Function at 0x4c9670
Capabilities:
Authenticate hmac
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
mov eax, 0x354
call fcn.00510900
mov eax, dword [0x755f7c]
xor eax, esp
mov dword [esp + 0x350], eax
mov eax, dword [ebp + 8]
mov dword [esp + 0x48], eax
mov eax, dword [ebp + 0xc]
mov dword [esp + 0x70], eax
mov eax, dword [ebp + 0x14]
push ebx
mov ebx, dword [ebp + 0x20]
mov dword [esp + 0x38], eax
mov eax, dword [ebp + 0x18]
mov dword [esp + 0x30], eax
mov eax, dword [ebp + 0x24]
mov dword [esp + 0x54], eax
mov dword [esp + 0x50], 0x28
mov dword [esp + 0x14], 8
mov byte [esp + 0xf], 1
push esi
mov esi, dword [ebp + 0x10]
mov dword [esp + 0x7c], esi
push edi
mov edi, 0x40
cmp ebx, 0x100000
jb 0x4c96f7
push 0x722a60
push 0x1c7
push 0x722a34
call fcn.0047e340
add esp, 0xc
push dword [esp + 0x54]
call fcn.00468170
push eax
call fcn.00461b50
add esp, 8
cmp eax, 0x2a0
jg 0x4c97cc
je 0x4c979a
cmp eax, 4
je 0x4c975a
cmp eax, 0x40
jne 0x4c97e1
lea eax, [esp + 0xb0]
push eax
call fcn.004b3f70
add esp, 4
test eax, eax
jle 0x4c9f0c
mov dword [esp + 0x30], 0x4ca2d0
mov eax, 0x14
mov dword [esp + 0x18], 0x4b3fb0
jmp 0x4c98a2
lea eax, [esp + 0xb0]
push eax
call fcn.004784b0
add esp, 4
test eax, eax
jle 0x4c9f0c
mov edx, 0x30
mov dword [esp + 0x30], 0x4ca250
mov dword [esp + 0x18], 0x4784f0
mov eax, 0x10
mov dword [esp + 0x58], edx
mov byte [esp + 0x17], 0
jmp 0x4c98a7
lea eax, [esp + 0xb0]
push eax
call fcn.00464bf0
add esp, 4
test eax, eax
jle 0x4c9f0c
mov dword [esp + 0x30], 0x4ca370
mov eax, 0x20
mov dword [esp + 0x18], 0x464c50
jmp 0x4c98a2
sub eax, 0x2a1
je 0x4c9868
sub eax, 1
je 0x4c984c
sub eax, 1
je 0x4c981d
push 0x6fb874
push 0x209
push 0x722a34
call fcn.0047e340
add esp, 0xc
test esi, esi
je 0x4c9f0c
mov dword [esi], 0
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x350]
xor ecx, esp
call fcn.00510382
mov esp, ebp
pop ebp
ret
lea eax, [esp + 0xb0]
push eax
call fcn.004648b0
add esp, 4
test eax, eax
jle 0x4c9f0c
mov dword [esp + 0x30], 0x4ca370
mov eax, 0x1c
mov dword [esp + 0x18], 0x464c50
jmp 0x4c98a2
lea eax, [esp + 0xb0]
push eax
call fcn.004b5c10
add esp, 4
test eax, eax
jle 0x4c9f0c
mov eax, edi
jmp 0x4c9885
lea eax, [esp + 0xb0]
push eax
call fcn.004b55e0
add esp, 4
test eax, eax
jle 0x4c9f0c
mov eax, 0x30
mov dword [esp + 0x1c], 0x10
mov edi, 0x80
mov dword [esp + 0x18], 0x4b5cc0
mov dword [esp + 0x30], 0x4ca460
mov edx, 0x28
cmp byte [ebp + 0x2c], 0
mov ecx, 0xd
mov dword [esp + 0x20], eax
mov dword [esp + 0x48], ecx
je 0x4c98c6
mov ecx, dword [ebp + 0x28]
add ecx, 0xb
add ecx, edx
mov dword [esp + 0x48], ecx
xor edx, edx
mov esi, ecx
cmp byte [ebp + 0x2c], dl
sete dl
sub esi, eax
mov eax, dword [esp + 0x1c]
dec ebx
add eax, esi
xor ecx, ecx
add eax, edi
add esi, dword [ebp + 0x1c]
lea edx, [edx*4 + 2]
add eax, ebx
mov dword [esp + 0x3c], edx
xor ebx, ebx
xor edx, edx
mov dword [esp + 0x28], ebx
div edi
xor edx, edx
mov dword [esp + 0x34], eax
xor eax, eax
mov dword [esp + 0x44], eax
mov eax, esi
div edi
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x4c], edx
add eax, esi
xor edx, edx
div edi
cmp byte [ebp + 0x2c], cl
mov edx, dword [esp + 0x3c]
setne cl
mov dword [esp + 0x64], eax
mov eax, dword [esp + 0x34]
add ecx, edx
cmp eax, ecx
jbe 0x4c9940
sub eax, edx
mov ebx, eax
mov dword [esp + 0x44], eax
imul ebx, edi
mov dword [esp + 0x28], ebx
cmp byte [ebp + 0x2c], 0
lea eax, [esi*8]
mov dword [esp + 0x2c], eax
jne 0x4c9a28
lea eax, [eax + edi*8]
push edi
mov dword [esp + 0x30], eax
lea eax, [esp + 0x1dc]
push 0
push eax
call fcn.00511c82
mov esi, dword [ebp + 0x28]
add esp, 0xc
cmp esi, 0x80
jbe 0x4c9991
push 0x722a90
push 0x271
push 0x722a34
call fcn.0047e340
add esp, 0xc
push esi
push dword [esp + 0x60]
lea eax, [esp + 0x1e0]
push eax
call fcn.00511c88
add esp, 0xc
xor ecx, ecx
test edi, edi
je 0x4c9a0d
cmp edi, 0x20
jb 0x4c99f2
movaps xmm1, xmmword [0x71fdb0]
mov eax, edi
and eax, 0x1f
mov edx, edi
sub edx, eax
lea eax, [esp + 0x1e8]
nop dword [eax + eax]
movups xmm0, xmmword [eax - 0x10]
add ecx, 0x20
lea eax, [eax + 0x20]
pxor xmm0, xmm1
movups xmmword [eax - 0x30], xmm0
movups xmm0, xmmword [eax - 0x20]
pxor xmm0, xmm1
movups xmmword [eax - 0x20], xmm0
cmp ecx, edx
jb 0x4c99d0
cmp ecx, edi
jae 0x4c9a0d
nop word [eax + eax]
xor byte [esp + ecx + 0x1d8], 0x36
inc ecx
cmp ecx, edi
jb 0x4c9a00
mov esi, dword [esp + 0x18]
lea eax, [esp + 0x1d8]
push eax
lea eax, [esp + 0xb4]
push eax
call esi
add esp, 8
jmp 0x4c9a2c
mov esi, dword [esp + 0x18]
cmp byte [esp + 0x17], 0
je 0x4c9a82
mov eax, dword [esp + 0x1c]
add eax, 0xfffffffc
push eax
lea eax, [esp + 0x18c]
push 0
push eax
call fcn.00511c82
mov ecx, dword [esp + 0x38]
add esp, 0xc
mov edx, dword [esp + 0x1c]
mov eax, ecx
shr eax, 0x18
mov byte [esp + edx + 0x184], al
mov eax, ecx
shr eax, 0x10
mov byte [esp + edx + 0x185], al
mov eax, ecx
shr eax, 8
mov byte [esp + edx + 0x186], al
mov byte [esp + edx + 0x187], cl
jmp 0x4c9acb
push dword [esp + 0x1c]
lea eax, [esp + 0x18c]
push 0
push eax
call fcn.00511c82
mov ecx, dword [esp + 0x38]
add esp, 0xc
mov edx, dword [esp + 0x1c]
mov eax, ecx
shr eax, 0x18
mov byte [esp + edx + 0x183], al
mov eax, ecx
shr eax, 0x10
mov byte [esp + edx + 0x182], al
mov eax, ecx
shr eax, 8
mov byte [esp + edx + 0x181], al
mov byte [esp + edx + 0x180], cl
test ebx, ebx
je 0x4c9bf9
cmp byte [ebp + 0x2c], 0
je 0x4c9b7c
mov esi, dword [esp + 0x48]
cmp esi, edi
jbe 0x4c9f0c
push dword [esp + 0x40]
lea eax, [esp + 0xb4]
sub esi, edi
push eax
mov dword [esp + 0x3c], esi
call dword [esp + 0x20]
mov eax, dword [esp + 0x48]
add eax, edi
push esi
push eax
lea eax, [esp + 0x268]
push eax
call fcn.00511c88
mov eax, edi
sub eax, esi
push eax
push dword [esp + 0x50]
lea eax, [esp + 0x274]
add eax, esi
push eax
call fcn.00511c88
lea eax, [esp + 0x278]
push eax
lea eax, [esp + 0xd4]
push eax
call dword [esp + 0x40]
xor edx, edx
mov eax, ebx
div edi
add esp, 0x28
dec eax
cmp eax, 1
jbe 0x4c9bf9
mov esi, dword [esp + 0x38]
lea ebx, [eax - 1]
sub esi, dword [esp + 0x34]
add esi, edi
lea eax, [esp + 0xb0]
push esi
push eax
call dword [esp + 0x20]
add esp, 8
add esi, edi
sub ebx, 1
jne 0x4c9b60
jmp 0x4c9bf9
mov ecx, dword [esp + 0x40]
mov eax, dword [ecx + 8]
movq xmm0, qword [ecx]
mov dword [esp + 0x260], eax
mov al, byte [ecx + 0xc]
mov byte [esp + 0x264], al
lea eax, [edi - 0xd]
push eax
push dword [esp + 0x3c]
lea eax, [esp + 0x26d]
movq qword [esp + 0x260], xmm0
push eax
call fcn.00511c88
lea eax, [esp + 0x264]
push eax
lea eax, [esp + 0xc0]
push eax
call esi
xor edx, edx
mov eax, ebx
div edi
add esp, 0x14
cmp eax, 1
jbe 0x4c9bf9
mov esi, dword [esp + 0x38]
lea ebx, [eax - 1]
add esi, 0xfffffff3
add esi, edi
lea eax, [esp + 0xb0]
push esi
push eax
call dword [esp + 0x20]
add esp, 8
add esi, edi
sub ebx, 1
jne 0x4c9be2
push 0x40
lea eax, [esp + 0x19c]
push 0
push eax
call fcn.00511c82
mov eax, dword [esp + 0x48]
add esp, 0xc
mov edx, dword [esp + 0x44]
add eax, edx
mov esi, dword [esp + 0x20]
mov dword [esp + 0x78], eax
cmp edx, eax
ja 0x4c9e58
mov eax, edx
xor eax, dword [esp + 0x60]
lea ecx, [eax - 1]
not eax
shr ecx, 0x1f
shr eax, 0x1f
and cl, al
mov eax, edx
xor eax, dword [esp + 0x64]
neg cl
mov dword [esp + 0x3c], ecx
xor edx, edx
mov dword [esp + 0x50], edx
lea ecx, [eax - 1]
not eax
shr ecx, 0x1f
shr eax, 0x1f
and cl, al
neg cl
movsx eax, cl
mov dword [esp + 0x34], ecx
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
pshufd xmm0, xmm0, 0
movaps xmmword [esp + 0xa0], xmm0
test edi, edi
je 0x4c9d93
mov eax, dword [esp + 0x4c]
not cl
lea esi, [eax + 1]
shr eax, 0x1f
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x3c]
or cl, al
movzx ebx, al
mov eax, edi
sub eax, dword [esp + 0x1c]
shr esi, 0x1f
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x70], esi
sub eax, edi
mov esi, dword [esp + 0x4c]
mov dword [esp + 0x6c], ebx
neg esi
lea ebx, [esp + 0x188]
mov byte [esp + 0x27], cl
add eax, ebx
mov ebx, dword [esp + 0x28]
mov dword [esp + 0x2c], eax
mov ecx, dword [esp + 0x48]
mov byte [esp + 0x17], 0
cmp ebx, ecx
jae 0x4c9ce5
mov eax, dword [esp + 0x40]
jmp 0x4c9cf4
mov eax, dword [ebp + 0x20]
add eax, ecx
cmp ebx, eax
jae 0x4c9cfb
mov eax, dword [esp + 0x38]
sub eax, ecx
mov al, byte [eax + ebx]
mov byte [esp + 0x17], al
mov eax, dword [esp + 0x68]
inc ebx
mov dword [esp + 0x28], ebx
mov ecx, esi
shr ecx, 0x1f
lea ebx, [esi - 1]
xor cl, al
shr edx, 0x1f
xor al, dl
shr ebx, 0x1f
or cl, al
mov eax, dword [esp + 0x70]
xor bl, al
xor cl, dl
xor al, dl
dec cl
or bl, al
movzx ecx, cl
and ecx, dword [esp + 0x6c]
xor bl, dl
mov edx, dword [esp + 0x50]
dec bl
and bl, byte [esp + 0x3c]
mov al, cl
not al
and cl, 0x80
and al, byte [esp + 0x17]
not bl
or al, cl
and bl, al
and bl, byte [esp + 0x27]
cmp edx, dword [esp + 0x74]
jb 0x4c9d6b
mov eax, dword [esp + 0x34]
movzx ecx, al
mov al, cl
not al
and al, bl
mov ebx, dword [esp + 0x2c]
and cl, byte [ebx]
or al, cl
mov bl, al
inc dword [esp + 0x2c]
lea eax, [esp + 0x2d8]
add eax, dword [esp + 0x4c]
inc edx
mov dword [esp + 0x50], edx
mov byte [eax + esi], bl
inc esi
mov ebx, dword [esp + 0x28]
cmp edx, edi
jb 0x4c9cd2
mov esi, dword [esp + 0x20]
lea eax, [esp + 0x2d8]
push eax
lea eax, [esp + 0xb4]
push eax
call dword [esp + 0x20]
lea eax, [esp + 0x2e0]
push eax
lea eax, [esp + 0xbc]
push eax
call dword [esp + 0x40]
add esp, 0x10
xor eax, eax
test esi, esi
je 0x4c9e45
cmp esi, 0x20
jb 0x4c9e27
movaps xmm2, xmmword [esp + 0xa0]
mov ecx, esi
and ecx, 0x1f
mov edx, esi
sub edx, ecx
nop
movups xmm0, xmmword [esp + eax + 0x198]
movups xmm1, xmmword [esp + eax + 0x2d8]
pand xmm1, xmm2
por xmm1, xmm0
movups xmmword [esp + eax + 0x198], xmm1
movups xmm1, xmmword [esp + eax + 0x2e8]
movups xmm0, xmmword [esp + eax + 0x1a8]
pand xmm1, xmm2
por xmm1, xmm0
movups xmmword [esp + eax + 0x1a8], xmm1
add eax, 0x20
cmp eax, edx
jb 0x4c9de0
cmp eax, esi
jae 0x4c9e45
mov edx, dword [esp + 0x34]
nop
mov cl, byte [esp + eax + 0x2d8]
and cl, dl
or byte [esp + eax + 0x198], cl
inc eax
cmp eax, esi
jb 0x4c9e30
mov edx, dword [esp + 0x44]
inc edx
mov dword [esp + 0x44], edx
cmp edx, dword [esp + 0x78]
jbe 0x4c9c27
lea eax, [esp + 0x88]
push eax
call fcn.004817e0
mov eax, dword [esp + 0x58]
push 0
push dword [eax]
lea eax, [esp + 0x94]
push eax
call fcn.004813c0
add esp, 0x10
test eax, eax
jle 0x4c9efc
cmp byte [ebp + 0x2c], 0
je 0x4c9f23
mov ebx, dword [esp + 0x58]
lea eax, [esp + 0x1d8]
push ebx
push 0x5c
push eax
call fcn.00511c82
push dword [ebp + 0x28]
lea eax, [esp + 0x98]
push dword [esp + 0x6c]
push eax
call fcn.00481570
add esp, 0x18
test eax, eax
jle 0x4c9efc
push ebx
lea eax, [esp + 0x1dc]
push eax
lea eax, [esp + 0x90]
push eax
call fcn.00481570
add esp, 0xc
test eax, eax
jle 0x4c9efc
push esi
lea eax, [esp + 0x19c]
push eax
lea eax, [esp + 0x90]
push eax
call fcn.00481570
add esp, 0xc
test eax, eax
jg 0x4c9fbf
lea eax, [esp + 0x88]
push eax
call fcn.00481580
add esp, 4
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x350]
xor ecx, esp
call fcn.00510382
mov esp, ebp
pop ebp
ret
xor ecx, ecx
test edi, edi
je 0x4c9f7d
cmp edi, 0x20
jb 0x4c9f67
movaps xmm1, xmmword [0x71fdc0]
mov eax, edi
and eax, 0x1f
mov edx, edi
sub edx, eax
lea eax, [esp + 0x1e8]
movups xmm0, xmmword [eax - 0x10]
add ecx, 0x20
lea eax, [eax + 0x20]
pxor xmm0, xmm1
movups xmmword [eax - 0x30], xmm0
movups xmm0, xmmword [eax - 0x20]
pxor xmm0, xmm1
movups xmmword [eax - 0x20], xmm0
cmp ecx, edx
jb 0x4c9f45
cmp ecx, edi
jae 0x4c9f7d
nop dword [eax + eax]
xor byte [esp + ecx + 0x1d8], 0x6a
inc ecx
cmp ecx, edi
jb 0x4c9f70
push edi
lea eax, [esp + 0x1dc]
push eax
lea eax, [esp + 0x90]
push eax
call fcn.00481570
add esp, 0xc
test eax, eax
jle 0x4c9efc
push esi
lea eax, [esp + 0x19c]
push eax
lea eax, [esp + 0x90]
push eax
call fcn.00481570
add esp, 0xc
test eax, eax
jle 0x4c9efc
lea eax, [esp + 0x84]
push eax
push dword [esp + 0x80]
lea eax, [esp + 0x90]
push eax
call fcn.004812f0
mov ecx, dword [esp + 0x8c]
add esp, 0xc
test ecx, ecx
je 0x4c9ff2
mov eax, dword [esp + 0x84]
mov dword [ecx], eax
lea eax, [esp + 0x88]
push eax
call fcn.00481580
mov ecx, dword [esp + 0x360]
add esp, 4
mov eax, 1
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.00510382
mov esp, ebp
pop ebp
ret