Function at 0x43bda5
Capabilities:
Encode data using xor

Disassembly:
sub esp, 0x15c
mov eax, dword [0x4adadc]
xor eax, esp
mov dword [esp + 0x158], eax
mov edx, dword [esp + 0x164]
mov ecx, dword [esp + 0x160]
push ebx
push ebp
push esi
xor esi, esi
mov dword [esp + 0x1c], ecx
push edi
mov edi, esi
add edx, 2
movzx ecx, byte [edx - 2]
movzx eax, byte [edx - 1]
shl ecx, 8
or ecx, eax
movzx eax, byte [edx]
shl ecx, 8
lea edx, [edx + 4]
or ecx, eax
movzx eax, byte [edx - 3]
shl ecx, 8
or ecx, eax
mov dword [esp + edi*4 + 0x28], ecx
inc edi
cmp edi, 0x10
jb 0x43bdd6
push pe_nt_image_headers32
lea ecx, [esp + 0x34]
pop edx
mov eax, dword [ecx + 0x2c]
xor eax, dword [ecx + 0x18]
xor eax, dword [ecx - 8]
xor eax, dword [ecx]
lea ecx, [ecx + 4]
rol eax, 1
mov dword [ecx + 0x34], eax
sub edx, 1
jne 0x43be08
mov eax, dword [esp + 0x20]
mov dword [esp + 0x14], 4
mov ecx, dword [eax]
mov edi, ecx
mov ebx, dword [eax + 4]
mov ebp, dword [eax + 8]
mov edx, dword [eax + 0xc]
mov eax, dword [eax + 0x10]
mov dword [esp + 0x24], ecx
mov dword [esp + 0x10], eax
mov eax, edx
mov ecx, edi
xor eax, ebp
rol ecx, 5
and eax, ebx
ror ebx, 2
xor eax, edx
add ecx, eax
mov eax, dword [esp + 0x10]
add ecx, dword [esp + esi*4 + 0x28]
add eax, 0x5a827999
add eax, ecx
mov dword [esp + 0x10], eax
mov ecx, eax
rol ecx, 5
mov eax, ebp
xor eax, ebx
and eax, edi
ror edi, 2
xor eax, ebp
add eax, 0x5a827999
add ecx, eax
mov eax, ebx
add ecx, dword [esp + esi*4 + 0x2c]
xor eax, edi
and eax, dword [esp + 0x10]
add edx, ecx
xor eax, ebx
mov ecx, edx
add eax, 0x5a827999
rol ecx, 5
add ecx, eax
mov eax, dword [esp + 0x10]
add ecx, dword [esp + esi*4 + 0x30]
ror eax, 2
add ebp, ecx
mov dword [esp + 0x10], eax
mov ecx, ebp
xor eax, edi
rol ecx, 5
and eax, edx
ror edx, 2
xor eax, edi
add edi, 0x5a827999
add eax, 0x5a827999
add ecx, eax
mov eax, dword [esp + 0x10]
add ecx, dword [esp + esi*4 + 0x34]
xor eax, edx
add ebx, ecx
and eax, ebp
xor eax, dword [esp + 0x10]
mov ecx, ebx
rol ecx, 5
add ecx, eax
ror ebp, 2
add ecx, dword [esp + esi*4 + 0x38]
add esi, 5
add edi, ecx
sub dword [esp + 0x14], 1
jne 0x43be44
mov dword [esp + 0x14], 4
mov eax, edx
mov ecx, edi
xor eax, ebp
rol ecx, 5
xor eax, ebx
ror ebx, 2
add ecx, eax
mov eax, dword [esp + 0x10]
add ecx, dword [esp + esi*4 + 0x28]
add eax, 0x6ed9eba1
add eax, ecx
mov dword [esp + 0x10], eax
mov ecx, eax
rol ecx, 5
mov eax, ebp
xor eax, ebx
xor eax, edi
ror edi, 2
add eax, 0x6ed9eba1
add ecx, eax
mov eax, dword [esp + 0x10]
add ecx, dword [esp + esi*4 + 0x2c]
xor eax, ebx
add edx, ecx
xor eax, edi
add eax, 0x6ed9eba1
mov ecx, edx
rol ecx, 5
add ecx, eax
mov eax, dword [esp + 0x10]
add ecx, dword [esp + esi*4 + 0x30]
add ebp, ecx
ror eax, 2
mov dword [esp + 0x10], eax
mov ecx, ebp
xor eax, edx
rol ecx, 5
xor eax, edi
ror edx, 2
add eax, 0x6ed9eba1
add edi, 0x6ed9eba1
add ecx, eax
mov eax, dword [esp + 0x10]
add ecx, dword [esp + esi*4 + 0x34]
xor eax, edx
add ebx, ecx
xor eax, ebp
mov ecx, ebx
ror ebp, 2
rol ecx, 5
add ecx, eax
add ecx, dword [esp + esi*4 + 0x38]
add esi, 5
add edi, ecx
sub dword [esp + 0x14], 1
jne 0x43bf00
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], 4
mov ecx, ebp
lea esi, [esi + 5]
or ecx, ebx
mov eax, ebp
and ecx, dword [esp + 0x14]
and eax, ebx
or ecx, eax
ror ebx, 2
add ecx, dword [esp + esi*4 + 0x14]
mov edx, edi
add ecx, dword [esp + 0x10]
rol edx, 5
lea eax, [edx - 0x70e44324]
add eax, ecx
mov ecx, ebx
or ecx, edi
mov dword [esp + 0x10], eax
and ecx, ebp
mov edx, eax
rol edx, 5
mov eax, ebx
and eax, edi
ror edi, 2
or ecx, eax
add ecx, dword [esp + esi*4 + 0x18]
add ecx, dword [esp + 0x14]
lea eax, [edx - 0x70e44324]
add eax, ecx
mov dword [esp + 0x14], eax
mov edx, eax
mov eax, dword [esp + 0x10]
mov ecx, eax
or ecx, edi
rol edx, 5
and ecx, ebx
and eax, edi
or ecx, eax
mov eax, dword [esp + 0x10]
add ecx, dword [esp + esi*4 + 0x1c]
add ecx, ebp
ror eax, 2
lea ebp, [edx - 0x70e44324]
mov dword [esp + 0x10], eax
add ebp, ecx
mov ecx, eax
or ecx, dword [esp + 0x14]
mov edx, ebp
and eax, dword [esp + 0x14]
and ecx, edi
or ecx, eax
rol edx, 5
add ecx, dword [esp + esi*4 + 0x20]
mov eax, dword [esp + 0x14]
add ecx, ebx
ror eax, 2
lea ebx, [edx - 0x70e44324]
mov dword [esp + 0x14], eax
add ebx, ecx
mov ecx, eax
or ecx, ebp
and eax, ebp
and ecx, dword [esp + 0x10]
mov edx, ebx
or ecx, eax
rol edx, 5
add ecx, dword [esp + esi*4 + 0x24]
add ecx, edi
ror ebp, 2
lea edi, [edx - 0x70e44324]
add edi, ecx
sub dword [esp + 0x18], 1
jne 0x43bfb4
mov edx, dword [esp + 0x14]
lea eax, [esp + 0x28]
lea eax, [eax + esi*4]
mov dword [esp + 0x1c], 4
mov esi, dword [esp + 0x10]
mov dword [esp + 0x18], eax
mov ecx, edi
mov eax, edx
xor eax, ebp
rol ecx, 5
xor eax, ebx
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0x18]
add dword [esp + 0x18], 4
ror ebx, 2
add eax, dword [ecx]
add eax, esi
mov esi, dword [esp + 0x14]
add esi, 0xca62c1d6
add esi, eax
mov eax, ebp
xor eax, ebx
mov ecx, esi
xor eax, edi
rol ecx, 5
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0x18]
add dword [esp + 0x18], 4
ror edi, 2
mov dword [esp + 0x10], edi
add eax, dword [ecx]
add eax, edx
mov edx, dword [esp + 0x14]
add edx, 0xca62c1d6
add edx, eax
mov eax, esi
xor eax, ebx
ror esi, 2
xor eax, edi
mov ecx, edx
rol ecx, 5
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0x18]
add dword [esp + 0x18], 4
add eax, dword [ecx]
add eax, ebp
mov ebp, dword [esp + 0x14]
add ebp, 0xca62c1d6
add ebp, eax
mov eax, esi
xor eax, edx
mov ecx, ebp
xor eax, edi
rol ecx, 5
mov edi, dword [esp + 0x18]
add dword [esp + 0x18], 4
ror edx, 2
add eax, dword [edi]
mov edi, dword [esp + 0x18]
add eax, ebx
add dword [esp + 0x18], 4
lea ebx, [ecx - 0x359d3e2a]
add ebx, eax
mov eax, esi
xor eax, edx
mov ecx, ebx
xor eax, ebp
rol ecx, 5
add eax, dword [edi]
add eax, dword [esp + 0x10]
ror ebp, 2
lea edi, [ecx - 0x359d3e2a]
add edi, eax
sub dword [esp + 0x1c], 1
jne 0x43c0a9
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x24]
add eax, edi
push 0x140
add dword [ecx + 4], ebx
add dword [ecx + 8], ebp
add dword [ecx + 0xc], edx
add dword [ecx + 0x10], esi
mov dword [ecx], eax
lea eax, [esp + 0x2c]
push eax
call fcn.0045e53c
pop ecx
pop ecx
mov ecx, dword [esp + 0x168]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.004659d6
add esp, 0x15c
ret