Function at 0x4ea0d0
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x188
mov eax, dword [0x5b3480]
xor eax, esp
mov dword [esp + 0x184], eax
mov eax, dword [ebp + 0x10]
mov dword [esp + 0x18], eax
mov eax, dword [ebp + 0x14]
mov dword [esp + 0x64], eax
push esi
mov esi, dword [ebp + 8]
push edi
mov edi, dword [ebp + 0xc]
mov dword [esp + 0x14], edi
mov eax, dword [esi + 0x5c]
mov ecx, dword [esi + 4]
mov edx, dword [esi + 8]
mov dword [esp + 0x34], eax
mov eax, dword [esi + 0x28]
mov dword [esp + 0x38], eax
lea eax, [esi + 0x2c]
mov dword [esp + 0x1c], eax
mov eax, dword [esi + 0x24]
mov dword [esp + 0x28], eax
mov eax, dword [esi + 0xc]
mov dword [esp + 0x48], eax
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x4c], edx
mov edx, 1
lea edi, [eax + ecx]
mov dword [esp + 0x10], esi
mov eax, dword [esp + 0x14]
sub eax, ecx
mov dword [esp + 0x68], edi
mov ecx, dword [esi + 0xb8]
mov dword [esp + 0x18], eax
mov edi, dword [esp + 0x18]
shl edx, cl
mov ecx, dword [esi + 0x10]
sub edi, edx
sub eax, ecx
mov dword [esp + 0x24], 3
cmp eax, edx
mov dword [esp + 0x5c], 0x3f
mov eax, edi
mov edi, dword [esp + 0x14]
cmovbe eax, ecx
cmp dword [esi + 0x18], 0
cmovne eax, ecx
mov ecx, 6
mov dword [esp + 0x44], eax
mov eax, dword [esi + 0xc4]
cmp eax, ecx
cmovb ecx, eax
mov eax, dword [esi + 0x50]
mov dword [esp + 0x30], eax
mov eax, 1
shl eax, cl
mov ecx, esi
mov dword [esp + 0x60], eax
cmp dword [ecx + 0xdc], 0
jne 0x4ea3c8
mov esi, dword [ecx + 0x1c]
mov edx, 0x18
mov eax, dword [esp + 0x18]
sub eax, esi
mov dword [esp + 0xc], esi
cmp eax, 0x180
jbe 0x4ea2ea
lea eax, [esi + 0x60]
mov dword [esp + 0x54], eax
cmp esi, eax
jae 0x4ea26a
mov edi, dword [esp + 0xc]
mov esi, edx
sub esi, dword [esp + 0x28]
mov dword [esp + 0x3c], esi
mov eax, dword [ecx + 0x54]
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0x2c]
imul edx, dword [eax + edi + 8], 0x9e3779b1
mov eax, edi
and eax, 7
xor edx, dword [ecx + 0x50]
mov ecx, esi
mov esi, dword [esp + 0x1c]
shr edx, cl
mov ecx, dword [esi + eax*4]
mov dword [esi + eax*4], edx
mov esi, ecx
mov edx, dword [esp + 0x38]
mov eax, 0
shr esi, 2
and esi, 0x3fffffc0
mov dword [esp + 0xc], ecx
add edx, esi
movzx ecx, byte [edx]
dec ecx
and ecx, 0x3f
cmove eax, dword [esp + 0x5c]
add ecx, eax
mov eax, dword [esp + 0xc]
mov byte [edx], cl
mov byte [ecx + edx], al
lea eax, [ecx + esi]
mov ecx, dword [esp + 0x34]
mov esi, dword [esp + 0x3c]
mov dword [ecx + eax*4], edi
inc edi
mov ecx, dword [esp + 0x10]
cmp edi, dword [esp + 0x54]
jb 0x4ea1f3
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
lea edx, [edi + 1]
mov eax, dword [esp + 0x2c]
add esi, 0xffffffe0
add eax, esi
mov dword [esp + 0xc], esi
cmp eax, edx
jbe 0x4ea286
xor edx, edx
jmp 0x4ea28d
sub edx, dword [esp + 0x2c]
sub edx, esi
inc edx
mov eax, 8
cmp edx, eax
cmova edx, eax
add edx, esi
mov dword [esp + 0x3c], edx
cmp esi, edx
jae 0x4ea2e5
mov eax, 0x18
mov edi, edx
sub eax, dword [ecx + 0x24]
mov dword [esp + 0x40], eax
nop
mov eax, dword [ecx + 0x54]
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0x2c]
imul edx, dword [esi + eax], 0x9e3779b1
mov eax, esi
and eax, 7
inc esi
xor edx, dword [ecx + 0x50]
mov ecx, dword [esp + 0x40]
shr edx, cl
mov ecx, dword [esp + 0x10]
mov dword [ecx + eax*4 + 0x2c], edx
cmp esi, edi
jb 0x4ea2b0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0xc]
mov edx, 0x18
mov eax, dword [ecx + 0x5c]
mov dword [esp + 0x50], eax
mov eax, dword [ecx + 0x28]
mov dword [esp + 0x3c], eax
mov eax, dword [ecx + 4]
mov dword [esp + 0x40], eax
cmp esi, dword [esp + 0x18]
jae 0x4ea390
mov edi, dword [esp + 0xc]
mov esi, edx
sub esi, dword [ecx + 0x24]
mov dword [esp + 0x70], esi
nop word [eax + eax]
mov eax, dword [esp + 0x40]
imul edx, dword [eax + edi + 8], 0x9e3779b1
mov eax, edi
and eax, 7
xor edx, dword [ecx + 0x50]
mov ecx, esi
mov esi, dword [esp + 0x1c]
shr edx, cl
mov ecx, dword [esi + eax*4]
mov dword [esi + eax*4], edx
mov esi, ecx
mov edx, dword [esp + 0x3c]
mov eax, 0
shr esi, 2
and esi, 0x3fffffc0
mov dword [esp + 0x54], ecx
add edx, esi
movzx ecx, byte [edx]
dec ecx
and ecx, 0x3f
cmove eax, dword [esp + 0x5c]
add ecx, eax
mov eax, dword [esp + 0x54]
mov byte [edx], cl
mov byte [ecx + edx], al
lea eax, [ecx + esi]
mov ecx, dword [esp + 0x50]
mov esi, dword [esp + 0x70]
mov dword [ecx + eax*4], edi
inc edi
mov ecx, dword [esp + 0x10]
cmp edi, dword [esp + 0x18]
jb 0x4ea320
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov eax, esi
mov dword [ecx + 0x1c], esi
mov ecx, 0x18
imul edx, dword [edi + 8], 0x9e3779b1
sub ecx, dword [esp + 0x28]
mov esi, dword [esp + 0x1c]
xor edx, dword [esp + 0x30]
shr edx, cl
and eax, 7
mov ecx, dword [esi + eax*4]
mov dword [esi + eax*4], edx
mov edx, ecx
mov eax, dword [esp + 0x10]
mov dword [esp + 0x1c], ecx
jmp 0x4ea3ea
imul edx, dword [edi], 0x9e3779b1
mov ecx, 0x18
sub ecx, dword [esp + 0x28]
mov eax, esi
xor edx, dword [esp + 0x30]
shr edx, cl
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x1c], edx
mov dword [eax + 0x1c], ecx
add dword [eax + 0x58], edx
mov eax, edx
mov ecx, dword [esp + 0x34]
xor edx, edx
mov edi, dword [esp + 0x38]
shr eax, 2
and eax, 0x3fffffc0
mov dword [esp + 0x28], edx
add edi, eax
mov dword [esp + 0xc], 0
mov dword [esp + 0x40], edi
mov edx, edi
lea ecx, [ecx + eax*4]
mov eax, dword [esp + 0x1c]
movzx esi, byte [edi]
movsx eax, al
mov dword [esp + 0x30], ecx
xor ecx, ecx
mov dword [esp + 0x34], esi
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
pshufd xmm1, xmm0, 0
xorps xmm0, xmm0
movaps xmmword [esp + 0x70], xmm0
movups xmm0, xmmword [edx]
lea edx, [edx + 0x10]
pcmpeqb xmm0, xmm1
pmovmskb eax, xmm0
mov dword [esp + ecx*4 + 0x70], eax
inc ecx
cmp ecx, 4
jl 0x4ea445
mov eax, dword [esp + 0x7c]
and esi, 0x3f
cdq
mov edi, eax
mov ecx, edx
mov eax, dword [esp + 0x78]
shld ecx, edi, 0x10
cdq
or ecx, edx
shl edi, 0x10
or edi, eax
mov eax, dword [esp + 0x74]
shld ecx, edi, 0x10
cdq
or ecx, edx
shl edi, 0x10
or edi, eax
mov eax, dword [esp + 0x70]
shld ecx, edi, 0x10
cdq
or ecx, edx
shl edi, 0x10
mov dword [esp + 0x38], ecx
or edi, eax
mov edx, dword [esp + 0x38]
mov ecx, esi
neg ecx
mov eax, edi
and ecx, 0x3f
call fcn.00491da0
mov dword [esp + 0x70], eax
mov ecx, esi
mov dword [esp + 0x50], edx
mov eax, edi
mov edx, dword [esp + 0x38]
call fcn.00491dc0
mov esi, dword [esp + 0x70]
mov edi, dword [esp + 0x50]
or esi, eax
or edi, edx
ja 0x4ea4d6
test esi, esi
je 0x4ea530
mov edx, dword [esp + 0x60]
nop word [eax + eax]
test edx, edx
je 0x4ea530
test esi, esi
jne 0x4ea4f0
bsf eax, edi
add eax, 0x20
jmp 0x4ea4f3
bsf eax, esi
add eax, dword [esp + 0x34]
and eax, 0x3f
je 0x4ea51a
mov ecx, dword [esp + 0x30]
mov eax, dword [ecx + eax*4]
cmp eax, dword [esp + 0x44]
jb 0x4ea530
mov ecx, dword [esp + 0xc]
mov dword [esp + ecx*4 + 0x88], eax
inc ecx
mov dword [esp + 0xc], ecx
dec edx
mov ecx, esi
mov eax, edi
add ecx, 0xffffffff
adc eax, 0xffffffff
and esi, ecx
and edi, eax
ja 0x4ea4e0
jb 0x4ea530
test esi, esi
jne 0x4ea4e0
mov ecx, dword [esp + 0x34]
mov edx, 0x3f
mov esi, dword [esp + 0x30]
dec ecx
and ecx, 0x3f
mov eax, 0
cmove eax, edx
mov edx, dword [esp + 0x40]
add ecx, eax
mov eax, dword [esp + 0x1c]
mov byte [edx], cl
mov byte [ecx + edx], al
mov edx, dword [esp + 0x10]
mov eax, dword [edx + 0x1c]
mov dword [esi + ecx*4], eax
inc dword [edx + 0x1c]
cmp dword [esp + 0xc], 0
jbe 0x4ea711
mov edx, dword [esp + 0xc]
xor eax, eax
nop word [eax + eax]
mov eax, dword [esp + eax*4 + 0x88]
mov edi, dword [esp + 0x14]
cmp eax, dword [esp + 0x48]
jb 0x4ea62d
mov edx, dword [esp + 0x2c]
mov ecx, dword [esp + 0x24]
add edx, eax
mov eax, dword [edx + ecx - 3]
cmp eax, dword [ecx + edi - 3]
jne 0x4ea6e6
mov esi, dword [esp + 0x20]
mov eax, edi
add esi, 0xfffffffd
cmp edi, esi
jae 0x4ea5f0
mov eax, dword [edx]
xor eax, dword [edi]
je 0x4ea5cf
mov esi, dword [esp + 0x20]
bsf ecx, eax
shr ecx, 3
jmp 0x4ea69d
lea eax, [edi + 4]
add edx, 4
cmp eax, esi
jae 0x4ea5f0
nop dword [eax]
mov ecx, dword [edx]
xor ecx, dword [eax]
jne 0x4ea61d
add eax, 4
add edx, 4
cmp eax, esi
jb 0x4ea5e0
mov esi, dword [esp + 0x20]
lea ecx, [esi - 1]
cmp eax, ecx
jae 0x4ea609
mov cx, word [edx]
cmp cx, word [eax]
jne 0x4ea609
add eax, 2
add edx, 2
cmp eax, esi
jae 0x4ea614
mov cl, byte [edx]
cmp cl, byte [eax]
jne 0x4ea614
inc eax
mov ecx, eax
sub ecx, edi
jmp 0x4ea69d
mov esi, dword [esp + 0x20]
bsf ecx, ecx
shr ecx, 3
sub ecx, edi
add ecx, eax
jmp 0x4ea69d
mov esi, dword [esp + 0x4c]
add esi, eax
mov eax, dword [esi]
cmp eax, dword [edi]
jne 0x4ea6dc
mov ecx, dword [esp + 0x48]
lea eax, [edi + 4]
add ecx, dword [esp + 0x4c]
add esi, 4
sub eax, esi
add eax, ecx
mov ecx, dword [esp + 0x20]
cmp eax, ecx
cmovb ecx, eax
mov eax, edi
push ecx
add eax, 4
push esi
push eax
call fcn.004d5c50
mov edx, dword [esp + 0x54]
mov ecx, eax
add edx, dword [esp + 0x58]
add esp, 0xc
mov dword [esp + 0x60], ecx
lea eax, [ecx + esi]
mov esi, dword [esp + 0x20]
cmp eax, edx
jne 0x4ea69a
push esi
push dword [esp + 0x6c]
lea eax, [edi + 4]
add eax, ecx
push eax
call fcn.004d5c50
mov ecx, dword [esp + 0x6c]
add esp, 0xc
add ecx, eax
add ecx, 4
cmp ecx, dword [esp + 0x24]
jbe 0x4ea6e2
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x18]
mov dword [esp + 0x24], ecx
sub eax, dword [esp + edx*4 + 0x88]
mov edx, dword [esp + 0x6c]
add eax, 3
mov dword [edx], eax
lea eax, [ecx + edi]
cmp eax, esi
jne 0x4ea6e2
mov eax, ecx
pop edi
pop esi
mov ecx, dword [esp + 0x184]
xor ecx, esp
call fcn.004913e0
mov esp, ebp
pop ebp
ret
mov ecx, dword [esp + 0x24]
jmp 0x4ea6ea
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0xc]
mov eax, dword [esp + 0x28]
inc eax
mov dword [esp + 0x28], eax
cmp eax, edx
jb 0x4ea580
mov eax, ecx
pop edi
pop esi
mov ecx, dword [esp + 0x184]
xor ecx, esp
call fcn.004913e0
mov esp, ebp
pop ebp
ret
mov ecx, dword [esp + 0x18c]
mov eax, 3
pop edi
pop esi
xor ecx, esp
call fcn.004913e0
mov esp, ebp
pop ebp
ret