Function at 0x5ba140
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x190
mov eax, dword [0x79b5e0]
xor eax, esp
mov dword [esp + 0x18c], eax
mov eax, dword [ebp + 8]
mov dword [esp + 0x18], eax
mov eax, dword [ebp + 0xc]
mov dword [esp + 0x70], eax
push esi
mov esi, ecx
mov dword [esp + 0x38], edx
push edi
mov edi, 1
mov dword [esp + 0x2c], esi
mov eax, dword [esi + 0x5c]
mov ecx, dword [esi + 0xc]
mov dword [esp + 0x28], eax
mov eax, dword [esi + 0x28]
mov dword [esp + 0x30], eax
lea eax, [esi + 0x2c]
mov dword [esp + 0x70], eax
mov eax, dword [esi + 0x24]
mov dword [esp + 0x5c], eax
mov eax, dword [esi + 4]
mov dword [esp + 0x58], ecx
add ecx, eax
mov dword [esp + 0x7c], ecx
mov ecx, edx
sub ecx, eax
mov dword [esp + 0xc], eax
mov dword [esp + 0x48], ecx
mov eax, edi
mov ecx, dword [esi + 0xb8]
shl eax, cl
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x48]
sub eax, dword [esi + 0x10]
mov ecx, dword [esp + 0x34]
cmp eax, ecx
jbe 0x5ba1e1
mov eax, dword [esp + 0x48]
sub eax, ecx
mov dword [esp + 0x54], eax
mov eax, dword [esi + 0x10]
mov ecx, dword [esp + 0x54]
jmp 0x5ba1e6
mov eax, dword [esi + 0x10]
mov ecx, eax
cmp dword [esi + 0x18], 0
push 0xcf1bbcdc
cmovne ecx, eax
mov dword [esp + 0x1c], 3
mov eax, dword [esi + 0xc4]
mov dword [esp + 0x58], ecx
mov ecx, 5
cmp eax, ecx
push 0xbb000000
push dword [edx + 4]
cmovb ecx, eax
mov eax, dword [esi + 0x50]
push dword [edx]
shl edi, cl
mov ecx, dword [esi + 0xb4]
mov dword [esp + 0x7c], eax
mov eax, dword [esi + 0x54]
mov dword [esp + 0x60], edi
mov esi, dword [ecx + 0x24]
mov edi, dword [ecx + 0x28]
add esi, 8
mov dword [esp + 0x44], eax
mov dword [esp + 0x78], ecx
call fcn.00620b50
mov ecx, 0x40
sub ecx, esi
call fcn.00622f20
mov edx, dword [esp + 0x68]
mov ecx, eax
mov esi, dword [esp + 0x2c]
shr ecx, 3
and ecx, 0x1fffffe0
movzx eax, al
mov dword [esp + 0x44], eax
cmp dword [esi + 0xdc], 0
mov dword [esp + 0x74], 0x1f
lea eax, [ecx + edi]
mov edi, dword [esp + 0x3c]
mov dword [esp + 0x60], eax
mov eax, dword [edx + 0x5c]
lea eax, [eax + ecx*4]
mov dword [esp + 0x64], eax
jne 0x5ba53b
mov edx, dword [esp + 0xc]
mov eax, edi
mov ecx, dword [esi + 0x1c]
sub eax, edx
mov dword [esp + 0x14], eax
sub eax, ecx
mov dword [esp + 0x24], ecx
cmp eax, 0x180
jbe 0x5ba419
lea eax, [ecx + 0x60]
mov dword [esp + 0x4c], eax
cmp ecx, eax
jae 0x5ba372
mov eax, dword [esp + 0x5c]
mov esi, 0x40
mov edi, dword [esp + 0x2c]
add eax, 8
sub esi, eax
lea eax, [edx + 8]
mov dword [esp + 0x40], esi
mov dword [esp + 0x1c], eax
push 0xcf1bbcdc
push 0xbb000000
push dword [ecx + eax + 4]
push dword [ecx + eax]
call fcn.00620b50
xor eax, dword [edi + 0x50]
mov ecx, esi
xor edx, dword [edi + 0x54]
call fcn.00622f20
mov ecx, eax
mov eax, dword [esp + 0x24]
and eax, 7
mov edx, dword [edi + eax*4 + 0x2c]
mov esi, edx
mov dword [edi + eax*4 + 0x2c], ecx
mov eax, 0
shr esi, 3
mov dword [esp + 0x38], edx
and esi, 0x1fffffe0
mov edx, dword [esp + 0x30]
add edx, esi
movzx ecx, byte [edx]
dec ecx
and ecx, 0x1f
cmove eax, dword [esp + 0x74]
add ecx, eax
mov eax, dword [esp + 0x38]
mov byte [edx], cl
mov byte [ecx + edx], al
lea eax, [ecx + esi]
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x24]
mov esi, dword [esp + 0x40]
mov dword [edx + eax*4], ecx
inc ecx
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x24], ecx
cmp ecx, dword [esp + 0x4c]
jb 0x5ba2e0
mov edi, dword [esp + 0x3c]
mov esi, dword [esp + 0x2c]
mov ecx, dword [esp + 0x14]
lea edx, [edi + 1]
mov eax, dword [esp + 0xc]
add ecx, 0xffffffe0
add eax, ecx
mov dword [esp + 0x24], ecx
mov dword [esp + 0x38], ecx
cmp eax, edx
jbe 0x5ba392
xor edx, edx
jmp 0x5ba399
sub edx, dword [esp + 0xc]
sub edx, ecx
inc edx
mov eax, 8
cmp edx, eax
cmova edx, eax
add edx, ecx
mov dword [esp + 0x1c], edx
cmp ecx, edx
jae 0x5ba419
mov eax, dword [esi + 0x24]
mov ecx, 0x40
add eax, 8
mov edi, edx
mov edx, dword [esp + 0x38]
sub ecx, eax
mov dword [esp + 0x40], ecx
jmp 0x5ba3d0
mov eax, dword [esp + 0xc]
push 0xcf1bbcdc
push 0xbb000000
push dword [edx + eax + 4]
push dword [edx + eax]
call fcn.00620b50
xor eax, dword [esi + 0x50]
xor edx, dword [esi + 0x54]
mov ecx, dword [esp + 0x40]
call fcn.00622f20
mov edx, dword [esp + 0x38]
mov ecx, eax
mov eax, edx
inc edx
and eax, 7
mov dword [esp + 0x38], edx
mov dword [esi + eax*4 + 0x2c], ecx
cmp edx, edi
jb 0x5ba3d0
mov edi, dword [esp + 0x3c]
mov ecx, dword [esp + 0x24]
mov eax, dword [esi + 0x5c]
mov edx, dword [esi + 0x24]
mov dword [esp + 0x10], eax
mov eax, dword [esi + 0x28]
mov dword [esp + 0x4c], eax
mov eax, dword [esi + 4]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x14]
cmp ecx, eax
jae 0x5ba4e5
mov edi, dword [esp + 0x14]
lea eax, [edx + 8]
mov edx, 0x40
sub edx, eax
mov dword [esp + 0x40], edx
nop
mov eax, dword [esp + 0x1c]
push 0xcf1bbcdc
push 0xbb000000
push dword [ecx + eax + 0xc]
push dword [ecx + eax + 8]
call fcn.00620b50
xor eax, dword [esi + 0x50]
xor edx, dword [esi + 0x54]
mov ecx, dword [esp + 0x40]
call fcn.00622f20
mov esi, dword [esp + 0x70]
mov ecx, eax
mov eax, dword [esp + 0x24]
and eax, 7
mov edx, dword [esi + eax*4]
mov dword [esi + eax*4], ecx
mov esi, edx
shr esi, 3
mov eax, 0
mov dword [esp + 0x38], edx
and esi, 0x1fffffe0
mov edx, dword [esp + 0x4c]
add edx, esi
movzx ecx, byte [edx]
dec ecx
and ecx, 0x1f
cmove eax, dword [esp + 0x74]
add ecx, eax
mov eax, dword [esp + 0x38]
mov byte [edx], cl
mov byte [ecx + edx], al
lea eax, [ecx + esi]
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0x24]
mov esi, dword [esp + 0x2c]
mov dword [edx + eax*4], ecx
inc ecx
mov dword [esp + 0x24], ecx
cmp ecx, edi
jb 0x5ba450
mov edi, dword [esp + 0x3c]
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x48]
mov dword [esi + 0x1c], eax
mov eax, dword [esp + 0xc]
mov esi, dword [esp + 0x5c]
push 0xcf1bbcdc
push 0xbb000000
push dword [ecx + eax + 0xc]
add esi, 8
push dword [ecx + eax + 8]
call fcn.00620b50
xor eax, dword [esp + 0x6c]
mov ecx, 0x40
xor edx, dword [esp + 0x34]
sub ecx, esi
call fcn.00622f20
mov esi, dword [esp + 0x70]
mov ecx, eax
mov eax, dword [esp + 0x48]
and eax, 7
mov edx, dword [esi + eax*4]
mov dword [esi + eax*4], ecx
mov ecx, dword [esp + 0x2c]
jmp 0x5ba577
mov esi, dword [esp + 0x5c]
push 0xcf1bbcdc
push 0xbb000000
push dword [edi + 4]
add esi, 8
push dword [edi]
call fcn.00620b50
xor eax, dword [esp + 0x6c]
mov ecx, 0x40
xor edx, dword [esp + 0x34]
sub ecx, esi
call fcn.00622f20
mov ecx, dword [esp + 0x2c]
mov edx, eax
mov eax, dword [esp + 0x48]
mov dword [ecx + 0x1c], eax
add dword [ecx + 0x58], edx
mov ecx, edx
movzx eax, dl
mov edx, dword [esp + 0x30]
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x28]
shr ecx, 3
and ecx, 0x1fffffe0
mov dword [esp + 0x14], 0
add edx, ecx
mov dword [esp + 0x30], 0
mov dword [esp + 0x4c], edx
lea eax, [eax + ecx*4]
mov dword [esp + 0x28], eax
movzx eax, byte [edx]
mov esi, eax
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x34]
and esi, 0x1f
movsx eax, al
xor ecx, ecx
mov dword [esp + 0x1c], esi
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
pshufd xmm1, xmm0, 0
xorps xmm0, xmm0
movdqu xmmword [esp + 0x80], xmm0
jmp 0x5ba5f0
movdqu xmm0, xmmword [edx]
lea edx, [edx + 0x10]
pcmpeqb xmm0, xmm1
pmovmskb eax, xmm0
mov dword [esp + ecx*4 + 0x80], eax
inc ecx
cmp ecx, 2
jl 0x5ba5f0
mov edx, dword [esp + 0x84]
mov eax, esi
and eax, 0x1f
shl edx, 0x10
or edx, dword [esp + 0x80]
mov ecx, eax
neg ecx
mov esi, edx
and ecx, 0x1f
shl esi, cl
mov ecx, eax
shr edx, cl
or esi, edx
xor edx, edx
ja 0x5ba63b
test esi, esi
je 0x5ba6a0
mov edi, dword [esp + 0x50]
nop
test edi, edi
je 0x5ba698
test esi, esi
jne 0x5ba654
bsf eax, edx
mov dword [esp + 0x10], eax
add eax, 0x20
jmp 0x5ba65b
bsf eax, esi
mov dword [esp + 0x10], eax
add eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x28]
and eax, 0x1f
mov eax, dword [ecx + eax*4]
je 0x5ba682
cmp eax, dword [esp + 0x54]
jb 0x5ba698
mov ecx, dword [esp + 0x14]
mov dword [esp + ecx*4 + 0x90], eax
inc ecx
mov dword [esp + 0x14], ecx
dec edi
mov ecx, esi
mov eax, edx
add ecx, 0xffffffff
adc eax, 0xffffffff
and esi, ecx
and edx, eax
ja 0x5ba640
jb 0x5ba698
test esi, esi
jne 0x5ba640
mov dword [esp + 0x50], edi
mov edi, dword [esp + 0x3c]
mov ecx, dword [esp + 0x40]
mov edx, 0x1f
mov esi, dword [esp + 0x28]
dec ecx
and ecx, 0x1f
mov eax, 0
cmove eax, edx
mov edx, dword [esp + 0x34]
add ecx, eax
mov eax, dword [esp + 0x4c]
mov byte [eax], cl
mov byte [ecx + eax], dl
mov edx, dword [esp + 0x2c]
mov eax, dword [edx + 0x1c]
mov dword [esi + ecx*4], eax
inc dword [edx + 0x1c]
cmp dword [esp + 0x14], 0
jbe 0x5ba7b5
mov ecx, 3
xor eax, eax
jmp 0x5ba6f0
mov eax, dword [esp + eax*4 + 0x90]
mov edx, dword [esp + 0xc]
add edx, eax
mov dword [esp + 0x1c], eax
mov eax, dword [edx + ecx - 3]
cmp eax, dword [edi + ecx - 3]
jne 0x5ba7a2
mov esi, dword [esp + 0x20]
mov eax, edi
add esi, 0xfffffffd
cmp edi, esi
jae 0x5ba754
mov eax, dword [edx]
xor eax, dword [edi]
je 0x5ba734
mov esi, dword [esp + 0x20]
bsf eax, eax
mov ecx, eax
mov dword [esp + 0x10], eax
shr ecx, 3
jmp 0x5ba77c
lea eax, [edi + 4]
add edx, 4
cmp eax, esi
jae 0x5ba754
mov edi, edi
mov ecx, dword [edx]
xor ecx, dword [eax]
jne 0x5ba879
add eax, 4
add edx, 4
cmp eax, esi
jb 0x5ba740
mov esi, dword [esp + 0x20]
lea ecx, [esi - 1]
cmp eax, ecx
jae 0x5ba76d
mov cx, word [edx]
cmp cx, word [eax]
jne 0x5ba76d
add eax, 2
add edx, 2
cmp eax, esi
jae 0x5ba778
mov cl, byte [edx]
cmp cl, byte [eax]
jne 0x5ba778
inc eax
mov ecx, eax
sub ecx, edi
cmp ecx, dword [esp + 0x18]
jbe 0x5ba79e
mov eax, dword [esp + 0x48]
sub eax, dword [esp + 0x1c]
mov edx, dword [esp + 0x78]
add eax, 3
mov dword [esp + 0x18], ecx
mov dword [edx], eax
lea eax, [ecx + edi]
cmp eax, esi
je 0x5ba7b5
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x30]
inc eax
mov dword [esp + 0x30], eax
cmp eax, dword [esp + 0x14]
jb 0x5ba6f0
mov edx, dword [esp + 0x68]
mov dword [esp + 0xc], 0
mov dword [esp + 0x28], 0
mov ecx, dword [edx + 4]
mov eax, dword [edx]
mov edx, dword [esp + 0x60]
mov dword [esp + 0x10], ecx
sub ecx, eax
add dword [esp + 0x58], ecx
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x44]
movzx esi, byte [edx]
movsx eax, al
and esi, 0x1f
mov dword [esp + 0x60], esi
xor ecx, ecx
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
pshufd xmm1, xmm0, 0
xorps xmm0, xmm0
movdqu xmmword [esp + 0x80], xmm0
movdqu xmm0, xmmword [edx]
lea edx, [edx + 0x10]
pcmpeqb xmm0, xmm1
pmovmskb eax, xmm0
mov dword [esp + ecx*4 + 0x80], eax
inc ecx
cmp ecx, 2
jl 0x5ba810
mov edx, dword [esp + 0x84]
mov eax, esi
and eax, 0x1f
shl edx, 0x10
or edx, dword [esp + 0x80]
mov ecx, eax
neg ecx
mov esi, edx
and ecx, 0x1f
shl esi, cl
mov ecx, eax
shr edx, cl
or esi, edx
xor edx, edx
ja 0x5ba85f
test esi, esi
je 0x5ba9b5
xor edi, edi
mov ecx, dword [esp + 0x50]
test ecx, ecx
je 0x5ba8da
test esi, esi
jne 0x5ba890
bsf eax, edx
mov dword [esp + 0x44], eax
add eax, 0x20
jmp 0x5ba897
mov esi, dword [esp + 0x20]
bsf ecx, ecx
mov dword [esp + 0x10], ecx
shr ecx, 3
sub ecx, edi
add ecx, eax
jmp 0x5ba77c
bsf eax, esi
mov dword [esp + 0x44], eax
add eax, dword [esp + 0x60]
mov edi, dword [esp + 0x64]
and eax, 0x1f
mov eax, dword [edi + eax*4]
mov edi, dword [esp + 0xc]
je 0x5ba8c4
mov ecx, dword [esp + 0x68]
cmp eax, dword [ecx + 0xc]
jb 0x5ba8da
mov dword [esp + edi*4 + 0x90], eax
inc edi
dec dword [esp + 0x50]
mov dword [esp + 0xc], edi
mov ecx, esi
mov eax, edx
add ecx, 0xffffffff
adc eax, 0xffffffff
and esi, ecx
and edx, eax
ja 0x5ba861
jb 0x5ba8da
test esi, esi
jne 0x5ba861
test edi, edi
mov edi, dword [esp + 0x3c]
je 0x5ba9b5
mov ecx, dword [esp + 0xc]
xor eax, eax
lea esp, [esp]
mov eax, dword [esp + eax*4 + 0x90]
mov esi, dword [esp + 0x10]
add esi, eax
mov dword [esp + 0x44], eax
mov eax, dword [esi]
cmp eax, dword [edi]
jne 0x5ba9af
mov ecx, dword [esp + 0x20]
lea eax, [edi + 4]
add esi, 4
sub eax, esi
mov edx, esi
add eax, dword [esp + 0x30]
cmp eax, ecx
cmovb ecx, eax
push ecx
lea ecx, [edi + 4]
call fcn.0059fed0
add esp, 4
mov dword [esp + 0x64], eax
lea ecx, [eax + esi]
cmp ecx, dword [esp + 0x30]
jne 0x5ba955
mov esi, dword [esp + 0x20]
lea ecx, [edi + 4]
mov edx, dword [esp + 0x7c]
add ecx, eax
push esi
call fcn.0059fed0
add esp, 4
add eax, dword [esp + 0x64]
mov edx, dword [esp + 0x18]
lea ecx, [eax + 4]
cmp ecx, edx
jbe 0x5ba984
mov eax, dword [esp + 0x48]
mov edx, ecx
sub eax, dword [esp + 0x44]
sub eax, dword [esp + 0x58]
mov esi, dword [esp + 0x78]
add eax, 3
mov dword [esp + 0x18], edx
mov dword [esi], eax
lea eax, [ecx + edi]
cmp eax, dword [esp + 0x20]
je 0x5ba999
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x28]
inc eax
mov dword [esp + 0x28], eax
cmp eax, ecx
jb 0x5ba8f0
mov eax, edx
pop edi
pop esi
mov ecx, dword [esp + 0x18c]
xor ecx, esp
call fcn.0061b9b8
mov esp, ebp
pop ebp
ret
mov edx, dword [esp + 0x18]
jmp 0x5ba988
mov ecx, dword [esp + 0x194]
mov eax, dword [esp + 0x18]
pop edi
pop esi
xor ecx, esp
call fcn.0061b9b8
mov esp, ebp
pop ebp
ret