Function at 0x436810
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x98
mov r10d, 0x6800
mov r11d, 0x169d
movabs rax, 0x600a0001014014
mov edx, dword [rcx + 0x3a0]
mov qword [rsp + 0x7d], rax
mov rax, qword [0x005270d0]
lea rsi, [rsp + 0x70]
mov dword [rsp + 0x76], edx
lea r9, [rsi + 6]
mov rbx, rsi
movzx edx, word [rcx + 0x3a4]
mov word [rsp + 0x74], r10w
lea r10, [rsi + 0x18]
mov qword [rsp + 0xe0], rcx
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], rax
mov rax, rcx
add rax, 0x3a0
mov word [r9 + 4], dx
mov edx, 0xffffffff
movzx eax, byte [rax + 6]
mov dword [rsp + 0x70], 0x12001268
mov dword [rsp + 0x85], 0x18000200
mov word [rsp + 0x89], r11w
mov byte [r9 + 6], al
movzx eax, byte [r9]
mov ecx, 8
xor edx, eax
movzx eax, dx
sar eax, 1
mov r8d, eax
xor r8w, 0xa001
and edx, 1
mov edx, r8d
cmove edx, eax
sub ecx, 1
jne 0x4368c0
add r9, 1
cmp r10, r9
jne 0x4368b5
lea rax, [rsp + 0x40]
mov byte [rsp + 0x88], dl
shr dx, 8
mov r8d, 0x1b
mov byte [rsp + 0x89], dl
lea r12, [rsp + 0x48]
mov rdx, rsi
mov rcx, rax
mov qword [rsp + 0x38], rax
call qword [0x005270e0]
mov rdx, qword [rsp + 0x40]
mov qword [rsp + 0x60], rdx
mov eax, dword [rdx]
add eax, 1
cmp eax, 1
ja 0x436d00
mov rcx, qword [rsp + 0xe0]
lea rdi, [rsp + 0x60]
mov rdx, rdi
call fcn.0042c940
mov rcx, qword [rsp + 0x60]
mov eax, dword [rcx]
test eax, eax
je 0x436c8b
cmp eax, 0xffffffff
je 0x436968
lock sub dword [rcx], 1
mov rcx, qword [rsp + 0x60]
je 0x436c8b
lea rax, [rsi + 0x1b]
mov r14, qword [0x00527278]
mov qword [rsp + 0x30], rax
lea r12, [rsp + 0x48]
mov r15, qword [0x005273a8]
mov r13, qword [0x00527298]
jmp 0x436a5c
movsxd rcx, dword [rax + 4]
mov r8d, dword [rax + 8]
lea edx, [rcx + 2]
and r8d, 0x7fffffff
cmp edx, r8d
jbe 0x4369bf
mov r8d, 1
mov rcx, rdi
call qword [0x00527248]
mov rax, qword [rsp + 0x60]
movsxd rcx, dword [rax + 4]
lea edx, [rcx + 1]
mov dword [rax + 4], edx
add rax, qword [rax + 0x10]
mov edx, 0x20
lea rax, [rax + rcx*2]
xor ecx, ecx
mov word [rax], dx
mov rdx, rdi
mov word [rax + 2], cx
mov rcx, r12
call r13
mov rcx, qword [rsp + 0x60]
mov eax, dword [rcx]
test eax, eax
je 0x436ad4
cmp eax, 0xffffffff
je 0x436a07
lock sub dword [rcx], 1
mov rcx, qword [rsp + 0x60]
je 0x436ad4
mov rcx, qword [rsp + 0x58]
mov eax, dword [rcx]
test eax, eax
je 0x436af4
cmp eax, 0xffffffff
je 0x436a2a
lock sub dword [rcx], 1
mov rcx, qword [rsp + 0x58]
je 0x436af4
mov rcx, qword [rsp + 0x50]
mov eax, dword [rcx]
test eax, eax
je 0x436b14
cmp eax, 0xffffffff
je 0x436a4d
lock sub dword [rcx], 1
mov rcx, qword [rsp + 0x50]
je 0x436b14
add rbx, 1
cmp rbx, qword [rsp + 0x30]
je 0x436b34
lea rcx, [0x004a0d91]
mov edx, 2
call r14
mov r9d, 0x30
movzx r8d, byte [rbx]
mov qword [rsp + 0x50], rax
lea rsi, [rsp + 0x58]
mov word [rsp + 0x28], r9w
mov r9d, 2
lea rbp, [rsp + 0x50]
mov dword [rsp + 0x20], 0x10
mov rcx, rsi
mov rdx, rbp
call r15
mov rdx, qword [rsp + 0x58]
mov qword [rsp + 0x60], rdx
mov eax, dword [rdx]
add eax, 1
cmp eax, 1
ja 0x436c82
mov rax, qword [rsp + 0x60]
mov edx, dword [rax]
cmp edx, 1
jbe 0x436990
mov edx, dword [rax + 4]
add edx, 2
jmp 0x4369a7
mov r8d, 8
mov edx, 2
call qword [0x005270c8]
mov rcx, qword [rsp + 0x58]
mov eax, dword [rcx]
test eax, eax
jne 0x436a16
mov r8d, 8
mov edx, 2
call qword [0x005270c8]
mov rcx, qword [rsp + 0x50]
mov eax, dword [rcx]
test eax, eax
jne 0x436a39
mov r8d, 8
mov edx, 2
add rbx, 1
call qword [0x005270c8]
cmp rbx, qword [rsp + 0x30]
jne 0x436a5c
mov rax, qword [rsp + 0xe0]
mov edx, 7
mov rcx, rdi
mov rax, qword [rax + 0x40]
mov rbx, qword [rax + 0x108]
call qword [0x00527478]
mov rdx, rdi
mov rcx, rbx
mov rbx, qword [0x00527c08]
call rbx
mov rcx, qword [rsp + 0xe0]
call fcn.0042cc80
lea rdx, [0x004a0d94]
mov rax, qword [rsp + 0xe0]
mov r8d, 0xd
mov rcx, rsi
mov rax, qword [rax + 0x40]
mov rbp, qword [rax + 0x108]
call qword [0x00527268]
mov rdx, r12
mov rcx, rsi
call r13
lea r8, [0x004a0da2]
mov rdx, rsi
mov rcx, rdi
call fcn.00491630
mov rdx, rdi
mov rcx, rbp
call qword [0x00527c30]
mov rcx, qword [rsp + 0x60]
mov eax, dword [rcx]
test eax, eax
je 0x436cb4
cmp eax, 0xffffffff
je 0x436be4
lock sub dword [rcx], 1
mov rcx, qword [rsp + 0x60]
je 0x436cb4
mov rcx, qword [rsp + 0x58]
mov eax, dword [rcx]
test eax, eax
je 0x436cd4
cmp eax, 0xffffffff
je 0x436c07
lock sub dword [rcx], 1
mov rcx, qword [rsp + 0x58]
je 0x436cd4
mov rax, qword [rsp + 0xe0]
mov edx, 0x386487
mov rcx, rdi
mov rax, qword [rax + 0x40]
mov rsi, qword [rax + 0x108]
call qword [0x00527480]
mov rdx, rdi
mov rcx, rsi
call rbx
mov rcx, qword [rsp + 0x48]
mov eax, dword [rcx]
test eax, eax
je 0x436cea
cmp eax, 0xffffffff
je 0x436c53
lock sub dword [rcx], 1
mov rcx, qword [rsp + 0x48]
je 0x436cea
mov rcx, qword [rsp + 0x40]
mov eax, dword [rcx]
test eax, eax
je 0x436ca1
cmp eax, 0xffffffff
je 0x436c6e
lock sub dword [rcx], 1
mov rcx, qword [rsp + 0x40]
je 0x436ca1
add rsp, 0x98
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
lock add dword [rdx], 1
jmp 0x436ab9
mov r8d, 8
mov edx, 1
call qword [0x005270c8]
jmp 0x436968
mov r8d, 8
mov edx, 1
call qword [0x005270c8]
jmp 0x436c6e
mov r8d, 8
mov edx, 2
call qword [0x005270c8]
mov rcx, qword [rsp + 0x58]
mov eax, dword [rcx]
test eax, eax
jne 0x436bf3
mov r8d, 8
mov edx, 2
call qword [0x005270c8]
jmp 0x436c07
mov r8d, 8
mov edx, 2
call qword [0x005270c8]
jmp 0x436c53
lock add dword [rdx], 1
jmp 0x436930