Function at 0x43a1e7
Capabilities:
Encode data using xor

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x290
mov edx, dword [esp + 0x2b0]
mov dword [esp + 0x77], 0xe48040
mov dword [esp + 0x74], 0x4010ec83
mov dword [esp + 0x70], 0x48e78948
mov dword [esp + 0x6c], 0xce8948fc
lea edi, [esp + 0x90]
lea eax, [esp + 0x6c]
mov ecx, 3
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
lea edi, [esp + 0x9c]
lea eax, [esp + 0x78]
mov ecx, 1
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
movzx eax, byte [esp + 0x7a]
mov byte [esp + 0x9e], al
mov dword [esp + 4], edx
cmp edx, 4
jb 0x43a1b7
mov dword [esp + 4], 4
lea esi, [esp + 0x9f]
test edx, edx
je 0x43a5d4
xor edx, edx
jmp 0x43a1db
inc edx
cmp edx, dword [esp + 4]
je 0x43a417
cmp edx, 3
ja case.default.0x43a1e0
jmp dword [edx*4 + 0x43e6c8]
mov dword [esp + 8], 0xc938be74
mov dword [esp + 0xc], 0
mov ecx, 0x6426e4b3
nop
nop
nop
nop
movzx eax, byte [esp + ecx - 0x6426e4ab]
mov ebx, ecx
or ebx, eax
lea edi, [ecx - 0x6426e400]
and edi, eax
sub ebx, edi
mov eax, ebx
not eax
and eax, 0x80
and ebx, 0x7f
sub ebx, eax
inc bl
mov byte [esp + ecx - 0x6426e4ab], bl
inc ecx
cmp ecx, 0x6426e4bb
jne 0x43a200
lea ebx, [esp + 8]
mov eax, ebx
xor ecx, ecx
mov edi, esi
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
mov eax, ebx
mov ecx, 1
mov edi, esi
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
movzx eax, byte [esp + 0xa]
mov byte [esi + 2], al
add esi, 3
jmp case.default.0x43a1e0
mov dword [esp + 8], 0x73cfebc
mov byte [esp + 0xc], 0x74
lea eax, [esp + 0xc]
mov word [eax + 5], 0
mov dword [eax + 1], 0
mov ecx, 0xa264d0be
mov edi, 0x5d9b2f41
nop
nop
nop
nop
nop
nop
nop
nop
movzx ebx, byte [esp + ecx + 0x5d9b2f4a]
mov ebp, edi
or ebp, ebx
lea eax, [edi - 0x5d9b2f00]
and eax, ebx
xor eax, ebp
and eax, ecx
add al, al
sub bl, al
movzx eax, bl
add eax, ecx
add al, 0x4a
mov byte [esp + ecx + 0x5d9b2f4a], al
inc ecx
dec edi
cmp ecx, 0xa264d0c9
jne 0x43a2a0
lea eax, [esp + 8]
mov ecx, 1
mov edi, esi
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
add esi, 4
lea eax, [esp + 0xc]
xor ecx, ecx
mov edi, esi
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
jmp case.default.0x43a1e0
mov dword [esp + 8], 0xc9004200
mov byte [esp + 0xc], 0xd0
lea eax, [esp + 0xc]
mov byte [eax + 3], 0
mov word [eax + 1], 0
xor ecx, ecx
nop
nop
nop
movzx edi, byte [esp + ecx + 8]
mov eax, ecx
and eax, 5
mov ebx, ecx
and ebx, 2
xor ebx, 0x52
mov ebp, ecx
or ebp, 0x31dd8dad
add ebp, eax
sub ebx, eax
xor ebx, ebp
and ebx, edi
xor ebx, ebp
mov eax, ebx
and eax, 1
or ebx, 1
add ebx, eax
add bl, 0x9e
mov byte [esp + ecx + 8], bl
inc ecx
cmp ecx, 8
jne 0x43a320
lea eax, [esp + 8]
mov ecx, 1
mov edi, esi
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
add esi, 4
lea eax, [esp + 0xc]
xor ecx, ecx
mov edi, esi
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
jmp case.default.0x43a1e0
mov dword [esp + 8], 0x1d086bc
mov byte [esp + 0xc], pe_nt_image_headers32
lea eax, [esp + 0xc]
mov byte [eax + 3], 0
mov word [eax + 1], 0
mov ecx, 0x546772bf
nop
movzx ebx, byte [esp + ecx - 0x546772b7]
not ebx
mov eax, ecx
or eax, ebx
and ebx, ecx
sub ebx, eax
add ebx, 0x59fac243
mov eax, ebx
xor eax, 0xfffffffe
mov edi, ebx
or edi, 1
and edi, eax
mov eax, edi
and eax, 0xfd
mov ebp, edi
and ebp, 2
or edi, 2
imul edi, ebp
xor ebp, 2
imul ebp, eax
xor ebx, 1
add ebx, edi
add ebx, ebp
mov byte [esp + ecx - 0x546772b7], bl
inc ecx
cmp ecx, 0x546772c7
jne 0x43a3a0
lea eax, [esp + 8]
mov edi, esi
mov ecx, 1
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
add esi, 4
lea eax, [esp + 0xc]
xor ecx, ecx
mov edi, esi
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
jmp case.default.0x43a1e0
mov edx, dword [esp + 0x2b0]
cmp edx, 3
jbe 0x43a5d4
test dl, 1
je 0x43a456
mov eax, 0x43ebe2
mov edx, 0x43ebe2
mov edi, esi
xor ecx, ecx
xchg esi, edx
rep movsd dword es:[edi], dword [esi]
xchg esi, edx
mov edx, dword [esp + 0x2b0]
mov ecx, 1
mov edi, esi
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
add esi, 2
lea ecx, [edx*8]
mov eax, 0xffffffff
mov edi, 0xffffffff
cmp ecx, 0x7ffffffe
ja 0x43aabd
dec edx
cmp edx, 4
jb 0x43a5d4
lea ebx, [esp + 0x10]
jmp 0x43a49a
dec edx
cmp edx, 3
jbe 0x43a5d4
lea eax, [edx*8]
mov ebp, eax
cmp eax, 0x7e
ja 0x43a530
mov dword [esp + 8], 0x779cde80
mov word [esp + 0xc], 0x5584
mov byte [ebx], 0
mov word [ebx - 2], 0
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, eax
add cl, 0xe
xor cl, byte [esp + eax + 8]
add cl, 0xba
mov byte [esp + eax + 8], cl
mov ecx, eax
and ecx, 1
xor eax, 1
lea eax, [eax + ecx*2]
cmp eax, 9
jb 0x43a4d0
lea eax, [esp + 8]
mov edi, esi
mov ecx, 1
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
lea edi, [esi + 4]
lea eax, [esp + 0xc]
xor ecx, ecx
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
movzx eax, byte [esp + 0xc]
mov byte [esi + 4], al
mov eax, ebp
mov byte [esi + 3], al
add esi, 5
jmp 0x43a490
mov dword [esp + 4], edx
mov dword [esp + 8], 0x108124c
mov dword [esp + 0xc], 0x5d828380
mov byte [esp + 0x10], 0x8c
mov dword [ebx + 4], 0
mov dword [ebx + 1], 0
mov edi, 0xc9945d61
nop
nop
nop
nop
movzx edx, byte [esp + edi + 0x366ba2a7]
mov ebx, edx
and ebx, edi
mov eax, ebx
or al, 0xfd
inc al
mov ecx, ebx
and cl, 0x7d
mul cl
mov ecx, eax
add cl, dl
mov eax, ebx
shr al, 1
and al, 1
or bl, 2
mul bl
add al, al
sub cl, al
movzx eax, cl
add eax, edi
add al, 0x1b
mov byte [esp + edi + 0x366ba2a7], al
inc edi
cmp edi, 0xc9945d71
jne 0x43a560
lea eax, [esp + 8]
mov edi, esi
mov ecx, 2
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
lea eax, [esi + 8]
lea ebx, [esp + 0x10]
mov edx, ebx
xor ecx, ecx
mov edi, eax
xchg esi, edx
rep movsw word es:[edi], word [esi]
xchg esi, edx
mov dword [esi + 3], ebp
mov esi, eax
mov edx, dword [esp + 4]
jmp 0x43a490
mov edx, dword [esp + 0x2a8]
mov ebx, dword [esp + 0x2a4]
mov dword [esp + 8], 0x5366f208
lea ebp, [esp + 0xc]
mov byte [esp + 0xc], 0x6c
mov dword [esp + 0xd], 0
mov dword [esp + 0x10], 0
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, eax
add cl, 0x6c
xor cl, byte [esp + eax + 8]
add cl, 0xe4
mov byte [esp + eax + 8], cl
inc eax
cmp eax, 0xc
jne 0x43a610
lea eax, [esp + 8]
mov edi, esi
mov ecx, 1
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
lea eax, [esi + 4]
mov edi, eax
xor ecx, ecx
xchg esi, ebp
rep movsw word es:[edi], word [esi]
xchg esi, ebp
mov dword [esp + 0x8b], 0xc3fc8948
mov dword [esp + 0x88], 0x48d2ff41
mov dword [esp + 0x7c], 0xba49c031
mov dword [esp + 0x80], ebx
mov dword [esp + 0x84], edx
lea edx, [esp + 0x7c]
mov edi, eax
mov ecx, 4
xchg esi, edx
rep movsd dword es:[edi], dword [esi]
xchg esi, edx
lea edi, [esi + 0x14]
lea eax, [esp + 0x8c]
mov ecx, 1
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
movzx eax, byte [esp + 0x8e]
mov byte [esi + 0x16], al
lea eax, [esp + 0x90]
neg eax
lea ebx, [esi + eax]
add ebx, 0x17
mov eax, ebx
and eax, 0x5a
mov ecx, ebx
xor ecx, 0x5a
lea eax, [ecx + eax*2]
mov dword [esp + 0x68], eax
xor eax, eax
mov dword [esp], 0
mov dword [esp + 8], 0x5c5d5e5f
mov byte [esp + 0xc], 0
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [esp + eax + 8]
mov ecx, eax
and ecx, 1
xor ecx, 0x2ffffef1
mov esi, eax
and esi, 6
add ecx, esi
add ecx, 0x5f5c6f80
xor ecx, edx
mov esi, ecx
xor esi, 0x2ab3fae1
mov edx, ecx
and edx, 0x2f
xor edx, 0x21
xor ecx, 0xce
add ecx, esi
and esi, 0xd0
sub ecx, esi
add ecx, edx
inc cl
mov byte [esp + eax + 8], cl
inc eax
cmp eax, 5
jne 0x43a6e0
mov eax, dword [esp + 8]
mov ecx, dword [0x44839c]
test ecx, ecx
je 0x43a78c
xor edx, edx
mov esi, dword [0x4483a0]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp dword [esi + edx*8], 0x3e416e49
je 0x43a760
inc edx
cmp ecx, edx
jne 0x43a750
jmp 0x43a78c
mov ecx, dword [esi + edx*8 + 4]
cmp ecx, eax
je 0x43a78c
lea eax, [esp + 0x68]
mov edx, esp
push 0x40
push 0x3000
push eax
push 0
push edx
push 0xffffffffffffffff
push 6
push ecx
push dword [0x4483a4]
call fcn.00437ec0
add esp, 0x24
test eax, eax
js 0x43aa8a
mov dword [esp + 8], 0xfd6f08fd
mov dword [esp + 0xc], 0xb72336c3
mov dword [esp + 0x10], 0x53befc33
mov dword [esp + 0x14], 0xa7a6a5a4
mov dword [esp + 0x18], 0x996222c8
mov dword [esp + 0x1c], 0x26a6493f
mov dword [esp + 0x20], 0xa7f8665a
mov dword [esp + 0x24], 0xb7b6b587
mov dword [esp + 0x28], 0xa54ab329
mov dword [esp + 0x2c], 0xb1cecdcc
mov dword [esp + 0x30], 0x1a5c205c
mov dword [esp + 0x34], 0xa0ea1947
mov dword [esp + 0x38], 0xdb00a4a6
mov dword [esp + 0x3c], 0xe39a46dc
mov dword [esp + 0x40], 0xea82e3df
mov dword [esp + 0x44], 0x39d1ba14
mov dword [esp + 0x48], 0x8f0d81b7
mov dword [esp + 0x4c], 0xefcdf1d0
mov dword [esp + 0x50], 0xaf73e9e8
mov dword [esp + 0x54], 0x257fbdd8
mov dword [esp + 0x58], 0x22ba21c1
mov dword [esp + 0x5c], 0xcbf9dd06
lea esi, [esp + 0x60]
mov dword [esp + 0x60], 0xf9c4
mov eax, 0x841d1d1c
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ecx, byte [esp + eax + 0x7be2e2ec]
xor ecx, eax
mov edx, ecx
and edx, 0xc0c73
xor ecx, 0x6b6e6e73
lea ecx, [ecx + edx*2]
mov edx, ecx
xor edx, 0x94
and ecx, 0x6b
add ecx, ecx
sub ecx, edx
add cl, 0x95
mov byte [esp + eax + 0x7be2e2ec], cl
inc eax
cmp eax, 0x841d1d78
jne 0x43a860
mov eax, dword [esp]
lea edx, [esp + 8]
mov edi, eax
mov ecx, 0x16
xchg esi, edx
rep movsd dword es:[edi], dword [esi]
xchg esi, edx
lea edi, [eax + 0x58]
xor edx, edx
xor ecx, ecx
xchg esi, esi
rep movsw word es:[edi], word [esi]
xchg esi, esi
movzx ecx, byte [esp + 0x60]
mov byte [eax + 0x58], cl
mov eax, dword [esp]
mov dword [esp + 8], 0x4f4e49e1
mov dword [esp + 0xc], 0
nop
nop
nop
nop
nop
nop
nop
movzx esi, byte [esp + edx + 8]
lea ecx, [edx + 0xbef7cf2]
mov edi, ecx
and edi, esi
add edi, edi
xor ecx, edi
mov ebp, 0x7410830d
sub ebp, edx
and ebp, edi
add ebp, ebp
sub ecx, ebp
add ecx, esi
mov esi, ecx
not esi
and esi, 0xbb
and ecx, 0x44
sub ecx, esi
inc cl
mov byte [esp + edx + 8], cl
mov ecx, edx
not ecx
or ecx, 1
add ecx, edx
inc ecx
mov esi, ecx
and esi, 0xfffffffd
mov edi, ecx
and edi, 2
or ecx, 2
imul ecx, edi
xor edi, 2
imul edi, esi
xor edx, 1
add edx, ecx
add edx, edi
cmp edx, 8
jb 0x43a8e0
add eax, dword [esp + 8]
mov ecx, ebx
shr ecx, 2
lea edx, [esp + 0x90]
mov edi, eax
xchg esi, edx
rep movsd dword es:[edi], dword [esi]
xchg esi, edx
mov ecx, ebx
and ecx, 0xfffffffc
add eax, ecx
lea edx, [esp + ecx]
add edx, 0x90
mov ecx, ebx
shr ecx, 1
and ecx, 1
mov esi, edx
mov edi, eax
xchg esi, esi
rep movsw word es:[edi], word [esi]
xchg esi, esi
test bl, 1
je 0x43a98c
and ebx, 2
movzx ecx, byte [edx + ebx]
mov byte [eax + ebx], cl
mov eax, dword [esp]
mov dword [esp + 8], 0xf10e0fb7
xor ecx, ecx
xor edx, edx
nop
nop
nop
nop
nop
movzx esi, byte [esp + edx + 8]
mov edi, ecx
and edi, 2
mov ebx, edx
xor ebx, 0x3571fd7d
add ebx, edi
xor ebx, esi
mov esi, ebx
and esi, 1
or ebx, 1
add ebx, esi
add bl, 0x8e
mov byte [esp + edx + 8], bl
inc edx
add ecx, 2
cmp edx, 4
jne 0x43a9a0
mov ecx, dword [esp + 8]
add ecx, eax
push dword [esp + 0x2ac]
push ecx
call eax
mov edi, edx
mov dword [esp + 0x64], 0
mov dword [esp + 8], 0x5c5d5e5f
mov byte [esp + 0xc], 0
xor ecx, ecx
nop
nop
nop
nop
nop
nop
nop
movzx esi, byte [esp + ecx + 8]
mov edx, ecx
and edx, 1
xor edx, 0x2ffffef1
mov ebx, ecx
and ebx, 6
add edx, ebx
add edx, 0x5f5c6f80
xor edx, esi
mov ebx, edx
xor ebx, 0x2ab3fae1
mov esi, edx
and esi, 0x2f
xor esi, 0x21
xor edx, 0xce
add edx, ebx
and ebx, 0xd0
sub edx, ebx
add edx, esi
inc dl
mov byte [esp + ecx + 8], dl
inc ecx
cmp ecx, 5
jne 0x43aa00
mov ecx, dword [0x44839c]
test ecx, ecx
je 0x43aabd
mov edx, dword [esp + 8]
xor esi, esi
mov ebx, dword [0x4483a0]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp dword [ebx + esi*8], 0x16194952
je 0x43aa91
mov ebp, esi
and ebp, 1
xor esi, 1
lea esi, [esi + ebp*2]
cmp esi, ecx
jb 0x43aa70
jmp 0x43aabd
mov edi, eax
sar edi, 0x1f
jmp 0x43aabd
mov ecx, dword [ebx + esi*8 + 4]
cmp ecx, edx
je 0x43aabd
lea edx, [esp + 0x64]
mov esi, esp
push 0x8000
push edx
push esi
push 0xffffffffffffffff
push 4
push ecx
push dword [0x4483a4]
mov esi, eax
call fcn.00437ec0
mov eax, esi
add esp, 0x1c
mov edx, edi
add esp, 0x290
pop esi
pop edi
pop ebx
pop ebp
ret 0x10