Function at 0x43d0eb
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push ebx
push esi
push edi
cmp dword [0x420968], 1
je 0x43d116
js 0x43d0ff
js 0x43d10c
je 0x43d103
xchg ebx, eax
xchg ebx, eax
jbe 0x43d107
jp 0x43d109
jns 0x43d10c
mov ebx, 0x420968a1
add byte [ecx + 0x30ebfc45], cl
mov eax, dword [0x420968]
mov dword [ebp - 4], eax
jmp 0x43d146
jp 0x43d118
or edx, edx
dec esi
inc esi
jge 0x43d11e
jae 0x43d13f
pushf
lea eax, [eax + 0x77ff]
lea eax, [eax - 0x77ff]
lea ecx, [ecx]
xor edi, esi
xor edi, esi
test edx, esi
popf
jp 0x43d13a
jno 0x43d13c
jb 0x43d13f
sub eax, 0x2e9c033
add al, byte [eax]
add byte [ebx - 0x3f74ff39], al
xor eax, eax
jmp 0x43d348
add edi, 0
mov eax, eax
push eax
pop eax
jno 0x43d180
pushf
lea edi, [edi + 0x7feb]
sub edi, 0x7feb
add ebx, 0x53b7
sub ebx, 0x53b7
ja 0x43d16b
inc ecx
dec ecx
popf
lea ecx, [ecx + 0x5c52]
lea ecx, [ecx - 0x5c52]
mov esi, esi
jo 0x43d180
xor eax, 0x51fc4d8b
mov ecx, dword [ebp - 4]
push ecx
call fcn.0042d94c
add esp, 4
push 0xd
push 0
lea edx, [ebp - 0x18]
push edx
call fcn.0042ee6e
add esp, 0xc
test dword [esp + 0xc], edi
cmp edx, dword [esp]
jb 0x43d1a5
cld
jns 0x43d1b7
pushf
test ecx, 0x3ba1
popf
ja 0x43d1b4
js 0x43d1b7
mov eax, 0x4de845c6
mov byte [ebp - 0x18], 0x4d
mov byte [ebp - 0x13], 0x6a
mov byte [ebp - 0xe], 0x7a
mov byte [ebp - 0x17], 0x70
mov byte [ebp - 0x12], 0x63
mov byte [ebp - 0x16], 0x62
mov byte [ebp - 0x11], 0x73
mov byte [ebp - 0x15], 0x65
mov byte [ebp - 0x10], 0x62
mov byte [ebp - 0x14], 0x4d
mov byte [ebp - 0xf], 0x73
mov byte [ebp - 0xd], 0x58
mov byte [ebp - 0xc], 0
sub edx, 0
test dword [esp], eax
jo 0x43d206
pushf
xor esp, 0
shr eax, 0
popf
mov edx, edx
jns 0x43d201
mov esp, esp
jno 0x43d206
xor eax, 0x2ce8458a
add dword [eax + 0x4d8ae845], ecx
in eax, dx
mov al, byte [ebp - 0x18]
sub al, 1
mov byte [ebp - 0x18], al
mov cl, byte [ebp - 0x13]
sub cl, 1
mov byte [ebp - 0x13], cl
mov dl, byte [ebp - 0x17]
sub dl, 1
mov byte [ebp - 0x17], dl
mov al, byte [ebp - 0x12]
sub al, 1
mov byte [ebp - 0x12], al
mov cl, byte [ebp - 0x16]
sub cl, 1
mov byte [ebp - 0x16], cl
mov dl, byte [ebp - 0x11]
sub dl, 1
mov byte [ebp - 0x11], dl
mov al, byte [ebp - 0x15]
sub al, 1
mov byte [ebp - 0x15], al
mov cl, byte [ebp - 0x10]
sub cl, 1
mov byte [ebp - 0x10], cl
mov dl, byte [ebp - 0x14]
sub dl, 1
mov byte [ebp - 0x14], dl
mov al, byte [ebp - 0xf]
sub al, 1
mov byte [ebp - 0xf], al
mov cl, byte [ebp - 0xd]
sub cl, 1
mov byte [ebp - 0xd], cl
mov dl, byte [ebp - 0xe]
sub dl, 1
mov byte [ebp - 0xe], dl
xor esp, 0
lea eax, [eax]
jb 0x43d283
pushf
jbe 0x43d279
lea esp, [esp]
popf
xchg esp, esp
jae 0x43d283
xor eax, 0x9703d83
inc edx
add byte [eax], al
cmp dword [0x420970], 0
je 0x43d2c3
push edx
pop edx
jp 0x43d290
rol ebx, 0x14
ror ebx, 0x14
jp 0x43d298
jp 0x43d2b0
pushf
push esi
add esi, 0x1a0f
ror esi, 0x1f
pop esi
jb 0x43d2a9
popf
jne 0x43d2ad
jnp 0x43d2b0
mov edi, 0x50e8458d
lea eax, [ebp - 0x18]
push eax
mov ecx, dword [0x420970]
push ecx
call fcn.0043505f
mov dword [ebp - 8], eax
xchg edi, eax
xchg edi, eax
dec ebx
inc ebx
je 0x43d2d2
jbe 0x43d2cb
ja 0x43d2cd
jne 0x43d2d2
call 0xdaecc3b
push 0xd
push 0
lea edx, [ebp - 0x18]
push edx
call fcn.0042ee6e
add esp, 0xc
je 0x43d2e4
jbe 0x43d302
pushf
xor ebx, 0x77e7
xor ebx, 0x77e7
cmp edx, dword [esp]
popf
mov edi, edi
xchg edi, edi
jno 0x43d2ff
ja 0x43d302
add eax, 0xf87d83
cmp dword [ebp - 8], 0
je 0x43d323
mov ebx, ebx
inc edi
dec edi
js 0x43d317
mov esp, esp
jns 0x43d312
jl 0x43d314
jns 0x43d317
lcall 0x2ce8, 0x50f8458b
push es
invalid
mov eax, dword [ebp - 8]
push eax
call fcn.0042d94c
add esp, 4
cld
js 0x43d341
pushf
sub esp, 0
xchg esi, esi
rol esp, 0
popf
lea edi, [edi + 0x4005]
lea edi, [edi - 0x4005]
jns 0x43d341
jmp 0x514c20d0
mov ecx, dword [ebp + 8]
push ecx
call dword [ebp - 4]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4