Function at 0x5b1e70
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x178
mov eax, dword [0x79b5e0]
xor eax, esp
mov dword [esp + 0x174], eax
mov eax, dword [ebp + 8]
mov dword [esp + 0x48], eax
mov eax, dword [ebp + 0xc]
mov dword [esp + 0x5c], eax
push esi
mov esi, ecx
push edi
mov edi, edx
mov dword [esp + 0x18], esi
mov ecx, edi
mov dword [esp + 0x48], edi
mov eax, dword [esi + 0x5c]
mov edx, 1
mov dword [esp + 0x30], eax
mov eax, dword [esi + 0x28]
mov dword [esp + 0x34], eax
lea eax, [esi + 0x2c]
mov dword [esp + 0x54], eax
mov eax, dword [esi + 0x24]
mov dword [esp + 0x4c], eax
mov eax, dword [esi + 4]
sub ecx, eax
mov dword [esp + 0x28], eax
mov eax, edx
mov dword [esp + 0x24], ecx
mov ecx, dword [esi + 0xb8]
shl eax, cl
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x24]
sub eax, dword [esi + 0x10]
mov ecx, dword [esp + 0x40]
cmp eax, ecx
jbe 0x5b1efe
mov eax, dword [esp + 0x24]
sub eax, ecx
mov ecx, dword [esi + 0x10]
jmp 0x5b1f03
mov ecx, dword [esi + 0x10]
mov eax, ecx
cmp dword [esi + 0x18], 0
mov dword [esp + 0x40], 3
cmovne eax, ecx
mov dword [esp + 0x58], 0x1f
mov dword [esp + 0x38], eax
mov ecx, 5
mov eax, dword [esi + 0xc4]
cmp eax, ecx
cmovb ecx, eax
mov eax, dword [esi + 0x50]
shl edx, cl
cmp dword [esi + 0xdc], 0
mov dword [esp + 0x60], eax
mov eax, dword [esi + 0x54]
mov dword [esp + 0x2c], eax
mov dword [esp + 0x5c], edx
jne 0x5b21fb
mov edx, dword [esp + 0x28]
mov eax, edi
mov ecx, dword [esi + 0x1c]
sub eax, edx
mov dword [esp + 0x44], eax
sub eax, ecx
mov dword [esp + 0xc], ecx
cmp eax, 0x180
jbe 0x5b20d9
lea eax, [ecx + 0x60]
mov dword [esp + 0x3c], eax
cmp ecx, eax
jae 0x5b2032
mov eax, dword [esp + 0x4c]
mov esi, 0x40
mov edi, dword [esp + 0x18]
add eax, 8
sub esi, eax
lea eax, [edx + 8]
mov dword [esp + 0x20], esi
mov dword [esp + 0x1c], eax
jmp 0x5b1fa0
push 0xcf1bbcdc
push 0xbb000000
push dword [ecx + eax + 4]
push dword [ecx + eax]
call fcn.00620b50
xor eax, dword [edi + 0x50]
mov ecx, esi
xor edx, dword [edi + 0x54]
call fcn.00622f20
mov ecx, eax
mov eax, dword [esp + 0xc]
and eax, 7
mov edx, dword [edi + eax*4 + 0x2c]
mov esi, edx
mov dword [edi + eax*4 + 0x2c], ecx
mov eax, 0
shr esi, 3
mov dword [esp + 0x14], edx
and esi, 0x1fffffe0
mov edx, dword [esp + 0x34]
add edx, esi
movzx ecx, byte [edx]
dec ecx
and ecx, 0x1f
cmove eax, dword [esp + 0x58]
add ecx, eax
mov eax, dword [esp + 0x14]
mov byte [edx], cl
mov byte [ecx + edx], al
lea eax, [ecx + esi]
mov edx, dword [esp + 0x30]
mov ecx, dword [esp + 0xc]
mov esi, dword [esp + 0x20]
mov dword [edx + eax*4], ecx
inc ecx
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc], ecx
cmp ecx, dword [esp + 0x3c]
jb 0x5b1fa0
mov edi, dword [esp + 0x48]
mov esi, dword [esp + 0x18]
mov ecx, dword [esp + 0x44]
lea edx, [edi + 1]
mov eax, dword [esp + 0x28]
add ecx, 0xffffffe0
add eax, ecx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x14], ecx
cmp eax, edx
jbe 0x5b2052
xor edx, edx
jmp 0x5b2059
sub edx, dword [esp + 0x28]
sub edx, ecx
inc edx
mov eax, 8
cmp edx, eax
cmova edx, eax
add edx, ecx
mov dword [esp + 0x1c], edx
cmp ecx, edx
jae 0x5b20d9
mov eax, dword [esi + 0x24]
mov ecx, 0x40
add eax, 8
mov edi, edx
mov edx, dword [esp + 0x14]
sub ecx, eax
mov dword [esp + 0x20], ecx
jmp 0x5b2090
mov eax, dword [esp + 0x28]
push 0xcf1bbcdc
push 0xbb000000
push dword [edx + eax + 4]
push dword [edx + eax]
call fcn.00620b50
xor eax, dword [esi + 0x50]
xor edx, dword [esi + 0x54]
mov ecx, dword [esp + 0x20]
call fcn.00622f20
mov edx, dword [esp + 0x14]
mov ecx, eax
mov eax, edx
inc edx
and eax, 7
mov dword [esp + 0x14], edx
mov dword [esi + eax*4 + 0x2c], ecx
cmp edx, edi
jb 0x5b2090
mov edi, dword [esp + 0x48]
mov ecx, dword [esp + 0xc]
mov eax, dword [esi + 0x5c]
mov edx, dword [esi + 0x24]
mov dword [esp + 0x10], eax
mov eax, dword [esi + 0x28]
mov dword [esp + 0x3c], eax
mov eax, dword [esi + 4]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x44]
cmp ecx, eax
jae 0x5b21a5
mov edi, dword [esp + 0x44]
lea eax, [edx + 8]
mov edx, 0x40
sub edx, eax
mov dword [esp + 0x20], edx
nop
mov eax, dword [esp + 0x1c]
push 0xcf1bbcdc
push 0xbb000000
push dword [ecx + eax + 0xc]
push dword [ecx + eax + 8]
call fcn.00620b50
xor eax, dword [esi + 0x50]
xor edx, dword [esi + 0x54]
mov ecx, dword [esp + 0x20]
call fcn.00622f20
mov esi, dword [esp + 0x54]
mov ecx, eax
mov eax, dword [esp + 0xc]
and eax, 7
mov edx, dword [esi + eax*4]
mov dword [esi + eax*4], ecx
mov esi, edx
shr esi, 3
mov eax, 0
mov dword [esp + 0x14], edx
and esi, 0x1fffffe0
mov edx, dword [esp + 0x3c]
add edx, esi
movzx ecx, byte [edx]
dec ecx
and ecx, 0x1f
cmove eax, dword [esp + 0x58]
add ecx, eax
mov eax, dword [esp + 0x14]
mov byte [edx], cl
mov byte [ecx + edx], al
lea eax, [ecx + esi]
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov esi, dword [esp + 0x18]
mov dword [edx + eax*4], ecx
inc ecx
mov dword [esp + 0xc], ecx
cmp ecx, edi
jb 0x5b2110
mov edi, dword [esp + 0x48]
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x24]
mov dword [esi + 0x1c], eax
mov eax, dword [esp + 0x28]
mov esi, dword [esp + 0x4c]
push 0xcf1bbcdc
push 0xbb000000
push dword [ecx + eax + 0xc]
add esi, 8
push dword [ecx + eax + 8]
call fcn.00620b50
xor eax, dword [esp + 0x60]
mov ecx, 0x40
xor edx, dword [esp + 0x2c]
sub ecx, esi
call fcn.00622f20
mov esi, dword [esp + 0x54]
mov ecx, eax
mov eax, dword [esp + 0x24]
and eax, 7
mov edx, dword [esi + eax*4]
mov dword [esi + eax*4], ecx
mov ecx, dword [esp + 0x18]
jmp 0x5b2237
mov esi, dword [esp + 0x4c]
push 0xcf1bbcdc
push 0xbb000000
push dword [edi + 4]
add esi, 8
push dword [edi]
call fcn.00620b50
xor eax, dword [esp + 0x60]
mov ecx, 0x40
xor edx, dword [esp + 0x2c]
sub ecx, esi
call fcn.00622f20
mov ecx, dword [esp + 0x18]
mov edx, eax
mov eax, dword [esp + 0x24]
mov dword [ecx + 0x1c], eax
add dword [ecx + 0x58], edx
mov ecx, edx
movzx eax, dl
mov edx, dword [esp + 0x34]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x30]
shr ecx, 3
and ecx, 0x1fffffe0
mov dword [esp + 0xc], 0
add edx, ecx
mov dword [esp + 0x34], 0
mov dword [esp + 0x3c], edx
lea eax, [eax + ecx*4]
mov dword [esp + 0x30], eax
movzx eax, byte [edx]
mov esi, eax
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x2c]
and esi, 0x1f
movsx eax, al
xor ecx, ecx
mov dword [esp + 0x1c], esi
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
pshufd xmm1, xmm0, 0
xorps xmm0, xmm0
movdqu xmmword [esp + 0x68], xmm0
movdqu xmm0, xmmword [edx]
lea edx, [edx + 0x10]
pcmpeqb xmm0, xmm1
pmovmskb eax, xmm0
mov dword [esp + ecx*4 + 0x68], eax
inc ecx
cmp ecx, 2
jl 0x5b22a4
mov edx, dword [esp + 0x6c]
mov eax, esi
and eax, 0x1f
shl edx, 0x10
or edx, dword [esp + 0x68]
mov ecx, eax
neg ecx
mov esi, edx
and ecx, 0x1f
shl esi, cl
mov ecx, eax
shr edx, cl
or esi, edx
xor edx, edx
ja 0x5b22e6
test esi, esi
je 0x5b2349
xor edi, edi
mov ecx, dword [esp + 0x5c]
test ecx, ecx
je 0x5b2345
test esi, esi
jne 0x5b2300
bsf eax, edx
mov dword [esp + 0x10], eax
add eax, 0x20
jmp 0x5b2307
bsf eax, esi
mov dword [esp + 0x10], eax
add eax, dword [esp + 0x1c]
mov edi, dword [esp + 0x30]
and eax, 0x1f
mov eax, dword [edi + eax*4]
mov edi, dword [esp + 0xc]
je 0x5b232f
cmp eax, dword [esp + 0x38]
jb 0x5b2345
mov dword [esp + edi*4 + 0x78], eax
inc edi
dec ecx
mov dword [esp + 0xc], edi
mov dword [esp + 0x5c], ecx
mov ecx, esi
mov eax, edx
add ecx, 0xffffffff
adc eax, 0xffffffff
and esi, ecx
and edx, eax
ja 0x5b22e8
jb 0x5b2345
test esi, esi
jne 0x5b22e8
mov edi, dword [esp + 0x48]
mov ecx, dword [esp + 0x20]
mov edx, 0x1f
mov esi, dword [esp + 0x30]
dec ecx
and ecx, 0x1f
mov eax, 0
cmove eax, edx
mov edx, dword [esp + 0x2c]
add ecx, eax
mov eax, dword [esp + 0x3c]
mov byte [eax], cl
mov byte [ecx + eax], dl
mov edx, dword [esp + 0x18]
mov eax, dword [edx + 0x1c]
mov dword [esi + ecx*4], eax
inc dword [edx + 0x1c]
cmp dword [esp + 0xc], 0
jbe 0x5b247f
mov ecx, dword [esp + 0xc]
mov esi, 3
xor eax, eax
mov eax, dword [esp + eax*4 + 0x78]
mov edx, dword [esp + 0x28]
add edx, eax
mov dword [esp + 0x10], eax
mov eax, dword [edx + esi - 3]
cmp eax, dword [edi + esi - 3]
jne 0x5b2448
mov esi, dword [esp + 0x50]
mov eax, edi
add esi, 0xfffffffd
cmp edi, esi
jae 0x5b23f4
mov eax, dword [edx]
xor eax, dword [edi]
je 0x5b23d1
bsf eax, eax
mov ecx, eax
mov dword [esp + 0x38], eax
shr ecx, 3
jmp 0x5b241c
lea eax, [edi + 4]
add edx, 4
cmp eax, esi
jae 0x5b23f4
jmp 0x5b23e0
mov ecx, dword [edx]
xor ecx, dword [eax]
jne 0x5b246f
add eax, 4
add edx, 4
cmp eax, esi
jb 0x5b23e0
mov esi, dword [esp + 0x50]
lea ecx, [esi - 1]
cmp eax, ecx
jae 0x5b240d
mov cx, word [edx]
cmp cx, word [eax]
jne 0x5b240d
add eax, 2
add edx, 2
cmp eax, esi
jae 0x5b2418
mov cl, byte [edx]
cmp cl, byte [eax]
jne 0x5b2418
inc eax
mov ecx, eax
sub ecx, edi
mov esi, dword [esp + 0x40]
cmp ecx, esi
jbe 0x5b2444
mov eax, dword [esp + 0x24]
mov esi, ecx
sub eax, dword [esp + 0x10]
mov edx, dword [esp + 0x64]
add eax, 3
mov dword [esp + 0x40], esi
mov dword [edx], eax
lea eax, [ecx + edi]
cmp eax, dword [esp + 0x50]
je 0x5b2459
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x34]
inc eax
mov dword [esp + 0x34], eax
cmp eax, ecx
jb 0x5b2394
mov eax, esi
pop edi
pop esi
mov ecx, dword [esp + 0x174]
xor ecx, esp
call fcn.0061b9b8
mov esp, ebp
pop ebp
ret
bsf ecx, ecx
mov dword [esp + 0x38], ecx
shr ecx, 3
sub ecx, edi
add ecx, eax
jmp 0x5b241c
mov ecx, dword [esp + 0x17c]
mov eax, 3
pop edi
pop esi
xor ecx, esp
call fcn.0061b9b8
mov esp, ebp
pop ebp
ret