Function at 0x493ab0
Capabilities:
Authenticate hmac
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
mov eax, 0x32c
call fcn.00551a90
mov eax, dword [0x5ea6f0]
xor eax, esp
mov dword [esp + 0x328], eax
mov eax, dword [esp + 0x334]
mov ecx, dword [esp + 0x33c]
mov edx, dword [esp + 0x340]
push ebx
mov ebx, dword [esp + 0x334]
push ebp
mov ebp, dword [esp + 0x340]
push esi
mov esi, dword [esp + 0x354]
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x358]
push edi
mov dword [esp + 0x70], ebx
mov dword [esp + 0x54], ebp
mov dword [esp + 0x44], ecx
mov dword [esp + 0x40], edx
mov dword [esp + 0x4c], eax
mov edi, 0x40
mov dword [esp + 0x38], 0x28
mov dword [esp + 0x1c], 8
mov byte [esp + 0x12], 1
cmp esi, 0x100000
jb 0x493b4e
push str.data_plus_mac_plus_padding_size___1024__1024
push 0x1c7
push str.._ssl_s3_cbc.c
call fcn.0040b2e0
add esp, 0xc
push ebx
call fcn.0045d900
push eax
call fcn.00423440
add esp, 8
cmp eax, 0x2a0
jg 0x493c28
je 0x493bf3
cmp eax, 4
je 0x493bb1
cmp eax, 0x40
jne 0x493c39
lea ecx, [esp + 0x90]
push ecx
call fcn.0048d6a0
add esp, 4
test eax, eax
jle 0x49425d
mov dword [esp + 0x24], 0x493890
mov dword [esp + 0x18], 0x48d540
mov dword [esp + 0x14], 0x14
jmp 0x493cf1
lea edx, [esp + 0x90]
push edx
call fcn.0048bcc0
add esp, 4
test eax, eax
jle 0x49425d
mov dword [esp + 0x24], 0x493810
mov dword [esp + 0x18], 0x421580
mov dword [esp + 0x14], 0x10
mov dword [esp + 0x38], 0x30
mov byte [esp + 0x12], 0
jmp 0x493cf1
lea eax, [esp + 0x90]
push eax
call fcn.00406310
add esp, 4
test eax, eax
jle 0x49425d
mov dword [esp + 0x24], 0x493930
mov dword [esp + 0x18], 0x406450
mov dword [esp + 0x14], 0x20
jmp 0x493cf1
sub eax, 0x2a1
je 0x493cb4
dec eax
je 0x493c96
dec eax
je 0x493c64
push 0x5d1a20
push 0x209
push str.._ssl_s3_cbc.c
call fcn.0040b2e0
add esp, 0xc
test ebp, ebp
je 0x49425d
mov dword [ebp], 0xffffffff
jmp 0x49425d
lea ecx, [esp + 0x90]
push ecx
call fcn.004062b0
add esp, 4
test eax, eax
jle 0x49425d
mov dword [esp + 0x24], 0x493930
mov dword [esp + 0x18], 0x406450
mov dword [esp + 0x14], 0x1c
jmp 0x493cf1
lea edx, [esp + 0x90]
push edx
call fcn.0048d780
add esp, 4
test eax, eax
jle 0x49425d
mov dword [esp + 0x14], edi
jmp 0x493cd4
lea eax, [esp + 0x90]
push eax
call fcn.0048d6e0
add esp, 4
test eax, eax
jle 0x49425d
mov dword [esp + 0x14], 0x30
mov dword [esp + 0x1c], 0x10
mov edi, 0x80
mov dword [esp + 0x18], 0x48dda0
mov dword [esp + 0x24], 0x493a20
mov bl, byte [esp + 0x364]
mov dword [esp + 0x30], 0xd
test bl, bl
je 0x493d17
mov ecx, dword [esp + 0x360]
mov edx, dword [esp + 0x38]
lea eax, [edx + ecx + 0xb]
mov dword [esp + 0x30], eax
mov edx, dword [esp + 0x1c]
xor ecx, ecx
test bl, bl
sete cl
lea ebp, [ecx*4 + 2]
mov ecx, dword [esp + 0x30]
sub ecx, dword [esp + 0x14]
mov dword [esp + 0x34], ebp
lea eax, [ecx + edx]
add eax, edi
xor edx, edx
lea eax, [eax + esi - 1]
div edi
add ecx, dword [esp + 0x354]
xor edx, edx
mov esi, eax
xor eax, eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
mov eax, ecx
div edi
mov dword [esp + 0x3c], edx
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x1c]
xor edx, edx
add eax, ecx
div edi
xor edx, edx
test bl, bl
setne dl
add edx, ebp
mov dword [esp + 0x64], eax
cmp esi, edx
jbe 0x493d8d
sub esi, ebp
mov eax, esi
mov dword [esp + 0x28], eax
imul eax, edi
mov dword [esp + 0x2c], eax
cmp byte [esp + 0x364], 0
lea ebx, [ecx*8]
jne 0x493e28
push edi
lea eax, [esp + 0x1bc]
push 0
push eax
lea ebx, [ebx + edi*8]
call fcn.00550c40
mov esi, dword [esp + 0x36c]
add esp, 0xc
cmp esi, 0x80
jbe 0x493dde
push str.mac_secret_length___sizeof_hmac_pad_
push 0x271
push str.._ssl_s3_cbc.c
call fcn.0040b2e0
add esp, 0xc
mov ecx, dword [esp + 0x4c]
push esi
push ecx
lea edx, [esp + 0x1c0]
push edx
call fcn.0054fa80
add esp, 0xc
xor eax, eax
test edi, edi
je 0x493e0d
lea ebx, [ebx]
xor byte [esp + eax + 0x1b8], 0x36
inc eax
cmp eax, edi
jb 0x493e00
mov ebp, dword [esp + 0x18]
lea eax, [esp + 0x1b8]
push eax
lea ecx, [esp + 0x94]
push ecx
call ebp
add esp, 8
jmp 0x493e2c
mov ebp, dword [esp + 0x18]
cmp byte [esp + 0x12], 0
mov esi, dword [esp + 0x1c]
je 0x493e71
lea edx, [esi - 4]
push edx
lea eax, [esp + 0x16c]
push 0
push eax
call fcn.00550c40
lea eax, [esp + esi + 0x174]
mov ecx, ebx
shr ecx, 0x18
mov byte [eax - 4], cl
mov edx, ebx
shr edx, 0x10
mov ecx, ebx
add esp, 0xc
shr ecx, 8
mov byte [eax - 3], dl
mov byte [eax - 2], cl
mov byte [eax - 1], bl
jmp 0x493ea6
push esi
lea edx, [esp + 0x16c]
push 0
push edx
call fcn.00550c40
lea eax, [esp + esi + 0x174]
mov ecx, ebx
shr ecx, 0x18
mov byte [eax - 5], cl
mov edx, ebx
shr edx, 0x10
mov ecx, ebx
add esp, 0xc
shr ecx, 8
mov byte [eax - 6], dl
mov byte [eax - 7], cl
mov byte [eax - 8], bl
mov ebx, dword [esp + 0x2c]
test ebx, ebx
je 0x493fc5
cmp byte [esp + 0x364], 0
je 0x493f4a
mov esi, dword [esp + 0x30]
cmp esi, edi
jbe 0x49425d
mov ebx, dword [esp + 0x44]
lea edx, [esp + 0x90]
push ebx
push edx
sub esi, edi
call ebp
push esi
add ebx, edi
lea eax, [esp + 0x244]
push ebx
push eax
call fcn.0054fa80
mov ebx, dword [esp + 0x54]
mov ecx, edi
sub ecx, esi
push ecx
lea edx, [esp + esi + 0x250]
push ebx
push edx
call fcn.0054fa80
lea eax, [esp + 0x258]
push eax
lea ecx, [esp + 0xb4]
push ecx
call ebp
mov eax, dword [esp + 0x54]
xor edx, edx
div edi
add esp, 0x28
dec eax
cmp eax, 1
jbe 0x493fc5
sub ebx, esi
add ebx, edi
lea esi, [eax - 1]
lea edx, [esp + 0x90]
push ebx
push edx
call dword [esp + 0x20]
add esp, 8
add ebx, edi
dec esi
jne 0x493f33
jmp 0x493fc5
mov eax, dword [esp + 0x44]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov esi, dword [esp + 0x40]
mov dword [esp + 0x238], ecx
mov ecx, dword [eax + 8]
mov dword [esp + 0x23c], edx
mov dl, byte [eax + 0xc]
lea eax, [edi - 0xd]
push eax
mov dword [esp + 0x244], ecx
lea ecx, [esp + 0x249]
push esi
push ecx
mov byte [esp + 0x250], dl
call fcn.0054fa80
lea edx, [esp + 0x244]
push edx
lea eax, [esp + 0xa0]
push eax
call ebp
xor edx, edx
mov eax, ebx
div edi
add esp, 0x14
cmp eax, 1
jbe 0x493fc5
lea esi, [esi + edi - 0xd]
lea ebx, [eax - 1]
lea ecx, [esp + 0x90]
push esi
push ecx
call ebp
add esp, 8
add esi, edi
dec ebx
jne 0x493fb2
push 0x40
lea edx, [esp + 0x17c]
push 0
push edx
call fcn.00550c40
mov ebp, dword [esp + 0x34]
mov eax, dword [esp + 0x40]
add eax, ebp
add esp, 0xc
mov dword [esp + 0x48], ebp
mov dword [esp + 0x50], eax
cmp ebp, eax
ja 0x4941a4
mov eax, ebp
xor eax, dword [esp + 0x68]
xor esi, esi
lea edx, [eax - 1]
not eax
shr eax, 0x1f
shr edx, 0x1f
and dl, al
mov eax, ebp
xor eax, dword [esp + 0x64]
neg dl
lea ebx, [eax - 1]
shr ebx, 0x1f
not eax
shr eax, 0x1f
and bl, al
neg bl
mov byte [esp + 0x22], dl
mov byte [esp + 0x13], bl
test edi, edi
je 0x494144
mov eax, dword [esp + 0x3c]
lea ecx, [eax + 1]
shr ecx, 0x1f
mov dword [esp + 0x6c], ecx
mov cl, bl
not cl
or cl, dl
mov byte [esp + 0x23], cl
movzx ebp, dl
mov ecx, edi
sub ecx, dword [esp + 0x1c]
mov dword [esp + 0x5c], ebp
mov ebp, dword [esp + 0x3c]
mov dword [esp + 0x74], ecx
mov ecx, dword [esp + 0x1c]
shr eax, 0x1f
neg ebp
sub ecx, edi
lea edx, [esp + ecx + 0x168]
mov dword [esp + 0x34], eax
mov dword [esp + 0x28], edx
jmp 0x494084
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x30]
mov byte [esp + 0x12], 0
cmp ecx, edx
jae 0x49409e
mov edx, dword [esp + 0x44]
mov dl, byte [edx + ecx]
jmp 0x4940b4
mov ebx, dword [esp + 0x358]
add ebx, edx
cmp ecx, ebx
jae 0x4940b8
mov ebx, dword [esp + 0x40]
sub ebx, edx
mov dl, byte [ebx + ecx]
mov byte [esp + 0x12], dl
inc ecx
mov dword [esp + 0x2c], ecx
mov ecx, esi
shr ecx, 0x1f
mov bl, cl
xor bl, al
mov edx, ebp
shr edx, 0x1f
xor dl, al
or dl, bl
xor dl, cl
dec dl
movzx eax, dl
mov edx, dword [esp + 0x3c]
and eax, dword [esp + 0x5c]
inc edx
mov ebx, esi
sub ebx, edx
mov dl, byte [esp + 0x6c]
shr ebx, 0x1f
xor bl, dl
xor dl, cl
or bl, dl
xor bl, cl
dec bl
and bl, byte [esp + 0x22]
mov cl, al
not cl
and cl, byte [esp + 0x12]
and al, 0x80
not bl
or cl, al
and bl, cl
and bl, byte [esp + 0x23]
mov al, bl
mov bl, byte [esp + 0x13]
cmp esi, dword [esp + 0x74]
jb 0x49412b
movzx ecx, bl
mov dl, cl
not dl
and dl, al
mov eax, dword [esp + 0x28]
mov al, byte [eax]
and al, cl
or al, dl
inc dword [esp + 0x28]
mov byte [esp + esi + 0x2b8], al
inc esi
inc ebp
cmp esi, edi
jb 0x494080
mov ebp, dword [esp + 0x48]
lea ecx, [esp + 0x2b8]
push ecx
lea edx, [esp + 0x94]
push edx
call dword [esp + 0x20]
lea eax, [esp + 0x2c0]
push eax
lea ecx, [esp + 0x9c]
push ecx
call dword [esp + 0x34]
mov esi, dword [esp + 0x24]
add esp, 0x10
xor eax, eax
test esi, esi
je 0x494195
lea esp, [esp]
mov dl, byte [esp + eax + 0x2b8]
and dl, bl
or byte [esp + eax + 0x178], dl
inc eax
cmp eax, esi
jb 0x494180
inc ebp
mov dword [esp + 0x48], ebp
cmp ebp, dword [esp + 0x50]
jbe 0x493ff3
lea eax, [esp + 0x78]
push eax
call fcn.00463bc0
mov ecx, dword [esp + 0x74]
mov edx, dword [ecx]
push 0
push edx
lea eax, [esp + 0x84]
push eax
call fcn.00463c10
add esp, 0x10
test eax, eax
jle 0x494250
cmp byte [esp + 0x364], 0
je 0x494278
mov esi, dword [esp + 0x38]
push esi
lea ecx, [esp + 0x1bc]
push 0x5c
push ecx
call fcn.00550c40
mov edx, dword [esp + 0x36c]
mov eax, dword [esp + 0x58]
push edx
push eax
lea ecx, [esp + 0x8c]
push ecx
call fcn.00463dc0
add esp, 0x18
test eax, eax
jle 0x494250
push esi
lea edx, [esp + 0x1bc]
push edx
lea eax, [esp + 0x80]
push eax
call fcn.00463dc0
add esp, 0xc
test eax, eax
jle 0x494250
mov ecx, dword [esp + 0x14]
push ecx
lea edx, [esp + 0x17c]
push edx
lea eax, [esp + 0x80]
push eax
call fcn.00463dc0
add esp, 0xc
test eax, eax
jg 0x4942cb
lea eax, [esp + 0x78]
push eax
call fcn.00463e50
add esp, 4
xor eax, eax
mov ecx, dword [esp + 0x338]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.005507d9
add esp, 0x32c
ret
xor eax, eax
test edi, edi
je 0x49428d
mov edi, edi
xor byte [esp + eax + 0x1b8], 0x6a
inc eax
cmp eax, edi
jb 0x494280
push edi
lea ecx, [esp + 0x1bc]
push ecx
lea edx, [esp + 0x80]
push edx
call fcn.00463dc0
add esp, 0xc
test eax, eax
jle 0x494250
mov eax, dword [esp + 0x14]
push eax
lea ecx, [esp + 0x17c]
push ecx
lea edx, [esp + 0x80]
push edx
call fcn.00463dc0
add esp, 0xc
test eax, eax
jle 0x494250
mov ecx, dword [esp + 0x60]
lea eax, [esp + 0x58]
push eax
push ecx
lea edx, [esp + 0x80]
push edx
call fcn.00463f30
mov eax, dword [esp + 0x60]
add esp, 0xc
test eax, eax
je 0x4942f3
mov ecx, dword [esp + 0x58]
mov dword [eax], ecx
lea edx, [esp + 0x78]
push edx
call fcn.00463e50
add esp, 4
mov eax, 1
jmp 0x49425f