Function at 0x439ac0
Capabilities:
Encode data using xor

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x5c
mov edi, ecx
mov eax, dword [esp + 0x70]
mov dword [eax + 8], 0
mov dword [eax + 4], 0
mov dword [eax], 0
mov dword [esp + 0x30], 0
mov dword [esp + 0x20], 0x100000
mov dword [esp + 0x14], 0
mov dword [esp + 0x34], 0x24252627
mov byte [esp + 0x38], 0
xor eax, eax
mov ecx, 0x67
nop
nop
nop
movzx edx, byte [esp + eax + 0x34]
mov esi, eax
or esi, edx
or esi, 0x26ab1298
not edx
or edx, ecx
and edx, esi
mov esi, edx
not esi
and esi, 0xf3
and edx, 0xc
sub edx, esi
add dl, 0x33
mov byte [esp + eax + 0x34], dl
inc eax
dec ecx
cmp eax, 5
jne 0x439b10
mov eax, dword [esp + 0x34]
mov ecx, dword [0x449dc8]
test ecx, ecx
je 0x439b9e
xor edx, edx
mov esi, dword [0x449dcc]
nop
nop
nop
nop
nop
nop
nop
nop
cmp dword [esi + edx*8], 0xa8f779e4
je 0x439b70
inc edx
cmp ecx, edx
jne 0x439b60
jmp 0x439b9e
mov ecx, dword [esi + edx*8 + 4]
cmp ecx, eax
je 0x439b9e
lea eax, [esp + 0x20]
lea edx, [esp + 0x14]
push 4
push 0x3000
push eax
push 0
push edx
push 0xffffffffffffffff
push 0x18
push ecx
push dword [0x449dd0]
call fcn.0043ad80
add esp, 0x24
test eax, eax
js 0x43a27a
mov dword [esp + 0x4c], 0
mov dword [esp + 0x48], 0
mov dword [esp + 0x44], 0
mov dword [esp + 0x40], 0
mov dword [esp + 0x3c], 0
mov dword [esp + 0x38], 0
mov dword [esp + 0x34], 0
mov dword [esp + 4], 0x38262625
mov eax, 0x40d2934d
nop
nop
nop
nop
nop
movzx ecx, byte [esp + eax - 0x40d29349]
xor ecx, eax
mov edx, ecx
and edx, 0x17
xor ecx, 0x97
lea ecx, [ecx + edx*2]
inc cl
mov byte [esp + eax - 0x40d29349], cl
inc eax
cmp eax, 0x40d29351
jne 0x439bf0
mov eax, dword [esp + 4]
mov dword [esp + 0x1c], eax
cmp eax, 0x7ffffffe
ja 0x43a1d5
mov dword [esp], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x24], edi
jmp 0x439c6a
mov edi, dword [esp + 0x24]
mov edx, dword [esp]
mov dword [esp], edx
mov eax, dword [esp + 0x40]
add eax, dword [esp + 0x34]
mov dword [esp + 0x1c], eax
cmp eax, 0x7fffffff
jae 0x43a1d5
mov ecx, dword [edi]
mov dword [esp + 4], 0x24252627
mov byte [esp + 8], 0
mov eax, 0x67
xor edx, edx
movzx ebx, byte [esp + edx + 4]
mov esi, edx
or esi, ebx
or esi, 0x26ab1298
not ebx
or ebx, eax
and ebx, esi
mov esi, ebx
not esi
and esi, 0xf3
and ebx, 0xc
sub ebx, esi
add bl, 0x33
mov byte [esp + edx + 4], bl
inc edx
dec eax
cmp edx, 5
jne 0x439c80
mov eax, dword [esp + 4]
mov edx, dword [0x449dc8]
test edx, edx
je 0x439d10
xor esi, esi
mov ebx, dword [0x449dcc]
nop
nop
nop
nop
nop
nop
nop
nop
cmp dword [ebx + esi*8], 0xe095b21b
je 0x439ce0
inc esi
cmp edx, esi
jne 0x439cd0
jmp 0x439d10
mov edx, dword [ebx + esi*8 + 4]
cmp edx, eax
je 0x439d10
push 0
push 0x1c
lea eax, [esp + 0x3c]
push eax
push 0
push dword [esp + 0x2c]
push ecx
push 0x18
push edx
push dword [0x449dd0]
call fcn.0043ad80
add esp, 0x24
nop
nop
nop
nop
nop
nop
nop
cmp eax, 0xbfffffff
ja 0x43a1d5
test eax, eax
js 0x439c53
cmp dword [esp + 0x44], 0x1000
jne 0x439c53
test byte [esp + 0x48], 0x66
je 0x439c53
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x20]
cmp eax, ecx
jbe 0x439eaa
mov dword [esp + 4], 0x24252627
mov byte [esp + 8], 0
xor ecx, ecx
mov edx, 0x67
movzx ebx, byte [esp + ecx + 4]
mov esi, ecx
or esi, ebx
or esi, 0x26ab1298
not ebx
or ebx, edx
and ebx, esi
mov esi, ebx
not esi
and esi, 0xf3
and ebx, 0xc
sub ebx, esi
add bl, 0x33
mov byte [esp + ecx + 4], bl
inc ecx
dec edx
cmp ecx, 5
jne 0x439d60
mov ecx, dword [0x449dc8]
test ecx, ecx
je 0x439dee
mov edx, dword [esp + 4]
xor esi, esi
mov ebx, dword [0x449dcc]
nop
nop
nop
nop
nop
nop
nop
nop
cmp dword [ebx + esi*8], 0x6a2d3ea3
je 0x439dc0
inc esi
cmp ecx, esi
jne 0x439db0
jmp 0x439dee
mov ecx, dword [ebx + esi*8 + 4]
cmp ecx, edx
je 0x439dee
push 0x8000
lea eax, [esp + 0x34]
push eax
lea eax, [esp + 0x1c]
push eax
push 0xffffffffffffffff
push 0x10
push ecx
push dword [0x449dd0]
call fcn.0043ad80
add esp, 0x1c
mov eax, dword [esp + 0x40]
mov dword [esp + 0x14], 0
mov dword [esp + 0x20], eax
mov dword [esp + 4], 0x24252627
mov byte [esp + 8], 0
xor eax, eax
mov ecx, 0x67
nop
nop
movzx edx, byte [esp + eax + 4]
mov esi, eax
or esi, edx
or esi, 0x26ab1298
not edx
or edx, ecx
and edx, esi
mov esi, edx
not esi
and esi, 0xf3
and edx, 0xc
sub edx, esi
add dl, 0x33
mov byte [esp + eax + 4], dl
inc eax
dec ecx
cmp eax, 5
jne 0x439e10
mov eax, dword [esp + 4]
mov ecx, dword [0x449dc8]
test ecx, ecx
je 0x439e9e
xor edx, edx
mov esi, dword [0x449dcc]
nop
nop
nop
nop
nop
nop
nop
nop
cmp dword [esi + edx*8], 0xa8f779e4
je 0x439e70
inc edx
cmp ecx, edx
jne 0x439e60
jmp 0x439e9e
mov ecx, dword [esi + edx*8 + 4]
cmp ecx, eax
je 0x439e9e
push 4
push 0x3000
lea eax, [esp + 0x28]
push eax
push 0
lea eax, [esp + 0x24]
push eax
push 0xffffffffffffffff
push 0x18
push ecx
push dword [0x449dd0]
call fcn.0043ad80
add esp, 0x24
test eax, eax
js 0x43a1d5
mov ecx, dword [esp + 0x20]
mov esi, dword [esp + 0x14]
mov eax, dword [edi]
mov dword [esp + 0x28], eax
mov dword [esp + 4], 0x24252627
mov byte [esp + 8], 0
xor eax, eax
mov ebx, 0x67
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [esp + eax + 4]
mov ebp, eax
or ebp, edx
or ebp, 0x26ab1298
not edx
or edx, ebx
and edx, ebp
mov ebp, edx
not ebp
and ebp, 0xf3
and edx, 0xc
sub edx, ebp
add dl, 0x33
mov byte [esp + eax + 4], dl
inc eax
dec ebx
cmp eax, 5
jne 0x439ed0
mov eax, dword [esp + 4]
mov edx, dword [0x449dc8]
test edx, edx
mov edi, dword [esp + 0x18]
je 0x439f60
xor ebx, ebx
mov ebp, dword [0x449dcc]
nop
nop
nop
nop
cmp dword [ebp + ebx*8], 0xa99f3325
je 0x439f31
inc ebx
cmp edx, ebx
jne 0x439f20
jmp 0x439f60
mov edx, dword [ebp + ebx*8 + 4]
cmp edx, eax
je 0x439f60
lea eax, [esp + 0x58]
push eax
push ecx
push esi
push dword [esp + 0x28]
push dword [esp + 0x38]
push 0x14
push edx
push dword [0x449dd0]
call fcn.0043ad80
add esp, 0x20
nop
nop
nop
nop
nop
nop
nop
test eax, eax
jns 0x439f6f
cmp eax, 0x8000000d
jne 0x439c49
push dword [esp + 0x7c]
push dword [esp + 0x7c]
push dword [esp + 0x7c]
push dword [esp + 0x64]
push dword [esp + 0x24]
lea eax, [esp + 0x18]
push eax
call fcn.0043a290
add esp, 0x18
mov esi, dword [esp + 4]
mov eax, dword [esp + 8]
mov dword [esp + 0x28], eax
cmp esi, eax
je 0x43a1ac
mov dword [esp + 0x50], esi
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp]
jmp 0x439ff7
push dword [esp + 0x18]
call fcn.004084e0
add esp, 4
mov ebx, dword [esp + 0x54]
mov eax, dword [esp + 0x2c]
lea edx, [eax + ebx*4]
mov ecx, eax
mov ebx, dword [esp]
add ecx, ebx
mov edi, eax
mov eax, dword [esp + 0x1c]
mov dword [edi + ebx], ebp
add ecx, 4
add esi, 4
cmp esi, dword [esp + 0x28]
je 0x43a168
mov ebp, dword [esi]
add ebp, eax
sub ebp, dword [esp + 0x14]
mov ebx, ecx
sub ebx, edi
cmp ecx, edx
jne 0x439fe4
mov dword [esp + 0x10], ecx
mov dword [esp], ebx
mov ecx, ebx
sar ecx, 2
lea eax, [ecx + 1]
mov edx, ecx
shr edx, 1
mov ebx, edx
and ebx, ecx
xor edx, ecx
lea ebx, [edx + ebx*2]
cmp ebx, eax
ja 0x43a029
mov ebx, eax
lea eax, [ebx*4]
push eax
call fcn.004084d0
add esp, 4
test edi, edi
je 0x439fd4
mov dword [esp + 0x54], ebx
cmp eax, edi
mov edx, eax
mov eax, dword [esp + 0x10]
mov ebx, dword [esp]
mov dword [esp + 0x18], edi
mov dword [esp + 0x2c], edx
jbe 0x43a112
cmp eax, edx
jbe 0x43a112
test ebx, ebx
je 0x439fc0
mov eax, dword [esp + 0x18]
mov edx, dword [esp]
add eax, edx
dec eax
mov ecx, dword [esp + 0x2c]
add ecx, edx
dec ecx
mov edi, edx
and edi, 7
je 0x43a0a3
neg edi
xor edx, edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ebx, byte [eax + edx]
mov byte [ecx + edx], bl
dec edx
cmp edi, edx
jne 0x43a090
add eax, edx
add ecx, edx
add edx, dword [esp]
mov edi, dword [esp + 0x18]
sub edi, dword [esp + 0x10]
cmp edi, 0xfffffff8
ja 0x439fc0
neg edx
xor edi, edi
nop
nop
nop
nop
nop
nop
nop
nop
movzx ebx, byte [eax + edi]
mov byte [ecx + edi], bl
movzx ebx, byte [eax + edi - 1]
mov byte [ecx + edi - 1], bl
movzx ebx, byte [eax + edi - 2]
mov byte [ecx + edi - 2], bl
movzx ebx, byte [eax + edi - 3]
mov byte [ecx + edi - 3], bl
movzx ebx, byte [eax + edi - 4]
mov byte [ecx + edi - 4], bl
movzx ebx, byte [eax + edi - 5]
mov byte [ecx + edi - 5], bl
movzx ebx, byte [eax + edi - 6]
mov byte [ecx + edi - 6], bl
movzx ebx, byte [eax + edi - 7]
mov byte [ecx + edi - 7], bl
add edi, 0xfffffff8
cmp edx, edi
jne 0x43a0c0
jmp 0x439fc0
mov ecx, ebx
shr ecx, 2
mov eax, edi
mov edi, edx
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
mov ecx, ebx
not ecx
or ecx, 0xfffffffc
add ecx, ebx
lea edi, [edx + ecx]
inc edi
mov eax, dword [esp + 0x18]
lea edx, [eax + ecx]
inc edx
mov ecx, ebx
shr ecx, 1
and ecx, 1
mov eax, ebx
mov ebx, edx
mov dword [esp + 0x10], edi
xchg esi, ebx
rep movsw word es:[edi], word [esi]
xchg esi, ebx
test al, 1
je 0x439fc0
mov ecx, dword [esp]
and ecx, 2
movzx edx, byte [edx + ecx]
mov eax, dword [esp + 0x10]
mov byte [eax + ecx], dl
jmp 0x439fc0
mov eax, dword [esp + 0x70]
mov dword [eax + 4], ecx
mov dword [esp + 0x18], edi
mov dword [eax], edi
mov dword [eax + 8], edx
mov eax, dword [esp + 0x50]
test eax, eax
je 0x43a1c8
mov dword [esp + 0x10], ecx
cmp eax, dword [esp + 0x28]
mov edi, dword [esp + 0x24]
je 0x439c50
push eax
mov esi, edx
call fcn.004084e0
mov edx, esi
add esp, 4
mov dword [esp + 4], 0
jmp 0x439c50
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 0x10]
mov dword [eax + 4], ecx
mov dword [eax], edi
mov edx, dword [esp]
mov dword [eax + 8], edx
mov edi, dword [esp + 0x24]
jmp 0x439c50
mov dword [esp + 0x10], ecx
mov edi, dword [esp + 0x24]
jmp 0x439c50
mov dword [esp + 4], 0x24252627
mov byte [esp + 8], 0
xor eax, eax
mov ecx, 0x67
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [esp + eax + 4]
mov esi, eax
or esi, edx
or esi, 0x26ab1298
not edx
or edx, ecx
and edx, esi
mov esi, edx
not esi
and esi, 0xf3
and edx, 0xc
sub edx, esi
add dl, 0x33
mov byte [esp + eax + 4], dl
inc eax
dec ecx
cmp eax, 5
jne 0x43a1f0
mov eax, dword [0x449dc8]
test eax, eax
je 0x43a27a
mov ecx, dword [esp + 4]
xor edx, edx
mov esi, dword [0x449dcc]
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp dword [esi + edx*8], 0x6a2d3ea3
je 0x43a250
inc edx
cmp eax, edx
jne 0x43a240
jmp 0x43a27a
mov eax, dword [esi + edx*8 + 4]
cmp eax, ecx
je 0x43a27a
lea ecx, [esp + 0x30]
lea edx, [esp + 0x14]
push 0x8000
push ecx
push edx
push 0xffffffffffffffff
push 0x10
push eax
push dword [0x449dd0]
call fcn.0043ad80
add esp, 0x1c
mov eax, dword [esp + 0x70]
add esp, 0x5c
pop esi
pop edi
pop ebx
pop ebp
ret 0x10