Function at 0x493ae0
Capabilities:
Authenticate hmac
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
mov eax, 0x32c
call fcn.00551a10
mov eax, dword [0x5ea6f0]
xor eax, esp
mov dword [esp + 0x328], eax
mov eax, dword [esp + 0x334]
mov ecx, dword [esp + 0x33c]
mov edx, dword [esp + 0x340]
push ebx
mov ebx, dword [esp + 0x334]
push ebp
mov ebp, dword [esp + 0x340]
push esi
mov esi, dword [esp + 0x354]
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x358]
push edi
mov dword [esp + 0x70], ebx
mov dword [esp + 0x54], ebp
mov dword [esp + 0x44], ecx
mov dword [esp + 0x40], edx
mov dword [esp + 0x4c], eax
mov edi, 0x40
mov dword [esp + 0x38], 0x28
mov dword [esp + 0x1c], 8
mov byte [esp + 0x12], 1
cmp esi, 0x100000
jb 0x493b7e
push str.data_plus_mac_plus_padding_size___1024__1024
push 0x1c7
push str.._ssl_s3_cbc.c
call fcn.0040b2c0
add esp, 0xc
push ebx
call fcn.0045d8d0
push eax
call fcn.00423410
add esp, 8
cmp eax, 0x2a0
jg 0x493c58
je 0x493c23
cmp eax, 4
je 0x493be1
cmp eax, 0x40
jne 0x493c69
lea ecx, [esp + 0x90]
push ecx
call fcn.0048d6d0
add esp, 4
test eax, eax
jle 0x49428d
mov dword [esp + 0x24], 0x4938c0
mov dword [esp + 0x18], 0x48d570
mov dword [esp + 0x14], 0x14
jmp 0x493d21
lea edx, [esp + 0x90]
push edx
call fcn.0048bcf0
add esp, 4
test eax, eax
jle 0x49428d
mov dword [esp + 0x24], 0x493840
mov dword [esp + 0x18], 0x421550
mov dword [esp + 0x14], 0x10
mov dword [esp + 0x38], 0x30
mov byte [esp + 0x12], 0
jmp 0x493d21
lea eax, [esp + 0x90]
push eax
call fcn.00406310
add esp, 4
test eax, eax
jle 0x49428d
mov dword [esp + 0x24], 0x493960
mov dword [esp + 0x18], 0x406450
mov dword [esp + 0x14], 0x20
jmp 0x493d21
sub eax, 0x2a1
je 0x493ce4
dec eax
je 0x493cc6
dec eax
je 0x493c94
push 0x5d1a18
push 0x209
push str.._ssl_s3_cbc.c
call fcn.0040b2c0
add esp, 0xc
test ebp, ebp
je 0x49428d
mov dword [ebp], 0xffffffff
jmp 0x49428d
lea ecx, [esp + 0x90]
push ecx
call fcn.004062b0
add esp, 4
test eax, eax
jle 0x49428d
mov dword [esp + 0x24], 0x493960
mov dword [esp + 0x18], 0x406450
mov dword [esp + 0x14], 0x1c
jmp 0x493d21
lea edx, [esp + 0x90]
push edx
call fcn.0048d7b0
add esp, 4
test eax, eax
jle 0x49428d
mov dword [esp + 0x14], edi
jmp 0x493d04
lea eax, [esp + 0x90]
push eax
call fcn.0048d710
add esp, 4
test eax, eax
jle 0x49428d
mov dword [esp + 0x14], 0x30
mov dword [esp + 0x1c], 0x10
mov edi, 0x80
mov dword [esp + 0x18], 0x48ddd0
mov dword [esp + 0x24], 0x493a50
mov bl, byte [esp + 0x364]
mov dword [esp + 0x30], 0xd
test bl, bl
je 0x493d47
mov ecx, dword [esp + 0x360]
mov edx, dword [esp + 0x38]
lea eax, [edx + ecx + 0xb]
mov dword [esp + 0x30], eax
mov edx, dword [esp + 0x1c]
xor ecx, ecx
test bl, bl
sete cl
lea ebp, [ecx*4 + 2]
mov ecx, dword [esp + 0x30]
sub ecx, dword [esp + 0x14]
mov dword [esp + 0x34], ebp
lea eax, [ecx + edx]
add eax, edi
xor edx, edx
lea eax, [eax + esi - 1]
div edi
add ecx, dword [esp + 0x354]
xor edx, edx
mov esi, eax
xor eax, eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
mov eax, ecx
div edi
mov dword [esp + 0x3c], edx
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x1c]
xor edx, edx
add eax, ecx
div edi
xor edx, edx
test bl, bl
setne dl
add edx, ebp
mov dword [esp + 0x64], eax
cmp esi, edx
jbe 0x493dbd
sub esi, ebp
mov eax, esi
mov dword [esp + 0x28], eax
imul eax, edi
mov dword [esp + 0x2c], eax
cmp byte [esp + 0x364], 0
lea ebx, [ecx*8]
jne 0x493e58
push edi
lea eax, [esp + 0x1bc]
push 0
push eax
lea ebx, [ebx + edi*8]
call fcn.00550bc0
mov esi, dword [esp + 0x36c]
add esp, 0xc
cmp esi, 0x80
jbe 0x493e0e
push str.mac_secret_length___sizeof_hmac_pad_
push 0x271
push str.._ssl_s3_cbc.c
call fcn.0040b2c0
add esp, 0xc
mov ecx, dword [esp + 0x4c]
push esi
push ecx
lea edx, [esp + 0x1c0]
push edx
call fcn.0054fa00
add esp, 0xc
xor eax, eax
test edi, edi
je 0x493e3d
lea ebx, [ebx]
xor byte [esp + eax + 0x1b8], 0x36
inc eax
cmp eax, edi
jb 0x493e30
mov ebp, dword [esp + 0x18]
lea eax, [esp + 0x1b8]
push eax
lea ecx, [esp + 0x94]
push ecx
call ebp
add esp, 8
jmp 0x493e5c
mov ebp, dword [esp + 0x18]
cmp byte [esp + 0x12], 0
mov esi, dword [esp + 0x1c]
je 0x493ea1
lea edx, [esi - 4]
push edx
lea eax, [esp + 0x16c]
push 0
push eax
call fcn.00550bc0
lea eax, [esp + esi + 0x174]
mov ecx, ebx
shr ecx, 0x18
mov byte [eax - 4], cl
mov edx, ebx
shr edx, 0x10
mov ecx, ebx
add esp, 0xc
shr ecx, 8
mov byte [eax - 3], dl
mov byte [eax - 2], cl
mov byte [eax - 1], bl
jmp 0x493ed6
push esi
lea edx, [esp + 0x16c]
push 0
push edx
call fcn.00550bc0
lea eax, [esp + esi + 0x174]
mov ecx, ebx
shr ecx, 0x18
mov byte [eax - 5], cl
mov edx, ebx
shr edx, 0x10
mov ecx, ebx
add esp, 0xc
shr ecx, 8
mov byte [eax - 6], dl
mov byte [eax - 7], cl
mov byte [eax - 8], bl
mov ebx, dword [esp + 0x2c]
test ebx, ebx
je 0x493ff5
cmp byte [esp + 0x364], 0
je 0x493f7a
mov esi, dword [esp + 0x30]
cmp esi, edi
jbe 0x49428d
mov ebx, dword [esp + 0x44]
lea edx, [esp + 0x90]
push ebx
push edx
sub esi, edi
call ebp
push esi
add ebx, edi
lea eax, [esp + 0x244]
push ebx
push eax
call fcn.0054fa00
mov ebx, dword [esp + 0x54]
mov ecx, edi
sub ecx, esi
push ecx
lea edx, [esp + esi + 0x250]
push ebx
push edx
call fcn.0054fa00
lea eax, [esp + 0x258]
push eax
lea ecx, [esp + 0xb4]
push ecx
call ebp
mov eax, dword [esp + 0x54]
xor edx, edx
div edi
add esp, 0x28
dec eax
cmp eax, 1
jbe 0x493ff5
sub ebx, esi
add ebx, edi
lea esi, [eax - 1]
lea edx, [esp + 0x90]
push ebx
push edx
call dword [esp + 0x20]
add esp, 8
add ebx, edi
dec esi
jne 0x493f63
jmp 0x493ff5
mov eax, dword [esp + 0x44]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov esi, dword [esp + 0x40]
mov dword [esp + 0x238], ecx
mov ecx, dword [eax + 8]
mov dword [esp + 0x23c], edx
mov dl, byte [eax + 0xc]
lea eax, [edi - 0xd]
push eax
mov dword [esp + 0x244], ecx
lea ecx, [esp + 0x249]
push esi
push ecx
mov byte [esp + 0x250], dl
call fcn.0054fa00
lea edx, [esp + 0x244]
push edx
lea eax, [esp + 0xa0]
push eax
call ebp
xor edx, edx
mov eax, ebx
div edi
add esp, 0x14
cmp eax, 1
jbe 0x493ff5
lea esi, [esi + edi - 0xd]
lea ebx, [eax - 1]
lea ecx, [esp + 0x90]
push esi
push ecx
call ebp
add esp, 8
add esi, edi
dec ebx
jne 0x493fe2
push 0x40
lea edx, [esp + 0x17c]
push 0
push edx
call fcn.00550bc0
mov ebp, dword [esp + 0x34]
mov eax, dword [esp + 0x40]
add eax, ebp
add esp, 0xc
mov dword [esp + 0x48], ebp
mov dword [esp + 0x50], eax
cmp ebp, eax
ja 0x4941d4
mov eax, ebp
xor eax, dword [esp + 0x68]
xor esi, esi
lea edx, [eax - 1]
not eax
shr eax, 0x1f
shr edx, 0x1f
and dl, al
mov eax, ebp
xor eax, dword [esp + 0x64]
neg dl
lea ebx, [eax - 1]
shr ebx, 0x1f
not eax
shr eax, 0x1f
and bl, al
neg bl
mov byte [esp + 0x22], dl
mov byte [esp + 0x13], bl
test edi, edi
je 0x494174
mov eax, dword [esp + 0x3c]
lea ecx, [eax + 1]
shr ecx, 0x1f
mov dword [esp + 0x6c], ecx
mov cl, bl
not cl
or cl, dl
mov byte [esp + 0x23], cl
movzx ebp, dl
mov ecx, edi
sub ecx, dword [esp + 0x1c]
mov dword [esp + 0x5c], ebp
mov ebp, dword [esp + 0x3c]
mov dword [esp + 0x74], ecx
mov ecx, dword [esp + 0x1c]
shr eax, 0x1f
neg ebp
sub ecx, edi
lea edx, [esp + ecx + 0x168]
mov dword [esp + 0x34], eax
mov dword [esp + 0x28], edx
jmp 0x4940b4
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x30]
mov byte [esp + 0x12], 0
cmp ecx, edx
jae 0x4940ce
mov edx, dword [esp + 0x44]
mov dl, byte [edx + ecx]
jmp 0x4940e4
mov ebx, dword [esp + 0x358]
add ebx, edx
cmp ecx, ebx
jae 0x4940e8
mov ebx, dword [esp + 0x40]
sub ebx, edx
mov dl, byte [ebx + ecx]
mov byte [esp + 0x12], dl
inc ecx
mov dword [esp + 0x2c], ecx
mov ecx, esi
shr ecx, 0x1f
mov bl, cl
xor bl, al
mov edx, ebp
shr edx, 0x1f
xor dl, al
or dl, bl
xor dl, cl
dec dl
movzx eax, dl
mov edx, dword [esp + 0x3c]
and eax, dword [esp + 0x5c]
inc edx
mov ebx, esi
sub ebx, edx
mov dl, byte [esp + 0x6c]
shr ebx, 0x1f
xor bl, dl
xor dl, cl
or bl, dl
xor bl, cl
dec bl
and bl, byte [esp + 0x22]
mov cl, al
not cl
and cl, byte [esp + 0x12]
and al, 0x80
not bl
or cl, al
and bl, cl
and bl, byte [esp + 0x23]
mov al, bl
mov bl, byte [esp + 0x13]
cmp esi, dword [esp + 0x74]
jb 0x49415b
movzx ecx, bl
mov dl, cl
not dl
and dl, al
mov eax, dword [esp + 0x28]
mov al, byte [eax]
and al, cl
or al, dl
inc dword [esp + 0x28]
mov byte [esp + esi + 0x2b8], al
inc esi
inc ebp
cmp esi, edi
jb 0x4940b0
mov ebp, dword [esp + 0x48]
lea ecx, [esp + 0x2b8]
push ecx
lea edx, [esp + 0x94]
push edx
call dword [esp + 0x20]
lea eax, [esp + 0x2c0]
push eax
lea ecx, [esp + 0x9c]
push ecx
call dword [esp + 0x34]
mov esi, dword [esp + 0x24]
add esp, 0x10
xor eax, eax
test esi, esi
je 0x4941c5
lea esp, [esp]
mov dl, byte [esp + eax + 0x2b8]
and dl, bl
or byte [esp + eax + 0x178], dl
inc eax
cmp eax, esi
jb 0x4941b0
inc ebp
mov dword [esp + 0x48], ebp
cmp ebp, dword [esp + 0x50]
jbe 0x494023
lea eax, [esp + 0x78]
push eax
call fcn.00463b90
mov ecx, dword [esp + 0x74]
mov edx, dword [ecx]
push 0
push edx
lea eax, [esp + 0x84]
push eax
call fcn.00463be0
add esp, 0x10
test eax, eax
jle 0x494280
cmp byte [esp + 0x364], 0
je 0x4942a8
mov esi, dword [esp + 0x38]
push esi
lea ecx, [esp + 0x1bc]
push 0x5c
push ecx
call fcn.00550bc0
mov edx, dword [esp + 0x36c]
mov eax, dword [esp + 0x58]
push edx
push eax
lea ecx, [esp + 0x8c]
push ecx
call fcn.00463d90
add esp, 0x18
test eax, eax
jle 0x494280
push esi
lea edx, [esp + 0x1bc]
push edx
lea eax, [esp + 0x80]
push eax
call fcn.00463d90
add esp, 0xc
test eax, eax
jle 0x494280
mov ecx, dword [esp + 0x14]
push ecx
lea edx, [esp + 0x17c]
push edx
lea eax, [esp + 0x80]
push eax
call fcn.00463d90
add esp, 0xc
test eax, eax
jg 0x4942fb
lea eax, [esp + 0x78]
push eax
call fcn.00463e20
add esp, 4
xor eax, eax
mov ecx, dword [esp + 0x338]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.00550759
add esp, 0x32c
ret
xor eax, eax
test edi, edi
je 0x4942bd
mov edi, edi
xor byte [esp + eax + 0x1b8], 0x6a
inc eax
cmp eax, edi
jb 0x4942b0
push edi
lea ecx, [esp + 0x1bc]
push ecx
lea edx, [esp + 0x80]
push edx
call fcn.00463d90
add esp, 0xc
test eax, eax
jle 0x494280
mov eax, dword [esp + 0x14]
push eax
lea ecx, [esp + 0x17c]
push ecx
lea edx, [esp + 0x80]
push edx
call fcn.00463d90
add esp, 0xc
test eax, eax
jle 0x494280
mov ecx, dword [esp + 0x60]
lea eax, [esp + 0x58]
push eax
push ecx
lea edx, [esp + 0x80]
push edx
call fcn.00463f00
mov eax, dword [esp + 0x60]
add esp, 0xc
test eax, eax
je 0x494323
mov ecx, dword [esp + 0x58]
mov dword [eax], ecx
lea edx, [esp + 0x78]
push edx
call fcn.00463e20
add esp, 4
mov eax, 1
jmp 0x49428f