Function at 0x436f70
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x80
mov ebx, ecx
mov edi, dword [ebp + 8]
mov dword [edi + 8], 0
mov dword [edi + 4], 0
mov dword [edi], 0
mov dword [esp + 0x3c], 0
mov dword [esp + 0x30], 0x100000
mov dword [esp + 0x10], 0
mov dword [esp], 0x94959697
mov word [esp + 4], 0
mov byte [esp + 6], 0
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, eax
add cl, 0x24
xor cl, byte [esp + eax]
add cl, 0x4c
mov byte [esp + eax], cl
inc eax
cmp eax, 7
jne 0x436fd0
mov eax, dword [esp]
mov ecx, dword [0x449860]
test ecx, ecx
je 0x43703e
xor edx, edx
mov esi, dword [0x449864]
nop
nop
nop
nop
nop
nop
nop
cmp dword [esi + edx*8], 0x3e416e49
je 0x437010
inc edx
cmp ecx, edx
jne 0x437000
jmp 0x43703e
mov ecx, dword [esi + edx*8 + 4]
cmp ecx, eax
je 0x43703e
lea eax, [esp + 0x30]
lea edx, [esp + 0x10]
push 4
push 0x3000
push eax
push 0
push edx
push 0xffffffffffffffff
push 0x18
push ecx
push dword [0x449868]
call fcn.00439510
add esp, 0x24
test eax, eax
js 0x43769e
cmp dword [ebx + 4], 0
je 0x437630
mov dword [esp + 0x24], ebx
mov eax, dword [ebx + 4]
mov dword [esp + 0x20], eax
mov dword [esp + 0x4c], 0
mov dword [esp + 0x48], 0
mov dword [esp + 0x44], 0
mov dword [esp + 0x40], 0
mov dword [esp + 0x58], 0
mov dword [esp + 0x54], 0
mov dword [esp], 0x292d2b24
mov ecx, 0x77096577
mov edx, 0x8f69a88
nop
nop
nop
nop
movzx edi, byte [esp + ecx - 0x77096577]
mov esi, ecx
and esi, edi
mov ebx, esi
and ebx, 0x7d
mov eax, esi
and eax, 2
or esi, 2
imul esi, eax
xor eax, 2
imul eax, ebx
add esi, eax
mov ebx, esi
xor ebx, ecx
add ebx, edi
and esi, edx
add esi, esi
not esi
add ebx, esi
add bl, 0xae
mov byte [esp + ecx - 0x77096577], bl
inc ecx
dec edx
cmp ecx, 0x7709657b
jne 0x4370a0
mov dword [esp + 0x34], 0x7fff
cmp dword [esp + 0x20], 2
je 0x4370fd
mov dword [esp + 0x34], 0
mov eax, 0xfffeffff
je 0x437109
mov eax, SysReAllocString
mov edx, dword [esp]
mov ecx, edx
sar ecx, 0x1f
mov dword [esp + 0x14], eax
cmp edx, eax
mov dword [esp + 0x20], ecx
mov eax, ecx
sbb eax, dword [esp + 0x34]
mov ebx, dword [esp + 0x24]
jae 0x4375d0
mov dword [esp + 0x1c], 0
mov dword [esp + 0xc], 0
xor edi, edi
nop
nop
nop
mov dword [esp + 0x2c], edx
mov ecx, ebx
lea eax, [esp + 0x54]
push eax
lea eax, [esp + 0x5c]
push eax
lea eax, [esp + 0x48]
push eax
lea eax, [esp + 0x54]
push eax
push dword [esp + 0x30]
push edx
call fcn.00436b40
mov edx, dword [esp + 0x2c]
cmp eax, 0xbfffffff
ja 0x4375d0
test eax, eax
js 0x4375a0
cmp dword [esp + 0x58], 0x1000
jne 0x4375a0
test byte [esp + 0x54], 0x66
je 0x4375a0
mov esi, dword [esp + 0x40]
cmp dword [esp + 0x30], esi
mov ecx, dword [esp + 0x44]
mov eax, 0
mov dword [esp + 0x38], ecx
sbb eax, ecx
jae 0x4372ee
mov dword [esp], 0x94959697
lea eax, [esp + 4]
mov byte [eax + 2], 0
mov word [eax], 0
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, eax
add cl, 0x24
xor cl, byte [esp + eax]
add cl, 0x4c
mov byte [esp + eax], cl
inc eax
cmp eax, 7
jne 0x4371d0
mov eax, dword [0x449860]
test eax, eax
je 0x43723a
mov ebx, dword [esp]
xor edx, edx
mov ecx, dword [0x449864]
nop
nop
nop
nop
nop
nop
nop
nop
cmp dword [ecx + edx*8], 0x16194952
je 0x437210
inc edx
cmp eax, edx
jne 0x437200
jmp 0x43723a
mov eax, dword [ecx + edx*8 + 4]
cmp eax, ebx
je 0x43723a
push 0x8000
lea ecx, [esp + 0x40]
push ecx
lea ecx, [esp + 0x18]
push ecx
push 0xffffffffffffffff
push 0x10
push eax
push dword [0x449868]
call fcn.00439510
add esp, 0x1c
mov dword [esp + 0x3c], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x30], esi
mov dword [esp], 0x94959697
lea eax, [esp + 4]
mov byte [eax + 2], 0
mov word [eax], 0
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, eax
add cl, 0x24
xor cl, byte [esp + eax]
add cl, 0x4c
mov byte [esp + eax], cl
inc eax
cmp eax, 7
jne 0x437270
mov eax, dword [esp]
mov ecx, dword [0x449860]
test ecx, ecx
je 0x4372de
xor edx, edx
mov ebx, dword [0x449864]
nop
nop
nop
nop
nop
nop
nop
cmp dword [ebx + edx*8], 0x3e416e49
je 0x4372b0
inc edx
cmp ecx, edx
jne 0x4372a0
jmp 0x4372de
mov ecx, dword [ebx + edx*8 + 4]
cmp ecx, eax
je 0x4372de
push 4
push 0x3000
lea eax, [esp + 0x38]
push eax
push 0
lea eax, [esp + 0x20]
push eax
push 0xffffffffffffffff
push 0x18
push ecx
push dword [0x449868]
call fcn.00439510
add esp, 0x24
test eax, eax
mov ebx, dword [esp + 0x24]
mov edx, dword [esp + 0x2c]
js 0x4375d0
mov ecx, ebx
lea eax, [esp + 0x70]
push eax
push dword [esp + 0x3c]
push esi
push dword [esp + 0x1c]
push dword [esp + 0x30]
push edx
call fcn.00436e10
test eax, eax
jns 0x437317
cmp eax, 0x8000000d
jne 0x4375a0
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 0x74]
mov edx, dword [ebp + 0x10]
cmp eax, edx
sbb ecx, 0
jb 0x4375a0
push dword [ebp + 0x14]
push edx
push dword [ebp + 0xc]
push eax
push dword [esp + 0x20]
lea eax, [esp + 0x14]
push eax
call fcn.004376f0
add esp, 0x18
mov esi, dword [esp]
mov eax, dword [esp + 4]
mov dword [esp + 0x50], eax
cmp esi, eax
je 0x43758a
mov dword [esp + 0x5c], esi
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x2c]
jmp 0x4373b8
push dword [esp + 0xc]
call fcn.004084d0
add esp, 4
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x1c]
lea eax, [ecx + eax*8]
mov dword [esp + 0x1c], eax
mov edi, ecx
mov edx, dword [esp + 0x68]
add edi, edx
mov eax, dword [esp + 0x2c]
mov ebx, dword [esp + 0x38]
mov dword [ecx + edx], ebx
mov ebx, edx
mov edx, dword [esp + 0x6c]
mov dword [ecx + ebx + 4], edx
add edi, 8
add esi, 4
cmp esi, dword [esp + 0x50]
je 0x43754f
mov ebx, dword [esi]
sub ebx, dword [esp + 0x10]
mov edx, ebx
sar edx, 0x1f
add ebx, eax
mov dword [esp + 0x38], ebx
adc edx, dword [esp + 0x20]
mov dword [esp + 0x6c], edx
mov edx, edi
sub edx, ecx
cmp edi, dword [esp + 0x1c]
jne 0x437397
mov dword [esp + 0xc], ecx
mov dword [esp + 0x68], edx
mov ecx, edx
sar ecx, 3
lea eax, [ecx + 1]
mov edx, ecx
shr edx, 1
add edx, ecx
cmp edx, eax
ja 0x4373f7
mov edx, eax
mov dword [esp + 0x1c], edx
lea eax, [edx*8]
push eax
call fcn.004084c0
add esp, 4
mov ecx, eax
mov edx, dword [esp + 0xc]
test edx, edx
je 0x437380
mov eax, edi
not eax
and eax, edx
mov ebx, edx
not ebx
and ebx, edi
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], eax
sub ebx, eax
cmp ecx, edx
mov dword [esp + 0x28], ecx
jbe 0x437502
mov dword [esp + 0x18], ebx
mov eax, dword [esp + 0x18]
add eax, edx
cmp eax, ecx
mov ebx, dword [esp + 0x18]
jbe 0x437502
test ebx, ebx
je 0x437370
mov eax, dword [esp + 0xc]
add eax, ebx
dec eax
mov ecx, dword [esp + 0x28]
add ecx, ebx
dec ecx
mov edx, ebx
and edx, 7
je 0x437494
neg edx
xor edi, edi
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ebx, byte [eax + edi]
mov byte [ecx + edi], bl
dec edi
cmp edx, edi
jne 0x437480
add eax, edi
add ecx, edi
add dword [esp + 0x18], edi
mov edx, dword [esp + 0x64]
sub edx, dword [esp + 0x60]
cmp edx, 0xfffffff8
mov ebx, dword [esp + 0x18]
ja 0x437370
neg ebx
xor edi, edi
nop
nop
nop
movzx edx, byte [eax + edi]
mov byte [ecx + edi], dl
movzx edx, byte [eax + edi - 1]
mov byte [ecx + edi - 1], dl
movzx edx, byte [eax + edi - 2]
mov byte [ecx + edi - 2], dl
movzx edx, byte [eax + edi - 3]
mov byte [ecx + edi - 3], dl
movzx edx, byte [eax + edi - 4]
mov byte [ecx + edi - 4], dl
movzx edx, byte [eax + edi - 5]
mov byte [ecx + edi - 5], dl
movzx edx, byte [eax + edi - 6]
mov byte [ecx + edi - 6], dl
movzx edx, byte [eax + edi - 7]
mov byte [ecx + edi - 7], dl
add edi, 0xfffffff8
cmp ebx, edi
jne 0x4374b0
jmp 0x437370
mov ecx, ebx
shr ecx, 2
mov eax, edx
mov edi, dword [esp + 0x28]
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
mov eax, ebx
and eax, 0xfffffffc
mov ecx, dword [esp + 0x28]
lea edi, [ecx + eax]
add eax, edx
mov ecx, ebx
shr ecx, 1
and ecx, 1
mov edx, eax
mov dword [esp + 0x18], edi
xchg esi, edx
rep movsw word es:[edi], word [esi]
xchg esi, edx
test bl, 1
je 0x437370
and ebx, 2
movzx eax, byte [eax + ebx]
mov ecx, dword [esp + 0x18]
mov byte [ecx + ebx], al
jmp 0x437370
mov eax, dword [ebp + 8]
mov dword [eax + 4], edi
mov dword [eax], ecx
mov edx, dword [esp + 0x1c]
mov dword [eax + 8], edx
mov eax, dword [esp + 0x5c]
test eax, eax
mov esi, dword [esp + 0x14]
je 0x4375c6
mov dword [esp + 0xc], ecx
cmp eax, dword [esp + 0x50]
mov ebx, dword [esp + 0x24]
je 0x4375a4
push eax
call fcn.004084d0
add esp, 4
mov dword [esp], 0
jmp 0x4375a4
mov eax, dword [ebp + 8]
mov dword [eax + 4], edi
mov ecx, dword [esp + 0xc]
mov dword [eax], ecx
mov ecx, dword [esp + 0x1c]
mov dword [eax + 8], ecx
nop
nop
nop
mov esi, dword [esp + 0x14]
mov edx, dword [esp + 0x40]
add edx, dword [esp + 0x48]
mov eax, dword [esp + 0x44]
adc eax, dword [esp + 0x4c]
cmp edx, esi
mov dword [esp + 0x20], eax
sbb eax, dword [esp + 0x34]
jb 0x437140
jmp 0x4375d0
mov dword [esp + 0xc], ecx
mov ebx, dword [esp + 0x24]
jmp 0x4375a4
mov dword [esp], 0x94959697
mov word [esp + 4], 0
mov byte [esp + 6], 0
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, eax
add cl, 0x24
xor cl, byte [esp + eax]
add cl, 0x4c
mov byte [esp + eax], cl
inc eax
cmp eax, 7
jne 0x4375f0
mov eax, dword [0x449860]
test eax, eax
mov edi, dword [ebp + 8]
je 0x43769e
mov ecx, dword [esp]
xor edx, edx
mov esi, dword [0x449864]
nop
cmp dword [esi + edx*8], 0x16194952
je 0x437674
inc edx
cmp eax, edx
jne 0x437620
jmp 0x43769e
push 0xbbf966b4
push dword [0x449854]
call fcn.0043c130
add esp, 8
test eax, eax
je 0x4376aa
mov ecx, dword [ebx]
test ecx, ecx
je 0x437050
mov dword [esp], 0
mov edx, esp
push edx
push ecx
call eax
test eax, eax
je 0x4376b6
cmp dword [esp], 0
je 0x4376b6
mov dword [ebx + 4], 3
jmp 0x437050
mov eax, dword [esi + edx*8 + 4]
cmp eax, ecx
je 0x43769e
lea ecx, [esp + 0x3c]
lea edx, [esp + 0x10]
push 0x8000
push ecx
push edx
push 0xffffffffffffffff
push 0x10
push eax
push dword [0x449868]
call fcn.00439510
add esp, 0x1c
mov eax, edi
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret 0x10
mov dword [ebx + 4], 1
jmp 0x437050
lea eax, [esp + 0x48]
push eax
call fcn.0043c9d0
add esp, 4
test al, al
je 0x437050
mov eax, dword [esp + 0x48]
mov ecx, 2
cmp eax, 3
je 0x4376db
mov ecx, eax
mov dword [ebx + 4], ecx
jmp 0x437050