Function at 0x4944c0
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x100
mov ecx, dword [esp + 0x104]
push ebx
push ebp
push esi
mov esi, dword [esp + 0x114]
push edi
xor edi, edi
mov edx, esi
mov dword [esp + 0x54], edi
mov dword [esp + 0x58], edi
mov dword [esp + 0x5c], edi
mov dword [esp + 0x60], edi
mov dword [esp + 0x64], edi
mov dword [esp + 0x68], edi
mov dword [esp + 0x6c], edi
mov dword [esp + 0x70], edi
mov dword [esp + 0x74], edi
mov dword [esp + 0x78], edi
mov dword [esp + 0x7c], edi
mov dword [esp + 0x80], edi
mov dword [esp + 0x84], edi
mov dword [esp + 0x88], edi
mov dword [esp + 0x8c], edi
mov dword [esp + 0x90], edi
mov eax, dword [ecx]
add ecx, 4
mov ebp, dword [esp + eax*4 + 0x54]
lea eax, [esp + eax*4 + 0x54]
inc ebp
dec edx
mov dword [eax], ebp
jne 0x49452b
cmp dword [esp + 0x54], esi
jne 0x494563
mov ecx, dword [esp + 0x128]
mov edx, dword [esp + 0x12c]
mov dword [ecx], edi
mov dword [edx], edi
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x100
ret
mov ebx, dword [esp + 0x12c]
mov ecx, 1
lea eax, [esp + 0x58]
mov ebp, dword [ebx]
mov dword [esp + 0x10], ebp
cmp dword [eax], edi
jne 0x494586
inc ecx
add eax, 4
cmp ecx, 0xf
jbe 0x494579
mov eax, ecx
cmp ebp, ecx
mov dword [esp + 0x14], eax
jae 0x494596
mov dword [esp + 0x10], ecx
mov ebp, ecx
mov edx, 0xf
lea esi, [esp + 0x90]
cmp dword [esi], edi
jne 0x4945ae
dec edx
sub esi, 4
cmp edx, edi
jne 0x4945a2
cmp ebp, edx
mov dword [esp + 0x2c], edx
jbe 0x4945bc
mov dword [esp + 0x10], edx
mov ebp, edx
mov esi, 1
mov dword [ebx], ebp
shl esi, cl
cmp ecx, edx
jae 0x4945db
lea ebx, [esp + ecx*4 + 0x54]
sub esi, dword [ebx]
js 0x4945f6
inc ecx
add ebx, 4
shl esi, 1
cmp ecx, edx
jb 0x4945cd
lea ecx, [edx*4]
mov dword [esp + 0x20], ecx
mov ebx, dword [esp + ecx + 0x54]
lea ecx, [esp + ecx + 0x54]
sub esi, ebx
mov dword [esp + 0x44], esi
jns 0x494606
pop edi
pop esi
pop ebp
mov eax, 0xfffffffd
pop ebx
add esp, 0x100
ret
add ebx, esi
mov dword [esp + 0x98], edi
mov dword [ecx], ebx
xor ecx, ecx
dec edx
je 0x494629
xor ebx, ebx
add ecx, dword [esp + ebx + 0x58]
add ebx, 4
dec edx
mov dword [esp + ebx + 0x98], ecx
jne 0x494618
mov edx, dword [esp + 0x114]
xor ebx, ebx
mov ecx, dword [edx]
add edx, 4
cmp ecx, edi
mov dword [esp + 0x1c], edx
je 0x494662
mov edx, dword [esp + ecx*4 + 0x94]
mov esi, dword [esp + 0x138]
lea ecx, [esp + ecx*4 + 0x94]
mov dword [esi + edx*4], ebx
mov esi, dword [esp + 0x44]
inc edx
mov dword [ecx], edx
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x118]
inc ebx
cmp ebx, ecx
jb 0x494632
mov ecx, dword [esp + 0x20]
mov ebx, ebp
neg ebx
mov edx, dword [esp + ecx + 0x94]
mov ecx, dword [esp + 0x138]
mov dword [esp + 0x1c], ecx
mov ecx, dword [esp + 0x2c]
cmp eax, ecx
mov dword [esp + 0x118], edx
mov dword [esp + 0x38], edi
mov dword [esp + 0x94], edi
mov dword [esp + 0x18], 0xffffffff
mov dword [esp + 0xd4], edi
mov dword [esp + 0x40], edi
mov dword [esp + 0x3c], edi
jg 0x494956
mov esi, dword [esp + 0x34]
lea edx, [eax - 1]
lea ecx, [esp + eax*4 + 0x54]
mov dword [esp + 0x20], edx
mov dword [esp + 0x28], ecx
mov edx, dword [esp + 0x28]
mov edx, dword [edx]
mov ecx, edx
dec edx
test ecx, ecx
mov dword [esp + 0x24], edx
je 0x49492b
jmp 0x4946eb
mov edx, dword [esp + 0x24]
lea ecx, [ebx + ebp]
cmp eax, ecx
jle 0x494808
inc edx
mov dword [esp + 0x50], edx
jmp 0x494705
mov ebp, dword [esp + 0x10]
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
add ebx, ebp
inc edx
add ecx, ebp
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0x2c]
sub edx, ebx
mov dword [esp + 0x48], ecx
cmp edx, ebp
jbe 0x494722
mov edx, ebp
mov edi, dword [esp + 0x50]
mov ecx, eax
sub ecx, ebx
mov eax, 1
shl eax, cl
cmp eax, edi
jbe 0x494760
mov ebp, dword [esp + 0x24]
or edi, 0xffffffff
sub edi, ebp
mov ebp, dword [esp + 0x28]
add eax, edi
cmp ecx, edx
jae 0x494760
inc ecx
cmp ecx, edx
jae 0x494760
mov edi, dword [ebp + 4]
add ebp, 4
shl eax, 1
cmp eax, edi
jbe 0x494760
sub eax, edi
inc ecx
cmp ecx, edx
jb 0x49474d
mov ebp, dword [esp + 0x134]
mov edx, 1
shl edx, cl
mov eax, dword [ebp]
mov dword [esp + 0x3c], edx
add edx, eax
cmp edx, 0x5a0
ja 0x494979
mov edi, dword [esp + 0x130]
mov dword [ebp], edx
mov edx, dword [esp + 0x18]
lea eax, [edi + eax*8]
mov edi, dword [esp + 0x18]
test edx, edx
lea edi, [esp + edi*4 + 0xd4]
mov dword [esp + 0x40], eax
mov dword [esp + 0x4c], edi
mov dword [edi], eax
je 0x4947eb
mov edi, dword [esp + 0x38]
mov eax, dword [esp + 0x10]
mov esi, dword [esp + 0x40]
mov byte [esp + 0x30], cl
mov ecx, ebx
mov dword [esp + edx*4 + 0x94], edi
mov edx, dword [esp + 0x4c]
mov byte [esp + 0x31], al
sub ecx, eax
mov eax, edi
shr eax, cl
mov ecx, dword [edx - 4]
mov edx, dword [esp + 0x30]
sub esi, ecx
sar esi, 3
sub esi, eax
mov dword [ecx + eax*8], edx
mov dword [ecx + eax*8 + 4], esi
jmp 0x4947f8
mov ecx, dword [esp + 0x128]
mov edi, dword [esp + 0x38]
mov dword [ecx], eax
mov ecx, dword [esp + 0x48]
mov eax, dword [esp + 0x14]
cmp eax, ecx
jg 0x4946fd
mov ecx, dword [esp + 0x138]
mov dl, al
mov ebp, dword [esp + 0x1c]
sub dl, bl
mov byte [esp + 0x31], dl
mov edx, dword [esp + 0x118]
lea ecx, [ecx + edx*4]
cmp ebp, ecx
jb 0x494830
mov byte [esp + 0x30], 0xc0
jmp 0x494879
mov esi, dword [ebp]
mov ecx, dword [esp + 0x11c]
cmp esi, ecx
jae 0x494852
cmp esi, 0x100
sbb dl, dl
and dl, 0xa0
add dl, 0x60
mov byte [esp + 0x30], dl
jmp 0x494872
sub esi, ecx
mov ecx, dword [esp + 0x124]
shl esi, 2
mov dl, byte [esi + ecx]
mov ecx, dword [esp + 0x120]
add dl, 0x50
mov esi, dword [esi + ecx]
mov byte [esp + 0x30], dl
add ebp, 4
mov dword [esp + 0x1c], ebp
mov ecx, eax
mov edx, 1
sub ecx, ebx
mov eax, edi
shl edx, cl
mov ecx, ebx
shr eax, cl
cmp eax, dword [esp + 0x3c]
jae 0x4948b1
mov ecx, dword [esp + 0x40]
lea ecx, [ecx + eax*8]
mov ebp, dword [esp + 0x30]
add eax, edx
mov dword [ecx], ebp
lea ebp, [edx*8]
mov dword [ecx + 4], esi
add ecx, ebp
cmp eax, dword [esp + 0x3c]
jb 0x494897
mov ecx, dword [esp + 0x20]
mov eax, 1
shl eax, cl
test edi, eax
je 0x4948c8
xor edi, eax
shr eax, 1
test edi, eax
jne 0x4948c0
mov edx, dword [esp + 0x18]
mov ebp, 1
mov ecx, ebx
xor edi, eax
shl ebp, cl
mov ecx, dword [esp + edx*4 + 0x94]
lea eax, [esp + edx*4 + 0x94]
mov dword [esp + 0x38], edi
dec ebp
and ebp, edi
cmp ebp, ecx
je 0x494910
mov ebp, dword [esp + 0x10]
dec edx
sub ebx, ebp
mov ebp, 1
mov ecx, ebx
sub eax, 4
shl ebp, cl
mov ecx, dword [eax]
dec ebp
and ebp, edi
cmp ebp, ecx
jne 0x4948f0
mov dword [esp + 0x18], edx
mov eax, dword [esp + 0x24]
mov ebp, dword [esp + 0x10]
mov edx, eax
dec eax
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x14]
test edx, edx
jne 0x4946e7
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x20]
add ecx, 4
inc eax
mov dword [esp + 0x28], ecx
mov ecx, dword [esp + 0x2c]
inc edx
cmp eax, ecx
mov dword [esp + 0x14], eax
mov dword [esp + 0x20], edx
jle 0x4946d0
mov esi, dword [esp + 0x44]
xor edi, edi
cmp esi, edi
je 0x494556
cmp dword [esp + 0x2c], 1
je 0x494556
pop edi
pop esi
pop ebp
mov eax, 0xfffffffb
pop ebx
add esp, 0x100
ret
pop edi
pop esi
pop ebp
mov eax, 0xfffffffc
pop ebx
add esp, 0x100
ret