Function at 0x5d13e6
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1e5aa7
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x1500
push ebx
call fcn.00677160
push esi
mov esi, ecx
mov dword [ebp - 0xf8], esi
push edi
mov dword [ebp - 0x18], 0
mov dword [ebp - 4], 2
lea ecx, [esi + 8]
push 0
mov byte [esi], 0
call fcn.00600e30
mov byte [ebp - 4], 1
sub esp, 8
mov dword [ebp - 0x18], 1
mov eax, esp
lea ecx, [ebp - 0x98]
mov dword [eax], 0
mov dword [eax + 4], 0
call fcn.005fd280
add esp, 8
mov byte [ebp - 4], 3
xor ecx, ecx
movaps xmm0, xmmword [0x204d00]
movups xmmword [ebp - 0xf0], xmm0
mov word [ebp - 0xe0], 0x100
lea eax, [ecx + 0xf]
xor byte [ebp + ecx - 0xf0], al
inc ecx
cmp ecx, 0x10
jb 0x5d1453
lea eax, [ebp - 0xf0]
mov byte [ebp - 0xdf], 0
push eax
mov ecx, esi
call fcn.00603440
mov byte [ebp - 4], 1
mov edi, eax
mov cl, byte [ebp - 0x98]
mov dl, byte [edi]
mov byte [edi], cl
mov ecx, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x90]
mov byte [ebp - 0x98], dl
mov esi, dword [edi + 0xc]
mov edx, dword [edi + 8]
mov dword [edi + 0xc], ecx
lea ecx, [ebp - 0x98]
mov dword [edi + 8], eax
mov dword [ebp - 0x90], edx
mov dword [ebp - 0x8c], esi
call fcn.005fcee0
push 0x104
lea eax, [ebp - 0x510]
push 0
push eax
call fcn.006783e0
add esp, 0xc
lea eax, [ebp - 0x510]
push eax
push 0
push 0
push 0x1a
push 0
call dword [0x1eb2dc]
lea ecx, [ebp - 0x510]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x5d14f1
sub ecx, edx
mov eax, 0x7fffffff
mov edx, dword [ebx + 0x18]
sub eax, edx
cmp eax, ecx
jb 0x5d28df
cmp dword [ebx + 0x1c], 0x10
lea eax, [ebx + 8]
push edx
cmovae eax, dword [ebx + 8]
push eax
push ecx
lea eax, [ebp - 0x510]
push eax
push ecx
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x1f4]
call fcn.00606cf0
mov dword [ebp - 0x18], 0x101
mov byte [ebp - 4], 4
xor ecx, ecx
mov dword [ebp - 0x54], 0x7d636053
mov dword [ebp - 0x50], 0x73797d75
mov dword [ebp - 0x4c], 0x74703664
mov word [ebp - 0x48], 0x72
mov byte [ebp - 0x46], 1
nop dword [eax]
lea eax, [ecx + 0xf]
xor byte [ebp + ecx - 0x54], al
inc ecx
cmp ecx, 0xd
jb 0x5d1560
lea ecx, [ebp - 0x54]
mov byte [ebp - 0x46], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x5d1577
sub ecx, edx
mov eax, 0x7fffffff
mov edx, dword [ebp - 0x1e4]
sub eax, edx
cmp eax, ecx
jb 0x5d28e4
cmp dword [ebp - 0x1e0], 0x10
lea eax, [ebp - 0x1f4]
push ecx
cmovae eax, dword [ebp - 0x1f4]
lea ecx, [ebp - 0x54]
push ecx
push edx
push eax
push ecx
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x178]
call fcn.00606cf0
mov esi, 0x181
mov dword [ebp - 0x18], esi
mov byte [ebp - 4], 5
lea eax, [ebp - 0x178]
cmp dword [ebp - 0x164], 0x10
cmovae eax, dword [ebp - 0x178]
push eax
push 0x1000
lea eax, [ebp - 0x1510]
push eax
push ebp
call fcn.007a153e
lea edi, [ebp - 0x1510]
mov dword [ebp - 0xd4], edi
nop
mov dword [ebp - 0x67], 0x747e625f
xor ecx, ecx
mov dword [ebp - 0x63], 0x70787a
mov byte [ebp - 0x5f], 1
lea eax, [ecx + 0xf]
xor byte [ebp + ecx - 0x67], al
inc ecx
cmp ecx, 7
jb 0x5d1614
push 7
lea eax, [ebp - 0x67]
mov byte [ebp - 0x5f], 0
push eax
push edi
call fcn.006839de
add esp, 0xc
test eax, eax
lodsd eax, dword [esi]
and ecx, dword [ebx]
add byte [ebx - 0x3f7af33c], al
jne 0x5d27ee
push 0x104
push eax
lea eax, [ebp - 0x408]
push eax
call fcn.006783e0
add esp, 0xc
mov dword [ebp - 0x36], 0x7a65715f
cmp dword [ebp - 0x164], 0x10
lea edx, [ebp - 0x178]
mov word [ebp - 0x32], 0x100
cmovae edx, dword [ebp - 0x178]
xor ecx, ecx
lea eax, [ecx + 0xf]
xor byte [ebp + ecx - 0x36], al
inc ecx
cmp ecx, 4
jb 0x5d1674
push edx
push 0x104
lea eax, [ebp - 0x408]
mov byte [ebp - 0x31], 0
push eax
push 0
lea eax, [ebp - 0x36]
push eax
push edi
call fcn.00a404a6
je 0x5d162d
dec ebp
shl dword [esi - 0x39], 0x45
rcr dword [eax + eax - 0x3a], 0x45
ret
push edi
push edi
call fcn.006e0b42
inc edi
add edi, eax
mov dword [ebp - 0xd4], edi
cmp byte [edi], 0
jne 0x5d1600
mov ecx, dword [ebp - 0x164]
cmp ecx, 0x10
jb 0x5d2841
mov edx, dword [ebp - 0x178]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x5d2837
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x5d28e9
push ecx
push edx
call fcn.00676402
add esp, 8
mov ecx, dword [ebp - 0x1e0]
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x164], 0xf
mov byte [ebp - 0x178], 0
cmp ecx, 0x10
jb 0x5d2896
mov edx, dword [ebp - 0x1f4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x5d288c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x5d28e9
push ecx
push edx
call fcn.00676402
add esp, 8
mov ecx, dword [ebx + 0x1c]
cmp ecx, 0x10
jb 0x5d28c6
mov edx, dword [ebx + 8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x5d28bc
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x5d28e9
push ecx
push edx
call fcn.00676402
add esp, 8
mov eax, dword [ebp - 0xf8]
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.0059c440
call fcn.0059c440
call fcn.0067b6a0
call fcn.006029f0
lea ecx, [ebp - 0x120]
call fcn.00601100
push eax
lea ecx, [ebp - 0x2b4]
call fcn.0059cb00
push eax
mov edx, 0x1ffdf8
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x2cc]
call fcn.00603290
add esp, 4
push eax
mov edx, 0x131
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x280]
call fcn.005a2d20
add esp, 4
lea eax, [ebp - 0x280]
push 0x210038
push eax
call fcn.00677deb
lea ecx, [ebp - 0x98]
call fcn.00601100
push eax
lea ecx, [ebp - 0x2e4]
call fcn.0059cb00
push eax
mov edx, 0x1ffdf8
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x2fc]
call fcn.00603290
add esp, 4
push eax
mov edx, 0x131
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x29c]
call fcn.005a2d20
add esp, 4
lea eax, [ebp - 0x29c]
push 0x210038
push eax
call fcn.00677deb
int3