Function at 0x43b130
Capabilities:
Encode data using xor

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x5c
mov ebp, ecx
mov eax, dword [esp + 0x70]
mov dword [eax + 8], 0
mov dword [eax + 4], 0
mov dword [eax], 0
mov dword [esp + 0x30], 0
mov dword [esp + 0x1c], 0x100000
mov dword [esp + 0x14], 0
mov dword [esp + 0x34], 0xc0c7c6c5
mov byte [esp + 0x38], 0
mov eax, 0x63e41a51
nop
nop
nop
nop
nop
movzx ecx, byte [esp + eax - 0x63e41a1d]
xor ecx, eax
mov edx, ecx
not edx
and edx, 0x96
and ecx, 0x69
sub ecx, edx
inc cl
mov byte [esp + eax - 0x63e41a1d], cl
inc eax
cmp eax, 0x63e41a56
jne 0x43b180
mov eax, dword [esp + 0x34]
mov ecx, dword [0x44be30]
test ecx, ecx
je 0x43b1fe
xor edx, edx
mov esi, dword [0x44be34]
cmp dword [esi + edx*8], 0x98d5a07f
je 0x43b1d0
inc edx
cmp ecx, edx
jne 0x43b1c0
jmp 0x43b1fe
mov ecx, dword [esi + edx*8 + 4]
cmp ecx, eax
je 0x43b1fe
lea eax, [esp + 0x1c]
lea edx, [esp + 0x14]
push 4
push 0x3000
push eax
push 0
push edx
push 0xffffffffffffffff
push 0x18
push ecx
push dword [0x44be38]
call fcn.0043c860
add esp, 0x24
test eax, eax
js 0x43b88a
mov dword [esp + 0x4c], 0
mov dword [esp + 0x48], 0
mov dword [esp + 0x44], 0
mov dword [esp + 0x40], 0
mov dword [esp + 0x3c], 0
mov dword [esp + 0x38], 0
mov dword [esp + 0x34], 0
mov dword [esp + 4], 0xd9dddbc4
mov byte [esp + 8], 0
mov edx, 0x2f
movzx eax, byte [esp + edx - 0x2b]
mov ebx, eax
mov esi, eax
and ebx, edx
mov eax, ebx
or al, 0xfd
inc al
mov ecx, ebx
and cl, 0x3d
mul cl
mov ecx, eax
mov eax, esi
add cl, al
mov eax, ebx
shr al, 1
and al, 1
or bl, 2
mul bl
add al, al
sub cl, al
movzx eax, cl
add eax, edx
add al, 0x15
mov byte [esp + edx - 0x2b], al
inc edx
cmp edx, 0x34
jne 0x43b250
mov edi, dword [esp + 4]
cmp edi, 0x7ffffffe
ja 0x43b7f1
mov dword [esp], 0
xor ebx, ebx
mov dword [esp + 0x10], 0
mov dword [esp + 0x20], ebp
jmp 0x43b2d4
mov ebp, dword [esp + 0x20]
mov ebx, esi
nop
nop
nop
nop
nop
mov edi, dword [esp + 0x40]
add edi, dword [esp + 0x34]
cmp edi, 0x7fffffff
jae 0x43b7f1
mov ecx, dword [ebp]
mov dword [esp + 4], 0xc0c7c6c5
mov byte [esp + 8], 0
mov eax, 0x63e41a51
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [esp + eax - 0x63e41a4d]
xor edx, eax
mov esi, edx
not esi
and esi, 0x96
and edx, 0x69
sub edx, esi
inc dl
mov byte [esp + eax - 0x63e41a4d], dl
inc eax
cmp eax, 0x63e41a56
jne 0x43b2f0
mov eax, dword [esp + 4]
mov edx, dword [0x44be30]
test edx, edx
mov dword [esp + 0x24], edi
je 0x43b380
xor esi, esi
mov edi, dword [0x44be34]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp dword [edi + esi*8], 0xc18bc4ba
je 0x43b350
inc esi
cmp edx, esi
jne 0x43b340
jmp 0x43b380
mov edx, dword [edi + esi*8 + 4]
cmp edx, eax
mov esi, dword [esp + 0x24]
je 0x43b380
push 0
push 0x1c
lea eax, [esp + 0x3c]
push eax
push 0
push esi
push ecx
push 0x18
push edx
push dword [0x44be38]
call fcn.0043c860
add esp, 0x24
nop
nop
nop
nop
nop
nop
cmp eax, 0xbfffffff
ja 0x43b7f1
test eax, eax
js 0x43b2c0
cmp dword [esp + 0x44], 0x1000
jne 0x43b2c0
test byte [esp + 0x48], 0x66
je 0x43b2c0
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x1c]
cmp eax, ecx
jbe 0x43b50a
mov dword [esp + 4], 0xc0c7c6c5
mov byte [esp + 8], 0
mov ecx, 0x63e41a51
nop
nop
movzx edx, byte [esp + ecx - 0x63e41a4d]
xor edx, ecx
mov esi, edx
not esi
and esi, 0x96
and edx, 0x69
sub edx, esi
inc dl
mov byte [esp + ecx - 0x63e41a4d], dl
inc ecx
cmp ecx, 0x63e41a56
jne 0x43b3d0
mov ecx, dword [0x44be30]
test ecx, ecx
je 0x43b45e
mov edx, dword [esp + 4]
xor esi, esi
mov edi, dword [0x44be34]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp dword [edi + esi*8], 0x6dbc3610
je 0x43b430
inc esi
cmp ecx, esi
jne 0x43b420
jmp 0x43b45e
mov ecx, dword [edi + esi*8 + 4]
cmp ecx, edx
je 0x43b45e
push 0x8000
lea eax, [esp + 0x34]
push eax
lea eax, [esp + 0x1c]
push eax
push 0xffffffffffffffff
push 0x10
push ecx
push dword [0x44be38]
call fcn.0043c860
add esp, 0x1c
mov eax, dword [esp + 0x40]
mov dword [esp + 0x14], 0
mov dword [esp + 0x1c], eax
mov dword [esp + 4], 0xc0c7c6c5
mov byte [esp + 8], 0
mov eax, 0x63e41a51
nop
nop
nop
nop
movzx ecx, byte [esp + eax - 0x63e41a4d]
xor ecx, eax
mov edx, ecx
not edx
and edx, 0x96
and ecx, 0x69
sub ecx, edx
inc cl
mov byte [esp + eax - 0x63e41a4d], cl
inc eax
cmp eax, 0x63e41a56
jne 0x43b480
mov eax, dword [esp + 4]
mov ecx, dword [0x44be30]
test ecx, ecx
je 0x43b4fe
xor edx, edx
mov esi, dword [0x44be34]
cmp dword [esi + edx*8], 0x98d5a07f
je 0x43b4d0
inc edx
cmp ecx, edx
jne 0x43b4c0
jmp 0x43b4fe
mov ecx, dword [esi + edx*8 + 4]
cmp ecx, eax
je 0x43b4fe
push 4
push 0x3000
lea eax, [esp + 0x24]
push eax
push 0
lea eax, [esp + 0x24]
push eax
push 0xffffffffffffffff
push 0x18
push ecx
push dword [0x44be38]
call fcn.0043c860
add esp, 0x24
test eax, eax
js 0x43b7f1
mov ecx, dword [esp + 0x1c]
mov esi, ebx
mov edx, dword [esp + 0x14]
mov eax, dword [ebp]
mov dword [esp + 0x18], eax
mov dword [esp + 4], 0xc0c7c6c5
mov byte [esp + 8], 0
mov eax, 0x63e41a51
nop
nop
nop
nop
nop
nop
nop
movzx ebx, byte [esp + eax - 0x63e41a4d]
xor ebx, eax
mov edi, ebx
not edi
and edi, 0x96
and ebx, 0x69
sub ebx, edi
inc bl
mov byte [esp + eax - 0x63e41a4d], bl
inc eax
cmp eax, 0x63e41a56
jne 0x43b530
mov eax, dword [esp + 4]
mov ebx, dword [0x44be30]
test ebx, ebx
je 0x43b5b0
xor edi, edi
mov ebp, dword [0x44be34]
cmp dword [ebp + edi*8], 0xe6c7f7c6
je 0x43b581
inc edi
cmp ebx, edi
jne 0x43b570
jmp 0x43b5b0
mov ebx, dword [ebp + edi*8 + 4]
cmp ebx, eax
je 0x43b5b0
lea eax, [esp + 0x58]
push eax
push ecx
push edx
push dword [esp + 0x30]
push dword [esp + 0x28]
push 0x14
push ebx
push dword [0x44be38]
call fcn.0043c860
add esp, 0x20
nop
nop
nop
nop
nop
nop
nop
test eax, eax
jns 0x43b5bf
cmp eax, 0x8000000d
jne 0x43b2b5
push dword [esp + 0x7c]
push dword [esp + 0x7c]
push dword [esp + 0x7c]
push dword [esp + 0x64]
push dword [esp + 0x24]
lea eax, [esp + 0x18]
push eax
call fcn.0043b8a0
add esp, 0x18
mov eax, dword [esp + 4]
mov edx, dword [esp + 8]
cmp eax, edx
mov ebx, esi
je 0x43b7cc
mov dword [esp + 0x50], eax
mov esi, eax
mov ecx, dword [esp + 0x10]
mov eax, dword [esp]
mov dword [esp + 0x28], edx
jmp 0x43b626
mov edi, dword [esp]
mov dword [edi + ebx], ebp
add ecx, 4
add esi, 4
cmp esi, edx
mov ebx, edi
je 0x43b78a
mov ebp, dword [esi]
add ebp, dword [esp + 0x24]
sub ebp, dword [esp + 0x14]
mov edi, ebx
mov ebx, ecx
mov dword [esp], edi
sub ebx, edi
cmp ecx, eax
jne 0x43b610
mov dword [esp + 0x10], ecx
mov dword [esp + 0x18], ebx
sar ebx, 2
lea eax, [ebx + 1]
mov edi, ebx
shr edi, 1
add edi, ebx
cmp edi, eax
ja 0x43b657
mov edi, eax
lea eax, [edi*4]
push eax
call fcn.004082d0
add esp, 4
mov ecx, dword [esp]
test ecx, ecx
je 0x43b772
mov dword [esp + 0x54], edi
cmp eax, ecx
mov ecx, dword [esp + 0x10]
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x2c], eax
jbe 0x43b71b
cmp ecx, eax
jbe 0x43b71b
test ebx, ebx
je 0x43b75f
mov ebx, dword [esp]
mov edx, dword [esp + 0x18]
lea eax, [ebx + edx]
dec eax
mov ecx, dword [esp + 0x2c]
add ecx, edx
dec ecx
mov edi, edx
and edi, 3
je 0x43b6d7
neg edi
xor edx, edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ebx, byte [eax + edx]
mov byte [ecx + edx], bl
dec edx
cmp edi, edx
jne 0x43b6c0
add eax, edx
add ecx, edx
add edx, dword [esp + 0x18]
mov ebx, dword [esp]
mov edi, ebx
sub edi, dword [esp + 0x10]
cmp edi, 0xfffffffc
ja 0x43b75f
neg edx
xor edi, edi
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ebx, byte [eax + edi]
mov byte [ecx + edi], bl
movzx ebx, byte [eax + edi - 1]
mov byte [ecx + edi - 1], bl
movzx ebx, byte [eax + edi - 2]
mov byte [ecx + edi - 2], bl
movzx ebx, byte [eax + edi - 3]
mov byte [ecx + edi - 3], bl
add edi, 0xfffffffc
cmp edx, edi
jne 0x43b6f0
jmp 0x43b75f
mov ecx, ebx
shr ecx, 2
mov edx, dword [esp]
mov edi, eax
xchg esi, edx
rep movsd dword es:[edi], dword [esi]
xchg esi, edx
mov edx, ebx
and edx, 0xfffffffc
lea edi, [eax + edx]
add edx, dword [esp]
mov ecx, ebx
shr ecx, 1
and ecx, 1
mov eax, edx
mov dword [esp + 0x10], edi
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
test bl, 1
je 0x43b75f
mov eax, dword [esp + 0x18]
and eax, 2
movzx ecx, byte [edx + eax]
mov edx, dword [esp + 0x10]
mov byte [edx + eax], cl
push dword [esp]
call fcn.004082e0
add esp, 4
mov edi, dword [esp + 0x54]
mov eax, dword [esp + 0x2c]
lea edx, [eax + edi*4]
mov ecx, eax
mov ebx, dword [esp + 0x18]
add ecx, ebx
mov edi, eax
mov eax, edx
mov edx, dword [esp + 0x28]
jmp 0x43b613
mov dword [esp], eax
mov eax, dword [esp + 0x70]
mov dword [eax + 4], ecx
mov dword [eax], ebx
mov edx, dword [esp]
mov dword [eax + 8], edx
mov eax, dword [esp + 0x50]
test eax, eax
mov ebp, dword [esp + 0x20]
je 0x43b7e8
mov dword [esp + 0x10], ecx
cmp eax, dword [esp + 0x28]
je 0x43b2c0
push eax
call fcn.004082e0
add esp, 4
mov dword [esp + 4], 0
jmp 0x43b2c0
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 0x10]
mov dword [eax + 4], ecx
mov dword [eax], ebx
mov ecx, dword [esp]
mov dword [eax + 8], ecx
mov ebp, dword [esp + 0x20]
jmp 0x43b2c0
mov dword [esp + 0x10], ecx
jmp 0x43b2c0
mov dword [esp + 4], 0xc0c7c6c5
mov byte [esp + 8], 0
mov eax, 0x63e41a51
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ecx, byte [esp + eax - 0x63e41a4d]
xor ecx, eax
mov edx, ecx
not edx
and edx, 0x96
and ecx, 0x69
sub ecx, edx
inc cl
mov byte [esp + eax - 0x63e41a4d], cl
inc eax
cmp eax, 0x63e41a56
jne 0x43b810
mov eax, dword [0x44be30]
test eax, eax
je 0x43b88a
mov ecx, dword [esp + 4]
xor edx, edx
mov esi, dword [0x44be34]
nop
cmp dword [esi + edx*8], 0x6dbc3610
je 0x43b860
inc edx
cmp eax, edx
jne 0x43b850
jmp 0x43b88a
mov eax, dword [esi + edx*8 + 4]
cmp eax, ecx
je 0x43b88a
lea ecx, [esp + 0x30]
lea edx, [esp + 0x14]
push 0x8000
push ecx
push edx
push 0xffffffffffffffff
push 0x10
push eax
push dword [0x44be38]
call fcn.0043c860
add esp, 0x1c
mov eax, dword [esp + 0x70]
add esp, 0x5c
pop esi
pop edi
pop ebx
pop ebp
ret 0x10