Function at 0x473c50
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x198
mov eax, dword [0x56fcd4]
xor eax, esp
mov dword [esp + 0x194], eax
mov ecx, dword [ebp + 0x10]
mov eax, dword [ebp + 0xc]
push esi
mov esi, dword [ebp + 8]
mov dword [esp + 0x28], ecx
mov ecx, dword [ebp + 0x14]
mov dword [esp + 0x74], ecx
mov ecx, dword [esi + 0x5c]
mov edx, dword [esi + 0xc]
mov dword [esp + 0x2c], ecx
mov ecx, dword [esi + 0x28]
mov dword [esp + 0x30], ecx
lea ecx, [esi + 0x2c]
push edi
mov dword [esp + 0x48], ecx
mov edi, eax
mov ecx, dword [esi + 0x24]
mov dword [esp + 0x10], ecx
mov ecx, dword [esi + 4]
sub edi, ecx
mov dword [esp + 0x6c], edx
add edx, ecx
mov dword [esp + 0x38], eax
mov eax, edi
mov dword [esp + 0x40], ecx
mov ecx, dword [esi + 0xb8]
mov dword [esp + 0x7c], edx
mov edx, 1
shl edx, cl
mov ecx, dword [esi + 0x10]
sub eax, ecx
mov dword [esp + 0x28], edi
sub edi, edx
cmp eax, edx
mov dword [esp + 0x18], esi
mov eax, dword [esi + 0xc4]
mov edx, dword [esi + 0x54]
cmovbe edi, ecx
cmp dword [esi + 0x18], 0
push 0xcf1bbcdc
cmovne edi, ecx
mov dword [esp + 0x6c], edx
mov ecx, 6
mov dword [esp + 0x50], edi
cmp eax, ecx
mov dword [esp + 0x60], edx
push 0xbb000000
cmovb ecx, eax
mov dword [esp + 0x24], 3
mov eax, dword [esi + 0x50]
mov dword [esp + 0x6c], eax
mov dword [esp + 0x60], eax
mov eax, 1
shl eax, cl
mov dword [esp + 0x5c], eax
mov eax, dword [esi + 0xb4]
mov dword [esp + 0x68], eax
mov edi, dword [eax + 0x5c]
mov esi, dword [eax + 0x28]
mov eax, dword [esp + 0x40]
mov dword [esp + 0x1c], edi
push dword [eax + 4]
push dword [eax]
call fcn.004df430
mov edi, dword [esp + 0x60]
mov ecx, 0x38
mov dword [esp + 0x80], eax
mov dword [esp + 0x84], edx
sub ecx, dword [edi + 0x24]
call fcn.004df490
mov edi, dword [esp + 0x14]
mov dword [esp + 0x50], eax
shr eax, 2
and eax, 0x3fffffc0
mov dword [esp + 0x14], 0x3f
lea ecx, [eax + esi]
lea eax, [edi + eax*4]
mov dword [esp + 0x70], ecx
mov edi, dword [esp + 0x18]
mov dword [esp + 0x74], eax
cmp dword [edi + 0xdc], 0
jne 0x474042
mov esi, dword [edi + 0x1c]
mov eax, dword [esp + 0x28]
mov edx, dword [esp + 0x40]
sub eax, esi
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x3c], esi
mov dword [esp + 0x20], edx
cmp eax, 0x180
jbe 0x473f2c
lea ecx, [esi + 0x60]
mov dword [esp + 0x20], edx
mov dword [esp + 0x44], ecx
cmp esi, ecx
jae 0x473e77
mov eax, 0x38
sub eax, dword [esp + 0x10]
mov dword [esp + 0x24], eax
lea eax, [edx + 8]
mov dword [esp + 0x58], eax
nop dword [eax]
push 0xcf1bbcdc
push 0xbb000000
push dword [esi + eax + 4]
push dword [esi + eax]
call fcn.004df430
xor eax, dword [edi + 0x50]
xor edx, dword [edi + 0x54]
mov ecx, dword [esp + 0x24]
call fcn.004df490
and esi, 7
mov ecx, eax
mov eax, 0
mov edx, dword [edi + esi*4 + 0x2c]
mov dword [edi + esi*4 + 0x2c], ecx
mov esi, edx
shr esi, 2
and esi, 0x3fffffc0
mov dword [esp + 0x20], edx
mov edx, dword [esp + 0x34]
add edx, esi
movzx ecx, byte [edx]
dec ecx
and ecx, 0x3f
cmove eax, dword [esp + 0x14]
add ecx, eax
mov eax, dword [esp + 0x20]
mov byte [edx], cl
mov byte [ecx + edx], al
lea eax, [ecx + esi]
mov ecx, dword [esp + 0x30]
mov esi, dword [esp + 0x3c]
mov dword [ecx + eax*4], esi
inc esi
mov eax, dword [esp + 0x58]
mov dword [esp + 0x3c], esi
cmp esi, dword [esp + 0x44]
jb 0x473df0
mov eax, dword [edi + 4]
mov dword [esp + 0x20], eax
mov edx, dword [esp + 0x18]
mov edi, dword [esp + 0x38]
mov esi, dword [esp + 0x28]
add esi, 0xffffffe0
mov eax, dword [edx + 0x24]
mov dword [esp + 0x24], eax
lea ecx, [edi + 1]
mov eax, dword [esp + 0x40]
add eax, esi
mov dword [esp + 0x3c], esi
cmp eax, ecx
jbe 0x473ea2
xor ecx, ecx
jmp 0x473ea9
sub ecx, dword [esp + 0x40]
sub ecx, esi
inc ecx
mov eax, 8
cmp ecx, eax
cmova ecx, eax
add ecx, esi
mov dword [esp + 0x80], ecx
cmp esi, ecx
jae 0x474039
mov eax, 0x38
mov edi, edx
sub eax, dword [esp + 0x24]
mov dword [esp + 0x44], eax
nop dword [eax]
nop word [eax + eax]
mov eax, dword [esp + 0x40]
push 0xcf1bbcdc
push 0xbb000000
push dword [esi + eax + 4]
push dword [esi + eax]
call fcn.004df430
xor eax, dword [edi + 0x50]
xor edx, dword [edi + 0x54]
mov ecx, dword [esp + 0x44]
call fcn.004df490
mov ecx, eax
mov eax, esi
and eax, 7
inc esi
mov dword [edi + eax*4 + 0x2c], ecx
cmp esi, dword [esp + 0x80]
jb 0x473ee0
mov eax, dword [edi + 4]
mov ecx, dword [edi + 0x24]
mov esi, dword [esp + 0x3c]
mov dword [esp + 0x20], eax
mov edx, dword [esp + 0x18]
mov edi, dword [esp + 0x38]
mov eax, dword [edx + 0x5c]
mov dword [esp + 0x24], eax
mov eax, dword [edx + 0x28]
mov dword [esp + 0x58], eax
cmp esi, dword [esp + 0x28]
jae 0x473ff0
mov edi, dword [esp + 0x18]
mov eax, 0x38
sub eax, ecx
mov dword [esp + 0x80], eax
nop
mov eax, dword [esp + 0x20]
push 0xcf1bbcdc
push 0xbb000000
push dword [esi + eax + 0xc]
push dword [esi + eax + 8]
call fcn.004df430
xor eax, dword [edi + 0x50]
xor edx, dword [edi + 0x54]
mov ecx, dword [esp + 0x80]
call fcn.004df490
and esi, 7
mov ecx, eax
mov eax, 0
mov edx, dword [edi + esi*4 + 0x2c]
mov dword [edi + esi*4 + 0x2c], ecx
mov esi, edx
shr esi, 2
and esi, 0x3fffffc0
mov dword [esp + 0x44], edx
mov edx, dword [esp + 0x58]
add edx, esi
movzx ecx, byte [edx]
dec ecx
and ecx, 0x3f
cmove eax, dword [esp + 0x14]
add ecx, eax
mov eax, dword [esp + 0x44]
mov byte [edx], cl
mov byte [ecx + edx], al
lea eax, [ecx + esi]
mov ecx, dword [esp + 0x24]
mov esi, dword [esp + 0x3c]
mov dword [ecx + eax*4], esi
inc esi
mov dword [esp + 0x3c], esi
cmp esi, dword [esp + 0x28]
jb 0x473f60
mov edi, dword [esp + 0x38]
mov edx, dword [esp + 0x18]
mov esi, dword [esp + 0x28]
push 0xcf1bbcdc
push 0xbb000000
mov dword [edx + 0x1c], esi
push dword [edi + 0xc]
push dword [edi + 8]
call fcn.004df430
xor eax, dword [esp + 0x64]
mov ecx, 0x38
xor edx, dword [esp + 0x68]
sub ecx, dword [esp + 0x10]
call fcn.004df490
mov edi, dword [esp + 0x18]
mov ecx, eax
mov eax, esi
mov esi, dword [esp + 0x48]
and eax, 7
mov edx, dword [esi + eax*4]
mov dword [esi + eax*4], ecx
jmp 0x474070
mov ecx, dword [esp + 0x24]
jmp 0x473f34
movq xmm0, qword [esp + 0x58]
mov eax, 0x38
sub eax, dword [esp + 0x10]
movq xmm1, qword [esp + 0x80]
xorps xmm1, xmm0
movd xmm0, eax
mov eax, dword [esp + 0x28]
psrlq xmm1, xmm0
mov dword [edi + 0x1c], eax
movd edx, xmm1
add dword [edi + 0x58], edx
mov eax, edx
mov ecx, dword [esp + 0x30]
mov edi, dword [esp + 0x34]
shr eax, 2
and eax, 0x3fffffc0
mov dword [esp + 0x14], edx
add edi, eax
mov dword [esp + 0x10], 0
mov dword [esp + 0x64], edi
mov dword [esp + 0x20], 0
lea ecx, [ecx + eax*4]
movsx eax, dl
movzx esi, byte [edi]
mov edx, edi
mov dword [esp + 0x24], ecx
xor ecx, ecx
mov dword [esp + 0x30], esi
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
pshufd xmm1, xmm0, 0
xorps xmm0, xmm0
movaps xmmword [esp + 0x80], xmm0
movups xmm0, xmmword [edx]
lea edx, [edx + 0x10]
pcmpeqb xmm0, xmm1
pmovmskb eax, xmm0
mov dword [esp + ecx*4 + 0x80], eax
inc ecx
cmp ecx, 4
jl 0x4740d0
mov eax, dword [esp + 0x8c]
and esi, 0x3f
cdq
mov edi, eax
mov ecx, edx
mov eax, dword [esp + 0x88]
shld ecx, edi, 0x10
cdq
or ecx, edx
shl edi, 0x10
or edi, eax
mov eax, dword [esp + 0x84]
shld ecx, edi, 0x10
cdq
or ecx, edx
shl edi, 0x10
or edi, eax
mov eax, dword [esp + 0x80]
shld ecx, edi, 0x10
cdq
or ecx, edx
shl edi, 0x10
mov dword [esp + 0x34], ecx
or edi, eax
mov edx, dword [esp + 0x34]
mov ecx, esi
neg ecx
mov eax, edi
and ecx, 0x3f
call fcn.004df470
mov dword [esp + 0x48], eax
mov ecx, esi
mov dword [esp + 0x68], edx
mov eax, edi
mov edx, dword [esp + 0x34]
call fcn.004df490
mov esi, dword [esp + 0x48]
mov edi, dword [esp + 0x68]
or esi, eax
or edi, edx
ja 0x474170
test esi, esi
je 0x4741c8
mov ecx, dword [esp + 0x54]
test ecx, ecx
je 0x4741c8
test esi, esi
jne 0x474184
bsf eax, edi
add eax, 0x20
jmp 0x474187
bsf eax, esi
add eax, dword [esp + 0x30]
and eax, 0x3f
je 0x4741b2
mov edx, dword [esp + 0x24]
mov eax, dword [edx + eax*4]
cmp eax, dword [esp + 0x4c]
jb 0x4741c8
mov edx, dword [esp + 0x10]
mov dword [esp + edx*4 + 0x98], eax
inc edx
dec ecx
mov dword [esp + 0x10], edx
mov dword [esp + 0x54], ecx
mov ecx, esi
mov eax, edi
add ecx, 0xffffffff
adc eax, 0xffffffff
and esi, ecx
and edi, eax
ja 0x474170
jb 0x4741c8
test esi, esi
jne 0x474170
mov ecx, dword [esp + 0x30]
mov edx, 0x3f
mov esi, dword [esp + 0x24]
dec ecx
and ecx, 0x3f
mov eax, 0
cmove eax, edx
mov edx, dword [esp + 0x64]
add ecx, eax
mov eax, dword [esp + 0x14]
mov byte [edx], cl
mov byte [ecx + edx], al
mov edx, dword [esp + 0x18]
mov eax, dword [edx + 0x1c]
mov dword [esi + ecx*4], eax
inc dword [edx + 0x1c]
cmp dword [esp + 0x10], 0
jbe 0x4742d5
mov esi, dword [esp + 0x38]
mov ecx, 3
xor eax, eax
mov eax, dword [esp + eax*4 + 0x98]
mov edx, dword [esp + 0x40]
add edx, eax
mov dword [esp + 0x4c], eax
mov eax, dword [edx + ecx - 3]
cmp eax, dword [ecx + esi - 3]
jne 0x4742c2
mov edi, dword [esp + 0x2c]
mov eax, esi
add edi, 0xfffffffd
cmp esi, edi
jae 0x474274
mov eax, dword [edx]
xor eax, dword [esi]
je 0x474251
mov edi, dword [esp + 0x2c]
bsf ecx, eax
shr ecx, 3
jmp 0x47429c
lea eax, [esi + 4]
add edx, 4
cmp eax, edi
jae 0x474274
nop dword [eax + eax]
mov ecx, dword [edx]
xor ecx, dword [eax]
jne 0x4743e8
add eax, 4
add edx, 4
cmp eax, edi
jb 0x474260
mov edi, dword [esp + 0x2c]
lea ecx, [edi - 1]
cmp eax, ecx
jae 0x47428d
mov cx, word [edx]
cmp cx, word [eax]
jne 0x47428d
add eax, 2
add edx, 2
cmp eax, edi
jae 0x474298
mov cl, byte [edx]
cmp cl, byte [eax]
jne 0x474298
inc eax
mov ecx, eax
sub ecx, esi
cmp ecx, dword [esp + 0x1c]
jbe 0x4742be
mov eax, dword [esp + 0x28]
sub eax, dword [esp + 0x4c]
mov edx, dword [esp + 0x78]
add eax, 3
mov dword [esp + 0x1c], ecx
mov dword [edx], eax
lea eax, [ecx + esi]
cmp eax, edi
je 0x4742d5
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x20]
inc eax
mov dword [esp + 0x20], eax
cmp eax, dword [esp + 0x10]
jb 0x474213
mov edx, dword [esp + 0x60]
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
mov ecx, dword [edx + 4]
mov eax, dword [edx]
mov edx, dword [esp + 0x70]
mov dword [esp + 0x4c], ecx
sub ecx, eax
add ecx, dword [esp + 0x6c]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x50]
movzx esi, byte [edx]
movsx eax, al
mov dword [esp + 0x48], ecx
xor ecx, ecx
mov dword [esp + 0x6c], esi
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
pshufd xmm1, xmm0, 0
xorps xmm0, xmm0
movaps xmmword [esp + 0x80], xmm0
movups xmm0, xmmword [edx]
lea edx, [edx + 0x10]
pcmpeqb xmm0, xmm1
pmovmskb eax, xmm0
mov dword [esp + ecx*4 + 0x80], eax
inc ecx
cmp ecx, 4
jl 0x474330
mov eax, dword [esp + 0x8c]
and esi, 0x3f
cdq
mov edi, eax
mov ecx, edx
mov eax, dword [esp + 0x88]
shld ecx, edi, 0x10
cdq
or ecx, edx
shl edi, 0x10
or edi, eax
mov eax, dword [esp + 0x84]
shld ecx, edi, 0x10
cdq
or ecx, edx
shl edi, 0x10
or edi, eax
mov eax, dword [esp + 0x80]
shld ecx, edi, 0x10
cdq
or ecx, edx
shl edi, 0x10
mov dword [esp + 0x34], ecx
or edi, eax
mov edx, dword [esp + 0x34]
mov ecx, esi
neg ecx
mov eax, edi
and ecx, 0x3f
call fcn.004df470
mov dword [esp + 0x50], eax
mov ecx, esi
mov dword [esp + 0x70], edx
mov eax, edi
mov edx, dword [esp + 0x34]
call fcn.004df490
mov esi, dword [esp + 0x50]
mov edi, dword [esp + 0x70]
or esi, eax
or edi, edx
ja 0x4743d4
test esi, esi
je 0x47451a
mov ecx, dword [esp + 0x54]
test ecx, ecx
je 0x474442
test esi, esi
jne 0x4743fb
bsf eax, edi
add eax, 0x20
jmp 0x4743fe
mov edi, dword [esp + 0x2c]
bsf ecx, ecx
shr ecx, 3
sub ecx, esi
add ecx, eax
jmp 0x47429c
bsf eax, esi
add eax, dword [esp + 0x6c]
and eax, 0x3f
je 0x47442c
mov edx, dword [esp + 0x74]
mov edx, dword [edx + eax*4]
mov eax, dword [esp + 0x60]
cmp edx, dword [eax + 0xc]
jb 0x474442
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0x98], edx
inc eax
dec ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x54], ecx
mov ecx, esi
mov eax, edi
add ecx, 0xffffffff
adc eax, 0xffffffff
and esi, ecx
and edi, eax
ja 0x4743d4
jb 0x474442
test esi, esi
jne 0x4743d4
cmp dword [esp + 0x10], 0
jbe 0x47451a
mov edi, dword [esp + 0x38]
xor eax, eax
mov eax, dword [esp + eax*4 + 0x98]
mov esi, dword [esp + 0x4c]
add esi, eax
mov dword [esp + 0x50], eax
mov eax, dword [esi]
cmp eax, dword [edi]
jne 0x4744ed
mov ecx, dword [esp + 0x2c]
lea eax, [edi + 4]
add esi, 4
sub eax, esi
add eax, dword [esp + 0x30]
cmp eax, ecx
cmovb ecx, eax
lea eax, [edi + 4]
push ecx
push esi
push eax
call fcn.00462330
add esp, 0xc
mov dword [esp + 0x74], eax
lea ecx, [eax + esi]
cmp ecx, dword [esp + 0x30]
jne 0x4744bc
mov esi, dword [esp + 0x2c]
add eax, 4
push esi
push dword [esp + 0x80]
add eax, edi
push eax
call fcn.00462330
add esp, 0xc
add eax, dword [esp + 0x74]
mov ecx, dword [esp + 0x1c]
lea edx, [eax + 4]
cmp edx, ecx
jbe 0x4744f1
mov eax, dword [esp + 0x28]
mov ecx, edx
sub eax, dword [esp + 0x50]
sub eax, dword [esp + 0x48]
mov esi, dword [esp + 0x78]
add eax, 3
mov dword [esp + 0x1c], ecx
mov dword [esi], eax
lea eax, [edx + edi]
cmp eax, dword [esp + 0x2c]
je 0x474504
jmp 0x4744f1
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x14]
inc eax
mov dword [esp + 0x14], eax
cmp eax, dword [esp + 0x10]
jb 0x474453
mov eax, ecx
pop edi
pop esi
mov ecx, dword [esp + 0x194]
xor ecx, esp
call fcn.004df28f
mov esp, ebp
pop ebp
ret
mov ecx, dword [esp + 0x19c]
mov eax, dword [esp + 0x1c]
pop edi
pop esi
xor ecx, esp
call fcn.004df28f
mov esp, ebp
pop ebp
ret