Function at 0x433f10
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x24
push ebx
push esi
push edi
push 0x4e28
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov esi, eax
mov bl, 0xfa
add esp, 4
mov dword [ebp - 0x14], esi
mov bh, bl
lea edx, [esi + 8]
mov dword [ebp - 0x1c], edx
nop word [eax + eax]
movzx ecx, bl
lea eax, [ecx + ecx*4]
cmp byte [eax*8 + 0x7efdde], 0
jne 0x433f60
add bl, 0xff
jne 0x433f40
nop word [eax + eax]
movzx eax, bh
lea eax, [eax + eax*4]
cmp byte [eax*8 + 0x7ed6ce], 0
jne 0x433f75
add bh, 0xff
jne 0x433f60
movzx eax, bl
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
mov dword [esi], 0xffff5c92
lea ecx, [eax + eax*4]
movzx eax, bh
shl ecx, 3
push ecx
push 0x7efde0
lea edi, [eax + eax*4]
mov dword [ebp - 4], ecx
shl edi, 3
push edx
mov dword [ebp - 0x20], edi
lea eax, [edi + ecx]
mov dword [ebp - 0x18], eax
add eax, 8
mov dword [ebp - 8], eax
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [ebp - 4]
add esp, 0xc
add eax, 8
add eax, esi
mov dword [ebp - 0x24], eax
push edi
push 0x7ed6d0
push eax
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [ebp - 8]
mov ecx, 8
add esp, 0xc
cmp eax, ecx
jbe 0x434058
cmp dword [ebp - 0x18], 2
jb 0x43402b
mov dx, word [ebp - 0x10]
lea edi, [esi + 1]
mov si, word [ebp - 0xc]
mov dword [ebp - 0x18], edi
nop word [eax + eax]
movsx eax, byte [edi + ecx - 1]
add si, ax
movsx eax, byte [edi + ecx]
mov edi, dword [ebp - 0x18]
add dx, ax
mov eax, dword [ebp - 8]
add ecx, 2
dec eax
cmp ecx, eax
jb 0x434000
mov eax, dword [ebp - 8]
mov word [ebp - 0xc], si
mov esi, dword [ebp - 0x14]
mov word [ebp - 0x10], dx
cmp ecx, eax
jae 0x434049
movsx ax, byte [ecx + esi]
mov ecx, 0x38b9
add ax, cx
movzx ecx, ax
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 0x10]
add ecx, eax
jmp 0x43405d
mov eax, dword [ebp - 0xc]
mov ecx, 0x38b9
add eax, dword [ebp - 0x10]
add ecx, eax
jmp 0x43405d
mov ecx, 0x38b9
mov eax, dword [0xa89008]
mov word [esi + 4], cx
mov ecx, dword [ebp - 4]
mov byte [esi + 6], bl
mov byte [esi + 7], bh
mov esi, dword [0xa89048]
test ecx, ecx
je 0x4340bc
shr ecx, 2
xor ebx, ebx
mov dword [ebp - 4], ecx
mov edi, esi
test ecx, ecx
je 0x4340bc
mov esi, ecx
nop dword [eax]
mov ecx, edi
mov edx, edi
shr ecx, 2
add ecx, eax
shr edx, 3
mov eax, edi
add ecx, edx
shr eax, 1
add eax, ecx
add edi, eax
mov eax, dword [ebp - 0x1c]
xor dword [eax + ebx*4], edi
inc ebx
mov eax, dword [0xa89008]
cmp ebx, esi
jb 0x434090
mov esi, dword [0xa89048]
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x4340f6
shr ebx, 2
xor edi, edi
test ebx, ebx
je 0x4340f6
nop dword [eax]
mov ecx, esi
mov edx, esi
shr ecx, 2
add ecx, eax
shr edx, 3
mov eax, esi
add ecx, edx
shr eax, 1
add eax, ecx
add esi, eax
mov eax, dword [ebp - 0x24]
xor dword [eax + edi*4], esi
inc edi
mov eax, dword [0xa89008]
cmp edi, ebx
jb 0x4340d0
mov edi, dword [ebp - 8]
mov esi, dword [ebp - 0x14]
mov edx, esi
push ecx
push edi
mov ecx, 0xb0b800
call fcn.0042ce90
mov bl, al
add esp, 8
test bl, bl
je 0x434124
push ecx
push edi
mov edx, esi
mov ecx, 0xb0b880
call fcn.0042ce90
add esp, 8
push esi
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
mov al, bl
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret