Function at 0x4339d0
Capabilities:
Encode data using xor
Encrypt data using rc4 ksa

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x13c
mov eax, dword [0x524ee0]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0x18]
push ebx
push esi
mov esi, dword [0x526340]
mov dword [ebp - 0x138], eax
mov eax, esi
imul eax, esi
cdq
mov ecx, 0x18
idiv ecx
mov ebx, dword [ebp + 8]
push edi
mov edi, dword [ebp + 0x10]
mov dword [ebp - 0x128], ebx
mov dword [ebp - 0x13c], edi
cmp edx, 0x11
jne 0x433a59
xor ecx, ecx
jmp 0x433a20
mov eax, dword [ebp + ecx*4 - 0x10c]
add eax, dword [ebp + ecx*4 - 0x110]
add ecx, 5
add eax, dword [ebp + ecx*4 - 0x128]
add eax, dword [ebp + ecx*4 - 0x12c]
add eax, dword [ebp + ecx*4 - 0x130]
imul eax, eax, 0x6d
add esi, eax
cmp ecx, 0x118
jb 0x433a20
mov dword [0x526340], esi
test ebx, ebx
je 0x433d27
test edi, edi
je 0x433d27
lea eax, [ebp - 0x124]
push eax
push dword [ebp + 0xc]
push ebx
call fcn.00433fa0
add esp, 0xc
test al, al
je 0x433d27
mov eax, dword [ebp - 0x124]
cmp eax, dword [ebp + 0x14]
ja 0x433d27
call fcn.00434050
call fcn.00434080
test al, al
jne 0x433b2a
xor edx, edx
mov ecx, edx
and ecx, 1
dec ecx
not ecx
and ecx, esi
mov eax, edx
sar eax, 1
xor ecx, eax
mov eax, ecx
and eax, 1
dec eax
not eax
and eax, esi
sar ecx, 1
xor eax, ecx
mov ecx, eax
and ecx, 1
dec ecx
sar eax, 1
not ecx
and ecx, esi
xor ecx, eax
mov eax, ecx
and eax, 1
dec eax
not eax
and eax, esi
sar ecx, 1
xor eax, ecx
mov ecx, eax
and ecx, 1
dec ecx
sar eax, 1
not ecx
and ecx, esi
xor ecx, eax
mov eax, ecx
and eax, 1
dec eax
not eax
and eax, esi
sar ecx, 1
xor eax, ecx
mov ecx, eax
and ecx, 1
dec ecx
sar eax, 1
not ecx
and ecx, esi
xor ecx, eax
mov eax, ecx
and eax, 1
dec eax
not eax
and eax, esi
sar ecx, 1
xor eax, ecx
inc edx
add esi, eax
cmp edx, 0x100
jl 0x433aa7
mov dword [0x526340], esi
xor ebx, ebx
xor edi, edi
cmp dword [ebp + 0xc], ebx
jbe 0x433d06
jmp 0x433b40
mov ecx, dword [ebp - 0x128]
mov al, byte [ecx + ebx]
mov byte [ebp - 0x11f], al
mov al, byte [ecx + ebx + 1]
mov byte [ebp - 0x120], al
mov al, byte [ecx + ebx + 2]
mov byte [ebp - 0x11d], al
call fcn.0043fae0
test al, al
jne 0x433bad
mov eax, 0x51eb851f
imul esi
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
imul ecx, ecx, 0x64
sub esi, ecx
xor ecx, ecx
lea eax, [esi + 0x2f4]
mov edx, 4
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004a7aa0
push eax
call fcn.004a98f0
mov esi, dword [0x526340]
add esp, 8
mov eax, dword [ebp - 0x128]
add ebx, 4
mov al, byte [eax + ebx - 1]
mov byte [ebp - 0x11e], al
mov al, byte [ebp - 0x11f]
mov dword [ebp - 0x134], ebx
cmp al, 0x3d
je 0x433bdc
movzx eax, al
movzx ebx, byte [eax + 0x526e20]
jmp 0x433bde
xor ebx, ebx
mov al, byte [ebp - 0x120]
cmp al, 0x3d
je 0x433bfa
movzx eax, al
movzx ecx, byte [eax + 0x526e20]
mov dword [ebp - 0x12c], ecx
jmp 0x433c04
mov dword [ebp - 0x12c], 0
mov eax, esi
imul eax, esi
cdq
mov ecx, 0x18
idiv ecx
mov eax, dword [0x526f3c]
mov ecx, 0xfa78633d
cmp edx, 8
cmove eax, ecx
mov dword [0x526f3c], eax
mov al, byte [ebp - 0x11d]
cmp al, 0x3d
je 0x433c42
movzx eax, al
movzx eax, byte [eax + 0x526e20]
mov dword [ebp - 0x130], eax
jmp 0x433c4c
mov dword [ebp - 0x130], 0
call fcn.004340b0
test al, al
jne 0x433c79
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateFileW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
mov esi, dword [0x526340]
mov al, byte [ebp - 0x11e]
cmp al, 0x3d
je 0x433c8f
movzx eax, al
movzx eax, byte [eax + 0x526e20]
jmp 0x433c91
xor eax, eax
mov ecx, dword [ebp - 0x124]
shl ebx, 6
add ebx, dword [ebp - 0x12c]
shl ebx, 6
add ebx, dword [ebp - 0x130]
shl ebx, 6
add ebx, eax
cmp edi, ecx
jae 0x433cdc
mov edx, dword [ebp - 0x13c]
mov eax, ebx
shr eax, 0x10
mov byte [edx + edi], al
inc edi
cmp edi, ecx
jae 0x433cd6
mov eax, ebx
shr eax, 8
mov byte [edx + edi], al
inc edi
cmp edi, ecx
jae 0x433cd6
mov byte [edx + edi], bl
inc edi
mov esi, dword [0x526340]
mov ebx, dword [ebp - 0x134]
cmp ebx, dword [ebp + 0xc]
jb 0x433b40
mov eax, dword [ebp - 0x138]
pop edi
pop esi
mov dword [eax], ecx
mov al, 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004a8b24
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x124]
pop edi
pop esi
mov dword [eax], ecx
mov al, 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004a8b24
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
xor al, al
pop ebx
call fcn.004a8b24
mov esp, ebp
pop ebp
ret