Function at 0x49ee00
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
mov eax, 0x34
call fcn.00578a80
push ebx
mov ebx, dword [esp + 0x4c]
mov eax, ebx
push ebp
shl eax, 4
push esi
add eax, 6
mov dword [esp + 0x30], 0
xor esi, esi
mov dword [esp + 0x14], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x1c], ebx
push edi
cmp eax, 0x1555555
ja 0x49f5bd
imul edi, ebx, 0x600
push 0x27c
push str.cryptoececp_nistz256.c
lea eax, [edi + 0x220]
push eax
call fcn.0045da20
mov ebp, eax
add esp, 0xc
mov dword [esp + 0x10], ebp
test ebp, ebp
je 0x49f5bb
mov eax, ebx
push 0x27e
shl eax, 5
add eax, ebx
push str.cryptoececp_nistz256.c
push eax
call fcn.0045da20
mov esi, eax
add esp, 0xc
mov dword [esp + 0x18], esi
test esi, esi
je 0x49f5b7
push 0x27f
lea eax, [ebx*4]
push str.cryptoececp_nistz256.c
push eax
call fcn.0045da20
mov edx, eax
add esp, 0xc
mov dword [esp + 0x2c], edx
test edx, edx
je 0x49f5b7
mov eax, ebp
mov dword [esp + 0x28], 0
and eax, 0x3f
mov ecx, ebp
sub ecx, eax
add ecx, 0x40
add edi, ecx
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x14], edi
test ebx, ebx
je 0x49f1ea
mov ebp, dword [esp + 0x50]
lea eax, [esi + 2]
mov ebx, dword [esp + 0x5c]
mov dword [esp + 0x38], eax
mov eax, edx
sub eax, ebp
mov dword [esp + 0x24], 0
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x54]
sub eax, ebp
mov dword [esp + 0x30], ebp
mov dword [esp + 0x58], ecx
mov dword [esp + 0x40], eax
push dword [ebp]
call fcn.004607c0
add esp, 4
cmp eax, 0x100
jg 0x49ef3d
push dword [ebp]
call fcn.00460500
add esp, 4
test eax, eax
jne 0x49ef3d
mov esi, dword [ebp]
jmp 0x49ef6c
push ebx
call fcn.0049ab90
mov esi, eax
add esp, 4
test esi, esi
je 0x49f54c
mov eax, dword [esp + 0x48]
push ebx
push dword [eax + 8]
push dword [ebp]
push esi
call fcn.004dabd0
add esp, 0x10
test eax, eax
je 0x49f595
mov eax, dword [esp + 0x28]
xor ebx, ebx
mov ecx, dword [esp + 0x2c]
push esi
mov dword [ecx + eax*4], esi
call fcn.0045fdb0
shl eax, 2
add esp, 4
test eax, eax
jle 0x49efe6
mov esi, dword [esp + 0x38]
add esi, dword [esp + 0x24]
mov edi, dword [esp + 0x3c]
push dword [edi + ebp]
call fcn.00454ee0
mov ecx, ebx
test ecx, ecx
jns 0x49efa6
add ecx, 3
sar ecx, 2
mov ecx, dword [eax + ecx*4]
lea esi, [esi + 4]
mov eax, ecx
mov byte [esi - 6], cl
shr eax, 8
add ebx, 4
mov byte [esi - 5], al
mov eax, ecx
shr eax, 0x10
shr ecx, 0x18
mov byte [esi - 4], al
mov byte [esi - 3], cl
push dword [edi + ebp]
call fcn.0045fdb0
shl eax, 2
add esp, 8
cmp ebx, eax
jl 0x49ef95
mov edi, dword [esp + 0x14]
cmp ebx, 0x21
jge 0x49f003
mov ecx, dword [esp + 0x24]
mov eax, 0x21
sub eax, ebx
add ecx, ebx
add ecx, dword [esp + 0x18]
push eax
push 0
push ecx
call fcn.00579cd0
add esp, 0xc
mov ebx, dword [esp + 0x40]
push 8
mov eax, dword [ebx + ebp]
push dword [eax + 8]
push edi
call fcn.004a66c0
add esp, 0xc
test eax, eax
je 0x49f522
mov eax, dword [ebx + ebp]
lea ecx, [edi + 0x20]
push 8
push dword [eax + 0xc]
push ecx
call fcn.004a66c0
add esp, 0xc
test eax, eax
je 0x49f522
mov eax, dword [ebx + ebp]
push 8
push dword [eax + 0x10]
lea eax, [edi + 0x40]
push eax
call fcn.004a66c0
add esp, 0xc
test eax, eax
je 0x49f522
mov esi, dword [esp + 0x58]
push 1
push edi
push esi
call fcn.00432080
lea ebp, [edi + 0x60]
push edi
push ebp
call fcn.00432560
push 2
push ebp
push esi
call fcn.00432080
push edi
lea ebx, [edi + 0xc0]
push ebp
push ebx
call fcn.00432760
push 3
push ebx
push esi
call fcn.00432080
push ebp
push ebp
call fcn.00432560
add esp, 0x40
push 4
push ebp
push esi
call fcn.00432080
push ebx
push ebx
call fcn.00432560
push 6
push ebx
push esi
call fcn.00432080
push dword [esp + 0x34]
add edi, 0x120
push ebp
push edi
call fcn.00432760
push 5
push edi
push esi
call fcn.00432080
mov eax, dword [esp + 0x4c]
push eax
push ebx
lea esi, [eax + 0x180]
push esi
call fcn.00432760
add esp, 0x44
push 7
push esi
push dword [esp + 0x60]
call fcn.00432080
push ebp
push ebp
call fcn.00432560
push 8
push ebp
push dword [esp + 0x74]
call fcn.00432080
push ebx
push ebx
call fcn.00432560
push 0xc
push ebx
push dword [esp + 0x88]
call fcn.00432080
push edi
push edi
call fcn.00432560
push 0xa
push edi
push dword [esp + 0x9c]
call fcn.00432080
add esp, 0x48
push esi
push esi
call fcn.00432560
push 0xe
push esi
push dword [esp + 0x68]
call fcn.00432080
push dword [esp + 0x28]
push ebx
push ebx
call fcn.00432760
push 0xd
push ebx
push dword [esp + 0x80]
call fcn.00432080
push dword [esp + 0x40]
push edi
push edi
call fcn.00432760
push 0xb
push edi
push dword [esp + 0x98]
call fcn.00432080
mov edi, dword [esp + 0x58]
add esp, 0x44
push edi
push esi
push esi
call fcn.00432760
push 0xf
push esi
mov esi, dword [esp + 0x6c]
push esi
call fcn.00432080
push edi
push ebp
push ebx
call fcn.00432760
push 9
push ebx
push esi
call fcn.00432080
push ebp
push ebp
call fcn.00432560
push 0x10
push ebp
push esi
call fcn.00432080
mov eax, dword [esp + 0x6c]
add esi, 0x600
mov ebp, dword [esp + 0x74]
inc eax
add dword [esp + 0x68], 0x21
add ebp, 4
mov ebx, dword [esp + 0xa0]
add esp, 0x44
mov dword [esp + 0x28], eax
mov dword [esp + 0x58], esi
mov dword [esp + 0x30], ebp
cmp eax, dword [esp + 0x20]
jb 0x49ef17
mov eax, dword [esp + 0x18]
lea ebp, [edi + 0x20]
mov esi, 0xff
mov dword [esp + 0x24], esi
movzx ecx, byte [eax + 0x1f]
shr ecx, 6
mov eax, ecx
and ecx, 1
shr eax, 1
add eax, ecx
push eax
push dword [esp + 0x20]
push edi
call fcn.004320d0
movups xmm0, xmmword [edi]
mov ebx, dword [esp + 0x58]
add esp, 0xc
movups xmmword [ebx], xmm0
movups xmm0, xmmword [edi + 0x10]
movups xmmword [ebx + 0x10], xmm0
movups xmm0, xmmword [edi + 0x20]
movups xmmword [ebx + 0x20], xmm0
movups xmm0, xmmword [edi + 0x30]
movups xmmword [ebx + 0x30], xmm0
movups xmm0, xmmword [edi + 0x40]
movups xmmword [ebx + 0x40], xmm0
movups xmm0, xmmword [edi + 0x50]
movups xmmword [ebx + 0x50], xmm0
nop word [eax + eax]
mov ecx, dword [esp + 0x20]
xor eax, eax
cmp esi, 0xff
sete al
cmp eax, ecx
jae 0x49f3c7
lea edx, [esi - 1]
mov esi, edx
shr edx, 3
and esi, 7
mov dword [esp + 0x40], edx
mov dword [esp + 0x3c], esi
mov edx, eax
imul esi, eax, 0x600
shl edx, 5
add edx, eax
mov dword [esp + 0x30], edx
add esi, dword [esp + 0x1c]
sub ecx, eax
mov dword [esp + 0x58], esi
mov dword [esp + 0x28], ecx
nop dword [eax]
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x18]
add eax, edx
movzx esi, byte [eax + ecx + 1]
movzx eax, byte [eax + ecx]
mov ecx, dword [esp + 0x3c]
shl esi, 8
or esi, eax
shr esi, cl
mov ecx, 0x3f
and esi, 0x3f
mov eax, esi
sub ecx, esi
shr eax, 5
dec eax
mov edx, eax
and eax, esi
not edx
and ecx, edx
and edx, 1
or ecx, eax
mov eax, ecx
and ecx, 1
shr eax, 1
add eax, ecx
lea esi, [edx + eax*2]
mov eax, esi
shr eax, 1
push eax
push dword [esp + 0x5c]
push edi
call fcn.004320d0
lea eax, [edi + 0x80]
push ebp
push eax
call fcn.004313a0
mov ecx, dword [ebp]
and esi, 1
mov eax, dword [edi + 0x80]
neg esi
and eax, esi
mov edx, esi
not edx
and ecx, edx
xor ecx, eax
mov dword [ebp], ecx
mov ecx, dword [edi + 0x84]
mov eax, dword [ebp + 4]
and ecx, esi
and eax, edx
xor ecx, eax
mov eax, edx
mov dword [ebp + 4], ecx
and eax, dword [ebp + 8]
mov ecx, dword [edi + 0x88]
and ecx, esi
xor ecx, eax
mov dword [ebp + 8], ecx
mov ecx, dword [edi + 0x8c]
mov eax, dword [ebp + 0xc]
and ecx, esi
and eax, edx
xor ecx, eax
mov dword [ebp + 0xc], ecx
mov ecx, dword [ebp + 0x10]
mov eax, dword [edi + 0x90]
and ecx, edx
and eax, esi
xor ecx, eax
mov eax, esi
mov dword [ebp + 0x10], ecx
and eax, dword [edi + 0x94]
mov ecx, dword [ebp + 0x14]
and ecx, edx
xor ecx, eax
mov eax, edx
mov dword [ebp + 0x14], ecx
mov ecx, dword [edi + 0x98]
and eax, dword [ebp + 0x18]
and ecx, esi
xor ecx, eax
mov dword [ebp + 0x18], ecx
mov eax, dword [ebp + 0x1c]
and esi, dword [edi + 0x9c]
and eax, edx
push edi
xor eax, esi
push ebx
push ebx
mov dword [ebp + 0x1c], eax
call fcn.00432760
mov edx, dword [esp + 0x50]
add esp, 0x20
add dword [esp + 0x58], 0x600
add edx, 0x21
sub dword [esp + 0x28], 1
mov dword [esp + 0x30], edx
jne 0x49f2a0
mov esi, dword [esp + 0x24]
push ebx
sub esi, 5
push ebx
mov dword [esp + 0x2c], esi
call fcn.00432560
push ebx
push ebx
call fcn.00432560
push ebx
push ebx
call fcn.00432560
push ebx
push ebx
call fcn.00432560
push ebx
push ebx
call fcn.00432560
add esp, 0x28
cmp esi, 5
jae 0x49f250
cmp dword [esp + 0x20], 0
jbe 0x49f518
mov eax, dword [esp + 0x18]
mov dword [esp + 0x58], eax
movzx edx, byte [eax]
mov ecx, 0x3f
and edx, 0x1f
add edx, edx
mov eax, edx
sub ecx, edx
shr eax, 5
dec eax
mov esi, eax
and eax, edx
not esi
and ecx, esi
and esi, 1
or ecx, eax
mov eax, ecx
and ecx, 1
shr eax, 1
add eax, ecx
lea esi, [esi + eax*2]
mov eax, esi
shr eax, 1
push eax
push dword [esp + 0x20]
push edi
call fcn.004320d0
lea eax, [edi + 0x80]
push ebp
push eax
call fcn.004313a0
mov ecx, dword [ebp]
and esi, 1
mov eax, dword [edi + 0x80]
neg esi
and eax, esi
mov edx, esi
not edx
and ecx, edx
xor ecx, eax
mov dword [ebp], ecx
mov ecx, edx
and ecx, dword [ebp + 4]
mov eax, dword [edi + 0x84]
and eax, esi
xor ecx, eax
mov eax, esi
mov dword [ebp + 4], ecx
mov ecx, edx
and ecx, dword [ebp + 8]
and eax, dword [edi + 0x88]
xor ecx, eax
mov eax, esi
mov dword [ebp + 8], ecx
mov ecx, edx
and ecx, dword [ebp + 0xc]
and eax, dword [edi + 0x8c]
xor ecx, eax
mov dword [ebp + 0xc], ecx
mov ecx, dword [ebp + 0x10]
mov eax, dword [edi + 0x90]
and ecx, edx
and eax, esi
xor ecx, eax
mov dword [ebp + 0x10], ecx
mov ecx, dword [ebp + 0x14]
mov eax, dword [edi + 0x94]
and ecx, edx
and eax, esi
xor ecx, eax
mov eax, esi
mov dword [ebp + 0x14], ecx
mov ecx, edx
and ecx, dword [ebp + 0x18]
and eax, dword [edi + 0x98]
xor ecx, eax
mov dword [ebp + 0x18], ecx
and edx, dword [ebp + 0x1c]
and esi, dword [edi + 0x9c]
xor edx, esi
push edi
mov dword [ebp + 0x1c], edx
push ebx
push ebx
call fcn.00432760
mov eax, dword [esp + 0x78]
add esp, 0x20
add dword [esp + 0x1c], 0x600
add eax, 0x21
sub dword [esp + 0x20], 1
mov dword [esp + 0x58], eax
jne 0x49f410
mov dword [esp + 0x34], 1
jmp 0x49f54c
call fcn.00460fc0
push str.ecp_nistz256_windowed_mul
push 0x2ad
push str.cryptoececp_nistz256.c
call fcn.004610c0
push 0
push 0x92
push 0x10
call fcn.00461170
add esp, 0x18
mov esi, dword [esp + 0x10]
push 0x30f
push str.cryptoececp_nistz256.c
push esi
call fcn.0045da50
push 0x310
push str.cryptoececp_nistz256.c
push dword [esp + 0x2c]
call fcn.0045da50
push 0x311
push str.cryptoececp_nistz256.c
push dword [esp + 0x4c]
call fcn.0045da50
mov eax, dword [esp + 0x58]
add esp, 0x24
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x34
ret
call fcn.00460fc0
push str.ecp_nistz256_windowed_mul
push 0x291
push str.cryptoececp_nistz256.c
call fcn.004610c0
push 0
push 0x80003
jmp 0x49f542
mov esi, ebp
jmp 0x49f5bd
mov esi, eax
call fcn.00460fc0
push str.ecp_nistz256_windowed_mul
push 0x280
push str.cryptoececp_nistz256.c
call fcn.004610c0
push 0
push 0xc0100
push 0x10
call fcn.00461170
add esp, 0x18
jmp 0x49f550