Function at 0x4d5270
Capabilities:
Encode data using xor

Disassembly:
push 0xffffffffffffffff
push 0x5faff8
mov eax, dword fs:[0]
push eax
sub esp, 0x3c
push ebx
push ebp
push esi
push edi
mov eax, dword [0x72d630]
xor eax, esp
push eax
lea eax, [esp + 0x50]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0x28], esi
mov eax, dword [esi + 0x40]
sub eax, dword [esi + 0x44]
cmp eax, 0x20
jae 0x4d52b9
mov ecx, dword [esp + 0x60]
push ecx
mov ecx, esi
call fcn.004dd120
jmp 0x4d57c5
mov eax, dword [esi + 0x34]
lea ebx, [eax*4]
push ebx
mov dword [esp + 0x44], ebx
mov dword [esp + 0x4c], ebx
call fcn.004b4f50
xor edi, edi
add esp, 4
cmp ebx, edi
jne 0x4d52e2
xor edx, edx
mov dword [esp + 0x30], edx
jmp 0x4d52ef
mov eax, ebx
call fcn.004b45b0
mov edx, eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x4c], edx
mov dword [esp + 0x58], edi
mov eax, dword [esi + 0x34]
lea ecx, [edx + eax*8]
mov dword [esp + 0x14], ecx
lea ecx, [eax + eax*2]
lea ecx, [edx + ecx*4]
mov dword [esp + 0x24], ecx
lea ecx, [eax + eax*2]
mov dword [esp + 0x20], edx
lea ebx, [edx + eax*4]
mov dword [esp + 0x18], 1
mov ebp, eax
mov dword [esp + 0x1c], edi
cmp ecx, edi
jbe 0x4d532d
xor eax, eax
mov edi, edx
rep stosd dword es:[edi], eax
mov eax, dword [esp + 0x60]
mov dword [edx], 1
mov ecx, dword [eax + 4]
mov eax, dword [eax + 8]
lea edx, [ecx*4]
push edx
push eax
mov eax, dword [esp + 0x1c]
push eax
call sub.MSVCR90.dll_memcpy
mov eax, dword [esi + 0x34]
mov ecx, dword [esi + 0x38]
lea edx, [eax*4]
mov eax, dword [esp + 0x30]
push edx
push ecx
push eax
call sub.MSVCR90.dll_memcpy
add esp, 0x18
lea esp, [esp]
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx]
test eax, eax
jne 0x4d545a
mov eax, dword [esp + 0x18]
lea esi, [eax - 1]
lea edx, [ebx + eax*4 - 4]
mov dword [esp + 0x34], ebp
mov dword [esp + 0x2c], esi
mov dword [esp + 0x60], edx
mov dword [esp + 0x38], 1
lea eax, [esp + 0x34]
cmp ebp, 1
jb 0x4d53aa
lea eax, [esp + 0x38]
mov ecx, dword [eax]
test ecx, ecx
je 0x4d53e6
cmp ecx, ebp
jae 0x4d53d3
mov eax, dword [esp + 0x14]
mov edx, ecx
lea esi, [eax + ecx*4]
lea ecx, [ecx]
mov edi, dword [esi]
mov dword [eax], edi
inc edx
add eax, 4
add esi, 4
cmp edx, ebp
jb 0x4d53c0
mov esi, dword [esp + 0x2c]
mov edx, dword [esp + 0x14]
mov eax, ebp
sub eax, ecx
lea edi, [edx + eax*4]
test ecx, ecx
jbe 0x4d53e6
xor eax, eax
rep stosd dword es:[edi], eax
mov eax, dword [esp + 0x60]
cmp dword [eax], 0
je 0x4d53fd
inc dword [esp + 0x18]
add dword [esp + 0x60], 4
inc esi
mov dword [esp + 0x2c], esi
mov eax, dword [esp + 0x18]
mov dword [esp + 0x38], eax
cmp eax, 1
mov dword [esp + 0x3c], 1
lea eax, [esp + 0x38]
jb 0x4d541a
lea eax, [esp + 0x3c]
mov ecx, dword [eax]
test ecx, ecx
je 0x4d5447
mov eax, esi
cmp esi, ecx
jb 0x4d543d
mov edx, esi
sub edx, ecx
lea edx, [ebx + edx*4]
lea ecx, [ecx]
mov edi, dword [edx]
mov dword [ebx + eax*4], edi
dec eax
sub edx, 4
cmp eax, ecx
jae 0x4d5430
test ecx, ecx
jbe 0x4d5447
xor eax, eax
mov edi, ebx
rep stosd dword es:[edi], eax
mov eax, dword [esp + 0x14]
mov eax, dword [eax]
add dword [esp + 0x1c], 0x20
test eax, eax
je 0x4d5395
xor esi, esi
test al, 1
jne 0x4d5467
shr eax, 1
inc esi
test al, 1
je 0x4d5460
add dword [esp + 0x1c], esi
mov edi, dword [esp + 0x14]
cmp eax, 1
jne 0x4d5496
mov eax, ebp
test ebp, ebp
je 0x4d548d
lea ecx, [edi + ebp*4 - 4]
mov edi, edi
cmp dword [ecx], 0
jne 0x4d548d
dec eax
sub ecx, 4
test eax, eax
jne 0x4d5480
cmp eax, 1
je 0x4d5593
cmp esi, 1
jne 0x4d54ed
xor edx, edx
mov esi, ebp
test ebp, ebp
jbe 0x4d54c2
lea ecx, [edi + ebp*4 - 4]
mov eax, dword [ecx]
mov edi, eax
shr edi, 1
or edi, edx
mov dword [ecx], edi
shl eax, 0x1f
dec esi
sub ecx, 4
mov edx, eax
test esi, esi
ja 0x4d54a7
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
xor edx, edx
xor ecx, ecx
test esi, esi
jbe 0x4d54e9
mov edi, edi
mov eax, dword [ebx + ecx*4]
lea esi, [eax + eax]
or esi, edx
mov dword [ebx + ecx*4], esi
mov esi, dword [esp + 0x18]
shr eax, 0x1f
inc ecx
mov edx, eax
cmp ecx, esi
jb 0x4d54d0
mov eax, edx
jmp 0x4d5511
mov edx, dword [esp + 0x14]
push esi
mov eax, ebp
call fcn.004bfeb0
mov ecx, dword [esp + 0x1c]
push esi
push ecx
mov edi, ebx
call fcn.004bfe60
mov edi, dword [esp + 0x20]
mov esi, dword [esp + 0x24]
add esp, 0xc
test eax, eax
je 0x4d551d
mov dword [ebx + esi*4], eax
inc esi
mov dword [esp + 0x18], esi
cmp dword [edi + ebp*4 - 4], 0
mov ecx, dword [esp + 0x24]
jne 0x4d5530
cmp dword [ecx + ebp*4 - 4], 0
jne 0x4d5530
dec ebp
mov edx, dword [edi + ebp*4 - 4]
cmp edx, dword [ecx + ebp*4 - 4]
jae 0x4d5552
mov eax, edi
mov edi, ecx
mov ecx, eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x20], ebx
mov dword [esp + 0x14], edi
mov dword [esp + 0x24], ecx
mov ebx, eax
test ebp, ebp
jbe 0x4d556d
mov eax, edi
sub ecx, edi
mov edx, ebp
lea esp, [esp]
mov edi, dword [ecx + eax]
xor dword [eax], edi
add eax, 4
sub edx, 1
jne 0x4d5560
test esi, esi
jbe 0x4d5370
mov eax, dword [esp + 0x20]
mov edx, dword [esp + 0x18]
mov ecx, ebx
sub ecx, eax
mov esi, dword [ecx + eax]
xor dword [eax], esi
add eax, 4
sub edx, 1
jne 0x4d5581
jmp 0x4d5370
cmp dword [esp + 0x1c], 0x20
jb 0x4d56a8
mov ebx, dword [esp + 0x1c]
shr ebx, 5
mov edi, dword [esp + 0x28]
mov ecx, dword [edi + 0x3c]
mov ebp, dword [esp + 0x20]
mov eax, dword [ebp]
add ecx, 0x1f
and ecx, 0xffffffe0
cmp ecx, 0x20
jbe 0x4d55db
mov edx, 1
mov ecx, ebp
mov esi, dword [ecx + 4]
mov dword [ecx], esi
mov esi, dword [edi + 0x3c]
add esi, 0x1f
inc edx
shr esi, 5
add ecx, 4
cmp edx, esi
jb 0x4d55c5
mov edx, dword [edi + 0x3c]
add edx, 0x1f
shr edx, 5
mov dword [ebp + edx*4 - 4], 0
mov esi, dword [edi + 0x44]
cmp esi, 0x20
jae 0x4d5617
mov edi, 0x20
xor edx, edx
sub edi, esi
je 0x4d562b
nop
mov ecx, edx
mov ebp, eax
shr ebp, cl
mov ecx, esi
inc edx
inc esi
and ebp, 1
shl ebp, cl
xor eax, ebp
cmp edx, edi
jb 0x4d5600
jmp 0x4d562b
mov ecx, esi
mov edx, esi
and ecx, 0x1f
mov esi, eax
shr edx, 5
shl esi, cl
lea edx, [ebp + edx*4 - 4]
xor dword [edx], esi
mov edi, dword [esp + 0x28]
test byte [edi + 0x44], 0x1f
mov ebp, dword [esp + 0x20]
je 0x4d5655
mov edx, dword [edi + 0x44]
mov ecx, edx
shr ecx, 5
lea esi, [ebp + ecx*4]
and edx, 0x1f
mov ecx, 0x20
sub ecx, edx
mov edx, eax
shr edx, cl
xor dword [esi], edx
test byte [edi + 0x40], 0x1f
je 0x4d568c
mov ecx, dword [edi + 0x40]
mov edx, ecx
and ecx, 0x1f
mov esi, eax
shl esi, cl
shr edx, 5
lea edx, [ebp + edx*4 - 4]
xor dword [edx], esi
mov edx, dword [edi + 0x40]
mov ecx, edx
shr ecx, 5
lea esi, [ebp + ecx*4]
and edx, 0x1f
mov ecx, 0x20
sub ecx, edx
shr eax, cl
xor dword [esi], eax
jmp 0x4d569a
mov edx, dword [edi + 0x40]
shr edx, 5
xor dword [ebp + edx*4 - 4], eax
lea ecx, [ebp + edx*4 - 4]
sub dword [esp + 0x1c], 0x20
sub ebx, 1
jne 0x4d55a5
mov eax, dword [esp + 0x1c]
mov ebx, dword [esp + 0x20]
mov ebp, dword [esp + 0x28]
test eax, eax
je 0x4d5784
mov esi, dword [ebx]
push eax
mov ecx, 0x20
sub ecx, eax
mov eax, dword [ebp + 0x3c]
add eax, 0x1f
shr eax, 5
mov edx, ebx
shl esi, cl
call fcn.004bfeb0
mov edx, dword [ebp + 0x44]
add esp, 4
cmp edx, 0x20
jae 0x4d570b
mov edi, 0x20
xor eax, eax
sub edi, edx
je 0x4d571f
mov edi, edi
mov ecx, eax
mov ebx, esi
shr ebx, cl
mov ecx, edx
inc eax
inc edx
and ebx, 1
shl ebx, cl
xor esi, ebx
cmp eax, edi
jb 0x4d56f0
mov ebx, dword [esp + 0x20]
jmp 0x4d571f
mov ecx, edx
mov eax, edx
and ecx, 0x1f
mov edx, esi
shr eax, 5
shl edx, cl
lea eax, [ebx + eax*4 - 4]
xor dword [eax], edx
test byte [ebp + 0x44], 0x1f
je 0x4d5740
mov eax, dword [ebp + 0x44]
mov ecx, eax
shr ecx, 5
lea edx, [ebx + ecx*4]
and eax, 0x1f
mov ecx, 0x20
sub ecx, eax
mov eax, esi
shr eax, cl
xor dword [edx], eax
test byte [ebp + 0x40], 0x1f
je 0x4d5776
mov ecx, dword [ebp + 0x40]
mov edx, ecx
shr edx, 5
lea eax, [ebx + edx*4 - 4]
and ecx, 0x1f
mov edx, esi
shl edx, cl
xor dword [eax], edx
mov eax, dword [ebp + 0x40]
mov ecx, eax
shr ecx, 5
lea edx, [ebx + ecx*4]
and eax, 0x1f
mov ecx, 0x20
sub ecx, eax
shr esi, cl
xor dword [edx], esi
jmp 0x4d5784
mov edx, dword [ebp + 0x40]
shr edx, 5
xor dword [ebx + edx*4 - 4], esi
lea eax, [ebx + edx*4 - 4]
mov eax, dword [ebp + 0x4c]
mov ecx, dword [ebp + 0x50]
add eax, eax
add eax, eax
push eax
push ebx
push ecx
call sub.MSVCR90.dll_memcpy
mov ecx, dword [esp + 0x4c]
mov edi, dword [esp + 0x3c]
lea edx, [ecx*4]
push edx
push 0
push edi
lea esi, [ebp + 0x48]
mov dword [esp + 0x70], 0xffffffff
call sub.MSVCR90.dll_memset
push edi
call dword [sym.imp.MSVCR90.dll_free]
add esp, 0x1c
mov eax, esi
mov ecx, dword [esp + 0x50]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x48
ret 4