Function at 0x5bbba0
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x190
mov eax, dword [0x79b5e0]
xor eax, esp
mov dword [esp + 0x18c], eax
mov eax, dword [ebp + 8]
mov dword [esp + 0x18], eax
mov eax, dword [ebp + 0xc]
mov dword [esp + 0x70], eax
push esi
mov esi, ecx
mov dword [esp + 0x38], edx
push edi
mov edi, 1
mov dword [esp + 0x2c], esi
mov eax, dword [esi + 0x5c]
mov ecx, dword [esi + 0xc]
mov dword [esp + 0x28], eax
mov eax, dword [esi + 0x28]
mov dword [esp + 0x30], eax
lea eax, [esi + 0x2c]
mov dword [esp + 0x70], eax
mov eax, dword [esi + 0x24]
mov dword [esp + 0x5c], eax
mov eax, dword [esi + 4]
mov dword [esp + 0x58], ecx
add ecx, eax
mov dword [esp + 0x7c], ecx
mov ecx, edx
sub ecx, eax
mov dword [esp + 0xc], eax
mov dword [esp + 0x48], ecx
mov eax, edi
mov ecx, dword [esi + 0xb8]
shl eax, cl
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x48]
sub eax, dword [esi + 0x10]
mov ecx, dword [esp + 0x34]
cmp eax, ecx
jbe 0x5bbc41
mov eax, dword [esp + 0x48]
sub eax, ecx
mov dword [esp + 0x54], eax
mov eax, dword [esi + 0x10]
mov ecx, dword [esp + 0x54]
jmp 0x5bbc46
mov eax, dword [esi + 0x10]
mov ecx, eax
cmp dword [esi + 0x18], 0
push 0xcf1bbcdc
cmovne ecx, eax
mov dword [esp + 0x1c], 3
mov eax, dword [esi + 0xc4]
mov dword [esp + 0x58], ecx
mov ecx, 5
cmp eax, ecx
push 0xbf9b0000
push dword [edx + 4]
cmovb ecx, eax
mov eax, dword [esi + 0x50]
push dword [edx]
shl edi, cl
mov ecx, dword [esi + 0xb4]
mov dword [esp + 0x7c], eax
mov eax, dword [esi + 0x54]
mov dword [esp + 0x60], edi
mov esi, dword [ecx + 0x24]
mov edi, dword [ecx + 0x28]
add esi, 8
mov dword [esp + 0x44], eax
mov dword [esp + 0x78], ecx
call fcn.00620b50
mov ecx, 0x40
sub ecx, esi
call fcn.00622f20
mov edx, dword [esp + 0x68]
mov ecx, eax
mov esi, dword [esp + 0x2c]
shr ecx, 3
and ecx, 0x1fffffe0
movzx eax, al
mov dword [esp + 0x44], eax
cmp dword [esi + 0xdc], 0
mov dword [esp + 0x74], 0x1f
lea eax, [ecx + edi]
mov edi, dword [esp + 0x3c]
mov dword [esp + 0x60], eax
mov eax, dword [edx + 0x5c]
lea eax, [eax + ecx*4]
mov dword [esp + 0x64], eax
jne 0x5bbf9b
mov edx, dword [esp + 0xc]
mov eax, edi
mov ecx, dword [esi + 0x1c]
sub eax, edx
mov dword [esp + 0x14], eax
sub eax, ecx
mov dword [esp + 0x24], ecx
cmp eax, 0x180
jbe 0x5bbe79
lea eax, [ecx + 0x60]
mov dword [esp + 0x4c], eax
cmp ecx, eax
jae 0x5bbdd2
mov eax, dword [esp + 0x5c]
mov esi, 0x40
mov edi, dword [esp + 0x2c]
add eax, 8
sub esi, eax
lea eax, [edx + 8]
mov dword [esp + 0x40], esi
mov dword [esp + 0x1c], eax
push 0xcf1bbcdc
push 0xbf9b0000
push dword [ecx + eax + 4]
push dword [ecx + eax]
call fcn.00620b50
xor eax, dword [edi + 0x50]
mov ecx, esi
xor edx, dword [edi + 0x54]
call fcn.00622f20
mov ecx, eax
mov eax, dword [esp + 0x24]
and eax, 7
mov edx, dword [edi + eax*4 + 0x2c]
mov esi, edx
mov dword [edi + eax*4 + 0x2c], ecx
mov eax, 0
shr esi, 3
mov dword [esp + 0x38], edx
and esi, 0x1fffffe0
mov edx, dword [esp + 0x30]
add edx, esi
movzx ecx, byte [edx]
dec ecx
and ecx, 0x1f
cmove eax, dword [esp + 0x74]
add ecx, eax
mov eax, dword [esp + 0x38]
mov byte [edx], cl
mov byte [ecx + edx], al
lea eax, [ecx + esi]
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x24]
mov esi, dword [esp + 0x40]
mov dword [edx + eax*4], ecx
inc ecx
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x24], ecx
cmp ecx, dword [esp + 0x4c]
jb 0x5bbd40
mov edi, dword [esp + 0x3c]
mov esi, dword [esp + 0x2c]
mov ecx, dword [esp + 0x14]
lea edx, [edi + 1]
mov eax, dword [esp + 0xc]
add ecx, 0xffffffe0
add eax, ecx
mov dword [esp + 0x24], ecx
mov dword [esp + 0x38], ecx
cmp eax, edx
jbe 0x5bbdf2
xor edx, edx
jmp 0x5bbdf9
sub edx, dword [esp + 0xc]
sub edx, ecx
inc edx
mov eax, 8
cmp edx, eax
cmova edx, eax
add edx, ecx
mov dword [esp + 0x1c], edx
cmp ecx, edx
jae 0x5bbe79
mov eax, dword [esi + 0x24]
mov ecx, 0x40
add eax, 8
mov edi, edx
mov edx, dword [esp + 0x38]
sub ecx, eax
mov dword [esp + 0x40], ecx
jmp 0x5bbe30
mov eax, dword [esp + 0xc]
push 0xcf1bbcdc
push 0xbf9b0000
push dword [edx + eax + 4]
push dword [edx + eax]
call fcn.00620b50
xor eax, dword [esi + 0x50]
xor edx, dword [esi + 0x54]
mov ecx, dword [esp + 0x40]
call fcn.00622f20
mov edx, dword [esp + 0x38]
mov ecx, eax
mov eax, edx
inc edx
and eax, 7
mov dword [esp + 0x38], edx
mov dword [esi + eax*4 + 0x2c], ecx
cmp edx, edi
jb 0x5bbe30
mov edi, dword [esp + 0x3c]
mov ecx, dword [esp + 0x24]
mov eax, dword [esi + 0x5c]
mov edx, dword [esi + 0x24]
mov dword [esp + 0x10], eax
mov eax, dword [esi + 0x28]
mov dword [esp + 0x4c], eax
mov eax, dword [esi + 4]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x14]
cmp ecx, eax
jae 0x5bbf45
mov edi, dword [esp + 0x14]
lea eax, [edx + 8]
mov edx, 0x40
sub edx, eax
mov dword [esp + 0x40], edx
nop
mov eax, dword [esp + 0x1c]
push 0xcf1bbcdc
push 0xbf9b0000
push dword [ecx + eax + 0xc]
push dword [ecx + eax + 8]
call fcn.00620b50
xor eax, dword [esi + 0x50]
xor edx, dword [esi + 0x54]
mov ecx, dword [esp + 0x40]
call fcn.00622f20
mov esi, dword [esp + 0x70]
mov ecx, eax
mov eax, dword [esp + 0x24]
and eax, 7
mov edx, dword [esi + eax*4]
mov dword [esi + eax*4], ecx
mov esi, edx
shr esi, 3
mov eax, 0
mov dword [esp + 0x38], edx
and esi, 0x1fffffe0
mov edx, dword [esp + 0x4c]
add edx, esi
movzx ecx, byte [edx]
dec ecx
and ecx, 0x1f
cmove eax, dword [esp + 0x74]
add ecx, eax
mov eax, dword [esp + 0x38]
mov byte [edx], cl
mov byte [ecx + edx], al
lea eax, [ecx + esi]
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0x24]
mov esi, dword [esp + 0x2c]
mov dword [edx + eax*4], ecx
inc ecx
mov dword [esp + 0x24], ecx
cmp ecx, edi
jb 0x5bbeb0
mov edi, dword [esp + 0x3c]
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x48]
mov dword [esi + 0x1c], eax
mov eax, dword [esp + 0xc]
mov esi, dword [esp + 0x5c]
push 0xcf1bbcdc
push 0xbf9b0000
push dword [ecx + eax + 0xc]
add esi, 8
push dword [ecx + eax + 8]
call fcn.00620b50
xor eax, dword [esp + 0x6c]
mov ecx, 0x40
xor edx, dword [esp + 0x34]
sub ecx, esi
call fcn.00622f20
mov esi, dword [esp + 0x70]
mov ecx, eax
mov eax, dword [esp + 0x48]
and eax, 7
mov edx, dword [esi + eax*4]
mov dword [esi + eax*4], ecx
mov ecx, dword [esp + 0x2c]
jmp 0x5bbfd7
mov esi, dword [esp + 0x5c]
push 0xcf1bbcdc
push 0xbf9b0000
push dword [edi + 4]
add esi, 8
push dword [edi]
call fcn.00620b50
xor eax, dword [esp + 0x6c]
mov ecx, 0x40
xor edx, dword [esp + 0x34]
sub ecx, esi
call fcn.00622f20
mov ecx, dword [esp + 0x2c]
mov edx, eax
mov eax, dword [esp + 0x48]
mov dword [ecx + 0x1c], eax
add dword [ecx + 0x58], edx
mov ecx, edx
movzx eax, dl
mov edx, dword [esp + 0x30]
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x28]
shr ecx, 3
and ecx, 0x1fffffe0
mov dword [esp + 0x14], 0
add edx, ecx
mov dword [esp + 0x30], 0
mov dword [esp + 0x4c], edx
lea eax, [eax + ecx*4]
mov dword [esp + 0x28], eax
movzx eax, byte [edx]
mov esi, eax
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x34]
and esi, 0x1f
movsx eax, al
xor ecx, ecx
mov dword [esp + 0x1c], esi
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
pshufd xmm1, xmm0, 0
xorps xmm0, xmm0
movdqu xmmword [esp + 0x80], xmm0
jmp 0x5bc050
movdqu xmm0, xmmword [edx]
lea edx, [edx + 0x10]
pcmpeqb xmm0, xmm1
pmovmskb eax, xmm0
mov dword [esp + ecx*4 + 0x80], eax
inc ecx
cmp ecx, 2
jl 0x5bc050
mov edx, dword [esp + 0x84]
mov eax, esi
and eax, 0x1f
shl edx, 0x10
or edx, dword [esp + 0x80]
mov ecx, eax
neg ecx
mov esi, edx
and ecx, 0x1f
shl esi, cl
mov ecx, eax
shr edx, cl
or esi, edx
xor edx, edx
ja 0x5bc09b
test esi, esi
je 0x5bc100
mov edi, dword [esp + 0x50]
nop
test edi, edi
je 0x5bc0f8
test esi, esi
jne 0x5bc0b4
bsf eax, edx
mov dword [esp + 0x10], eax
add eax, 0x20
jmp 0x5bc0bb
bsf eax, esi
mov dword [esp + 0x10], eax
add eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x28]
and eax, 0x1f
mov eax, dword [ecx + eax*4]
je 0x5bc0e2
cmp eax, dword [esp + 0x54]
jb 0x5bc0f8
mov ecx, dword [esp + 0x14]
mov dword [esp + ecx*4 + 0x90], eax
inc ecx
mov dword [esp + 0x14], ecx
dec edi
mov ecx, esi
mov eax, edx
add ecx, 0xffffffff
adc eax, 0xffffffff
and esi, ecx
and edx, eax
ja 0x5bc0a0
jb 0x5bc0f8
test esi, esi
jne 0x5bc0a0
mov dword [esp + 0x50], edi
mov edi, dword [esp + 0x3c]
mov ecx, dword [esp + 0x40]
mov edx, 0x1f
mov esi, dword [esp + 0x28]
dec ecx
and ecx, 0x1f
mov eax, 0
cmove eax, edx
mov edx, dword [esp + 0x34]
add ecx, eax
mov eax, dword [esp + 0x4c]
mov byte [eax], cl
mov byte [ecx + eax], dl
mov edx, dword [esp + 0x2c]
mov eax, dword [edx + 0x1c]
mov dword [esi + ecx*4], eax
inc dword [edx + 0x1c]
cmp dword [esp + 0x14], 0
jbe 0x5bc215
mov ecx, 3
xor eax, eax
jmp 0x5bc150
mov eax, dword [esp + eax*4 + 0x90]
mov edx, dword [esp + 0xc]
add edx, eax
mov dword [esp + 0x1c], eax
mov eax, dword [edx + ecx - 3]
cmp eax, dword [edi + ecx - 3]
jne 0x5bc202
mov esi, dword [esp + 0x20]
mov eax, edi
add esi, 0xfffffffd
cmp edi, esi
jae 0x5bc1b4
mov eax, dword [edx]
xor eax, dword [edi]
je 0x5bc194
mov esi, dword [esp + 0x20]
bsf eax, eax
mov ecx, eax
mov dword [esp + 0x10], eax
shr ecx, 3
jmp 0x5bc1dc
lea eax, [edi + 4]
add edx, 4
cmp eax, esi
jae 0x5bc1b4
mov edi, edi
mov ecx, dword [edx]
xor ecx, dword [eax]
jne 0x5bc2d9
add eax, 4
add edx, 4
cmp eax, esi
jb 0x5bc1a0
mov esi, dword [esp + 0x20]
lea ecx, [esi - 1]
cmp eax, ecx
jae 0x5bc1cd
mov cx, word [edx]
cmp cx, word [eax]
jne 0x5bc1cd
add eax, 2
add edx, 2
cmp eax, esi
jae 0x5bc1d8
mov cl, byte [edx]
cmp cl, byte [eax]
jne 0x5bc1d8
inc eax
mov ecx, eax
sub ecx, edi
cmp ecx, dword [esp + 0x18]
jbe 0x5bc1fe
mov eax, dword [esp + 0x48]
sub eax, dword [esp + 0x1c]
mov edx, dword [esp + 0x78]
add eax, 3
mov dword [esp + 0x18], ecx
mov dword [edx], eax
lea eax, [ecx + edi]
cmp eax, esi
je 0x5bc215
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x30]
inc eax
mov dword [esp + 0x30], eax
cmp eax, dword [esp + 0x14]
jb 0x5bc150
mov edx, dword [esp + 0x68]
mov dword [esp + 0xc], 0
mov dword [esp + 0x28], 0
mov ecx, dword [edx + 4]
mov eax, dword [edx]
mov edx, dword [esp + 0x60]
mov dword [esp + 0x10], ecx
sub ecx, eax
add dword [esp + 0x58], ecx
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x44]
movzx esi, byte [edx]
movsx eax, al
and esi, 0x1f
mov dword [esp + 0x60], esi
xor ecx, ecx
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
pshufd xmm1, xmm0, 0
xorps xmm0, xmm0
movdqu xmmword [esp + 0x80], xmm0
movdqu xmm0, xmmword [edx]
lea edx, [edx + 0x10]
pcmpeqb xmm0, xmm1
pmovmskb eax, xmm0
mov dword [esp + ecx*4 + 0x80], eax
inc ecx
cmp ecx, 2
jl 0x5bc270
mov edx, dword [esp + 0x84]
mov eax, esi
and eax, 0x1f
shl edx, 0x10
or edx, dword [esp + 0x80]
mov ecx, eax
neg ecx
mov esi, edx
and ecx, 0x1f
shl esi, cl
mov ecx, eax
shr edx, cl
or esi, edx
xor edx, edx
ja 0x5bc2bf
test esi, esi
je 0x5bc415
xor edi, edi
mov ecx, dword [esp + 0x50]
test ecx, ecx
je 0x5bc33a
test esi, esi
jne 0x5bc2f0
bsf eax, edx
mov dword [esp + 0x44], eax
add eax, 0x20
jmp 0x5bc2f7
mov esi, dword [esp + 0x20]
bsf ecx, ecx
mov dword [esp + 0x10], ecx
shr ecx, 3
sub ecx, edi
add ecx, eax
jmp 0x5bc1dc
bsf eax, esi
mov dword [esp + 0x44], eax
add eax, dword [esp + 0x60]
mov edi, dword [esp + 0x64]
and eax, 0x1f
mov eax, dword [edi + eax*4]
mov edi, dword [esp + 0xc]
je 0x5bc324
mov ecx, dword [esp + 0x68]
cmp eax, dword [ecx + 0xc]
jb 0x5bc33a
mov dword [esp + edi*4 + 0x90], eax
inc edi
dec dword [esp + 0x50]
mov dword [esp + 0xc], edi
mov ecx, esi
mov eax, edx
add ecx, 0xffffffff
adc eax, 0xffffffff
and esi, ecx
and edx, eax
ja 0x5bc2c1
jb 0x5bc33a
test esi, esi
jne 0x5bc2c1
test edi, edi
mov edi, dword [esp + 0x3c]
je 0x5bc415
mov ecx, dword [esp + 0xc]
xor eax, eax
lea esp, [esp]
mov eax, dword [esp + eax*4 + 0x90]
mov esi, dword [esp + 0x10]
add esi, eax
mov dword [esp + 0x44], eax
mov eax, dword [esi]
cmp eax, dword [edi]
jne 0x5bc40f
mov ecx, dword [esp + 0x20]
lea eax, [edi + 4]
add esi, 4
sub eax, esi
mov edx, esi
add eax, dword [esp + 0x30]
cmp eax, ecx
cmovb ecx, eax
push ecx
lea ecx, [edi + 4]
call fcn.0059fed0
add esp, 4
mov dword [esp + 0x64], eax
lea ecx, [eax + esi]
cmp ecx, dword [esp + 0x30]
jne 0x5bc3b5
mov esi, dword [esp + 0x20]
lea ecx, [edi + 4]
mov edx, dword [esp + 0x7c]
add ecx, eax
push esi
call fcn.0059fed0
add esp, 4
add eax, dword [esp + 0x64]
mov edx, dword [esp + 0x18]
lea ecx, [eax + 4]
cmp ecx, edx
jbe 0x5bc3e4
mov eax, dword [esp + 0x48]
mov edx, ecx
sub eax, dword [esp + 0x44]
sub eax, dword [esp + 0x58]
mov esi, dword [esp + 0x78]
add eax, 3
mov dword [esp + 0x18], edx
mov dword [esi], eax
lea eax, [ecx + edi]
cmp eax, dword [esp + 0x20]
je 0x5bc3f9
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x28]
inc eax
mov dword [esp + 0x28], eax
cmp eax, ecx
jb 0x5bc350
mov eax, edx
pop edi
pop esi
mov ecx, dword [esp + 0x18c]
xor ecx, esp
call fcn.0061b9b8
mov esp, ebp
pop ebp
ret
mov edx, dword [esp + 0x18]
jmp 0x5bc3e8
mov ecx, dword [esp + 0x194]
mov eax, dword [esp + 0x18]
pop edi
pop esi
xor ecx, esp
call fcn.0061b9b8
mov esp, ebp
pop ebp
ret