Function at 0x439190
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x80
mov esi, ecx
mov eax, dword [ecx + 4]
test eax, eax
je 0x4391b2
cmp eax, 2
je 0x43922b
jmp 0x4393bf
push 0xbbf966b4
push dword [0x44ce74]
call fcn.0043eaf0
add esp, 8
test eax, eax
je 0x4391ef
mov ecx, dword [esi]
test ecx, ecx
je 0x43921f
mov dword [esp], 0
mov edx, esp
push edx
push ecx
call eax
test eax, eax
je 0x4391fb
cmp dword [esp], 0
je 0x4391fb
mov dword [esi + 4], 3
jmp 0x43921f
mov dword [esi + 4], 1
jmp 0x4393bf
lea eax, [esp + 0x40]
push eax
call fcn.0043f2b0
add esp, 4
test al, al
je 0x43921f
mov eax, dword [esp + 0x40]
mov ecx, 2
cmp eax, 3
je 0x43921c
mov ecx, eax
mov dword [esi + 4], ecx
mov eax, dword [esi + 4]
cmp eax, 2
jne 0x4393bf
mov dword [esp], 0xba67b56a
mov dword [esp + 4], 0x59bbbb49
mov dword [esp + 8], 0xc2c2bf49
mov dword [esp + 0xc], 0x361f392d
mov dword [esp + 0x10], 0xcec83a3d
mov byte [esp + 0x14], 0x44
mov dword [esp + 0x15], 0
mov byte [esp + 0x19], 0
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
lea ecx, [eax - 0x3882f1ca]
mov edx, ecx
or edx, 0x645e329a
sub edx, eax
lea edi, [edx + 0x3882f1ca]
and ecx, 0x83210c65
mov ebx, ecx
not ebx
and ebx, edi
xor ecx, edi
movzx edi, byte [esp + eax]
add ecx, edx
add ecx, 0x3882f1ca
sub ecx, ebx
xor ecx, edi
mov edi, ecx
xor edi, 0x812f7594
mov edx, ecx
and edx, 0xe571470e
xor edx, 0x7edebafb
and edx, edi
mov edi, edx
and edi, 0xfd
mov ebx, edx
and ebx, 2
or edx, 2
imul edx, ebx
xor ebx, 2
imul ebx, edi
xor ecx, 0x7ed08a6b
add edx, ecx
add edx, ebx
and ecx, 1
or edx, 1
add edx, ecx
mov byte [esp + eax], dl
mov ecx, eax
xor ecx, 1
add ecx, eax
mov edx, eax
and edx, 0x1e
mov edi, ecx
sub edi, edx
and eax, 1
xor edi, eax
and eax, ecx
lea eax, [edi + eax*2]
cmp eax, 0x1a
jb 0x439270
mov edi, esp
lea eax, [esp + 0x70]
push edi
push eax
call fcn.0043dca0
add esp, 8
mov eax, dword [esi]
mov dword [esp + 0x40], eax
mov dword [esp + 0x44], 0
mov eax, dword [ebp + 0xc]
mov dword [esp + 0x4c], eax
mov eax, dword [ebp + 8]
mov dword [esp + 0x48], eax
mov dword [esp + 0x54], 0
mov dword [esp + 0x50], 0
mov dword [esp + 0x58], edi
mov dword [esp + 0x5c], 0
mov dword [esp + 0x64], 0
mov dword [esp + 0x60], 0x30
mov dword [esp + 0x6c], 0
mov dword [esp + 0x68], 0
lea eax, [esp + 0x40]
push 6
push eax
push dword [esp + 0x7c]
push dword [esp + 0x7c]
call fcn.0043dd70
mov ecx, dword [esp]
mov edx, dword [esp + 4]
mov esi, dword [ebp + 0x10]
mov dword [esi + 4], edx
mov dword [esi], ecx
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov esi, dword [ebp + 0x14]
mov dword [esi], edx
mov dword [esi + 4], ecx
mov ecx, dword [esp + 0x20]
mov edx, dword [ebp + 0x18]
mov dword [edx], ecx
mov ecx, dword [esp + 0x24]
mov edx, dword [ebp + 0x1c]
mov dword [edx], ecx
jmp 0x4394ea
mov dword [esp + 0x40], 0x41464760
mov dword [esp + 0x44], 0
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [esp + eax + 0x40]
lea ecx, [edx + edx]
not ecx
add ecx, edx
mov edi, 0xee
sub edi, eax
and edi, edx
and edx, 0xfffffff0
and ecx, 0xf53ecd0f
or ecx, edx
xor ecx, 0xf53ecd0f
lea edx, [eax - 0x5d02a8ef]
mov ebx, ecx
and ebx, edx
xor edx, ecx
sub edx, ecx
add edx, ebx
or edx, edi
mov ecx, edx
not ecx
and ecx, 0x56
and edx, 0xa9
sub edx, ecx
inc dl
mov byte [esp + eax + 0x40], dl
mov ecx, eax
and ecx, 1
xor eax, 1
lea eax, [eax + ecx*2]
cmp eax, 8
jb 0x4393e0
mov eax, dword [esp + 0x40]
mov dword [esp + 0x3c], eax
mov ebx, dword [esi]
mov dword [esp], 0x6c6d6e6f
mov byte [esp + 4], 0
xor eax, eax
mov esi, 0xc1c6de16
nop
nop
nop
nop
nop
nop
movzx edx, byte [esp + eax]
mov ecx, eax
or ecx, edx
or ecx, 0x3e3921e8
lea edi, [esi + 1]
or edi, edx
mov edx, esi
sub edx, edi
add edi, eax
add edi, 0x3e3921e9
xor edi, ecx
and edx, ecx
add edx, edx
sub edx, edi
add dl, 0x78
mov byte [esp + eax], dl
inc eax
dec esi
cmp eax, 5
jne 0x439460
mov eax, dword [esp]
mov ecx, dword [0x44ce80]
test ecx, ecx
je 0x4394c8
xor edx, edx
mov esi, dword [0x44ce84]
nop
nop
nop
nop
nop
nop
nop
cmp dword [esi + edx*8], 0xba50defc
je 0x4394f4
mov edi, edx
xor edi, 1
and edx, 1
lea edx, [edi + edx*2]
cmp edx, ecx
jb 0x4394b0
mov edx, dword [ebp + 0x10]
mov dword [edx], ecx
mov dword [edx + 4], 0
mov ecx, dword [ebp + 0x14]
mov dword [ecx], ebx
mov dword [ecx + 4], 0
mov ecx, dword [ebp + 0x18]
mov dword [ecx], edi
mov ecx, dword [ebp + 0x1c]
mov dword [ecx], esi
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret 0x18
mov dword [esp + 0x38], ebx
mov edx, dword [esi + edx*8 + 4]
cmp edx, eax
je 0x4394c8
mov eax, esp
push 0
push dword [esp + 0x40]
push eax
push 0
push dword [ebp + 8]
push dword [esp + 0x4c]
push 0x18
push edx
push dword [0x44ce88]
call fcn.0043c030
add esp, 0x24
mov ecx, dword [esp]
mov ebx, dword [esp + 0xc]
mov edi, dword [esp + 0x10]
mov esi, dword [esp + 0x14]
jmp 0x4394c8