Function at 0x436f37
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0xd78
push 2
push 0
call dword [sym.imp.ole32.dll_CoInitializeEx]
shr eax, 0x1f
mov eax, dword [eax*4 + 0x4423b0]
mov ecx, 0xaa636db7
xor ecx, dword [0x4423b8]
add eax, ecx
inc eax
jmp eax
add esi, ecx
dec esi
mov eax, dword [esp + 0x38]
inc esi
cmp esi, dword [esp + 0x1c]
jae 0x436fde
test ebp, ebp
je 0x436d6c
movzx eax, byte [ebp]
mov byte [esp + 0x14], 5
lea ecx, [esp + 0x15]
mov word [ecx + 4], 0
mov dword [ecx], 0
xor ecx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, ecx
add dl, 0xaf
xor dl, byte [esp + ecx + 0x14]
add dl, 0x95
mov byte [esp + ecx + 0x14], dl
inc ecx
cmp ecx, 7
jne 0x436d50
cmp al, byte [esp + 0x14]
je 0x436d77
movzx eax, byte [esi]
mov ecx, dword [esp + 0x44]
cmp al, byte [ecx]
jne 0x436d19
cmp dword [esp + 0x48], 2
jb 0x436e20
mov ecx, 1
mov dword [esp + 0x20], esi
jmp 0x436da8
movzx eax, byte [esi + ecx]
mov edx, dword [esp + 0x44]
cmp al, byte [edx + ecx]
jne 0x436d16
inc ecx
cmp ecx, dword [esp + 0x48]
je 0x436e20
test ebp, ebp
je 0x436d90
mov esi, ebp
movzx edx, byte [ebp + ecx]
mov byte [esp + 0x14], 0xaf
lea eax, [esp + 0x15]
mov dword [eax + 3], 0
mov dword [eax], 0
mov ebx, 0xd8
mov edi, 0x27
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ebp, byte [esp + ebx - 0xc4]
mov eax, edi
xor eax, ebx
and eax, ebp
xor eax, ebx
add al, 0xc8
mov byte [esp + ebx - 0xc4], al
inc ebx
dec edi
cmp ebx, 0xe0
jne 0x436de0
cmp dl, byte [esp + 0x14]
mov ebp, esi
mov esi, dword [esp + 0x20]
jne 0x436d90
jmp 0x436da1
mov ecx, dword [esp + 8]
mov edi, ecx
mov eax, dword [esp]
sub edi, eax
cmp ecx, dword [esp + 0x10]
je 0x436e3c
mov edx, eax
mov eax, dword [esp + 0x38]
jmp 0x436fc5
mov ecx, edi
sar ecx, 2
lea eax, [ecx + 1]
mov ebx, ecx
shr ebx, 1
add ebx, ecx
cmp ebx, eax
ja 0x436e50
mov ebx, eax
lea eax, [ebx*4]
push eax
call fcn.00408a60
add esp, 4
mov edx, eax
mov eax, dword [esp]
test eax, eax
mov dword [esp + 0xc], edx
je 0x436fa2
mov dword [esp + 0x10], ebx
cmp edx, eax
mov eax, dword [esp + 8]
mov dword [esp + 4], edi
jbe 0x436f3f
cmp eax, edx
jbe 0x436f3f
test edi, edi
je 0x436f8b
mov eax, dword [esp]
mov edx, dword [esp + 4]
add eax, edx
dec eax
mov ecx, dword [esp + 0xc]
add ecx, edx
dec ecx
mov edi, edx
and edi, 7
je 0x436ed4
neg edi
xor edx, edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ebx, byte [eax + edx]
mov byte [ecx + edx], bl
dec edx
cmp edi, edx
jne 0x436ec0
add eax, edx
add ecx, edx
add edx, dword [esp + 4]
mov edi, dword [esp]
sub edi, dword [esp + 8]
cmp edi, 0xfffffff8
ja 0x436f8b
neg edx
xor edi, edi
nop
nop
nop
nop
nop
nop
nop
nop
movzx ebx, byte [eax + edi]
mov byte [ecx + edi], bl
movzx ebx, byte [eax + edi - 1]
mov byte [ecx + edi - 1], bl
movzx ebx, byte [eax + edi - 2]
mov byte [ecx + edi - 2], bl
movzx ebx, byte [eax + edi - 3]
mov byte [ecx + edi - 3], bl
movzx ebx, byte [eax + edi - 4]
mov byte [ecx + edi - 4], bl
movzx ebx, byte [eax + edi - 5]
mov byte [ecx + edi - 5], bl
movzx ebx, byte [eax + edi - 6]
mov byte [ecx + edi - 6], bl
movzx ebx, byte [eax + edi - 7]
mov byte [ecx + edi - 7], bl
add edi, 0xfffffff8
xbegin 0xb3b96976
xbegin 0xb3b96976
jmp 0x436f8b
mov ecx, edi
shr ecx, 2
mov ebx, dword [esp]
mov eax, ebx
mov edi, edx
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
mov eax, edx
mov ecx, dword [esp + 4]
mov edx, ecx
and edx, 0xfffffffc
add eax, edx
add edx, ebx
shr ecx, 1
and ecx, 1
mov ebx, edx
mov dword [esp + 8], eax
mov edi, eax
xchg esi, ebx
rep movsw word es:[edi], word [esi]
xchg esi, ebx
test byte [esp + 4], 1
je 0x436f8b
mov ecx, dword [esp + 4]
and ecx, 2
movzx edx, byte [edx + ecx]
mov eax, dword [esp + 8]
mov byte [eax + ecx], dl
push dword [esp]
call fcn.00408a70
add esp, 4
mov edi, dword [esp + 4]
mov ebx, dword [esp + 0x10]
mov edx, dword [esp + 0xc]
mov eax, dword [esp + 0x38]
mov dword [eax], edx
lea ecx, [edx + ebx*4]
mov edx, dword [esp + 0xc]
add edx, edi
mov dword [esp + 0x10], ecx
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0xc]
mov dword [esp], ecx
mov ecx, edx
mov edx, dword [esp + 0xc]
mov dword [edx + edi], esi
add ecx, 4
mov dword [esp + 8], ecx
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x48]
add esi, ecx
dec esi
jmp 0x436d1d
add esp, 0x24
pop esi
pop edi
pop ebx
pop ebp
ret
hlt