Function at 0x5317c8
Capabilities:
Encode data using xor
Encrypt data using twofish

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffdf0
push ebx
push esi
push edi
mov ebx, 0x5700e0
mov eax, dword [ebp + 8]
mov ecx, dword [eax - 0xc]
lea edx, [ebx + 0x100]
lea eax, [ebp - 0x210]
call fcn.00531454
mov eax, pe_nt_image_headers32
lea edx, [ebp - 0x210]
lea esi, [ebp - 0x110]
xor ecx, ecx
mov cl, byte [edx]
mov cl, byte [ebx + ecx + 0x100]
mov byte [esi], cl
inc esi
inc edx
dec eax
jne 0x531801
mov eax, dword [ebp + 8]
mov ecx, dword [eax - 0x10]
lea edx, [ebp - 0x110]
lea eax, [ebp - 0x110]
call fcn.00531454
mov eax, dword [ebp + 8]
mov edx, dword [eax - 0x18]
and edx, 0xff
mov eax, dword [ebp + 8]
mov ecx, dword [eax - 0x14]
and ecx, 0xff
xor eax, eax
lea esi, [ebp - 0x110]
mov dword [ebp - 4], esi
mov esi, eax
add esi, esi
mov edi, dword [ebp + 8]
mov edi, dword [edi - 0x20]
lea esi, [edi + esi*4]
push esi
mov esi, dword [ebp - 4]
movzx esi, byte [esi]
movzx esi, byte [ebx + esi]
xor esi, ecx
movzx esi, byte [ebx + esi]
xor esi, edx
mov esi, dword [esi*4 + 0x5702e0]
pop edi
mov dword [edi], esi
inc eax
inc dword [ebp - 4]
cmp eax, 0x100
jne 0x53184d
mov eax, dword [ebp + 8]
mov ecx, dword [eax - 0xc]
shr ecx, 8
mov edx, ebx
lea eax, [ebp - 0x210]
call fcn.00531454
mov eax, pe_nt_image_headers32
lea edx, [ebp - 0x210]
lea esi, [ebp - 0x110]
xor ecx, ecx
mov cl, byte [edx]
mov cl, byte [ebx + ecx + 0x100]
mov byte [esi], cl
inc esi
inc edx
dec eax
jne 0x5318a9
mov eax, dword [ebp + 8]
mov ecx, dword [eax - 0x10]
shr ecx, 8
lea edx, [ebp - 0x110]
lea eax, [ebp - 0x110]
call fcn.00531454
mov eax, dword [ebp + 8]
mov edx, dword [eax - 0x18]
shr edx, 8
and edx, 0xff
mov eax, dword [ebp + 8]
mov ecx, dword [eax - 0x14]
shr ecx, 8
and ecx, 0xff
xor eax, eax
lea esi, [ebp - 0x110]
mov dword [ebp - 8], esi
mov esi, eax
add esi, esi
mov edi, dword [ebp + 8]
mov edi, dword [edi - 0x20]
lea esi, [edi + esi*4 + 4]
push esi
mov esi, dword [ebp - 8]
movzx esi, byte [esi]
movzx esi, byte [ebx + esi + 0x100]
xor esi, ecx
movzx esi, byte [ebx + esi]
xor esi, edx
mov esi, dword [esi*4 + 0x5706e0]
pop edi
mov dword [edi], esi
inc eax
inc dword [ebp - 8]
cmp eax, 0x100
jne 0x5318fe
mov eax, dword [ebp + 8]
mov ecx, dword [eax - 0xc]
shr ecx, 0x10
mov edx, ebx
lea eax, [ebp - 0x210]
call fcn.00531454
mov eax, pe_nt_image_headers32
lea edx, [ebp - 0x210]
lea esi, [ebp - 0x110]
xor ecx, ecx
mov cl, byte [edx]
mov cl, byte [ebx + ecx]
mov byte [esi], cl
inc esi
inc edx
dec eax
jne 0x53195f
mov eax, dword [ebp + 8]
mov ecx, dword [eax - 0x10]
shr ecx, 0x10
lea edx, [ebp - 0x110]
lea eax, [ebp - 0x110]
call fcn.00531454
mov eax, dword [ebp + 8]
mov edx, dword [eax - 0x18]
shr edx, 0x10
and edx, 0xff
mov eax, dword [ebp + 8]
mov ecx, dword [eax - 0x14]
shr ecx, 0x10
and ecx, 0xff
xor eax, eax
lea esi, [ebp - 0x110]
mov dword [ebp - 0xc], esi
mov esi, eax
add esi, esi
mov edi, dword [ebp + 8]
mov edi, dword [edi - 0x20]
lea esi, [edi + esi*4 + 0x800]
push esi
mov esi, dword [ebp - 0xc]
movzx esi, byte [esi]
movzx esi, byte [ebx + esi]
xor esi, ecx
movzx esi, byte [ebx + esi + 0x100]
xor esi, edx
mov esi, dword [esi*4 + 0x570ae0]
pop edi
mov dword [edi], esi
inc eax
inc dword [ebp - 0xc]
cmp eax, 0x100
jne 0x5319b0
mov eax, dword [ebp + 8]
mov ecx, dword [eax - 0xc]
shr ecx, 0x18
lea edx, [ebx + 0x100]
lea eax, [ebp - 0x210]
call fcn.00531454
mov eax, pe_nt_image_headers32
lea edx, [ebp - 0x210]
lea esi, [ebp - 0x110]
xor ecx, ecx
mov cl, byte [edx]
mov cl, byte [ebx + ecx]
mov byte [esi], cl
inc esi
inc edx
dec eax
jne 0x531a18
mov eax, dword [ebp + 8]
mov ecx, dword [eax - 0x10]
shr ecx, 0x18
lea edx, [ebp - 0x110]
lea eax, [ebp - 0x110]
call fcn.00531454
mov eax, dword [ebp + 8]
mov edx, dword [eax - 0x18]
shr edx, 0x18
mov eax, dword [ebp + 8]
mov ecx, dword [eax - 0x14]
shr ecx, 0x18
xor eax, eax
lea esi, [ebp - 0x110]
mov dword [ebp - 0x10], esi
mov esi, eax
add esi, esi
mov edi, dword [ebp + 8]
mov edi, dword [edi - 0x20]
lea esi, [edi + esi*4 + 0x804]
push esi
mov esi, dword [ebp - 0x10]
movzx esi, byte [esi]
movzx esi, byte [ebx + esi + 0x100]
xor esi, ecx
movzx esi, byte [ebx + esi + 0x100]
xor esi, edx
mov esi, dword [esi*4 + 0x570ee0]
pop edi
mov dword [edi], esi
inc eax
inc dword [ebp - 0x10]
cmp eax, 0x100
jne 0x531a5d
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret