Function at 0x43e370
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x518
mov edi, dword [ebp + 8]
mov dword [esp + 0x188], 0x80878685
mov word [esp + 0x18c], 0
mov byte [esp + 0x18e], 0
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, eax
add cl, 0x61
xor cl, byte [esp + eax + 0x188]
add cl, 0x1b
mov byte [esp + eax + 0x188], cl
inc eax
cmp eax, 7
jne 0x43e3b0
mov eax, dword [esp + 0x188]
mov ecx, dword [0x44c2b0]
test ecx, ecx
je 0x43e42a
xor edx, edx
mov esi, dword [0x44c2b4]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp dword [esi + edx*8], 0x89c57e52
je 0x43e400
inc edx
cmp ecx, edx
jne 0x43e3f0
jmp 0x43e42a
mov ecx, dword [esi + edx*8 + 4]
cmp ecx, eax
je 0x43e42a
lea eax, [esp + 0x10]
push 2
push 0
push 0
push eax
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 7
push ecx
push dword [0x44c2b8]
call fcn.0043ca30
add esp, 0x28
test eax, eax
js 0x43e6b6
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x188], 0x80878685
mov word [esp + 0x18c], 0
mov byte [esp + 0x18e], 0
xor ecx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, ecx
add al, 0x61
xor al, byte [esp + ecx + 0x188]
add al, 0x1b
mov byte [esp + ecx + 0x188], al
inc ecx
cmp ecx, 7
jne 0x43e460
mov esi, dword [esp + 0x188]
mov ecx, dword [0x44c2b0]
test ecx, ecx
je 0x43e4de
xor eax, eax
mov edx, dword [0x44c2b4]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp dword [edx + eax*8], 0xc3cdc4a6
je 0x43e4b0
inc eax
cmp ecx, eax
jne 0x43e4a0
jmp 0x43e4de
mov eax, dword [edx + eax*8 + 4]
cmp eax, esi
je 0x43e4de
lea ecx, [esp + 0x188]
push 0
push 0x30
push ecx
push 0
push ebx
push 5
push eax
push dword [0x44c2b8]
call fcn.0043ca30
add esp, 0x20
mov esi, eax
mov ebx, dword [esp + 0x10]
mov dword [esp + 0xc], ebx
mov eax, dword [esp + 0x190]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x194]
mov dword [esp + 4], eax
mov dword [esp + 0x68], 0x80878685
mov word [esp + 0x6c], 0
mov byte [esp + 0x6e], 0
xor ecx, ecx
nop
nop
mov eax, ecx
add al, 0x61
xor al, byte [esp + ecx + 0x68]
add al, 0x1b
mov byte [esp + ecx + 0x68], al
inc ecx
cmp ecx, 7
jne 0x43e510
mov ecx, dword [0x44c2b0]
test ecx, ecx
je 0x43e56d
mov edx, dword [esp + 0x68]
xor eax, eax
mov ebx, dword [0x44c2b4]
nop
nop
nop
nop
nop
nop
cmp dword [ebx + eax*8], 0xb62b8d10
je 0x43e550
inc eax
cmp ecx, eax
jne 0x43e540
jmp 0x43e56d
mov eax, dword [ebx + eax*8 + 4]
cmp eax, edx
je 0x43e56d
push dword [esp + 0xc]
push 1
push eax
push dword [0x44c2b8]
call fcn.0043ca30
add esp, 0x10
test esi, esi
js 0x43e6b6
lea eax, [esp + 0x188]
push 0x20
push eax
push dword [esp + 0xc]
push dword [esp + 0x14]
call fcn.0043e1b0
add esp, 0x10
test eax, eax
js 0x43e6b6
lea eax, [esp + 0x10]
push 0x20
push eax
push dword [esp + 0x1ac]
push dword [esp + 0x1ac]
call fcn.0043e1b0
add esp, 0x10
test eax, eax
js 0x43e6b6
mov eax, dword [esp + 0x1a0]
mov ecx, dword [esp + 0x1a4]
add eax, 0x10
mov dword [esp + 8], eax
adc ecx, 0
mov dword [esp + 4], ecx
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x68], eax
jmp 0x43e62d
movzx eax, cx
movzx ecx, dx
mov edx, ecx
xor edx, eax
not ecx
and ecx, eax
add ecx, ecx
cmp ecx, edx
je 0x43e6c2
push esi
call fcn.004395a0
add esp, 4
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x6c]
mov edx, ecx
xor edx, dword [esp + 4]
mov esi, eax
xor esi, dword [esp + 8]
or esi, edx
je 0x43e6b6
push 0x68
lea edx, [esp + 0x6c]
push edx
push ecx
push eax
call fcn.0043e1b0
add esp, 0x10
test eax, eax
js 0x43e6b6
movzx eax, word [esp + 0xc2]
push eax
call fcn.004394f0
add esp, 4
mov esi, eax
movzx eax, word [esp + 0xc2]
push eax
push esi
push dword [esp + 0xd4]
push dword [esp + 0xd4]
call fcn.0043e1b0
add esp, 0x10
test eax, eax
js 0x43e608
xor eax, eax
nop
nop
nop
nop
nop
movzx ecx, word [edi + eax]
lea edx, [ecx - 0x41]
cmp dx, 0x1a
jae 0x43e690
or ecx, 0x20
movzx edx, word [esi + eax]
lea ebx, [edx - 0x41]
cmp bx, 0x1a
jae 0x43e6a0
or edx, 0x20
test cx, cx
je 0x43e5f0
add eax, 2
cmp cx, dx
je 0x43e680
jmp 0x43e5f0
xor eax, eax
xor edx, edx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov edi, dword [esp + 0x98]
mov ebx, dword [esp + 0x9c]
push esi
call fcn.004395a0
mov edx, ebx
mov eax, edi
add esp, 4
jmp 0x43e6ba