Function at 0xee3070
Capabilities:
Encode data using xor
Hash data using sha1
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x60
mov ebp, dword [esp + 0x78]
mov eax, dword [esp + 0x74]
mov dword [esp + 0x10], 0xc3d2e1f0
mov dword [esp + 0xc], 0x10325476
mov dword [esp + 8], 0x98badcfe
mov dword [esp + 4], 0xefcdab89
mov dword [esp], 0x67452301
cmp ebp, 0x40
jb 0xee312d
mov edi, ebp
shr edi, 6
xor ebx, ebx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ebp, eax
xor esi, esi
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx eax, byte [ebp + esi]
mov dword [esp + esi + 0x20], eax
movzx ecx, byte [ebp + esi + 1]
shl ecx, 8
or ecx, eax
mov dword [esp + esi + 0x20], ecx
movzx eax, byte [ebp + esi + 2]
shl eax, 0x10
or eax, ecx
mov dword [esp + esi + 0x20], eax
movzx ecx, byte [ebp + esi + 3]
shl ecx, 0x18
or ecx, eax
mov dword [esp + esi + 0x20], ecx
add esi, 4
cmp esi, 0x40
jne 0xee30d0
lea eax, [esp + 0x20]
push eax
lea eax, [esp + 4]
push eax
call fcn.00ee4f50
add esp, 8
inc ebx
lea eax, [esi + ebp]
cmp ebx, edi
jne 0xee30c0
add ebp, esi
mov eax, ebp
mov ebp, dword [esp + 0x78]
mov dword [esp + 0x5c], 0
mov dword [esp + 0x58], 0
mov dword [esp + 0x54], 0
mov dword [esp + 0x50], 0
mov dword [esp + 0x4c], 0
mov dword [esp + 0x48], 0
mov dword [esp + 0x44], 0
mov dword [esp + 0x40], 0
mov dword [esp + 0x3c], 0
mov dword [esp + 0x38], 0
mov dword [esp + 0x34], 0
mov dword [esp + 0x30], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x24], 0
mov dword [esp + 0x20], 0
mov edi, ebp
and edi, 0x3f
je 0xee3239
mov ecx, ebp
and ecx, 1
xor edx, edx
cmp edi, 1
je 0xee3222
mov dword [esp + 0x18], edi
mov dword [esp + 0x14], ecx
sub edi, ecx
mov dword [esp + 0x1c], edi
xor ebx, ebx
xor edx, edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ebp, byte [eax + edx]
mov ecx, ebx
and cl, 0x10
shl ebp, cl
mov edi, edx
and edi, 0xfffffffc
xor ebp, dword [esp + edi + 0x20]
mov dword [esp + edi + 0x20], ebp
movzx esi, byte [eax + edx + 1]
or cl, 8
shl esi, cl
xor esi, ebp
mov dword [esp + edi + 0x20], esi
add edx, 2
add ebx, 0x10
cmp dword [esp + 0x1c], edx
jne 0xee31e0
add eax, edx
mov ebp, dword [esp + 0x78]
mov edi, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
test ecx, ecx
je 0xee3239
movzx eax, byte [eax]
lea ecx, [edx*8]
shl eax, cl
and edx, 0xfffffffc
xor dword [esp + edx + 0x20], eax
lea ebx, [ebp*8]
mov ecx, ebx
and cl, 0x18
or cl, 7
mov eax, 1
shl eax, cl
mov esi, dword [esp + 0x7c]
mov ecx, ebp
and ecx, 0x3c
xor dword [esp + ecx + 0x20], eax
cmp edi, 0x37
jbe 0xee3285
lea edi, [esp + 0x20]
mov eax, esp
push edi
push eax
call fcn.00ee4f50
add esp, 8
xor eax, eax
mov ecx, 0x10
rep stosd dword es:[edi], eax
lea edi, [esp + 0x60]
xor eax, eax
xor ecx, ecx
rep stosw word es:[edi], ax
mov dword [esp + 0x58], ebx
shr ebp, 0x1d
mov dword [esp + 0x5c], ebp
lea eax, [esp + 0x20]
mov ecx, esp
push eax
push ecx
call fcn.00ee4f50
add esp, 8
mov eax, dword [esp]
mov dword [esi], eax
mov eax, dword [esp + 4]
mov dword [esi + 4], eax
mov eax, dword [esp + 8]
mov dword [esi + 8], eax
mov eax, dword [esp + 0xc]
mov dword [esi + 0xc], eax
mov eax, dword [esp + 0x10]
mov dword [esi + 0x10], eax
add esp, 0x60
pop esi
pop edi
pop ebx
pop ebp
ret