Function at 0x494350
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov eax, reloc.kernel32.dll_GetCurrentDirectoryA
call fcn.004b8fc0
mov ecx, dword [esp + 0x64]
push ebx
mov ebx, dword [esp + 0x64]
mov eax, dword [ebx]
push esi
push edi
xor edi, edi
xor esi, esi
mov dword [esp + 0x5c], edi
mov dword [esp + 0x58], edi
mov dword [esp + 0x44], edi
mov dword [esp + 0x3c], edi
mov dword [esp + 0x24], esi
mov dword [esp + 0x54], edi
mov dword [esp + 0x40], edi
mov dword [esp + 0x30], edi
mov dword [esp + 0x1c], edi
mov dword [esp + 0x18], edi
mov dword [esp + 0x20], edi
mov dword [esp + 0x48], edi
mov dword [esp + 0xc], edi
mov dword [esp + 0x38], edi
mov dword [esp + 0x34], edi
mov dword [esp + 0x60], edi
cmp eax, dword [ecx]
je 0x4943d3
push 0x176
push str..cryptoecec_mult.c
push reloc.kernel32.dll_MoveFileExW
push 0xbb
push reloc.kernel32.dll_GetUserDefaultLangID
call fcn.00463a30
add esp, 0x14
pop edi
pop esi
xor eax, eax
pop ebx
add esp, 0x5c
ret
push ebp
mov ebp, dword [esp + 0x7c]
cmp dword [esp + 0x78], edi
jne 0x4943f4
cmp ebp, edi
jne 0x4943f4
push ecx
push ebx
call fcn.00481a50
add esp, 8
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x5c
ret
mov edx, dword [esp + 0x80]
xor ecx, ecx
cmp ebp, edi
jbe 0x494411
mov ebx, dword [edx + ecx*4]
cmp eax, dword [ebx]
jne 0x494460
inc ecx
cmp ecx, ebp
jb 0x494401
mov ebx, dword [esp + 0x70]
cmp dword [esp + 0x88], edi
jne 0x494432
call fcn.004679d0
mov dword [esp + 0x60], eax
mov dword [esp + 0x88], eax
cmp eax, edi
je 0x494d2f
cmp dword [esp + 0x78], edi
je 0x494538
push ebx
call fcn.0046c4f0
mov esi, eax
add esp, 4
mov dword [esp + 0x5c], esi
cmp esi, edi
jne 0x494485
push 0x194
push str..cryptoecec_mult.c
push reloc.kernel32.dll_GetLongPathNameW
jmp 0x494c73
push 0x183
push str..cryptoecec_mult.c
push reloc.kernel32.dll_MoveFileExW
push 0xbb
push reloc.kernel32.dll_GetUserDefaultLangID
call fcn.00463a30
add esp, 0x14
pop ebp
pop edi
pop esi
xor eax, eax
pop ebx
add esp, 0x5c
ret
mov eax, dword [esp + 0x70]
mov ecx, dword [eax + 0x44]
push reloc.kernel32.dll_SetFileApisToOEM
push fcn.00494090
push reloc.kernel32.dll_RemoveDirectoryA
push ecx
call fcn.00481740
mov ebx, eax
add esp, 0x10
mov dword [esp + 0x3c], ebx
cmp ebx, edi
je 0x494527
cmp dword [ebx + 8], edi
je 0x494527
mov edx, dword [esp + 0x88]
mov eax, dword [ebx + 0x10]
mov ecx, dword [eax]
push edx
mov edx, dword [esp + 0x74]
push ecx
push esi
push edx
call fcn.004820c0
add esp, 0x10
test eax, eax
jne 0x494527
mov eax, dword [esp + 0x78]
mov esi, dword [ebx + 4]
push eax
mov dword [esp + 0x44], esi
call fcn.00466960
xor edx, edx
div esi
add esp, 4
mov esi, eax
mov eax, dword [ebx + 8]
inc esi
mov dword [esp + 0x28], esi
cmp esi, eax
jbe 0x4944ff
mov esi, eax
mov dword [esp + 0x28], eax
mov ecx, dword [ebx + 0xc]
dec ecx
mov edx, 1
shl edx, cl
imul eax, edx
mov dword [esp + 0x58], edx
cmp dword [ebx + 0x14], eax
je 0x494538
push 0x1ad
push str..cryptoecec_mult.c
push reloc.kernel32.dll_FillConsoleOutputAttribute
jmp 0x494c73
mov esi, 1
mov dword [esp + 0x3c], edi
mov dword [esp + 0x28], esi
mov dword [esp + 0x38], esi
lea eax, [esi + ebp]
push 0x1bc
lea esi, [eax*4]
push str..cryptoecec_mult.c
push esi
mov dword [esp + 0x24], eax
call fcn.00466300
push 0x1bd
mov ebx, eax
push str..cryptoecec_mult.c
push esi
mov dword [esp + 0x4c], ebx
call fcn.00466300
push 0x1be
lea ecx, [esi + 4]
push str..cryptoecec_mult.c
push ecx
mov dword [esp + 0x40], eax
call fcn.00466300
push 0x1bf
push str..cryptoecec_mult.c
push esi
mov dword [esp + 0x50], eax
call fcn.00466300
add esp, 0x30
mov dword [esp + 0x10], eax
cmp ebx, edi
je 0x494c67
cmp dword [esp + 0x1c], edi
je 0x494c67
mov eax, dword [esp + 0x20]
cmp eax, edi
je 0x494c67
cmp dword [esp + 0x10], edi
je 0x494c67
mov edx, dword [esp + 0x38]
mov dword [eax], edi
lea eax, [edx + ebp]
mov dword [esp + 0x30], edi
mov dword [esp + 0x14], edi
mov dword [esp + 0x2c], eax
cmp eax, edi
jbe 0x4946e0
mov ecx, dword [esp + 0x84]
mov edi, dword [esp + 0x20]
mov eax, dword [esp + 0x1c]
sub ecx, ebx
sub edi, ebx
sub eax, ebx
mov esi, ebx
mov dword [esp + 0x50], ecx
mov dword [esp + 0x54], edi
mov dword [esp + 0x68], eax
jmp 0x494618
mov edi, dword [esp + 0x54]
mov ecx, dword [esp + 0x50]
mov ebx, dword [esp + 0x78]
cmp dword [esp + 0x14], ebp
jae 0x494628
mov eax, dword [ecx + esi]
push eax
jmp 0x494629
push ebx
call fcn.00466960
add esp, 4
cmp eax, 0x7d0
jb 0x49463f
mov eax, 6
jmp 0x49466f
cmp eax, 0x320
jb 0x49464d
mov eax, 5
jmp 0x49466f
cmp eax, 0x12c
jb 0x49465b
mov eax, 4
jmp 0x49466f
cmp eax, 0x46
jb 0x494667
mov eax, 3
jmp 0x49466f
cmp eax, 0x14
sbb eax, eax
add eax, 2
lea ecx, [eax - 1]
mov edx, 1
shl edx, cl
mov dword [esi], eax
mov dword [edi + esi + 4], 0
add dword [esp + 0x30], edx
cmp dword [esp + 0x14], ebp
jae 0x494696
mov eax, dword [esp + 0x50]
mov eax, dword [eax + esi]
jmp 0x494698
mov eax, ebx
mov ecx, dword [esp + 0x68]
mov edi, dword [esi]
lea ebx, [ecx + esi]
push ebx
push eax
call fcn.00494160
mov edx, dword [esp + 0x5c]
add esp, 8
mov dword [edx + esi], eax
test eax, eax
je 0x494c82
mov ebx, dword [ebx]
cmp ebx, dword [esp + 0x24]
jbe 0x4946c6
mov dword [esp + 0x24], ebx
mov eax, dword [esp + 0x14]
inc eax
add esi, 4
mov dword [esp + 0x14], eax
cmp eax, dword [esp + 0x2c]
jb 0x494610
mov ebx, dword [esp + 0x34]
cmp dword [esp + 0x28], 0
je 0x494894
mov esi, dword [esp + 0x3c]
test esi, esi
jne 0x49470f
cmp dword [esp + 0x38], 1
je 0x494894
push 0x1e3
push str..cryptoecec_mult.c
push reloc.kernel32.dll_FillConsoleOutputAttribute
jmp 0x494c73
cmp dword [esp + 0x38], 0
mov dword [esp + 0x14], 0
je 0x49472f
push 0x1ef
push str..cryptoecec_mult.c
push reloc.kernel32.dll_FillConsoleOutputAttribute
jmp 0x494c73
mov ecx, dword [esp + 0x78]
mov edi, dword [esi + 0xc]
lea eax, [esp + 0x14]
push eax
push ecx
mov dword [ebx + ebp*4], edi
call fcn.00494160
mov ecx, eax
add esp, 8
mov dword [esp + 0x50], ecx
test ecx, ecx
je 0x494c82
mov eax, dword [esp + 0x14]
cmp eax, dword [esp + 0x24]
ja 0x49478b
lea edx, [ebp + 1]
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0x20]
mov dword [edx + ebp*4], ecx
mov ecx, dword [esp + 0x1c]
mov dword [edx + ebp*4 + 4], 0
mov dword [ecx + ebp*4], eax
mov edx, dword [esi + 0x10]
mov eax, dword [esp + 0x10]
mov dword [eax + ebp*4], edx
jmp 0x494894
mov edi, dword [esp + 0x40]
mov edx, dword [esp + 0x28]
imul edx, edi
cmp eax, edx
jae 0x4947be
xor edx, edx
lea eax, [eax + edi - 1]
div edi
cmp eax, dword [esi + 8]
jbe 0x4947b8
push 0x217
push str..cryptoecec_mult.c
push reloc.kernel32.dll_FillConsoleOutputAttribute
jmp 0x494c73
add eax, ebp
mov dword [esp + 0x18], eax
mov edx, dword [esp + 0x3c]
mov edi, dword [edx + 0x10]
mov dword [esp + 0x38], ecx
mov ebx, ebp
cmp ebp, dword [esp + 0x18]
jae 0x49488b
mov eax, dword [esp + 0x1c]
mov ebp, dword [esp + 0x20]
mov ecx, ebx
lea esi, [eax + ecx*4]
mov ecx, dword [esp + 0x10]
sub ebp, eax
sub ecx, eax
mov dword [esp + 0x68], ecx
mov edi, edi
mov eax, dword [esp + 0x18]
dec eax
cmp ebx, eax
jae 0x49480f
mov eax, dword [esp + 0x40]
mov dword [esi], eax
cmp dword [esp + 0x14], eax
jb 0x4948c4
sub dword [esp + 0x14], eax
jmp 0x494815
mov edx, dword [esp + 0x14]
mov dword [esi], edx
push 0x233
mov dword [esi + ebp + 4], 0
mov eax, dword [esi]
push str..cryptoecec_mult.c
push eax
call fcn.00466300
add esp, 0xc
mov dword [esi + ebp], eax
test eax, eax
je 0x4948d5
mov ecx, dword [esi]
mov edx, dword [esp + 0x38]
push ecx
push edx
push eax
call fcn.004b88c0
mov eax, dword [esi]
add esp, 0xc
cmp eax, dword [esp + 0x24]
jbe 0x49485a
mov dword [esp + 0x24], eax
cmp dword [edi], 0
je 0x4948ff
mov eax, dword [esp + 0x68]
mov edx, dword [esp + 0x40]
mov ecx, dword [esp + 0x58]
add dword [esp + 0x38], edx
mov dword [eax + esi], edi
inc ebx
add esi, 4
lea edi, [edi + ecx*4]
cmp ebx, dword [esp + 0x18]
jb 0x4947f0
mov ecx, dword [esp + 0x50]
push ecx
call fcn.004664a0
add esp, 4
mov edx, dword [esp + 0x30]
push 0x250
lea eax, [edx*4 + 4]
push str..cryptoecec_mult.c
push eax
call fcn.00466300
add esp, 0xc
mov dword [esp + 0x4c], eax
test eax, eax
jne 0x494929
push 0x253
jmp 0x494c6c
push 0x228
push str..cryptoecec_mult.c
push reloc.kernel32.dll_FillConsoleOutputAttribute
jmp 0x494c73
push 0x236
push str..cryptoecec_mult.c
push reloc.kernel32.dll_SetEvent
push 0xbb
push reloc.kernel32.dll_GetUserDefaultLangID
call fcn.00463a30
mov eax, dword [esp + 0x64]
push eax
call fcn.004664a0
add esp, 0x18
jmp 0x494c82
push 0x240
push str..cryptoecec_mult.c
push reloc.kernel32.dll_FillConsoleOutputAttribute
push 0xbb
push reloc.kernel32.dll_GetUserDefaultLangID
call fcn.00463a30
mov ecx, dword [esp + 0x64]
push ecx
call fcn.004664a0
add esp, 0x18
jmp 0x494c82
mov edi, dword [esp + 0x4c]
mov ecx, dword [esp + 0x30]
lea eax, [edi + ecx*4]
xor ebp, ebp
mov dword [esp + 0x58], eax
mov dword [eax], 0
cmp dword [esp + 0x2c], ebp
jbe 0x4949ab
mov esi, dword [esp + 0x34]
mov eax, dword [esp + 0x10]
sub eax, esi
mov dword [esp + 0x68], eax
mov dword [eax + esi], edi
mov ecx, dword [esi]
dec ecx
mov edx, 1
shl edx, cl
xor ebx, ebx
test edx, edx
jbe 0x49499d
jmp 0x494970
mov eax, dword [esp + 0x70]
push eax
call fcn.00481860
add esp, 4
mov dword [edi], eax
test eax, eax
je 0x494c82
mov ecx, dword [esi]
dec ecx
mov edx, 1
shl edx, cl
inc ebx
add edi, 4
cmp ebx, edx
jb 0x494970
mov eax, dword [esp + 0x68]
inc ebp
add esi, 4
cmp ebp, dword [esp + 0x2c]
jb 0x494954
mov eax, dword [esp + 0x58]
cmp edi, eax
je 0x4949c0
push 0x266
push str..cryptoecec_mult.c
push reloc.kernel32.dll_FillConsoleOutputAttribute
jmp 0x494c73
mov eax, dword [esp + 0x70]
push eax
call fcn.00481860
add esp, 4
mov dword [esp + 0x48], eax
test eax, eax
je 0x494c82
xor ebp, ebp
cmp dword [esp + 0x2c], ebp
jbe 0x494ab3
mov esi, dword [esp + 0x10]
mov edi, dword [esp + 0x80]
mov ebx, dword [esp + 0x34]
sub edi, esi
mov dword [esp + 0x68], edi
sub ebx, esi
lea esp, [esp]
mov edx, dword [esi]
mov eax, dword [edx]
cmp ebp, dword [esp + 0x7c]
jae 0x494a0f
mov ecx, dword [edi + esi]
jmp 0x494a13
mov ecx, dword [esp + 0x5c]
push ecx
push eax
call fcn.00481980
add esp, 8
test eax, eax
je 0x494c82
cmp dword [ebx + esi], 1
jbe 0x494aa5
mov edx, dword [esi]
mov ecx, dword [esp + 0x88]
mov eax, dword [edx]
mov edx, dword [esp + 0x70]
push ecx
mov ecx, dword [esp + 0x4c]
push eax
push ecx
push edx
call fcn.00481f20
add esp, 0x10
test eax, eax
je 0x494c82
mov ecx, dword [ebx + esi]
mov edi, 1
dec ecx
mov eax, edi
shl eax, cl
cmp eax, edi
jbe 0x494aa1
mov ecx, dword [esi]
mov edx, dword [esp + 0x88]
lea eax, [ecx + edi*4]
mov ecx, dword [esp + 0x48]
push edx
mov edx, dword [eax - 4]
mov eax, dword [eax]
push ecx
mov ecx, dword [esp + 0x78]
push edx
push eax
push ecx
call fcn.00481ea0
add esp, 0x14
test eax, eax
je 0x494c82
mov ecx, dword [ebx + esi]
dec ecx
mov edx, 1
shl edx, cl
inc edi
cmp edi, edx
jb 0x494a63
mov edi, dword [esp + 0x68]
inc ebp
add esi, 4
cmp ebp, dword [esp + 0x2c]
jb 0x494a00
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x30]
push eax
mov eax, dword [esp + 0x74]
push ecx
push edx
push eax
call fcn.00482190
add esp, 0x10
test eax, eax
je 0x494c82
mov ebx, dword [esp + 0x24]
add ebx, 0xffffffff
mov esi, 1
mov dword [esp + 0x40], esi
js 0x494c24
test esi, esi
jne 0x494b17
mov ecx, dword [esp + 0x88]
mov eax, dword [esp + 0x74]
mov edx, dword [esp + 0x70]
push ecx
push eax
push eax
push edx
call fcn.00481f20
add esp, 0x10
test eax, eax
je 0x494c82
cmp dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
jbe 0x494c17
mov eax, dword [esp + 0x20]
mov ebp, dword [esp + 0x1c]
mov edi, dword [esp + 0x10]
sub ebp, eax
sub eax, edi
mov dword [esp + 0x68], eax
jmp 0x494b44
mov eax, dword [esp + 0x68]
add eax, edi
cmp dword [eax + ebp], ebx
jbe 0x494bfd
mov eax, dword [eax]
movsx esi, byte [eax + ebx]
test esi, esi
je 0x494bfd
xor eax, eax
test esi, esi
setl al
test eax, eax
je 0x494b6a
neg esi
cmp eax, dword [esp + 0x44]
je 0x494ba6
cmp dword [esp + 0x40], 0
jne 0x494b99
mov ecx, dword [esp + 0x88]
mov edx, dword [esp + 0x74]
mov eax, dword [esp + 0x70]
push ecx
push edx
push eax
call fcn.00481f90
add esp, 0xc
test eax, eax
je 0x494c82
xor ecx, ecx
cmp dword [esp + 0x44], ecx
sete cl
mov dword [esp + 0x44], ecx
sar esi, 1
cmp dword [esp + 0x40], 0
je 0x494bd4
mov edx, dword [edi]
mov eax, dword [edx + esi*4]
mov ecx, dword [esp + 0x74]
push eax
push ecx
call fcn.00481980
add esp, 8
test eax, eax
je 0x494c82
mov dword [esp + 0x40], 0
jmp 0x494bfd
mov eax, dword [edi]
mov edx, dword [esp + 0x88]
mov ecx, dword [eax + esi*4]
mov eax, dword [esp + 0x74]
push edx
mov edx, dword [esp + 0x74]
push ecx
push eax
push eax
push edx
call fcn.00481ea0
add esp, 0x14
test eax, eax
je 0x494c82
mov eax, dword [esp + 0x14]
inc eax
add edi, 4
mov dword [esp + 0x14], eax
cmp eax, dword [esp + 0x18]
jb 0x494b40
mov esi, dword [esp + 0x40]
sub ebx, 1
jns 0x494af0
test esi, esi
je 0x494c38
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0x70]
push eax
push ecx
call fcn.00481a50
add esp, 8
jmp 0x494c59
cmp dword [esp + 0x44], 0
je 0x494c5d
mov edx, dword [esp + 0x88]
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0x70]
push edx
push eax
push ecx
call fcn.00481f90
add esp, 0xc
test eax, eax
je 0x494c82
mov dword [esp + 0x64], 1
jmp 0x494c82
push 0x1c3
push str..cryptoecec_mult.c
push reloc.kernel32.dll_SetEvent
push 0xbb
push reloc.kernel32.dll_GetUserDefaultLangID
call fcn.00463a30
add esp, 0x14
mov eax, dword [esp + 0x60]
test eax, eax
je 0x494c93
push eax
call fcn.00467a30
add esp, 4
mov eax, dword [esp + 0x48]
test eax, eax
je 0x494ca4
push eax
call fcn.00481910
add esp, 4
mov eax, dword [esp + 0x34]
test eax, eax
je 0x494cb5
push eax
call fcn.004664a0
add esp, 4
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x494cc6
push eax
call fcn.004664a0
add esp, 4
mov edi, dword [esp + 0x20]
test edi, edi
je 0x494cf2
mov eax, dword [edi]
mov esi, edi
test eax, eax
je 0x494ce9
push eax
call fcn.004664a0
mov eax, dword [esi + 4]
add esi, 4
add esp, 4
test eax, eax
jne 0x494cd6
push edi
call fcn.004664a0
add esp, 4
mov edi, dword [esp + 0x4c]
test edi, edi
je 0x494d1e
mov eax, dword [edi]
mov esi, edi
test eax, eax
je 0x494d15
push eax
call fcn.00481940
mov eax, dword [esi + 4]
add esi, 4
add esp, 4
test eax, eax
jne 0x494d02
push edi
call fcn.004664a0
add esp, 4
mov eax, dword [esp + 0x10]
test eax, eax
je 0x494d2f
push eax
call fcn.004664a0
add esp, 4
mov eax, dword [esp + 0x64]
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x5c
ret