Function at 0x433056
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push 0x2c4
mov eax, 0x4e0457
call fcn.004c1130
call fcn.00432e25
test eax, eax
je 0x433075
xor eax, eax
jmp 0x43329c
xor eax, eax
lea edi, [ebp - 0x90]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor edi, edi
mov dword [ebp - 0x90], edi
mov dword [ebp - 0x8c], edi
mov dword [ebp - 0x88], edi
lea ecx, [ebp - 0x90]
mov dword [ebp - 4], edi
call fcn.00431d9e
mov dword [ebp - 0x6e], 0x42424256
mov ecx, edi
mov dword [ebp - 0x72], 0x4256425e
mov dword [ebp - 0x76], 0x42144210
mov dword [ebp - 0x7a], 0x420f4256
mov dword [ebp - 0x7e], 0x425d4254
mov dword [ebp - 0x82], 0x4250425d
mov word [ebp - 0x84], 0x4277
mov al, byte [ebp + ecx - 0x84]
sub al, 3
xor al, 0x3f
mov byte [ebp + ecx - 0x84], al
inc ecx
cmp ecx, 0x1a
jl 0x4330da
mov dword [ebp - 0x3b], 0x424e535a
mov ecx, edi
mov dword [ebp - 0x3f], 0x4f526154
mov dword [ebp - 0x43], 0x6f100f52
mov dword [ebp - 0x47], 0x565d5a56
mov dword [ebp - 0x4b], 0x53536e5d
mov dword [ebp - 0x4f], 0x4e615d50
mov byte [ebp - 0x50], 0x7f
mov al, byte [ebp + ecx - 0x50]
sub al, 3
xor al, 0x3f
mov byte [ebp + ecx - 0x50], al
inc ecx
cmp ecx, 0x19
jl 0x433122
mov dword [ebp - 0x28], 0x426b4e4f
mov ecx, edi
mov dword [ebp - 0x2c], 0x50597c10
mov dword [ebp - 0x30], 0xf4f4f5d
mov dword [ebp - 0x34], 0x5f535072
mov al, byte [ebp + ecx - 0x34]
sub al, 3
xor al, 0x3f
mov byte [ebp + ecx - 0x34], al
inc ecx
cmp ecx, 0x10
jl 0x433152
mov dword [ebp - 0x19], 0x426b4e4a
mov ecx, edi
mov dword [ebp - 0x1d], 0x5d74100f
mov dword [ebp - 0x21], 0x4f4f5d5f
mov word [ebp - 0x23], 0x5350
mov byte [ebp - 0x24], 0x72
mov al, byte [ebp + ecx - 0x24]
sub al, 3
xor al, 0x3f
mov byte [ebp + ecx - 0x24], al
inc ecx
cmp ecx, 0xf
jl 0x433185
lea eax, [ebp - 0x84]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov ebx, eax
test ebx, ebx
je 0x43328b
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
lea eax, [ebp - 0x50]
push eax
push ebx
call esi
mov dword [ebp - 0x2c8], eax
lea eax, [ebp - 0x34]
push eax
push ebx
call esi
mov dword [ebp - 0x2d0], eax
lea eax, [ebp - 0x24]
push eax
push ebx
call esi
mov ebx, dword [ebp - 0x2c8]
mov dword [ebp - 0x2cc], eax
test ebx, ebx
je 0x43328b
mov esi, dword [ebp - 0x2d0]
test esi, esi
je 0x43328b
test eax, eax
je 0x43328b
push 0x228
lea eax, [ebp - 0x2c0]
mov dword [ebp - 0x2c4], 0x22c
push edi
push eax
call fcn.004be330
add esp, 0xc
push edi
push 2
call ebx
mov ebx, eax
cmp ebx, 0xffffffff
je 0x43328b
lea eax, [ebp - 0x2c4]
push eax
push ebx
call esi
jmp 0x43327d
mov eax, dword [ebp - 0x90]
mov esi, eax
cmp eax, dword [ebp - 0x8c]
je 0x43326f
cmp dword [esi + 0x14], 8
jb 0x433250
mov eax, dword [esi]
jmp 0x433252
mov eax, esi
push eax
lea eax, [ebp - 0x2a0]
push eax
call dword [sym.imp.SHLWAPI.dll_StrStrIW]
test eax, eax
jne 0x4332a2
add esi, 0x18
cmp esi, dword [ebp - 0x8c]
jne 0x433246
lea eax, [ebp - 0x2c4]
push eax
push ebx
call dword [ebp - 0x2cc]
test eax, eax
jne 0x433236
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor edi, edi
inc edi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x90]
call fcn.0041cec7
mov eax, edi
call fcn.004c10df
ret
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x43328b