Function at 0x4320ad
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x2c
push ebx
mov ebx, dword [ebp + 0x14]
push esi
mov esi, dword [sym.imp.KERNEL32.dll_LocalAlloc]
push edi
xor edi, edi
push ebx
push edi
mov dword [esp + 0x30], edi
mov dword [esp + 0x20], edi
call esi
push ebx
push edi
mov dword [esp + 0x14], eax
call esi
push 0x18
mov dword [esp + 0x14], eax
pop eax
cmp ebx, eax
jb 0x4320e5
mov eax, ebx
push eax
push edi
call esi
mov esi, eax
mov dword [esp + 0x30], edi
xor eax, eax
lea edi, [esp + 0x34]
stosd dword es:[edi], eax
cmp dword [ebp + 0x24], eax
je 0x432286
cmp dword [ebp + 0x18], eax
jne 0x43210d
cmp dword [ebp + 0x1c], eax
jne 0x432286
cmp dword [esp + 0xc], eax
je 0x43227c
cmp esi, eax
je 0x43227c
cmp dword [esp + 0x10], eax
je 0x43227c
mov eax, ebx
mov dword [esp + 0x2c], eax
fild dword [esp + 0x2c]
test eax, eax
jge 0x43213d
fadd qword [0x512ef8]
fdivr qword [0x512ef0]
push ecx
push ecx
fstp qword [esp]
call fcn.004bea00
pop ecx
pop ecx
call fcn.004c2636
mov dword [esp + 0x24], eax
dec eax
imul eax, ebx
push 0x10
pop edi
push dword [ebp + 0x1c]
sub edi, eax
push dword [ebp + 0x18]
lea eax, [esp + 0x38]
push eax
mov dword [esp + 0x38], edi
call dword [ebp + 8]
test eax, eax
je 0x432270
xor eax, eax
inc eax
mov dword [esp + 0x14], eax
cmp dword [esp + 0x24], eax
jb 0x43226a
mov eax, dword [ebp + 0x24]
mov dword [esp + 0x20], eax
push ebx
push 0
push dword [esp + 0x14]
call fcn.004bc420
add esp, 0xc
and dword [esp + 0x1c], 0
cmp dword [esp + 0x1c], 0
jne 0x4321e0
push 0x14
push dword [ebp + 0x20]
push esi
call fcn.004bbd70
mov eax, dword [esp + 0x20]
mov ecx, eax
shr ecx, 0x18
mov byte [esi + 0x14], cl
mov ecx, eax
shr ecx, 0x10
add esp, 0xc
mov byte [esi + 0x15], cl
mov ecx, eax
shr ecx, 8
push 0x18
mov byte [esi + 0x17], al
mov byte [esi + 0x16], cl
pop eax
jmp 0x4321f0
push ebx
push dword [esp + 0x14]
push esi
call fcn.004bbd70
add esp, 0xc
mov eax, ebx
push dword [esp + 0x10]
push eax
push esi
lea eax, [esp + 0x3c]
push eax
call dword [ebp + 0xc]
test eax, eax
je 0x432270
mov eax, dword [esp + 0xc]
mov ecx, ebx
test ebx, ebx
je 0x432221
mov edi, dword [esp + 0x10]
sub edi, eax
mov dl, byte [edi + eax]
xor byte [eax], dl
dec ecx
inc eax
test ecx, ecx
jne 0x432212
mov edi, dword [esp + 0x2c]
inc dword [esp + 0x1c]
cmp dword [esp + 0x1c], 0x3e8
jb 0x4321a7
mov eax, dword [esp + 0x24]
cmp dword [esp + 0x14], eax
je 0x432240
push ebx
jmp 0x432241
push edi
push dword [esp + 0x10]
push dword [esp + 0x28]
call fcn.004bbd70
add dword [esp + 0x2c], ebx
add esp, 0xc
inc dword [esp + 0x14]
mov eax, dword [esp + 0x14]
cmp eax, dword [esp + 0x24]
jbe 0x432193
xor eax, eax
inc eax
mov dword [esp + 0x28], eax
jmp 0x43228e
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esp + 0x18], eax
jmp 0x43228e
mov dword [esp + 0x18], 8
jmp 0x43228e
mov dword [esp + 0x18], 0xa0
lea eax, [esp + 0x30]
push eax
call dword [ebp + 0x10]
cmp dword [esp + 0xc], 0
mov ebx, dword [sym.imp.KERNEL32.dll_LocalFree]
je 0x4322a9
push dword [esp + 0xc]
call ebx
test esi, esi
je 0x4322b0
push esi
call ebx
cmp dword [esp + 0x10], 0
je 0x4322bd
push dword [esp + 0x10]
call ebx
push dword [esp + 0x18]
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov eax, dword [esp + 0x28]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret