Function at 0x5fe860
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xa8
mov dword [ebp - 0x24], 0x1acf
mov dword [ebp - 0x14], 0xde2
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xc], 0xceb
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x34], 0x95d
mov dword [ebp - 8], 0
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x30], 0x1014
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x24]
jae 0x5fe8b6
cmp dword [ebp - 4], 0
jae 0x5fe8e4
imul ecx, dword [ebp - 0x2c], 0
mov edx, 0xfffffe42
sub edx, ecx
add edx, dword [ebp - 4]
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x14], 0
je 0x5fe8e4
cmp dword [ebp - 0x18], 0
je 0x5fe8e4
xor eax, eax
sub eax, dword [ebp - 8]
add eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x1c]
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 4]
cmp ecx, dword [ebp - 0x18]
jne 0x5fe983
mov dword [ebp - 0x10], 0x8b7
xor edx, edx
sub edx, dword [ebp - 0x24]
movzx eax, byte [ebp - 0x38]
imul ecx, eax, 0
add edx, ecx
imul eax, dword [ebp - 8], 0
sub edx, eax
mov dword [ebp - 4], edx
xor ecx, ecx
sub ecx, dword [ebp - 0xc]
shr ecx, 0x48
and ecx, 0
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0x10]
add edx, 0x17
mov dword [ebp - 0x10], edx
movzx eax, byte [ebp - 0x18]
mov ecx, dword [ebp - 0x18]
sub ecx, eax
sub ecx, dword [ebp - 4]
movzx edx, word [ebp - 0x38]
add ecx, edx
mov dword [ebp - 0x30], ecx
cmp dword [ebp - 0xc], 0
je 0x5fe946
cmp dword [ebp - 0x44], 0
je 0x5fe94e
mov ax, word [ebp - 4]
mov word [ebp - 0x28], ax
cmp dword [ebp - 0x10], 0x8e5
jb 0x5fe90e
cmp dword [ebp - 0x28], 0
jne 0x5fe96d
movzx ecx, byte [ebp - 0xc]
add ecx, dword [ebp - 0x44]
xor edx, edx
shl edx, cl
mov dword [ebp - 0x3c], edx
jmp 0x5fe981
mov eax, dword [ebp - 8]
imul eax, dword [ebp - 0x30]
mov ecx, 0x1694
sub ecx, eax
add ecx, dword [ebp - 0x20]
mov dword [ebp - 0x50], ecx
jmp 0x5fe99c
mov edx, dword [ebp - 0x38]
add edx, dword [ebp - 0x14]
movzx eax, word [ebp - 0x3c]
add edx, eax
movzx ecx, byte [ebp - 0x1c]
sub edx, ecx
or edx, dword [ebp - 0x2c]
mov word [ebp - 0x28], dx
call dword [sym.imp.USER32.dll_GetProcessWindowStation]
mov dword [ebp - 0x34], eax
mov edx, dword [ebp - 0x1c]
cmp edx, dword [ebp - 0x28]
jbe 0x5fe9b9
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x38]
jne 0x5fea71
movzx ecx, byte [ebp - 0xc]
cmp dword [ebp - 0x10], ecx
jbe 0x5fea50
mov dword [ebp - 8], 0xf3
mov edx, dword [ebp - 0x10]
sub edx, dword [ebp - 0x48]
sub edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0xc]
movzx eax, byte [ebp - 0x30]
sub edx, eax
imul ecx, dword [ebp - 0x28], 0
imul eax, ecx, 0
sub edx, eax
mov dword [ebp - 0x38], edx
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 0x24]
mov dword [ebp - 0x2c], ecx
mov edx, dword [ebp - 8]
add edx, 0x16
mov dword [ebp - 8], edx
movzx eax, word [ebp - 0x4c]
xor ecx, ecx
sub ecx, eax
movzx edx, byte [ebp - 0x3c]
add ecx, edx
xor ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0xa8], 0
push 0x2c
push 0
lea eax, [ebp - 0xa4]
push eax
call fcn.005ff470
add esp, 0xc
lea ecx, [ebp - 0xa8]
push ecx
push str.eshdoehfhrnecaktg
push 0
call dword [sym.imp.USER32.dll_GetClassInfoExW]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 8], 0x11f
jb 0x5fe9eb
jmp 0x5fea6a
movzx edx, word [ebp - 0x14]
add edx, dword [ebp - 4]
add edx, dword [ebp - 0x14]
add edx, dword [ebp - 8]
movzx eax, word [ebp - 0x20]
imul ecx, eax, 0
sub edx, ecx
mov word [ebp - 0x2c], dx
movzx edx, word [ebp - 0x30]
mov dword [ebp - 0x2c], edx
call fcn.005feba0
cmp dword [ebp - 0xc], 0
jne 0x5feac9
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x10]
je 0x5feac9
mov ecx, dword [ebp - 0x30]
cmp ecx, dword [ebp - 0x20]
jne 0x5feaa7
mov edx, dword [ebp - 0x24]
sub edx, dword [ebp - 0x4c]
movzx eax, byte [ebp - 0x1c]
add edx, eax
imul ecx, dword [ebp - 0x24], 0
add edx, ecx
movzx eax, byte [ebp - 0x20]
sub edx, eax
mov dword [ebp - 0x3c], edx
mov ecx, dword [ebp - 0x3c]
sub ecx, 0x256
sub ecx, dword [ebp - 0x50]
add ecx, 0x14a3
imul edx, dword [ebp - 4], 0
add edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0x34]
or ecx, edx
mov word [ebp - 0x48], cx
mov eax, dword [ebp - 4]
cmp eax, dword [ebp - 0x1c]
je 0x5feb0e
xor edx, edx
mov word [ebp - 0x78], dx
xor eax, eax
mov dword [ebp - 0x76], eax
mov dword [ebp - 0x72], eax
mov dword [ebp - 0x6e], eax
mov dword [ebp - 0x6a], eax
mov dword [ebp - 0x66], eax
mov dword [ebp - 0x62], eax
mov dword [ebp - 0x5e], eax
mov dword [ebp - 0x5a], eax
mov dword [ebp - 0x56], eax
mov word [ebp - 0x52], ax
lea ecx, [ebp - 0x78]
push ecx
push 0x2e73a4e
push 0
call dword [sym.imp.GDI32.dll_SetPixelFormat]
mov dword [ebp - 4], eax
jmp 0x5feb28
movzx edx, word [ebp - 0x14]
mov ecx, dword [ebp - 0x20]
sub ecx, edx
sub ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0x44]
xor eax, eax
shl eax, cl
and eax, 0
mov word [ebp - 0x50], ax
cmp dword [ebp - 0x34], 0
jne 0x5feb55
mov dword [ebp - 8], 0xfffff1c9
cmp dword [ebp - 0x40], 0
je 0x5feb4c
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0x10]
movzx edx, byte [ebp - 0x1c]
sub ecx, edx
mov dword [ebp - 0x34], ecx
jmp 0x5feb53
mov dword [ebp - 8], 0x6fd
jmp 0x5feb5b
mov eax, dword [ebp - 4]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x1c], 0
jbe 0x5feb9a
cmp dword [ebp - 0x48], 0
jne 0x5feb9a
mov ecx, dword [ebp - 0xc]
push ecx
mov edx, dword [ebp - 4]
push edx
push 0xe0bea4a
push 0x2e09e84
push 0
call dword [sym.imp.USER32.dll_CheckMenuRadioItem]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 4]
lea edx, [ecx + eax - 0xd93]
add edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0x20]
mov dword [ebp - 0x28], edx
mov esp, ebp
pop ebp
ret