eax, byte [esp + 0x96]
mov byte [esi + 0x16], al
add esi, 0x17
mov eax, esi
lea ecx, [esp + 0x98]
xor eax, ecx
not ecx
and ecx, esi
add ecx, ecx
sub ecx, eax
mov dword [esp + 8], 0
mov ebp, ecx
lea eax, [ecx + 0x59]
mov dword [esp + 0x70], eax
mov dword [esp + 0xc], 0x1c1d1a1b
mov dword [esp + 0x10], 0
mov eax, 0x3d92b33a
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ecx, byte [esp + eax - 0x3d92b32e]
xor ecx, eax
mov edx, ecx
xor edx, 0x23
and ecx, 0x5c
add ecx, ecx
sub ecx, edx
inc cl
mov byte [esp + eax - 0x3d92b32e], cl
inc eax
cmp eax, 0x3d92b342
jne 0x43ad50
mov esi, dword [esp + 0xc]
mov eax, dword [0x4497f8]
test eax, eax
je 0x43add0
xor ecx, ecx
mov edx, dword [0x4497fc]
nop
nop
nop
nop
cmp dword [edx + ecx*8], 0x3e416e49
je 0x43ada0
inc ecx
cmp eax, ecx
jne 0x43ad90
jmp 0x43add0
mov eax, dword [edx + ecx*8 + 4]
cmp eax, esi
je 0x43add0
lea ecx, [esp + 0x70]
lea edx, [esp + 8]
push 0x40
push 0x3000
push ecx
push 0
push edx
push 0xffffffffffffffff
push 0x18
push eax
push dword [0x449800]
call fcn.00438810
add esp, 0x24
mov esi, eax
test esi, esi
js 0x43b040
mov dword [esp + 0xc], 0x55e78855
mov dword [esp + 0x10], 0xf738e53
mov dword [esp + 0x14], 0xe3064483
mov dword [esp + 0x18], 0xf0e0d0c
mov dword [esp + 0x1c], 0x39d29248
mov dword [esp + 0x20], 0x9e1ef997
mov dword [esp + 0x24], 0x1f58defa
mov dword [esp + 0x28], 0x1f1e1d2f
mov dword [esp + 0x2c], 0x2dca23a9
mov dword [esp + 0x30], 0x41262524
mov dword [esp + 0x34], 0xfaa4f0a4
mov dword [esp + 0x38], 0x703ae9af
mov dword [esp + 0x3c], 0x3bf06c6e
mov dword [esp + 0x40], 0x130abe34
mov dword [esp + 0x44], 0xa7213c7
mov dword [esp + 0x48], 0xe9c16afc
mov dword [esp + 0x4c], 0x785111f
mov dword [esp + 0x50], 0x47654160
mov dword [esp + 0x54], 0x77c34948
mov dword [esp + 0x58], 0x8dc70568
mov dword [esp + 0x5c], 0x921a9171
mov dword [esp + 0x60], 0x7ba975be
lea edx, [esp + 0x64]
mov word [esp + 0x64], 0x597c
mov byte [esp + 0x68], 0
mov word [esp + 0x66], 0
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ecx, byte [esp + eax + 0xc]
mov esi, ecx
and esi, eax
add esi, esi
neg esi
lea ebx, [eax + esi]
add ebx, 0x80
add bl, cl
add bl, 0x80
mov byte [esp + eax + 0xc], bl
mov ecx, eax
xor ecx, 0xfffffffe
or eax, 1
and ecx, eax
add eax, ecx
cmp eax, 0x5d
jb 0x43aeb0
mov eax, dword [esp + 8]
lea esi, [esp + 0xc]
mov edi, eax
mov ecx, 0x16
xchg esi, esi
rep movsd dword es:[edi], dword [esi]
xchg esi, esi
lea edi, [eax + 0x58]
xor ecx, ecx
xchg esi, edx
rep movsw word es:[edi], word [esi]
xchg esi, edx
lea edi, [eax + 0x59]
movzx ecx, byte [esp + 0x64]
mov byte [eax + 0x58], cl
mov ebx, ebp
mov ecx, ebp
shr ecx, 2
lea edx, [esp + 0x98]
xchg esi, edx
rep movsd dword es:[edi], dword [esi]
xchg esi, edx
mov ecx, ebp
xor ecx, 3
mov edx, ebp
or edx, 0xfffffffc
and edx, ecx
add eax, edx
add eax, 0x59
add edx, esp
add edx, 0x98
mov ecx, ebp
shr ecx, 1
and ecx, 1
mov esi, edx
mov edi, eax
xchg esi, esi
rep movsw word es:[edi], word [esi]
xchg esi, esi
test bl, 1
je 0x43af5a
and ebx, 2
movzx ecx, byte [edx + ebx]
mov byte [eax + ebx], cl
mov eax, dword [esp + 8]
mov dword [esp + 0xc], 0x292a2b7b
mov byte [esp + 0x10], 0
mov ecx, 7
mov edx, 0x4c791df8
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx esi, byte [esp + ecx + 5]
lea edi, [edx - 0x4c791d00]
mov ebx, ecx
and ebx, esi
and edi, esi
mov ebp, edx
xor ebp, esi
sub ebp, esi
add ebp, edi
or ebp, ebx
mov esi, ebp
not esi
and esi, 0x5c
xor ebp, 0x23
lea ebx, [esi*2]
add ebx, ebp
inc bl
mov byte [esp + ecx + 5], bl
inc ecx
dec edx
cmp ecx, 0xc
jne 0x43af80
mov ecx, dword [esp + 0xc]
add ecx, eax
push dword [esp + 0x2b4]
push ecx
call eax
mov esi, eax
mov dword [esp + 0x6c], 0
mov dword [esp + 0xc], 0x1c1d1a1b
mov dword [esp + 0x10], 0
mov eax, 0x3d92b33a
nop
nop
nop
nop
nop
nop
movzx ecx, byte [esp + eax - 0x3d92b32e]
xor ecx, eax
mov edi, ecx
xor edi, 0x23
and ecx, 0x5c
add ecx, ecx
sub ecx, edi
inc cl
mov byte [esp + eax - 0x3d92b32e], cl
inc eax
cmp eax, 0x3d92b342
jne 0x43aff0
mov eax, dword [0x4497f8]
test eax, eax
je 0x43b075
mov ecx, dword [esp + 0xc]
xor edi, edi
mov ebx, dword [0x4497fc]
nop
nop
nop
nop
cmp dword [ebx + edi*8], 0x16194952
je 0x43b047
inc edi
cmp eax, edi
jne 0x43b030
jmp 0x43b075
mov edx, esi
sar edx, 0x1f
jmp 0x43b075
mov eax, dword [ebx + edi*8 + 4]
cmp eax, ecx
je 0x43b075
lea ecx, [esp + 0x6c]
lea edi, [esp + 8]
push 0x8000
push ecx
push edi
push 0xffffffffffffffff
push 0x10
push eax
push dword [0x449800]
mov edi, edx
call fcn.00438810
mov edx, edi
add esp, 0x1c
mov eax, esi
add esp, 0x298
pop esi
pop edi
pop ebx
pop ebp
ret 0x10