Function at 0x4eaa30
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x198
mov eax, dword [0x5d60c4]
xor eax, esp
mov dword [esp + 0x194], eax
mov ecx, dword [ebp + 0x10]
mov eax, dword [ebp + 0xc]
push esi
mov esi, dword [ebp + 8]
mov dword [esp + 0x24], ecx
mov ecx, dword [ebp + 0x14]
mov dword [esp + 0x68], ecx
mov ecx, dword [esi + 0x5c]
mov edx, dword [esi + 0xc]
mov dword [esp + 0x28], ecx
mov ecx, dword [esi + 0x28]
mov dword [esp + 0x2c], ecx
lea ecx, [esi + 0x2c]
push edi
mov dword [esp + 0x44], ecx
mov edi, eax
mov ecx, dword [esi + 0x24]
mov dword [esp + 0x38], ecx
mov ecx, dword [esi + 4]
sub edi, ecx
mov dword [esp + 0x60], edx
add edx, ecx
mov dword [esp + 0x34], eax
mov eax, edi
mov dword [esp + 0x10], ecx
mov ecx, dword [esi + 0xb8]
mov dword [esp + 0x7c], edx
mov edx, 1
shl edx, cl
mov ecx, dword [esi + 0x10]
sub eax, ecx
mov dword [esp + 0x24], edi
sub edi, edx
cmp eax, edx
mov dword [esp + 0x1c], esi
mov eax, dword [esi + 0xc4]
mov edx, dword [esi + 0x54]
cmovbe edi, ecx
cmp dword [esi + 0x18], 0
push 0xcf1bbcdc
cmovne edi, ecx
mov dword [esp + 0x60], edx
mov ecx, 6
mov dword [esp + 0x4c], edi
cmp eax, ecx
mov dword [esp + 0x78], edx
push 0xbb000000
cmovb ecx, eax
mov dword [esp + 0x28], 3
mov eax, dword [esi + 0x50]
mov dword [esp + 0x60], eax
mov dword [esp + 0x78], eax
mov eax, 1
shl eax, cl
mov dword [esp + 0x58], eax
mov eax, dword [esi + 0xb4]
mov dword [esp + 0x5c], eax
mov edi, dword [eax + 0x5c]
mov esi, dword [eax + 0x28]
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x20], edi
push dword [eax + 4]
push dword [eax]
call fcn.0052c240
mov edi, dword [esp + 0x54]
mov ecx, 0x38
mov dword [esp + 0x80], eax
mov dword [esp + 0x84], edx
sub ecx, dword [edi + 0x24]
call fcn.0052c220
mov edi, dword [esp + 0x18]
mov dword [esp + 0x4c], eax
shr eax, 2
and eax, 0x3fffffc0
mov dword [esp + 0x18], 0x3f
lea ecx, [eax + esi]
lea eax, [edi + eax*4]
mov dword [esp + 0x64], ecx
mov edi, dword [esp + 0x1c]
mov dword [esp + 0x68], eax
cmp dword [edi + 0xdc], 0
jne 0x4eae10
mov esi, dword [edi + 0x1c]
mov eax, dword [esp + 0x24]
sub eax, esi
mov dword [esp + 0xc], esi
cmp eax, 0x180
jbe 0x4eacf5
lea eax, [esi + 0x60]
mov dword [esp + 0x3c], eax
cmp esi, eax
jae 0x4eac45
mov eax, 0x38
sub eax, dword [esp + 0x38]
mov dword [esp + 0x14], eax
nop word [eax + eax]
mov eax, dword [esp + 0x10]
push 0xcf1bbcdc
push 0xbb000000
push dword [esi + eax + 0xc]
push dword [esi + eax + 8]
call fcn.0052c240
xor eax, dword [edi + 0x50]
xor edx, dword [edi + 0x54]
mov ecx, dword [esp + 0x14]
call fcn.0052c220
and esi, 7
mov ecx, eax
mov eax, 0
mov edx, dword [edi + esi*4 + 0x2c]
mov dword [edi + esi*4 + 0x2c], ecx
mov esi, edx
shr esi, 2
and esi, 0x3fffffc0
mov dword [esp + 0x40], edx
mov edx, dword [esp + 0x30]
add edx, esi
movzx ecx, byte [edx]
dec ecx
and ecx, 0x3f
cmove eax, dword [esp + 0x18]
add ecx, eax
mov eax, dword [esp + 0x40]
mov byte [edx], cl
mov byte [ecx + edx], al
lea eax, [ecx + esi]
mov ecx, dword [esp + 0x2c]
mov esi, dword [esp + 0xc]
mov dword [ecx + eax*4], esi
inc esi
mov dword [esp + 0xc], esi
cmp esi, dword [esp + 0x3c]
jb 0x4eabc0
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0x34]
mov esi, dword [esp + 0x24]
add esi, 0xffffffe0
mov eax, dword [edx + 0x24]
mov dword [esp + 0x3c], eax
lea ecx, [edi + 1]
mov eax, dword [esp + 0x10]
add eax, esi
mov dword [esp + 0xc], esi
mov dword [esp + 0x14], esi
cmp eax, ecx
jbe 0x4eac74
xor ecx, ecx
jmp 0x4eac7b
sub ecx, dword [esp + 0x10]
sub ecx, esi
inc ecx
mov eax, 8
cmp ecx, eax
cmova ecx, eax
add ecx, esi
mov dword [esp + 0x40], ecx
cmp esi, ecx
jae 0x4eacfd
mov eax, 0x38
mov edi, edx
sub eax, dword [esp + 0x3c]
mov esi, ecx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x3c], eax
nop dword [eax]
nop dword [eax + eax]
mov eax, dword [esp + 0x10]
push 0xcf1bbcdc
push 0xbb000000
push dword [edx + eax + 4]
push dword [edx + eax]
call fcn.0052c240
xor eax, dword [edi + 0x50]
xor edx, dword [edi + 0x54]
mov ecx, dword [esp + 0x3c]
call fcn.0052c220
mov edx, dword [esp + 0x14]
mov ecx, eax
mov eax, edx
inc edx
and eax, 7
mov dword [esp + 0x14], edx
mov dword [edi + eax*4 + 0x2c], ecx
cmp edx, esi
jb 0x4eacb0
mov esi, dword [esp + 0xc]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0x34]
mov eax, dword [edx + 0x5c]
mov ecx, dword [edx + 0x24]
mov dword [esp + 0x80], eax
mov eax, dword [edx + 0x28]
mov dword [esp + 0x14], eax
mov eax, dword [edx + 4]
mov dword [esp + 0x3c], eax
cmp esi, dword [esp + 0x24]
jae 0x4eadc1
mov edi, dword [esp + 0x1c]
mov eax, 0x38
sub eax, ecx
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x3c]
push 0xcf1bbcdc
push 0xbb000000
push dword [esi + eax + 0xc]
push dword [esi + eax + 8]
call fcn.0052c240
xor eax, dword [edi + 0x50]
xor edx, dword [edi + 0x54]
mov ecx, dword [esp + 0x40]
call fcn.0052c220
and esi, 7
mov ecx, eax
mov eax, 0
mov edx, dword [edi + esi*4 + 0x2c]
mov dword [edi + esi*4 + 0x2c], ecx
mov esi, edx
shr esi, 2
and esi, 0x3fffffc0
mov dword [esp + 0x70], edx
mov edx, dword [esp + 0x14]
add edx, esi
movzx ecx, byte [edx]
dec ecx
and ecx, 0x3f
cmove eax, dword [esp + 0x18]
add ecx, eax
mov eax, dword [esp + 0x70]
mov byte [edx], cl
mov byte [ecx + edx], al
lea eax, [ecx + esi]
mov ecx, dword [esp + 0x80]
mov esi, dword [esp + 0xc]
mov dword [ecx + eax*4], esi
inc esi
mov dword [esp + 0xc], esi
cmp esi, dword [esp + 0x24]
jb 0x4ead31
mov edi, dword [esp + 0x34]
mov edx, dword [esp + 0x1c]
mov esi, dword [esp + 0x24]
push 0xcf1bbcdc
push 0xbb000000
mov dword [edx + 0x1c], esi
push dword [edi + 0xc]
push dword [edi + 8]
call fcn.0052c240
xor eax, dword [esp + 0x58]
mov ecx, 0x38
xor edx, dword [esp + 0x5c]
sub ecx, dword [esp + 0x38]
call fcn.0052c220
mov edx, dword [esp + 0x44]
mov ecx, eax
mov edi, dword [esp + 0x1c]
mov eax, esi
and eax, 7
mov esi, dword [edx + eax*4]
mov dword [edx + eax*4], ecx
mov edx, esi
mov dword [esp + 0x38], esi
jmp 0x4eae43
movq xmm0, qword [esp + 0x70]
mov eax, 0x38
sub eax, dword [esp + 0x38]
movq xmm1, qword [esp + 0x80]
pxor xmm1, xmm0
movd xmm0, eax
mov eax, dword [esp + 0x24]
psrlq xmm1, xmm0
mov dword [edi + 0x1c], eax
movd edx, xmm1
mov dword [esp + 0x38], edx
add dword [edi + 0x58], edx
mov eax, edx
mov ecx, dword [esp + 0x2c]
mov edi, dword [esp + 0x30]
shr eax, 2
and eax, 0x3fffffc0
mov dword [esp + 0xc], 0
add edi, eax
mov dword [esp + 0x14], 0
mov dword [esp + 0x58], edi
lea ecx, [ecx + eax*4]
movsx eax, dl
movzx esi, byte [edi]
mov edx, edi
mov dword [esp + 0x18], ecx
xor ecx, ecx
mov dword [esp + 0x2c], esi
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
pshufd xmm1, xmm0, 0
xorps xmm0, xmm0
movaps xmmword [esp + 0x80], xmm0
nop
movups xmm0, xmmword [edx]
lea edx, [edx + 0x10]
pcmpeqb xmm0, xmm1
pmovmskb eax, xmm0
mov dword [esp + ecx*4 + 0x80], eax
inc ecx
cmp ecx, 4
jl 0x4eaea0
mov eax, dword [esp + 0x8c]
and esi, 0x3f
cdq
mov edi, eax
mov ecx, edx
mov eax, dword [esp + 0x88]
shld ecx, edi, 0x10
cdq
or ecx, edx
shl edi, 0x10
or edi, eax
mov eax, dword [esp + 0x84]
shld ecx, edi, 0x10
cdq
or ecx, edx
shl edi, 0x10
or edi, eax
mov eax, dword [esp + 0x80]
shld ecx, edi, 0x10
cdq
or ecx, edx
shl edi, 0x10
mov dword [esp + 0x30], ecx
or edi, eax
mov edx, dword [esp + 0x30]
mov ecx, esi
neg ecx
mov eax, edi
and ecx, 0x3f
call fcn.0052c200
mov dword [esp + 0x44], eax
mov ecx, esi
mov dword [esp + 0x5c], edx
mov eax, edi
mov edx, dword [esp + 0x30]
call fcn.0052c220
mov esi, dword [esp + 0x44]
mov edi, dword [esp + 0x5c]
or esi, eax
or edi, edx
ja 0x4eaf40
test esi, esi
je 0x4eaf98
mov ecx, dword [esp + 0x50]
test ecx, ecx
je 0x4eaf98
test esi, esi
jne 0x4eaf54
bsf eax, edi
add eax, 0x20
jmp 0x4eaf57
bsf eax, esi
add eax, dword [esp + 0x2c]
and eax, 0x3f
je 0x4eaf82
mov edx, dword [esp + 0x18]
mov eax, dword [edx + eax*4]
cmp eax, dword [esp + 0x48]
jb 0x4eaf98
mov edx, dword [esp + 0xc]
mov dword [esp + edx*4 + 0x98], eax
inc edx
dec ecx
mov dword [esp + 0xc], edx
mov dword [esp + 0x50], ecx
mov ecx, esi
mov eax, edi
add ecx, 0xffffffff
adc eax, 0xffffffff
and esi, ecx
and edi, eax
ja 0x4eaf40
jb 0x4eaf98
test esi, esi
jne 0x4eaf40
mov ecx, dword [esp + 0x2c]
mov edx, 0x3f
mov esi, dword [esp + 0x18]
dec ecx
and ecx, 0x3f
mov eax, 0
cmove eax, edx
mov edx, dword [esp + 0x58]
add ecx, eax
mov eax, dword [esp + 0x38]
mov byte [edx], cl
mov byte [ecx + edx], al
mov edx, dword [esp + 0x1c]
mov eax, dword [edx + 0x1c]
mov dword [esi + ecx*4], eax
inc dword [edx + 0x1c]
cmp dword [esp + 0xc], 0
jbe 0x4eb0a5
mov esi, dword [esp + 0x34]
mov ecx, 3
xor eax, eax
mov eax, dword [esp + eax*4 + 0x98]
mov edx, dword [esp + 0x10]
add edx, eax
mov dword [esp + 0x48], eax
mov eax, dword [edx + ecx - 3]
cmp eax, dword [ecx + esi - 3]
jne 0x4eb092
mov edi, dword [esp + 0x28]
mov eax, esi
add edi, 0xfffffffd
cmp esi, edi
jae 0x4eb044
mov eax, dword [edx]
xor eax, dword [esi]
je 0x4eb021
mov edi, dword [esp + 0x28]
bsf ecx, eax
shr ecx, 3
jmp 0x4eb06c
lea eax, [esi + 4]
add edx, 4
cmp eax, edi
jae 0x4eb044
nop dword [eax + eax]
mov ecx, dword [eax]
xor ecx, dword [edx]
jne 0x4eb1b8
add eax, 4
add edx, 4
cmp eax, edi
jb 0x4eb030
mov edi, dword [esp + 0x28]
lea ecx, [edi - 1]
cmp eax, ecx
jae 0x4eb05d
mov cx, word [edx]
cmp cx, word [eax]
jne 0x4eb05d
add eax, 2
add edx, 2
cmp eax, edi
jae 0x4eb068
mov cl, byte [edx]
cmp cl, byte [eax]
jne 0x4eb068
inc eax
mov ecx, eax
sub ecx, esi
cmp ecx, dword [esp + 0x20]
jbe 0x4eb08e
mov eax, dword [esp + 0x24]
sub eax, dword [esp + 0x48]
mov edx, dword [esp + 0x6c]
add eax, 3
mov dword [esp + 0x20], ecx
mov dword [edx], eax
lea eax, [ecx + esi]
cmp eax, edi
je 0x4eb0a5
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x14]
inc eax
mov dword [esp + 0x14], eax
cmp eax, dword [esp + 0xc]
jb 0x4eafe3
mov edx, dword [esp + 0x54]
mov dword [esp + 0x10], 0
mov dword [esp + 0x18], 0
mov ecx, dword [edx + 4]
mov eax, dword [edx]
mov edx, dword [esp + 0x64]
mov dword [esp + 0x48], ecx
sub ecx, eax
add ecx, dword [esp + 0x60]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x4c]
movzx esi, byte [edx]
movsx eax, al
mov dword [esp + 0x44], ecx
xor ecx, ecx
mov dword [esp + 0x60], esi
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
pshufd xmm1, xmm0, 0
xorps xmm0, xmm0
movaps xmmword [esp + 0x80], xmm0
movups xmm0, xmmword [edx]
lea edx, [edx + 0x10]
pcmpeqb xmm0, xmm1
pmovmskb eax, xmm0
mov dword [esp + ecx*4 + 0x80], eax
inc ecx
cmp ecx, 4
jl 0x4eb100
mov eax, dword [esp + 0x8c]
and esi, 0x3f
cdq
mov edi, eax
mov ecx, edx
mov eax, dword [esp + 0x88]
shld ecx, edi, 0x10
cdq
or ecx, edx
shl edi, 0x10
or edi, eax
mov eax, dword [esp + 0x84]
shld ecx, edi, 0x10
cdq
or ecx, edx
shl edi, 0x10
or edi, eax
mov eax, dword [esp + 0x80]
shld ecx, edi, 0x10
cdq
or ecx, edx
shl edi, 0x10
mov dword [esp + 0x30], ecx
or edi, eax
mov edx, dword [esp + 0x30]
mov ecx, esi
neg ecx
mov eax, edi
and ecx, 0x3f
call fcn.0052c200
mov dword [esp + 0x4c], eax
mov ecx, esi
mov dword [esp + 0x64], edx
mov eax, edi
mov edx, dword [esp + 0x30]
call fcn.0052c220
mov esi, dword [esp + 0x4c]
mov edi, dword [esp + 0x64]
or esi, eax
or edi, edx
ja 0x4eb1a4
test esi, esi
je 0x4eb2e6
mov ecx, dword [esp + 0x50]
test ecx, ecx
je 0x4eb212
test esi, esi
jne 0x4eb1cb
bsf eax, edi
add eax, 0x20
jmp 0x4eb1ce
mov edi, dword [esp + 0x28]
bsf ecx, ecx
shr ecx, 3
sub ecx, esi
add ecx, eax
jmp 0x4eb06c
bsf eax, esi
add eax, dword [esp + 0x60]
and eax, 0x3f
je 0x4eb1fc
mov edx, dword [esp + 0x68]
mov edx, dword [edx + eax*4]
mov eax, dword [esp + 0x54]
cmp edx, dword [eax + 0xc]
jb 0x4eb212
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0x98], edx
inc eax
dec ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x50], ecx
mov ecx, esi
mov eax, edi
add ecx, 0xffffffff
adc eax, 0xffffffff
and esi, ecx
and edi, eax
ja 0x4eb1a4
jb 0x4eb212
test esi, esi
jne 0x4eb1a4
cmp dword [esp + 0x10], 0
jbe 0x4eb2e6
mov edi, dword [esp + 0x34]
xor eax, eax
mov eax, dword [esp + eax*4 + 0x98]
mov esi, dword [esp + 0x48]
add esi, eax
mov dword [esp + 0x4c], eax
mov eax, dword [esi]
cmp eax, dword [edi]
jne 0x4eb2b9
mov ecx, dword [esp + 0x28]
lea eax, [edi + 4]
add esi, 4
sub eax, esi
add eax, dword [esp + 0x2c]
cmp eax, ecx
cmovb ecx, eax
lea eax, [edi + 4]
push ecx
push esi
push eax
call fcn.00502270
add esp, 0xc
mov dword [esp + 0x68], eax
lea ecx, [eax + esi]
cmp ecx, dword [esp + 0x2c]
jne 0x4eb288
mov esi, dword [esp + 0x28]
add eax, 4
push esi
push dword [esp + 0x80]
add eax, edi
push eax
call fcn.00502270
add esp, 0xc
add eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x20]
lea edx, [eax + 4]
cmp edx, ecx
jbe 0x4eb2bd
mov eax, dword [esp + 0x24]
mov ecx, edx
sub eax, dword [esp + 0x4c]
sub eax, dword [esp + 0x44]
mov esi, dword [esp + 0x6c]
add eax, 3
mov dword [esp + 0x20], ecx
mov dword [esi], eax
lea eax, [edx + edi]
cmp eax, dword [esp + 0x28]
je 0x4eb2d0
jmp 0x4eb2bd
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x18]
inc eax
mov dword [esp + 0x18], eax
cmp eax, dword [esp + 0x10]
jb 0x4eb223
mov eax, ecx
pop edi
pop esi
mov ecx, dword [esp + 0x194]
xor ecx, esp
call fcn.0052b789
mov esp, ebp
pop ebp
ret
mov ecx, dword [esp + 0x19c]
mov eax, dword [esp + 0x20]
pop edi
pop esi
xor ecx, esp
call fcn.0052b789
mov esp, ebp
pop ebp
ret