Function at 0x4e9a40
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x17c
mov eax, dword [0x5d60c4]
xor eax, esp
mov dword [esp + 0x178], eax
mov ecx, dword [esp + 0x188]
mov eax, dword [esp + 0x184]
push esi
mov esi, dword [esp + 0x184]
mov dword [esp + 0x64], ecx
mov ecx, dword [esp + 0x190]
mov dword [esp + 0x18], ecx
mov ecx, dword [esi + 0x5c]
mov edx, dword [esi + 0xc]
mov dword [esp + 0x60], ecx
mov ecx, dword [esi + 0x28]
mov dword [esp + 0x5c], ecx
lea ecx, [esi + 0x2c]
push edi
mov dword [esp + 0x30], ecx
mov edi, eax
mov ecx, dword [esi + 0x24]
mov dword [esp + 0x78], ecx
mov ecx, dword [esi + 4]
sub edi, ecx
mov dword [esp + 0x2c], edx
add edx, ecx
mov dword [esp + 0x5c], eax
mov eax, edi
mov dword [esp + 0x50], ecx
mov ecx, dword [esi + 0xb8]
mov dword [esp + 8], edx
mov edx, 1
shl edx, cl
mov ecx, dword [esi + 0x10]
sub eax, ecx
mov dword [esp + 0x74], edi
sub edi, edx
cmp eax, edx
mov dword [esp + 0x6c], esi
mov eax, dword [esi + 0xc4]
mov edx, dword [esi + 0x54]
cmovbe edi, ecx
cmp dword [esi + 0x18], 0
push 0xcf1bbcdc
cmovne edi, ecx
mov dword [esp + 0x38], edx
mov ecx, 4
mov dword [esp + 0x48], edi
cmp eax, ecx
mov dword [esp + 0x1c], edx
push 0xbb000000
cmovb ecx, eax
mov dword [esp + 0x78], 3
mov eax, dword [esi + 0x50]
mov dword [esp + 0x40], eax
mov dword [esp + 0x1c], eax
mov eax, 1
shl eax, cl
mov dword [esp + 0x54], eax
mov eax, dword [esi + 0xb4]
mov dword [esp + 0x44], eax
mov edi, dword [eax + 0x5c]
mov esi, dword [eax + 0x28]
mov eax, dword [esp + 0x64]
mov dword [esp + 0x48], edi
push dword [eax + 4]
push dword [eax]
call fcn.0052c240
mov edi, dword [esp + 0x3c]
mov ecx, 0x38
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], edx
sub ecx, dword [edi + 0x24]
call fcn.0052c220
mov edi, dword [esp + 0x40]
mov dword [esp + 0x24], eax
shr eax, 4
and eax, 0xffffff0
mov dword [esp + 0x40], 0xf
lea ecx, [eax + esi]
lea eax, [edi + eax*4]
mov dword [esp + 0x28], ecx
mov edi, dword [esp + 0x6c]
mov dword [esp + 0x20], eax
cmp dword [edi + 0xdc], 0
jne 0x4e9e08
mov ecx, dword [esp + 0x74]
mov eax, ecx
mov esi, dword [edi + 0x1c]
sub eax, esi
mov dword [esp + 0x7c], esi
cmp eax, 0x180
jbe 0x4e9cf9
lea eax, [esi + 0x60]
mov dword [esp + 0x58], eax
cmp esi, eax
jae 0x4e9c55
mov eax, 0x38
sub eax, dword [esp + 0x78]
mov dword [esp + 0x54], eax
nop dword [eax + eax]
mov eax, dword [esp + 0x50]
push 0xcf1bbcdc
push 0xbb000000
push dword [esi + eax + 0xc]
push dword [esi + eax + 8]
call fcn.0052c240
xor eax, dword [edi + 0x50]
xor edx, dword [edi + 0x54]
mov ecx, dword [esp + 0x54]
call fcn.0052c220
and esi, 7
mov ecx, eax
mov eax, 0
mov edx, dword [edi + esi*4 + 0x2c]
mov dword [edi + esi*4 + 0x2c], ecx
mov esi, edx
shr esi, 4
and esi, 0xffffff0
mov dword [esp + 0x48], edx
mov edx, dword [esp + 0x60]
add edx, esi
movzx ecx, byte [edx]
dec ecx
and ecx, 0xf
cmove eax, dword [esp + 0x40]
add ecx, eax
mov eax, dword [esp + 0x48]
mov byte [edx], cl
mov byte [ecx + edx], al
lea eax, [ecx + esi]
mov ecx, dword [esp + 0x64]
mov esi, dword [esp + 0x7c]
mov dword [ecx + eax*4], esi
inc esi
mov dword [esp + 0x7c], esi
cmp esi, dword [esp + 0x58]
jb 0x4e9bd0
mov esi, dword [esp + 0x74]
mov eax, edi
mov ecx, dword [esp + 0x5c]
add esi, 0xffffffe0
inc ecx
mov dword [esp + 0x7c], esi
mov edx, esi
mov eax, dword [eax + 0x24]
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x50]
add eax, esi
mov dword [esp + 0x54], edx
cmp eax, ecx
jbe 0x4e9c82
xor ecx, ecx
jmp 0x4e9c89
sub ecx, dword [esp + 0x50]
sub ecx, esi
inc ecx
mov eax, 8
cmp ecx, eax
cmova ecx, eax
add ecx, esi
mov dword [esp + 0x48], ecx
cmp esi, ecx
jae 0x4e9cf5
mov eax, 0x38
mov esi, ecx
sub eax, dword [esp + 0x58]
mov dword [esp + 0x58], eax
nop dword [eax]
mov eax, dword [esp + 0x50]
push 0xcf1bbcdc
push 0xbb000000
push dword [edx + eax + 4]
push dword [edx + eax]
call fcn.0052c240
xor eax, dword [edi + 0x50]
xor edx, dword [edi + 0x54]
mov ecx, dword [esp + 0x58]
call fcn.0052c220
mov edx, dword [esp + 0x54]
mov ecx, eax
mov eax, edx
inc edx
and eax, 7
mov dword [esp + 0x54], edx
mov dword [edi + eax*4 + 0x2c], ecx
cmp edx, esi
jb 0x4e9cb0
mov esi, dword [esp + 0x7c]
mov ecx, dword [esp + 0x74]
mov eax, dword [esp + 0x6c]
mov edx, dword [eax + 0x5c]
mov edi, dword [eax + 4]
mov dword [esp + 0x10], edx
mov edx, dword [eax + 0x28]
mov dword [esp + 0x54], edx
mov edx, dword [eax + 0x24]
mov dword [esp + 0x58], edi
mov edi, dword [esp + 0x5c]
cmp esi, ecx
jae 0x4e9dbd
mov edi, dword [esp + 0x6c]
mov eax, 0x38
sub eax, edx
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x58]
push 0xcf1bbcdc
push 0xbb000000
push dword [esi + eax + 0xc]
push dword [esi + eax + 8]
call fcn.0052c240
xor eax, dword [edi + 0x50]
xor edx, dword [edi + 0x54]
mov ecx, dword [esp + 0x48]
call fcn.0052c220
and esi, 7
mov ecx, eax
mov eax, 0
mov edx, dword [edi + esi*4 + 0x2c]
mov dword [edi + esi*4 + 0x2c], ecx
mov esi, edx
shr esi, 4
and esi, 0xffffff0
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0x54]
add edx, esi
movzx ecx, byte [edx]
dec ecx
and ecx, 0xf
cmove eax, dword [esp + 0x40]
add ecx, eax
mov eax, dword [esp + 0x18]
mov byte [edx], cl
mov byte [ecx + edx], al
lea eax, [ecx + esi]
mov ecx, dword [esp + 0x10]
mov esi, dword [esp + 0x7c]
mov dword [ecx + eax*4], esi
inc esi
mov dword [esp + 0x7c], esi
cmp esi, dword [esp + 0x74]
jb 0x4e9d30
mov edi, dword [esp + 0x5c]
mov eax, dword [esp + 0x6c]
mov esi, dword [esp + 0x74]
push 0xcf1bbcdc
push 0xbb000000
mov dword [eax + 0x1c], esi
push dword [edi + 0xc]
push dword [edi + 8]
call fcn.0052c240
xor eax, dword [esp + 0x38]
mov ecx, 0x38
xor edx, dword [esp + 0x34]
sub ecx, dword [esp + 0x78]
call fcn.0052c220
mov edx, dword [esp + 0x30]
mov ecx, eax
mov eax, esi
and eax, 7
mov esi, dword [edx + eax*4]
mov dword [edx + eax*4], ecx
mov edx, esi
mov dword [esp + 0x78], esi
jmp 0x4e9e3c
movq xmm0, qword [esp + 0x14]
mov eax, 0x38
sub eax, dword [esp + 0x78]
movq xmm1, qword [esp + 0xc]
pxor xmm1, xmm0
movd xmm0, eax
mov eax, dword [esp + 0x74]
psrlq xmm1, xmm0
mov dword [edi + 0x1c], eax
mov edi, dword [esp + 0x5c]
movd edx, xmm1
mov dword [esp + 0x78], edx
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x64]
mov dword [esp + 0x7c], 0
add dword [eax + 0x58], edx
mov eax, edx
shr eax, 4
and eax, 0xffffff0
lea ecx, [ecx + eax*4]
mov dword [esp + 0x64], ecx
mov ecx, dword [esp + 0x60]
add ecx, eax
mov dword [esp + 0x60], 0
mov dword [esp + 0x38], ecx
movzx eax, byte [ecx]
mov esi, eax
mov dword [esp + 0x34], eax
movsx eax, dl
and esi, 0xf
mov dword [esp + 0x30], esi
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
pshufd xmm1, xmm0, 0
movups xmm0, xmmword [ecx]
mov ecx, esi
neg ecx
pcmpeqb xmm0, xmm1
and ecx, 0xf
pmovmskb edx, xmm0
mov ax, dx
shl ax, cl
mov cx, si
shr dx, cl
or ax, dx
movzx eax, ax
cdq
mov esi, eax
test edx, edx
jne 0x4e9ec5
test esi, esi
je 0x4e9f28
mov edi, dword [esp + 0x4c]
nop dword [eax]
test edi, edi
je 0x4e9f20
test esi, esi
jne 0x4e9ee0
bsf eax, edx
add eax, 0x20
jmp 0x4e9ee3
bsf eax, esi
add eax, dword [esp + 0x30]
and eax, 0xf
je 0x4e9f0a
mov ecx, dword [esp + 0x64]
mov ecx, dword [ecx + eax*4]
cmp ecx, dword [esp + 0x44]
jb 0x4e9f20
mov eax, dword [esp + 0x7c]
mov dword [esp + eax*4 + 0x80], ecx
inc eax
mov dword [esp + 0x7c], eax
dec edi
mov ecx, esi
mov eax, edx
add ecx, 0xffffffff
adc eax, 0xffffffff
and esi, ecx
and edx, eax
ja 0x4e9ed0
jb 0x4e9f20
test esi, esi
jne 0x4e9ed0
mov dword [esp + 0x4c], edi
mov edi, dword [esp + 0x5c]
mov ecx, dword [esp + 0x34]
mov edx, 0xf
mov esi, dword [esp + 0x64]
dec ecx
and ecx, 0xf
mov eax, 0
cmove eax, edx
mov edx, dword [esp + 0x38]
add ecx, eax
mov eax, dword [esp + 0x78]
mov byte [edx], cl
mov byte [ecx + edx], al
mov edx, dword [esp + 0x6c]
mov eax, dword [edx + 0x1c]
mov dword [esi + ecx*4], eax
inc dword [edx + 0x1c]
cmp dword [esp + 0x7c], 0
jbe 0x4ea035
mov ecx, 3
xor eax, eax
nop
mov eax, dword [esp + eax*4 + 0x80]
mov edx, dword [esp + 0x50]
add edx, eax
mov dword [esp + 0x44], eax
mov eax, dword [edx + ecx - 3]
cmp eax, dword [ecx + edi - 3]
jne 0x4ea022
mov esi, dword [esp + 0x68]
mov eax, edi
add esi, 0xfffffffd
cmp edi, esi
jae 0x4e9fd4
mov eax, dword [edx]
xor eax, dword [edi]
je 0x4e9fae
mov esi, dword [esp + 0x68]
bsf ecx, eax
shr ecx, 3
jmp 0x4e9ffc
lea eax, [edi + 4]
add edx, 4
cmp eax, esi
jae 0x4e9fd4
nop dword [eax + eax]
mov ecx, dword [eax]
xor ecx, dword [edx]
jne 0x4ea0ca
add eax, 4
add edx, 4
cmp eax, esi
jb 0x4e9fc0
mov esi, dword [esp + 0x68]
lea ecx, [esi - 1]
cmp eax, ecx
jae 0x4e9fed
mov cx, word [edx]
cmp cx, word [eax]
jne 0x4e9fed
add eax, 2
add edx, 2
cmp eax, esi
jae 0x4e9ff8
mov cl, byte [edx]
cmp cl, byte [eax]
jne 0x4e9ff8
inc eax
mov ecx, eax
sub ecx, edi
cmp ecx, dword [esp + 0x70]
jbe 0x4ea01e
mov eax, dword [esp + 0x74]
sub eax, dword [esp + 0x44]
mov edx, dword [esp + 0x1c]
add eax, 3
mov dword [esp + 0x70], ecx
mov dword [edx], eax
lea eax, [ecx + edi]
cmp eax, esi
je 0x4ea035
mov ecx, dword [esp + 0x70]
mov eax, dword [esp + 0x60]
inc eax
mov dword [esp + 0x60], eax
cmp eax, dword [esp + 0x7c]
jb 0x4e9f70
mov edx, dword [esp + 0x3c]
mov dword [esp + 0x78], 0
mov dword [esp + 0x64], 0
mov ecx, dword [edx + 4]
mov eax, dword [edx]
mov dword [esp + 0x44], ecx
sub ecx, eax
add dword [esp + 0x2c], ecx
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x24]
movsx eax, al
movzx esi, byte [ecx]
and esi, 0xf
mov dword [esp + 0x28], esi
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
pshufd xmm1, xmm0, 0
movups xmm0, xmmword [ecx]
mov ecx, esi
neg ecx
pcmpeqb xmm0, xmm1
and ecx, 0xf
pmovmskb edx, xmm0
mov ax, dx
shl ax, cl
mov cx, si
shr dx, cl
or ax, dx
movzx eax, ax
cdq
mov esi, eax
test edx, edx
jne 0x4ea0b5
test esi, esi
je 0x4ea1f4
xor edi, edi
cmp dword [esp + 0x4c], 0
je 0x4ea123
test esi, esi
jne 0x4ea0dd
bsf eax, edx
add eax, 0x20
jmp 0x4ea0e0
mov esi, dword [esp + 0x68]
bsf ecx, ecx
shr ecx, 3
sub ecx, edi
add ecx, eax
jmp 0x4e9ffc
bsf eax, esi
add eax, dword [esp + 0x28]
mov edi, dword [esp + 0x78]
and eax, 0xf
je 0x4ea10d
mov ecx, dword [esp + 0x20]
mov eax, dword [ecx + eax*4]
mov ecx, dword [esp + 0x3c]
cmp eax, dword [ecx + 0xc]
jb 0x4ea123
mov dword [esp + edi*4 + 0x80], eax
inc edi
dec dword [esp + 0x4c]
mov dword [esp + 0x78], edi
mov ecx, esi
mov eax, edx
add ecx, 0xffffffff
adc eax, 0xffffffff
and esi, ecx
and edx, eax
ja 0x4ea0b7
jb 0x4ea123
test esi, esi
jne 0x4ea0b7
test edi, edi
mov edi, dword [esp + 0x5c]
je 0x4ea1f4
xor eax, eax
mov eax, dword [esp + eax*4 + 0x80]
mov esi, dword [esp + 0x44]
add esi, eax
mov dword [esp + 0x24], eax
mov eax, dword [esi]
cmp eax, dword [edi]
jne 0x4ea1c4
mov ecx, dword [esp + 0x68]
lea eax, [edi + 4]
add esi, 4
sub eax, esi
add eax, dword [esp + 0x60]
cmp eax, ecx
cmovb ecx, eax
lea eax, [edi + 4]
push ecx
push esi
push eax
call fcn.00502270
add esp, 0xc
mov dword [esp + 0x20], eax
lea ecx, [eax + esi]
cmp ecx, dword [esp + 0x60]
jne 0x4ea193
mov esi, dword [esp + 0x68]
add eax, 4
push esi
push dword [esp + 0xc]
add eax, edi
push eax
call fcn.00502270
add esp, 0xc
add eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x70]
lea edx, [eax + 4]
cmp edx, ecx
jbe 0x4ea1c8
mov eax, dword [esp + 0x74]
mov ecx, edx
sub eax, dword [esp + 0x24]
sub eax, dword [esp + 0x2c]
mov esi, dword [esp + 0x1c]
add eax, 3
mov dword [esp + 0x70], ecx
mov dword [esi], eax
lea eax, [edx + edi]
cmp eax, dword [esp + 0x68]
je 0x4ea1db
jmp 0x4ea1c8
mov ecx, dword [esp + 0x70]
mov eax, dword [esp + 0x64]
inc eax
mov dword [esp + 0x64], eax
cmp eax, dword [esp + 0x78]
jb 0x4ea131
pop edi
mov eax, ecx
pop esi
mov ecx, dword [esp + 0x178]
xor ecx, esp
call fcn.0052b789
add esp, 0x17c
ret
mov ecx, dword [esp + 0x180]
mov eax, dword [esp + 0x70]
pop edi
pop esi
xor ecx, esp
call fcn.0052b789
add esp, 0x17c
ret