Function at 0x4361c0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x28
mov dword [esp + 0x20], ecx
mov dword [esp + 8], 0
mov dword [esp + 0x10], 0x3a393837
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
mov dword [esp], 0
mov eax, dword [esp]
cmp eax, 0xf
ja 0x436255
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp]
mov ecx, dword [esp]
movzx esi, byte [esp + ecx + 0x10]
lea edx, [eax + 0x5d0c1c27]
mov ecx, edx
and ecx, esi
mov edi, edx
xor edi, esi
or edx, esi
xor edx, edi
add eax, 0x27
and eax, esi
add eax, edx
lea ecx, [edi + ecx*2]
sub ecx, eax
mov dword [esp + 0xc], ecx
mov eax, dword [esp + 0xc]
add al, 0xef
mov ecx, dword [esp]
mov byte [esp + ecx + 0x10], al
inc dword [esp]
mov eax, dword [esp]
cmp eax, 0x10
jb 0x436210
mov ebx, dword [esp + 0x10]
mov eax, dword [0x44988c]
test eax, eax
je 0x4362a6
xor ecx, ecx
mov edx, dword [0x449890]
nop
nop
nop
nop
nop
nop
cmp dword [edx + ecx*8], 0xe4aa2089
je 0x436280
inc ecx
cmp eax, ecx
jne 0x436270
jmp 0x4362a6
mov eax, dword [edx + ecx*8 + 4]
cmp eax, ebx
je 0x4362a6
lea ecx, [esp + 8]
push ecx
push 0
push 0
push 5
push 4
push dword [0x449894]
push eax
call fcn.00438470
add esp, 0x1c
mov ebx, eax
cmp ebx, 0xc0000004
jne 0x436408
push dword [esp + 8]
call fcn.00435fb0
add esp, 4
mov dword [esp + 4], eax
mov eax, dword [esp + 8]
mov dword [esp + 0x10], 0x3a393837
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
mov dword [esp], 0
mov ecx, dword [esp]
cmp ecx, 0xf
ja 0x436346
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [esp]
mov edx, dword [esp]
movzx ebx, byte [esp + edx + 0x10]
lea esi, [ecx + 0x5d0c1c27]
mov edx, esi
and edx, ebx
mov edi, esi
xor edi, ebx
or esi, ebx
xor esi, edi
add ecx, 0x27
and ecx, ebx
add ecx, esi
lea edx, [edi + edx*2]
sub edx, ecx
mov dword [esp + 0xc], edx
mov ecx, dword [esp + 0xc]
add cl, 0xef
mov edx, dword [esp]
mov byte [esp + edx + 0x10], cl
inc dword [esp]
mov ecx, dword [esp]
cmp ecx, 0x10
jb 0x436300
mov ebx, dword [esp + 0x10]
mov ecx, dword [0x44988c]
test ecx, ecx
je 0x436394
xor edx, edx
mov esi, dword [0x449890]
nop
nop
nop
nop
cmp dword [esi + edx*8], 0xe4aa2089
je 0x436370
inc edx
cmp ecx, edx
jne 0x436360
jmp 0x436394
mov ecx, dword [esi + edx*8 + 4]
cmp ecx, ebx
je 0x436394
push 0
push eax
push dword [esp + 0xc]
push 5
push 4
push dword [0x449894]
push ecx
call fcn.00438470
add esp, 0x1c
mov ebx, eax
test ebx, ebx
js 0x4363fc
mov eax, dword [ebp + 8]
mov ecx, dword [esp + 4]
mov esi, dword [ecx]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, dword [ecx + esi + 0x3c]
add ecx, esi
xor ebx, ebx
nop
nop
nop
nop
nop
nop
nop
nop
movzx esi, word [edx + ebx]
movzx edi, word [eax + ebx]
test si, si
je 0x4363d5
add ebx, 2
cmp si, di
je 0x4363c0
cmp si, di
je 0x4363e7
mov esi, dword [ecx]
test esi, esi
jne 0x4363b0
mov ebx, 0xc0000225
jmp 0x4363fc
mov eax, dword [ecx + 0x44]
mov edx, dword [esp + 0x20]
mov dword [edx + 4], eax
mov eax, dword [ecx + 0xdc]
mov dword [edx + 8], eax
xor ebx, ebx
push dword [esp + 4]
call fcn.004360a0
add esp, 4
mov eax, ebx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret 4