Function at 0x4dafd0
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x188
mov eax, dword [0x5b0008]
xor eax, esp
mov dword [esp + 0x184], eax
mov eax, dword [ebp + 8]
mov dword [esp + 0x38], eax
mov eax, dword [ebp + 0xc]
mov dword [esp + 0x64], eax
push esi
push edi
mov edi, ecx
mov dword [esp + 0x20], edx
mov dword [esp + 0x5c], edi
mov dword [esp + 0x44], 3
mov dword [esp + 0x60], 0x3f
mov eax, dword [edi + 0x5c]
mov ecx, dword [edi + 4]
mov edx, dword [edi + 0xc]
mov dword [esp + 0x3c], eax
mov eax, dword [edi + 0x28]
mov dword [esp + 0x24], eax
mov eax, dword [edi + 0x24]
lea esi, [edx + ecx]
mov dword [esp + 0x14], eax
mov eax, dword [edi + 8]
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x20]
sub eax, ecx
mov dword [esp + 0x34], ecx
mov ecx, dword [edi + 0xb8]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x64], edx
mov edx, 1
shl edx, cl
mov ecx, dword [edi + 0x10]
sub eax, ecx
mov dword [esp + 0x68], esi
mov esi, dword [esp + 0x1c]
sub esi, edx
cmp eax, edx
mov eax, esi
mov esi, dword [esp + 0x20]
cmovbe eax, ecx
cmp dword [edi + 0x18], 0
cmovne eax, ecx
mov ecx, 6
mov dword [esp + 0x4c], eax
mov eax, dword [edi + 0xc4]
cmp eax, ecx
cmovb ecx, eax
mov eax, dword [edi + 0x50]
mov dword [esp + 0x48], eax
mov eax, dword [edi + 0x54]
mov dword [esp + 0x38], eax
mov eax, 1
shl eax, cl
cmp dword [edi + 0xdc], 0
mov dword [esp + 0x50], eax
jne 0x4db332
mov ecx, dword [edi + 0x1c]
mov eax, dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
sub eax, ecx
mov dword [esp + 0x18], ecx
cmp eax, 0x180
jbe 0x4db233
lea eax, [ecx + 0x60]
mov dword [esp + 0x10], edx
mov dword [esp + 0x28], eax
cmp ecx, eax
jae 0x4db195
mov eax, dword [esp + 0x34]
mov esi, 0x38
sub esi, edx
add eax, 8
mov dword [esp + 0x2c], esi
mov dword [esp + 0x30], eax
nop dword [eax + eax]
push 0xcf1bbcdc
push 0xbb000000
push dword [eax + ecx + 4]
push dword [eax + ecx]
call fcn.00546260
xor eax, dword [edi + 0x50]
mov ecx, esi
xor edx, dword [edi + 0x54]
call fcn.00519040
mov ecx, eax
mov eax, dword [esp + 0x18]
and eax, 7
mov edx, dword [edi + eax*4 + 0x2c]
mov esi, edx
mov dword [edi + eax*4 + 0x2c], ecx
mov eax, 0
shr esi, 2
mov dword [esp + 0x10], edx
and esi, 0x3fffffc0
mov edx, dword [esp + 0x24]
add edx, esi
movzx ecx, byte [edx]
dec ecx
and ecx, 0x3f
cmove eax, dword [esp + 0x60]
add ecx, eax
mov eax, dword [esp + 0x10]
mov byte [edx], cl
mov byte [ecx + edx], al
lea eax, [ecx + esi]
mov edx, dword [esp + 0x3c]
mov ecx, dword [esp + 0x18]
mov esi, dword [esp + 0x2c]
mov dword [edx + eax*4], ecx
inc ecx
mov eax, dword [esp + 0x30]
mov dword [esp + 0x18], ecx
cmp ecx, dword [esp + 0x28]
jb 0x4db100
mov eax, dword [edi + 0x24]
mov esi, dword [esp + 0x20]
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0x1c]
lea edx, [esi + 1]
mov eax, dword [esp + 0x34]
add ecx, 0xffffffe0
add eax, ecx
mov dword [esp + 0x18], ecx
mov dword [esp + 0x28], ecx
cmp eax, edx
jbe 0x4db1b5
xor edx, edx
jmp 0x4db1bc
sub edx, dword [esp + 0x34]
sub edx, ecx
inc edx
mov eax, 8
cmp edx, eax
cmova edx, eax
add edx, ecx
mov dword [esp + 0x30], edx
cmp ecx, edx
jae 0x4db22f
mov eax, 0x38
mov esi, edx
sub eax, dword [esp + 0x10]
mov edx, ecx
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x34]
push 0xcf1bbcdc
push 0xbb000000
push dword [edx + eax + 4]
push dword [edx + eax]
call fcn.00546260
xor eax, dword [edi + 0x50]
xor edx, dword [edi + 0x54]
mov ecx, dword [esp + 0x2c]
call fcn.00519040
mov edx, dword [esp + 0x28]
mov ecx, eax
mov eax, edx
inc edx
and eax, 7
mov dword [esp + 0x28], edx
mov dword [edi + eax*4 + 0x2c], ecx
cmp edx, esi
jb 0x4db1e1
mov edx, dword [edi + 0x24]
mov esi, dword [esp + 0x20]
mov ecx, dword [esp + 0x18]
jmp 0x4db233
mov edx, dword [esp + 0x10]
mov eax, dword [edi + 0x5c]
mov dword [esp + 0x28], eax
mov eax, dword [edi + 0x28]
mov dword [esp + 0x2c], eax
mov eax, dword [edi + 4]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x1c]
cmp ecx, eax
jae 0x4db2f1
mov esi, 0x38
sub esi, edx
mov dword [esp + 0x58], esi
nop
mov eax, dword [esp + 0x30]
push 0xcf1bbcdc
push 0xbb000000
push dword [eax + ecx + 0xc]
push dword [eax + ecx + 8]
call fcn.00546260
xor eax, dword [edi + 0x50]
mov ecx, esi
xor edx, dword [edi + 0x54]
call fcn.00519040
mov ecx, eax
mov eax, dword [esp + 0x18]
and eax, 7
mov edx, dword [edi + eax*4 + 0x2c]
mov esi, edx
mov dword [edi + eax*4 + 0x2c], ecx
mov eax, 0
shr esi, 2
mov dword [esp + 0x10], edx
and esi, 0x3fffffc0
mov edx, dword [esp + 0x2c]
add edx, esi
movzx ecx, byte [edx]
dec ecx
and ecx, 0x3f
cmove eax, dword [esp + 0x60]
add ecx, eax
mov eax, dword [esp + 0x10]
mov byte [edx], cl
mov byte [ecx + edx], al
lea eax, [ecx + esi]
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x18]
mov esi, dword [esp + 0x58]
mov dword [edx + eax*4], ecx
inc ecx
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x18], ecx
cmp ecx, eax
jb 0x4db260
mov esi, dword [esp + 0x20]
push 0xcf1bbcdc
push 0xbb000000
mov dword [edi + 0x1c], eax
push dword [esi + 0xc]
push dword [esi + 8]
call fcn.00546260
xor eax, dword [esp + 0x48]
mov ecx, 0x38
xor edx, dword [esp + 0x38]
sub ecx, dword [esp + 0x14]
call fcn.00519040
mov ecx, eax
mov eax, dword [esp + 0x1c]
and eax, 7
mov edx, dword [edi + eax*4 + 0x2c]
mov dword [edi + eax*4 + 0x2c], ecx
jmp 0x4db365
push 0xcf1bbcdc
push 0xbb000000
push dword [esi + 4]
push dword [esi]
call fcn.00546260
xor eax, dword [esp + 0x48]
mov ecx, 0x38
xor edx, dword [esp + 0x38]
sub ecx, dword [esp + 0x14]
call fcn.00519040
mov edx, eax
mov eax, dword [esp + 0x1c]
mov dword [edi + 0x1c], eax
mov eax, dword [esp + 0x3c]
mov ecx, edx
add dword [edi + 0x58], edx
shr ecx, 2
and ecx, 0x3fffffc0
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x24]
add edx, ecx
mov dword [esp + 0x14], 0
mov dword [esp + 0x48], edx
lea eax, [eax + ecx*4]
mov dword [esp + 0x38], 0
mov dword [esp + 0x3c], eax
xor ecx, ecx
mov eax, dword [esp + 0x10]
movzx esi, byte [edx]
movsx eax, al
mov dword [esp + 0x2c], esi
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
pshufd xmm1, xmm0, 0
xorps xmm0, xmm0
movaps xmmword [esp + 0x70], xmm0
movups xmm0, xmmword [edx]
lea edx, [edx + 0x10]
pcmpeqb xmm0, xmm1
pmovmskb eax, xmm0
mov dword [esp + ecx*4 + 0x70], eax
inc ecx
cmp ecx, 4
jl 0x4db3c5
mov eax, dword [esp + 0x7c]
and esi, 0x3f
cdq
mov edi, eax
mov ecx, edx
mov eax, dword [esp + 0x78]
shld ecx, edi, 0x10
cdq
or ecx, edx
shl edi, 0x10
or edi, eax
mov eax, dword [esp + 0x74]
shld ecx, edi, 0x10
cdq
or ecx, edx
shl edi, 0x10
or edi, eax
mov eax, dword [esp + 0x70]
shld ecx, edi, 0x10
cdq
or ecx, edx
shl edi, 0x10
mov dword [esp + 0x24], ecx
or edi, eax
mov edx, dword [esp + 0x24]
mov ecx, esi
neg ecx
mov eax, edi
and ecx, 0x3f
call fcn.00519060
mov dword [esp + 0x58], eax
mov ecx, esi
mov dword [esp + 0x30], edx
mov eax, edi
mov edx, dword [esp + 0x24]
call fcn.00519040
mov esi, dword [esp + 0x58]
mov edi, dword [esp + 0x30]
or esi, eax
or edi, edx
ja 0x4db456
test esi, esi
je 0x4db4a7
cmp dword [esp + 0x50], 0
jbe 0x4db4a7
push edi
push esi
call fcn.004d55d0
add eax, dword [esp + 0x34]
add esp, 8
and eax, 0x3f
je 0x4db491
mov ecx, dword [esp + 0x3c]
mov ecx, dword [ecx + eax*4]
cmp ecx, dword [esp + 0x4c]
jb 0x4db4a7
mov eax, dword [esp + 0x14]
mov dword [esp + eax*4 + 0x88], ecx
inc eax
dec dword [esp + 0x50]
mov dword [esp + 0x14], eax
mov ecx, esi
mov eax, edi
add ecx, 0xffffffff
adc eax, 0xffffffff
and esi, ecx
and edi, eax
ja 0x4db456
jb 0x4db4a7
test esi, esi
jne 0x4db456
mov edx, dword [esp + 0x48]
mov esi, 0x3f
mov eax, 0
movzx ecx, byte [edx]
dec ecx
and ecx, 0x3f
cmove eax, esi
mov esi, dword [esp + 0x3c]
add ecx, eax
mov eax, dword [esp + 0x10]
mov byte [edx], cl
mov byte [ecx + edx], al
mov edx, dword [esp + 0x5c]
mov eax, dword [edx + 0x1c]
mov dword [esi + ecx*4], eax
inc dword [edx + 0x1c]
cmp dword [esp + 0x14], 0
jbe 0x4db5f7
xor eax, eax
nop dword [eax + eax]
mov esi, dword [esp + eax*4 + 0x88]
mov edx, dword [esp + 0x64]
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x5c], esi
cmp esi, edx
jb 0x4db531
mov edi, dword [esp + 0x34]
mov edx, dword [esp + 0x44]
add edi, esi
mov eax, dword [edi + edx - 3]
cmp eax, dword [edx + ecx - 3]
jne 0x4db5ce
push dword [esp + 0x40]
mov edx, edi
call fcn.004d5660
add esp, 4
mov edi, eax
jmp 0x4db59f
mov edi, dword [esp + 0x54]
mov eax, dword [esi + edi]
cmp eax, dword [ecx]
jne 0x4db5ca
add edi, 4
add esi, edi
lea edi, [ecx + 4]
mov ecx, dword [esp + 0x54]
mov eax, edi
add ecx, edx
mov dword [esp + 0x24], edi
sub eax, esi
mov edx, esi
add eax, ecx
mov ecx, dword [esp + 0x40]
cmp eax, ecx
cmovb ecx, eax
push ecx
mov ecx, edi
call fcn.004d5660
mov ecx, dword [esp + 0x68]
mov edi, eax
add ecx, dword [esp + 0x58]
add esp, 4
lea eax, [edi + esi]
cmp eax, ecx
jne 0x4db598
mov ecx, dword [esp + 0x24]
push dword [esp + 0x40]
mov edx, dword [esp + 0x6c]
lea ecx, [edi + ecx]
call fcn.004d5660
add esp, 4
add edi, eax
mov esi, dword [esp + 0x5c]
add edi, 4
mov edx, dword [esp + 0x44]
cmp edi, edx
jbe 0x4db5ce
mov eax, dword [esp + 0x1c]
mov edx, edi
mov ecx, dword [esp + 0x6c]
sub eax, esi
add eax, 3
mov dword [esp + 0x44], edx
mov dword [ecx], eax
mov eax, dword [esp + 0x20]
add eax, edi
cmp eax, dword [esp + 0x40]
je 0x4db5e1
jmp 0x4db5ce
mov edx, dword [esp + 0x44]
mov eax, dword [esp + 0x38]
inc eax
mov dword [esp + 0x38], eax
cmp eax, dword [esp + 0x14]
jb 0x4db4f0
mov eax, edx
pop edi
pop esi
mov ecx, dword [esp + 0x184]
xor ecx, esp
call fcn.00518799
mov esp, ebp
pop ebp
ret
mov ecx, dword [esp + 0x18c]
mov eax, 3
pop edi
pop esi
xor ecx, esp
call fcn.00518799
mov esp, ebp
pop ebp
ret