Function at 0x43af80
Capabilities:
Check if file exists
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x822170
mov eax, dword fs:[0]
push eax
sub esp, 0x54
mov eax, dword [0x93bf44]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor eax, eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
mov dword [ebp - 4], eax
movups xmm0, xmmword [str.PIKPGv._CPIKPGi_31F]
movups xmmword [ebp - 0x40], xmm0
movq xmm0, qword [0x8ff618]
movq qword [ebp - 0x30], xmm0
cmp word [0x8ff61e], ax
je 0x43b10d
xor esi, esi
cmp dword [0x1816094], 2
jl 0x43b0e7
movaps xmm2, xmmword [0x9036b0]
mov eax, 4
movaps xmm4, xmmword [0x903750]
movaps xmm1, xmm2
punpckldq xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
mov esi, 8
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
movd xmm5, eax
mov eax, 0x1f
psrad xmm1, xmm5
movaps xmm0, xmm1
movd xmm6, eax
mov eax, str.PIKPGv._CPIKPGi_31F
psrld xmm0, xmm6
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x9036e0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movaps xmm2, xmmword [0x9036c0]
paddd xmm2, xmmword [0x9036b0]
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
paddw xmm1, xmmword [0x903710]
movq xmm0, qword [eax]
pxor xmm1, xmm0
movaps xmm0, xmm2
movq qword [ebp - 0x40], xmm1
movaps xmm1, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm5
movaps xmm0, xmm1
psrld xmm0, xmm6
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x9036e0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
movq xmm0, qword [ebp - 0x38]
paddw xmm1, xmmword [0x903710]
pxor xmm1, xmm0
movq qword [ebp - 0x38], xmm1
mov eax, 0x4d4873ed
mov ecx, esi
imul esi
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0x35
sub ecx, eax
add ecx, 0x38
xor word [ebp + esi*2 - 0x40], cx
inc esi
cmp esi, 0xc
jl 0x43b0e7
cmp dword [0x181cd24], 8
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x40]
mov edx, 0x181cd10
cmovae edx, dword [0x181cd10]
mov ecx, reloc.gdiplus.dll_Ordinal_1
push eax
call fcn.0041bdf0
mov eax, dword [0x8ff708]
add esp, 8
cmp word [str.9zMThS_Jv.B], 0
mov dword [ebp - 0x44], eax
je 0x43b176
xor esi, esi
nop dword [eax]
mov eax, 0x4d4873ed
mov ecx, esi
imul esi
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0x35
sub ecx, eax
add ecx, 0x38
xor word [ebp + esi*2 - 0x44], cx
inc esi
cmp esi, 2
jl 0x43b150
sub esp, 0x18
lea ecx, [ebp - 0x44]
mov edx, esp
mov dword [ebp - 0x48], esp
xor eax, eax
lea esi, [ecx + 2]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 7
mov word [edx], ax
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x43b197
sub ecx, esi
lea eax, [ebp - 0x44]
sar ecx, 1
push ecx
push eax
mov ecx, edx
call fcn.0040ea60
sub esp, 0x18
mov byte [ebp - 4], 1
mov ecx, esp
push 0x1808b30
call fcn.00404770
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0
call fcn.0041e230
add esp, 0x30
mov byte [ebp - 4], 2
cmp word [str.9zMThS_Jv.B], 0
mov eax, dword [0x8ff708]
mov dword [ebp - 0x44], eax
je 0x43b216
xor esi, esi
nop dword [eax]
mov eax, 0x4d4873ed
mov ecx, esi
imul esi
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0x35
sub ecx, eax
add ecx, 0x38
xor word [ebp + esi*2 - 0x44], cx
inc esi
cmp esi, 2
jl 0x43b1f0
sub esp, 0x18
lea ecx, [ebp - 0x44]
mov edx, esp
mov dword [ebp - 0x48], esp
xor eax, eax
lea esi, [ecx + 2]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 7
mov word [edx], ax
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x43b237
sub ecx, esi
lea eax, [ebp - 0x44]
sar ecx, 1
push ecx
push eax
mov ecx, edx
call fcn.0040ea60
sub esp, 0x18
mov byte [ebp - 4], 3
mov ecx, esp
push 0x181cc80
call fcn.00404770
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 2
call fcn.0041e230
mov ecx, dword [ebp - 0x5c]
mov eax, 0x2aaaaaab
sub ecx, dword [ebp - 0x60]
add esp, 0x30
imul ecx
mov ecx, dword [ebp - 0x50]
mov eax, 0x2aaaaaab
sub ecx, dword [ebp - 0x54]
sar edx, 2
mov esi, edx
shr esi, 0x1f
add esi, edx
imul ecx
mov dword [ebp - 0x44], esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp esi, eax
jne 0x43b360
lea eax, [esi - 1]
xor edi, edi
test eax, eax
je 0x43b305
xor esi, esi
nop dword [eax + eax]
mov eax, dword [ebp - 0x60]
add eax, esi
cmp dword [eax + 0x14], 8
jb 0x43b2cd
mov eax, dword [eax]
push eax
call fcn.006d7692
mov ecx, dword [ebp - 0x54]
add esp, 4
add ecx, esi
mov dword [ebp - 0x48], eax
cmp dword [ecx + 0x14], 8
jb 0x43b2e6
mov ecx, dword [ecx]
push ecx
call fcn.006d7692
add esp, 4
cmp dword [ebp - 0x48], eax
jg 0x43b359
jl 0x43b360
mov eax, dword [ebp - 0x44]
inc edi
dec eax
add esi, 0x18
cmp edi, eax
jb 0x43b2c0
mov esi, dword [ebp - 0x44]
mov eax, dword [ebp - 0x60]
lea esi, [esi + esi*2]
shl esi, 3
add eax, 0xffffffe8
add eax, esi
cmp dword [eax + 0x14], 8
jb 0x43b31b
mov eax, dword [eax]
push eax
call fcn.006d7692
mov ecx, dword [ebp - 0x54]
add esp, 4
add ecx, 0xffffffe8
mov edi, eax
add ecx, esi
cmp dword [ecx + 0x14], 8
jb 0x43b336
mov ecx, dword [ecx]
push ecx
call fcn.006d7692
add esp, 4
cmp edi, eax
jl 0x43b360
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x43b360
mov esi, 1
jmp 0x43b362
xor esi, esi
lea ecx, [ebp - 0x54]
call fcn.0040ade0
lea ecx, [ebp - 0x60]
call fcn.0040ade0
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x43b3a8
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43b39e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43b3c5
push edx
push ecx
call fcn.005c24d6
add esp, 8
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005c22ca
mov esp, ebp
pop ebp
ret
call fcn.006d1429
int3