Function at 0x4e49c0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x5a8057
mov eax, dword fs:[0]
push eax
sub esp, 0x178
mov eax, dword [0x628d00]
xor eax, esp
mov dword [esp + 0x174], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x628d00]
xor eax, esp
push eax
lea eax, [esp + 0x18c]
mov dword fs:[0], eax
mov ebp, dword [esp + 0x19c]
mov ebx, dword [esp + 0x1a0]
mov esi, ecx
mov eax, dword [esi + 0x58]
mov dword [esp + 0x18], ebp
cmp eax, 3
ja case.default.0x4e4a1b
jmp dword [eax*4 + 0x4e4dbc]
test ebx, ebx
je case.default.0x4e4a1b
mov ecx, dword [esi + 0x54]
mov eax, dword [ecx]
mov edx, dword [eax + 0x24]
call edx
mov ecx, dword [esi + 0x54]
mov edi, eax
mov eax, dword [ecx]
mov edx, dword [eax + 0x34]
mov dword [esp + 0x14], edi
call edx
test al, al
je 0x4e4ad8
cmp dword [esi + 0x58], 1
jne 0x4e4ad8
test edi, edi
je 0x4e4a5e
cmp ebx, edi
jae 0x4e4ad8
mov ecx, dword [esi + 0x54]
mov eax, dword [ecx]
mov edx, dword [eax + 0xc]
call edx
mov dword [esp + 0x1c], eax
cmp edi, eax
lea eax, [esp + 0x1c]
jb 0x4e4a78
lea eax, [esp + 0x14]
mov ebp, dword [eax]
mov eax, dword [esi]
mov edx, dword [eax + 0xa4]
push ebp
push 0x61ed64
mov ecx, esi
call edx
push eax
lea ecx, [esi + 0x48]
call fcn.004e3af0
mov edi, eax
mov eax, dword [esp + 0x18]
push ebx
push eax
push edi
call fcn.00530fb0
mov ecx, ebp
sub ecx, ebx
push ecx
push 0
add ebx, edi
push ebx
call fcn.00531690
mov ecx, dword [esi + 0x54]
mov edx, dword [ecx]
mov eax, dword [edx + 0x20]
add esp, 0x18
push ebp
push edi
push edi
call eax
mov edx, dword [esi]
mov eax, dword [edx + 0xa4]
mov ecx, esi
call eax
push 1
push 0
push ebp
jmp 0x4e4b93
test edi, edi
jne 0x4e4b54
test al, al
je 0x4e4b18
push str.StreamTransformationFilter:_plaintext_length_is_not_a_multiple_of_block_size_and_NO_PADDING_is_specified
lea ecx, [esp + 0x5c]
call fcn.00401faf
lea ecx, [esp + 0x58]
push ecx
lea ecx, [esp + 0xb0]
mov dword [esp + 0x198], edi
call fcn.0048cee0
push 0x6045d4
lea edx, [esp + 0xb0]
push edx
call fcn.00531c74
push str.StreamTransformationFilter:_ciphertext_length_is_not_a_multiple_of_block_size
lea ecx, [esp + 0x78]
call fcn.00401faf
lea eax, [esp + 0x74]
push eax
lea ecx, [esp + 0x134]
mov dword [esp + 0x198], 1
call fcn.0048cfb0
push 0x5f9328
lea ecx, [esp + 0x134]
push ecx
call fcn.00531c74
mov edx, dword [esi + 0x5c]
mov eax, dword [esi]
push edx
mov edx, dword [eax + 0xa4]
push ebx
push 0x61ed64
mov ecx, esi
call edx
push eax
lea ecx, [esi + 0x48]
call fcn.004e3b30
mov ecx, dword [esi + 0x54]
push ebx
mov edi, eax
mov eax, dword [ecx]
mov edx, dword [eax + 0x20]
push ebp
push edi
call edx
mov eax, dword [esi]
mov edx, dword [eax + 0xa4]
mov ecx, esi
call edx
push 1
push 0
push ebx
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x14]
push edi
call eax
mov ecx, dword [esp + 0x18c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x174]
xor ecx, esp
call fcn.00531be5
add esp, 0x184
ret 8
mov ecx, dword [esi + 0x54]
mov edx, dword [ecx]
mov eax, dword [edx + 0xc]
call eax
mov edx, dword [esi]
mov ebp, dword [esi + 0x5c]
mov dword [esp + 0x14], eax
mov eax, dword [edx + 0xa4]
mov ecx, esi
call eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x1c], ecx
cmp dword [esi + 0x4c], ecx
jae 0x4e4c1e
mov edx, dword [eax]
mov edx, dword [edx + 0x84]
lea ecx, [esp + 0x1c]
push ecx
push 0x61ed64
mov ecx, eax
call edx
mov ecx, dword [esp + 0x14]
cmp dword [esp + 0x1c], ecx
jb 0x4e4c15
mov edi, eax
jmp 0x4e4c21
push ebp
lea ecx, [esi + 0x48]
call fcn.004041f6
mov edi, dword [esi + 0x50]
mov ecx, dword [esi + 0x54]
mov edx, dword [ecx]
mov eax, dword [edx + 0x34]
call eax
test al, al
je 0x4e4c87
mov ecx, dword [esp + 0x18]
push ebx
push ecx
push edi
call fcn.00530fb0
add esp, 0xc
cmp dword [esi + 0x58], 2
jne 0x4e4c58
mov eax, dword [esp + 0x14]
mov edx, eax
sub al, bl
sub edx, ebx
movzx eax, al
push edx
push eax
add ebx, edi
push ebx
jmp 0x4e4c6b
mov ecx, dword [esp + 0x14]
sub ecx, ebx
dec ecx
push ecx
push 0
lea edx, [ebx + edi + 1]
mov byte [ebx + edi], 0x80
push edx
call fcn.00531690
mov ebx, dword [esp + 0x20]
mov ecx, dword [esi + 0x54]
mov eax, dword [ecx]
mov edx, dword [eax + 0x1c]
add esp, 0xc
push ebx
push edi
push edi
jmp 0x4e4b80
mov eax, dword [esp + 0x14]
cmp ebx, eax
je 0x4e4ccb
push str.StreamTransformationFilter:_ciphertext_length_is_not_a_multiple_of_block_size
lea ecx, [esp + 0x40]
call fcn.00401faf
lea ecx, [esp + 0x3c]
push ecx
lea ecx, [esp + 0xdc]
mov dword [esp + 0x198], 2
call fcn.0048cfb0
push 0x5f9328
lea edx, [esp + 0xdc]
push edx
call fcn.00531c74
mov ecx, dword [esi + 0x54]
mov edx, dword [ecx]
mov edx, dword [edx + 0x1c]
push eax
mov eax, dword [esp + 0x1c]
push eax
push edi
call edx
cmp dword [esi + 0x58], 2
jne 0x4e4d54
mov ebx, dword [esp + 0x14]
mov al, byte [edi + ebx - 1]
lea ebp, [edi + ebx]
cmp al, 1
jb 0x4e4d18
movzx ecx, al
cmp ecx, ebx
ja 0x4e4d18
mov byte [esp + 0x19], al
mov eax, dword [esp + 0x18]
push eax
sub ebx, ecx
lea ecx, [ebx + edi]
push ebp
push ecx
call fcn.004e03f0
add esp, 0xc
cmp eax, ebp
je 0x4e4b82
push str.StreamTransformationFilter:_invalid_PKCS_7_block_padding_found
lea ecx, [esp + 0x24]
call fcn.00401faf
lea edx, [esp + 0x20]
push edx
lea ecx, [esp + 0x108]
mov dword [esp + 0x198], 3
call fcn.0048cfb0
push 0x5f9328
lea eax, [esp + 0x108]
push eax
call fcn.00531c74
cmp ebx, 1
jbe 0x4e4d6d
lea esp, [esp]
cmp byte [edi + ebx - 1], 0
jne 0x4e4d6d
dec ebx
cmp ebx, 1
ja 0x4e4d60
dec ebx
cmp byte [ebx + edi], 0x80
je 0x4e4b82
push str.StreamTransformationFilter:_invalid_ones_and_zeros_padding_found
lea ecx, [esp + 0x94]
call fcn.00401faf
lea ecx, [esp + 0x90]
push ecx
lea ecx, [esp + 0x160]
mov dword [esp + 0x198], 4
call fcn.0048cfb0
push 0x5f9328
lea edx, [esp + 0x160]
push edx
call fcn.00531c74
mov edi, edi
and cl, byte [edx + 0x4e]
add byte [edx], ah
dec edx
dec esi
add bh, al
dec ebx
dec esi
add bh, al
dec ebx
dec esi
add ah, cl
int3