Function at 0x439912
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x2c
push ebx
mov ebx, dword [ebp + 0x14]
push esi
mov esi, dword [sym.imp.KERNEL32.dll_LocalAlloc]
push edi
xor edi, edi
push ebx
push edi
mov dword [esp + 0x30], edi
mov dword [esp + 0x20], edi
call esi
push ebx
push edi
mov dword [esp + 0x14], eax
call esi
push 0x18
mov dword [esp + 0x14], eax
pop eax
cmp ebx, eax
jb 0x43994a
mov eax, ebx
push eax
push edi
call esi
mov esi, eax
mov dword [esp + 0x30], edi
xor eax, eax
lea edi, [esp + 0x34]
stosd dword es:[edi], eax
cmp dword [ebp + 0x24], eax
je 0x439aeb
cmp dword [ebp + 0x18], eax
jne 0x439972
cmp dword [ebp + 0x1c], eax
jne 0x439aeb
cmp dword [esp + 0xc], eax
je 0x439ae1
cmp esi, eax
je 0x439ae1
cmp dword [esp + 0x10], eax
je 0x439ae1
mov eax, ebx
mov dword [esp + 0x2c], eax
fild dword [esp + 0x2c]
test eax, eax
jge 0x4399a2
fadd qword [0x527c20]
fdivr qword [0x527c18]
push ecx
push ecx
fstp qword [esp]
call fcn.004ce980
pop ecx
pop ecx
call fcn.004d26f6
mov dword [esp + 0x24], eax
dec eax
imul eax, ebx
push 0x10
pop edi
push dword [ebp + 0x1c]
sub edi, eax
push dword [ebp + 0x18]
lea eax, [esp + 0x38]
push eax
mov dword [esp + 0x38], edi
call dword [ebp + 8]
test eax, eax
je 0x439ad5
xor eax, eax
inc eax
mov dword [esp + 0x14], eax
cmp dword [esp + 0x24], eax
jb 0x439acf
mov eax, dword [ebp + 0x24]
mov dword [esp + 0x20], eax
push ebx
push 0
push dword [esp + 0x14]
call fcn.004cc1d0
add esp, 0xc
and dword [esp + 0x1c], 0
cmp dword [esp + 0x1c], 0
jne 0x439a45
push 0x14
push dword [ebp + 0x20]
push esi
call fcn.004cbd20
mov eax, dword [esp + 0x20]
mov ecx, eax
shr ecx, 0x18
mov byte [esi + 0x14], cl
mov ecx, eax
shr ecx, 0x10
add esp, 0xc
mov byte [esi + 0x15], cl
mov ecx, eax
shr ecx, 8
push 0x18
mov byte [esi + 0x17], al
mov byte [esi + 0x16], cl
pop eax
jmp 0x439a55
push ebx
push dword [esp + 0x14]
push esi
call fcn.004cbd20
add esp, 0xc
mov eax, ebx
push dword [esp + 0x10]
push eax
push esi
lea eax, [esp + 0x3c]
push eax
call dword [ebp + 0xc]
test eax, eax
je 0x439ad5
mov eax, dword [esp + 0xc]
mov ecx, ebx
test ebx, ebx
je 0x439a86
mov edi, dword [esp + 0x10]
sub edi, eax
mov dl, byte [edi + eax]
xor byte [eax], dl
dec ecx
inc eax
test ecx, ecx
jne 0x439a77
mov edi, dword [esp + 0x2c]
inc dword [esp + 0x1c]
cmp dword [esp + 0x1c], 0x3e8
jb 0x439a0c
mov eax, dword [esp + 0x24]
cmp dword [esp + 0x14], eax
je 0x439aa5
push ebx
jmp 0x439aa6
push edi
push dword [esp + 0x10]
push dword [esp + 0x28]
call fcn.004cbd20
add dword [esp + 0x2c], ebx
add esp, 0xc
inc dword [esp + 0x14]
mov eax, dword [esp + 0x14]
cmp eax, dword [esp + 0x24]
jbe 0x4399f8
xor eax, eax
inc eax
mov dword [esp + 0x28], eax
jmp 0x439af3
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esp + 0x18], eax
jmp 0x439af3
mov dword [esp + 0x18], 8
jmp 0x439af3
mov dword [esp + 0x18], 0xa0
lea eax, [esp + 0x30]
push eax
call dword [ebp + 0x10]
cmp dword [esp + 0xc], 0
mov ebx, dword [sym.imp.KERNEL32.dll_LocalFree]
je 0x439b0e
push dword [esp + 0xc]
call ebx
test esi, esi
je 0x439b15
push esi
call ebx
cmp dword [esp + 0x10], 0
je 0x439b22
push dword [esp + 0x10]
call ebx
push dword [esp + 0x18]
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov eax, dword [esp + 0x28]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret