Function at 0x4d2970
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x188
mov eax, dword [0x5a6008]
xor eax, esp
mov dword [esp + 0x184], eax
mov eax, dword [ebp + 8]
mov dword [esp + 0x38], eax
mov eax, dword [ebp + 0xc]
mov dword [esp + 0x64], eax
push esi
mov esi, ecx
mov dword [esp + 0x1c], edx
push edi
mov dword [esp + 0x28], esi
mov dword [esp + 0x44], 3
mov eax, dword [esi + 0x5c]
mov ecx, dword [esi + 4]
mov edx, dword [esi + 0xc]
mov dword [esp + 0x38], eax
mov eax, dword [esi + 0x28]
mov dword [esp + 0x24], eax
mov eax, dword [esi + 0x24]
lea edi, [edx + ecx]
mov dword [esp + 0x18], eax
mov eax, dword [esi + 8]
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x20]
sub eax, ecx
mov dword [esp + 0x2c], ecx
mov ecx, dword [esi + 0xb8]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x64], edx
mov edx, 1
shl edx, cl
mov ecx, dword [esi + 0x10]
sub eax, ecx
mov dword [esp + 0x68], edi
mov edi, dword [esp + 0x1c]
sub edi, edx
mov dword [esp + 0x30], 0x3f
cmp eax, edx
mov eax, edi
mov edi, dword [esp + 0x20]
cmovbe eax, ecx
cmp dword [esi + 0x18], 0
cmovne eax, ecx
mov ecx, 6
mov dword [esp + 0x58], eax
mov eax, dword [esi + 0xc4]
cmp eax, ecx
cmovb ecx, eax
mov eax, dword [esi + 0x50]
mov dword [esp + 0x34], eax
mov eax, dword [esi + 0x54]
mov dword [esp + 0x74], eax
mov eax, 1
shl eax, cl
cmp dword [esi + 0xdc], 0
mov dword [esp + 0x5c], eax
jne 0x4d2c6c
mov ecx, dword [esp + 0x1c]
mov eax, dword [esi + 0x1c]
sub ecx, eax
mov edx, dword [esp + 0x18]
cmp ecx, 0x180
jbe 0x4d2ba3
lea ecx, [eax + 0x60]
mov dword [esp + 0x14], edx
mov dword [esp + 0x3c], ecx
cmp eax, ecx
jae 0x4d2b19
mov edi, 0x18
sub edi, edx
mov edx, dword [esp + 0x2c]
add edx, 8
mov dword [esp + 0x48], edi
mov dword [esp + 0x50], edx
nop word [eax + eax]
imul edx, dword [edx + eax], 0x9e3779b1
mov ecx, dword [esi + 0x54]
mov dword [esp + 0x74], ecx
mov ecx, edi
xor edx, dword [esi + 0x50]
shr edx, cl
mov ecx, eax
and ecx, 7
mov edi, dword [esi + ecx*4 + 0x2c]
mov dword [esi + ecx*4 + 0x2c], edx
mov ecx, 0
mov esi, dword [esp + 0x24]
mov dword [esp + 0x14], edi
shr edi, 2
and edi, 0x3fffffc0
add esi, edi
movzx edx, byte [esi]
dec edx
and edx, 0x3f
cmove ecx, dword [esp + 0x30]
add edx, ecx
mov ecx, dword [esp + 0x14]
mov byte [esi], dl
mov byte [edx + esi], cl
lea ecx, [edx + edi]
mov edx, dword [esp + 0x38]
mov esi, dword [esp + 0x28]
mov edi, dword [esp + 0x48]
mov dword [edx + ecx*4], eax
inc eax
mov edx, dword [esp + 0x50]
cmp eax, dword [esp + 0x3c]
jb 0x4d2aa0
mov eax, dword [esi + 0x24]
mov edi, dword [esp + 0x20]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x1c]
lea edx, [edi + 1]
mov ecx, dword [esp + 0x2c]
add eax, 0xffffffe0
add ecx, eax
mov dword [esp + 0x70], eax
mov dword [esp + 0x48], eax
cmp ecx, edx
jbe 0x4d2b39
xor edx, edx
jmp 0x4d2b40
sub edx, dword [esp + 0x2c]
sub edx, eax
inc edx
mov ecx, 8
cmp edx, ecx
cmova edx, ecx
add edx, eax
mov dword [esp + 0x50], edx
cmp eax, edx
jae 0x4d2b9f
mov eax, 0x18
mov edi, edx
sub eax, dword [esp + 0x14]
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x48]
nop word [eax + eax]
mov ecx, dword [esp + 0x2c]
imul edx, dword [eax + ecx], 0x9e3779b1
mov ecx, dword [esp + 0x3c]
xor edx, dword [esi + 0x50]
shr edx, cl
mov ecx, eax
and ecx, 7
inc eax
mov dword [esi + ecx*4 + 0x2c], edx
cmp eax, edi
jb 0x4d2b70
mov edx, dword [esi + 0x24]
mov eax, dword [esp + 0x70]
mov edi, dword [esp + 0x20]
jmp 0x4d2ba3
mov edx, dword [esp + 0x14]
mov ecx, dword [esi + 0x5c]
mov dword [esp + 0x3c], ecx
mov ecx, dword [esi + 0x28]
mov dword [esp + 0x50], ecx
mov ecx, dword [esi + 4]
mov dword [esp + 0x70], ecx
cmp eax, dword [esp + 0x1c]
jae 0x4d2c3c
mov edi, 0x18
sub edi, edx
mov dword [esp + 0x14], edi
nop dword [eax]
mov ecx, dword [esp + 0x70]
imul edx, dword [eax + ecx + 8], 0x9e3779b1
mov ecx, edi
xor edx, dword [esi + 0x50]
shr edx, cl
mov ecx, eax
and ecx, 7
mov edi, dword [esi + ecx*4 + 0x2c]
mov dword [esi + ecx*4 + 0x2c], edx
mov ecx, 0
mov esi, dword [esp + 0x50]
mov dword [esp + 0x48], edi
shr edi, 2
and edi, 0x3fffffc0
add esi, edi
movzx edx, byte [esi]
dec edx
and edx, 0x3f
cmove ecx, dword [esp + 0x30]
add edx, ecx
mov ecx, dword [esp + 0x48]
mov byte [esi], dl
mov byte [edx + esi], cl
lea ecx, [edx + edi]
mov edx, dword [esp + 0x3c]
mov esi, dword [esp + 0x28]
mov edi, dword [esp + 0x14]
mov dword [edx + ecx*4], eax
inc eax
cmp eax, dword [esp + 0x1c]
jb 0x4d2bd0
mov edi, dword [esp + 0x20]
mov eax, dword [esp + 0x1c]
mov ecx, 0x18
sub ecx, dword [esp + 0x18]
mov dword [esi + 0x1c], eax
imul edx, dword [edi + 8], 0x9e3779b1
xor edx, dword [esp + 0x34]
shr edx, cl
and eax, 7
mov ecx, dword [esi + eax*4 + 0x2c]
mov dword [esi + eax*4 + 0x2c], edx
mov edx, ecx
mov dword [esp + 0x14], ecx
jmp 0x4d2c8c
imul edx, dword [edi], 0x9e3779b1
mov ecx, 0x18
sub ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esi + 0x1c], eax
xor edx, dword [esp + 0x34]
shr edx, cl
mov dword [esp + 0x14], edx
add dword [esi + 0x58], edx
mov eax, edx
mov ecx, dword [esp + 0x38]
mov esi, dword [esp + 0x24]
shr eax, 2
and eax, 0x3fffffc0
mov dword [esp + 0x18], 0
add esi, eax
mov dword [esp + 0x30], 0
mov dword [esp + 0x48], esi
lea ecx, [ecx + eax*4]
movzx eax, byte [esi]
mov dword [esp + 0x38], eax
movsx eax, dl
mov edx, esi
mov dword [esp + 0x34], ecx
xor ecx, ecx
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
pshufd xmm1, xmm0, 0
xorps xmm0, xmm0
movaps xmmword [esp + 0x70], xmm0
movups xmm0, xmmword [edx]
lea edx, [edx + 0x10]
pcmpeqb xmm0, xmm1
pmovmskb eax, xmm0
mov dword [esp + ecx*4 + 0x70], eax
inc ecx
cmp ecx, 4
jl 0x4d2ce5
mov eax, dword [esp + 0x7c]
mov esi, dword [esp + 0x38]
cdq
and esi, 0x3f
mov edi, eax
mov ecx, edx
mov eax, dword [esp + 0x78]
shld ecx, edi, 0x10
cdq
or ecx, edx
shl edi, 0x10
or edi, eax
mov eax, dword [esp + 0x74]
shld ecx, edi, 0x10
cdq
or ecx, edx
shl edi, 0x10
or edi, eax
mov eax, dword [esp + 0x70]
shld ecx, edi, 0x10
cdq
or ecx, edx
shl edi, 0x10
mov dword [esp + 0x24], ecx
or edi, eax
mov edx, dword [esp + 0x24]
mov ecx, esi
neg ecx
mov eax, edi
and ecx, 0x3f
call fcn.00511c00
mov dword [esp + 0x70], eax
mov ecx, esi
mov dword [esp + 0x50], edx
mov eax, edi
mov edx, dword [esp + 0x24]
call fcn.00511be0
mov esi, dword [esp + 0x70]
mov edi, dword [esp + 0x50]
or esi, eax
or edi, edx
ja 0x4d2d80
test esi, esi
je 0x4d2dd1
nop word [eax + eax]
cmp dword [esp + 0x5c], 0
jbe 0x4d2dd1
push edi
push esi
call fcn.004ce160
add eax, dword [esp + 0x40]
add esp, 8
and eax, 0x3f
je 0x4d2dbb
mov ecx, dword [esp + 0x34]
mov ecx, dword [ecx + eax*4]
cmp ecx, dword [esp + 0x58]
jb 0x4d2dd1
mov eax, dword [esp + 0x18]
mov dword [esp + eax*4 + 0x88], ecx
inc eax
dec dword [esp + 0x5c]
mov dword [esp + 0x18], eax
mov ecx, esi
mov eax, edi
add ecx, 0xffffffff
adc eax, 0xffffffff
and esi, ecx
and edi, eax
ja 0x4d2d80
jb 0x4d2dd1
test esi, esi
jne 0x4d2d80
mov edx, dword [esp + 0x48]
mov esi, 0x3f
mov eax, 0
movzx ecx, byte [edx]
dec ecx
and ecx, 0x3f
cmove eax, esi
mov esi, dword [esp + 0x34]
add ecx, eax
mov eax, dword [esp + 0x14]
mov byte [edx], cl
mov byte [ecx + edx], al
mov edx, dword [esp + 0x28]
mov eax, dword [edx + 0x1c]
mov dword [esi + ecx*4], eax
inc dword [edx + 0x1c]
cmp dword [esp + 0x18], 0
jbe 0x4d2f27
xor eax, eax
nop dword [eax]
nop word [eax + eax]
mov esi, dword [esp + eax*4 + 0x88]
mov edx, dword [esp + 0x64]
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x70], esi
cmp esi, edx
jb 0x4d2e61
mov edi, dword [esp + 0x2c]
mov edx, dword [esp + 0x44]
add edi, esi
mov eax, dword [edi + edx - 3]
cmp eax, dword [edx + ecx - 3]
jne 0x4d2efe
push dword [esp + 0x40]
mov edx, edi
call fcn.004ce1f0
add esp, 4
mov edi, eax
jmp 0x4d2ecf
mov edi, dword [esp + 0x60]
mov eax, dword [esi + edi]
cmp eax, dword [ecx]
jne 0x4d2efa
add edi, 4
add esi, edi
lea edi, [ecx + 4]
mov ecx, dword [esp + 0x60]
mov eax, edi
add ecx, edx
mov dword [esp + 0x24], edi
sub eax, esi
mov edx, esi
add eax, ecx
mov ecx, dword [esp + 0x40]
cmp eax, ecx
cmovb ecx, eax
push ecx
mov ecx, edi
call fcn.004ce1f0
mov ecx, dword [esp + 0x68]
mov edi, eax
add ecx, dword [esp + 0x64]
add esp, 4
lea eax, [edi + esi]
cmp eax, ecx
jne 0x4d2ec8
mov ecx, dword [esp + 0x24]
push dword [esp + 0x40]
mov edx, dword [esp + 0x6c]
lea ecx, [edi + ecx]
call fcn.004ce1f0
add esp, 4
add edi, eax
mov esi, dword [esp + 0x70]
add edi, 4
mov edx, dword [esp + 0x44]
cmp edi, edx
jbe 0x4d2efe
mov eax, dword [esp + 0x1c]
mov edx, edi
mov ecx, dword [esp + 0x6c]
sub eax, esi
add eax, 3
mov dword [esp + 0x44], edx
mov dword [ecx], eax
mov eax, dword [esp + 0x20]
add eax, edi
cmp eax, dword [esp + 0x40]
je 0x4d2f11
jmp 0x4d2efe
mov edx, dword [esp + 0x44]
mov eax, dword [esp + 0x30]
inc eax
mov dword [esp + 0x30], eax
cmp eax, dword [esp + 0x18]
jb 0x4d2e20
mov eax, edx
pop edi
pop esi
mov ecx, dword [esp + 0x184]
xor ecx, esp
call fcn.00511339
mov esp, ebp
pop ebp
ret
mov ecx, dword [esp + 0x18c]
mov eax, 3
pop edi
pop esi
xor ecx, esp
call fcn.00511339
mov esp, ebp
pop ebp
ret