Function at 0x4437c0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x27c
mov ebx, dword [0x45a19c]
mov ebp, dword [0x45a198]
mov eax, ebp
or eax, ebx
jne 0x443856
mov dword [esp + 0x4c], 0x334e3146
mov dword [esp + 0x50], 0x3f4a3d50
mov dword [esp + 0x54], 0x3b0c394c
mov dword [esp + 0x58], 0x47324528
mov dword [esp + 0x5c], 0x43424134
mov eax, 0xcb
mov ecx, 0x34
nop
nop
movzx edx, byte [esp + ecx + 0x18]
mov esi, edx
not esi
mov edi, ecx
and edi, esi
or esi, eax
add edx, esi
inc edx
or edx, edi
add dl, 0xfc
mov byte [esp + ecx + 0x18], dl
dec eax
inc ecx
cmp ecx, 0x48
jne 0x443810
lea eax, [esp + 0x4c]
push eax
call fcn.00443480
add esp, 4
mov ebp, eax
mov dword [0x45a19c], edx
mov dword [0x45a198], eax
or eax, edx
je 0x443930
mov ebx, edx
lea eax, [esp + 0x14c]
push 0x40
push eax
push ebx
push ebp
call fcn.004432d0
add esp, 0x10
test eax, eax
js 0x443930
mov eax, dword [esp + 0x188]
mov ecx, eax
sar ecx, 0x1f
add eax, ebp
adc ecx, ebx
add eax, 0x18
adc ecx, 0
lea edx, [esp + 0x18c]
push 0xf0
push edx
push ecx
push eax
call fcn.004432d0
add esp, 0x10
xor edi, edi
test eax, eax
js 0x443932
cmp dword [esp + 0x200], 0
je 0x443932
mov eax, dword [esp + 0x1fc]
mov esi, 0
test eax, eax
je 0x443934
add eax, ebp
mov ecx, ebx
adc ecx, 0
lea edx, [esp + 0x24]
push 0x28
push edx
push ecx
push eax
call fcn.004432d0
add esp, 0x10
test eax, eax
js 0x443930
mov ecx, dword [esp + 0x38]
lea esi, [ecx*4]
mov eax, 0xffffffff
cmp ecx, 0x40000000
jae 0x4438f9
mov eax, esi
push eax
call fcn.0040cb10
add esp, 4
mov edx, dword [esp + 0x40]
add edx, ebp
mov ecx, ebx
adc ecx, 0
push esi
mov dword [esp + 0xc], eax
push eax
push ecx
push edx
call fcn.004432d0
add esp, 0x10
test eax, eax
js 0x443943
mov eax, dword [esp + 0x38]
test eax, eax
jns 0x44394c
mov eax, 0xffffffff
jmp 0x44394e
xor edi, edi
xor esi, esi
mov eax, edi
mov edx, esi
add esp, 0x27c
pop esi
pop edi
pop ebx
pop ebp
ret
xor edi, edi
xor esi, esi
jmp 0x443b56
add eax, eax
push eax
call fcn.0040cb10
add esp, 4
mov esi, dword [esp + 0x3c]
mov ecx, esi
and ecx, 2
mov edx, esi
or esi, 2
imul esi, ecx
xor ecx, 2
and edx, 0xfffffffd
imul edx, ecx
add esi, edx
mov ecx, dword [esp + 0x48]
add ecx, ebp
mov edx, ebx
adc edx, 0
push esi
mov dword [esp + 8], eax
push eax
push edx
push ecx
call fcn.004432d0
add esp, 0x10
test eax, eax
js 0x443b46
mov ecx, dword [esp + 0x3c]
lea esi, [ecx*4]
mov eax, 0xffffffff
cmp ecx, 0x40000000
jae 0x4439b0
mov eax, esi
push eax
call fcn.0040cb10
add esp, 4
mov edi, eax
mov eax, dword [esp + 0x44]
add eax, ebp
mov ecx, ebx
adc ecx, 0
push esi
push edi
push ecx
push eax
call fcn.004432d0
add esp, 0x10
test eax, eax
mov dword [esp], edi
js 0x443b35
mov esi, dword [esp + 0x38]
mov eax, dword [esp + 0x3c]
cmp esi, eax
jb 0x4439eb
mov esi, eax
test esi, esi
je 0x443b35
xor eax, eax
mov dword [esp + 0x20], ebx
mov dword [esp + 0x1c], ebp
mov dword [esp + 0x18], esi
jmp 0x443a2e
mov eax, 0xfb520141
cmp eax, dword [esp + 0x290]
mov ebx, dword [esp + 0x20]
mov ebp, dword [esp + 0x1c]
mov esi, dword [esp + 0x18]
je 0x443b67
mov eax, dword [esp + 0xc]
inc eax
cmp eax, esi
je 0x443b35
mov dword [esp + 0xc], eax
mov eax, dword [edi + eax*4]
add eax, ebp
mov ecx, ebx
adc ecx, 0
push 0x100
lea edx, [esp + 0x50]
push edx
push ecx
push eax
call fcn.004432d0
add esp, 0x10
test eax, eax
jns 0x443a5b
cmp eax, 0x8000000d
jne 0x443a21
mov ecx, 0xffffffff
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ebx, eax
cmp byte [esp + ecx + 0x4d], 0
lea ecx, [ecx + 1]
lea eax, [eax + 1]
jne 0x443a70
mov dword [esp + 0x10], 0x929e9c69
mov word [esp + 0x14], 0
mov esi, 0xda
mov edx, 0x25
nop
nop
nop
nop
nop
nop
nop
nop
movzx ebp, byte [esp + edx - 0x15]
mov eax, esi
xor eax, edx
and eax, ebp
xor eax, edx
add al, 0x47
mov byte [esp + edx - 0x15], al
dec esi
inc edx
cmp esi, 0xd4
jne 0x443aa0
test ecx, ecx
je 0x443a03
mov edx, dword [esp + 0x10]
mov ebp, 0xfb520141
lea esi, [esp + 0x4c]
cmp ecx, 4
jb 0x443b0e
mov eax, ebx
and eax, 0xfffffffc
nop
nop
nop
nop
movsx edi, byte [esi]
xor edi, ebp
imul edi, edx
movsx ebp, byte [esi + 1]
xor ebp, edi
imul ebp, edx
movsx edi, byte [esi + 2]
xor edi, ebp
imul edi, edx
movsx ebp, byte [esi + 3]
add esi, 4
xor ebp, edi
imul ebp, edx
add eax, 0xfffffffc
jne 0x443ae0
mov edi, dword [esp]
mov eax, ebp
test cl, 3
je 0x443a08
and ebx, 3
xor ecx, ecx
nop
nop
movsx eax, byte [esi + ecx]
xor eax, ebp
imul eax, edx
inc ecx
mov ebp, eax
cmp ebx, ecx
jne 0x443b20
jmp 0x443a08
xor edi, edi
xor esi, esi
push dword [esp]
call fcn.0040cb20
add esp, 4
jmp 0x443b4a
xor edi, edi
xor esi, esi
push dword [esp + 4]
call fcn.0040cb20
add esp, 4
push dword [esp + 8]
call fcn.0040cb20
add esp, 4
jmp 0x443934
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xc]
movzx eax, word [eax + ecx*2]
mov ecx, dword [esp + 8]
add ebp, dword [ecx + eax*4]
adc ebx, 0
mov edi, ebp
mov esi, ebx
jmp 0x443b39