Function at 0x43f1e0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x80
mov edi, ecx
mov eax, dword [ebp + 8]
mov dword [eax + 8], 0
mov dword [eax + 4], 0
mov dword [eax], 0
mov dword [esp + 0x34], 0
mov dword [esp + 0x28], 0x100000
mov dword [esp + 0x14], 0
mov dword [esp], 0xd8dbdac5
mov word [esp + 4], 0
mov byte [esp + 6], 0
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, eax
and edx, 4
xor edx, 0xd4
mov ecx, eax
and ecx, 3
sub ecx, edx
add cl, 0x23
xor cl, byte [esp + eax]
add cl, 0x75
mov byte [esp + eax], cl
inc eax
cmp eax, 7
jne 0x43f240
mov eax, dword [esp]
mov ecx, dword [0x450710]
test ecx, ecx
je 0x43f2be
xor edx, edx
mov esi, dword [0x450714]
nop
nop
nop
nop
nop
nop
nop
cmp dword [esi + edx*8], 0x3e416e49
je 0x43f290
inc edx
cmp ecx, edx
jne 0x43f280
jmp 0x43f2be
mov ecx, dword [esi + edx*8 + 4]
cmp ecx, eax
je 0x43f2be
lea eax, [esp + 0x28]
lea edx, [esp + 0x14]
push 4
push 0x3000
push eax
push 0
push edx
push 0xffffffffffffffff
push 6
push dword [0x450718]
push ecx
call fcn.00441310
add esp, 0x24
test eax, eax
js 0x43f94e
cmp dword [edi + 4], 0
je 0x43f8e0
mov dword [esp + 0x50], edi
mov eax, dword [edi + 4]
mov dword [esp + 0x44], 0
mov dword [esp + 0x40], 0
mov dword [esp + 0x3c], 0
mov dword [esp + 0x38], 0
mov dword [esp + 0x60], 0
mov dword [esp + 0x5c], 0
mov dword [esp], 0xf9fdfb04
mov byte [esp + 4], 0
mov ecx, 0x9af9b7ff
mov edx, 0x65064800
nop
nop
nop
movzx edi, byte [esp + ecx + 0x65064801]
mov ebx, edx
or ebx, edi
mov esi, edx
xor esi, edi
add esi, edi
or edi, ecx
not esi
add esi, ebx
and esi, edi
mov edi, 0xfb
sub edi, esi
or edi, 1
mov ebx, esi
or ebx, 1
add ebx, esi
add ebx, edi
add bl, 9
mov byte [esp + ecx + 0x65064801], bl
inc ecx
dec edx
cmp ecx, 0x9af9b804
jne 0x43f320
mov dword [esp + 0x2c], 0x7fff
cmp eax, 2
je 0x43f376
mov dword [esp + 0x2c], 0
mov eax, 0xfffeffff
je 0x43f382
mov eax, SysReAllocString
mov edx, dword [esp]
mov ecx, edx
sar ecx, 0x1f
mov dword [esp + 0x10], eax
cmp edx, eax
mov dword [esp + 0x24], ecx
mov eax, ecx
sbb eax, dword [esp + 0x2c]
jae 0x43f874
mov dword [esp + 0x18], 0
mov dword [esp + 0xc], 0
xor edi, edi
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov dword [esp + 0x30], edx
mov ecx, dword [esp + 0x50]
lea eax, [esp + 0x5c]
push eax
lea eax, [esp + 0x64]
push eax
lea eax, [esp + 0x40]
push eax
lea eax, [esp + 0x4c]
push eax
push dword [esp + 0x34]
push edx
call fcn.0043ede0
mov edx, dword [esp + 0x30]
cmp eax, 0xbfffffff
ja 0x43f874
test eax, eax
js 0x43f850
cmp dword [esp + 0x60], 0x1000
jne 0x43f850
test byte [esp + 0x5c], 0x66
je 0x43f850
mov esi, dword [esp + 0x38]
cmp dword [esp + 0x28], esi
mov ebx, dword [esp + 0x3c]
mov eax, 0
sbb eax, ebx
jae 0x43f58e
mov dword [esp + 0x20], edi
mov dword [esp], 0xd8dbdac5
lea eax, [esp + 4]
mov byte [eax + 2], 0
mov word [eax], 0
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
mov edx, eax
and edx, 4
xor edx, 0xd4
mov ecx, eax
and ecx, 3
sub ecx, edx
add cl, 0x23
xor cl, byte [esp + eax]
add cl, 0x75
mov byte [esp + eax], cl
inc eax
cmp eax, 7
jne 0x43f450
mov eax, dword [0x450710]
test eax, eax
je 0x43f4ca
mov ecx, dword [esp]
xor edx, edx
mov edi, dword [0x450714]
nop
nop
nop
nop
nop
nop
nop
nop
cmp dword [edi + edx*8], 0x16194952
je 0x43f4a0
inc edx
cmp eax, edx
jne 0x43f490
jmp 0x43f4ca
mov eax, dword [edi + edx*8 + 4]
cmp eax, ecx
je 0x43f4ca
push 0x8000
lea ecx, [esp + 0x38]
push ecx
lea ecx, [esp + 0x1c]
push ecx
push 0xffffffffffffffff
push 4
push dword [0x450718]
push eax
call fcn.00441310
add esp, 0x1c
mov dword [esp + 0x34], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x28], esi
mov dword [esp], 0xd8dbdac5
lea eax, [esp + 4]
mov byte [eax + 2], 0
mov word [eax], 0
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, eax
and edx, 4
xor edx, 0xd4
mov ecx, eax
and ecx, 3
sub ecx, edx
add cl, 0x23
xor cl, byte [esp + eax]
add cl, 0x75
mov byte [esp + eax], cl
inc eax
cmp eax, 7
jne 0x43f500
mov eax, dword [esp]
mov ecx, dword [0x450710]
test ecx, ecx
je 0x43f57e
xor edx, edx
mov edi, dword [0x450714]
nop
nop
nop
nop
nop
nop
nop
cmp dword [edi + edx*8], 0x3e416e49
je 0x43f550
inc edx
cmp ecx, edx
jne 0x43f540
jmp 0x43f57e
mov ecx, dword [edi + edx*8 + 4]
cmp ecx, eax
je 0x43f57e
push 4
push 0x3000
lea eax, [esp + 0x30]
push eax
push 0
lea eax, [esp + 0x24]
push eax
push 0xffffffffffffffff
push 6
push dword [0x450718]
push ecx
call fcn.00441310
add esp, 0x24
test eax, eax
mov edx, dword [esp + 0x30]
mov edi, dword [esp + 0x20]
js 0x43f874
mov ecx, dword [esp + 0x50]
lea eax, [esp + 0x70]
push eax
push ebx
push esi
push dword [esp + 0x20]
push dword [esp + 0x34]
push edx
call fcn.0043f070
test eax, eax
jns 0x43f5b6
cmp eax, 0x8000000d
jne 0x43f850
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 0x74]
mov edx, dword [ebp + 0x10]
cmp eax, edx
sbb ecx, 0
jb 0x43f850
push dword [ebp + 0x14]
push edx
push dword [ebp + 0xc]
push eax
push dword [esp + 0x24]
lea eax, [esp + 0x14]
push eax
call fcn.0043f9a0
add esp, 0x18
mov eax, dword [esp]
mov ecx, dword [esp + 4]
mov dword [esp + 0x54], ecx
cmp eax, ecx
mov ebx, dword [esp + 0xc]
je 0x43f827
mov dword [esp + 0x64], eax
jmp 0x43f62b
mov eax, dword [esp + 0x58]
mov dword [ebx + edx], ecx
mov dword [ebx + edx + 4], esi
add edi, 8
add eax, 4
cmp eax, dword [esp + 0x54]
je 0x43f7f0
mov dword [esp + 0xc], ebx
mov dword [esp + 0x20], edi
mov dword [esp + 0x58], eax
mov esi, dword [eax]
sub esi, dword [esp + 0x14]
mov edx, esi
sar edx, 0x1f
mov ebx, dword [esp + 0x30]
mov ecx, ebx
and ecx, esi
mov edi, dword [esp + 0x24]
mov eax, edi
and eax, edx
shld eax, ecx, 1
add ecx, ecx
xor edx, edi
mov edi, dword [esp + 0x20]
xor esi, ebx
mov ebx, dword [esp + 0xc]
add esi, ecx
mov ecx, esi
mov esi, edx
adc esi, eax
mov edx, edi
sub edx, ebx
cmp edi, dword [esp + 0x18]
jne 0x43f610
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x68], esi
mov dword [esp + 0x1c], edx
mov ecx, edx
sar ecx, 3
lea eax, [ecx + 1]
mov edx, ecx
shr edx, 1
add edx, ecx
cmp edx, eax
ja 0x43f696
mov edx, eax
mov dword [esp + 0x18], edx
lea eax, [edx*8]
push eax
call fcn.0040cd40
add esp, 4
mov esi, eax
test ebx, ebx
je 0x43f7ca
cmp esi, ebx
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x4c], esi
jbe 0x43f77f
cmp edi, esi
jbe 0x43f77f
test edx, edx
je 0x43f7ba
mov ebx, dword [esp + 0xc]
mov edx, dword [esp + 0x1c]
lea eax, [ebx + edx]
dec eax
mov ecx, dword [esp + 0x4c]
add ecx, edx
dec ecx
mov edi, edx
and edi, 7
je 0x43f718
neg edi
xor edx, edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ebx, byte [eax + edx]
mov byte [ecx + edx], bl
dec edx
cmp edi, edx
jne 0x43f700
add eax, edx
add ecx, edx
add edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0xc]
mov edi, ebx
sub edi, dword [esp + 0x20]
cmp edi, 0xfffffff8
ja 0x43f7ba
neg edx
xor edi, edi
nop
nop
nop
nop
nop
movzx ebx, byte [eax + edi]
mov byte [ecx + edi], bl
movzx ebx, byte [eax + edi - 1]
mov byte [ecx + edi - 1], bl
movzx ebx, byte [eax + edi - 2]
mov byte [ecx + edi - 2], bl
movzx ebx, byte [eax + edi - 3]
mov byte [ecx + edi - 3], bl
movzx ebx, byte [eax + edi - 4]
mov byte [ecx + edi - 4], bl
movzx ebx, byte [eax + edi - 5]
mov byte [ecx + edi - 5], bl
movzx ebx, byte [eax + edi - 6]
mov byte [ecx + edi - 6], bl
movzx ebx, byte [eax + edi - 7]
mov byte [ecx + edi - 7], bl
add edi, 0xfffffff8
cmp edx, edi
jne 0x43f730
jmp 0x43f7ba
mov ecx, edx
shr ecx, 2
mov eax, ebx
mov edi, esi
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
mov eax, edx
and edx, 0xfffffffc
add esi, edx
add edx, ebx
mov ecx, eax
mov ebx, eax
shr ecx, 1
and ecx, 1
mov eax, edx
mov edi, esi
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
test bl, 1
je 0x43f7ba
mov eax, dword [esp + 0x1c]
and eax, 2
movzx ecx, byte [edx + eax]
mov byte [esi + eax], cl
push dword [esp + 0xc]
call fcn.0040cd50
add esp, 4
mov esi, dword [esp + 0x4c]
mov eax, dword [esp + 0x18]
lea eax, [esi + eax*8]
mov dword [esp + 0x18], eax
mov edi, esi
mov edx, dword [esp + 0x1c]
add edi, edx
mov ebx, esi
mov eax, dword [esp + 0x58]
mov esi, dword [esp + 0x68]
mov ecx, dword [esp + 0x6c]
jmp 0x43f614
mov eax, dword [ebp + 8]
mov dword [eax + 4], edi
mov dword [eax], ebx
mov ecx, dword [esp + 0x18]
mov dword [eax + 8], ecx
mov eax, dword [esp + 0x64]
test eax, eax
je 0x43f83e
cmp eax, dword [esp + 0x54]
mov esi, dword [esp + 0x10]
je 0x43f838
mov dword [esp + 0xc], ebx
push eax
call fcn.0040cd50
add esp, 4
mov dword [esp], 0
jmp 0x43f854
mov eax, dword [ebp + 8]
mov dword [eax + 4], edi
mov dword [eax], ebx
mov ecx, dword [esp + 0x18]
mov dword [eax + 8], ecx
jmp 0x43f850
mov dword [esp + 0xc], ebx
jmp 0x43f854
mov dword [esp + 0xc], ebx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov esi, dword [esp + 0x10]
mov edx, dword [esp + 0x38]
add edx, dword [esp + 0x40]
mov eax, dword [esp + 0x3c]
adc eax, dword [esp + 0x44]
cmp edx, esi
mov dword [esp + 0x24], eax
sbb eax, dword [esp + 0x2c]
jb 0x43f3c0
mov dword [esp], 0xd8dbdac5
mov word [esp + 4], 0
mov byte [esp + 6], 0
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
mov edx, eax
and edx, 4
xor edx, 0xd4
mov ecx, eax
and ecx, 3
sub ecx, edx
add cl, 0x23
xor cl, byte [esp + eax]
add cl, 0x75
mov byte [esp + eax], cl
inc eax
cmp eax, 7
jne 0x43f890
mov eax, dword [0x450710]
test eax, eax
je 0x43f94e
mov ecx, dword [esp]
xor edx, edx
mov esi, dword [0x450714]
nop
nop
nop
nop
cmp dword [esi + edx*8], 0x16194952
je 0x43f924
inc edx
cmp eax, edx
jne 0x43f8d0
jmp 0x43f94e
push 0xbbf966b4
push dword [0x450704]
call fcn.00443ee0
add esp, 8
test eax, eax
je 0x43f95b
mov ecx, dword [edi]
test ecx, ecx
je 0x43f2d0
mov dword [esp], 0
mov edx, esp
push edx
push ecx
call eax
test eax, eax
je 0x43f967
cmp dword [esp], 0
je 0x43f967
mov dword [edi + 4], 3
jmp 0x43f2d0
mov eax, dword [esi + edx*8 + 4]
cmp eax, ecx
je 0x43f94e
lea ecx, [esp + 0x34]
lea edx, [esp + 0x14]
push 0x8000
push ecx
push edx
push 0xffffffffffffffff
push 4
push dword [0x450718]
push eax
call fcn.00441310
add esp, 0x1c
mov eax, dword [ebp + 8]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret 0x10
mov dword [edi + 4], 1
jmp 0x43f2d0
lea eax, [esp + 0x40]
push eax
call fcn.004445d0
add esp, 4
test al, al
je 0x43f2d0
mov eax, dword [esp + 0x40]
mov ecx, 2
cmp eax, 3
je 0x43f98c
mov ecx, eax
mov dword [edi + 4], ecx
jmp 0x43f2d0