Function at 0x406901
Capabilities:
Encode data using xor

Disassembly:
jmp 0x43a870
sub esp, 8
push esi
mov esi, dword [esp + 0x10]
push edi
mov edi, dword [esp + 0x18]
mov ecx, dword [esi + 0x124]
test ecx, ecx
je 0x43b14e
mov eax, dword [esi + 0x78]
and eax, 0x4040
cmp eax, 0x4000
je 0x43b159
mov eax, dword [esi + 0x7c]
push ebx
push ebp
test eax, 0x1000
je 0x43aa68
mov bl, byte [edi + 8]
movzx edx, word [esi + 0x148]
cmp bl, 3
jne 0x43a8dd
push edx
push dword [esi + 0x1b0]
lea eax, [ecx + 1]
push dword [esi + 0x13c]
push eax
push edi
push esi
call fcn.00439680
add esp, 0x18
jmp 0x43aa68
test dx, dx
je 0x43a902
test eax, 0x2000000
je 0x43a902
lea eax, [esi + 0x1b4]
push eax
lea eax, [ecx + 1]
push eax
push edi
call fcn.00439060
add esp, 0xc
jmp 0x43aa68
mov edx, dword [edi]
inc ecx
mov dword [esp + 0x10], edx
test bl, bl
jne 0x43aa68
mov al, byte [edi + 9]
cmp al, 8
jae 0x43aa68
movzx eax, al
sub eax, 1
je 0x43aa0e
sub eax, 1
je 0x43a9a8
sub eax, 2
jne 0x43aa5d
lea eax, [edx - 1]
mov ebx, eax
lea ebp, [ecx - 1]
shr ebx, 1
and eax, 1
add ebx, ecx
shl eax, 2
mov ecx, 4
add ebp, edx
sub ecx, eax
mov dword [esp + 0x14], ecx
test edx, edx
je 0x43aa5d
mov esi, edx
mov edi, 4
mov dl, byte [ebx]
lea ebp, [ebp - 1]
shr dl, cl
mov al, dl
shl dl, 4
and al, 0xf
xor al, dl
cmp dword [esp + 0x14], edi
mov byte [ebp + 1], al
lea eax, [ebx - 1]
cmovne eax, ebx
mov ebx, eax
xor eax, eax
cmp dword [esp + 0x14], edi
cmovne eax, edi
mov ecx, eax
mov dword [esp + 0x14], ecx
sub esi, 1
jne 0x43a964
mov esi, dword [esp + 0x1c]
mov edi, dword [esp + 0x20]
mov edx, dword [esp + 0x10]
jmp 0x43aa5d
lea eax, [edx - 1]
mov ebx, 3
mov ebp, eax
and eax, 3
shr ebp, 2
sub ebx, eax
add ebp, ecx
add ebx, ebx
dec ecx
add ecx, edx
test edx, edx
je 0x43aa5d
mov edi, edx
mov esi, ecx
nop dword [eax]
mov dl, byte [ebp]
mov cl, bl
shr dl, cl
and dl, 3
mov al, dl
shl al, 2
or al, dl
shl al, 2
or al, dl
shl al, 2
or al, dl
mov byte [esi], al
cmp ebx, 6
jne 0x43a9f7
xor ebx, ebx
dec ebp
jmp 0x43a9fa
add ebx, 2
dec esi
sub edi, 1
jne 0x43a9d0
mov esi, dword [esp + 0x1c]
mov edi, dword [esp + 0x20]
mov edx, dword [esp + 0x10]
jmp 0x43aa5d
lea eax, [edx - 1]
mov ebx, eax
lea ebp, [edx - 1]
and eax, 7
shr ebx, 3
mov edx, 7
add ebx, ecx
sub edx, eax
add ebp, ecx
mov eax, dword [esp + 0x10]
test eax, eax
je 0x43aa5b
mov edi, eax
mov al, byte [ebx]
mov cl, dl
shr al, cl
and al, 1
neg al
sbb al, al
mov byte [ebp], al
cmp edx, 7
jne 0x43aa4a
xor edx, edx
dec ebx
jmp 0x43aa4b
inc edx
dec ebp
sub edi, 1
jne 0x43aa31
mov edi, dword [esp + 0x20]
mov edx, dword [esp + 0x10]
jmp 0x43aa5d
mov edx, eax
mov byte [edi + 9], 8
mov byte [edi + 0xb], 8
mov dword [edi + 4], edx
mov eax, dword [esi + 0x7c]
and eax, 0x40080
cmp eax, 0x40000
jne 0x43aa95
mov al, byte [edi + 8]
cmp al, 6
je 0x43aa82
cmp al, 4
jne 0x43aa95
mov eax, dword [esi + 0x124]
push 0
inc eax
push eax
push edi
call fcn.00403107
add esp, 0xc
test dword [esi + 0x7c], 0x600000
je 0x43aaeb
mov eax, dword [esi + 0x124]
inc eax
push eax
push edi
push esi
call fcn.0043b3c0
add esp, 0xc
test eax, eax
je 0x43aaeb
mov eax, dword [esi + 0x7c]
and eax, 0x600000
mov byte [esi + 0x248], 1
cmp eax, 0x400000
jne 0x43aad8
push str.png_do_rgb_to_gray_found_nongray_pixel
push esi
call fcn.0040210d
add esp, 8
mov eax, dword [esi + 0x7c]
and eax, 0x600000
cmp eax, 0x200000
je 0x43b164
test dword [esi + 0x7c], 0x4000
je 0x43ab0e
test dword [esi + 0x74], 0x800
jne 0x43ab0e
mov eax, dword [esi + 0x124]
inc eax
push eax
push edi
call fcn.00439ef0
add esp, 8
test byte [esi + 0x7c], 0x80
je 0x43ab26
mov eax, dword [esi + 0x124]
push esi
inc eax
push eax
push edi
call fcn.00437810
add esp, 0xc
mov ecx, dword [esi + 0x7c]
mov eax, ecx
and eax, 0x602000
cmp eax, 0x2000
jne 0x43ab69
test cl, cl
jns 0x43ab4e
cmp word [esi + 0x148], 0
jne 0x43ab69
test byte [esi + 0x14f], 4
jne 0x43ab69
cmp byte [esi + 0x14f], 3
je 0x43ab69
mov eax, dword [esi + 0x124]
push esi
inc eax
push eax
push edi
call fcn.004399c0
add esp, 0xc
mov eax, dword [esi + 0x7c]
and eax, 0x40080
cmp eax, 0x40080
jne 0x43ab96
mov al, byte [edi + 8]
cmp al, 6
je 0x43ab83
cmp al, 4
jne 0x43ab96
mov eax, dword [esi + 0x124]
push 0
inc eax
push eax
push edi
call fcn.00403107
add esp, 0xc
test dword [esi + 0x7c], 0x800000
je 0x43ac7d
mov bl, byte [edi + 8]
test bl, 4
je 0x43ac7d
mov ecx, dword [esi + 0x124]
mov al, byte [edi + 9]
inc ecx
mov edx, dword [edi]
cmp al, 8
jne 0x43ac01
mov ebp, dword [esi + 0x194]
test ebp, ebp
je 0x43ac6f
test bl, 2
mov ebx, 0
setne bl
dec ecx
lea ebx, [ebx*2 + 2]
add ecx, ebx
test edx, edx
je 0x43ac7d
nop word [eax + eax]
movzx eax, byte [ecx]
mov al, byte [eax + ebp]
mov byte [ecx], al
add ecx, ebx
sub edx, 1
jne 0x43abf0
jmp 0x43ac7d
cmp al, 0x10
jne 0x43ac6f
cmp dword [esi + 0x19c], 0
je 0x43ac6f
test bl, 2
mov eax, 0
setne al
lea eax, [eax*4 + 4]
lea ebx, [eax - 2]
mov dword [esp + 0x14], eax
add ebx, ecx
test edx, edx
je 0x43ac7d
mov eax, dword [esi + 0x184]
mov ebp, dword [esp + 0x14]
mov edi, dword [esi + 0x19c]
movzx ecx, al
mov dword [esp + 0x10], ecx
movzx eax, byte [ebx + 1]
shr eax, cl
movzx ecx, byte [ebx]
mov eax, dword [edi + eax*4]
movzx ecx, word [eax + ecx*2]
mov eax, ecx
mov byte [ebx + 1], cl
mov ecx, dword [esp + 0x10]
shr eax, 8
mov byte [ebx], al
add ebx, ebp
sub edx, 1
jne 0x43ac44
mov edi, dword [esp + 0x20]
jmp 0x43ac7d
push str.png_do_encode_alpha:_unexpected_call
push esi
call fcn.0040210d
add esp, 8
mov eax, dword [esi + 0x7c]
test eax, 0x4000000
je 0x43ace0
cmp byte [edi + 9], 0x10
mov ecx, dword [esi + 0x124]
lea edx, [ecx + 1]
jne 0x43ace0
mov ebp, dword [edi + 4]
mov ebx, edx
inc ebp
add ebp, ecx
cmp edx, ebp
jae 0x43acc6
movzx ecx, byte [edx]
lea ebx, [ebx + 1]
movzx eax, byte [edx + 1]
add edx, 2
sub eax, ecx
sub eax, 0xffffff80
imul eax, eax, 0xffff
sar eax, 0x18
add ecx, eax
mov byte [ebx - 1], cl
cmp edx, ebp
jb 0x43aca2
mov al, byte [edi + 0xa]
shl al, 3
mov byte [edi + 0xb], al
movzx eax, byte [edi + 0xa]
imul eax, dword [edi]
mov byte [edi + 9], 8
mov dword [edi + 4], eax
mov eax, dword [esi + 0x7c]
test eax, 0x400
je 0x43ad29
cmp byte [edi + 9], 0x10
mov ebx, dword [esi + 0x124]
lea ecx, [ebx + 1]
jne 0x43ad29
inc ebx
mov edx, ecx
add ebx, dword [edi + 4]
cmp ecx, ebx
jae 0x43ad0f
mov al, byte [ecx]
lea edx, [edx + 1]
add ecx, 2
mov byte [edx - 1], al
cmp ecx, ebx
jb 0x43ad00
mov al, byte [edi + 0xa]
shl al, 3
mov byte [edi + 0xb], al
movzx eax, byte [edi + 0xa]
imul eax, dword [edi]
mov byte [edi + 9], 8
mov dword [edi + 4], eax
mov eax, dword [esi + 0x7c]
test al, 0x40
je 0x43ad54
push dword [esi + 0x208]
mov eax, dword [esi + 0x124]
push dword [esi + 0x204]
inc eax
push eax
push edi
call fcn.0043a110
add esp, 0x10
cmp dword [edi + 4], 0
je 0x43b16f
mov ebx, dword [esi + 0x7c]
test ebx, 0x200
je 0x43ada5
cmp byte [edi + 9], 8
jne 0x43ada5
cmp byte [edi + 8], 3
je 0x43ada5
mov edx, dword [esi + 0x124]
mov ecx, dword [edi + 4]
inc edx
add edx, ecx
add ecx, edx
cmp ecx, edx
jbe 0x43ad90
nop dword [eax]
mov al, byte [edx - 1]
dec edx
mov byte [ecx - 1], al
add ecx, 0xfffffffe
mov byte [ecx], al
cmp ecx, edx
ja 0x43ad80
mov eax, dword [edi + 4]
add eax, eax
mov byte [edi + 9], 0x10
mov dword [edi + 4], eax
mov al, byte [edi + 0xa]
shl al, 4
mov byte [edi + 0xb], al
test ebx, 0x4000
je 0x43adc7
test dword [esi + 0x74], 0x800
je 0x43adc7
mov eax, dword [esi + 0x124]
inc eax
push eax
push edi
call fcn.00439ef0
add esp, 8
test byte [esi + 0x7c], 0x20
je 0x43adde
mov eax, dword [esi + 0x124]
inc eax
push eax
push edi
call fcn.004035df
add esp, 8
mov ebx, dword [esi + 0x7c]
test ebx, 0x80000
je 0x43aea4
mov eax, dword [esi + 0x124]
mov cl, byte [edi + 8]
inc eax
mov edx, dword [edi]
cmp cl, 6
jne 0x43ae50
mov ecx, dword [edi + 4]
add ecx, eax
cmp byte [edi + 9], 8
mov ebx, ecx
jne 0x43ae2a
test edx, edx
je 0x43aea1
mov al, byte [ecx - 1]
sub ecx, 4
not al
mov byte [ebx - 1], al
mov ebx, ecx
sub edx, 1
jne 0x43ae13
jmp 0x43aea1
test edx, edx
je 0x43aea1
movzx eax, byte [ecx - 1]
not al
mov byte [ebx - 1], al
movzx eax, byte [ecx - 2]
sub ecx, 8
not al
mov byte [ebx - 2], al
mov ebx, ecx
sub edx, 1
jne 0x43ae32
jmp 0x43aea1
cmp cl, 4
jne 0x43aea4
mov ecx, dword [edi + 4]
add ecx, eax
cmp byte [edi + 9], 8
mov ebx, ecx
jne 0x43ae81
test edx, edx
je 0x43aea1
movzx eax, byte [ecx - 1]
lea ecx, [ecx - 2]
lea ebx, [ebx - 2]
not al
mov byte [ebx + 1], al
movzx eax, byte [ecx]
mov byte [ebx], al
sub edx, 1
jne 0x43ae66
jmp 0x43aea1
test edx, edx
je 0x43aea1
movzx eax, byte [ecx - 1]
not al
mov byte [ebx - 1], al
movzx eax, byte [ecx - 2]
sub ecx, 4
not al
mov byte [ebx - 2], al
mov ebx, ecx
sub edx, 1
jne 0x43ae85
mov ebx, dword [esi + 0x7c]
test bl, 8
je 0x43aec1
lea eax, [esi + 0x1a9]
push eax
mov eax, dword [esi + 0x124]
inc eax
push eax
push edi
call fcn.0043bc80
add esp, 0xc
test byte [esi + 0x7c], 4
je 0x43b03e
mov ecx, dword [esi + 0x124]
mov al, byte [edi + 9]
inc ecx
cmp al, 8
jae 0x43b03e
mov ebp, dword [edi]
movzx eax, al
mov dword [esp + 0x10], ebp
sub eax, 1
je 0x43afc1
sub eax, 1
je 0x43af5f
sub eax, 2
jne 0x43b027
lea eax, [ebp - 1]
mov ebx, 1
mov edx, eax
and eax, 1
shr edx, 1
sub ebx, eax
add edx, ecx
shl ebx, 2
dec ecx
add ecx, ebp
mov dword [esp + 0x14], ecx
test ebp, ebp
je 0x43b027
mov edi, ebp
mov esi, ecx
mov ebp, 4
nop dword [eax + eax]
mov al, byte [edx]
lea esi, [esi - 1]
mov cl, bl
shr al, cl
and al, 0xf
cmp ebx, ebp
mov byte [esi + 1], al
lea eax, [edx - 1]
cmovne eax, edx
mov edx, eax
xor eax, eax
cmp ebx, ebp
cmovne eax, ebp
mov ebx, eax
sub edi, 1
jne 0x43af30
mov ebp, dword [esp + 0x10]
jmp 0x43b01f
lea eax, [ebp - 1]
mov ebx, eax
and eax, 3
shr ebx, 2
add ebx, ecx
dec ecx
add ecx, ebp
mov dword [esp + 0x10], ecx
mov ecx, 3
sub ecx, eax
add ecx, ecx
mov dword [esp + 0x14], ecx
test ebp, ebp
je 0x43b027
mov edi, dword [esp + 0x10]
mov esi, ebp
nop
mov al, byte [ebx]
lea edi, [edi - 1]
shr al, cl
mov edx, ecx
and al, 3
cmp dword [esp + 0x14], 6
mov byte [edi + 1], al
lea eax, [ebx - 1]
cmovne eax, ebx
xor ecx, ecx
cmp edx, 6
mov ebx, eax
lea eax, [edx + 2]
cmovne ecx, eax
mov dword [esp + 0x14], ecx
sub esi, 1
jne 0x43af90
jmp 0x43b01f
lea eax, [ebp - 1]
mov ebx, eax
and eax, 7
shr ebx, 3
add ebx, ecx
dec ecx
add ecx, ebp
mov dword [esp + 0x10], ecx
mov ecx, 7
sub ecx, eax
mov dword [esp + 0x14], ecx
test ebp, ebp
je 0x43b027
mov edi, dword [esp + 0x10]
mov esi, ebp
nop word [eax + eax]
mov al, byte [ebx]
lea edi, [edi - 1]
shr al, cl
mov edx, ecx
and al, 1
cmp dword [esp + 0x14], 7
mov byte [edi + 1], al
lea eax, [ebx - 1]
cmovne eax, ebx
xor ecx, ecx
cmp edx, 7
mov ebx, eax
lea eax, [edx + 1]
cmovne ecx, eax
mov dword [esp + 0x14], ecx
sub esi, 1
jne 0x43aff0
mov esi, dword [esp + 0x1c]
mov edi, dword [esp + 0x20]
mov al, byte [edi + 0xa]
shl al, 3
mov byte [edi + 0xb], al
movzx eax, byte [edi + 0xa]
imul eax, ebp
mov byte [edi + 9], 8
mov dword [edi + 4], eax
cmp byte [edi + 8], 3
jne 0x43b057
cmp dword [esi + 0x144], 0
jl 0x43b057
push edi
push esi
call fcn.004019bf
add esp, 8
test byte [esi + 0x7c], 1
je 0x43b06e
mov eax, dword [esi + 0x124]
inc eax
push eax
push edi
call fcn.004054d9
add esp, 8
test dword [esi + 0x7c], 0x10000
je 0x43b088
mov eax, dword [esi + 0x124]
inc eax
push eax
push edi
call fcn.00401c30
add esp, 8
test dword [esi + 0x7c], 0x8000
je 0x43b0ad
push dword [esi + 0x78]
movzx eax, word [esi + 0x15a]
push eax
mov eax, dword [esi + 0x124]
inc eax
push eax
push edi
call fcn.0043a2f0
add esp, 0x10
test dword [esi + 0x7c], 0x20000
je 0x43b0c7
mov eax, dword [esi + 0x124]
inc eax
push eax
push edi
call fcn.0043a720
add esp, 8
test byte [esi + 0x7c], 0x10
je 0x43b0de
mov eax, dword [esi + 0x124]
inc eax
push eax
push edi
call fcn.00405ddf
add esp, 8
test dword [esi + 0x7c], 0x100000
je 0x43b146
mov ecx, dword [esi + 0x64]
test ecx, ecx
je 0x43b0fd
mov eax, dword [esi + 0x124]
inc eax
push eax
push edi
push esi
call ecx
add esp, 0xc
mov al, byte [esi + 0x70]
test al, al
je 0x43b107
mov byte [edi + 9], al
mov al, byte [esi + 0x71]
test al, al
je 0x43b111
mov byte [edi + 0xa], al
movzx eax, byte [edi + 9]
movzx ecx, byte [edi + 0xa]
mov edx, dword [edi]
imul ecx, eax
mov byte [edi + 0xb], cl
movzx eax, cl
cmp cl, 8
jb 0x43b13a
shr eax, 3
imul eax, edx
pop ebp
pop ebx
mov dword [edi + 4], eax
pop edi
pop esi
add esp, 8
ret
imul eax, edx
add eax, 7
shr eax, 3
mov dword [edi + 4], eax
pop ebp
pop ebx
pop edi
pop esi
add esp, 8
ret
push str.NULL_row_buffer
push esi
call fcn.004057c7
push str.Uninitialized_row
push esi
call fcn.004057c7
push str.png_do_rgb_to_gray_found_nongray_pixel
push esi
call fcn.004057c7
push str.png_do_quantize_returned_rowbytes0
push esi
call fcn.004057c7
int3