Function at 0x3e5b73
Capabilities:
Encode data using xor

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x34
and dword [ebp - 0x28], 0
mov eax, 0xff7f
push ebx
mov ebx, dword [ebp + 0x14]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp + 0x10]
push esi
mov esi, dword [ebp + 0xc]
mov byte [ebp - 1], 0
mov byte [ebp - 2], 0
cmp eax, ebx
jb 0x3e6c99
test bl, 3
jne 0x3e6c99
test al, 3
jne 0x3e6c99
cmp eax, dword [ebp + 0x20]
ja 0x3e6c99
test al, 1
jne 0x3e6c99
push edi
mov edi, dword [ebp + 8]
push ebx
push edi
push dword [ebp + 0x1c]
call fcn.00363a00
mov ecx, dword [ebp + 0x1c]
lea eax, [edi + ebx]
mov edi, dword [ebp + 0x10]
sub edi, ebx
add esp, 0xc
lea edx, [ebx + ecx]
cmp edi, 8
jb 0x3e5c1d
mov ecx, eax
sub ecx, ebx
mov ebx, edi
shr ebx, 3
mov dword [ebp + 0x20], ebx
mov ebx, dword [ecx]
xor ebx, dword [eax]
add ecx, 4
mov dword [edx], ebx
mov ebx, dword [ecx]
add eax, 4
xor ebx, dword [eax]
add edx, 4
mov dword [edx], ebx
add edx, 4
add eax, 4
add ecx, 4
sub edi, 8
dec dword [ebp + 0x20]
jne 0x3e5bf7
test edi, edi
je 0x3e5c2c
mov ecx, eax
sub ecx, dword [ebp + 0x14]
mov ecx, dword [ecx]
xor ecx, dword [eax]
mov dword [edx], ecx
mov ecx, dword [ebp + 0x24]
xor eax, eax
and dword [ebp - 0x24], eax
mov byte [ecx + 8], al
mov byte [ecx + 0x14], al
mov ecx, dword [ebp + 0x10]
mov dword [ebp - 0x34], ecx
mov ecx, dword [ebp + 0x14]
mov byte [ebp + 0x23], 1
mov dword [ebp - 0x14], 2
mov dword [ebp + 0x10], ecx
jmp 0x3e64ea
cmp dword [ebp - 0x14], 0x2000
jae 0x3e6c98
jmp 0x3e638c
mov ecx, dword [ebp + 0x1c]
lea edx, [eax + ecx]
mov cl, byte [edx + 1]
movzx di, byte [edx]
and cl, 0x7f
movzx cx, cl
shl di, 8
or cx, di
jne 0x3e5df0
lea ecx, [eax + 2]
cmp ecx, dword [ebp + 0x10]
jae 0x3e5dab
mov ecx, dword [ebp + 0x1c]
lea edi, [eax + ecx + 2]
mov cl, byte [edi + 1]
movzx di, byte [edi]
and cl, 0x7f
movzx cx, cl
shl di, 8
or cx, di
jne 0x3e5dab
lea ecx, [eax + 4]
cmp ecx, dword [ebp + 0x10]
jae 0x3e5da7
mov ecx, dword [ebp + 0x1c]
lea edi, [eax + ecx + 4]
mov cl, byte [edi + 1]
movzx di, byte [edi]
and cl, 0x7f
movzx cx, cl
shl di, 8
or cx, di
jne 0x3e5da7
lea ecx, [eax + 6]
cmp ecx, dword [ebp + 0x10]
jae 0x3e5da2
mov ecx, dword [ebp + 0x1c]
lea edi, [eax + ecx + 6]
mov cl, byte [edi + 1]
movzx di, byte [edi]
and cl, 0x7f
movzx cx, cl
shl di, 8
or cx, di
jne 0x3e5da2
mov edi, dword [ebp + 0x10]
lea ecx, [edx + 8]
sub edx, eax
lea edx, [edx + edi - 8]
movzx di, byte [ecx - 2]
mov dword [ebp - 0xc], edx
mov dl, byte [ecx - 1]
and dl, 0x7f
movzx dx, dl
shl di, 8
or dx, di
movzx edx, dx
mov dword [ebp - 0x2c], edx
lea edx, [ecx + 1]
mov dword [ebp - 0x18], 4
cmp edx, dword [ebp - 0xc]
jae 0x3e5d84
mov edi, edx
mov dword [ebp - 0x20], edx
mov dl, byte [edi]
movzx di, byte [ecx]
and dl, 0x7f
movzx dx, dl
shl di, 8
or dx, di
cmp dx, word [ebp - 0x2c]
jne 0x3e5d7e
inc dword [ebp - 0x18]
mov edi, dword [ebp - 0x20]
inc ecx
inc ecx
inc edi
inc edi
mov dword [ebp - 0x20], edi
cmp edi, dword [ebp - 0xc]
jb 0x3e5d52
cmp dword [ebp - 0x18], 0
jbe 0x3e5d93
mov ebx, dword [ebp - 0x18]
mov dword [ebp - 8], ebx
mov byte [ebp - 1], 1
cmp ebx, 0x14
jae 0x3e5dbf
cmp byte [ebp - 2], 0
je 0x3e63cf
jmp 0x3e5ef5
push 3
pop ebx
jmp 0x3e5dae
push 2
jmp 0x3e5da4
xor ebx, ebx
inc ebx
cmp byte [ebp - 2], 0
mov byte [ebp - 1], 1
mov dword [ebp - 8], ebx
jne 0x3e5ef5
cmp byte [ebp - 1], 3
mov byte [ebp - 2], 0
jne 0x3e63f9
mov ecx, dword [ebp + 0x1c]
lea edi, [eax + ecx]
mov cl, byte [edi + 1]
movzx dx, byte [edi]
and cl, 0x7f
movzx cx, cl
shl dx, 8
or cx, dx
movzx ecx, cx
jmp 0x3e6403
mov cl, byte [edx + 1]
movzx di, byte [edx]
and cl, 0x7f
movzx cx, cl
shl di, 8
or cx, di
mov edi, dword [ebp + 0x1c]
movzx bx, byte [eax + edi + 2]
movzx ecx, cx
mov dword [ebp - 0x20], ecx
mov cl, byte [eax + edi + 3]
and cl, 0x7f
movzx cx, cl
shl bx, 8
or cx, bx
cmp word [ebp - 0x20], cx
jne 0x3e5ef5
mov cl, byte [eax + edi + 5]
movzx bx, byte [eax + edi + 4]
and cl, 0x7f
movzx cx, cl
shl bx, 8
or cx, bx
cmp word [ebp - 0x20], cx
jne 0x3e5ef5
lea edi, [eax + edi + 6]
mov cl, byte [edi + 1]
movzx di, byte [edi]
and cl, 0x7f
movzx cx, cl
shl di, 8
or cx, di
cmp word [ebp - 0x20], cx
jne 0x3e5ef5
mov edi, dword [ebp + 0x10]
lea ecx, [edx + 8]
movzx bx, byte [ecx - 2]
sub edx, eax
lea edi, [edx + edi - 8]
mov dl, byte [ecx - 1]
and dl, 0x7f
movzx dx, dl
shl bx, 8
or dx, bx
movzx edx, dx
mov dword [ebp - 0x2c], edx
lea edx, [ecx + 1]
mov dword [ebp - 0x18], 4
cmp edx, edi
jae 0x3e5ef5
mov dword [ebp - 0xc], edx
mov ebx, dword [ebp - 0xc]
mov bl, byte [ebx]
movzx dx, byte [ecx]
and bl, 0x7f
movzx bx, bl
shl dx, 8
or dx, bx
cmp dx, word [ebp - 0x2c]
jne 0x3e5ed9
inc dword [ebp - 0x18]
add dword [ebp - 0xc], 2
inc ecx
inc ecx
cmp dword [ebp - 0xc], edi
jb 0x3e5eae
mov ebx, dword [ebp - 0x18]
cmp ebx, 5
jbe 0x3e5ef5
test ebx, ebx
jbe 0x3e5ef5
mov dword [ebp - 8], ebx
mov byte [ebp - 1], 3
cmp ebx, 0x14
jae 0x3e5dbf
mov edi, dword [ebp + 8]
lea ecx, [eax + edi]
mov dl, byte [ecx + 1]
movzx bx, byte [ecx]
and dl, 0x7f
movzx dx, dl
shl bx, 8
or dx, bx
movzx bx, byte [eax + edi + 2]
movzx edx, dx
mov dword [ebp - 0x20], edx
mov dl, byte [eax + edi + 3]
and dl, 0x7f
movzx dx, dl
shl bx, 8
or dx, bx
movzx bx, byte [eax + edi + 4]
movzx edx, dx
mov dword [ebp - 0x2c], edx
mov dl, byte [eax + edi + 5]
and dl, 0x7f
movzx dx, dl
shl bx, 8
or dx, bx
cmp word [ebp - 0x20], dx
jne 0x3e610e
mov dl, byte [eax + edi + 9]
movzx bx, byte [eax + edi + 8]
and dl, 0x7f
movzx dx, dl
shl bx, 8
or dx, bx
cmp word [ebp - 0x20], dx
jne 0x3e610e
mov dl, byte [eax + edi + 7]
and dl, 0x7f
movzx bx, dl
movzx dx, byte [eax + edi + 6]
shl dx, 8
or bx, dx
mov edx, dword [ebp - 0x2c]
cmp dx, bx
jne 0x3e610e
lea edi, [eax + edi + 0xa]
mov bl, byte [edi + 1]
movzx di, byte [edi]
and bl, 0x7f
movzx bx, bl
shl di, 8
or bx, di
cmp dx, bx
jne 0x3e610e
cmp word [ebp - 0x20], dx
jne 0x3e6068
cmp byte [ebp + 0x23], 0
jne 0x3e610e
mov edi, dword [ebp + 0x10]
lea edx, [ecx + 8]
sub ecx, eax
lea ebx, [ecx + edi - 8]
mov cl, byte [edx - 1]
movzx di, byte [edx - 2]
and cl, 0x7f
movzx cx, cl
shl di, 8
or cx, di
movzx ecx, cx
lea edi, [edx + 1]
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0xc], 4
cmp edi, ebx
jae 0x3e610e
mov dword [ebp - 0x20], edi
mov ecx, dword [ebp - 0x20]
mov cl, byte [ecx]
movzx di, byte [edx]
and cl, 0x7f
movzx cx, cl
shl di, 8
or cx, di
cmp cx, word [ebp - 0x2c]
jne 0x3e603a
inc dword [ebp - 0xc]
add dword [ebp - 0x20], 2
inc edx
inc edx
cmp dword [ebp - 0x20], ebx
jb 0x3e600f
mov ecx, dword [ebp - 0xc]
mov ebx, dword [ebp - 8]
cmp ecx, 5
jbe 0x3e6111
cmp ecx, ebx
jbe 0x3e6111
mov byte [ebp - 1], 4
mov ebx, ecx
mov dword [ebp - 8], ebx
cmp ecx, 0x14
jae 0x3e5dbf
jmp 0x3e6111
mov edx, dword [ebp + 0x10]
movzx bx, byte [ecx]
sub edx, eax
movsx edi, dx
mov dl, byte [ecx + 1]
and dl, 0x7f
and dword [ebp - 0xc], 0
movzx dx, dl
shl bx, 8
or dx, bx
movzx bx, byte [ecx + 2]
movzx edx, dx
mov dword [ebp - 0x2c], edx
mov dl, byte [ecx + 3]
and dl, 0x7f
movzx dx, dl
shl bx, 8
or dx, bx
cmp edi, 2
movzx edx, dx
mov dword [ebp - 0x20], edx
jle 0x3e610e
mov dl, byte [ecx + 1]
movzx bx, byte [ecx]
and dl, 0x7f
movzx dx, dl
shl bx, 8
or dx, bx
cmp dx, word [ebp - 0x2c]
jne 0x3e60f6
inc ecx
mov dl, byte [ecx + 2]
inc ecx
movzx bx, byte [ecx]
and dl, 0x7f
movzx dx, dl
shl bx, 8
or dx, bx
cmp dx, word [ebp - 0x20]
jne 0x3e60f6
add dword [ebp - 0xc], 2
inc ecx
sub edi, 4
inc ecx
cmp edi, 2
jg 0x3e60b0
mov ecx, dword [ebp - 0xc]
mov ebx, dword [ebp - 8]
cmp ecx, 9
jbe 0x3e6111
cmp ecx, ebx
jbe 0x3e6111
mov byte [ebp - 1], 5
jmp 0x3e6055
mov ebx, dword [ebp - 8]
cmp ebx, 6
jae 0x3e6338
mov edi, dword [ebp + 0x1c]
lea ecx, [eax + edi + 2]
mov dl, byte [ecx + 1]
movzx bx, byte [ecx]
and dl, 0x7f
movzx dx, dl
shl bx, 8
or dx, bx
jne 0x3e625d
mov dl, byte [eax + edi + 5]
movzx bx, byte [eax + edi + 4]
and dl, 0x7f
movzx dx, dl
shl bx, 8
or dx, bx
jne 0x3e625d
mov dl, byte [eax + edi + 7]
movzx bx, byte [eax + edi + 6]
and dl, 0x7f
movzx dx, dl
shl bx, 8
or dx, bx
jne 0x3e625d
mov dl, byte [eax + edi + 9]
movzx bx, byte [eax + edi + 8]
and dl, 0x7f
movzx dx, dl
shl bx, 8
or dx, bx
jne 0x3e625d
mov dl, byte [eax + edi + 1]
movzx bx, byte [eax + edi]
and dl, 0x7f
movzx dx, dl
shl bx, 8
or dx, bx
cmp dx, word [ebp - 0x10]
jne 0x3e625d
mov edx, dword [ebp - 0x14]
mov ebx, dword [ebp + 0x24]
imul edx, edx, 0xc
cmp byte [edx + ebx - 4], 1
jne 0x3e625d
movzx edx, word [ebp + 0x14]
cmp eax, edx
je 0x3e625d
mov edi, dword [ebp + 0x10]
lea edx, [ecx + 8]
sub ecx, eax
lea ebx, [ecx + edi - 0xa]
mov cl, byte [edx - 1]
movzx di, byte [edx - 2]
and cl, 0x7f
movzx cx, cl
shl di, 8
or cx, di
movzx ecx, cx
lea edi, [edx + 1]
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0xc], 4
cmp edi, ebx
jae 0x3e6240
mov dword [ebp - 0x20], edi
mov edi, dword [ebp - 0x20]
movzx cx, byte [edx]
mov dword [ebp - 0x30], eax
mov al, byte [edi]
and al, 0x7f
movzx di, al
mov eax, dword [ebp - 0x30]
shl cx, 8
or cx, di
cmp cx, word [ebp - 0x2c]
jne 0x3e6240
inc dword [ebp - 0xc]
add dword [ebp - 0x20], 2
inc edx
inc edx
cmp dword [ebp - 0x20], ebx
jb 0x3e6210
mov ecx, dword [ebp - 0xc]
mov ebx, dword [ebp - 8]
inc ecx
cmp ecx, ebx
jbe 0x3e6338
mov ebx, ecx
mov byte [ebp - 1], 2
cmp ecx, 0x14
jmp 0x3e6332
and dword [ebp - 0xc], 0
lea edx, [eax + edi]
lea ecx, [edx + 1]
mov bl, byte [ecx]
mov edi, edx
movzx dx, byte [edx]
and bl, 0x7f
sub edi, eax
add edi, dword [ebp + 0x10]
movzx bx, bl
shl dx, 8
or dx, bx
movzx edx, dx
mov byte [ebp - 3], 0
mov dword [ebp - 0x1c], edx
inc ecx
inc ecx
inc dword [ebp - 0xc]
lea edx, [ecx + 1]
cmp edx, edi
ja 0x3e6303
mov dl, byte [ecx]
movzx bx, byte [ecx - 1]
and dl, 0x7f
movzx dx, dl
shl bx, 8
or dx, bx
movzx edx, dx
cmp dx, word [ebp - 0x1c]
je 0x3e62bb
test dx, dx
jne 0x3e6303
test byte [ebp - 0xc], 7
jne 0x3e62fd
lea edx, [ecx + 0x2f]
cmp edx, edi
ja 0x3e62fd
mov dword [ebp - 0x20], 2
mov edx, dword [ebp - 0x20]
movzx bx, byte [edx + ecx - 1]
mov dl, byte [edx + ecx]
and dl, 0x7f
movzx dx, dl
shl bx, 8
or bx, dx
cmp bx, word [ebp - 0x1c]
jne 0x3e62fd
add dword [ebp - 0x20], 2
cmp dword [ebp - 0x20], 0x30
mov byte [ebp - 3], 1
jl 0x3e62cf
cmp byte [ebp - 3], 0
je 0x3e628c
mov dx, word [ebp - 0x1c]
push 0x30
pop ecx
cmp dx, word [ebp - 0x10]
jne 0x3e6313
push 0x20
pop ecx
mov edx, dword [ebp - 0xc]
test dl, 7
jne 0x3e631e
sub ecx, 8
mov ebx, dword [ebp - 8]
cmp edx, ecx
jb 0x3e6338
cmp edx, ebx
jbe 0x3e6338
mov ebx, edx
mov byte [ebp - 1], 6
cmp edx, 0x14
jae 0x3e5dbf
cmp byte [ebp - 2], 0
jne 0x3e63b8
cmp ebx, 6
jae 0x3e63cf
mov edx, dword [ebp - 0x18]
cmp edx, 4
jbe 0x3e63b2
mov ecx, dword [ebp + 0x1c]
lea edi, [eax + ecx]
mov cl, byte [edi + 1]
movzx di, byte [edi]
and cl, 0x7f
movzx cx, cl
shl di, 8
or cx, di
cmp cx, word [ebp - 0x10]
jne 0x3e63b2
mov ecx, dword [ebp - 0x14]
mov edi, dword [ebp + 0x24]
imul ecx, ecx, 0xc
add ecx, edi
cmp byte [ecx - 4], 3
jne 0x3e63a7
cmp eax, dword [ebp + 0x14]
je 0x3e63a7
add dword [ecx - 8], edx
lea eax, [eax + edx*2]
xor ebx, ebx
lea ecx, [eax + 0xc]
mov dword [ebp - 0x18], ebx
mov dword [ebp - 8], ebx
cmp ecx, dword [ebp + 0x10]
jb 0x3e5c68
mov byte [ebp - 1], 7
inc ebx
jmp 0x3e63d9
mov ebx, edx
mov byte [ebp - 1], 3
jmp 0x3e5dbf
test ebx, ebx
jne 0x3e63cf
jmp 0x3e63c8
cmp ebx, 6
jb 0x3e63c8
cmp byte [ebp - 1], 1
je 0x3e63cf
cmp ebx, 8
jae 0x3e63cf
xor ebx, ebx
inc ebx
mov byte [ebp - 1], 7
cmp byte [ebp - 1], 7
jne 0x3e5dbf
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp + 0x24]
imul ecx, ecx, 0xc
add ecx, edx
cmp byte [ecx - 4], 7
mov byte [ebp - 2], 1
jne 0x3e6406
add dword [ecx - 8], ebx
lea eax, [eax + ebx*2]
jmp 0x3e64ea
cmp byte [ebp - 1], 6
jne 0x3e6406
movzx ecx, word [ebp - 0x1c]
mov dword [ebp - 0x10], ecx
movzx ecx, word [ebp + 0x14]
cmp eax, ecx
lea eax, [eax + ebx*2]
je 0x3e64cd
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp + 0x24]
imul ecx, ecx, 0xc
lea edi, [ecx + edx]
mov cl, byte [edi - 4]
mov dl, byte [ebp - 1]
cmp dl, cl
jne 0x3e6443
cmp dl, 1
je 0x3e6453
cmp dl, 3
je 0x3e643a
cmp dl, 6
jne 0x3e6443
movzx edx, word [ebp - 0x10]
cmp edx, dword [edi - 0xc]
je 0x3e6453
cmp byte [ebp - 1], 1
jne 0x3e645b
cmp cl, 1
je 0x3e6453
cmp cl, 2
jne 0x3e6486
add dword [edi - 8], ebx
jmp 0x3e64ea
cmp byte [ebp - 1], 6
jne 0x3e6480
cmp cl, 1
jne 0x3e64cd
mov ecx, dword [edi - 8]
cmp ecx, 8
jae 0x3e64cd
add ecx, ebx
mov dword [edi - 8], ecx
movzx ecx, word [ebp - 0x10]
mov byte [edi - 4], 6
mov dword [edi - 0xc], ecx
jmp 0x3e64ea
cmp byte [ebp - 1], 2
jne 0x3e64b2
cmp cl, 6
jne 0x3e64b2
mov edx, dword [edi - 8]
and edx, 7
je 0x3e64b2
push 8
pop ecx
sub ecx, edx
cmp ecx, ebx
jbe 0x3e649e
mov ecx, ebx
add dword [edi - 8], ecx
mov edx, dword [edi - 8]
sub ebx, ecx
cmp ebx, 9
jae 0x3e64b2
add edx, ebx
mov dword [edi - 8], edx
jmp 0x3e64ea
cmp byte [ebp - 1], 7
jne 0x3e64cd
cmp byte [edi - 0x10], 7
jne 0x3e64cd
cmp dword [edi - 8], 1
jne 0x3e64cd
inc ebx
add dword [edi - 0x14], ebx
dec dword [ebp - 0x14]
jmp 0x3e64ea
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp + 0x24]
imul ecx, ecx, 0xc
add ecx, edx
mov dl, byte [ebp - 1]
inc dword [ebp - 0x14]
mov byte [ecx + 8], dl
movzx edx, word [ebp - 0x10]
mov dword [ecx + 4], ebx
mov dword [ecx], edx
cmp eax, dword [ebp + 0x10]
jb 0x3e5c56
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
mov ecx, dword [ebp - 0x34]
mov dword [ebp + 0x10], ecx
mov byte [ebp + 0x23], 0
jb 0x3e64ea
push 2
pop eax
xor ebx, ebx
cmp dword [ebp - 0x14], eax
mov dword [ebp + 0x10], ebx
mov byte [ebp + 0x23], 1
mov dword [ebp - 0x10], 0xff7f
mov dword [ebp - 0x20], eax
jle 0x3e6c92
mov eax, esi
sub eax, dword [ebp + 0xc]
add eax, 5
cmp eax, dword [ebp + 0x18]
ja 0x3e6c98
cmp byte [ebp + 0x23], 0
je 0x3e6545
cmp ebx, dword [ebp + 0x14]
jb 0x3e6545
mov byte [ebp + 0x23], 0
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp + 0x24]
imul eax, eax, 0xc
lea edi, [eax + ecx]
mov al, byte [edi + 8]
test al, al
jbe 0x3e6c83
cmp al, 2
jbe 0x3e6c57
cmp al, 3
je 0x3e6bf0
cmp al, 4
je 0x3e6baa
cmp al, 5
je 0x3e6b18
cmp al, 6
je 0x3e6639
cmp al, 7
jne 0x3e6c83
mov eax, dword [edi + 4]
cmp eax, 1
jne 0x3e65e2
mov ecx, dword [ebp + 8]
add ecx, ebx
mov dl, byte [ecx + 1]
movzx bx, byte [ecx]
and dl, 0x7f
movzx dx, dl
shl bx, 8
or dx, bx
mov ebx, dword [ebp + 0x10]
jne 0x3e65be
mov byte [esi], 0xfe
inc esi
inc ebx
inc ebx
jmp 0x3e6c80
mov dl, byte [ecx + 1]
movzx cx, byte [ecx]
and dl, 0x7f
movzx dx, dl
shl cx, 8
or dx, cx
mov ecx, 0xff7f
cmp dx, cx
jne 0x3e65e2
mov byte [esi], 0xfd
jmp 0x3e65b6
cmp eax, 0x1f
ja 0x3e65eb
or al, 0x80
jmp 0x3e65f8
cmp eax, 0x11f
ja 0x3e65fd
mov byte [esi], 0x80
inc esi
sub al, 0x20
mov byte [esi], al
inc esi
jmp 0x3e6606
mov byte [esi], 0xf4
inc esi
mov word [esi], ax
inc esi
inc esi
mov eax, dword [edi + 4]
add eax, eax
mov ecx, eax
sub ecx, dword [ebp + 0xc]
add ecx, esi
cmp ecx, dword [ebp + 0x18]
ja 0x3e6c98
push eax
mov eax, dword [ebp + 8]
add eax, ebx
push eax
push esi
call fcn.00363a00
mov edi, dword [edi + 4]
add edi, edi
add esp, 0xc
add esi, edi
add ebx, edi
jmp 0x3e6c80
mov ecx, dword [edi + 4]
lea eax, [ecx + 7]
shr eax, 3
sub eax, dword [ebp + 0xc]
mov dword [ebp - 0x24], ecx
lea eax, [eax + esi + 5]
cmp eax, dword [ebp + 0x18]
ja 0x3e6c98
movzx eax, word [ebp - 0x10]
cmp eax, dword [edi]
je 0x3e68c0
movzx eax, word [edi]
mov dword [ebp - 0x10], eax
test cl, 7
jne 0x3e667b
cmp ecx, 0x78
ja 0x3e667b
mov edx, ecx
shr edx, 3
or dl, 0xd0
jmp 0x3e6690
cmp ecx, 0xff
ja 0x3e6695
cmp ecx, 2
jb 0x3e66b2
mov byte [esi], 0xd0
mov dl, cl
inc esi
dec dl
mov byte [esi], dl
inc esi
jmp 0x3e66a3
cmp ecx, 3
jb 0x3e66b2
mov byte [esi], 0xf7
inc esi
mov word [esi], cx
inc esi
inc esi
mov dl, al
and dl, 0x7f
shr eax, 8
mov byte [esi + 1], dl
mov byte [esi], al
inc esi
inc esi
cmp ecx, 8
jb 0x3e67c1
mov eax, dword [ebp + 0x1c]
mov edx, ecx
shr edx, 3
mov dword [ebp - 0x24], edx
shl edx, 4
lea eax, [ebx + eax + 0xd]
add ebx, edx
mov dword [ebp + 0x10], ebx
mov byte [esi], 0
mov dl, byte [eax - 0xc]
movzx di, byte [eax - 0xd]
and dl, 0x7f
movzx dx, dl
shl di, 8
or dx, di
je 0x3e66f0
mov byte [esi], 1
mov dl, byte [eax - 0xa]
movzx di, byte [eax - 0xb]
and dl, 0x7f
movzx dx, dl
shl di, 8
or dx, di
je 0x3e670b
or byte [esi], 2
mov dl, byte [eax - 8]
movzx di, byte [eax - 9]
and dl, 0x7f
movzx dx, dl
shl di, 8
or dx, di
je 0x3e6726
or byte [esi], 4
mov dl, byte [eax - 6]
movzx di, byte [eax - 7]
and dl, 0x7f
movzx dx, dl
shl di, 8
or dx, di
je 0x3e6741
or byte [esi], 8
mov dl, byte [eax - 4]
movzx di, byte [eax - 5]
and dl, 0x7f
movzx dx, dl
shl di, 8
or dx, di
je 0x3e675c
or byte [esi], 0x10
mov dl, byte [eax - 2]
movzx di, byte [eax - 3]
and dl, 0x7f
movzx dx, dl
shl di, 8
or dx, di
je 0x3e6777
or byte [esi], 0x20
movzx dx, byte [eax - 1]
mov dword [ebp - 0x34], eax
mov al, byte [eax]
and al, 0x7f
movzx di, al
mov eax, dword [ebp - 0x34]
shl dx, 8
or dx, di
je 0x3e6796
or byte [esi], 0x40
mov dl, byte [eax + 2]
movzx di, byte [eax + 1]
and dl, 0x7f
movzx dx, dl
shl di, 8
or dx, di
je 0x3e67b1
or byte [esi], 0x80
inc esi
add eax, 0x10
sub ecx, 8
dec dword [ebp - 0x24]
jne 0x3e66d2
test ecx, ecx
je 0x3e6c83
mov eax, dword [ebp + 0x1c]
add eax, ebx
mov byte [esi], 0
mov dl, byte [eax + 1]
movzx di, byte [eax]
and dl, 0x7f
movzx dx, dl
shl di, 8
or dx, di
je 0x3e67eb
mov byte [esi], 1
inc eax
mov dl, byte [eax + 2]
inc eax
movzx di, byte [eax]
and dl, 0x7f
movzx dx, dl
shl di, 8
or dx, di
je 0x3e6807
or byte [esi], 2
inc eax
mov dl, byte [eax + 2]
inc eax
movzx di, byte [eax]
and dl, 0x7f
movzx dx, dl
shl di, 8
or dx, di
je 0x3e6823
or byte [esi], 4
inc eax
mov dl, byte [eax + 2]
inc eax
movzx di, byte [eax]
and dl, 0x7f
movzx dx, dl
shl di, 8
or dx, di
je 0x3e683f
or byte [esi], 8
inc eax
mov dl, byte [eax + 2]
inc eax
movzx di, byte [eax]
and dl, 0x7f
movzx dx, dl
shl di, 8
or dx, di
je 0x3e685b
or byte [esi], 0x10
inc eax
mov dl, byte [eax + 2]
inc eax
movzx di, byte [eax]
and dl, 0x7f
movzx dx, dl
shl di, 8
or dx, di
je 0x3e6877
or byte [esi], 0x20
inc eax
mov dl, byte [eax + 2]
inc eax
movzx di, byte [eax]
and dl, 0x7f
movzx dx, dl
shl di, 8
or dx, di
je 0x3e6893
or byte [esi], 0x40
inc eax
mov dl, byte [eax + 2]
inc eax
movzx ax, byte [eax]
and dl, 0x7f
movzx dx, dl
shl ax, 8
or dx, ax
je 0x3e68af
or byte [esi], 0x80
mov al, 1
shl al, cl
lea ebx, [ebx + ecx*2]
dec al
and byte [esi], al
inc esi
jmp 0x3e6c80
cmp ecx, 8
jne 0x3e69d2
mov eax, dword [ebp + 0x1c]
add eax, ebx
mov dl, byte [eax + 1]
movzx di, byte [eax]
and dl, 0x7f
movzx dx, dl
shl di, 8
xor cl, cl
or dx, di
je 0x3e68e9
inc cl
inc eax
mov dl, byte [eax + 2]
inc eax
movzx di, byte [eax]
and dl, 0x7f
movzx dx, dl
shl di, 8
or dx, di
je 0x3e6905
or cl, 2
inc eax
mov dl, byte [eax + 2]
inc eax
movzx di, byte [eax]
and dl, 0x7f
movzx dx, dl
shl di, 8
or dx, di
je 0x3e6921
or cl, 4
inc eax
mov dl, byte [eax + 2]
inc eax
movzx di, byte [eax]
and dl, 0x7f
movzx dx, dl
shl di, 8
or dx, di
je 0x3e693d
or cl, 8
inc eax
mov dl, byte [eax + 2]
inc eax
movzx di, byte [eax]
and dl, 0x7f
movzx dx, dl
shl di, 8
or dx, di
je 0x3e6959
or cl, 0x10
inc eax
mov dl, byte [eax + 2]
inc eax
movzx di, byte [eax]
and dl, 0x7f
movzx dx, dl
shl di, 8
or dx, di
je 0x3e6975
or cl, 0x20
inc eax
mov dl, byte [eax + 2]
inc eax
movzx di, byte [eax]
and dl, 0x7f
movzx dx, dl
shl di, 8
or dx, di
je 0x3e6991
or cl, 0x40
inc eax
mov dl, byte [eax + 2]
inc eax
movzx ax, byte [eax]
and dl, 0x7f
movzx dx, dl
shl ax, 8
or dx, ax
je 0x3e69ad
or cl, 0x80
movzx eax, cl
sub eax, 3
je 0x3e69c6
dec eax
dec eax
je 0x3e69c1
mov byte [esi], 0x41
inc esi
mov byte [esi], cl
jmp 0x3e69c9
mov byte [esi], 0xfa
jmp 0x3e69c9
mov byte [esi], 0xf9
inc esi
add ebx, 0x10
jmp 0x3e6c80
test cl, 7
jne 0x3e69e8
cmp ecx, 0xf8
ja 0x3e69e8
mov eax, ecx
shr eax, 3
or al, 0x40
jmp 0x3e69f8
cmp ecx, 0xff
ja 0x3e69fd
mov byte [esi], 0x40
mov al, cl
inc esi
dec al
mov byte [esi], al
inc esi
jmp 0x3e6a06
mov byte [esi], 0xf2
inc esi
mov word [esi], cx
inc esi
inc esi
cmp ecx, 8
jb 0x3e67c1
mov eax, dword [ebp + 0x1c]
mov edi, ecx
shr edi, 3
mov ecx, edi
shl ecx, 4
lea eax, [ebx + eax + 0xd]
add ebx, ecx
mov dword [ebp + 0x10], ebx
mov byte [esi], 0
mov cl, byte [eax - 0xc]
movzx dx, byte [eax - 0xd]
and cl, 0x7f
movzx cx, cl
shl dx, 8
or cx, dx
je 0x3e6a43
mov byte [esi], 1
mov cl, byte [eax - 0xa]
movzx dx, byte [eax - 0xb]
and cl, 0x7f
movzx cx, cl
shl dx, 8
or cx, dx
je 0x3e6a5e
or byte [esi], 2
mov cl, byte [eax - 8]
movzx dx, byte [eax - 9]
and cl, 0x7f
movzx cx, cl
shl dx, 8
or cx, dx
je 0x3e6a79
or byte [esi], 4
mov cl, byte [eax - 6]
movzx dx, byte [eax - 7]
and cl, 0x7f
movzx cx, cl
shl dx, 8
or cx, dx
je 0x3e6a94
or byte [esi], 8
mov cl, byte [eax - 4]
movzx dx, byte [eax - 5]
and cl, 0x7f
movzx cx, cl
shl dx, 8
or cx, dx
je 0x3e6aaf
or byte [esi], 0x10
mov cl, byte [eax - 2]
movzx dx, byte [eax - 3]
and cl, 0x7f
movzx cx, cl
shl dx, 8
or cx, dx
je 0x3e6aca
or byte [esi], 0x20
mov dl, byte [eax]
movzx cx, byte [eax - 1]
and dl, 0x7f
movzx dx, dl
shl cx, 8
or cx, dx
je 0x3e6ae4
or byte [esi], 0x40
mov cl, byte [eax + 2]
movzx dx, byte [eax + 1]
and cl, 0x7f
movzx cx, cl
shl dx, 8
or cx, dx
je 0x3e6aff
or byte [esi], 0x80
mov ecx, dword [ebp - 0x24]
sub ecx, 8
inc esi
add eax, 0x10
dec edi
mov dword [ebp - 0x24], ecx
jne 0x3e6a25
jmp 0x3e67c1
mov eax, dword [edi + 4]
shr eax, 1
cmp eax, 0xf
ja 0x3e6b26
or al, 0xe0
jmp 0x3e6b33
cmp eax, 0x10f
ja 0x3e6b38
mov byte [esi], pe_nt_image_headers32
inc esi
sub al, 0x10
mov byte [esi], al
inc esi
jmp 0x3e6b41
mov byte [esi], 0xf8
inc esi
mov word [esi], ax
inc esi
inc esi
mov eax, esi
sub eax, dword [ebp + 0xc]
add eax, 4
cmp eax, dword [ebp + 0x18]
ja 0x3e6c98
mov ecx, dword [ebp + 8]
mov al, byte [ebx + ecx + 1]
movzx dx, byte [ebx + ecx]
and al, 0x7f
movzx ax, al
shl dx, 8
or ax, dx
movzx eax, ax
mov dl, al
shr eax, 8
mov byte [esi], al
and dl, 0x7f
mov byte [esi + 1], dl
lea ecx, [ebx + ecx + 2]
mov al, byte [ecx + 1]
movzx cx, byte [ecx]
and al, 0x7f
movzx ax, al
inc esi
shl cx, 8
inc esi
or ax, cx
movzx eax, ax
mov cl, al
and cl, 0x7f
shr eax, 8
mov byte [esi + 1], cl
mov byte [esi], al
jmp 0x3e6c78
mov eax, dword [edi + 4]
cmp eax, 0x1f
ja 0x3e6bb6
or al, 0x60
jmp 0x3e6bc3
cmp eax, 0x11f
ja 0x3e6bc8
mov byte [esi], 0x60
inc esi
sub al, 0x20
mov byte [esi], al
inc esi
jmp 0x3e6bd1
mov byte [esi], 0xf3
inc esi
mov word [esi], ax
inc esi
inc esi
mov eax, dword [ebp + 8]
add eax, ebx
mov cl, byte [eax + 1]
movzx ax, byte [eax]
and cl, 0x7f
movzx cx, cl
shl ax, 8
or cx, ax
movzx eax, cx
jmp 0x3e6b98
movzx eax, word [ebp - 0x10]
cmp eax, dword [edi]
mov eax, dword [edi + 4]
je 0x3e6c3d
movzx ecx, word [edi]
mov dword [ebp - 0x10], ecx
cmp eax, 0xf
ja 0x3e6c0a
or al, 0xc0
jmp 0x3e6c1c
cmp eax, 0x10f
ja 0x3e6c21
cmp eax, 2
jb 0x3e6c7a
mov byte [esi], 0xc0
inc esi
sub al, 0x10
mov byte [esi], al
inc esi
jmp 0x3e6c2f
cmp eax, 3
jb 0x3e6c7a
mov byte [esi], 0xf6
inc esi
mov word [esi], ax
inc esi
inc esi
mov al, cl
and al, 0x7f
shr ecx, 8
mov byte [esi + 1], al
mov byte [esi], cl
jmp 0x3e6c78
cmp eax, 0x1f
ja 0x3e6c46
or al, 0x20
jmp 0x3e6c6c
cmp eax, 0x11f
ja 0x3e6c52
mov byte [esi], 0x20
jmp 0x3e6c69
mov byte [esi], 0xf1
jmp 0x3e6c74
mov eax, dword [edi + 4]
cmp eax, 0x1f
jbe 0x3e6c6c
cmp eax, 0x11f
ja 0x3e6c71
mov byte [esi], 0
inc esi
sub al, 0x20
mov byte [esi], al
inc esi
jmp 0x3e6c7a
mov byte [esi], 0xf0
inc esi
mov word [esi], ax
inc esi
inc esi
mov eax, dword [edi + 4]
lea ebx, [ebx + eax*2]
mov dword [ebp + 0x10], ebx
inc dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x14]
jl 0x3e6525
sub esi, dword [ebp + 0xc]
mov dword [ebp - 0x28], esi
pop edi
mov eax, dword [ebp - 0x28]
pop esi
pop ebx
leave
ret 0x20