Function at 0x436800
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x80
mov esi, ecx
mov eax, dword [ecx + 4]
test eax, eax
je 0x436822
cmp eax, 2
je 0x43689b
jmp 0x4369cd
push 0xbbf966b4
push dword [0x4490e8]
call fcn.0043b9b0
add esp, 8
test eax, eax
je 0x43685f
mov ecx, dword [esi]
test ecx, ecx
je 0x43688f
mov dword [esp], 0
mov edx, esp
push edx
push ecx
call eax
test eax, eax
je 0x43686b
cmp dword [esp], 0
je 0x43686b
mov dword [esi + 4], 3
jmp 0x43688f
mov dword [esi + 4], 1
jmp 0x4369cd
lea eax, [esp + 0x40]
push eax
call fcn.0043c2d0
add esp, 4
test al, al
je 0x43688f
mov eax, dword [esp + 0x40]
mov ecx, 2
cmp eax, 3
je 0x43688c
mov ecx, eax
mov dword [esi + 4], ecx
mov eax, dword [esi + 4]
cmp eax, 2
jne 0x4369cd
mov edi, dword [ebp + 0xc]
mov dword [esp], 0xfe03fd06
mov dword [esp + 4], 0x1e7fff1
mov dword [esp + 8], 0xe6e6fbf1
mov dword [esp + 0xc], 0xfa13f105
mov dword [esp + 0x10], 0xeaf0f6f5
mov byte [esp + 0x14], 0x9c
mov dword [esp + 0x15], 0
mov byte [esp + 0x19], 0
mov eax, 0x5905296c
nop
nop
nop
nop
movzx ecx, byte [esp + eax - 0x5905296c]
lea edx, [ecx + ecx]
not edx
add edx, ecx
and edx, 0x5878a9e2
and ecx, 0x1d
or ecx, edx
mov edx, eax
xor edx, 0x5878a9e2
mov ebx, ecx
and ebx, edx
add edx, ecx
add ebx, ebx
sub edx, ebx
add dl, 0xe4
mov byte [esp + eax - 0x5905296c], dl
inc eax
cmp eax, 0x59052986
jne 0x4368e0
mov ebx, esp
lea eax, [esp + 0x70]
push ebx
push eax
call fcn.0043ab20
add esp, 8
mov eax, dword [esi]
mov dword [esp + 0x40], eax
mov dword [esp + 0x44], 0
mov dword [esp + 0x4c], edi
mov eax, dword [ebp + 8]
mov dword [esp + 0x48], eax
mov dword [esp + 0x54], 0
mov dword [esp + 0x50], 0
mov dword [esp + 0x58], ebx
mov dword [esp + 0x5c], 0
mov dword [esp + 0x64], 0
mov dword [esp + 0x60], 0x30
mov dword [esp + 0x6c], 0
mov dword [esp + 0x68], 0
lea eax, [esp + 0x40]
push 6
push eax
push dword [esp + 0x7c]
push dword [esp + 0x7c]
call fcn.0043abf0
mov ecx, dword [esp]
mov edx, dword [esp + 4]
mov esi, dword [ebp + 0x10]
mov dword [esi + 4], edx
mov dword [esi], ecx
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov esi, dword [ebp + 0x14]
mov dword [esi], edx
mov dword [esi + 4], ecx
mov ecx, dword [esp + 0x20]
mov edx, dword [ebp + 0x18]
mov dword [edx], ecx
mov ecx, dword [esp + 0x24]
mov edx, dword [ebp + 0x1c]
mov dword [edx], ecx
jmp 0x436ad0
mov dword [esp + 0x40], 0x90a0b28
mov dword [esp + 0x44], 0
mov eax, 0xfc
mov ecx, 3
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edi, byte [esp + ecx + 0x3d]
mov edx, eax
xor edx, ecx
and edx, edi
xor edx, ecx
add dl, 0xf1
mov byte [esp + ecx + 0x3d], dl
dec eax
inc ecx
cmp eax, 0xf4
jne 0x4369f0
mov eax, dword [esp + 0x40]
mov dword [esp + 0x38], eax
mov eax, dword [esi]
mov dword [esp + 0x3c], eax
mov dword [esp], 0xd8dbdac5
mov dword [esp + 4], 0
mov esi, 0xeb3b672f
mov edi, 0x14c498d0
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ebx, byte [esp + esi + 0x14c498d1]
mov ecx, ebx
xor ecx, esi
or ecx, edi
mov eax, ecx
shr al, 1
and al, 1
mov edx, ecx
not dl
mov ah, dl
and ah, 0x3d
mul ah
add al, al
sub bl, al
test cl, 2
sete al
or dl, 2
mul dl
add al, al
sub bl, al
movzx eax, bl
add eax, esi
add al, 0x15
mov byte [esp + esi + 0x14c498d1], al
inc esi
dec edi
cmp esi, 0xeb3b6737
jne 0x436a40
mov eax, dword [esp]
mov ecx, dword [0x4490f4]
test ecx, ecx
je 0x436aae
xor edx, edx
mov esi, dword [0x4490f8]
nop
cmp dword [esi + edx*8], 0xba50defc
je 0x436ada
inc edx
cmp ecx, edx
jne 0x436aa0
mov edx, dword [ebp + 0x10]
mov dword [edx], ecx
mov dword [edx + 4], 0
mov ecx, dword [ebp + 0x14]
mov dword [ecx], ebx
mov dword [ecx + 4], 0
mov ecx, dword [ebp + 0x18]
mov dword [ecx], edi
mov ecx, dword [ebp + 0x1c]
mov dword [ecx], esi
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret 0x18
mov edx, dword [esi + edx*8 + 4]
cmp edx, eax
je 0x436aae
mov eax, esp
push 0
push dword [esp + 0x3c]
push eax
push 0
push dword [ebp + 8]
push dword [esp + 0x50]
push 0x18
push edx
push dword [0x4490fc]
call fcn.00438910
add esp, 0x24
mov ecx, dword [esp]
mov ebx, dword [esp + 0xc]
mov edi, dword [esp + 0x10]
mov esi, dword [esp + 0x14]
jmp 0x436aae