Function at 0x433a8b
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x5a70f1
mov eax, dword fs:[0]
push eax
sub esp, 0x168
mov eax, dword [0x5f4748]
xor eax, esp
mov dword [esp + 0x160], eax
push ebx
push esi
push edi
mov eax, dword [0x5f4748]
xor eax, esp
push eax
lea eax, [esp + 0x178]
mov dword fs:[0], eax
mov edi, ecx
lea eax, [esp + 0x14]
push eax
call fcn.00433fa8
xor ebx, ebx
xor ecx, ecx
inc ebx
cmp byte [edi + 0x6e], cl
je 0x433b14
cmp dword [edi + 0x64], ecx
je 0x433b14
mov ecx, edi
call fcn.0044a0c6
push 0
lea esi, [edi + 0x54]
push esi
mov ecx, dword [eax]
call fcn.0043d9ce
push 0x5cb9dc
call fcn.0045161e
pop ecx
push eax
push 0x5cb9dc
mov ecx, esi
call fcn.004515a5
xor ecx, ecx
mov eax, dword [esp + 0x14]
dec eax
je 0x433f60
dec eax
dec eax
je 0x433f56
dec eax
dec eax
je 0x433f48
dec eax
je 0x433f3a
dec eax
je 0x433ef5
dec eax
je 0x433ed4
dec eax
je 0x433ebb
push ecx
sub esp, 0xc
mov dword [esp + 0x34], 0x67736945
mov ecx, esp
mov dword [esp + 0x38], 0x354d6a4f
lea eax, [esp + 0x154]
mov dword [esp + 0x3c], 0x32516962
lea edx, [esp + 0x34]
mov dword [esp + 0x40], 0x77304350
push ecx
push eax
push edx
mov dword [esp + 0x50], 0x6b453365
mov dword [esp + 0x54], 0x7867534a
mov dword [esp + 0x58], 0x7174584d
mov dword [esp + 0x5c], 0x69385349
mov dword [esp + 0x60], 0x2f38694e
mov dword [esp + 0x64], 0x6e6b4461
mov dword [esp + 0x68], 0x384d5459
mov dword [esp + 0x6c], 0x344d4450
mov dword [esp + 0x70], 0x38516962
mov dword [esp + 0x74], 0x68636950
mov dword [esp + 0x78], 0x3251544e
mov dword [esp + 0x7c], 0x31786961
mov dword [esp + 0x80], 0x39524344
mov dword [esp + 0x84], 0x6238524c
mov dword [esp + 0x88], 0x3751794a
mov dword [esp + 0x8c], 0x684a5165
mov dword [esp + 0x90], 0x664d4341
mov dword [esp + 0x94], 0x4e347a59
mov dword [esp + 0x98], 0x53635349
mov dword [esp + 0x9c], 0x33466e64
mov dword [esp + 0xa0], 0x6934444e
mov dword [esp + 0xa4], 0x4e63774a
mov dword [esp + 0xa8], 0x37316748
mov dword [esp + 0xac], 0x4a346a4e
mov dword [esp + 0xb0], 0x6930685a
mov dword [esp + 0xb4], 0x42775466
mov dword [esp + 0xb8], 0x4a67774f
mov dword [esp + 0xbc], 0x78596a46
mov dword [esp + 0xc0], 0x68675243
mov dword [esp + 0xc4], 0x36565465
mov dword [esp + 0xc8], 0x49384247
mov dword [esp + 0xcc], 0x3831674d
mov dword [esp + 0xd0], 0x6b593241
mov dword [esp + 0xd4], 0x4e594342
mov dword [esp + 0xd8], 0x64457743
mov dword [esp + 0xdc], 0x68644345
mov dword [esp + 0xe0], 0x6e67434b
mov dword [esp + 0xe4], 0x67776a50
mov dword [esp + 0xe8], 0x32744346
mov dword [esp + 0xec], 0x45497a47
mov dword [esp + 0xf0], 0x6f41324e
mov dword [esp + 0xf4], 0x41595144
mov dword [esp + 0xf8], 0x6749525a
mov dword [esp + 0xfc], 0x2b517a48
mov dword [esp + 0x100], 0x6d6f7759
mov dword [esp + 0x104], 0x54776a4b
mov dword [esp + 0x108], 0x4d634341
mov dword [esp + 0x10c], 0x47414349
mov dword [esp + 0x110], 0x30566949
mov dword [esp + 0x114], 0x76635342
mov dword [esp + 0x118], 0x72646d44
mov dword [esp + 0x11c], 0x65775244
mov dword [esp + 0x120], 0x73594448
mov dword [esp + 0x124], 0x6c45434e
mov dword [esp + 0x128], 0x2f684444
mov dword [esp + 0x12c], 0x684e7a44
mov dword [esp + 0x130], 0x63385265
mov dword [esp + 0x134], 0x50736843
mov dword [esp + 0x138], 0x73734341
mov dword [esp + 0x13c], 0x784d514b
mov dword [esp + 0x140], 0x31496763
mov dword [esp + 0x144], 0x4238514e
mov dword [esp + 0x148], 0x426b7848
mov dword [esp + 0x14c], 0x39347743
mov dword [esp + 0x150], 0x656b684b
mov dword [esp + 0x154], 0x47594744
mov dword [esp + 0x158], 0x416f3247
mov dword [esp + 0x15c], 0x6d434141
call fcn.00450208
lea ecx, [esp + 0x15c]
call fcn.00451402
add esp, 0xc
mov ecx, eax
mov dword [esp + 0x184], 4
call fcn.00451547
push eax
lea ecx, [esp + 0x15c]
call fcn.0045165a
push 0
lea eax, [esp + 0x18]
mov byte [esp + 0x184], 5
push eax
lea eax, [esp + 0x160]
mov ecx, edi
push eax
call fcn.00437441
push 0
push 1
lea ecx, [esp + 0x160]
mov bl, al
call fcn.00451c1f
lea ecx, [esp + 0x14c]
call fcn.004513e1
jmp 0x433f82
and dword [esp + 0x1c], 0xfffffe00
mov dword [esp + 0x20], ecx
mov dword [esp + 0x180], 3
jmp 0x433f14
mov eax, dword [esp + 0x1c]
and eax, 0xffffff05
mov dword [esp + 0x20], ecx
or eax, 5
mov byte [esp + 0x14], cl
mov dword [esp + 0x1c], eax
mov dword [esp + 0x180], ebx
jmp 0x433f14
mov eax, dword [esp + 0x1c]
and eax, 0xffffff05
mov dword [esp + 0x20], ecx
or eax, 5
mov byte [esp + 0x14], bl
mov dword [esp + 0x1c], eax
mov dword [esp + 0x180], ecx
mov ecx, edi
call fcn.0044a0c6
lea ecx, [esp + 0x14]
push ecx
mov ecx, dword [eax]
call fcn.00439701
or dword [esp + 0x180], 0xffffffff
lea ecx, [esp + 0x14]
call fcn.00439697
jmp 0x433f6a
lea eax, [esp + 0x14]
mov ecx, edi
push eax
call fcn.004357be
jmp 0x433f68
lea eax, [esp + 0x14]
mov ecx, edi
push eax
call fcn.00435e2c
jmp 0x433f68
push ecx
mov ecx, edi
call fcn.004354c8
jmp 0x433f68
push ecx
mov ecx, edi
call fcn.004349a9
mov bl, al
cmp byte [edi + 0x6e], 0
je 0x433f82
mov eax, dword [edi + 0x48]
mov ecx, edi
mov dword [edi + 0x4c], eax
call fcn.0044a0c6
mov eax, dword [eax]
mov dword [edi + 0x50], eax
mov al, bl
mov ecx, dword [esp + 0x178]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x160]
xor ecx, esp
call fcn.0054d1e7
mov esp, ebp
pop ebp
ret