Function at 0x5bf0d0
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x188
mov eax, dword [0x79b5e0]
xor eax, esp
mov dword [esp + 0x184], eax
mov eax, dword [ebp + 8]
push esi
mov dword [esp + 0x44], eax
mov esi, 1
mov eax, dword [ebp + 0xc]
push edi
mov edi, edx
mov dword [esp + 0x64], eax
mov edx, ecx
mov dword [esp + 0x2c], edi
mov dword [esp + 0x34], edx
mov eax, dword [edx + 0x5c]
mov ecx, dword [edx + 0xc]
mov dword [esp + 0x30], eax
mov eax, dword [edx + 0x28]
mov dword [esp + 0x38], eax
lea eax, [edx + 0x2c]
mov dword [esp + 0x68], eax
mov eax, dword [edx + 0x24]
mov dword [esp + 0x3c], ecx
mov dword [esp + 8], eax
mov eax, dword [edx + 4]
add ecx, eax
mov dword [esp + 0x6c], ecx
mov ecx, edi
sub ecx, eax
mov dword [esp + 0xc], eax
mov dword [esp + 0x28], ecx
mov ecx, dword [edx + 0xb8]
mov eax, dword [esp + 0x28]
shl esi, cl
mov ecx, dword [edx + 0x10]
sub eax, ecx
cmp eax, esi
jbe 0x5bf160
mov eax, dword [esp + 0x28]
sub eax, esi
jmp 0x5bf162
mov eax, ecx
cmp dword [edx + 0x18], 0
push 0xcf1bbcdc
cmovne eax, ecx
mov dword [esp + 0x18], 3
mov dword [esp + 0x20], eax
mov ecx, 5
mov eax, dword [edx + 0xc4]
cmp eax, ecx
mov dword [esp + 0x44], eax
cmovb ecx, eax
mov eax, dword [edx + 0x50]
mov dword [esp + 0x74], eax
mov eax, dword [edx + 0x54]
mov dword [esp + 0x58], eax
mov eax, 1
shl eax, cl
mov dword [esp + 0x24], eax
mov eax, dword [edx + 0xb4]
push 0xbb000000
push dword [edi + 4]
mov dword [esp + 0x68], eax
mov esi, dword [eax + 0xc0]
push dword [edi]
sub esi, 2
call fcn.00620b50
mov ecx, 0x40
sub ecx, esi
call fcn.00622f20
mov ecx, dword [esp + 0x40]
shl eax, 2
mov dword [esp + 0x50], eax
cmp ecx, 5
jbe 0x5bf1f5
add ecx, 0xfffffffb
mov eax, 1
shl eax, cl
mov dword [esp + 0x40], eax
jmp 0x5bf1fd
mov dword [esp + 0x40], 0
mov esi, dword [esp + 0x34]
mov dword [esp + 0x74], 0x1f
cmp dword [esi + 0xdc], 0
jne 0x5bf4b7
mov edx, dword [esp + 0xc]
mov eax, edi
mov ecx, dword [esi + 0x1c]
sub eax, edx
mov dword [esp + 0x60], eax
sub eax, ecx
mov dword [esp + 0x24], ecx
cmp eax, 0x180
jbe 0x5bf397
lea eax, [ecx + 0x60]
mov dword [esp + 0x58], eax
cmp ecx, eax
jae 0x5bf2f2
mov eax, dword [esp + 8]
mov esi, 0x40
mov edi, dword [esp + 0x34]
add eax, 8
sub esi, eax
lea eax, [edx + 8]
mov dword [esp + 0x44], esi
mov dword [esp + 0x4c], eax
push 0xcf1bbcdc
push 0xbb000000
push dword [ecx + eax + 4]
push dword [ecx + eax]
call fcn.00620b50
xor eax, dword [edi + 0x50]
mov ecx, esi
xor edx, dword [edi + 0x54]
call fcn.00622f20
mov ecx, dword [esp + 0x24]
and ecx, 7
mov edx, dword [edi + ecx*4 + 0x2c]
mov esi, edx
mov dword [edi + ecx*4 + 0x2c], eax
mov eax, 0
shr esi, 3
mov dword [esp + 0x10], edx
and esi, 0x1fffffe0
mov edx, dword [esp + 0x38]
add edx, esi
movzx ecx, byte [edx]
dec ecx
and ecx, 0x1f
cmove eax, dword [esp + 0x74]
add ecx, eax
mov eax, dword [esp + 0x10]
mov byte [edx], cl
mov byte [ecx + edx], al
lea eax, [ecx + esi]
mov edx, dword [esp + 0x30]
mov ecx, dword [esp + 0x24]
mov esi, dword [esp + 0x44]
mov dword [edx + eax*4], ecx
inc ecx
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x24], ecx
cmp ecx, dword [esp + 0x58]
jb 0x5bf262
mov edi, dword [esp + 0x2c]
mov esi, dword [esp + 0x34]
mov ecx, dword [esp + 0x60]
lea edx, [edi + 1]
mov eax, dword [esp + 0xc]
add ecx, 0xffffffe0
add eax, ecx
mov dword [esp + 0x24], ecx
mov dword [esp + 0x10], ecx
cmp eax, edx
jbe 0x5bf312
xor edx, edx
jmp 0x5bf319
sub edx, dword [esp + 0xc]
sub edx, ecx
inc edx
mov eax, 8
cmp edx, eax
cmova edx, eax
add edx, ecx
mov dword [esp + 0x4c], edx
cmp ecx, edx
jae 0x5bf397
mov eax, dword [esi + 0x24]
mov ecx, 0x40
add eax, 8
mov edi, edx
mov edx, dword [esp + 0x10]
sub ecx, eax
mov dword [esp + 0x44], ecx
jmp 0x5bf350
mov eax, dword [esp + 0xc]
push 0xcf1bbcdc
push 0xbb000000
push dword [edx + eax + 4]
push dword [edx + eax]
call fcn.00620b50
xor eax, dword [esi + 0x50]
xor edx, dword [esi + 0x54]
mov ecx, dword [esp + 0x44]
call fcn.00622f20
mov edx, dword [esp + 0x10]
mov ecx, edx
and ecx, 7
inc edx
mov dword [esp + 0x10], edx
mov dword [esi + ecx*4 + 0x2c], eax
cmp edx, edi
jb 0x5bf350
mov edi, dword [esp + 0x2c]
mov ecx, dword [esp + 0x24]
mov eax, dword [esi + 0x5c]
mov edx, dword [esi + 0x24]
mov dword [esp + 0x18], eax
mov eax, dword [esi + 0x28]
mov dword [esp + 0x58], eax
mov eax, dword [esi + 4]
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x60]
cmp ecx, eax
jae 0x5bf463
mov edi, dword [esp + 0x60]
lea eax, [edx + 8]
mov edx, 0x40
sub edx, eax
mov dword [esp + 0x44], edx
lea ecx, [ecx]
mov eax, dword [esp + 0x4c]
push 0xcf1bbcdc
push 0xbb000000
push dword [ecx + eax + 0xc]
push dword [ecx + eax + 8]
call fcn.00620b50
xor eax, dword [esi + 0x50]
xor edx, dword [esi + 0x54]
mov ecx, dword [esp + 0x44]
call fcn.00622f20
mov ecx, dword [esp + 0x24]
mov esi, dword [esp + 0x68]
and ecx, 7
mov edx, dword [esi + ecx*4]
mov dword [esi + ecx*4], eax
mov esi, edx
shr esi, 3
mov eax, 0
mov dword [esp + 0x10], edx
and esi, 0x1fffffe0
mov edx, dword [esp + 0x58]
add edx, esi
movzx ecx, byte [edx]
dec ecx
and ecx, 0x1f
cmove eax, dword [esp + 0x74]
add ecx, eax
mov eax, dword [esp + 0x10]
mov byte [edx], cl
mov byte [ecx + edx], al
lea eax, [ecx + esi]
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x24]
mov esi, dword [esp + 0x34]
mov dword [edx + eax*4], ecx
inc ecx
mov dword [esp + 0x24], ecx
cmp ecx, edi
jb 0x5bf3d0
mov edi, dword [esp + 0x2c]
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x28]
mov dword [esi + 0x1c], eax
mov eax, dword [esp + 0xc]
mov esi, dword [esp + 8]
push 0xcf1bbcdc
push 0xbb000000
push dword [ecx + eax + 0xc]
add esi, 8
push dword [ecx + eax + 8]
call fcn.00620b50
xor eax, dword [esp + 0x70]
mov ecx, 0x40
xor edx, dword [esp + 0x54]
sub ecx, esi
call fcn.00622f20
mov ecx, dword [esp + 0x28]
mov esi, dword [esp + 0x68]
and ecx, 7
mov edx, dword [esi + ecx*4]
mov dword [esi + ecx*4], eax
mov ecx, dword [esp + 0x34]
jmp 0x5bf4f3
mov esi, dword [esp + 8]
push 0xcf1bbcdc
push 0xbb000000
push dword [edi + 4]
add esi, 8
push dword [edi]
call fcn.00620b50
xor eax, dword [esp + 0x70]
mov ecx, 0x40
xor edx, dword [esp + 0x54]
sub ecx, esi
call fcn.00622f20
mov ecx, dword [esp + 0x34]
mov edx, eax
mov eax, dword [esp + 0x28]
mov dword [ecx + 0x1c], eax
add dword [ecx + 0x58], edx
mov ecx, edx
movzx eax, dl
mov edx, dword [esp + 0x38]
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x30]
shr ecx, 3
and ecx, 0x1fffffe0
mov dword [esp + 8], 0
add edx, ecx
mov dword [esp + 0x38], 0
mov dword [esp + 0x58], edx
lea eax, [eax + ecx*4]
mov dword [esp + 0x30], eax
movzx eax, byte [edx]
mov esi, eax
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x54]
and esi, 0x1f
movsx eax, al
xor ecx, ecx
mov dword [esp + 0x4c], esi
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
pshufd xmm1, xmm0, 0
xorps xmm0, xmm0
movdqu xmmword [esp + 0x78], xmm0
movdqu xmm0, xmmword [edx]
lea edx, [edx + 0x10]
pcmpeqb xmm0, xmm1
pmovmskb eax, xmm0
mov dword [esp + ecx*4 + 0x78], eax
inc ecx
cmp ecx, 2
jl 0x5bf560
mov edx, dword [esp + 0x7c]
mov eax, esi
and eax, 0x1f
shl edx, 0x10
or edx, dword [esp + 0x78]
mov ecx, eax
neg ecx
mov esi, edx
and ecx, 0x1f
shl esi, cl
mov ecx, eax
shr edx, cl
or esi, edx
xor edx, edx
ja 0x5bf5a2
test esi, esi
je 0x5bf602
xor edi, edi
cmp dword [esp + 0x20], 0
jbe 0x5bf5fa
test esi, esi
jne 0x5bf5bb
bsf eax, edx
mov dword [esp + 0x18], eax
add eax, 0x20
jmp 0x5bf5c2
bsf eax, esi
mov dword [esp + 0x18], eax
add eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x30]
and eax, 0x1f
mov eax, dword [ecx + eax*4]
je 0x5bf5e4
cmp eax, dword [esp + 0x1c]
jb 0x5bf5fa
mov dword [esp + edi*4 + 0x88], eax
inc edi
dec dword [esp + 0x20]
mov ecx, esi
mov eax, edx
add ecx, 0xffffffff
adc eax, 0xffffffff
and esi, ecx
and edx, eax
ja 0x5bf5a4
jb 0x5bf5fa
test esi, esi
jne 0x5bf5a4
mov dword [esp + 8], edi
mov edi, dword [esp + 0x2c]
mov ecx, dword [esp + 0x44]
mov edx, 0x1f
mov esi, dword [esp + 0x30]
dec ecx
and ecx, 0x1f
mov eax, 0
cmove eax, edx
mov edx, dword [esp + 0x54]
add ecx, eax
mov eax, dword [esp + 0x58]
mov byte [eax], cl
mov byte [ecx + eax], dl
mov edx, dword [esp + 0x34]
mov eax, dword [edx + 0x1c]
mov dword [esi + ecx*4], eax
inc dword [edx + 0x1c]
cmp dword [esp + 8], 0
jbe 0x5bf714
mov ecx, 3
xor eax, eax
lea esp, [esp]
mov eax, dword [esp + eax*4 + 0x88]
mov edx, dword [esp + 0xc]
add edx, eax
mov dword [esp + 0x18], eax
mov eax, dword [edx + ecx - 3]
cmp eax, dword [edi + ecx - 3]
jne 0x5bf701
mov esi, dword [esp + 0x48]
mov eax, edi
lea ecx, [esi - 3]
cmp edi, ecx
jae 0x5bf6b7
mov eax, dword [edx]
xor eax, dword [edi]
je 0x5bf690
bsf eax, eax
mov ecx, eax
mov dword [esp + 0x1c], eax
shr ecx, 3
jmp 0x5bf6db
lea eax, [edi + 4]
add edx, 4
cmp eax, ecx
jae 0x5bf6b7
lea ebx, [ebx]
mov ecx, dword [edx]
xor ecx, dword [eax]
jne 0x5bf7d9
add eax, 4
lea ecx, [esi - 3]
add edx, 4
cmp eax, ecx
jb 0x5bf6a0
lea ecx, [esi - 1]
cmp eax, ecx
jae 0x5bf6cc
mov cx, word [edx]
cmp cx, word [eax]
jne 0x5bf6cc
add eax, 2
add edx, 2
cmp eax, esi
jae 0x5bf6d7
mov cl, byte [edx]
cmp cl, byte [eax]
jne 0x5bf6d7
inc eax
mov ecx, eax
sub ecx, edi
cmp ecx, dword [esp + 0x14]
jbe 0x5bf6fd
mov eax, dword [esp + 0x28]
sub eax, dword [esp + 0x18]
mov edx, dword [esp + 0x64]
add eax, 3
mov dword [esp + 0x14], ecx
mov dword [edx], eax
lea eax, [ecx + edi]
cmp eax, esi
je 0x5bf714
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x38]
inc eax
mov dword [esp + 0x38], eax
cmp eax, dword [esp + 8]
jb 0x5bf650
mov ecx, dword [esp + 0x5c]
mov esi, dword [esp + 0x40]
add esi, dword [esp + 0x20]
mov dword [esp + 0x2c], esi
mov eax, dword [ecx + 4]
mov edx, dword [ecx]
mov dword [esp + 0x38], eax
sub eax, edx
add eax, dword [esp + 0x3c]
mov dword [esp + 0x30], eax
mov eax, 3
cmp esi, eax
mov dword [esp + 0xc], edx
cmovb eax, esi
xor ecx, ecx
mov dword [esp + 0x18], eax
mov dword [esp + 0x40], ecx
test eax, eax
je 0x5bf8e1
mov eax, dword [esp + 0x50]
lea ecx, [eax*4]
mov dword [esp + 0x20], ecx
mov eax, dword [esp + 0x5c]
mov eax, dword [eax + 0x5c]
mov eax, dword [ecx + eax]
mov ecx, dword [esp + 0x38]
add ecx, eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x10], ecx
test eax, eax
je 0x5bf9dd
mov eax, dword [ecx]
cmp eax, dword [edi]
jne 0x5bf892
lea esi, [edi + 4]
add ecx, 4
mov eax, esi
sub eax, ecx
mov ecx, esi
add eax, edx
mov edx, dword [esp + 0x48]
cmp eax, edx
cmovb edx, eax
mov dword [esp + 8], edx
mov eax, dword [esp + 8]
mov edx, dword [esp + 0x10]
add eax, 0xfffffffd
add edx, 4
cmp esi, eax
jae 0x5bf814
mov edx, dword [esp + 0x10]
mov ecx, dword [esi]
xor ecx, dword [edx + 4]
je 0x5bf7ec
bsf eax, ecx
lea edx, [edi + 4]
mov esi, eax
mov dword [esp + 0x3c], eax
shr esi, 3
jmp 0x5bf83f
bsf ecx, ecx
mov dword [esp + 0x1c], ecx
shr ecx, 3
sub ecx, edi
add ecx, eax
jmp 0x5bf6db
lea ecx, [esi + 4]
add edx, 8
mov esi, dword [esp + 8]
add esi, 0xfffffffd
cmp ecx, esi
jae 0x5bf814
lea ecx, [ecx]
mov eax, dword [ecx]
xor eax, dword [edx]
jne 0x5bf8af
add ecx, 4
add edx, 4
cmp ecx, esi
jb 0x5bf800
mov esi, dword [esp + 8]
lea eax, [esi - 1]
cmp ecx, eax
jae 0x5bf82d
mov ax, word [edx]
cmp ax, word [ecx]
jne 0x5bf82d
add ecx, 2
add edx, 2
cmp ecx, esi
jae 0x5bf838
mov al, byte [edx]
cmp al, byte [ecx]
jne 0x5bf838
inc ecx
mov esi, ecx
lea edx, [edi + 4]
sub esi, edx
mov eax, dword [esp + 0x10]
add eax, 4
add eax, esi
cmp eax, dword [esp + 0xc]
jne 0x5bf863
push dword [esp + 0x48]
lea ecx, [esi + edx]
mov edx, dword [esp + 0x70]
call fcn.0059fed0
add esp, 4
add esi, eax
add esi, 4
cmp esi, dword [esp + 0x14]
jbe 0x5bf88e
mov eax, dword [esp + 0x28]
sub eax, dword [esp + 0x1c]
sub eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x64]
add eax, 3
mov dword [esp + 0x14], esi
mov dword [ecx], eax
lea eax, [esi + edi]
cmp eax, dword [esp + 0x48]
je 0x5bf8c7
mov edx, dword [esp + 0xc]
mov ecx, dword [esp + 0x40]
add dword [esp + 0x20], 4
inc ecx
mov dword [esp + 0x40], ecx
cmp ecx, dword [esp + 0x18]
jae 0x5bf8dd
mov ecx, dword [esp + 0x20]
jmp 0x5bf766
bsf eax, eax
lea edx, [edi + 4]
mov esi, eax
mov dword [esp + 0x3c], eax
shr esi, 3
sub esi, edx
add esi, ecx
jmp 0x5bf83f
mov eax, esi
pop edi
pop esi
mov ecx, dword [esp + 0x184]
xor ecx, esp
call fcn.0061b9b8
mov esp, ebp
pop ebp
ret
mov esi, dword [esp + 0x2c]
mov eax, dword [esp + 0x5c]
sub esi, ecx
mov edx, dword [esp + 0x50]
mov dword [esp + 0x50], 0
mov eax, dword [eax + 0x5c]
mov eax, dword [eax + edx*4 + 0xc]
mov edx, dword [esp + 0xc]
mov dword [esp + 8], eax
shr dword [esp + 8], 8
movzx eax, al
cmp esi, eax
cmova esi, eax
mov dword [esp + 0x2c], esi
test esi, esi
je 0x5bf9dd
mov eax, dword [esp + 8]
lea ecx, [eax*4]
mov dword [esp + 8], ecx
lea ebx, [ebx]
mov eax, dword [esp + 0x5c]
mov esi, dword [esp + 0x38]
mov eax, dword [eax + 0x64]
mov eax, dword [ecx + eax]
add esi, eax
mov dword [esp + 0x1c], eax
mov eax, dword [esi]
cmp eax, dword [edi]
jne 0x5bf9bf
mov ecx, dword [esp + 0x48]
lea eax, [edi + 4]
add esi, 4
sub eax, esi
add eax, edx
mov edx, esi
cmp eax, ecx
cmovb ecx, eax
push ecx
lea ecx, [edi + 4]
call fcn.0059fed0
add esp, 4
mov dword [esp + 0x3c], eax
lea ecx, [eax + esi]
mov esi, dword [esp + 0x48]
cmp ecx, dword [esp + 0xc]
jne 0x5bf992
mov edx, dword [esp + 0x6c]
lea ecx, [eax + 4]
push esi
add ecx, edi
call fcn.0059fed0
add esp, 4
add eax, dword [esp + 0x3c]
lea ecx, [eax + 4]
cmp ecx, dword [esp + 0x14]
jbe 0x5bf9bb
mov eax, dword [esp + 0x28]
sub eax, dword [esp + 0x1c]
sub eax, dword [esp + 0x30]
mov edx, dword [esp + 0x64]
add eax, 3
mov dword [esp + 0x14], ecx
mov dword [edx], eax
lea eax, [ecx + edi]
cmp eax, esi
je 0x5bf9dd
mov ecx, dword [esp + 8]
mov eax, dword [esp + 0x50]
add ecx, 4
mov edx, dword [esp + 0xc]
inc eax
mov dword [esp + 0x50], eax
mov dword [esp + 8], ecx
cmp eax, dword [esp + 0x2c]
jb 0x5bf930
mov ecx, dword [esp + 0x18c]
mov eax, dword [esp + 0x14]
pop edi
pop esi
xor ecx, esp
call fcn.0061b9b8
mov esp, ebp
pop ebp
ret