Function at 0x43f8b0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x78
mov dword [esp + 0x20], ecx
mov eax, dword [ebp + 8]
mov dword [eax + 8], 0
mov dword [eax + 4], 0
mov dword [eax], 0
mov dword [esp + 0x3c], 0
mov dword [esp + 0x34], 0x100000
mov dword [esp + 0x18], 0
mov dword [esp + 4], 0xdcdddedf
mov dword [esp + 8], 0
xor eax, eax
mov ecx, 0x31588af
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx esi, byte [esp + eax + 4]
mov edx, ecx
and edx, 0x314880d
mov edi, eax
and edi, 2
mov ebx, esi
and ebx, 0x5d
or ebx, 0x90454822
and esi, 0xffffffa2
add edx, edi
add edx, 0x28480100
xor edx, esi
xor edx, ebx
mov edi, edx
xor edi, 0xb767e2ef
mov esi, edx
and esi, 0x100090
xor esi, 0xf7aab7f
and esi, edi
mov ebx, esi
and ebx, 0xfd
and edi, 2
or esi, 2
imul esi, edi
xor edi, 2
imul edi, ebx
xor edx, 0x10
add edx, esi
add edx, edi
inc dl
mov byte [esp + eax + 4], dl
inc eax
dec ecx
cmp eax, 8
jne 0x43f910
mov eax, dword [esp + 4]
mov ecx, dword [0x45064c]
test ecx, ecx
je 0x43f9de
xor edx, edx
mov esi, dword [0x450650]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp dword [esi + edx*8], 0x3e416e49
je 0x43f9b0
inc edx
cmp ecx, edx
jne 0x43f9a0
jmp 0x43f9de
mov ecx, dword [esi + edx*8 + 4]
cmp ecx, eax
je 0x43f9de
lea eax, [esp + 0x34]
lea edx, [esp + 0x18]
push 4
push 0x3000
push eax
push 0
push edx
push 0xffffffffffffffff
push 6
push dword [0x450654]
push ecx
call fcn.00441b40
add esp, 0x24
test eax, eax
mov esi, dword [esp + 0x20]
js 0x44018a
mov eax, dword [esi + 4]
test eax, eax
mov edi, dword [ebp + 0x10]
jne 0x43fa67
push 0xbbf966b4
push dword [0x450640]
call fcn.00444150
add esp, 8
test eax, eax
je 0x43fa35
mov ecx, dword [esi]
test ecx, ecx
je 0x43fa64
mov dword [esp + 4], 0
lea edx, [esp + 4]
push edx
push ecx
call eax
test eax, eax
je 0x43fa40
cmp dword [esp + 4], 0
je 0x43fa40
mov dword [esi + 4], 3
jmp 0x43fa64
mov dword [esi + 4], 1
xor ebx, ebx
jmp 0x43fa80
lea eax, [esp + 0x48]
push eax
call fcn.00444990
add esp, 4
test al, al
je 0x43fa64
mov eax, dword [esp + 0x48]
mov ecx, 2
cmp eax, 3
je 0x43fa61
mov ecx, eax
mov dword [esi + 4], ecx
mov eax, dword [esi + 4]
mov ebx, 0x7fff
cmp eax, 2
je 0x43fa76
mov ebx, 0
mov dword [esp + 0x28], 0xfffeffff
je 0x43fa88
mov dword [esp + 0x28], SysReAllocString
mov dword [esp + 0x4c], 0
mov dword [esp + 0x48], 0
mov dword [esp + 0x44], 0
mov dword [esp + 0x40], 0
mov dword [esp + 0x5c], 0
mov dword [esp + 0x58], 0
mov dword [esp + 4], 0xd7d7c9c8
mov dword [esp + 8], 0
xor eax, eax
nop
nop
nop
nop
nop
nop
mov ecx, eax
and ecx, 4
mov edx, eax
and edx, 2
mov esi, edx
xor esi, 2
imul esi, ecx
or ecx, 2
imul ecx, edx
mov edx, eax
xor edx, 0x4e
add edx, esi
add edx, ecx
xor dl, byte [esp + eax + 4]
add dl, 0x7a
mov byte [esp + eax + 4], dl
inc eax
cmp eax, 8
jne 0x43fad0
mov eax, dword [esp + 4]
mov ecx, eax
sar ecx, 0x1f
mov dword [esp + 0x30], eax
cmp eax, dword [esp + 0x28]
mov dword [esp + 0x2c], ecx
mov eax, ecx
sbb eax, ebx
mov esi, dword [esp + 0x20]
jae 0x44009a
mov dword [esp + 0x1c], 0
mov dword [esp + 0x14], 0
mov dword [esp], 0
mov dword [esp + 0x50], ebx
jmp 0x43fb86
mov eax, dword [ebp + 8]
mov ecx, dword [esp]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x14]
mov dword [eax], ecx
mov ecx, dword [esp + 0x1c]
mov dword [eax + 8], ecx
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 0x40]
add eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x44]
adc ecx, dword [esp + 0x4c]
mov dword [esp + 0x30], eax
cmp eax, dword [esp + 0x28]
mov dword [esp + 0x2c], ecx
mov eax, ecx
sbb eax, ebx
jae 0x44009a
mov ecx, esi
lea eax, [esp + 0x58]
push eax
lea eax, [esp + 0x60]
push eax
lea eax, [esp + 0x48]
push eax
lea eax, [esp + 0x54]
push eax
push dword [esp + 0x3c]
push dword [esp + 0x44]
call fcn.0043f3c0
cmp eax, 0xbfffffff
ja 0x44009a
test eax, eax
js 0x43fb60
cmp dword [esp + 0x5c], 0x1000
jne 0x43fb60
test byte [esp + 0x58], 0x66
je 0x43fb60
mov edx, dword [esp + 0x40]
cmp dword [esp + 0x34], edx
mov ecx, dword [esp + 0x44]
mov eax, 0
mov dword [esp + 0x38], ecx
sbb eax, ecx
jae 0x43fdee
mov dword [esp + 0x10], edx
mov dword [esp + 4], 0xdcdddedf
mov dword [esp + 8], 0
xor eax, eax
mov ecx, 0x31588af
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx esi, byte [esp + eax + 4]
mov edx, ecx
and edx, 0x314880d
mov edi, eax
and edi, 2
mov ebx, esi
and ebx, 0x5d
or ebx, 0x90454822
and esi, 0xffffffa2
add edx, edi
add edx, 0x28480100
xor edx, esi
xor edx, ebx
mov ebx, edx
xor ebx, 0xb767e2ef
mov esi, edx
and esi, 0x100090
xor esi, 0xf7aab7f
and esi, ebx
mov edi, esi
and edi, 0xfd
and ebx, 2
or esi, 2
imul esi, ebx
xor ebx, 2
imul ebx, edi
xor edx, 0x10
add edx, esi
add edx, ebx
inc dl
mov byte [esp + eax + 4], dl
inc eax
dec ecx
cmp eax, 8
jne 0x43fc10
mov eax, dword [0x45064c]
test eax, eax
je 0x43fcda
mov ecx, dword [esp + 4]
xor edx, edx
mov esi, dword [0x450650]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp dword [esi + edx*8], 0x16194952
je 0x43fcb0
inc edx
cmp eax, edx
jne 0x43fca0
jmp 0x43fcda
mov eax, dword [esi + edx*8 + 4]
cmp eax, ecx
je 0x43fcda
push 0x8000
lea ecx, [esp + 0x40]
push ecx
lea ecx, [esp + 0x20]
push ecx
push 0xffffffffffffffff
push 4
push dword [0x450654]
push eax
call fcn.00441b40
add esp, 0x1c
mov dword [esp + 0x3c], 0
mov dword [esp + 0x18], 0
mov eax, dword [esp + 0x10]
mov dword [esp + 0x34], eax
mov dword [esp + 4], 0xdcdddedf
mov dword [esp + 8], 0
xor eax, eax
mov ecx, 0x31588af
nop
nop
nop
nop
nop
nop
nop
movzx esi, byte [esp + eax + 4]
mov edx, ecx
and edx, 0x314880d
mov edi, eax
and edi, 2
mov ebx, esi
and ebx, 0x5d
or ebx, 0x90454822
and esi, 0xffffffa2
add edx, edi
add edx, 0x28480100
xor edx, esi
xor edx, ebx
mov ebx, edx
xor ebx, 0xb767e2ef
mov esi, edx
and esi, 0x100090
xor esi, 0xf7aab7f
and esi, ebx
mov edi, esi
and edi, 0xfd
and ebx, 2
or esi, 2
imul esi, ebx
xor ebx, 2
imul ebx, edi
xor edx, 0x10
add edx, esi
add edx, ebx
inc dl
mov byte [esp + eax + 4], dl
inc eax
dec ecx
cmp eax, 8
jne 0x43fd10
mov eax, dword [esp + 4]
mov ecx, dword [0x45064c]
test ecx, ecx
mov edi, dword [ebp + 0x10]
mov ebx, dword [esp + 0x50]
je 0x43fdde
xor edx, edx
mov esi, dword [0x450650]
nop
nop
nop
nop
cmp dword [esi + edx*8], 0x3e416e49
je 0x43fdb0
inc edx
cmp ecx, edx
jne 0x43fda0
jmp 0x43fdde
mov ecx, dword [esi + edx*8 + 4]
cmp ecx, eax
je 0x43fdde
push 4
push 0x3000
lea eax, [esp + 0x3c]
push eax
push 0
lea eax, [esp + 0x28]
push eax
push 0xffffffffffffffff
push 6
push dword [0x450654]
push ecx
call fcn.00441b40
add esp, 0x24
test eax, eax
mov esi, dword [esp + 0x20]
mov edx, dword [esp + 0x10]
js 0x44009a
mov ecx, esi
lea eax, [esp + 0x68]
push eax
push dword [esp + 0x3c]
push edx
push dword [esp + 0x24]
push dword [esp + 0x3c]
push dword [esp + 0x44]
call fcn.0043f6e0
test eax, eax
jns 0x43fe1a
cmp eax, 0x8000000d
jne 0x43fb60
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x6c]
cmp eax, edi
sbb ecx, 0
jb 0x43fb60
push dword [ebp + 0x14]
push edi
push dword [ebp + 0xc]
push eax
push dword [esp + 0x28]
lea eax, [esp + 0x18]
push eax
call fcn.004401a0
add esp, 0x18
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp + 0x54], ecx
cmp eax, ecx
je 0x43fb42
mov dword [esp + 0x60], eax
mov edx, dword [esp + 0x14]
mov ecx, dword [esp]
jmp 0x43feb6
push dword [esp + 0x14]
call fcn.0040c8e0
add esp, 4
mov ebx, dword [esp + 0x50]
mov edi, dword [esp + 0x1c]
mov ecx, dword [esp + 0x24]
lea eax, [ecx + edi*8]
mov dword [esp + 0x1c], eax
mov edx, ecx
mov edi, dword [esp + 0x10]
add ecx, edi
mov eax, dword [esp + 0x64]
mov dword [edx + edi], esi
mov dword [edx + edi + 4], eax
add ecx, 8
mov eax, dword [esp + 0x38]
add eax, 4
cmp eax, dword [esp + 0x54]
je 0x44004c
mov dword [esp], ecx
mov dword [esp + 0x38], eax
mov eax, dword [eax]
mov esi, dword [esp + 0x18]
mov ecx, esi
xor ecx, eax
not esi
and esi, eax
add esi, esi
sub esi, ecx
mov ecx, dword [esp]
mov eax, esi
sar eax, 0x1f
add esi, dword [esp + 0x30]
adc eax, dword [esp + 0x2c]
mov edi, ecx
sub edi, edx
cmp ecx, dword [esp + 0x1c]
jne 0x43fe9b
mov dword [esp + 0x64], eax
mov dword [esp + 0x14], edx
mov dword [esp + 0x10], edi
mov ecx, edi
sar ecx, 3
lea eax, [ecx + 1]
mov edi, ecx
shr edi, 1
add edi, ecx
cmp edi, eax
ja 0x43ff09
mov edi, eax
lea eax, [edi*8]
push eax
call fcn.0040c8d0
add esp, 4
mov ecx, eax
mov edx, dword [esp + 0x14]
test edx, edx
je 0x43fe88
mov dword [esp + 0x1c], edi
cmp ecx, edx
mov eax, dword [esp]
mov dword [esp + 0x24], ecx
jbe 0x43fff2
cmp eax, ecx
jbe 0x43fff2
cmp dword [esp + 0x10], 0
je 0x43fe70
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
add eax, edx
dec eax
mov ecx, dword [esp + 0x24]
add ecx, edx
dec ecx
mov edi, edx
and edi, 7
je 0x43ff84
neg edi
xor edx, edx
nop
nop
nop
nop
nop
nop
movzx ebx, byte [eax + edx]
mov byte [ecx + edx], bl
dec edx
cmp edi, edx
jne 0x43ff70
add eax, edx
add ecx, edx
add edx, dword [esp + 0x10]
mov edi, dword [esp + 0x14]
sub edi, dword [esp]
cmp edi, 0xfffffff8
ja 0x43fe70
neg edx
xor edi, edi
nop
nop
nop
nop
nop
nop
nop
nop
movzx ebx, byte [eax + edi]
mov byte [ecx + edi], bl
movzx ebx, byte [eax + edi - 1]
mov byte [ecx + edi - 1], bl
movzx ebx, byte [eax + edi - 2]
mov byte [ecx + edi - 2], bl
movzx ebx, byte [eax + edi - 3]
mov byte [ecx + edi - 3], bl
movzx ebx, byte [eax + edi - 4]
mov byte [ecx + edi - 4], bl
movzx ebx, byte [eax + edi - 5]
mov byte [ecx + edi - 5], bl
movzx ebx, byte [eax + edi - 6]
mov byte [ecx + edi - 6], bl
movzx ebx, byte [eax + edi - 7]
mov byte [ecx + edi - 7], bl
add edi, 0xfffffff8
cmp edx, edi
jne 0x43ffa0
jmp 0x43fe70
mov ebx, dword [esp + 0x10]
mov ecx, ebx
shr ecx, 2
mov eax, edx
mov edi, dword [esp + 0x24]
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
mov ecx, ebx
not ecx
or ecx, 0xfffffffc
add ecx, ebx
mov eax, dword [esp + 0x24]
lea edi, [eax + ecx]
inc edi
lea eax, [edx + ecx]
inc eax
mov ecx, ebx
shr ecx, 1
and ecx, 1
mov edx, eax
mov dword [esp], edi
xchg esi, edx
rep movsw word es:[edi], word [esi]
xchg esi, edx
test bl, 1
je 0x43fe70
mov ecx, dword [esp + 0x10]
and ecx, 2
movzx eax, byte [eax + ecx]
mov edx, dword [esp]
mov byte [edx + ecx], al
jmp 0x43fe70
mov eax, dword [ebp + 8]
mov dword [eax + 4], ecx
mov dword [eax], edx
mov esi, dword [esp + 0x1c]
mov dword [eax + 8], esi
mov eax, dword [esp + 0x60]
test eax, eax
je 0x440087
mov dword [esp], ecx
mov dword [esp + 0x14], edx
cmp eax, dword [esp + 0x54]
mov esi, dword [esp + 0x20]
je 0x440092
push eax
call fcn.0040c8e0
add esp, 4
mov dword [esp + 4], 0
jmp 0x440092
mov dword [esp], ecx
mov dword [esp + 0x14], edx
mov esi, dword [esp + 0x20]
mov edi, dword [ebp + 0x10]
jmp 0x43fb60
mov dword [esp + 4], 0xdcdddedf
mov dword [esp + 8], 0
xor eax, eax
mov ecx, 0x31588af
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx esi, byte [esp + eax + 4]
mov edx, ecx
and edx, 0x314880d
mov edi, eax
and edi, 2
mov ebx, esi
and ebx, 0x5d
or ebx, 0x90454822
and esi, 0xffffffa2
add edx, edi
add edx, 0x28480100
xor edx, esi
xor edx, ebx
mov edi, edx
xor edi, 0xb767e2ef
mov esi, edx
and esi, 0x100090
xor esi, 0xf7aab7f
and esi, edi
mov ebx, esi
and ebx, 0xfd
and edi, 2
or esi, 2
imul esi, edi
xor edi, 2
imul edi, ebx
xor edx, 0x10
add edx, esi
add edx, edi
inc dl
mov byte [esp + eax + 4], dl
inc eax
dec ecx
cmp eax, 8
jne 0x4400c0
mov eax, dword [0x45064c]
test eax, eax
je 0x44018a
mov ecx, dword [esp + 4]
xor edx, edx
mov esi, dword [0x450650]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp dword [esi + edx*8], 0x16194952
je 0x440160
inc edx
cmp eax, edx
jne 0x440150
jmp 0x44018a
mov eax, dword [esi + edx*8 + 4]
cmp eax, ecx
je 0x44018a
lea ecx, [esp + 0x3c]
lea edx, [esp + 0x18]
push 0x8000
push ecx
push edx
push 0xffffffffffffffff
push 4
push dword [0x450654]
push eax
call fcn.00441b40
add esp, 0x1c
mov eax, dword [ebp + 8]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret 0x10