Function at 0x433372
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
mov ecx, edx
mov eax, edx
xor eax, dword [ebp + 0xc]
shr ecx, 5
inc ecx
cmp edx, ecx
jb 0x4333a6
push esi
push edi
mov esi, dword [ebp + 8]
movzx esi, byte [esi + edx - 1]
mov edi, eax
shl edi, 5
add esi, edi
mov edi, eax
shr edi, 2
add esi, edi
sub edx, ecx
xor eax, esi
cmp edx, ecx
jae 0x433386
pop edi
pop esi
pop ebp
ret

Function at 0x43a65e
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x220
mov eax, dword [0x499520]
xor eax, ebp
mov dword [ebp - 8], eax
mov eax, dword [ebp + 8]
and dword [ebp - 0x214], 0
push ebx
push esi
mov dword [ebp - 0x210], eax
mov esi, 0x200
lea eax, [ebp - 0x20c]
push edi
mov edi, ecx
mov dword [ebp - 0x21c], eax
mov dword [ebp - 0x218], esi
jmp 0x43a6a9
cmp esi, 0x3fffffff
ja 0x43a6a9
add esi, esi
mov edx, esi
lea ebx, [ebp - 0x21c]
call fcn.0042dc3f
push edi
push esi
push 1
push eax
call fcn.0044f81d
add dword [ebp - 0x214], eax
add esp, 0x10
cmp eax, esi
jae 0x43a69f
mov edi, ebx
call fcn.0042dcfb
mov ecx, dword [ebp - 8]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0044c4ce
leave
ret

Function at 0x43a6e3
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x220
mov eax, dword [0x499520]
xor eax, ebp
mov dword [ebp - 8], eax
mov eax, dword [ebp + 8]
and dword [ebp - 0x214], 0
push ebx
push esi
mov dword [ebp - 0x210], eax
lea eax, [ebp - 0x20c]
push edi
lea ebx, [ebp - 0x21c]
mov edi, ecx
mov esi, edx
mov dword [ebp - 0x21c], eax
mov dword [ebp - 0x218], 0x200
call fcn.0042dc3f
push edi
push esi
push 1
push eax
call fcn.0044f81d
mov esi, eax
add dword [ebp - 0x214], esi
add esp, 0x10
mov edi, ebx
call fcn.0042dcfb
mov ecx, dword [ebp - 8]
xor eax, eax
cmp eax, esi
pop edi
sbb eax, eax
pop esi
xor ecx, ebp
neg eax
pop ebx
call fcn.0044c4ce
leave
ret

Function at 0x43aa17
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xc
push ebx
push esi
push edi
mov esi, eax
mov eax, dword [esi + 0x10]
mov edi, dword [esi + 8]
sub edi, dword [eax]
mov dword [esp + 0xc], 1
sub edi, 8
sar edi, 3
sub edi, dword [ebp + 0xc]
je 0x43aade
mov edx, dword [ebp + 0xc]
dec edi
mov dword [esp + 0x10], edi
call fcn.0042ea42
cmp eax, 3
jne 0x43aa90
cmp dword [esp + 0xc], 0
je 0x43aac6
mov edx, dword [ebp + 0xc]
xor edi, edi
mov eax, esi
call fcn.0042eb48
push ecx
push ecx
fstp qword [esp]
push str._.14g
push dword [ebp + 8]
call fcn.0044ce5d
mov edi, dword [esp + 0x20]
add esp, 0x10
test eax, eax
jle 0x43aac6
mov dword [esp + 0xc], 1
jmp 0x43aacb
push dword [ebp + 0xc]
lea ebx, [esp + 0x18]
push esi
call fcn.0042db44
cmp dword [esp + 0x14], 0
pop ecx
pop ecx
je 0x43aac6
push dword [ebp + 8]
xor ebx, ebx
push dword [esp + 0x18]
inc ebx
push ebx
push eax
call fcn.0044e44e
add esp, 0x10
cmp eax, dword [esp + 0x14]
jne 0x43aac6
mov dword [esp + 0xc], ebx
jmp 0x43aacb
and dword [esp + 0xc], 0
inc dword [ebp + 0xc]
test edi, edi
jne 0x43aa44
xor eax, eax
cmp dword [esp + 0xc], eax
je 0x43aae3
xor eax, eax
inc eax
jmp 0x43aaee
push eax
push eax
mov eax, esi
call fcn.0042d8f8
pop ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret