Function at 0x4e72f0
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x198
mov eax, dword [0x5b3480]
xor eax, esp
mov dword [esp + 0x194], eax
mov ecx, dword [ebp + 0x10]
mov eax, dword [ebp + 0xc]
push esi
mov esi, dword [ebp + 8]
mov dword [esp + 0x24], ecx
mov ecx, dword [ebp + 0x14]
mov dword [esp + 0x68], ecx
mov ecx, dword [esi + 0x5c]
mov edx, dword [esi + 0xc]
mov dword [esp + 0x28], ecx
mov ecx, dword [esi + 0x28]
mov dword [esp + 0x2c], ecx
lea ecx, [esi + 0x2c]
push edi
mov dword [esp + 0x44], ecx
mov edi, eax
mov ecx, dword [esi + 0x24]
mov dword [esp + 0x3c], ecx
mov ecx, dword [esi + 4]
sub edi, ecx
mov dword [esp + 0x60], edx
add edx, ecx
mov dword [esp + 0x34], eax
mov eax, edi
mov dword [esp + 0x10], ecx
mov ecx, dword [esi + 0xb8]
mov dword [esp + 0x7c], edx
mov edx, 1
shl edx, cl
mov ecx, dword [esi + 0x10]
sub eax, ecx
mov dword [esp + 0x24], edi
sub edi, edx
cmp eax, edx
mov dword [esp + 0x1c], esi
mov eax, dword [esi + 0xc4]
mov edx, dword [esi + 0x54]
cmovbe edi, ecx
cmp dword [esi + 0x18], 0
push 0xcf1bbcdc
cmovne edi, ecx
mov dword [esp + 0x60], edx
mov ecx, 6
mov dword [esp + 0x4c], edi
cmp eax, ecx
mov dword [esp + 0x78], edx
push 0xbb000000
cmovb ecx, eax
mov dword [esp + 0x28], 3
mov eax, dword [esi + 0x50]
mov dword [esp + 0x60], eax
mov dword [esp + 0x78], eax
mov eax, 1
shl eax, cl
mov dword [esp + 0x58], eax
mov eax, dword [esi + 0xb4]
mov dword [esp + 0x5c], eax
mov edi, dword [eax + 0x5c]
mov esi, dword [eax + 0x28]
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x20], edi
push dword [eax + 4]
push dword [eax]
call fcn.00491a50
mov edi, dword [esp + 0x54]
mov ecx, 0x38
mov dword [esp + 0x80], eax
mov dword [esp + 0x84], edx
sub ecx, dword [edi + 0x24]
call fcn.00491dc0
mov edi, dword [esp + 0x18]
mov dword [esp + 0x4c], eax
shr eax, 2
and eax, 0x3fffffc0
mov dword [esp + 0x18], 0x3f
lea ecx, [eax + esi]
lea eax, [edi + eax*4]
mov dword [esp + 0x64], ecx
mov edi, dword [esp + 0x1c]
mov dword [esp + 0x68], eax
cmp dword [edi + 0xdc], 0
jne 0x4e76ca
mov esi, dword [edi + 0x1c]
mov eax, dword [esp + 0x24]
sub eax, esi
mov dword [esp + 0xc], esi
cmp eax, 0x180
jbe 0x4e75b5
lea eax, [esi + 0x60]
mov dword [esp + 0x38], eax
cmp esi, eax
jae 0x4e7505
mov eax, 0x38
sub eax, dword [esp + 0x3c]
mov dword [esp + 0x14], eax
nop word [eax + eax]
mov eax, dword [esp + 0x10]
push 0xcf1bbcdc
push 0xbb000000
push dword [esi + eax + 0xc]
push dword [esi + eax + 8]
call fcn.00491a50
xor eax, dword [edi + 0x50]
xor edx, dword [edi + 0x54]
mov ecx, dword [esp + 0x14]
call fcn.00491dc0
and esi, 7
mov ecx, eax
mov eax, 0
mov edx, dword [edi + esi*4 + 0x2c]
mov dword [edi + esi*4 + 0x2c], ecx
mov esi, edx
shr esi, 2
and esi, 0x3fffffc0
mov dword [esp + 0x40], edx
mov edx, dword [esp + 0x30]
add edx, esi
movzx ecx, byte [edx]
dec ecx
and ecx, 0x3f
cmove eax, dword [esp + 0x18]
add ecx, eax
mov eax, dword [esp + 0x40]
mov byte [edx], cl
mov byte [ecx + edx], al
lea eax, [ecx + esi]
mov ecx, dword [esp + 0x2c]
mov esi, dword [esp + 0xc]
mov dword [ecx + eax*4], esi
inc esi
mov dword [esp + 0xc], esi
cmp esi, dword [esp + 0x38]
jb 0x4e7480
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0x34]
mov esi, dword [esp + 0x24]
add esi, 0xffffffe0
mov eax, dword [edx + 0x24]
mov dword [esp + 0x38], eax
lea ecx, [edi + 1]
mov eax, dword [esp + 0x10]
add eax, esi
mov dword [esp + 0xc], esi
mov dword [esp + 0x14], esi
cmp eax, ecx
jbe 0x4e7534
xor ecx, ecx
jmp 0x4e753b
sub ecx, dword [esp + 0x10]
sub ecx, esi
inc ecx
mov eax, 8
cmp ecx, eax
cmova ecx, eax
add ecx, esi
mov dword [esp + 0x40], ecx
cmp esi, ecx
jae 0x4e75bd
mov eax, 0x38
mov edi, edx
sub eax, dword [esp + 0x38]
mov esi, ecx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x38], eax
nop dword [eax]
nop dword [eax + eax]
mov eax, dword [esp + 0x10]
push 0xcf1bbcdc
push 0xbb000000
push dword [edx + eax + 4]
push dword [edx + eax]
call fcn.00491a50
xor eax, dword [edi + 0x50]
xor edx, dword [edi + 0x54]
mov ecx, dword [esp + 0x38]
call fcn.00491dc0
mov edx, dword [esp + 0x14]
mov ecx, eax
mov eax, edx
inc edx
and eax, 7
mov dword [esp + 0x14], edx
mov dword [edi + eax*4 + 0x2c], ecx
cmp edx, esi
jb 0x4e7570
mov esi, dword [esp + 0xc]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0x34]
mov eax, dword [edx + 0x5c]
mov ecx, dword [edx + 0x24]
mov dword [esp + 0x80], eax
mov eax, dword [edx + 0x28]
mov dword [esp + 0x14], eax
mov eax, dword [edx + 4]
mov dword [esp + 0x38], eax
cmp esi, dword [esp + 0x24]
jae 0x4e7681
mov edi, dword [esp + 0x1c]
mov eax, 0x38
sub eax, ecx
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x38]
push 0xcf1bbcdc
push 0xbb000000
push dword [esi + eax + 0xc]
push dword [esi + eax + 8]
call fcn.00491a50
xor eax, dword [edi + 0x50]
xor edx, dword [edi + 0x54]
mov ecx, dword [esp + 0x40]
call fcn.00491dc0
and esi, 7
mov ecx, eax
mov eax, 0
mov edx, dword [edi + esi*4 + 0x2c]
mov dword [edi + esi*4 + 0x2c], ecx
mov esi, edx
shr esi, 2
and esi, 0x3fffffc0
mov dword [esp + 0x70], edx
mov edx, dword [esp + 0x14]
add edx, esi
movzx ecx, byte [edx]
dec ecx
and ecx, 0x3f
cmove eax, dword [esp + 0x18]
add ecx, eax
mov eax, dword [esp + 0x70]
mov byte [edx], cl
mov byte [ecx + edx], al
lea eax, [ecx + esi]
mov ecx, dword [esp + 0x80]
mov esi, dword [esp + 0xc]
mov dword [ecx + eax*4], esi
inc esi
mov dword [esp + 0xc], esi
cmp esi, dword [esp + 0x24]
jb 0x4e75f1
mov edi, dword [esp + 0x34]
mov edx, dword [esp + 0x1c]
mov esi, dword [esp + 0x24]
push 0xcf1bbcdc
push 0xbb000000
mov dword [edx + 0x1c], esi
push dword [edi + 0xc]
push dword [edi + 8]
call fcn.00491a50
xor eax, dword [esp + 0x58]
mov ecx, 0x38
xor edx, dword [esp + 0x5c]
sub ecx, dword [esp + 0x3c]
call fcn.00491dc0
mov edi, dword [esp + 0x1c]
mov ecx, eax
mov eax, esi
mov esi, dword [esp + 0x44]
and eax, 7
mov edx, dword [esi + eax*4]
mov dword [esi + eax*4], ecx
jmp 0x4e76f9
movq xmm0, qword [esp + 0x70]
mov eax, 0x38
sub eax, dword [esp + 0x3c]
movq xmm1, qword [esp + 0x80]
pxor xmm1, xmm0
movd xmm0, eax
mov eax, dword [esp + 0x24]
psrlq xmm1, xmm0
mov dword [edi + 0x1c], eax
movd edx, xmm1
add dword [edi + 0x58], edx
mov eax, edx
mov ecx, dword [esp + 0x2c]
mov edi, dword [esp + 0x30]
shr eax, 2
and eax, 0x3fffffc0
mov dword [esp + 0x18], edx
add edi, eax
mov dword [esp + 0xc], 0
mov dword [esp + 0x58], edi
mov dword [esp + 0x14], 0
lea ecx, [ecx + eax*4]
movsx eax, dl
movzx esi, byte [edi]
mov edx, edi
mov dword [esp + 0x3c], ecx
xor ecx, ecx
mov dword [esp + 0x2c], esi
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
pshufd xmm1, xmm0, 0
xorps xmm0, xmm0
movaps xmmword [esp + 0x80], xmm0
nop dword [eax]
movups xmm0, xmmword [edx]
lea edx, [edx + 0x10]
pcmpeqb xmm0, xmm1
pmovmskb eax, xmm0
mov dword [esp + ecx*4 + 0x80], eax
inc ecx
cmp ecx, 4
jl 0x4e7760
mov eax, dword [esp + 0x8c]
and esi, 0x3f
cdq
mov edi, eax
mov ecx, edx
mov eax, dword [esp + 0x88]
shld ecx, edi, 0x10
cdq
or ecx, edx
shl edi, 0x10
or edi, eax
mov eax, dword [esp + 0x84]
shld ecx, edi, 0x10
cdq
or ecx, edx
shl edi, 0x10
or edi, eax
mov eax, dword [esp + 0x80]
shld ecx, edi, 0x10
cdq
or ecx, edx
shl edi, 0x10
mov dword [esp + 0x30], ecx
or edi, eax
mov edx, dword [esp + 0x30]
mov ecx, esi
neg ecx
mov eax, edi
and ecx, 0x3f
call fcn.00491da0
mov dword [esp + 0x44], eax
mov ecx, esi
mov dword [esp + 0x5c], edx
mov eax, edi
mov edx, dword [esp + 0x30]
call fcn.00491dc0
mov esi, dword [esp + 0x44]
mov edi, dword [esp + 0x5c]
or esi, eax
or edi, edx
ja 0x4e7800
test esi, esi
je 0x4e7858
mov ecx, dword [esp + 0x50]
test ecx, ecx
je 0x4e7858
test esi, esi
jne 0x4e7814
bsf eax, edi
add eax, 0x20
jmp 0x4e7817
bsf eax, esi
add eax, dword [esp + 0x2c]
and eax, 0x3f
je 0x4e7842
mov edx, dword [esp + 0x3c]
mov eax, dword [edx + eax*4]
cmp eax, dword [esp + 0x48]
jb 0x4e7858
mov edx, dword [esp + 0xc]
mov dword [esp + edx*4 + 0x98], eax
inc edx
dec ecx
mov dword [esp + 0xc], edx
mov dword [esp + 0x50], ecx
mov ecx, esi
mov eax, edi
add ecx, 0xffffffff
adc eax, 0xffffffff
and esi, ecx
and edi, eax
ja 0x4e7800
jb 0x4e7858
test esi, esi
jne 0x4e7800
mov ecx, dword [esp + 0x2c]
mov edx, 0x3f
mov esi, dword [esp + 0x3c]
dec ecx
and ecx, 0x3f
mov eax, 0
cmove eax, edx
mov edx, dword [esp + 0x58]
add ecx, eax
mov eax, dword [esp + 0x18]
mov byte [edx], cl
mov byte [ecx + edx], al
mov edx, dword [esp + 0x1c]
mov eax, dword [edx + 0x1c]
mov dword [esi + ecx*4], eax
inc dword [edx + 0x1c]
cmp dword [esp + 0xc], 0
jbe 0x4e7965
mov esi, dword [esp + 0x34]
mov ecx, 3
xor eax, eax
mov eax, dword [esp + eax*4 + 0x98]
mov edx, dword [esp + 0x10]
add edx, eax
mov dword [esp + 0x48], eax
mov eax, dword [edx + ecx - 3]
cmp eax, dword [ecx + esi - 3]
jne 0x4e7952
mov edi, dword [esp + 0x28]
mov eax, esi
add edi, 0xfffffffd
cmp esi, edi
jae 0x4e7904
mov eax, dword [edx]
xor eax, dword [esi]
je 0x4e78e1
mov edi, dword [esp + 0x28]
bsf ecx, eax
shr ecx, 3
jmp 0x4e792c
lea eax, [esi + 4]
add edx, 4
cmp eax, edi
jae 0x4e7904
nop dword [eax + eax]
mov ecx, dword [edx]
xor ecx, dword [eax]
jne 0x4e7a78
add eax, 4
add edx, 4
cmp eax, edi
jb 0x4e78f0
mov edi, dword [esp + 0x28]
lea ecx, [edi - 1]
cmp eax, ecx
jae 0x4e791d
mov cx, word [edx]
cmp cx, word [eax]
jne 0x4e791d
add eax, 2
add edx, 2
cmp eax, edi
jae 0x4e7928
mov cl, byte [edx]
cmp cl, byte [eax]
jne 0x4e7928
inc eax
mov ecx, eax
sub ecx, esi
cmp ecx, dword [esp + 0x20]
jbe 0x4e794e
mov eax, dword [esp + 0x24]
sub eax, dword [esp + 0x48]
mov edx, dword [esp + 0x6c]
add eax, 3
mov dword [esp + 0x20], ecx
mov dword [edx], eax
lea eax, [ecx + esi]
cmp eax, edi
je 0x4e7965
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x14]
inc eax
mov dword [esp + 0x14], eax
cmp eax, dword [esp + 0xc]
jb 0x4e78a3
mov edx, dword [esp + 0x54]
mov dword [esp + 0x10], 0
mov dword [esp + 0x18], 0
mov ecx, dword [edx + 4]
mov eax, dword [edx]
mov edx, dword [esp + 0x64]
mov dword [esp + 0x48], ecx
sub ecx, eax
add ecx, dword [esp + 0x60]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x4c]
movzx esi, byte [edx]
movsx eax, al
mov dword [esp + 0x44], ecx
xor ecx, ecx
mov dword [esp + 0x60], esi
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
pshufd xmm1, xmm0, 0
xorps xmm0, xmm0
movaps xmmword [esp + 0x80], xmm0
movups xmm0, xmmword [edx]
lea edx, [edx + 0x10]
pcmpeqb xmm0, xmm1
pmovmskb eax, xmm0
mov dword [esp + ecx*4 + 0x80], eax
inc ecx
cmp ecx, 4
jl 0x4e79c0
mov eax, dword [esp + 0x8c]
and esi, 0x3f
cdq
mov edi, eax
mov ecx, edx
mov eax, dword [esp + 0x88]
shld ecx, edi, 0x10
cdq
or ecx, edx
shl edi, 0x10
or edi, eax
mov eax, dword [esp + 0x84]
shld ecx, edi, 0x10
cdq
or ecx, edx
shl edi, 0x10
or edi, eax
mov eax, dword [esp + 0x80]
shld ecx, edi, 0x10
cdq
or ecx, edx
shl edi, 0x10
mov dword [esp + 0x30], ecx
or edi, eax
mov edx, dword [esp + 0x30]
mov ecx, esi
neg ecx
mov eax, edi
and ecx, 0x3f
call fcn.00491da0
mov dword [esp + 0x4c], eax
mov ecx, esi
mov dword [esp + 0x64], edx
mov eax, edi
mov edx, dword [esp + 0x30]
call fcn.00491dc0
mov esi, dword [esp + 0x4c]
mov edi, dword [esp + 0x64]
or esi, eax
or edi, edx
ja 0x4e7a64
test esi, esi
je 0x4e7baa
mov ecx, dword [esp + 0x50]
test ecx, ecx
je 0x4e7ad2
test esi, esi
jne 0x4e7a8b
bsf eax, edi
add eax, 0x20
jmp 0x4e7a8e
mov edi, dword [esp + 0x28]
bsf ecx, ecx
shr ecx, 3
sub ecx, esi
add ecx, eax
jmp 0x4e792c
bsf eax, esi
add eax, dword [esp + 0x60]
and eax, 0x3f
je 0x4e7abc
mov edx, dword [esp + 0x68]
mov edx, dword [edx + eax*4]
mov eax, dword [esp + 0x54]
cmp edx, dword [eax + 0xc]
jb 0x4e7ad2
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0x98], edx
inc eax
dec ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x50], ecx
mov ecx, esi
mov eax, edi
add ecx, 0xffffffff
adc eax, 0xffffffff
and esi, ecx
and edi, eax
ja 0x4e7a64
jb 0x4e7ad2
test esi, esi
jne 0x4e7a64
cmp dword [esp + 0x10], 0
jbe 0x4e7baa
mov edi, dword [esp + 0x34]
xor eax, eax
mov eax, dword [esp + eax*4 + 0x98]
mov esi, dword [esp + 0x48]
add esi, eax
mov dword [esp + 0x4c], eax
mov eax, dword [esi]
cmp eax, dword [edi]
jne 0x4e7b7d
mov ecx, dword [esp + 0x28]
lea eax, [edi + 4]
add esi, 4
sub eax, esi
add eax, dword [esp + 0x2c]
cmp eax, ecx
cmovb ecx, eax
lea eax, [edi + 4]
push ecx
push esi
push eax
call fcn.004d5c50
add esp, 0xc
mov dword [esp + 0x68], eax
lea ecx, [eax + esi]
cmp ecx, dword [esp + 0x2c]
jne 0x4e7b4c
mov esi, dword [esp + 0x28]
add eax, 4
push esi
push dword [esp + 0x80]
add eax, edi
push eax
call fcn.004d5c50
add esp, 0xc
add eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x20]
lea edx, [eax + 4]
cmp edx, ecx
jbe 0x4e7b81
mov eax, dword [esp + 0x24]
mov ecx, edx
sub eax, dword [esp + 0x4c]
sub eax, dword [esp + 0x44]
mov esi, dword [esp + 0x6c]
add eax, 3
mov dword [esp + 0x20], ecx
mov dword [esi], eax
lea eax, [edx + edi]
cmp eax, dword [esp + 0x28]
je 0x4e7b94
jmp 0x4e7b81
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x18]
inc eax
mov dword [esp + 0x18], eax
cmp eax, dword [esp + 0x10]
jb 0x4e7ae3
mov eax, ecx
pop edi
pop esi
mov ecx, dword [esp + 0x194]
xor ecx, esp
call fcn.004913e0
mov esp, ebp
pop ebp
ret
mov ecx, dword [esp + 0x19c]
mov eax, dword [esp + 0x20]
pop edi
pop esi
xor ecx, esp
call fcn.004913e0
mov esp, ebp
pop ebp
ret