Function at 0x4e8310
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x17c
mov eax, dword [0x5d60c4]
xor eax, esp
mov dword [esp + 0x178], eax
mov eax, dword [esp + 0x188]
mov edx, 1
mov dword [esp + 0x64], eax
mov eax, dword [esp + 0x18c]
mov dword [esp + 0xc], eax
push esi
mov esi, dword [esp + 0x184]
push edi
mov edi, dword [esp + 0x18c]
mov dword [esp + 0x60], edi
mov eax, dword [esi + 0x5c]
mov ecx, dword [esi + 4]
mov dword [esp + 0x68], eax
mov eax, dword [esi + 0x28]
mov dword [esp + 0x64], eax
lea eax, [esi + 0x2c]
mov dword [esp + 0x3c], eax
mov eax, dword [esi + 0x24]
mov dword [esp + 0x38], eax
mov eax, dword [esi + 0xc]
mov dword [esp + 0x2c], eax
add eax, ecx
mov dword [esp + 8], eax
mov eax, edi
sub eax, ecx
mov dword [esp + 0x54], ecx
mov ecx, dword [esi + 0xb8]
mov dword [esp + 0x74], eax
mov edi, dword [esp + 0x74]
shl edx, cl
mov ecx, dword [esi + 0x10]
sub edi, edx
sub eax, ecx
mov dword [esp + 0x78], esi
cmp eax, edx
mov dword [esp + 0x70], 3
mov eax, edi
mov dword [esp + 0x18], 0xf
cmovbe eax, ecx
mov edi, dword [esp + 0x60]
cmp dword [esi + 0x18], 0
cmovne eax, ecx
mov ecx, 4
mov dword [esp + 0x5c], eax
mov eax, dword [esi + 0xc4]
cmp eax, ecx
cmovb ecx, eax
mov eax, dword [esi + 0x50]
mov dword [esp + 0x58], eax
mov eax, dword [esi + 0x54]
mov dword [esp + 0x10], eax
mov eax, 1
shl eax, cl
mov ecx, 0x18
mov dword [esp + 0x50], eax
mov eax, dword [esi + 0xb4]
mov dword [esp + 0x34], eax
mov edx, dword [eax + 0x28]
mov esi, dword [eax + 0x5c]
imul eax, dword [edi], 0x9e3779b1
mov edi, dword [esp + 0x34]
sub ecx, dword [edi + 0x24]
mov edi, dword [esp + 0x60]
mov dword [esp + 0x44], eax
shr eax, cl
mov dword [esp + 0x24], eax
shr eax, 4
and eax, 0xffffff0
lea ecx, [eax + edx]
mov dword [esp + 0x28], ecx
lea eax, [esi + eax*4]
mov ecx, dword [esp + 0x78]
mov dword [esp + 0x10], eax
cmp dword [ecx + 0xdc], 0
jne 0x4e865f
mov esi, dword [ecx + 0x1c]
mov eax, dword [esp + 0x74]
sub eax, esi
mov dword [esp + 0x7c], esi
cmp eax, 0x180
jbe 0x4e8575
lea eax, [esi + 0x60]
mov dword [esp + 0x4c], eax
cmp esi, eax
jae 0x4e84f7
mov edi, dword [esp + 0x7c]
mov esi, 0x18
sub esi, dword [esp + 0x38]
mov dword [esp + 0x20], esi
mov eax, dword [ecx + 0x54]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x54]
imul edx, dword [edi + eax + 8], 0x9e3779b1
mov eax, edi
and eax, 7
xor edx, dword [ecx + 0x50]
mov ecx, esi
mov esi, dword [esp + 0x3c]
shr edx, cl
mov ecx, dword [esi + eax*4]
mov dword [esi + eax*4], edx
mov esi, ecx
mov edx, dword [esp + 0x64]
mov eax, 0
shr esi, 4
and esi, 0xffffff0
mov dword [esp + 0x7c], ecx
add edx, esi
movzx ecx, byte [edx]
dec ecx
and ecx, 0xf
cmove eax, dword [esp + 0x18]
add ecx, eax
mov eax, dword [esp + 0x7c]
mov byte [edx], cl
mov byte [ecx + edx], al
lea eax, [ecx + esi]
mov ecx, dword [esp + 0x68]
mov esi, dword [esp + 0x20]
mov dword [ecx + eax*4], edi
inc edi
mov ecx, dword [esp + 0x78]
cmp edi, dword [esp + 0x4c]
jb 0x4e8480
mov edi, dword [esp + 0x60]
mov esi, dword [esp + 0x74]
lea edx, [edi + 1]
mov eax, dword [esp + 0x54]
add esi, 0xffffffe0
add eax, esi
mov dword [esp + 0x7c], esi
cmp eax, edx
jbe 0x4e8513
xor edx, edx
jmp 0x4e851a
sub edx, dword [esp + 0x54]
sub edx, esi
inc edx
mov eax, 8
cmp edx, eax
cmova edx, eax
add edx, esi
mov dword [esp + 0x20], edx
cmp esi, edx
jae 0x4e8575
mov eax, 0x18
mov edi, edx
sub eax, dword [ecx + 0x24]
mov dword [esp + 0x48], eax
nop dword [eax]
mov eax, dword [ecx + 0x54]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x54]
imul edx, dword [esi + eax], 0x9e3779b1
mov eax, esi
and eax, 7
inc esi
xor edx, dword [ecx + 0x50]
mov ecx, dword [esp + 0x48]
shr edx, cl
mov ecx, dword [esp + 0x78]
mov dword [ecx + eax*4 + 0x2c], edx
cmp esi, edi
jb 0x4e8540
mov edi, dword [esp + 0x60]
mov esi, dword [esp + 0x7c]
mov eax, dword [ecx + 0x5c]
mov edx, dword [ecx + 4]
mov dword [esp + 0x4c], eax
mov eax, dword [ecx + 0x28]
mov dword [esp + 0x48], eax
mov dword [esp + 0x44], edx
cmp esi, dword [esp + 0x74]
jae 0x4e8627
mov edi, dword [esp + 0x7c]
mov esi, 0x18
sub esi, dword [ecx + 0x24]
mov dword [esp + 0x30], esi
nop dword [eax]
nop dword [eax + eax]
imul edx, dword [edi + edx + 8], 0x9e3779b1
mov eax, dword [ecx + 0x54]
mov dword [esp + 0x20], eax
mov eax, edi
and eax, 7
xor edx, dword [ecx + 0x50]
mov ecx, esi
mov esi, dword [esp + 0x3c]
shr edx, cl
mov ecx, dword [esi + eax*4]
mov dword [esi + eax*4], edx
mov esi, ecx
mov edx, dword [esp + 0x48]
mov eax, 0
shr esi, 4
and esi, 0xffffff0
mov dword [esp + 0x20], ecx
add edx, esi
movzx ecx, byte [edx]
dec ecx
and ecx, 0xf
cmove eax, dword [esp + 0x18]
add ecx, eax
mov eax, dword [esp + 0x20]
mov byte [edx], cl
mov byte [ecx + edx], al
lea eax, [ecx + esi]
mov ecx, dword [esp + 0x4c]
mov esi, dword [esp + 0x30]
mov edx, dword [esp + 0x44]
mov dword [ecx + eax*4], edi
inc edi
mov ecx, dword [esp + 0x78]
cmp edi, dword [esp + 0x74]
jb 0x4e85b0
mov edi, dword [esp + 0x60]
mov esi, dword [esp + 0x74]
mov eax, esi
mov dword [ecx + 0x1c], esi
mov ecx, 0x18
imul edx, dword [edi + 8], 0x9e3779b1
sub ecx, dword [esp + 0x38]
xor edx, dword [esp + 0x58]
shr edx, cl
and eax, 7
mov ecx, dword [esp + 0x3c]
mov esi, dword [ecx + eax*4]
mov dword [ecx + eax*4], edx
mov edx, esi
mov eax, dword [esp + 0x78]
mov dword [esp + 0x58], esi
jmp 0x4e8681
mov edx, dword [esp + 0x58]
mov ecx, 0x18
sub ecx, dword [esp + 0x38]
mov eax, dword [esp + 0x78]
xor edx, dword [esp + 0x44]
shr edx, cl
mov ecx, dword [esp + 0x74]
mov dword [esp + 0x58], edx
mov dword [eax + 0x1c], ecx
add dword [eax + 0x58], edx
mov eax, edx
mov ecx, dword [esp + 0x68]
shr eax, 4
and eax, 0xffffff0
mov dword [esp + 0x7c], 0
lea ecx, [ecx + eax*4]
mov dword [esp + 0x68], ecx
mov ecx, dword [esp + 0x64]
add ecx, eax
mov dword [esp + 0x64], 0
mov dword [esp + 0x48], ecx
movzx eax, byte [ecx]
mov esi, eax
mov dword [esp + 0x30], eax
movsx eax, dl
and esi, 0xf
mov dword [esp + 0x44], esi
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
pshufd xmm1, xmm0, 0
movups xmm0, xmmword [ecx]
mov ecx, esi
neg ecx
pcmpeqb xmm0, xmm1
and ecx, 0xf
pmovmskb edx, xmm0
mov ax, dx
shl ax, cl
mov cx, si
shr dx, cl
or ax, dx
movzx eax, ax
cdq
mov esi, eax
test edx, edx
jne 0x4e8706
test esi, esi
je 0x4e8768
mov edi, dword [esp + 0x50]
nop word [eax + eax]
test edi, edi
je 0x4e8760
test esi, esi
jne 0x4e8720
bsf eax, edx
add eax, 0x20
jmp 0x4e8723
bsf eax, esi
add eax, dword [esp + 0x44]
and eax, 0xf
je 0x4e874a
mov ecx, dword [esp + 0x68]
mov eax, dword [ecx + eax*4]
cmp eax, dword [esp + 0x5c]
jb 0x4e8760
mov ecx, dword [esp + 0x7c]
mov dword [esp + ecx*4 + 0x80], eax
inc ecx
mov dword [esp + 0x7c], ecx
dec edi
mov ecx, esi
mov eax, edx
add ecx, 0xffffffff
adc eax, 0xffffffff
and esi, ecx
and edx, eax
ja 0x4e8710
jb 0x4e8760
test esi, esi
jne 0x4e8710
mov dword [esp + 0x50], edi
mov edi, dword [esp + 0x60]
mov ecx, dword [esp + 0x30]
mov edx, 0xf
mov esi, dword [esp + 0x68]
dec ecx
and ecx, 0xf
mov eax, 0
cmove eax, edx
mov edx, dword [esp + 0x48]
add ecx, eax
mov eax, dword [esp + 0x58]
mov byte [edx], cl
mov byte [ecx + edx], al
mov edx, dword [esp + 0x78]
mov eax, dword [edx + 0x1c]
mov dword [esi + ecx*4], eax
inc dword [edx + 0x1c]
cmp dword [esp + 0x7c], 0
jbe 0x4e8875
mov ecx, 3
xor eax, eax
nop
mov eax, dword [esp + eax*4 + 0x80]
mov edx, dword [esp + 0x54]
add edx, eax
mov dword [esp + 0x44], eax
mov eax, dword [edx + ecx - 3]
cmp eax, dword [ecx + edi - 3]
jne 0x4e8862
mov esi, dword [esp + 0x6c]
mov eax, edi
add esi, 0xfffffffd
cmp edi, esi
jae 0x4e8814
mov eax, dword [edx]
xor eax, dword [edi]
je 0x4e87ee
mov esi, dword [esp + 0x6c]
bsf ecx, eax
shr ecx, 3
jmp 0x4e883c
lea eax, [edi + 4]
add edx, 4
cmp eax, esi
jae 0x4e8814
nop dword [eax + eax]
mov ecx, dword [eax]
xor ecx, dword [edx]
jne 0x4e890a
add eax, 4
add edx, 4
cmp eax, esi
jb 0x4e8800
mov esi, dword [esp + 0x6c]
lea ecx, [esi - 1]
cmp eax, ecx
jae 0x4e882d
mov cx, word [edx]
cmp cx, word [eax]
jne 0x4e882d
add eax, 2
add edx, 2
cmp eax, esi
jae 0x4e8838
mov cl, byte [edx]
cmp cl, byte [eax]
jne 0x4e8838
inc eax
mov ecx, eax
sub ecx, edi
cmp ecx, dword [esp + 0x70]
jbe 0x4e885e
mov eax, dword [esp + 0x74]
sub eax, dword [esp + 0x44]
mov edx, dword [esp + 0x14]
add eax, 3
mov dword [esp + 0x70], ecx
mov dword [edx], eax
lea eax, [ecx + edi]
cmp eax, esi
je 0x4e8875
mov ecx, dword [esp + 0x70]
mov eax, dword [esp + 0x64]
inc eax
mov dword [esp + 0x64], eax
cmp eax, dword [esp + 0x7c]
jb 0x4e87b0
mov edx, dword [esp + 0x34]
mov dword [esp + 0x5c], 0
mov dword [esp + 0x68], 0
mov ecx, dword [edx + 4]
mov eax, dword [edx]
mov dword [esp + 0x44], ecx
sub ecx, eax
add dword [esp + 0x2c], ecx
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x64], eax
mov eax, dword [esp + 0x24]
movsx eax, al
movzx esi, byte [ecx]
and esi, 0xf
mov dword [esp + 0x28], esi
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
pshufd xmm1, xmm0, 0
movups xmm0, xmmword [ecx]
mov ecx, esi
neg ecx
pcmpeqb xmm0, xmm1
and ecx, 0xf
pmovmskb edx, xmm0
mov ax, dx
shl ax, cl
mov cx, si
shr dx, cl
or ax, dx
movzx eax, ax
cdq
mov esi, eax
test edx, edx
jne 0x4e88f5
test esi, esi
je 0x4e8a34
xor edi, edi
cmp dword [esp + 0x50], 0
je 0x4e8963
test esi, esi
jne 0x4e891d
bsf eax, edx
add eax, 0x20
jmp 0x4e8920
mov esi, dword [esp + 0x6c]
bsf ecx, ecx
shr ecx, 3
sub ecx, edi
add ecx, eax
jmp 0x4e883c
bsf eax, esi
add eax, dword [esp + 0x28]
mov edi, dword [esp + 0x5c]
and eax, 0xf
je 0x4e894d
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx + eax*4]
mov ecx, dword [esp + 0x34]
cmp eax, dword [ecx + 0xc]
jb 0x4e8963
mov dword [esp + edi*4 + 0x80], eax
inc edi
dec dword [esp + 0x50]
mov dword [esp + 0x5c], edi
mov ecx, esi
mov eax, edx
add ecx, 0xffffffff
adc eax, 0xffffffff
and esi, ecx
and edx, eax
ja 0x4e88f7
jb 0x4e8963
test esi, esi
jne 0x4e88f7
test edi, edi
mov edi, dword [esp + 0x60]
je 0x4e8a34
xor eax, eax
mov eax, dword [esp + eax*4 + 0x80]
mov esi, dword [esp + 0x44]
add esi, eax
mov dword [esp + 0x24], eax
mov eax, dword [esi]
cmp eax, dword [edi]
jne 0x4e8a04
mov ecx, dword [esp + 0x6c]
lea eax, [edi + 4]
add esi, 4
sub eax, esi
add eax, dword [esp + 0x64]
cmp eax, ecx
cmovb ecx, eax
lea eax, [edi + 4]
push ecx
push esi
push eax
call fcn.00502270
add esp, 0xc
mov dword [esp + 0x10], eax
lea ecx, [eax + esi]
cmp ecx, dword [esp + 0x64]
jne 0x4e89d3
mov esi, dword [esp + 0x6c]
add eax, 4
push esi
push dword [esp + 0xc]
add eax, edi
push eax
call fcn.00502270
add esp, 0xc
add eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x70]
lea edx, [eax + 4]
cmp edx, ecx
jbe 0x4e8a08
mov eax, dword [esp + 0x74]
mov ecx, edx
sub eax, dword [esp + 0x24]
sub eax, dword [esp + 0x2c]
mov esi, dword [esp + 0x14]
add eax, 3
mov dword [esp + 0x70], ecx
mov dword [esi], eax
lea eax, [edx + edi]
cmp eax, dword [esp + 0x6c]
je 0x4e8a1b
jmp 0x4e8a08
mov ecx, dword [esp + 0x70]
mov eax, dword [esp + 0x68]
inc eax
mov dword [esp + 0x68], eax
cmp eax, dword [esp + 0x5c]
jb 0x4e8971
pop edi
mov eax, ecx
pop esi
mov ecx, dword [esp + 0x178]
xor ecx, esp
call fcn.0052b789
add esp, 0x17c
ret
mov ecx, dword [esp + 0x180]
mov eax, dword [esp + 0x70]
pop edi
pop esi
xor ecx, esp
call fcn.0052b789
add esp, 0x17c
ret