Function at 0x43bfb0
Capabilities:
Allocate or change rwx memory
Encode data using xor
Execute shellcode via indirect call

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0x2c
mov eax, dword [esp + 0x40]
mov edi, eax
mov dword [esp + 0x14], eax
mov eax, dword [ecx + 0x814]
mov eax, dword [eax + 8]
cmp byte [eax + 6], 0
je 0x43c100
cmp edi, 0xffffffff
mov esi, ecx
je 0x43c1d8
mov eax, dword [ecx + 4]
mov ebx, dword [ecx + 8]
add eax, 1
mov dword [ecx + 4], eax
xor eax, ebx
cmp eax, 0xffffff
ja 0x43c02c
mov ecx, dword [esi]
shr ebx, 0x18
mov eax, dword [ecx]
mov dword [esp], ebx
mov eax, dword [eax]
call eax
mov ebx, dword [esi + 8]
mov edx, dword [esi + 4]
xor eax, eax
sub esp, 4
shl ebx, 8
shl edx, 8
or bl, 0xff
test edx, edx
sete al
mov dword [esi + 8], ebx
add eax, edx
mov dword [esi + 4], eax
xor eax, ebx
cmp eax, 0xffffff
jbe 0x43bff4
lea eax, [esi + 0xc]
mov ebp, 7
mov dword [esp + 0x10], eax
lea eax, [esi + 0x17820]
mov dword [esp + 0x18], eax
lea eax, [esi + 0x1781c]
mov dword [esp + 0x1c], eax
lea esi, [esi]
mov edx, dword [esi + 0x1781c]
test edx, edx
je 0x43c11b
mov eax, dword [esp + 0x10]
add edx, 0xa
mov dword [esp], eax
call edx
mov edi, dword [esp + 0x14]
mov ecx, ebp
mov ebx, dword [esi + 8]
lea eax, [eax + eax + 1]
sar edi, cl
mov ecx, dword [esi + 4]
mov edx, ebx
sub edx, ecx
mul edx
shrd eax, edx, 0x10
add eax, ecx
and edi, 1
je 0x43c110
mov dword [esi + 8], eax
mov ebx, eax
xor ecx, ebx
cmp ecx, 0xffffff
ja 0x43c0d8
mov ecx, dword [esi]
shr ebx, 0x18
mov eax, dword [ecx]
mov dword [esp], ebx
mov eax, dword [eax]
call eax
mov ebx, dword [esi + 8]
mov edx, dword [esi + 4]
xor eax, eax
sub esp, 4
shl ebx, 8
shl edx, 8
or bl, 0xff
test edx, edx
sete al
mov dword [esi + 8], ebx
add eax, edx
mov dword [esi + 4], eax
xor eax, ebx
cmp eax, 0xffffff
jbe 0x43c0a0
mov ecx, dword [esp + 0x10]
mov dword [esp], edi
sub ebp, 1
call fcn.0043b6f0
sub esp, 4
cmp ebp, 0xffffffff
jne 0x43c050
add esp, 0x2c
pop ebx
pop esi
pop edi
pop ebp
ret 4
mov dword [esp + 0x40], edi
add esp, 0x2c
pop ebx
pop esi
pop edi
pop ebp
jmp fcn.0041ef40
lea ecx, [eax + 1]
mov dword [esi + 4], ecx
jmp 0x43c096
mov eax, dword [esi + 0x814]
imul ebx, dword [eax + 0x14], 0x64
mov eax, dword [esi + 0x17820]
add ebx, 0x1000
and ebx, 0xfffff000
test eax, eax
jne 0x43c1bf
test ebx, ebx
jle 0x43c17b
mov dword [esp + 0xc], 0x40
mov dword [esp + 8], 0x3000
mov dword [esp + 4], ebx
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
sub esp, 0x10
test eax, eax
mov dword [esi + 0x1781c], eax
je 0x43c21f
mov dword [esi + 0x17820], ebx
mov ecx, dword [esp + 0x10]
call fcn.00435830
cmp eax, dword [esi + 0x17820]
jg 0x43c1f9
mov edx, dword [esi + 0x1781c]
test edx, edx
je 0x43c1a8
cmp eax, 0xe
jle 0x43c1a8
cmp dword [esi + 0x17820], 0xe
jg 0x43c05e
mov dword [esp], 0x4fb70c
call fcn.00402a80
mov edx, dword [esi + 0x1781c]
jmp 0x43c05e
mov dword [esi + 0x1781c], 0
mov dword [esi + 0x17820], 0
jmp 0x43c13f
mov dword [esp + 4], 0
mov dword [esp], 1
call fcn.00430a10
sub esp, 8
add esp, 0x2c
pop ebx
pop esi
pop edi
pop ebp
ret 4
mov dword [esp + 8], eax
mov eax, dword [esp + 0x18]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x1c]
mov dword [esp], eax
call fcn.00425d70
mov ecx, dword [esp + 0x10]
call fcn.00435830
jmp 0x43c18c
mov dword [esi + 0x17820], 0
mov dword [esp], 0x4facf6
call fcn.00402a80
jmp 0x43c17b