Function at 0x27001a32
Capabilities:
Encode data using xor

Disassembly:
push ebp
lea ebp, [esp - 0xd4]
sub esp, 0x154
mov eax, dword [0x270b313c]
xor eax, ebp
mov dword [ebp + 0xd0], eax
mov eax, dword [ebp + 0xe0]
push ebx
mov ebx, dword [ebp + 0xdc]
mov dword [ebp - 0x80], eax
mov eax, dword [ebp + 0xe8]
push esi
mov dword [ebp - 0x74], eax
mov eax, dword [ebx + 0x14]
push edi
lea edi, [ecx + 4]
inc dword [edi]
mov dword [ebp - 0x78], eax
mov eax, dword [edi]
mov esi, edx
mov dword [ebp - 0x68], ecx
mov dword [ebp - 0x7c], esi
cmp eax, 0xff000000
jbe 0x27001a9e
push 8
push ecx
call fcn.27030573
push 4
push edi
call fcn.27030573
mov eax, dword [ebp - 0x68]
add esp, 0x10
mov byte [eax + 7], 0
movzx ecx, word [esi + 0x110]
movzx eax, word [esi + 0x120]
add eax, ecx
call fcn.2708a280
mov al, byte [esi + 0x120]
add al, byte [esi + 0x110]
mov dword [ebp - 0x70], esp
mov byte [ebp - 0x69], al
movzx eax, word [esi + 0x110]
push eax
push dword [esi + 0x10c]
push dword [ebp - 0x70]
call sub.msvcrt.dll_memcpy
movzx eax, word [esi + 0x120]
push eax
movzx eax, word [esi + 0x110]
push dword [esi + 0x11c]
add eax, dword [ebp - 0x70]
push eax
call sub.msvcrt.dll_memcpy
push 0
call sub.msvcrt.dll_time
mov ecx, eax
shr ecx, 8
mov byte [ebp + 0xbc], al
mov byte [ebp + 0xbd], cl
mov ecx, eax
shr eax, 0x18
mov byte [ebp + 0xbf], al
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
shr ecx, 0x10
mov byte [ebp + 0xbe], cl
mov dword [ebp + 0xc0], eax
mov eax, dword [edi]
lea ecx, [ebp + 0xc4]
call fcn.27005bb6
lea eax, [esi + 0x12a]
mov cl, byte [eax]
mov al, byte [eax + 1]
push 4
push dword [ebp - 0x74]
mov byte [ebp + 0xc8], cl
mov byte [ebp + 0xc9], al
mov byte [ebp + 0xca], 0
mov byte [ebp + 0xcb], 0
call fcn.27030573
movzx eax, byte [ebp - 0x69]
push eax
push dword [ebp - 0x70]
lea edi, [ebx + 0x28]
push 4
push dword [ebp - 0x74]
push edi
call fcn.27030d10
mov ecx, dword [edi]
mov eax, dword [ebp - 0x74]
mov dword [eax + 4], ecx
mov ecx, dword [edi + 4]
add esp, 0x38
mov dword [eax + 8], ecx
cmp dword [ebx + 0x18], 0
jne 0x27001c8e
mov eax, dword [esi + 0x104]
mov dword [ebp - 0x68], eax
test eax, eax
je 0x27001c57
cmp byte [eax], 0
je 0x27001c57
push 0x3a
push eax
call dword [sym.imp.msvcrt.dll_strchr]
pop ecx
pop ecx
mov dword [ebp - 0x70], eax
test eax, eax
je 0x27001c57
xor eax, eax
mov byte [ebp + 0xac], 0
lea edi, [ebp + 0xad]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov eax, dword [ebp - 0x70]
sub eax, dword [ebp - 0x68]
push eax
push dword [ebp - 0x68]
lea eax, [ebp + 0xac]
push eax
call dword [sym.imp.msvcrt.dll_strncpy]
mov eax, dword [ebp - 0x70]
add esp, 0xc
inc eax
lea edi, [ebp + 0x1c]
sub edi, eax
mov cl, byte [eax]
mov byte [edi + eax], cl
inc eax
test cl, cl
jne 0x27001c05
push 0xa
lea eax, [ebp + 0xac]
push 0
push eax
call dword [sym.imp.msvcrt.dll_strtol]
add esp, 0xc
lea ecx, [ebx + 0x1c]
call fcn.27005bb6
lea eax, [ebp + 0x1c]
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x27001c31
sub eax, edi
push eax
mov dword [ebx + 0x20], eax
call dword [sym.imp.msvcrt.dll_malloc]
push dword [ebx + 0x20]
lea ecx, [ebp + 0x1c]
push ecx
push eax
mov dword [ebx + 0x18], eax
call sub.msvcrt.dll_memcpy
add esp, 0x10
cmp dword [ebx + 0x18], 0
jne 0x27001c8e
lea eax, [ebx + 0x1c]
push 4
push eax
call fcn.27030573
movzx eax, word [esi + 0x120]
push eax
mov dword [ebx + 0x20], eax
call dword [sym.imp.msvcrt.dll_malloc]
push dword [ebx + 0x20]
mov dword [ebx + 0x18], eax
push dword [esi + 0x11c]
push eax
call sub.msvcrt.dll_memcpy
add esp, 0x18
push 4
lea esi, [ebp - 0x68]
lea eax, [ebx + 0x1c]
pop edi
mov cl, byte [eax + 0x14]
xor cl, byte [eax]
inc eax
mov byte [esi], cl
inc esi
dec edi
jne 0x27001c97
push 0xff
lea eax, [ebp - 0x63]
push edi
push eax
mov byte [ebp - 0x64], 0
call sub.msvcrt.dll_memset
mov esi, dword [ebx + 0x20]
add esp, 0xc
mov eax, esi
call fcn.2708a280
mov edi, esp
push esi
push dword [ebx + 0x18]
push edi
call sub.msvcrt.dll_memcpy
push esi
push edi
lea edi, [ebp - 0x64]
call fcn.27005bcf
mov eax, dword [ebp - 0x78]
add esp, 0x14
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x27001ce2
sub eax, edi
mov edi, eax
lea eax, [esi + 2]
push 3
pop ecx
cdq
idiv ecx
push edi
push dword [ebp - 0x78]
mov esi, eax
shl esi, 2
lea eax, [ebp + esi - 0x64]
push eax
call sub.msvcrt.dll_memcpy
add esi, edi
lea eax, [ebp - 0x64]
push esi
push eax
lea ecx, [ebp + 0xac]
call fcn.27030bf5
lea eax, [ebp + 0x9c]
push eax
lea ecx, [ebp + 0xac]
lea edx, [ebp + 0xbc]
call fcn.27030e3a
mov eax, dword [ebp - 0x68]
push dword [ebx + 0x20]
mov dword [ebp + 0xbc], eax
push dword [ebx + 0x18]
lea esi, [ebp + 0x9c]
lea edi, [ebp + 0xc0]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x14
lea ecx, [ebp + 0xbc]
lea eax, [ebx + 0x38]
push ecx
push eax
movsd dword es:[edi], dword [esi]
call fcn.27030d10
mov eax, dword [ebp - 0x74]
push 5
pop ecx
lea edi, [eax + 0xc]
lea esi, [ebp + 0xbc]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebx + 0x38]
push 0xff
mov dword [eax + 0x20], ecx
lea eax, [ebp - 0x63]
push 0
push eax
mov byte [ebp - 0x64], 0
call sub.msvcrt.dll_memset
push dword [ebx + 0x20]
lea edi, [ebp - 0x64]
push dword [ebx + 0x18]
call fcn.27005bcf
mov eax, edi
add esp, 0x40
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x27001da5
sub eax, esi
lea edi, [ebp + eax - 0x64]
lea eax, [ebx + 0x28]
push 0x10
push eax
call fcn.27005bcf
lea eax, [ebp - 0x64]
push eax
mov ecx, 0x270915bc
mov dword [ebx + 0x68], 1
call fcn.270305b4
mov edi, dword [sym.imp.msvcrt.dll_malloc]
mov esi, 0xe0
push esi
mov dword [ebx + 0x6c], eax
call edi
push esi
mov dword [ebx + 0x70], eax
call edi
push 1
push dword [ebx + 0x70]
mov dword [ebx + 0x74], eax
mov eax, dword [ebx + 0x6c]
push dword [eax]
call dword [eax + 0x14]
mov eax, dword [ebx + 0x6c]
push 0
push dword [ebx + 0x74]
push dword [eax]
call dword [eax + 0x14]
push dword [ebp - 0x7c]
mov edi, dword [ebp - 0x74]
push dword [ebp + 0xe4]
add edi, 0x24
push dword [ebp - 0x80]
mov ecx, ebx
call fcn.270018ed
add esp, 0x38
add eax, 0x24
lea esp, [ebp - 0x8c]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0xd0]
xor ecx, ebp
call fcn.27088f70
add ebp, 0xd4
leave
ret