Function at 0x43f050
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x80
mov edi, ecx
mov eax, dword [ebp + 8]
mov dword [eax + 8], 0
mov dword [eax + 4], 0
mov dword [eax], 0
mov dword [esp + 0x34], 0
mov dword [esp + 0x28], 0x100000
mov dword [esp + 0x14], 0
mov dword [esp + 4], 0x101f1e1d
mov word [esp + 8], 0
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, eax
xor edx, 0xcb1c73a
mov ecx, eax
or ecx, 5
and ecx, edx
mov edx, eax
and edx, 5
mov esi, ecx
and esi, 2
or ecx, 2
imul ecx, esi
xor esi, 2
imul esi, edx
mov edx, eax
xor edx, 0xc5
add edx, ecx
add edx, esi
xor dl, byte [esp + eax + 4]
add dl, 0x27
mov byte [esp + eax + 4], dl
inc eax
cmp eax, 6
jne 0x43f0b0
mov eax, dword [esp + 4]
mov ecx, dword [0x451b44]
test ecx, ecx
je 0x43f14e
xor edx, edx
mov esi, dword [0x451b48]
nop
nop
nop
nop
nop
nop
nop
nop
cmp dword [esi + edx*8], 0x3e416e49
je 0x43f120
inc edx
cmp ecx, edx
jne 0x43f110
jmp 0x43f14e
mov ecx, dword [esi + edx*8 + 4]
cmp ecx, eax
je 0x43f14e
lea eax, [esp + 0x28]
lea edx, [esp + 0x14]
push 4
push 0x3000
push eax
push 0
push edx
push 0xffffffffffffffff
push 6
push ecx
push dword [0x451b4c]
call fcn.00441940
add esp, 0x24
test eax, eax
js 0x43f822
cmp dword [edi + 4], 0
je 0x43f7b0
mov dword [esp + 0x50], edi
mov eax, dword [edi + 4]
mov dword [esp + 0x44], 0
mov dword [esp + 0x40], 0
mov dword [esp + 0x3c], 0
mov dword [esp + 0x38], 0
mov dword [esp + 0x60], 0
mov dword [esp + 0x5c], 0
mov dword [esp + 4], 0x4f4f4948
lea ecx, [esp + 4]
mov edx, 0x5f3bf1ed
nop
nop
nop
nop
nop
nop
nop
nop
movzx esi, byte [ecx]
lea edi, [edx - 0x5f3bf100]
and edi, esi
or esi, edx
not esi
or esi, edi
mov edi, esi
xor edi, 0x56acd4b2
and esi, 0x29532b4d
add esi, esi
sub esi, edi
mov edi, esi
and edi, 0x25
xor esi, 0xa5
lea ebx, [esi + edi*2]
add bl, 0xb3
mov byte [ecx], bl
inc ecx
dec edx
cmp edx, 0x5f3bf1e9
jne 0x43f1b0
mov dword [esp + 0x2c], 0x7fff
cmp eax, 2
je 0x43f205
mov dword [esp + 0x2c], 0
mov eax, 0xfffeffff
je 0x43f211
mov eax, SysReAllocString
mov edx, dword [esp + 4]
mov ecx, edx
sar ecx, 0x1f
mov dword [esp + 0x10], eax
cmp edx, eax
mov dword [esp + 0x24], ecx
mov eax, ecx
sbb eax, dword [esp + 0x2c]
jae 0x43f724
mov dword [esp + 0x18], 0
mov dword [esp], 0
xor edi, edi
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov dword [esp + 0x30], edx
mov ecx, dword [esp + 0x50]
lea eax, [esp + 0x5c]
push eax
lea eax, [esp + 0x64]
push eax
lea eax, [esp + 0x40]
push eax
lea eax, [esp + 0x4c]
push eax
push dword [esp + 0x34]
push edx
call fcn.0043eba0
mov edx, dword [esp + 0x30]
cmp eax, 0xbfffffff
ja 0x43f724
test eax, eax
js 0x43f700
cmp dword [esp + 0x60], 0x1000
jne 0x43f700
test byte [esp + 0x5c], 0x66
je 0x43f700
mov esi, dword [esp + 0x38]
cmp dword [esp + 0x28], esi
mov ebx, dword [esp + 0x3c]
mov eax, 0
sbb eax, ebx
jae 0x43f44e
mov dword [esp + 0x20], edi
mov dword [esp + 4], 0x101f1e1d
mov word [esp + 8], 0
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, eax
xor edx, 0xcb1c73a
mov ecx, eax
or ecx, 5
and ecx, edx
mov edx, eax
and edx, 5
mov edi, ecx
and edi, 2
or ecx, 2
imul ecx, edi
xor edi, 2
imul edi, edx
mov edx, eax
xor edx, 0xc5
add edx, ecx
add edx, edi
xor dl, byte [esp + eax + 4]
add dl, 0x27
mov byte [esp + eax + 4], dl
inc eax
cmp eax, 6
jne 0x43f2e0
mov eax, dword [0x451b44]
test eax, eax
je 0x43f37a
mov ecx, dword [esp + 4]
xor edx, edx
mov edi, dword [0x451b48]
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp dword [edi + edx*8], 0x16194952
je 0x43f350
inc edx
cmp eax, edx
jne 0x43f340
jmp 0x43f37a
mov eax, dword [edi + edx*8 + 4]
cmp eax, ecx
je 0x43f37a
push 0x8000
lea ecx, [esp + 0x38]
push ecx
lea ecx, [esp + 0x1c]
push ecx
push 0xffffffffffffffff
push 4
push eax
push dword [0x451b4c]
call fcn.00441940
add esp, 0x1c
mov dword [esp + 0x34], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x28], esi
mov dword [esp + 4], 0x101f1e1d
mov word [esp + 8], 0
xor eax, eax
nop
mov edx, eax
xor edx, 0xcb1c73a
mov ecx, eax
or ecx, 5
and ecx, edx
mov edx, eax
and edx, 5
mov edi, ecx
and edi, 2
or ecx, 2
imul ecx, edi
xor edi, 2
imul edi, edx
mov edx, eax
xor edx, 0xc5
add edx, ecx
add edx, edi
xor dl, byte [esp + eax + 4]
add dl, 0x27
mov byte [esp + eax + 4], dl
inc eax
cmp eax, 6
jne 0x43f3a0
mov eax, dword [esp + 4]
mov ecx, dword [0x451b44]
test ecx, ecx
je 0x43f43e
xor edx, edx
mov edi, dword [0x451b48]
nop
nop
nop
nop
nop
nop
nop
nop
cmp dword [edi + edx*8], 0x3e416e49
je 0x43f410
inc edx
cmp ecx, edx
jne 0x43f400
jmp 0x43f43e
mov ecx, dword [edi + edx*8 + 4]
cmp ecx, eax
je 0x43f43e
push 4
push 0x3000
lea eax, [esp + 0x30]
push eax
push 0
lea eax, [esp + 0x24]
push eax
push 0xffffffffffffffff
push 6
push ecx
push dword [0x451b4c]
call fcn.00441940
add esp, 0x24
test eax, eax
mov edx, dword [esp + 0x30]
mov edi, dword [esp + 0x20]
js 0x43f724
mov ecx, dword [esp + 0x50]
lea eax, [esp + 0x70]
push eax
push ebx
push esi
push dword [esp + 0x20]
push dword [esp + 0x34]
push edx
call fcn.0043eec0
test eax, eax
jns 0x43f476
cmp eax, 0x8000000d
jne 0x43f700
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 0x74]
mov edx, dword [ebp + 0x10]
cmp eax, edx
sbb ecx, 0
jb 0x43f700
push dword [ebp + 0x14]
push edx
push dword [ebp + 0xc]
push eax
push dword [esp + 0x24]
lea eax, [esp + 0x18]
push eax
call fcn.0043f870
add esp, 0x18
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp + 0x54], ecx
cmp eax, ecx
mov ebx, dword [esp]
je 0x43f6e6
mov dword [esp + 0x64], eax
jmp 0x43f4eb
mov eax, dword [esp + 0x58]
mov dword [ebx + edx], ecx
mov dword [ebx + edx + 4], esi
add edi, 8
add eax, 4
cmp eax, dword [esp + 0x54]
je 0x43f6af
mov dword [esp], ebx
mov dword [esp + 0x20], edi
mov dword [esp + 0x58], eax
mov esi, dword [eax]
sub esi, dword [esp + 0x14]
mov edx, esi
sar edx, 0x1f
mov ebx, dword [esp + 0x30]
mov ecx, ebx
and ecx, esi
mov edi, dword [esp + 0x24]
mov eax, edi
and eax, edx
shld eax, ecx, 1
add ecx, ecx
xor edx, edi
mov edi, dword [esp + 0x20]
xor esi, ebx
mov ebx, dword [esp]
add esi, ecx
mov ecx, esi
mov esi, edx
adc esi, eax
mov edx, edi
sub edx, ebx
cmp edi, dword [esp + 0x18]
jne 0x43f4d0
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x68], esi
mov eax, ebx
not eax
and eax, edi
add eax, eax
mov ecx, edi
xor ecx, ebx
sub eax, ecx
sar eax, 3
mov ecx, eax
shr ecx, 1
add ecx, eax
mov dword [esp + 0x1c], edx
mov eax, edx
sar eax, 3
inc eax
cmp ecx, eax
ja 0x43f563
mov ecx, eax
mov dword [esp + 0x18], ecx
lea eax, [ecx*8]
push eax
call fcn.0040cc60
add esp, 4
mov esi, eax
test ebx, ebx
je 0x43f689
cmp esi, ebx
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x4c], esi
jbe 0x43f63f
cmp edi, esi
jbe 0x43f63f
test edx, edx
je 0x43f67a
mov ebx, dword [esp]
mov edx, dword [esp + 0x1c]
lea eax, [ebx + edx]
dec eax
mov ecx, dword [esp + 0x4c]
add ecx, edx
dec ecx
mov edi, edx
and edi, 7
je 0x43f5d7
neg edi
xor edx, edx
nop
nop
movzx ebx, byte [eax + edx]
mov byte [ecx + edx], bl
dec edx
cmp edi, edx
jne 0x43f5c0
add eax, edx
add ecx, edx
add edx, dword [esp + 0x1c]
mov ebx, dword [esp]
mov edi, ebx
sub edi, dword [esp + 0x20]
cmp edi, 0xfffffff8
ja 0x43f67a
neg edx
xor edi, edi
nop
nop
nop
nop
nop
nop
movzx ebx, byte [eax + edi]
mov byte [ecx + edi], bl
movzx ebx, byte [eax + edi - 1]
mov byte [ecx + edi - 1], bl
movzx ebx, byte [eax + edi - 2]
mov byte [ecx + edi - 2], bl
movzx ebx, byte [eax + edi - 3]
mov byte [ecx + edi - 3], bl
movzx ebx, byte [eax + edi - 4]
mov byte [ecx + edi - 4], bl
movzx ebx, byte [eax + edi - 5]
mov byte [ecx + edi - 5], bl
movzx ebx, byte [eax + edi - 6]
mov byte [ecx + edi - 6], bl
movzx ebx, byte [eax + edi - 7]
mov byte [ecx + edi - 7], bl
add edi, 0xfffffff8
cmp edx, edi
jne 0x43f5f0
jmp 0x43f67a
mov ecx, edx
shr ecx, 2
mov eax, ebx
mov edi, esi
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
mov eax, edx
and edx, 0xfffffffc
add esi, edx
add edx, ebx
mov ecx, eax
mov ebx, eax
shr ecx, 1
and ecx, 1
mov eax, edx
mov edi, esi
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
test bl, 1
je 0x43f67a
mov eax, dword [esp + 0x1c]
and eax, 2
movzx ecx, byte [edx + eax]
mov byte [esi + eax], cl
push dword [esp]
call fcn.0040cc70
add esp, 4
mov esi, dword [esp + 0x4c]
mov eax, dword [esp + 0x18]
lea eax, [esi + eax*8]
mov dword [esp + 0x18], eax
mov edi, esi
mov edx, dword [esp + 0x1c]
add edi, edx
mov ebx, esi
mov eax, dword [esp + 0x58]
mov esi, dword [esp + 0x68]
mov ecx, dword [esp + 0x6c]
jmp 0x43f4d4
mov eax, dword [ebp + 8]
mov dword [eax + 4], edi
mov dword [eax], ebx
mov ecx, dword [esp + 0x18]
mov dword [eax + 8], ecx
mov eax, dword [esp + 0x64]
test eax, eax
je 0x43f6fc
cmp eax, dword [esp + 0x54]
mov esi, dword [esp + 0x10]
je 0x43f6f7
mov dword [esp], ebx
push eax
call fcn.0040cc70
add esp, 4
mov dword [esp + 4], 0
jmp 0x43f704
mov eax, dword [ebp + 8]
mov dword [eax + 4], edi
mov dword [eax], ebx
mov ecx, dword [esp + 0x18]
mov dword [eax + 8], ecx
jmp 0x43f700
mov dword [esp], ebx
jmp 0x43f704
mov dword [esp], ebx
nop
mov esi, dword [esp + 0x10]
mov edx, dword [esp + 0x38]
add edx, dword [esp + 0x40]
mov eax, dword [esp + 0x3c]
adc eax, dword [esp + 0x44]
cmp edx, esi
mov dword [esp + 0x24], eax
sbb eax, dword [esp + 0x2c]
jb 0x43f250
mov dword [esp + 4], 0x101f1e1d
mov word [esp + 8], 0
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, eax
xor edx, 0xcb1c73a
mov ecx, eax
or ecx, 5
and ecx, edx
mov edx, eax
and edx, 5
mov esi, ecx
and esi, 2
or ecx, 2
imul ecx, esi
xor esi, 2
imul esi, edx
mov edx, eax
xor edx, 0xc5
add edx, ecx
add edx, esi
xor dl, byte [esp + eax + 4]
add dl, 0x27
mov byte [esp + eax + 4], dl
inc eax
cmp eax, 6
jne 0x43f740
mov eax, dword [0x451b44]
test eax, eax
je 0x43f822
mov ecx, dword [esp + 4]
xor edx, edx
mov esi, dword [0x451b48]
nop
nop
nop
nop
nop
cmp dword [esi + edx*8], 0x16194952
je 0x43f7f8
inc edx
cmp eax, edx
jne 0x43f7a0
jmp 0x43f822
push 0xbbf966b4
push dword [0x451b38]
call fcn.00444600
add esp, 8
test eax, eax
je 0x43f82f
mov ecx, dword [edi]
test ecx, ecx
je 0x43f160
mov dword [esp + 4], 0
lea edx, [esp + 4]
push edx
push ecx
call eax
test eax, eax
je 0x43f83b
cmp dword [esp + 4], 0
je 0x43f83b
mov dword [edi + 4], 3
jmp 0x43f160
mov eax, dword [esi + edx*8 + 4]
cmp eax, ecx
je 0x43f822
lea ecx, [esp + 0x34]
lea edx, [esp + 0x14]
push 0x8000
push ecx
push edx
push 0xffffffffffffffff
push 4
push eax
push dword [0x451b4c]
call fcn.00441940
add esp, 0x1c
mov eax, dword [ebp + 8]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret 0x10
mov dword [edi + 4], 1
jmp 0x43f160
lea eax, [esp + 0x40]
push eax
call fcn.00444f10
add esp, 4
test al, al
je 0x43f160
mov eax, dword [esp + 0x40]
mov ecx, 2
cmp eax, 3
je 0x43f860
mov ecx, eax
mov dword [edi + 4], ecx
jmp 0x43f160