Function at 0x43a5c5
Capabilities:
Encode data using xor

Disassembly:
mov eax, 0x49eb03
call fcn.00498a28
sub esp, 0x9c
push ebx
mov ebx, ecx
mov byte [ebp - 0xd], dl
push esi
push edi
mov dword [ebp - 0x30], ebx
xor ecx, ecx
mov dword [ebp - 0x5c], ecx
mov edi, ebx
xor eax, eax
push 0xf
pop edx
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov dword [ebx + 0x10], ecx
mov dword [ebx + 0x14], edx
mov byte [ebx], cl
xor eax, eax
lea edi, [ebp - 0x78]
stosd dword es:[edi], eax
xor esi, esi
inc esi
mov dword [ebp - 0x5c], esi
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov dword [ebp - 0x68], ecx
mov dword [ebp - 0x64], edx
mov byte [ebp - 0x78], cl
mov dword [ebp - 4], esi
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x34], ecx
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 2
call fcn.00423e15
push eax
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 3
call fcn.00421baa
lea ecx, [ebp - 0x28]
call fcn.004112d6
xor eax, eax
lea edi, [ebp - 0xa8]
stosd dword es:[edi], eax
xor ecx, ecx
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x94], 7
mov word [ebp - 0xa8], cx
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 4
push ecx
push eax
push eax
call dword [sym.imp.KERNEL32.dll_K32EnumDeviceDrivers]
test eax, eax
je 0x43a917
cmp dword [ebp - 0x60], 0
jbe 0x43a917
xor edx, edx
push edx
call fcn.004796f7
mov ebx, edx
mov dword [ebp - 0x2c], eax
pop ecx
mov dword [ebp - 0x20], 6
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], ebx
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 5
call fcn.00421b7e
push str.time
lea ecx, [ebp - 0x58]
mov esi, eax
call fcn.00403061
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 6
push eax
lea eax, [ebp - 0x28]
mov ecx, esi
push eax
call fcn.0041136d
mov ecx, dword [eax]
lea eax, [ebp - 0x20]
add ecx, 0x28
push eax
call fcn.00411012
lea ecx, [ebp - 0x58]
call fcn.00402fc0
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 4
call fcn.00410f7a
call fcn.0043a943
push eax
lea ecx, [ebp - 0x20]
call fcn.00421b09
mov edi, eax
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 7
call fcn.00421b7e
push 0x4bad80
lea ecx, [ebp - 0x58]
mov esi, eax
call fcn.00403061
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 8
push eax
lea eax, [ebp - 0x28]
mov ecx, esi
push eax
call fcn.0041136d
push edi
mov ecx, dword [eax]
add ecx, 0x28
call fcn.00411012
lea ecx, [ebp - 0x58]
call fcn.00402fc0
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 4
call fcn.00410f7a
call fcn.0043a943
push 6
pop edi
mov dword [ebp - 0x20], edi
mov ecx, dword [eax + 0x30]
mov eax, dword [eax + 0x34]
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x14], eax
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 9
call fcn.00421b7e
push 0x4bad84
lea ecx, [ebp - 0x58]
mov esi, eax
call fcn.00403061
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0xa
push eax
lea eax, [ebp - 0x28]
mov ecx, esi
push eax
call fcn.0041136d
mov ecx, dword [eax]
lea eax, [ebp - 0x20]
add ecx, 0x28
push eax
call fcn.00411012
lea ecx, [ebp - 0x58]
call fcn.00402fc0
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 4
call fcn.00410f7a
call fcn.0043a943
mov dword [ebp - 0x20], edi
mov ecx, dword [eax + 0x38]
mov eax, dword [eax + 0x3c]
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x14], eax
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0xb
call fcn.00421b7e
push str.disk
lea ecx, [ebp - 0x58]
mov esi, eax
call fcn.00403061
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0xc
push eax
lea eax, [ebp - 0x28]
mov ecx, esi
push eax
call fcn.0041136d
mov ecx, dword [eax]
lea eax, [ebp - 0x20]
add ecx, 0x28
push eax
call fcn.00411012
lea ecx, [ebp - 0x58]
call fcn.00402fc0
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 4
call fcn.00410f7a
push ecx
lea eax, [ebp - 0x90]
push eax
lea ecx, [ebp - 0x40]
call fcn.00421d4b
mov cl, byte [ebp - 0xd]
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 0xd
push 0xf
pop edi
cmp dword [ebp - 0x64], edi
mov dword [ebp - 0x68], 1
cmova eax, dword [ebp - 0x78]
xor edx, edx
mov byte [eax], cl
mov byte [eax + 1], dl
mov eax, dword [ebp - 0x2c]
mov ecx, eax
shrd ecx, ebx, 8
xor cl, al
mov byte [ebp - 0x2c], cl
push dword [ebp - 0x2c]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0x78]
call fcn.0040339f
cmp dword [ebp - 0x80], 0
jbe 0x43a89a
xor ebx, ebx
cmp dword [ebp - 0x7c], edi
lea eax, [ebp - 0x90]
lea ecx, [ebp - 0x78]
cmova eax, dword [ebp - 0x90]
mov al, byte [eax + ebx]
xor al, byte [ebp - 0x24]
xor al, byte [ebp - 0xd]
movzx eax, al
push eax
call fcn.0040339f
inc ebx
cmp ebx, dword [ebp - 0x80]
jb 0x43a86f
lea edx, [ebp - 0x78]
lea ecx, [ebp - 0x58]
call fcn.004151f7
mov ebx, dword [ebp - 0x30]
mov ecx, ebx
push eax
call fcn.00414d0b
lea ecx, [ebp - 0x58]
call fcn.00402fc0
mov eax, ebx
cmp dword [ebx + 0x14], edi
jbe 0x43a8c1
mov eax, dword [ebx]
mov ecx, dword [ebx + 0x10]
lea esi, [ecx + eax]
mov eax, ebx
jbe 0x43a8cd
mov eax, dword [ebx]
lea edx, [ecx + eax]
mov eax, ebx
jbe 0x43a8de
mov eax, dword [ebx]
jmp 0x43a8de
cmp byte [eax], 0x20
jl 0x43a8e2
inc eax
cmp eax, edx
jne 0x43a8d8
cmp eax, edx
je 0x43a8ff
lea ecx, [eax + 1]
cmp ecx, edx
je 0x43a8ff
mov bl, byte [ecx]
cmp bl, 0x20
jl 0x43a8f7
mov byte [eax], bl
inc eax
inc ecx
cmp ecx, edx
jne 0x43a8ed
mov ebx, dword [ebp - 0x30]
push esi
push eax
lea eax, [ebp - 0x24]
mov ecx, ebx
push eax
call fcn.0040e1ff
lea ecx, [ebp - 0x90]
call fcn.00402fc0
lea ecx, [ebp - 0xa8]
call fcn.00402f3d
lea ecx, [ebp - 0x40]
call fcn.00410f7a
lea ecx, [ebp - 0x78]
call fcn.00402fc0
mov ecx, dword [ebp - 0xc]
mov eax, ebx
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret