Function at 0x5b98f0
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x180
mov eax, dword [0x79b5e0]
xor eax, esp
mov dword [esp + 0x17c], eax
mov eax, dword [ebp + 8]
mov dword [esp + 0x18], eax
mov eax, dword [ebp + 0xc]
mov dword [esp + 0x6c], eax
push esi
mov esi, ecx
mov dword [esp + 0x38], edx
push edi
mov edi, 1
mov dword [esp + 0x2c], esi
mov eax, dword [esi + 0x5c]
mov ecx, dword [esi + 0xc]
mov dword [esp + 0x28], eax
mov eax, dword [esi + 0x28]
mov dword [esp + 0x30], eax
lea eax, [esi + 0x2c]
mov dword [esp + 0x6c], eax
mov eax, dword [esi + 0x24]
mov dword [esp + 0x5c], eax
mov eax, dword [esi + 4]
mov dword [esp + 0x58], ecx
add ecx, eax
mov dword [esp + 0x7c], ecx
mov ecx, edx
sub ecx, eax
mov dword [esp + 0xc], eax
mov dword [esp + 0x48], ecx
mov eax, edi
mov ecx, dword [esi + 0xb8]
shl eax, cl
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x48]
sub eax, dword [esi + 0x10]
mov ecx, dword [esp + 0x34]
cmp eax, ecx
jbe 0x5b9991
mov eax, dword [esp + 0x48]
sub eax, ecx
mov dword [esp + 0x54], eax
mov eax, dword [esi + 0x10]
mov ecx, dword [esp + 0x54]
jmp 0x5b9996
mov eax, dword [esi + 0x10]
mov ecx, eax
cmp dword [esi + 0x18], 0
push 0xcf1bbcdc
cmovne ecx, eax
mov dword [esp + 0x1c], 3
mov eax, dword [esi + 0xc4]
mov dword [esp + 0x58], ecx
mov ecx, 4
cmp eax, ecx
push 0xbb000000
push dword [edx + 4]
cmovb ecx, eax
mov eax, dword [esi + 0x50]
push dword [edx]
shl edi, cl
mov ecx, dword [esi + 0xb4]
mov dword [esp + 0x88], eax
mov eax, dword [esi + 0x54]
mov dword [esp + 0x60], edi
mov esi, dword [ecx + 0x24]
mov edi, dword [ecx + 0x28]
add esi, 8
mov dword [esp + 0x44], eax
mov dword [esp + 0x78], ecx
call fcn.00620b50
mov ecx, 0x40
sub ecx, esi
call fcn.00622f20
mov edx, dword [esp + 0x68]
mov ecx, eax
mov esi, dword [esp + 0x2c]
shr ecx, 4
and ecx, 0xffffff0
movzx eax, al
mov dword [esp + 0x44], eax
cmp dword [esi + 0xdc], 0
mov dword [esp + 0x70], 0xf
lea eax, [ecx + edi]
mov edi, dword [esp + 0x3c]
mov dword [esp + 0x60], eax
mov eax, dword [edx + 0x5c]
lea eax, [eax + ecx*4]
mov dword [esp + 0x64], eax
jne 0x5b9cfb
mov edx, dword [esp + 0xc]
mov eax, edi
mov ecx, dword [esi + 0x1c]
sub eax, edx
mov dword [esp + 0x14], eax
sub eax, ecx
mov dword [esp + 0x24], ecx
cmp eax, 0x180
jbe 0x5b9bd9
lea eax, [ecx + 0x60]
mov dword [esp + 0x4c], eax
cmp ecx, eax
jae 0x5b9b32
mov eax, dword [esp + 0x5c]
mov esi, 0x40
mov edi, dword [esp + 0x2c]
add eax, 8
sub esi, eax
lea eax, [edx + 8]
mov dword [esp + 0x40], esi
mov dword [esp + 0x1c], eax
jmp 0x5b9aa0
push 0xcf1bbcdc
push 0xbb000000
push dword [ecx + eax + 4]
push dword [ecx + eax]
call fcn.00620b50
xor eax, dword [edi + 0x50]
mov ecx, esi
xor edx, dword [edi + 0x54]
call fcn.00622f20
mov ecx, eax
mov eax, dword [esp + 0x24]
and eax, 7
mov edx, dword [edi + eax*4 + 0x2c]
mov esi, edx
mov dword [edi + eax*4 + 0x2c], ecx
mov eax, 0
shr esi, 4
mov dword [esp + 0x38], edx
and esi, 0xffffff0
mov edx, dword [esp + 0x30]
add edx, esi
movzx ecx, byte [edx]
dec ecx
and ecx, 0xf
cmove eax, dword [esp + 0x70]
add ecx, eax
mov eax, dword [esp + 0x38]
mov byte [edx], cl
mov byte [ecx + edx], al
lea eax, [ecx + esi]
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x24]
mov esi, dword [esp + 0x40]
mov dword [edx + eax*4], ecx
inc ecx
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x24], ecx
cmp ecx, dword [esp + 0x4c]
jb 0x5b9aa0
mov edi, dword [esp + 0x3c]
mov esi, dword [esp + 0x2c]
mov ecx, dword [esp + 0x14]
lea edx, [edi + 1]
mov eax, dword [esp + 0xc]
add ecx, 0xffffffe0
add eax, ecx
mov dword [esp + 0x24], ecx
mov dword [esp + 0x38], ecx
cmp eax, edx
jbe 0x5b9b52
xor edx, edx
jmp 0x5b9b59
sub edx, dword [esp + 0xc]
sub edx, ecx
inc edx
mov eax, 8
cmp edx, eax
cmova edx, eax
add edx, ecx
mov dword [esp + 0x1c], edx
cmp ecx, edx
jae 0x5b9bd9
mov eax, dword [esi + 0x24]
mov ecx, 0x40
add eax, 8
mov edi, edx
mov edx, dword [esp + 0x38]
sub ecx, eax
mov dword [esp + 0x40], ecx
jmp 0x5b9b90
mov eax, dword [esp + 0xc]
push 0xcf1bbcdc
push 0xbb000000
push dword [edx + eax + 4]
push dword [edx + eax]
call fcn.00620b50
xor eax, dword [esi + 0x50]
xor edx, dword [esi + 0x54]
mov ecx, dword [esp + 0x40]
call fcn.00622f20
mov edx, dword [esp + 0x38]
mov ecx, eax
mov eax, edx
inc edx
and eax, 7
mov dword [esp + 0x38], edx
mov dword [esi + eax*4 + 0x2c], ecx
cmp edx, edi
jb 0x5b9b90
mov edi, dword [esp + 0x3c]
mov ecx, dword [esp + 0x24]
mov eax, dword [esi + 0x5c]
mov edx, dword [esi + 0x24]
mov dword [esp + 0x10], eax
mov eax, dword [esi + 0x28]
mov dword [esp + 0x4c], eax
mov eax, dword [esi + 4]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x14]
cmp ecx, eax
jae 0x5b9ca5
mov edi, dword [esp + 0x14]
lea eax, [edx + 8]
mov edx, 0x40
sub edx, eax
mov dword [esp + 0x40], edx
nop
mov eax, dword [esp + 0x1c]
push 0xcf1bbcdc
push 0xbb000000
push dword [ecx + eax + 0xc]
push dword [ecx + eax + 8]
call fcn.00620b50
xor eax, dword [esi + 0x50]
xor edx, dword [esi + 0x54]
mov ecx, dword [esp + 0x40]
call fcn.00622f20
mov esi, dword [esp + 0x6c]
mov ecx, eax
mov eax, dword [esp + 0x24]
and eax, 7
mov edx, dword [esi + eax*4]
mov dword [esi + eax*4], ecx
mov esi, edx
shr esi, 4
mov eax, 0
mov dword [esp + 0x38], edx
and esi, 0xffffff0
mov edx, dword [esp + 0x4c]
add edx, esi
movzx ecx, byte [edx]
dec ecx
and ecx, 0xf
cmove eax, dword [esp + 0x70]
add ecx, eax
mov eax, dword [esp + 0x38]
mov byte [edx], cl
mov byte [ecx + edx], al
lea eax, [ecx + esi]
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0x24]
mov esi, dword [esp + 0x2c]
mov dword [edx + eax*4], ecx
inc ecx
mov dword [esp + 0x24], ecx
cmp ecx, edi
jb 0x5b9c10
mov edi, dword [esp + 0x3c]
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x48]
mov dword [esi + 0x1c], eax
mov eax, dword [esp + 0xc]
mov esi, dword [esp + 0x5c]
push 0xcf1bbcdc
push 0xbb000000
push dword [ecx + eax + 0xc]
add esi, 8
push dword [ecx + eax + 8]
call fcn.00620b50
xor eax, dword [esp + 0x78]
mov ecx, 0x40
xor edx, dword [esp + 0x34]
sub ecx, esi
call fcn.00622f20
mov esi, dword [esp + 0x6c]
mov ecx, eax
mov eax, dword [esp + 0x48]
and eax, 7
mov edx, dword [esi + eax*4]
mov dword [esi + eax*4], ecx
mov ecx, dword [esp + 0x2c]
jmp 0x5b9d37
mov esi, dword [esp + 0x5c]
push 0xcf1bbcdc
push 0xbb000000
push dword [edi + 4]
add esi, 8
push dword [edi]
call fcn.00620b50
xor eax, dword [esp + 0x78]
mov ecx, 0x40
xor edx, dword [esp + 0x34]
sub ecx, esi
call fcn.00622f20
mov ecx, dword [esp + 0x2c]
mov edx, eax
mov eax, dword [esp + 0x48]
mov dword [ecx + 0x1c], eax
add dword [ecx + 0x58], edx
mov ecx, edx
shr ecx, 4
movzx eax, dl
and ecx, 0xffffff0
mov edx, dword [esp + 0x30]
mov dword [esp + 0x34], eax
add edx, ecx
mov eax, dword [esp + 0x28]
mov dword [esp + 0x4c], edx
mov dword [esp + 0x14], 0
mov dword [esp + 0x30], 0
lea eax, [eax + ecx*4]
mov dword [esp + 0x28], eax
movzx eax, byte [edx]
mov ecx, eax
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x34]
and ecx, 0xf
movsx eax, al
mov dword [esp + 0x1c], ecx
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
pshufd xmm1, xmm0, 0
movdqu xmm0, xmmword [edx]
mov edx, ecx
and edx, 0xf
pcmpeqb xmm0, xmm1
mov ecx, edx
pmovmskb esi, xmm0
neg ecx
and ecx, 0xf
mov ax, si
shl ax, cl
mov cx, dx
shr si, cl
or ax, si
movzx eax, ax
cdq
mov esi, eax
test edx, edx
jne 0x5b9dce
test esi, esi
je 0x5b9e32
mov edi, dword [esp + 0x50]
test edi, edi
je 0x5b9e2a
test esi, esi
jne 0x5b9de6
bsf eax, edx
mov dword [esp + 0x10], eax
add eax, 0x20
jmp 0x5b9ded
bsf eax, esi
mov dword [esp + 0x10], eax
add eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x28]
and eax, 0xf
mov eax, dword [ecx + eax*4]
je 0x5b9e14
cmp eax, dword [esp + 0x54]
jb 0x5b9e2a
mov ecx, dword [esp + 0x14]
mov dword [esp + ecx*4 + 0x80], eax
inc ecx
mov dword [esp + 0x14], ecx
dec edi
mov ecx, esi
mov eax, edx
add ecx, 0xffffffff
adc eax, 0xffffffff
and esi, ecx
and edx, eax
ja 0x5b9dd2
jb 0x5b9e2a
test esi, esi
jne 0x5b9dd2
mov dword [esp + 0x50], edi
mov edi, dword [esp + 0x3c]
mov ecx, dword [esp + 0x40]
mov edx, 0xf
mov esi, dword [esp + 0x28]
dec ecx
and ecx, 0xf
mov eax, 0
cmove eax, edx
mov edx, dword [esp + 0x34]
add ecx, eax
mov eax, dword [esp + 0x4c]
mov byte [eax], cl
mov byte [ecx + eax], dl
mov edx, dword [esp + 0x2c]
mov eax, dword [edx + 0x1c]
mov dword [esi + ecx*4], eax
inc dword [edx + 0x1c]
cmp dword [esp + 0x14], 0
jbe 0x5b9f45
mov ecx, 3
xor eax, eax
lea esp, [esp]
mov eax, dword [esp + eax*4 + 0x80]
mov edx, dword [esp + 0xc]
add edx, eax
mov dword [esp + 0x1c], eax
mov eax, dword [edx + ecx - 3]
cmp eax, dword [edi + ecx - 3]
jne 0x5b9f32
mov esi, dword [esp + 0x20]
mov eax, edi
add esi, 0xfffffffd
cmp edi, esi
jae 0x5b9ee4
mov eax, dword [edx]
xor eax, dword [edi]
je 0x5b9ec4
mov esi, dword [esp + 0x20]
bsf eax, eax
mov ecx, eax
mov dword [esp + 0x10], eax
shr ecx, 3
jmp 0x5b9f0c
lea eax, [edi + 4]
add edx, 4
cmp eax, esi
jae 0x5b9ee4
mov edi, edi
mov ecx, dword [edx]
xor ecx, dword [eax]
jne 0x5b9fe8
add eax, 4
add edx, 4
cmp eax, esi
jb 0x5b9ed0
mov esi, dword [esp + 0x20]
lea ecx, [esi - 1]
cmp eax, ecx
jae 0x5b9efd
mov cx, word [edx]
cmp cx, word [eax]
jne 0x5b9efd
add eax, 2
add edx, 2
cmp eax, esi
jae 0x5b9f08
mov cl, byte [edx]
cmp cl, byte [eax]
jne 0x5b9f08
inc eax
mov ecx, eax
sub ecx, edi
cmp ecx, dword [esp + 0x18]
jbe 0x5b9f2e
mov eax, dword [esp + 0x48]
sub eax, dword [esp + 0x1c]
mov edx, dword [esp + 0x74]
add eax, 3
mov dword [esp + 0x18], ecx
mov dword [edx], eax
lea eax, [ecx + edi]
cmp eax, esi
je 0x5b9f45
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x30]
inc eax
mov dword [esp + 0x30], eax
cmp eax, dword [esp + 0x14]
jb 0x5b9e80
mov edx, dword [esp + 0x68]
mov dword [esp + 0xc], 0
mov dword [esp + 0x28], 0
mov ecx, dword [edx + 4]
mov eax, dword [edx]
mov edx, dword [esp + 0x60]
mov dword [esp + 0x10], ecx
sub ecx, eax
add dword [esp + 0x58], ecx
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x44]
movzx ecx, byte [edx]
movsx eax, al
and ecx, 0xf
mov dword [esp + 0x60], ecx
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
pshufd xmm1, xmm0, 0
movdqu xmm0, xmmword [edx]
mov edx, ecx
and edx, 0xf
pcmpeqb xmm0, xmm1
mov ecx, edx
pmovmskb esi, xmm0
neg ecx
and ecx, 0xf
mov ax, si
shl ax, cl
mov cx, dx
shr si, cl
or ax, si
movzx eax, ax
cdq
mov esi, eax
test edx, edx
jne 0x5b9fcb
test esi, esi
je 0x5ba125
xor edi, edi
lea ecx, [ecx]
mov ecx, dword [esp + 0x50]
test ecx, ecx
je 0x5ba049
test esi, esi
jne 0x5b9fff
bsf eax, edx
mov dword [esp + 0x44], eax
add eax, 0x20
jmp 0x5ba006
mov esi, dword [esp + 0x20]
bsf ecx, ecx
mov dword [esp + 0x10], ecx
shr ecx, 3
sub ecx, edi
add ecx, eax
jmp 0x5b9f0c
bsf eax, esi
mov dword [esp + 0x44], eax
add eax, dword [esp + 0x60]
mov edi, dword [esp + 0x64]
and eax, 0xf
mov eax, dword [edi + eax*4]
mov edi, dword [esp + 0xc]
je 0x5ba033
mov ecx, dword [esp + 0x68]
cmp eax, dword [ecx + 0xc]
jb 0x5ba049
mov dword [esp + edi*4 + 0x80], eax
inc edi
dec dword [esp + 0x50]
mov dword [esp + 0xc], edi
mov ecx, esi
mov eax, edx
add ecx, 0xffffffff
adc eax, 0xffffffff
and esi, ecx
and edx, eax
ja 0x5b9fd0
jb 0x5ba049
test esi, esi
jne 0x5b9fd0
test edi, edi
mov edi, dword [esp + 0x3c]
je 0x5ba125
mov ecx, dword [esp + 0xc]
xor eax, eax
jmp 0x5ba060
mov eax, dword [esp + eax*4 + 0x80]
mov esi, dword [esp + 0x10]
add esi, eax
mov dword [esp + 0x44], eax
mov eax, dword [esi]
cmp eax, dword [edi]
jne 0x5ba11f
mov ecx, dword [esp + 0x20]
lea eax, [edi + 4]
add esi, 4
sub eax, esi
mov edx, esi
add eax, dword [esp + 0x30]
cmp eax, ecx
cmovb ecx, eax
push ecx
lea ecx, [edi + 4]
call fcn.0059fed0
add esp, 4
mov dword [esp + 0x64], eax
lea ecx, [eax + esi]
cmp ecx, dword [esp + 0x30]
jne 0x5ba0c5
mov esi, dword [esp + 0x20]
lea ecx, [edi + 4]
mov edx, dword [esp + 0x7c]
add ecx, eax
push esi
call fcn.0059fed0
add esp, 4
add eax, dword [esp + 0x64]
mov edx, dword [esp + 0x18]
lea ecx, [eax + 4]
cmp ecx, edx
jbe 0x5ba0f4
mov eax, dword [esp + 0x48]
mov edx, ecx
sub eax, dword [esp + 0x44]
sub eax, dword [esp + 0x58]
mov esi, dword [esp + 0x74]
add eax, 3
mov dword [esp + 0x18], edx
mov dword [esi], eax
lea eax, [ecx + edi]
cmp eax, dword [esp + 0x20]
je 0x5ba109
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x28]
inc eax
mov dword [esp + 0x28], eax
cmp eax, ecx
jb 0x5ba060
mov eax, edx
pop edi
pop esi
mov ecx, dword [esp + 0x17c]
xor ecx, esp
call fcn.0061b9b8
mov esp, ebp
pop ebp
ret
mov edx, dword [esp + 0x18]
jmp 0x5ba0f8
mov ecx, dword [esp + 0x184]
mov eax, dword [esp + 0x18]
pop edi
pop esi
xor ecx, esp
call fcn.0061b9b8
mov esp, ebp
pop ebp
ret