Function at 0x43e890
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x518
mov dword [esp + 0x188], 0xd4d5cacb
mov byte [esp + 0x18c], 0
mov eax, 0xb1
mov ecx, 0x4e
nop
nop
nop
nop
movzx esi, byte [esp + ecx + 0x13a]
mov edx, ecx
and edx, esi
mov edi, edx
and edi, 2
mov ebx, edx
or edx, 2
imul edx, edi
xor edi, 2
and ebx, 0x5d
imul ebx, edi
add edx, ebx
mov edi, eax
sub edi, esi
add esi, ecx
and edi, edx
not edx
and edx, esi
sub edx, edi
add dl, 0x7a
mov byte [esp + ecx + 0x13a], dl
dec eax
inc ecx
cmp eax, 0xac
jne 0x43e8c0
mov eax, dword [esp + 0x188]
mov ecx, dword [0x44c010]
test ecx, ecx
je 0x43e95a
xor edx, edx
mov esi, dword [0x44c014]
nop
nop
cmp dword [esi + edx*8], 0x89c57e52
je 0x43e930
inc edx
cmp ecx, edx
jne 0x43e920
jmp 0x43e95a
mov ecx, dword [esi + edx*8 + 4]
cmp ecx, eax
je 0x43e95a
lea eax, [esp + 0x10]
push 2
push 0
push 0
push eax
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 7
push ecx
push dword [0x44c018]
call fcn.0043d120
add esp, 0x28
test eax, eax
js 0x43ec1f
mov eax, dword [esp + 0x10]
mov dword [esp + 4], eax
mov dword [esp + 0x188], 0xd4d5cacb
mov byte [esp + 0x18c], 0
mov ecx, 0xb1
mov edx, 0x4e
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx eax, byte [esp + edx + 0x13a]
mov ebx, edx
and ebx, eax
mov edi, ebx
and edi, 2
mov esi, ebx
or ebx, 2
imul ebx, edi
xor edi, 2
and esi, 0x5d
imul esi, edi
add ebx, esi
mov esi, ecx
sub esi, eax
add eax, edx
and esi, ebx
not ebx
and ebx, eax
sub ebx, esi
add bl, 0x7a
mov byte [esp + edx + 0x13a], bl
dec ecx
inc edx
cmp ecx, 0xac
jne 0x43e990
mov esi, dword [esp + 0x188]
mov eax, dword [0x44c010]
test eax, eax
je 0x43ea0c
xor ecx, ecx
mov edx, dword [0x44c014]
nop
nop
cmp dword [edx + ecx*8], 0xc3cdc4a6
je 0x43ea00
inc ecx
cmp eax, ecx
jne 0x43e9f0
jmp 0x43ea0c
mov eax, dword [edx + ecx*8 + 4]
cmp eax, esi
jne 0x43ec2b
mov dword [esp], esi
mov eax, dword [esp + 0x190]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x194]
mov dword [esp + 8], eax
mov dword [esp + 0x68], 0xd4d5cacb
mov byte [esp + 0x6c], 0
mov ecx, 0xb1
mov eax, 0x4e
nop
nop
nop
nop
movzx ebx, byte [esp + eax + 0x1a]
mov edx, eax
and edx, ebx
mov edi, edx
and edi, 2
mov esi, edx
or edx, 2
imul edx, edi
xor edi, 2
and esi, 0x5d
imul esi, edi
add edx, esi
mov esi, ecx
sub esi, ebx
lea edi, [eax + ebx]
and esi, edx
not edx
and edx, edi
sub edx, esi
add dl, 0x7a
mov byte [esp + eax + 0x1a], dl
dec ecx
inc eax
cmp ecx, 0xac
jne 0x43ea40
mov eax, dword [0x44c010]
test eax, eax
mov esi, dword [esp]
je 0x43eacd
mov ecx, dword [esp + 0x68]
xor edx, edx
mov ebx, dword [0x44c014]
nop
nop
nop
nop
nop
nop
nop
cmp dword [ebx + edx*8], 0xb62b8d10
je 0x43eab0
inc edx
cmp eax, edx
jne 0x43eaa0
jmp 0x43eacd
mov eax, dword [ebx + edx*8 + 4]
cmp eax, ecx
je 0x43eacd
push dword [esp + 4]
push 1
push eax
push dword [0x44c018]
call fcn.0043d120
add esp, 0x10
test esi, esi
js 0x43ec1f
lea eax, [esp + 0x188]
push 0x20
push eax
push dword [esp + 0x10]
push dword [esp + 0x18]
call fcn.0043e670
add esp, 0x10
test eax, eax
js 0x43ec1f
lea eax, [esp + 0x10]
push 0x20
push eax
push dword [esp + 0x1ac]
push dword [esp + 0x1ac]
call fcn.0043e670
add esp, 0x10
test eax, eax
js 0x43ec1f
mov eax, dword [esp + 0x1a0]
mov ebx, dword [esp + 0x1a4]
add eax, 0x10
mov dword [esp], eax
adc ebx, 0
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x68], eax
jmp 0x43eb7b
cmp cx, dx
je 0x43ec5e
push esi
call fcn.00439840
add esp, 4
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x6c]
mov edx, ecx
xor edx, ebx
mov esi, eax
xor esi, dword [esp]
or esi, edx
je 0x43ec1f
push 0x68
lea edx, [esp + 0x6c]
push edx
push ecx
push eax
call fcn.0043e670
add esp, 0x10
test eax, eax
js 0x43ec1f
movzx eax, word [esp + 0xc2]
push eax
call fcn.004397b0
add esp, 4
mov esi, eax
movzx eax, word [esp + 0xc2]
push eax
push esi
push dword [esp + 0xd4]
push dword [esp + 0xd4]
call fcn.0043e670
add esp, 0x10
test eax, eax
js 0x43eb59
xor eax, eax
nop
nop
nop
mov ecx, dword [ebp + 8]
movzx ecx, word [ecx + eax]
lea edx, [ecx - 0x41]
cmp dx, 0x1a
jae 0x43ebee
mov edx, ecx
xor edx, 0x20
add edx, ecx
and ecx, 0xffffffdf
sub edx, ecx
mov ecx, edx
movzx edx, word [esi + eax]
lea edi, [edx - 0x41]
cmp di, 0x1a
jae 0x43ec09
mov edi, edx
xor edi, 0x20
add edi, edx
and edx, 0xffffffdf
sub edi, edx
mov edx, edi
test cx, cx
je 0x43eb50
add eax, 2
cmp cx, dx
je 0x43ebd0
jmp 0x43eb50
xor eax, eax
xor edx, edx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
lea ecx, [esp + 0x188]
push 0
push 0x30
push ecx
push 0
push dword [esp + 0x14]
push 5
push eax
push dword [0x44c018]
call fcn.0043d120
add esp, 0x20
mov dword [esp], eax
mov eax, dword [esp + 0x10]
mov dword [esp + 4], eax
jmp 0x43ea0f
mov edi, dword [esp + 0x98]
mov ebx, dword [esp + 0x9c]
push esi
call fcn.00439840
mov edx, ebx
mov eax, edi
add esp, 4
jmp 0x43ec23