Function at 0x43c040
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x64
mov ebp, ecx
mov eax, dword [esp + 0x78]
mov dword [eax + 8], 0
mov dword [eax + 4], 0
mov dword [eax], 0
mov dword [esp + 0x30], 0
mov dword [esp + 0x1c], 0x100000
mov dword [esp + 0x14], 0
mov dword [esp + 0x34], 0xf8fbfafd
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, eax
add cl, 0xab
xor cl, byte [esp + eax + 0x34]
add cl, 0xa9
mov byte [esp + eax + 0x34], cl
inc eax
cmp eax, 4
jne 0x43c090
mov eax, dword [esp + 0x34]
mov ecx, dword [0x44d05c]
test ecx, ecx
je 0x43c108
xor edx, edx
mov esi, dword [0x44d060]
nop
nop
nop
nop
cmp dword [esi + edx*8], 0x98d5a07f
je 0x43c0da
mov edi, edx
and edi, 1
xor edx, 1
lea edx, [edx + edi*2]
cmp edx, ecx
jb 0x43c0c0
jmp 0x43c108
mov ecx, dword [esi + edx*8 + 4]
cmp ecx, eax
je 0x43c108
lea eax, [esp + 0x1c]
lea edx, [esp + 0x14]
push 4
push 0x3000
push eax
push 0
push edx
push 0xffffffffffffffff
push 0x18
push ecx
push dword [0x44d064]
call fcn.0043df70
add esp, 0x24
test eax, eax
js 0x43c76a
mov dword [esp + 0x4c], 0
mov dword [esp + 0x48], 0
mov dword [esp + 0x44], 0
mov dword [esp + 0x40], 0
mov dword [esp + 0x3c], 0
mov dword [esp + 0x38], 0
mov dword [esp + 0x34], 0
mov dword [esp + 8], 0xe9edebe4
mov word [esp + 0xc], 0
mov byte [esp + 0xe], 0
xor eax, eax
xor ecx, ecx
mov edx, ecx
xor dl, 0x57
add dl, al
xor dl, byte [esp + ecx + 8]
add dl, 0x4d
mov byte [esp + ecx + 8], dl
inc ecx
add al, 2
cmp ecx, 7
jne 0x43c160
mov eax, dword [esp + 8]
mov dword [esp + 0x18], eax
cmp eax, 0x7ffffffe
ja 0x43c6eb
mov dword [esp + 4], 0
xor ebx, ebx
mov dword [esp], 0
mov dword [esp + 0x24], ebp
jmp 0x43c1c7
mov ebp, dword [esp + 0x24]
mov ebx, esi
mov edx, dword [esp]
mov dword [esp], edx
mov eax, dword [esp + 0x40]
add eax, dword [esp + 0x34]
mov dword [esp + 0x18], eax
cmp eax, 0x7fffffff
jae 0x43c6eb
mov ecx, dword [ebp]
mov dword [esp + 8], 0xf8fbfafd
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, eax
add dl, 0xab
xor dl, byte [esp + eax + 8]
add dl, 0xa9
mov byte [esp + eax + 8], dl
inc eax
cmp eax, 4
jne 0x43c1e0
mov eax, dword [esp + 8]
mov edx, dword [0x44d05c]
test edx, edx
je 0x43c250
xor esi, esi
mov edi, dword [0x44d060]
nop
nop
nop
nop
cmp dword [edi + esi*8], 0xc18bc4ba
je 0x43c220
inc esi
cmp edx, esi
jne 0x43c210
jmp 0x43c250
mov edx, dword [edi + esi*8 + 4]
cmp edx, eax
je 0x43c250
push 0
push 0x1c
lea eax, [esp + 0x3c]
push eax
push 0
push dword [esp + 0x28]
push ecx
push 0x18
push edx
push dword [0x44d064]
call fcn.0043df70
add esp, 0x24
nop
nop
nop
nop
nop
nop
nop
cmp eax, 0xbfffffff
ja 0x43c6eb
test eax, eax
js 0x43c1b0
cmp dword [esp + 0x44], 0x1000
jne 0x43c1b0
test byte [esp + 0x48], 0x66
je 0x43c1b0
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x1c]
cmp eax, ecx
jbe 0x43c3b4
mov dword [esp + 8], 0xf8fbfafd
xor ecx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, ecx
add dl, 0xab
xor dl, byte [esp + ecx + 8]
add dl, 0xa9
mov byte [esp + ecx + 8], dl
inc ecx
cmp ecx, 4
jne 0x43c2a0
mov ecx, dword [0x44d05c]
test ecx, ecx
je 0x43c30e
mov edx, dword [esp + 8]
xor esi, esi
mov edi, dword [0x44d060]
nop
nop
nop
nop
cmp dword [edi + esi*8], 0x6dbc3610
je 0x43c2e0
inc esi
cmp ecx, esi
jne 0x43c2d0
jmp 0x43c30e
mov ecx, dword [edi + esi*8 + 4]
cmp ecx, edx
je 0x43c30e
push 0x8000
lea eax, [esp + 0x34]
push eax
lea eax, [esp + 0x1c]
push eax
push 0xffffffffffffffff
push 0x10
push ecx
push dword [0x44d064]
call fcn.0043df70
add esp, 0x1c
mov eax, dword [esp + 0x40]
mov dword [esp + 0x14], 0
mov dword [esp + 0x1c], eax
mov dword [esp + 8], 0xf8fbfafd
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, eax
add cl, 0xab
xor cl, byte [esp + eax + 8]
add cl, 0xa9
mov byte [esp + eax + 8], cl
inc eax
cmp eax, 4
jne 0x43c330
mov eax, dword [esp + 8]
mov ecx, dword [0x44d05c]
test ecx, ecx
je 0x43c3a8
xor edx, edx
mov esi, dword [0x44d060]
nop
nop
nop
nop
cmp dword [esi + edx*8], 0x98d5a07f
je 0x43c37a
mov edi, edx
and edi, 1
xor edx, 1
lea edx, [edx + edi*2]
cmp edx, ecx
jb 0x43c360
jmp 0x43c3a8
mov ecx, dword [esi + edx*8 + 4]
cmp ecx, eax
je 0x43c3a8
push 4
push 0x3000
lea eax, [esp + 0x24]
push eax
push 0
lea eax, [esp + 0x24]
push eax
push 0xffffffffffffffff
push 0x18
push ecx
push dword [0x44d064]
call fcn.0043df70
add esp, 0x24
test eax, eax
js 0x43c6eb
mov ecx, dword [esp + 0x1c]
mov esi, ebx
mov edx, dword [esp + 0x14]
mov edi, dword [ebp]
mov dword [esp + 8], 0xf8fbfafd
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ebx, eax
add bl, 0xab
xor bl, byte [esp + eax + 8]
add bl, 0xa9
mov byte [esp + eax + 8], bl
inc eax
cmp eax, 4
jne 0x43c3d0
mov eax, dword [esp + 8]
mov ebx, dword [0x44d05c]
test ebx, ebx
je 0x43c440
mov dword [esp + 0x28], edi
xor edi, edi
mov ebp, dword [0x44d060]
cmp dword [ebp + edi*8], 0xe6c7f7c6
je 0x43c411
inc edi
cmp ebx, edi
jne 0x43c400
jmp 0x43c440
mov ebx, dword [ebp + edi*8 + 4]
cmp ebx, eax
je 0x43c440
lea eax, [esp + 0x60]
push eax
push ecx
push edx
push dword [esp + 0x24]
push dword [esp + 0x38]
push 0x14
push ebx
push dword [0x44d064]
call fcn.0043df70
add esp, 0x20
nop
nop
nop
nop
nop
nop
nop
test eax, eax
jns 0x43c44f
cmp eax, 0x8000000d
jne 0x43c1a4
push dword [esp + 0x84]
push dword [esp + 0x84]
push dword [esp + 0x84]
push dword [esp + 0x6c]
push dword [esp + 0x24]
lea eax, [esp + 0x1c]
push eax
call fcn.0043c780
add esp, 0x18
mov ebp, dword [esp + 8]
mov edi, dword [esp + 0xc]
cmp ebp, edi
mov ebx, esi
je 0x43c6cf
mov dword [esp + 0x50], ebp
mov ecx, dword [esp + 0x18]
mov edx, dword [esp]
mov dword [esp + 0x58], edi
jmp 0x43c4de
push dword [esp + 0x20]
call fcn.004082c0
add esp, 4
mov edi, dword [esp + 0x58]
mov ecx, dword [esp + 0x2c]
mov eax, dword [esp + 0x5c]
lea eax, [ecx + eax*4]
mov dword [esp + 4], eax
mov edx, ecx
add edx, esi
mov ebx, ecx
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x28]
mov dword [ebx + esi], eax
add edx, 4
add ebp, 4
cmp ebp, edi
je 0x43c68d
mov eax, edx
not eax
and eax, ebx
mov esi, ebx
not esi
and esi, edx
sub esi, eax
mov eax, dword [ebp]
add eax, ecx
sub eax, dword [esp + 0x14]
cmp edx, dword [esp + 4]
jne 0x43c4cd
mov dword [esp + 0x28], eax
mov eax, esi
sar eax, 2
inc eax
mov dword [esp], edx
mov ecx, edx
sub ecx, ebx
mov dword [esp + 4], ecx
sar ecx, 2
mov edx, ecx
shr edx, 1
add edx, ecx
cmp edx, eax
ja 0x43c51f
mov edx, eax
mov dword [esp + 0x5c], edx
lea eax, [edx*4]
push eax
call fcn.004082b0
add esp, 4
mov ecx, eax
test ebx, ebx
je 0x43c4b4
cmp ecx, ebx
mov dword [esp + 0x20], ebx
mov eax, dword [esp]
mov dword [esp + 0x2c], ecx
jbe 0x43c606
cmp eax, ecx
jbe 0x43c606
mov ebx, dword [esp + 4]
test ebx, ebx
je 0x43c4a0
mov eax, dword [esp + 0x2c]
add eax, ebx
dec eax
mov edx, dword [esp + 0x20]
lea ecx, [edx + ebx]
dec ecx
mov edi, ebx
and edi, 7
je 0x43c59a
neg edi
xor edx, edx
nop
nop
movzx ebx, byte [ecx + edx]
mov byte [eax + edx], bl
dec edx
cmp edi, edx
jne 0x43c580
add ecx, edx
add eax, edx
mov ebx, dword [esp + 4]
add ebx, edx
mov edx, dword [esp + 0x20]
sub edx, dword [esp]
cmp edx, 0xfffffff8
ja 0x43c4a0
neg ebx
xor edx, edx
nop
nop
nop
nop
nop
nop
mov edi, ebx
movzx ebx, byte [ecx + edx]
mov byte [eax + edx], bl
movzx ebx, byte [ecx + edx - 1]
mov byte [eax + edx - 1], bl
movzx ebx, byte [ecx + edx - 2]
mov byte [eax + edx - 2], bl
movzx ebx, byte [ecx + edx - 3]
mov byte [eax + edx - 3], bl
movzx ebx, byte [ecx + edx - 4]
mov byte [eax + edx - 4], bl
movzx ebx, byte [ecx + edx - 5]
mov byte [eax + edx - 5], bl
movzx ebx, byte [ecx + edx - 6]
mov byte [eax + edx - 6], bl
movzx ebx, byte [ecx + edx - 7]
mov byte [eax + edx - 7], bl
mov ebx, edi
add edx, 0xfffffff8
cmp edi, edx
jne 0x43c5b0
jmp 0x43c4a0
mov eax, ebx
mov ebx, ecx
mov ecx, dword [esp + 4]
shr ecx, 2
mov edi, ebx
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
mov eax, dword [esp + 4]
mov edx, eax
and edx, 0xfffffffc
lea ecx, [ebx + edx]
mov dword [esp], ecx
add edx, dword [esp + 0x20]
and eax, 3
mov ecx, eax
shr ecx, 1
mov dword [esp + 0x54], edx
mov edi, dword [esp]
mov ebx, dword [esp + 0x54]
xchg esi, ebx
rep movsw word es:[edi], word [esi]
xchg esi, ebx
mov edi, dword [esp]
mov ebx, dword [esp + 4]
mov ecx, eax
xor ecx, 0xfffffffe
or eax, 1
and eax, ecx
je 0x43c4a0
and ebx, 2
movzx ecx, byte [edx + ebx]
mov byte [edi + ebx], cl
cmp eax, 1
je 0x43c4a0
movzx ecx, byte [edx + ebx + 1]
mov byte [edi + ebx + 1], cl
cmp eax, 2
je 0x43c4a0
movzx eax, byte [edx + ebx + 2]
mov byte [edi + ebx + 2], al
jmp 0x43c4a0
mov eax, dword [esp + 0x78]
mov dword [eax + 4], edx
mov dword [eax], ebx
mov ecx, dword [esp + 4]
mov dword [eax + 8], ecx
mov eax, dword [esp + 0x50]
test eax, eax
mov ebp, dword [esp + 0x24]
je 0x43c1ad
cmp eax, edi
je 0x43c1ad
push eax
mov esi, edx
call fcn.004082c0
mov edx, esi
add esp, 4
mov dword [esp + 8], 0
jmp 0x43c1ad
mov eax, dword [esp + 0x78]
mov edx, dword [esp]
mov dword [eax + 4], edx
mov dword [eax], ebx
mov ecx, dword [esp + 4]
mov dword [eax + 8], ecx
mov ebp, dword [esp + 0x24]
jmp 0x43c1ad
mov dword [esp + 8], 0xf8fbfafd
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, eax
add cl, 0xab
xor cl, byte [esp + eax + 8]
add cl, 0xa9
mov byte [esp + eax + 8], cl
inc eax
cmp eax, 4
jne 0x43c700
mov eax, dword [0x44d05c]
test eax, eax
je 0x43c76a
mov ecx, dword [esp + 8]
xor edx, edx
mov esi, dword [0x44d060]
nop
nop
nop
nop
nop
cmp dword [esi + edx*8], 0x6dbc3610
je 0x43c740
inc edx
cmp eax, edx
jne 0x43c730
jmp 0x43c76a
mov eax, dword [esi + edx*8 + 4]
cmp eax, ecx
je 0x43c76a
lea ecx, [esp + 0x30]
lea edx, [esp + 0x14]
push 0x8000
push ecx
push edx
push 0xffffffffffffffff
push 0x10
push eax
push dword [0x44d064]
call fcn.0043df70
add esp, 0x1c
mov eax, dword [esp + 0x78]
add esp, 0x64
pop esi
pop edi
pop ebx
pop ebp
ret 0x10