Function at 0x43f980
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x80
mov dword [esp + 0x1c], ecx
mov eax, dword [ebp + 8]
mov dword [eax + 8], 0
mov dword [eax + 4], 0
mov dword [eax], 0
mov dword [esp + 0x44], 0
mov dword [esp + 0x30], 0x100000
mov dword [esp + 0x10], 0
mov dword [esp + 4], 0xc0c7c6c5
mov word [esp + 8], 0
mov eax, 0x1e0e2d1
mov ecx, 0xaa1f1d2e
nop
nop
nop
nop
nop
movzx esi, byte [esp + eax - 0x1e0e2cd]
mov edi, ecx
and edi, 0xaa1f0c21
mov edx, eax
and edx, 0x1c0029e
or edx, edi
xor edx, esi
mov edi, edx
xor edi, 0xfe3fec61
mov esi, edx
xor esi, 0x535b8274
and esi, edi
mov edi, esi
and edi, 0xfd
mov ebx, esi
and ebx, 2
or esi, 2
imul esi, ebx
xor ebx, 2
imul ebx, edi
xor edx, 0x8b
add edx, esi
add edx, ebx
inc dl
mov byte [esp + eax - 0x1e0e2cd], dl
inc eax
dec ecx
cmp eax, 0x1e0e2d7
jne 0x43f9e0
mov eax, dword [esp + 4]
mov ecx, dword [0x452164]
test ecx, ecx
je 0x43fa9e
xor edx, edx
mov esi, dword [0x452168]
nop
nop
nop
nop
nop
nop
nop
cmp dword [esi + edx*8], 0xf3285e74
je 0x43fa70
inc edx
cmp ecx, edx
jne 0x43fa60
jmp 0x43fa9e
mov ecx, dword [esi + edx*8 + 4]
cmp ecx, eax
je 0x43fa9e
lea eax, [esp + 0x30]
lea edx, [esp + 0x10]
push 4
push 0x3000
push eax
push 0
push edx
push 0xffffffffffffffff
push 6
push dword [0x45216c]
push ecx
call fcn.00442160
add esp, 0x24
test eax, eax
mov esi, dword [esp + 0x1c]
js 0x4401ca
mov eax, dword [esi + 4]
test eax, eax
jne 0x43fb24
push 0xf8eb88df
push dword [0x452158]
call fcn.00444690
add esp, 8
test eax, eax
je 0x43faf2
mov ecx, dword [esi]
test ecx, ecx
je 0x43fb21
mov dword [esp + 4], 0
lea edx, [esp + 4]
push edx
push ecx
call eax
test eax, eax
je 0x43fafd
cmp dword [esp + 4], 0
je 0x43fafd
mov dword [esi + 4], 3
jmp 0x43fb21
mov dword [esi + 4], 1
xor edi, edi
jmp 0x43fb3d
lea eax, [esp + 0x50]
push eax
call fcn.00444eb0
add esp, 4
test al, al
je 0x43fb21
mov eax, dword [esp + 0x50]
mov ecx, 2
cmp eax, 3
je 0x43fb1e
mov ecx, eax
mov dword [esi + 4], ecx
mov eax, dword [esi + 4]
mov edi, 0x7fff
cmp eax, 2
je 0x43fb33
mov edi, 0
mov dword [esp + 0x3c], 0xfffeffff
je 0x43fb45
mov dword [esp + 0x3c], SysReAllocString
mov dword [esp + 0x54], 0
mov dword [esp + 0x50], 0
mov dword [esp + 0x4c], 0
mov dword [esp + 0x48], 0
mov dword [esp + 0x60], 0
mov dword [esp + 0x5c], 0
mov dword [esp + 0x14], 0
mov edx, 0x10000
mov dword [esp], 0
mov dword [esp + 0x18], 0
xor ebx, ebx
mov dword [esp + 0x34], edi
jmp 0x43fbbf
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x18], ebx
mov edx, dword [esp + 0x48]
add edx, dword [esp + 0x50]
mov ebx, dword [esp + 0x4c]
adc ebx, dword [esp + 0x54]
cmp edx, dword [esp + 0x3c]
mov eax, ebx
sbb eax, edi
jae 0x4400ec
mov dword [esp + 0x40], edx
mov ecx, esi
lea eax, [esp + 0x5c]
push eax
lea eax, [esp + 0x64]
push eax
lea eax, [esp + 0x50]
push eax
lea eax, [esp + 0x5c]
push eax
push ebx
push edx
call fcn.0043f4f0
mov edx, dword [esp + 0x40]
cmp eax, 0xbfffffff
ja 0x4400ec
mov dword [esp + 0x28], ebx
test eax, eax
js 0x43fba1
cmp dword [esp + 0x60], 0x1000
jne 0x43fba1
test byte [esp + 0x5c], 0x66
je 0x43fba1
mov eax, dword [esp + 0x48]
mov dword [esp + 0x2c], eax
cmp dword [esp + 0x30], eax
mov ecx, dword [esp + 0x4c]
mov eax, 0
mov dword [esp + 0x24], ecx
sbb eax, ecx
mov ebx, dword [esp + 0x28]
jae 0x43fe12
mov dword [esp + 4], 0xc0c7c6c5
mov word [esp + 8], 0
mov eax, 0x1e0e2d1
mov ecx, 0xaa1f1d2e
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx esi, byte [esp + eax - 0x1e0e2cd]
mov ebx, ecx
and ebx, 0xaa1f0c21
mov edx, eax
and edx, 0x1c0029e
or edx, ebx
xor edx, esi
mov ebx, edx
xor ebx, 0xfe3fec61
mov esi, edx
xor esi, 0x535b8274
and esi, ebx
mov ebx, esi
and ebx, 0xfd
mov edi, esi
and edi, 2
or esi, 2
imul esi, edi
xor edi, 2
imul edi, ebx
xor edx, 0x8b
add edx, esi
add edx, edi
inc dl
mov byte [esp + eax - 0x1e0e2cd], dl
inc eax
dec ecx
cmp eax, 0x1e0e2d7
jne 0x43fc50
mov eax, dword [0x452164]
test eax, eax
je 0x43fd0a
mov ecx, dword [esp + 4]
xor edx, edx
mov esi, dword [0x452168]
nop
nop
nop
nop
nop
nop
nop
nop
cmp dword [esi + edx*8], 0x731cdbf3
je 0x43fce0
inc edx
cmp eax, edx
jne 0x43fcd0
jmp 0x43fd0a
mov eax, dword [esi + edx*8 + 4]
cmp eax, ecx
je 0x43fd0a
push 0x8000
lea ecx, [esp + 0x48]
push ecx
lea ecx, [esp + 0x18]
push ecx
push 0xffffffffffffffff
push 4
push dword [0x45216c]
push eax
call fcn.00442160
add esp, 0x1c
mov dword [esp + 0x44], 0
mov dword [esp + 0x10], 0
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x30], eax
mov dword [esp + 4], 0xc0c7c6c5
mov word [esp + 8], 0
mov eax, 0x1e0e2d1
mov ecx, 0xaa1f1d2e
nop
nop
nop
nop
nop
movzx esi, byte [esp + eax - 0x1e0e2cd]
mov edi, ecx
and edi, 0xaa1f0c21
mov edx, eax
and edx, 0x1c0029e
or edx, edi
xor edx, esi
mov edi, edx
xor edi, 0xfe3fec61
mov esi, edx
xor esi, 0x535b8274
and esi, edi
mov ebx, esi
and ebx, 0xfd
mov edi, esi
and edi, 2
or esi, 2
imul esi, edi
xor edi, 2
imul edi, ebx
xor edx, 0x8b
add edx, esi
add edx, edi
inc dl
mov byte [esp + eax - 0x1e0e2cd], dl
inc eax
dec ecx
cmp eax, 0x1e0e2d7
jne 0x43fd40
mov eax, dword [esp + 4]
mov ecx, dword [0x452164]
test ecx, ecx
mov edi, dword [esp + 0x34]
je 0x43fdfe
xor edx, edx
mov esi, dword [0x452168]
nop
nop
nop
cmp dword [esi + edx*8], 0xf3285e74
je 0x43fdd0
inc edx
cmp ecx, edx
jne 0x43fdc0
jmp 0x43fdfe
mov ecx, dword [esi + edx*8 + 4]
cmp ecx, eax
je 0x43fdfe
push 4
push 0x3000
lea eax, [esp + 0x38]
push eax
push 0
lea eax, [esp + 0x20]
push eax
push 0xffffffffffffffff
push 6
push dword [0x45216c]
push ecx
call fcn.00442160
add esp, 0x24
test eax, eax
mov esi, dword [esp + 0x1c]
mov edx, dword [esp + 0x40]
mov ebx, dword [esp + 0x28]
js 0x4400ec
mov ecx, esi
lea eax, [esp + 0x70]
push eax
push dword [esp + 0x28]
push dword [esp + 0x34]
push dword [esp + 0x1c]
push ebx
push edx
call fcn.0043f7c0
test eax, eax
jns 0x43fe3b
cmp eax, 0x8000000d
jne 0x43fb99
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 0x74]
mov edx, dword [ebp + 0x10]
cmp eax, edx
sbb ecx, 0
mov ebx, dword [esp + 0x18]
jb 0x43fb9d
push dword [ebp + 0x14]
push edx
push dword [ebp + 0xc]
push eax
push dword [esp + 0x20]
lea eax, [esp + 0x18]
push eax
call fcn.004401e0
add esp, 0x18
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp + 0x24], ecx
cmp eax, ecx
je 0x4400c5
mov dword [esp + 0x64], eax
mov esi, eax
mov ecx, dword [esp]
mov edx, dword [esp + 0x28]
jmp 0x43fee9
push dword [esp]
call fcn.0040cb20
add esp, 4
mov edi, dword [esp + 0x58]
mov eax, dword [esp + 0x14]
lea eax, [edi + eax*8]
mov dword [esp + 0x14], eax
mov ebx, edi
mov eax, dword [esp + 0x6c]
add ebx, eax
mov ecx, edi
mov edx, dword [esp + 0x28]
mov edi, dword [esp + 0x2c]
mov dword [ecx + eax], edi
mov edi, eax
mov eax, dword [esp + 0x18]
mov dword [ecx + edi + 4], eax
add ebx, 8
add esi, 4
cmp esi, dword [esp + 0x24]
je 0x440083
mov edi, dword [esi]
sub edi, dword [esp + 0x10]
mov eax, edi
sar eax, 0x1f
add edi, dword [esp + 0x40]
mov dword [esp + 0x2c], edi
adc eax, edx
mov dword [esp + 0x18], eax
mov eax, ebx
sub eax, ecx
cmp ebx, dword [esp + 0x14]
jne 0x43fec8
mov dword [esp], ecx
mov dword [esp + 0x6c], eax
mov ecx, eax
sar ecx, 3
lea edx, [ecx + 1]
mov eax, ecx
shr eax, 1
add eax, ecx
cmp eax, edx
ja 0x43ff27
mov eax, edx
mov edi, eax
and edi, 8
mov ecx, eax
or ecx, 8
imul ecx, edi
xor edi, 8
mov dword [esp + 0x14], eax
and eax, 0xfffffff7
imul eax, edi
add ecx, eax
push ecx
call fcn.0040cb10
add esp, 4
mov edi, eax
mov edx, dword [esp]
test edx, edx
je 0x43feaf
mov ecx, ebx
not ecx
and ecx, edx
mov eax, edx
not eax
and eax, ebx
mov dword [esp + 0x38], eax
mov ebx, eax
sub ebx, ecx
cmp edi, edx
mov dword [esp + 0x58], edi
jbe 0x440032
lea eax, [edx + ebx]
cmp eax, edi
jbe 0x440032
test ebx, ebx
je 0x43fea0
mov dword [esp + 0x68], ecx
mov eax, dword [esp]
add eax, ebx
dec eax
mov ecx, dword [esp + 0x58]
add ecx, ebx
dec ecx
mov edx, ebx
and edx, 7
je 0x43ffc6
mov dword [esp + 0x20], ebx
neg edx
xor edi, edi
nop
nop
nop
nop
movzx ebx, byte [eax + edi]
mov byte [ecx + edi], bl
dec edi
cmp edx, edi
jne 0x43ffb0
add eax, edi
add ecx, edi
mov ebx, dword [esp + 0x20]
add ebx, edi
mov edx, dword [esp + 0x68]
sub edx, dword [esp + 0x38]
cmp edx, 0xfffffff8
ja 0x43fea0
neg ebx
xor edi, edi
nop
nop
nop
nop
nop
movzx edx, byte [eax + edi]
mov byte [ecx + edi], dl
movzx edx, byte [eax + edi - 1]
mov byte [ecx + edi - 1], dl
movzx edx, byte [eax + edi - 2]
mov byte [ecx + edi - 2], dl
movzx edx, byte [eax + edi - 3]
mov byte [ecx + edi - 3], dl
movzx edx, byte [eax + edi - 4]
mov byte [ecx + edi - 4], dl
movzx edx, byte [eax + edi - 5]
mov byte [ecx + edi - 5], dl
movzx edx, byte [eax + edi - 6]
mov byte [ecx + edi - 6], dl
movzx edx, byte [eax + edi - 7]
mov byte [ecx + edi - 7], dl
add edi, 0xfffffff8
cmp ebx, edi
jne 0x43ffe0
jmp 0x43fea0
mov ecx, ebx
shr ecx, 2
mov eax, edx
mov dword [esp + 0x20], ebx
mov ebx, edi
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
mov eax, dword [esp + 0x20]
and eax, 0xfffffffc
lea edi, [ebx + eax]
mov ebx, dword [esp + 0x20]
add eax, edx
mov ecx, ebx
shr ecx, 1
and ecx, 1
mov edx, eax
mov dword [esp + 0x38], edi
xchg esi, edx
rep movsw word es:[edi], word [esi]
xchg esi, edx
test bl, 1
je 0x43fea0
and ebx, 2
movzx eax, byte [eax + ebx]
mov ecx, dword [esp + 0x38]
mov byte [ecx + ebx], al
jmp 0x43fea0
mov eax, dword [ebp + 8]
mov dword [eax + 4], ebx
mov dword [eax], ecx
mov edx, dword [esp + 0x14]
mov dword [eax + 8], edx
mov eax, dword [esp + 0x64]
test eax, eax
je 0x4400dc
mov dword [esp], ecx
cmp eax, dword [esp + 0x24]
mov esi, dword [esp + 0x1c]
mov edi, dword [esp + 0x34]
je 0x43fb9d
push eax
call fcn.0040cb20
add esp, 4
mov dword [esp + 4], 0
jmp 0x43fb9d
mov eax, dword [ebp + 8]
mov dword [eax + 4], ebx
mov ecx, dword [esp]
mov dword [eax], ecx
mov ecx, dword [esp + 0x14]
mov dword [eax + 8], ecx
jmp 0x43fb9d
mov dword [esp], ecx
mov esi, dword [esp + 0x1c]
mov edi, dword [esp + 0x34]
jmp 0x43fb9d
mov dword [esp + 4], 0xc0c7c6c5
mov word [esp + 8], 0
mov eax, 0x1e0e2d1
mov ecx, 0xaa1f1d2e
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx esi, byte [esp + eax - 0x1e0e2cd]
mov edi, ecx
and edi, 0xaa1f0c21
mov edx, eax
and edx, 0x1c0029e
or edx, edi
xor edx, esi
mov edi, edx
xor edi, 0xfe3fec61
mov esi, edx
xor esi, 0x535b8274
and esi, edi
mov edi, esi
and edi, 0xfd
mov ebx, esi
and ebx, 2
or esi, 2
imul esi, ebx
xor ebx, 2
imul ebx, edi
xor edx, 0x8b
add edx, esi
add edx, ebx
inc dl
mov byte [esp + eax - 0x1e0e2cd], dl
inc eax
dec ecx
cmp eax, 0x1e0e2d7
jne 0x440110
mov eax, dword [0x452164]
test eax, eax
je 0x4401ca
mov ecx, dword [esp + 4]
xor edx, edx
mov esi, dword [0x452168]
nop
nop
nop
nop
nop
nop
nop
nop
cmp dword [esi + edx*8], 0x731cdbf3
je 0x4401a0
inc edx
cmp eax, edx
jne 0x440190
jmp 0x4401ca
mov eax, dword [esi + edx*8 + 4]
cmp eax, ecx
je 0x4401ca
push 0x8000
lea ecx, [esp + 0x48]
push ecx
lea ecx, [esp + 0x18]
push ecx
push 0xffffffffffffffff
push 4
push dword [0x45216c]
push eax
call fcn.00442160
add esp, 0x1c
mov eax, dword [ebp + 8]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret 0x10