Function at 0x4a44e0
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x4c
push ebx
push ebp
mov ebp, dword [esp + 0x5c]
push esi
mov esi, dword [esp + 0x5c]
dec esi
cmp word [0x628d0c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x50], esi
je 0x4a4516
mov eax, dword [esp + 0x64]
mov dword [eax], 1
mov dword [eax + 0xc], 0xffffffff
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
lea edx, [eax + eax]
cmp edx, ecx
mov dword [esp + 0x44], eax
jge 0x4a452d
inc eax
mov dword [esp + 0x44], eax
mov ebx, dword [sym.imp.MSVCR90.dll_malloc]
mov eax, 1
shl eax, cl
dec eax
mov dword [esp + 0x48], eax
lea eax, [eax*4 + 4]
push eax
call ebx
add esp, 4
mov dword [esp + 0x1c], eax
test eax, eax
jne 0x4a455e
pop esi
pop ebp
or eax, 0xffffffff
pop ebx
add esp, 0x4c
ret
mov eax, dword [ebp + 0x18]
add eax, eax
add eax, eax
add eax, eax
cdq
idiv esi
push edi
inc eax
lea edi, [eax*4]
push edi
call ebx
push edi
mov dword [esp + 0x2c], eax
call ebx
mov esi, eax
push edi
mov dword [esp + 0x3c], esi
call ebx
push edi
mov dword [esp + 0x24], eax
call ebx
push edi
mov dword [esp + 0x2c], eax
call ebx
mov edi, dword [esp + 0x38]
add esp, 0x14
mov ebx, eax
mov dword [esp + 0x28], ebx
test edi, edi
je 0x4a4918
test esi, esi
je 0x4a4918
cmp dword [esp + 0x14], 0
je 0x4a4918
cmp dword [esp + 0x18], 0
je 0x4a4918
test ebx, ebx
je 0x4a4918
mov ecx, dword [esp + 0x4c]
inc ecx
test ecx, ecx
jle 0x4a45e1
mov edi, dword [esp + 0x20]
or eax, 0xffffffff
rep stosd dword es:[edi], eax
mov eax, dword [esp + 0x54]
lea ecx, [esp + 0x38]
mov edx, ebp
call fcn.004a35e0
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x38]
mov dword [ecx], 0xffffffff
mov ecx, dword [esp + 0x28]
mov eax, 1
mov dword [edx], eax
mov dword [ecx], ebx
xor ecx, ecx
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x2c], ecx
mov ecx, dword [ebp + 8]
cmp ecx, dword [ebp + 0x18]
lea edi, [ecx - 1]
mov dword [esp + 0x34], 1
jl 0x4a463e
mov dword [esp + 0x50], 0xffffffff
jmp 0x4a4655
mov edx, dword [ebp + 0x20]
movzx edx, byte [edx + ecx]
inc ecx
mov dword [esp + 0x50], 8
mov dword [esp + 0x38], edx
mov dword [ebp + 8], ecx
mov ecx, dword [esp + 0x48]
shl ebx, cl
xor ebx, dword [esp + 0x38]
and ebx, dword [esp + 0x4c]
cmp dword [esp + 0x2c], 0
je 0x4a4673
mov ecx, dword [esp + 0x20]
mov ecx, dword [ecx + ebx*4]
jmp 0x4a4676
or ecx, 0xffffffff
mov edx, dword [esp + 0x60]
dec edx
cmp dword [esp + 0x50], edx
je 0x4a468e
mov dword [esp + 0x34], 0
jmp 0x4a47ac
cmp ecx, 0xffffffff
jne 0x4a46ad
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 0x1c]
push edx
mov edx, esi
mov esi, dword [esp + 0x28]
push edi
call fcn.0055e280
jmp 0x4a479d
mov edx, dword [esp + 0x24]
lea eax, [esp + 0x54]
push eax
push esi
push edx
push edi
push ecx
mov ecx, ebp
call fcn.004a3fd0
add esp, 0x14
cmp eax, 3
jl 0x4a4733
cmp eax, 2
mov ecx, dword [esp + 0x54]
mov dword [esp + 0x2c], eax
mov dword [esp + 0x44], ecx
jle 0x4a4729
add eax, 0xfffffffe
mov dword [esp + 0x34], eax
mov eax, dword [ebp + 8]
mov edx, dword [ebp + 0x20]
movzx edx, byte [eax + edx]
mov ecx, dword [esp + 0x48]
lea edi, [eax - 1]
inc eax
shl ebx, cl
mov dword [ebp + 8], eax
mov eax, dword [esp + 0x20]
push eax
mov eax, dword [esp + 0x20]
xor ebx, edx
and ebx, dword [esp + 0x50]
mov dword [esp + 0x3c], edx
mov edx, esi
mov esi, dword [esp + 0x28]
push edi
call fcn.0055e280
mov esi, dword [esp + 0x38]
add esp, 8
sub dword [esp + 0x34], 1
mov dword [esp + 0x1c], eax
jne 0x4a46e1
mov dword [esp + 0x34], 0
jmp 0x4a47a8
cmp word [0x628d08], 0
je 0x4a4780
cmp eax, 2
jne 0x4a4780
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x1c]
push ecx
mov edx, esi
mov esi, dword [esp + 0x28]
push edi
call fcn.0055e280
mov edx, dword [esp + 0x5c]
mov esi, dword [esp + 0x38]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x18]
add esp, 8
mov dword [esp + 0x2c], 2
mov dword [esp + 0x44], edx
mov dword [esp + 0x34], 0
jmp 0x4a47df
mov eax, dword [esp + 0x20]
push eax
mov eax, dword [esp + 0x20]
mov edx, esi
mov esi, dword [esp + 0x28]
push edi
call fcn.0055e280
mov dword [esp + 0x3c], 1
mov esi, dword [esp + 0x38]
mov dword [esp + 0x24], eax
add esp, 8
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x2c]
cmp ecx, 1
jne 0x4a47dd
mov ecx, dword [esp + 0x58]
mov edx, dword [esp + 0x28]
mov dword [edx + eax*4], ecx
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov dword [ecx + eax*4], 0xffffffff
mov dword [edx + eax*4], 1
inc eax
mov dword [esp + 0x10], eax
jmp 0x4a481d
jle 0x4a481d
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x44]
mov dword [ecx + eax*4], 0xffffffff
mov ecx, dword [esp + 0x14]
mov dword [ecx + eax*4], edx
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x2c]
mov dword [edx + eax*4], ecx
mov edx, dword [esp + 0x44]
inc eax
cmp edx, dword [esp + 0x40]
mov dword [esp + 0x10], eax
jle 0x4a4813
mov dword [esp + 0x40], edx
cmp ecx, dword [esp + 0x3c]
jle 0x4a481d
mov dword [esp + 0x3c], ecx
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x38]
mov dword [esp + 0x2c], ecx
mov ecx, dword [esp + 0x60]
dec ecx
mov dword [esp + 0x44], edi
mov dword [esp + 0x58], edx
cmp dword [esp + 0x50], ecx
je 0x4a4621
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x14]
mov dword [ecx + eax*4], 0xffffffff
mov dword [edx + eax*4], 0
mov edx, dword [esp + 0x18]
mov ecx, 2
mov dword [edx + eax*4], ecx
inc eax
cmp dword [esp + 0x40], 0
mov dword [esp + 0x10], eax
jge 0x4a4876
mov dword [esp + 0x40], 0
cmp dword [esp + 0x3c], ecx
jge 0x4a4880
mov dword [esp + 0x3c], ecx
mov ebx, dword [sym.imp.MSVCR90.dll_free]
push esi
call ebx
mov eax, dword [esp + 0x28]
push eax
call ebx
mov ecx, dword [esp + 0x28]
push ecx
call ebx
add esp, 0xc
cmp word [0x6b2020], 0
je 0x4a48d1
mov edx, dword [esp + 0x3c]
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x18]
push edx
mov edx, dword [esp + 0x18]
push eax
mov eax, dword [esp + 0x30]
push ecx
mov ecx, dword [esp + 0x1c]
push edx
mov edx, dword [esp + 0x78]
push eax
push ecx
push edx
call fcn.0055e690
add esp, 0x1c
jmp 0x4a48f4
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x28]
mov edi, dword [esp + 0x60]
mov esi, dword [esp + 0x68]
push eax
push ecx
push edx
mov edx, dword [esp + 0x1c]
call fcn.004a4260
add esp, 0xc
mov esi, eax
mov eax, dword [esp + 0x14]
push eax
call ebx
mov ecx, dword [esp + 0x1c]
push ecx
call ebx
mov edx, dword [esp + 0x30]
push edx
call ebx
add esp, 0xc
pop edi
mov eax, esi
pop esi
pop ebp
pop ebx
add esp, 0x4c
ret
mov eax, dword [esp + 0x20]
mov ebp, dword [sym.imp.MSVCR90.dll_free]
push eax
call ebp
add esp, 4
test edi, edi
je 0x4a4932
push edi
call ebp
add esp, 4
test esi, esi
je 0x4a493c
push esi
call ebp
add esp, 4
mov eax, dword [esp + 0x14]
test eax, eax
je 0x4a494a
push eax
call ebp
add esp, 4
mov eax, dword [esp + 0x18]
test eax, eax
je 0x4a4958
push eax
call ebp
add esp, 4
test ebx, ebx
je 0x4a4962
push ebx
call ebp
add esp, 4
pop edi
pop esi
pop ebp
or eax, 0xffffffff
pop ebx
add esp, 0x4c
ret