Function at 0x4dd8d0
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x188
mov eax, dword [0x5b0008]
xor eax, esp
mov dword [esp + 0x184], eax
mov eax, dword [ebp + 8]
mov dword [esp + 0x38], eax
mov eax, dword [ebp + 0xc]
mov dword [esp + 0x64], eax
push esi
push edi
mov edi, ecx
mov dword [esp + 0x20], edx
mov dword [esp + 0x5c], edi
mov dword [esp + 0x44], 3
mov dword [esp + 0x60], 0x3f
mov eax, dword [edi + 0x5c]
mov ecx, dword [edi + 4]
mov edx, dword [edi + 0xc]
mov dword [esp + 0x3c], eax
mov eax, dword [edi + 0x28]
mov dword [esp + 0x24], eax
mov eax, dword [edi + 0x24]
lea esi, [edx + ecx]
mov dword [esp + 0x14], eax
mov eax, dword [edi + 8]
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x20]
sub eax, ecx
mov dword [esp + 0x34], ecx
mov ecx, dword [edi + 0xb8]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x64], edx
mov edx, 1
shl edx, cl
mov ecx, dword [edi + 0x10]
sub eax, ecx
mov dword [esp + 0x68], esi
mov esi, dword [esp + 0x1c]
sub esi, edx
cmp eax, edx
mov eax, esi
mov esi, dword [esp + 0x20]
cmovbe eax, ecx
cmp dword [edi + 0x18], 0
cmovne eax, ecx
mov ecx, 6
mov dword [esp + 0x4c], eax
mov eax, dword [edi + 0xc4]
cmp eax, ecx
cmovb ecx, eax
mov eax, dword [edi + 0x50]
mov dword [esp + 0x48], eax
mov eax, dword [edi + 0x54]
mov dword [esp + 0x38], eax
mov eax, 1
shl eax, cl
cmp dword [edi + 0xdc], 0
mov dword [esp + 0x50], eax
jne 0x4ddc32
mov ecx, dword [edi + 0x1c]
mov eax, dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
sub eax, ecx
mov dword [esp + 0x18], ecx
cmp eax, 0x180
jbe 0x4ddb33
lea eax, [ecx + 0x60]
mov dword [esp + 0x10], edx
mov dword [esp + 0x28], eax
cmp ecx, eax
jae 0x4dda95
mov eax, dword [esp + 0x34]
mov esi, 0x38
sub esi, edx
add eax, 8
mov dword [esp + 0x2c], esi
mov dword [esp + 0x30], eax
nop dword [eax + eax]
push 0xcf1bbcdc
push 0xbf9b0000
push dword [eax + ecx + 4]
push dword [eax + ecx]
call fcn.00546f20
xor eax, dword [edi + 0x50]
mov ecx, esi
xor edx, dword [edi + 0x54]
call fcn.00519d00
mov ecx, eax
mov eax, dword [esp + 0x18]
and eax, 7
mov edx, dword [edi + eax*4 + 0x2c]
mov esi, edx
mov dword [edi + eax*4 + 0x2c], ecx
mov eax, 0
shr esi, 2
mov dword [esp + 0x10], edx
and esi, 0x3fffffc0
mov edx, dword [esp + 0x24]
add edx, esi
movzx ecx, byte [edx]
dec ecx
and ecx, 0x3f
cmove eax, dword [esp + 0x60]
add ecx, eax
mov eax, dword [esp + 0x10]
mov byte [edx], cl
mov byte [ecx + edx], al
lea eax, [ecx + esi]
mov edx, dword [esp + 0x3c]
mov ecx, dword [esp + 0x18]
mov esi, dword [esp + 0x2c]
mov dword [edx + eax*4], ecx
inc ecx
mov eax, dword [esp + 0x30]
mov dword [esp + 0x18], ecx
cmp ecx, dword [esp + 0x28]
jb 0x4dda00
mov eax, dword [edi + 0x24]
mov esi, dword [esp + 0x20]
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0x1c]
lea edx, [esi + 1]
mov eax, dword [esp + 0x34]
add ecx, 0xffffffe0
add eax, ecx
mov dword [esp + 0x18], ecx
mov dword [esp + 0x28], ecx
cmp eax, edx
jbe 0x4ddab5
xor edx, edx
jmp 0x4ddabc
sub edx, dword [esp + 0x34]
sub edx, ecx
inc edx
mov eax, 8
cmp edx, eax
cmova edx, eax
add edx, ecx
mov dword [esp + 0x30], edx
cmp ecx, edx
jae 0x4ddb2f
mov eax, 0x38
mov esi, edx
sub eax, dword [esp + 0x10]
mov edx, ecx
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x34]
push 0xcf1bbcdc
push 0xbf9b0000
push dword [edx + eax + 4]
push dword [edx + eax]
call fcn.00546f20
xor eax, dword [edi + 0x50]
xor edx, dword [edi + 0x54]
mov ecx, dword [esp + 0x2c]
call fcn.00519d00
mov edx, dword [esp + 0x28]
mov ecx, eax
mov eax, edx
inc edx
and eax, 7
mov dword [esp + 0x28], edx
mov dword [edi + eax*4 + 0x2c], ecx
cmp edx, esi
jb 0x4ddae1
mov edx, dword [edi + 0x24]
mov esi, dword [esp + 0x20]
mov ecx, dword [esp + 0x18]
jmp 0x4ddb33
mov edx, dword [esp + 0x10]
mov eax, dword [edi + 0x5c]
mov dword [esp + 0x28], eax
mov eax, dword [edi + 0x28]
mov dword [esp + 0x2c], eax
mov eax, dword [edi + 4]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x1c]
cmp ecx, eax
jae 0x4ddbf1
mov esi, 0x38
sub esi, edx
mov dword [esp + 0x58], esi
nop
mov eax, dword [esp + 0x30]
push 0xcf1bbcdc
push 0xbf9b0000
push dword [eax + ecx + 0xc]
push dword [eax + ecx + 8]
call fcn.00546f20
xor eax, dword [edi + 0x50]
mov ecx, esi
xor edx, dword [edi + 0x54]
call fcn.00519d00
mov ecx, eax
mov eax, dword [esp + 0x18]
and eax, 7
mov edx, dword [edi + eax*4 + 0x2c]
mov esi, edx
mov dword [edi + eax*4 + 0x2c], ecx
mov eax, 0
shr esi, 2
mov dword [esp + 0x10], edx
and esi, 0x3fffffc0
mov edx, dword [esp + 0x2c]
add edx, esi
movzx ecx, byte [edx]
dec ecx
and ecx, 0x3f
cmove eax, dword [esp + 0x60]
add ecx, eax
mov eax, dword [esp + 0x10]
mov byte [edx], cl
mov byte [ecx + edx], al
lea eax, [ecx + esi]
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x18]
mov esi, dword [esp + 0x58]
mov dword [edx + eax*4], ecx
inc ecx
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x18], ecx
cmp ecx, eax
jb 0x4ddb60
mov esi, dword [esp + 0x20]
push 0xcf1bbcdc
push 0xbf9b0000
mov dword [edi + 0x1c], eax
push dword [esi + 0xc]
push dword [esi + 8]
call fcn.00546f20
xor eax, dword [esp + 0x48]
mov ecx, 0x38
xor edx, dword [esp + 0x38]
sub ecx, dword [esp + 0x14]
call fcn.00519d00
mov ecx, eax
mov eax, dword [esp + 0x1c]
and eax, 7
mov edx, dword [edi + eax*4 + 0x2c]
mov dword [edi + eax*4 + 0x2c], ecx
jmp 0x4ddc65
push 0xcf1bbcdc
push 0xbf9b0000
push dword [esi + 4]
push dword [esi]
call fcn.00546f20
xor eax, dword [esp + 0x48]
mov ecx, 0x38
xor edx, dword [esp + 0x38]
sub ecx, dword [esp + 0x14]
call fcn.00519d00
mov edx, eax
mov eax, dword [esp + 0x1c]
mov dword [edi + 0x1c], eax
mov eax, dword [esp + 0x3c]
mov ecx, edx
add dword [edi + 0x58], edx
shr ecx, 2
and ecx, 0x3fffffc0
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x24]
add edx, ecx
mov dword [esp + 0x14], 0
mov dword [esp + 0x48], edx
lea eax, [eax + ecx*4]
mov dword [esp + 0x38], 0
mov dword [esp + 0x3c], eax
xor ecx, ecx
mov eax, dword [esp + 0x10]
movzx esi, byte [edx]
movsx eax, al
mov dword [esp + 0x2c], esi
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
pshufd xmm1, xmm0, 0
xorps xmm0, xmm0
movaps xmmword [esp + 0x70], xmm0
movups xmm0, xmmword [edx]
lea edx, [edx + 0x10]
pcmpeqb xmm0, xmm1
pmovmskb eax, xmm0
mov dword [esp + ecx*4 + 0x70], eax
inc ecx
cmp ecx, 4
jl 0x4ddcc5
mov eax, dword [esp + 0x7c]
and esi, 0x3f
cdq
mov edi, eax
mov ecx, edx
mov eax, dword [esp + 0x78]
shld ecx, edi, 0x10
cdq
or ecx, edx
shl edi, 0x10
or edi, eax
mov eax, dword [esp + 0x74]
shld ecx, edi, 0x10
cdq
or ecx, edx
shl edi, 0x10
or edi, eax
mov eax, dword [esp + 0x70]
shld ecx, edi, 0x10
cdq
or ecx, edx
shl edi, 0x10
mov dword [esp + 0x24], ecx
or edi, eax
mov edx, dword [esp + 0x24]
mov ecx, esi
neg ecx
mov eax, edi
and ecx, 0x3f
call fcn.00519d20
mov dword [esp + 0x58], eax
mov ecx, esi
mov dword [esp + 0x30], edx
mov eax, edi
mov edx, dword [esp + 0x24]
call fcn.00519d00
mov esi, dword [esp + 0x58]
mov edi, dword [esp + 0x30]
or esi, eax
or edi, edx
ja 0x4ddd56
test esi, esi
je 0x4ddda7
cmp dword [esp + 0x50], 0
jbe 0x4ddda7
push edi
push esi
call fcn.004d6c70
add eax, dword [esp + 0x34]
add esp, 8
and eax, 0x3f
je 0x4ddd91
mov ecx, dword [esp + 0x3c]
mov ecx, dword [ecx + eax*4]
cmp ecx, dword [esp + 0x4c]
jb 0x4ddda7
mov eax, dword [esp + 0x14]
mov dword [esp + eax*4 + 0x88], ecx
inc eax
dec dword [esp + 0x50]
mov dword [esp + 0x14], eax
mov ecx, esi
mov eax, edi
add ecx, 0xffffffff
adc eax, 0xffffffff
and esi, ecx
and edi, eax
ja 0x4ddd56
jb 0x4ddda7
test esi, esi
jne 0x4ddd56
mov edx, dword [esp + 0x48]
mov esi, 0x3f
mov eax, 0
movzx ecx, byte [edx]
dec ecx
and ecx, 0x3f
cmove eax, esi
mov esi, dword [esp + 0x3c]
add ecx, eax
mov eax, dword [esp + 0x10]
mov byte [edx], cl
mov byte [ecx + edx], al
mov edx, dword [esp + 0x5c]
mov eax, dword [edx + 0x1c]
mov dword [esi + ecx*4], eax
inc dword [edx + 0x1c]
cmp dword [esp + 0x14], 0
jbe 0x4ddef7
xor eax, eax
nop dword [eax + eax]
mov esi, dword [esp + eax*4 + 0x88]
mov edx, dword [esp + 0x64]
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x5c], esi
cmp esi, edx
jb 0x4dde31
mov edi, dword [esp + 0x34]
mov edx, dword [esp + 0x44]
add edi, esi
mov eax, dword [edi + edx - 3]
cmp eax, dword [edx + ecx - 3]
jne 0x4ddece
push dword [esp + 0x40]
mov edx, edi
call fcn.004d6d00
add esp, 4
mov edi, eax
jmp 0x4dde9f
mov edi, dword [esp + 0x54]
mov eax, dword [esi + edi]
cmp eax, dword [ecx]
jne 0x4ddeca
add edi, 4
add esi, edi
lea edi, [ecx + 4]
mov ecx, dword [esp + 0x54]
mov eax, edi
add ecx, edx
mov dword [esp + 0x24], edi
sub eax, esi
mov edx, esi
add eax, ecx
mov ecx, dword [esp + 0x40]
cmp eax, ecx
cmovb ecx, eax
push ecx
mov ecx, edi
call fcn.004d6d00
mov ecx, dword [esp + 0x68]
mov edi, eax
add ecx, dword [esp + 0x58]
add esp, 4
lea eax, [edi + esi]
cmp eax, ecx
jne 0x4dde98
mov ecx, dword [esp + 0x24]
push dword [esp + 0x40]
mov edx, dword [esp + 0x6c]
lea ecx, [edi + ecx]
call fcn.004d6d00
add esp, 4
add edi, eax
mov esi, dword [esp + 0x5c]
add edi, 4
mov edx, dword [esp + 0x44]
cmp edi, edx
jbe 0x4ddece
mov eax, dword [esp + 0x1c]
mov edx, edi
mov ecx, dword [esp + 0x6c]
sub eax, esi
add eax, 3
mov dword [esp + 0x44], edx
mov dword [ecx], eax
mov eax, dword [esp + 0x20]
add eax, edi
cmp eax, dword [esp + 0x40]
je 0x4ddee1
jmp 0x4ddece
mov edx, dword [esp + 0x44]
mov eax, dword [esp + 0x38]
inc eax
mov dword [esp + 0x38], eax
cmp eax, dword [esp + 0x14]
jb 0x4dddf0
mov eax, edx
pop edi
pop esi
mov ecx, dword [esp + 0x184]
xor ecx, esp
call fcn.00519459
mov esp, ebp
pop ebp
ret
mov ecx, dword [esp + 0x18c]
mov eax, 3
pop edi
pop esi
xor ecx, esp
call fcn.00519459
mov esp, ebp
pop ebp
ret